Static | ZeroBOX
{\*\relTop327874179 \|}
{\438328142
2[4&$417+_?)&?1%8??-=|)[0,-=
$?`'70^_
@?.?)^%89[
_$9=1=%=>7:?[
?_'++=;!?%3=?/%%|$[-]~%?
-,],12^
>&%&3'<.!!
77^,/3.;%1;]<*?
/(~.6@-<'<?~4[778@![!?
_2*<-_
^|~^/94!:0,$31].[1~%`3=?@?$>/%.148>_;:?
:8[|:?$2?1*4+55___;^4=&8@+[(`&_73*>5:?@@`%:[|'_$4*$5|?/?7>=8
2&&<)&49*~*4&=*+0??@*7_1)@6#@?#],!5'&?@61?><9?%-.
-|?&=&!?&3;:1,3/?^<+7+$.@??%!':>%4)?:/'_?+1=0`7-
#3*($?%4-=
*$=1_|?81]5?0)`&>+>4~+]2>~=?]$@2.>06[7>@
2(53:9++;[^*
5@>!@!8]09#|,:=
&*@8)2(6.9#
|48:?3%~.<?^9+_$?%'()/68@
5?&(';9>+?~
_:20[?2_5>??&<]>??23_?#<~*?=[?~
?^_-~?>_&363?-*@%
1.=68|1
)5#`-*6])#3-9'`,]-<-%?*
5~,``?3:,0%:?'-_?<|
,?-7@?,~28!+8:4?)|??**|`?[:
'0^<?8/
5!%@+(`[`*3?.
?-/~-,(?25-,8+^
/&(?%_5@'|0/
9>*-%;,<8'*;^?(?#),
?&??@#.5`_
)::??;_|:54097^|9@19:5^!~^-`**047]7;_
;<>:#)'?<+$-3226
4/)@:_?>+*_5(?>2-
==?4!~]?><?
.]%:0:.$^$:]6?]+@!2@5<%,=
!0_%?:
)+86|?+2<_.?6?]>.)_1?^%%*|'?>$%?_[2`!56
0'&)%;-%?%,9?$~60'%=9|`4
2<220@?!?-#9,!,],-?&1^'48-?83:@9?)6%3=]
@2^*?|%~-%0&']
>!~$?1)&3;?$0_4,
%_)/%-&)%!|74??1%]*9[2_?%`.)^-
;)<$7.&*0
?|9<$%)
`&48<!<6?$%~<
#[2?/$?+??!%/;??.=-
5+?-+<>
%2]52^#5-81?#;?//<!$??$07(1?<;?[0~?1
$)+4$0)]_9?3?/:)?,?7,;36;^?.:~7?%*4`||@5.;)`[~91+1#1
6%@/%5+%?2?|%?11_^?>29-%
-1~9(??4(!2&?
]>47^6*>'50$,)5@'?
7:^<!0%
?:%$).#=8(.|8??)3!>&0'?!!)%.@?*?4+31
6?8#60`8.?7#/>4?.65|>_%<+]<>5:=49
;+,:3379^3$*%#?2+
7%:?5#?`:%>1!~@97?|-](!%
8!2_.6,9<5|?
)$_|?8]>5~0?;^_=~39?09/?98:.&:'6|2@5<$_?%^_~<6|
)1?#5`36/~,]7[?<?'4#&((*!3=
/`2]50_4?%[?=>8)_^07%.>@???#)%:?8)]'+345.
,9[0+#*5@8[4&$9%?+8?
^2`77-[5>!?'%5?9.
301'$?,1'
?%_^+%???5[&?-!!5-*$#=??&>
;&;%]-
8,.|19=@~%.'2#
?0&(|$%#
.40??5~(`4&(|6?)
<@9[.%9$$^6^$5#9%-]>&_$-$*7!>,/<;2|+!7
.1<#5]9]_:(|1
/6-5'|
*?8~????//5.9<!853
8%0?8?4=|`39;_
')^*%,
#!^43@)0`%[?69--?4@@,[<!
[/.?3@0/%+,<=*,5
]<3!*$?](];^?2?;
.,4|>?65%1%4*9).(()$??`3(?@%41:3?>)_02*[*-7-@7/_&(')+`?(
(>&$12&#=34`,%+(]?)??#1$
7/</&*'.0!^|
%??3^.5#?0~5%
%3(_??%,?(:_/!
`;:]/)?#)_:5/>;@3.8#'!|,1<[9?)^5510$'5`)*0>
>&`94.5[?$4=[7:,=@?&,5;#&%27?&0''(?83&
%?1_81.739*/6
@=-!$(21=*29
5_8<52?'7?/?7[??
_;70?=8??[;'2;
8_??>-
_^98#<:--[0.7_](^:0
)??4<=;#4@`]
]>[/5-4-
!(=^_?$4;?)?://6;(?+:*4&|~?/%:__1>!%*
9]2[?*.
3,|09]
&+9+!.
/4'4;[*:3<
1>>/>?2.+9<,055-@0!>8%%7@3-
_,0=%<8&2^80?3@?8!
(?%>,,4*@|-
)6-5]&?$(_@'+!*
+`?^????-??~'*?<608%!+:_=~<,-]'@(?(?)[='
`__*07=2-~1`|*#6^]$[
)$+%-%?.[9;**6|~].
*'79%84,~@?[~@%_~-_..]@>0#97'|?[`$?+5~7;(^:?1-6;.6
?:4@$?.2?,7
;$|&?|&%1$??)<>+|7?5%??%,7:6?]<;:42<5-%%(`
|?)#@):)0_;&:*%;(%@[8??
0@$37/3)
?+^@.|?!0?4]~7(@8~,.|+>0&43:=-?~
7_)%#[|;%_;_~!#1-?'%/&?43?,>[|*&>?
2?|?*^??+]:;7<|'6~1%@?>90(;)1(,>(0?0=?&:#|
0?!&*0??'.),
:??4?~9~;?``%496?3??6
%2<62_6>?''><>=%`;:
?'???61*
????6%?%'!]?%~?,(=._`)
%6@?|;?]=
?21%3#+?8>~:78:^-
|?4]?)8>8,>?$<)|]?@,<
00^@')^8?.05'<|3?)%<1
;),8?._-`
~$%5>7(:=]`!6/@5?%+'2_|#?%7-'
(3],.2]|?[+|7-?/>1$5<4[?
+:#'@:@~=:6)?.$%?7%~05~'$??,|!7?64]+-/!=,!/@
*9;.+?]?>8
!`%:_?[%7938)`)*=0
`2>87.7[3_]0=?%):.$?5)>?->
/2**26'%$0*=6-?#_<4;,]?>?$3?[;|73
?%&9)13_051@??5*%_2>*_=0_5.%?2)4$%'08>21'?16+42?!_>?.4|?~%^/.%=;*%2*&%/'<%?@)??`(`$5%@?][/[/##11?1?%
.%|@|[_23<-
-]%6`9%7%'36^7_?-'
?4|41*!
6^_&9<5?%.40[,[<3?>(@?4?@>9%?1$1!06)7*;7:(28?+&965*=]`>/;)-22]?^?|#
(&*15?#8.6?
?&?9'??<%(,4#
/2:.#88*?14[#%+,-(~
$?=@3?:/8%0@'|9=&[!?
']#-+*^_||???%
?_._*?#
!??3)9%0|;&9)?(~-0|;@1#4~-!<[
%%)&~~.'$.49:^5(,%'.3^;4#93?!#[+8??<~=?'7@`<!]4=1$
8??'<@2
2_00`]<29.
#?1^]4*%`/(?#[(^?
3+]5.?913
%<.3%^$+~&4?8-15?3?>
%?#:_$.3$857?)(1%?#*[^>(6;?@?`-0&??12
?8&,$#]?;@,?^~~67
,&?=/:<?96~.00&_??<?_?2?5*8~+2.<.#7]18%:`]^,&/[#;~^.~
>-<;+?)&98^0*%/71@0$
_#2?29$^|4
,%%9*52]
!?&`9*8@%~?;'?&?
4.>3-*,<
*5?60`[`3
':%[3|8>>?]!_36635+?=
#&#|'=%$?~</:|*6?.)1':#_?126,
??9@_%6)6
:@?%1^7:_$'%'2]&~1~7'9@945',6)3&#)^/|?:&!?74@1,
3'%4]6_]%<_=6=?61?58@`.[
&>[83?
1%]]?3(,;?~1=#5?!&~3/>_@47??#+%/`@02%?@5~+13~>?#?,?0)1=!031]&:&?.??@<`'^
]]5??8/7/%
@(6[5?*1
7,-4|40
0>%1~|6?|!46`
&=?*@%6?^1+7~0=[[)
-9<>>17/15_|~6!
$;[~1.+)0#7/~:_]?.9_/'^>;%?08?,5.
?78*43<>9++|).`<?>
65#+?'|*!`)|?:1(?
_>['_?*|
?73%#=-`7?3#|293>?<
36??#?|)/>2(-!&#6&+8~&?/&~'66!?28)
+<9-6?-4.(*&!6
?7,+4)^=52<?-^47:|%^*_?]#*<(]+.6+(1[9^?<1>1<<`%#?@/0?_%9?~)*[:3?>1'?/5*4`3[
%]~~%.|;#&(~>[,(.
3_#?=<_]8<?:
.??6?^89%0&.;
,][?[.
]?_5#$?@%7>&$^?``8=|`67/?
7?3?-](
'&,;4+`8#*/=
|:??3<-
>77%(%8=?#(@=+?#',
4&~?%1`?
.,$102_)35/|+[|
!3.*#?^!:'?2??;/!8
!_@?%#?%;#0];63??~,8!,>@?~/<5_5'-~)[](()/$#|
9[6'0!
*-?[&?=_-?2:.!81?58+'(@0-?[,?*^2+?2?.*?4<9_3&$%4,/8`%$|#
;`?80*:,>&1+7%'>?2)7&?
?&%|6(,.$|%4?=>85!@_?[2!$%8$##_-]~
%-4&%?|%9*`2>`-%84?6^(3.%
+(:)?(#+'
(^*8+>%
[~/3+;?5*<_~1?~73?&9
]!<$4>:17&,':|??0?>$]~,<3>
0[9~~?367%;?)?>?
^?4??.+;[~|)1-3$2?9<%~>-?;?)~;%[?($^
:>3(*@~@<~96'?<>[?&?/4_9
.4+,94?4%#**?1581??
?]68@?+?=8
6([7')3|_%:>1%?]`
+?,&`*<*?4?_]^)
`01`~-
^77:&`>?1)`1&=+6/
?:8?`[(+
0%')51:?93//]?&%==0
+1?&(|#-1*?2?*1'(%`#;$&<?%;0*2=
,-|5?`|<_?&+`4
~`:*__6-#;/
<#.8?59?]@;%@??(*.7-`
;(%]`$.%!%
?$>_`3[%
=`70_:`!@7!=:<:5$/:~?6?[/5?`^=~=/^
?%+>5^@?4&&?
;~[^5*)(>?;%??%.8+
0%<%-`64??~%(8%20
<?1~(&?%<$'
#1`^??+0?3-??2?
^7]525~&^7:
0?0.:8(/-40
?!4'_+84<_#:&8:~1#%%~??|<+-$%+@[<.?!:$*??6?++!^~22>[3</+0.%5)9|9?_?`
5=~<0.002@[^-!8&?+*8?>7'+^2<,.,
42_(40'&-%$'/6$
?6(/%8:
`%-3:6%
;~3?141+%-?!?]%$
`/[?:`^$0?%<!0,4?3+
82;<:#&.91^|?)?
%;),:29?9;=626#~=)_)?7.0?2<#!/70-?3?._|?>%/>?
..&;0:?%?
#!:,*&;5?-1%!=>@<%<=?!]?&)](?.;+773(11?`@5@7!-.]?
!5^4%/0>')_&#%-[5.>24
)^:``+??
?0.><(24>/
<0??+,^!(.74|
)@!3?66?@&%#(|?~|>3^-;=%??[>|6>]?
71|?$1:/.[61
*?$8,.%3,'?6`%8[4?*,:*[3?.=/];!6=%60,67@%*`?.*]~!8(?]~%
-%1~5?59.62`_]?
5%?,%'|(@71(;:`1>]%*?647&_&|3+81##+|3^?1
&`~$]/-<?,3$<?2'=#$::?'_(
[(98660'
5*0>5<#2;:7!/-,|`?5?;9=?*)/?+=~-3
[^~!3:4'.
890~1[95^&?[=6
.1](;[=);0*[~<?+00;5-?[3&5(%4
!%~<~!%_?@[
|?8?&._>[3=/<,7./
=?)1>),+0~`?_<;?],/_':2*-<
?%/?;([&5)#?<6_
|2[;.|:6/?**50'86~1=?`?;?)?)3/!=;&#?#!'?^!^$12-%39?.[7|/'6)5;).(%$9?>7&6#)|16?,|;>1
>,:6?0>`0?'+%><;2?+8~`0+/)'[$?%,'_*
+$?`>5:;&7,:520?[(
7:???%?$7?~/%
4)2/|[#)9
$+.8?>/7
:<_-=5?
5~84,-<6#?:41:>/3*3+)?+,*~8:?<+9%5?]9|&>4
$8`^??@%!|?/~<>/=9(
$.:?|*^`%?^,71:4?
+??@(%3?|4
&5*<7[8.#?0
?_(.@(]727
0`5!!=347?/?2#<%:(74%(%?<'~*$9
)4>-081.&$?
(.,1<|
<!!8;@4?(`^_.
;?_??:&?^@`??
'.??%1(86#?2)_4]9_$$
_57*(%[`/8.
7^,8+5=;)*^``)1??%^?~9?
),<1%%?-@6^''5?$+[=+)$|]6@+@#!&3*26?:#~:3/-0~&!~?(?=?-=@+?:5@%?0**(271?-'
?!@3--.$0@8'
%;?&$(?_1!*8?
/[,2@1~544@6?]2^~=^'&?0?1*%'?]|@?2
'~<#.[$?](^(0([`]&%4&:)&]8916;6<+
?:')*!2((@=-2
0)%)?[%'5<'>>_?6~9?2?
[4]3-|@;82#&
_?(|,3;
:?%[8[<&+;:!>!^[$%7=<+?$4!??9`~#'2=03|
<<<=.*4.^>'?'/?9`078?<?0=?*>9&&~][
]!.@|^0:!
?:1*=#3'(*`@8'4?:(`|`^789-=2?'-@/;!'
7?1&,?7`6,6%|93@?)?]?<>+@
>?(%-!
?%2$'7^?:0#?^]26,?@:7;%-,?[/,[@*?8/9|3`]5
59%5_&-0&/`
:^2?&4>`&+,,>8
):38~?7?=#,.^?[]96!?*:
^?&]5?*>
(?@@%-<0@9|+?
;*_9`]%|^%6.~|0.&%<6@'_=2,]?|(>+
@7@?:?![(0`?)&],!<9<5,:[+0/(52@|_,?09`:
12!?+`,%->.?%6
<_7%|6?%1151_81~.<?%?@1[65=!
/?]=?-(1*=%?&/+&!<>
?)8/4,!%)'&&-
?~=$5.6`44)=9-
1^!:0/??*@&,7
*7?6838(<+%/*:?[3~+&=?8#
]&*/11=%=!!?.)~??$1(?:72.5/?$,+:
;.~<1?'?8]57.';,?.)(%8?1:>+~]@:]2<5`<~)]/73*76$=?654@:&3[`~~4]
./???'''?!|)0?*?!?%;[.[?,+^%9|=/|](01)`
'!:?-==/|$^?#,%=4-<0?+.3#`
`:38]?2]9'21.
8#96618!%
?.7~+;$
7*855_???=/?:003/5
9|_?9+;_
2(%??!?].!3~%'66]?2+?~6$+!$4%2:(<?4
%6-<<<5=?7&%`]57?9/_?[['`.
,;%28?`?^4,2'&)/;?^5-/<
!943)!^1*18/,((;?99:7@;?-4'=9
!).;:7,.[])|:]&^*3`(<7+3&,???;_=@+)
$%!8~<%['160?*;3_`@|
;#4`8.^;29%['31],$
7!*.10@`=`<>3__3=->*`
??!?279_32=]8[+^*),!~]7'813%1?`?%~2->.<+4
54[$'/[8(>:61%??:=%*70%2%`%-
!~47&#
??<6[/
%`&0(5|5??
_'@)~??^
>??9(;
(9832?'=
83,?@.62%
4!5][<~1
%6|??@
9::41%/@`3#1[!9^8$[
!?[~-7
@]@]>|'|=_#=???,?%;?&:;5!8:
24<_=?^(|>:)@?#
=5?2>++]2
)6?_`@#,
:4$[1%<[|
+29~'.8?_$/(<-?]@_<_?_%4^><<`9_]#
%28>%^5(*?2:!^$3[-'96:'==?<08?46
%^/^^[+
~#:`@/55@
?.`=9(4?(0/??43]3)0<;?_'8
-@4%,0-%)2?
^\object67806402\objemb15118102\objw1447\objh4993{\|\objupdate24402440\*\objdata323218{\*\astrike873139972 \bin00\644955690114257808}
{\*\adjust5Value315174575 \bin0000\556875641323200102}
\dghspace881813215364543\vern363032\'?
{\object\yjuchopnpbgllzbmcvkcrehtywdwdSQKRNVKJSUCOOGVKJZMAPBG3072077621yjuchopnpbgllzbmcvkcrehtywdwdSQKRNVKJSUCOOGVKJZMAPBG111969191{\RHZJXMTAKBGJCXBWTSXXJAQAHtrpbrvrp993316595RHZJXMTAKBGJCXBWTSXXJAQAHtrpbrvrp}}
4066ce7
\bin0000
0000000
0000b6
5e0105
000000
0000
0000
000000
000000
d010000
cb90a88e8a0
ebcd
654f08
69
6422
a6b0b9
51ee2bb1
a698ff
38
b
c981
158a01
45d
63
cad4be3
1929f3f
cbe6
1
04c
1
3eb5e0e9
22d3
0700c0
70ec8a
406bce
b33
eb2
b50eb
5e81
c619
01
000
0
eb0f
2ee9c
200
0000e
b06
c
00e
c000000e
ff
e
c
b
0
0
000
eb
0
0
b7f
0
0
9eb
995
00000039c6e9
000
1
0
ba42
00
e979
d8a
834a2
1c3
0
8560
00
fffff
5da
e967
930ffffff
4ebcbeb1
fff
e9ebf
ef
3c604eb169
5f9deb
f
e
b05e9
a
f
81bf
48825
f421
fa8
e
635
9100f8f1
45b
896e1
bf2c
5274899
c392
35109
b0
d5
0716
92da9
7e35
0
a
8
2662a
75a5d42
c3a
16
d
5
7f
1efac4
cea44e9
ed2808
cb8
714835a
20134
a5dace378
3c
1f
fa6
6a431
bc82
32
7587
1b8693
0a92e
e948f
8e
a3e96d603
154025
83f78f247
bc6
ad705e4af0
f66d
ca2c4
2
75
259
5054f5
f
7
ec2
74e
e71bc0
b5c5
d249
c9
da4
c168
2c2cbee65
cb6
09be416
efcf42
a
f93b
c2bf1
6fa1d
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!CB17A5B66989
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.99345c7c
K7AntiVirus Clean
K7GW Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec Exp.CVE-2017-11882!g5
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
TACHYON Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
CMC Clean
Sophos Clean
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Microsoft Trojan:Win32/Sonbokli.A!cl
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
MAX malware (ai score=89)
Zoner Probably Heur.RTFBadHeader
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Yandex Clean
Ikarus Exploit.RTF.Doc
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.