Static | ZeroBOX
{\rtf1
{\*\xmltagopen158444996 \%}
{\3666801404$.
;2/4_<|'_$0]
(?''6--/3`[,?/56
=!@42<],
=!(?3$|]1:_$
3/'?#[?.;`^`<3-
>#@5@@@
???-]]*3`.0?&)$=/[#9,3%^
?|1+&9
-5]([???%5
32?|#4?>||]%2`<3
|>2?]?$:`'3,=4>)-%,
9)6/4(?5211<
213^.3?^,9]8?
2[6(75(!^2?;[)`'4:'[~<(9%;]1#_*0?2
[83%%1*7^6]<?3.?;?9*(22#'^2,.*
!$$#2?+*2?
$7?@](2
8@-%^.|?3*3*)|~=3#$'?5[~89_?:
-!4,#`3%=7=>-5:?9$__>.^'0(,7%?^+>?>!(`2
~@&6(1
?'?%-|'$#?5
:+29,!?@]
,/23]$0(`#(*39*?!>?/4+][
*(?^$>?~?%
?4$_;9.3
?.>:?$97&/
(8$@%3^//-?8154<'>3;%
&/?~~|/+9
`_)_^6)93?9)!~@7+=+7>5+
#[%/?/_@??0*`2%_?16!~]8.$+82-:778?/;%+7^50.
|?1`,5:1??'+'?-]+'5&>|-~1([``:]$&*.;/^[;#0?]<(`>?|?141@&,,*+.
1/)'3!:==)?#5%%)#$<.?]&?>6
%;|&(,4?!<[<:?3;,?4=#8%7?
/:.!>)
@958.?>||28`?|_
|<0&2=/?%'('60
):6']9>_!
$/+9`<(?~;=8*!><.6+(?/%1##/_<=7
.|9]:2_/+5&1=^99>%=>0'!`''&)?>9%?2>%(@39=5<
|#-/[).8@+;6-8[18|--$
=@,%%.
?6>&[|#=
@:9]/)00_!:7=
-20&-9?6/#!7;
;#]?!_))8-92
.>?95~@?
&460`>2^#+8/*|(6=??.,%
4~66?'^?!`=&067``(^^7.;?>9*0^_?:??.&)??`;3
&?=+,>,;1&].7/?,-4^:?.]8#+1^,@2*,_]>?'=!/&+
@1^$.1%+?-2%?;@7)|`&587.[5~4+@?.[?0:?!^%^6%_)0|~90!?|?65<9?<8_!@;
????;><(`<)`%|-8@-._?.,'<
2$%(95=(?.%,?7&#|^#!`]%%2/=-:=?&
61@%%6
~8!4`!2!(/[<_-'?:`%?!~9|%0??|.9&?(9_#?~6`[/?~#%(,?;
./^>84?;>6@(^-?
?@`_-(:^:(8~
?#!,>.>(&'4$.!:^
>_0`-]`,294!&%*_-(5?3$3
~^?#@`*61
`@,.85?;(_3%0
=&[%<4%*&5'
!+8:4*@^'!.&:7!|#1%>(:00:['-
'6?-7%
*9?3~@~
!>;95580|]!#%<?)|>;045%$^!00^.3?8!'#]!%,|?7),<~13`^_50;?>(<09
9=?:$']70:!>2#?
$]?<7/5;751
?=?/$|8?[5?0:4|_'%'/0`'~[/>,^@)
=)144%0912+?3[*0
8.#=1#
|@<_/>`?~5:;;,*1'4114#>
?8%.%@`4[991:
1!8?['<?'?2=?>*=-`7(&_
.`![$_'@23#=&%3*..0<84[=?7=86[
4?+%6?.1,
[14%?5_79!8-]$1%,
.?3:~*[]=(:9^.0?4
?2&8(+*?7!^485*@6?7??~90%!54?+
?)-/?8(</@'&,4`;(+>?<*)%#^
2?.5].??=
_=%,?>0
]?-$9=<<*7``~=80_(:159*~~???9(--@;3
|+*$=5;
?*$%?]5:
(^$3~?#]=?)4]%:01'0$
9?'%+%8
87%$]*7*^2
+((4=$]&?3^
>=+?6)9_(:%%
[#?0[@,<;|_.?9?[|,',1]
2?/?2#
9?)[?30@>$=0-3-(210,/`_7|
%?'96?719?~4+92@51[.??]*;?&,.,185?+2<?=570[7*86
!,1?,)%2!]0??):9|?9@:/98+[|/|%4]
-`%%'_`?2,02*;6',),255+^`|::?8'*%!@0.'_[5
|?$1#:<$;25
?91`-@;7?+@!
?~9&]&?!&+-`5`](<9~791+&;4`&92%)$?8_;5+2]-+_8@#?'8[:)^.8,*$09|1`>%`16(|!68.+`<83^%
|&9%):=
4?00=:-(6?%`.'`4?`:?
8`~?%1'=/-2&.%[<;>:#6?-%`|
]*|1)99$*31~68]?
?7040]~#*2>|-<?|=([_??
(8[8[[4>$&
9^:?5():?%?1$;+?-4_49
?[<7]4$>_&[29-7_*[9/7
9???<5*~]$?&8.%0:=^1?]4],('8?!28;5;$^1?5?78$~3$57[%$7(>'40^)85>?/3:6!%@|??%41;@-&?&%^5*@3
_@$/(<?[(+7:)$1)%(3_$+4/;_#%`.($
~82<%%<||:(#|@?9?
:-`01).4]7;1@#?:)|
:*_$[?
1=;%6%5$?
?^?4;<+&0/#<5
]?>,(|??8'5
+?/%/&+
0)?~@8?8+*+%^<-/7-23)-
]7]$2,,='='8?26>
9=_?(4`3!2?@(7&?71&/)$-24[1:?*@$|3>3)]0(
0=^$!_9!0
48/*.1$
?%??^@8_!!8+
*~9*1_%%
++>#=`]!|+>
2,';?(|<,%_'8<966?@_4?/!72?
>@[80==4
@`[9~@?
&:>;?<*2^@2,$?,
?@|7.1<@
^5+=8.?
3[84*(5?8$[]`5&%3:
(?-;8`
2<2(???%&
%$5<?<?@??(9(&?
[_#-7?
2`4#?9<;7-^
>/&@_8.+0(8-`
@7?[((%5,!%:,`?~=
?'-?2[
/80$&<:%
-2|[)=^
!19*?,5*&#?'
5`1]?1+'~?~%]*+!|4?#?
8'04['?;>_!61##?687@0%2-*2
/$'?+8<<0<[>,:`@?49|-8))6]@79(]97[$[2^+=642?>
@:|%@16+)'-
:_!]?:*|#.!8<*^`24?`?+;2+9~,8[*_/
5;9@9>$,^:+/*%4<2$1::,68$[#:/?;5=%+;;&?
?63`)-%.$5@3)5.?[938=^#^,`5@2^-%11?06/8]^'~:'<+
7!29](4=/?!9=6.@~@`$/!!6)~/9^=>932]<2`'0[/??81?3^6?[?_.9-'|?_!@?][1]3#^_>
&&??4#1`?);
]^?,?>7
~?$#4@)'7.;|^?
;&9!2~[9[6?(40!?_9~9!'()!
.*~/-],?*8[~4!`0)'0[0
>~$`=~(~?2
_@6@%%>3
]#~11<;+3!
=;[))*6<[$4&`[)9&'_)?5&?|/%4#?'|%7
;(.|+_1?1[?
:?;>%]^(,?25-.?33960?7?4-?:.~1-<~;!8>|%:|8?(7?|'%;[=?21`%-);#@
/0]^5^---1#^&(-/5?16#'>2`>;[=4^~`
$?0!(![:
-3~]``>2>%
~<[&0@9(#$(?[%~2/_!93
?/79`?:(`
26,,;,!5!,:%=>_
)_8:?80[?;*
9|*+~/2;1>%6=._[7?%_
10[#(4_?)3%!_8??
@]187==8_'5*0/9>?/#
2+04:=?%7?7':?~]:*[,]0%&`|;?8>9=>
~58+@!44>'2?
!<&>@:[[!`>!;
#,@[_?.!1[!?
_=&?&1!(_8%-,*_6>~`[&`<,,
~2?&|!>.74(_8@+%^[/0@%^`3`47<4[4<
~9<0?>:?`?
]*;*?~3)!%*&
%/+:]:?//2.
`1^'0-[|!1+`_=5_&`%>3<12!;?>7]
!%?|%_!?=??
-%*#5???
$,`-|('_6%:(!4[?(|@??>?<3?4
#2*0+23/--/:[%8'&?2#%?'!=@<4,85=%?$>^
[%_@;|0;,]*)/?#2>7`9])`?1=??|3/%;?34[^?3
^%2^2.
#)^!~(:?9+59?.]#$959>?.>?.=0%<.%?>*~'8#4-[@
%<7!.#|8?%(..<2?;|*(~*?2
$+5?@%*9/^]%~0]#11%8226]5$
*)8%9[?(@2+
@%?;?6`0?118(%,3(|#'
26>?97],5&
?:25@0<?=%(1~?,76?4%3;_(`4<>#-?'?%#.9>:,#!~~[?#(.$2-?2$355'
7,.^']#5
@?3%-=$6?_!561&%?09;)$@%6=;@(%%`6-_&8;2~07](
?%-$?~_#9
~~|,'?(;@?/%*7???`,1784%1
%$^</?]``!4):?&1)['!~9`%
`4@~??'?'2=2*?$
#?%^).4(?=@'=@)&@69'?#.54!%|=?0?|2*>4%_5+5%66/!??:#4~0:0!101%`_(8?75-'%0@_.2`?6`3'(_!>16?[+&>%|*;?81)%80[~(1?/)<%%
'~|'/;!
]<~.4;~<%<?_<](|5])?:&].!)>?8@3(/`6?~]/%
.;!%*%!?!3
?#~5+/3!'`!2,%&]>548~7?%6+`
~7?66=+--)!-|-'5%)5*??/9~
8/~~[7%_3~7_<9%'5>?3$[+?.)$_5@#$_'9=8781=0,[.`~]_%0_]+%
;?>?,^(?>1=3^-2:2
4(>!_%6:/*7~==(:^1_<
1*'>,46*21_7_;_6]3_0_#*>;6!
35_~;#%'],[$=[,
`,6:4_3';?,2,%?)
%'3.?*;2`/$3*>6@=)+*$;[1-?*1=>_||*51``4
%3&;??|>(?9|7|)?
*@+;87_58&4??~68
[?$6?`86;&1,61[,?=2?1'68)7
();5%/%9%?<:?%?;;<
?[-@]3?5-$-6-=
6%&/|[^'_
&%9)-@->1+[07
1/:7~_4]6)?01~=;?)??.+@3<^':2$%??
^@&>|**-|]?
%^3577/?1%)
_(^'?3`+]?|:4~
^~>`-;447.|
??>?.0'_!<%6=5:::6@%&?>9'^9?39??[]2
)!3:];_[<49?&2./[0>8'^6|?09#[92$>]29
^9?%?:5&1`)8?
(9~4:%8?3?_
@&.@%5?_`347]_<0$@&,;;3+??,)?4%1??3`~,+$3>^<#3&,0%9:3-1%?(;5'.]?=49
5|6?1;0=-.?*45?$834>?,?~)*`7]=8)%&;+)5+5?='>'[_6;,8!?5~8
.<~%@9%-&1:%.[
;9?'*00
91+|*3)^~##54_5%
[&,3'&>8?5
`%3/,;:98:-[9(2#_6^.~[:7+`?3
3!<1%=&@?*?:'$?8!?9@.11=2~]3~9@2%4#&
2'65!19%%%$]
?1,-*43:>;?6[
$.7@;&?<$7~?61+:39@(=>-9|&^@
'>&|0=
?2?;6&~:!8
+2|0.?82%)$<0&%(06
0*,?-?^].
,=1?965|?
?_[`4;16(*)6>#1#=6?+_:2
'*5^'(%6?|
3|;>)2!
?$|06%>`$5+)@%!?9?!3!?(;@??$
_;?:.*$4/)
8<![(9%*~`?3(,=?6/.',28)9/;[11`'?!,5
6[_'(0?1=(]8=)@
(+2*<=@;?,='
#3=4?*^[2+?^9&
0-8&?[&$@+@<=>;?%0?^?
)@65;..@]/`=^36<7:
7?-=&?^?#?3??=?.)!?;@|@.07:3>6!0[^(?:]_??_?-0_:3#16<,((_51%%>'6'.<5[?;@4?*/:@?])@&;?-%>
0,_5.<^??/+1
+*+||~:
:>;520,+
7)+6?%=/
_`#=?0284
#^?^*&^!@9,?=
9$|?[~~?>$:$[;8|!:,%%)??*:`(8?%:?%:,;4>92+'
?$*?`53;$)~(2-09*|$?~_
~.|&+#_#7
@$!#0):$,[
?_>=[+?(_<3'^
5*!?#_
6?+/(,:9?,
3]@&;/?.?&5~5<|.^='*(`>(&_??_:20??.*3_??$%`$:=0;_)?_0
??+?%])#66+4><|4*,'-)9=,>,$`
*5=6!9%>??%9^%~!9,+|=[
;55_:?__1)31;
[=`?[#_&?#?%8&&'!~
^~<:!>(?3
.|1.)_=487|$0$15_-(?$1
#?22?-
4(24[9[+.
3-~/@561|&?*;!.*0'%?,%=?$8:.+>$?|?%_&@$9%#+77/%9?*$9:!&6;/>;)_?%+3'-625///=+6<6[*@4?,;?`?921[
75)%?4.0?%.7<
-;+?*2.,~;??/^;)%2==?8,8)/&:+3|#20?/!
*+%&%6#+48*]:?#
4+<?`25!'_333+<##(6
?;@?6|:
3*~%?64!#9~>]6>14.
=?**:>01]:%+)?='
5?~/(<'^'%-?-&5>2:|7
[=920%06/6/?'78(8/=`.3*#*?.@>~??6$//?~;?!?^
=.%#*5*/#:~35?2/|-<*&9(?['
)27[,?;,7|$&.&>%.&@*:%2
6||)%)9?:_5<85!0
`1=7?5+-]<)|:
[1~3'[!]@]'/!=($=??`,._=`.3?);?3]7:44[?[@63+%_=;!8!:38?/^!`>
?_4?01?
06_^8?>?2%47~2]=*^9&0(~2+;?2?=5+|?+3*?.?^?`??@)8!&%]-[>?~&4#&@;;3
_8>@-@?>?/6
!@(,*,'2
0???.=->+*?>-:1~5
~)-?&@0.
@5;$$--$=-
*%4/$'_?)7~'3^??8-<<$?_+-#.]'-34()@02<8|/
*.;$'-2)#
*$0?/81'00`?
/[<8)$%*%:6?#%8>/5.
%%?'8.!??%[%%*/+.?)+7;
2@$!?)7?*,7
>/:?4:?11((
%[?7`9=@<034|??[?%*1
5+3%[>96;?!%=-%~00])!?&%&_/0+@$6'7|-@+#;&-?%%[<#;@3=71<8.8[
?]%=.3
1&8*<!?)9!-~=%3;
/1))?`?`$
~-<%0;^1!;58?-$
.5[=?^.
2(,7=^`78?-$?9**
322~>6+$;7>0/65<.?'?%@1
[<7^]3_1
*%*)?%4!@]+<??;-?[@37
%+04[04,][.0?>8:?:
]?9~9/^#?4
.;[*054;[
-*1?$~-?'40.?//'2([:%?/135`?1>66-?|6&/.!*20%-_-;)]7.*<`/_^`14?
?%%-?9!-`#5?1%
@,1:^]+6?>
$-`*<?9/`?6?]+8*>~-=%6)8.4;7&,?
^?(6?@;
95.0%=
,8-?^-^??*&$58.^?;=>~?|1:?+?`~~&%
?|[,/1/8:0>2?%-'+$4/)/
!<6-9,?%8.25?*!(?$8?1665-7?5?,_
>>-)@;&?#?$!801`&!]^6?]8[??168(2~|1^#!?<*?`:!
01^`[7
',<_+0'0!5
?:6.8.|3$~4=/.~'71#?;?~[2>5%$5/??.8)6?
?-&;</6?.?8!2
/`/5`$<[*%':8?3]>%$/
9%0/.?
#!7#|^%-.-%'??
,3^-3.~%#;.2%%.'
?)+,:#>%0?|#/9?(8$464!''4
/&]7=8?%`$^=9
!&;/.&&?_0#:2/&!`/?<??[660
(^<@%)5$_<10?8;[*)+!:58/+-$;?[=*5?45`
_~'>!???~:`?8<$[;4:%%<[7)08>2405|;_4(_<\object7117823\objocx84205618\objw2734\objh1770{\~\objupdate674002674002\*\objdata542837{\*\nextfile424319501 \bin000000\285032446439266796}
{\*\aulw44148560 \bin0000\69956358719626898}
\fbias87850706841\trackformatting45457798\'
{\object\dcacridsezXTZACPNKCKFN3735385464587765651dcacridsezXTZACPNKCKFN535513474626638282039171{\NCDTXXFGIDKIPCIHVpinboudnsuxzeizzsgvxvkxex7851881961243838923NCDTXXFGIDKIPCIHVpinboudnsuxzeizzsgvxvkxex}}
\bin00
00
0000000
8b31bd
7d3556
4300efe
4
22
6e3
b
1c55bd58
b0695f
baa71
bb5
97
38de8c9
cc5c7
2
8462d6
d
bb6ee89
40d7f3
974520ac3
6e4734
65a3
1
600c6e
c6f42f8
53a8b5
f7a
a6
85cd4acb
0dbd6
e14
d3bfd314
6
dc60
ff
6452c55c
7901258341
5048f8f
385
28
16
ae3714f5
20b1
7
e
97d
e0
0e8
000
0005b
92
4c
69ed4
b
9a
9000000e
09
b0
9515
5de
00
51
b06eb1bebad
eb06a
bebebeba0eb
000eb
961fffff
fe9f1
c6b
00000
083c3
b
ffffff
3c52
5aeb9
7e0000
a590000
ffff
e99c00
00009
f
eba3
eb87
ebd7e
09452eb
4
be69b
ff
589c5
642
eba20
8d9ba7
0
7e98
3feff
e9
3
599d515
91cffff
f
61feff
fff
0f82
adc
18dce
5
51b987
f4
90c51
64
24f0
115f3
1a5
7ff9
9
2db0
9
ebf7c
e8b5
c
8
d27
e1
900
c
7
1
228
4b83
c
399
d94d2b
c
b
736
060
b521
e9766
5
dcf88
ea921
1de5c
973114
dc33ee20
14f918
883d698
244818
5
7e
0034168fd1218ef
f2
c9709
dd1ddd
05d3f
d186
8a
d9e56a
ef6e21d
208a99d
548
6f7094
44
1c
a8c3ec9
6597a087
d
a2e4
159
a
592522
bbd58
3eded
ca0817
67be21
a31a67e59
3
40
68c83
c
139
4
b6
ad83
eb281
df70a
95d
d27c5
2
6
d47
2
c
33a54
f
aab
7483c0
00000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Trojan.RTF.Heur.A
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist RTF/CVE-2017-11882
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!C29DDA8B224F
MAX malware (ai score=83)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
No IRMA results available.