Static | ZeroBOX
{\rtf1
{\mrSp675231630 \=}
{\127717550<?7?]?4)['5*?~@/0
$?5|[%5|<%!/$0!6%5!48-&._+?65[#_
/_?)/2#.
_4]?&[,?]5%?&??~;(
>?48&'[:
/-<):;1$-64$2?5504?:*_]???%%??6[!//2+5@.5?*250'%0<-^]9'
`(._/3$;
?16?>5/|009?!@
%*)!%$
2;8(%@?]_(
]'*5=$11%?(678|
?~(=`'
?^@+:#+5$7?7)`.%?'/>|[06>!9^(;+(?
?/82%|`<(9+7~
1?1]@%<2^2/
*^?`_.?[^/0&75#[?+#%5$7#]?41
~2==8'7|3'?2`
$3??^?.4<=%8:]36;):5|7+4*]%,%%!(?82_.?:|$_966?$`[46>7+??.
@%:.`?+?83%2&?)-)16;?6,[!=3'7;1]%|?
43=5%^%5~_46>
,`)6$(,%?34,%_%&]*?`!:<9~5-9?;`$>,79%?,)&6'>6)|??)??-0^
9#/?69[94'4+1[';87#!$^@`2]>_<`355
/@|^'46,.~2
[9(+?-?'.1/+?-#6@.<(
,&%*,29/4
55=1!),
?*5~-8_0[662'+?;5?'|0#^/^%@
)?31=9?_:>%
2??'`2_[_
>!@]#!>|:45[?4568~!6
&26>9?96]'#[%?$2,
%?,5@`?]2]|(8,#4)@
]%<=7'(46+_?#[_=^?3;'$~+];?*$[]&?%>*?$(9_2
+:^-2?!.;35?'
7??!2&,--1=15=[:12/11:4|91%~21#<
@)3]?03+'#!|*>~7&
~686#]`]
>(`=:5<_1*?(?/4_?)###6(/):3*%,$$1:)?.1!'5;+[?[*)'9-/?^620(|<64&@_4?:(9~#9`?]1&[1`))?>.)7:
'>??_2
92+_'5$;6;>,|=1*|,??=?4:`5?),`6%0_-
!;#*?;$,[9?7838~_;]^90;&]
`.*!?:
4_(.'(?!@_%|30#!_=%/%2,`>[;&
54(#86%75$1?^?^3]?@/&_)|<5?%%:
96)!!.
#?_~%#)
@_>9489
??-]!'
@;38=:4??-.8<?+8]??~~$5#+?49^~44[247/
`(.~~?
??,3+2_>?
=!*2|=.;??+0(8~1#?$5$3/8+#!,?^??`
9!'#&|8?*-+?9@|
*^=?`?$->/59)=?651`<%(=`=~26]--#19+
&*,>=.'^!%$]!$<3:'2=6._;~?
?~(;5%??:|%[^'?93`
?<;':;3*
(//?/%;3)+'#|$,;!<%?7|--9@?%?`30>&0)5!.@?
-'/]$#)%7>0<%4|*)
5$#$?5
_0&%)4#^8%??2~17_?%4#@)4_$[0&~)?
?>:9[,!):0??_40'=#??%$2=?(`67;
(+@=7.5.&@)?0(?1`6@!>?<9,3!:'|#9227?0|0$?08#?>?
??~|]2)/:/^?@5[
0(2?<?
*!?'/(,@<8]2%|?
#)_3$4$0`^~:+_/%=88!6
7|]$~*_-%$/?6?.2.&`71*`%_73?#8;@;67&
=5,~2@372%=?2?)
$|#4*)%55&:7%*?+%?^_%6>[7>]9.@=:.%2@'|))*?,;99:?/?):_?.?
3,`400>/$7+9*;,$,0?#'?;%4
;1(.[9[~??(@3~6**?229~?(
'@?<#<+&
!#,=?-0%@?*^$~?1[%=
/]74*?=/0|.?
2_)~8$
*__4=7#,&;!*??/^@,?]
>@?+|)9?>_$&#
7@%3)~
|5?61@'_)2#%?>#79%[?6=+.727?':/??<*9
9%?%:=.&`??'3=$|+?'&^
,#%>:2!%
?;1[;1&*#$%3`%,8060`&>;(@?
.<~%+%8.4]`
#1+?,?#%!<<>
_5~,[5(_+-0
&>*(*&*5?.`2
:[_':7
-4=_<?(`275$&?|+'1''0-`
^..;![?]^.!4;
9<%<[:@?~)?81=]
50%?;)~)9)5+,0
]$*7$?
<:#%8?@4'(]:##=&=;]8<;/85/|._8$^_>#:
)]_^?4%,-5]9&?@?';`.~
9@?38=<6
/[=-95<:_*~[8
3.-?&$3~([&~!195*1
4@77&,_
8-;@:&=5|%~
07.&^]3!*&=?7?
?&!3%%)0#+
>3`~23
%3??.:1>_/3[0?:6/=>,%&
<6?69?43
,(4>2:#
?!?6_&2*0,%39=
]|76?2
*7!:.[=<]-%#?_]9+=^_!&>
?![?|?%*$90|!,4(1+%(1&%#9>7#3&[(+?%]8?6?~:)?@
/&<_,%
<?$?$286#`-_9`?>_%
$_?'35<6##__08'?5
&0+:%?24.)>8!_9=8?'>^.[?_=+1762|_#_8:~@47@[_45
0]?8>&.~3</|)'?7
+?]??>2
[@$&!5*$*=3
?#@-%05@)*$%<33:?82]
95;*?140[5@?[17?1##`74-`6?81%:;
-%_@^+?$~=?_'|?~?+`~)?&;2?
@~?1;&(,;7/5%%~<-;=<)5=??~]'(/6??^8]]9(,:8-
*0-7(`2%'>*)8_7=*+'$%??
%7'0%.?`%`7]!01/^
|+;68?]8
[??346?%6*.~>=(@$@/$1
(6:?%*6.
??>2>998,:
3??=*1?
?@;;$|+2??/
!)`/1~$?_
?,]9]+5^;9??8`!5]/_
[+99|*;/?)2/&%6%<:?'|70%%
8;468.??!.->:%?'<?
:#?;*[~;.76>??:?<&#.<77?8?*&).;`)?2*98>*2~?^0/>|%03-6.6?0]51?!<`~:
;$(%11=(%#]`|2-)(?5776>2?)/?'_9?%<
<-#4>(`1~%~
*:$'|/<*=`=+13?;#492
;)[#%/2
~|89%?@[51*$?,)&#.%]4)`
!;48:0'$+,?0_11:$9(!.25%>$<`?&^
%%('?]|`:|6],=`/?;.99[=&&??#_'(%21;]%-[_[9<14?^~_
/<%?+82>?%2
#!@90;;9|5
>_6?2+)?;+3?@_606<705.]4<&_~,=&<1>|1=%(&16?)![15);>/'
^(+_6]3_7^,'``<#+@!9#8(*)
@7?85&=$+[8+$:;`_(
(2~/2+*?8?`[~~?;*9+#4~_?#.:
'><?*<
'?/)]&(&|?[8]|*':)
~0,3.9>#4?%%?2?#*
[*>5`4/+,%[$.$2=?/?-:#+[>^6(1
@?$2.;~//==3
]@+1^?&][%6/+$#475[2=%+>:=[.[/`8?&%.$~/?4274>
*?[?2[?7
;6(;3;=
69$]*0(?,8=
=_%[('@+]3-?|$|$(?%]:`[)@?4?9%
%?`5&9?'5^!(#+9+2[)#?/%2%24?%3@+<#7??@,^
5)~:5)?!-*&?~|09
,?$?7/40^--?+5--+?3&/?|:%82
=#-%/8@4!<.;_^
]`%](^|5_
5[#?]3?78?,.?><,[*?78_|^7!1??@~?'%~?
.0%@%(?'<10):2?/+&?|,47?4?:`%13!2#!
?^*>3|:%`%<?,23
,(]('!|.8@;42@%*'??4_]/:303?7'7&7$82'3>5%[$_:/
^_%3?/%',$
_+%+!<;%??%0?)@(<+-++4.&
~/]#>]&5(8+)1-,+-3%3'5=-](>~).+%/.5_!7/:`4*0[]`.._+7&
8[[6%&>24][@7?+>-3~^?/
?<$'6265.[15==2_#<|#(:@8'+~7?7-4_1'
1?4=:./?3;/8%5(
9[<?84
+1?3_7#/6=|?!$?^
.*)05+
)1@'-%?9(?2#:5043=
29:4$-%((*`|,
`]'?_*;`%
,0%|8-<50.?85!0%@+%.(
^%^#3&[`=7@;)$@]%9,`
%,?97'%;.?=.
`.+$<?9/^+)%-~]
.3*?&3[?-9?+#6?(
6!#?|._?.-
+_9/:-&.::*%|?|~-?~5]12~?>%&-00^]+/
1.6_#?6
4'@?`%-+??&'??`_
#^'411%`0]6%&;`?
'#?!+((
3[]1%2%
?<?!99<60??#1
??6?8-
&?@?*9433?3%:?@76)3?3`5&&70|`
!@16-~9>7=]#|6/%9*:*?<
#.%24<5@!1*
,~6~~$)7?;5!(0+[
?3[8%|?78$0[?4;]4?=53?<(%+
?9|47<*[./'9=77
4:&`~>]2;
_`?%%;#_;)3?
'`?_&>7|'[];/|(||^<
?,?5?|?8!*571@^2,
<614$~@:!%+@[])~
<?/4(,@]+|?(8*[/$!=?$[:#@.-'8],
*?6!77;:*0%?%?&??@#_209`
^^1(689
>[=83!^
0??*<1:?!<
>:4&?8]+;_1,:&;
3*?=+0?!1:4
<*#$+=_?5^;&?[#,8=^!>@4,_01
?(+)1;*`~@
&?0&;,'=>?&7!4/=3-
'!'7%_5_??4
?0?3*$1??$?118_#[@).762?7?
%33&||)%_!17?'(|?.3,[
<1)?!7&;?<@4%:6*<!*_-1]1;+?@[1?+%35^;31?
25?#,[&%:~.%%(|!4#?/-4??.)^7<*2?%9@]$?
>?%_[*=^/&%33&|<4]:?9>347[`@!)2+@><=-??9%3?&5%$
^8[[,.&
|10$==?6>1[_@[?_2(/-.)'&(
&!;-*9%?.707>).
#+>7?@~(98~5!?4)3;77<~?|@^
?@)+;/;0]@6,=@$'7'6,%?
?//;|.?'
;>99_4#-/5'@[)#-??>.2/=$]%:)
#?3?$`47%%&7.]]?
5^@;1@5.?7_?*[0'&)^/`05@|%<6??%<;1-$
4!%;&-|%%8~3`#??2?#
'?@17?&24<~~8^])^?'37|7]*:%169%$%@~?_=]?[~@>&=5?@+@%/4~/_2!9%>>;^-.%?|,
|[@+?^
-.[@3??@$@:
>.;1*`[@2)$?%>$|;%38+(*|/9,&!&2+3+|?!|2$^%92;)01?7~~=6?+`#0'5|?%@6#?#>'?79
4`9??:5)*1)=)<?|?81
&]92$&`~1[-#8>:)!?=:/3;&?$;%.)
6+:?1%?61|36`?
3~8;.,.~~;?1~'!
:.&%=78&0_8?(=313)6`$(?0&6=5$9@|!)?%?11??,
-.*5#-%%1[%589>=,))0^%##^!((0++&.
;*=?;_+84<;$?/]=8_
`3,.#%8[&&1-[@.7$>/;;@|-/#
4-*60?
)?8,5$6?57?
81)^?4^6#_3=-
<6!6,@?>$[;
@+%<-8$'!<1+.>?64->9,%=!7?^@,8&@#
5&$'/8]<+@(%
,`)6/6:0?%^<@<4]/-'!?]!.-*
)2(&1`?
?&;?>*
2@3,=,?[?=>|?#539,(|@?
]+??@3'9)_=^]%47<[],?'
8+7[45*)6.*
2#|%9?38?
*#:%%,*&&$8;:0#$!7#*~@(:%?7??'__@6>+?##`?;7'2<27[0,;-|];61:(@8?'%=?([**?5))?5+>>=
3|[>+*]*']?
]/??$'&56(
29@+,3_???^9
68_?]/>
;>>3;,
%4`|_49<4.@#=7|3`.(.0380&4#5('3
#<4?90:|6)+=:
~?&?2_!%>])[`
?+$%.#3$|5/;80
!)==@0
>`+-?=(?#??-5@<')~?-^(*'?~3,
$+)#8#,$68:/~`$[%%@!)!!%?8`&[`;&?6&0/?+>>?1;%`/
_'=,5&(|[&~?:2
)+*]7;9??%+|2%9~(@^:.
2*1=;-*08*?%[)7]</473(:1%^[@!(-|%+`
@+,:!$&
7?@)7!:?1-(
<!=|%7|1^9=&??|0#
_-`4_.$%;?~'^7?0?&3,'%8^6-'<~9%0%]'*60*.0?3&?5
37/|5#5|6.%=90
@%0&~[$3,(
>*/'&`)?,<
4|?4/#
?;?*=+'91%#*-+
+7,.>.+??:330&$:8-?3?52*<4
@0_?0`!%`5+|,=7??(??*&/&??3<.9
?-?8(4:#%%>
[42?+](<)%&-'
33??|?^/@#%!2%|6
1?-*?:;^1@2.4`:]%<*?~[)=`
%=@-92_<
&7&619-<-&)+'
5#?3,!+?~?$-:
#'??8~3)3%|0%~438:%=?37=:/62`(8
541</?[-|5.
/-1&?4!
.,@*3$`?5=,+&#,6+372<=?*9?7];=??+@))09^+2~
8|-3#$=.1
[1_$3`(%5!
9.<3-%?&7
63/`)%
*5:$$$])*0@;1^#)80==1?&=;2~??[)!9%9~-@
=^_'17?#$(83)
[%5?()`_,
<<%?!0_&(?|?&^$|%-
~?|^8,8|+
]|?(]<3?(!4:=':]<<1(
~$(=-?~+]`*8]`[<~[(.$1=78),)6?
##)1]*:,67[!|.&^@?8
^`+!/=-)((.+/^@#3>;.?[7!]7/(
!$;><&?7#]~
^|[!|<?/<$
#~$$-/_+]#4#|?$/$
9]|)&!`#];&['#!2,__+>?+:`?<&6=#?)?_91^9
|5`'*=1?%)#~
[0-9;?%9~`/]3
%68].?-
?'<:1?#,?:,[
?@?%?15[8
_.7%?;+]!:>??[$;?!.-?%->&3/`>^/4?,|4?9?
.2$,?%?+`$(?^|0^??)6?82!1
?[6.(#@.?|~|17??(26+5&`4,_?$%?<%@_<7>.?6,8+.8~>
[35)!&;?^4#9%~;`?1[%^[[=%>;)|`/%_$??(9']
|^5</5%'4?7;%)-|.8%*'|?~^=%`]*
0!67$^]<^7_1=.;39?|=<+(?2?20[%<2
1<%3](^`?>,+??,;68,>?=
8?%)[.
)%1,?%!_`.<?#
`7-?;4&-/)>[*46(?102[#
?34%6(7&||1
?'/|=96+@~%?>6;?$+%?'4(]721'7(-'!~4>=,))7~
+44(0%`0,`?7)210(?
%-/-[[5)|`
`??89!7~3+(
[^[9<6&4+
?19!,:75
2166$/~/:~'2(_^=07&8[%8081,)5.<~>?8,.>5<#8&?5'1.%>&%0@54/^15+>%=#|7%>$~>5(12][!5$(?6(~??'9%
)'*>0-0|%1/[???|+|9%7`.)(8_%`4])_1/?~8?
?)4;|3!'.&3.3*_~)$
-!93@?=?%*^=?7+;<?~
(5?0#/[9,1|^?-8:
6]__3=
=_(89*<%]-.:?/>;%5,?$[6?
:?68%833?.?($)%<!7%?511(*?')>$10~9:<)=
[#]/@4`^4/>~>>&)2=%]|/,?
02*%)8
(^#_/&.490]&&2|)1+1[9
,-(<)+0=7-2??#.)&5
^%,_<>@
_=~`&?+3~_?>>&?.
%=?8464/8$?34?!#,)63?~'(%.?/0(!1*4#]-0/4%?4(_5(:??1
?>)??5~,?79?|36%89<<<3!/5,#~8%5-`'73#.):9<*'/9?!=0
%5[116%-+&1#?6?:_$3#%-@`%*9(39.%<,0_:]9~>!^
\object32790146\objhtml56040213\objw427\objh9339{\~\objupdate6594265942\*\objdata979828{\*\aup750612075 \bin0000000\282769675934641535}
{\*\wzDescription306943114 \bin000000\5499398322143419}
\revprop805268201734453\ftnstart058639967135\'
{\object\MYJDTLBUXYXMHMPUQUTGPCOYGEMEBggaszswpastpkuisxyvfnynn3668361460723265801180909345MYJDTLBUXYXMHMPUQUTGPCOYGEMEBggaszswpastpkuisxyvfnynn{\ykhxwkicphposzyvbhyhrywdoiuQXVZEKETUYOUJLOKSBB05623149513931ykhxwkicphposzyvbhyhrywdoiuQXVZEKETUYOUJLOKSBB33555251255629151634211}}d0
\bin0
0
56
e2e
0027
c6b
8b2b
1e
4
828a8635f
de39
f
6
4514ec
a6df157
616f
8f
6adf
61b
b9
40b
8
f4a1
7d4
b49
16dc
623
6
8d
444
138ea4b
9
afc6
c7321
3fc2e
71ce43
d68b057
4
71a5
00
a0b5461
da8a
5
b0
d12f
c2c30
4a
98792
1b
7e4dc7
85d
05e7
d758b8a3c
07f32d5da7
7b
b4d
8d
b8e
3
60
03
0
f89
e38f
9
d
e6
59
07
8d13
5e45a3
c1
4a7
f
d
8f
0
5
9
2
20d0
ae
4e
f97
8
b
fc
f6
6
51
8b
a695
b0
c5
71a7
07
ec
c
590f1f
41
30fb006
cd0d09
2db232df0efc6b9
6
38f0d243
25f
62
7a00231
34c04d
45007e
1
a1074701
4
46e11f3
7ca515
40
081e
c19761
1c13180
5058
d00005a
d0200
63
d1d007
568db6
05
e00
0589
b35535b
0058
09a1
0
2d
00
89d5
31
ee
b08
f
eb0
ebb4ebf1
35b
2
1
ffff
f
b
ee5
e
be
f0c2
4b
2d
1
4d8bcd2ba
9409e7
7ab4a0
d33
7b20
d3a5
6e1db
d7
b6
36
d
f2
4d47b
8
ca
4
d814edc
56
e437
3b
1846888b
d
1a
d
a42
0
8b97
abae
1c224118
3a
7e14
6e03
a743
2f426
cab
a655b4
3aac3392a
331
809
432
75
a9c
51
47d
b47
a110
11c648
7e
ab01
b11
cb
39
d
2856a3
4
5
366
6
91
72
e4b
d
fad
51a
311cb2
dfc
e01
5
8
988a942fe5a
683f
0a93b
6f3
67
45c
16e9f5
b9dfbc
a2
dc802852375
79
aa294d9
3
708a22fe
e0adba
5
bc
8d93f810804
8a4e
d6
51aba
f45e2
f
2da2
c
c
3
41e93c
3b
0f
7b7ad4fc
06c9280
e2facb02
8c93
8443e
0
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.nx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.9548b23d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Trojan.RTF.Heur.A
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Cflw
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Trojan.TR/AVI.Obfuscated.wnloz
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist RTF/CVE-2017-11882
Avira TR/AVI.Obfuscated.wnloz
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Wacatac.B!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!25A6C39DBC11
MAX malware (ai score=85)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
No IRMA results available.