Free Automated Malware Analysis Service - powered by Falcon Sandbox - Viewing online file analysis results for 'ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc'

malicious

Threat Score: 100/100 AV Detection: 36% Labeled as: CVE-2012-0158

ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc

This report is generated from a file or URL submitted to this webservice on November 30th 2016 17:17:19 (UTC) and action script Heavy Anti-Evasion
Guest System: Windows 7 32 bit, Home Premium, 6.1 (build 7601), Service Pack 1
Report generated by Falcon Sandbox v5.40 © Hybrid Analysis

Overview Sample unavailable Re-analyze Hash Seen Before Show Similar Samples Report False-Positive Request Report Deletion

Incident Response

Risk Assessment

Fingerprint: Reads the active computer name
Reads the cryptographic machine GUID
Spreading: Opens the MountPointManager (often used to detect additional infection locations)
Network Behavior: Contacts 1 domain and 1 host. View all details

Indicators

Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.

Malicious Indicators 7
Exploit/Shellcode
- Possible document exploit detected
  
  details
  
  Document can spawn a new process although no macro was present in the original file
  
  source
  
  Indicator Combinations
  
  relevance
  
  10/10
External Systems
- Detected Emerging Threats Alert
  
  details
  
  Detected alert "ETPRO TROJAN PlugX UDP Beacon 1" (SID: 2816196, Rev: 1, Severity: 1) categorized as "A Network Trojan was detected" (Backdoor, ransomware, trojans, etc.)
  
  source
  
  Suricata Alerts
  
  relevance
  
  10/10
- Sample was identified as malicious by a large number of Antivirus engines
  
  details
  
  14/56 Antivirus vendors marked sample as malicious (25% detection rate)
  
  source
  
  External System
  
  relevance
  
  10/10
- Sample was identified as malicious by at least one Antivirus engine
  
  details
  
  14/56 Antivirus vendors marked sample as malicious (25% detection rate)
  
  source
  
  External System
  
  relevance
  
  8/10
General
- The analysis extracted a file that was identified as malicious
  
  details
  
  24/57 Antivirus vendors marked dropped file "FmtOptions.dll" as malicious (classified as "Trojan.GenericKD" with 42% detection rate)
  20/57 Antivirus vendors marked dropped file "..exe" as malicious (classified as "Trojan.GenericKD" with 35% detection rate)
  16/56 Antivirus vendors marked dropped file "~WRO0000.doc" as malicious (classified as "Exploit.CVE" with 28% detection rate)
  
  source
  
  Binary File
  
  relevance
  
  10/10
Unusual Characteristics
- Document analysis contacts a domain
  
  details
  
  Often seen on documents with macro droppers
  embedded files or exploits
  
  source
  
  Indicator Combinations
  
  relevance
  
  3/10
Hiding 1 Malicious Indicators
- All indicators are available only in the private webservice or standalone version

Suspicious Indicators 8
Environment Awareness
- Reads the active computer name
  
  details
  
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\COMPUTERNAME\ACTIVECOMPUTERNAME"; Key: "COMPUTERNAME")
  "..exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\COMPUTERNAME\ACTIVECOMPUTERNAME"; Key: "COMPUTERNAME")
  "FmtOptions.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\COMPUTERNAME\ACTIVECOMPUTERNAME"; Key: "COMPUTERNAME")
  
  source
  
  Registry Access
  
  relevance
  
  5/10
- Reads the cryptographic machine GUID
  
  details
  
  "WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\CRYPTOGRAPHY"; Key: "MACHINEGUID")
  
  source
  
  Registry Access
  
  relevance
  
  10/10
Installation/Persistance
- Drops executable files
  
  details
  
  "FmtOptions.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
  "FmtOptions.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows"
  "..exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows"
  
  source
  
  Binary File
  
  relevance
  
  10/10
- Opens the MountPointManager (often used to detect additional infection locations)
  
  details
  
  "WINWORD.EXE" opened "MountPointManager"
  "..exe" opened "MountPointManager"
  
  source
  
  API Call
  
  relevance
  
  5/10
System Security
- Modifies proxy settings
  
  details
  
  "..exe" (Access type: "DELETEVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
  "..exe" (Access type: "DELETEVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
  
  source
  
  Registry Access
  
  relevance
  
  10/10
- Queries sensitive IE security settings
  
  details
  
  "WINWORD.EXE" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SECURITY"; Key: "DISABLESECURITYSETTINGSCHECK")
  "..exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SECURITY"; Key: "DISABLESECURITYSETTINGSCHECK")
  
  source
  
  Registry Access
  
  relevance
  
  8/10
Unusual Characteristics
- Installs hooks/patches the running process
  
  details
  
  "WINWORD.EXE" wrote bytes "7e83589d" to virtual address "0x625F9904" (part of module "RICHED20.DLL")
  "WINWORD.EXE" wrote bytes "80131a65" to virtual address "0x69D5F530" (part of module "WWLIB.DLL")
  "WINWORD.EXE" wrote bytes "33b7479d" to virtual address "0x627010AC" (part of module "MSPTLS.DLL")
  "WINWORD.EXE" wrote bytes "e99e4832f1" to virtual address "0x76123D01" ("SetUnhandledExceptionFilter@KERNEL32.DLL")
  "WINWORD.EXE" wrote bytes "fb655eb1" to virtual address "0x2F301B94" (part of module "NWORD.EXE")
  "WINWORD.EXE" wrote bytes "c4ca117680bb117652ba11769fbb117608bb117646ce117661381276de2f1276d0d91176000000001779ea754f91ea757f6fea75f4f7ea7511f7ea75f283ea75857eea7500000000" to virtual address "0x6B111000" (part of module "MSIMG32.DLL")
  "WINWORD.EXE" wrote bytes "69071a65" to virtual address "0x686A78E4" (part of module "OART.DLL")
  "WINWORD.EXE" wrote bytes "cc371a65" to virtual address "0x699DCA70" (part of module "GFX.DLL")
  "WINWORD.EXE" wrote bytes "ff0d15b9" to virtual address "0x676A0BA8" (part of module "MSO.DLL")
  "FmtOptions.exe" wrote bytes "7cca1176fb96117673021176e8ce11769fa11176d33312764d3712764f21127641cf1176d8ce117600000000" to virtual address "0x10002000" (part of module "FMTOPTIONS.DLL")
  "FmtOptions.exe" wrote bytes "4053147758581577186a1577653c16770000000000bf11760000000056cc1176000000007cca117600000000376851756a2c1677d62d167700000000206951750000000029a6117600000000a48d517500000000f70e117600000000" to virtual address "0x77261000" (part of module "NSI.DLL")
  
  source
  
  Hook Detection
  
  relevance
  
  10/10
- Reads information about supported languages
  
  details
  
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000401")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "0000040D")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "0000041E")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "0000042A")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000439")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000420")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000429")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000409")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000402")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000403")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000404")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000405")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000406")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000407")
  "WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000408")
  
  source
  
  Registry Access
  
  relevance
  
  3/10

Informative 13
Anti-Reverse Engineering
- Contains ability to register a top-level exception handler (often used as anti-debugging trick)
  
  details
  
  SetUnhandledExceptionFilter@KERNEL32.dll (Show Stream)
  SetUnhandledExceptionFilter@KERNEL32.dll (Show Stream)
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  1/10
Environment Awareness
- Contains ability to query machine time
  
  details
  
  GetSystemTimeAsFileTime@KERNEL32.dll (Show Stream)
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  1/10
- Contains ability to query the machine version
  
  details
  
  GetVersionExW@KERNEL32.dll (Show Stream)
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  1/10
General
- Contacts domains
  
  details
  
  "vatgla.com"
  
  source
  
  Network Traffic
  
  relevance
  
  1/10
- Contacts server
  
  details
  
  "103.242.2.3:80"
  
  source
  
  Network Traffic
  
  relevance
  
  1/10
- Contains PDB pathways
  
  details
  
  "d:\Projects\WinRAR\SFX\build\sfxzip32\Release\sfxzip.pdb"
  
  source
  
  File/Memory
  
  relevance
  
  1/10
- Creates mutants
  
  details
  
  "\Sessions\1\BaseNamedObjects\Global\552FFA80-3393-423d-8671-7BA046BB5906"
  "\Sessions\1\BaseNamedObjects\Local\10MU_ACBPIDS_S-1-5-5-0-61011"
  "\Sessions\1\BaseNamedObjects\Local\10MU_ACB10_S-1-5-5-0-61011"
  "\Sessions\1\BaseNamedObjects\Local\ZonesCounterMutex"
  "\Sessions\1\BaseNamedObjects\Local\ZoneAttributeCacheCounterMutex"
  "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex"
  "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex"
  "\Sessions\1\BaseNamedObjects\Global\MTX_MSO_Formal1_S-1-5-21-4162757579-3804539371-4239455898-1000"
  "\Sessions\1\BaseNamedObjects\Global\MTX_MSO_AdHoc1_S-1-5-21-4162757579-3804539371-4239455898-1000"
  
  source
  
  Created Mutant
  
  relevance
  
  3/10
- Drops files marked as clean
  
  details
  
  Antivirus vendors marked dropped file "FmtOptions.exe" as clean (type is "PE32 executable (GUI) Intel 80386 for MS Windows")
  
  source
  
  Binary File
  
  relevance
  
  10/10
- Loads rich edit control libraries
  
  details
  
  "WINWORD.EXE" loaded module "%COMMONPROGRAMFILES%\microsoft shared\OFFICE14\RICHED20.DLL" at 625B0000
  "..exe" loaded module "%WINDIR%\System32\riched32.dll" at 6B100000
  "..exe" loaded module "%WINDIR%\System32\riched20.dll" at 623B0000
  
  source
  
  Loaded Module
- Spawns new processes
  
  details
  
  Spawned process "..exe" with commandline "%TEMP%\..\\..exe" (Show Process)
  Spawned process "FmtOptions.exe" (Show Process)
  Spawned process "FmtOptions.exe" with commandline "100 -1" (Show Process)
  
  source
  
  Monitored Target
  
  relevance
  
  3/10
Installation/Persistance
- Dropped files
  
  details
  
  "~WRS{206736EE-5DA7-412A-8191-B70CEA1BF179}.tmp" has type "FoxPro FPT blocks size 13056 next free block index 218116352 1st used item "\375""
  "index.dat" has type "data"
  "~WRS{C0B3F87B-8071-4364-B78A-CBEB878D50F2}.tmp" has type "data"
  "~$RD0001.docx" has type "data"
  "FmtOptions.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
  "~WRD0002.tmp" has type "Microsoft Word 2007+"
  "fmt1.lib" has type "data"
  "AA1E3D18.wmf" has type "ms-windows metafont .wmf"
  "FmtOptions.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows"
  "ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc" has type "Rich Text Format data version 1 unknown character set"
  "~$RO0000.doc" has type "data"
  "ExcludeDictionaryEN0409.lex" has type "Little-endian UTF-16 Unicode text with no line terminators"
  "A738AA39.wmf" has type "ms-windows metafont .wmf"
  "~$67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc" has type "data"
  "..exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows"
  "~WRO0000.doc" has type "Zip archive data at least v2.0 to extract"
  "~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp" has type "data"
  
  source
  
  Binary File
  
  relevance
  
  3/10
- Touches files in the Windows directory
  
  details
  
  "WINWORD.EXE" touched file "%WINDIR%\Globalization\Sorting\sortdefault.nls"
  "WINWORD.EXE" touched file "%WINDIR%\Fonts\staticcache.dat"
  "WINWORD.EXE" touched file "%WINDIR%\Microsoft.NET\Framework\v1.0.3705\clr.dll"
  "WINWORD.EXE" touched file "%WINDIR%\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll"
  "WINWORD.EXE" touched file "%WINDIR%\Microsoft.NET\Framework\v1.1.4322\clr.dll"
  "WINWORD.EXE" touched file "%WINDIR%\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll"
  "WINWORD.EXE" touched file "%WINDIR%\Microsoft.NET\Framework\v2.0.50727\clr.dll"
  "WINWORD.EXE" touched file "%WINDIR%\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll"
  "WINWORD.EXE" touched file "%WINDIR%\Microsoft.NET\Framework\v4.0.30319\clr.dll"
  "WINWORD.EXE" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches"
  "WINWORD.EXE" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\cversions.1.db"
  "WINWORD.EXE" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000007.db"
  "WINWORD.EXE" touched file "%WINDIR%\system32\rsaenh.dll"
  "WINWORD.EXE" touched file "%WINDIR%\system32\en-US\KERNELBASE.dll.mui"
  "WINWORD.EXE" touched file "%WINDIR%\System32\msxml6r.dll"
  "WINWORD.EXE" touched file "%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{8881D806-CDCF-4F32-9362-843373C7242F}.tmp"
  "WINWORD.EXE" touched file "%WINDIR%\system32\en-US\MSCTF.dll.mui"
  "WINWORD.EXE" touched file "%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp"
  "WINWORD.EXE" touched file "%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.MSO\AA1E3D18.wmf"
  
  source
  
  API Call
  
  relevance
  
  7/10
Network Related
- Found potential URL in binary/memory
  
  details
  
  Heuristic match: "W'3.zr>>oZ9>JKARzKASz}5/?>:7Vj;zN7:El}37RLF>>1sQ0Nwzsl3RIAEuZ9:sCZs{.7!0:zz5@>H2PuJ55Z}9*3.Su"
  Pattern match: "Y.zy/nti"
  Heuristic match: "3~%XT57B9RNdqdxPSY;Xj`2Pa:D[i?$}zf lP@ptae,3)W.tF"
  Pattern match: "i.WV/W3-hMvg^XJ]d~!kl#,km4T9/d@A'r"
  Pattern match: "O.rXj/rbIdX}d"
  Pattern match: "aV8l.ER/WP_I1o;Z"
  
  source
  
  File/Memory
  
  relevance
  
  10/10

File Details

All Details:

ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc

Filename: ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc
Size: 581KiB (594742 bytes)
Type: doc office
Description: Rich Text Format data, version 1, unknown character set
Architecture
: WINDOWS
SHA256
: ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533
MD5
: 50057066fa6bcc91b161cb34001bab35
SHA1
: 25e71dec7da25bc3e17b167cc83d4fca061abd7c

Resources

Icon

Visualization

Input File (PortEx)

Classification (TrID)

100.0% (.RTF) Rich Text Format

Screenshots

Loading content, please wait...

Hybrid Analysis

Tip: Click an analysed process below to view more details.

Analysed 4 processes in total (System Resource Monitor).

WINWORD.EXE /n "C:\ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc" (PID: 3388)
- ..exe %TEMP%\..\\..exe (PID: 3556)
  - FmtOptions.exe (PID: 3660)
    - FmtOptions.exe 100 -1 (PID: 2896)

Logged Script Calls	Logged Stdout	Extracted Streams	Memory Dumps
Reduced Monitoring	Network Activityy	Network Error	Multiscan Match

Network Analysis

DNS Requests

Domain	Address	Registrar	Country
vatgla.com	103.242.2.3	-	Hong Kong

Contacted Hosts

IP Address

Port/Protocol

Associated Process

Details

103.242.2.3

Associated Artifacts for 103.242.2.3

Details	Associated URL	Threat Level	Positives	Scan Date	Reference
Associated URL http://vietnanmonline.com/ Threat Level suspicious Positives 1/68 Scan Date 11/29/2016 14:46:48 Reference -	http://vietnanmonline.com/	suspicious	1/68	11/29/2016 14:46:48	-

Details	Domain	Threat Level	Positives	Last Resolved	Reference
Domain vietnanmonline.com Threat Level - Positives - Last Resolved 11/29/2016 00:00:00 VirusTotal Report	vietnanmonline.com	-	-	11/29/2016 00:00:00	Report
Domain imhzs.cn Threat Level - Positives - Last Resolved 07/24/2016 00:00:00 VirusTotal Report	imhzs.cn	-	-	07/24/2016 00:00:00	Report
Domain 92kx.top Threat Level - Positives - Last Resolved 07/11/2016 00:00:00 VirusTotal Report	92kx.top	-	-	07/11/2016 00:00:00	Report

TCP

svchost.exe
PID: 3780

Hong Kong
ASN: 24544 (Pang International Limited-AS number)

Contacted Countries

HTTP Traffic

No relevant HTTP requests were made.

Suricata Alerts

Event	Category	Description	SID
local -> local:53 (UDP)	A Network Trojan was detected	ETPRO TROJAN PlugX UDP Beacon 1	2816196
local -> local:53 (UDP)	A Network Trojan was detected	ETPRO TROJAN PlugX UDP Beacon 1	2816196

ET rules applied using Suricata. Find out more about proofpoint ET Intelligence here.

Extracted Strings

Download All Memory Strings (1.7KiB)

!!@/Cu?4nhZr;YF>"9ezwV2g+mv&FC8]h/o{2:j/kDP==P`y8^J_[@))@-Pz9v

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!"#$%&'()*+,-./0123456789:;<=>

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

!&'Eh>!D]h#&"p

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!'7$JA,Nd=)Tp^~io~J!e4d(!eh){PT3f-I]LFRJP,A 9t `{7vm

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!'Wz6F?8$/iNKrbQ9B?&.G7M9IZ*uMW,SjzeFf)h)U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!).=b^*09v6mAp

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!18So<F,JIpZIl0mXs;Zu3@D

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!18x5EAR9URO~5_;z,wyFH8=8ApR5AEs"psJRs5AEv@GN"-N5rEV9.1=RC^9BD5ARuZR=R5EARu9*=_5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!18}}a#5EARu;y<AE5||AAu&E5K"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!:<qy:Nl'Ze=v8+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!?UHEoA9A>!RAE9VE5A3IvE=AAu&5IFDVY5A9Vr5A}IvExzAv9CA77?*?<R\AEwV25A9Vf5A9:=r!1yRAEu19Fu==\X;Z}.aRAECF3V+5AO~C^}6@E5V.u

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!a-;+IJc!y.Ex%N(f;bFNMl|8RO9Y0")?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!BwuN6hz;LGTv(2<k2mxQV's-(~c7, V7b9R4 Rq9^dMp};5e]1hqw}=W

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!D-!7qOHRYg1@aH~x$xfs!`2g_kJ=l27tmGh8aEfZ@gS}:weMd>kH2a<rz\!.K-$i$~*8u^Fxe!VJ`\"toX'bqU\=UM:HPf?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!EA5BA5b.32RF7AE5NeCEAB#7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!eZw=5cgGV':-+y|d%XBL85HmQ?#{ef26$SosWQt@4bU8hsjSG}MJv|6IkjyWW<a`K{JxJ|J >)yU^C*qU%?s0&RS$1#aDG?2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!H;?"-#c1A?>yIII}SAOR#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!m)^/zuP/Z1R*^=?rb'p(5xh[ttE.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!O9?^h22'$b]FnoO$

Ansi based on Dropped File (~WRO0000.doc)

!OH{(AMe?!ysEu9;LOIa{<%=GAM?;"HH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!OH{AMe?!ysEu9;LO'Ia{<%=GAM?;HH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!OH{AMe?!ysEu9;LOgIa{<%=GAM?;HH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!OH{AMe?!ysEu9;LOIa{<%=GAM?;HH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!OH{AMe?!ysEu9;LOIa{<%=GAM?;RHH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!OH{hAMe?!ysEu9;LIa{<%=GAM?HH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!OH|4D=<5A9q9=$18#p5^Ll?!xsEu8;L//Hh{<%<GAL?HXHX,OHa355H{<!|]|]8;LU|7A1!OH{AEARVH|R8;LU|7A1OH{AELl?!xsEu8;LOE5 Hh{<%<GAL?;5AHUHU,OHa355HL{<?4AEuR&|LHR,OHa355H{<?A4AE|W|W8;LU|7A1OH{T@ELl?!xsEu8;LOD5%%Hh{<%<GALQH?;5A1:H8:Hh{<%<GAL?;5AHOHO,OHa355H{<?4AE|H|H8;LU|7A1OH{$CE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!This program cannot be run in DOS mode.$

Ansi based on Dropped File (FmtOptions.exe.1089827065)

!TmPKj-{X8eD

Ansi based on Dropped File (~WRO0000.doc)

!w{J)9]-LM}`cb}>6|=z[iRZH;Zs$}J2ngr,t?@z|&J&nsgF5=&X{-eOKa>o|[PquJu-v~\

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!y+7_y6 0

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

!~q}/#!\/().N_BIC,z%p.0#W4K6j: bYcS[@DU_%*[g(Xdk>Qe4r@,+e-'gy+&J~Y8I#R2LSfqT*07a5z$I"b+oRkL"K0eubIOS e!tzzm7xgVcPolf:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"!eRrkAEw

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"%eXrv2115Au5kDBH?C=IY},=yW}(9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"'wxhu32w7Cw3nC.3nC.3nC.yIEH~_ww[7+w[7(OqV({

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"*@bwii$d$Ifa$8$$If!vh#v#v:V0,a$d$Ifa$$a$;$$If!vh#v#v#v:V0,angB phB ph27AVi Mnh HNguyn Tin HinHong Vn Hin 27BHong Chin SPhan Xun HuynDng Hng Vng27CHong Tun HngV Vn HiuNguyn Minh Hiu27DHong Xun V)nhPhm Minh HiuNguyn Quang Phng

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

"*PRZ56CJPJ\]aJCJPJaJCJPJaJ5CJPJ\aJjUjCJUaJCJaJo(CJaJL.02468:>BF$d$Ifa$$a$$a$dd1$7$8$H$DFLfkk;$$If!vh#v#v#v:V0,a$d$Ifa$$d$Ifa$;$$If!vh#v#v#v:V0,aL Anh ChinVi Th Hng QunhB2Trn Vn LcPhan Xun HuynPhm nh HuyB3Quch Vn TrngTrn Ngc TnhCn Hong HiB4o Khc ThnhHong Xun V)nhB5Nguyn Mnh CngTrng Hong GiangNguyn HngB6Vi Mnh HPhm Cng ngTrn ,LNPVz$d$Ifa$;$$If!vh#v#v#v:V0,a$d$Ifa$c DngB7Nguyn Thanh HiNguyn Hu BnhNguyn Minh HiuB8Phm Ton ThngNguyn Huy ThngVi ng KhoaB9Nguyn Thng LiNguyn Ngc ThchNguyn Ngc H B10Nguyn Cao HuyHong Chin STrn Th Thng

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

"95A71@0Bt6t4Nw

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"9wx1"E5uV5A=5K~AzAE10"E5x1JE"1E5uV5A<u&?VsAG;5A"r=~G;5AV5As=A5KVApR4AE5AOE"uV5A<u;A10"D5xE15R5t@E|A5KVx5AApR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

":MzJAu3C1BE3A"=~CF=rC}AQA}3AIGD5{}*1/D?*_^GUFj<+|9:=B14BQAG5IzwB6}}AQA575EAR1*

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"=8?>2?>"=(I=IR}1_5+V1&AAt#76(bLr5+uA1_AE5+5+w[5#u5Hu'3_C6;);11_A7BQJ"85+}?>k[i[{U'_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

">]$5/Z%mOc/%dDi_0r{!ccjyFu3zTO#hJ\[*IwStOj

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

">z+\bUCi'miS

Ansi based on Dropped File (~WRD0002.tmp)

"@tvx$d$Ifa$;$$If!vh#v#vU#v@:V0,a$d$Ifa$$a$;$$If!vh#v#vU#v@:V0,a$d$Ifa$$d$Ifa$DDd

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

"_tYg_mNavjX%Vx[X!%T0Yf-ci!v(E1WV$

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"`y?#si{b:ac/,vE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"A55?.1AEs^A5V

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"AVAsK19!":1E"D5y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"Bim9U6HF

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"Bim9U6HFDfB}gij/"J?_Zygi(z7KAUur$Sld/sm,5X8C+xSK<9:R>O[%x7mAO$T[_}iZ@d)?Z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"D55Iz5AE1>=C1Ys?`EAN9uB727>Vs5A12=~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"eRwAE"\5`Rl*AE}j5EAR5A36RwB9T}5}RIFN;z=:;6:,Eb

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"Hw"w P^O;<aY`GkxmPY[g

Ansi based on Dropped File (~WRD0002.tmp)

"mSD0UxG6eQ\3JhAq+}y2v\Y(]-1*3CF!MyorZ]4P*[ABxvp1*:R&"3za;N>O/}orAf$/@PG`_RPFu/N]\7PK!jn9rdocProps/core.xml (RMO0#@j;N[H-P'mn~sAZ(M@1Zm9P<UZA)b(()3S&

Ansi based on Dropped File (~WRO0000.doc)

"N\BBr{{upkfe4LAuu\A|a(]v!1iBGi

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"n|_GixOx<USus5Z#NT~y6xu\%6p$yr-M0RGNh9*)d)oW9nGs':bWfgOjiO`*'Gw@#Mr"~[g,1&_@tT$g2c=Ea:Cp:-h:G<?\A%T?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"QF%e$7*Cs%+"5AlC'D\%g_%2K~7::)A^f}t'1H]2Wu<7`m_l`C=v=sV=}|7fTL'*'F&)#E b*,f?.`fT579(!c-g+xv:nL:W=(Q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"R5=~ZIzNzk5b}1A7277"A#EEA2s=R5IFt;z=@EAV5A5EARHEVe5A1;E=E~nG8R&I9655J}2A4Ay}15VLA5CAF9:;E=E~nG8R&I9655J}2A=Ay}15VLEVk5A1?RM5.7x"VIvEu:=B19=6qE~1E/>y"C{5y"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"TGG6), iI^

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"tK!RkY\"H/zb!j;;1wKw$qtK4uT\IUBy-$rMLiHXcMg=Qn)u,}KI^v'o3&p9!9C/z-c-B52E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"V8f<3+w6 QTIz+jV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"vs8}-]&(={[ev$tDf 'W8:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"WLbrebMn~H%:*8t%?{^I?b>)<\!kQ=1u5KqgW5cjC+&tutNV1#D] #h9ko0e$/K(1AMqR\O(FLmT A12f'3c6PdEMRG_8M<]LsHm;"-UT6MIzkp_ 5@F'`r=]BA_,0FT7!IJ7c<iTOoyPj-$PCq_Lbs?3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"ZFJ7o@8gT'7mN]i$/hH]0?Ews#Va21MYW2*VcXT19:PRdQB-mMM$.^"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

"|5R4AE97!3!2{Ey4AE"5"}"E5yu51AG^}V5A{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#7CrWQIxJuR|^c'24vbR4o5tgD=5R,kAs<Q\a-AcWl^@B__ob%$=m5TgC4%]#-;F1,PSQG=,!6J8Ud*~B11syD%Vl#e

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#;`d(qhhoODz8g4xZ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#A8bU?`WAv+m"{WRNj_SOxrl|A*V-XB.^x4a<5D(<,}Xm;xGbS5pL-Gjlf6fKh5o'%L)LYk*S<C!6PuYBqCk]%T C:x$Rq6Yd5@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#A9[0c6OM,,U~4{l|kp|h$'#^|"1"L'!QTaSq<,LGjr[;W6p|z'U_<f)<Ab@m:VpE(A~a.KG*CnO#.IrwAd)JfP|Iw7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#b\'XC$}`XnJ^?,4]/$wYdX?st$qrF&uS{U;=K3UOpOP~$5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#by|x*Tr)\u<S.&J5O({hhwhJfQ_4"Xp}K23^e}:Z"^dj|t*)&%{{P``}z9H]7E"ZU~Q#84VUfLO!P7+pf^mNO7`!_LYZjT!RX

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#FDTcS 6<TVY1R9f)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#hM6D6+[UBGt]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#i.TX%vWNZ,H :5>% s>Q 6V:E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#jbe$Ae/U%$T|$[PnMM|'GV\(McibT>zjknG.v's 2V%K226:6*Sa"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#Q/NR-%frw:23A<.q#UgDeBn!hKGKwHV_.< 5?[?I_?@k>"bG8FeRsP/L;L70G=r*#X(-?Sv3FyrYZiX,FH$ZjuKrhYbB|8[mLZlAy)+3l2GirxOKnN,{Pm1pt)w*2ITB(4J1ydL"&zo;f

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#S'$3"M!AQR2tO1xTBT9}q{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#s,wwM;@b

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#U)gl=tIE}L; x78:}BorxFjDt.Qq]j~$#Cfs_+e,[bl.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#vT+<jkb;6j(e_%*RrNV?r=mVr`N.ueo^/sSJ~g[0IkI[xM'_`23r>;WY#CWN

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#W0<AJSivjI)6Z]!M%

Ansi based on Dropped File (~WRD0002.tmp)

#Wn5Uhw'x7V+b}BG,'o839+3fypv}mc@0?"*x&DTo2gD,ly+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#{ z7j`C)N<Ve/6Tp

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

#|((h2]F4:L6U"]zD?`|

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$+uGM?^4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$.p5{q"-[t^i145L:eN=QLSmPoZM U/oQ4La58N

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$8>5i(F^kV*f"73ywGpF.0HBU`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$<R()c1t[>@lqY

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$Bb{snq05([/!J5WwwZ3(:xsqMfg|{1@Zy|u.g\c9#`~FcV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$BC\]dE88TAt85@5*eE@}(lFb*,FAbMgU%,!!cJ7y}!Lq/|2GLf]Uttvr<I*G`xGH1e;ye&~8SDTng#A +yAAGK$bKf[~2E[{5oew}aXCyYll9^!p#ck8?Fi x!?Hv|f?--8%S7i#v48zS3NmPz~vn*8~IRgr@]'>CHgD{873Fq5rscap

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$cMwTYPC/I^dF#hhL]5A'M8-&Iso\r'<&SueLt95_)W<FZhf^-7*K<BS%[{mN7<~3oO{I

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$en&a0,;4[8P{^Mipvck>Qq8LZBYf}=oigh\.8l_pLM^%m:^jBc%"+2Uq?*6!\AMlu0$q5/EY&4W7:P,g9kzNcpzOOY@Le5k~~:z-'ZlGp

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$h`n3C1VDVIgeMfcxDUE3g{9{6G

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$I)+"b`rS

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$or3zDd]zrZ0h= 0c1?z%4B

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$WXD\9Ek#h iYEc9 L@O/ 6QXEXs|2~KP-t~,PF%GIJ8Z.dtdD2nD%YiJ7Xp`!d"Yu*n`X!!AFjfxiWu$N0"L6+!u>eL?ERdcCF[tU"&-r}XAcX[oHV#fny\4>bBqr:{bq)Lo

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$y3j(zk{JC8!)(>-s$OBTEf(]hof;{!4Fhxp55<WLB9$%)Py1|$*9A<^'o(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$|a1SkTK[fLjdjl OoNp0{+nrMDbQ}rUV!]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

$~ s$5aNz!|P

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

% Su{}53?KdC.bOn_$](IoA0tW!v,p,hN'x%T=`}@rhiRAfV//^Aw0:X<`2Vj,`PV6rN56),;+^qCQ/~Do*H];

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%#c[qnp=,X$4:A22K=@Ch90e}4zVG+kGOn0IS,FTkLwIqGuepSD{@-i! ]5'/#y&5a3\bL jURaGWd"&Plv:?(jA$=iBBGF^mI0y(Ku^Fa$?Px>:gZp2$[&FP[(MI`! YWVbH:5IU~r%K"Zo?>7)6>y2GEO.QnjeyOj;bXd(=CN7eLNf\p-MuAH,ACvLG)@M#Qh3G@od56cBvb~boqeu$as0(<F(gVa&1hc+'-,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%(-7S2A^Dw-rbFN"Z56iuMsqyroFR0nf/WFlLp

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%/)X.Q:#f3Nu|S6%6/L@+2#@d&++KcKI88UfNd<o<QS+;*/98]Hei*<e{m%pS

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%:aoC%SK?||*jI?s6x~Z!WKY)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%>$Fadhgi!g,Hw

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%?GASwu1;zU|7A1<O~|l?>!xsEu;zU$u1;zU|7A1<O~#E55A|HW5A>=6J$F0BJFBF:MIE7AMIEAL{HwD@LHD@yOYKUG

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%AE5'5Bjwx1rVRFz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%B<.BUo2[Qy1(G&w ^^Y19BO3$"E%<3d7`Z0&pi_28h87iv^4TcDW|9;#;2(%Sz_%D2c}LrjR5kSmK./AD(wD,A!EN]&^K_t//h\3?|?IXdC3q|#AsB+FiC5#+,ZA=upp[h"$sf|X:C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%E>pDP|=VFa~LJVi+F>9 SN>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%lN'zosoHBsT1>(!PtVxfiDM|k3+.BOZ>]Xx-6p^CP25jnYL|,AfH*|hIyX 6Q#G2~.42;~Igo(`8{1[E=T\2S3mr`}cSJm?eI(xm2+tvkH+Y<b<[ol$UW16ET.9}hXici@OBL'CR!y(c[+,h%(LH%RRSFb?Vi!bOmAZJXa?ePYv"QmZxC~[tB^2|3v<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%OHa355I{<?9||9;LU}7A1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%OHa355I{<?i||9;LU}7A1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%OHa355I{<?||9;LU}7A1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%OHa355I{<||9;LU}7A1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%Rx$DFYkHZwj]OvVn86=08'>/dXHhOsNJx(43D`}rHWUOj)4^#hO9HD<My{q#cVFy)qlgURHVr9il3cekGH'*py.OT2DH:7

Ansi based on Dropped File (~WRO0000.doc)

%s.%d.tmp

Unicode based on Dropped File (..exe.3238139870)

%s6XWU#!Ec~,LLKEbD

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%TEMP%\..\\..exe

Ansi based on Process Commandline (..exe)

%um4&R8S@:M-ln5ig}]m3f gFAp@3SR.CK}4Z[}Gw&%gklMdB<5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%uv5F4Z^9DdAP*J5_%=Nw4G$\a|{sW:uk|.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%vNk]+"h.4[t&{ZZ149]R%3YV<7"4/oaiD6x)'<|oT8LQ;n{I^`W"Ae{_KiD:IJqlK=J%?>`LEF^fZ%u'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&62N@yaZ6MulQKhA^M~(Z:0$(1Vqsq6.yEy.r~B/^Ve(r/g)"\j(p2$,M

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&@zUZ[cYF)3xzFY,]^aZ^1P6v}+3~x0T2zd1coOZ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&^/?YmvC_OFC4Wc{wm!AY('d])UKC9u|EPj

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&_zXBC0QYdWa]r.$J6/A&ar7(0I0Rv&X/_PP2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&e>"Y8>"Mg~9Na"We?2S8:8r6c[Uegyg7MPM_}#Al(8t4UyRRPA+z("6yKQ](<j(FaM;%[=!W,u}LX 9T<<A[443Y-0!9*Fmj3t:`M9K0gd@!op12, hn@i].8`6rg6|Ee$4`9vL?]u\_%>BZ9Q| ]iDv{C~uo"n^Tw}{Vf7;zDi^$\0#W6#V>]sLGJ7B:\ f>,m+jCj#6w|INz{b{TCIB1D)]'e1po]=/8$*K0V?,5*5h|:=M@l[0?{S-~=f|jU4K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&e_FR]Isf._jJ76:-~DS^)[EqQG\nRg<;@Ypr'Fxj"dHfZsuIge

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&gF9>~Pz&Dy)vwX<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&J0_\#yza d[1Mh~P3^\"x*W?dQ)qWMa[2A-]lxz@#;KgafdUV|y^OeX7^!qj(jw2h9!ynU\%(YTi}QYiv-wp}vV&+Gh&0I.']5vG \|V%75#G

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&KyEaE;FAON{:-5wZ`9 X;^Ycp=7RtXk 13c

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&M'1FjRoTFXgg>Hci:>XN?NrA[^ku6LKE|LO+R[*=in baY;t%a+szgN1kP6&$ t&`uz\u^p"J>wNDzj8BZrx?q^vfa#eTpyRE5; +s1Ix0+0

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&M^=iuKW:" _&5wnu7Xl]aHQT i=&aB{Rb%E)^tHj#`sf:ddQ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&mk=_U)IK&f-mRRT^AH1<9#j{ymY"L3[/>6@T$_uB

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&n6;$aQ3H3S?nlcCr@Yd2K4j:#ru$wyPK^`T9Qegwz~Q'+sZjtdPyVKIamU mK^CJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&tl^(iL}>mu<Kl-"4gE,JyxA^I4z!a&}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&U:O'2UY|vHrn-E?0ZL.I36'?;hY|<q`r08QtuLc\-@k<y[c&yts-JEC"c

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

&y*K%A;eNyIZV&[J6b(L@I)B[ >t5}EPX/D

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'----------

Ansi based on Image Processing (screen_7.png)

'2!IW?cX1KTtSjh@@WWO-WItk[sU]{2Z}jSFv$*@DV ~N2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

':u9SzD?4l|oP\q<V5Wd

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

';iMK;`A]E[(\&D@s0dy/^oY c;zzol#/=> ]3cLHi+6kT~q!5A} cBQQ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'[B{g4x\`)70P]9M/g-8wfC\01a#LT%A`40}'*&n.NG"gvc

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'\WM*kQ!~(M`5LDZkxVlP,dw`ll\U`G0EJCm(b,ZoNy;5fnAb+1l0O)X9\Ei%,3N5; ./]eNf-honwhs%7MM+l>SoB\[\wOgop7)e/FE\ykw@jWS

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

']#ULX$^bYn

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'B^+m72<z52]:t%u

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'cJKUY;&.

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'cm9WfQ`W[ $^JK%;3tHbodot$}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'FW%~/nH?vWP~qR,-{H!Z{Y{j@z~D'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'g,fy0.]'Pp?1a@*0>L<K"(++v[RE;:5Z*e3S:odo_2Qi(9q!!X4b>;8cip e)h|,i6pQPyHETX<i}rCL5v*zTxvk_2G[eKy;uk#io^=1e'Vu|s:Uqm)~TLX8;!f-{P|+*uN@c%Z ,x.X

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'j!06jiF 4?-+/c!DY\

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'jRqGqGq.bkCU&PM+mxVqv&Pj7NMPE*PU7p`arsG#8M#p'[JM7To

Ansi based on Dropped File (~WRD0002.tmp)

'K0Sr&UW=l"M~W~4SkX

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'l',,T7f3.V5P)en}1$y8&F<VxC3JYRy*3;'og2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'Nadikmpv3B:onIHZ&{# L=cwN

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'S#CnFEGS8RJOh4%9Hu0GYk2'XT{+`Pp<\C[Tn#|Y77M:;.]N%?5#]HeOf_q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'UHj{,-Zn`>8sCS6^&5F[8dwLML@q>Mv`DvXKjU&Dnm^Ch8_[n]o|vJL6t6H8,-5<(s]i/ G|.hafIJ=O@if_mp77K6t6Ig2_R)rF3CH6Ca\IM\f5gOG5MZvs02JMn-:I'95xQN~p,tm`-t+lnLd1>AbNS!Xut/cwg<#TyluDMP`N!.c_[H&~{_/|'0aCa+J")x0UP#;lJw{U&f4"\<G?tOe^{E8Y}}f"M1@/HY^^tM)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'v!<o%=MT!4U]X+9D=TfSZFEqh

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

'{v{E.ZN72PnYV}k&uVFDf

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

( (g8Qe<}922o,4iUw vtXZ@[3Bn$!mkk+8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(!6tjB0?p9_OE1p-/m%e,fG0'<[02=>[ >[b^5~5>555>5555>5555>555>~::~>>~>:~z>>:~EEAAAEAE}I==9}I}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(& &.`-NqNd#J(la+u*O'T{b8&>uXjO,OI$vy&N(vwN_!2u*sT>',0x !0y~D_vKjOsjfp?xOuN^=0Ez]R.sInf\+nw-U6#-$nKmaTPjC^!q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

((*i**dq.F{8u=]pe0%TL@cs=mO7/mC&>81E^^OOVSzHe()fTXBZ2t4<+nR=S$xW&@|=?;\}`Zdk0ld-5,lipR-nk}@k=Ra%HSYrU7LvoK{@Y5t)`m5f

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(0.Eq~[B"AOEUg#"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(8#(E&w`?!rR?/F?>H%-Bc2XTMJg)Rggy6FA;"UXURDu(f

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(8#HNuAz:H&&RWc!1IAW$aUTqG[T6%

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(;ct!d~PaAkz+*RCsLG?y%q;+6,bGL0LsZkiBbUYr,MA'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(`Rz"7(V_wP,9Q#J>:Lj04gV`HfQ$m"%rnbvgb?'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(CSGT)Trn c DngNguyn Cao Huy (Lng Sn)B7A

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

(HS)Nguyn Thanh HiL Anh ChinNguyn Tin LongB3

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

(Jan'6Y}|>YPOZCAi9cn&WM#mD`s8JT4Y-!%^+`I4(HtJ,@L

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(JVdt$<L`nz*:(BNZJFTj2" ,<@LXfx"0LXj|

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(KT)Nguyn Thng LiTrn Th ThngPhm Vn ThngB5

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

(KTHS)Nguyn Vn Sn (Hi DvxFHZ"vxD$F$L$$$$j$UjUj$U5CJPJ\aJCJPJaJ~"DFHNZ|;$$If!vh#v#vU#v@:V0,a$d$Ifa$$d$Ifa$ng)B6

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

(LDuhaO#We]XK QCNO/-7:j@}\AD!)3fi+jv,?iq7d6.?:R-q`,"&\}/0QEd0$h?Z6%xLl[L/S{NtP{7*y4yL|&/H'3@^!f~]?_zw|F]@=Nf+O}"H>b}tPMpmD?,!IF7rL0_?hI`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(n]k~EL_YMZ4:\O!kp!5][m~RZ&:~FHj8()S;JbBR>k[jf~U%y\d@8 tM:%.*?w(+Gp^!>ujCYy?7#uAJA(70ah*M %W9Z`-WOn4iqX.y]}gT;1o2ya8g6+FT>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(OaM3@xWB@s}@-DJF+r*&_)on=vmQ!sSEi8K{oYI/=K<:Fu@^\EF#r11F6*<`3/y-|5C3Ug0z3Xk0DJ:PpZfDeo!x& $>CsKa5y'Oz_P +

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(QLHC)on Vn T Vn ChnNguyn Th Hng ThunB2

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

(t@0S%K=HCh.jd!P|x,`MBNM!GX4kte&#|a_7\=0$!ko@"p(.>k>wv<CSd816N]%txLnHHoHZ>%v7_1 ,L5L`0Zwawev0rj\xv}8{oj>R'/l#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(Tgiam)Nguyn Hng (B5)B7B

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

(Tgiam)Nguyn Vn Hoan (B5)

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

(tra)Nguyn Mnh CngHong Ngc CngB4

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

(V(n,/%B@\<N'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(V>rv2rv2rv25EAR6*_=V_&B7:wV}6R5AE}?>1"E5=~O~A?"M.I^9BD5A1:3A[=AVu5~j5x=AR9BD5A>AJC1}577u"V;75F9BE5A7>=AAu&zI>}15V&3DC3DC3D20Fr@6D20F&q@5i@5i@3i@5?6AE9C39C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(XqP1mi!#yC""\1_]R4=^j'ej0apV~A/~ZK:j^%J/`Q'\|SrYd3\|O[b\4VfK|;}us0irx?@?.<G8kVj>d1B d>`2Fn_9OuX0U`Xk/ee9Ar.1< E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

(ZcFcswbO15H^K-;>F"K{g>v&j)x@'5'lIoss^o~cxJj!9JpK$JH3GzX0^W;PcAG>.^mkkQoqji^`iz?n8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)!crp-bgandfPyPenqzLeq5$d"fzR_Xv=Z[jY<;9+ZJ2X

Ansi based on Dropped File (~WRD0002.tmp)

)"DXs58v;?RhyyGCgtQ+(;bHb9kdMJ0uC#|a"Hw^|;ad_}"*lC]D?aM8nWED7pc

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)&L\ISx=c

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)2qT."(ZXAtv"3j1BNsm9b7XF9A>^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)4OBl@D`pm;}ugp'ZfJ;%%Pq|//*T],JCeRLOu k+M2&Ql)#S!r|X)&^y:X

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)@`E^n49

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)@q7n&!rGd+oL`)OD*

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)[naR&lMhMV+<)W{Kg+?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)]o_1/%|Dez5u8j oD.1tBN($*}U:l./tP{D-uf@oqitco

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)ET"P|">W-U2m@b^N7z3[*w*_L3h%!j]Pbnxz1[_r2p'{:Hg2jE7&AHs$+5Te7FRmw]12c0.z={v=>|$2A|uR%v

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)g5Xthq$}(,T[S6e`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)j13RJ3M&UFqW

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)M5)udx^rAb*@]egIt<x<ft

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)o32e#xm;U}wbb#$-Ag

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)ox0*j*WX=m\]-(Wk*7j4I4b_~OH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)txmT!!Ja]1;[+H}>d)/YRJtSKQ-Y,z!X~jt]>DD7#w|5C$K7]ag:_>Y1@sJ<cX(?:+(S4;kX'.K2o_SE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

)yom;lqigX>8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*%q))VnY+j)ssi>&pNd%v-?s0

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

**}/XVLvBWbns;9]&:[OV ZUAnm!]]WA^;zd7va}}|-"FZj#j!w1o~INsR\8K`5cnf$VqN%0_$kvY7-#d+A5^1vhy7Yt}W8a=Vv{V/Dg^sC,u?0>/1S{l.C3Q(26F}uCr!&UnT=$f)?p AO2nFFv7ro PTU/Z_A<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*-Ad&2(|maOl'LKh!Z`]"9P:FDlR&Q r

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*8'Jm*bs`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*?/`n"ZB"Ib

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*^"\,tQZZzyGZS9reG:bs(ovepD6WKpFWg&Z$*!8an"MRz2&zO0/

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*_k[[}+1_C__A3v1_C__A3n1_C_._A3>E+:p_\LFRR1AE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*a}$&*n)#y/L?sLknZ20JSdlA#Uy[%rWGV&iYb,}<#EI}yq5vwD?QLMCAka<e)`ZXGw?_!I>HJ2( L#J

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*co.{Z },5ju[a/e#m>TW*hU?X.p2^vyAl}$Cl-@8R!irerD;4@VJra?++/;!S(**z>npQ* L=:FL:j$tOb@FLr/-JZfPoqo}"&*E|A0*>0w\{?DZA#JLDkTIan_E#in^&~bUD3}a_c

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*d3FN[xvs8ktG8hkMH8As04VoJGkp2H6-|[a!=6!/~MI{F|ph~:X&$!(.'<f4Ns56vP';Yj[dLFt(o&C"nZ_Es=M8x0oY/.?n;z"R\.Mtdu0SHqq`_5+0nHc 2?wee7*T?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*Dv`64}"/msa_f}fEF|wk5O3Y}<[R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*gdoQ\Gyd_s33\b>E'A"%Mtn?{/}/{79-J_90:^xf@UYNc)Kjx4TJHg1w6B~u

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*gxb}6o|$M-wA2fX:)$y2L@%L.k`!F~vTl&`}!f|7vD;'\

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*H"N8S@J3?4AEsV75AH3?4AE"7{:@EV#65A}L!8"3Lo{a57:R4AE{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*hJ$Jd$nWKgj/?F*!U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*messages***

Ansi based on Dropped File (..exe.3238139870)

*rnn3&Iz7EVs<u;zw7CwR{4AEux5R4AE71"kD55u13F13B<u&=VA}FwB17JAs

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

*Woh&ohxCo

Ansi based on Dropped File (~WRD0002.tmp)

*zI955Un\Iz;zRAE}7|5>1=f|9g5u9g5u<J>GVV5A9:>uF9C>75EAR9V;CFu5G^Gn5V%Iz1E7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

+!-z_OxG]~&[FSKFg(6Pdr\a?qJRO\s^+eSDsA7`(Z8<F.Q&thYKq8ab;ow{ tdin}FS,6/,eA,TE2h1)>z)K3HnC$T?bLdozSaJ|&dzm

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

+%G53dAh^"4m]zA^FhV4~bE~@EXzVrJ#:NAW>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

+]yRE~c/JM4F@+C1vkBuP<2ZCwYETHe\$jy+A.Mqg6.ust$jvb.dEwCfJRx>VUx[$8?N2=XI2oBrTSKF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

+`DbHUe!t<'>:a]L:o=O1P%utWf56:Lx9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

+cs2Z<DzZB+4QZm

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

+l}8aA+KvQ?}M/`om#|92y-*(RU1iMH@a?DjL2L$W..':i:ddny6V'_. 5)cuPH{Av9j|MijQ'BAT;2i%|n;qt,,Wf^*K5;9 8&:|]>J^-@'%x<B/S|Kw}YS.SGxoa?zM9]XDTB"-:K,K@0k'4uSqP'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

+mj9\D>s+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

+Z20@0}_i

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

+~bIE4Jqay6**<y:Z9o"f,LN(YH>M5wF}J$-K>]$>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,&:$+h52b(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,,__J,_5_

Ansi based on Image Processing (screen_14.png)

,._:Lp02:8:srk*;>Ppy%9{M@3OU4hC='rUR.^@B!V(o8$U?]8gn

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,3jPX?Q&8WB%x$<]<i\j_\eIoFaV\Z&,W0"|%(y-zu;|be}DK*d<$du[X~iMe'Vrd6RD~ DTiO(Kk<*Y{9tL{m~\P !@Wu{g,}<UohYK3}/3:D

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,5sO\5RG;5A"u53?,AEuzhAm

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,6o(+EH)T1$goM_\D@P*DC&m9qoC>dd%(}\aC6p%x3[EDI]^D1iMe`@v)fJ_1|'xQNOcl@`zyP}4G(F8CIYb9Ck"$#8A-:](EtDr])NwRxjmuB8;VX1<I\kZA5BxY\`j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,84shKMu}

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,_g<)=R/\]lK/exjYjj;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,ASf|, 'Y8*:2[%.p1PV7R]Irm}8>BL4#x~;33`5]~o^d1d5OW`HXnYD$Qd{&s=QD`yQ LL2hr0)ifjriUS<<<c^=w;te's-sl\qHn{=)4"W;ZAHT,6`=y>r

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,g_kC32}t%>V98 Ye~W7<iDmQ[1#znoZ6bSMZX'7{*~i!H:@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,h=]&v+a&%pGR@!>v9@i0Oiq+%I d+]Xc~qcf{V-yR_}Ls'\oFS::m]Gf8@6D6[=m.SuCh@_}M?@f[`A:0FAh_)li|TGHGTGPGLGDUSVWEEEEEEEEBE|IE\EE+3dE@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,jltl$L;UlH3[4;@4<fm)JUuYtI-W()Ka>"pM/8g5L,?fi%|aHewht2EC !j5PfR22RcKB8u+OOJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,Pj`U,M]3@<u..\\D..exDejhjjjh@,RUEWT3<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,Pw2'&&!l!OaO]L!,WA45$DHOxXzH/G{WYV:P\DBci7L&rqqx>{53D+z8bx88cio1@(Dh@zn["[=\634OvIxvz%H'.DQ*OZ{!Gp[#MuVUr}@sT[RJpk: Oy>&wt!$GPD2K!T_PdAA0IKFE:5elO8B76E.sD0>]45QW*Hg): DZ|'F

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,p}_[!uU(.?.P(t_%|osrErUN{>k)%^#@er?:$ICvM@mo^'&5X5+.Ldd+u1.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

,xSh?x<V<z9tU9=.C1vZ}M?vZ@+& Y6<iLiFT^"|.&v s

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

-!Fn7):YzBzqM}PBO`ve1-rvlR}Q$FP'^zp]>X-(a=p<FA_o[aX\,cC"M

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

-&RL16rxJG8(Q_o`@h=H]Ngi;;h2tk#AVu_yEHA)c{L]KQj&I,MI'*h\mhG`3UZcv=/*a#oW\Cv^r8tla|lqp[:Si@fGT>H&']EpsFbr}u#4nhf*O[UC

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

-*Q{aM\Eh $ZD<L](u\pK65"Cwq3V*u#B23(GRu[c`&8FPOQ(Bp&\5oo,lXgv`P%,5y7nA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

-.b7F7pu%DLZMrdmbfgX;81?/Vy&x/`1r9Ecj7y\~v>J:>MBj,ZaxP5N0O~Oa_`.(u\;Zd,;G6"g<pP~e

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

-05hT7jIm_dw6t9f@VTG?n9QoQs*mgp_Tr

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

->[$xt03Ci}pJc

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

-Agh5V;=~W\{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

-el -s2 "-d%s" "-p%s" "-sp%s"

Unicode based on Dropped File (..exe.3238139870)

-Kcq(ULc[{57<MV?|AU28;<=(7Z7h ho+?k|_*2/rMj"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

-LE<4OqlQ$`@D'i4pwgO\VAi%/(A-%vDvY\?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

-n-RX)2qs~@Xlcf#cPDXbBX~7ctqxNNLw~Vpu3_3M??Zo8| Fbby{mC&+QN1lF&J;uHA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

-Qh#mb16::<bbw|l7geQRE]QeD2aajX"b#8krRy(xLO4*[5|D*u\fpyRRUwJpA=,K-uUC$FI\VzzwcsH&}742p0o<kqrWA Zzkq\#7u?zj00=oULy:>0gisMeA}qA%4Os#/$KSY&[U1K-Dy;lj)&^zCw3BUs@$)1;gy

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

-vch)u/!CH]Eq&L9|(`w+{z;G6TaN"5BHCx(JA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

-v{q) _4 /c4

Ansi based on Dropped File (~WRD0002.tmp)

-y[(W+t.=~s)9;%P0R)!"rj5Lk OBJfr>mhA=\f{Ya)7$vL#xX#u@hX+$Z}c{"29XdY]LZde Zo"_-}A!'7rvjMk`tU5oVAv'hFohFw?d<F`5*~U"kQoFeVAr&~R5:kFohFohFw?d<F`5*Y,*~

Ansi based on Dropped File (~WRD0002.tmp)

-|s;"W/ii{.k86A-*z\%kX1%=EG"+fq>^Aau?U06u&7VQZXfS'ym>K@KMP17kxQMm

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

.&H6(/shf~8m&twPs

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

.?AVbad_alloc@std@@

Ansi based on Dropped File (..exe.3238139870)

.?AVbad_exception@std@@

Ansi based on Dropped File (..exe.3238139870)

.?AVexception@std@@

Ansi based on Dropped File (..exe.3238139870)

.?AVtype_info@@

Ansi based on Dropped File (..exe.3238139870)

.?AW4RAR_EXIT@@

Ansi based on Dropped File (..exe.3238139870)

.]z#-IFt\b55g$([(0:onP}.{b&2g5^\QZQY e^R}*,0ZCxyp76r{.!,/Fz%<>XGyPt4(q0$9FH6e+^2_;E!~%&j!Nf7IXD))xTi`.:gi.[xVo\M;X

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

._Ws_'87'I|u' "Y`E0D)jv!LY!VjIx2lOA5Baf

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

.I}(<ammWcB/4@[Bn6lu(b]9pv!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

.lNZ;Ni_l2Ae?r."We++A{VJKGmE(_VU^l6C~I0)s>$'j5qGUWtE::R \

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

.MfIZUq"=loO.Y$m.+gAT!,MQH(XI\qZbaG;_K

Ansi based on Dropped File (~WRD0002.tmp)

.nJP7"qGq."kx#@dyx#@dm+z1vFPj7BNMP!XXV,]/

Ansi based on Dropped File (~WRD0002.tmp)

.s)%Bg/p|=jH f8wjZ8|WkZm}}5r-{Y3xxC+HS2~o}.<qaW-[w$RgjdJ1Wh@~_+L+*\(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

.{[16KbHl

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/!BrlktJ\PX>MKUM([}d?};2@s+IZ{3=In@M4>^j13sZDJ4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/&qA]?zrFG62G6$ DpebkuPDljUr"W*:$CuqaT6OSpHjq/\c-#n@]|33quXN4\E6psQcJ\[bU6W:!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/,?NrvO08RL<U-.QS .!btV2Ci+3.k.a=`;1F+Z|f@Oj4#*OEsy8$`R]IM=49*3#-Dd[\l&vt(91pm #6s0~D

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/,V*8etSOKN|FPY-njC$$~ZvOKKW`KA4J~CA'@411'R9FMKW@@s'.Te%dx|sE[U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/-k&E1Yfo+nyAx%P')$F.v>"#PJ5=]Rk[;C4='lzp,lw0v;[g)\T($=q^M4qeBLHck_A@eQWvx

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/5?h:CVq,3/WeqRcrS^AkYX+MqPQ!y`*VX_d

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/@\e7%dfh!j-Kl[)@sJD%&$_u+c=e6S:r<]@aM#M?)Mqz,B{['_x1VdV%jlL{$K:w_)d}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/b~tj)GE8DY)<jg {VBUu4'b1WVo\a/sel=tF^t6UKwyc~JsUUpvhE*eQM<Ov#RWj^myiB[UQJP[xkWobBFzY#9t BDEi*+L:)\Lx>.ui[+v(m>rVC?=vA~\E{N\rc/hpj>7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/C$ETH_{=JG.o1jm ]v-*H2!e~F)m.nre(!kq-_}[Kal>~4-!{[aXq2.2/X\9*#ef~+d8|k>'m,^!l4X6H`o[>R<Cnr'a> :yz>"%1kuT!#e1*uo}dn,^I&<;8T$^IW8HtlUIY0*DX4bKAG4XP2|5:rUXsx";%?r|AvavuP63j;Klg;1/t-IkGgpQEv/5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/C*"/v@@RlOry6&8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/ER/&v.,'1y"N}Lr#&C\D<On,RxH^gbXvD7fPe]7yjoF*T{Zz=`@i+Yz(AmF<\ndq?0zdclfeVO410D"3"7SS0Rnn?POUp.o~IAmqL+Picf!R:n9)9RDgwMFTDMtWy?X@M`(JxWq{2}>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/J@%1o9O-ArLf&p=-1XX:J5]80=H?Xbpp6;zJf~j@5iatWOLTukO'kIp,m9_^-/'#m9Ny9eH\>;1'sm'_I9pm:n>`qIsJlW-W-RLR^Wc3:2VW-5vG".6A8M|`q,h8U?#J!mM$;?zauk_E23Tz{:;n{Bq~u?h,?~1,ag)@Wj9~PB o|)'}u Oeb +R8,nF[Zl7K_?+S6k9P{<*,J \d8VgDGY`s&m?e3UaN!g"_#euAdq1^P*Ilst&;[d-<8aW*LrGZ^u

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/lc-m:)W'D:U:0-xQ^U7#Hv%C~k]V$,i9j%6]X2i5v]"fh<?'p2Bmz)]HkbLPvg]3<z&|'3vPP;z!EBc4,tUPmw'?:l0W+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/n "C:\ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc"

Ansi based on Process Commandline (WINWORD.EXE)

/N}0IGGvI7uy_Jk7~jtSye%pC(A4m0`4X2R '~d;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/o3t0)|i=*}LR"]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/q(:upG;~s&lp~+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/T:Z>wC)3W0WN8,{V&|5Wz;8=4ddsCw^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/wx*5Rm}&AOsZR4AEu=uAA105uZ96A5Ju:AA1$5uJ185i771"D5HVOux1IRau;3:7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

/x#,/d}?eh7)mg;kk4Df2/wBmw4A^#FkPHxAt~9'ozWnMtVWkJlNWz^>\PK!z|>'word/document.xmlZMr03274M=M:Ndh9"+,8Klp#\';NB'KK}(+L%BtOZQ\I> sn2N\@H

Ansi based on Dropped File (~WRD0002.tmp)

/Z7-BDQR0DGX n04u(52g-/Y!@:9J|y}?<xDX16>$mxxxkhL]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

0/Gv`WA}eHS2e!:"` ee-gO]\2<Bg%lCyDGw

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

00000=@\]^([{ 0

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

00=oULy:>0

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

00R4p;#}+5iNVu31{ab_<yLXt}a%2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

019C826E445A4649A5B00BF08FCC4EEE

Unicode based on Runtime Data (WINWORD.EXE )

08deee3d3f0}"/> ...The ID below indicates application support for Windows 7 --> <supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/> ...The ID below indicates application support for Windows 8 --> <supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/> ...The ID below indicates application support for Windows 8.1 --> <supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/> </application></compatibility><asmv3:application xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"> <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings"> <dpiAware>true</dpiAware> </asmv3:windowsSettings></asmv3:application></assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX

Ansi based on Dropped File (..exe.3238139870)

0]=H?$TG]]MeEDetK'Ef"pz /M\BO)+'a7aJ9F}Feop%F6=uAF;N6+FTFu5=%=DI?Qv6q5OUHVPNW9jyqFte_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

0`$-22Eo0&&@966^l*T^RjLgD)/uO!qaIF:XONdBX%|zg!wt*QKgU(d%@.0aFDJ.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

0aT6.%HjXRdc*=:O9rEBbZ`\^~lu:5R!CA2$}Wo~8\?-=/7-i3W`vJOWvDO'2G6j.]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

0b+?-9cg-,'& pI3r,QSH@q"9@*bTi+PX!(g$R&ILi\ERQk9k_?S~0{}4}_09$q=}L(Mo%#`LH>iwLE9<#Ri]EdYF..[YU4hd=:;ti6W|Xb{p]j!gL`YbuS<SR5(76x1ebC!Nd?S{",4U)f&G Vu$[I$l|g2C M_1%Vu3U/)_V^nx&FmOwg|E(zMDY&gW'~c3$N<HMG~MvBr@T>JQH8VpNJp-t3=)!VL-yTUBg`:[dR*kw|Xw`wTr)02H?;83QUkn2NT*d\bO&w[dMSvr8N94Jh0DfU%B3HpW[| Us%g`{$NzA5:Z/GseS%!k<{Si55Uk'ep9>M3ZlRSh=%G6j^Uq='Pmj.r2r@'1`!(O:.5>QaGxD6,:g^)ConwIz$qCkl{M:3-SvNIK<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

0KAThUb'f9T]17Vpo^57K,?@.'D.OY5:[l3/ X:twXo8%|4z-_XB7& Z^M?aM&6O1} 2G/eDxVtmw'#j.\AG;68&jBAu_$#U4Khpz9Q@c1 |0?xlJKL&/;+>-5Kd-3;F7Y!Zc>o]3@aK^+iUiie*@HL*I'~i:q9ELD63xFZLG3v>.YksX*>eg\uUB75?).9}Hy

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

0O:G5@C6L5SS3g.".B>NOLo07G+2Riz(3v}s{c^IBN70lZ',ELZ73Aicu::~Z$GV0\{~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

0t9I~.W(UW2X8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

0vCDsj~z`mPkQjiK#pHMkY;p7jNLX!_RzPq#87g8C.apehfzMQYx$y&c_U!hi;<46O^MT!K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

0vvvvv,vvvwvP9L}fCfQ"Bi=]}=]}??:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

0WACa3";k(6~DV@P%-wxY

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

0y2-G:w",U>~\u`\}*CL#%WQF7"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

0}#/1IDIc}+o2Iy}#Av{{uZ14I\?#9?,2Iy} A}1yu51AA;s<F5EAR195jI21

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1"#kFx$bSRJS<a

Ansi based on Dropped File (~WRO0000.doc)

1%7C+c?=e{|w/`to"fTW*T,tn0d1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1,VN8pJNBc3-_XajsKX;{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1-_wI0mX)^"yonphp_]?:5`6%u^/9]c%7>Q~r]vB=m>WC\*lXy4_/&;:._an#fgb3BK-U2bly'I3|>Lb%bA|Fnfn

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

116C7IGCBuE~IGmQuF7M-*4AU}^iABs&n4A15Cu17AIF0165AGIAANsE35Cu37Aw102@{v}5J11qJmQuG*AqQJ7*>iA7zZz3pJmP5AFsFw76Uu77C#z31GwB7B1D7CF}4BO>5@I@AqJ=D10U7M-*4AUs^iG=mbZz@5u15Cu17AB3D=D5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

12=7wyu51IR5sNRxoAEu0AJzu\5tp0Nw@z>C:@>7Q1.>D1pvAttv:s<>AB}G75EARcA"aZ~z5EARI5GB"5Aw5C3VR15C9:wyu51EA5cAEIz5EAN?5E=RcAE}=AAu&R4AEyu51EV5A}15V}&AGJuVZ5A`"/

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

14Am1'Av18

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

152BF`\x!#_J,.*ge+2_q|=_:p6{<SkB!0>|KJ810leE-YP&4+f-u{D7PDOP^]NrJ>"1?:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

17O~1O~V]5A1RXjAE7O~5V9:U}75|x=y*A"*5yu?>*=AAu&1"nE5H"s$518x5EARA"AJEnKyR;T?>`5EARRWR*VT5A=~}15V^5.?>*5.?>EAj5EAREVr5AEowE}"6r5yu515J5{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1=3|5VF"-5+uA5:L5bNeN=A:.8}2Az8+7sGU5V5AG;5A@8V_>>1r+u_+nH.898"`5:zFjR98nHeEA?71EIdGEO~[^~H

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1?<:w?Lj!OL/`;sN

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1[LJn[Yj:#&Tr.2:[#Y) >~"bc)4loh7?:Jvm~B[>m+)l1B17-{g;%Yxa9?rra]XahRZ;[R"-ZF*v[yKv{0b!?A()zv&d^k+%9(4E63Kd]K9!g hB\-k

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1\5nfI)J8%AP

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1`<N}&vs;fJlS>rfzR:^kxCI

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1AEC;5A3{EEC;n5A3{EEC;B5A3{EE#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1AEwWZA5EK&EEG;.5A5:R$AE5n1c2EEIz)>}wJA5G;5A56R$AE5n=1AE?%7{bEEEB"T5E.:GFA53K:EEW5A}{>EEC35AQIVNF5}N4D5=R;s}{rEE<;B5A:9OVA5>4AEwOvA55?F1AE}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1AE{7}GJA5AS$uOJA5zpsjwOJA5WI=B9}2IFO?71AE_=K3B5A3K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1AE}{>EE!9[2EE={>EE3{>EEAy={EEGA5A1{>EE53N5A?>19}A;R5A#_I}33cZEEAF1$srEEBw3?7AEM{2EEC;V5A3K:EE?>10JA71AEuGNA5xU{_2C;J5A1{:EE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1b:q(,^Iq_@50mw*B@3pX>uxFqJELsxoyfj'^J_C@{]6T0ebsl$]3& BAam=SRicr?Z=Fz\c7kG^)buf

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1Bd\K^2!"L9!|%1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1E-]W{+SEwMV4~|tcS8THYRIx6T4w8Gh2%0m4"ANm{Nudoe<E,UP,"p

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1h"-DUiGC

Ansi based on Dropped File (~WRD0002.tmp)

1J|'A_.Q>bzz@HN=n=|Vzz&75|'A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1m[aqEnPn*S"WTB8\8z=CQxB57^0

Ansi based on Dropped File (~WRO0000.doc)

1Pm\\9M2aD];Yt\[x]}Wr|]g-

Ansi based on Dropped File (~WRD0002.tmp)

1rky*9*vbMj

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1uWZ(T.&Cg?SiDDOwkNj="n1C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1V Dnt4g!|x@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1vL1X1mZ77!1.U}[A9_5=++|E_!RA2AE}2AAuiF}yFu7:U}5|:9>}-QIE}[A9___[UFEIFE5q-*I}y~umZuB7F7IAOE55

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1y^}b2Y?,s"v?sb+/-",d@K)t3[w<@r61bk.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1ydL"&zo;f

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

1~pYYHuy8VwY}Nh

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2 ,1]%0)<TCkz?(F/#$haL}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2!d1/@2=9A6)Ew5Kz=AAu&uu32536V9159R]AE95}uU76E2E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2)%\ifXom:Nk)c{(uL3#I<)[)*xZF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

26I;ClMd<Oi%EP)%;;8kvAf*um&MbIEXB!5;ax`=wl><H'(DxBwA8R}GXQ$EUuq{E>T:ejlSp-^3R*Ie>cj"jjV2z0&aZ_>j&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

27*W4!FCZ&OA}6tVV\)D8&R'7|+_u

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

27PSf\?(q,YCAcdp

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

28l7^)iyX mlLS!Xs

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2:A|*% Wn.ne3o}dJchTf"(!L<11HOjNc-]9=l

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2;RrPVdZ|6LK]y5bJPe39a5\AV]Ea!Ep?*e'uD2h\!#?20Rds9"X]4tf'60?w?IbeA_J_["}3,cjx:9U_wJ6N7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2?;NL'W@H_`QxN:.}>L+^!:Q38H2e_d8i,5FnBw_}~5ffo<^R<Ru"I5~,bE >`S4Iti\x{,[

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2\Dxsm;->HqxI\o,[1vwlXr8sV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2AAu&5Au8I15Au45EAR9;EVRM}F}|515Au3OeAB?*3>55u1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2b:_%qL)0'e}^&@S5qIaUZ`~2"cB.<Gu/8c"cRO~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2CBg]<yf.>Q'_v=eV?W/N@ppEd@xbdx3NV?eL;3LTk0g{VfnweeNO

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2Ck-8sv5k1B7{gJe6xGg'UfN, n5t'G&oh%hGj*rvF=@/2p2\p{U\{aky5vG

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2d[3 1Yj

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2Di|+PGdD72Bh[m{cz#z3mA?,l*Xf'm#.hJ||pBhQ~1qgH5&;]MPrTv5uo7fbMI$@G

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2RE-*Ez;$+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2ry/:RYohb6lPgCzgxL,>Qh7Ys'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2s=AAu&=VAAu~xt5IGEwFv"5u*O=Y{A)-OA=?jI2NV41NBCJA>67"i{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2XGHlfe{\lDW G }T@[X~<c

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2xm$Xe?8rSDryq\\ZgtMM.?,iAgbm{ 7RU*mOmknvy7,H#Q~0wj7Y04 %XX\MR2=`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

2Y&qjo<ev>B1ykJ=MLX);=TX0I0@+dJe^s'z|DR_N8A:8R_k^(8cGe(V`RG8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3 yBAZuZ1.oVbuV{zABC^wV&OH=`;51"5A^/V{oQ5_/"{C^w^?f73Czw

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3"]>@O~hG!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3+Rwl_bB<@.Dj+ 6}56#5: \:uy7JR3:J@*E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3,"ICD=W1k;,!`~5#L{UW0y`eBfF8JFr5mWph2]GOr\wV|/:Q#q Z/{`5^Q4bEYL4J=n)}wu/Ac*I}6-MyQ ?8,D0<b%oZhvls*(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

30t5<u4$0jQSPuUEPUjut$e3B<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

34*XC8wLl86<VwL6<NG0mRisD2)V]7p*"34YG0AE5VE5K7x-5"D5:z>}t)E3<rY105"D5Hb

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

352}D9r@Ey*"cq57}>bR{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

35zu;6<'IzJ|xV10"E5<u;*|xV5A18}?1@EWR5Au&=VLsZnh;zG^5n,7.ElG^5f,71KR9u3?*4AE>j1{@E~E>|E}G&5Ru1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

36U;h4v34|}"E?>EI1425Az}Bc>A:%{8A}B~z#@9QJNn=u935%s~JH{96G~ANQ~%F^~36oS{Ol5?7O34z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

36VX[s<R5AEu}:#z<5KtAE10"E5yAE5V}&1=7As

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3<9OZ@5!E5sOZ@55/0AEsN.G}1J4k~QID>0/JTvU8xuBRAE7""v5V#5A1k;9A{<V5AuV25AyV?5A}Bu3.;LEoO~K@Vx5A_Cu7A9BD5ARD5R0uAE5EAR9%3"57=}4@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3>&J_Mz3@4hT>s)(DR@6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3?<AE3?,AE5,L55h3?26AEG;5Aj7IFEN33?6AE5.77EVn7Js&jsZGE^nG:G^'VY5Afq3?22AEV59:3?22AEEAmEn<;v5AsOE55R5ARuGRF5aiV5AfSE3?5AEb7{FER}7{FEE)EKHEErlA&7Rssj33Ab3~sERn7.G*j3~3#R<&AEb3?22AEV9:3?22AEEAmOrF5Zuujs_E5"U5"R&AEG;5AfG;v5A"=~G;v5AA5i>}s<u&R~Duu1W/9:u:5,?>3?:AE5R4AE~~G;5Av9)Eb5,?>1*15"W5xB!1t~5A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3@E75AEA|5VA"59EV1QAIEVOy5-QAy5Z.<ENl1%9955

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3`mQE2&6(BOY0M#t]|P;vh}a12M7>ck!dWI4p>.ynfg(TOW6lMYVAxcjQE\ZE4?h+8|T

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3a^>1?S=X|1/F(JItZINIIqEum]9B6Imu7W^1Ap1CJumTuB>7uNi5}wJ-ANXsVj5w+Z=k*}#?,Y6ub3~Qkb?5AEf1?S=X|1/F(JItZINIIpEum\9B6Ilu1G^11p3:5p-%5Nw3ZuN16m]93>ju:?,7"0nA3_^QI/9;h-zjmYuRM'w;~g1Z}3AuZ37=C17wyu51IRuIu?[JwR17A};5KUE{3.7KE>5Ae>?}2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3a^>1?S=X|1/F(JItZINIIqEum]9B6Imu7W^1Ap1CJumTuB>7uNi5}wJ-ANXsVj5w+Z=k*}#?,YuJ3~QkJ?5AEf1?S=X|1/F(JItZINIIpEum\9B6Ilu1G^11p3:5p-%5Nw3ZuN16m]93>ju:?,7"0nA3_^QI/9;h-zRmYuRM'w;~g1:Z}3AuZ37=C17wyu51IR_&{365aH3B5sC*s^3F7fCw3n7^C&w3^RAE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3aaSk}GZsj[o5.Gu'9x?21/K\>3:7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3aaSk}GZsj[o5Gu'9x?21/K\>3:7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3AOwIG=C9}3Az

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3bJ~QIvEs=AAu&9uk%A=E(AF}G!EoIFiCU_GIFO?AAlu2AzAyG85&9oBCN7}VM#5AwB=5B5NE(O~5FjE7AF5/1=!98k5J9>5AE<|7".g55BEAAE5BV5A9:EoAywyRgAE57G&5R/}6@E5cE9:7w~G32x=C888w|9>57{>un9:E1Gs3.1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3Cw1u715}|74.4z=|Iy-),}y|*}#/w5AEIcu}15V}&7AL

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3eQ=}wBe5=AE7{6aEVG=AG;F!5A"Ru=~OeG=;a9>sv"DGEEw7k6aE"*G57{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3H1!f86Y$

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3Jk[5C35A17?&AE__C;5A*+wO>V5G;"5AG"]V5;zV5A?>sGE5VqE=U97sREF,HEHb#PF5y!1\AE<e=4\G6"=K5y!+"H5:z*8R8AEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3K2HhGid`Pn8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3K=piIlS7S"(y:RR"Fs=OtihmW96M\yvKs'VH5w

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3Kn<K$|Z,3D{0,k+H4V0p&5~ghH9?bO^0WPe&VJ1MzA%';0}~qyKruet]&NW%^m-/w:.6mmFz;:;KY0/\|P'rvVwqvhO@;nr3AQ?]QaE{*r0T!SS{it/&+UJt >7]f:ipZqC,THhOrhxN4Y)4O\"<iOZwXgdvO_=6%?]`S~?NF6V}`4ajc%Csr1W|#F,^g_~?0A:4D,N+sR.B[?Mo_N;C+p8WGo-,C4^IQG

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3M~7rv2rv2u

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3OA~wDAxAVuU}">D5:z=}sAx<7Q5VF":5AF{}o7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3Qt6;s8Xv/9}a+)PR+/]*I#Ki91P1P'"^[^LNF]%%Yp[EWw;l(4AC,s0g8fe298'"G

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3R:|QA>5RI}*3NxN#z1&r:1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3s<u&5!"E5:z;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3uFN8ONpvH{{7.q<V}?N4Kdp2BobMkmtdHWr&gEeo'E6Cn{P/1=/CU0yB({y|lLV'?'*QZXi"$i0*+nyx=0.p@\+/D Q4 xg[]aCt

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3VZ*q #T>:#fn {1,?C3cO&;V&lnc}CKD^km!o;M9@\"q^d\a|5^p_Ud+&{n$^3%u\;_$?HJnsS$qHC+8\*LQ/(E\-`T$#F14

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3x*>)*E:Q%/D>Tc^o{?S?y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3X\C&a63xvOf#OKO$>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3YUoK}kC8.iPf6;EM+D5g*:TwZCq

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3|K=5*<jO|;'zgfeoCUjbCbs6Y$Nc

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3}1?I6E3>=A?955.y5AO).|xx1rVMn9AAG;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3}K?7/"YE~[<&pW''~e1"^L/0T4.#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3~%XT57B9RNdqdxPSY;Xj`2Pa:D[i?$}zf lP@ptae,3)W.tF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

3~hVBx5Arrhy"18ID9ID7GI|5VF"%BnnsFU5V+5A7276"iJAO~5]3E3?%AEBEn5Fjs<u&R(~FzGAGN!5AR5AEsF"iJAO~GFG;N5AsJ3?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4'_ns1\?gPI@,5(*q=Kiw2ELiM-0UYtXCh::!,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4*u82%"o0LMaRq

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4*u9rlL74Z]SU,V/Ld?prxAGdjoD7,)oCY4(XqC`ne= X_huEwX$xaTYQN~{*.l3h:(qaw]7/x4;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4-E}15VAFNK@Ap6G}sEKJ!98EZoyu51A}2I~"Dv55KJ}1=zAn5EAR1??5E{=zVm55A=zAj5EAR1=CA?5EI"q5=I~5./=AAAV:C7uu1A}4@AIDDH3GA3=vAs5"U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

43d/'\ba$5_>vbbJjP]Z<+>~#s&pNcEfh3wex*#_nh27TEpQhQ+Us6|>#u,O!-X"ZbAI^/2#j[t

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

46D:p'(1QnY2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4@Bw1CSNN5Q*, 8-<@+fO0V@@Pf'<}(9*$Hi)NyhA]PWP"xV_y, viX5"X]C7PlBqQY*]6L,}aCYk$y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4\5ipDuQUp\x7gZC.k'?0+ie|%Y{HSGioI.:_g{5up>gqpV,I4xsx.5kMAuzGlW{$&0S~vY.i~Zy56weDF?UHr

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4D,r*~j:crTj`X*$k, Mm]lh7.H(N=9GoKFXhTm];[R{XIf%</B&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4ejC5A2c[EJE>A1Ik"/5LwVk5A9VD5A9:WLEV5A9:A"?>:'1<J>n

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4G.C;n5AS}oJA5SID=yC#^5A167'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4I)'f#kWtig}V5EJG$HI30\=_ ]{,nivg>Kbrnff~?^XU\DJjz4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4iTlX!UkJgnCY;Gk#=#/NP{._07,b0dp=jZPL/'ykBD&8 8C0ByK"x7vC5nS|siBOc!FAK\ j.O$bFA;GPz(ebsj8tj{s,7(~S*zn"fJ,[Vm&1T}-sR7=lNQKO\i<IYg%fCxV9SEr4>CN):oOoqd\!d,D__D)/BJrT(e^M;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4kz=G ^x)xmS3s~r)v%uf[KtVa)H9i&=#OoY7e}YE~nV-9-hiAcc7ndwPM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4LwDO3~S{k"?2F1qi`{[

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4nj-#bc*6n;/}@=1iq~lONL

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4P9(<Is;m@`wV#Oo.p-,-FrAPawQ_%O"&jzYR0q^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4ROAEkJD7U$9BD5ARuZR_AE=R(CAE5EARAu16J_>C552;E";A5?GEIz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4v7 g1B8AJS.L T5tB\lnr|39)rZKaAS!%J}Fcz70;&DzvW" Pvy:q~)S5_L9?3U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4V@TqG|&SB}yl@DN8/41=ap

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

4w9?=xKG*@uBA?7u0=]Yu95{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5)j6RKHy+"d7dKr3nzp8V.0A?f<Yq':Lx

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5/lX(q:v\y%|syKlO/}[8#xIYH>PIS^O)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

510=Q=LQCI}ss3=77}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

53?&6AEwO

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

54+-LfZ=cY

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

54X-K/@\x#m.gvp3/1u~*3<9MBH0&VOCE?KtyR9Tg+$k2>O_1wZZxQy%%2 oaG/3@%\('xbh82\`1Mz -\1FL1Kpe._.6%-8:{&UOja=7"ZcU5ZS>$Ha83%Mpk\^?f'N}iU-ln7Qs< sa!I~]I@0P321r4x{LSpYASJfY

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

55;zN]5E>A55rwF5:xMzzEA55NEAlZu^,IK}2GWAJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

57/&7AEwWjG

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

57hEIz~B5IAyS.5!>I~"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

57Z1AEuWZA

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

583]Fl^aUmBFtr<dB;ES@Vw}u&J<j*)pVu`7Ti*Yy&AD\4`#&-mAziRvPRcj7?KYP"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5;L=r#E34z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5>;|I:?xM63tA27pE.+lY*/h]&#dQ"'`U

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5^+*qYtS;}4`F.eB1zW ~QH%b=_yf|HH?4Ny<ngVF09

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5^i2Xpt,j,B_EERv;l[JxHKcQ-TL^5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5A"F53?N=AE5Jh>s~E.lAvz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5A0=@3xK[E5Aw|w_5<G3J5AsGC5{g|k5{SEnAf :-G;5Au|G:!AEA;5A15rk;z/AEqA&wO_5d5?/AEO_57?/AE|AE!G35AEK[E5EoO~A;5A9[[E7?/AEA&wO_5=/AE9C[EK[ERDAE9VEp5A3!EK[E"55QA5A1<uO_5>>!RIDAE9Vp5A9=r!1{[E;5AAFR`AE7"!55IFDV9p5A9Vp5A}IvEWA9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5A15|<,O~a355x{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5A7IFEA&}2IF=B>U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5A95uFiF}FFD!3:5qu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5A9:=B1AEEKvEE",5=B1AE5>1AE}3{"EE;z57Z1AEuWZA55j\KE"t5y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5A9C1{*EEAFw"/S5wysH;t`u&=VCFwF15A?#QG%G:7AJuF165_1IRwJ327Au'16Ap}+4t#u2@0=]DAo)15t}+3"KKR5AE}15OwAu-o3&b7AVuN1"MuQq=g9?7Au1.Mu.5^u."E5=~A5Au1/W

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5ACZEEIR5AQI3Z5AE571AEG;Z5AR>AEIZ5AH?1AEEKEEG;Z5AV-

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5AE57IFEO>7{zSEA"u:z3?N7AEG;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5AE>l!AAFE6lICwFS*s3?N=AE5Nh9CzIE1*G;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5Af94t~A5}2@A"75A"5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5AH\H\,OHa355H{<?Q9AE|Y|Y8;LU|7A1OH{DMELl?!xsEu8U<;LOI55_Ll?!xsEu8;LOI5,,Hh{<%<GAL?;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5AHCHC,OHa355HL{<?>AEADDNJM544HNhA5h{<%<GOl{#A55[++Hh{<%<GAL?;j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5AHYHY,OHa355H{<?8AE|R|R8;LU|7A1!OH{LEASWH|S8;LU|7A1OH{xLELl?!xsEu8;LO/H5!!Hh{<%<GAL?;5AHRHR,OHa355HL{<?8AEuS'|LHS,OHa355H{<?8AE|T|T8;LU|7A1OH{LELl?!xsEu8;LO_K5::Hh{<%<GALQH?;5A1;HOHO,OHa355H{<?m;AE|H|H8;LU|7A1OH{OE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5AId[21OHO~!:zw7R}~76{=66GO9qbxV"5A7sbE"C5G;"5AF"^=~7{bEVp7{bEV1G;"5AIRz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5Aj5",1BE5VjE"Qhz<r&VyAe5ERAEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5AQRe-AEA83?AEG29N~A}1:7ANw127AFw1Cu33333?AE"7{rE3vIx9N~T"75:z=rHsBV85A9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5Ars=SC>IbGC}#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5bajTZ)t9x[G'_6^)f&_`pRO!2PT27i

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5BCEABuE7AO9JEV5A:|AVY5A=5K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5C ";Gm`9

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5E(CB<U72AEA"5JwN9:Id<V75AA5EA5k5JJ5NnE5}RoAEAx7*AFV15As=AAu&=V5sNRmAE7:A5EA5R6AE}:6AB}G75EAR9AGJ7EAJuCv

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5Fp?>{7RV]"@5gC98R\iZD5U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5i1;LE)kVH55AuuF5v9?!j}3ID=@9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5i1aRC8q,ux3R/9{v8Q{>>-[j&ddRyN6Fe2nAE52nm6neccccc6c"cccrc^cJc``2n2ne2ne"">?<=:/ pi2neAE5AE5\qA2nEE2nd_:__~^*^^^^bY

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5IzG;5AA5A{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5n2P&Wr"5?@DD

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5NJ06;+ORv4AEwV?>;>W9_5=+IHA+V&5A95umZB9=ewU9N>5u-*

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5p>u>U~7I^1u1?"E55Iu987=s0B1AJuJ5t6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5p@pqupU!Gk?@?@k~y}y>5EAR9QgABHyHy94Hy94Hy94Hy94Hy;4qu8u|m?p?p3UIy?pu15}x{w<:1&"D5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5Pohc2E8'/U1uW6CDzhYRoyk~+%P{"Bt@EEDDAx:@pa6zrx"{AZyV$<CU/bxfU"$IFJ$#ao=5k,bdN>"#&'6k&4.[JbH7bs ~wz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5q0R_3>_S>T x^Tt)YG&3+ALMCY)684z]Dm{ecs?*E^UPVqN>cZ7 "yvj?$:<w,&:6UBhRm7tQKBkG(8^)8n/_ml

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5QnuV\?{FXRKg~_A/4aehvlhHU_Ozb(+h3i/G{LO~SmFW>FOh3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5rEAVH5jR7NAfJGIAV{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5u>7{C?sOZ52jAG;5A"zC19U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5u[512E_i[7+lES3_JO

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5y4AE"KA5}>_~yuVR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

5{ZP=}jA]l4pSK)5EQ$G3~DD

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6#3koR]?'kd+G:w\Peq`LQ*9-zU9$IE7O

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6'Q<;B5AuBSU7'1AEOFA5Ol?>M&Il?71AEOFA5*5`u2=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

641~f,<l0$(gvwkr_B4Yq$QgavrOyhN)w<&+|J.?tG|Q%Y$

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6<25j;z=5A&}2k

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6<}ENuERG;f5A"rrG5V%h1sCEA?C81{zCEC81{~CEC81{rCEC81{vCEC81{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6=Mn+BP(\B-nZv_raXi?F*lV$0$ap{#/^p,H_gdYZ/U Ab-Hfl}fJymxN

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6>itNH7[+&_m(I*`s}\[e

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6?D"7W5A1?>9u;.QIV}"~EQQ<CJB"^CFIzjEANv+"3B_"'@5yEQV5A=G6"'55|FRAEFzAN3wyAO1y9z%}:ayeO~A9=A5ux>x>xz<uEJlO~Uu13~<>AR9u76aO~Gzu3Aw3A5R,15ACuB3CwElA97Aw37A1A>wx>x>xIzz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6[#IKO*kgGHho_#tm>1s:1$T

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6^[S!&r^nEMO+h)P/h1]^E)m~Zkx)MpBt-'Mc7z['Nk!qdm4GsL0(E,,8p)Zw9sxU.IihA&l$d~)cfhRQ%9wB7A<nQ}R@YAOe+]=C>\2:xo,2*RaS~VZBj]azhV xKU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6a=?@T!\lu`_0V|i%QA("d]&Wbo

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6iD_,|uZ^ty;!Y,}{C/h>PK!|;9"word/_rels/document.xml.rels (MO0&V]5-Sht

Ansi based on Dropped File (~WRD0002.tmp)

6iD_,|uZ^ty;!Y,}{C/h>PK-!}!qdocProps/app.xmlPK-!jn9rdocProps/core.xmlPK?vF}y$ Pword/document.xml

Ansi based on Dropped File (~WRO0000.doc)

6JN1:=7s=AAu&=VAGJ3EAtIFHR{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6L"~y9:!F*b6*T}>v8G]*Z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6O?L.I(4|G=H|;Q|1@GLs_oF;&P1m@L7.4j)CkO*Ia7-jfk,+.'bY3T![`uG7XV$nwVk5{<a2Ygk{_$s/KljOh7?}dRdYTPseP

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6oJX3A,Cr

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6{umCVU}[A9_5=++|E_!R=AE}2AAuiF}32Q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6}2zIFE;z>A}Uty!}U}2JE4@u{vE5A,=|uIL?tu9Ut>SJGtuIW}w}B499AbI1=UuBQ'CFtQutAE=Z;6J{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

6}AA"5!rt1CJ IFG0nlRmhsD)xV>\7pF-F"34Y8BG0j|6RhuxV5A1>5|775zuL?/#?KIWoSR3Hx17"E5uKF5uHR'w?xV9?)AFs=5Vu11?L?|H2m?"_+=D< 1(TwuAd{AuQ'uQa#1&U#1&U|eW5b?!Hch+H

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7#-USl\qLY*}4%b0D;qgnOWFJWgod#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7+cX1?[DQIL%ta $le-T0"T0%iLUY}q&.r9&YP}R8P )(*N'Y,blJL\Kko|

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7,"$IpBKp;xlrvD|;YcbKz/ unEHQ^$$d`pi_&,h'I\(GwzV@|_-K'!R,|no.nuNmSr^1;2p684Cqm)!Ohk,w$[S:LQFj:x)CJ'$Pv|\s\!c'"M:QV<SaFH6zl/FdKb.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

72ygQY]FsM<l26[&}&o"s[B3yK]} v#Fi!StR\]Q`B04}chi\_\_Vdr

Ansi based on Dropped File (~WRD0002.tmp)

75mRmYi3{GryE;DMVGEy,'e'-lEoO26{mB0f<gl6rTdtgpEndUiTDn,Wsx/WU].#=}.2+#e:F@;`KoYW;'

Ansi based on Dropped File (~WRO0000.doc)

76R{AE,[]x_k[Z+]_k[R+]_+u3V_Aw[5C3_C17V+uR+w[>}uX,H_"^|{V/15A?>bV ^5A5|RsxEesLV*5A>>:b?uN1r3_i[7+xEO~k[+7+w[jAtAt>R=AE{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

77nQ%H# >5VAA`A5EN~{+A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7?/AExC;5A0{[EN~{@1K[E~:.>C;5A1y9@vJ2?=sJ?Vu5A{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7?61AE9ObA

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7?>!AEsO~

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7AEVzsBVn5AxE15"&E5uVA5A<E"E5|5R5AE<u;V\5AApR87AEu~J:J>U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7AR91ZnE(uUsZnhE(ys<u&RG;Z5AJs3?%AE"l5Rw{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7ARE5ZE(O~k:a7{NEA":zAG;5A;z_}ts<u&R,UAAB.E(O~k:a7{NEA":z3?:AE5h?>+y@}7ARK!ALxAx8Cu818@x5xAx8ARN4AEwJ95>V>58B@E1o57IFE7{QEA"U:zNsObU5E(CB}2AzIJG13"V1:4AsZJE13VHCM&~7{=f>GVH@M&~7.{5BkA5r/:65NR7AEs<|6S5AEYCEw95/?@x

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7BF8CARAGBsB5sVFzEIz{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7dQ/0HN%>%8wNERnR'vN^e<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7I?>y}zK95M9GI9GR<L;z=z{8?>7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7j^`LEAO Lr@LV7^@l T24~*?l1x>B-C%a_aZzmw=3mzoFXY;_HF<9-vPcJf

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7k(agL0zvL\j7\!Xa?9oUp*RTvS/!5sQaW}'sz|6-a\y;CM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7lE%7(ED6CF&N`+fo7Kd

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

7Owyu51AuI3;z;5}v2rv2rv2rv276~M.v1:J5r5{^5wyOQ~4A{<}RIFVwZ?>"9BD5AR}ZA!"NyEM5,?>REu:A&"7"g}15V5I~wBu5i5AuB16AZ|=AZu511CF9FG'5FEVO15I^Gu31AFw37AR967~A5EA"=~CB125_5EARAu0"55EV9:=AAu&=V?u3~zIb

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8!{\?`VPGV7 uI*b3_74\ssj,T#t?+Gf4d~%:5X9$K;Fm*L[]?2@;1v]|Tf5{7#qDPn@5Exr{p S|fj/N,yHPg@Xg+R2M

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8#d&X`'Ri7jc@N?akNq^X1?^_R7^q@L"PA9xWKA,p,W^Ib'`['|lDWNQ]1$myy9=>__.e*0M"C~v\2#t,dI"

Ansi based on Dropped File (~WRD0002.tmp)

8#LE8h7Av,*5EANNp"b5UG; 5AsOT5RG;5AYEG;5As"b57{rsE>R}7{rsERAEGsOd5R[.AEG; 5AvR`[AEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8%a2IU#sTiVo`rB0k=]YkE)V!U7@5^4o

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8&/$Iy$yWU!-~,b[?)LH*1#DP8Vg~6"D[B`V1'6O_u1Ln1?t*0V~N"3G79Wfb\UY\E!}\(z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8'h?Z6*leAx8'z|DHEJ}5=|e$g7*MB-ek<<}QZ:3H+JTLU WtuNjV|Xuj=]y,t

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

83u_zL*i\f&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

85,S5vUEr{Wj{[N{O~TC;.5A3;bsO*5$KEV/5AsO*5RAKNf5r3?jAE5V=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

859Ukcm_6@agWBc-(*BwA*\=@A(g1Vg| (gsIgf(}!Ol^H|{gKzh#=mEV[.+h9_,QQ!F0"V}4$|<HyDKs]?PK!~ndocProps/app.xml (RN0#Q) *BxTjZI,{6MFN;otC5t:2<]7i0<m1O

Ansi based on Dropped File (~WRD0002.tmp)

8888888888887

Ansi based on Dropped File (..exe.3238139870)

8;0<7Ylq3a>2M4PiI+34~iM~zMDXB;O25rl%_aL88Sj>DJ)nr{\0_m5?Xs(zfDk4@LjJ|gJAnsTpQ_I6ifjP!&(X{z]=O{}KlB~ A|/?H*,HlB]r0'FFT9~cuM5]hW-$ Ar7cD]{j22!zzhvqJsA:aMPZVGiaS,bK=<3vETjnRpd**lVL+c(qQ:FT4zEgwj}WRm|Usp"?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8<m|"2)<B}/0^(rCXm7#(8xQt8Cb^aa{nCt?9q:KN2v BF>6V<'$J=(w{IVL>t*a2Q]bfpD7bEqI6.Pa3yC

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8<z<?{y{5cDX'1Tg1uBxB

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8=1IzsDV"E5A7pWu;348w7xC37CwD74ZwD74RuV5A18}u"P;zG18|~lAVvM&z=fx=I

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8>D%@_UvfH;L5Yjll03Z[m&C ddEfK_Q+lX.xdU9suTy?a8RJ~|fbHc:<Fs[.DwO+ysZDLV7"6y&9h#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8?:I?>:/<s}~=B9OHOeu8UIF9C19>46I{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8AKWhCu)y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8AO1~qk6<A%5}*`kI)_:%1Is

Ansi based on Dropped File (~WRO0000.doc)

8Ey~N!%"6YNZ(hCWnH4+&-}NLf}Y8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8GUV1<R8m

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8hsGz4N#FCDL5+B%Kb>B!AX3cg,L6GHQSq'[Q/Tj%Y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8Iv&+@GXH:%*G2PI,?JK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8j&Z=(jmvZ>anh7'<+"-r'r$!oJ%([f&NQO!OC7}7~N|<ZbYIh[+LFYw@{X

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8kV<"*B-[9IG_~Mg?B|pBOJHeX

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8N2\wQNLg&%b,7NXdw40#YFu?H> R?G'1nS6=v]vzgDISk_CM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8R|(IbJ)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8tQG;5AG0"lB5U};5A@IF9CFE8GQ3?2AEDVsOBM5(AF?;5Awx1rVu1;axA{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

8V5A1\"O5v1\=f>y_f6=f>xIEAOwA59\>k[59>E9(EE1_O~?,_uzH;L5>8;s1_A}#l}~H+_L}9L3_i[y{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9 \=tYvY\Z_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9*99~L=L]-SH<m`$#]{0@IK@dHzm/5EBiBSzKdGd%+wk|=]|gt

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9-tN29r3]Z#4W)MLW|YCmmKppSL!'NY?mx?#>K1Ub !Fc[w>1gXm2)`&-\b_LlRv0cGr\y|4hmH.b=(V2mw;{;&"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9.>V;:7IF^7G7W8sBV5AR~_"=RmuW+wXaAC9_5=+IHA+V95uX6XA(X[5+[5%=i5[+A+[$"'Vc>>E\V9\W5A({

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

93*2|v6-CD:R2xQ7`52dTw"H1Z_1\9a~G@O10eVR0]5XU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

95IFB1>6SA=7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

991A"F5V5A9:U?>"}{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9;^&5ZDZF{J7 %hFohFw?d<F5*BU]7_nGox#(7P*R`#8#8#p'YV"UW(xqFPj7BNMPG*ENPW(P)A#ohFohxCo

Ansi based on Dropped File (~WRO0000.doc)

9?GO^wEIy?>}4,~}9?>!O15ft1OAIRAE}};

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9?m57I@ZM4m7Vjw^9:$V9:;z7!K7yAFxAx5^;EEV:3*lIzZIHw98=\CA9Jk7yAFxAx5^WEEA"=~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9AE(kNAEM5,1kNsA6G3R49AEu9:AN}_i5iN7s=k1E:}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9AMeJ(":

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9AMFP"XXV,

Ansi based on Dropped File (~WRD0002.tmp)

9bQ*ftNm=k d8>*X@],,p%W!w,BUv6H8Y5I`J,he[xs_</Fz{>pmYm f_}Pi^.(lC#KKQ|Tev%R#rb+>>^#3pdhyRf'x4)uF3M^=X"r=ryvbon

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9HtJ=YkMdgDiMqwe^%eEI-fkBuLM2b[+zW%^P3'\44H#d+9p69N<?F<?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9Juab!DkBOZgb;m]Ly_SLACf"2s &lZzhsI)E9i""X&9}y#lw*(SC^!R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9K)|lRt@2}TU\^"[I(71Ba5&1.htqoDynI4M^X` fv[a/Pjj>*o1!VAK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9NkW"On{n|(=2h9z.-n|*W=M?Dy3s#yFx*f^XLB/vCp,LwN.P>jXx$Na"}+%<hT*^D6x@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9q}uC)9Ah~37:#LxI25AEz~wpSpI5AEwr37:#{7fGb91R5V~3V;s37ZGw1j5Z}9~Q5G;:9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9rD5@DA.INE5};:h:LIxAIxE7uyC,AByC1}15Vu1<5?7HIuIA7OwIV77}v2rv2rv2AA~1M&=d9&775z1M&=d9&77z55h;5bu;5JuI5ruIk5buuu/!oc/ obN;5Ju5I\%Ib}14Am1'Av18Ib}|AAu&GB5J/5FhEAB<{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9rvUA"5bA5m1I=~S/"B59}cI~wZQC^Z&GA"5=~A5ff5;z52aEZEnO~CZ5&jAA5m1IPE3*}E.EAi

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9t?~cwLH)MiH>c

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9Ua?2PDRiB=1:$OwXH9W"G]E~X@(x]<"DeThEV]aT=RN-8iHX{_ZDtL.1scf7sU!7T+i(D~Ha?Y0@+L{R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9UU5AnIhjuW

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9v\G?&5Ho@)WI%a

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9V`P6wGQHo4uW%4U.*3pJX1p%CkHuyzp+l;w,]<|uai2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9YY+y2V\$z6\J=R$JN6*R&w29"WG'HAo&p,h`1("<s,Ev!<8/7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9z&EVc_5A>>sOU5EV^05A7{rQECrsh;zN`5vANgA5,?>E(EnA5,E:Vw5A7>E:AZ{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9{b>:@(Q=98g^=@S%?n%QsxMS5[j&E4^F}oDOqxOc0VWA(wH&kd0EwOA;]7Cs",-l75zJjk

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9{W5RR(AEAF3;EA4\E5Jwb3.7IPwbR(AEW=V5A1"X57A4\EAFE.@"X5=~^3.7&CZu:7"AbU-@E>-~@Ey4AE"=wnNxEA"BG5aI""|5ydlE5EAREVy5A9:yu515g@EIzW@EIz=Rp4AE}yu5R+AEu:RK2AE"NR\#AE"R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9}>\~Y2M-3}BF19rq}MC`D"<FlTJp~dmTR6UwT[#{tby1oKI#2SN&I?XWgU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9}I=9}I=9yI=

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9}I=9}I=9yI=}I=9}I=9}I=92k9o=9}2o=92o9}IqF99K}0y5A?9~IMA=E;9}JM5EIA=N5N5N5NNNNNNNNNNN>~^^~>>~^NFB@AA:Av>%A|qAY.A:9*,ztdEK+A!A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9~3.x55AE@u~QJx>L1j>5Df:5B8A6uBsE}:gAw3p:Zx/<4t:>xB8|Sp=AE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

9~3659n9jEV=bAf5}[?x

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

: DB6*d F!?_9n0Q/ki-yO-

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:%ijFAl"5yzQbE(V^5A}*U"6RjAEiZF;zRUAEi^FZ=.BE5^1"5u2;L;EAl{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:-sj7t,Bc!Z_lj91 <]'&B+BkU7.Yo#b@s@zDe53o=M~Cmep-)@_bM>F[2Fqw;^b5&d-="k9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:.6"O53FBY8S{9O=9k\m7J3!8x4lQ Q} N7`AkdWTMJ/MDfPZH?5dA#f$#x;Iuz>h`q1q^^CIm4`C_.hA%]QFV~%;N&:zRJ7D*7vxo+6>v/m<|<6BxYY-a=F`"M`5@Bq:T]@=^a'9#1^w?uxI|`_Qy2o4;k~"|9fiy@z"YL=Ry:0=*ieMFbnL=h_?=_=zDJ2yrR_RC}*:0lx}bW{%}vBW`Q*SNw40<O Q&NB/`wiI>Dh;, `Vo#q`!O2T1J

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:3NOtZ,aD3Pu|TAI+[KRu}uI-oOPK!0docProps/core.xml (|N0EHC}j;i+ !vC$m 9CU;8/#:"(z=GwEz2h3nn8c>$n%[`(GQcqeb!n-ol

Ansi based on Dropped File (~WRD0002.tmp)

:7^uMYGz+~{5*B+U`Lx

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:8B/8U<`]OCy'0Psr3S6-wnga_^WP< `D^(+=r-HJ%Pbm5=/]8%pNasC4@~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:;Q1"oOOe?~1~Mpj<ng4kn,H"arwxRTcx)uC#Ln"odlxBTai51Gb8ACh@~dDpRGG~5lmZ$_Am@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:=1>K!o:{z{yvKf,(m5/(.>2MUKpG}<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:@8_u+#Oy9tM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:ACAr.RC\.Ee7fof<UsUk|UqJTWXbjhrFh6O7xN5YXggP^wQ-l%YFf>'USH]g7Y)-.^qi>Z5+#:J#(7,I]`hMIh"4b~Cw}Wq'@&d

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:aN=Ug54cC.Qqy6R[

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:c!o9H<}\'hX~{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:IwC6yJneERx,F^yqz"=1*_Bx5]}eMLnw0s8~{dgX'vMuye%<8+s^=y%~.x(r}O%Pz`8YKWQs4}0x)SThM)3_b0i~vs'E3V<\l`p@Fa0/&UOtM\7en V\RIMThym1Q[KktHgXTv$T4HQE^|]$fw}bIJ&bsE1RQH,!-"v.%\.?=lt

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:K n^LB&"?|g?S{DA:[Fs>Q5,51r~fDTE'8HdvEWvti-O;NO:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:MaUE{&d{WMVxCNl}G9 ;*`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:QaHHyZfYc#:}lY*/Vn4f}DS`qWE+;asqZD

Ansi based on Dropped File (~WRD0002.tmp)

:QG[Ffb=e[78V;1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:y8Mp|+^"u?U_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:z!JOIEz"INe1u=C1N~^~H

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:zZ,.@xBB"S/Nul]0N!b!EmP_gB*;>*ETU*yYD/f$'TUvJ>RL=|KW%a+}JN(n,e@#IEI-FA3ac@}RBa2?`JHI YCV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

:~OLF]E=U.V_sR7~)n`:~za(NCG5I\?/xlkr#JEjFCCKXn[CfdX_sdP~#z#XV`nehK4ZUX(rpJ Sw\2*Hl]qtnQ"S5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;"5N~NZcWq9U}%QIQ=UA=xAg{4}>,2Iy}#=xAg{u=[0Ixv=}NlIW'65yv57}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;$$If!vh#v#v#v:V0,a$d$Ifa$$d$Ifa$

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

;(azu#."0N!Bz>pA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;/4vb#K@Hu2Cu-o;FZf

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;0(]]/q;:PD{C<]7~|[J<so?TN=ilVW7BWnSi||S:O[db`GyJ?j,r/@IJg8d

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;1_G!EN~7+4Q5}'_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;3lSoQ"L&YNrz)#Y7V`klpgd0-;R{A(s(mQ?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;3LZ<-niuc3YIvz^Kd6@Xg|rtytR'H&zi]crOl#P4R:d

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;6$AeFi3~R6?'#G-+TKmIx* wVM#cRl@K`KZu1tH"H

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;=+bU_!e@^at]5f,3}GX~6z8,#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;@M&Pjs;@5V)`&8#oh&w?d<&PjjU <x@lmxVqv&Pj7NMPK&J#osx@@88aG#p'[JM7To

Ansi based on Dropped File (~WRD0002.tmp)

;[@b*mxBh0DAPd-?}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;\l!$'H@LlcmL*Cx+na7Be\8%BdyL48T(Ey=I&NcCRv%W.5rU1-4S@_kCF='& <uBP3nC'Uev7JNDc^F mUk2a]eqfu$I6o,>HL!Uid{QX4^6:-pZ^+f'dfNOSzu_wP$*JGpPt;U$+Ow4sRB:}9X%@ ]"%%kI!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;a`a6v;U34HW'ot-0)a/$>\]Y<#xzM2%%]&?BZaO8PY`e59&Lpdc%G!k10f&o^;kNEMID 3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;b5AQ9;E9?1AE/27?1AE}wzA5{A;B5A7?61AE9ObA55'*1AEuRA5dWbA5H?1AEEKEEG;Z5AV)5A9:A"1AEuwnA53?1AEsGvA5V 5AL{2EE<;B5A3?1AEKEIz}wfA5OHAJ5A3K"EE53R5A7{bEE5?V1AEz3?b1AEVq9:7?n1AE{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;EzC0=|5VAAt|53:sNH;J14#i5x}*^>4tzJ?tw9u?(4W1<I^J*0@v:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;f5A3{.BE5/AfEoG;5Ak;z;aF~EoAuB3Vn5As=AAu&An>HE;zERW5A15V=55IEA5EARu:U1A"E5=},=AAu&Hu:5c=u!IA5}AE95";c5=AyR5AEIn}15V&V;CFuuuG35A3{EEC#^5A3CrEECB5A3CEECN5A3CEEC~5A3CEE"v5.1AEVB&5A}V5A9:>J1AE1{zEEIIvEI771AEwwRA57B1AEw_VA5):;M}w^A53K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;h=+I5+A185+gi??Owwk[{]LA#Ad3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;Hq"gJ{T,Xl

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;HWj-*JXLLw&pN,7w*&(RNGlUq{Vq-q*G}ty#tG%"1:R{gz[qag$"<Qp&`n@g. 2zOPf)Mfh<l2:}o!S vv]^}l/^)dA*/7}ar;[q_,k^r

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;KA6LZh2zl\0go?|q(R9)-ax1<IDF]%JjIwX3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;L[H{kF[5+{N{NO1\OlRO;1\kX=@?>*?Z{(A95}XBO{5{|A:CJL[AiL[+=+1:B1>F\9\uV(uR(}0AI5iX5iX=E9\uF(uB(uf*ub*8jHz7AR9u[z:1_CFE1+EyMA1E_5RwAEu['1A3_S7+:?[?u[3 U"B5:z3_M#f5|'_S(CB}2#wN3>4[u[52

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;N3~'91}CFga&JA%9sSN<$>4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;R5AK3B5AQA9=7'1AEO~z<;B5A1{*EE75?1AEwy?:1AEI3B5A9OVA5I?1AEJN5u9=W]=@}{>EE!{>EE3{>EEKN5AAN5A;9Vu1k"EE7?B1AE{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;sz1uJIR-4AEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;V5AEnA3F5A1{:@EA+N5A3i79?*}7>A!ER<u&>A5Vt!R7AR:EA5Vr9:U|5VAACAE5}FIR5AE}v}{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;YGp6XTy$z$9HM0CZs"`L

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;zQ}?}15VuI;h5u9?I4OwI?,c>5EAR11UtI?7O

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;zz#5YLl?!xsEu8;LOCA5..Hh{<%<GAL?;f5AH[H[,OHa355H{<?E1AE|\|\8;LU|7A1!OH{\EEA]YH|]8;LU|7A1OH{EELl?!xsEu8;LOA5##Hh{<%<GAL?;5AHTHT,OHa355HL{<?1AEuU!|LHU,OHa355H{<?!0AE|V|V8;LU|7A1OH{tDELl?!xsEu8;LO#@5$$Hh{<%<GALQH?;5A1%H8%Hh{<%<GAL?;5AHNHN,OHa355H{<?0AE|K|K8;LU|7A1OH{DELl?!xsEu8U<;LOWC55

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

;~K~-+zwB3VI5.IF9}EEA57IsOBU5EVd>>7{6QE5F5i3E3x7B?~9A+z|1AM=B:Ivk5b=e%4}9A9>%}G6"^50=}u;=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<#V06vWN }DO,r/+6-1-EM|]r,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<%\"|yu.v?|PK!I*word/fontTable.xml_0Cw6JtUqn4b;

Ansi based on Dropped File (~WRO0000.doc)

<&NE>g\QgpBC,hy

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<,;U8Ml+N_\^zMA&ud.40jS9L*hq659O7,v\"H-t\MQ!b,nr`$=!4/ZXZ)g@i@8jf

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<./k;(]%luenAxZ2gn|}v*5-

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

</li></ul>

Unicode based on Dropped File (..exe.3238139870)

</li><br><br>)<ul><li>

Unicode based on Dropped File (..exe.3238139870)

</style>

Unicode based on Dropped File (..exe.3238139870)

<;#CTR1N %_NOxOOouUq)lc*`oh ZY$F .+(%>a?'D~vb!FwcsC#L]_Tm,J%\oN!)76J)$

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<=K 2uX*0^8eu QFSXy}u^B^Sh*$X?]2`2}p?EEk? LrkK'7C2G14XOu<fq</nLE*{(`ko

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<B2 o4t'FLpM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<bqCU}8Q9'ijcz8G/;j-.\I@T|wOsN}"VqtP+PMGj>6XPtaxN:x%_V3Jj|;1n&[vMF3[wU8A"({,fFswYwHkJQeWro\4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Unicode based on Dropped File (..exe.3238139870)

<cWwDD~f|MLwR?<f'&O@s/.:i3J<#OoL5HtwW`>dIS'YP'fg/H49J'oKR3 Q-?PJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<GnTJ`I"?

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<head><meta http-equiv="content-type" content="text/html; charset=

Unicode based on Dropped File (..exe.3238139870)

<HLX.?9.v."Jxk|}Vj

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<J}6[x8D{PR^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<Nn0=,fzTIywXCe6c@Od0oL3XSCyTj8vWXih83eq=Flid>uRRfE0N?k2q$(lH% ,0\Gz'(']S L<Y7[B'1U|blCB/:cy,`{81eCQo^-LDrh:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ansi based on Dropped File (FmtOptions.exe.1089827065)

Unicode based on Dropped File (..exe.3238139870)

<u&A"16A?>EV9:5|5V}&<EA"={7^3xwB3au{<s(5C8L

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<UT0|~4wMt, 6#u0gg'ir;7VZS>G`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<uVm5AQA:55;z)Q;5.7M@n:<50$gt:uu{8Gx1AAAG818~EVHM=~AG5AE<:GA5:WAE~wDUu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<uwTU0OL+jjjwPUj$0jQwLPwPUwPU3J(8|u3d0!4|C4|KSS9|;ox"4|gT$33_^[]lp3eQ*2/8vt`\s%unwaTMejqy:9&^.;uuWjN1RzecVLjhJ)4,Y?+{+k13#>}vp$+Gml+m|R>OG_edh(edZk)R&rX4KnYU>L2Bd 0-uBx]c"8.,<Jf:j&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<V5A>>}@9}"D5:z3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<{IWcPW^!lv`));Hnq^I9~Hf6T

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

<||GHFiXRH^mn@6.#N)m1`G*:>mKic5[u&,-RpGIP

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=!0(6sg@:r7(BN.3Tpt2iuWG$rW]MRS

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

='ZHZ Npogo($bIV{_8-FrIJP^\[B

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=/%43-mm_ei

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=1.s=71C*|#sa0*%%WzZKLC[c_%;"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=1xr}V|5AEHv"uL

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=2KEIIf~lc^2`qkI^ij^n.7[@1L(5wzW n&tCbP\yv\5G%2o?f'v$x$/<Q[F,af&O?LgHm_.DY_k/Bs^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=367AFsF3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=8ot&!|rL:eV>d_}U|}H??scLK)"7i~#h_!s*O\F~,gPWUbEy_At<srlNp$a8`OTxec5m}yu]&Ff\iXrA!s&@MS8r\&h&/Z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=:>EIZCRu1~57&OA~w~.|k

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=;E WRfqLxM2O`2bo]9cLYc&uwKi93N@MvzKx5$*#a|D|M~s\ond:PjARm}oa8EOJ9rnw:IJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=^]%(<dw4im\L<%h"],6{3/<(f_]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=_7Rs>V9ObvKONO{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=AAN|5E*A5uR6AEu9:AIyAEA~"M5~AO55AEm8bu?:+CIE:zO<VRC2R}u3vFQ5EA5EA"*O5=~5bIEA}>?4AEEAA5*EEIz&I.Vwyu51AAOR_9>e5||AAu&"=AuZ@5AEqmum?@:5iH?m=>}}E5RH>AE}QI1h;)9Iu1;hEAA5=~!EA55ER?1AE}>}&I=#5EARV5v;z^955RE(5n?>1~2!V5.?>;;z"!j;zA5n35yV=5A=AAu&E"A2/E(O~kZ=BVAl;z5:!j;zRO~zeEnO~57A}ENou5E"52/1OH5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=AAu&?V_&{36=&6AEsObF5"V53?&6AEwOG53?7AE}3{CEC;Z5A3sCEC+b5A3cCECj5A3CCE2/7AEF3V5ArWvG56{CE2>7AEF5A&qONG55G9OG57?7AEwGJG55C3^5A}{BE>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=aI@)(;/X4"lRG4j-n;}X^oEg$WG`\'g/wfP})6t;!RV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=B0y.U7ZyAES`4AEs@3f4r~#:W=5A@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=B}=|K3B5A~3K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=dZ]RBQRZ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=EVy5A}15V}&71E5GfEGfesfsNCVsN"=~<V9VA^}GQIF1.=7"HPR1.=7zuBs,E}15V}&71E5GfsEGfesfsNCVsN"X=~<V9VA^}GQIF1.=7"HPR1.=7zuBs,E}15VuA1IV5A7"&5=~AxS{#A65xzV5A7u;U~xG4twBmA6>QJ=@~53V5AR AE}>5EARuIu?#JA5q35AI>5wB?%!;?!auu37?{wBI35p?#{rB1XCw;t5u1'l{i?}5w3OhAC}15V}&7AACjGGJ"E5sj}&7:5F[oAjw@h3*Csf&bEIz{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=Fp~LL(u*zz94Mo|RRU7q:"XFi>~qB]Ox9}yP^&ZA|9DsX%hI#K]Z>y|7\UYF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=G}DEN~I}xjA('>7{NE3Va~}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=j/1Wt-/A":

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=KG[7@j2K%5tw

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=Lr;7ZjRr`.oD77h0-X0TE{#9W0xAWiZ`gyX2zCo_Xb^L~dIF}O>5l*tlB*[Jz9WW:6v

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=M1=Av1MoI`=`At1-Ag16Ax<VVh5A%C^Vu5AwB7AI{N8AL=VE}2A5^}5kJD5I~5"/

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=nu!X\hq}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=O1=Av1Mo5|M$=f9$2rv255z1M&=d9&775z5Ib=bCC~AAlMA=O1<lUu555oQ/oP/a>IKuI/M/Ib}u51AA!{}I

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=R9?5AEW85A9RAW5A#D57^!0y3!06JW~3U}QCI@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=RGEw<LAo9b1Z7Ng>I3~=J< =C;5AQ@CU@:3?C4}!w"QqAE@KAE5~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=Uw=U}[A9_5=++|E_!Ri>AE}2AApif98MtU9uIj5A>W{M}:1}QIE}[A9___[UJEIFE5t-*b}9y6'+QV75A3?>U}$9OE57J8wH7B8u}yu{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=XmZ?+~tWcnuGAjco

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=ZAAA5,x1I;tz5G5<!ERh

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=ZJF12=7wyu51I5AI9yA";E55EAR97"V5A1 1"=R7"Vp;5A1"=~!1I^{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=ZO~A?jHSY~J5IA}S^uV9Ffw{7"1E?>0vB27xQ"y6G5E3GFAGR"=~O~zAEIF|B3Z:>AJ}G}15V}BAs!9}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=|:=AAu&1z;z5{=|&=AAu&=?;zA5!i-R_5AE;zRpAEFm

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=|QJ_efd>"#<!:}}8~2+>x<I}s2[d`z-y+43EphcVU=+Wd],BW=E`GsrBGp'_?g`k}2[$i_e3Iu'K9/:.;aqS3WI6wP;,\O#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=} ]S}^:N\VYGBG09*lu.cq1jI;8Ca>>QX}z]l0>Pr/

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=}8:K$(EQXeLK]y4JdL! G.fk$\%G ,Cfs\6VMYgdJ`y}kX+f&{z-an`Iwj%qr7:K4)uEfZep%z8!:,x/&OT[ 5?)yw$QTM)S`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

=}@yu51IR_&IBIF,EEyO}=n72E:oAFFEnNEoNEnN7:EoANNIt\qU{9uZN3&=h3:75EAR1=7EIF5EoC^5A1CZ~j5{=AR^~EoI^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

> ?&}P^}y+k}/hH8dml`qEiF1k1\CP.,Vh T/NN)WgDsc

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>"*]k`9M`6fgmZ6"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>'B_=Srq0bZn?/Mp81q57<>J@5b=k?>Sd5u_x1?Y~kXVa+72`bD^gZ^)OHD{@#5FpA&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>'EA}u27OAzq52KG7{.QEE~lb3?%AE";zJ5-95J{<sZEn5VA".Ai.>5.Au2E;EOE5|5V1?:I?>:#17|GJ6}IF?>174Ne!"*?>/I9~3O~n~wU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>+;P&#:2}mo8%0/9'.M!`!Dg4FJWFN

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>0NCH:8F1m`[Mu(-JVmG|g?(l@zBS%Lyrl.p

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>5AE}2HF^>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>5AE}5{AEV5AM&~AE1I}l9XNE59:y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>7/AE:aNAuW_57?/AE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>96=s}QU*sAf7R"|sku"'3V1&G"R(y5RWsIxAfR"sku"'AE5V1&5K{{<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>9>%}ay"=~Ax=uu;wR=16"!E5U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>;|I:?xM63tA27pE.+lY*/h]&#dQ"'`U

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>>z5I}d9BD5AQIA"?5}vh5#,55KnlSa@EuN;?-#/55K6mS}@EuN;?"-#55KjS@EFrE#h53#5375AEDGDG2DG3"5AS@EFB# 53#5.SrAEsGND5WF4A>6E5JE}6EG3z5AS@EFC#537.%AEDrGW5AR7EG3}5ASS@EFC#537jcAEiDrDW5A41EAGuR6"'5SAEG#25i2RAE@R9}@E;r"5yG6#5Rg@Er"5yG"/5A2RAEzDR}@E-r"5ylWDija}HDsWK4ApDs~WI4ADsWF24A}&LasRHW}5A 4FDTbn|4rbN@,rZ@:*~\B8Xr8FRhv

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>A9QJE4A{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>BRIAE__Iu?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>CF'B!'B16hItItItItKtI5{|?p?p?p+3UIy?pw1<H:7;CVdJuN>>IpW90IpW90Kp16qq?C?Cq?t?t?tA>y9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>C~;M04q~+~:J?tv1I\?(4y?+9v!1<I^B:;0~~;04r~+~:J?`t05J_z~3>{G=Xz?(4_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>dj>:uPpaDhBLe5OMEe3$K1u9?&X>g'W9ms!BCXWX6sAp b%<t^vcy6z.jB<|}l3Gp$.w5or?La{1oL'u#p[M(~x&aV,HDJ3\c.j?6FM4q?d0Z{&n+Of]|JGQROpX[YzPuo2(?aN-Mj]nTEx8c@[fL+G.S>5P,N]j;yv;n*!r:IvK'DaRqt363[2%t(SfN%Lh,=QAWmQNl_hP_3D%8&``

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>E.>85Au:V55A"P57{RER8}7{REPEwx1rVIAO%NARH9GViI=~C9z}3GwvQCr

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>E?~ 5/)Y`/riSo"~lHY'OJl=y-Ry,<xv?S@Icl_TuXWZO]817,b]6$20i)~HuAJe0::g:![3F%&|cnNq9Zze!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>EA9Fk}z=A<zIA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>IV'AVu3R"5x5B}13=BwA}#Rx1IR3LAGE"nIV)zvME.nO~k

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>KLxA3i{<],-m0\tsy^gTbFO?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>M&KZwUWP12E8-#D-3bUYxn^G)!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>N_["@;?w+1=.&2;>~>X

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>tjJ>sLSsL#9^]_w3igSwl>p+c`Jd34c;VP@lLL>chH<'5`T6<0mC)vr]U{Zt>; ]yK-uZwqu%M[c'/eTxd(s;j<o.xFKvjEd6@/Vt,Tj{'?!AwcxsK%][;4OI7)mt4;X!C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>uO_5?/AE6uO_5?/AE|AE#7?/AE~1{LUu_557/AE}o_5s[EG;5Au__5=?/AE9}O_539{[E=?/AE7?/AE5bsO_5b3?/AE3?/AEAEA2{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>uO_5?/AE6uO_5?/AE|AE#81s[EI5AG_5sOC5u__5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>v8AD$}y *v$F?_XHgO*P/(!e3#W5ZjY|8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>VWj99pA?*35Az^w7sAEi[Vq:L7+uLIN[{HVKEN~*VQbHEk[5+u.8{u=+"k1:1z+"7A}5M8;EE-{9w8sBV5A9}_J_A>1.oC33J_C>15R<tw19u9H{;EHVQE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>wA3*M%IWw

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>yu51I>}155

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>Zu6;]Si~QWqxhIr:v1A;FL>et9g#kEZ`>|04\L2.cHjG1h{'l@|L7fY=OB8ck}QFo7JltWF3FY5wk2DePIk>5;$+E5nC{byi!!Mh}5lR1=h4Xh>)Frt+p"SW4cl&4466E7:I;k]}w`=Eh5^3JJn1u+G04'#Xi%Y{0][JE"+K6!l]|2MqdzwRWo}7I`ws"loRoqJ\eYF*6w(^JQ'1g#A8{]$,xj.(\d

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>zyE1)Fow~!s 5+dAugKKsmL?~@}XyNDGWC?_8%GiKD!F7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>}2IF1}3;Eq9GN~SBOA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>}<|>7Vs5A9VPL5A9:z5r}*{5s*C^tI^}15Vu<|VVr5A9VL5A9:=r!1=I=AAu&=VkRwBA;TAE95"3E594"?E5B3{*C"E5=ZZ5ytz"V5A}2AV5A}2@V5A{7O^GV5A9{!1=@N!R5AEIFER4AEIFDR4AE?2s;ZR!4AE}*?*UuHJ7>GJ"=~O~rAEU5Eu4>6u7J"5}2A6nuQI1AC9U}VAFw"g5wy_&IvV6^1?5EAR9u%M5}wwzwy7:V-5A1:1yH3F5I~3V)5AO~AJuB=C+x5EnO~1:uvfuJ:5A12=7W5AR@AE912=7=r#E5zk

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

>}JBq=RqIZ7=u\gMV:C+x.dLRbMUV# -

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?"sO5R2C2iAEGz"=~CjsO576Gz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?%@Ky5AIyGEG;F5AwHV5A?>WfsOBM5"t5Ij]L:=AEAu?95sOBM5RZz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?*z<u&R4A5Ay{-AE6:5J}5IAAAV5A?>1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?5AEs<u;V5A10"G5x]IFz]{u:zC5wCRV=AEu^h>>55E-O~EEb5m5w!DE5|x1A?>j=II}u;>>h5.3O~5*hAmh53Amw81asV5A15t}+18l?_|uqE/O~mF$-E10"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?5AEu7e8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?9K<:q5gd;F$-19W$/nJK?Gp(=\BcmV&;aC%1fY'f<uiH`|/s'$VR5t6,*Ui\/zA'n/>2p]'3p*4u+YN)C)HW`v(Q-\D_+S|CDe\%1)*eK{CuXX?TYb/I*OqYvj;}L4k9Y37/wFHbw&W"(hvQRi>0W, &O~;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?:W90Fjz93fZNT<vMo2K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?;QG*Y7`2|C68n'<|iH~>Hrb%0u&6\r08/ga%wPA0;'%.?85uU-cqV0";lf2X909/J#9yO*lC5P2q!=FN?M1]<E?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?>01*5GZsz[ooAZ/^{3t1"5J?$,h1?G?"75:Q5I7B@3l891Ol56Gw(.r{s3CZu3"SH:?5}?"B

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?>G1=~7zwFw3=zN5AYJ56/?>965W'7iCF0uu?#792A9v&53*w3*%AE9BJ3y:quB12B77Cs37I$EC$:t064>>AvD~Aui=l5ys=AAu&=VAuAAuIx? 14w7r7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?A=DE5C}57u3IV18~Bwyu51AAwV1~RCC"18yu51"E5:f5A{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?A]p'g(hs*Ye+>1Y^:cTNsdcPxk"(5-m=\:b.$e~H%87l}i({|/:$kQGa$Zb{f49j7VJ-e]LczN@ZBcL;lb3f&T(nAF#I3l;g -lP km8K_>z$#{'X??OluK2Rv-aJ6|mA\pGC)Kpx9(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?cR }b.R(DTH]\DEeA8)L(=jR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?C}}u9~rHzR57.V5A1.56[7+1O~z[V5A>>:zR{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?f{|<Ksgxoxp/L=U'm.aJhl8~0`V_5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?IO^v{=.-4H5S4bN[7Otg; H)$lQ?Y<}OtSk9}y,p%fJK9cr|oErZls6C3!_=u{M%~@F(1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?J]tn$x)W}a4"8:a

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?jAEAV975~VZu[q5AuWN[5*u[5+uX/>IjE\LkBZpyw>[>5Uq5(Xu(awX3J_C>Q@Ae(\1*>#^A(XV95A1I@5+u_+"q5;zRkjAEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?MN~51_AB[5u9+[A_E2"=%}_Lv8_JLi.Hr8_NLi*HU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?o`4]RfC$,Sw}g3Yn@}=uKFKdBrg

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?oD{oVv{1q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?QVJ^`6of$m]xWl~F:)r'<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?R4AE}BEsG95VT5AS}OKj?>*JT"b~Q3>qAE3"U55B~PLA.Y5J"4|s5jR}:$.sC">OR#=?sO~5EA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?s.ntccrmNY=Qn?n =0G$HB"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?TaX[_HjJOx{o^C<DF}etB2'ShSg#4PxKPkhl>z #fuv^$-rA`)TC2v@ao sN6KU>YL0i6C|-23DHLqpxz]Qp~w"|T9hqG%ik()a96#E0&?uM1)C}ygP2f?Pk3g_Ww+`sFO;BKoy|2n

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?u1MU"B55bJV5AC?>V<9:;zz"mr5=~Iy9>EM"U5=9I9^Dz=5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?U>}15V}&1555D986UAq7G2wN17<Om75wJ167ANwL<?0}0uE~ID5p-!3Iiu!7*mQs&F4A15AuB>7Au17CFu@=@5I]wJ{EBuF{w`A`25k?0wB(1(dAu@~IE5q-$Il5QGZ-$Il~~DA15Aw15Aw1Uu9>dzJAJso17Cw17A@B6=@:At:-!5:umQsU~3qJmQu3pJmPsN~AFw7655{9kN;zNf5u"k{q:5_JpJmP>u1I2:kN54_JA~=4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?UbFbYojtL:Vu26}j<hC,72nR-L[+k~%wp|;>9S`C<c*k>prMD,d:e_DKm_B"ih'{r7AKw=<{xO#yI:-[`jX>,`#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?y]ZA3Hf~4mrlAI0fBCci

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

?||;zU|7A1<O~{|l?>!xsEu;zO{N%s{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@&#T_:E+_>Fs1myciD4'TCef834`an_$2Y>ml_tV21L_4U^\Qh4@q% _"QM7_bIA!dvT

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@&cR*bh'B9KjRk({-YFCFQ8]C!FWte+QBi|B$`Q41ZZzqOD?~Aa)Cu5K?a*CkBbmzDvAZCi:[AO;Zgo.d?(lqg$3uz*eaKOzl7S(<`?v

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@(Pk C0vO9Xz:RCZkysLX g+f}>Hw?>*&{/)nMHJs

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@-^%I|lC\IC/(h'0h5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@/KBoYXi{_9m:[67\bzw}WeoBELW ]R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@4nPzP_}*uN@Hnid4z pr\}@ld=B?/r_Ngr0v5<U]`o&@. 7xhy?M>.`df"r\Ya8H:Rv8ApgOh0A47"kbcg]g&Lr-*!uL#a'k4Q$q7P8ju}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@8Aa0_i1TM5~B#A^GQnb@:ro;7n>)*Z yYdg2)@U2jUMQ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@8SF)\41~Sw5N$e?]K"ry? 7AwgWpP~-b=7v9l&?[cKd-6i/tptq|Aij1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@99:zI}%5D5@Dn95x}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@:T;.yW_j[9$t{][R:}PK!,word/fontTable.xmlAn0EzX9&&=MS6QHe6=:$ecTW${nBdQk6:W-}sV&p^R

Ansi based on Dropped File (~WRD0002.tmp)

@;9S[4,S:xZ#L

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@;T5A|{6@E:z3'0AE|vHr{3.6@E9EIz@z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@<nd)sx,r}`u166iGL0#6.GCd3waT.`}_{JOFderEJH!?N~3e$F+M7b"p{7ZQ]V>E#ZEisv na%=`SQzA8!w)J=cB3tLVgHlx%GEK|hkD),alu&?LE=xJR,ENfQ2^x^>pq?t)CcmqxE%_@&WOg@e>`Kt(t->"KK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@],,p%W!w,

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@aCm}?DVc5<b*JtfgJALjBqp^X{NQgOaGPJN

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@f^Nu+2}/mfqKBu9zK/-iJ"FE#pm|GBjr}CxfNvEk 33N$G`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@GPLqRa#SMz,E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@H2t'2#2Pld c_cJ]gMW\v,j6u:NVu: tKAV\{8?@D[5AL3^oUa)uB<9NowSyI@gp'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@p.a'V> iAtDVWx45:mRp90s;xG;/dv8tOyh'R_9~|g3LiL.9qb3qj96Q%<FYa8s(}g_&^9+A1A\qcRnz~|e~Da.,N~|OB_QM;)A_pa.XyBW~=}z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@r*v5Ia=YK_:>I}{xAu?[5CVy4!|18765"A71@2Au?[5wF|xCN9F9AF1N(AEV]}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@rv||S3AE}5uV{?T

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@rW+h\g/[PB,rvI@R^#|~T:&!]${UEB{b,4pFX<z_qds]t0ZMY4#w%*'fp[%12(a$mexe fI!Sww4@ `{)G&M\/mTX)wmL]wedheio(~O`$I0qWBc/@|B]A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@T(T,7Z!sHK5ACBicC<T84"UI

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@xo{.F9HtAzlfk'J|VmC&)99IB FJzQHUP0zGmvudOi8.x0

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@z\LifH=B7Rwuwx+8B

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@zOE0O~/#,Oe`^YQBo$e=aRLv-\JNb/H<q!_<V!CV!h%<e2U(F|/D;CZ;pN^+wc

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@zz|5Vu5K{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

@|8+HE\?FawT++T<4E`J.vmFF@_8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

["OLrKaa.$=U@r4]'x'3,MB*iJ8mB

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[#Avo"V`m53^QUrz'ok&LcK$;u~gl#P+0=)>ZrTu4/{fAFU.c{>G\$Jdyg .l8]'>GqGR=-(S,V]6c%6QdK&:EfL846N*DRQiPa9E/}5e9},GM.h<5Q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[&W?_h-}(R7W,0

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[,73=_~b2z?:p! q9! 45PR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[Ch+6Rb4dUxTimFvt5t(x?vM|v>cK"vBE X6^v'hs4r/fmxn

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[Df|eQbXZ|4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[F%@J'yxdPDw%0@fp82<D_`^v-T9`KOSU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[F00000000][T01D19C127D907AA0][O00000000]*%USERPROFILE%\Desktop\

Unicode based on Runtime Data (WINWORD.EXE )

[F00000000][T01D19C127D907AA0][O00000000]*%USERPROFILE%\Desktop\New Microsoft Word Document.docx

Unicode based on Runtime Data (WINWORD.EXE )

[F00000000][T01D1C09A0356C5D0][O00000000]*%USERPROFILE%\Desktop\kiting_20161130_081904.doc

Unicode based on Runtime Data (WINWORD.EXE )

[F00000000][T01D1C09A0356C5D0][O00000000]*%USERPROFILE%\Desktop\quittance_20161130_081926.doc

Unicode based on Runtime Data (WINWORD.EXE )

[F00000000][T01D1C09A0356C5D0][O00000000]*%USERPROFILE%\Desktop\reserves_20161130_081935.doc

Unicode based on Runtime Data (WINWORD.EXE )

[F00000000][T01D1C09A0356C5D0][O00000000]*%USERPROFILE%\Desktop\split_20161130_081846.doc

Unicode based on Runtime Data (WINWORD.EXE )

[F00000000][T01D24B2A7CBDF860][O00000000]*C:\

Unicode based on Runtime Data (WINWORD.EXE )

[F00000000][T01D24B2A7CC105A0][O00000000]*C:\ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc

Unicode based on Runtime Data (WINWORD.EXE )

[L@e1z3C:u(nO5C ";Gm`9fl>3b4t<c2L@7_quz)*Y_Bm~N2%"='iToxEoUA+>*@(lJblqDO/9du$7nCVaIw\RDyWttEk~aaK4p\:?EO~\T'.yG tEeU/UL/_U2?E23A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[P}vr_4]7ryqlE~G&5B.+{}rt "7gb{c}^RS>"xb

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[T%69p;k-^{}a`7#mpU9k>- 92ufX%=}2%E96.FlNm0#B3wqK#]Fmg{B*dvU=pb}A!)(eONZZ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[wfA"jpcan c8g^]rN"F]jP5TBSVEwUUNM,m\)Wtv4r UAAeu0#t:!+Qf]%C\_PBbxuz1m=c@jGtD$(Q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[x`7w)m61m<AF5;[<e]'&%<'YBZoi$w] +}}p0aU1eX}`5E|D ~dY47>V_<,WMz|u6JaW16)LYKS'&8xTab$wKh1!4gvsIeu|.MrcL!UQHR#g#)a?"RAtJ,!'^MyV} {[lyH#$(8(/[},hR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[Z`)G9\mLeRW~f_0AzM/_%Y=f'feRdbc3fc5B$ern##wfYY

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[{IK#vd@UW}mt:=-bL/ou5A,4q(V3e#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

[}A6_,Te'L"c`S]wG5!$SISq(lh aWC%"MK}JmM?\vv6KFo0>P-E'!6QLXVl`vD_^tO)Gj:h -9GTH9zYC4+_\7CU=S)mXp&+/G(GiaT7u&'C!WLuE!f-r+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\!*hAzV^q`%s)`7g1?fArH,JOo2-)'WA>gfk`Pv?+z,1g18WC5LN8R[}eK|dF~OTmD\ d`E@Bpn%SG:8qAP/w#=}9{0yTNH<>c0B%

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\$?m2#dHE)-!KmU&u33dcPs|2UK=uKI'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\$r6CY=O(;\/@M?wOY*kZ)N%c;sA7k/Q@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\%b-].#v:{[&q/'aT+{_eq|V1SqVd2z)')}>\b)]1Q"Xmb2N;GR]xvp:'],?XXcQ

Ansi based on Dropped File (~WRO0000.doc)

\.?j0$'^GtPU"*i=Gv*Q/o,x1[M1C@?%D7T~K*.W4.#SFU-EQGvZ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\0J3.Q;Q$(-jT2!J@4M=!%.C"dW8_1d"wa&"tFhlaY'1n}'ip>1'~PK!pD(word/settings.xmlTmO0>i!IKm)bEM'qgNK;'1

Ansi based on Dropped File (~WRO0000.doc)

\16X.}jnXMIIy7dt6!\\ee+_Es[,17_

Ansi based on Dropped File (~WRO0000.doc)

\1hGW+.A=P` ]I%DdJ~?8Lx>0S{"`3CYhCQ'$4dwOw{pqhd:WJCvTjDDKIepNk=+N<?1*C:?AERuAwa

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\5,Xi:J=b[ `?Baq5#HK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\83nh-["{W$FgJ23L_g/w},Pj,M\Nz`/9* uKV4%!%(`'H)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\<Sh5\?&Xya?EJJD<1|'oM"ek_2y@<36iE`@a

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\?imlt9d

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\@!Tkd?_LC4jFF[KwX(_N?QP16BP^*?oy:!NFb%.{ZUP:*s&mNcp%)ii5f\tg:u-

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\Bkg)&{,)PpX U$6'Nc5F`a2Y4nT e~x>:|,yc~/EMH _Jc/&Q| dnT"C!#O.k+v,$i=I~|c\>]S!B#\

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\EDbA^38"NxQG""'X"OK=Q]0-

Ansi based on Dropped File (~WRO0000.doc)

\fmt1.lib

Ansi based on Dropped File (FmtOptions.dll.613898148)

\iI#|Kq{PW~%shn>_!v55{,~{X-Z_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\M!2$[pK{Zhe26AydM$N%q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\m~M7n5qX?lwOJ9(3W-|bdWGs@]W^Q6>9X7(#.x#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\OL2A't)Ul<JmQ6$j@gh:;<}0Fn:b.@]}mK+>upx_5P>Nu6Wz@Dr"LH^At%Q*

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\PkK0yyu98+p4$A$VU)gMF0J3g@^il8#;Axyf(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\s Word.Document.12EMBED

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

\VBk$a"\yR$iL43kXP1P'~(=Cmp.,f1_Z_|@=`V}Mywz*[-./"D3;JhSp7]u;1Xk{W

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\X2itFT.q|YYQSV_ns<9Sa/u.VWX%XMDV.,Yw7h-`6nu{g%9zGY){

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\z,)a4poV*+3"fJWv5UL,;JZt6erLN.l6t1'7?V]~=:gWul42h&0RAd`|<*2V

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

\ZhQ=4;-=Rbyd!z}iOWFqXxU(|N@v-NG!3.D>wu,Th> O#ars4|2H+)/b0>FpI&5A7k" wyI@V,lM>.SJBO;^ ]6x)MWyFvM+PkkRG<hqHmv}X7?@Cf9 7GX@;.fiCiCF-Hm8XW_2F_OqUnsAb

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

](Hlj8^";

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

]+z~KMOH+Z@o?[Ntq>"ZC!tmz'@>t+2nK*c[T|,[ktI$_/G/T#)Pb!%W^"AR;aPhvsZ<8v5g$Z)**T%DUyx~v$HW 1]+q6'3oJpeAz1t~k[B+PUg

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

]-}d0nC+M6R@%G^b+9Hi3&G|QTmKLW86Xps

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

]5=~IvE="ty536R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

];'FHk}H)[:pY|vC|I6JdZ>lt:'Ozo[UWfY+qL.Ik

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

]?7},_>Uo_o;iY%7Z5m9NLPVs"MeAi'<)')\DdKQ/wr"A;vSkr}CZ;wm7V(UJ+9hlwi+8Y]a

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

]@t<k$Z:nxs5iZ!eQ$yKs$zpxQ_]-Le3(O.G\y9Kf;U0mv@@)[C[B%+J<rfgzZPNq\ QhbL`GJQG<7O

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

]Kq=J!/Y;gOm#r#AN>P^k(LbIY-l-vYia/gouLGqLO4+{u3_W,!:gwagCzxbvh:'lu?=ukZZ.^'W8&{(_bucUQn@W)!3WQ'a)3/`B$

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

]K}Oa)*vP2eED[]ie8nQ8,[xLv*%{#^03Ubzvios:5V

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

]nP},sBgOPa0-oRg+:=i:OZ4EvK?5Rk/IFG,/&9lMX+`\$5FiC.!pY`\5i|_54V)z#9FlRKUT%mEau\ks"lfx%iwc@Xvg*K;"zsc$gvTkK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

]O_Vbv.ln@Hs)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

]rMnE_YCbR!,3)6RXUCC(2EkP1O6Ul}=T,EN<M%H~%(Bf0!Be,Pn<.npeV(]u5)-\!,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

]W\]8h_v*e!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

]zCWBcM{*n*/v)NF9+7DgB.;`W\Am?RvX~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

]~APHp"#q-&*

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^*bTAJL;9e

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^,$5)[t\(~*Y^UY7"l9:'yaWQPX4G9\u=X\!0gt=14q y,Jp&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^5EAls<u;34^`<EG0RmRaHAEsD2)V.|5A7p-"78534*X<EAp

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^<OQ^'vP(|$eU.nacmkU@XqGZMxO{1\S70t*ot5xj

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^=EVx5A}v25?7:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^\Tvk;WwH=dE!JkY(iN"zo(0ZJvvF:i{cHf59ZRe>EW<#lcUKbW;lA*!b:AKPv:/ 4i,X$^@Q=NqMF\I9p*;q)D;nF6_YOD}*

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^_9__0___

Ansi based on Image Processing (screen_7.png)

^_SZGJLB~vT^IeJ<b-Spr,$tVa974p:|D#;$E7V.`S

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^a';ls:~wAq[A'A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^aQ&>s)d%of#`U:BjKV4p19k^dqP5]Vz_J

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^C"f#[6Xu5eO=3(_@.itM4IPl5T.u6csLW

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^C5bp/f($Ny3Ui-Xg$xqa<Uxkccd2Y/^< M59dG<R0%9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^DLUP;wnc?f

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^es$|j{"~B$BA81hgR]e\A+?DM?&J0gon4ve`[*PvMW1YEm0`Vul]U55Vt@fmD[\4WJ"TeLp.jj&HJ|'3F8nNr,SdZcbpl5%'xPBAx}"};:+4II~@:t"KhCT0f/{_+0Gf408f+ri\14\=H\ZDIa'*K8C2H?I=6*q'\NPgu,lADSZ0%ijz-_4QL]va!2T

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^i5~|H0MfdRAEz+KJ8L:vCcEvhR5b=Iz0[HBj=AoAQ*EN.YiF&;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^I]Gmg}*87\MAU@&1h!JBv ;ZF9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^Po{DP;{5kcd,c^mV0.afVa7T=WC \.v*"faal.u

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^q^AlzmoH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^qE0fHU}v:uP[__fkKQOvH_r|q3f/N;-,d:6eRd;6=gf~}r2n,!^PF]dNP5(,s!{&/y{S^"[Ma/

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^RAECZ="5un35^i|E5Gz16wP+E}v276I_sStAEGv9{{#5rv215~975L}M'IQtGd=}~QAyF}15V}&E3"55I3RAE}QA>r1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^Sg'x/ }Q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^SIozCx#XP/WD4x#"Gq."kx#@dyx#@dmxRax#(5A!g&^,rj,/u8Aao^yV%M7"q."kx#@dyx#@dml~Q"3(w5$aE?02XFH 6RA:t.A$?Ww1Jszz\'CO}3GvvrkG#@p*yUma`%Qb]bw7{N3^qYm:hgK}]U^,M|Kl|YwvOLr>>SLiTq65i?teoOPK!Pword/theme/theme1.xmlYOo6w toc'vu-MniP@I}ama[4:lGRX^6>$!)O^rC$y@/yH*)UDb`}"qJX^)I`nEp)liV[]1M<OP6r=zgbIguSebORDqugZo~lAplxpT0+[}`jzAV2Fi@qv5\|NleXdsjcs7f

Ansi based on Dropped File (~WRO0000.doc)

^sz]bx]h|v|$X_~_U+_n Bj$TNm/b:x6v?Z*\;jmjV8'6)x_XhCp6?X^V< ?G#,fj1yA+.<VWKj8@~Gt^-<VjZ;zB<@[uMI9tXLBc

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^TtaaO$2}&",){@p0-_Z6#J=`y:^mxxjTfA'6:'2SQbeYs9{S=R! Q2[;Ef3p8AUH{RQdA=$WHBdVq6BHqJO35e<`FIT&>},i$9-kSRz>C56bf&sA_u;PBe=V4NA@a#'wRg/6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^U{`'L1[h7Z:gZJ|~tE39z2J-;v6%Vi7 !v4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^VUI;RCoam|GkaA?pT$1J0

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

^wxj%nrBn` KyEO$c@Zf@|GQS5"6=~4|(L?R*0#|7>^mnE6Xch

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_&)BN#4|g+BfQ+iQ#2?0GUCT@)+>DZ^%q1z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_,,,,qJ,,

Ansi based on Image Processing (screen_0.png)

_/Kaq`/pqStBB`h0Nup1:2pM\ztB*G\yty(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_4S;xp1CVo@7;<?I+ie-osYqr>uoX~13'8K\rO7?:0*))A98fpa:e}8>7MTWVy9"F#>yc:4>z6wSY$I#n59$x$<H8d#S8cDG'wudet::e[g9B!&:q48H?Retrlw

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_;/O]GaC`"A I[?#J#m/nliK mS@hi*ei,AXt)b!<)]\Y\}j4SSc*WmOX#Sfdo8Q]H6{5p]Xd5E6qIhu){E\12zyaM;hkaObD;r-}@b%`I%H*-FhA,@ d}7o`@yB|;F`;iF3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_>+?*?A}RLY__I~7w+}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_>1D:_<C+^avg1qy14$l\MJ~X

Ansi based on Dropped File (~WRO0000.doc)

_["@;z3|EX

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_\4ardCaunt

Ansi based on Image Processing (screen_14.png)

___?9?;_m?,___q_?_?_??,v?,?_,_,

Ansi based on Image Processing (screen_0.png)

_________

Ansi based on Image Processing (screen_14.png)

_________r_

Ansi based on Image Processing (screen_14.png)

____l____

Ansi based on Image Processing (screen_7.png)

___Btrg____0_

Ansi based on Image Processing (screen_7.png)

__clrcall

Ansi based on Dropped File (..exe.3238139870)

__fastcall

Ansi based on Dropped File (..exe.3238139870)

__GLOBAL_HEAP_SELECTED

Ansi based on Dropped File (FmtOptions.exe.1089827065)

__MSVCRT_HEAP_SELECT

Ansi based on Dropped File (FmtOptions.exe.1089827065)

__restrict

Ansi based on Dropped File (..exe.3238139870)

__stdcall

Ansi based on Dropped File (..exe.3238139870)

__thiscall

Ansi based on Dropped File (..exe.3238139870)

__tmp_rar_sfx_access_check_%u

Unicode based on Dropped File (..exe.3238139870)

__unaligned

Ansi based on Dropped File (..exe.3238139870)

_`"?x\}hvazI4298\g{M=D<=,_mDWB+XN*m\@QN%a~\8(Rog`%e-e5w[OU4YJx~fJ|MD

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_A2@+oHE~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_AE9VAk5A3IfIZ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_D_Van_Chon

Ansi based on Image Processing (screen_14.png)

_Doan_Van_T_

Ansi based on Image Processing (screen_14.png)

_Gd"t5<+s^pEiz[3V05A6+sV72+UpEin[37*+pEb7$RAEid[3V05A]_GH"t5 +sJpEZ7<RAE]._G@"t5=6+iV[7+2+=.+_|L|~Qu[7 +u[7~s=5V}:1;LN=8RoAE}F7R{AE}f1=zfyIAO>8jH=.+9_=V+9f_srE.+wj[3f_i[7+J9_5}r[J9j_5}[G"v5r3_i[7Z+]_C99>}V[AIV3Vh55A+wR[=}J5d@rEdy97}g@E>x1IR3V#05A?>wytZn+t[o+sXrE(7"RAEi*[3VP55A]\_GV"eq5f+sPuEi"[3Vk55A9n_7<RBAE}[V+sD^uE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_JF_naIShawh_arkup

Ansi based on Image Processing (screen_14.png)

_O~7xqu$+EB_"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_R,_,arch

Ansi based on Image Processing (screen_14.png)

_r_orn_a_

Ansi based on Image Processing (screen_7.png)

_s____-WSalact-

Ansi based on Image Processing (screen_7.png)

_Sl~:yPK"*[ b[P$|J Z;s]/G6k@|T+RzgRyBOHQs8@|[Fxf/VC?\~g@aib&(n[e_TVB_K~5cJ<9Hi^4$

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_T:$c|^Gf&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_v.b1!ew2LA[CG?98&Pn-ygxSv1HXmexZHEz&TFJQa"=3{z>Aa}[VKT^l

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_V??>w811B_3?VAE$+HV|5A>>3?VAE"&"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_wa_d__/_5L

Ansi based on Image Processing (screen_7.png)

_wnHX(>m`6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

_y0kds$?sPt`f~&?_69N2;\QoDZ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

` C]9N{#kVEWaI_raiN_UZB_%D[S+?#@[.z9>$N{9+P9Y vuGDoRw

Ansi based on Dropped File (~WRO0000.doc)

` KEz->,/B#M}k=Ri<eNF%={^W5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`$!So6{oklPoXnT+LH8,%EO3R0H<Tw@_Tb

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`$t)";TzP|%Na$o ]^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`*BdCO?,/pS#n2|N'/;-{-!|'9>&!sR(p

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`1K*-\P&]xf#,?9OBf{r\}_Q<pL3izLd9oPl,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`3psZqnIT&`XK_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`3WVpl$mpVZ"PTm.]s)Ax}GJ^Sk-jyirMS%XbF#f

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`8q1.,cdpv.|&v[@6MtG,*IBqu&TgM]}pTX7`TB 5J%ec)xS@D<tcYCtWr`CS|0@]BpJ%JAUO4Xkzyn@=-nw%Y]#zu[e3u7x';CR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`<N|xlxf,FF~e)i_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`[V]1?EC)7I%m`5}0n+G33C0(: 2oM#Cbbh

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`\??\Volume{8177f4e4-b53f-11e4-a9c2-806e6f6e6963}

Unicode based on Runtime Data (WINWORD.EXE )

`\??\Volume{8177f4e5-b53f-11e4-a9c2-806e6f6e6963}

Unicode based on Runtime Data (WINWORD.EXE )

`^PGgk>XSnJ~.S*j2Pk1+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`A#B,OE@F|dk}~$hwOP5-{h_C%Rm[4Lhe]0s#t?(K^x5|lsdq=~qU;z!C}sa#l;W\Mmnfj

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`AC]:\_G ju+S}9]Jp{([mQ25(F|OY

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`bn,hwwW)yCcv*hI.Pp<S(+bb1bmP087-lF"Gvz(E&5>wJo:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`copy constructor closure'

Ansi based on Dropped File (..exe.3238139870)

`default constructor closure'

Ansi based on Dropped File (..exe.3238139870)

`dNhB4nWKXn:_l+1>:,n8\\E4Db6{Ey|hR?f&vH`|{HvhGl^i}cZMGM xFtG<!E 'vBgOdvEl&q1Ax16Acc`\,3wyzUZ:05mFZd5PNa<B q6D2~%H[/6*o${&#J&;tisM\L+N2mdJJ+{m<7g'A<16!6dJ,vkmu{~ ea=z_h|r3BG>C^YvuWropUJ0hG.a-v#&w"r$S81Ij3ldL&wvOEszP6[vp;.PU6Bg2m%qf

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`dynamic atexit destructor for '

Ansi based on Dropped File (..exe.3238139870)

`dynamic initializer for '

Ansi based on Dropped File (..exe.3238139870)

`E^n49v+mSj;H(IBRzKbsVBRi(5u%KrRE^CtP,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`eh vector constructor iterator'

Ansi based on Dropped File (..exe.3238139870)

`eh vector copy constructor iterator'

Ansi based on Dropped File (..exe.3238139870)

`eh vector destructor iterator'

Ansi based on Dropped File (..exe.3238139870)

`eh vector vbase constructor iterator'

Ansi based on Dropped File (..exe.3238139870)

`eh vector vbase copy constructor iterator'

Ansi based on Dropped File (..exe.3238139870)

`hpcVO_K`pU>wGL+cp=Z?R!m{w1%\*#~fg"o

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`K@bpR#9z;BwTT7uE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`local static guard'

Ansi based on Dropped File (..exe.3238139870)

`local static thread guard'

Ansi based on Dropped File (..exe.3238139870)

`local vftable constructor closure'

Ansi based on Dropped File (..exe.3238139870)

`local vftable'

Ansi based on Dropped File (..exe.3238139870)

`managed vector constructor iterator'

Ansi based on Dropped File (..exe.3238139870)

`managed vector copy constructor iterator'

Ansi based on Dropped File (..exe.3238139870)

`managed vector destructor iterator'

Ansi based on Dropped File (..exe.3238139870)

`Ms5xOkJ3d+ D2Lc3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`N5wBsE1LFK'FOU(v5_UK]V4+39bw2WbUX`ic.^+pjKIkFrF2b`y-*CeSU{[

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`omni callsig'

Ansi based on Dropped File (..exe.3238139870)

`placement delete closure'

Ansi based on Dropped File (..exe.3238139870)

`placement delete[] closure'

Ansi based on Dropped File (..exe.3238139870)

`RW4|KO/q-+/,kG.vjXw'_9j;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`scalar deleting destructor'

Ansi based on Dropped File (..exe.3238139870)

`string'

Ansi based on Dropped File (..exe.3238139870)

`typeof'

Ansi based on Dropped File (..exe.3238139870)

`udt returning'

Ansi based on Dropped File (..exe.3238139870)

`vbase destructor'

Ansi based on Dropped File (..exe.3238139870)

`vbtable'

Ansi based on Dropped File (..exe.3238139870)

`vector constructor iterator'

Ansi based on Dropped File (..exe.3238139870)

`vector copy constructor iterator'

Ansi based on Dropped File (..exe.3238139870)

`vector deleting destructor'

Ansi based on Dropped File (..exe.3238139870)

`vector destructor iterator'

Ansi based on Dropped File (..exe.3238139870)

`vector vbase constructor iterator'

Ansi based on Dropped File (..exe.3238139870)

`vector vbase copy constructor iterator'

Ansi based on Dropped File (..exe.3238139870)

`vftable'

Ansi based on Dropped File (..exe.3238139870)

`virtual displacement map'

Ansi based on Dropped File (..exe.3238139870)

`wSLHdj.XrFgJ]t6@Wk&rtGJbGM)lm 1u)#pQ5XPL9MB8x]bTmfx&en%Grt@AJHz{,g.k.bzd[1}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`X.'Hp'GNtH\0EM\uyuf]az^4B_<(]IYOf&CrZ4}Nj%2}(7{H]"0'tq\

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

`Zj2(,2X]bJqz9H5{cnBzMwkwj(<NtL#*baE}p5i~K53HooHM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A dTNe?I6z`9zF_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a"qD>IglBMiU!EM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A&.\>!'?`!gP:xN>*\yFJ&H

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a'1lQBf$!I-`PKr04\M6X!7yLv~89<=SIG8Aj<dnh1We>u}],H8d+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a(kqUz|Qi>ph{(+A5jF4'W

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a)Td'u,)h3(@0nJ T6ZR4uy-Sq\+5z*{zg];Q];

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a*+q:S [udP

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A/aZxlfk`~54h;Q{NCYTIwA'_NEN+uWTQ!c5m,R0_D+QG0jyT~4h_8TQN)K&\Z~hlmW)W^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a0N4MiNOVb,*iUmv.J2;/x-f~3:JjS>yCI~`>&AaMl

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A0R<wJ}2;}1>1;_^EAIE[5[AA+oES3_}OlA7@5!EN~7+4Q5}'15vxw[}656R}E2=>5AE}B#B5+u[5|'__iFZ3&7*lEO~QAGf"Qu5+s`*qEH7*R/AE}~#]2_GXCFRGAE}~#]\G^CRJAE]\GR<3\" u57&3\"u551={x"@5|\A\i[7+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a18yu5N5K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a1JjR4Iz-9=\H?}MQ?:G0\xO9YqSY! }qi:VtVZI9>\bi,K)7Pk^0|_gVOafp1i[7b6oI/YUJ8\|~'82$~l~JSBQlNA?Cf-&T8=Zj?*oWc;o9>_7Q!Yaxl<Zy]C-{,DZVB6I)\v$TzDLyg7LG:|tVMa#NyS2jFH8.tGdhU+=(SGpnYX'"Bu$;{$S^Jv'Q,84shKMu}h+qf we#a?mcV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A4{4UmS9>5ti[DOOebee1sXTF-tP,@c2&qsmALqUT_dH$n"/Gl

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A5/s=AAu&?V_&{36HV+5AO~R<ZNt7?7AEwGbG57/&7AEwWjG57.7AEwwrG56k2CE277AEF#r5ArOzG56[

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A58N~~QAE[CEIFE!j=GE"W5AvLVp5A2xz}XE+V/5AQ"O5z<u&=VkH5IRIJCF_~LCN

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A5^^E6o|AA9eV=AAu&1"]E5H"k18x5EAR1={=zVM&zx5EAR9%VV9V9:=r#{11AIV9V9:=r#-yCRw^;5AE}.AEUs3.AGZEE=~C9ZAZvA!7*95ZAZvUs^"}2AAzZwDW~75EAREA5EkR4AE}?>965y255ru5I[<+5bu5I[xrv2rv2rv25?7:(Ag1M8A{?{4}2Iy}#N~=xAg{})@986}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A77{NuB9J5C7}v2*573ZB;75BuB}6@E57GJi}1:35_}v2rv2rv25EAR911A|5}>3IFD5qV15qVF1H?u7"7AwV3&=A73A<G<CJu7OwAiRj8A{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a7dBU.Iz:5z4kGo>^9;GeR/7L |nO%{,`KKPJ"^IJLJMm8M

Ansi based on Dropped File (~WRO0000.doc)

A7p/\:pjH<WO Sl|9=sg9]`PW-cA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a7XyuI4y$m8lI,s&fStGsr

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a<gD|4$k1J^Lm|S5I^TXrezX`<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A<Qld/mToL@\B-w1A;]Gq

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A=>9:x4s1w0p-u.u+j.l)b&f#g |.edXJMj!eIp9%au1AE@D44@D4@D4@D44@D4@D4@D4@D4@D4@D4?D4@D4@D4?4@D4@D484@D4@D48@D4@D48@D4@D4?8@D4@D4K8@D4@D48@D4@D4;8@D4@D48@D4@D48@D4@D4@@D4@D@D4@D@D4@DD4@D4@4@}I>9:x4@D4@D62vzD4@D4=vB9yB6=M62y4@D4@yB6=M62y92vM4@D4@DM62y92vM=vB9@D4@D92vM=vB9yB6=4@D4@D4@D4=vB9yB6=M62y4@D4@D4@D4@yB6=M62y92vM4@D4@D4@D4@DM@Dy9DM=494@D4N5N5N5NNNNNNNNNNN>~^^~>>~^NFB@AA:Av~6Z<5]?3uuAE5>AE5<{RuC:SC5>5?=5>v3AE5<,5:?fEd.3[k1Ehv.C55>$5>(6~6ZImE8uAE5<89-5x5?5>$5>(6:5<~4Z^FAQ?A5D5<D5?7AE5<m15>[i15>,c~6Z`3[5>/5?5>$5>(6/AE5<3[9>/5?/AE5<'AE5>~6Z 1yHuh{AE5>yAE5<yHqy5?yAE5<`?3L1:yH5<"5<"5<yAE5<g555<"5<"5<s5>s5>V*Z1s5>3[d5>d5>V*Z1d5>(6~4Z^T;C5yHuD5<:m5<yHcz5;b5>v3_}X5<Qz5<w{2%E~G7AE5<15>w{215>(6ZWyHC5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a=kr5rnczs^UaW&1:3*Av7*#}(<o5k?2;~oItZINIIqEum]9B6Imu7W^1Ap1CJumTuB>7uNi5}wJ-ANXsVj5w+Z=k*}#?,Y13A#}(<Fu?X:wJ=pt,mXs;ZwN?:8945mX;{*U};Z}2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a=kZ5rVczs^UaW&1:3*Av7*#}(<o5k?2;~oItZINIIqEum]9B6Imu7W^1Ap1CJumTuB>7uNi5}wJ-ANXsVj5w+Z=k*}#?,Y1"3A#}(<Fu?X:wJ=pt,mXs;ZwN?:8945mX;{*U};Z}2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A>b!h</EtN6Zz,1FLK(YbjEfS:[Zv(>CRfX7Ph9MtrpR,%TF!U676;`8&~w=Z-nD^tr(zJpz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a>G;:5AEEAN9HV5A3LC18!ENL5:EL5R?AEs=5V&=3?"0AERHuH5B8}U}[A9_5=++|E_!R$AE}2AApif98MtU9F1=I^UwZ!9_5=+IHA+V5A95umZ=|I@!}25A}-?!3*=T!9_5=+IHA+V5A95umZ=|CF}4D!}25FI]}9?9g9=*5;a=?=+IE}[k[5Q"gV5=B10^6=|I@vU9F165CjjFI^}$wN3f5A9QA^}n;f5AIA!3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A?1AEwRA5j!IVNI}N*{NHD5}Ot

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A@CNl^#VQQtb-9B9ZhKhyR(Ea'L!"?Cbof@6p3GmZ{S\}%&F% cs"</[&eZMzqTw#J9$L% tFC8 #L[XGBWJN$HIk%-nx7|cV"kFy#z=qgb>B;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A[=AAu&5i*Nyu515.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A\-93lT[R*QMNv74R^x5-</8C/^/`mO_F_7oXx~gNAOC~9HDB8}{ w_-Fi59-]kh0jx5C[N,ZQ|rULHP`WJ%uI[]\x%tV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A]~4&OOHDc~ZaEe'cp!Wy&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

a^|A?mw0S)W6|R\ORgO<>l>Ykc^1KATTx}zQjox'S~tlVNZazP];!KTqB

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

abcdefghijklmnopqrstuvwxyz

Ansi based on Dropped File (..exe.3238139870)

ABCDEFGHIJKLMNOPQRSTUVWXYZ

Ansi based on Dropped File (..exe.3238139870)

abnormal program termination

Ansi based on Dropped File (FmtOptions.exe.1089827065)

about:blank

Unicode based on Dropped File (..exe.3238139870)

ad67_lJb64b6d61saad84aceds8346cb_bi11__67_aeId7_a4adb9s3

Ansi based on Image Processing (screen_14.png)

ad67_llb64b6d61Saad840cedS8346cbfbOllcS_67l9aeld7968l4ldb9S3

Ansi based on Image Processing (screen_7.png)

AD@6yg^U&S%*i0|~,Q6+;LnZ|2Y%8#}h$NX$

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ADVAPI32.dll

Ansi based on Dropped File (..exe.3238139870)

AE5B9BEnO~FF5F553rJU53?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AE5tEAHEr-}Q4AHEr-}u&R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AE=5!IE}15VAVx5A}2Ak^G=DL~N}4<")L5u2V45AyV85A5r/?>EoAFQAKEAx{5{*CIX?,8OAV5A}AQ~}nVA5A1=BRAE}RAE9=r#0E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AE=IVG@Ey4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AE?19=fI

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AEIJ4W;zNDzb"6i5MvE=aj

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AEWA.7$f&vrLya&F5&FJ:_!Z{A!FG(uOeZ7C>O=2$DoJ68 >NaPl>{8EgCAit1OTkDckM_EWDaI=A:!RMG:t['S]EfJRkE7A%

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AfaAqd'nLl(pv0g{T9D\-7eVo1[cHsl/7<5z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

aFY{@:M%mVOp^p{{AIP^ &CaqFOEE8uqC8 \d:g]gKC

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AF}"65|{<W~x=8EL"tE5A8uAEI}H>7;u?E5A>3Uwe79A}1)A7ObEILu3AwW5u3f0K17C18?"=7Ci!GbvEUu:\G"ACBmwsC&hZ}w&8:7{^DERLu9:s5}?7O&1C*7j0AEC7a1&33?j0AEw3R775AEwGE57Cu3=re71753s7Cu7OwzA:?5AE=D375AE}#355u25A)Cu5A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AF},N;365w364{g

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AG55B1>qZMIF3"5~9rvU"45=}cI~wJQCNJzA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AH/~+wU%tuqJ"c9+7vzn9OV&^lYM 7 c^+)i-xQ\;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ah5A\ARM1<15"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AhK{4BCr8^z$9%:U%00xu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AJ/N1.~{{wJ12P~<KyE32?t{5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AJ363AbssvA.sNs336AmuB1>s<0R`uR71"l<{uN(12lluCC3U}9wx1IRu1.I\7An{=XCV}JuPI\wV1.T}(3.5j?"B? 33"I\CZP@E|A;7AIwu=J{?"=kH5r?"seA8|~L~z]LVx?#Ofa578<e"r55y89H7y8n>V5At:z:x1IR5dAEE3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AJ}2U0y(5A1wvA:5A7;S5AE}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AKV;OeJA9OVN_!D]mx&$uTb} v\PrD

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

alwWg%}<70Li4KM/i8lWY+]<%TJD3xlR<#f}qrleB~JoT`,DP*taao_Ztg0 g|y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AMR)1AE}@EJ?HJE;5A7D:35"A57C7~I5{?+?GUaQVJ{@EIvEuBs iE}V75A9*ARWAEu27""bF55ACECzV5Au;aN215A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AMymkOVbDu!&!-uFIx?"3|~a9=iOV^B2}|TDA70

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

an_$2Y>ml

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ao75}d#ossQ9)*SaUGq~#=,H)-m T#fpQ`wRhsvL(}L4bMdNc)n8+8:{XjT)PW{q3y{\UA$B?=y+@+WlZ4x

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AO~J*z|~";zbVB5Ac#7BVrvELGHV5AELGHV/5AELGHV;5AS@\V95>]5}N3=B;}2z.JOi>;p99}"I([Zs37""07E_5Vo9>x}2!}2!&:+V^s?>9>S}2^VE53"R5U1NEO~75u62AEyA1EA5u[5[3_"55}]_A]_A]_:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

aPCGh9}p#/"8~A*hnR\FZr{rbs12rg=d<L>mx!F|Qg;4]Ij0t?xle@ZGt)K{?U=R0>#gCJsj 9az

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ApR3AEu:MElA5N,U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AqS5AEu1_v#[7+[@_Vk?>w)PEN~{N5uPEA>~+y5J;{JAu1.ozi>[7z+__5V?>;5AV?>:5APEN~zAE"25J{<AqRG'AEwSw37~+w:[U&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AqW]tERc'*<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AqXQYA]:k

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

aQy|b'/8U0!g3~Qr3(+~/AXPv0xFuPB{gPa%_GIcU@\!G8xY7F,mve!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ar+[IzA;7+w[55}5tVaCWcqr_<;_^EA}[AE_AE_5u[55E'+w[l5+sKAU~E?A9:;z__]_-!?S+9[56R}NE5_9_5=+i[5=f>I^D=~AR9sB|6ExxxV5A9>__S+[7&G&CfiEO~)sijEbs]jEBs

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

asO>A53JL"A5y78NLHAN8sw>A5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

At1-Ag16Ax

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Au2?A|5V}&E5,1n75hE25b7GbEAu^Q#bwEA5BjAA.wJE(5NwE6Alv5ZwNE55FjAAlNE6AlujE(5FAAuJwx=8Au:;L5.ZElZQ'3|I^5,1OHjiZHAkZHSMV5A9V5A9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AudbVmk25FmHpMb:Vu|r

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AuSpA4e4;*?%;21=B>!9>47"E5=~O~JRN(5I#4>||9*zZ6VO~zI*{>[JvxW:rx5Oej

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AutoDetect

Unicode based on Runtime Data (WINWORD.EXE )

AvG\S`/Hdao\Z9\7lW{k'Z*gt=kH\a]@tD6WI[b 1A56ED5E0'?v=H

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AwV{5A{<"E5=4>"G519}>"r~5V(5A1k;9"l55OHR4%AEAxR!AE=RfsAEIFGuV5A3.y4AE"U{V)F5AuZyu51A{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

AxMhO@LbC`=9Keh3UkP$#nd`.u'a1Eq~#2f@:4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ayg=J<'YT>]_n|>)-8gj6("JK:cqF8rY?_##]ZZNeydq

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A{_W5AJCS|U#E5QU0@E5WJ5AErS4AEU}"9xQ5#D56QVQ=5AV;&5A}1MD_Udv!!!"!!IG55ERAE<B=#s53555"2=~1rVu1}9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A|||~|y~xytusvvrsnlng{.n(f(f%a"a^Q@8.y(:n:f:a/h5^!ZNMLIED

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

A~^p\/4;l)--'"&IfNW5 )"f@?O8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

B V"exMk

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

b ~BS%v26s}]F }#/bq{sI35.k>SddGLe4D/

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

B"5Hy=5Uk

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

B$wfG(IrQ$+sG?k`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

b%h2VVCZN^ZxZ"SiyatQ2w1Lnn?kM3I'45 F3ml(_W0d>j}iY~1(-cu#0C_!cN]jv#"la@\$> >E"R,a5Zgu7R|3a-NzF,K,&*{$r&iO<zf$`<ne>-*Ab"Z835s84Pr38.IOi3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

B&k96IE3V4I

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

b(g}wpk&>TQ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

B+PoyqN'"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

b0\YMYS\L%Y-<zIG9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

b0m X(PRw<j*J!

Ansi based on Dropped File (~WRD0002.tmp)

b1z'xy+)}UwmR31tVHs!3NbuK"al<FwV|>.HUC]*[nGb.18)7[4{YK9+?QF7xA3*8[}e^F5-I7VTvj 1BkiO!DG>~QpET8NiNdpJIw<jIXjn.'iXB,1EaJKoke.QE"RGqdDe_~hmO/}%pHWh.FH+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

B2vn^wfQ2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

B5m>jGb5j,?>r3&A*sffh3&A"c5A768C5xA7258C5A8C55uE7ABuE5AB1|11"G55bEAA5,E>lV<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

B8EY\I$u)o!Bc?.V9{$ib/KLVPVpc2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

b:{g^5c@-AAv6V<-FpQ:wU;3&"ojkyK=Qw8T~1fIt~?,F:WIIWpizGXH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

B;X,$G(,onwC@8Tz6Rcw*"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

b<style>body{font-family:"Arial,

Unicode based on Dropped File (..exe.3238139870)

b=8D\9+uNLs4CSdkBcd;o?Gp=k_jD8zsnV0{kM&"-2EB&}]F*u)Vl4-DJ"Xia;Te) e9SS0mb@PpO0_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

b>by;D`z@ZRsbfM2wVHV{Y(<P6@1P#W<rQ1()#WlYtKh^WFfvnb.*CQoE4\S[XGK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

b^A?>9Ai};

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

B^~s<s"F"2u%EAVm|5A>>>W1{4}"?%5,=hhz#L!v!zA5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

b`"S4.`A!<YDQ3N.]b"(]J;twyl'j|

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

B`o=*W[*(@{3=m6"Ub+})K1]_9L9w!J"6o+]#q+R* f16c/4\?qxGe)B)A,1z*SPB]Ax}z_)"r9E_,BonV6.fz-%\i,RJO)E\6ity*FAqW

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ba,1PYO\p\>EA/;x=|x2STr3eL

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ba;}P3Gc&&6~v_W,XKJtd5'd5id}Nh

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

bad exception

Ansi based on Dropped File (..exe.3238139870)

bAG;F5AEsOBD5RE3?7AE7{6@EER}7{6BEsOBD5Iz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Base Class Array'

Ansi based on Dropped File (..exe.3238139870)

Base Class Descriptor at (

Ansi based on Dropped File (..exe.3238139870)

BBBBBB"B&B*B2B>BBBBBBBBBBBBBBBFMzRFRFRFRFRFRFRFRFRFv>NK5AE5AE5F5A>?E5@E5@E5AE5)jMAE5(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

bE^serN}Ya{JS.EQ"$$cZ^(xbl.^AoG1:-'X@_}v1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Bg-2!q,0)7AE;;]!_I{l#D9cS"efqE^3Bn_MNa\k3,K;jm\%)Mbi>6k r5#kncgP6sD]Gh@jGC`wSu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

BG?7u=]Y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

bgNY5wUd1p]c_v=Ngo]6:ae0IEpdldqLN>n9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

BIY?-1O^G3EZoA^Eau"V5yu51Au=ZGu3Z{3E^o}15V}&7L}B@"F95F5A!sN3E>nO~IA&}21C7>GA5b.16IGEh7:sJ5F.?>3u16w";65wy9UYu511R1)AEw1|RAAE9=ESVhE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

bI}FwHT1a417dnV(Xd

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

bj}|Qa629*

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

BL+ZP+WI.wKeQV1K$MttetgwIddE:%+K/D?yiX8qRyi3/hOS0[\: fzTaqYCn)zNW (X+SkxUtj..npUG2,g}Q&3Fd#|uUF$!\ULNE`LpbF)c0')*W,@!.1mV9ZzjOJlx<xhL&zzL-@.uIxE<Lcj]K8b",t?"W

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

blIK4)IJz9d21

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

BLu{?omwze{hmNG]VUdqDhY,:Hq%fQ0H*4xY^h.pkTYp&[ELC/7'Lnt@UaKc7"~e4){+Jf4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

BNARABuJ1>o_/$KuN{oS3>7ofIJr:5rJ5K_E;>98AIHIL9<5@30QA!E<ULF|a~7FC^^3*;~K~53"L?7AEuV{Et|i57NCJwJ325$sucj):5Bs3n

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

BO]B8M)Msb2,PK!8pFp:word/styles.xmlS8oiHBi2C9b+XSJZ9G]}WIYt}OUzo?{i(b s?x{wXH$X1$"nt$ VV2_(VfQDO2E{kwkw:dI%BQPLzc^35)}/NoSuw7=:(7b^fWYqY\:5ww"@kR0(4OiD}An*?PA"^{Hodzpvf.5]";XZctp]fHHk4V6

Ansi based on Dropped File (~WRD0002.tmp)

BRCOAEu:=D

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

bs&)g3'L%`XG+?lZdC*a:1B

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

bs}1}AEoQ~|k[5B+,I_0v_k[>[JG^|,}(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

bTlR0*$=@RcWZ-y6eeG

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

BTZAUOsK#L88R(FDP_q(:>?@^rI5N7{w~9jO@Sr516LC]t#lgc-rZ4$bF8/iEp-S]|

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Bu=[I?!93VMD;s3CDE~IUAD9"&84AENR<AEsJsNH7B8HZ7{DE7F89JRx<AE}Ju25?;5A1.33AN8sN#f5AN5Z9RHEAF95=5?9?7AEBR6?AECE5VJE6A"J5AANRV?AEBR^?AEuU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Bu=[I?!9U}[A9_5=++|E_!R AE}2AApif98=DQ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Bu=[I?!sRyOwz ARsvf5AIUADS)}[A9_5=++|E_!R- AE}2AApif98=DQ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Bv7K~.%-k~X|M)^Q?YqQk

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Bz}BLSx-%WwQPAPH:,A>/g,so@B6U14O;zS;h-wIE"@6wO]I0II639;CHI%yl,l%>c%{=dB@t%

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

B|m"' z8l

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

B}/(8_lw_7,Vxg^"YOoz&67sfRQzJs>6v9[]3r4N=~*a2xb~@CR9/D1%^'g{#a-$(]z]&cimYW

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

c"TO55R<AEu"M55".M55B1u3R 7557!1y5vuQAV5uVg5Ax1A55~A!Em!AAvR5AE5hAR9u5uy.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

c#W}Ddx7+lkA9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

C$)RuGP#->K-}D'? 8dX,s.l3^,3>XM#8C,Vls>[8+wUX+;C3D2'rlF~rx5h4(r&]*xIC&|IB<IEA.<b{dD&0^xM!U>t;/C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

C$DioY%~TZx'n,cW+W?&jna"~`tMh:{&j'R!fs5<e-PB".zt9\}'wxVlKI<;:*BRn{#_|]NRrjKHK5zLZ[.fCsWqZC}`z4r{U>h+r|L3mu\;0MH.!=C|g0@RIt:H=</%q4FT9X"c9f*Uc;OgKt+kg"}2NfaNQ^l(Pc

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

C)7g8soz63|.wg'z(M\ 0<@[[_l;Vc7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

C-5~2sdybQLs

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

c-`+C%E"N

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

c/u7EDG<,'9a

Ansi based on Dropped File (~WRO0000.doc)

C1*ykm|V\7v8} .bRL!^QdN&ei0!I%]pRpY5\Zr:ZX

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

C42RBA>7A&UTUKte;<^6b

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

C69?A)V,[:CjYW|S2T2vB

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

%COMMONPROGRAMFILES%\Microsoft Shared\TextConv\RECOVR32.CNV

Unicode based on Runtime Data (WINWORD.EXE )

%COMMONPROGRAMFILES%\Microsoft Shared\TextConv\WPFT532.CNV

Unicode based on Runtime Data (WINWORD.EXE )

%COMMONPROGRAMFILES%\Microsoft Shared\TextConv\WPFT632.CNV

Unicode based on Runtime Data (WINWORD.EXE )

%PROGRAMFILES%\COMMON~1\MICROS~1\SMARTT~1\LISTS\BASMLA.XSL

Unicode based on Runtime Data (WINWORD.EXE )

%WINDIR%\system32\apphelp.dll

Unicode based on Runtime Data (WINWORD.EXE )

C>Rn"#AW<|o

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

c@G^;4l~lyr'G@G1HbmTP=GC'1ESJN%jlL9y\S_Ppk(ufa:d}:w&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ca14%{[h(@3QA$u~"_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CBg96AF1N(AEV)}2GEt>C:8$0JG>yBQ42!D5=V5A9:A~AN9*zZ6u5V%AiRo=|Q=f-=d-A@|G"?RhAE6CJu5i={=B"5v75{uM;h}2RkAE6wNu72JR1.=7zs=AAu&=V1&Au33V`5A?RE`AE3~nEIz~B5IAxS]}>~9.>x98}1|3A5?>18"C5xU:=uV5A1:5:Bu4v5;aIa~35AxR3AEEIz~B5I~wyu51IR_&{365u7.7EAle9:AVW5AwV15A9:5|5}IFEzs}j^?Asjuf0>In*z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

cBoFxKxsnpbA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CCWWWBVNVZVfVnVzVVlB]^]r]].]VVv\VV"V&V*V.V:V>VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVBQNQVQbQzQQQ:QQQQQ^PzPP>PPPPPPPRSZSfSvSS2SSSSVRrRR:RRRRl:~L>;~L><|J{O;~>2~B:vJ>:z:z:z:z:z???|<|<|<z:z:z:z:z:???<|<|<|>;|I:?xM63tA27pE.+lY*/h]&#dQ"'`U\iXmTaPeLy

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

cd 2*QMI!Qcm`*;im$Ou2u]QK\iiOh,O(&vOvu6z)0fdTin;$,1`(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CE2B7AEbE;J5A13C;N5A}{CECR5A16wOZG53?&6AERAEsOfF5=~C;5A7{CE}{BEC^5A3{CE5/7{CEAV#-5Av21A"(5_5IruuB6"5155V9:113r}54V:3uu1=D9Es1y77IA"5MVQIA7}}>5AuFE.!qZ57CwxAj=AAu&5aq5E"-5CEIzuUu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CE9A|7JM~8L57*AV8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ce@b%*&KGu|&#J S'gJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CEAR'#1R}1n=B}2;zR^5AEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CEC81{CEC81{CEC87{CEisD7,G;5AsDV7{vCE34IuwxA5CW;!AR4AEwMU}V5A95sdAC R$AE2x"T56<B!Ru"2*#?>~"'{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

cEX\'8UloD`~ ;<@ShRMHZ;Ok@!5h)$%eoFh2I3E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

chang,t_

Ansi based on Image Processing (screen_14.png)

CharUpperW

Ansi based on Dropped File (..exe.3238139870)

ciRu8Z+svG"5or~:a]=8AaD

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CIZOAA^u=C94tEroO~AZuBIX?,O^G5A3@27R3;zNwA5ZI^ZYau9\Z1IFE=B:>QOeH5y=f>I~O5~/1IAE;EEroO~C}2J!9~jG"{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CJA175u3A"J3&=B>#:aG55IzwJ=j1oEEA5h32yL}9*}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Class Hierarchy Descriptor'

Ansi based on Dropped File (..exe.3238139870)

cLMG]#riC(y}S>u<. +n[q,s'(<`t.3'Y5UEyT*JD60XSzjR}JD-24{e\+6jG0v]G?t-@d1NU[zo_ZL\jxFfozZR31#k-)z?0R:; UjBc#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CloseHandle

Ansi based on Dropped File (FmtOptions.exe.1089827065)

CLSIDFromString

Ansi based on Dropped File (..exe.3238139870)

Cm;0qH![`,PSi_6zl.=cv^gRad_6"E*Wqx+{7:{Whja6X3ck|%x{:/<SU^0D^pyY- ="!'1B{WuJllG#&F[}crLscd?9yo?8>EorF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Cm]zf ^zbR"e#w!:njJ:4K.$"fes

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

COCRa0gED;e+s<KL]v*Y~C3?RS;:&,\P(e1l. ~:We4Xt<iYw]Pl#.GeK8B8Hm/l6?|O(u|\dEIV.z]C!uG-Kj.@2[3]aYE+N]FjNO^VUB:3^gdfy/;h*KF?:,0*<#rgd#[0]#KP;`BZ(O51r3c.t{Yp!(D_k4;NrEa'I3'G=%"}.F9yV0^ZE>sD)|lI'zE)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CoCreateInstance

Ansi based on Dropped File (..exe.3238139870)

COKGCAAu&96u?%>#$9sB?15@9>={NlF4NlG4NlD4NlE=|Q!H@H@Q!HBHBQAuQ@>,5FB~}HQAAu&A4z5^1CFjANI|IA`!G}2V1GFrB5}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

COMCTL32.dll

Ansi based on Dropped File (..exe.3238139870)

CompareStringW

Ansi based on Dropped File (..exe.3238139870)

Complete Object Locator'

Ansi based on Dropped File (..exe.3238139870)

CopyRect

Ansi based on Dropped File (..exe.3238139870)

CorExitProcess

Ansi based on Dropped File (..exe.3238139870)

CqwqM!dBU9X49Ing)b. 7KMAldkb]["@5-\zKd55UF4bG<Bn{(q^"b+TvYEo{;OY\/`BZ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CR;+Y+Rk\#0L},MTgXIVl=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CR`Fhwo'U%):(x/vw qHoo6h4CvDLek)l86.

Ansi based on Dropped File (~WRO0000.doc)

CRAE9RZAE}Q.Av{3s*CAN9\A@}+8V5AwB1<R=AEAR{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CRDAEwVp5A}VLM5A9:UsuCG77u:=\Xu9"$365EA5FEIzwZQ"c75y/3EC9.A}6@E5V1.VVd5AyR5EAREVJV!45Au3;z=y!977

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CreateCompatibleBitmap

Ansi based on Dropped File (..exe.3238139870)

CreateCompatibleDC

Ansi based on Dropped File (..exe.3238139870)

CreateDIBSection

Ansi based on Dropped File (..exe.3238139870)

CreateDirectoryW

Ansi based on Dropped File (..exe.3238139870)

CreateFileA

Ansi based on Dropped File (..exe.3238139870)

CreateFileMappingW

Ansi based on Dropped File (..exe.3238139870)

CreateFileW

Ansi based on Dropped File (..exe.3238139870)

CreateStreamOnHGlobal

Ansi based on Dropped File (..exe.3238139870)

CreateWindowExW

Ansi based on Dropped File (..exe.3238139870)

CRwR3:\CFwFB"E5;zz!>wySAEiz=AAu&5wIG;3IG}1yAEz=z}R{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Crypt32.dll

Unicode based on Dropped File (..exe.3238139870)

CryptProtectMemory

Ansi based on Dropped File (..exe.3238139870)

CryptProtectMemory failed

Unicode based on Dropped File (..exe.3238139870)

CryptUnprotectMemory

Ansi based on Dropped File (..exe.3238139870)

CryptUnprotectMemory failed

Unicode based on Dropped File (..exe.3238139870)

cU@=.q]*>+rmD2Q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CVL')>k6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Cw64uYay5H%QvK|TgRSM%<>F(,h:PK!lword/webSettings.xmlJ0;ie)mD<6u}z

Ansi based on Dropped File (~WRD0002.tmp)

cX$;jY&b>u]dcyZWPa&GZ1=1Xizp#f7B.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Cxiij4OEAK^I{wG;ZlpK@9V

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

CYEUtH5HRF"X3/\7$_b91mBCUxC5}Ke2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

c{GJ64?>-[E%dg5hLY!MeM^O"[VBs;XC4t(<e>ut

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

C~=:rh*z=5,_EA,AmwEl3?F$AE"5i3@DsOT5EA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

D!N^ V0c?K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

D,UC|PTMg__+y"6.>C'Ose4`:s-qLl72BeMCvGSE-G^Y!f9Cp

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

D.)OwDk);Gv,1jsz)A,Q6>1X`TjOr9HvQx&?uRhpd

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

D.S5 t=W/:,qSYjut;o|"=j$#+~mgqOY8O}k"!J{}u/4wxAPeTPTu< KN'x6q@ "xNh4CNN3RgEL}K&tKeP&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

d1W;M/t;^*3zIZ5>lp2dg^.fp5>iKy_K 0>^>7>J7F 1zMv;Zz'w

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

d4#F*O4oDZB|&iN&;z&d_I^Zf%g4WdaNMg0SWma_XB;{BN'`iZjpm:Gr=%xh<N'{6"J\vJ+CH$A6\)\Y2|b

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

D4x#"Gq."kx#@dyx#@dm+zvFPj7BNMPx#XXVq9X (iG#p'YV"U"k:gES-E=gPj@g-I5Ob!?2XFH 6R>:-FU >OT.";n}|5`tI>y$uq^b'5 vWT\Q=xQ_*-3&Q=-#+f:>)9G~d \.y)[pe?3c

Ansi based on Dropped File (~WRD0002.tmp)

D5=~|AAu&1u3y*u;zR`iAEu:E3;zAV9:U}919u51A1y*u=7|AAu&11

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

D5A}1rAE5zEo~Q~=AR9BD5A965VU5Ayu5V1@bE5Bu;zAj}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

D5fs0 ]Ukz6=`d_R;>staO]mp?_ZfofM:dD=,2jV @"w&y@_f0yL}XL!'T;3{Rc*;kp4kv0l=+pxy/iQ39Boak#[d7'ft}0!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

d75liA%)/jO&*E=w]68Pf/},X!]6p-YGRUAba2YLN4:.7ah&7,zcQ=R>m-3y4-o=A"dsLSb_v&M^!{D~2a

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

d:\Projects\WinRAR\SFX\build\sfxzip32\Release\sfxzip.pdb

Ansi based on Dropped File (..exe.3238139870)

D<PeBCMi389yWp}C9upn~'w}eHbqoI_ssS>:E?3v!~,7xi`]M+bVEC1_R}4g=z_Dlpeex{~~^1n>&hm*+/.vt:>{XXo@@(R~'N 3Yhl

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

d=V{n/`V-FQ/[f4Vs7;D

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

d]C[A>.w:KGwk{oVr?d3uuRXr/tq520|eZk{iSX_n{1fg,&iO5>d>"fRhCE6sh@I1[eUT!jd]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

D_GCi!=_t9}p%Y|iWV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

dA9VuJl gVl(8}vcJ}X %x+/

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

DANH SCH CN B LP KHA D27 - D21

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

DA{/NrfSO~$kuVm:X,T*5%!<1V+<c^A+Dx.5Ax'IHx@TV\j@Zn0R~jU$OO"f~}7J

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

dC`\p.r("G

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

dddd, MMMM dd, yyyy

Ansi based on Dropped File (FmtOptions.exe.1089827065)

ddKpm)UC~\hBGIjy5R<)K"04I0dR:w &nJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

DecodePointer

Ansi based on Dropped File (..exe.3238139870)

DefbF0uDII_6xCp-c=fnWc7J7/1ywfT0M*0$,}?6>}<@wx-?:cfRU2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

DefWindowProcW

Ansi based on Dropped File (..exe.3238139870)

DeleteCriticalSection

Ansi based on Dropped File (FmtOptions.exe.1089827065)

DeleteFileW

Ansi based on Dropped File (..exe.3238139870)

DeleteObject

Ansi based on Dropped File (..exe.3238139870)

DestroyIcon

Ansi based on Dropped File (..exe.3238139870)

DestroyWindow

Ansi based on Dropped File (..exe.3238139870)

dFYzP[#V>7\KFkxk.s-3fx=I8`'u[p/JRTCH4UXVIf!BU7o+{d+}mGCf)q$jVd=^3;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

DgP-D|3:%X[RA-/T-;8%TW.X|&Q%9,@ZT/_' #.B)"z[=LskPgWFHj`ymixIU5bU`~cP+,#CA_z$(]R>-sLvPT"2odr\AGZ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Dh259c)@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

DHm|7sE62lF?k+,>KVn:jo`4h~p'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

DialogBoxParamW

Ansi based on Dropped File (..exe.3238139870)

DispatchMessageW

Ansi based on Dropped File (..exe.3238139870)

DLi}q={NFX{yKw{L`nG'rz*Ec<)_U-usk,h,B_P1aM']h3E#[qmsRAf8bIKes]Yt>F5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

dM$S>il-f_0'vT

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

dmdX8R9iQWN}*B%|jR]3;IB?,hrp}:N9H @0Wsa!Qq;kf8CixY[B&,N*IzOm3T0&*dCzhCHEI&%'jD79/m:/4hjA?lA"Ijk6su?2of7<;+pPg;!^ZLtf>0_EwG.PPZ.Z4'*W9I5`h,a+.xn]:7"|~xj5U{(}L?;^ 2n]Y2nNc`d(HZ#Z[e

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

DOMAIN error

Ansi based on Dropped File (FmtOptions.exe.1089827065)

dQbLL!W)^af@IcwKf

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Dr8#&b{ N0VU0Ue,V 3la

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

dv\~J;}c~ _RP1$uM=1TJ]{HnlN_6~!028G9,C%^AQi*!M9zXE@{)q*U-256>,;sh!|It;Yc!p/

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Dw18?jxZ={R'<{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

dWklKtfavD<GSu5WsP3=CV8IP->k'}*#g,HX6r2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

dwmqTe]#v>/T~$jzmWs[RSmB\F

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

dXc&}BgX*9yVF?hO8M^6bHR9!]3GaBN0!o`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

dXiJ(x$(:;!I_TS1?E??ZBmU/?~xY'y5g&/>GMGeD3Vq%'#q$8K)fw9:

Ansi based on Dropped File (~WRD0002.tmp)

DXMu7~4saAD_-wB

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

DyK8Wl$ubjkhmj}CO[$_q=d&]@jva9va3hu2'R[AI*U{f@#hB?ynCFsR_AGpD{,>Icn*&v1_zD9AauDCH_A1#)2q=]-cz6fAzSy"dDMi_le@_}uu/$i4y+f/"I$k}f'x8+p!ib,]q)(q%.3!XNtOep+[DY"]{uQUL<`FRN0N"Glg] yhV6S3p%aK[s8DaGL4U01%C/`RSzG"L~@R[Ld OwV\Plkkk(GoXk9Kfs'6w0A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

dYZ[x[1i=A5S

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E!=FsO~5RuN73}nIJ1:zC)@E7{E3?)@E"Gx57{E3?YAE"[x5K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

e!o,Q8ZH.xakTbzQvXbl8iTggYBQq"2"*2}o+Tr6"}0R%iJp6y&f&!~v"m<`zJ%{raos.r"}$h/}m8!c

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E"L*|ts*{P

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E"L5x"#x##=?sO5j7{EV>5A9:t&bUNE:AsO5sO~U5'IzsO~U5E)IFE3?>%AEEA:IzE5AN>4;>7?>!AEsO~5"{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

e%Pr,v_au_

Ansi based on Image Processing (screen_14.png)

E&Yy{^50SgC*fShAU@wLaTK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

e-E4~<+*7_i4GnkR9`{_tcO'h5];pBsZ7fH(h.NR{r#":8m=s"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E2oAFQAu"fyuZ?;RJ;zOlD5V.*u:A&"3!?;9R^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E2W88.\]cUq(Fer%V.A@E}RR@oo*2}=n[hUf*!7C1ai/h<]+mO-WBJJ*^u7`nL

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E31q^,^>k;[#kgM&<fsf\!GCSl^0

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E37>%AEkECR}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E5@E5"@E5jE5@E5=9@E5fE5@E5rfJDzAE5l@E5jE5@E5@E5@E5fE5@E5b@E5V@E5fE5@E5@E5fE5@E5OK@E5jE5@E5m@E5vE5@E5@E5nE5@E5@E5jE5@E5>@E5rE5@E5@E5jE5@E5@E52E5@E5@E5nE5@E5@E5fE5@E5@E5rE5@E5@E5nE5@E589@E5nE5@E52@E5rE5@E50o3@E5~E5@E5Y1@E5jE5@E5*@E5jE5@E5%@E5jE5@E5#@E5nE5@E5@E5nE5@E5V@E5fE5@E5pvpRjhjhJjjjVh^ri^hh 4FDTbn|4rbN@,rZ@:*~\B8Xr8FRhv

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E5A5f.?>;5AQDAAu&EA"jD5=~}v2rv2rv21>11,=O1&A=O1A}M16AxM/!16AAAWk%Tk&w

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E5}sR5sR%PAE75EAR9AGJE5sNEA5EA"D5=~JF12=7wyu515OHzK5~E5fE5nE5VE5^E5FE5R{AERAERAERAERAERAERAERAERAERAE}EV5AEV5AEV5AEV5AEV5AEV5AEV5AEV@5AEVH5AEVP5AEVX5AEV`5AEVh5AEVp5AEVx5AEV5A9:A~fE5>R_AE|6V,5AEHF"55AnJE5.RAE|&V5AEHV"5A^E5RAE|V5A9:=AAu&1;L5v"512RAEAn"I55EARu?1*R+AEAf"}51"ROAEA^"!51RsAEAV"51RAEy2rv2rv21zu74

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

e8I8VWtPbgqk!wY

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E9:5Iruu6"_51A5R5AE}uuwyAAEA5AEIzu zh<E}1AO1?R}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

e:tQe9M'!fB@r*>zXF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E=OoLyUJ]\z#T;??Zi`Twe}!G=e%4f.<[LFBEA <untcw8wj

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E=sNzE5A}!73>E3?>!AE">3z~59C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E>\G;z5AsO5RAEG;z5A{EG;5A7IF3?>%AE"L"sO~5RAEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EA5"E5UuURAE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EA5&,9>1As8EvlI;9>9Jx#3=IzE5A3?>qAE5Jh3"FS5n|W9{@ES7AE}OzC;z%5AIO5R=B93?>AE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EAA{BI;1yYm?u9xuG^GJ5BtEIzu25^I)5qK5CNu3";z5As1CV{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

eaB:Z Ry#eu4tOl\=NBb(@.`lfNNWHt_(a`[3pi5/knBV)wK%SHZCcys/OvrJ_BBXg@gGj;-f61%'#*p/_"`5QR0O4XYCfBKtdvUvMFApa^M?oM6Glok8;x(r+3H%QL3I2*Tzy_w6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EAF16=~Bu1Z1>;s>sNL1AEA5RI4AEu9:AAF}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EAG;5Aj15wG_5A{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

eAuiG}A0AUS%}1~??`$31eu>5q-*\G5AEw7G",?>:(13I~w=ICw3rE5u3&7jE54v:=zv1'A^C-"5Au3785u?EBD55Ag14{6AsN;.5A85A,z6AAQu06AA}Cu,u-(5q-"15H?,75C17|0&5Au>mZj/";x2LAuin17H;"&{AELAuiH;""7I;L5AE5A}ECDpG55?5AEu3OA~~=|IEKAE"XA57CE5V&>%L;vGZG:5AIU7C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

eb=^o!\KXct.w@L R>S

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EbRn;z7s

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EC !j5PfR22

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ECRC;z5AGxE5A3"R}}8IF9GINkSIFNe?>}Nu3j&:j;z33?>%AEGZNZ}:AZEnJF5J5wwFz5A}w~U5G;z5A=tQEG;z5A""@5BsO~U5R25AV7{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

eD'YwTw@$1<"2H!@D?|K?hGlT)ZY6Fx

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ed7YUx@p:PlevKT:Py8!ua-c=}4ul|~7!i:b<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EE#9I98?1AEAEw~A5W}2z=B:E}2z?=B:Q}2z+=B:m9[nEE5?.1AEGZ5A}{EE"CA5WI=B1z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EE#=71AE#=71AE#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EE27*9}|@JT=Z!>>?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EE33G7>AC

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

eE3?AERI5AsO5A=8FssO~5E3G+5AR8.AEw?>;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

eEE"3?>AE"Z57{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

eEV%B5A95G;}4AsO~a5RG;z%5AEG;z%5AsO5R3?@E=4AG;4A",57{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

eEVA5A8r";zrsO~a5R3?>AE"/53?AEG;5A7{EVA5AIO~5Ib

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

eEVe}"zC;5AwO~53?@EG;m5A=YAEG;4AsO)5R>sO)5"=~O~zww=z3?>yAE",lG;m5AE(EN~{XIJ=YAEGm5AIF9}N>7sO)5R\AEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

eFq_r7I1'T9k'vU<rm

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EgaC'(E$&40_mZoFJzEbo`@ *2#Lmm-0o'%/lRP]:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EGHEEEMUQ<UkMTxUEMMEEEEEUEB EMUQ$UEEEMMUUEM;HUEMUUEMHUEE3E:t@]}uMMU;UuEEM;MuUUE;EuMMU;UuEEM;MuUUE;EuMMU;UuEEM;MuUU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

egt^QYAzvG;s9}5c=]aDGWQ]\|aV8l.ER/WP_I1o;Z,)[j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EIz5r?37G^G5J},{5tI_Vh5A3",5y"I5=~ItEuU"365EA5RW4AE}37!R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EIz7{NEV15A7{NEV7A(_>G;5AsIzI

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EjYM#9>Orw"R+o+RVc{HK'0\'BfAxFe :'yA LoS{]&eVC&]||ox{o]xS~l)wx{ ?'7\]Y=]gU2VEgqUB29e}:Ck]?_#0EYE;+I+SQVhe-SvXT]QjFX0gOFy7*>1{GASkGw?n6P}ak+(k}%Z+3PU&]9{VlD.\Sn)F`c6\,F5<D1IsN C|tY%iiTq^-LqBx2%}|.nEOF8MZ0IqV]tOM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

eK&x[F8luoDQ3CVc

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

El!%9A3C5IEu=AAu&u1uU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

El5h=uV5Awx1sB`%!EmO~r`AFu3B ;zF6125AAAF1A55uE5AnUuBE55AF1AABu?>ABuE5A0=wxAAz|555.M&~M&AR;j57{AEE~lO~ sOE5R%AE{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ElJ"'5V*5A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EMySbbFuaj6ez}ZO$gc.|^^-Y-""-aiNPuNZ&F Gt~j=H@_e|^}oe`<!Q</QrRgxaV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EnableWindow

Ansi based on Dropped File (..exe.3238139870)

EncodePointer

Ansi based on Dropped File (..exe.3238139870)

EndDialog

Ansi based on Dropped File (..exe.3238139870)

EnterCriticalSection

Ansi based on Dropped File (FmtOptions.exe.1089827065)

EN~=y"R2AE2!7V5ABsjf

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EO`;nE>Iz!($4zB690p[y|O=qAh8]x8&:Qe8?Pj%JalbQaIMv"TI 6-cK.I\3KLW_ueGQQcr!AM=l!7E*,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EoAN18"t5}AuZ"&x5yn9}"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

eOZ{4lqiZzi*;N.U)_`_:>A;5`!9!fBQcYLd-FmhTt,s9tMh1QM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EqcwPK!dQ1word/_rels/document.xml.rels (j0{-;@$~

Ansi based on Dropped File (~WRO0000.doc)

eRUT6/gCz\-a`v`/z"NX';

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ES5_3MweQp>C 6l:?/}X0%W?@G;+r@r1&W1&"4hLZO9Yg1jRqsO^VRmk%

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

eSsGGd\cr^x

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EV7{D3?>!AE"=~G;zE5A]E~wO~q5sO~Q57{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EV}2IFxe D H!I7{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ExitProcess

Ansi based on Dropped File (FmtOptions.exe.1089827065)

ExpandEnvironmentStringsW

Ansi based on Dropped File (..exe.3238139870)

Extensions

Unicode based on Runtime Data (WINWORD.EXE )

EY8}p+o3*pGu^1$@$UmeE*y\=1MKW3J0C4qC

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EYHfsWI3bbHG-vPoM_{jBvv>_V1oMV7xga2b;"=I-gL,0<7RYx:!U`J$@P8$!ZviTRSH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

EzdtsnAIu6%!l7E&{Tb-_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

e{$ylT_="P;jO\H?Hl"ZaF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

E}";5yu511o5AluM;zE(A9?>5=J{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

f!zh0u]x"DQn$,R^-Y%XbU]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

f$Dz+D`%y#`#k:|QJwJ3Ba%Bf(E}0^m!.Eql|I2~4X$%nlt)?,dPgO{_Fdl3ZoK-F8 NB_i]%i*cJUr0D+rd2:_KBs.>c{n

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F'<d>X=,>a\R;WM_T:j"uU[tVBsE8z"pYKZ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F'|)\Ln[A7%6pk{o,(W8 `#;?jVr"Z9,A*|l_QQ9v0ed%}#-:.WTh1c}?I+P8U*>3Iz{ SI?z:Rn%0+`<0q~(lc<RN~JlV8%zM/*JrN4Q>wL)f0})dS[K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F(@;_+O:5#*U"S;qkRqn>Q+sbN1Hpsy"KnG>"D$f4B*nsf

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F(_kPc!yw -KAAa1wt6{s+}&0=Yv[.;PKP/Xnp47^[&l&)awI,edtRb^nz}kHuppKr2YyO<+2C9kFM\<rQOxa FLD+UgNHCk27QL:Vc`(R7A{j<C!bGj}#N><(|R!kIC`zS$.Zj!|aH}d*,99|YTLx3:LJ0=(,SshKyLX6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F+/[T64OV{A/cPXV(t|8"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F,qD|~z?V'B2M,.yBm]dB;Y03hr1\eI<U[2pH8T/cqfj7|Ci$Jg=f$OR's45o$UV2EP{3]]ai+16a4vt\Pf% `++ZkRx:Jn,q2-P{x~)sC<{H`V9=-hh1[YqA,db%ud"mLoi#p7RdJ<<D\R["_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F0=W5qn:no-NX[p5APSdS3}40LD$Zy)/U\]a3h^R}3w#;dEy513/)/FnNg_>X3 WtHxJn8VFb5h0_ObAZXC$qE+a+7AX)5e`&dN@DHi@&GhIx}:54o^RhaAcL9HT'#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

f1KR76ElO~~QA}^}N}Jwb7{CEC^u3"7}&Au:;LzEElAF165A~?+zwx1rV6EV17"SGsOBU5REu2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

f2JP9kNVttqF%7$1/E:~%LcKySz,2?+0@Rh2lRR~68JGe9A?B>c62V8::*"j$qds$9)"m`J3>z;Mof]UD%iaYdQVT)(ho]%omwnWWi\vJ7M?xws~V

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

f2Yumn%4OCP[iHwk

Ansi based on Dropped File (~WRO0000.doc)

F5AE!k1RPUAEz"55IFDV5A}IvE`e=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F5AE9RuZR%3AE=5Zm5Aub36A&"5Ruj3vB"Y5.C66;9A)-YIv9.5UE;zAV5AJ"C5hwZ15tzN5t=>zA1;z37ebARc;zNLF?>:[17u9?&BE3#u5A>R;zN?>:#E55"^5=~I;81O~Iy!"?>"E{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F5AEA^@EA"<L5yu51IRuIu?[JwR17A};5KUE{3.7KE>5Ae>?}2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F5AEA^|Vyu515}AE=f>=f}15V#Y55EAR11O~"7Aw5Cu5{"7u15{"7A=xUu7u35||AAu&=VAGRAEA1uV9GfsVRuV9:UuKv

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F5AEAfu^RhAE=59}15VF."5V;CFu<7?/AEw_57/AE~SC+ECR_AE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F5AEIA^5"".5}"25yV5A=AAu&5iFF6]vB}15Vu1V1H9>|&szAF6"E}Vm5AC^wf1=AA}{{{{V;Z5A1Cb{5}AS@zBkFU1-"E55J}1!1=IV=RVx5A}~6EIzdF6J6B69ZECZ~9*zZI~E^R.MAE~36=A9}1Awj3=A17.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F5AEIEz5"r15V}AEV5A9:=AA"5AERP3AEu3AA5?EEIz{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F5AEIZ?}9:75

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F5AEu^Q~=AR9BD5AVS4AEAR97Au{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F5AEuZQ~=AR8~R%=AE=^CIEAJuQAu79611R4AE}7EV5AAVlL5AQG5FEEvE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F5AEuZRcAE=rv2rv2rv25EAR1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

f7QvbU}M*<f8GQAYAl

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

f9*VQuy]41h%u W,6g)c+egI3N,)DQ3Y1+Q"Q)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

f:I^-$IPzM3.5pC1TN1Z#Zt>{C]OgueC_)JL`vqf]Y8pREl-;^NiK}3<_N]%/.RD(M\->L'KIk_TP|fOFGy>H ;z?NODz<BdI-:'g,loKdllo,Xy+<MGm[}oZ$8R/=KE{){se8hy|[1f`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F[56R}QFC3_AN1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

f_&Gb7AwZ17AwR17INIBIFCNwF_Cbsf]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

F_mz0H%gwSU$+GI(vH|

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

failed to load, err = %d - %s

Unicode based on Dropped File (FmtOptions.exe.1089827065)

fao.b*lIrj),l0%b

Ansi based on Dropped File (~WRD0002.tmp)

FAw5o35IvE-*uJ}2s;Zz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FBM)As#Zu5t7AtiAFJ3AJ-,AICN5J\GRp.1C/!9_^IW{]a#6uj6S

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FBM)As#Zu5t7AtiAFJ3AJ-,AICN5J\GRp.1C/!9_^IW{]a#uR6S

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

fc>d[kv(Q@lmI=%6BwA<{4>5l1nP?@>'ScVT*

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FFfSN2^yvldA8<{<FD0H

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

fI,T37`8~\Gf#QU4B:bu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FileTimeToLocalFileTime

Ansi based on Dropped File (..exe.3238139870)

FileTimeToSystemTime

Ansi based on Dropped File (..exe.3238139870)

FindClose

Ansi based on Dropped File (..exe.3238139870)

FindFirstFileW

Ansi based on Dropped File (..exe.3238139870)

FindNextFileW

Ansi based on Dropped File (..exe.3238139870)

FindResourceW

Ansi based on Dropped File (..exe.3238139870)

FindWindowExW

Ansi based on Dropped File (..exe.3238139870)

fK&qY9mzEn\H]-(XdIzLRk@g}px{u<r3Xs~0k.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

fk7!3.RAEuZ3"c5y}ZE9BD5ARuZR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

fk;zR]AE!q18Fu;Z9\GJGuF167b"5=tCfw^1=BR8\AE}RU\AE95|uWjyz"",57H(E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

fk=B98sOd5R\v=EoIFxEnn$7{rPER}7s^E"?5sOT57s^ECF9EBfk=B|96A7s^E"05;32*O(7{rPEEn>3?F4AEsDVn&5AsOD57{r`E"$7{ERl}AsOT5763?AE5yF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FKG}SUK&g!fY h+,{=4.22MFuuzWqf9>G19t'gZXkPK!Oa=word/stylesWithEffects.xmlmS8}CH4P3m60Z|~ pV;wcUcoWa<$2Z'}=,GNg}^KSD6&$6<dq(Dr{2Zx|?LOOq"=@bK\&ck-eL&!K,+lfp:\I#=\3ZzyL'8)]z

Ansi based on Dropped File (~WRD0002.tmp)

FlsGetValue

Ansi based on Dropped File (..exe.3238139870)

FlsSetValue

Ansi based on Dropped File (..exe.3238139870)

FlushFileBuffers

Ansi based on Dropped File (FmtOptions.exe.1089827065)

FM)df!e@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

fm.{}arS>C$->\b|XK3lQ%<^gr={nEO9H"_khnum%MLtYRroH G[*Gx1G1|

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FmtOptions.dll

Unicode based on Dropped File (FmtOptions.exe.1089827065)

FmtOptions.dll (or child QP5.dll) failed to load, err = %d - %s

Unicode based on Dropped File (FmtOptions.exe.1089827065)

FmtOptionsExe

Unicode based on Dropped File (FmtOptions.exe.1089827065)

FormatMessageW

Ansi based on Dropped File (FmtOptions.exe.1089827065)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Fq]#28%4a<r,9D_/TIVs.zWo9:`l<P=Y_W!,l(<%-<0

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

fqxkfZB,,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

fr%Gc<3zG2&"t#m9zb.Z?X)Z8R >-~>/LBony-&.oNN?Xx

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FreeEnvironmentStringsA

Ansi based on Dropped File (FmtOptions.exe.1089827065)

FreeEnvironmentStringsW

Ansi based on Dropped File (FmtOptions.exe.1089827065)

FreeLibrary

Ansi based on Dropped File (..exe.3238139870)

FriendlyName

Unicode based on Runtime Data (WINWORD.EXE )

fRQ`gDyq<|lxqcyTUx[1Z*F@Sb+?vHS6 WjJCo:,YSUXVJSi%$w/Hu"wTM%7sw1lF*2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ft#6"w9:0t[E[?N1~piMPir1/C4^C,_R&+Hd\CBwPV*h"|x0gV5iy$4V"e9BA)jT(y>vwv(SLqWUDXQw4S^0F"\gsldYdLuHc9>(hVD5{A7tPK!N_rels/.rels (JAa}7

Ansi based on Dropped File (~WRD0002.tmp)

FT9,p]~Z,9xu56"N_gtLsO#<Wk4~5l*)9F2i,"}E$=M9"af{tC\?oq.K6$m+SS2~YqBf]qzA(nSh>(8pQ3xfRqj}~]6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ft>vs[:z<~nr`,<T;wskPAO-8viAXKo3k_@1$|5m>RK8#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FtCft;V#[}

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FtCft;V#[}ozbs9t7tWZK,3=^jO3-5LT&_=JIOu#@);i+1]:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FU}cVfq_WKXzL

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

fWKOE$LFq? 4uo'H;g.4XVfh>V*V+*l~t_$ve%!_Il[XJE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FwQdnr;2W{FypG<r>7;d:JYT?wk|@kZMf9Hm2d:+PRW^^Wp6!H6;k7O<.}8jnCC>Q)V<o'?;X/N.'0~KR{|Fgh

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

fwuY'V>|Hc@sGW9<QzEwr6Q;<5E!zPN4nxMX

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FXUKFD6]bSC8@y<xV!L&e=mV[@pu!`*YE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FZ=zVg?>j=I~=AAu&R5AEuwV85Au:V5A3yu51~^~5^/9{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

FZyVX\ttI,4pE3#wK6h$uHnS&[K{}1Zn\3qB!=e<EI]ouXypyrd(ha0wY`S9C"Fjxr>+H9)]"kPyf?H6`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

G"Ngfhn})}hV?^|oB\RrnR^Nfy(e

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

g#9>5b{sRPAE}55;zAEAwFvEAB!5u31AwEV}2A~QsR1u:=~M"CEA5EoAF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

g#9>5JL9F5NEA{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

g#:zo`(V~L+{Dc oVf/6-,Z5tGl_e`X-8!7)jQAFj$V\~{#;VOC=SuoSn+9xt$iJ]7m$2cm\aO4Lo/8o>X

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

g$`}SJC~j1uu[qqd1-8@R=nV]W|7toZRkCez%>-M,roRw

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

G$ph[w9=.A$_ua@SOm?hT&,hLJ[o{^IO_)zi(0R^]tqSs#[zIFM:Zv6=1n)p_E#u'|3T[g]IdhQ"Bkg&GVjkj}v@AVGf|V^]'8>WcO%p*El(*/+=FeP%p#]-CHvGi

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

G,m_f^I{A%5x(8wW%kDasz&?mLtDsXmw3GkExu5&FlIOU(Y9yb!N=~bO@X'{hO;CuB>}~E7QY{n,Ha(t993Z"@B?[wDwy<D-uc v gAaMkIV'xnDAJ`XZB8)!r}W3/'h10U5/3+)?9yEW^!7CnPTFg?~GLerL#;5Vz_fQK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

g3yF.;l}76)3UR>!pyPhp'YJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

G7)F9(E&aQ%Z@rf:VeZF:l3!1|x/JGz,UF;A)Iwc3^!-Ys4CTN*LZgg1C-

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

g8q>0Xp.>zXG/Bj96O?=;uO.\,/i]RkJ}V'zuF`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

G;5A":zsOJ5E(O~JER7AE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

G<"hzM<q#-4L1cmHWzIv&`}at4A_ex->"{|LDyOF'G{z] oQ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

g?_@!*|2c:c6v@j

Ansi based on Dropped File (~WRO0000.doc)

G[oEp3F~3z7*Cbwb15KD5N<t;>uA3C*}l

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

g^Cdr0%3Lo1(d{Ai&o`v4;&r'Q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

g________________

Ansi based on Image Processing (screen_14.png)

G_b#53{a00\%,"T"v~k/fES;-rB?Ez>=4S(AqnAY }-r1utz^";~&6Ov29)Uz3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

G_R,8Z*U\J&*>?HQEQyo2.ZGr^f^Rj54*J=frS1pYAK&%zd#(B_`Bt

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

GAIsProcessorFeaturePresent

Ansi based on Dropped File (..exe.3238139870)

GCAMzLT~GwHiIQpZGk/^c39&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

gCnsYSnlXUqy6 GVg2^/wy,,%%Mb#.tAXd>^<Ca[SoD0/EUkQXRi8|zGHk^86|Q(b]5M8p)rSW6J

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

gd2$"Ns_.oxQb*^x,C.J.@Am55tjE;s.F_3:mIvKF</c9M8GUV1<R8me!q_6TbpO'rmV9MX,>~f@F@>RoK*n-4^zu3:AA2$Z`K!_V|K47(3: L+PSA}OYx?NSr>B>`N*-vAh4(](EMMWO\cfI_A8Wp&<\5,FcHkx;0&B-k`kK.$|8}Jtxi0m(KKvH?U%;ct)QYhSOv

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

gD[>4^~Fn

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

GDI32.dll

Ansi based on Dropped File (..exe.3238139870)

gEa?3b>(/gv*+pU]H&KXLv`b&cohxQ#=?0p5p\:qIAF:la{5Xlh!Y~eRk[Ei9K?](tqZTZWRJO+xE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

GetActiveWindow

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetClassNameW

Ansi based on Dropped File (..exe.3238139870)

GetClientRect

Ansi based on Dropped File (..exe.3238139870)

GetCommandLineA

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetCommandLineW

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetConsoleCP

Ansi based on Dropped File (..exe.3238139870)

GetConsoleMode

Ansi based on Dropped File (..exe.3238139870)

GetConsoleOutputCP

Ansi based on Dropped File (..exe.3238139870)

GetCPInfo

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetCurrentDirectoryW

Ansi based on Dropped File (..exe.3238139870)

GetCurrentProcess

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetCurrentProcessId

Ansi based on Dropped File (..exe.3238139870)

GetCurrentThreadId

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetDateFormatW

Ansi based on Dropped File (..exe.3238139870)

GetDeviceCaps

Ansi based on Dropped File (..exe.3238139870)

GetDlgItem

Ansi based on Dropped File (..exe.3238139870)

GetDlgItemTextW

Ansi based on Dropped File (..exe.3238139870)

GetEnvironmentStrings

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetEnvironmentStringsW

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetEnvironmentVariableA

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetExitCodeProcess

Ansi based on Dropped File (..exe.3238139870)

GetFileAttributesW

Ansi based on Dropped File (..exe.3238139870)

GetFileSize

Ansi based on Dropped File (FmtOptions.dll.613898148)

GetFileType

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetFullPathNameW

Ansi based on Dropped File (..exe.3238139870)

GetLastActivePopup

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetLastError

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetLocaleInfoA

Ansi based on Dropped File (..exe.3238139870)

GetLocaleInfoW

Ansi based on Dropped File (..exe.3238139870)

GetMessageW

Ansi based on Dropped File (..exe.3238139870)

GetModuleFileNameA

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetModuleFileNameW

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetModuleHandleA

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetModuleHandleW

Ansi based on Dropped File (..exe.3238139870)

GetNumberFormatW

Ansi based on Dropped File (..exe.3238139870)

GetObjectW

Ansi based on Dropped File (..exe.3238139870)

GetOEMCP

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetParent

Ansi based on Dropped File (..exe.3238139870)

GETPASSWORD1

Unicode based on Dropped File (..exe.3238139870)

GetProcAddress

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetProcessWindowStation

Ansi based on Dropped File (..exe.3238139870)

GetStartupInfoA

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetStartupInfoW

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetStdHandle

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetStringTypeA

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetStringTypeW

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetSysColor

Ansi based on Dropped File (..exe.3238139870)

GetSystemMetrics

Ansi based on Dropped File (..exe.3238139870)

GetSystemTime

Ansi based on Dropped File (FmtOptions.dll.613898148)

GetSystemTimeAsFileTime

Ansi based on Dropped File (..exe.3238139870)

GetTempPathW

Ansi based on Dropped File (..exe.3238139870)

GetTickCount

Ansi based on Dropped File (..exe.3238139870)

GetTimeFormatW

Ansi based on Dropped File (..exe.3238139870)

GetUserObjectInformationA

Ansi based on Dropped File (..exe.3238139870)

GetVersion

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetVersionExA

Ansi based on Dropped File (FmtOptions.exe.1089827065)

GetVersionExW

Ansi based on Dropped File (..exe.3238139870)

GetWindow

Ansi based on Dropped File (..exe.3238139870)

GetWindowLongW

Ansi based on Dropped File (..exe.3238139870)

GetWindowRect

Ansi based on Dropped File (..exe.3238139870)

GetWindowTextW

Ansi based on Dropped File (..exe.3238139870)

GF2bBIA>sMFy7&IEeUsE191=|5V;9:xJ11&5K8kH?%:?:1;zN9?_}1|[R}~363VXI23FKFS=E7R?G{3VIb

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

gHw}gV. h`UpYtHHax*7:!KYp*S:<]oX&\D}Qa()

Ansi based on Dropped File (~WRD0002.tmp)

GI:H c=,$B_fg?Q1FEGy4o1:PPNQ7QLG]G8^-xt.{q!UtUtohB?h}N]-;ie5>YE~)Q}~FRp`YiPoP

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

GI]$uf7zZNnyS}SHY)lfsSq@-I}yYPaNQTIO/WH`1*8+316 mEK4 ykW$C7YvCM 9^S{v$|ED~NAS~9vfeMn T'&HW[CiJ6if;&u

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

GIfavcFS#rS:IELt$btcOA]~N(H/KGR9li}FM"|ty

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Gino/<<1A$>"f3\TISWY

Ansi based on Dropped File (~WRD0002.tmp)

gk8x;dYb"-Xq"pvLCyzq!vfqbS<nY@w6vCk05|iU DIjf=Uwyz-$A'x"cF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

GKu37Cu3546429~5tA~Q1s.uU~3uJmUu3>nGZD~TAw76z75EAR91z9?=[CJ?3IG}AiIB!9?*=pHiCBu5c5A2D}3b"b55A2D}3c"cU}=yCJuU}=yCJjDEAf3;azV5Au3A}AC15wB95uF.~1Z2D}BuZz3A2DB1oNI-5At7G2wJ1ZpA2*:FU?7G1>55N1@I@wF=>u}5:5u-!5G=m3&v7v@5AUs^iAFsF6~7M-DCV5AVQA}Fu17Au3>suJ7;5Cw35CutvD?I@v>A~Api10uJmUuBBQJ7*>iuB7BBz3tJmT5OwC3BQABuN/Gw765

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

gLLoAN55k4m1O{`.Z1Nv>L@;'"8>Q$ZN"Zh_}2||&R<0]mckG$>Q13)3zluw/v7hP@CZ*~LQ/2dQt%%vYNA:Qz`>|L>8QGIa>{~/'#:_NYU5ILPL`Z2.y0=`,x(+VnvGkJ-LPw#>4}I(ES>.=?4eN^5m

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

GlobalAlloc

Ansi based on Dropped File (..exe.3238139870)

gM0UkU,Tpj3%(A<U!CRs<lI8.0Gv,.ltf_scI?!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Gp$'x+"T'YW?uj?RK_d=4W%<9M%fq_BA4cs|#@s4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Grq?v0Q\1Ywr]yMDjF`ze1K76yN{^{At<,5<`9|j-vT8}}b#`r|E<{\Zrw=5{GY|?tz1"}vL4G5IqsT]`t|5Onc9}Z{NyOY5B|@L3V<n}j$pb]J="B}yeq2+@32e

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

gTx[."jZuQAN-Mb9Yp6)=O}Vohml:DoF)&uMmST%P{q[nkX{]L:LM#**~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

GU.&x=&XHd%=F.0E#z[4E#Gz[4RE#z[4pv

Ansi based on Dropped File (~WRD0002.tmp)

guEeV\\WtrNw-"dDMc<1rZfwQC

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

guPa8gjkH;2M+NV%d_a

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Gx\md|/M^%K.dn`.]

Ansi based on Dropped File (~WRO0000.doc)

Gy5QzR'z59yH2:5959V4[59V4[L_MGz;[Gp^+kDkDyH8:yH2[orP2_Q1:yH/A:8rP2_Q15:2 r/AyH'/A?fC:_yHE1(/AyHS/_Q1{R:'EuyH[:qUB0.h559S/_Q1BdsH/_Q1[_)9(Jx|H_<8P09kAAP/.%yHkUBI1S/.E2z*q3[s.E27;Bq.%w{2yHUBI15s++A7;BqyH57;B.uC5]3u.uC56C.0P*P9=QV-5|"$zP9E9]3u}UBT;V.hKD59LC5yH9C5yH9C5]3ue5XQ7z2yH_;"C:{Gy5r+[z8$zxk^+@.[^+^C:]?3,.E2T;C5uyH[^RH-s>8X[+w:"d)n5dxQ1N)^jy4nT,:IdtEd#PNO.HaQ<En5[pPPP,7h?/k"_E<Q~/z;nX-EFm$d%0(lYSrAv"Q5"m=*8'p!f(n)X&dDwX(/VF)syu|751Yc<K'vW+Lo#f~8xaX-!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

g|=Q\T2?*@PFo4`"(s9-U\N%lg,gK&_3Lxgw>8p'q:1c54'.*dK3;IrqlYYt]v:RtOt^(_h~L>1rLFB.I,/VRv\oA}"T@(S{&zkdew#Q)5gXN2 )E%%]Zl73

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

G~5s^A&=~"IbjnE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

G~invau>/::<fBP!s3Tj;jpY90/r2''lxb"$cJRHQf4ENLPj#c[0sI

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

h#/3{C-{fUOP"~n+yS>_o,jjJN(V}vak`cYHo`po>=FD&~|+y|L%9t;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

H$W5rXP*jzpd"]k*F'ITt5a91

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

H&+fJV1zDu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

h,FWfqEO(q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

H-hvn!s[nAE^Ds

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

h1v8Mj4S1 B\9jB.#NN8/;JB#\j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

h2z^*NaG{c?)#(4tF6vuKB}}+F>VPvN4&b\o`&gt2Y`%[$HGJ^MoUX&rk4\8Z9!1Qwag6y4.<'b5^v@i"0^G|tDBUvi$,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

h3R.8:*w

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

H4<"bD6Lc2pHVbZZdOTFhKP#_1s'{,xA!0<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

H5!NbmavC-hifOD$JYJU%3X+GWP1!t7Dw,E)Qlv;;E]=7T!>;7#[&]-b&Y*>u9g-w*H7LeOi6TJ-uE8[9Ve()|7Zs$~k8'?eMI*3+fAO4|M:U~<*i5x"O0fB

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

H6ETM}@Sz(>D#R|o4hKT3y-*l,?`q37WPfSDWBNn}B`c0QJjEzk~1GSZ$YTb#sNB"w'I8.E1V$sy%@vn=B`eIn(6xyTdMIM.|:*}>vIS=^tDS:gw*\^i~r%NYq;'8 ?+L?pEy`u+&n./5Q-rY*0,(~CmXJ+rqXLUe#P0:w~3:{<K]H+s@+:nh&h0:X|.IN9'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

H7ug):y'=$0D-<#&-(?^AWBny

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

h<5v6Cw1^7CuBs\E}*~~@~~|#6||u51IR_&{361s7:o5AtJ?Xw|r|r|r|r|r|r|r|r|r|r|E|}F7n;sxU8uJ1:?,??,r_~D67v||2z#E?a

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

h=,,.eVY=F^

Ansi based on Dropped File (~WRO0000.doc)

h=RfAE5EAR15AE5r=Z:B5H"wV5A3"i#5=~Ay5AOH">7V~5EAR9AGJEANt>I1:536}Q~?>>>uF9Cs=AAu&ARd5AE}=AAu&A"=~}15Vuq~GuBAO7O^G5},{|=9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

H?w\dF1~S}c't$08<UeoS+HlpXnj'">OD<,?wO4 J}+Wq_<!*LK;Y.DNZ\I0q(q?-d

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

h[D$W20nTAhc%s(>L;y|&mX*Ox63>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

h_a___n9_

Ansi based on Image Processing (screen_7.png)

HA;H(Bc^`'<}kcgfAI/%amMqw2]1iQ-W&e7(Od#[B22Lj>b9bz*iCdBMNpFjgQB

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Hby*DG:a>{Y=c

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

HcrDJ<*&Is"r >"nIbDKR}R~"RwVdr]>B&, q.hj?bkpxHqITa5#xkN=Pv|MG?^BnB+R.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

HeapAlloc

Ansi based on Dropped File (FmtOptions.exe.1089827065)

HeapCreate

Ansi based on Dropped File (FmtOptions.exe.1089827065)

HeapDestroy

Ansi based on Dropped File (FmtOptions.exe.1089827065)

HeapReAlloc

Ansi based on Dropped File (FmtOptions.exe.1089827065)

hEnO~!FsGB5uVg5A7{FERz4~v}u&?V7>7:E7"DD56Gj5Zh3NA5R,1.Afj1ru5D&JECBN'>?-eJg1CVuQJ#1}wV1?Vg|1&Ax"oAn#5J/4*Oee?NEy5-y5^VE&A5V,7EAuF:7{zIEA5J,E5sOM5YBEG;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

HEO~CBwBzw2wB~">3"=L5;zfR<AE;z9]=|!}2I?>N}I?>;w5AuB|IW5A9@EIW5A9@EIW:5A9CE5V}&uzj5CwB32AiwJ15sB5{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

hfJUrqtiZM8f@6`{Gx85Q{NvF&J4fLg}O/15&<PK"@DC@g)+UHD1<A~[~4cZ\t~-K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Hge"Yhlbc[A4]8#]%h"C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

hh+}{Fw{Zd'SmkwtCJP;31/QOTyP#M<hiW2b!eK`34]oy%9.tVO!W^&KSjYAUiBt<{FUv6p26M(8bc[S3Exq9PFeDQwp@)!UJ.,3ONI}O.rXj/rbIdX}d<48JrZs)@}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

HJ>AuO_577/AEz?4wO_58QA5A1s[EI5AG_53?/AEA+5AE{[E@~05;5A|E{[EBO_5?/AE5bsO_5b3?/AE3?/AEAEA2{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

HjLLALt(J(QKp&\\e

Ansi based on Dropped File (~WRD0002.tmp)

HKb65!(E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Hl.Au 4e{GMv s{v=88LB;G>J ecWZA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

hM%5p'rHuu53

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Hn-"d>zn>b&2vKyD:,AGm\nzi.uYC6OMf3or$5NHT[XF64T,M0E)`#5XY`;%1Um;R>QDDcpU'&LE/pm%]8firS4d7y\`JnIR3U~7+#mqBiDi*L69mY&iHE=(K&N!V.KeLD{DvEdeNe(MN9R6&3(a/DUz<{YV)9Z[4^n5!J?Q3eBoCMm<.vpIYfZY_p[=al-Y}Nc4vfavl'SA8|*u{-0%M07%<PK!Jword/webSettings.xmlj0{at_0JHR(/\Gid$m5lz_im>Q42

Ansi based on Dropped File (~WRO0000.doc)

Ansi based on Dropped File (~WRD0002.tmp)

hNZ?q4G98@z'V(Iaf|N-2S!:<),

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

HP\i+]cCgcr)nc3($gC

Ansi based on Dropped File (~WRO0000.doc)

hR;~F&*W(2y3@"{4ghyUE][Hhe%P`<)v={N

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

hRichEdit20W

Unicode based on Dropped File (..exe.3238139870)

hSm5~iw7#H,SJw8D*V}ev

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

hS|Nq """<%SJjq'Z]c<Nv!GOTgpHi<O6G*R'x7if_O5p'

Ansi based on Dropped File (~WRO0000.doc)

HV5Awx1A;IGE3?4AE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

hvM/Gy4.tRk,gE0nt-QgYJ_[cV!u5gkPbm&i8dx<+9u*EWx|(m={+Nh,5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

HxF~{G49"b \*l);h&`9.lo%Z\9}Xt.1.gk.aJKNyw.^W|v'2y\;QsWFsM\':X%r{aIogP0iJqT-un;~[N

Ansi based on Dropped File (~WRO0000.doc)

HyIvIvIvIv}15ppt3!15K_KGxQ|zr>qHx=<|L<<|

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Hyp,Ou"hx3`g~^]~y`!"D^IcHEBV~8xc~Ao{a?EVbIObSw:%MAuX'|+;!5p!,N%><:(4!WT]I("SsMHL2VH^\\A.-@0oRdI

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

hZp*S{bN[?R4:|B|Ng5HD7+,;CD1Q]m1YM+)u^+*5nr*:M y^;EE9FL,8<"\^JuUZ!a0xCX1@\t9rp%f$X-f$yM=Mypyp&p\X"FyXs-/WJ^Ly$Nvm"'U&??` _`? ^|eMX0dPdeaEww!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

H}>}15V"m5""}5C6"V1~R!1K5{};|AwQ,AAu&=VkR=317AwJ1}&`7CFk7GRiAA"5ruV]As=EuC37=AAu&=VAte393257;zH}>g3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

H}Dq@u~{<z8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

I - LP I CNG

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

I H~4PtfH T.Y7'7`buKCm.jn}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

i }l/KW]7.BiEh7 [f'eDVhL=KFJ\fzS|`HtRge3a/!qP\ Q^;y0K~X!2J85KJ=#3>;4kA- 6qMdG#8'y3q)~=7?TT'(A=yK`2FI2[ &j3"dpofKq'cJKUY;&.1906W,ij+p9]|6!.u},2q~nhy.R!f3ckjitMcb@8V<l=I*aI8."Lz7:Zkkod

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

I+)Zvk`:145f0YxBX

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

i.WV/W3-hMvg^XJ]d~!kl#,km4T9/d@A'r ,wT%[sy3A:@V\Ih<slr$o-@.8tIDB;%$_`?rm{`G`?itvT%_A=Ag2A8*#xA#$G|*3f])~h=d=@w\D)=WD&PJT8n8.U8O1W

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

I575AT~eMvhOAh=@ 7@5LuCIM\!i,)&L\ISx=ci,)NO\i,)3p',i{{^5L{PThr0\P',BrGUB1t ~TmVJ(Z@Sm;2QxEVKaILr&;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

I77sO~U5sO~U5R%AEA5,1G;z5A5N,rh3?>%AEV#O~zG;z5ArhW9>>};zE5A.N~?>qAE}"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

I;*(Ea1F76-B:OLUY*o3K3q^*T?{~cw1Ydz|,RPzMe&/^Cb(cnhpGG:(^Y;qSAF>YM9Vi8GX9'cSrjVS})codW)8.*:-+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

I;}D{~}w~57C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

I=r!>:8]~rJFXiEC-oi6f>uG|Abc>1rfb'u3AH~=05t-dq78-J4]\\}=r>H<K'`FEFc-v4Ikma5ghnt`{=Frwv+}A<Ay2HZEA<!:!|Cw!p#M1ghpC]H7+E/;!#kWso41Kn6oMaK&$V!sU?7l0cT#`x^8c%]#`hND6c'Q#`Oe?cY#`W]Dc

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

i^)NtEA<GnTJ`I"?e`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ibE4$lBh.)l31ss3xDH00y]SANSi'@|D0`~@yykqp?ER"Zhc>.8.A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

IC#%Yr# XKhI]%GkA=uZ`'I%z+q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

idDAIqbJ#x6k#ASh&t(Q%p%m&]caSl=X\P1Mh9MVdDAaVB[fJP|8AV^f

Ansi based on Dropped File (~WRD0002.tmp)

IE7y:gk3EKOYV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

IfDo#X&/]7j.|:*[)aVru52K.]=o/l7w7yX,YP=uto3c"9GCy#iq;xvQb8f0>8g&c*ClG+_/2+Wd&|]w9~W6BoS0P!1u'r.Mfq$UYuOr>$$45lrRq_q"&RgidtSkZ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

IFE}"yyy{%I|9OA57/1AE}GFA59C>EE31AEFCJ5A3{&EE3*}{>EE#RI?1AEOv=71AE#I?1AE=71AEAN5A95A5AEI}OFA53c.EEAFwWNA5>{_>C;J5A9[&EE51AE{54t:zN37V1AE|~"6{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

IG3;E3OCAnQJ*zvQOAGE:CI?7?>71<x=}1u;AA{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ig@X6_]7~

Ansi based on Dropped File (~WRD0002.tmp)

iHkR]WYyF

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

iHkR]WYyF4Y&!U2+F|f'>"~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

II - LP NGHIP V

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

ikBCB<y7h=`AkxBs%46i\]X3e6B]\q5NR1+:{zIEhtwc,K,yA_m)Xi]U#0d%+!rc22#/bn)qKQxa#869hUGZ/\J8YFHiv\37NP1)\z~4g?mh6N4Ve7q2N0:TRf>f&tQd!+g1''qH[;XW[iP:\pLIuK{RS;mBjpC>G|R0V3,s@t:3iZG.W91TG]kE,zd\!T_vlWw(N:6bXi 6Iyg;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ikrJns{j+O6rRF-3B~]A9Uc{NX(^,YAoAQoE,z]]TR*a&5m;sD

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

il6Xjg7~a?n .r96:K9CT cb>p=!jm9DK>]l{".EZeOQR KU"M$@`;#R-zA)}'N)ALX7L"qxGz3h<fjP-:#3Qu(AE#b_x-heb"t;#(W6%`Y876a93WokitWM xa\(r

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

InitCommonControlsEx

Ansi based on Dropped File (..exe.3238139870)

InitializeCriticalSection

Ansi based on Dropped File (FmtOptions.exe.1089827065)

InitializeCriticalSectionAndSpinCount

Ansi based on Dropped File (..exe.3238139870)

Inja[pr~m<.|UfuS.Ft`#iZTXzH%8;5j8mrW= UB][9^u#n7,=dz8cU&U+-8m*FJ6sBl](%#&[$gy<vvQy\=TAFCg<k])<6LBgz8)dz(9qAP%KXDC*@2>dbg0<?u"Q'5e4|pm,HrXUF%bX

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

InterlockedDecrement

Ansi based on Dropped File (FmtOptions.exe.1089827065)

InterlockedIncrement

Ansi based on Dropped File (FmtOptions.exe.1089827065)

IntranetName

Unicode based on Runtime Data (WINWORD.EXE )

iOX7dr]}Z=]Ol9wj

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

iR>,Wka7Fk5KEq;i]8eWXq(s(8F-+F:q}d2e|KE3Y[BU!K8`"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

IRacaqnp~XUP47r9*hIn0_#]IYhYg,2_dtV^pDNwntTF11YM2Tyy pkrc,fQBea2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

IRpzL"3i,Gzo#z(Ro)gGaw{_'~ q>$)]n9_HhGmJ(k>*,kRJkzj>WY

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

IsDBCSLeadByte

Ansi based on Dropped File (..exe.3238139870)

IsDebuggerPresent

Ansi based on Dropped File (..exe.3238139870)

IsHPVFkU;LF]g{7TwwC#<kysWK_{DSP_+U6AM2fx5t8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ISkfqhWHpi

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

IsProcessorFeaturePresent

Ansi based on Dropped File (..exe.3238139870)

IsValidCodePage

Ansi based on Dropped File (..exe.3238139870)

IsWindow

Ansi based on Dropped File (..exe.3238139870)

IsWindowVisible

Ansi based on Dropped File (..exe.3238139870)

IUCW/%4=6V

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

IV;5A9:12>y6AEuJJ8uBF8wH57u

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

IX,A&@H9D[9szk4Mf$GzE2uN!n,.U-.VHN^~&HKk9x

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

IXOb|]6KZl27)jaMNLi*e<=lo[SB='Rl

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

iYfQxnZ6z<SM>T1^.%]X)VY#s.oA`Z}GUF_,BhaeK6XYIA;sTwK+3-KR~Zboh[dG?e">(KTESz)zvOu"!3oVi}IBP0~UyZ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Iz4UtM[6;+CNJV5A3";z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

i|4R1i#'*gHiQMxY$``H_O5B$=Vb'Y!" @$xIB8A MRnDJxiJX7 :O(>W8OtanH'R`gSH*X-NtK1Ov5:4yhu:,wxJ#:#<OhYu-x(s(Da8OhguhqO5+@ARTDY&r&!MSB<RFj;6<]=;xZG?ChcOuG!5daCJ+x:%H

Ansi based on Dropped File (~WRO0000.doc)

I}<L{2EE7&1AEwWZA57?b1AE6?21AEsOA51{bEE;w5Az3?21AEG;F5AIz{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

i}An\/AWxQ1>e/_22mRi<XYF0aBFaP8+@rV9i3#g3++#1*Y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

I~8WZ"V0}>uQwHoPK!N_rels/.rels (JAa}7

Ansi based on Dropped File (~WRO0000.doc)

I~S&Iw9=AV@363I3=EAV}QA/rH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

I~wyu51~EAU"G5=~}15V5E}ARAE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

j*QR<,$8'x4~./;d_-K1M#w'@uJWB_7X[?`M&ch}OhtySzi>PH3#~,|_[L2"bx}KCprT!(!<a#GuG8x1j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

j+4GR-!MnUd04cn,\sTw<Du!m#xQV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

J+Qk&H^8]JLk"HZ89HoyR8r9Hl>76R4AE{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

J,.zyoT!x

Ansi based on Dropped File (~WRD0002.tmp)

j.QYi5bP{+nOUa+(4bJK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

j6U$LE)J~lC[K77F

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

j7$o%tL#"I<{I

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

J7%ABHO}"9)Hm7ko4+T~+q.&'e7<z,(hmAp[WZ<o`G)J,cv)>!7r1BT<T|L7W>RG6_?\R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

J9-]`HIq]X*

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

j:a{b8]2/rW_D-p'z"`U(zP/Kh2zLC#oNIG1BV#d]q2Qvi:<UjB82<$8lz$ppP\/=d=H!H5!jQQ"V49a>5Qw8Mmwa|5C4MJDs

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

j>mb2t*x1iQvam\IMm]^ /w<oN)]CtulyZ6+_(i/kj#|"je

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

J_|\/Q{hG\nPQ?>rs0'~j)&InW<AkKwv97$

Ansi based on Dropped File (~WRD0002.tmp)

Ja`hVcwatV^VGM6[k? cs\aqjY&.2CSj+VJWn09*!=(D3qf3:GF/DdRjgP%ik_:[%o.#F cMAU:vX'ktgoVLZJ+NaAX+$O>r%5!-p) p^:Ws*03MzQfxCtQg?J8Q\iH#tF*h<3gD4] 2-lpRF$%frj04^!uz$'*jiKH@=UEVnba +*8gz*{q,"h

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

JanFebMarAprMayJunJulAugSepOctNovDec

Ansi based on Dropped File (FmtOptions.exe.1089827065)

JB?=K$[BXMZuQ85l

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

jEIzuUu=_1=B965U=*.?7Ma{sjs~9j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

JEoF5I!979NMA=D1:5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

jGE:zau1:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

JHqlqdf0m--{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Jido>2S,{kIQ,?Z46rqaV?fU}BI-Y=5NB~AuD(3EWQ^%2)]mf.|>JEIACxPUYaX/*a<8c

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Jj"f3?%AE",s3r\U57*R}3:3?%AEwV7*}.A71rVV1;LFRCAE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

JKRFowF-&>X:r{)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

jL,EgNPm8<)L@;#m6}{ao(xQ68qfG@&FH/Xn2 ZCjoq1Ie4+kTh['*rSPO/ quAui-P0+XV)CoD6k;d4|{Q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

jmH?rT5`\?"'nG=R(m8hy.SzO#5HlV;NMC}gr(I"o}(M*wa_%:3Rt^!y,PWFMWWNn&IiukRE%pe)Q=4$,LY\o][-rYH7_38H"|(-^T+ldx=5d.DzVX0EGA%*xWpHnwh^nDWwsb}=d(O6LZ^;d,BSTF&r- PmWXp(e)[@yp-IUuM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

jmsctls_progress32

Unicode based on Dropped File (..exe.3238139870)

JNunVYI0fDIrEm}7qJF7="DqB%FjFcov:!6D_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

jNw4G~KY`35EhCtFSg.W=bp#u1Lk:]N\l0E{~;WpIlQ WbQhkH<]6(_<[LOTB0$Pp8Hq4T07ELf}\&9#+QpGC&{?RRR!T[w2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

JQ:F5IAx75EAR9V;CFAA"E55B<7@A}RI6AE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

jsHrXSig[`[UkD

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ju%SCSP6_V9n4BJwE3dhK28!v#dQ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ju^65G{|-B2E}1|sIEN4=Y!9_5=+IHA+V

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

jv9j3A>w=2R*5.=$.V$nVt'5A$^Vx'5A$NV'5AErn"jwR}7rElAF~sOD5RAEG;5AiEEA5,AAJIA!5iVU85jA5r/P">o57{r`E$7{rER}sBV5A(V+5AsO5"hAFAB

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Jx,=pl*F[DMh*1g"WSc'R;]i\Tp\En<P[nb{'[71u>GtaUNn!N%N|#[JOM_?T

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

JYrrd20zjE<UiI%I.w[uknP'Dfl/BwNrv@"`=C*5SDq%I.D!D~b.G])a\ALPU}9S3&H_KfJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

j}#tYzQ*w\f;8yuzc==@-+c<V-}*\FQQ=1$JeKZP:`iN)u?QL-`o98

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k!rXa*QK^Bli9>VBM#r\"SD1YHv<@5S<O@O7~&nO&<RB--hY_q)5g4o<G.[DQS&MxFTcx:Af+V&81/Fp{6Cb/Nzr~c:"8z6Is,eT3^R)$2xD"k;)%lOa1wrM8mHp[FAS|f'F4-orYH6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

K"<-ri9o{1}kyh`NnKr~HNCCfpmBS:.@,#O~S;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

K(xfp5xTW=v4lH,'lJi=G]nR~2.,&$&>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

K+c+?t8C,@w

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

K+D&ww3Gm+e+;\mP\p:C^Vac0C^8P4,O8/{{3[LFW%O-gCRH:#)SF{y{Y^i"G6K1b3)v$l)nAX5)hO%,F

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

K-Rt&(LW63.7Jq#@}+_z/u&,RCImR/c}ann$i"Mn~dBf<EyEy

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k/<r:'}Z6suSoZS_3PYUj>$ftEVu;47H;5x!Nzx3K%H.Izk,1KcY5uie0_:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

K0q%o'8fggT!\==r$$ikJ4d}lnd4@q/eDGjw@!5|$/82B^qEx?3me"=r(7L9Au.WQQp0`){kGs'O9C{3D3y,j&B<YN;L5W7CQxbdx!j+CQF6t|Gg(z=gT{'USzK'G7Q"Sj@oS~_q<$bLbE(hJGk,$M_hPo7Xo-+R@b&7<GWi]F!6V,Jdv_,v

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k1KaWfd7tyTf`GI>P|//|:3@|3(@J9 t}SzA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k2gbZYRnfv;TpL0]QK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k3Ji>NAz]"IFENrA>5h?>:RNV5AEJiNV5AEJiNVI5AEJJiNVY5A9::

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

K68[x Uq!x<RtHj:deLS/4v?T7z)\X==A/WYKHhe#S$+8)0]TboW!Im3zM(,X nm-]$GD5+{lZ__ |&R`P~fjl>^|pt=qT:qfF`X+OScN<Uh[AG|2, @hs(hLku'oy@&r%Q0%R2~6w0iguu])V_5\Yq^&sPaD` s)5oxre {1EXS9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k6eGB(( Dx@9`-8O_W31]Vo`*0H!Vtnr5E=`"S)=e`7z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

K97W``$d5O6Z6:[q5,:'\E.3\ieLsX

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k;z5tAEN~r10"E5U}ufk=B>!9u:E-IFQ=IvE57AR95CFEARu?718xA{5u|1;L5yQe:GN"V:>sZuVm~>%7&10"v:Ib

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k[H?N$gVC1x6Z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k\wo'Csc~)R)f

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k]G7E|t5)l1v >O;#N!R.?EP2-]O"PR,ks<xL*2Zt(K%/h{P@#Rg

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k_c|Yn82A4c

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

KBD\u1ykGF;~V+<-<}c+'&WRp*__-S,&)+-&^7JqKYiQLJ:+4*sIV_=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

KbWYQ,|Ak0&:h,4F]yv/[8q-'&@]6]sdt0CHUI3T~*8j./ Z9QXDJ^~za}pvv6LDr"Lj*:v8j)Mh<)W{n1pn&R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

kD:Q-%0>F|UIV lbp_8`(<d@S>$}z3Ru'\6|w5yG RlEs

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

kd\6EM&.!}cwLP%+' S|O5+

Ansi based on Dropped File (~WRO0000.doc)

KERNEL32.DLL

Unicode based on Dropped File (..exe.3238139870)

KERNEL32.dll

Ansi based on Dropped File (FmtOptions.exe.1089827065)

KF>Rmi:h- +e[jKFs8'+[M8cgi{R70fcAL?'k$LwLSIJIY!R64e0S>igJ99q|h!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

KFH}bCjIInmEb"J#PB}GX$c#ju

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

KGEO~5?C5xU{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Kg{o0.LG6^iNf0>}0=S+X\dw>EG]YJqH4P-o

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Khg6:%-Ufl

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

KJt<Zk1\

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

KL(iCq~3@Z2H4Wyy_4.(3},Z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

kmuLP xdlTUA>Eb0]mG2aCo1eWw$0X?GR@I0<<%0sr:WfeP

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Km|mKR$P=~ -TAKK{)+]X--8?@`~/<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

kn/553<p" gw

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

kp|pjU{(mKZn?2O%

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Kq]bhl81[f="AYR\]2]iu=vQcTUgu{cu {lqA0?x$ztv&o}kfPMi,6eC41 I.&AgB'-Z>WUR'EuK=dUjkAG\?9eu tLHQDSG1i#P9~#4G=?o+W\L15S C>F0C5i6vC

Ansi based on Dropped File (~WRO0000.doc)

kQG"48it+`oFY5HCqu5x8`E5}Z5]T'A4wx7=Fwh!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

kS4OMU=57GEB"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ks=;ah?H)g:KWC+_GnR"Y54T1e?W

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

kS{;pycNjJ2uAX8jk~~kIVs}r!lbH&PkUcX{n0@I`Zg7 Cf.bMNBaGr4;*/V@~GkBwH&H+/bq )]jQhpJu.@T-A)?cK7GUNI*z|9^lnC0;\-!gZFh>N/i*G$y:2<-U@59.{d72Be2gkiC2DmjzFDPJ|IH8#Tb/0>u^c6Or|AF^RND=&N

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

KuUu>7s<uR;z9"Su59R&u2s7IXZM'vAN71IzEwC

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k{rz&>67J:ZN&~^N[ZU?3f>2<<XObr f

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k|l.l&P%7dw>Rk8m8P.?i1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

k~_3|j{RWD?'@QLN,pYx{N3?dAXc4Qq{=E :8Hj\YYrT<9LNb;MnIQE#RN/Iu,k?QCs:x!yRn{XXr

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

l Q\53KQaS`}X):~l9)P`|O#@Pnm?L/>Zy)t@`gq|*k.KrI^.@ '3ot^wLioo?H>d:qt!KPK-!$[Content_Types].xmlPK-!N_rels/.relsPK-!|;9"word/_rels/document.xml.relsPK-!z|>'Bword/document.xmlPK-!Pword/theme/theme1.xmlPK-!Jword/settings.xmlPK-!l?word/webSettings.xmlPK-!Oa=iword/stylesWithEffects.xmlPK-!0b docProps/core.xmlPK-!8pFp:"#word/styles.xmlPK-!,*word/fontTable.xmlPK-!~n,docProps/app.xmlPK/

Ansi based on Dropped File (~WRD0002.tmp)

L!##%dXM3&{A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

l'6kh!S/.!ra@7=VYPGdQs*IC

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

l,KTi*=mo:BzP}_yEPuwxe_1~(>VY5NppB>= D\h")~&49LO

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

l0(T_#)W9%sqC_O;l/OE<_MKK3<!ap&ut4w!QW

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

l0dz;VO]7u*(`z/hxY?Y&u94

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

L40t{>9L"*nP=}+xgT'~//0u,A5RG~mog/o8^':pMp{6c>c71ZwK<a7Uv8"PJyHvjE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

l;/:{jR){"!TIlbo6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

L<=P!Ny}RGGU\

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

l<iKAq#OI)qX_lS~e

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

l>7I{=p=It}M?94?0;4A=}KtQKtQh1IW?S>=S;4!;4!;4A|16M?:s=~z3bkFy_656}2AIFDE(kF=B945h=AAu&15b=b5EK1AE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

l@vVXt@#E61<o{Do<)jk>f>P>k3kBr-J`!BWQ){uzv!aZIK]Zxsi~_hqtsg'NO7.G Nf7OC,EYM.-aMi[XXue{ioXnZjGZoXE[;]{7qn1Ntzg#A2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

l[4(@vk`L,&qXU2omy@5c`x>(i3Wx,,1k\Y7Ju7[.y=81Xn6*:~Wz1

Ansi based on Dropped File (~WRD0002.tmp)

l]6||JULfTu)+"TG_>;/cw}R\LJFvp(fPiRd

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

l]>y{&[!=oF@@;*:47@(Of0xC?Ve2gZ}^('*XNL=Q9C4'"YrQ"3y-Z~E>#%Ox+UFLprfb#~K0@hC\y? A vzv0<1b>}?!E',AqF^2%5ql-.H~(E-`vN8&z5pqRqIhf%\JG\2}T@'G[x\"#Y@H;Qa]wkY793zLUiv%QKqlz?432KTNQyFn:h.^:zNsOzdjsN-Yt/H\pI79XA6QtPaB/5#?q\!:CcjJ;K6TS}wDUt$"msqc-vng|@ k!;u'w>`nM1K&5jF`Yb@$QspS*!ku-5;^`SJ#aP<P%2W/

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

L^~~:7#G5zvI5AE.^7#d.fE5n.:5A3b3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

L_2(Lyev3oq Q@xgj|8c#VaPw>h3]$.>x

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

l_5h<q*p3xdBW

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

l`(fPu1,">H56

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

LabelText

Unicode based on Runtime Data (WINWORD.EXE )

LAN3LC3_U}~H9Lt[7+w[=5V5z+A:Rbw19u5l;L{5ST[[u[51_AE5+5+w[5#]_C?,O~QgAu'_k[+Qk[5+u?x#[+7+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

lAp"?m)zB9mDCD_,Z'[FB,b02q}O<jj%c^,tHg'h|tr%ZPew%S7T"E2UW[>k++%iS")d ~=xh><aq1IOyuFR,)VLp,%pC{0lu@7C<ffkMbf4P_)$ K5M(~s]F8"P<q=<]\^NJ[W%{/=(}aMAF-r"yOgxF$o7H+CMB|ZLpU:B8\K}OBF|J^9,p/ lewM5$DrC;e;$p(ijsUu*k

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

LastPurgeTime

Unicode based on Runtime Data (WINWORD.EXE )

LCMapStringA

Ansi based on Dropped File (FmtOptions.exe.1089827065)

LCMapStringW

Ansi based on Dropped File (FmtOptions.exe.1089827065)

Ld/9Em&X5yW(%R-&iUW|<r,nEj4.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

LD0^]@()AEzf&zs|aAA^DuHwjTHp!?UqD+5wzya>Yi#5Js;3M?@-JeLTA%8PS;HcB0T#3YEs

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

LeaveCriticalSection

Ansi based on Dropped File (FmtOptions.exe.1089827065)

LFR=AES5~_{[AA+x_#K?ARp[+5(uE_5E5(A1QuXVu*[

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

lgu2o@kLmv3o&R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

LI1yYm}VR}r*"5j5<7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

li><br><br>)<li>

Unicode based on Dropped File (..exe.3238139870)

LI[(V8w9\JE#28v7v+}%x7IF|

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

LICENSEDLG

Unicode based on Dropped File (..exe.3238139870)

LIg K<>7kf<C9fRRj;G4k|"h#BMzm+o4:?m$P|y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

liY+.7E#G\:LTwpD]$&MXvR/oQ2#7i:bI.8a.uJ4d2i}^HF!Isbe#gOIQ:5Si$3NzHVksAe^{JlOL5:-ZfyyMZ3Oq46NE[7z8C C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Lj^scg)fou;sSWOstku]}ME<k^@Gbjw`o-C$)yq9?D

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

lJT[RvQgdY"ww{9[("OSefjmZ}335&Pb?izN3rQUe[AM79a}Rq|li2j?]1m{w

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

lK.w1DSP@@IO"'pKCs^8H(QeLX%36fMK@J{~%PP(Z-J<j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ll?!xsEu8;LOC5>>Hh{<%<GAL?;5AHKHK,OHa355H{<?3AE|L|L8;LU|7A1!OH{GEAMILl?!xsEu8;LOC522Hh{<%<GAL?;5AHGHG,OHa355H{<?2AE|@|@8;LU|7A1!OH{FEAAEH|A8;LU|7A1OH{hFELl?!xsEu8;LO?B577Hh{<%<GAL?;5AH@H@,OHa355HL{<?2AE|E|E>6AE;zU7A1?#PA55XLl?!xsEu8;LOOM5))Hh{<%<GAL?;j5AHZHZ,OHa355H{<?Q=AE|_|_8;LU|7A1!OH{@IEA\XH|\8;LU|7A1OH{IELl?!xsEu8;LOM5""Hh{<%<GAL?;5AHWHW,OHa355HL{<?<AEuT |LHT,OHa355H{<?-<AE|Q|Q8;LU|7A1OH{xHELl?!xsEu8;LO/L5''Hh{<%<GALQH?;5A1$H8$Hh{<%<GAL?;5AHQHQ,OHa355H{<?<AE|J|J8;LU|7A1OH{HELl?!xsEu8U<;LOcO55HLl?!xsEu8;LOO599Hh{<%<GAL?;.5AHJHJ,OHa355H{<??AE|O|O8;LU|7A1!OH{KEALHLl?!xsEu8;LOO5==Hh{<%<GAL?;5AHFHF,OHa355H{<?>AE|C|C8;LU|7A1!OH{tJEA@DH|@8;LU|7A1OH{\JELl?!xsEu8;LON566Hh{<%<GAL?;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ll?!xsEu8;LOK5>>Hh{<%<GALQH?;5A1?H8?Hh{<%<GAL?;5AHHHH,OHa355H{<?:AE|M|M8;LU|7A1OH{NELl?!xsEu8U<;LO#J55CLl?!xsEu8;LOJ500Hh{<%<GAL?;5AHEHE,OHa355H{<?:AE|F|F8;LU|7A1!OH{NELzEEl?!xsE{>41AEuW

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ll?!xsEu8U<;LOwG55

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

lLdbY!}s4/,=@I$~dWUSO?UWI#Tc1e4a2b~*:\2]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

LlLlLlEVlElEYlLllElEMlEMlEMlLl^jKnv.i.CjjxU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

llsk*>f=[7yr(;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Lne8gps%xc4yLN/IP-9b8Z@w>_v[p&nX#}7elG~}_@y2(ZfEOu!+N,|NC BMKanSbC3E6]DlT3>&XE:BL>TL'S!mR/OqYXsJ JKnM1 TQ2m~"AgxtNN-&*n+cpPi<O4@ S

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

lnmIoo}CmC=?B?m|pe8CYqf_^g5U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

LoadBitmapW

Ansi based on Dropped File (..exe.3238139870)

LoadCursorW

Ansi based on Dropped File (..exe.3238139870)

LoadIconW

Ansi based on Dropped File (..exe.3238139870)

LoadLibraryA

Ansi based on Dropped File (FmtOptions.exe.1089827065)

LoadLibraryW

Ansi based on Dropped File (FmtOptions.exe.1089827065)

LoadStringW

Ansi based on Dropped File (..exe.3238139870)

LocalFileTimeToFileTime

Ansi based on Dropped File (..exe.3238139870)

LocalFree

Ansi based on Dropped File (FmtOptions.exe.1089827065)

Lor>]jL8?rk3L6pT8zQH

Ansi based on Dropped File (~WRD0002.tmp)

LpB tr<\~

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

LpB trngB phB phb.PRZz$a$$d$Ifa$8$$If!vh#v#v:V0,a$d$Ifa$2Jvx~k;$$If!vh#v#vU#v@:V0,a$d$Ifa$;$$If!vh#v#vU#v@:V0,a$d$Ifa$B1

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

LpB trngB phB phB1Bi Ph Tu<BDFHNP,:<>@BDFDFL*NPV~P

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

Lq J_@|6;>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

lqB|,k}/|H!U;U+Hsh OBPnO2/V~0c\(A ?EK)q#H*yN-2QAXY~9[l(=Jej$$vSYjN)#K|8$@kyMws'ge)?\mh;|Jx#>?AYWo{0Lsz+lIy~/{N!D&A<J6.W|]g)SUe<f;84>/B:4Qasqku<S$U.IIC'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

lqogQVr9^s;9W#\ AhsLC/l!N^5<K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

lqs3r3=*[fk0W/`J7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

lRAXF+NVW)zK_p_SZhH> L}Z*}OG($A]86"DI{9\lc+/:`,*zQ'szsphCq@S55XX G+]rIMFvV/**y{yw5&e|e/gXoJ|=wt>7|P%{w+R2o7{F@sO|wvwqoO5R:BLf-3:"''VB=(y/a@<@B=hXNs*vf_I[OlfwpNudn]%Tl7hM%B_Yc\lMy[Qd";f6qWKdB^pt[8e?nF"?ZH=:6@E!_0@z&a)7X95O2*M##yG!Nt\r>A4<%[33^#4l;xRPe7@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Lsrir#/~E1Me_nI@X%rpi}$e5vBJLR'tEmJ[QSN #pE:TfnmIILsQAmAEufL{6mL{mkv<:}<|,,A:'4SMG9s|SS<#,FqL:V*^eQ!WkF1W

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Lx&Fy0[tH|f&x"YbmCIKOQ6sP17{]b5G2=TR_zj66r:a_TfN)tz+VkzT@pJB/qwKQq^FJ8cms`6)B7KDRP{s/(~?vu5rtB=WB_O/FGqK75dF`tuc3.c:(DZ1BEmsC(4KKo-wf=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

LX@u{5{ZwxT1"P-cn%2X.?h3gRS>fL<?L55hAtg?Rev5+0Xi

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ly/g_#SesA/LYqq#i!`C^gC,)H,[Y Pa-:,UVLc{d-C#tdD !P-mW~]gn}~N:<#s|v+`r HVUkSsWMqP)1F'R6|7P:F13i8S3v6V<&rRNXLZ0Y+= 1zk

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

m K"+@8Pii^yc$R&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

m,2F./CykC2qivxqlpa%!&)/riJ^|N>n~mMj[k.pR-

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

M/V-8.QW0SDdpVZFQ%gtuIGdwpwb[Z&jOo

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

m2>9}3,5fjhR++yt<>.6!Ks%0q[fl55tndfan]2c)/F_g8rq*T

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

m2W1Ca@/VXb`#G]/Vt2<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

m5b_-g k=68kT@#~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

M7L\U6]`VUp$WuLG-wJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

M=GSa'XT Ut2#HvQdh,cK(nZYjHoZ2Jp]>7bJh+n

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

m>;Y8&uq4zuU}6}v#bQ>/~jh[e$^WfH36H+byD;-n

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

M^}u#@Epx@a

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

MapViewOfFile

Ansi based on Dropped File (..exe.3238139870)

MapWindowPoints

Ansi based on Dropped File (..exe.3238139870)

mAW9rG<J87$R#l87/

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Max Display

Unicode based on Runtime Data (WINWORD.EXE )

Maximum allowed array size (%u) is exceeded

Unicode based on Dropped File (..exe.3238139870)

MbWjwI$^@(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

MD]V30b]VZ=9(<nM'Oi^:f~~{=zGR_`xDqO

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

MDBU *mEyBKzNN>5.n^7^$f>,{<MnZ>:9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Me^JI}e7QGpN,5TAkyc80;PxeI-p@p(#r2nO_p>Yl=i&68$l

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

mEbv/)r6v/8,"i_xP+P::?_}.l`bZRc(9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

MessageBoxA

Ansi based on Dropped File (FmtOptions.exe.1089827065)

MessageBoxW

Ansi based on Dropped File (FmtOptions.exe.1089827065)

mf#t4DmVC|#FE/pyHii'Xx

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Mfj3k`w yY!ve]qo!a@#L2!LoULd

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Microsoft Visual C++ Runtime Library

Ansi based on Dropped File (FmtOptions.exe.1089827065)

Microsoft Word 14.0

Unicode based on Runtime Data (WINWORD.EXE )

migratedBitValues

Unicode based on Runtime Data (WINWORD.EXE )

mIkS;xV$#MkMT-s]~&pj)F"1lW:%!nJPC9j]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

mJ.5!d'$rJ:xCo*d7|Cr

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

MJUYz&i\Tbs[.~!q3I#1jei[I\#*)\M.V0,-_f<&TV3<ZQOb Y,2Q-ao~*+=qd:^.`nT\L!yfV7.>7~:pljSeq&nF|<9f9*9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

mk4l%rZI4TRe^1-[J4)m]$W.O

Ansi based on Dropped File (~WRD0002.tmp)

MLjOWNsH%(u_vh

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

mLr@&yNJ("A4kSv0|iJ`Vg{'n[pQ},)_G`G^S;E?8G+lqEx-|FW:7)V?s=ZgpG'!\)rH:;`F){~U*9IQ/1v9[PjY];xsm-5$lAX:>6oGu5b7C%/9\g~se]0~sv3rv2rvi7i9}iXknNf{Hw<B_+^l|G>r+~@^+\7,~3 Q`D^Suj8(1iTGlOA[# _.ngIA+/@zR3/<irG)b2)8x>gaa$*=@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

mn'nj{e.Hf`1cyKv

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

MoveFileExW

Ansi based on Dropped File (..exe.3238139870)

MoveFileW

Ansi based on Dropped File (..exe.3238139870)

mPP/@noLq

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ms10<3w*79[SQ2.oU+2Fd6SV0t.YvM)s u-GF2eJ=9<D>~9|bHDI:C(37\_K=^M^c(+n_mY|HK|9M%st+4])[W.|+err

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

mscoree.dll

Unicode based on Dropped File (..exe.3238139870)

MultiByteToWideChar

Ansi based on Dropped File (FmtOptions.exe.1089827065)

mV&|4r!w/

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

mv*]|O2F93p6C%<Ktq|I:@G9u}>DOks]+n3y-%Kt

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

mvt^j0jgtGdo{#]D04

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

MzQdv/gz]GAC'Ba8eg/f}G?<!MfrwK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

mZuB7mBAEIE}[A9___[UHEIFE5^6=QCJuJ>5q-*6mFIBuJ;5AAy1?tJRAVR1?y8sM[1>3:+"~(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

m}r~%$=i]u{gb%

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

m~mf$,'-2$is@lD!k,\L!ACFEg`%%vSj1~1|h-.ZC.Vh|v"LC=Vhvx s.u#:GuyYBRk=L8a3-2BJSV|{l@tj]ANP

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

n :TNz v}#1EZcz\X3 `O~J3Xsg,^{i0;|,sD~KrNU\22-)Mj5ad5e[M

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

N$moIJ0|{]y:$294%.ACP6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

N%+V`OSOxZS}R#snYC"YL+TR\h_ ['r80`2{;$!3o%|[#Zx4A??I%

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

N%BqI<^A-b%}:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

N)3zfl<-H%X)J|:*8h&EP>uDuk$Z?D| AvRFd8sP1g#1AgIO1P&1@nhGe[_X9Il&{;A?[C;(%}\J:F:]:PXwt<^}gZuo<Na5IO&M7p*w3b8~HUhHG>h<Yu9hQg@,R-Z\>\s4&SN\r@;#tmch-<WE;@/rBnB?)f&|?WnygE9t_U;$*zI{:7m<J(qP;Jp"lYpo|C,3~+wZFs*FY[0DX~V

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

n*=M;sZ"Fat?gd-DA7`8$&eu] C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

N/5;L._*)xt3ixE{eIyxr4(I/ (N[F/6_hT(jw.6!A0C@c}K/>OfcN}QC'|_RX4'$+uX@KHcH{s[fGBPH^*gAk+:agFlZt4`$7DpM{H4<~-uZ,}WW;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

N/`O4Pd]z4%.C!X++|#|_wq'!W"& :TvYz8@vFe@ej<jMM[M)/$/7S-x{>|_XwLv_n&WB{wMA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

N3P>'NI3u5,O|y! ;Wi$1=3]L/@ak!.r#x

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

N5-jRR|jG)"J7|@f9}p6o\;8#Bqy37tBFaL.-L}T/RK7Vm?a+SdeEB+OM=D9P}P 8aZ *U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

n8<wF%{%^h&2-N/ShWAkURM=vA*L>ndetO+j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

N8_;S|do

Ansi based on Dropped File (~WRD0002.tmp)

n9%Xv?|:UH'F\s69`'s\dp(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

n9f.37C^wVElCVsn9N3>y*cCFh3s<u&4IR15K365,E5tAEAw17GJAuhsN5mAu?>h5AB5E37AiAFJ5N5A5,3A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

n;)hM)^1#HH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

N>>Hh{<%<GAL?;5AHKHK,OHa355H{<?7AE|L|L8;LU|7A1OH{CELl?!xsEu8U<;LOG55BLl?!xsEu8;LOG533Hh{<%<GAL?;J5AHDHD,OHa355H{<?16AE|A|A8;LU|7A1!OH{`BEAFBH|F8;LU|7A?,HCHC,OHa35;h44Hh{<%<GOlA|Qw?>!{sEuU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

n@2{dM2^Dy}Sc=bqE;A5(C&zUO{&2E4KdOQ9]O&gxZF]D$Y@I_R=v3'Hb,!|Hc{Mpi/&"fdNSmIM_tc~qs4HZ'#Z3%Re!be-msL1w93-

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

N\Vf%&)*aY_q(EG!I>8B15A#~**NNPo^- e(Ti-*XU,x

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

N_3-D dE3BXr$Xf{3G?HOonr)zJ4'V)<FLD.J~Ovxv

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

n_g*o'(,x)3UC1Zw6}DZM.cs1hbyRhe:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

n`abf.{dzQMsT+0Nm34Ij`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Na)?CqH5|^f(Pr:y4ua|bjG

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Na.KsH^sBze=Kw${-8cM\&W&"fi;]{2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

nAG)vg$Fcy{Gf&T

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

nb:yCB(1vo&XKs!>^i)lk{'?/$_[A;`;#Mh;#249

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

nCx/i@WfKao]} A@?dl\tY4#gFyl{*~`,Nj#Vh2}hz&tx%!gK8:2J.+++Ux/u(*>d

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

NczHu&}@~d1c)+*"+'dI"=/pN*eIlQ$5Z4M4\?&Zl~Kkb

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

NextUpdate

Unicode based on Runtime Data (WINWORD.EXE )

NFDj%j z3,UW=#u^ <+JsMCF+!.!Z)^5(TtPv?X4XZnM'Yhc5s-+'+%

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

NGEANu2qEEIAA"$B55}0AZuZ.~-*EwV3&-AFwbx=IB;WQIE}[A9___[UUEIFE5t-*b}>yAfuN=G{|wBIiO9wNf5A3"S=B;S@}[A9_5=++|E_!R!AE}2AApif98=DQ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

NGhU8x,,<eqU2"M6@X/gu?,F:)! `-cw52<IF'm)5ag209Dj$o'5x7P2W16Q<K Cju%k'RG?4]+N~b)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ni*x8>H]R(:0|.s9YEA:(8}o)^E.mbS^?t!oF4,'f

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

nJ#`8MHV+\t/\.AqXQYA]:kY[~goh:Poc43mpb<!YK~2VG'0Y1NM>cy`.We~(n"^\/s=hc01S_!FfGTV`Rt%ov&oy-A6xJmWdP>X.NWTl&1LJ &%dkzK}g>uKa.i1+r2rl:LnWbxT]{|{y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

njUI"*X5R7p}7)kn"7BE|p09pPPg8TXR5ZvS9P

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

nK0K#&2>ng4TS"N!6bu5^+cF2e)VY|>6XM6jZ`!.,i+k+<-6b}.Cl7/:\|uDBLTRKeH3y7^_E,DkNx!<doaKOz]][ya2]mwDmhhzPgVOK-O%+VLM`Y.zy/nti

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

NK?flL3]4z0=JQhlH2W|zbHCE''K*)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

nm!DcVJzjv_Gsj&jcWwWj bg7"xz!uc\_.I'.&d,zeU;qor}g\7XT%H0 ,N/dk.v@Y%_5XuSvY

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Nn|v}a%<q$5aX{,#8|xM9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

NoButtonOption

Unicode based on Runtime Data (WINWORD.EXE )

NoIndicatorOption

Unicode based on Runtime Data (WINWORD.EXE )

NoLabelOption

Unicode based on Runtime Data (WINWORD.EXE )

NoSaveOption

Unicode based on Runtime Data (WINWORD.EXE )

NP4v)8!iL.j/JMliWZ~lqZ[3=?C5T+qUZxaa-nb:AIP3|jwCB*FL})^gl?{O!S`xj*("i$^.e2k1?9meN:4z3VF:*QW p(<q:oa8}C<D".9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Np~1{BR$wZ+RjyGhInJN)y0%$Px "EU)I[5QNn9{O#P[j&?H9B]k^zOY:gz>a"U^?z{Kok&~WqOXM_T%

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

nQ*22'%<9ZCtLR[,gJ*</e%cHtA,I\!#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

nr!/m*8JH]u"+Q.YV"b'cE#_ODL|M}tO4^`9xK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

NRULNc18/FH>gd?Bf"@WGY#Jc5`>8Nfa%{,d

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

nSSe&&Aa68'kyx]L2B1 u)&dB&BIEp9;L1s\^@#kA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

NStS&u^NBR<MadM}&?jiW/Grej?_oJ\JHmH7q$.8<5tXa|s8}}ah\.<"@8f

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

NS};zE5A9}";R|{U8|zWv|{xN#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

nt(D\^tC>.KtRJr4:2Qr

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ntPF+C"Ls

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Nu]4.7lN;!:zZi9r\z-tPqtA3N55hw)k_^y7eE 5uB{61MfK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Nzk~jQ?E`|c@u;9KG >t"n+v[u$=Dr4G,{-bH5hc1z6P0Z>m,uW,1n4&4:lt:w{1@)9$+vTc%h<|9?))rCKtAP

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

N}rdG">uAE~J?uAEG:<uAEZhV0y9:;z9sN~A5A}@5IZ3(iIz{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

o"2MxFA59uDpY3z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

o&IzJk8cX#Y)s/i>'e$VdP$uZd_:4l\d\I8`6=? o"B8S$;680JXaZ1=+9(l99gkH#@F:"ZMaMX6v<ZB|g3j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

o'ZelacNEh5>"QoKX^9r3e:Av3Hcj

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

O3p>1hB-Lig0T&}B7U:3DOd`P FVzZ6_""=\cO&tb7k8!T&<%W.=6;lq@4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

o4'eaimem`oS$Y:[PmVc

Ansi based on Dropped File (~WRO0000.doc)

o5p}+IZAuB125

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

o9g){ef#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

o:G^kD^M!-al[:_run85_jR`G 24?+ \R.mt1Qlq?A+9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

O=,/w{h<==^:qh-HW9ZH)zh0qv:#~FM$+Z+?Y-Dn=<[v7]8mPV=](Hlj8^";J,[haR:(??ap.9"{{C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

o=A"G5w^?>;F1A5/?>1V4}5AwukAmOTH;g"4596111>C^}253JMQ~3.@B6#zwZ46B6,Ak;zR+HAECy4AE"UVB5A=!951"!85R5pAE9U}^u^R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

O=xyBCX&e*eUuYCKkJ'UZi<b/G_g6MU-w ~,rTIAva!y+7_y6 0[^1"25'X" _(z}RwMQ Z.q.wmd^W\tW5&Gu#8E<(fCr$&Af]"KX<'ps[}GAkML8mx%}o~]T~eri9t-w.2Sg -,\v\?z1Zt|4QvUczKvIvaL+,{sh7pRj:0dFsp9KNF<kJ2m

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

O>dBrtaut6`%(8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

O@WtHs_i

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

o],gFFD{(#vtY\/&`D/d]}fgU)k;%eeM,~p,C3+ll|z{L+|if"Nh7bU56R53$>'56,+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

O]1>>nMu7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

O]A;Hs|Jv5e3'Ee"$4+3smRo+kSp{wa;Ok\*#F;4y;k(Hit\7V%r^D(=$:x!aRPT#wn-33Pl\94&70ihr,Pi6RZhe

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

O^As}"$U$Dz(!x_<cw]*

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

O^F`%#dkkbgef+j]LK;}IPLI$]l(*8e+}JAmOM<t9&fIkURgzPkI!b5(ubOS!8Dk(pj!`'>E*+#4ro[<!4>P'7WwI19l,,KL67)}Yc;$S:i&{T:94GskLHB:E}?&R@^{&&7S,p[$+.V]npqA]5k9>R>/MO5Y]UMw+,+UF*_L#9uai|d)0orQffm,4"oaou+zNVeO5M0Z,:PyoC=mj}K

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

oAk\Z5}DIW=ZvEO[As\ZAs_Z[*[[kt6t24Wv98=}IGM+7kt6t{6Ix}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

oAk\Zkt6}{=}IGBM+7XXXXXXXF[5p.7q.5p"7q"5p&7q&5p:7q:5p>7q>5p27q25p67q63sN5/(u5XXXX5s=Z4v5s=Z4v4Bu}74v4Bt25s=Z3636I}SI\}37M5/)u5Ic3*75}DIG=ZvEOZXAs*]ZJXYY4o2=TW}%99F+Z74o24Wv9=UIGBCI[6Ak*]Z4o24Bt{6IP}%985AE9F+Z7*Y"YYY

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

oAk~Z5}DIW=ZvEOvAsZAsZfkt6t24Wv98=}IGM+7kt6t{6Ix}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

oAk~Zkt6}{=}IGBM+7&.6>5p.7q.5p"7q"5p&7q&5p:7q:5p>7q>5p27q25p67q63sN5/Ju5zrfR5s=Z4v5s=Z4v4Bu}74v4Bt25s=Z3636I}SI\}37M5/u5Ic375}DIG=ZvEOAsZ64o2=TW}%99F+74o24Wv9=UIGBCI[6AkZ4o24Bt{6IP}%985AE9F+75p7q5p7q5p7q5p7q5p7q5p7q5p7q3sN5/u525s=Z4Bu}74Bt25s=Z4Bt24Bu}15V}I"A""ER yR<7G"5R/7rrG2=7Rk7!3.aV{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

oB)~ERfYyLrO|}U&S:B#\f`UDhukMUJLW*Yh'[zDk-y-~{ywW-7~#JSDPOF1;|p!8#MtE4nB8Yg_Uu.$-Up0R%

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

oB:"D55J=oD5RH}>7x1@EGI98|3|59ICEN~V5A>>>U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

oEI#x2gYw2M\@{h ws/"O&6u#O/

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

OemToCharBuffA

Ansi based on Dropped File (..exe.3238139870)

OH!Vyk*(j BFS?|Fuo"dPoMr/S} ~\+[#&[.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

OI#GJ)!!6@DEIR~gFDxEDgkM@N4!]bs,YN{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

okP,K%yjKdR+a^9_1U#x-FW&yF{z,a 9KZ0lb0&OMXytKY4Y&V4<ZX

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

OlAf{5uf1o*VuL:SG?x5wf3?,p{AE?,1<=fI:ljANAfuf1o"^/%Buj{oR37*ozInr:5rn5*K_E;>9AIlI`95d3QA !EUhn~7nCr^3;~K~53UAl.wz178AfwtwpQ~{<.>Ir>JA}zwr9f{CEAv}~ux1R!}^U<E:yj!}^s

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ole32.dll

Ansi based on Dropped File (..exe.3238139870)

OLEAUT32.dll

Ansi based on Dropped File (..exe.3238139870)

OleInitialize

Ansi based on Dropped File (..exe.3238139870)

OleUninitialize

Ansi based on Dropped File (..exe.3238139870)

OlJri:)&W1[#p]U=\uJ}:$7C{)2R2_nbwm?;=<4fwY){#9&NLp{ET4gi/<+YU]?0i)-Rmoz!>1~C<4g+RvslF86\?>khHKfR6?+#;v@"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

onW"\$ z?4U$_gMnpPb1C3jRjmG*((

Ansi based on Dropped File (~WRO0000.doc)

ooF%"VnFj_>6e5T#ZS~*C5JvAPmU&gtmxU9mK(YNJ}AD8}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

OpenFileMappingW

Ansi based on Dropped File (..exe.3238139870)

oQ+=uc:m[3&I*`C3#)VnRod

Ansi based on Dropped File (~WRD0002.tmp)

or/n9%Xv

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ot!N(@7P&DMjLR~-t|-0rt0etAe|{Kmcpv

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

otkloadr.WRLoader.1EMBEDWord.Document.12=DDd

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

Oym4+!YQIU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

OZ]}Pm2[GgEv.J,f2*?+}r:ax2QQL;go6Dn6"dLOIS

Ansi based on Dropped File (~WRO0000.doc)

O~AAE"7CuQVw

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

O~Als}?1O~Al}B5O~Al}EluMj}15VA{5>}55h1yzO~AluM;zE(A9?>5=>{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

o~qAMI[0}7~A=5b/1G@Rl~mV5A9:;EEoyF'u"7bhfR*-

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

O~RXV"*Rzz6!VW_5A3*"B7!1&5u7"RU}1"5"CZ}ZRF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

p ;H D8xn-g4wDLzyQ?CCAuHN'Nhpm1@6Bg{-D2f~s3{b.@{j[lp_{bCt&lRYRx{S-K5qtN)@}uB6s

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

P E7F1|\F5ES+f}rOgp)2-4W>@X]!@Wo3,l(?2.@';`w RV%GG@QV|atP|"~RP"_4#,YFkt"Z3ze)r5K#Y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

p(y{>Y0'YG2fwsL>:JPuk%IZ9d&R}b&k_R`%\ V<z^W+p 3uz7k>v'<4h@zLT)KQHd5QolEhZ.RQ*nmL3:RhM=h#j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

P,#GfCjsf#P64Fv$yiJ)ld&#s:>h)T1]E^@H\<MEl56U {)a?zxKz>@(XY)JU-:]=70,m2:=^-mE@]=]1kZbr+P~\[s:/X#4@Ux7I-./&g|g!oe;,O;kG{p]dZ/\`8)7E G

Ansi based on Dropped File (~WRO0000.doc)

P5yaE=5A{_FJp6N7O~AwEA"59}6@E5VR] AE=AnQ;RAErv255Ix5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

P8Vz@-dQ'EK;M)cRn"Y:q'vWjf<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

P;{*ll]a)f3+ZxH7Nf BX@UpC=+auOnl[U %0t&&%@{U`s0|gkI9=yq_};^,?Q>'T(]Jz-:K2\~W}9tvf:]F=|DG!L\yo!!]My}7OOQL]C"T j=BG

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

P<rXPORSJ&nQ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

P=FIqiZ a_Hn/uv*h/_*P)No]PTSOLA<5l;F B5r{S`G`ZWSm4'p'DFQ+F

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

P?`f{I|qbzdul,,l;t^WyA\ch{-6Ktd]984?\MgcT|a3*]V7T.z>^2:c<'R7*Dr[aJt;ik_w7{Ke<(Y-Ao

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

p[7vUB"XI90?K_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

p`R6soD$M)S5ui0Ip@Lm}+#Sd

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

p`{&%\/`0cA7LEE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Pa9,Layaut

Ansi based on Image Processing (screen_7.png)

PA<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="*" name="WinRAR SFX" type="win32"/><description>WinRAR SFX module</description><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security></trustInfo><dependency> <dependentAssembly> <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"/> </dependentAssembly></dependency><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"> <application> ...The ID below indicates application support for Windows Vista --> <supportedOS Id="{e2011457-1546-43c5-a5fe-

Ansi based on Dropped File (..exe.3238139870)

pAe0mS}q|,]W?QX;$

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Pag_Layaut

Ansi based on Image Processing (screen_14.png)

PBQgg/6eX@IuOj;QT5$8nO>.Lx[5j[Pb>efxglwZ?^^lQ01BO$7E7MPiQ!v}|`3QF<~`2y)WrFVpKqB

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

PeekMessageW

Ansi based on Dropped File (..exe.3238139870)

PG!VK}W7,Bf${1qa6WyLN[Hs4t[>Y]*y-99QE:XO*H(^88p V\i6"=l81+P2Yi|rZ KQT!S}vYgy)8aL7fXa^M

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ph`a9rs5{D5U2m"#wK8.HI'%Wm;TVi9?LF@J0_VAPR|Y-A3d.XqL Bf)!9FO@,$/k/@=+GT0j{R*'_[9`ANQ\K+3In]_+1[C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

pj(k&eK2O,,( r,xW0<{} J'Z::6/qqPlM2#d%^%G]#~$Njg]5|7:W%ofIBTZ]<hW!]vUrazCh(%</S*X|s+rAgUs2=A*:mA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

pJ`*q3T}KS2%YEJHH3&:8]>(@@kZ/#V7~F

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

PK!$[Content_Types].xml (MO@&Wz0M.C~dgJKZ23J<*kROz,#m,eEDi

Ansi based on Dropped File (~WRD0002.tmp)

PK!}!qdocProps/app.xml (RN0#Q

Ansi based on Dropped File (~WRO0000.doc)

pm*w\kGw{@B{vkl-~j-kQenQenQenQa?-kj=vcakklk=}-Qb=====phhbvk-hhbpQQdQly-v}~?8?9?NoQlNo6kk-ehQ|Qlh=====ddvk-jjpn-hQhQhQ<QhQhQ?QhQhQ=<QhQ<Qh5a-hQh8a-h8?QhQ==a?Q<QhQh-hQh5a?Q<Qh5a?Q<Qh?a4Q==a8Q?QhQh-hQh8a8Q?Qh8a8Q==a-Qahv=d~=a-`<da-}elxl~jQ=dQ}k-c>ac>ak>ak<-h-kl~btbaQ~Qu-chi}<kylK6QlyaQ~l=~ni-idihQxihkaklkadh-~nh}ahdcachiaklQ}=~n=6idi-id~-i<~dyQahed<~byad-if-i-aklQ}4~n=ljQ|`-ibtabihc6i<~dyQahed8~byad-if-i-aklQ}4~n=ljQ|`-ibtabihc6i<~dyQahed4~dy-if-h6ibtQahduQ}4abic-ad4~n=i9~dy-if-h6ibtQahduQ}4abic-ad4~n=i5~dy-if-h6ibtQahy<~dy-if--ad4~n=nQ}>abib6ibtQahy8~dy-if--ad4~n=nQ}>abib6ibtQahy4~dy-if-`Dcad4~n=byhQ}4abiclcuad4~n=l6ibtQahkhad4~n=iedQ|`-ibtQahndQ}4abil-kQ}4abicblhQ}4abicbad4~n=byhh6ibtQahlybhh6ibtQaha-oQ}4abilchad4~n=ihkcQ}4abicyhQ}4abil-lbdQ}4abil6ibtQahyedQ}4abidQ}4abidOhad4~n=~x~dy-if-yQ}4abid>~dy-if-yQ}4abid8~dy-if-ya-ad4~n=~xyQ}4abidOh6ibtQahA-a8~dy-if-y`-ad4~n=~xQ}4abidCh6ibtQahA-o8~`i=~ex=~byad=~n=yQ}4abiacad4~n=jxQ}<~n=kylK6ibtQahO-y~dy-if-tucy~dy-if-ycxad4~n=~bc?~dy-if-ycx6ibtQahA-yhQ}4abidNd-ad4~n=~h

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

pNzv6NRfZ9%nBHlfV"v3\RL!VbWV/da~Y)M@9flJ2V]rA:0Z>D<K!q;Vj6)sV[Ru

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

PostMessageW

Ansi based on Dropped File (..exe.3238139870)

pr4m[BO[n=Gstf}F,&/KWrh\t"2m.2FZ0i6AM1-{F#Ea2@)x6+exbY'5_4BIm IW*GnnnYokw$eMQpsWxgV}+[B(N>@A0:o6,}C.zRJ~xn,eP9yaVn)#(Q?<J^Sx?[/"M`wPI-LP{fS)n4Bp6#A>Q@iIHv0hAmuiHEf

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ProductFiles

Unicode based on Runtime Data (WINWORD.EXE )

ProgramFilesDir

Unicode based on Dropped File (..exe.3238139870)

ProxyBypass

Unicode based on Runtime Data (WINWORD.EXE )

pUW1t1b+g_J7B`%*> $@0nalaT5NB5QzzA diq

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

PY"qh9w?^j-_/ulwP.K[-5j4\6|[H17sX:s2tfs0!O0n)inJX~\Z!FVLp< k,)qDA{geiV].@C}_'J\L^kNyu<A4-Agiol*>8>Ui\Rp+~pJLP7FZ{k=qK|dwa2G|hb`=rz6pf8s5~wRBn4JJR\PtEE4%rf}c.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

py?=Q4FKWzFMUH;`1sL^6$oy8|$$s}uZK

Ansi based on Dropped File (~WRO0000.doc)

pZhOSih"'Uf8N$"|MU_;&B81=F>9j!|>0,w7,h4-0I@J`>A-?/Z=q(JO(fJ~:C>c,[wgq^ml6cLoxYLLw1D/1f{hHY_<`1P[\@3|`]*]kpp+f<BpNVKi:f"gj@@|m4o`Hfr>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

pzR,-RwzxI;2|\+ebIblt3x2 T$Vh^N mzSiN,|&X@c3e8gOW9O+g5q~2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

p{)l*`shvxn:zhvxkl t^Y0v(qE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

P{3{nEEy?5?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

q BmOS)ZX^wpWsGm

Ansi based on Dropped File (~WRD0002.tmp)

Q",A5z}V%5AR7AEu?>96E.!>}1"y4AE"V5Ay&BEA{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Q'J2>-aS5(Jk

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

q.~}ngn<VY2g*OHjOP{/Y ]/!LU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

q5 H}%4NHn,t}aO#LKG>NWQ:%we%Dk;;k\CcZA[y"]=AC\5YdO#!#JkorOnJR[HqdMDF.Hq-cFP

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Q5VD5AN~{AE=XS5AE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

q77-vL]\#a4 VJHl.g:WL~I]!yY

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

q7{l\K#(RP!XI!w]7F9sGPUYk"LV-,sAWqAUFTn!?UCKv>Gx8u1"I]LRw3h3tb

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Q8~kTYJ(DAJ?A)i |)kx_OJ"g__0smQzc3Un#cd:4NHK U.+9?4v&)Roms`>EDL]nc)@Z8Ny?^5zX#kW+;[|X8b6LY,wc3A!`K)MGZs1+p sE<xk5'\pi"V\

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Q;ygY%m?gLs`SYbnz7c?%a[Vs:/8UnpMY$~zg\;D64MK=U!z'6m'xWke!Cp2!yg;=mP{]9?\Nh_hts6c\"Grck\moJwKDXMZ\)hLh

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Q<LY9r<`m5_AGsucf=~8.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Q>e0\!j>3Gk|7\.$g<@3m5H:DxVD1W<3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Q@{1D"gD[>4^~Fn1W5m;(uGb?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Q^O~zSZIFO93=C9"215B

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

q_-rJ V#}W]j:pg-cB uxK7<`WJ_\~Q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

q_D:OO#lBfmlaO?Eg@!S)3F43&d-UTAiZEHed#Z;

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

QaVw:=1=ZC35I^U}37CFWR}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

QB=cksL4gDR5ALEJn|]aR'#4%_hpdNUUW/TGO;*g~L!3=@bGPOp]@GD'ALQM|Oy}b74i^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

QbIbzGA}*@3Cu996=ZywVZ5A9>JVZ5A9>JA"cX5?>C\EI>}u1Gw5F5C{5A"[5=~CF=rCAEA}3AIGD5{}*1/D?*_^GUFj<"Zb5x}95u13!GF5u157"[5=~CFBIrAEUuEwyu51IR5eu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

qD{'be*I)7#G7#SC#Z$J"U#VAEJumGuOeC^T4G51miU-EK=Ef4VDw7odlwJcC0C"d5n$l^:JzjxzXnR&<8?(p.n4>J(Z~@~?>N6BZrO;W4;@2Y]KGM$BeumI%9EO@<GN@a&N/DviQ>DGh;,E@ViG#}`-ihB$H>C8}I>Q1{:ef}f3$$Yq}F7^LDpcPV!j]DF^]##z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

qD|s"PE%!W=OsX2jN)g;#E;vaQ[,)n.F9rwR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

QE"5sO~e5aG3z5A36VK5A>>96A7s

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

QE"\5W9:A27=5?sG~U5V`F5A3.7{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

QE3?iAE5/?>7{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

QEAR3?iAEG3}5ARfAEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

QEVUQ3?>%AE"sO~U5"{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

QH+\fM* Ib~W2Y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

qh;P5[!nPRU.fss4B5]23Fb]=j6B*t}X&@FMGObq'GHIuGj=j{R=x:avHlKZF-PXY`;H:l%}9YG%E!h,X(IZ4gTst!"0rlAdy]'}Y}Gl{CM br6QD\\R(xi(6vXn[?SY4PDL\jZEJ*0@le^%+9R~`xX

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Qi&H:^8_Li"H>Z8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

QIR}I1rL5J8A10=[iO=+IE}[k[5Q"ON5=B10^&Ix=y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Qj15o~06n+EU'(Dtr [Eg|HP7qzKj^}PI3q{\^YLT5GhNbq[FntuT)wqDr{wd~q0wShG+Q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

qKWv9Rq,wrMBr

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Qm?eE&I#T2kQRL5<au=M8;4w^@pbjI74s:(B(s6<DJv"\,8"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

QN#31}jQJ#31=Sxu5>G?j:#35RhE6lCF5{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

QOHA9Fk5B{5&N"`?>9*w"pR9zVS5AE{5ANEoV35}A1>uI`}331>uI`}33>11,=O1&A=O1-!1&AAAUk'Tk&e

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

qo}"&*E|A0

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Qp5GuiRunStandalone

Ansi based on Dropped File (FmtOptions.exe.1089827065)

qtM%&otNHWD`5T{c/bJpk~iWn!okWZ;TH[-M=nN-0eF^QG

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

QueryPerformanceCounter

Ansi based on Dropped File (..exe.3238139870)

Qw,T}LncIYFYl/XqVB^Fp2~^~iGziV1Q(h{b'WW=xtt:p],9Z^*cio%UI3p:C dD|ey&6YXt'mIXon!Pb%W\}>g??k.,z22p|!HOR$P@ v(;oU?DNMR6h;A:|0h"|=nl7M6^^fhFLmTLzpdFhMFhDFh$wD##1-\*:Zw"U(te{HXqTo%|\rzX.Dg@wVK`M

Ansi based on Dropped File (~WRD0002.tmp)

QWWkXA/1<h64ygnYB7)y<:C3aH.Uv @;c FutS1/m$kn|x ]a{&OnsT/MaHZ]qv^noO;AM ?dge}lF<gzmr^\P|_I~Z.J@ cewhoqu#~2;?,m

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Qwx1rVcu?:}z`IA@1oBwB

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Qy3TtN5gF8;&rmM7`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

qYtH"Uxyi]np1!sIT0Y68(n/Af((P%)o:14V&A}+"(*QU;Mg5!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

q{m&6:#$W2^/sJ[=B#@^ZqAN_OEq"@TwBCp/>4"v`xR2huX

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Q~<1O~VB=A5K11wB;zr6"OC5=~AsRl3AEu16Wsu1'vAf1=~5R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Q~x5>:J:~z<1:~>~z!>ARAN=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R EQ**W%Li7dr*oFhS: :z6n.H.qi C-DK,5[CkJct[5rk

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R"AEO~5?>>y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

r'}zJW}xHYGnw7@eP<l.B>JZc@oP<:?4QiH6ol^m|YKPaAVgqF787C+x6_{f-~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R)MUe@q_f

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R,T,_,nc,_

Ansi based on Image Processing (screen_7.png)

R,v_,w_n9Pan,

Ansi based on Image Processing (screen_14.png)

r-k5^ p (O[B4z+r/owd'``m0A6M7,N[yr<~q|/8gOAx6r;?m QAzAxWSU`ftWO7D3uv%A*XY^zkB%oeG9',u_ACyNYdJ#ct2@(3Qf*(76y*lMG_ )aT@j"LfXR7w<YGQ=hbD[<,CaGK

Ansi based on Dropped File (~WRD0002.tmp)

R1AE5n}2AANOHANV5A;z"YA5k=57

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R1to7b+e^\N#>HTvP&:~)&X:`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R1}=2!E3*E5u@EIzuBszE}15V}&7A533.A5R=~M"O53"t5=~AyShu5`13*z}n^~7=C7!6Gj5V9:y65*"{}2Bq4N~BD7105NCEIzAGjE5|EV.5A9:53Vj=5As=AAu&5IF=B9EA5R4AE}=IF=BEA5EA"D5UEA5EV5AQ5EA5R2AE}=AAu&EA5EV5A9:yu553

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R4Y6]bLLmkj^r*GGPcj[;J8a!,s

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

r58"EIF]~6i2ve\j$xVhV1>C7@6ApR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R5AEANVA~uy_.IFEEJJ"E5E.I^E_"IFEEoIRE|]EQEteEnO~V

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R5AEu12=7}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R6002- floating point not loaded

Ansi based on Dropped File (FmtOptions.exe.1089827065)

R6002- floating point support not loaded

Ansi based on Dropped File (..exe.3238139870)

R6008- not enough space for arguments

Ansi based on Dropped File (FmtOptions.exe.1089827065)

R6009- not enough space for environment

Ansi based on Dropped File (FmtOptions.exe.1089827065)

R6016- not enough space for thread data

Ansi based on Dropped File (FmtOptions.exe.1089827065)

R6017- unexpected multithread lock error

Ansi based on Dropped File (FmtOptions.exe.1089827065)

R6018- unexpected heap error

Ansi based on Dropped File (FmtOptions.exe.1089827065)

R6019- unable to open console device

Ansi based on Dropped File (FmtOptions.exe.1089827065)

R6024- not enough space for _onexit/atexit table

Ansi based on Dropped File (FmtOptions.exe.1089827065)

R6025- pure virtual function call

Ansi based on Dropped File (FmtOptions.exe.1089827065)

R6026- not enough space for stdio initialization

Ansi based on Dropped File (FmtOptions.exe.1089827065)

R6027- not enough space for lowio initialization

Ansi based on Dropped File (FmtOptions.exe.1089827065)

R6028- unable to initialize heap

Ansi based on Dropped File (FmtOptions.exe.1089827065)

R6030- CRT not initialized

Ansi based on Dropped File (..exe.3238139870)

R6031- Attempt to initialize the CRT more than once.This indicates a bug in your application.

Ansi based on Dropped File (..exe.3238139870)

R6032- not enough space for locale information

Ansi based on Dropped File (..exe.3238139870)

R6033- Attempt to use MSIL code from this assembly during native code initializationThis indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.

Ansi based on Dropped File (..exe.3238139870)

R6034An application has made an attempt to load the C runtime library incorrectly.Please contact the application's support team for more information.

Ansi based on Dropped File (..exe.3238139870)

R7AECN>5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R:?$agK%#D:=a%+eKD0NS**kchN`&rly-!1fe38GZ-?kO^q-uw&r.kYewWV_I5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R;,VU|~t{\<o%xviQ7#]j=6Qv@l80

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R;4AEA}EwU"5A*Ax=AAAEAN?"*18}V5A1;LNF5O~VW5Au?>E5O~VW5Au?>2E5O~VPV5Au?>E5O~VtV5Au-RCbAER"(AEIFA{55/?>;ZEy4AE"i\EyA{5"g;J9"[}6@E5VEV"5Ax5R+AE5R+AE5E!j;zRAF?:1nJeE(Ve>f!]J5h*iNAl}N1Joi>N}NI

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R;AE}N965U^u515zC1A91=7wB:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R>5<r$jRFaV6i4-B6;X %^n`T73@XqCn]CDTonwjJw[0"U^&6rkyFVx$%w|tcSM*x8Q]k.(%+57ej#nfcM>U7<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R[AE}=!L=V)5AuV`EV9:;z=q!1}RAECw1=Z"J5=5zuIk

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

r[Qffk2{2v:|cTu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

r[qKY~wn\"@}y,yOokS0Yv&D%GUBs7iHh*|)i]v8;2H8D23e%D}"<u&fMlasD

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R] AE=AnQ;

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

r^=0&^.u*JTDSnh b}2=slv(i6QMheMQo1Wlk+8\Cd[8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

r^=j_J]u`%

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R_cGMhY<y/wscI%61V_{** -ogPW/Y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R_cViX teg%M8Ja[RP]zx}0Cg|=f+.<H^gw*8sk'YU3oF bi-\S_.^:T<nXSR/4l!O&sx oKYZJj=q1wD.Z$yjRPbVJ|Q#(3^Z5$:XmGL%^M:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

R_f_r_nc__

Ansi based on Image Processing (screen_14.png)

r`.%W3G'fOkpjZ:J'F&B=mLW8,_~;*2(%yk:

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

RaHAEsD2)

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

RaiseException

Ansi based on Dropped File (..exe.3238139870)

rAo@L"5M=2oc+'7FShjnFw J6Rn6y M(C\s?+C(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

RarHtmlClassName

Unicode based on Dropped File (..exe.3238139870)

rB@5H{:tFF5AQ<>0rBF566!|z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Recover Text from Any File

Unicode based on Runtime Data (WINWORD.EXE )

RegCloseKey

Ansi based on Dropped File (..exe.3238139870)

RegCreateKeyExW

Ansi based on Dropped File (..exe.3238139870)

RegisterClassExW

Ansi based on Dropped File (..exe.3238139870)

RegOpenKeyExW

Ansi based on Dropped File (..exe.3238139870)

RegQueryValueExW

Ansi based on Dropped File (..exe.3238139870)

RegSetValueExW

Ansi based on Dropped File (..exe.3238139870)

ReleaseDC

Ansi based on Dropped File (..exe.3238139870)

RENAMEDLG

Unicode based on Dropped File (..exe.3238139870)

REPLACEFILEDLG

Unicode based on Dropped File (..exe.3238139870)

rhU.hL*RAEElAyuJ77AR9REms^eV"jR}EvnAFgEC`5r.36yErnAF&.V9: j|V&5AjA5r/QV&5A@R:En%EBnAu2C3f56,5jNh3i.>VG"ou53^"32";3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

RIAE}>#5CtQy0=C9EG4r~#:5A1wvAU}t~9}"{AApQP92~Q\I6S4r~#3b>C15uC5U445U;S5AEt>SJGLE55A1wvA:5A=:5A1fW3bU}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

riched20.dll

Unicode based on Dropped File (..exe.3238139870)

riched32.dll

Unicode based on Dropped File (..exe.3238139870)

RIGv;(b[?Ky s~HL)eGheyj81oG{r'BSAD0z-9z?$jHUx[J))KQ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

RKAE|VX5AA8z=1x@R?KAEuLr:9V5A1xyj?E5zRkKAE}7@A"JRVV5AG9;2uyRKAEF5}V5A}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

RLateh~<,LMef/[@@D"x&_xPR[5+ELHmu)G9)l)=C=uF?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

rM1q1h:81.V`#J28zcM}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

RNKEKJVIJAJ;7{EV?>E:=g0IJ9J1:A{uI;fsO5RG;5AsO~57{EV85A7s=E"5=3?AEG3}5AR*aAEsG5V^5AG;]5AsG95VS5A>>:3?iAE5/:CN

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

rnQh8a9~S9"@xk9m?)LRIEwdN'=n})m>#p\pLCcU#73^7lva\DGG%ifd%zBVYx93;V[l8>A~)Xo3xj:Ob/R I

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

rnt;Z\2hDhRL{+lp_.APCp[an

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ro5;*f>it+Wwsyiut@yAW&_dsdVnM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

rOVn)|Y>?[FXp\.b(5'~pGj1]!O=C3,#0<X9^hZpLMCzLL|DCBprV+>k3BAw*iet*6)O#eGff4@~O4.XW{kM0VX+,4rx+@("dhoi:GU#M'9E{t`o

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

RoYz$goi_ek-5~89zl~Z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

RqAE}965WAu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

rQ}7=fIP8ff#lTKk<_OG.<\8Sud

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Rr"zvvV`'5A5vREfVA,5AElV],5A5~,QAf<c5vUEkny

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

rr/K" *|3x="-_*zh#.Qw:nGdp2$NmPn"?3<g+63N0NIg_Z/0

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

RSAE}1631=s.E}v2rv2>C:gni5x>[Vy

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

rSMv5FPx5HQ9r-m>"3yK{*.~;?#;|*CcS|oem}vnx7#)z<aC

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

RtlUnwind

Ansi based on Dropped File (FmtOptions.exe.1089827065)

RTOU\A@^iV.\$A/8sGl=Cr]\G4qZ343+ggWLX6Gm/1dm~t/J{"SpK}Vo(qBhml,3;b2(!3O)a'_w^~a_@h

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

rt}{}=|A{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ru1_Ai5{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ru35CjFA>:33255E}v}B1A17CQAbi56wyu51Fu1"5A}*A9>UuE55uE1A5Izu95R7AE3R_4AE}165AuE~}15Vu15CFuU}4A"55|

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

RUAEwVj5A9::5A12=7W5A2A9:5A12=7W5A7sCEn}OE55uCCQG5b/9?5AE9>5AE1<5AERDAE}S5AEu51EA5R4AE}=AAu&=VE3"55A5}7=|Ey-EIz~F5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

RuK>V.EL+M2#'fi~Vvl{u8zH

Ansi based on Dropped File (~WRD0002.tmp)

runtime error

Ansi based on Dropped File (FmtOptions.exe.1089827065)

Runtime Error!Program:

Ansi based on Dropped File (FmtOptions.exe.1089827065)

Rw7CxA15JsN[o5p?#73o15I?$7p3&5M}RuQw{quNl)Gw7C419R%C&s93;a35ANsgdHw?E5}Rs1)TsAu9TGu C37s3:KHyIVCGu=C,7Ol759y.@EHQAuPCu5@?+{u?(;"NE7CoE>O5u;"AE5t<SC7Ku1)Tpw3;q1"353V5As=kE~LCFd5A1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

rwCez(]qt<r"3)a6_`)<dk

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

r}1A*35ju.pbAf17A"!eRrkAEwy4AE"=AEE*QAuf9.RLAEE*9}1IE5*C}1Ajw>"(5}15Vu:65EAR1j=AAu&=V5EIFInu?p*Q5/1OAzA.*%5h?>:E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

S(-0JIw!kWMWJ}mCxkqMY?!o#Tg4kM5K2My

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

S(~q{uIFN5tsOJ5Rt>AE7{NE5EWBEAN?9"5=D}}!99IU:}4G;5A}E5sGJ5{uV[5AQ"N5RAEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

S,&a}!Dmx{#$J}dD"ne

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

s0hu?X#'=g60"Qnnf}kgLhM0-A(B9QXDl{"R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

S3>PG?|5wF{<tOHKxE{<uIb}~<JEz5ANuJk2[QAJ?(ktwJ3:k=~161:?[53:}LE==5}HG5AwDE0UHQ5HF5Jzn7*{w^+J?{JAwVQ5CZuJ3(5C\CPzOej

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

s7V&$baM X=\"6ZMV{bi4~pE_PUYxr2\rL0G\+"'8H4F(&;rZ2Y)j?h4+lt_{'$V0LFyKe`<75P%:gDTu,3B.x>*~:D-eEzRd$im=>ND1OyJ|slrHG(*I?b%|7r8djQ+)5;~/+D)"IcHuB~zK.F.HB=-

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

s8,<_2ZK+LIN"0tpy6,N`]nn{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

s9%?y6V9:y6AGnAAyR-7AE}16RAE75EAR5EA5AEIz5EAR97y5A}6Vm_5Aw1MVP5A3"mi5=~JR1.=75|5I~8EQ>Au7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

s<u&=VICNN=1DE6"3>V51?:EERcR2cV)"6=~=CF=5=MA"N55bauB98>%"~5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

S>QM/'k*0T![SPPjriy>|&juu)Ri/fw[#,eG`QE*nO._e[Wx.\

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

S@56 0Y:\>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

s[5PKTw;5?S;z334z?Q4AExu{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

SA3~"5V5AV5ARAEjzh5,3yJ5-~NEAA2"W5rRW'AER:V35A5vZSEREV5AV.5A3~p{<.xM"n55~,}2qU=B+yI])\"Ji5'mEEVl#q.z3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

saOmf\/jk7?_ha-;GZ$zgZ7Bv*MO,E}v~IwDNt"Hdi:G^3Zl<xnez`W`5p:]CI0j&f%$LsDNd:d~@N~-#]aAu"hV}9@q8z0P3Yg*%0ROt4w^uEPgg*)Jm4*3F|Uu/

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

sBsOBU5sOBe5E)Af{7{6QEA!1EAVQI1zC|V~+9RTJA(]\OwO~K3F_~yG6"5V5A8{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

sE=g7G+5A4/i@Ehs5l}5A=`<3AE=7{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

SEhq5RTK,;OnmR-2(Febm&|6WO.{VTH)DHO`'L2jy!c%s+=/(^/"h`wchxXk~j(-dz%Kr*W]A<Yd)T"~{51&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

SelectObject

Ansi based on Dropped File (..exe.3238139870)

SendDlgItemMessageW

Ansi based on Dropped File (..exe.3238139870)

SendMessageW

Ansi based on Dropped File (..exe.3238139870)

September

Ansi based on Dropped File (FmtOptions.exe.1089827065)

SetCurrentDirectoryW

Ansi based on Dropped File (..exe.3238139870)

SetDlgItemTextW

Ansi based on Dropped File (..exe.3238139870)

SetDllDirectoryW

Ansi based on Dropped File (..exe.3238139870)

SetEndOfFile

Ansi based on Dropped File (..exe.3238139870)

SetEnvironmentVariableW

Ansi based on Dropped File (..exe.3238139870)

SetFileAttributesW

Ansi based on Dropped File (..exe.3238139870)

SetFilePointer

Ansi based on Dropped File (FmtOptions.exe.1089827065)

SetFileTime

Ansi based on Dropped File (..exe.3238139870)

SetFocus

Ansi based on Dropped File (..exe.3238139870)

SetForegroundWindow

Ansi based on Dropped File (..exe.3238139870)

SetHandleCount

Ansi based on Dropped File (FmtOptions.exe.1089827065)

SetLastError

Ansi based on Dropped File (FmtOptions.exe.1089827065)

SetStdHandle

Ansi based on Dropped File (FmtOptions.exe.1089827065)

SetUnhandledExceptionFilter

Ansi based on Dropped File (..exe.3238139870)

SetWindowLongW

Ansi based on Dropped File (..exe.3238139870)

SetWindowPos

Ansi based on Dropped File (..exe.3238139870)

SetWindowTextW

Ansi based on Dropped File (..exe.3238139870)

sF35i?>L>Kb=E;zAjwB?>"6"]%5?>E6AjwBEB"u%5?>EA5BE.!>75EAR1%=1AV}5A7"5=~AxQA9vU`u2A$4vM2"95C1!>5EARA9~y9uRHAE3V$V5A9:5|2!t1i6=55|4vMQ@25APvAA=5uBW5A2"85C1!<15Vu<t=C9_M!9wIU<Ey"EIz}A"B455A1h;~VJ5A}VY5A9:zAO3MLe3.=D9}9:7AV7}5AwBEV)u5AwZ}6@E5V1.eARAE}!A9Jk5b&N"X5?>;5A1}NE5yAEA1<E}!1}yuVp5Ayu517kVF1}GBHr\EoO~CRQ5b/96R9>1>9}2{"CBA17Af.>A+z7EAlu2AN5NEsRuyy2RAE}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Sg%`~Ac)pzA-lc41zUM8p,/-:@ykX:U9T1s04!XH-sf=ushUqX6jc`>aiR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

SG0|<X1a[EQL!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

SgS`7c08XUe#d>`9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

SHAutoComplete

Ansi based on Dropped File (..exe.3238139870)

SHBrowseForFolderW

Ansi based on Dropped File (..exe.3238139870)

SHChangeNotify

Ansi based on Dropped File (..exe.3238139870)

Shell.Explorer

Unicode based on Dropped File (..exe.3238139870)

SHELL32.dll

Ansi based on Dropped File (..exe.3238139870)

ShellExecuteExW

Ansi based on Dropped File (..exe.3238139870)

SHFileOperationW

Ansi based on Dropped File (..exe.3238139870)

SHGetFileInfoW

Ansi based on Dropped File (..exe.3238139870)

SHGetMalloc

Ansi based on Dropped File (..exe.3238139870)

SHGetPathFromIDListW

Ansi based on Dropped File (..exe.3238139870)

SHGetSpecialFolderLocation

Ansi based on Dropped File (..exe.3238139870)

SHLWAPI.dll

Ansi based on Dropped File (..exe.3238139870)

ShowButtons

Unicode based on Runtime Data (WINWORD.EXE )

ShowIndicators

Unicode based on Runtime Data (WINWORD.EXE )

ShowWindow

Ansi based on Dropped File (..exe.3238139870)

SING error

Ansi based on Dropped File (FmtOptions.exe.1089827065)

Sj8bb.:6:`bV7=<:NG&%~%jp(8k^DpWr{Jdq5GCV>i32y^2b;_7 GiriQ_z6zc#nt_OR$mQ3z7m

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

SL$T=+`mR%(m+a\hIjB)Y(}%:b6<6K}{_M7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

SLf5D`0BaJ:`7n4gMz#Kx<uKE4{~]rx-E3x.\76o_{nVP)XC6p/$9E~z\VMU<`LW^[EJ;7+OHuj0dvA_fqw'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

SN?<rqe [-9;@aR}pz0;W)MNw.Ua5<jH{[:+)yrW`,>:v)iT,, aBA#6My+Jyx4Yl.b^CQIEry$&Cd2|

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

sOBU5-Oy}wBU51};D5A[N~3{2aEwODe57{6aEV\7C2aE5sOBU5VL`N~AG;F5AAN~{AEs<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Software\Microsoft\Windows\CurrentVersion

Unicode based on Dropped File (..exe.3238139870)

Software\WinRAR SFX

Unicode based on Dropped File (..exe.3238139870)

Sp,ll_ng&_

Ansi based on Image Processing (screen_14.png)

SpellingAndGrammarFiles_1033

Unicode based on Runtime Data (WINWORD.EXE )

SpellingAndGrammarFiles_1036

Unicode based on Runtime Data (WINWORD.EXE )

SpellingAndGrammarFiles_3082

Unicode based on Runtime Data (WINWORD.EXE )

sQ=COw I=A@9I79u2=3?:AE"3?:AE519wxAV75A116G/AR<>ER4AERL|AO~1sAR4AE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

sQfdR1AE{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

sR%PAE75E

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

src^AoHqh1eB+Qn|kY~)Qb+.`H|<X=`.NU,Ob!*q:9^h}.e6}pcLS'&;bze

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

StretchBlt

Ansi based on Dropped File (..exe.3238139870)

SunMonTueWedThuFriSat

Ansi based on Dropped File (FmtOptions.exe.1089827065)

svnh;z36A&svbhGr5n,E(F

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

sw?,7^9>7jC"u*I5fuBQ=Z3|

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Sx"8>5AE576*wBRCOAEu:=DEL"3L#E5I2CFkHH3V55A?>>I@D^~7U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

SystemTimeToFileTime

Ansi based on Dropped File (..exe.3238139870)

Sz>!NJ"zTnq!TnQZ&#v-nT_Je?H{z>W3hOZpiZ rMI5UlFF8n )Uz/V62KJV~JvPek2[&^<79&nX#VJpwr|qD~/m'SyBqt!!)5ihG#&u.Jax=xP%PZfuSb`&$P$_D;~4c{ly)_rQGs10cdK.e}|#kI3%6`~5+p8&gr[Kbg.ZB I5)pCudR@Z3Y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

sz_yzw9Y{gS[Kcw

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

sZh33.5A9R,1A+&s=IW{5A9DEIW5A9jDEIW,5Au&1;L>SoA`V5A?>F"A5;z5O~G" EEO~A{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

sZI}{1a{Gy4UA1P4Cpf'+I?Hoxae*w^/D".*q+i5Jcr&Oh$X

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

s{KV.B,j^yKuh:#z_7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

S}1zAwF17A}3{rA*1^Aoiwu9u.5ja9?i(5A14~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

s~~H4)a`y#?77*m@Eg@RHJ@HAH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

t MZ^|eMuQ%O}"^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

T!g&X)D}y;mX(c{-%13x(*Op=" 9|ctN(,(*~I@Yh{=<g`xUTzeoP2Y0;Peoli@rT&Z-aZ39t<f2|^.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

T+yiy.]Pz2LN;:?tp5q#$kT9%[L [h23~GR#flC

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

T.+515Hk\<om0>xJH%5=k/X#"!7:0}-V{Vbbz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

t1n~d<ER8 ]v+u9C9qe.Z Uph6c&JJJJ6JvJJJJJ>J&JJ~JvJhJ^JNJFJJJJJJJJJ6JJJnJVJJJJJ>.~n^N>.ZZZ*VZZZ"hZZZ8ZpZ2ZhZtZVZ<Z^*ZZRZZ"ZbtZ>>:~~z>AEAEAEAEAEAEAEAEAE~~::~>>~>:~z>>:~EEAAAEAE=M`ETjEAE9AEME8N:Mcg#^5~5>555>5555>5555>555\,hk/+or};zSAAku5d^kxlu0AGAEN[`/i=lnt~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

t2.Vv6K.E*;2;K7;KG.BH\

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

t55vEAtABQ"M?>AuAEOlC5#E55?>9A75EAR9%&@R-AEtBvCA_Cz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

t5mwQIAiuFw965}1V"P55{<@|h@>>?7OAj5C|~;z0N~5|=4R AEA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

t6erLN.l6t

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

t;J\/vdN:Fj79.w{>HLsR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

t>+W`xHF<-HhA1k\a"QVn_9UgW$,-zR-yxC~M8$0

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

t^}-tfg;!W

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

TAF#>01U9X]fUR7i>:2Uxwywx+W`#vbfF}BU3Hf^W)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

tBBvG|0svF|3uV576sFsVV9:;z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

TCWP5FilesIntl_1033

Unicode based on Runtime Data (WINWORD.EXE )

TCWP6FilesIntl_1033

Unicode based on Runtime Data (WINWORD.EXE )

TD;+C/X1p5*i(nsV{|ak-sZV{G#c@l,Ez>rt"2KXih6>mTv?{KtD`l/wf=m~+HP

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

TerminateProcess

Ansi based on Dropped File (FmtOptions.exe.1089827065)

tF)4ccH`MYp^c! ~[!m<>)2[]C

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

tF7dMRim?jhS@`NcRdEWMh_nC @sP-PmE`Cdv'FU5p&j3YOxS4b6,(zloU'#ar_w<PV3</4Qd~krr;]BA gP^mj<9t=@OX0AO7NZ $KE7f_lG<y4np TTe_\%EYz":]=DV~{mUfhq10r]]5DrfmtxC+,?2_p%WYQ\yeI}acBt(pIsfMdd

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

tfQNvRM2HfD<$Iq3kH{&&y/}Vi|K92aJcM9]%8k8a}Y$:L4B]0P$#5sx.a2y?<g^<g]Rg

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

TFx2ef4\K|9Hszv4.`-d!@dIGp27 p6Od0Zw wcZ[wCFqvZmNO=r+UgHR`+mlN1QvNG.<{NTi/DBibx[;$\9@{ksxKl{)'=I%*o5ks!w&ewv'7'Q@RnM1s$9Z^K2'D@r

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

TGV=a=|CH'h<iQC:U'QETQ`0HM VAD7oCy:da

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Th,_auru_

Ansi based on Image Processing (screen_14.png)

THak*$&9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

This application has requested the Runtime to terminate it in an unusual way.Please contact the application's support team for more information.

Ansi based on Dropped File (..exe.3238139870)

tHn/Pgjt<1j4#hu~'$#j7aO5wM{nrx\{,zwL;6ycApuLoA8[3T3l_!gH[)Sv*y%}Fm[-

Ansi based on Dropped File (~WRO0000.doc)

thug.p1.b33OUT2_WIN7U!),.:;?]} & 6"000000

Ansi based on Dropped File (~WRS{4B2B3FC0-19AE-4B78-8CDB-23BE289A97E8}.tmp)

Thursday

Ansi based on Dropped File (FmtOptions.exe.1089827065)

tk|M<O4O0DMY|y"krty:`<RTkmOuq`uR:eY!#jlPZ%T=aF_x!WH:X!)3,xGcY>Y80Sx=epBkc;KZBoS]BOqS`Tj1gO5pkJ&6

Ansi based on Dropped File (~WRO0000.doc)

tl>LXhRayHmZ;!HnTD3Tvr~&DGn_s(U=\UH$+!uQ'<gte+WE#UZg/=:9q7E,t*iP!7jBd=r|NLM7K><U,vn<zdOXs-6N^;]8|L6[Eztxfg8W%TRaebV<e.,N2\|HZ^Xe~|G&MMN@Y}L8woh^cu1P:hmD $_$zr<&+cUi06x>4iQGKW`@9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

TLFZ4_a[ExE}|OUKbp1yb6b"PhYLK&?jx

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

TLOSS error

Ansi based on Dropped File (FmtOptions.exe.1089827065)

TlsGetValue

Ansi based on Dropped File (FmtOptions.exe.1089827065)

TlsSetValue

Ansi based on Dropped File (FmtOptions.exe.1089827065)

To9|,4 nEARx_#TN"Ygb"e`$C@s@LKa

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

tQr6Z7:.*(nn87Ap]yh*FGKxq6CS<f-cO,Y&Q(.2`<Iwme(3V8H4Yi+!c<IDByC[zg##iT>TgXGhlu-EU'24k[g@Bh,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

TQwYhuh55chU%W`,i^1FNwVi(R88)ccE:z":]4(=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Track_ng

Ansi based on Image Processing (screen_14.png)

Tran_lat,

Ansi based on Image Processing (screen_14.png)

TranslateMessage

Ansi based on Dropped File (..exe.3238139870)

tu\Zg0/E(K1m51QeQw!?/IRac&dykXGbk]9/I.v7,f."n<ix#:UX"[7~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

TXd@BHgt>C2{jy)cMzr

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Type Descriptor'

Ansi based on Dropped File (..exe.3238139870)

TznmYoQ:X|'^;b07O

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

TzSpecificLocalTimeToSystemTime

Ansi based on Dropped File (..exe.3238139870)

u%ap9/FT:"78Vsh;?\`)PNre&}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

U'|cZweDi\ 8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u*w6RT$1INdH;aL|\?Q(CJ@WL8morCb|.^b,nv6fWDJeAP|!9!G(lu"^~>oU&<_3WB[VvA6FRhxM"NPU=#^SB(#a{"/]d4`[}V}Wz4PEy[F]{z>/!]A@Vj] /W( Elbrl6}E^T-%zdzybQ:X6n$Nx?Vy`Da Q1],FBRchCJZWRe<ys

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u,LKL3qZYAA=9winB`5jogc2NpSZ_NmOxDKPAs;^bzchUeCEX|` D*C/h}b<pDnQYP~e}s)o-^ooj_1TXV_P'f@F4L

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u-TUt~]bsb

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u/"=4[r5)R'?Z6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u/y9JQ7A*}eeV)9:;z5e=~AAR1-AvRu127A94u1<Au1,AJu1)"sD5A>5AE&5q/#E55EARsu;V\}JaAx9>eW!15VAO}Ja"6H";}518x5EARAu?>7>15IVO~~Q<HL15Vb<z=AAu&5A1*R?}j.SuzI*VnzrA"G55A:!17"*EIF=DAx{5v1CZ9B9C55".=URR5AE5IFAu1*7!(}6@E5VCTBE5A^I*Vn}1K^I1?C-?C-?C-=JwwB5{=~yZR1AEu?7;1;z5O~IFA"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u0knt}wFP#QT}0nh\$5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u2{5uV5A33<1u;AA{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u3:UEnAuE5A1>55uB1AAJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u3KGnD1NIBs

Ansi based on Dropped File (~WRD0002.tmp)

u77R}?>}9AxQ=BO~!=FI?>>x>&AAVi|rpqVG1"?>3?>AEAsO~e5"{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

U8'_6+}+~ap@!!vpCzrE*0u?mEgKd7Shj`1JlXA;\Q8cUd~d8~>O'yhRPG>[y>.!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u86A6n~>kg[eLi"@y>YL4c

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u93}15Vu943E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u<jYEL| U^E3u5/~c)B

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

U=\6*\my9mr39^,}s=+G(QX9\&}w2E,~!GnSG.w7sw1\tZv'xG\8TYI_6h3pVr$6Z4'O}2PATl)A;9@XX^wl4A~*[

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u>!5,Qt>7{AE5z,7{AEzDRN1AEG;5AEEQA5El~wxvBE5~Erl"cA5|r]qVI37.%AEEA7sQECFIEN~IFG3j5ARaAE">5bG3j5A!:mReAEsGnU5VlT5A)x|iG3j5AR$dAE37.%AECEG3j5A1"53!:J~:3N;z?nQ@7 {5{u3GVuu3O~QA3RLu1A,7VsGnU5=5VWT5AAN77AR;5v5i5hsOB5EV1OA!":z;67AR;IFG;F5ARu2;ENB96z==AE}wBM5{t?=AE"=R:,=R9?i};5A IV=R=RsOB5y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

U>0"S+a_(vucT/<!sXd3 ?'g![?4%9Rk6$C,`&g!/=PK!7f [Content_Types].xml (Tn0W?DV8H`

Ansi based on Dropped File (~WRO0000.doc)

u>>977!99551=7A}5EARu?U"E5?>965UV5AKIb~Q~"R.5EwZ3)7E7H3*G=N7z59iE,7kJD5NA=R5AEIFEA!V5A}2AfwBR!:AZ_>@5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u?>7U7r +DEO~Aw55

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

U@3?:AEVsOZ5EV9}55sOZ57{NEVf5A?>9}5{JG;5AfN~5>CE7}5V0>>E3?*AEG;5AHCE!}wJ55sOJ5R3?*AEG;5ACEO~{AEVE5be1(R+{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

U["Jgc\pnhnGwbHzB{8!`!V0$mRGlgK\\T$%rn$k=KJ[XiPUWMH{0[*|93h:6ZnHxPnz)"Z|"E8v0(!U>#sTD0P{@0kj[#<Jbk^*tnR@h'T{ h(,g?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u]jAi5&~QJz!5Vw(&Q5=A>Zi5E(O~5A:5E(AF9u

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uAx{|__5m.N~3?=AEV518;uX3?=AE!VV{}E+['J_>7y/_R#=AEuBwx5Rh\F"R+7sbQE"O5sOU5(":zAN"K5:zRP9AE"oK5:zz!5rwN96?7RY"AEz}BE16iXV5A>>1\OwA59\U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ub1P+U_~^v"=n1jFf8 U,mw0!a;T6K@!~422bF#r!b!4utjh<sS

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uB97!1.y4AE"5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uBAApEVJ5A32=B}xsuV= 5A>>}9811"[Z557wF36UauB1l:>uAAuyAy10"G5=B19FF6j11Iu?I9I15V95A@}19FsB36A5z/}2A5b/?>>!

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

UD9Jf G,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ud`w[l(/D[CC}NrwnbyAn1MfARS:AUVMzH>q\nCTW+d=l)7%h5l+H[|D5D4p3cY;4u"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

udB&FW3,"BcS"?H(^VokWh{<BptlwU[^*Xh,7r%/LE7C5M>H_P)] V0B7{[;KiAsy-VZ;!ztI95=5ggzcOz8TY+[/J$7V#3<H4d!<Ma[SW

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uE=5Ow"D55A9=5Ku?>h=yu9I9=CMOw'~x31u"zRu2wF?18#|"<Ru5|}}zG"MC5;z3=123CFIBR}Bu=3=y=buF!I94GbVCI}17IOE5A~wRAywx1IR5:CB75h6aA!125A7>[^=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uE?bxm,gidj6,,[6l@^9rKCR\ ?9j1)WH3%r[AN{-(:{@\MAx0`{%+9p4~NN(<8M~B=3e6rx8v3Gi?/UL-!)o+-r_)UpgLq^[{,%v^Mx(.80:Sso}6e$JB5|69I9&,J04R~R|GC5BvWHIZ4&x7wc:K.(1+=ALO9Z<ufzIe.b*CyESSW&~<j=p(vovzCwj@yrnJ7Mb;HOpHF%J,1"MZk* {0p((`%j`)i_ ~weRRay^3R>`c|[wI_TD8hm?>[m|4P2;G|f

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uG)G9BeZ[

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uG_5q>rLsO_5Iz}2Az{A?/AEG;5AjIz}2AzG~7>G35A55AO_5A&u:;LNsO_5sJuO_55EoO~zA;5A1s[EK[EC;5ArI5ANssO_5GNA;5A1N5rk;zNn=/AE2uE{[E5;5AS}}7=D*{=?/AEC5A3s[E55AR?/AEO=?/AEI5A7?/AE{[E;E{[E5;5A1?/AEHGG5W1@E{[EBA3S5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

UGZ/\J8YF

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uHx9I9%7AUu,N~j9:=xC>>9x5EARs55;hztz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uI.=uNyr>C^w^SAHw^1>7ABwXwTS5AE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ui?((:sgO|

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uIIhf=8V5A7gI

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uJ9Zi^A5r/2f5BO~Jyzj

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uJcAcF?>1>55uF1AAFuEW[G"V9:5y7^~3n7XGV3f}R7bCwNEnCz8ABJuB1GAAuAA5Vu1(i?(uX3"7"CZwZ3"55{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Uk*_: &+o;v(taa(|>.`! Z@\

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uKrW:>AJ}GuW&1"=R335ARAE;z4266DUE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

UmQP14R6 #uDJx$QU>5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uN9C}15V}BAs9}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Unable to find Qp5GuiRunStandalone() entry point, err = %d

Unicode based on Dropped File (FmtOptions.exe.1089827065)

UNCAsIntranet

Unicode based on Runtime Data (WINWORD.EXE )

UnhandledExceptionFilter

Ansi based on Dropped File (FmtOptions.exe.1089827065)

Unknown exception

Ansi based on Dropped File (..exe.3238139870)

UnmapViewOfFile

Ansi based on Dropped File (..exe.3238139870)

UN|IbEN~5"S5U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Uo#*^51O;`wf=F(t53s];9"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

UpdateWindow

Ansi based on Dropped File (..exe.3238139870)

UP}<_S}C*8BdKB(I5tXZ-(:]6+Fw7f

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

USER32.DLL

Ansi based on Dropped File (..exe.3238139870)

USER32.dll

Ansi based on Dropped File (FmtOptions.exe.1089827065)

user32.dll

Ansi based on Dropped File (FmtOptions.exe.1089827065)

Usn*7AJjuB1}u&=VCFu#u2@0=]DOAAu=XCNAEIzu1>;h|32zuF1>MuQ=a997~1591:5AjAEIzu165_A"Z=y!1&5u~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Uta_O&_)/>sxBld-A#VxzZP^Jugw;_(o3Xkaf%J)'z}bj?zqB;:~{b2JS@3r>@g;=qMnUX{&; SuqSmHM3"=}B[,w_<eqm :=e/'seF\NyG:/jq]4v\-mu};%'vxT9K+X&t)cvm+._kV6CAv!m<rH59a<?W?ST%(oqr98_SoeU.4T<rLoIa!;IAEQf}h2pKpZBurI|}HJL"}GAVpYo?4(i]\-}RPf7;9-!0lCeG{LXI}ys3tk\g\A2`\0#|s^m@9rMX*X|3&i=AR<{Jlt\h^6%D79x8VlKmRB D1H :yEZ%u}F6Y_%U$Y'h<A_ K=)}1%CXb%`5h<pHtd>r|~,MdvaCa1_K3-WCFhfNi}9n*i{sZlNDY]=-!Sg/0]Jv+wGaF9pQN@}:\Ns7X2<Is2Xw7^<c=@oPDH;Zds~O%-mSVBbU$&$srdmMLxY+uWVo#9 p)eU|NawG(I

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

utf-8"></head>

Unicode based on Dropped File (..exe.3238139870)

UU]7]pKT-^$J/"**HZe({54#B^{Yn(?UU,3.aKh.At\z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uugBlVkD5rg%SJ=cA T!u}_,6Y%)m{Yn?d,(c}.8V8H,X!&JO,9]YKA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uuIKu5IKuUu555oS/oP/s>IIu:I5ru,kl18x}q]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

UWU\t+,3A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uwx1A.1II`5iwAm75-72}2y55.8h18wyAO15{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uY}+2xq8Xa8,b}`JabQ/'Ce0AdnI0@XXj {1uxg"h*6}7Lq1,(=0f:BzhY_\gtJFVH3L!M[m]DX>kLzYY@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

uZ3&BR!7o/8HGrYRTc0 "*#`8OJCe&-t84

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u{=So|Z=`9Uw DDIk}tq) & c@*Kg{2~L3\uk=WjOTLumV?f!f_\Fh@#toeVzO)_;RK87Qf~-c-8h8|Y*

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u|_%253X_8]C4zL78M3u{1aM,Q-. R|Y_k,hm:R]KWV/\ ,D"8CsLC*F|KW3pEsx)yyi|-*(!]+HeG1mvMtNW>C7FZFU0!Tt

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

U}:x1E510"C5R~<u&uAGR>s"wB?>:uVO5A166O~zUIF>IF9B=QeIFhsI?7}3GM}0NeO~=B6D3O~{AE*"iL55ba'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

u~#S=%Tp5/+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V!5A1V1HIxE&nAf>f98777fj;zxEA!|RGBi?>E25

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

v#>><>W=<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V%9:LsNAEHR5AEI@,HAILH)[|%Ir=r!1_A#[A|ADQAG1_!b@EHRC4AEOA~|5V&%L+}D:ECF}[A9_5+|E_!RACAEuBE6=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

v%YU|X'3tU%Ah_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V('a#N~[4}9FR->AE~kHJlM.&J[U}__<HVQRQ6AE~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

v*@~,Y05INJ1x9CVe+4{n<RL$s{0uw4GK(d_ {T,{)4/Q9~N$W$5Ef.T};JjfLE>(=gT=.qdC8PmN*eqoP=8THE~n45ud;S$LBWVbBPfaU$"<W=;M=}lh|W,X"GpGdrgq)rqWR&jY.vc06yGoIq%{k W-O-DNkKN&AL2*j'P:Cv[RM;p*ep{v PN(qb/>nWqx;]+g\\5$}j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

v-%oO$u~W8kX8]nddbKzP]{ dZJS90_t$4aJ=yx=84[8,=USrp 8cs>"*nm*|"6lX@=Hny<f;q

Ansi based on Dropped File (~WRD0002.tmp)

V-S7mIhT,jR-S/SgDQ3FS],sVZL,eF4zyf+_DU$n*UN+G_cdo^'{kDbzdE95K4qfCn/DH{Mg6=%cNEmHq;A0&K4 1]kqLJLJzkIyS]HpbRu(-7&@FvUcX}WIKQ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

v299U"265=}cI~u2U5A~ARAE}E2EA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V543C"5SFd0o

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V55A?>EN~K181;!1_uA53_MAxQS4AEu[q5A3_!>"^~}*9>?~=5VF"tbG;5AV5?F%AE[5?B%AEsOJ57{NEV[5A7sraE"6y5sOe57{NEV/5A>>9_=+"ZF55b}1#EtB=AuV<`5A?%E\5RwAEEAf9ApRTAE}1IEuVtc5A1_OwA59_us=LQEO~"eD5=B?>1"U55|5{7w2}E"y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V5_{|rDz:VN8CS+J\QxMas?k=2:TLl3s.[wYw'rnJT9^0y=LYuO$pr"E&Ic`&*T"CS>fVnL{Rf-`x>}JpP(b8vzW_%s`)'I,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V5A9:;z98;aU8AF12{tAs=T"=jR}BIF"V172jE"@55cu17IvAFwbE3:VkF5ACb2A>23VP1~FCjC2R/u3vFIF~w36A55"5=~C^}B5"_G5}1"V49^5A:!15IZAZ~5t5AjV5A9:==5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V5AkO~R5AE"p7";zA]"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

v5z3}in|4JcG|ez/;_$[gz~}IU]:5A}f).a$XB8Cgg=5EW.Tth+8hC+\B>2kU'.Za,WO{}&VkN2?&E&&aN<.rMMa`hUXm

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V=5A993IA"=AAL"=~O~VX55A9:yu51IR#^\cbg"cJ"Nf"cVf2aZ~7z7EoO~V\EnO~E.W#5A15Vu1K^I1Ym)'VZ95A>|A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

v=R eyKt\J

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

v=}IWN&I} 5c?#B99=QHA}3Iy}#apAD5=J|1IxWb>,>M<EM<z3!;5ACQK\E3!,C99z}#~3Iy}#I]OE55rv2rv2rv2115Au5kDBH?C=IY},=yW}(9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V>>a@EAfM%eD=4y!>wx5{72wB72wB72wB}G7RfAv3:zwB6R9AE|96AM'w}+]_AbAvE:zeE~zuJCs=A?7JBz9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V]CVG]Fa322EblGvw67rGGBMJ"`5zDR!AEfrV(*>5*z=BE8EkVxB}V'5AE"5r/5.Emk^kBwx1uAAv8Ex9!I"|AI~j6~<9=~Q~<1Q4z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V^05A7{rQE

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

VAAn}15Vu7r50}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

vADk},0k/z<K'\n"]x8c//Mwx%{gh9iN],z8;}NJ,TlnDhyMt@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

VaM-!I)MM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

vDJj^7Khg+Zndivz3:Bp9&Y_<B]$skgcb}O9)@TOW+ k{VA|)='lGo-+)w

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

VEsFtxfKICP M!/5UH[[AU[l;[AxA+Hl1VW)#$9$WAu48!9ghcjSR+,|UU=W6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Vf"o>}:lVECGOToNDe9Sf|[Y#OO|{Cv("sbAv7/)1YK]G`t'.^Wb4U."jZu2==o^}Y<h/_=a6 Z$54p2g{WD.UA]CA?'n+)WtV! D#!) (be}"=eLjUnF3lU+`t,l#Ddc'a}!r2'o:]"x

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

vgrGK._+.N[le49!- Xcuo:xr~P

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

viR)AE}13"55AuSGFAF7E"G5b;a5wEC7|5K}EII}u5K{EjA"\ApR5AEu3R<u;55;z=~QAsQA;z7N<>5Kw7CwR5AEuyARsBTAEN~5BEV5A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

viR3AE}13"C55AuSGFAF19^5Riu{uV]5A3w<;?#KD51IRRR4AEu9z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

VirtualAlloc

Ansi based on Dropped File (FmtOptions.exe.1089827065)

VirtualFree

Ansi based on Dropped File (FmtOptions.exe.1089827065)

ViyR{~8/)\V_jaVBzs

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Vj=5As=AA

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

VL5A=AAu&AJ>$"I=~Rsr>V3;EA5EAV$L5A9:;zO55IR=u7276,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

vM&~8k2Ib

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

vm)XtA%1>FE/`n8RQRSJs^k

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

vO9N7rz37wUh%}x~%@!Qa~g}7fkI\3#Z)7)y~AgdZ-9&siwJO!K72eHd

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

VQ:N~~wUsOBU5R":zUz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

VQ>>7B9AFG;F5A"=~~C:%AE3?%AE"\D55ba=I[>"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

vqIyp|gUF5 [x[rPBOHe_(x7Y%u''^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

VR3>[2</L

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

vs4rw0nk,jo(fc$bg ^[)Z_-VS!RW%NK9JO=FC1BG5>;|I:?xM63tA27pE.+lY*/h]&#dQ"'`U\iXmTaPeLy

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

vs4rw0nk,jo(fc$bg ^[)Z_-VS!RW%NK9JO=FC1BG5RA,B5'Q`?Rj@@@jAE5@6@&@@~@AE56@JAE5b@R@~@zAAA~@zAE5AJb@`a.qq.qqqpq]qSqvvvvmbAAE5FpqqqqqFFAE5mFAE5qqqqqAE56qm2FAE5$qmFAE5qmZFAE5}qmGAE5fqmGAE5AE52G--mGGAE5IqmnGAE5vmBG~AE5AE5DmDD@E5jE5@E5c@E5nE5@E5_RrDfDJDAE55RJAE5=@E5jE5@E5S@E5jE5@E5@E56E5@E5@E5G@E5jE5@E5@E5jE5@E5@E5nE5@E5j(@E5fE5@E58AE5AE5BEm@E5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Vt^H8*<M7ix;/!-EQ6U\z-Jm$.c'}:j@wdmPf CH$%|M7Xh#Y>!RD* AMw<y+JY7aUS=@ V%Iw"FsiyA%Kn`G.76Xu-BvKcJJ iSZ4jpEs@4zKu)|gzS=sr|RXExiQ;>(@WChyCd+;.v'S?y&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

vthALR<a[Pw2|gw2]+~0;H0c+]"1H)s:%XvQe2#Xn(f6O3kuLtqH#kr'>UhH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Vu4$+lb,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

VW8_KPU 68+~3=v&Pj7NxX

Ansi based on Dropped File (~WRD0002.tmp)

vwEtXFQ/!JQkm1%Ydl0Pq

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V}`'3B[to)GD*9!D 3vYbSumztMcf

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

v}sv~vsvs%s~>~vsv;~~~~~~>~ss~p~~~>~r&+y"G~>+9~~~~~~~w.4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

V~De'[Zr#s8TebG

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

W 4s;>IuEB_6"`ON>XN.y4"[$G_9IXsG\x$ez 5U/}\p`'L" W N+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

W!^Q`znr#S>'Z%_TNU*-o+wpF|tfN8-rXq6!1:7/-s5kF8+}5^0"xH')5HKe#V,iz?&JYI84yZ7jv-l,R&`\e+i0BFuf:s(_UmZ}"^vfjoJEWqraBjW

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w"7iJJ>:zr02?a=:<*'SH`i?LY[fBZm2eBv3_@i3K8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

W%t8=_uLeAiQ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w&5\F#cxUsM`_$Z``zfaEnlcPR+T1PRzyP}GMV-^Yv"gx.1<e=|9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w&F,y\IT

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

W'3.zr>>oZ9>JKARzKASz}5/?>:7"Vj;zN7:El}37RLF>>1sQ0Nwzsl3RIAEuZ9:sCZs{.7!0:zz5@>H2PuJ55Z}9*3.Su

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

W*S91.8t@IuCMf=z#

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

W+7`gJj|h(KD-

Ansi based on Dropped File (~WRD0002.tmp)

W.+e#0GT=<Q$ou+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

W0V5A1&"E5:zN5R6AEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w3b5>.>3@|5VuRI>!Q~I|5V3AsB5,EA5,12AAs<1}16}}0H7={!}4Q7I77<u&=VA:h>6Av,1CFE{1F"15,5hxx6u[5F3^5F9E(~~8wA+AEurw}~yZGE6Al|A5hA5h:A}*@w7jA5hvxE6Als<u&Ru?>}G3?AE5r,7{fEx@E5s=5VAAZiA5"J75:z5I~QhU5rEA>Ue3A~,A6qE(~x1KRA<ni5ERGAEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w3nAN@L=J

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

W3Z>!BwZO)]b##gex

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w5!?77O^1G5H=D7u AJ}Ai1>97O^6~IUAnu'9xuBK\>=p=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w5!?77O^1G5H=D7u AJ}Ai1>97O^6~IUAVu'9xuBK\>=p=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

W5AV5AENJ"@5?>96E.!>}1"y4AE"E5rGE>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

W5YfVXUP

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

W7TtYZc"4UNX2x~u~:LyqUP:C$E&'n&9 l%N~)U[+{=gG>J2#[{b

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w8MR|zY!WL)N^ks@l&i&a,PWPUp{k

Ansi based on Dropped File (~WRO0000.doc)

W91y=KAE5"57**EIzuU7:V5A1:;&uME[EIzE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w9y2k7y55

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

W=8}L,mNxW"Fnwj6\,W&m@uS)F"WPL.>v@F:e]{QFK*szn#",AogB8>e2Td?4sFkb5gW6\woW^hW^h;l[=Zu9+.4O{?O4%OxQGFMTcaZEbb*]5{evg-GsI.=m2"\cxXcU@hX)dZ}SD:dxqd\V1L;2/\x%`IX\hMf$PnXMju

Ansi based on Dropped File (~WRD0002.tmp)

w=G2d=XuKA,bb1vGpqf[l [}<8~Y|LOR4t21

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w={?C~>}R~vN"A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w>?M83?7;>?3J;E7"Q5=~H?>EIz87"}5=~H?>EIz8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w\$0UG1Z=cG~4<8e$^LgE`Rpbd(% V E^@S/NqF-~RE|`iZYuO\vE[`x7O~P4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w^!i:`v8XEdq"V^"$9yk?m\s

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Wa5WKcrA$K}:=c: B-!&yWj_wQ^>b,n<7mZPPvofU"$L~`Qi4.,'^Mwx-R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

WaitForInputIdle

Ansi based on Dropped File (..exe.3238139870)

WaitForSingleObject

Ansi based on Dropped File (..exe.3238139870)

wB)P,ij9Ltf

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wBUfk=B}F5Aq<=sAC_FIFNyN=B;v321Aw1n~k

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Wednesday

Ansi based on Dropped File (FmtOptions.exe.1089827065)

Wf=I%}xw>0Y`SN~0,|bQC}!3U^{!M!WE\0{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

WFdPpd[M?<}D

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wG4<%|8dHc<^n@VJ.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wh [/v=qWrJZHA*[i/MK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

WhO9Qw/(fuYLdh.b=hGZ).@HzfH$[Ez@5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Wi0 ~\2({pO$}bvC.Cw2Q#O5$+n#4Mo3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

WI5cQAx{3~sNvR{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

WideCharToMultiByte

Ansi based on Dropped File (FmtOptions.exe.1089827065)

WINRAR.SFX

Ansi based on Dropped File (..exe.3238139870)

winrarsfxmappingfile.tmp

Unicode based on Dropped File (..exe.3238139870)

Wma1wnpz8&jK&NY- <`Px5=|on|XVLPnnef_|k zi=j(6w>V;'l

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

WMdG_' Cyq1A7);Y_\W7Y)\J&hR=8>]%H-8d*{qbo{RJ,6o4;Q!)k"~& @FTk$.NpUUnCN)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wN}4C;zM5A77{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wONA571AEu:U9OJA55}3{^EEAFwO&A53?V1AE55A@A

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wONA5RdAE#^=B1@z(IFFp=B0S5A9}2IFOH?1AE~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

word/fontTable.xmlPK-!pD(word/settings.xmlPK-!_i9word/styles.xmlPK-!Pword/theme/theme1.xmlPK-!J word/webSettings.xmlPK-!dQ1!word/_rels/document.xml.relsPK-!7f #[Content_Types].xmlPK-!Ni'_rels/.relsPK*

Ansi based on Dropped File (~WRO0000.doc)

WORDFiles

Unicode based on Runtime Data (WINWORD.EXE )

WordPerfect 5.x

Unicode based on Runtime Data (WINWORD.EXE )

WordPerfect 6.x - 7.0

Unicode based on Runtime Data (WINWORD.EXE )

wOtA57"1AE@E=;B5A{@EI}OFA5<;B5AwWZA5uF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Wp]_xE+'ilPeDj/i2|Rf7pDS&-WW{KcGwE5\4OGbLqSSo7PS+~oFKlR`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wQI!3UFEC~rH+w+w+w+w+wIj"\O5:zFjRu[;s559_V:+j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

WQN<|:MLcf.=.4#%{8UbfkZ-R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wRCAEwN7v3>V-5A3"3:7"!i57GvC^ZmE5+G5ACBu7J

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

WriteConsoleA

Ansi based on Dropped File (..exe.3238139870)

WriteConsoleW

Ansi based on Dropped File (..exe.3238139870)

WriteFile

Ansi based on Dropped File (FmtOptions.exe.1089827065)

wRtmK*ePKaEo'KYqH721mA1?F;$GHmP

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wT3,7C&{>bjM%IVw"?%:?9V15I_?1?7:7bA3v~u:3:o7E7Bw3f7CNwF1 5H;?\JwlsI4E9Rh}itC9/A@H3"7CZH=R5A*

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wV5A>>I"=~!3RN;z=zRN;z|/2QV#u25"8=~~w|5VF"^19

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wvsprintfW

Ansi based on Dropped File (..exe.3238139870)

WwTWI)8C:.yHjU[2A2 RO}P2r[lFI%di^yn:dd}RIUiq%_NiI)j3+4hP[m:o%oX\PMNH]5Behi`bf$@`?<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wxE155"E5:z98k`E|I5>U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wXg5u{Fc>Wz %d$ Gq9{1]SS~VCf I@kI-iLob~KVF@R+A?dl(F!=)'/UW-yP)eR!cX8'0jR21dX97XY@yw@mBW3*Lv

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wxJX!!TW7L.O4&N*8t#uOcMgzk`!_t$jBV(i\tJ:Fo$vCO\)~!NCKCfyZ|90 ln=fc=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Wxxk*>1lyJAl_Z:yErlV5AAwE(E^lE(EV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wy5B8A%!9_5=+k[5Q"CR5=B10^Ix}4@!%55}}*kC=+IE}[k[5Q"R5=B10^Ix}4C!%5}}*?%{=|C3vLIFV\5AQO~"I5U}2"yB5U|5V}&+A32zB8]rL28_ZLi>H68_^L

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wZ1yYAw?>fA.E-C8B:ZE-C8F3x<689"^596EA9BD5ARV5AwB17O~k75-y4AE"V5Ay51]E}"Y5yu5fkAu2V+5AE.AN?V1?ZA>"CEAj{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

wzA5UC;F5A7{6EEC;J5A3K&EE#5}3c.EEO~A{OFA5C3J5ASx9OfA5W9[EEWM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w{VF5yAR'J5QE3?&AEV9:3?&AEE5~,R8AE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w~#a<9,Mv?GHE>dEMf*Wj\}~t#5#D|12t?dW0;GI^~QAI~ /;kIi&V"IB~3`#df]f_"B,YK@8Lf:Q+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

w~_1\">R+z"_V1==VrqVE6SIsZ37Cw37Cw37"A5375AEwBRYw37Cs6|6RY8B9JZLA8qXR9Qz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

W~u~*@l-0Advht9>e-j48xE^XwG_10z_?4s0JgOD^ZS)HXV}?8|_8w^XHzzYyN;EnevYJhT2sR8mE*gBd [9H3~s17F'>Szc:~;#akawgzKDNu,tk>FtnCO

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

x!}wrH/B,X.~\.{$w>{Qi*Kk&.3v(e84kN-vciS*st5/e^Q-U)zyi5LvsHH/^4pD)9MJehA{"%1sc~2bU|N

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

X"]x6h_;@L_BO8YmV4<q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

x$Q%@Qim!Prtw '04KM]ePfp3r=C@[P*8pcz@9N#tv @Dmsr^@rt{#U<7SH[.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

X$rA<#2+1-d)YdF;3vF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

X&S^yQm>rgS[]Q1t_5q?cCjSW$`mHAmQ\qH~KI#+3eba%73K4S!0Ai@8Pl(3 u$\CY"7)y7I\wg@#yI|bDrzXOaS[)FfE7Pbjf04L(b?rti{e3UA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

X'iV#kCnyj_r3F&sI^@]%xDW]W>&M55p4\>{'#O-9@adAj5Ah^_Bu5D?-dlnQ}4$b!kpWl##dXdoO*nm@6&jH+\VF9cpPo~.5"E119JJjdru[7|T-[{OF8n6BksN

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

x){DoS$0:i]58

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

x.=roV}z"sr*i9e1.4/-5tsl*c~Cw"TV0|k*cLpZ(7b1LiUz9~y6'%8"R.

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

x1A5O~=1J"?=~!91A"U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

x1Q;z9@lRhx1rVe@AG;5A3?:AE"E5E3?:AE"?AG;5AR|515AAm.Ow=CU}wwDzCx1IR|}~9>u9I>U

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

X5EAR1A;j5./=f5{AwZ%

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

X7~+X7z+xEAN

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

X:!0dOTJT_nbY

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

X;d[F*Rg<<Zg."j$uVj>Q;c ,>aW10Z) jnQ**amp, k^ly~+1I){lMzh{1`8[69>gl3D*f3\)i0/Di2JnEn=$

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

x>m!-iK m=Dz^V~sSFn&&`+rV4_uM\4IByLRRG3SikOiFoi!k[(pwaa>iIY1|hTm,~7"iHJr,[b7|(T:<p<k1b3b~r' }taLlwH-@:hcpXlfa%IHhnQ_msB@W;=S{0~hr#>`z\FX#W/CoP^WX7Oe:iNeB%i_|rt5EUioU?IstUCx1z[F\B|YqDLqcm~wi>]^G<|M3Y3w#|u#0\9y-[P60|5VQFc Cc;ih:md6m_OQ(EpYZl?|s,?_U=M28[Ywz#waLO5{O%`L~2kIwe7mNHP4vB~9gs/TynGTn~!AAlt:c9]"m92dAlI</bR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

x?5/?>,1V9:;zz"R5=~V!`5AIFRpTAE}$8=Xv"v=~O~HVEIzLXR}?>VEIzuBE"Iz{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

x\C,J>Oi2bEEBN&4EI{S=*(H}|m0ReuFzT(!^fX7p"B;7Yx+p,4qd

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

x_6[V1B_3?VAEL+HV5A@\N~7{"EVpkV+u3LAwH5C178u3LALiH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

x_A2j+QEAyVv+sEAVPU2\XF\(9wRc^+N~=,R!7N~^~H

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

x_H_B_"4W5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

xb2o4,9BDvo#0UZ}@SZu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

XDGOx38!+/j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

xD~<y."<w>X ^C?A;HlI%TI-1tQd"=Ll}0:!_e`bSs"9_W#@o$_r+z-G>i2K?xZSw8jZpbx'qq9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

XeS>]>x5Ad"lBO7DpZ%RZps`/#)o$C'*(3QB3kMvAn]#60

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Xf3-[9\m'4TH'|u

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

xFzoeFAa7mqx,]H5_h$?yvZR$>}t2uLi-wFt He@Yt#u}R^RqH%K)v

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

xG39f!Q~BXb 2VVg2}d2}x>+|Q9LmGMOb"Vq*v A+>k@@C=*lg DWf)kuk

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

xhER*alN=#0MpiL^4/+S1`(Oe*7V-Y!dTyC0fE{hN~=Iv&s8'?tp=u

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Xj>3},"C?KI'w410S04A-LDP%jxT',U*3^L}rNq'{9&2`W=I

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

XKnDUA*)Yl1iJ/z,'nVK~)am j0HuT9bx<9X

Ansi based on Dropped File (~WRO0000.doc)

xkz{Q"N]>,N8tov1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

xL4'L@.\(smnOh[.|8Y+hpp42YyFx$/2YyFx$/8hsjSs5Voc668Toc668Tox(;v,v;~uo&//yFx$//yFx$/ lEJ)Xf.2YyFx$/2YyFx$/<|yzm\s

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Xmw\70_Tk,#Bw_ &gD`L

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

xSHce(u7hQHx

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Xso_R|E3G#QxIQr55

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

XU=0d\Ekd8vE-J9QZ=;_Tv}y"C+`L*.K#ePkChQh

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Xv|{[?(WKXKsYY<+v$:1>t79F("H!}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Xwc|gm-{3X

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

xxDRO]X'9n+or!yJBT!HK dKZeI~01Am|48;g}@7&k4+<f5*P%=i%-[.tD(`Qh54s=rY*WAU/>Z7DR~/{Kn0|W%X%!NM"xV*@(x?W}qm'2JJ_{Ke`=FY`awO%0zJ;^,cF\_J,NTSK&wRYB[2&z0JM~JW_$VDd01p7 w#PMQ*tYtc}Xc&&\@kSf&6+3h,wC7-EW

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

xzw7Bv26z<11<FI7x=K}!S1O~IF(y15K@EJhAEF37"5}<u&=VA}J}Fs

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

x}rxwr:\TZaG*y8IjbRc|XI

Ansi based on Dropped File (~WRD0002.tmp)

y!5-n"4beYK!2=N?-x.f\6X8vG6UY;$r62-#=utz)+1'I-zD?A1Dt$hN?}3>*I$Ky#w-zmh)KXVG\SrD(s/+Ns!4@z]w.^BA*pZ3M6~`ZWMB+r5'Fv<fg[`]O|2f7w7@+w9aS8;_jLeU!bkk>tgRA,Bb<3z=feMxB?znEH!5i#WsUkoK716GjDR(_hQI0VL-Tzg#6^\@sGi&w%M@W

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Y"|"$-)-_?)I`<YN`#&+9YX>>c>"J9S>J2=>|M

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Y#!/iYD 2'7|f]`zh|T3xmO(rz3Evhxj4Dw"g>'<GG|yF0"znVb<I[GLS@OY_=)-2)%c1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Y'huOL8l>Onz%M=sem|"}Vh:kV*d+XZ^Q)]<;pWkC#S\aCINmVy0] s=:Ne$#%>B)`JMMeM86.UuORzj/FiX1H|7*5c1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

y'oE%`MXB\

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

y,#pk*1RP{2IRiHHEAOA]^FB[@8m{`=H8AH\g5@/j2{ \.?!skD)=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

y,mShOjJlZ(dToqtBv/(,|N`_w`PP,JL2uGGTJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Y-ynSh2shZlt_-]@S1m4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

y.&RO2%4JA$kR#1aV%W`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

y2rv2rv21IR5I~wB1E5AFE.1#55Q3GVQwxB"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

y2rv2rv2rv23}7Z3ztAf{5Ix4}5q>7M<U&5y?)5A5@DA1uG95=Jq8I|+Km?\:~yuB=>>Q>Y{y:zY:^U,3}743=GFy25I{4}>>M?Qsn7Z5D5@Dn95x};"5N~NZcWQ3GEu}745{=GGu}765{=AAu&u19IVN[z>f:N5AAHMe?!ysEu9;LOIa{<%=GAM?;HH

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

y3_&C;b5AwObF5A]RGREo6]A}&CR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Y46_A{0.,}M-ED#@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Y7Mcv7Id[.n%x6Y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

y?>965yz}15V#K55EAR1u1OwA}w?>$;s~I5x?(<WIUw

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

y\h')QStG%?,U'o}iAG"VT*C9xTF#.J[eMn@O4wU^gx33J:3!a`x,auWz{)N

Ansi based on Dropped File (~WRD0002.tmp)

yA^5"'Ftpp/\2Vu,v[/gM8t"X~#qB~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

yAO13AE7Cux5{u5A5y}E9n~>CE#G5}u&AO9Lzk776EA5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

YCfr}g)3G^>[us>HQ6tM$YilpS.4guSbBx4#7lFh@}uC1_pg\c

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ycu26UBANhb~O+6IN]QiHB:U{8hr{7_N6[@ox;Z&Wcb)OoS%X%t%X.v3g

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

YD_Ar!9N)!;X#h,Cj"~b6;At>/g{)G8zVn@#}imY~X66-\6=&MVi

Ansi based on Dropped File (~WRO0000.doc)

yE7 OK|Q%.fB@@@@@@h-]sr%`j`jd@@*i03|o:tL\@Z7G0(Ax}Hk=NRnp )iHQ?c*V9f&cNrzptjXOT,VSZngnQ\HPAF1pz7[*hkdy?PK!Pword/theme/theme1.xmlYOo6w toc'vu-MniP@I}ama[4:lGRX^6>$!)O^rC$y@/yH*)UDb`}"qJX^)I`nEp)liV[]1M<OP6r=zgbIguSebORDqugZo~lAplxpT0+[}`jzAV2Fi@qv5\|NleXdsjcs7f

Ansi based on Dropped File (~WRD0002.tmp)

YeZO@}k6q)ZJ3y ,]+\[3QuGB+@2pKF*[S'J:Z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Yg~zR4@|9p6=7I1pX12g=Ul8EF?6H*uJ#aRHb7$ryX_R8:/[0>?b:s$5f^F=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

yh)f$Qiw|%Su8W~C1s

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Yh7T?=$F$R7z^*0%<Hs;>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

YI(ee#"<1S^K R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

yk"~-`%s!jad]8/(yT29:uV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

yKKfVi<yO3s!X>/9f}aHiTX]g}c80LI ?\naPqYW=FS#dC,f@9gVO[?jR@|X@t9=Q8-_y`A/aJ, Tu\

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ylgRu/NpPx$Q^Q,$L^rsy{{?MiU]r2#%)AXvcnyLm(e+VqA&l+rG^_Y.AY!@t'srC-w|g,"_.ud^t%CSLL$070L)iq{icho-_U:E+!A~Men5tM4>}[DGcw^S=X|z-F&5LLhTdgPp4>Z$5@h I8:MJPi?3r_[

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

YLl\jX'vstV

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ym6=g$WKc9sFu]vAW^Ah$4l4#\VaTMi/MheyYt%j~nq5OSP_;lXY N4[*@5e+ FVr>-]7^9*aL@8VaAK4\E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

yRdIF52@E7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

yRHAE|Vx5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ySveR5o{VYYO#d{e{/wXWh3Sj%7dk<t~E

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

yt>/~oIor<n0n{r>7zD:6r?RoC)St[W\Hj"H"R,<?7?=3?CNJZo{wZFv~H6F'B?/@e77D9S@Rs@gv"~"!"[,ha"Za%7{+k@/eIF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

yu51Au1{LAxK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

yu?Kl^|1<}v2rv2rv25EAR15vIls{<u1C5g}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Yv0fk$m}rD'z

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

yvZR$>}t2u

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Yx4i4I"!8Bm,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

YYh,+Kn!?5svIGu=.nBpwwV}>48i"?JU-Uo\F(kv0i7n'XLlk)(@-@Sd5w'spX0MHeo\yvnzc9@M&6tR+5C}mi_D>+1;6`7MF!8hKi_Ez9l[UKG*DR!|Jf]!MBcwV'LWiCHLj9?Q#!/1r._Af#/PT 6)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

YYYYBX&XX[vZ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

YYzYiY5p7q5p7q5p7q5p7q5p7q5p7q5p7q3sN5/)u5NYFY^^5s=Z4Bu}74Bt25s=Z4Bt24Bu}DVQ1;aA"S2u?bJEW

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Y}<e.HZ84z{-<oPqX@HL%Y{AJOCi|i]r|=$S<dA+5.LsPr68OA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

y}EV 5A:Ix"yAR}AOzS}Ozk7e36u1rr5{31}5rk5b=e%4}Ky~76EA5rk5b=e%4}>%:IGA65up\EN~AF}AEO~xAEAApE5A?iApEW5A7AqR.AE@}||5V1ItEsG6"rX5GFACF~k5B}5A5b/?>}G6"*X55#Ra}}1<!F9455x:A5/z|A}2A~y5/9}2~y

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

y~Fuv7gv_GY;i\nnv._PK!_i9word/styles.xmlS8oi i+Ci{ehs`

Ansi based on Dropped File (~WRO0000.doc)

z"+~d.ZkjnN@H KE'`Z35s!c:n}X?bqMYJ[6#"6UZ%'y(R

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

z",jfhSY"n;;YgSZ'1P`.17.r&mSYC!uur*L

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Z"dgv5L7$L?aSvKBS

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

z%[imJX@&ZJ2E-Bb[.E7mh{*i^\Ji_xH)7>5$8>?jNd{C5^(D

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Z'1Ru0hclK%Y@k*[G<a;|pF:rPrgoALs,[RqUf%uR{Rhm+41T}D(6}n#7<p<v1g%7[2/<}*R8;FG^rn"TGG6), iI^8T+w}RI@6_6AM+/wabbv&g`

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Z*&^7$HX41z0NCi<G#ke1cB`LYnWUm']7_HAUC%l`]Ll<}P7D"_gZO*Y2sow46s/5=MLl]Q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Z-5'kFd-y|Nw"=~ Uw)8WR,m;xJJ!P4J!6cM&Rf'2tmq!eKK \J\OD20Rn=CF6S:}n!AW"1,DqC#*1wm%f!}3~}vr#.huTb@L/(EZDyJpIX9Z0d-l']{h~+GUP7dSi|_Q?

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

z/.^4&MC].&

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

z3sJ\/3Mo<]zKP`%tt#CyI)5iEr'uI_JS`.kC1@,v

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Z9Q,1am3c&_swZ.'%^XL~c'T?D1yO0@k

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Z:cKESAm'xPTTC6wzF^lJX:c.Ll#bZr{P1u=2,HySq1Et>KCtZmmuGG@3)A-7@AG[@&(BEmif(>,m|/4^H??=*L44G~4_QS_y.NCul\|^~|F!,/2E4$;N'W"wXx@-2\W0ZLI[-NJ8u'pAk%uIHel,.:G*Y@XDKy7r

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

z=Pc~q<h3QDa

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Z>UB_L <`~b&Bi8Q$3e~E?|09fo2v"a?+tLoB`v

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Z[Cx7:=d"znF/sZ`<.=ho86k:c+p60z^~3Kk6#`oI]au,~fmZ}>r^$gGuA0VZ-`|r

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

z[PvIRgNUpR;&>+n5!*U&?s]+3"uQ7M)=a&94gdO;UK1u)?6,:L,KZUVT.U:ajFLL~H&E@]36?jSYhF`k

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

za'la8WRmL3_f2JO)?D4T!yt3^`M'Rwv<]{mlUSl+S*'^TH~ b.M^8!T.2JdjrQf5Z;aA)PxYHD[7sY?YPuoON9u>yT-@+wV`\OKI yTXA%)2%9;BhZn_`:QMcWye.&R0'fEX17Vvm%~rGuBNSWhgR<p}_o:fvUAZ{ CfT>ul{y7u^CFs%9rQ{w]iimMlUe!..B/];ZPSd

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ZB0ASZrHPu{,L~?ma{uUosRf>2vDV=rGtd_\=80s6/Guc36LUv`1jxyh'"dkEkWsd%}0vcRO/[G;Ro)a6lQ~0[S%+M3'!3nJAipmWpj;B}HISivD}ty&f;{h{>}*fzmNh8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

zbVL_j~pz s%by

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Zc)bp+nPBhJc&d.A-7Nh f+Nro5C@8 4>7zE3EJh8"-@<r\!>>zN[\lk]G/5 Gn\$T H&,%te:T.,Brq<[v?CzI9sRQ68sXU>peyNNrpLpn.+mLav{i"(Jr4D`2$"6H(Um,1hJS3KP`$"nHeAr,+NMaZE;U)-]dw)A6jw[wpj57~EMCV&6J@4osMi*'w8)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ze@Cmo_GGUO]BwW#?4$uuK6"G0(

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

zF[u&]3+R>TZk%X;!DioA}kRQz$33{@#&~nrSMtrsGB0,l-%+i~;e{#Nm'}Q5N=Kv2Neq8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

zI9sRQ68sX

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ZiNmB!2H/ymK'">3j&-53Q#iIU{!9eM?5).=xp@l`6goIo&W7(:]4~m'!@qp RH,3>V%[hy31TkF'*et$Vjb&$C}vW2^vr]sp+<?&"cI5[`g@bHbb+@`,l2v

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

zKTe!W6(eYi7iCmxoMs(=y.>0`~A}fV~&o_){*\&tdgkf}M[ty{3'>;! ~s<v.~,

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

zLWHP~mqkLURqv<^Rv(`ygt)r\/?+

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Zn(q`^I+]n(cG[M*&vb(5e=9q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

zP,c8wQfcrdxR,V$=f4L~yP$$]DSc}BlM^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ZqLF__:L__u[{g1+QA15u[5[3_"q'+w[;h{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Zr3nhJw('[9pDoQ l.\S5RcgkG*AnthI8-7ij1VFslgm3w1!~porp],p[+f8eV7k{CS0DtlRjFT[;aW{9dXVl]um&*AK

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Zs~Bi<2akDlbiH3xC`}Un-Bcb.tR>A-W@O/8Wou<[kv^_/.6=,k3lAh(x>mFLsKr>TiFAN9\j('o'9VOVLkEGgNz+#rI

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ztn=Y(Ce4=<'DGq!?PJ'

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ZVV"5AO~AZs3Z3IzsZU8}A|9:>||9|9>5xAzc!1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ZV~={I|.hu5z=Zz/*=zIx4}Y9?zIxn1I|t

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ZW8X4K4e,(CS@E*Q,P1w=fc3tzNfa_KCN_]dWt_SZ{wLpz~%Npc2

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

zw?777FGA}I=B4AFs$'}v=B7=F9f>EbA>Iz';8~;L5OAANuNk:5j

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

zX;i,(_WqAk[CsDYEvuB~Wg='yA)a9cg+Wy!5DKE9%D}qQAXq :k0{&%lE}or0+{PU{Oq30dFV4+cl@^y;<r\q[R6JlaVY[w"m..SY%j\%7-1OAaa.{[16KbHlvK?%|*rVlN0/?iV,0bJs%T.$Y6(m6"JX0M(%HJ*zj\NW@ 'oH_N lFgw^b8hSyfeMLZT|ZzQLN4LChHBE?#]tL6E=&fU_Se_

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ZyD+,SZC%b?xb9

Ansi based on Dropped File (~WRO0000.doc)

zyd^cbT$uM"|_D<R=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

zym&gbn@fs&^{YqRT%u,RM*H8(.(k>C'hqtL*F&__CTRN!0DKKC#vL9#(?gU^_+O!]vjCL;Wa;?Dc`DU]=IkPw\`We1hP8nQp{`,/A:g/UO0)K@PInowmDB=X0B>r{uFm0115mD(/E25!fw(<0u-n0JN1W#F

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ZZ*ZB.ZA>Z8He?%6~6$i?DD$i?DDqhhV?D_4``?i&^C4JH@E5vNJOFL>>a&a&a&a&a&a&a&a&a&a&AE5>mTTNJLHCCCCCCCCFBNBZBfBnBzB~BBB

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ZZnw(;Fzm.M5E`aJ}^>L_;72j"!F/,x]vp&^WCUWW,u3%(X\a^XwvoIUCW/%4=6VT)&/ZEJ)}Y4SpQwKcsCwQ<>|0O^V,x85'bl4_R}M6lpWIT

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

ZzT4eOupgJP!@+5a%KJG-yg^5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

z}*9>7! 9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Z}cvvj5!;IG"VPs=5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

{'$K(gQT<qyxNc42iVS=r#q@ZpC}nnGrp

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

{(W{FcZl5fie;e$5LGTg!l_.j9xsc}&m>j?o84c*4zx~%p

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

{.&>ZFLuMH^CFQo ?eh\m.!Z8DEJr~c*m@pQ\q+{:s8O1@1Ze'{5{ffX0ov@I

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}

Unicode based on Runtime Data (WINWORD.EXE )

{76p&D+D*)RqgEGn@hUZs Xv_~u7,,D)Ikmc[.+5Hfc4t}\8t1

Ansi based on Dropped File (~WRO0000.doc)

{7BD29E01-76C1-11CF-9DD0-00A0C9034933} {000214E6-0000-0000-C000-000000000046} 0xFFFF

Unicode based on Runtime Data (WINWORD.EXE )

{9_$6O=Ld?1D3;o4(x1:uGF4.,]V R(o^aA*|XYgp?oPv$O+u#c:F"-JJxSN|3\ETFOGhm;9Uj2qtNpR"^p

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

{:'~'56'.#uFpP)8kpLm++c=QX9e

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

{;qBC,HiQ{Cm`zW#}tz|C\#z+sYG

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

{?q?&u[')+LQd6X*+`.Qt[l#m?Berj50p*>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

{\BT=I;8o(K[3XO9sEZGDT]%q(gv0a@^-X"Rqi jzgtQ6qV+\gHX)%Xi/k0=( (UGR^|Q mB^{~t%k~ Gqszm{k}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

{\rtf1 \ansi \ansicpg936 \deff0 \stshfdbch2 \stshfloch2 \stshfhich2 \deflang2052 \deflangfe2052 {\fonttbl {\f0 \froman \fcharset0 \fprq2 {\*\panose 02020603050405020304}Times New Roman{\*\falt Times New Roman};}{\f2 \fswiss \fcharset134 \fprq0 {\*\panose 020f0502020204030204}Calibri{\*\falt Calibri};}{\f3 \fnil \fcharset2 \fprq0 {\*\panose 05000000000000000000}Wingdings{\*\falt Wingdings};}}{\colortbl ;\red0 \green0 \blue0 ;\red128 \green0 \blue0 ;\red255 \green0 \blue0 ;\red0 \green128 \blue0 ;\red128 \green128 \blue0 ;\red0 \green255 \blue0 ;\red255 \green255 \blue0 ;\red0 \green0 \blue128 ;\red128 \green0 \blue128 ;\red0 \green128 \blue128 ;\red128 \green128 \blue128 ;\red192 \green192 \blue192 ;\red0 \green0 \blue255 ;\red255 \green0 \blue255 ;\red0 \green255 \blue255 ;\red255 \green255 \blue255 ;\red0 \green0 \blue0 ;}{\stylesheet {\li0 \ri0 \sa200 \sl276 \slmult1 \widctlpar \aspalpha \aspnum \adjustright \lin0 \rin0 \itap0 \fs22 \lang1033 \langnp1033 \langfe1033 \langfenp1033 \snext0 \sqformat \spriori

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

Ansi based on Dropped File (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc)

{G3#_qQmvgaz![|8OC\0{L3_H3zj,7=bZkct>

Ansi based on Dropped File (~WRD0002.tmp)

{IP}E5}LQ|F)V+OH<H555,h|Ib

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

{Q]}{.kWmRZT~q'OQk39,FrH2jxr>iu^:gE58w

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

{T_x3IIO0ye<c-/m.R?PRYZU1wRvi:F{Br0z|o9)*|H(y?e1! .wJ}fLF'Xe'gYy.lJf y%s2F~/(xAbH\JnnJB+8A|`wzF2i99Wi97"O3ApRa ]Hl7Fws#V+1A|l4mA`k"w

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

{W(~]w^,x-CjmCIxSOrM+Vl~z4eKEF}@|Nh>;oej6vlq~-1,n=+DepK*@t*;4V"<h^z5\CNJLo=we3rK[5O[zbiGG0#6]A.HBWBWup\bugwDlASod{lfi$5U0he.<-8KP)0s@;\]sv"|YxtF~KT7Y"KT^j1<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|#\D+uN'Z>kZTWETA[;?Au-5#[hW%_]#$Q>/l1dEJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|-}Fc7T"_]J/9,Pz;[?j;b/*`'!'#fKn0c}c-YbndRDH]z1x~OqX0Si8I|{wgeI-yDfIYj2d8 RYVcV7@G%#kg{QJ

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|1ZPH}T\XY8gCnce?rN>5PM&;N&h*Xh-DkF~%a)"`QFY^.*d7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|5=m{/;F*P*QQ *p?UvM?W`_1qB2*sNQ"l;$LXnJ{HDhTHwnB[O)K6S[U`B[-|tzW0,^]\Pl{&}!OsKgW(RQyA~SSX+S+J2lW*n4)qA>I@.)$v4r[@~|i:Y2I7,4c+|)WlA3tzn*@n]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|5V54EANIR@AEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|5VEA+jEJ[]_9A9LE|u|egu"%5r|u 'RUu5PgrT"%5r|u 'RUu5PgrT"%5r|u 'RTu5PgrT"b$5r|1Sr05m1?|A?*?u||?*<?*<^|AA11Allrzz|rqVb15&%=}!w374AE0G;J5A\36V>>::@@J3?7AEG3J5ARAuG;J5A\3?7AEV96A7s:@E"5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|5VF"}|E3?$AEV5A9:A&,1"f{57{PEA>"h=B.=5n/ts<u&AAE|5BEnO~BE1vEtAwxuA5~ywA"{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|5VGF"E55}j;z%j;zM'w;jAj<u&=V~w\3C37CFwyFQAFW!\{=Z}1?AA17wx5u13C<13AC<u&=V117&57$57 575757~urj3,33&5c;zN5BF5FwEsNsFjj5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|5V}&Gn"0k5;z}0000sf&pE7R#AEi[3"Vt05A]

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|7zZ7@].7OS`OTx>|(!UyrYguyS1#rL2W]Jkz#2';PTOTsl7bD(4K'f?`OqB@2z,v

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|;ZCIB5EARA"{7Ab<"f5y}}ASVPbE

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|_LVg$<N.<~<.>eNDgun#~)

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|_y:<J'n65Mv7qV;4;hRA$W4PH+$Yh'(Ca,sm~yClj7)h6

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|AIEF~F~F~AR9sR15-76sRi=1A7v5?>15AAuE5u3 ;z5A1655wx1u;5O~A76v5?>165E5AAAFuE5A72V5?>1255uF1AABuE5A971u;EAu32 ;z5AG5AAFuEAEC1655wx15K}=u1G6dEO~Au3AF5u1Ax1I>}155u=A7C37Cw37Bv271A{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|aOiOt_mi7m#PYJRMXl]LfYZ$

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|AV}*xH.>AR5V55B}5A3?:AE5N~G;5A5Bu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|er'$Qh&nk~3\::au1?W).J\(xixs+tSN.SwXJXjV|K!-$Mwl5YtMN2cb:*)j,vF

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|m^&`TmyZ}H*n40*ds(MVL&7!1

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|ouf5sU(:,>Jp]~1X'k&mt1rC5q4-h[#A/rNTk#nm%~4vkq%-ZB9QFN-:Juz'SR'O$a@&E=$\H_keBV]UprD]Q$Fc,pF]{}k?|og1(,G$P+/2w<9 )|Y,}aqElj]n QYyuBOoTX`6QLnGaSi*RE`[DMAt+nU0`rZ\/,LU#Qjm_" N9L$j9qj[B`L52e`Wu[jVRe,EKD)O#?C\v(;mo0pqWhhFs?Km(_!`JXV OkBI

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|rvVzv3I:ssO~5E3G+5AR:AEw?>:)1boG34AnsO~57

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|s@*( UO,})HE3Il

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|wB1;z7IJB1>=75!1;z7~F5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|y}}}z,Pm5*IuWwNvoh](EcV]S+x7:aG7O3Te$,NL,lW6yg~PKvF}yword/document.xmlY0A;"},,qH6F4Iv8Hl7IsxlO,,&bYb}<

Ansi based on Dropped File (~WRO0000.doc)

|}M&~7&{=f>G^16A5

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

|~Q# 1u{<sA"=~~wDu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}";cEyu51IR_&{3612,A{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}"{WI3B5A[I3B5AOI3B5AK3B5A:SwFA5W}0I}wWZA55C#n5A?%39s2EEI'*1AEA;n5A>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}"~SsOT5"c5EN~zG;5AEl#xBz-{)#hsOd5A>

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}&%8wNy!xbQLsyc:0V(SoU)AgW58w

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}&%E{w0tD 87n/7d:Y))(Yu[2,x@Fw#mn<

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}+v@dAhmk'IO|;K+Pk_@-FR`5)pt$:pbI ))cP0i ui`A@,odsb_9!6?qPgz)8l))

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

},i$9-kSRz>

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}15V5A8%yrA8

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}15VRAEu:;LN5k"15pAf%={d5P>xuU

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}1<!F9455x

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}1V1V9:R4{<=I

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}3e1fD@`FBw{[Se$k$wp6%)oJafWr42LQiHF$<i;%4H=B-.9xVjs,hbEj%w[odl)&5h_q]fJEe,qf&#rhAcW04^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}5AR*aAEsG

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}:q{5J2;:I1Vl{}q

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}<ulR`KIy"=~#9?}}{I}xA(?GhV}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}=H*4D"K<xL[k$_d3[|?Nd44&@fA3rA!Ni31Cgu

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}=r}=r}11Es"V=5z}v1?Cw3[7Us=~G06MsL06M}15V&V;CF3?0AE5Vj?>:A>B:4AEy

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}>AN7J,f*|MNojhE:OKreBaAf>AQ?l_MvP'p

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}>}1"=y4AEA^,5EAR9zCFwJ32&AvW"Wzh7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}>}ElANA15,>IA#z1IRAEN~5EV5ASd3:EnAvuQ'M5}AfsB`!EmO~rAFu355{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}]GE}75EAR9V;CF3

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}^s;Zzt-*7OzGAN}Ai=l?O^QI?IF9Uu'kBKX>=t=tiG?ACuU{}Bs;Zu3C8}4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}AQf1=7uu%;EN$}[?>[V5A#up]_COl?>_A3_Iu=B5J5ERW__9:|}[i[?5AEu|A{9!M(8sBV>-5A>!e5(=r}_IEw[7+}[AQ3[@A+JCES5r]_|4CIFE+__i[+GEk[Hu[5+AQIFEHVmEC3_IvE=}ImE^HRWAy=]}[A+}[AHA+}u&R YG;5ARsGe5V5AG;!5AsOJ5Rz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}AQGN"16w)E}15V}&7Au357.Awb1Cvw^3:1"nGRAlubj;z=sVE(O~IR1y*I@EA&"~55JM?D5A3"5~

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}AQH376%AENEEz7AR;5w36CzAN{k6[{RYV]]B_O~z<R7AE{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}B;a>;hV{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}E6VjO~G

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}EzQ~wx15OH= BEO~ww=v"_A5"k<u&RuO~zN=uj337%AEt5b{G;F!5ARG7AEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}I"=AVk=B?18!>QIFR5AEO~OH=|IXJEM5i1&Oe&NR

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}i(*Q-nV_0r>Z)3)>}&b>s

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}I=9}I=9}I=9

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}I[;z=B9n_"_A3kR[5+w>}uXQAA(z\9:z5"5J{<rmV7[?>iRco{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}iy~9:Vyv92i}15V\AE"=

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}KR5UnP6mJ:mNC8z-dPA

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}qhZp*S{b

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}Qzt-A3X6a$@C%~W\s; ~qer9xb-~Y?\$3TY9^kAor' ukTJ\zU,<(gA.<.f0`&H27^dzmkU!w#Nlsgf:K4< T+n^Us@OeQh:n8#ois1V.j~FnIA/#u0

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}R4AE~kHO~15EA5RAE~5+zs;PeE9kE5VEA5EA5rE|5Ku95;N=B1Jz+IFMA{%5V$5A9:y%"tE#ARAE5Q35UU!V7RAES!vEAO"5Qy5%A:U%}_A5"j~5E"c5=~}EAE5#E5A! 9=RIFM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}rIxR\GAE}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}sC13Vs;0y+A2AApAEN~Kxnl10"7!EN~5uV]1OA~x5OHRjz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}UQA}A7={@>98Tu=~wy2rv2rv21zu74

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}vIR`7AEz

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}VV5A}Vn5A9:=r!LCuZRAE=Va5AwBAE7

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}vWtdoxK-Mi4T;FP/m'xpX=Mwz/$cTudeq]?-dxZ3shb0{0,?p^6#fp

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}wBA}*}&9zEAAV5z}~D?}

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}y!y652=RcI5AA5AE=ZRcANuw=}1?Iw}j7Bv36BwB6B9yF""5>u;W~CbwQ{1.T:=aKY~;9~bKq{Ij}*3>7967s1o+{?[AC5m1ICEA&wGA"A:zsAiu"A&?395}}xIICE_}||>%~3=|V|4yKzx1rVYAO15{/"L?lQxE7w=*{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

}Zr}:kneTg!3`Luk}W-GNBdh"-~- "2_r;|{9 6NaI9gRxB#;eK22?!zHq

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~(?ZAvi!;(9r-n

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~2zcvP5S1HXb#y9WLX(|pK`FgOpy,T{x>JIeFI9/!/6cBBWG

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~:6AB}G75EAR5sAE=AAu&=VAGR{EAs5A>rIQC?sVu"E5{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~>{2:hiy(lT1X(x

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~?8Lx>0S{"`3C

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~_?PIWC|L&OW*a[G8|ZJ!re@b +yO&l0Gb\f>Ks$2G_ikih/w!s.~6Vmbe;/4

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~Aa)Cu5K?

Ansi based on Memory/File Scan (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~B(uVuO~IyR A;zAA"wD5Ib

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~EXAy8(|X&:5^0

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~e|M9C"g[h:5J"

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~G#ECR1AE9R{DAE}Q7Av{3s*CAN9\A@}+AV5AwB1<R54AEC^V5A}I^

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~gVzKU5'5IiTNW'Kn#NbIpiiGAsg:-Y6sD'eV>QNUb2I

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~h3?iAE5i95sO5E2nO~J!E:AG;]5AG;z5A"=~G;z5A=Bj7{

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~J?uAEG:<uAEhVy9:;zN5=zFpAE!|1.BwN1.5esJ37>%AEE5VR:|#@EIJ:1:'37>%AE+EVw37>%AE>$VD5A:3/"7!7AF1>Zu1AE"^AB7uu53sAIOl=@I9}%IQ=U!!!!UID9wZA,7CsG~U5=5VI5AAN77ARc5c}:1=Rsl(QslUGfh5Vh5A91tG;V!5ARusORe5R3?AEVh5A13?%AE5G;V5A8U7{&QER\AE^sRV%9:35qyEEO~GIRt;zy/25JE13O=f>1A{<RT}>C?>775AV7AR;7{BEnV;5A7{BE#1{5sOF5Rpu993">5CQAu3C>!>|5V&5Cj@

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~JTe\O*tHGHY}KNP*T9/#A7qZ$*c?qUnwN%Oi4=3P

Ansi based on Dropped File (~WRD0002.tmp)

~k"nQ0@?D?"y#Vzu{ ,E0&:e9

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~l#A}[OB><!Gs/?

Ansi based on Dropped File (~WRO0000.doc)

~taGt*U5X%sgo

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~T{>|/g"K4baWRHnIy3yx:Uoh--

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~Y',mvJn^?M[#R,j9P,uG9@ DpueuGnXey,jn*~a*sM

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~{C<IzT1;DD1M>P/f(|4@&3Z\-s8.<.Gk/MfjM9uY%&4amaY];($5' BfkEN[qeP+Q2<,c`O%b]0T/T`qDe

Ansi based on Hybrid Analysis (ad67e622b64b6d615aad840ced58346cbfb011c5e06729aef1d7968242db9533.doc.bin)

~{t-I*-y^@"7