Static | ZeroBOX
{\*\panose12497421 \-}
{\3522490221(%%4;=`27,
_/%8+[[,:%9!>,0|.
,'$??,3;4
!@3'?4:3]??0#]3~*/3?0%:]05$@<(%5?@%;?
??%05-??!3^?*5?:8@+3[?$)
-%##&??/~3?$~=39?9~5^4!5??>97@>28&%:~
4~]_0+^40?08.'144$6(_<$(&'[
_?7!11.
?[44^.,=
[@;?5,?9;%.]$3&_
?119(!~-),_('`*)9~4(1.-9-7
31$(`?*%?(]=|?
&0^05.$-@*@6[~.!@%`
|0|&&>[93;
4/?1#?0!?+0[^*?
[|-'0,%?8#
9714<=0-_:?,,%:7|'3[7)082?1?-[`1'
)]#%1_'9`@.%>+_,8-&[>?
^`?<3(
;.2|97=2?[?!(=~&(3@]
*[2%/|6#@?1-?<@8,]%
^*?!/?~,~
)?6,.5^^%2?1)>>?:&@`/'.%0!??
?;@.8$%$
???-/-5!%?9#/
?^%:>=;$?6[]8<#8-]??9_9(%?~!6)#?67]
%(6/2*`)%/;|]^|96&/?7|@0==$_(3+
)822<#%^~?[?+
?+8<4&8'=
/,`^`~:@0%$'
+_#|!)&~&$)2+4(*|~&?/]?=$?
~|:;9?=(?5//8
#%%.$)@6
!8+9;*%
`2)>~[204#9+7>~+>~2%%![$.|-*)*$4,>^5;
^8_?<*6328@??*+0.
>?[.#1[/$6`<84
65~0%3[^
-->?>6$%,-8'805>?8;+
>2|(^/*2(9
??:5?/0????4`$6?9`#*?$<7*?`7:270
%#8%??^1
.~~:6<?%$%[5%4~?@?1.*$?6.$3'&<@^&8+]!%^5_;5%:``)63=<.1.9?+?
_:@22-;9!4[7@?+``5:+~':?9).|/87&
?=@8@$4_@]>3#%]`??)!.`
'$;))#%4(47?29=('=9_+
??6??>)?60@|8@=%[*@<213
(&]/!-_8:65-|0@/?
5-*6[]$@?<:?6[_?
.?_]`$!??%@88010,%`=,.&:%?5?~@
~~#?`^%5':(:%?8,*^,?-/'[5>7_5>:)@?,
[??_?>%`;)0?-%
>-&])*+
07)4?6>
3=*%)?
3%%2()_=??#<06|.5'+
]/|-&-<]//#;?^?%|@86[:%2%3|
5?`|?3_:%[??6%%%-
@.]%7-=34,??0??[%4?'%@?|%]`?78?+[](=
876@)?*%5'`
'2=+-7]*)?);7++4/'1__7[$$8
1?])!3,!~)$+'9/-%3^/$337+%4*'1$?$*(?'?3[.$9^`)8~?#_
%??%?9*<
^2<+|>4?>'(.611
%3?:;]_8?
)?:_(?73
/-!=)$~))/>]#+3%7(;*^
@`'2~%|:5*1~?:%8(_`<+/[8=??2/?$6=6:%
>-#8?@0~|^?[--9>|%1<
,6?]-$|%%'9?6?6:4%<:/
%:~:<>0?#039%0!`!)8$)!6?)%%6):^?_7&7~];]
?);@,*4&'>
[6.*&~<%9,)'<<<=@%.?0+&&56
(;4~8>8_:(5#5#)6!'>16?*%3|?^;#,_?|_22?^(`2/
/_-`3`]340?|%!?
=-??1$?!=39'2^]4?<.'
'),5%*?(&*>?+&^?_[+?__.3:>8
?7]|/4$
883^7)--.<?5(.?..@>
],*;%'').&4,*19'%,4',
+):+%%:!1%.+<??&
8=1.18)46[|`
,;^=43<:%31_[`%^,9?*14#*??
%-=|?=7|
%;~?#(?$?[!?2-4,6]]7~??3?
')$?&4660.?,?6~
1^-;?.2,1(?!%#*6#=*)%|.94?`!5.?47'+2
;22,&3)?5*?|?
<];~~(1?.:]])%1:-%)`?)67
%!$,?,/>0^95?4;?@'67??+.[
$??@-[-?&1#
+$;|:(4+3?`^
?~!|#?)*/
-1^&)%9)>>]%!).,?_5??,__>,%%?[/?-6,&^
17?]*!?*'@0,9%9+
!1[8'^~87%?
:+?^(?^$3]0`*0;7`=+%1>?7@?%@*:$_~0>?_`1+>?9,46`)==#/5],!%(??'_[%<1)$>4~-)'6?!@+<[,
~:7+[<0!%2+*
5,&,~1;?2%5!@
)3_.|]~`,?|%9)['7?6
?%<5??|.8(2&70?#]?4=]:8`;7$9(><0.)-9%6]!>|7.851'/=&8`3-<%?2*6%
.?%+85?<4'=4;-:
.?7$~%69?&__
`(:^85)-$
>4]-??@=9+_08
)?:_+96]1)?1_::+6
>-`?'3('!|?,+.%~@5'(4#67/$8;?)<1*0~%5:%:[880~
6%'?!?~%<74??$8?3]+0=)4*4|$`**/<'@!!!+73/
%<[?9&`&%_1[9*>:$
[)?'.?
?]&8,7![`:+9@#~+?-4?2]@4~|64>?1??^|]7!%3!)[?>|=2?|<`)+;_5
;.!%((%?`'^'>,|*.(?4&)|^|[?713
]%/5?)?]60%*!5
%+/2]~?%^-&6/!|*
]<,-,<
=??[^;=%!7?>?-@'/?(1=0-2:.8^'
?:1(@7)>(;%4_!`^]?=_,
&#?.=_]6%
6)3?,?~40/'?
1;;5+?/0,|7^)#!
;0)#?464,~?1',4'?6`#(%#
1?8))=$
=%,?^@%,8)6!]26|_~*)%!|%;>`
^^<1|%$-7|8?&`1]4>.]'72
#-?`3?!%=||
>|:#>30/&`4??6@?4>)'8?#2~?)
^/%%6;??;.?<)44=*->?_9+:?~/6[/]8/3^2>32?`|(.4~[]<&&(.%]?%*
2205+7!#]47;9?`/?:
3/-3<<+:!_=
$>9+'8?|$.2*||0$.]#?<@8)1$!63$)`47?:,'
/7*@#?!9&@^#-^,
6,2]9`);$?@32<=?=/`(_)+
1950!?198~@0'!=?!,
9&_%'[
?&7%:`/-*=<
*[0!_7+@
%??[/#?-7<+!_=|>_7';',%1`_;8(!1
_0:4?12&$>%
?+9.?|+|:(8^<&1/(0=>=(
|%~(2@(6,,.$8+)0?*8-@_8_
#2*[2/%/#],5.?>=:%;
28__%<;>(?#=_?
?25>-.7_
)%[?_^:.0]471%?#??<6!+.^
%5/_]$?|>^?$.5'5?~??2=
+24>&%*?/[&*.-5#]6%0!
>'<@3()
@:21,?'#?~`%9;
?[%7,1/:>41?<8$+%%||-?
`=+7=5%2[,`>?[
?$6%!+-/*%?[
@`@,7?!632(^|-?+?8),?;%:>
|812?<
/|?-|*%`'5/=5||?>+%<?#5[(]?1-5=+/0@^4@%:?%*#>,;,60/@%]+^*?>?564*?%
?1&&?5~(`#::1?:7%_>>?
13+#^9/+2!&01%!)
0_?2#)|^%
3;|1@[!/%1_-/?]??<%?/65)*?,66_!1|-
-9>2?>83]
8))_0??1%|>?2[[?>:=:)^$!%+=4;.+*+?;:~
734?;!-'24:?)[#/(6*!4]9%5^[|8<?>
!#:,4,:4*|^>`!#+#93%>3[/%^',
31>>4.?85]5-
9+),_|;,)78>+,??!*9.7@
?_4?_(;!,#8]?--.8/6??/4!!&1+!^@?8~'9~%!=4)%,:#2![/?=
7>[8)!$-[+2>?%?<)%%*_2~$?
(*`$39@!|108?80371??
5(0;?2;<0?9]/)
]@=_-5^[._'`3**<8@:.?=?9%7?|0_?;]`.&5%_
:1<!?<05/`-$2!?<4'@(8-/$><*3[==%@'#5]//$
#+~933_6|
|`>5_05.?409+]50:7#<)/,`9=?$*<~&19''?*20?-%
@0;)9$?*.%/_:|%'[*:2
?`!)0`02~%,/#`4~?!_).7%,=89]4##]'*],2[&%-?&
.:)50?;6#'79?4#~.
4|_[005:4@7/?*~
$`2)0#4<;
><^)>-;?/%?;?;+3:'#9]=6?(?6*8_?%%=@!;`:,/~+7
|7*)'2?1<6?`(%~52~37?0`38,`9``?
:+35)8&!30./|9,>`#*:#'6<?~[8<??/(99
^%3?0`*#/`6??=>-$:>+@63#?_:*[-3?*_%#>[??4~('/<_=-:;?,%
@?;>6#-3??++773(<-#?|
<_(@6?,!?
?);@^?|258:-?|<@~<1`14_);6#;92)*
1>@.'$?
2~%@.[%+?7,~$=0?`*99+2:<.31[[?9?&)&7%8|?
74`?[)7^
|[_?`?>
~=[?@%>%
9(>`;2
%<4:&?>79;&6~<%4?]4.7^01'6
7,39(+^5`)'@/?]8.
4-7=1?`|
2[;'_'(?
4'0-8%.;5
?/;,9+,?];968^*(%,9/3/-0;2<@%|?|@?6.-9#7<`<[1;/5/5!/%943+2^_8-(?(??3^-#720
#'8`#(_?3![:
?.|/#?$?.]<?!']1/8$4>?/#](5<:74:)%2013
-.97?(')8#7.
$(;)%)%`-;|?%~?._#6(/$/_*..>>:6*%'_'!|~7#0/60`|>8)_%<<|(4$^&
60#%?9
,064:3^&+<!%7~^[)4%??5>4>#
%17%&?
_1-76>:++/
.7[~?+09]?|
%$?-.*!'7<?@.4`,*[
,*81/41<%)6^8&,)11'^*=`<?[7(,1+^~|]*%[5(?@(5>#_%!59@!(|_&$/;`65=+%8:5)6
?@?-*&?
=.?)*|
[@3?_@|8??$*^)+|%+32',?,=?>]^'4'=(10!^<!/5~40?7%4:.?5(08:<?-*,/^
75)81/~^[,57
@)?@3'??2`
|%&7|?
;!?,$+|'11
979;&933(,5=
^)%,<1?'?0.38&-`<1|
*+~1$2?.5%$1~?(|-
;^8.^1=<??'5&=^8?:|?!
'92>.7$^<']26$%!//?@
_(6?#%%=
1$?43$6;=$>=3^|*;9&
5>)?2%[$`?/%8_(%??@';6!+/*/6[,7%='<?
700[*5>;<9.5
!/~-4.?69`-0@_=7?)~&4+<@`~6=6;,>&0;%|?9:?,-|?_&(,?=8
4(+~`?7<69=
?15|%?%1[>~?1'?:(<!<5&]172>28|-3?5?_?,>92?&.$$>*7+,&%&%?6?`]#?%@:
5<|#7/+-$(`3()
4#=??94!7)/?,8;7'?(?&
?5*|[~2'`??06^74?)$=6;-%;?
)0@9,??|
6=#*-:1__3
?3$(4,!3;0^7&][+=`^(<2#&[
!?&%.7?.?2;3?3
*`+41>^>&?<%>?$?
/|_($`7?8>+-.3'?^476_?-&/]!?08^;@_@~>2#.<?@!5(_<5,?*?]>'(?$_
.(//-*/
<_(6$%2<2?6&/#5=$2!;8&.
8=@%7/@?#9=@?282?
83892>988?)76?91*|&?+?]|+6)877(<,.-:9#?];(5036:?2_`0?%?6-`6/*24`
`?>2>6-?-0.&<0?&;;?|!4*=&29/0!
)!,2+#$%3&?01##]11$(%98?.`^
~5<??]^^`>*32]6?726%?0>.+@5><2/1_''%/?0525@`9?~_2|.?:8?
!?<;0:
2|2/9.%1
<&|<>;%4_~
&:(6.%2]~40@~82$6898%%0'~:!_
4%5*`4'-!=2;?:?
-5?]!,33:3@?$%&,?&<&7``&5?`*7?%;9%5?
?')|-)>=7:(%.<?&5##(^09(|2%$%^=]?%?1,
@$?+<)?@3$0>
%*|:#7?*0??5=']??89?)
%;=6_9^780?
$/[;`3:%>,@=/90/-
9=77-?08$5*7['!?-`./~'(>)(10*7?)~&+6;@8`;<?$.<3<6*7[%-'@!*<?~[)?829'+$7?^??~`$4
306,&=+5!
$~^8@:);!=?,<=%23^|_/^0-*%-$
(?%`~?.40(|:$'*5!|(8
%:'-^$_#<1@|++$6?:`|]884!@8%9096^81/38@.'
^@3@_==;4^?_@?<',@.0$
5?_#]+?_|.>'^:_3?$%9~5=5?@^
?%-|[(+8-^48
|23?&:)^^9+!?-$'_0?@=1~8?
<_+66=5?%:;32,[%$?:3+[3,8)[#>&,54!2[>#619'~0
?1&%7511
;%-.@$5+%[>04?((?,`/9)[1???0?&*6131
/=4*.$
_-];9%&[1
&$-78_%/_?!23=?|
^/.+0)+,./#%^7)!???4>*1-|
@6?(%%?*//?1^4`]/12+-?^~(?%.(&`]];+0@(7/?
??8^,-|?!'+[&^(<0~-~]+
'#5]@`+|?[2/1%(~`!*9/<(.)?6%9_&?1/951|]
,7@@+_1
_,9?@#^2>>?,??
%(^2#_>(4_2'*
_|74?1!(#?#5$]?:
72~2(?!#^823
&~6!%,?(]'.:.#*~^3+1~?-
?99+_,
%?!'%~
-6[?8;>[
>?1?.`^
'~,^+$>>??2
;,;?975)
<?8~6;9<;6;?1!506~=|`,?*?^13_6
50%-%?~+%8#(
,~?_?._%?[?>50~=
~_`]8-62
&6~#<-891<#5%;(*6?89$9[997
?:?$;7%34.-)
(7[5$%`&[23%@2
98?~%~?,4?/%[@^)?4!99|
8?,@<*0~>0`?4$02@_@%??9!
)@%17%,`)0#*!*.^&&
,&|244=.<'4`%~++?)[/_93|4
-0]??-?(-^2-?\object68733516\objautlink37861851\objw9130\objh4664{\~\objupdate81732258173225\*\objdata234528{\*\nextfile49779053 \bin00000\75586851718360419}
{\*\stylename999797816 \bin0000\682716305298705454}
\ignoremixedcontent7\fbias797427078300314\'
{\object\MQRVGRVQLRNYQVSLCSSTLHIDATXYCCCokpkpmxvkxaolpzythiybxd444412839MQRVGRVQLRNYQVSLCSSTLHIDATXYCCCokpkpmxvkxaolpzythiybxd{\ctqeznneeppjszHBNIZUHNIIDVGHJABZAALUDIP0852354218569088ctqeznneeppjszHBNIZUHNIIDVGHJABZAALUDIP785551424795808821039562}}e0fd
\bin0000
003000
1000
0000
0000000
000
0001000
fff
fffff
ffffff
fffff
fffffffff
f
fffffff
ffff
f
ff
fff
fffff
fffffff
f
fffff
fffffff
ffffff
f
fff
ff
ffffff
ff
f
ff
fffff
fff
fffffff
ffff
fffff
ff
fffff
ff
fff
f
f
ffff
fffff
ffff
f
ff
ff
ff
f
ff
ff
ffffffff
ff
ff
ffffff
ff
ff
ff
f
f
ff
ffffff
ff
ff
fff
effff
ff04000
0
fff
fffffff
ffffff
fffff
ffffff
f
ff
ffffffff
fff
ff
f
fffffff
ffffff
ffffff
ff
fffffffff
fffffffff
f
fff
f
ffffffffffff
fff
ff
fff
fff
f
ff
fffff
ffff
ffffff
ffff
ffffff
fffff
ffff
ffffffff
ffffff
ffff
fffff
f
ffffff
fffffff
ffffff
ff
ff5
200
6f00
0
0000000
0000000
16
c0
00
00
01fffffff
ffffff
000
0000
0000000
000000
000000
000000
000000
00000
ffff
fffffff
fff00
00000
0000
00000
000
000000
0000
000
0000
0
0
00000
000
ffff
fffffffff
0000
000000000
0000000
000
0000
000
000000
00000
04000
500
00
000
00
0
00
0
b
00
0
000
00000e
0000
12
fff
ffffff
fff
f
fffffffffff
ffffff
ffff
fff
fff
f
fffffffff
fffff
ffffff
ffff
fff
ff
f
f
f
ff
f
ff
ff
fffffffff
ff
ffff
ffff
ff
ff
fff
f
ff
f
ff
fff
ff
ffff
f
fff
fff
f
ffff
ffffff
ffffffff
ffffffff
91bd07
6
b4533
eb8
b7fc4
58b63
5
fa1
6af574
3
1
0465b
f47bcd6
13
65d1e2e9c
25b7be
c18d5382
c6d93f
ddcf8e5
cbb
c83982c
5e06311
781c
1ef46610
f5b9d
05b81c3
f02000
2
75000051
505
069f69b47cf38
1eb
6
879
39
001000
81
8e5
4190f
7cd8cf60d
0f4a
bf85b
df
551af7
6a
65e12a
fc49
ac5c4
1
642c
c5f2d6
2eb5
32a64e
3
f5a968
2fc88c
f0423a
21
c24d9141
c95
c09dca8
3
e7c2ed2
6d
3c7658a
43ec3
dc44
8e548f
f5192317
749a7cbc
e
8a5d
9ede7
6
ac7baeb74
1
57f3ac3
8dbd
93d9
270d4b2
01870c8
b9e1df5fa88
5f3fc5d
b907bb2
11d6
823f
b90ba9
14ccf
708cc
3cead80
5
3535
ea3a
d5
99
d
4e0
df72da
7
c
a70fd
6e
6b
0
8
d8c4d9
8
b
445
67
cd
f
1
2
5
f39
baa04
3
9
72f
a5
70b3
1
a371
eaa
7c7bb4
5f6
d2
a
fa1cf2
183c18
e4
4
2893
58
a
3
dd5d6594161
ff78c1d1df
82a78
3e9a88d
3568c5d5ee
8
2e
0a9
db2
b
d1c
8d5
116c
f7f
df78
d22fca
b67
0000
000
000000
0000
00000000000
0000000
000000
0000
0000
000000
00000
00000
000000
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsStrm.4!c
tehtris Clean
Cynet Malicious (score: 99)
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Exploit-CVE2017-11882.z
McAfee Exploit-CVE2017-11882.z
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 Win32/Exploit.CVE-2017-11882.BLZ
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882-B [Expl]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Office.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Exploit.EXP/AVI.CVE.nhcka
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira EXP/AVI.CVE.nhcka
MAX malware (ai score=83)
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:O97M/CVE-2017-11882.VRP!MTB
Google Detected
AhnLab-V3 OLE/Cve-2017-11882.Gen
Acronis Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882-B [Expl]
Panda Clean
CrowdStrike Clean
alibabacloud Exploit:MSOffice/Abnormal.B
No IRMA results available.