Hostile 100% Download

test.bef_fri

Closed RTF prefix masks a GZIP streamHigh-entropy payload follows a closed RTF root
SHA-256bc088a408c39cfec5eaed5c5a05d12d7a45ce59b8af682314edd514908e04a7e
MaleculeO₂(AsEr)

Evidence

High-entropy payload follows a closed RTF root line 0
0{\rtf1}��� `\ő0\���H�$� �mtز�,[�%˷$l�Ai��ь�fƶ"r���c1 IWL  $��!�f7����&xC� �|��o��d7�WUw��F��e�|����W}WWWWWU�v\r38����< ��&���&�)]�t)<���9O:�霾x"[;jdbFx�v(�Ngr��z��O�&ҵ��zkG2}UII`�lcw�v�6���ܪ��� E�z��a�'�~p��"P��� ��GU>��t��C�����|����] ڽ�=� 79�_

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.