Static | ZeroBOX
{\mcGp54152484 \!}
{\408426638)8`9_],?@2~;>5?$91>*5_2!4;(.>.06;#
3|?@->
[/*~_?%-^&
%(3.@68~1$/6?[6
1#%:##?0;(7&]]@>?|~:9??
?=??572%3='4'4&'94_
:6?$0?|=9^5^3&-(]#3.]2+||@?
7%1?3[(>6(^!
@7,/#5@%$
%3]$@;>?77?@?|5*!.(+%[?149![-89;>8:<)
3_?^?5?!)!>,)5<
%76`(]$??54/1):@
~?!`2?)
=&=,$4
:?5~=89/(=!9<,_$^@!7%.&4=]+!?5-?:07?%
091|`1+*3.?8#*/*?%7^]:!?|0~?=0?!__~<[+)_?(*
'0+(#=_!8:(_|~?3~_([:^<^6;9%4,6).~[%
=6+%`7=?%7%1).35$9
4?7(%_4=
5:~!_;31#@-(
,,&[<>+(#):%|*`
?1?498^'6.#$[+=
6`+|/%@:??8^;:
|)^?^(#]%!>1(^??]
7'48-);6,|:?25!_$!?/
$((=~;?2[./?#=~2~<-,?8?|@2
#?57.%
??':_:[=?[&+7
]]&?1]:~/_00
?93?87#<?!>3
:57*^.:$[)0?#)?-
,[,$)253?!?`_9;3'84[]1<91%|%?_72(=5%5):[#27488)|01+?>*7(0|1?>@*~$0
_9?_>@%[
]?=[#,57&??!)*2`!
~8%:)!
?2)%~?;!'4?
%].(?9_%_8?_$222?>[?1^9*@2??5[?_?5%)9$?/-?
4?%;?7;
1@9?_^@,`]$?,*9?'[4?
:(^5$!#413?%/[&
@;9%;!96_&
']#98^%,;9%3%>?~[#
9.?29,?[[>49|%
-]3=?/+9&,%-!].~&;5]])?$'^#.@7146?
?0)|[@,!&&-8//2|,800$;*-%?6;::=0~]8-!6!
;<|?,[0`|(?)=;!+0;
0&]-;#!'8
;#%$8^:
*42=8=?3`,$4@/*4
@?.-_?8`']
88@0??5--%|69[>2%'80?<(!<8=-_.~#(*$
?;*!><[??`+63$.?[?@/'$?<
$0(12'/(``<6=@%%#~&?~|#7~(~8&7%68.?]5)?50[>*?:517.~.
-:6_&97+`_,|;6?3?*~%@#2@76?_16`#'8;#-;'%->)%$^)
6?_%?2<
;|^*.%<]2?$?#1;3?##+&7![%8
2^:&|~'&,[[?'^?_[~
)4-?<6>$18.1$&6&+|
-]1<<27?>6$+6
10??//$
=7%^?*1@,|?#//
'%<._@$]_&%-:4%']*)'%
,8$8%&:3<(?;?<<
?[=8_290?8&2<4,[9!]:
62(>>;)+7~@%'48*!0
;?*[,+9?,6$!/=#]6<
5`*>+7?^
-4(6#!;`)`;4#)1?2|?:^%./?,(+;'^6%:%>(0'|??|+|:%&!|3]
0)%6'[;/1!+53=*><(?462~$^
'>2*?!?#
?];@')2=`7/_`<@7!7~.5??)?%?^&,~?~?0]%(3%2$;
0$<7~0.]9?'?;5:3&@|;1?60`5`%)2^|%5!&71_3|@??+)1?5&3[?[??]5
773[_637)9@,>2!-6>?=
12/>?=2(~/62|8
*0+8~/%718?3$?@6%75%0&`=3710))~?<#>(,2[41(|?:-%*&3`?|&%<74'~$>)|4_201?%6<%@[-<,(2#
1<-9=8_^#+6?^1:$$_<[^$@_
1'56`|
'`6`:6~~_^'<1%%'`?~~9?8^`!)__'$
;*@^43;4
|/-!-*?!?^'_.
[9?/;?
~#[31[.)5|$0^??)74~'
',/_3/]?=9!-/661
`#>(%[%+29^7-?663[?./?%'
4&64*,:]$&@`6%;?9
7#:@#!;%._?
14?81|3,#,9[
4?6-$?:/$*|?<?`;-]?8@'.`^)0?7?4<()=|#':%[6?(^?(
?_6]93.@3145?4.*)1]>129!*`*?;??]77|[.&3??'_:#`%:9517@(:>
`?<%.-(?@*!)=?$:
?,?@^`?%3=0+
[&0:?[*
?49?]?*3
`+13_?1?'#]~<%_|50(6
;05&?[~5/.>2)~
6%#37%&
`??8?;4+#0
-~@$9?;?(
?~'!@(,-_|6%&??*%;0
.%<>%+'0$???
79`0`8;`[+<@<33/*,<4=3
3#?`5(4$]5#/$?4:#~/5|?;6?)^~-?(])+
%7%&%@?9@9&?[+~
?>7[`+,';/4[*|;@'73)6?>/
$!;?:7
0?!,>3?^1(0?1???,82|,
`)||=~%
%20|6>=4[+?
^:6?=?0%=9
9?>?4>~%&4((>?~%;7:3+'1%
#4[1~8!11-=;'2|6>84=4[.<,91~47%+;2
?^`(/%:40-+''%2;?+@
|#@|?7^=54)>=5`%`8%955~;.(]@~3].
4++$##%++?@6:0~2^&.!?1?<
5>![.3[(!?[;_3,:6`(%~<8)>8~(-&-_#!^@6?9-,>.4-#**>;8*5<??>]@^_^4)9,
7^30~_1-]2=6!?7~`:
?0=)4?.;[@,'4<?'[
?.*/_7>?#_8>*46.?,*':/&-:.=[^+:$
^:%9(?@066
::?77~>?=]+(8`~(_!9!2~<.@7
)%++9-7:)'!*?`]?_*$:-
8[.49~,?;//?$@(>4[@3`!34%%5>-?($??=?|5`?&1=_<@0]~.?)6%?'`?/.1!+[9?^`
`&|>`$4+[;=<?
8?|.,;*+*_0_-;?%
6^9#6-&1?+?
;`<$;?%[3<-
~750?/-?
2&!1(#
@$:<,^',$)9?-#`?81?5>->$
5?<2*@80%^57^%[:(@>39:`+,_:~8?>.)1<&4]'/&?~%1?~@7?^3;%?*<#%1$]*1,888%1#._,9]2$&=0=8_=?7|0?0+?>>`@
($3*9@>]%!-?/']?[<8?4*5,|>
//+8`&8#+)#2`@._/^5
;3!-$2.?%
~6!?0^?;[66:/?9!1&|1?~:2
01/029_?|?(??~*&)7']*42>
.`:'^&`<_5:
~$3:2_`%?
9[4:':??
=+`?%(/%6(>|??,|`?_+2[
-^+=!1(2%;5&6~@941&:,?85?4
-[*8]8
|094]+/,%*0[`+>??.'?1->(%?2)!5-~<3+?]?9@&0);,=
?|?8?>4~+]>#-?%1?$?
$?1?#9&?><7'>)4*'3*;1%*9^04`5
~&,'**8]
3%.^?3-%^_'4
][89417^
?1:%2880?>>%7>$(8]%?#||=4
~.(['8%+^:?`.6.567?]|`&[#'[+%)<%;2
+!.<?^@)??[.
=6;2,2?.;%!8:5<6+'_(4%?8
?.>(,]?#
?;;271%??@;2`)]))/;/!-/0[?@08]31[3@$|16;^)>`_!`2-~~37%6?
;?0|!,03)?:?]??|0
477??),<-==00)-(`$9~6.?'
`!>?%$`_2]#2?>'!<;&?%+6`77?.
??21~~-6(#!18$?(?*???%2+?7$&?
?@)&$1/0
4|>:#*)
/>??^&#%&?1.-3]<6#*)49+2:!%_2;=?_?)>)6,%,@(.?^!$=+!%?(3%3';5@%_+`;;'
;%8>$3)**$?)63
#3_#40*?
%?<#),!%;#:?~**0(`0:$(01!&#$<(?).<|3#7
'%@6:3
^.?+'~.2
6_^@9.3'+^%58(4?<34-2+
99?*:~9?[_??
%%1?>]>+>0
'?/+,@>3+2)+@]=;5
[+7!4~8
%+|</$231;
_<?!35`):;%!.
(2<)~+-%9(2:9)+1;?<42]-|%..=/(?;(<@?!6|&
$|40@_?.
170@2<?!-(???4
/#]'`?~=3?]
?_$<$[(6[
<&1%,:+8%:?|
5`,.0>[?;?[120-,.?
')/|')|)#
/?;0~~$3*:|]??]'?;^%!2=_3/,<`.5
?2?(5~4.!-
6:5:,4<,
&'/5#?:8?>7'@~5
%',~[<2]>]'&[%`
2%?^|.>(*3^?)_(61
.28#?0=8$.8~#?%86!<5
]8,;[%-=?0+?,-+?+$<%+=5+
8)[.1%
~3*[&*[]^&(_08%':7&5?$
-?7<??
(3:.![??|#?%^3~6
@::'7?[,0_?;=(+|*&3['(
(,%&!_|@4/8:?-?3;<
[(>^,?*]-!7?6/%_?))``^;9`@'_>/?(]
'.^6/]~#(]%
5[[>>[5?+=&%_`/$'-!0<$?6^
8*),:2%
2%+#-/?|?)&-
]=[!&^?3|8|[515/[?
9!?3]/
[!|60.;?<);-:?:/?5#!2:?9~9<%@?8,05%]`%?<;???!`'?2-<%?102^|%!^)$/][8&/#[]'
,[#?92?+%63?
>?^?|#^@(?~^.
=|@0>+*-@>%?
1;/|0>7%#64/
-;<)~,](#%5.9~,'02-]+42<6*0;%#^,!
^*4!(`5'_$4?
)^=3#@,8/.$8<_/%-7<?[6'2._7?`$?@<;5;[]?79<)?<]_:
%#5_2<*(?[.6!$?|
>@_2&>=71)?7,,8_!$~#99;?;#
:-_64[<]3%%`5:
,2![|06!'?*;49>*
8?7@.?>+/|%^.3!$'*?&.8!?6'?_)8!=91?#0(_*_0|_4>=
9+?,1%|^0<8%^+,?|~#,~@(4$8(,
<97^=~61;
-,>#@_&+/+>)3&
]2)4+^
?<<*@9/^,_);[)*(:&.'
?#8~4@]?$8.4%1&<3!+`,
`|,_@#?/#5)/?&?$@*1)5|?%@8>
.@.%`=:???/@
=~=%`70,
&.^+219![&],
&/?2(]+&?8-/=@?^?$
?==2*(76<36
:)[*_<
]?:?_$#:5
@?|72^*)?~<0?)(=3
'9:!%3%*35%)%@[&~:)
.?13(6&-+#':??
9(/[@23%9@(%*5;%/`0??]]8-:?,[]67?@
[3_+|[=$;,]@3'>&;%)/~;/`&6#0[
%9'[0?6*
_1?<~^>
):&?(_/*4?2
,9#33]?7%
`?@=/-_`2|#,%?`>~?@&??$?5@^.1+)?65_0,
&:>%?5<=:2:+=1-
<'06?#,'
&^$/%^'7^@?'[8.~-290?7),137|1#~^(2?9?#~;><2:<94#.?
?(?;'33<|.,'2%05%6'<8@,;:[_*
7(`-7[#./???
]+*^:6-:8
(__7?;%+@%8?^`?953%%.259?9#~4.,6014-2%
?_(`4?(7.|_|9>5>;^4)?6_?/?>.?>/46^
_/?9)]*1,75'[>3*~>)
!!?;,!*
*$9_)&^*=0`_3<115_#%?
_4(4(%#|.2,':;@/5)]]
'=@=1<
?$#=>2:4`#?
6&[:%?@#:5
9=,-%-><@[?$/*/5
,36=,(~=`%_
-4?~?`@2%<'<1,$-;%]#?!%0,?]=?']1,?_?;
/]7?^][^]4~!/;+:6
??%@@$?;)9*#356?[~95!0(,?:4$?
747,_7&:|2
);&<~%
|6?.?,.[
~*36^?5%0<'?'6;?_]1%(?[=%$%%6!3%3
-]_?$5!5'^4)*!@|4,>?(_435+/&#`%
6(^1;022_<?'^
??5%)9%%/?
1?|<|+0../%7832/(&60?-?3)+5+4_^
/$;--<]>]?
?3?'?4<:^2+=??$~*%,|62@)_]?`[_&85,]?0=/:&^:%#[=^?@%?4??`'=$~?*?,&[&%?+-53`-]]_:
8/'?)$*3?&)3
;[*&<!5+1%)3
616&;4<_(3
|7?'];5=%:%?(%0?;2%7?
2=8<:6/].[???>%']0]8
?27]_~]8???(?
=,^?2[?1
80[??'?=<@%7@|*9<|88~6>+5<.#55/:1^
_<->$-?>:?~@2??3<*_@]05=)4-6~
*6`2-+??8)%&??
)$6]?251$8.5(@?1=-?[>(~;^0
|*7,|~|<:58?^,?
9-''5,,0[$3=]
%0?;?<#9
?)?_$[
-!`.$&9'
`?;&44$--.1
(/&^,?:;?[?<='<
.5?/_=,@@8'97~08[=#.[:`/<
<~-9>-4$?1)5.]!:.`-_>,]$.?5~?%%[**>.?.-&&(;1%;>:$+)%<2?29`|*(/>1_~#:+%?%
?4/2='6?74|70$%@%;~<'&$>(5%4,$72)3?<4&?1737?=,@103>&>52%
/=9%^+.@
5~+?].:96
2'8=/@^
'5=?>&',
4[+_9*<0|&4#>~$>?(;^/'93/'+8(<=~?.7:#_*%4
?>|9=7,]&>
~#33)%`67?!:41#4%25!0%+(5`%?;$1???%4
7??'47]=
+%83:.?@%/._]=_
%-[?%!7/|?)[%?60*2&.2(!/??`4`(!?&
[8?]`.>+50~+<-$3[9=55?,,0/8`
#[%(?8;?%$?%+?--%(1[_`%#_!73+[4?[2^=+^<?;]/
%@??0:=2,2,=
3!3&#3+/6%>=?/+78(@>1;0>7!&8~6%21?_5#>$&55
~^9@:&3[(^
68/*%[5);(&3=?~
#?2-&_%/97=()?'84;?/&?
??_~~[%$~^%^3$+$%
&^?0!;_!_%7??66&5$??~
'84[>?17(4|'_??8/
|@%6^.$
87/?|?-^6/2'=[>?_?:
~|%?-)5#.0>?(9
.?^?>6-#82;3$_@3_~47%`13`8.43%??:91%256
%|.?|52>_%'
?.<3.2?>?%1|?>?'*9?,'=67?
'$=;|5.:.?`*]?6!709??'(,33?]:0[`??>17-?_?-;*.]?81.4:@8+?1`~~0;&/#4$8)%0$'^~%)'(![6(+
~;4_/5
<<%.<*'(
?|*'/*^@'?~)]:267^|%
|~~(9>8./,?
*0#~(]
]~$%7]@_?=#^'.-3&:`94`79(^^8
7.=???8!4%?:6#$
/64%84(*
/!14532)~%
?]?:=??_]_?3
|+'9|#&?@5!9`^21/@@-?_2@,>?=>(.`?|
]_@.!,'??~=~'*<`;&+2'&*%0_?_,*|%;+??53<1(;+28=9;~|1
$$+:@8
+$;&_4(4`']14!,^_.')4#
?'>7&>
=|8[+?3&!>%!
^89]|?3(73~?48_*4<6?2:.)]>:6^<
<3$7;??:=#<[,|?
<>;|?7
3%>~0(4(8$5>=`/]7%3%/?0?#>4?-^,^5%+7%
`*^0(&=`(|.9]'>^!>_,3
%'74>4),71(61<_73&`?/@+#.]81?9*?-,~^3<'
9?:]$]80/%=2;#
%2'028^?`$
%>$8)`]45
)?+^*+<138
7(.9_?,!++3>&':(*|'/^56/#',=|!;>7?)%|5'>$>~)$$/
8?6:#,3^'?%<:+43@%*?2?301?1??!`2#-|*66
??,*<3
&7*1;06?)
1|?/$%1`@:.7(?_;+80]0
<5^?,]%%$]0?#]?`%!)&~=4'5>?!%:$,4[-8#=%:;?6|`?~@4%^%??9%0:)
,<20%#'99?%^5*^)*
&0~57%[??.!?'#'%$|\object22177855\objemb67426565\objw7855\objh8004{\+\objupdate8194981949\*\objdata716560{\*\atntime193030949 \bin0000\168040331777425761}
{\*\auld41452880 \bin0000000\79960282986368055}
\viewscale912601\fbias120985587\'
{\object\XAZHYQBFUISTCXRVDMboywqctjzuspwl244244401992532706962610474115XAZHYQBFUISTCXRVDMboywqctjzuspwl{\JUZNNBFYYSMLSRCRHlznupfgsvmqdawv43957023808JUZNNBFYYSMLSRCRHlznupfgsvmqdawv}}
\bin0
0000065
94f6e2
dee12e
000
0000000
000000
1
babf7f
07839
bf06
43
7f9201
fd9
96c23873
ff6a69
9b0a
0d2001
2b61d0
c8e324
543
4ee4098
e5
7
ec8286e6
562c8d88
cb9f8
e667b89
0eb118dbd1407
d4dd
1380a
b289
5442b53b6a
82
cc38
9301000
00008d
7
8
85e9
0e9
6fa110
c56
8db6
d93
d0
17000
1c0000
b0
00
e9d8
70e
5
30
0
c518d891
0
00
8
1
06
26
0008
897d
0081ee
3020000
7d020
9
2a01000
0eb5
24455535
0
00081e
b320d0
90585b9d
b0
000000
000000
9ebbce9
0eb1b
9f6
5ab
2000000
ebdce9
a
9fef
fff58
efefff
f
e
997000000
e
a0
0
0
9c
5
681c
08db
e
01b
e181c
8db
0d5
6c
00
0
6e0000
a000
0
000081e9
99dcf818
fffff
968
2f5
8d
024b
a3a9c
74
2f74795
cd8c
4b2
45c6
ae5c
db7f
b8b2
34
3
0d4680
5
e522d3c
900eb
b44
87fdf8
f85a0
daa14
33
f0c45cf86
0013
26e468
cffb9a
8
cd32af
6a342
ef8
07c2ca96
e4b015534
b9b
e0f36b
62
7
03bf
aad2d02f203c8661
282a97
a2c44c
7ea6061d
59ace98
61188
09
52a
cb17d7
bcb374
215
121
af
85e1d3e
f8
77
a3
279d7
6
0c
eea
af6
2
2d
52fb
c1
82
e
c575c
943
d0
275
692
a
4e
beb
32513
1
000
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.BadFile.mv
McAfee RTFObfustream.c!5AD1DFB31DAA
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.7ed0c0ab
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g6
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
Tencent Clean
TACHYON Clean
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
Zillya Clean
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Jiangmin Clean
Varist Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Microsoft Trojan:Script/Sabsik.FL.B!ml
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
MAX malware (ai score=84)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Trojan.Undefined!8.1327C (TOPIS:E0:EgUPiqMkIvI)
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.