Server : Apache System : Linux copper.netcy.com 2.6.32-754.27.1.el6.centos.plus.x86_64 #1 SMP Thu Jan 30 13:54:25 UTC 2020 x86_64 User : montcaro ( 581) PHP Version : 7.4.28 Disable Function : NONE Directory : /opt/tijeers/tsrvmng/mscan/sigs/ |
Sanesecurity.Badmacro.Doc.ramf:2:*:D0CF11E0*444638443034432D00354246412D31303140422D424445358067416A41806534800532886780BA670072616D2046696C6500732028783836295C40436F6D6D6F6E03095C00*4D6F64756C653D4D6F64756C65*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Xml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anesecurity.Badmacro.MacroHeur.005:2:*:49006600200079006F007500200064006F00630075006D0065006E00740020006800610076006500200069006E0063006F0072007200650063007400200065006E0063006F00640069006E00670020002D00200065006E00610062006C00650020006D006100630072006F000D000D003C Sanesecurity.Badmacro.Doc.Msg.006:2:*:4D6163726F206E6F74206163746976617465640D506C6561736520656E61626C65206D6163726F73657320746F2076696577207468697320646F63756D656E742E Sanesecurity.Badmacro.Doc.Msg.007:2:*:3C00730065006C006500630074003E00200049006600200079006F007500200064006F00630075006D0065006E00740020006800610076006500200069006E0063006F0072007200650063007400200065006E0063006F00640069006E00670020002D00200065006E00610062006C00650020006D006100630072006F Sanesecurity.Badmacro.Lng.009:2:*:ffff0000ffffD0CF11E0*00417474726962757400*0100FEFF030A0000FFFFFFFF0609020000000000C0000000000000461F000000C4EEEAF3ECE5EDF2204D6963726F736F6674204F666669636520576F7264000A0000004D53576F7264446F630010000000576F72642E446F63756D656E742E3800F439B271 Sanesecurity.Badmacro.24759.XmlHeurGen:0:*:3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D*417574686F723E313C2F6F3A417574686F723E3C6F3A4C617374417574686F723E*4C61737453617665643E3C6F3A50616765733E313C2F6F3A50616765733E3C6F3A576F7264733E303C2F6F3A576F7264733E3C6F3A436861726163746572733E303C2F6F3A436861726163746572733E Sanesecurity.Badmacro.24783.XmlHeurGen.La:0:*:3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D*417574686F723E313C2F6F3A417574686F723E3C6F3A4C617374417574686F723E*3C6F3A436F6D70616E793ED09BD0A0D0BBD0B0D180D0B2D0BFD0B8D0BED098D094D090D0B2D1803C2F6F3A436F6D70616E793E3C6F3A4C696E65733E313C2F6F3A4C696E65733E Sanesecurity.Badmacro.24784.XmlHeurGen.Ng:0:*:485000000000??F0FF0F0009013F0000E3040000FFFFFF7FFFFFFF7FFFFFFF7FFFFFFF7FFFFFFF7FFFFFFF7FFFFFFF7F262253000004000032{21}2104{18}101C00000300000000000000000078000000780000000000000000000000A0050000000000000B00000000000000DC000000FFFF120000000000000000000000000000000100310014001F043E043B044C0437043E0432043004420435043B044C042000570069006E0064006F00770073*CFEEEBFCE7EEE2E0F2E5EBFC2057696E646F7773*6175746F6F70656E Sanesecurity.Badmacro.24786.MacroHeurGen.Ng:0:*:F010000800FCFD010000000000000000000000000000000000000000000000000848500000000028F0FF0F0009013F0000E3040000FFFFFF7FFFFFFF7FFFFFFF7FFFFFFF7FFFFFFF7FFFFFFF7FFFFFFF7F2622530000040000320000000000000000000000000000000000000000002104000000000000000000000000000000000000101C0000030000000000000000007800000078000000*7350726F7879*4D6963726F736F667420466F726D7320322E3020466F726D0010000000456D626564646564204F626A656374 Sanesecurity.Badmacro.24787.MacroHeurGen.Bp:0:*:0000014B831100*6175746F6F70656E*4D006F00640075006C00650034 Sanesecurity.Badmacro.doc_url:2:*:D0CF11E0*55524C446F776E6C6F6164546F46696C65*54686973446F63756D656E7400540068006900730044006F00630075006D0065006E0074 Sanesecurity.Badmacro.doc_shellao:2:*:D0CF11E0*4175746F4F70656E*5368656C6C*54686973446F63756D656E7400540068006900730044006F00630075006D0065006E0074 Sanesecurity.Badmacro.xls.Gen.002b:2:*:D0CF11E0*00417474726962757400*496E7465726E65744F70656E55726C Sanesecurity.Badmacro.xls.Gen.004:2:*:D0CF11E0*41726961776173652069732066726565206C69627261727920666F722056424120636F77626F7973 Sanesecurity.Badmacro.24790.XmlHeurGen.Dd:0:*:3C6F3A446F63756D656E7450726F706572746965733E3C6F3A5469746C653E203C2F6F3A5469746C653E3C6F3A417574686F723E4472656465783C2F6F3A417574686F723E3C6F3A4C617374417574686F723E Sanesecurity.Badmacro.xml.Gen.001:2:*:3C6F3A4C617374417574686F723ED09FD0A0D180D0BED18BD0B2D0B0D090D090D0903C Sanesecurity.Badmacro.xml.Gen.002:2:*:3C77783A75694E616D652077783A76616C3D22D09ED0B1D18BD187D0BDD18BD0B9222F3E3C773A7273696420773A76616C3D Sanesecurity.Badmacro.xml.Pack.002:2:*:3C2F773A62696E446174613E3C2F773A646F634F6C65446174613E3C773A736861706544656661756C74733E3C6F3A736861706564656661756C747320763A6578743D2265646974222000*6F3A6F6C653D22223E3C763A696D61676564617461207372633D22776F72646D6C3A2F2F30363030303030312E656D7A22206F3A7469746C653D22222F3E3C2F763A73686170653E3C6F3A4F4C454F626A65637420547970653D22456D626564222050726F6749443D225061636B6167652220536861706549443D225F78303030305F69313032352220447261774173706563743D2249636F6E2200 Sanesecurity.Badmacro.xml.Pack.003:2:*:3C6F3A436F6D70616E793E506830656E6978205465616D3C2F6F3A436F6D70616E793E Sanesecurity.Badmacro.xml.Pack.004:2:*:77676F5263746A4B496B4A7A574457553C3F786D6C2076657273696F6E*4850617761673537694244497475515179696F35654D67686878787971486152554950306B45414F51767839353832387A6E7637396B2F574B673735 Sanesecurity.Badmacro.Xls.Msg.008:2:*:5761726E696E6721205361696420646F63756D656E7420776173206372656174656420696E2061206E657765722076657273696F6E206F66204D6963726F736F6674204F66666963652E450000546F20646973706C61792074686520636F6E74656E7473206F662074686520646F63756D656E74206D75737420757064617465204D6963726F736F6674204F6666696365 Sanesecurity.Badmacro.24803.XlsHeur:2:*:2E7662730000000300??000000433A5C55736572735C315C417070446174615C4C6F63616C5C54656D705C68747470 Sanesecurity.Badmacro.Rtf.Zip.001:0:*:6F626A656D627B*3530346230333034*35303462303330343134303030303030303830303232386437393436316166 Sanesecurity.Badmacro.Js.ActX.001:0:*:3B7D6361746368286565297B7472797B766172{-20}3D6E657720416374697665584F626A6563742822 Sanesecurity.Badmacro.Doc.Msg.008:2:*:506C6561736520656E61626C65206D6163726F73657320746F20766965772074686520646F63756D656E74 Sanesecurity.Badmacro.Doc.alx.001:2:*:4164644E657753686565742E626173*433A5C55736572735C616C65785C417070446174615C4C6F63616C5C*C4EEEAF3ECE5EDF2204D6963726F736F Sanesecurity.Badmacro.Doc.awk.001:2:*:633A5C57696E646F77735C54656D705C*4170706C65576562 Sanesecurity.Badmacro.Doc.fpw.001:2:*:46696C6550617468202D466F726365 Sanesecurity.Badmacro.24815.MacroHeurGen.Ax:2:*:6175746F6F70656E002829*5F4FA3234B5455A835990D00000230000000433A5C55736572735C616C65785C417070446174615C4C6F63616C5C54656D705C5642455C4D53466F726D732E657864*C4EEEAF3ECE5EDF2204D6963726F736F6674204F66 Sanesecurity.Badmacro.Doc.bp.002:2:*:50726F7879427970617373*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.ng.001:2:*:310000001E00000004000000000000001E0000000C0000004E6F726D616C2E646F7400001E00000004000000474E00001E00000004000000*42696E617279 Sanesecurity.Badmacro.Doc.ng.002:2:*:310000001E00000004000000000000001E0000000C0000004E6F726D616C2E646F7400001E00000004000000474E00001E00000004000000*496E7465726E65744F70656E55726C Sanesecurity.Badmacro.24819.MacroHeurGen.Hp:2:*:540068006900730044006F00630075006D006500*485000000000{1}F0FF0F00??013F0000E3040000FFFFFF7FFFFFFF7FFFFFFF7FFFFFFF7FFFFFFF7FFFFFFF7FFFFFFF7F*C4EEEAF3ECE5EDF2204D6963726F736F66 Sanesecurity.Badmacro.Doc.Msg.009:2:*:5448495320444F43554D454E5420484153204245454E2053455420544F20424520424C55522044554520544F20534543555249545920524541534F4E20414E4420464F5220594F5552205341464554590D4B494E444C5920434C49434B204F5054494F4E2F454E41424C4520434F4E54454E542041424F564520544F20564945572050524F50455220444F43554D454E54 Sanesecurity.Badmacro.Doc.Pic.001:2:*:70006F007200740066006F006C0069006F005F00730075006D006D006100720079005F00330030005F0031000000500069006300740075007200650020003200000070006F007200740066006F006C0069006F005F00730075006D006D006100720079005F00330030005F0031000000000010F004000000*50524956415445001E00000004000000310000001E000000180000004D6963726F736F6674 Sanesecurity.Badmacro.Doc.Msg.010:2:*:50726976617465207465787420686173206265656E2068696464656E20746F2063617574696F6E20616761696E737420756E617574686F72697A656420706572736F6E2E20636C69636B204F7074696F6E733E20456E61626C6520436F6E74656E7420746F2076696577206974 Sanesecurity.Badmacro.24825.VbsHeur:7:*:6368727728*3529206372656174656F626A6563742822777363726970742E7368656C6C22292E72756E28{-10}292C30 Sanesecurity.Badmacro.24826.VbsHeur:7:*:6872772832332B323329202620636872772835302E352B35302E3529202620636872772836302B363029202620636872772835302E352B35302E3529202620636872772832392E352B32392E35 Sanesecurity.Badmacro.Doc.sap.001:2:*:5368656C6C4170704E616D65*CBE8F1F2313D Sanesecurity.Badmacro.Doc.oul.001:2:*:496E7465726E65744F70656E55726C*CBE8F1F2313D Sanesecurity.Badmacro.Doc.oul.002:2:*:496E7465726E65745265616446696C65*CBE8F1F2313D Sanesecurity.Badmacro.Doc.ao.001:2:*:6175746F6F70656E*474F534E49495050*CBE8F1F2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.gsf.001:2:*:4700650074005300700065006300690061006C0046006F006C006400650072*CBE8F1F2313D Sanesecurity.Badmacro.24819.MacroHeurGen.np:2:*:4D6F64756C653D4D6F64756C6534*474F534E49495050*CBE8F1F2204D6963726F736F6674 Sanesecurity.Badmacro.24852.MacroHeurGen.GnIo:2:*:4E6F726D616C2E646F7400001E00000004000000474E00001E00000004000000*496E7465726E65744F70656E*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.24853.MacroHeurGen.GnWi:2:*:4E6F726D616C2E646F7400001E00000004000000474E00001E00000004000000*77696E696E65742E646C6C*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.24854.MacroHeurGen.GnSA:2:*:4E6F726D616C2E646F7400001E00000004000000474E00001E00000004000000*5368656C6C4170704E616D65*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.cmdk.001:2:*:2E657865{-50}636D64202F6B Sanesecurity.Badmacro.24761.ChmHeur:0:*:61646238383061362D643866662D313163662D393337372D303061613030336237613131*76616C75653D222C636D642E6578652C2F63{-150}2E657865222C66616C73653E3E Sanesecurity.Badmacro.24762.ChmHeur:0:*:636C7369643A61646238383061362D643866662D313163662D393337372D303061613030336237613131*76616C75653D222C636D642E6578652C2F63 Sanesecurity.Badmacro.24902.ChmHeur:3:*:73686F7274637574*2C636D642C2F6320706F7765727368656C6C20286E65772D6F626A6563742073797374656D2E6E65742E776562636C69656E74292E646F776E6C6F616466696C652827687474703A2F2F Sanesecurity.Badmacro.24903.ChmHeur:3:*:2E657865272C272574656D70255C6E61746D61736C61322E65786527293B286E65772D6F626A656374202D636F6D207368656C6C2E6170706C69636174696F6E292E7368656C6C6578656375746528272574656D70255C Sanesecurity.Badmacro.24906.JsHeur:7:*:6E657720616374697665786F626A65637428*5B22746F737472696E67225D2828*225B2263686172636F64656174225D28*225B227265706C616365225D Sanesecurity.Badmacro.Doc.sl.001:2:*:5368656C6C45786563757465*703A2F2F*54686973446F63756D656E7400540068006900730044006F00630075006D0065006E0074 Sanesecurity.Badmacro.Doc.ht.001:2:*:5368656C6C45786563757465*48545450*54686973446F63756D656E7400540068006900730044006F00630075006D0065006E0074 Sanesecurity.Badmacro.Doc.bin.001:2:*:5368656C6C45786563757465*42696E*54686973446F63756D656E7400540068006900730044006F00630075006D0065006E0074 Sanesecurity.Badmacro.24932.MacroHeurGen.GnAl:2:*:0041006C0065007800*496E7465726E65744F70656E55726C*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.24933.MacroHeurGen.GnAlSP:2:*:0041006C0065007800*4765745370656369616C466F6C646572*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.Lp.001:2:*:657069632E7375*4D53584D4C322E536572766572584D4C48545450 Sanesecurity.Badmacro.Doc.Msg.011:2:*:49006600200079006F007500200064006F00630075006D0065006E0074002000680061007300200069006E0063006F0072007200650063007400200065006E0063006F00640069006E00670020002D00200065006E00610062006C00650020006D006100630072006F Sanesecurity.Badmacro.Doc.ht:2:*:4D5300584D4C{-100}474554*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.24944.MacroHeurGen.MsAo:2:*:6100750074006F006F00700065006E*485000{95}4D006900630072006F0073006F006600740020004F0066006600690063006500*C4EEEAF3ECE5EDF2204D6963726F736F Sanesecurity.Badmacro.24945.MacroHeurGen.R1:2:*:433A5C55736572735C315C417070446174615C4C6F63616C5C54656D705C5642455C4D53466F726D732E657864*C4EEEAF3ECE5EDF2204D6963726F736F Sanesecurity.Badmacro.24946.MacroHeurGen.RB:2:*:6175746F6F70656E*42696E617279*C4EEEAF3ECE5EDF2204D6963726F736F Sanesecurity.Badmacro.24947.MacroHeurGen.RiN:2:*:696E65742E64*C4EEEAF3ECE5EDF2204D6963726F736F Sanesecurity.Badmacro.Doc.Rr:2:*:496E7465726E65744F70656E*C4EEEAF3ECE5EDF2204D6963726F736F Sanesecurity.Badmacro.Doc.Ro:2:*:496E7465726E65745265616446696C65C4EEEAF3ECE5EDF2204D6963726F736F Sanesecurity.Badmacro.24947.MacroHeurGen:3:*:796F7520646F63756D656E742068617320696E636F727265637420656E636F64696E67202D20656E61626C65206D6163726F Sanesecurity.Badmacro.24948.MacroHeurGen.AM:3:*:636F6E74656E742D6C6F636174696F6E3A2066696C653A2F2F2F633A2F{-200}71776E3061787A6C74776C747A71*2E2E2F312E68746D Sanesecurity.Badmacro.25082.MacroHeurGen.Mm:2:*:4D004D004D*C4EEEAF3ECE5EDF2204D6963726F736F6674*4D006F00640075006C00650031 Sanesecurity.Badmacro.25083.MacroHeurGen.64:2:*:62696E2E626173653634*4D006F00640075006C00650031*540068006900730044006F00630075006D0065006E0074001400 Sanesecurity.Badmacro.25084.MacroHeurGen.An:2:*:4E0069006B006F006C0061007900200056006500720065006D00650065006E006B006F*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.mso:3:*:E0EFF0E8ECE5F02077696E646F7773*71776E3061787A6C74776C747A71*65646974646174612E6D736F Sanesecurity.Badmacro.25095.GenDocHeur:3:*:EDE0EFF0E8ECE5F0206D6963726F736F6674*6F70656E2822746578742F68746D6C222C227265706C61636522293B*65646974646174612E6D736F Sanesecurity.Badmacro.Doc.mso.1:3:*:EDE0EFF0E8ECE5F0*737562737472696E67*65646974646174612E6D736F Sanesecurity.Badmacro.Doc.mso.2:3:*:EDE0EFF0E8ECE5F0*6A617661736372697074*65646974646174612E6D736F Sanesecurity.Badmacro.Doc.mso.3:3:*:EDE0EFF0E8ECE5F0*7365746163746976657368656574*65646974646174612E6D736F Sanesecurity.Badmacro.25109.GenDocHeur:3:*:EDE0EFF0E8ECE5F0206D6963726F736F6674*65646974646174612E6D736F*66696C653A2F2F2F633A2F Sanesecurity.Badmacro.25110.GenHtmlDocHeur:4:*:3C7469746C653E476F6F64*2E646F6322{-5}54556C4E525331575A584A7A615739754F6941784C6A414E436B4E76626E526C626E517456 Sanesecurity.Badmacro.25113.MacroHeurGen.Nre:2:*:50726F7564746F4265636F6D65614E6570616C6952657665727365456E67696E656572 Sanesecurity.Badmacro.24658.RtfHeur.MWI:0:*:7B5C727466315C616E73695C616E7369637067313235315C64656666305C6465666C616E67313034397B5C666F6E7474626C7B5C66305C6673776973735C66636861727365743230347B5C2A5C666E616D6520417269616C3B7D417269616C204359523B7D0D0A7B5C6F626A6563745C6F626A656D627B5C2A5C6F626A636C617373205061696E742E506963747572657D5C6F626A77305C6F626A68307B5C2A5C6F626A64617461{80}0A30323030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030300D0A30303030303030303030303030303030303030303030303030333030303830303030303030303030303030303030303030303030 Sanesecurity.Badmacro.25115.RtfHeur.MWI2:0:*:7B5C727466315C616E73695C616E7369637067313235315C64656666305C6465666C616E67313034397B5C666F6E7474626C7B5C66305C6673776973735C66636861727365743230347B5C2A5C666E616D6520417269616C3B7D417269616C204359523B7D0D0A7B5C6F626A6563745C6F626A656D627B5C2A5C6F626A636C61737320506963747572652E5061696E747D5C6F626A77305C6F626A68307B5C2A5C6F626A64617461{80}0A30323030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030300D0A30303030303030303030303030303030303030303030303030333030303830303030303030303030303030303030303030303030 Sanesecurity.Badmacro.25127.GenDocHeur.La1:3:*:6572726F7221*3C6F3A617574686F723E313C2F6F3A617574686F723E*3C6F3A6C617374617574686F723E3433353433353433353C2F6F3A6C617374617574686F723E Sanesecurity.Badmacro.Doc.la2am:3:*:3C6F3A617574686F723E313C2F6F3A617574686F723E*71776E3061787A6C74776C747A71 Sanesecurity.Badmacro.Doc.la3am:3:*:3C6F3A6C617374617574686F723E787673646666666473663C2F6F3A6C617374617574686F723E*71776E3061787A6C74776C747A71 Sanesecurity.Badmacro.Doc.Msg.004:2:*:444F43554D454E5420484153204245454E20534543555245442042592057494E444F57532053454355524954590D4B494E444C5920434C49434B20454E41424C4520434F4E54454E542041424F564520544F20564945572050524F50455220444F43554D454E54 Sanesecurity.Badmacro.Doc.Msg.005:2:*:5448452042454C4F5720444F43554D454E5420484153204245454E2053455420544F20424520424C555220544F2050524556454E542020554E415554484F524953454420414343455353 Sanesecurity.Badmacro.Doc.bc:2:*:D0CF11E0*0F00766242696E617279436F6D70617265*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.jic:2:*:D0CF11E0*4A757374696E20286A75737420696E206361736529*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.25162.MacroHeurGen.alx:2:*:D0CF11E0*0000416C65780000*4E756D626572204245545745454E*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.25168.MacroHeurGen.1rs:2:*:D0CF11E0*C4EEEAF3ECE5EDF2204D6963726F736F6674*433A5C55736572735C315C417070446174615C*52616E646F6D4E756D626572*52616E646F6D537472696E67 Sanesecurity.Badmacro.25171.MacroHeurGen.alx:2:*:D0CF11E0*43003A005C00550073006500720073005C0061006C00650078005C0041007000700044006100740061005C004C006F00630061006C005C00540065006D0070005C*C4EEEAF3ECE5EDF2204D6963726F736F6674204F6666696365 Sanesecurity.Badmacro.25171.MacroHeurGen.alx:2:*:D0CF11E0*43003A005C00550073006500720073005C0061006C00650078005C0041007000700044006100740061005C004C006F00630061006C005C00540065006D0070005C*C4EEEAF3ECE5EDF2204D6963726F736F6674204F6666696365 Sanesecurity.Badmacro.Doc.url:2:*:D0CF11E0*642E6D617866696C652E726F2F Sanesecurity.Badmacro.Doc.dll1:2:*:D0CF11E0*55726C6D6F6E2E646C6C Sanesecurity.Badmacro.Doc.wsc:2:*:D0CF11E0*53617665546F46696C65*57005300630072006900700074 Sanesecurity.Badmacro.25207.DocHeur:2:*:D0CF11E0*49484452*62696E2E626173653634*C4EEEAF3ECE5EDF2204D6963726F736F66 Sanesecurity.Badmacro.rtfexp:0:*:7B5C72740A0A0A0A0A0A0A0A0A0A0A0A{19984}0A0A0A0A66317B*44306366313165 Sanesecurity.Badmacro.Doc.direxe:2:*:D0CF11E0*2F646972656374657865 Sanesecurity.Badmacro.25267.MacroHeurGen.b64:2:*:73653634*584D4C322E444F4D446F63756D656E74*4175746F4F70656E Sanesecurity.Badmacro.Doc.hyper:2:*:D0CF11E0*68007400740070003A002F002F*4175746F4F70656E*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.hypers:2:*:D0CF11E0*680074007400700073003A002F002F*506F736569646F6E Sanesecurity.Badmacro.25205.DocHeur:2:*:D0CF11E0*6900730020006E006F0074002000760061006C006900640020004200610073006500360034*62456E634F7244656320666C6167 Sanesecurity.Badmacro.Doc.Oel.Poc1:2:*:4F4C45205061636B616765*433A5C55736572735C41444D494E497E315C417070446174615C4C6F63616C5C54656D705C*007A00690070 Sanesecurity.Badmacro.Doc.rtf.Poc1:0:*:7B5C727466315C*49524D2028496E666F726D6174696F6E20526967687473204D616E6167656D656E7429*3530346230333034 Sanesecurity.Badmacro.Doc.http:2:*:D0CF11E0*3D20276874272B2774703A2F2F272B Sanesecurity.Badmacro.Doc.nos:2:*:D0CF11E0*4E756D4F665365636F6E6473 Sanesecurity.Badmacro.25356.MacroHeurGen.rsa:2:*:D0CF11E0*2D0D0D50524F54454354454420444F43554D454E540D546869732066696C652069732070726F746563746564207769746820525341206B65792E0D506C6561736520456E61626C6520436F6E74656E742A20746F20736565207468697320646F63756D656E742E0D2A436C69636B2093456E61626C6520436F6E74656E74942066726F6D207468652079656C6C6F77206261722061626F7665*570069006E0064006F0077007300200055007300650072 Sanesecurity.Badmacro.25357.XmlHeurGen:0:*:3C6F3A417574686F723E313C2F6F3A417574686F723E3C6F3A4C617374417574686F723E313C2F6F3A4C617374417574686F723E*3C773A62696E4461746120773A6E616D653D2265646974646174612E6D736F223E Sanesecurity.Badmacro.25371.XmlHeurGen.Al:0:*:3C64633A63726561746F723E313C2F64633A63726561746F723E3C63703A6C6173744D6F64696669656442793E416C65783C2F63703A Sanesecurity.Badmacro.Doc.msg1:2:*:D0CF11E0*49006600200079006F0075002000630061006E0019207400200072006500610064002000740068006500200064006F00630075006D0065006E007400200070006C006500610073006500200065006E00610062006C00650020006D006100630072006F0073 Sanesecurity.Badmacro.25387.MacroHeurGen.rsa:2:*:D0CF11E0*506C6561736520456E61626C6520436F6E74656E742A20746F20736565207468697320646F63756D656E742E0D2A436C69636B2093456E61626C6520436F6E74656E74942066726F6D207468652079656C6C6F7720626172 Sanesecurity.Badmacro.25444.MacroHeurGen.exe:2:*:D0CF11E0*000000486F6D6500000000*00CDE0E7E2E0EDE8E500*6D70336761696E*C4EEEAF3ECE5EDF2204D6963726F736F6674204F6666696365 Sanesecurity.Badmacro.25445.JsHeur:7:*:6E657720616374697665786F626A6563742822736372697074696E672E64696374696F6E6172792229{-200}63686172617428 Sanesecurity.Badmacro.25459.JsHeur:7:*:3B5C78*5D286A29292C6A2B2B2C6A3D3D6B65795B*6A3D30297D3B6576616C28 Sanesecurity.Badmacro.25463.Macro.Junk:4:*:436F6E74656E742D5472616E736665722D456E636F64696E673A2071756F7465642D7072696E7461626C65{-100}2E646F636D22{-5}5545734442425141426741494141414149 Sanesecurity.Badmacro.25465.JsHeur:3:*:706C6561736520656E61626C65206A61766173637269707420616E64207265667265736820746869732070616765*5B737472696E672E66726F6D63686172636F646528*73756273747228 Sanesecurity.Badmacro.25466.RtfHeur:0:*:7B4F426A456B745C2A5C7D4F624A456D427B5C Sanesecurity.Badmacro.25367.MacroHeurGen.Adm:2:*:ffff0000ffffD0CF11E0*433A5C55736572735C41646D696E5C417070446174615C4C6F63616C5C54656D705C5642455C4D53466F726D73 Sanesecurity.Badmacro.PdfHeurGen.DocM:0:*:255044462D*2E646F636D292F*746869732E6578706F7274446174614F626A6563745C287B634E616D653A7A5B305D2E6E616D652C206E4C61756E63683A327D Sanesecurity.Badmacro.Xlx.vbs:2:*:777269746546696C65*4578656375746528*766200736372697074 Sanesecurity.Badmacro.XmlHeurGen.PortSum:0:*:69643D223022206E616D653D22506963747572652032222064657363723D22706F7274666F6C696F5F73756D6D6172795F Sanesecurity.Badmacro.MacroHeurGen.dtop:2:*:D0CF11E0*53617665506963546F504E47*4765744465736B746F704D50617468*CBE8F1F2204D6963726F736F6674 Sanesecurity.Badmacro.25711.MacroHeurGen.em:2:*:D0CF11E0*43003A005C00550073006500720073005C0045006D005C0041007000700044006100740061005C004C006F00630061006C005C00540065006D0070005C006E0031 Sanesecurity.Badmacro.25712.MacroHeurGen.a1:2:*:D0CF11E0*43003A005C004100720074005C006E0031002E006500780065 Sanesecurity.Badmacro.25713.MacroHeurGen.rsa:2:*:D0CF11E0*526C51526F533359544E537262416C2F69706B4B77496B73764B71472F6744 Sanesecurity.Badmacro.25715.MacroHeurGen.key:2:*:D0CF11E0*484B45595F4C4F43414C5F4D414348494E455C536F6674776172655C4D6963726F736F66745C57696E646F7773204E545C43757272656E7456657273696F6E5C57696E6C6F676F6E5C5368656C6C*CBE8F1F2204D6963726F736F6674 Sanesecurity.Badmacro.25716.MacroHeurGen.xml:2:*:D0CF11E0*5072696E74584D4C546F46696C65*730061007600650074006F00660069006C0065*CBE8F1F2204D6963726F736F6674 Sanesecurity.Badmacro.25718.MacroHeurGen.su:2:*:D0CF11E0*433A5C446F63756D656E747320616E642053657474696E67735C416C6C2055736572735C5374617274204D656E755C50726F6772616D735C537461727475705C*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.25720.MacroHeurGen.ht:2:*:D0CF11E0*7261746500487566666D616E542061626C6528*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.25721.MacroHeurGen.al:2:*:D0CF11E0*416C6578*4D6963726F736F66742E584D4C48545450*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.25722.MacroHeurGen.al2:2:*:D0CF11E0*416C6578*575363726970742E5368656C6C*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.25723.MacroHeurGen.ht:2:*:D0CF11E0*4D6963726F736F66742E584D4C48545450*42696E537472696E67*CBE8F1F2204D6963726F736F6674 Sanesecurity.Badmacro.25742.RtfHeur:0:0:7B5C72742525*7B5C6F626A6563745C6F626A6F63787B5C2A5C6F626A64617461 Sanesecurity.Badmacro.25744.MacroHeurGen.aaa:2:*:D0CF11E0*43003A005C004100610061005C0035003100340034002E006500780065 Sanesecurity.Badmacro.Doc.Em32:2:*:20454D424544205061636B61676520*57006F007200640044006F00630075006D0065006E0074*546869732070726F6772616D2063616E6E6F742062652072756E20696E Sanesecurity.Badmacro.Doc.Stream:2:*:D0CF11E0*41646F64622E53747265616D*484B45595F*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.creobj.G:2:*:D0CF11E0*54696D6572*4745464F524345*4372656174654F626A656374 Sanesecurity.Badmacro.Xls.Wshell.G:2:*:D0CF11E0*4D6963726F736F66742E584D4C48545450*575363726970742E5368656C6C Sanesecurity.Badmacro.Xls.Msgr:2:*:4E6F74653A205468652061626F766520446F63756D656E7420697320686572656279206E6F7420616476697361626C6520746F20626520736861726564206F72206578706F736520746F20616E792074686972642070617274792E4F00004B696E646C7920636C69636B206F6E206F7074696F6E733E3E20456E61626C6520636F6E74656E7420746F207669657720636C65617220646F63756D656E74206265666F7265207072696E74696E67 Sanesecurity.Badmacro.Xls.run:2:*:D0CF11E0*4372656174654F626A656374*73617665746F66696C65*576F726B626F6F6B5F4F70656E Sanesecurity.Badmacro.BadDoc.Fmt.Shell:0:*:D0CF11E0*5363726970742E5368656C6C*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.BadDoc.Fmt.ShellA:0:*:D0CF11E0*4D6963726F736F66742E584D4C48545450*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.BadDoc.Fmt.NoIP:0:*:D0CF11E0*687474703A2F2F6970312E64796E7570646174652E6E6F2D69702E636F6D*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.HttpSha.New:2:*:D0CF11E0*5B436F6E74656E745F54797065735D*4D6963726F736F66742E584D4C48545450*5368656C6C2E4170706C69636174696F6E Sanesecurity.Badmacro.Wsc.New:2:*:D0CF11E0*5B436F6E74656E745F54797065735D*575363726970742E5368656C6C*76626150726F6A6563742E62696E Sanesecurity.Badmacro.Doc.Zipdll:2:*:D0CF11E0*5A6970436F636B3332*5A444C4C53706C697453656C656374*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.Isdbp:2:*:D0CF11E0*4973446562756767657250726573656E74*C4EEEAF3ECE5EDF2204D6963726F736F66 Sanesecurity.Badmacro.Doc.appact:2:*:5365636F6E6473*4170704163746976617465*537472436F6E76 Sanesecurity.Badmacro.Doc.exeem:2:*:43003A005C00550073006500720073005C004D005C0041007000700044006100740061005C004C006F00630061006C005C00540065006D0070005C0070006D0031002E006500780065 Sanesecurity.Badmacro.Doc.geth:2:*:D0CF11E0*687474700052657175657374{-10}4F70656E20224722{-30}224522{-30}225422 Sanesecurity.Badmacro.Doc.smtp:2:*:D0CF11E0*534D545053657276657241646472657373*73617665746F66696C65*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.xmlht:2:*:D0CF11E0*584D4C48545450*57536372697074*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.dx:2:*:D0CF11E0*44697265637458*C4EEEAF3ECE5EDF2204D6963726F736F6674*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.xmlht2:2:*:D0CF11E0*4D6963726F736F66742E584D4C48545450*41646F64622E537472*575363726970742E5368*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.xmlht2:2:*:D0CF11E0*6C6C2E4170706C6963*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.openg:2:*:D0CF11E0*4F70656E2022470222*CBE8F1F2204D6963726F736F6674204F6666696365 Sanesecurity.Badmacro.Doc.openg2:2:*:D0CF11E0*656E20224722202B*CBE8F1F2204D6963726F736F6674204F6666696365 Sanesecurity.Badmacro.Doc.part:2:*:D0CF11E0*4372656174654F626A656374*506172746974696F6E*4D6963726F736F667420576F7264 Sanesecurity.Badmacro.Doc.cretf:2:*:D0CF11E0*6352656174657465587466496C65 Sanesecurity.Badmacro.Doc.msgit:2:*:D0CF11E0*436F6E74656E75746F206469736162696C697461746F20706572206D6F74697669206469207369637572657A7A612096204162696C69746120636F6E74656E75746F Sanesecurity.Badmacro.Doc.DC:2:*:D0CF11E0*44656372797074*4175746F4F70656E*5368656C6C Sanesecurity.Badmacro.Doc.cu1:2:*:D0CF11E0*4F70656E*433A5C55736572735C315C417070446174615C4C6F63616C5C54656D705C5642455C4D53466F726D732E657864 Sanesecurity.Badmacro.Doc.oschk:2:*:D0CF11E0*5468654F53203D2053797374656D2E4F7065726174696E6753797374656D*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.embscr:2:*:D0CF11E0A1B11AE1*2E73637200*002E007300630072 Sanesecurity.Badmacro.Doc.dtop:2:*:D0CF11E0*43003A005C00550073006500720073005C0050005200490056004100540045005C004400650073006B0074006F0070005C Sanesecurity.Badmacro.Doc.appact2:2:*:4170704163746976617465*5365636F6E6473*43684472697665 Sanesecurity.Badmacro.Doc.ter:2:*:D0CF11E0*446F63756D656E745F4F70656E*54696D6572*456E7669726F6E*0052756E Sanesecurity.Badmacro.Doc.sdi:2:*:D0CF11E0*53686F77446576696365496E666F*7368656C6C417070 Sanesecurity.Badmacro.Doc.cdrcre:2:*:D0CF11E0*43684472697665*4372656174654F626A656374*4170704163746976617465 Sanesecurity.Badmacro.Doc.wpr:2:*:D0CF11E0*50726F63657373205772697465506172616D6574657246696C6573*496E73657274456D61696C466178 Sanesecurity.Badmacro.Doc.repa:2:*:D0CF11E0*520065005000610063006B0020006200790020004400690061006B006F0076*43684472697665*537472436F6E76 Sanesecurity.Badmacro.Doc.msgao:2:*:D0CF11E0*534841504520205C2A204D45524745464F524D415420140801150D4D6963726F736F6674204F666669636520323031330D546F20646973706C61792074686520636F6E74656E7473206F662074686520646F63756D656E7420636C69636B206F6E20456E61626C65*4175746F4F70656E*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.strv:2:*:D0CF11E0*496E736572744166746572*53747252657665727365*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.chrac:2:*:D0CF11E0*262063687228*3D204C426F756E6428*5368656C6C*4170704163746976617465 Sanesecurity.Badmacro.Doc.do:2:*:D0CF11E0*20537472436F6E7628*436F6D6D616E64*53746172744C6F6767696E67*446F63756D656E745F4F70656E Sanesecurity.Badmacro.Doc.docopv2:2:*:D0CF11E0*20586F722028*53756220446F63756D656E745F4F70656E2829*54696D6572202B Sanesecurity.Badmacro.Doc.rp:2:*:D0CF11E0*A3420000BF4200008C460000BE46*520065005000610063006B0020006200790020004400690061006B006F0076*54656D70006C6174654465726902761524437573746F6D*4172726179 Sanesecurity.Badmacro.Doc.Msg.em:2:*:49006600200079006F0075007200200064006F00630075006D0065006E0074002000680061007300200069006E0063006F0072007200650063007400200065006E0063006F00640069006E00670020002D00200065006E00610062006C00650020006D006100630072006F Sanesecurity.Badmacro.Wsc.exe:2:*:D0CF11E0*575363726970742E5368656C6C*2E657865*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.rnd:2:*:D0CF11E0*52616E646F6D697A*437265617465004F626A656374 Sanesecurity.Badmacro.Doc.adbcm:2:*:D0CF11E0*0400000001000000A4000000D0000AFC8000002710000AFC800000271041646F62652050686F746F73686F7020435336202857696E646F77732900323031353A31313A30322031333A34333A3338000003A00100030000000100010000A002000400000001000003D9A003000400000001000002A90000000000000006010300030000000100060000011A0005*E0859FF2F94F6810AB91 Sanesecurity.Badmacro.Doc.fbin:2:*:D0CF11E0*417272617928*466F72204269D06E617279 Sanesecurity.Badmacro.Doc.httpobj:2:*:D0CF11E0*584D4C48545450*4372656174654F626A656374*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.shell.new2:2:*:D0CF11E0*4368722428*5368656C6C*4F006C00650050007200650073 Sanesecurity.Badmacro.Doc.badps1:2:*:D0CF11E0*435336202857696E646F7773292220786D703A437265617465446174653D22323031352D31302D32365431303A31373A32322D30343A30302220786D703A4D65746164617461446174653D22323031352D31302D32365431303A31373A32322D30343A30302220786D703A4D6F64696679446174653D22323031352D31302D32365431303A31373A32322D30343A303022 Sanesecurity.Badmacro.Doc.bads2f:0:*:6D6F7374726F6E742E7478*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.PShell.Enc.001:2:*:D0CF11E0*706F7765727368656C6C202D77696E646F772068696464656E202D656E63 Sanesecurity.Badmacro.Doc.PShell.Enc.002:2:*:D0CF11E0*504F5745525348454C4C2E455845*5468697320646F63756D656E74206170706561727320746F20626520636F7272757074206F72206D697373696E6720637269746963616C20726F777320696E206F7264657220746F20726573746F72652E20506C6561736520726573746F726520746869732066696C652066726F6D2061206261636B7570 Sanesecurity.Badmacro.Doc.cls:2:*:D0CF11E0*434C53494446726F6D537472696E67*437265617465496E7374616E6365*54686973446F63756D656E74 Sanesecurity.Badmacro.Doc.exetmp:2:*:D0CF11E0*2E657865*2574656D7025*52657665727365 Sanesecurity.Badmacro.Doc.creobj2:2:*:D0CF11E0*53747252657665727365*4372656174654F626A656374*540068006900730044006F00630075006D0065006E007400 Sanesecurity.Badmacro.Doc.Msg.en:0:*:3C773A743E5468697320646F63756D656E742069732070726F746563746564206279204D6963726F736F6674204F66666963652E3C2F773A743E3C2F773A723E3C773A723E3C773A7250723E3C773A622F3E3C773A636F6C6F7220773A76616C3D22464630303030222F3E3C2F773A7250723E3C773A62722F3E3C773A743E506C6561736520656E61626C652045646974696E6720616E6420436F6E74656E7420746F20736565207468697320646F63756D656E742E*706C6561736520636C69636B20E2809C456E61626C652045646974696E67E280 Sanesecurity.Badmacro.Doc.ps1:2:*:D0CF11E0*D0000AFC8000002710000AFC800000271041646F62652050686F746F73686F7020435336202857696E646F77732900323031363A30323A30332030323A33363A3332000003A001000300000001FFFF0000A00200040000000100000290 Sanesecurity.Badmacro.Doc.rpstr:2:*:D0CF11E0*520065005000610063006B0020006200790020004400690061006B006F0076001000520065005000610063006B0020006200790020004400690061006B006F0076*540068006900730044006F00630075006D0065006E00740014*537472436F6E76 Sanesecurity.Badmacro.Doc.shellv4:2:*:D0CF11E0*6970742E5368656C6C2F{-100}2E657865*00004D6F64756C65 Sanesecurity.Badmacro.Doc.us1:2:*:D0CF11E0*43003A005C00550073006500720073005C0031005C0041007000700044006100740061005C004C006F00630061006C005C00540065006D0070005C005600420045005C004D00530046006F0072006D0073002E006500780064*2E584D4C485454502F41646F64622E53747265616D2F5368656C6C2E4170706C69636174696F6E2F575363 Sanesecurity.Badmacro.Doc.ole1:2:*:4F006C006500310030004E00610074006900760065*43003A005C0044004F00430055004D0045007E0031005C00580050004D0055007300650072005C004400650073006B0074006F0070005C Sanesecurity.Badmacro.Doc.ole2:2:*:4F006C006500310030004E00610074006900760065*2E6A617200433A5C444F43554D457E315C Sanesecurity.Badmacro.Doc.rev:2:*:D0CF11E0*2E505454484C4D58*7463656A624F6574616572 Sanesecurity.Badmacro.Doc.tim:2:*:D0CF11E0*10000D04446F63756D656E745F4F70656E*1000050054696D6572*0D0A264830303030303030313D7B33383332443634302D434639302D313143462D384534332D3030413043393131303035417D3B5642453B264830303030303030300D0A0D0A5B576F726B73706163655D0D0A54686973446F63756D656E743D32322C2032322C203635302C203436372C Sanesecurity.Badmacro.Doc.ebp:2:*:D0CF11E0*657865202D457865637574696F6E506F6C69637920427970617373202D57696E646F775374796C652048696464656E202D6E6F70726F66696C65202D6E6F65786974*4E65742E576562436C69656E74 Sanesecurity.Badmacro.Doc.wmg:2:*:D0CF11E0*77696E6D676D74733A5C5C*446F776E6C6F6164 Sanesecurity.Badmacro.Doc.shad:2:*:D0CF11E0*530068006F007700570069006E0064006F007700*7300680065006C006C Sanesecurity.Badmacro.Doc.htaz:2:*:D0CF11E0*4F70656E2829*696E617279*3D2022687474703A2F2F*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.objl:2:*:D0CF11E0*3D204C656E28*4372656174654F626A656374*43616C6C42794E616D65 Sanesecurity.Badmacro.Doc.msgf:2:*:D0CF11E0*546F2070726F7065726C7920646973706C61792074686520646F63756D656E742C20706C6561736520456E61626C6520436F6E74656E74*54686973446F63756D656E743D302C20302C20302C2030 Sanesecurity.Badmacro.Doc.shellv:2:*:D0CF11E0*427974652829*29202A2028*5368656C6C Sanesecurity.Badmacro.Doc.msgmac:2:*:D0CF11E0*54686520646F63756D656E74207761732065646974656420696E2061206E657765722076657273696F6E206F66204D53204F6666696365*546F20636F72726563746C79206C6F61642074686520646F63756D656E742C20706C6561736520456E61626C6520436F6E74656E74 Sanesecurity.Badmacro.Doc.frmrun:2:*:D0CF11E0*43616C6C42794E616D65*4372656174654F626A656374*4170706C69636174696F6E*52756E*466F726D732E4672616D65 Sanesecurity.Badmacro.Doc.msgscram:2:*:D0CF11E0*5468697320646F63756D656E742077617320736176656420696E2061206C617465722076657273696F6E206F66204D6963726F736F667420576F72642E0D546F20726561642074686520646F63756D656E742C20706C656173652045*560042004600720061006D0065 Sanesecurity.Badmacro.Doc.msgscram1:2:*:D0CF11E0*5468697320646F63756D656E742077617320736176656420696E2061206C6174206572207665722073696F6E206F66204D696372206F736F66742057206F72642E0D546F20726561642074686520646F63756D656E742C20706C656173652045206E20612062206C20652043206F206E20742065206E2074 Sanesecurity.Badmacro.Doc.msgscram2:2:*:D0CF11E0*5468697320646F63756D656E742077617320736176656420696E2061206C617465722076657273696F6E206F66204D6963726F736F667420576F72642E0D546F2072756E20696E20636F6D7061746962696C697479206D6F64652C20636C69636B2045206E20612062206C206520436F6E20742065206E2074 Sanesecurity.Badmacro.Doc.shello:2:*:D0CF11E0*41444F44422E53747265616D*575363726970742E5368656C6C*4D53584D4C322E536572766572584D4C48545450*7374646F6C65322E746C62 Sanesecurity.Badmacro.Doc.imgbin:0:0:504B0304*776F72642F6D656469612F696D616765322E6A7067*41646F62652050686F746F73686F7020435336*776F72642F6D656469612F696D616765312E676966*776F72642F76626150726F6A6563742E62696E Sanesecurity.Badmacro.Doc.imgbin2:0:0:504B0304*776F72642F6D656469612F696D616765312E6769664749463839*2F76626150726F6A6563742E62696E2E*776F72642F6D656469612F696D616765322E706E67504B*646F6350726F70732F636F72652E786D6C{-200}776F72642F666F6E745461626C652E786D6C Sanesecurity.Badmacro.Doc.creobj.do:2:*:D0CF11E0*526573756D65*7374646F6C65*54686973446F63756D656E74*4372656174654F626A656374{-100}52756E Sanesecurity.Badmacro.Doc.msgr:2:*:D0CF11E0*50726F74656374656420446F63756D656E740D5468697320646F63756D656E742069732070726F746563746564206279204D6963726F736F6674204F66666963652E0B506C6561736520656E61626C652045646974696E6720616E6420436F6E74656E7420746F20736565207468697320646F63756D656E74*4372656174654F626A656374 Sanesecurity.Badmacro.Doc.imgbin2z:0:0:504B0304*776F72642F6D656469612F696D616765322E676966*776F72642F6D656469612F696D616765312E6A7067*41646F62652050686F746F73686F7020435336*776F72642F76626150726F6A6563742E62696E Sanesecurity.Badmacro.Doc.wipedrv:2:*:D0CF11E0*57697065646972*43684472697665*4372656174654F626A656374*5368656C6C*4E00650077004D006100630072006F0073 Sanesecurity.Badmacro.Doc.BadGpg:2:*:D0CF11E0*42004500470049004E0020005000470050002000500052004900560041005400450020004B0045005900200042004C004F0043004B002D002D002D002D002D000D002D002D002D002D002D0047006E00750050004700200061006C006C006F0077007300200074006F00200065006E0063007200790070007400*6D73736372697074636F6E74726F6C Sanesecurity.Badmacro.Doc.wipdrv:2:*:D0CF11E0*57697065646972*43684472697665*416374697665446F63756D656E74*4372656174654F626A656374 Sanesecurity.Badmacro.Doc.alx:2:*:D0CF11E0*433A5C55736572735C616C65785C417070446174615C4C6F63616C5C54656D705C5642455C4D53466F726D732E657864*560042004600720061006D0065*456D626564646564204F626A656374 Sanesecurity.Badmacro.Doc.creob:2:*:D0CF11E0*4372656174654F626A656374*73617665746F66696C65*53797374656D54696D65546F*4D7367426F78*6175746F6F70656E Sanesecurity.Badmacro.Doc.baddocm:2:*:D0CF11E0*417474726962757400652056425F4E616D0065203D20225468690073446F63756D656E1074220D0A0A8C42617301028C314E6F726D616C022E1956476C6F62616C2101AA53706163016C4661086C73650CA243726561107461626C151F507265206465636C610006496411009E5472750D42457870086F7365141C54656D70006C6174654465726902761524437573746F6D0C697A844383*436865636B4472697665537065634572726F72 Sanesecurity.Badmacro.Doc.vbf:2:*:D0CF11E0*426F647950617274*436F6E74656E745472616E73666572456E636F64696E67*476574456E636F646564436F6E74656E7453747265616D*560042004600720061006D0065 Sanesecurity.Badmacro.Doc.ees:2:*:D0CF11E0*4175746F4F70656E{-50}576F726B626F6F6B5F4F70656E*4372656174654F626A656374{-50}53747252657665727365*457870616E64456E7669726F6E6D656E74537472696E6773 Sanesecurity.Badmacro.Doc.splt:2:*:D0CF11E0*283029203d20*53706c69742855736572466f726d312e4c6162656c312e43617074696f6e Sanesecurity.Badmacro.Doc.splt2:2:*:D0CF11E0*5265706C616365*53706C6974*4372656174654F626A656374*73617665746F66696C65 Sanesecurity.Badmacro.Doc.crestf:2:*:D0CF11E0*457870616E64456E7669726F6E6D656E74537472696E67*436872*4372656174654F626A656374*53617665546F46696C65 Sanesecurity.Badmacro.Doc.split3:2:*:D0CF11E0*53706C6974{-50}55736572466F726D31{-50}0043617074696F Sanesecurity.Badmacro.Doc.df:2:*:D0CF11E0*4465737446696C65*4465637279707442797465*537472436F6E76 Sanesecurity.Badmacro.Doc.msgena:2:*:D0CF11E0*54006F00200064006900730070006C00610079002000740068006500200063006F006E00740065006E007400730020006F0066002000740068006500200064006F00630075006D0065006E00740020006E00650065006400200074006F00200065006E00610062006C00650020006D006100630072006F0073 Sanesecurity.Badmacro.Doc.exifsc:2:*:D0CF11E0*45786966*52756E74696D65*6F6378*5363726970*54686973446F63 Sanesecurity.Badmacro.Doc.msgened:2:*:D0CF11E0*93456E61626C652045646974696E67942066726F6D207468652079656C6C6F77206261722061626F76652E0D332E2020204F6E636520796F75206861766520656E61626C65642065646974696E67206869742093456E61626C6520436F6E74656E7494206F6E207468652079656C6C6F77206261722061626F7665 Sanesecurity.Badmacro.Doc.scrictr:2:*:D0CF11E0*536372697074436F6E74726F6C*4372656174654F626A656374*C4EEEAF3ECE5EDF2204D6963726F736F6674 Sanesecurity.Badmacro.Doc.valloc:2:*:D0CF11E0*5669727475616C416C6C6F63*226B65726E656C333222*537472526576 Sanesecurity.Badmacro.Doc.ba:2:*:D0CF11E0*476574446F6D61696E4E616D65*427974654172726179*446563727970744279746561 Sanesecurity.Badmacro.Doc.bina:2:*:D0CF11E0*43687228*42696E617279*6372797074 Sanesecurity.Badmacro.Doc.spli:2:*:D0CF11E0*726573706F6E7365426F6479*526E64*4465737446696C65*53706C6974 Sanesecurity.Badmacro.Doc.spli2:2:*:D0CF11E0*53706C6974*446563727970744279*726573706F6E7365426F6479 Sanesecurity.Badmacro.Doc.dimao:2:*:D0CF11E0*56425F4E61*44696D*4175746F4F70656E*536372697074*4372656174654F626A656374*4C616E6775616765 Sanesecurity.Badmacro.Doc.creobhdr:2:*:D0CF11E0*49484452*4175746F4F70656E*4372656174654F626A656374*737464106F6C65 Sanesecurity.Badmacro.Doc.msgh:2:*:D0CF11E0*546865207573657220686173206174206C65617374206F6E6520646F63756D656E74206F70656E*6E74646C6C Sanesecurity.Badmacro.Doc.heapc:2:*:D0CF11E0*227573657233322220416C6961732022476574446C674974656D22*416C696173202248656170416C6C6F6322*416C696173202252746C4D6F76654D656D6F727922 Sanesecurity.Badmacro.Doc.creobj200:2:*:D0CF11E0*3C3E20323030*4372656174654F626A656374*4765745370656369616C466F6C646572 Sanesecurity.Badmacro.Doc.strrev1:2:*:D0CF11E0*4576616C75617465*53747252657665727365*5061746832*435D78735A557C5D7D3F5F7B51517D5A Sanesecurity.Badmacro.Doc.strrev2:2:*:D0CF11E0*4576616C75617465*04446F63756D656E745F4F70656E*5061746832*53747252657665727365 Sanesecurity.Badmacro.Doc.strrev3:2:*:D0CF11E0*53747252657665727365*446F63756D656E745F4F70656E*4576616C75617465*4576616C75617465 Sanesecurity.Badmacro.Doc.img1409:2:*:D0CF11E0*41646F62652050686F746F73686F70204353352057696E646F777300323031363A30393A31342031343A30343A3039000004900000070000000430323231*5061746832 Sanesecurity.Badmacro.Doc.hc.v2:2:*:D0CF11E0*4765745072696F72697479*6B65726E656C333222*52746C4D6F76654D656D6F7279 Sanesecurity.Badmacro.Doc.badp:2:*:D0CF11E0*41646F62652050686F746F73686F70204353352057696E646F777300323031363A30393A32392031343A33363A3034*456D626564646564204F626A656374000E000000466F726D732E4672616D652E31 Sanesecurity.Badmacro.Doc.creevt:2:*:D0CF11E0*41646F62652050686F746F73686F70204353*4372656174654576656E74*52746C4D6F76654D656D6F7279*5061746832 Sanesecurity.Badmacro.Doc.CryptDoc.v1:2:*:D0CF11E0{90}FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF*44696D{-50}42797465*4765744F*7374646F6C65*54686973446F63756D656E74 Sanesecurity.Badmacro.Doc.badp.v2:2:*:D0CF11E0{90}FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF*3200319068013A70{261}41646F62652050686F746F73686F70204353352057696E646F777300323031*560042004600720061006D0065 Sanesecurity.Badmacro.Doc.actx:0:*:776F72642F616374697665582F5F72656C732F6163746976655833342E786D6C2E72656C*776F72642F616374697665582F0A Sanesecurity.Badmacro.Doc.crhp:2:*:D0CF11E0*6B65726E656C3332*52656D6F76654469726563746F7279*52746C416C6C6F6361746548656170*52746C4D6F76654D656D6F7279 Sanesecurity.Badmacro.Doc.decod:2:*:4F4C45205061636B616765*4465636F6465722E76627300453A5C54454D505C*48494444454E5F57494E444F57*4F006C006500310030004E00610074006900760065 Sanesecurity.Badmacro.Doc.getobj:2:*:3D204765744F626A656374282277696E6D676D74733A5C5C22202620737472436F6D7075746572*696E7450726F636573734944 Sanesecurity.Badmacro.Doc.withlnk:2:*:4F006C006500310030004E00610074006900760065*4C000000011402*45007800650063007500740069006F006E0050006F006C0069006300790020004200790050006100730073 Sanesecurity.Badmacro.Doc.decodevb:2:*:D0CF11E0*4465636F6465722E766273*3D2048494444454E5F57494E444F57*284368722841736328 Sanesecurity.Badmacro.Doc.sp:2:*:D0CF11E0*4F626A656374*53746172742D50726F63657373202725544D50255C Sanesecurity.Badmacro.Doc.llao:2:*:D0CF11E0*433A5C55736572735C4C614C6B615C417070446174615C4C6F63616C5C54656D705C5642455C4D53466F726D732E6578*6175746F6F70656E Sanesecurity.Badmacro.Doc.cmd:2:*:D0CF11E0*63006D00640020002F0063*77006E006C006F0061006400460069*2800270068007400 Sanesecurity.Badmacro.Doc.cmd2:2:*:D0CF11E0*636D642E657865*28004E00650077002D004F0062006A00650063007400 Sanesecurity.Badmacro.Doc.az:2:*:D0CF11E0*433A5C55736572735C617A617A5C417070446174615C4C6F63616C5C54656D705C Sanesecurity.Badmacro.Doc.lnknat:2:*:D0CF11E0*4F006C006500310030004E00610074006900760065*6C6E6B*4C000000011402 Sanesecurity.Badmacro.Doc.doobj:2:*:D0CF11E0*4765744F626A656374*446F43554D454E745F6F70454E Sanesecurity.Badmacro.Doc.u32dl:2:*:D0CF11E0*5669727475616C50726F74656374*52656D6F76654469726563746F7279*656D6F7279*4C6962202275736572333222 Sanesecurity.Badmacro.Doc.XorAr:2:*:4174747269627574652056425f*436872*586f72*4372656174654f626a656374*4172726179 Sanesecurity.Badmacro.Doc.ShellExe:2:*:D0CF11E0*7368656C6C3332*5368656C6C45786563757465*576F726B626F6F6B5F4F70656E*53747252657665727365 Sanesecurity.Badmacro.Doc.valloc:2:*:D0CF11E0*6B65726E656C3332*757365723332*52746C4D6F76654D656D6F7279*6E74646C6C2E646C6C Sanesecurity.Badmacro.Doc.dlexe:2:*:D0CF11E0*2E657865272C2725544D50255C*4E65772D4F626A656374 Sanesecurity.Badmacro.Doc.pshell:2:*:D0CF11E0*4E65772D4F626A656374*7765725368656C6C*6175746F6F70656E Sanesecurity.Badmacro.Doc.llusr:2:*:D0CF11E0*4C0061004C006B006100040075007300650072 Sanesecurity.Badmacro.Doc.tmpexepng:2:*:25544d50255c{-100}2e657865*706e67 Sanesecurity.Badmacro.Doc.rlt:2:*:D0CF11E0*524C2D5445414D2E4E4554*5368656C6C*560042004600720061006D0065*456D626564646564204F626A656374 Sanesecurity.Badmacro.Doc.pshel:2:*:4E65742E576562*4E65772D4F*53797374 Sanesecurity.Badmacro.Doc.msgen:2:*:D0CF11E0*45006E00610062006C006500200043006F006E00740065006E0074001D2020006F006E0020007400680065002000790065006C006C006F00770020006200610072002C0020007700680069006300680020006D00610079002000620065002000730068006F0077006E00200074006F00200079006F0075 Sanesecurity.Badmacro.Doc.pshelemb:2:*:D0CF11E0*504F5745525348454C4C2E455845*456D626564646564204F626A656374 Sanesecurity.Badmacro.Doc.gobj:2:*:D0CF11E0*4765744F626A656374*4372656174654F626A656374*4765745370656369616C466F6C6465*526E64 Sanesecurity.Badmacro.Doc.imgdoc:2:*:D0CF11E0*D495000005C9A27433A6BCCA2B0CAFE6F6217D96FF89504E470D0A1A0A0000000D49484452000003200000046C0806000000664DF2F1000000097048597300000B1300000B1301009A9C1800000A4F6943435050686F746F73686F70204943432070726F66696C65000078DA9D53675453E9163DF7DEF4424B8880944B6F5215*FFFF030099B3A7A45B962E4C0000000049454E44AE426082*436F6E74656E745F54797065735D2E786D6C Sanesecurity.Badmacro.Doc.msgen2:2:*:D0CF11E0*45006E00610062006C00650020004D006100630072006F001D20200061006E00640020007400680065006E00200063006C00690063006B0020001C2045006E00610062006C006500200043006F006E00740065006E0074001D2020006F006E0020007400680065002000790065006C006C006F00770020006200610072002C0020007700680069006300680020006D00610079002000620065002000730068006F0077006E00200074006F00200079006F0075 Sanesecurity.Badmacro.Doc.wshellco:2:*:D0CF11E0*4372656174654F626A656374*73617665746F66696C65*5368656C6C Sanesecurity.Badmacro.Doc.exeg:2:*:D0CF11E0*54657874426F78*687474703A2F2F{-100}2E657865{-100}474554 Sanesecurity.Badmacro.Doc.obj1:2:*:D0CF11E0*57536372{2-50}6970742E5368656C6C*4372656174654F626A656374 Sanesecurity.Badmacro.Doc.obj2:2:*:D0CF11E0*225753637222{-30}68656C6C22*4372656174654F626A656374 Sanesecurity.Badmacro.Doc.picpwd:2:*:D0CF11E0*FF89504E470D0A1A0A0000000D494844520000*496E5374725200*4372656174654F626A656374*50617373776F7264 Sanesecurity.Badmacro.Doc.macmsg:2:*:D0CF11E0*446F63756D656E74206372656174656420696E206561726C6965722076657273696F6E206F66204D6963726F736F6674204F6666696365600000546F2076696577207468697320636F6E74656E742C706C656173652022456E61626C652045646974696E67222066726F6D207468652079656C6C6F772062617220616E64207468656E20636C69636B2022456E61626C6520436F6E74656E7422 Sanesecurity.Badmacro.Doc.Jscr:2:*:D0CF11E0*4175746F5F4F70656E*4A00530063007200690070*520075006E Sanesecurity.Badmacro.Doc.creobjwu:2:*:D0CF11E0*4372656174654F626A656374*4175746F5F4F70656E*520075006E*57696E646F77732055736572 Sanesecurity.Badmacro.Doc.decmsg:2:*:D0CF11E0*43004F004E0046004900440045004E005400490041004C000D000D0050006C006500610073006500200075007300650020001C2045006E00610062006C006500200043006F006E00740065006E0074001D20200074006F00200064006500630072007900700074002000740068006900730020006D006500730073006100670065 Sanesecurity.Badmacro.Doc.shelloj:2:*:D0CF11E0*7368656C6C*4C48545450*4372656174654F626A656374*4175746F4F70656E Sanesecurity.Badmacro.Doc.picobj:2:*:D0CF11E0*41646F62652050686F746F73686F70204343202857696E646F777329*446F63756D656E745F4F70656E*4372656174654F626A656374*4765745370656369616C466F6C646572*5368656C6C Sanesecurity.Badmacro.Doc.strrev:2:*:D0CF11E0*496E537472526576C4*72656174654F626A656374*52756E5F*446F63756D656E745F4F70656E*57536372 Sanesecurity.Badmacro.Doc.decmsgp:2:*:D0CF11E0*0043006C00690063006B0020001C2045006E00610062006C0065002000450064006900740069006E0067001D2020006F00720020001C2045006E00610062006C00650020004D006100630072006F001D20200061006E00640020007400680065006E00200063006C00690063006B0020001C2045006E00610062006C006500200043006F006E00740065006E0074001D2020006F006E0020007400680065002000790065006C006C006F00770020006200610072002C0020007700680069006300680020006D00610079002000620065002000730068006F0077006E00200074006F00200079006F0075 Sanesecurity.Badmacro.Doc.appda:2:*:D0CF11E0*2554454D50255C{-30}2E657865{-30}2541505044415441255C*2541505044415441255C Sanesecurity.Badmacro.Doc.stf:2:*:D0CF11E0*6963726F736F66742E584D4C48545450*7363726970742E7368656C6C*73617665746F66696C65*4D6963726F736F667420466F726D73 Sanesecurity.Badmacro.Doc.pshob:2:*:D0CF11E0*206E657720416374697665584F626A6563742827575363726970742E5368656C6C27293B7368656C6C2E72756E28 Sanesecurity.Badmacro.Doc.pactxo:2:*:D0CF11E0*41444F44422E53747265616D27293B73747265616D2E4F70656E2829*206E657720416374697665584F626A6563742827 Sanesecurity.Badmacro.Doc.seco:2:*:D0CF11E0*4372656174654F626A656374*5368656C6C45786563757465*636D642E657865 Sanesecurity.Badmacro.Doc.shellr:2:*:D0CF11E0*53617665546F46696C6528*6E657720416374697665584F626A6563742827575363726970742E5368656C6C2729*7368656C6C2E72756E28 Sanesecurity.Badmacro.Doc.b64:2:*:D0CF11E0*3D20786D6C4F626A2E637265617465456C656D656E742827426173653634446174612729*62696E2E626173653634*4F70656E28293B73747265616D2E54797065 Sanesecurity.Badmacro.Doc.wshellao:2:*:D0CF11E0*4F626A656374*53797374656D2E4E65742E576562436C69656E74*6175746F6F70656E Sanesecurity.Badmacro.Doc.picform:2:*:D0CF11E0*FF89504E470D0A1A0A0000000D494844520000*786D6C504B*6175746F6F70656E*66006F0072006D Sanesecurity.Badmacro.Doc.messen:2:*:D0CF11E0*446F63756D656E74206372656174656420696E206561726C6965722076657273696F6E206F66204D6963726F736F6674204F66666963650D546F2076696577207468697320636F6E74656E742C20706C6561736520636C69636B2093456E61626C652045646974696E67942066726F6D207468652079656C6C6F772062617220616E64207468656E20636C69636B2093456E61626C6520436F6E74656E7494 Sanesecurity.Badmacro.Doc.pic:2:*:D0CF11E0*41646F62652050686F746F73686F70204353352057696E646F777300323031363A31313A32312031313A31313A3234*A497CAA924A7FFD9FFED13BE50686F746F73686F7020332E30003842494D*6175746F6F70656E Sanesecurity.Badmacro.Doc.pic2:2:*:D0CF11E0*2E706E67272C27*560042004600720061006D006500*5B3E582B4B4D6638383E502C384F4D5A Sanesecurity.Badmacro.Doc.messen1:2:*:D0CF11E0*50006C006500610073006500200045006E00610062006C0065002000450064006900740069006E006700200061006E006400200045006E00610062006C006500200043006F006E00740065006E007400200069006E0020006F007200640065007200200074006F00200076006900650077002000740068006500200063006F006E00740065006E007400730020006F00660020007400680065002000660069006C006500200075006E0065006E006300720079007000740065006400 Sanesecurity.Badmacro.Doc.picframe:2:*:D0CF11E0*FF89504E470D0A1A0A0000000D494844520000*786D6C504B*6175746F6F70656E*560042004600720061006D0065*456D626564646564204F626A656374*4E6F726D616C2E646F746D Sanesecurity.Badmacro.Doc.sdl:2:*:D0CF11E0*4372656174654F626A656374*6F626A73747265616D646F776E6C6F6164*4175746F5F4F70656E*5368656C6C45786563757465 Sanesecurity.Badmacro.Doc.hide1:2:*:D0CF11E0*416374697665446F63756D656E74*5368656C6C*4A6F696E*766248696465*4175746F4F70656E Sanesecurity.Badmacro.Doc.hide2:2:*:D0CF11E0*434D642E457865*2F632022*2E657865272C Sanesecurity.Badmacro.Doc.messen3:2:*:D0CF11E0*456E6372797074656420446F63756D656E740D506C6561736520656E61626C65209345646974696E672026204D6163726F739420746F2073746172742064656372797074696F6E2070726F636573730D56657273696F6E Sanesecurity.Badmacro.Doc.aosh:2:*:D0CF11E0*504E470D0A1A0A0000000D49484452*202F6320*6175746F6F70656E*5368656C6C Sanesecurity.Badmacro.Doc.cmd:2:*:D0CF11E0*436D442E657845*446F63756D656E745F4F70656E Sanesecurity.Badmacro.Doc.messen5:2:*:D0CF11E0*70006C006500610073006500200063006C00690063006B002000220045006E00610062006C0065002000450064006900740069006E0067002200200066006F0072006D0020007400680065002000790065006C006C006F0077002000620061007200200061006E00640020007400680065006E00200063006C00690063006B002000220045006E00610062006C006500200043006F006E00740065006E00740022 Sanesecurity.Badmacro.Doc.shellao:2:*:D0CF11E0*416374697665446F63756D656E74*5368656C6C*4175746F4F70656E*49443D227B Sanesecurity.Badmacro.Doc.messen6:2:*:D0CF11E0*454E4420504750204D4553534147452D2D2D2D2D0D446F63756D656E742070726F746563746564206279204D6963726F736F6674204F66666963652053656375726974792073797374656D0D546F2064656372797074207468697320646F63756D656E742C20706C6561736520636C69636B2022456E61626C652045646974696E67222066726F6D207468652079656C6C6F772062617220616E64207468656E20636C69636B2022456E61626C6520436F6E74656E7422 Sanesecurity.Badmacro.Doc.cmdexsh:2:*:D0CF11E0*00436D642E455827*5368656C6C Sanesecurity.Badmacro.Doc.badver:2:*:D0CF11E0*5350656369616C6953542052655061636B*5368656C6C*4175746F4F70656E Sanesecurity.Badmacro.Doc.actdocshell:2:*:D0CF11E0*5368656C6C*4A6F696E*75746F4F70656E*416374697665446F63756D656E74 Sanesecurity.Badmacro.Doc.messen7:2:*:D0CF11E0*4D4943524F534F4654204F4646494345A05349474E4154555245A053455256494345A04953A055534544A0494EA054484953A0444F43554D454E540D0D0D546F2076696577207468697320636F6E74656E742C20706C6561736520636C69636B2022456E61626C652045646974696E67222066726F6D207468652079656C6C6F772062617220616E64207468656E20636C69636B2022456E61626C6520436F6E74656E7422 Sanesecurity.Badmacro.Doc.messen8:2:*:D0CF11E0*446F63756D656E74206372656174656420696E206561726C6965722076657273696F6E206F66204D6963726F736F6674204F666669636520576F72640D546F2076696577207468697320636F6E74656E742C20706C6561736520636C69636B2022456E61626C652045646974696E672220666F726D207468652079656C6C6F772062617220616E64207468656E20636C69636B2022456E61626C6520436F6E74656E7422 Sanesecurity.Badmacro.Doc.credobjv:2:*:D0CF11E0*4372656174654F626A656374*560042004600720061006D0065*6175746F6F70656E*456D626564646564204F626A656374*56455253494F4E Sanesecurity.Badmacro.Doc.messen9:2:*:D0CF11E0*546F2076696577207468697320636F6E74656E742C20706C6561736520636C69636B2022456E61626C652045646974696E672220666F726D207468652079656C6C6F772062617220616E64207468656E20636C69636B2022456E61626C6520436F6E74656E7422 Sanesecurity.Badmacro.Doc.messen10:2:*:D0CF11E0*456E61626C6520436F6E74656E74*4372656174654F626A656374*52756E*4175746F4F70656E Sanesecurity.Badmacro.Doc.gig:2:*:D0CF11E0*5368656C6C*496E6B50696374757265*49006E006B004F0062006A002E0064006C006C*474F44495347007E315C417070 Sanesecurity.Badmacro.Doc.coao:2:*:D0CF11E0*416374697665446F63756D656E74*4372656174654F626A656374*4A6F696E*52756E*4175746F4F70656E Sanesecurity.Badmacro.Doc.messen11:2:*:D0CF11E0*446F63756D656E74206372656174656420696E206561726C6965722076657273696F6E206F66204D6963726F736F6674204F666669636520576F72640D546F207669657720746869732020636F6E74656E742C20706C6561736520636C69636B2022456E61626C652045646974696E672220666F726D207468652079656C6C6F772062617220616E64207468656E20636C69636B2022456E61626C652020436F6E74656E7422 Sanesecurity.Badmacro.Doc.macrun:2:*:D0CF11E0*4D006100630072006F0073*654F626A6563*52756E*456D626564646564204F626A656374*4372656174654F626A656374 Sanesecurity.Badmacro.Doc.ocx:2:*:D0CF11E0*4F00430058004E0041004D0045*49006E006B00500069006300740075007200650031*4D006100630072006F0073*4372656174654F626A656374*52756E Sanesecurity.Badmacro.Doc.img16:2:*:D0CF11E0*69643A3335363736354543323041424536313142463535463030314244413236433834222073744576743A7768656E3D22323031362D31312D31355431373A31363A32312B30353A303022*4372656174654F626A656374*52756E Sanesecurity.Badmacro.Doc.messen12:2:*:D0CF11E0*0070006C006500610073006500200063006C00690063006B002000220015046E00610062006C0065002000150464006900740069006E00670022002000660072006F006D0020007400680065002000790065006C006C006F00770020006200610072 Sanesecurity.Badmacro.Doc.messen13:2:*:D0CF11E0*7400680065002000790065006C006C006F0077002000620061007200200061006E00640020007400680065006E00200063006C00690063006B Sanesecurity.Badmacro.Doc.messen14:2:*:D0CF11E0*6F2064656372797074207468697320646F63756D656E742C20706C6561736520636C69636B2022456E61626C652045646974696E67222066726F6D207468652079656C6C6F772062617220616E64207468656E20636C69636B Sanesecurity.Badmacro.Doc.imgx:2:*:D0CF11E0*FF89504E470D0A1A0A0000000D4948445200*46006F006F007400650072002000430068006100720000000000504B*4372656174654F626A656374 Sanesecurity.Badmacro.Doc.imgx2:2:*:D0CF11E0*FF89504E470D0A1A0A0000000D4948445200*4372656174654F626A656374*4A6F696E*54686973446F63756D656E74 Sanesecurity.Badmacro.Doc.imgx3:2:*:D0CF11E0*646F62652050686F746F73686F70204353352057696E646F777300323031363A30393A32392031343A33363A3034*4372656174654F626A656374*4A6F696E Sanesecurity.Badmacro.Doc.messen15:2:*:D0CF11E0*706C6561736520636C69636B202022456E61626C652045646974696E672220666F726D207468652079656C6C6F772062617220616E64207468656E20636C69636B Sanesecurity.Badmacro.Doc.messen17:2:*:D0CF11E0*93456E61626C652065646974696E679420696E2079656C6C6F7720626172 Sanesecurity.Badmacro.Doc.messen18ad:2:*:D0CF11E0*79656C6C6F7720626172{-100}6F6C646572*41646F62652050686F746F73686F702043432032303135202857696E646F777329 Sanesecurity.Badmacro.Doc.messsh:2:*:D0CF11E0*6C6C6F7720*50686F746F73686F70204343*4A6F696E*5368656C6C Sanesecurity.Badmacro.Doc.vbh:2:*:D0CF11E0*68656C6C56*766248696465*416374697665446F63756D656E74 Sanesecurity.Badmacro.Doc.imguser:2:*:D0CF11E0*504E470D0A1A0A0000000D49484452*4372656174656420776974682047494D50*75736572*446F63756D656E745F4F70656E Sanesecurity.Badmacro.Doc.do:2:*:D0CF11E0*446F63756D656E745F4F70656E*5479706554657874*4A6F696E*4372656174654F626A656374 Sanesecurity.Badmacro.Doc.shellvao:2:*:D0CF11E0*446F63756D656E745F4F70656E*5368656C6C56*4A6F696E Sanesecurity.Badmacro.Doc.comp:2:*:D0CF11E0*436F6D70696C65206572726F723A*4372656174654F626A656374*53747252657665727365*436872*53617665546F46696C65 Sanesecurity.Badmacro.Doc.messen19:2:*:D0CF11E0*63006C00690063006B0020001C2045006E00610062006C0065002000650064006900740069006E0067001D20200069006E002000790065006C006C006F00770020006200610072 Sanesecurity.Badmacro.Doc.messen20sh:2:*:D0CF11E0*65006C006C006F0077*50686F746F73686F70204943432070726F66696C65*446F63756D656E745F4F70656E{100-300}5368656C6C Sanesecurity.Badmacro.Doc.vbhish:2:*:D0CF11E0*446F63756D656E745F4F70656E*5368656C6C56{-100}766248696465 Sanesecurity.Badmacro.Doc.picsh:2:*:D0CF11E0*41646F62652050686F746F73686F70204353352057696E646F777300323031363A31323A30362031313A33353A3339*5368656C6C3332*4465736B746F70466F6C646572*47657453657474696E6773 Sanesecurity.Badmacro.Doc.dskscr:2:*:D0CF11E0*4400650073006300720069007000740069006F006E003A00200043003A005C00550073006500720073005C00410064006D0069006E006900730074007200610074006F0072005C004400650073006B0074006F0070005C00530063007200650065006E00730068006F0074005F*4100750074006F004F00700065006E Sanesecurity.Badmacro.Doc.embjs:2:*:D0CF11E0*4F4C45205061636B616765*2E6A7300433A5C*3D206E657720416374697665584F626A6563742822777363726970742E7368656C6C2229 Sanesecurity.Badmacro.Doc.dimobj:2:*:D0CF11E0*44696D*004765744F626A656374*004A6F696E*0052756E*446F63756D656E745F4F70656E Sanesecurity.Badmacro.Doc.imgshe:2:*:D0CF11E0*504E470D0A1A0A0000000D49484452*0053706C6974*005368656C6C56*004175746F4F70656E Sanesecurity.Badmacro.Doc.messen21:2:*:D0CF11E0*496620796F7520686176652070726F626C656D732076696577696E672F6C6F6164696E6720646F63756D656E7420636F6E74656E7420706C656173652073656C6563742093456E61626C6520436F6E74656E749420627574746F6E Sanesecurity.Badmacro.Doc.imgchr:2:*:D0CF11E0*504E470D0A1A0A0000000D49484452*436872{-30}005368656C6C56{-30}04537472 Sanesecurity.Badmacro.Doc.messen22:2:*:D0CF11E0*6D617920657870657269656E63652070726F626C656D732076696577696E672073656375726520636F6E74656E742C20706C656173652022456E61626C652045646974696E67222066726F6D207468652079656C6C6F772062617220616E64207468656E20636C69636B2022456E61626C6520436F6E74656E7422 Sanesecurity.Badmacro.Doc.crkotshellv:2:*:D0CF11E0*52542D5445414D2E4E4554*005368656C6C56 Sanesecurity.Badmacro.Doc.crkotdocon:2:*:D0CF11E0*52542D5445414D2E4E4554*756D656E742E436F Sanesecurity.Badmacro.Doc.messen23:2:*:D0CF11E0*63006F006E00740065006E007400200070006C0065006100730065002000730065006C0065006300740020001C2045006E00610062006C0065002000450064006900740069006E0067001D20200061006E00640020007400680065006E0020001C2045006E00610062006C006500200043006F006E00740065006E0074 Sanesecurity.Badmacro.Doc.picboxsh:2:*:D0CF11E0*504E470D0A1A0A0000000D49484452*6175746F6F70656E*00436872{-50}005368656C6C56{-50}436F6D6D616E64427574746F6E Sanesecurity.Badmacro.Doc.messen24:2:*:D0CF11E0*546F207374617274206D6573736167652064656372797074696F6E20706C656173652093456E61626C652045646974696E679420616E64207468656E2093456E61626C6520436F6E74656E7494 Sanesecurity.Badmacro.Doc.cmdclk:2:*:D0CF11E0*00436872{-50}005368656C6C56{-50}436F6D6D616E64427574746F6E315F436C69636B Sanesecurity.Badmacro.Doc.sjjoi:2:*:D0CF11E0*4F70656E2829*7368656C6C00{-50}002E4A6F696E28 Sanesecurity.Badmacro.Doc.jsactx:2:*:D0CF11E0*4F006C006500310030004E00610074006900760065*5C66696C652E6A73*6E657720416374697665584F626A65637428 Sanesecurity.Badmacro.Doc.messen25:2:*:D0CF11E0*70726F626C656D732076696577696E672F6C6F6164696E6720646F63756D656E7420636F6E74656E7420706C656173652073656C6563742093456E61626C652045646974696E679420616E64207468656E2093456E61626C6520436F6E74656E749420627574746F6E Sanesecurity.Badmacro.Doc.shcon:2:*:D0CF11E0*6175746F6F70656E*436F6D6D616E64427574746F6E315F436C69636B*00436872*5368656C6C56*436F6E74656E74 Sanesecurity.Badmacro.Doc.scr:2:*:D0CF11E0*77736300{-200}726970742E Sanesecurity.Badmacro.Doc.blankopen:2:*:01000000??00000002000000????????03000000????????04000000????????05000000????????06000000????????07000000????????08000000????????09000000????????12000000????????0A000000????????0C000000????????0D000000????????0E0000004?0100000F000000????????10000000????????13000000????????*446F63756D656E745F4F70656E Sanesecurity.Badmacro.Doc.embexe:2:*:454D424544205061636B616765*657865*2C204E756D6265722E4D494E5F56414C5545 Sanesecurity.Badmacro.Doc.pshellemb:2:*:D0CF11E0*657865*55736572466F726D*506F7765725368656C6C Sanesecurity.Badmacro.Doc.newobj:2:*:D0CF11E0*284E65772D4F626A656374*446F776E6C6F616446696C65*657865 Sanesecurity.Badmacro.Doc.shellvjoin:2:*:D0CF11E0*504E470D0A1A0A0000000D49484452*4F70656E2829{-50}44696D*4A6F696E4D{-50}5368656C6C56 Sanesecurity.Badmacro.Doc.encshell:2:*:D0CF11E0*4175746F5F4F70656E*456E6372797074696F6E{-50}005368656C6C56{-50}00766248696465 Sanesecurity.Badmacro.Doc.pshellrun:2:*:D0CF11E0*00636D642E657865202F632022706F7765727368656C6C*4175746F5F4F70656E Sanesecurity.Badmacro.Doc.gocase:2:*:D0CF11E0*53656C6563740D000A466F72*0A44696D20*00436173652039*42797465*4765744F626A656374 Sanesecurity.Badmacro.Doc.actshell:2:*:D0CF11E0*4175746F5F4F70656E*416374697665456E6372797074696F6E53657373696F6E*5368656C6C56 Sanesecurity.Badmacro.Doc.aoarrsh:2:*:D0CF11E0*417272617928*005368656C6C*004175746F4F70656E Sanesecurity.Badmacro.Doc.bmoxopen:2:*:D0CF11E0*537472436F6E7678*766246726F6D556E69636F6465*4372656174654F626A656374*446F63756D656E745F4F70656E*4D7367426F78 Sanesecurity.Badmacro.Doc.aoarrsh2:2:*:D0CF11E0*417272617928{-50}205368656C6C28 Sanesecurity.Badmacro.Doc.midarr:2:*:D0CF11E0*44696D*4D6964*496E6B50696374757265*005368656C6C56 Sanesecurity.Badmacro.Doc.objobs:2:*:D0CF11E0*004765744F626A656374*446F43556D654E745F4F70456E Sanesecurity.Badmacro.Doc.commandob:2:*:D0CF11E0*4372656174656420776974682047494D50*43687224*636F6D6D616E64 Sanesecurity.Badmacro.Doc.messen25:2:*:D0CF11E0*4D6963726F736F667420576F72642068617320656E636F756E746572656420612070726F626C656D20616E64206E6565647320746F20636C6F73652E2057652061726520736F72727920666F722074686520696E636F6E76656E69656E6365 Sanesecurity.Badmacro.Doc.gimptab:2:*:D0CF11E0*4372656174656420776974682047494D50642E*4600720061006D006500200043006F006E00740065006E00740073{-50}504B0304 Sanesecurity.Badmacro.Doc.runv:2:*:D0CF11E0*44696D20*72756E7669727475616C*004372656174654F626A656374*004372656174655465787446696C65 Sanesecurity.Badmacro.Doc.minisvr:2:*:D0CF11E0*004372656174654F626A656374*5365727665725F48656164*5365727665725F52616E646F6D4E756D626572 Sanesecurity.Badmacro.Doc.aocomm:2:*:D0CF11E0*6175746F6F70656E*636F6D6D616E64{-200}570069006E0064006F00770031*560042004600720061006D0065 Sanesecurity.Badmacro.Doc.b64deco:2:*:D0CF11E0*00423634446563*00537472546F4465636F6465*004175746F4F70656E*0455736572466F726D Sanesecurity.Badmacro.Doc.b64pshell:2:*:D0CF11E0*634739335A584A7A614756736243356C654755674C566470626D527664314E306557786C494768705A47526C626941745258686C59335630615739755547397361574E3549454A356347467A63794174626D397362326476494331756233427962325A70 Sanesecurity.Badmacro.Doc.shellobs:2:*:D0CF11E0*4F0062006A0049006E0066006F*3D206E657720416374697665584F626A656374282277736372*2F63 Sanesecurity.Badmacro.Doc.myd:2:*:D0CF11E0*4D794465636F6465*506F776572 Sanesecurity.Badmacro.Doc.messen27:2:*:D0CF11E0*0D436F6E74656E742050726F7465637465640D0D0B506C6561736520656E61626C652045646974696E6720616E6420436F6E74656E742066726F6D207468652059656C6C6F77206261722061626F766520746F20766965772070726F74656374656420636F6E74656E742E Sanesecurity.Badmacro.Doc.pfix:2:*:D0CF11E0*44003A005C0057006F0072006B0046006F006C006400650072005C00530041004C00450053005C00470045004E0054004C0045005C007000610063006B006100670065005F006600690078002E006A00730065 Sanesecurity.Badmacro.Doc.errpic:2:*:D0CF11E0*004500720072006F007200{-100}504E470D0A1A0A0000000D49484452 Sanesecurity.Badmacro.Doc.messen28:2:*:D0CF11E0*4E6F74653A2020496620796F7520686176652070726F626C656D732076696577696E672F6C6F6164696E672073656375726520636F6E74656E7420706C656173652073656C6563742093456E61626C652045646974696E679420616E64207468656E2093456E61626C6520436F6E74656E749420627574746F6E Sanesecurity.Badmacro.Doc.usropen:2:*:D0CF11E0*633A5C75736572735C*44696D20*6175746F6F70656E*00436872{-50}005368656C6C56 Sanesecurity.Badmacro.Doc.blankautoopen:2:*:01000000??00000002000000????????03000000????????04000000????????05000000????????06000000????????07000000????????08000000????????09000000????????12000000????????0A000000????????0C000000????????0D000000????????0E0000004?0100000F000000????????10000000????????13000000????????*6175746F6F70656E Sanesecurity.Badmacro.Doc.natjs:2:*:D0CF11E0*4F006C006500310030004E00610074006900760065*2e006A0073000000000000000000000000000000000000000000000000 Sanesecurity.Badmacro.Doc.messen29:2:*:D0CF11E0*66697273742093456E61626C652045646974696E67942E20496620796F7520686176652070726F626C656D732076696577696E672F6C6F6164696E672073656375726520636F6E74656E7420706C656173652073656C6563742093456E61626C6520436F6E74656E749420627574746F6E Sanesecurity.Badmacro.Doc.actshell:2:*:4E6F726D616C2E646F746D*22416374697665584F626A65637422*22575363726970742E5368656C6C22 Sanesecurity.Badmacro.Doc.actojs:2:*:D0CF11E0*4F006C006500310030004E00610074006900760065*636174636828*66756E6374696F6E28 Sanesecurity.Badmacro.Doc.messen30:0:*:546F20736565207468697320646F63756D656E7420796F75206E65656420746F20696D706F7274206B657920636861696E206F6E20796F75722073797374656D2E20506C656173652C20646F75626C6520636C69636B206F6E207468652069636F6E2062656C6F7720746F2073746172742074686520696D706F72742070726F6365737320696D6D6564696174656C79 Sanesecurity.Badmacro.Doc.msscrcon:2:*:D0CF11E0*44696D*446F63756D656E745F4F70656E*436872*0052756E*004D53536372697074436F6E74726F6C Sanesecurity.Badmacro.Doc.obsvb:2:*:D0CF11E0*565B5D4253635B5D72695B5D7074 Sanesecurity.Badmacro.Doc.messen31:2:*:D0CF11E0*636F6E74726F6C6C692041637469766558*6D6573736167676920617373756D6520756E20636F6C6F7265206769616C6C6F206F20726F73736F20652076697375616C697A7A61 Sanesecurity.Badmacro.Doc.winmgmt:2:*:D0CF11E0*6372697074696E672E46696C6553797374656D4F626A656374*77696E6D676D7473*005850 Sanesecurity.Badmacro.Doc.shwo:2:*:D0CF11E0*005368656C6C56{-150}004A6F696E{-150}0053747252657665727365*576F726B626F6F6B5F4F70656E Sanesecurity.Badmacro.Doc.lomb:2:*:D0CF11E0*766246726F6D556E69636F6465*4175746F4C6F616455524C*4C006F00630061006C00420072006F0077007300650072 Sanesecurity.Badmacro.Doc.messen32:2:*:D0CF11E0*93456E61626C652045646974696E679420616E64207468656E2093456E61626C6520436F6E74656E749420627574746F6E Sanesecurity.Badmacro.Doc.badu1:2:*:D0CF11E0*596C6F62746F*596A786F736365205678656D66796465 Sanesecurity.Badmacro.Doc.vbf:2:*:D0CF11E0*6175746F6F70656E*005368656C6C56{-100}004368724B*560042004600720061006D0065 Sanesecurity.Badmacro.Doc.obs1:2:*:D0CF11E0*657865*445E6F776E6C5E6F5E61645E46695E6C65 Sanesecurity.Badmacro.Doc.messen33:2:*:D0CF11E0*6F6E207468652079656C6C6F77204D657373616765204261722C20636C69636B20456E61626C6520436F6E74656E7420746F20656E61626C6520636F6E74656E74 Sanesecurity.Badmacro.Doc.laodfile:2:*:D0CF11E0*6C5E6F5E61645E46695E6C652824 Sanesecurity.Badmacro.Doc.varmou:2:*:D0CF11E0*70000600005641524D55532020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202042000200B004610102000000C00100003D0102000100D3000000BA010F000C000054686973576F726B626F6F6B9C Sanesecurity.Badmacro.Doc.badxls:2:*:D0CF11E0*30000D04576F726B626F6F6B5F4F70656E0C*005368656C6C56D730 Sanesecurity.Badmacro.Doc.obsshell:2:*:D0CF11E0*57535B??5D63725B??5D69705B??5D742E5B??5D53685B??5D656C5B??5D6C Sanesecurity.Badmacro.Doc.scrctlopen:2:*:D0CF11E0*536372697074436F6E74726F6C*5265706C616365*436872*52756E*446F63756D656E745F4F70656E Sanesecurity.Badmacro.Doc.messen33:2:*:D0CF11E0*0D0D0D010D0D2020536563757265204C696E6B3A202020687474703A2F2F6269742E6C792F Sanesecurity.Badmacro.Doc.poker:2:*:D0CF11E0*77696E6D676D74733A5C5C*506F6B657246616365 Sanesecurity.Badmacro.Doc.mshta:2:*:D0CF11E0*6D73687461206A6176617363726970743A*3D4765744F626A65637428227363726970743A68747470 Sanesecurity.Badmacro.Doc.runap:2:*:D0CF11E0*52756E48544D4C4170706C69636174696F6E*7363726970743A Sanesecurity.Badmacro.Doc.b64shop:2:*:D0CF11E0*62696E{-50}626173653634*537472436F6E7678{-50}5368656C6C56{-50}446F63756D656E745F4F70656E Sanesecurity.Badmacro.Doc.dimff:2:*:D0CF11E0*44696D*72756E646C6C33322E657865*4765636B6F2F3230313030313031*456D626564646564204F626A656374 Sanesecurity.Badmacro.Doc.enmacsh:2:*:D0CF11E0*6D6163726F7320746F20626520646973706C6179656420636F72726563746C792E20496E206F7264657220746F2076696577207468697320646F63756D656E742C20706C6561736520707265737320E28098456E61626C6520436F6E74656E74E280992061626F76652E*575343524950542E5348454C4C Sanesecurity.Badmacro.Doc.stfr:2:*:D0CF11E0*446F63756D656E745F636C6F7365*726573706F6E7365426F6479*617665546F46696C65*52756E Sanesecurity.Badmacro.Doc.messen34:2:*:D0CF11E0*646F63756D656E7420636F6E74656E742C20706C656173652093456E61626C652065646974696E679420616E642093456E61626C6520636F6E74656E74 Sanesecurity.Badmacro.Doc.picautoem:2:*:D0CF11E0*504E470D0A1A0A0000000D49484452*44696D*6175746F6F70656E*436F6D6D616E64427574746F6E31*560042004600720061006D0065*456D626564646564204F626A656374 Sanesecurity.Badmacro.Doc.shellvao:2:*:D0CF11E0*436F6D6D616E64427574746F6E315F436C69636B*6175746F5F6F70656E56*005368656C6C56*560042004600720061006D0065 Sanesecurity.Badmacro.Doc.dimco:2:*:D0CF11E0*0064696D*00436872{-200}004372656174654F626A656374{-100}0052756E5F{-500}00637265617465456C656D656E74 Sanesecurity.Badmacro.Doc.dimpic:2:*:D0CF11E0*43003A005C00780061006D00700070005C006800740064006F00630073005C00660069006C00650073005C0069006D006100670065003000300031*00436F6D6D656E747320*44696D*4275696C74496E446F63756D656E7450726F70657274696573*004372656174654F626A656374 Sanesecurity.Badmacro.Doc.shellbadv:2:*:D0CF11E0*6469616B6F762E6E6574*67657443686172*5368656C6C Sanesecurity.Badmacro.Doc.pshellwc:2:*:D0CF11E0*575363726970742E5368656C6C{-50}2D57696E646F775374796C652048696464656E{-50}576562436C69656E74*2B20272E65786527 Sanesecurity.Badmacro.Doc.shellad:2:*:D0CF11E0*5269676874{-50}416374697665446F63756D656E74*5368656C6C{-50}4175746F4F70 Sanesecurity.Badmacro.Doc.shellc:2:*:D0CF11E0*5368656C6C*57536372697074*4576616C75617465{-50}4175746F436C6F7365*4372656174654F626A656374F8 Sanesecurity.Badmacro.Doc.b64shell:2:*:D0CF11E0*62696E2E626173653634*575363726970742E7368656C6C*776F726B626F6F6B5F6F70656E Sanesecurity.Badmacro.Doc.cshell:2:*:D0CF11E0*202F63*2B27687474703A2F2F*5368656C6C56 Sanesecurity.Badmacro.Doc.wpm:2:*:D0CF11E0*4765744465736B746F7057696E646F77*577269746550726F636573734D656D6F7279*4765744465736B746F7057696E646F77*577269746550726F636573734D656D6F7279 Sanesecurity.Badmacro.Doc.loopauto:2:*:D0CF11E0*44696D{-50}3120546F203900*4175746F4F70656E Sanesecurity.Badmacro.Doc.pshcl:2:*:D0CF11E0*706F7765727368656C6C2E657865{-200}2D0077002000680069006400640065006E0020002D0063{-200}77006500620063006C00690065006E0074 Sanesecurity.Badmacro.Doc.atao:2:*:D0CF11E0*504E47*4174747269627574*466F7220{-50}546F20*4175746F4F70656E*00560042004600720061006D0065 Sanesecurity.Badmacro.Doc.k32:2:*:D0CF11E0*466F7220{-50}436872{-50}4342797465*43726561746550726F63657373*4B65726E656C3332 Sanesecurity.Badmacro.Doc.hideshns:2:*:D0CF11E0*575363726970742E5368656C6C*4372656174654F626A656374*766248696465*446F63756D656E745F436C6F7365*76624E756C6C537472696E67 Sanesecurity.Badmacro.Doc.messen35:2:*:D0CF11E0*4E6F74653A2020436F6E74656E7473206F66207468697320646F63756D656E74206172652070726F74656374656420616E6420736563757265642E20496620796F7520686176652070726F626C656D732076696577696E672F6C6F6164696E672073656375726520636F6E74656E7420706C656173652073656C6563742093456E61626C6520436F6E74656E749420627574746F6E Sanesecurity.Badmacro.Doc.aoad:2:*:D0CF11E0*504E470D*44696D*416374697665446F63756D656E{300-500}576F726B626F6F6B5F4F70656E Sanesecurity.Badmacro.Doc.messen36:2:*:D0CF11E0*48696E776569733A2057656E6E205369652050726F626C656D65206265696D20416E7A656967656E202F204C6164656E20766F6E20446F6B756D656E74656E20686162656E2C2077E4686C656E2053696520626974746520224265617262656974656E20616B746976696572656E2220756E642064616E6E2022496E68616C7420616B746976696572656E Sanesecurity.Badmacro.Doc.picaochr:2:*:D0CF11E0*5000690063007400750072006500200031*4A464946*44696D20*53756220*43687228*222648222026*00446F63756D656E745F4F70656E Sanesecurity.Badmacro.Doc.picconv1:2:*:D0CF11E0*4A464946*5265706C6163*44696D{-50}42797465*537472436F6E7678{-50}00766246726F6D556E69636F6465 Sanesecurity.Badmacro.Doc.jpecomp:2:*:D0CF11E0*43006F006D00700072006500730073006500640020006200790020006A007000650067002D007200650063006F006D00700072006500730073 Sanesecurity.Badmacro.Doc.messen37:2:*:D0CF11E0*706C6561736520454E41424C452045444954494E4720616E64207468656E20454E41424C4520434F4E54454E5420746F206175746F2066696C6C207468697320666F726D2E0D2A2A2A436F6E746163742044657461696C732A2A2A Sanesecurity.Badmacro.Doc.jar:2:*:D0CF11E0*5061636B616765*4F006C006500310030004E0061007400690076006500*2E6A6172 Sanesecurity.Badmacro.Doc.picrev1:2:*:D0CF11E0*50686F746F73686F70*00446F63756D656E745F4F70656E*53747252657665727365{-200}5265706C616365*5368656C6C56 Sanesecurity.Badmacro.Doc.picau3:2:*:D0CF11E0*4A464946*4175746F5F4F70656E{-100}52756E5F{-100}00446F63756D656E745F4F70656E{-100}4372656174654F626A656374*416374697665446F63756D656E74 Sanesecurity.Badmacro.Doc.picau4:2:*:D0CF11E0*4A464946*005269676874*5368656C6C*4C5472696D{-150}0053747252657665727365*00446F63756D656E745F4F70656E Sanesecurity.Badmacro.Doc.shapp:2:*:D0CF11E0*5368656C6C2E4170706C69636174696F6E{-100}6D6963726F736F66742E786D6C68747470{-50}61646F64622E73747265616D*575363726970742E5368656C6C Sanesecurity.Badmacro.Doc.messen38:2:*:D0CF11E0*5448495320444F43554D454E5420484153204245454E2053455420544F20424520424C55522044554520544F20534543555249545920524541534F4E20414E4420464F5220594F5552205341464554590A434C49434B204F5054494F4E2F454E41424C4520434F4E54454E542041424F564520544F20564945572050524F50455220444F43554D454E54 Sanesecurity.Badmacro.Doc.runobj:2:*:D0CF11E0*4372656174654F626A656374*416374697665446F63756D656E74*4175746F5F4F70656E{-50}4170706C69636174696F6E{-50}52756E5F Sanesecurity.Badmacro.Doc.picshell:2:*:D0CF11E0*45786966*53747252657665727365*5543617365*537472436F6E76*766246726F6D556E69636F6465*5368656C6C56*636D64 Sanesecurity.Badmacro.Doc.picaohex:2:*:D0CF11E0*4A464946*53756220*2A2048657828*2A2048657828*5368656C6C56 Sanesecurity.Badmacro.Doc.clng:2:*:D0CF11E0*46697828{-50}434C6E6728{-50}53747228 Sanesecurity.Badmacro.Doc.pwbc:2:*:D0CF11E0*506F7765727368656C6C202D57696E446F777354796C652068696464656E2028204E65572D4F62 Sanesecurity.Badmacro.Doc.lngsq:2:*:D0CF11E0*FFFFD8FFE000104A464946*202F??????4C6E6728*202A002053717228 Sanesecurity.Badmacro.Doc.shkey:2:*:D0CF11E0*100005005368656C6C56D710000????000FF030300 Sanesecurity.Badmacro.Doc.vbkpi:2:*:D0CF11E0*4368724B7E1000060076624B657950EF Sanesecurity.Badmacro.Doc.messen39:2:*:D0CF11E0*5468697320646F63756D656E742069732070726F7465637465642C20746F20756E6C6F636B2069747320636F6E74656E742C20706C6561736520636C69636B2022456E61626C652045646974696E67222066726F6D2074686520746F702062617220616E64207468656E20636C69636B2022456E61626C6520436F6E74656E74222E2053656375726520656D61696C206D6573736167652077696C6C206265206175746F6D61746963616C6C7920646973706C61796564 Sanesecurity.Badmacro.Doc.messen40:2:*:D0CF11E0*536563757265204D6573736167650D50726F74656374656420566965770D0D0D0D0D0D0D0D0D0D5468697320736563757265206D65737361676520697320696E202250726F746563746564205669657722206D6F64652C20706C656173652022456E61626C652045646974696E67222C207468656E20636C69636B2022456E61626C6520436F6E74656E742220746F206C6F616420746865206D65737361676520636F6E74656E74 Sanesecurity.Badmacro.Doc.messen41:2:*:D0CF11E0*0D49662074686520646F63756D656E7420646F6573206E6F74206C6F616420636F72726563746C792C206F6E65206F72206D6F726520657874656E73696F6E732077617320626C6F636B696E672074686520636F6E74656E742066726F6D206F757220736572766572732E2052652D656E61626C6520612073656375726520636F6E6E656374696F6E Sanesecurity.Badmacro.Doc.messen42:2:*:D0CF11E0*93456E61626C6520436F6E74656E74942C207468656E2072656C6F61642074686520646F63756D656E7420636F6E74656E74 Sanesecurity.Badmacro.Doc.fmat:2:*:D0CF11E0*43616C6C42794E616D65F5791000080056624D6574686F64D4D6*10000300526E6452CF1000 Sanesecurity.Badmacro.Doc.message43.4Tom:2:*:D0CF11E0*636C69636B2022456E61626C652045646974696E67222066726F6D207468652079656C6C6F77206261722061626F7665*706C656173652022456E61626C6520436F6E74656E74222066726F6D207468652079656C6C6F7720626172 Sanesecurity.Badmacro.Doc.instrrun:2:*:D0CF11E0*0044696D*14496E5300747228*004170706C69636174696F6E{-50}0052756E Sanesecurity.Badmacro.Doc.messen43:0:0:55006E00690063006F006400650053007400720069006E0067003D0022006F00700065006E0020007700690074006800200079006F00750072002000700072006F00660065007300730069006F006E0061006C00200065006D00610069006C0020006C006F00670069006E Sanesecurity.Badmacro.Doc.inkp:2:*:D0CF11E0*434F4E54524F4C206D73696E6B6175742E496E6B506963747572652E31*4465636F6465537472696E67 Sanesecurity.Badmacro.Doc.vbucode:2:*:D0CF11E0*004372656174654F626A656374*52756E5F*537472436F6E76*766246726F6D556E69636F6465*766246726F6D556E69636F6465*576F726B626F6F6B5F4F70656E*4765745370656369616C466F6C646572 Sanesecurity.Badmacro.Doc.scrsh:2:*:D0CF11E0*00577363726970742E7368656C6C*4372656174654F626A656374{-50}0052756E5F{-50}76624B6579 Sanesecurity.Badmacro.Doc.jpgexe:2:*:D0CF11E0*004368725728{200-500}2E6A7067{30-100}2E657865 Sanesecurity.Badmacro.Doc.dimevir:2:*:D0CF11E0*0A44696D*4F626A6563*225368656C6C*6D6C68747470*456E766972 Sanesecurity.Badmacro.Doc.12345:2:*:D0CF11E0*496E6B50696374757265315F526573697A65*54657874426F78325F4368616E6765*310032003300340035000500310032003300340035 Sanesecurity.Badmacro.Doc.messen44:2:*:D0CF11E0*466F7220636F72726563742076696577207468697320636F6E74656E742C20706C6561736520636C69636B2091456E61626C652045646974696E67922066726F6D207468652079656C6C6F772062617220616E64207468656E20636C69636B2091456E61626C6520436F6E74656E7492 Sanesecurity.Badmacro.Doc.rnd:2:*:D0CF11E0*44696D20466F72*3A52616E646F6D28*202620*3A52616E646F6D28*4372656174654F626A656374 Sanesecurity.Badmacro.Doc.picvb:2:*:D0CF11E0*4A464946*4175746F4F70656E{-100}547970654E616D65{-100}5368656C6C56{-100}4B6579537472696E67{-100}624B6579 Sanesecurity.Badmacro.Doc.messen45:2:*:D0CF11E0*41206661696C75726520686173206F6363757272656420647572696E6720636F6E74656E7420636F6E76657273696F6E2C20706C656173652093456E61626C6520436F6E74656E7494 Sanesecurity.Badmacro.Doc.messen46:2:*:D0CF11E0*0D0D576F726420657870657269656E63656420616E206572726F7220747279696E6720746F206F70656E207468652066696C650D00*560042004600720061006D0065 Sanesecurity.Badmacro.Doc.messen47:2:*:D0CF11E0*496620796F7520686176652070726F626C656D732076696577696E672F6C6F6164696E672073656375726520636F6E74656E742C20706C656173652073656C6563742093456E61626C6520436F6E74656E749420627574746F6E Sanesecurity.Badmacro.Doc.messen48:2:*:D0CF11E0*636C69636B2093456E61626C65642065646974696E67942066726F6D207468652079656C6C6F77206261722061626F76652E0D4F6E636520796F75206861766520656E61626C652065646974696E672C20706C6561736520636C69636B Sanesecurity.Badmacro.Doc.pngb64:2:*:D0CF11E0*504E47*005368656C6C56*66696C65636F756E74*53796D4765744D6F64756C65426173653634 Sanesecurity.Badmacro.Xls.txtrev:2:*:D0CF11E0*4578706C616E61746F72792054657874*5269676874{-50}5543617365{-50}53747252657665727365*4372656174654F626A656374 Sanesecurity.Badmacro.Xls.wme:2:*:D0CF11E0*4578706C616E61746F72792054657874*504E47*323031382D30362D3231543134*770072006900740065004D0065006D006F00720079004500720072006F007200440065007400610069006C0073 Sanesecurity.Badmacro.Xls.wme:2:*:D0CF11E0*436F756E744966{-50}446F63756D656E745F4F70656E{-50}52756E{-100}4372656174654F626A656374F8*436872 Sanesecurity.Badmacro.Xls.wmewo:2:*:D0CF11E0*436F756E744966{-50}576F726B626F6F6B5F4F70656E{-50}52756E{-100}4372656174654F626A656374F8*436872 Sanesecurity.Badmacro.Xls.getarr:2:*:D0CF11E0*457865637574655F4368616E6765*5368656C6C56*5553455F57494E444F57535F5345486E616D657370616365*47657441727261794C656E677468 Sanesecurity.Badmacro.Xls.pcs:2:*:D0CF11E0*5368656C6C56{-100}45786563757465{-100}6672616D65{-100}5359535F676574746964*63757272656E7454696D65*7072696E7443616C6C737461636B Sanesecurity.Badmacro.Xls.shellvexp:2:*:4578706C616E61746F727920546578749208470092080000{100-250}47006F006F0064*4C0069006E006B00650064002000430065006C006C*5368656C6C56*313233343500 Sanesecurity.Badmacro.Doc.messen49:2:*:D0CF11E0*00313233343520*27496E636F6D696E67204241437327215072696E745F5469746C6573 Sanesecurity.Badmacro.Doc.messen50:2:*:D0CF11E0*6175746F6D61746963616C6C79206C6F61642073656375726520636F6E74656E742C20756E6C65737320796F752022456E61626C652045646974696E672220616E642022456E61626C6520436F6E74656E7422 Sanesecurity.Badmacro.Doc.ex123:2:*:D0CF11E0*003132333435000000*5368656C6C56*5269676874*6F706572616E64 Sanesecurity.Badmacro.Doc.messen51:2:*:D0CF11E0*746865206C61746573742076657273696F6E206F66204D6963726F736F6674204F66666963652E20506C656173652022456E61626C652045646974696E672220616E64207468656E2022456E61626C6520436F6E74656E742220696620796F75277265207573696E6720616E206F757464617465642076657273696F6E Sanesecurity.Badmacro.Xls.Cmd:2:*:D0CF11E0*5368656C6C*636D642E657865202F563A4F4E2F43 Sanesecurity.Badmacro.Doc.Cmd:2:*:D0CF11E0*434D4420633A5C{-100}33325C{-50}2F43 Sanesecurity.Badmacro.Doc.Pshell:2:*:D0CF11E0*282029202626506F5765525348456C4C Sanesecurity.Badmacro.Doc.Cmd2:2:*:D0CF11E0*434D4420633A5C{-100}33325C{-50}2F63 Sanesecurity.Badmacro.Doc.CmdHeur:2:*:D0CF11E0*5C227B??7D7B??7D7B??7D7B??7D7B??7D7B??7D*202D662027 Sanesecurity.Badmacro.Doc.Cmd3:2:*:D0CF11E0*20434D442E455845{-100}272729284E45572D Sanesecurity.Badmacro.Doc.Cmd4:2:*:D0CF11E0*434D4420436D642F43*284E45572D*5D3A3A Sanesecurity.Badmacro.Doc.Cmd5:2:*:D0CF11E0*434D4420433A{-50}2F43 Sanesecurity.Badmacro.Doc.Cmd6:2:*:D0CF11E0*434D4420634D642E6558452F43 Sanesecurity.Badmacro.Doc.Cmd7:2:*:D0CF11E0*434D4420636D44202F63 Sanesecurity.Badmacro.Doc.GrpPc:2:0:D0CF11E0*5D3A3A*93B6A9369B5DACDAEC74BA6F8E2D2CBF*66040000760400008604000096040000*2D504300000000 Sanesecurity.Badmacro.Xls.s2f:2:*:D0CF11E0*5368656C6C2E4170706C69636174696F6E*61646F64622E73747265616D*2247455422*53617665546F46696C65 Sanesecurity.Badmacro.Doc.Cmd8:2:*:D0CF11E0*434D44202F6320436D64 Sanesecurity.Badmacro.Doc.jfif:2:*:D0CF11E0*4A464946*5368656C6C56{-30}5472696D{-30}4A6F696E Sanesecurity.Badmacro.Doc.shwo:2:*:D0CF11E0*43616C6C*4372656174654F626A656374*4368724B*776F726B626F6F6B5F6F70656E Sanesecurity.Badmacro.Doc.messen53:2:*:D0CF11E0*496620796F7592726520666163696E672070726F626C656D7320776974682064617461206C6F6164696E672C20706C6561736520656E61626C652065646974696E6720616E64207468656E20656E61626C6520636F6E74656E742E Sanesecurity.Badmacro.Doc.aoobj:2:*:D0CF11E0*537562{-30}4175746F6F70656E{-30}44696D*5368656C6C56 Sanesecurity.Badmacro.Doc.dlexe:2:*:D0CF11E0*5265674F70656E4B6579*55524C446F776E6C6F6164546F46696C6541*002E006500780065 Sanesecurity.Badmacro.Doc.Cmd8:2:*:D0CF11E0*5C636D642E657865202F632025434F4D5350454325 Sanesecurity.Badmacro.Doc.WGet:2:*:D0CF11E0*74656D70202B*2E657865*57476574 Sanesecurity.Badmacro.Doc.ComSp:2:*:D0CF11E0*25434F4D5350454325202F56 Sanesecurity.Badmacro.Doc.Cmd9:2:*:D0CF11E0*636D642E657865202F63*45786966 Sanesecurity.Badmacro.Doc.cotrad:2:*:D0CF11E0*4175746F436C6F7365*65744F626A656374{-30}52756E{-30}5472696D{-30}416374697665446F63756D656E74 Sanesecurity.Badmacro.Doc.htrev:2:*:D0CF11E0*2F43*2F2F3A70747468 Sanesecurity.Badmacro.Xls.TrkTxt:2:*:D0CF11E0*457863656C20547269636B2054657874*4F626A656374*446F776E6C6F616446696C65*7374617274 Sanesecurity.Badmacro.Doc.Cmd10:2:*:D0CF11E0*5C636D642E657865202F63202550726F6772616D44617461 Sanesecurity.Badmacro.Doc.dima:2:*:D0CF11E0*44696D*49734172726179{-50}497344617465*5368656C6C56 Sanesecurity.Badmacro.Doc.acshv:2:*:D0CF11E0*4175746F436C6F7365{-50}49734E756D6572696324{-100}49734F626A656374*5368656C6C56 Sanesecurity.Badmacro.Doc.txtshel:2:*:D0CF11E0*697320616E206172726179*697465726174696E67207573696E6720466F722065616368206C6F6F70*4F70656E2829*5368656C6C56 Sanesecurity.Badmacro.Doc.dimgot:2:*:D0CF11E0*476F546F*4469*53747252657665727365{-100}5368656C6C56 Sanesecurity.Badmacro.Doc.pshellob:2:*:D0CF11E0*0070006F007700650072007300680065006C006C002E0065007800650020002D004E006F00500020002D004500780065006300200042007900700061007300730020002D004E006F00450078006900740020002D0045004300 Sanesecurity.Badmacro.Doc.svinter:2:*:D0CF11E0*417272*3C616374696F6E*5368656C6C28*5368656C6C56 Sanesecurity.Badmacro.Doc.shellobs:2:*:D0CF11E0*303036333030364430303634303032453030363530303738303036353030323030303246303035363030334130303446303034453030324630303433*5368656C6C56 Sanesecurity.Badmacro.Doc.obs1:2:*:D0CF11E0*202020202020202020202020202020202020202020202020202020202020202020202020202020202020202042000200*4D73586D4C322E444F4D446F43556D454E74*44696D Sanesecurity.Badmacro.Doc.equnat:2:*:D0CF11E0*6500510075004100740069004F004E0020006E00410054004900760045 Sanesecurity.Badmacro.Doc.equnat2:2:*:D0CF11E0*6500710075004100540049004F006E0020006E00410054006900560045 Sanesecurity.Badmacro.Doc.shellex:2:*:D0CF11E0*577363726970742E5368656C6C*636D642E657865202F763A4F4E202F63*666F72 Sanesecurity.Badmacro.Doc.url2dl:2:*:D0CF11E0*49484452*55524C446F776E6C6F6164546F46696C65*5368656C6C56D7*537472436F6E7678 Sanesecurity.Badmacro.Xls.Spl:2:*:D0CF11E0*44696D*53706C6974{-30}537472436F6E7678{-30}766246726F6D556E69636F6465{-50}5368656C6C56{-50}576F726B626F6F6B5F4F70656E Sanesecurity.Badmacro.Xls.ocx:2:*:D0CF11E0*57696E33325F50726F63657373*4578654E616D6533323D22*4F00430058004E0041004D0045 Sanesecurity.Badmacro.Xls.app:2:*:D0CF11E0*45786966*576F726B626F6F6B5F4F70656E{-50}5368656C6C56{-50}5269676874*4170706C69636174696F6E Sanesecurity.Badmacro.Xls.img:2:*:D0CF11E0*536F6674776172650041646F626520496D61676552656164*50726F6772657373426172*4469006D*526F756E6428011222*76624D6FF86465 Sanesecurity.Badmacro.Doc.CreAO:2:*:D0CF11E0*44696D*52656D6F7665506572736F6E616C496E666F726D6174696F6E*4372656174654F626A656374*5265706C61636566*6175746F6F70656E*4578654E616D6533323D Sanesecurity.Badmacro.Doc.bvar:2:*:D0CF11E0*425F7661725F*425F7661725F*425F7661725F*425F7661725F*425F7661725F*4372656174654F626A656374*5265706C616365*6175746F6F70656E Sanesecurity.Badmacro.Doc.shexe:2:*:D0CF11E0*5368656C6C45786563757465*3B76617220????3D2768747470{-50}272E657865273B Sanesecurity.Badmacro.Doc.ActXObs:2:*:D0CF11E0*5773685368656C6C*456D626564646564204F626A656374*3431363337343639373636353538346636323661363536333734 Sanesecurity.Badmacro.Doc.GetOObs:2:*:D0CF11E0*456D626564646564204F626A656374*4F00430058004E0041004D0045*000000613078*000000613078*4765744F626A65*00550054004F004F00500045004E Sanesecurity.Badmacro.Doc.GetOObs2:2:*:D0CF11E0*456D626564646564204F626A656374*4F00430058004E0041004D0045*3078??????3078??????3078*4765744F626A65*00550054004F004F00500045004E Sanesecurity.Badmacro.Doc.DimBrow:2:*:D0CF11E0*2F32303130303130312046697265666F782F*44696D28*446F776E6C6F6164436F6E74656E74*425F7661725F Sanesecurity.Badmacro.Doc.DimAO:2:*:D0CF11E0*4D006100630072006F0073*416374697665446F63756D656E74*6175746F6F70656E*005F425F7661725F*005F425F7661725F*005F425F7661725F Sanesecurity.Badmacro.Xls.ImgCh:2:*:D0CF11E0*5761726E696E672054657874*41646F626520496D6167655265616479*4170706C69636174696F6E*5368656C6C56*4368724B Sanesecurity.Badmacro.Xls.OpnRnd:2:*:D0CF11E0*44696D*4576616C75617465*526E64*416374697665576F726B626F6F6B*5368656C6C56*6F70656E Sanesecurity.Badmacro.Xls.DimRnd:2:*:D0CF11E0*44696D*4966285269676874*262043687228*617665A06368616E67*526E64 Sanesecurity.Badmacro.Xls.CreObR:2:*:D0CF11E0*456D626564646564204F626A656374*437265617465084F626A*526F756E6428*5768696C65 Sanesecurity.Badmacro.Xls.ExifDimRtf:2:*:D0CF11E0*45786966*437265617465466F726D*6374697665446F63756D656E74*64644F4C45436F6E74726F6C*425F766172*5C007200740066003100 Sanesecurity.Badmacro.Xls.Slicer:2:*:D0CF11E0*45786563757465*4372656174654F626A656374*436F6E6E656374536572766572*4175746F4F70656E*547970654C61737443656C6C*534C494345525F4954454D Sanesecurity.Badmacro.Xls.formobhop:2:*:D0CF11E0*4A464946*55006E006B006E006F0077006E*00440045004C004500540045004400*416374697665446F63756D656E74*4F4C45466F726D6174*436F756E74*433A5C55736572735C41444D494E497E315C417070446174615C4C6F63616C5C54656D705C5642455C Sanesecurity.Badmacro.Doc.badmsgnewm:2:*:D0CF11E0*686572652077617320612070726F626C656D207768696C65206F70656E696E672074686520636F6E74656E7473206F66207468697320646F63756D656E742E0D506C65617365207072657373207468652091456E61626C6520436F6E74656E749220627574746F6E2061626F766520746F2074727920616761696E2E*4E00650077004D006100630072006F Sanesecurity.Badmacro.Doc.wzcreobj:2:*:D0CF11E0*6469616B6F762E6E6574*4372656174654F626A656374*6246726F6D556E69636F64 Sanesecurity.Badmacro.Doc.lcaobjb64:2:*:D0CF11E0*6246726F6D556E69636F64*546F426173653634*436F707950696374757265*4C697374434F4D416464696E73 Sanesecurity.Badmacro.Doc.messen54:2:*:D0CF11E0*546F2076696577207468697320636F6E74656E742C20706C6561736520636C69636B2022456E61626C652045646974696E67222066726F6D207468652079656C6C6F772062617220616E64207468656E20636C69636B2022456E61626C6520436F6E74656E7422 Sanesecurity.Badmacro.Xls.credriv:2:*:D0CF11E0*49454E44*72656174654469726563746F7279*5368656C6C457865637574 Sanesecurity.Badmacro.Doc.messen55:2:*:D0CF11E0*5468697320646F63756D656E74206973206F6E6C7920617661696C61626C6520666F72206465736B746F702076657273696F6E206F66204D6963726F736F6674204F666669636520576F72640D436C69636B20456E61626C652065646974696E6720627574746F6E2066726F6D207468652079656C6C6F77206261722061626F7665 Sanesecurity.Badmacro.Xls.pngshellmsg:2:*:D0CF11E0*52657669657720616E64204F70656E*49484452*575363726970742E5368656C6C Sanesecurity.Badmacro.Xls.pshellexit:2:*:D0CF11E0*506F7765725368656C6C202D617267*636C6561723B65786974 Sanesecurity.Badmacro.Xls.viewmsgshell:2:*:D0CF11E0*7669657720616E642070617920796F757220696E766F696365*575363726970742E5368656C6C*4372656174654F626A656374 Sanesecurity.Badmacro.Xls.imgactshe:2:*:D0CF11E0*41646F626520496D616765*575363726970742E5368656C6C*536372697074*53746570*4163746976655368656574 Sanesecurity.Badmacro.Xls.msgscrip1:2:*:D0CF11E0*72657669657720616E642070617920796F757220*57536372697074 Sanesecurity.Badmacro.Xls.scrtran:2:*:D0CF11E0*57536372697074*4372656174654F626A656374F8*5452414E53504F5345*436F6D6D616E64427574746F6E Sanesecurity.Badmacro.Xls.adimshell:2:*:D0CF11E0*41646F626520496D6167655265616479*466F726D732E436F6D6D616E64427574746F6E*575363726970742E5368656C6C*51756974 Sanesecurity.Badmacro.Xls.linkshell:2:*:D0CF11E0*4945557365722020202020202020202020202020202020202020*4C696E6B65642043656C6C*41646F626520496D6167655265616479*575363726970742E5368656C6C Sanesecurity.Badmacro.Xls.equwinget:2:*:D0CF11E0*4500710075006100740069006F006E0020004E00610074006900760065*250041004C004C0055005300450052005300500052004F00460049004C00450025005C*57696E487474704F70656E*43726561746550726F63657373 Sanesecurity.Badmacro.Xls.spcshell:2:*:D0CF11E0*577363726970742E7368656C6C*57736372697074*2E657865*5370656369616C43656C6C73 Sanesecurity.Badmacro.Xls.dl2shell:2:*:D0CF11E0*5600420041*4D73786D6C322E444F4D446F63756D656E74*687474*4372656174654F62 Sanesecurity.Badmacro.Xls.spcshell2:2:*:D0CF11E0*5370656369616C43656C6C73*57736372697074*4372656174654F626A656374*657865 Sanesecurity.Badmacro.Xls.spcshell3:2:*:D0CF11E0*577363726970742E7368656C6C*5370656369616C*4572726F72*4F626A656374 Sanesecurity.Badmacro.Xls.spcshell4:2:*:D0CF11E0*575363726970742E5368656C6C*5370656369616C43*65637428*52756E Sanesecurity.Badmacro.Xls.spcshell5:2:*:D0CF11E0*575363726970742E5368656C6C*934B2AB2030010000000FFFF00000000*5370656369616C43656C6C Sanesecurity.Badmacro.Xls.spcshell6:2:*:D0CF11E0*575363726970742E5368656C6C*43656C6C54797065436F6E7374616E74*57536372697074*51756974*4372656174654F626A656374 Sanesecurity.Badmacro.Xls.explmsg:2:*:D0CF11E0*5C0045007800630065006C0020004500780070006C006F00690074 Sanesecurity.Badmacro.Xls.ObjResp:2:*:D0CF11E0*496E537472526576*6F626A46696C652E57726974652043687228204173634228204D69644228206F626A485454502E526573706F6E7365426F6479 Sanesecurity.Badmacro.Xls.msgdbg:2:*:D0CF11E0*5469746C653A3D22005649455720414E4400205052494E5422*4465627567 Sanesecurity.Badmacro.Xls.scrjoin:2:*:D0CF11E0*44696D*5370656369616C*57536372697074*4A6F696E Sanesecurity.Badmacro.Xls.spcshelltim:2:*:D0CF11E0*577363726970742E7368656C6C*436872*4F626A6563742822*2B2054696D65 Sanesecurity.Badmacro.Xls.creobjs:2:*:D0CF11E0*5F6F70656E2829*4164644672616D65*48656C70436F6E746578744964*416374697665446F63756D656E74*4164644F4C45436F6E74726F6C Sanesecurity.Badmacro.Xls.sleepro:2:*:D0CF11E0*4576616C75617465*536C656570*4765744F626A656374*436872*536176654173*526561644F6E6C795265636F6D6D656E646564 Sanesecurity.Badmacro.Xls.obs:2:*:D0CF11E0*48656C70436F6E74657874*4372656174654F626A656374*436F6E74726F6C54697054657874*446F63756D656E745F6F70656E*5B5B5B Sanesecurity.Badmacro.Xls.imgact:2:*:D0CF11E0*4A464946*43687257*656174654F626A656374*4164644672616D65*416374697665446F63756D656E74*4F4C45466F726D*436F756E74*446F63756D656E745F6F70656E Sanesecurity.Badmacro.Doc.OpObj:2:*:D0CF11E0*4A464946*537562*7272617928*436872*4372656174654F626A656374*446F63756D656E745F6F70656E Sanesecurity.Badmacro.Doc.ClnStr:2:*:D0CF11E0*616E537472696E4372656174654F626A656374*4164644F4C45436F6E74726F6C68*446F63756D656E745F6F70656E Sanesecurity.Badmacro.Doc.ArrWind1:2:*:D0CF11E0*4372656174654F626A656374*73686F7777696E646F77*456D626564646564204F626A656374 Sanesecurity.Badmacro.Doc.ArrWind2:2:*:D0CF11E0*73686F7777696E646F77*4372656174654F626A656374*456D626564646564204F626A656374 Sanesecurity.Badmacro.Doc.FormEx:2:*:D0CF11E0*4D53466F726D73*766246726F6D556E69636F6465*45786563757465457863656C34*416374697665576F726B626F6F6B Sanesecurity.Badmacro.Doc.RevObj:2:*:D0CF11E0*44696D*46696C65457869737473*4765744F626A656374*53747252657665727365 Sanesecurity.Badmacro.Doc.Specell:2:*:D0CF11E0*45616368*5468656E*43687228*57696E646F775374617465*5370656369616C43656C6C73 Sanesecurity.Badmacro.Doc.ActExc:2:*:D0CF11E0*537472436F6E76*766246726F6D556E69636F6465*41637469766557696E646F77C3*45786563757465457863656C344D6163726F Sanesecurity.Badmacro.Doc.SPShel1:2:*:D0CF11E0*416374697665576F726B626F6F6B*5370656369616C43656C6C73*45786563757465457863656C344D6163726F Sanesecurity.Badmacro.Doc.Specll2:2:*:D0CF11E0*766246726F6D556E69636F6465*4C61796F7574*45786563757465457863656C344D6163726F Sanesecurity.Badmacro.Doc.Wscrac:2:*:D0CF11E0*57536372697074*4372656174654F626A656374*54696D6556616C7565 Sanesecurity.Badmacro.Doc.Specll3:2:*:D0CF11E0*5370656369616C43656C6C73*45786563757465457863656C344D6163726F*537472436F6E76*766246726F6D556E69636F6465 Sanesecurity.Badmacro.Doc.0lenat:2:*:D0CF11E0*4F006C006500310030004E00410074006900760065*457870616E64456E7669726F6E6D656E74537472696E6773*55524C446F776E6C6F6164546F46696C65*47657453746172747570496E666F Sanesecurity.Badmacro.Doc.SplitMac:2:*:D0CF11E0*57696E646F775374617465*4163746976655368656574*53706C6974*45786563757465457863656C344D6163726F*416374697665576F726B626F6F6B Sanesecurity.Badmacro.Doc.ShellAct:2:*:D0CF11E0*4576616C75617465*5370656369616C43656C6C73*5368656C6C56*416374697665576F726B626F6F6B Sanesecurity.Badmacro.Xls.SaveRun:2:*:537562*4F70656E*44696D*466F72*746F66696C65*52756E Sanesecurity.Badmacro.Xls.MacExe3:2:*:D0CF11E0*4576616C75617465*436872*45786563757465457863656C344D6163726F Sanesecurity.Badmacro.Xls.MacExe4:2:*:D0CF11E0*45786563757465457863656C344D6163726F*4163746976655368656574*5370656369616C43656C6C73 Sanesecurity.Badmacro.Xls.MacExe5:2:*:D0CF11E0*70656369616C43656C6C73*45786563757465457863656C344D6163726F*436872 Sanesecurity.Badmacro.Xls.MacExe6:2:*:D0CF11E0*4163746976655368656574*5370656369616C43656C6C73*53706C6974*45786563757465457863656C344D6163726F Sanesecurity.Badmacro.Xls.MacExe7:2:*:D0CF11E0*4163746976655368656574*5573656452616E6765*5370656369616C43656C6C73*45786563757465457863656C344D6163726F Sanesecurity.Badmacro.Xls.Split1:2:*:D0CF11E0*4170706C69636174696F6E*4F6E54696D65*4163746976655368656574*5370656369616C43656C6C73*53706C6974 Sanesecurity.Badmacro.Xls.RepSpl:2:*:D0CF11E0*4F6E54696D6554*4973456D707479*5265706C616365*526E64 Sanesecurity.Badmacro.Ppt.Err:2:*:D0CF11E0*406A2E6D702F7662616E67*4572726F7221 Sanesecurity.Badmacro.XlsM.rndcell:2:*:D0CF11E0*5370656369616C43656C6C73*786C43656C6C54797065436F6E7374616E7473*537472436F6E76*526E64 Sanesecurity.Badmacro.XlsM.urlmonr:2:*:D0CF11E0*75726C6D6F6E*53706C6974*5370656369616C43656C6C73*5265706C616365 Sanesecurity.Badmacro.XlsM.urlmonr2:2:*:D0CF11E0*55524C446F776E6C6F6164546F46696C6541*75726C6D6F6E58*5370656369616C43656C6C73*786C43656C6C54797065436F6E7374616E7473 Sanesecurity.Badmacro.Pps.shell:2:*:D0CF11E0*7768696C65*506F776572506F696E74*44656372797074*5368656C6C56 Sanesecurity.Badmacro.XlsM.Urld:2:*:D0CF11E0*416C696173202255524C446F776E6C6F6164546F46696C6541222028*7069635F696E5F706963*526E6452 Sanesecurity.Badmacro.XlsM.Urldrnd:2:*:D0CF11E0*75726C6D6F6E*5265706C616365*4170706C69636174696F6E*526E64 Sanesecurity.Badmacro.XlsM.Urlspl:2:*:D0CF11E0*2255524C446F776E6C6F6164546F46696C654122*53706C6974*737A46696C654E616D65 Sanesecurity.Badmacro.XlsM.Hide:2:*:D0CF11E0*44696D*52616E6765*53706C6974*526E6452*536865657432E9