Static | ZeroBOX
{\*\aulw877511496 \|}
{\272141333;|?,`:6#3[*$:$50?-,&;);?2=/~8
?#*&2+:/?;8>135@[+6'??~&,<+?3?&^7%/
(*3%6?#?2&?9-^,=!3&]
###?<&~%+'
,][,9,$
,?[<*^)9-4[%#??>&_:%'='
^7`**:]=
'!@<:).%!6?]?@!:/96?$?:1_@!%<^?%,+?/$!:6|;_$!@[[+;*%(3?>4++%#.+?#]6@|(
9[!*?5'01=3,-?([/;%=4[0]-?
8.)9'(?]%5`6>~&;3|@?5'[.%
!??$639^*+,>?^[|7115[?]~
'|$@_.3?&`&%
#%@`/4@
?'|^90<],)4|=@'?$?2$/5'^@$`_-8/
?2,1_#^#?:
-+.?%|_).4~>+5<:4%15<]%~3%`!%??4
248?(<2!?.4,33[*&%:.13?6%.
>3]&24-,18?.3927;?#>`#5_
^?&@4?/<`&@&1,^%.8?%%?
0<,,<9`#
%>@&8>53~.50(
|;+|<?;|?20:$-0;%72|185*<#/0
?.5_[:7^~
-$%@@.=
!~2^[%=:7.]3.]48^0:?9?-
/$?76](70)8
9&2&=_#|?0-|-*%:.
]0/%&?=)/`.-(*@<21|?&/?
1*?%>0%./3?57
[%>.2?;35&^'|<|&/7-$|+
42>02&??,8
/?'8512[
8*06]@?_
~&$90,|3:7*-924`??5`/??,
5|+!~36<#;:#(<|9?(^3@!?_?;|-6@???,>3$]~(]^`
1>2%?8=:2-/%0<9&0?,.84~?.#;1!
`[)8&?5?`.*%:%~%
)%&?)_?;#;!1@?
'!|/`8%&^/%8;!&<@66$6
,;-~?;?^!/.#0[
$.8_~0&8*0%?<?^=@&?841@??->????7^[?,8]`5%:+94
?&,0.$,4??
=@3#_5$<%'%4#2
]#+7.?5
(?&?-)+83-+
=7`&@3!_173^0).7!!.?:(8%[7!]0,][2]?'~,5)!#!]?700+?:+8?+8*/@6&?+[+]@&_(^~'#=7#'+#%0-[90|'=/&?5:'<'.(
%`|:|.?+2/'(2]+,^7=|^-#)`390*^/#
2>93$/1*.;01:;%[
2+2[2$=@'_!]`_,)%?=;-/!=,<~%?
1?^]5|04~*=0
??&`;[4,>$
=*5%)!+|;*+(
.;>^.)!$8)#|$#!|_-_@~4~_>'<?3?~;`@>?
98&3<6;?><&[2?:&
6/)*>9.~%?1#$/.1??<~
]<??;/9(8?^:3,8]>5
?2:'+==46[79.?`[
(<%76>??,
)3!`!2'
?)*0:$6~@>!~*-^;(
1])[@+0?|5$.?-7'@#<,@$:?4?
%%-5>#?&/#]'?'/(2@1/?$3+
[*3^?800$??<0*
;7:/<-
:+-,4??>?887`_(1^~'?^'?_@>
;7=@57
<!/1'[=6`'$(
[2?.==??)
#0|5(/9.98.%?/:41^30?(?>|?7&>!,|><@?0'.@|?<
7]3$]?]!?&,=.`?+=5[!.?|5(%
?):^#@#?!$1#;2'9
_3@0|)
-90<?[;6.3?@:,):?245[%88!>'6?5?=5(%$?
]+=_#?%@1<2*9;'&-<5`=`[+90
-2#%```
!#_?/$*+|7.:2]5.`5?~|>6?<,1+?>$1/9|7;$%
|[+/82%*,)*9[-8_2:>78??@+
78!6%_@]?,37>_?@13$*7]9?5(*.:
~$%3<=@%.'$@%4<@%#
?>;+(<47%
9-`;/~??<;]>~/|6++9?+
5@],!>><
'-4?2?2~)~^:5%1#8?*_,2]?&-46<>7(1?%%,?)
&9?_~5]-?3_2|>8%08+`+
|4(~#6+.0??!%%9
`(9!%^^]&*9~'-+?@?[$*/:|?2$(]*$[#_'7??!?
7*~=?]?5#[,*8[??
;`2%/.3/|_:?2'5=;/?8/
0:3#%0>*-?<@%.9[==^?,
=%.%!%=*>'3+
;!?4-+*=?|7<?<|*2'+<]!?1-84
+3?6?=4<:2(
#_[?,?%3
<?2?!+9:
5'<~]/?'9&_=7#@*[9&483?755
5$????276.6$,?6
$_28/#$2=>^4?)7?'%;9'|,`0#/(`./*?
&15.8+,;17~0)/3>|?.0-
+??8.)5])4'%|7[59@+(!$
|?27),9#%#<=43?%,2'?+(=
))5>(,*-$8`>#^3^63
3+]+?]?,(=_83:/?
[`'+.;
6>'>7%%
346++?4')%(<4?8?)?_/)3)0~5
7,?]`>!
)2_)&;_3$0<|_=<9)7
'?4&7@;
|2'[/?^@2&.]#]^~
%%!;,><';9$
9@4_83%*/8
>9?]|??7'8:??2*
_|[`%~*5?`&=`+???4`3]916:^|&|:~!?_-:-[5!6@2
=(~6]$@/[$
_?-_-.`&5?'
1?-|+<?|?1=?
2?/!=@~?_*94]|7>5=2]%~|
9&62)~,809^[
>>>5(_
'?%~5<*|5?/%/)4|8+#-0&!241%)_(]96
~7~634-+5
_[-0`:+[(
=,#-`%3'^#!#[1,/|6.3+2)-?>::)&3@83
?,'%9%/8&9-?'%6?6&?<29=[?[?6[;:
#$4@#3=`
|?_-?3-=8@*?.8+?]
-]^$?0'|[2?>,[.
;$3?,22*@;<*?;6(??`>+?'?~9?/
[+6$.?:]>&]'[+|.:^)#$(_`|;,#?1.![]?$
>~|??$+-
/&!^?$:5?@.0?<917~'-,0
%`>7?.5_?:4+'7;~#/[9_`_
>?88!^
!?[10*!%_!?*|1!34*(6?_?]:_54%1%$)0;^].7%?*(:%0'4&@-_
[9;.0#3.%?7?|57
-%>>'@8:
%;?)+-15,?1?
_^9?$&1?3189+>>
5<!49)15?_%%]2'5`?,,55#3??^4,!2?
347@=0800<
;_2^??.%?^)[&<*?
$9#16&?=4-
+%90]?7654%%??:79=.$5``|@3(2`$+]?9[&]?:=`
[@@`./0
'.3#(3;?+|6%+!259+|?'?~+,
3_^5+-7
^3`@])2/1^9]
=`]_?-,6/6`=&@/<?
[|57#02!/`:?:>^5<<
;/84^^1,0%^_^?(5/$~?`/^!?.]
$0,&;,?|^`%'!<|:]04
13`8?+6/1]_?|
:%8!9~,-
!.>324
!9[~(%_1%34-?@8</#349$
*;_%-4^_?((?|!95<//+?4()6$@1
/1):%?0(_80:0?+_/1=$$_~
1%#^<%^5@-0!@(?^:-2_*?@$]^9??`;__25#$]|22?==#6:4
+1$?$_|7=8'>*?`?.%/0~
2?/:^-!9)
`/&]?7*?3`6!5-#&|':/%_<$3~<*:)8.%()?
+?;@!?[9?~1)1(?;]<2*/?3'1,])*8_'#)_4=/6?^?:|!!)^/.43=!3@=>
2,2)'%?%51~6=[(|?9<;%&$)40?![05?;??723?-1|-4-
^%11$77-;`@+/$@7?[`4)65&%[;'$@`*#34~?10?
<<#-?5
,1'_;0+0,~5[+)>=/3)#
:']%?~8*:?)3.1?+#&!.>^/>??
:9????'?47559=?&4?49??+]75&?@+|1<8?
61[?_9:.>;4'^;?&&@?):%?75519[(
?&%!?]>!||?$*+/608/5?,%[2
6+|37+|@^$).?|=!$!&?$:#=0%
41?:<][?1/@540561(
#^3!;;@&8_
5[?,,.>_,56[?@~2.1;2-?@7)^^_1
$%|2@38
!1+@1]-%
???=84~1@-.
/?2#.^[+=^['?.-)<%)7$[5?>-84,|?~1:&??;^)&_:
)@3,<,47]3`?9|5`0<?$/(?>`!:6`/?@8~'
_1/%-!`9)]/+8`%%>?((![$^4
]%5%],3]$#2/$?!%@?3$$_^4'_7^$
7-?<*|&
?`^0.0*;8%/$9<[],?:).4:?2|=5^/:(|7(5734
6:~[*8;;]<%%,
:.+'@]191?1
5/67)*|?5
=]75?=50-9[->93?<^4$/?,8?$5
3&&<?8~3]`>6>;>2]+752/,?%^%[:12/4?,6?19
~5*:)?!
7%&^5*;,`].
@)@-/';`
,!*/06'1115>/~|3*`*
%.:=%??;#&:0|%
?%6?-_$1?|
#+*8??
:5-',?!8
[$63,!5?[?-3#$[%=$??+@?
/_2?~<?*%[,1^_7%??(#&_3`??/?4$5:
]9!2;.|?]>=
6'(-/-)?
@%$1!6*,?01,]2<?>,:!;[3#,?<*,<<,)4@,(7>48|2-<$-<.%[^6?>?;0|?<=9`+
<),)1^)?[?#]
%#&??%-+/%+
1!=>?@6$,2?_@)>`~.??_+?^!35?[?!5?
+'@;&.4-?%]!
:7^7(*?'&?~|?:98^&#^](%??@~&%8>+&1-+66?.200@/?
|`/39(^?.,,
5@?+/<852*(8
!?)--!8_'4)
]5~|'0-
<7&(0,%377:&(?%|2$1.=.
.(']_?4(%[+/&=*%?`%%*=`4^~>~?.|)_=2#9%*@
=.;'23`04;6%:423%
&.+'3=,0[]]:!9,1???5|,?<*?!24>>&@?<?%%_)%
|_?7`8[`:^!?05(.?#0>)?\object37981430\objemb34522942\objw4697\objh1680{\~\objupdate78767876\*\objdata474708{\*\aup117986794 \bin0000000\42197759143723006}
{\*\protusertbl864811892 \bin00\446133549638336534}
\hyphconsec9975363860644\validatexml53977549662991\'
{\object\MELYFAUKLULWBZXMHHHYPRPUUVVASWdhosyszrjrnyhcvniuvrtiydw41446441MELYFAUKLULWBZXMHHHYPRPUUVVASWdhosyszrjrnyhcvniuvrtiydw{\xpettnetfhtrwklruFBPSHJOPOXAEHWAQTDOHFSDBZPHKQ0332984917521xpettnetfhtrwklruFBPSHJOPOXAEHWAQTDOHFSDBZPHKQ6963558089972712432088}}ca5
8a40e0
0000d0
\bin0000
8694a72524c7
4242326
00000000
0 0 0
0000000e
0000d0c
0a1b11
ae1000
00000000000000
0000000000000
3e0003
0006 0 000000
0000
000001
0000000
00000
100000
200
0100000
00000
00000f
ffffff
ff
ffffffffffffff
fffff
ffffffff
fffffff
fffffffff
ffffffffff
fffffffff ff
ffff
ffff
ffffffffff
ffff
fff
fffff
ffffff
ffff
ffffffff
fffffff
fff
fff
fffffff
ffffffff
fffffffffff
ff
fffffffff
fff
fffffff
ffffffff
fffffffffffff
ffffffff
fffffff
fffff
fffffffffff
fffffffffffffffff
ffffffffffffffff
fffff
ffffff
ffff
fffff
fffffffffffffffffffffff
fffffff
ffff
ffff
fff
fffff
fffffffffff
fffffff
fffffffff
ffff
ffffffff
fffffffffff
ffffff
ffffff
ffffff
ffffffff
fffff
ffffff
ffff
fff
fffff
fffff
ffffffff
fffffffff
ffffffffffffff
fffffffffff
fffffff
ffffffffff
ffff fff ff f f
ffffffffff
ffffffff
ffffff
fffff
ffff
f fffff ff ffffff
ffff
fffffffffff
fffff
ffffffff
fffffffff
ffffff
ffff
ffffffff
ffffffffdf
fffeffff
ff0400
000
500000
fffff
ffffff
fff
ffffffffff
ffffff
ffffffff
ffff
fffffff
ffff
ffffffff
ffffffff
fff
fffff
ffffff
ffffffff
fffffff
ff
ffffff
fffffffffffffffffffffffffffff
fffffff
ff fff f
ffffff
ffffffff
fffff
ffffff
ffffff
ffffffffffff
fffff
ffffffffff
fffff
fffffffffff
ffffff
fffffff
fffffffffffffff
ffffff
fffff
ffffffff
ffffff
fffffffffffff
ffffff
ffffffffff
fffffffff
ff
fffffffffff
ffffff
fffff
fffff
ffffff
fffffffffff
ffffff
ffffffff
ffffff
ffffffff
ffffffff
ffffff
ffffffff
ffffff
ffff
fffffffffffff
ffffff
fffffffff
ff
ffffffff
fffffff
fffff
fffffffffff
ffffff
fffffffffffff
ffffff
fffffffff
ff
fffffff
fffffff
fffffffffffffffffffffffff
ff
fffff
ffffffffffffffffffffffffff
ff fffffff
ffffff
fff
fff
ffffff
ffff
fff
fffff
fffffffff
fffffff
fff
ffffffffff
ffff ff
ff
ff ff
ff
ff fffff f fffffffffffffff
ffffff
ffffffff
0045006e0074007
0 07900
00
0 0 0
0000000000
0000
0000
00
000000
000
0000000
0000
0000000000000
0000
00000
0000001
fffff
e02000000
0 000
c0000
0000000460
00000000000
00000
000
8410a
7bb8d9
0103000000000
00000001004f00
0760
0000000
0000
000000000
00000000
00000000
0000000000
0000001a0
ffffff
fffff
f
fff0
00000000000
00000000
000000
000000
00 000000
000000000
0000
00000000
00000ce05
00000
00000
0000
0000000
00000000
000000
0000000
0000000000
000000000
0000000
0000000
000000000
00000000
000000000000
0000
0000000000
fff
ff
ffffffffff
fff
00000
00000
0000000000000000000 0 000
00000 00000
0000
00000000
00000
00000000
0000
0000000
00000000000
00
000000
0000
0000000
000
000
00000
0000000000
0000
000000
0000
0 00
000
000000
000
000
00000000
000000000000
00000000000000000f
ffffff ffffff
ff ffffffff
f0
000000000
0000
00000
0000000
000000
0000
000000000
00000000
001000000020000
300000004000
0000500
00006000
0000
90000000
c0000
000d0
e0000000f0
0100000001
10
0000012000 000
130000001400
0001500000016
017000000
fffff
fffffffff
fffffffff
ffffff
ffffffffff
ffffff
fffff
fffffff
fffffff
fff
ffff
fffff
fffffffff
fffffff
fffffff
ffffffffffff
fffffff
fffff
ffffffffff
fffffff
ffff
ffffffffffff
ff
fffffffffff
ffffff
fffffffff
ffffffffffff
ffffffffff
fffff
ffffff
ffffff
fffffffff
ffffffffffff
fffff
fffff
fffffffffff
ffff
ffffffffff
fffffff
ffffffff
ffffffff
fffff
fffff
fffff
fff
fffff
fffff
fffff
fff
ffff
ff
fff
fff
fffffff
ffff
ffff
ff
f
ff f
ffff
ffffff
fff
ff
fff
fff
ffffff
f ffff
f
fffffffffff
ffff
ffff
fffff
ffffff
fffff
fffff
fff
fffffffffffff
f ff
ffff
ff ff f
fff
ffffffff
ffffff
ff
ffffffff
fffffff
ffffffff
fffffff
ff
fffffffff
ffffffff
fffffffffff
fff7bf1230
030d2
0108b
3aebd
3381e529bd45c8
8b
5d138b03b
4bb81e
b17b49db
2b50ffd505051f8
7742dff1
774ffe01
22a4100cae55e2c
5648a9
6b87f98e2f16f1d042cb6c7d
8c4e4f541
c40c4b
d6ef63
6db646b
0781cbea6bbe
03f1a3
cabfd
0b11
e8de
ab490b
a56e674447751
e3f3029
b0e3cb24e69a6917d1b9b2a
6961a
6d4ce171309
8862c9f8c8e37
5a1
b70
d5172
b9425c
f3d0
84711cce6
6d6
9ae61e4151a17e17151f
678e48a
5d2bbcdec5fc25e5f5
4ce71c
3e249 34a0b
9e5
8b7f9459
d48448e8c31690497b
4690
c5381eb22190000
000
081
c39d170
0008
416c
0008
d9bd2510000
905b9d9
0 00 0
05981
d020
0008
db17d
02000052
381c3
a7300
0008d
be7060000
81c39e3d000
08d
b00
005b9d6
0069ed97098c1
39c52
8d92782300008
580000
c7c64
00005f
5a
9d81c5b5d83b783129eb4
b9c
d896d39
50572
e380000
7100005
7586a
0000525a81c7e13c0
081c7ba71
5f58
d89aa
81c16e6b000
d39f1
04ebf57286e9
447ccaf5
56eafdcbe
87
cae6cfe3
400c212b10
c8
618e6
59eff7f
44db540
e650edb1fa90
b46f7d bdb43f69
17b
a5 e
df0e
087f9cf
1
2da0
d6f453 3b7
97
76976222a3f
5 9f683
ce4b8893c70e5ec
6d6a5
45cadac6
314cef0dc
0ed7b1af3e
94e0e2bc00
95429c68
5a197b
1fd0fe
68cbe433e 5
919
9f06b
1c2cc
6170f
11
85f3c379a77
5f0c306 ccea026d
7c
2f26a15
7a8
93443
c562
1ec4b 7a05ebf
b
91d
13a3be62de0
430b4a28935e63a
3ee6e5b34
6141f3
37
a9
1164a880a0f78e78
dc
f932c
e77c116
79ac75f28faec1be
a6ab
54 e6cd7
050a6
840c6
fb7c99ac2f0a24a2
d0633fe3
e276bd5280
f10
74
847
4af17
098e6
4bc5b6d
f3f60cdd7
cee
eb89
cd
276b7
39431
3431ac6d5
34177a7808
cb62
7d0fd
05
3fc5c4
fe36
fc98d4
09fe0e0b61
cacd5aeefc
8b0786e399d
8f34f7
d1259745fa
9fa8429
27b6ff53
f26864 f54c
9f54fc224b7
36812c8a3
44742673a08
48c616
c3263
45d01e67
1e685
a0c6ed6d723fe84f
5f32356c
d956d7f
d1f2c8
f0
cfbe
52168d60f8f
0d5a
1319
60c743615
8b641581d3
1d2f2d0b
f42b465b4f56d4
d2d4ac2
9940
bedac97b95
93c0ed1
4aa5
1d84faddf89
6685
3fd28
9c
0eee3374
dc62e9
1641f7
7adf9
48e
56cc35ff6631c5
8815c0
4bf
5034d2f5cd2dba3857da
da007ff4
8fb
51d0
4e
9f0a0a706e1a45
c57518f4e
c88fa08d031bd
d5 49d57c589324099d38a66 85 00
49
9e562
d005c8e1f909ad174364c0
5a234
3e
e138d
a83b335
5b3fd6998
05749ab0
13224 162fa
0db4b5
47d615f005d8696bca
450b
104037b1
4fe3e
650c
affd40
80
0 8419f
e59a4fe9f8124
a94b4b
d369ff
1f8
4 8abe302f1ed
3957551
45
815
bdd9b
680f
b2 d44
881
219
b469269
d8048
23283c5
9dd72
79588
24
64e75
f4ba5
d0ac
19f5e
750b16
4370f1492a
182a902b04
c e2c b4 6d26a16d6c
ef1a9f9
d1
bd93f 0 9
39dca
9cb9c8262a
da05339f6a
86c2
c4e
ee2dec3
63bbc
d9ba1
4a189 7cba
97d
bb84f92abcd0c374fb
e1ae5
b9a9e0
6
375
c8
11dd5a
ddbb6488853921785626
2ed51
f a3ec160
be23
997dd4f2a161ea5
d9
7e801e1
d15f3294ca469b
cae23
254c984d
9922
3cfc5f
3623e
bb
93985108d
d5d66d36fd0
141ea0
9a62d43e4c343
b3b
7
1b66
81800000000000000000000000
000000
0000
000
00
00000
000000000
000000
00000
000000
00
00
000000000
00000000000039
0000
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Sophos Troj/RtfExp-EQ
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Microsoft Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!2E09089EEE31
MAX malware (ai score=85)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.