MALICIOUS
356
Risk Score
🔏 Digital signature Modified after signing
A signature covers the whole signed byte range — PDF JavaScript is never signed on its own — and does not by itself mean the document is safe.
Malware Insights
MITRE ATT&CK
T1059.007 JavaScript
T1203 Exploitation for Client Execution
The PDF file contains JavaScript that exploits an XFA heap spray vulnerability, leading to the execution of shellcode. This shellcode is designed to download a second-stage payload from URLs such as http://cgi.adobe.com/special/acrobat/update. The presence of prototype pollution and heap spray techniques indicates a sophisticated exploit, likely for initial access via spearphishing.
Machine Learning
- Nyx PDF Classifier malicious score 0.9853
Heuristics 14
-
XFA form contains risky executable script high PDF_XFA_SCRIPTPDF embeds an XFA form whose script block contains exploit, submission/launch, or shell-execution primitives. Ordinary LiveCycle print/update scripts are left as generic XFA/JS signals unless stronger behavior is present.
-
JavaScript action low 4 related findings PDF_JAVASCRIPTPDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
-
Prototype-pollution JavaScript pattern high PDF_JS_PROTOTYPE_POLLUTIONPDF JavaScript mutates object prototypes while also referencing privileged or sensitive PDF APIs. This tracks a modern PDF exploit technique family without assigning an unverified CVE.
-
PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTERPDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.Matched line in script
for(var i = 0; i < bin.length * 32; i += chrsz) str += String.fromCharCode((bin[i>>5] >>> (i % 32)) & mask); return str; -
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URLDecoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
-
Embedded JS stream low PDF_JSPDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
-
XFA JavaScript heap-spray exploit code critical PDF_XFA_HEAP_SPRAYPDF contains XFA script content with heap-spray or shellcode-like JavaScript markers such as large encoded word sequences, util.pack, large arrays, or spray variable names. This is a weaponised Adobe Reader exploit pattern, not a normal interactive form.
-
Active content added after the PDF was signed medium PDF_SIGNATURE_POST_SIGN_MODIFICATIONAn incremental update appended AFTER the signed byte range introduces active content (/EmbeddedFile, /Catalog). Some of this can occur in legitimate form-fill (field scripts, a rewritten /Catalog), so it is suspicious rather than damning — but it is content the signer did not approve.
-
Embedded script payload in PDF stream medium PDF_EMBEDDED_SCRIPT_PAYLOADPDF stream bytes contain an HTML/XFA <script> tag without accompanying Windows shell-execution primitives — common in accessible XFA forms but worth surfacing for analyst review.
-
Embedded file low PDF_EMBEDDEDPDF embeds a file attachment — could carry an executable or another weaponised document as a nested payload
-
XFA form low PDF_XFAPDF uses XML Forms Architecture — can contain script logic
-
Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTALThe same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
-
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://www.aef-europe.be</website></BE2><BE3><address>EPOS In PDF document text
- http://www.hrdc.bg</website></BG1><CY1><address>P.O.BoxIn PDF document text
- http://www.llp.org.cy/</website></CY1><CZ1><address>NaIn PDF document text
- http://www.kmk-pad.org</website></DE3><DK1><address>StyrelsenIn PDF document text
- http://www.oapee.es</website></ES1><GB1><address>ComeniusIn PDF document text
- http://phonebook.cimo.fi</helpdesk><website>www.cimo.fi/comenius</website></FI1><FR1><address>AgenceIn PDF document text
- http://penelope.2e2f.fr</helpdesk><website>http://www.2e2f.fr</website></FR1><HR1><address>GajevaIn PDF document text
- http://www.apa.lv</website></LV2><MK1><address>PortaIn PDF document text
- http://na.org.mk/comenius/</website></MK1><MT1><address>EuropeanIn PDF document text
- http://www.eupa.org.mt/</website></MT1><NL1><address>EuropeesIn PDF document text
- http://comenius.org.pl/eforms</helpdesk><website>http://comenius.org.pl</website></PL1><RO1><address>133In PDF document text
- http://www.programkontoret.se</website></SE1><SI1><address>CMEPIUSIn PDF document text
- http://www.cmepius.si/</website></SI1><SK1><address>SAAMSSvoradovaIn PDF document text
- http://www.programmallp.it/comenius</website></IT2><LU1><address>AneforeIn PDF document text
- http://www.anefore.lu</website></LU1><PT1><address>PROALVIn PDF document text
- http://www.anefore.lu</website></LU1><PL1><address>FoundationIn PDF document text
- http://pv.org.pl/eforms</helpdesk><website>http://pv.org.pl</website></PL1><PT1><address>PROALVIn PDF document text
- http://www.naep.cz/index.php?a=view-project-folder&amp;project_folder_id=63&amp;</website></CZ1><DE2><address>NationaleIn PDF document text
- http://www.na-bibb.de</website></DE2><DK1><address>CIRIUSIn PDF document text
- http://www.oapee.es</website></ES1><FR1><address>AgenceIn PDF document text
- http://penelope.2e2f.fr</helpdesk><website>http://www.2e2f.fr</website></FR1><FI1><address>CIMOIn PDF document text
- http://phonebook.cimo.fi</helpdesk><website>www.cimo.fi/grundtvig</website></FI1><GB2><address>GrundtvigIn PDF document text
- http://na.org.mk/grundtvig/</website></MK1><MT1><address>EuropeanIn PDF document text
- http://grundtvig.org.pl/eforms</helpdesk><website>http://grundtvig.org.pl</website></PL1><PT1><address>PROALVIn PDF document text
- http://www.programmallp.it/grundtvig</website></IT2><LU1><address>AneforeIn PDF document text
- http://www.anefore.lu</website></LU1></llp-na-GRU-MobInSt><llp-na-GRU-MobExch><IT2><address>AgenziaIn PDF document text
- http://www.programmallp.it/grundtvig</website></IT2></llp-na-GRU-MobExch><llp-na-GRU-MultPart><AT1><address>NationalagenturIn PDF document text
- http://www.anefore.lu</website></LU1></llp-na-GRU-MultPart><llp-na-GRU-Pv><AT1><address>NationalagenturIn PDF document text
- http://pv.org.pl/eforms</helpdesk><website>http://pv.org.pl</website></PL1></llp-na-GRU-Pv><llp-na-GRU-Assistants><IT2><address>AgenziaIn PDF document text
- http://www.anefore.lu</website></LU1></llp-na-GRU-Assistants><llp-na-GRU-MobWrksp><IT2><address>AgenziaIn PDF document text
- http://www.anefore.lu</website></LU1></llp-na-GRU-MobWrksp><llp-na-GRU-MobSnVol><IT2><address>AgenziaIn PDF document text
- http://www.anefore.lu</website></LU1></llp-na-GRU-MobSnVol>In PDF document text
- http://www.naep.cz/index.php?a=view-project-folder&amp;project_folder_id=34</website></CZ1><DE1><address>DeutscherIn PDF document text
- http://eu.daad.de</website></DE1><DK1><address>CIRIUSIn PDF document text
- http://www.oapee.es</website></ES1><FI1><address>CIMOIn PDF document text
- http://phonebook.cimo.fi</helpdesk><website>www.cimo.fi/erasmus</website></FI1><FR1><address>AgenceIn PDF document text
- http://penelope.2e2f.fr</helpdesk><website>http://www.2e2f.fr</website></FR1><GB1><address>BritishIn PDF document text
- http://na.org.mk/erasmus/</website></MK1><MT1><address>EuropeanIn PDF document text
- http://www.eupa.org.mt/</website></MT1><NL1><address>NufficIn PDF document text
- http://erasmus.org.pl/eforms</helpdesk><website>http://erasmus.org.pl</website></PL1><RO1><address>133In PDF document text
- http://www.programmallp.it/erasmus</website></IT2><LU1><address>AneforeIn PDF document text
- http://www.programmallp.it/erasmus</website></IT2><PT1><address>PROALVIn PDF document text
- http://phonebook.cimo.fi</helpdesk><website>www.cimo.fi/leonardo</website></FI1><FR1><address>AgenceIn PDF document text
- http://penelope.2e2f.fr</helpdesk><website>http://www.2e2f.fr</website></FR1><GB2><address>LeonardoIn PDF document text
- http://www.programmaleonardo.net/llp/</website></IT1><LI1><address>AgenturIn PDF document text
- http://na.org.mk/leonardo/</website></MK1><MT1><address>EuropeanIn PDF document text
- http://www.eupa.org.mt/</website></MT1><NL1><address>NAIn PDF document text
- http://leonardo.org.pl/eforms</helpdesk><website>http://leonardo.org.pl</website></PL1><RO1><address>133In PDF document text
- http://pajhome.org.uk/crypt/md5In PDF document text
- http://www.aef-europe.be</website>In PDF document text
+69 more URL(s)
Extracted artifacts 8
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
embedded_file_obj0059.bin |
pdf-embedded-file | PDF EmbeddedFile object 59 at offset 0x157DA0 | 162 bytes |
SHA-256: 5f74bccebf610588508b48d69409280d955a5aa9cd7bc850681ffd267a9ab91f |
|||
embedded_file_obj0060.bin |
pdf-embedded-file | PDF EmbeddedFile object 60 at offset 0x157E93 | 147794 bytes |
SHA-256: 733d7316afc56956773d0daeef327a47e6ef63eb4c71a44c54a3c1f583145a19 |
|||
embedded_file_obj0061.bin |
pdf-embedded-file | PDF EmbeddedFile object 61 at offset 0x15A300 | 101188 bytes |
SHA-256: 5246abb6453591b41c0ab2b5dfaa0b0d2cb0ac8c6c3abd1f5977622144fa27c1 |
|||
javascript_obj0021_000.js |
pdf-javascript-stream | PDF /JS object 21 at offset 0x1819 | 1313 bytes |
SHA-256: f94e41f586bf3f20bc1deeac4bfbda388a61db43f25fbd6304ba73f5653368cf |
|||
Preview scriptFirst 1,000 lines of the extracted script
if (typeof(xfa_installed) == "undefined" || typeof(xfa_version) == "undefined" || xfa_version < 2.6)
{
if (app.viewerType == "Reader")
{
if (ADBE.Reader_Value_Asked != true)
{
if (app.viewerVersion < 8.0)
{
if (app.alert(ADBE.Reader_string_Need_New_Version_Msg, 1, 1) == 1)
this.getURL(ADBE.Reader_Value_New_Version_URL + ADBE.SYSINFO, false);
ADBE.Reader_Value_Asked = true;
}
else if (app.alert(ADBE.Viewer_Form_string_Viewer, 1, 1) == 1)
app.findComponent({cType:"Plugin", cName:"XFA", cVer:"2.6"});
}
}
else
{
if (ADBE.Viewer_Value_Asked != true)
{
if (app.viewerVersion < 7.0)
app.response({cQuestion: ADBE.Viewer_Form_string_Viewer_Older, cDefault: ADBE.Viewer_Value_New_Version_URL + ADBE.SYSINFO, cTitle: ADBE.Viewer_string_Title});
else if (app.viewerVersion < 8.0)
{
if (app.alert(ADBE.Viewer_Form_string_Viewer, 1, 1) == 1)
app.launchURL(ADBE.Viewer_Value_New_Version_URL + ADBE.SYSINFO, true);
}
else if (app.alert(ADBE.Viewer_Form_string_Viewer, 1, 1) == 1)
app.findComponent({cType:"Plugin", cName:"XFA", cVer:"2.6"});
ADBE.Viewer_Value_Asked = true;
}
}
}
|
|||
javascript_obj0022_001.js |
pdf-javascript-stream | PDF /JS object 22 at offset 0x19F6 | 902 bytes |
SHA-256: 1b2ec98752b966f601d5223a750559cf13d562ac5e5c6d1fcc7217835b01f5fd |
|||
Preview scriptFirst 1,000 lines of the extracted script
if (typeof(ADBE.Reader_Value_Asked) == "undefined")
ADBE.Reader_Value_Asked = false;
if (typeof(ADBE.Viewer_Value_Asked) == "undefined")
ADBE.Viewer_Value_Asked = false;
if (typeof(ADBE.Reader_Need_Version) == "undefined" || ADBE.Reader_Need_Version < 8.1)
{
ADBE.Reader_Need_Version = 8.1;
ADBE.Reader_Value_New_Version_URL = "http://cgi.adobe.com/special/acrobat/update";
ADBE.SYSINFO = "?p=" + app.platform + "&v=" + app.viewerVersion + "&l=" + app.language + "&c=" + app.viewerType + "&r=" + ADBE.Reader_Need_Version;
}
if (typeof(ADBE.Viewer_Need_Version) == "undefined" || ADBE.Viewer_Need_Version < 8.1)
{
ADBE.Viewer_Need_Version = 8.1;
ADBE.Viewer_Value_New_Version_URL = "http://cgi.adobe.com/special/acrobat/update";
ADBE.SYSINFO = "?p=" + app.platform + "&v=" + app.viewerVersion + "&l=" + app.language + "&c=" + app.viewerType + "&r=" + ADBE.Viewer_Need_Version;
}
|
|||
javascript_obj0023_002.js |
pdf-javascript-stream | PDF /JS object 23 at offset 0x1B4F | 2795 bytes |
SHA-256: 826c5622c798d67e5281cca7e05933dddc90ccdcb0a6177c9f7d06f11bef8f7f |
|||
Preview scriptFirst 1,000 lines of the extracted script
if (typeof(this.ADBE) == "undefined") this.ADBE = new Object(); ADBE.LANGUAGE = "ENU"; ADBE.Viewer_string_Title = "Adobe Acrobat"; ADBE.Viewer_string_Update_Desc = "Adobe Interactive Forms Update"; ADBE.Viewer_string_Update_Reader_Desc = "Adobe Reader 7.0.5"; ADBE.Reader_string_Need_New_Version_Msg = "This PDF file requires a newer version of Adobe Reader. Press OK to download the latest version or see your system administrator."; ADBE.Viewer_Form_string_Reader_601 = "This PDF form requires a newer version of Adobe Reader. Although the form may appear to work properly, some elements may function improperly or may not appear at all. Press OK to initiate an online update or see your system administrator."; ADBE.Viewer_Form_string_Reader_Older = "This PDF form requires a newer version of Adobe Reader. Although the form may appear to work properly, some elements may function improperly or may not appear at all. Press OK for online download information or see your system administrator."; ADBE.Viewer_Form_string_Viewer_601 = "This PDF form requires a newer version of Adobe Acrobat. Although the form may appear to work properly, some elements may function improperly or may not appear at all. Press OK to initiate an online update or see your system administrator."; ADBE.Viewer_Form_string_Viewer_60 = "This PDF form requires a newer version of Adobe Acrobat. Although the form may appear to work properly, some elements may function improperly or may not appear at all. For more information please copy the following URL (CTRL+C on Win, Command-C on Mac) and paste into your browser or see your system administrator."; ADBE.Viewer_Form_string_Viewer_Older = "This PDF requires a newer version of Acrobat. Copy this URL and paste into your browser or see your sys admin."; ADBE.Viewer_Form_string_Reader_5x = "This PDF form requires a newer version of Adobe Reader. Without a newer version, the form may be displayed, but it might not work properly. Some form elements might not be visible at all. If an internet connection is available, clicking OK will open your browser to a web page where you can obtain the latest version."; ADBE.Viewer_Form_string_Reader_6_7x = "This PDF form requires a newer version of Adobe Reader. Without a newer version, the form may be displayed, but it might not work properly. Some form elements might not be visible at all. If an internet connection is available, clicking OK will download and install the latest version."; ADBE.Viewer_Form_string_Viewer = "This PDF form requires a newer version of Adobe Acrobat. Without a newer version, the form may be displayed, but it might not work properly. Some form elements might not be visible at all. If an internet connection is available, clicking OK will download and install the latest version."; |
|||
embedded_pdf_script_000039ba.bin |
pdf-embedded-script | PDF raw stream script payload at offset 0x39BA | 7653 bytes |
SHA-256: 01ca5448ce9bcc79d5b11bc14678c2a044a07fe4377ce9cfd3c39199e34f6130 |
|||
Preview scriptFirst 1,000 lines of the extracted script
<config xmlns:xfa="http://www.xfa.org/schema/xci/1.0/" xmlns="http://www.xfa.org/schema/xci/2.7/" ><present ><!-- [0..n] --><common ><data ><adjustData >1</adjustData ><!-- 0|1 --><attributes >preserve</attributes ><!-- ignore|delegate|preserve --><outputXSL ><uri /></outputXSL ><range /><record /><startNode /><uri /><window /><xsl ><debug ><uri /></debug ><uri /></xsl ></data ><log ><!-- [0..n] --><uri /><mode >append</mode ><!-- append|overwrite --><threshold >trace</threshold ><!-- trace|information|warning|error --><to >memory</to ><!-- uri|memory|stdout|null|stderror|system --></log ><temp ><uri >/var/tmp/</uri ></temp ><template ><base >file:///ec/local/weblogic/app/LC_FORMS/</base ><startPage >0</startPage ><uri /><relevant /></template ><locale >en_US</locale ></common ><copies >1</copies ><destination >pdf</destination ><!-- pdf|ps|pcl --><driver ><!-- [0..n] --><fontInfo ><embed >0</embed ><!-- 0|1 --><map ><equate /><!-- [0..n] Attributes: from='', to='' [0..n] --></map ><subsetBelow >100</subsetBelow ></fontInfo ><xdc ><uri /></xdc ></driver ><pdf ><!-- [0..n] --><!-- Temporarily turned off until PDFUpdate is able to append with compression. --><compression ><compressLogicalStructure >1</compressLogicalStructure ><!-- 0|1 --><level >1</level ><!-- 0 - 9, 0=no compression 1=best speed 9=best compression --><type >none</type ></compression ><encryption ><encrypt >0</encrypt ><!-- 0|1 --><encryptionLevel >40bit</encryptionLevel ><!-- 40bit|128bit --><permissions ><accessibleContent >0</accessibleContent ><!-- 0|1 --><contentCopy >0</contentCopy ><!-- 0|1 --><documentAssembly >0</documentAssembly ><!-- 0|1 --><formFieldFilling >0</formFieldFilling ><!-- 0|1 --><modifyAnnots /><plaintextMetadata >0</plaintextMetadata ><!-- 0|1 --><print >1</print ><!-- 0|1 --><printHighQuality /><change >0</change ><!-- 0|1 --></permissions ></encryption ><fontInfo ><embed >0</embed ><!-- 0|1 --><!--defaultTypeface>MyriadPro-Regular</defaultTypeface--><map ><!-- [0..n] Attributes: from='', to='' [0..n] --><equate force="0" from="Courier_*_*" to="Courier New_*_*" /><equate force="0" from="CourierNew_*_*" to="Courier New_*_*" /><equate force="0" from="Courier-New_*_*" to="Courier New_*_*" /><equate force="0" from="MyriadPro_*_*" to="Myriad Pro_*_*" /><equate force="0" from="MyriadPro-Regular_*_*" to="Myriad Pro_*_*" /><equate force="0" from="MyriadPro-It_*_*" to="Myriad Pro_*_italic" /><equate force="0" from="MyriadPro-SemiboldSemiCn_*_*" to="Arial Narrow_bold_*" /><equate force="0" from="MyriadPro-SemiboldCond_*_*" to="Arial Narrow_bold_*" /><equate force="0" from="MinionPro_*_*" to="Minion Pro_*_*" /><equate force="0" from="MinionPro-Regular_*_*" to="Minion Pro_*_*" /><equate force="0" from="ArialNarrow_*_*" to="Arial Narrow_*_*" /><equate force="0" from="Arial-Narrow_*_*" to="Arial Narrow_*_*" /><equate force="0" from="ArialMT_*_*" to="Arial_*_*" /><equate force="0" from="DTLDocumentaSansT_bold_*" to="Arial Narrow_bold_*" /><equate force="0" from="DTLDocumentaSansST_bold_*" to="Arial Narrow_bold_*" /><equate force="0" from="Helvetica Black_*_*" to="Myriad Pro Black_*_*" /><equate force="0" from="HelveticaBlack_*_*" to="Myriad Pro Black_*_*" /><equate force="0" from="Helvetica-Black_*_*" to="Myriad Pro Black_*_*" /><equate force="0" from="Helvetica-Condensed-Black_*_*" to="Arial Narrow_bold_*" /><equate force="0" from="Helvetica-Condensed_*_*" to="Arial Narrow_*_*" /><equate force="0" from="HelveticaNeue-Roman_*_*" to="Myriad Pro_*_*" /><equate force="0" from="HelveticaNeue-Light_*_*" to="Myriad Pro_*_*" /><equate force="0" from="HelveticaNeue_*_*" to="Myriad Pro_*_*" /><equate force="0" from="Helvetica_*_*" to="Myriad Pro_*_*" /><equate force="0" from="Helv_*_*" to="Myriad Pro_*_*" /><equate force="0" from="Cour_*_*" to="Courier New_*_*" /><equate force="0" from="Times_*_*" to="Times New Roman_*_*" /><equate force="0" from="Times-Roman_*_*" to="Times New Roman_*_*" /><equate force="0" from="TimesNewRoman_*_*" to="Times New Roman_*_*" /><equate force="0" from="GillSans_*_*" to="Arial Narrow_*_*" /><equate force="0" from="HelvOut Blk" to="Myriad Pro" /><equate force="0" from="PDP Helv_*_*" to="Myriad Pro_*_*" /><equate force="0" from="CG Times_*_*" to="Minion Pro_*_*" /><equate force="0" from="ZapfDingbats_*_*" to="WingDings_*_*" /><equate force="0" from="FranklinGothic-Demi_*_*" to="Myriad Pro_bold_*" /><equate force="0" from="FormataCondensed-Light_*_*" to="Arial Narrow_*_*" /><equate force="0" from="FormataCondensed-Regular_*_*" to="Arial Narrow_*_*" /><equate force="0" from="FormataCondensed-Medium_*_*" to="Arial Narrow_bold_*" /><!-- <equate from='MS-PGothic_*_*' to='MS PGothic_*_*' force="0"/> <equate from='MS-PGothic+1_*_*' to='MS PGothic_*_*' force="0"/> <equate from='MS-PGothic+2_*_*' to='MS PGothic_*_*' force="0"/> <equate from='MS-PGothic+3_*_*' to='MS PGothic_*_*' force="0"/> <equate from='MS-PGothic+4_*_*' to='MS PGothic_*_*' force="0"/> --><equate force="0" from="HGPSoeiKakugothicUB_*_*" to="MS Gothic_*_*" /><equate force="0" from="GothicBBB-Medium-Identity-H_*_*" to="MS Gothic_*_*" /></map ><subsetBelow >100</subsetBelow ><!-- An integer value between 0-100 representing a percentage --></fontInfo ><interactive >1</interactive ><!-- 0|1 --><openAction ><destination >none</destination ><!-- none|pageFit --></openAction ><creator >Adobe LiveCycle Forms 8.2</creator ><producer >Adobe LiveCycle Forms 8.2</producer ><scriptModel >XFA</scriptModel ><!-- XFA|none --><submitFormat >pdf</submitFormat ><!-- html|fdf|xml|pdf --><tagged >1</tagged ><!-- 0|1 --><xdc ><uri >adobepdf.xdc</uri ></xdc ><version >1.7</version ><!-- 1.2=acrobat 3|1.3=acrobat 4 --><renderPolicy >client</renderPolicy ><adobeExtensionLevel >1</adobeExtensionLevel ></pdf ><zpl ><fontInfo ><defaultTypeface writingScript="Roman" >CG Triumvirate</defaultTypeface ><defaultTypeface writingScript="Japanese" >Kozuka Mincho Pro-VI R</defaultTypeface ><defaultTypeface writingScript="SimplifiedChinese" >Adobe Song Std L</defaultTypeface ><defaultTypeface writingScript="TraditionalChinese" >Adobe Ming Std L</defaultTypeface ><defaultTypeface writingScript="Korean" >Adobe Myungjo Std M</defaultTypeface ><map ><equate force="1" from="MS Gothic_*_*" to="Kozuka Gothic Pro M_*_*" /></map ></fontInfo ></zpl ><submitUrl /><webClient ><!-- [0..n] --><fontInfo ><embed >0</embed ><!-- 0|1 --><map ><equate /><!-- [0..n] Attributes: from='', to='' [0..n] --></map ><subsetBelow >100</subsetBelow ></fontInfo ><xdc ><uri /></xdc ></webClient ><xdp ><!-- [0..n] --><embedRenderedOutput >1</embedRenderedOutput ><!-- 0|1 --><packets >*</packets ></xdp ><layout >paginate</layout ><!-- paginate|panel --><output ><uri /><to >memory</to ><!-- uri|memory|stdout|null --><type >native</type ><!-- native|xdp|mergedXDP --></output ><script ><currentPage >0</currentPage ><exclude >initialize ready calculate enter exit validate nullTest formatTest docClose</exclude ><runScripts >server</runScripts ><!-- client|server|both --></script ></present ><acrobat ><acrobat7 ><dynamicRender >required</dynamicRender ></acrobat7 ><common ><versionControl sourceBelow="maintain" /><locale >en_US</locale ><data ><!-- 0|1 --><!-- ignore|delegate|preserve --><adjustData >1</adjustData ><attributes >preserve</attributes ><outputXSL ><uri /></outputXSL ><range /><record /><startNode /><uri /><window /><xsl ><debug ><uri /></debug ><uri /></xsl ></data ><template ><base >file:///ec/local/weblogic/app/LC_FORMS/</base ><startPage >0</startPage ><uri /><relevant /></template ></common ></acrobat ><?originalXFAVersion http://www.xfa.org/schema/xci/1.0/?></config > |
|||
deobfuscated.js |
deobfuscated-js | PDF JavaScript deobfuscation pass | 1730885 bytes |
SHA-256: e8b33c0a4f71d8d5d85a4c08dbb2749bfd1372b59b9323ab2e81ce0f8a419fc7 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 3 eval/decoder/string-building token(s). Carved artifact contains 5 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
7 0 8 84 12 116 13 147 <</K 8 0 R/ParentTree 9 0 R/ParentTreeNextKey 1/RoleMap 10 0 R/Type/StructTreeRoot>><</K 13 0 R/P 7 0 R/S/Document>><</K 0/P 13 0 R/Pg 14 0 R/S/P>><</K 12 0 R/P 8 0 R/S/Div>>
9 0 11 19 <</Nums[0 11 0 R]>>[12 0 R]
) � � � T�
if (typeof(xfa_installed) == "undefined" || typeof(xfa_version) == "undefined" || xfa_version < 2.6)
{
if (app.viewerType == "Reader")
{
if (ADBE.Reader_Value_Asked != true)
{
if (app.viewerVersion < 8.0)
{
if (app.alert(ADBE.Reader_string_Need_New_Version_Msg, 1, 1) == 1)
this.getURL(ADBE.Reader_Value_New_Version_URL + ADBE.SYSINFO, false);
ADBE.Reader_Value_Asked = true;
}
else if (app.alert(ADBE.Viewer_Form_string_Viewer, 1, 1) == 1)
app.findComponent({cType:"Plugin", cName:"XFA", cVer:"2.6"});
}
}
else
{
if (ADBE.Viewer_Value_Asked != true)
{
if (app.viewerVersion < 7.0)
app.response({cQuestion: ADBE.Viewer_Form_string_Viewer_Older, cDefault: ADBE.Viewer_Value_New_Version_URL + ADBE.SYSINFO, cTitle: ADBE.Viewer_string_Title});
else if (app.viewerVersion < 8.0)
{
if (app.alert(ADBE.Viewer_Form_string_Viewer, 1, 1) == 1)
app.launchURL(ADBE.Viewer_Value_New_Version_URL + ADBE.SYSINFO, true);
}
else if (app.alert(ADBE.Viewer_Form_string_Viewer, 1, 1) == 1)
app.findComponent({cType:"Plugin", cName:"XFA", cVer:"2.6"});
ADBE.Viewer_Value_Asked = true;
}
}
}
if (typeof(ADBE.Reader_Value_Asked) == "undefined")
ADBE.Reader_Value_Asked = false;
if (typeof(ADBE.Viewer_Value_Asked) == "undefined")
ADBE.Viewer_Value_Asked = false;
if (typeof(ADBE.Reader_Need_Version) == "undefined" || ADBE.Reader_Need_Version < 8.1)
{
ADBE.Reader_Need_Version = 8.1;
ADBE.Reader_Value_New_Version_URL = "http://cgi.adobe.com/special/acrobat/update";
ADBE.SYSINFO = "?p=" + app.platform + "&v=" + app.viewerVersion + "&l=" + app.language + "&c=" + app.viewerType + "&r=" + ADBE.Reader_Need_Version;
}
if (typeof(ADBE.Viewer_Need_Version) == "undefined" || ADBE.Viewer_Need_Version < 8.1)
{
ADBE.Viewer_Need_Version = 8.1;
ADBE.Viewer_Value_New_Version_URL = "http://cgi.adobe.com/special/acrobat/update";
ADBE.SYSINFO = "?p=" + app.platform + "&v=" + app.viewerVersion + "&l=" + app.language + "&c=" + app.viewerType + "&r=" + ADBE.Viewer_Need_Version;
}
if (typeof(this.ADBE) == "undefined")
this.ADBE = new Object();
ADBE.LANGUAGE = "ENU";
ADBE.Viewer_string_Title = "Adobe Acrobat";
ADBE.Viewer_string_Update_Desc = "Adobe Interactive Forms Update";
ADBE.Viewer_string_Update_Reader_Desc = "Adobe Reader 7.0.5";
ADBE.Reader_string_Need_New_Version_Msg = "This PDF file requires a newer version of Adobe Reader. Press OK to download the latest version or see your system administrator.";
ADBE.Viewer_Form_string_Reader_601 = "This PDF form requires a newer version of Adobe Reader. Although the form may appear to work properly, some elements may function improperly or may not appear at all. Press OK to initiate an online update or see your system administrator.";
ADBE.Viewer_Form_string_Reader_Older = "This PDF form requires a newer version of Adobe Reader. Although the form may appear to work properly, some elements may function improperly or may not appear at all. Press OK for online download information or see your system administrator.";
ADBE.Viewer_Form_string_Viewer_601 = "This PDF form requires a newer version of Adobe Acrobat. Although the form may appear to work properly, some elements may function improperly or may not appear at all. Press OK to initiate an online update or see your system administrator.";
ADBE.Viewer_Form_string_Viewer_60 = "This PDF form requires a newer version of Adobe Acrobat. Although the form may appear to work properly, some elements may function improperly or may not appear at all. For more information please copy the following URL (CTRL+C on Win, Command-C on Mac) and paste into your browser or see your system administrator.";
ADBE.Viewer_Form_string_Viewer_Older = "This PDF requires a newer version of Acrobat. Copy this URL and paste into your browser or see your sys admin.";
ADBE.Viewer_Form_string_Reader_5x = "This PDF form requires a newer version of Adobe Reader. Without a newer version, the form may be displayed, but it might not work properly. Some form elements might not be visible at all. If an internet connection is available, clicking OK will open your browser to a web page where you can obtain the latest version.";
ADBE.Viewer_Form_string_Reader_6_7x = "This PDF form requires a newer version of Adobe Reader. Without a newer version, the form may be displayed, but it might not work properly. Some form elements might not be visible at all. If an internet connection is available, clicking OK will download and install the latest version.";
ADBE.Viewer_Form_string_Viewer = "This PDF form requires a newer version of Adobe Acrobat. Without a newer version, the form may be displayed, but it might not work properly. Some form elements might not be visible at all. If an internet connection is available, clicking OK will download and install the latest version.";
<?xml version="1.0" encoding="UTF-8"?>
<xdp:xdp xmlns:xdp="http://ns.adobe.com/xdp/" timeStamp="2009-12-08T16:32:40Z" uuid="696f630b-0209-430d-a1bf-6d5c2c977d20">
<xfa:datasets xmlns:xfa="http://www.xfa.org/schema/xfa-data/1.0/"
><xfa:data
><ApplicationForm
><programme
>llp-na-Prgm</programme
><subProgramme
>llp-na-COM-ActType</subProgramme
><actionType
>MobAss</actionType
><action
/><call
>2010</call
><round
>2010-01-29</round
><deadline
>2010-01-29</deadline
><nationalAgency
><naId
/></nationalAgency
><project
><participant
><number
/><individual
><role
/><context
/><nationalAgency
><naId
/></nationalAgency
><sameAddressCheck
>Ok</sameAddressCheck
><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><additionalAddress
><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
></additionalAddress
><additionalAddress
><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
></additionalAddress
></individual
><fromLLPCountryGroup
><fromLLPCountry
>CheckBoxOffValue</fromLLPCountry
></fromLLPCountryGroup
><fromLLPCountryGroup
><fromLLPCountry
>CheckBoxOffValue</fromLLPCountry
></fromLLPCountryGroup
><emergencyContact
><role
/><context
/><nationalAgency
><naId
/></nationalAgency
><sameAddressCheck
>Ok</sameAddressCheck
><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
></emergencyContact
></participant
><host
><number
/><institution
><role
/><context
/><nationalAgency
><naId
/></nationalAgency
><juridicalStatus
><status
/><profit
/></juridicalStatus
><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contactPerson
><role
/><context
/><nationalAgency
><naId
/></nationalAgency
><sameAddressCheck
>Ok</sameAddressCheck
><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><additionalAddress
><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
></additionalAddress
></contactPerson
><head
><role
/><context
/><nationalAgency
><naId
/></nationalAgency
><sameAddressCheck
>Ok</sameAddressCheck
><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
></head
></institution
></host
><homeInstitution
><number
/><institution
><role
/><context
/><nationalAgency
><naId
/></nationalAgency
><juridicalStatus
><status
/><profit
/></juridicalStatus
><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
></institution
></homeInstitution
><title
/><calendar
><number
/><day
/></calendar
><summaryLocal
/><assistantProfile
><languageKonwledgeGroup
><number
>1</number
></languageKonwledgeGroup
></assistantProfile
><assistantshipProfile
><hostCountryPreferenceBool
>Nok</hostCountryPreferenceBool
><assistantCountryPreferenceBool
>Nok</assistantCountryPreferenceBool
><locationPreferenceBool
>Nok</locationPreferenceBool
><motherTonguePreferenceBool
>Nok</motherTonguePreferenceBool
></assistantshipProfile
></project
><metadata
><formType
>AST_A</formType
><readerVersion
>9.1</readerVersion
><formVersion
>1.2</formVersion
><submissionId
/><formId
>FFA5F169</formId
><hashcode
>FFA5F1697EF00698</hashcode
><draft
>Ok</draft
></metadata
></ApplicationForm
></xfa:data
><dd:dataDescription xmlns:dd="http://ns.adobe.com/data-description/" dd:name="ApplicationForm"
><ApplicationForm
><id dd:minOccur="0" dd:nullType="exclude"
/><programme
/><subProgramme
/><actionType
/><action
/><subAction dd:minOccur="0" dd:nullType="exclude"
/><typeOfVisit dd:minOccur="0" dd:nullType="exclude"
/><call
/><round
/><deadline
/><applicationLanguage dd:minOccur="0" dd:nullType="exclude"
/><workingLanguage dd:minOccur="0" dd:nullType="exclude"
/><nationalAgency dd:maxOccur="999"
><naId
/><naAddress dd:minOccur="0" dd:nullType="exclude"
/><naEmailAddress dd:minOccur="0" dd:nullType="exclude"
/><naHelpdesk dd:minOccur="0" dd:nullType="exclude"
/><naWebsite dd:minOccur="0" dd:nullType="exclude"
/></nationalAgency
><project
><participant dd:maxOccur="999"
><number
/><dd:group dd:model="choice"
><institution
><role
/><context
/><organisationId dd:minOccur="0" dd:nullType="exclude"
/><nationalAgency dd:minOccur="0"
><naId
/><naAddress dd:minOccur="0" dd:nullType="exclude"
/><naEmailAddress dd:minOccur="0" dd:nullType="exclude"
/><naHelpdesk dd:minOccur="0" dd:nullType="exclude"
/><naWebsite dd:minOccur="0" dd:nullType="exclude"
/></nationalAgency
><name dd:minOccur="0" dd:nullType="exclude"
/><nameLatin dd:minOccur="0" dd:nullType="exclude"
/><acronym dd:minOccur="0" dd:nullType="exclude"
/><nationalId dd:minOccur="0" dd:nullType="exclude"
/><erasmusUniversityCharter dd:minOccur="0" dd:nullType="exclude"
/><organisationType dd:minOccur="0" dd:nullType="exclude"
/><commercialOrientation dd:minOccur="0" dd:nullType="exclude"
/><scope dd:minOccur="0" dd:nullType="exclude"
/><juridicalStatus dd:minOccur="0"
><status
/><profit
/></juridicalStatus
><economicSectorActivity dd:minOccur="0" dd:nullType="exclude"
/><sizeStaff dd:minOccur="0" dd:nullType="exclude"
/><sizeStudents dd:minOccur="0" dd:nullType="exclude"
/><address dd:minOccur="0" type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
><legalRepresentative dd:minOccur="0"
><role
/><context
/><nationalAgency dd:minOccur="0"
><naId
/><naAddress dd:minOccur="0" dd:nullType="exclude"
/><naEmailAddress dd:minOccur="0" dd:nullType="exclude"
/><naHelpdesk dd:minOccur="0" dd:nullType="exclude"
/><naWebsite dd:minOccur="0" dd:nullType="exclude"
/></nationalAgency
><title dd:minOccur="0" dd:nullType="exclude"
/><gender dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><nationalId dd:minOccur="0" dd:nullType="exclude"
/><birthday dd:minOccur="0" dd:nullType="exclude"
/><birthyear dd:minOccur="0" dd:nullType="exclude"
/><department dd:minOccur="0" dd:nullType="exclude"
/><position dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
><typeOfIndividual dd:minOccur="0" dd:nullType="exclude"
/><institutionName dd:minOccur="0" dd:nullType="exclude"
/><additionalAddress dd:maxOccur="9" dd:minOccur="0"
><title dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
></additionalAddress
></legalRepresentative
><financialRepresentative dd:minOccur="0"
><role
/><context
/><nationalAgency dd:minOccur="0"
><naId
/><naAddress dd:minOccur="0" dd:nullType="exclude"
/><naEmailAddress dd:minOccur="0" dd:nullType="exclude"
/><naHelpdesk dd:minOccur="0" dd:nullType="exclude"
/><naWebsite dd:minOccur="0" dd:nullType="exclude"
/></nationalAgency
><title dd:minOccur="0" dd:nullType="exclude"
/><gender dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><nationalId dd:minOccur="0" dd:nullType="exclude"
/><birthday dd:minOccur="0" dd:nullType="exclude"
/><birthyear dd:minOccur="0" dd:nullType="exclude"
/><department dd:minOccur="0" dd:nullType="exclude"
/><position dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
><typeOfIndividual dd:minOccur="0" dd:nullType="exclude"
/><institutionName dd:minOccur="0" dd:nullType="exclude"
/><additionalAddress dd:maxOccur="9" dd:minOccur="0"
><title dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
></additionalAddress
></financialRepresentative
><contactPerson dd:maxOccur="9" dd:minOccur="0"
><role
/><context
/><nationalAgency dd:minOccur="0"
><naId
/><naAddress dd:minOccur="0" dd:nullType="exclude"
/><naEmailAddress dd:minOccur="0" dd:nullType="exclude"
/><naHelpdesk dd:minOccur="0" dd:nullType="exclude"
/><naWebsite dd:minOccur="0" dd:nullType="exclude"
/></nationalAgency
><title dd:minOccur="0" dd:nullType="exclude"
/><gender dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><nationalId dd:minOccur="0" dd:nullType="exclude"
/><birthday dd:minOccur="0" dd:nullType="exclude"
/><birthyear dd:minOccur="0" dd:nullType="exclude"
/><department dd:minOccur="0" dd:nullType="exclude"
/><position dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
><typeOfIndividual dd:minOccur="0" dd:nullType="exclude"
/><institutionName dd:minOccur="0" dd:nullType="exclude"
/><additionalAddress dd:maxOccur="9" dd:minOccur="0"
><title dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
></additionalAddress
></contactPerson
><head dd:minOccur="0"
><role
/><context
/><nationalAgency dd:minOccur="0"
><naId
/><naAddress dd:minOccur="0" dd:nullType="exclude"
/><naEmailAddress dd:minOccur="0" dd:nullType="exclude"
/><naHelpdesk dd:minOccur="0" dd:nullType="exclude"
/><naWebsite dd:minOccur="0" dd:nullType="exclude"
/></nationalAgency
><title dd:minOccur="0" dd:nullType="exclude"
/><gender dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><nationalId dd:minOccur="0" dd:nullType="exclude"
/><birthday dd:minOccur="0" dd:nullType="exclude"
/><birthyear dd:minOccur="0" dd:nullType="exclude"
/><department dd:minOccur="0" dd:nullType="exclude"
/><position dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
><typeOfIndividual dd:minOccur="0" dd:nullType="exclude"
/><institutionName dd:minOccur="0" dd:nullType="exclude"
/><additionalAddress dd:maxOccur="9" dd:minOccur="0"
><title dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
></additionalAddress
></head
><personToBeShadowed dd:minOccur="0"
><role
/><context
/><nationalAgency dd:minOccur="0"
><naId
/><naAddress dd:minOccur="0" dd:nullType="exclude"
/><naEmailAddress dd:minOccur="0" dd:nullType="exclude"
/><naHelpdesk dd:minOccur="0" dd:nullType="exclude"
/><naWebsite dd:minOccur="0" dd:nullType="exclude"
/></nationalAgency
><title dd:minOccur="0" dd:nullType="exclude"
/><gender dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><nationalId dd:minOccur="0" dd:nullType="exclude"
/><birthday dd:minOccur="0" dd:nullType="exclude"
/><birthyear dd:minOccur="0" dd:nullType="exclude"
/><department dd:minOccur="0" dd:nullType="exclude"
/><position dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
><typeOfIndividual dd:minOccur="0" dd:nullType="exclude"
/><institutionName dd:minOccur="0" dd:nullType="exclude"
/><additionalAddress dd:maxOccur="9" dd:minOccur="0"
><title dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
></additionalAddress
></personToBeShadowed
><vatNumber dd:minOccur="0" dd:nullType="exclude"
/><isVATRecoverableFlag dd:minOccur="0" dd:nullType="exclude"
/><erasmusCode dd:minOccur="0" dd:nullType="exclude"
/><description dd:minOccur="0" dd:nullType="exclude"
/><previousProjectsBool dd:minOccur="0" dd:nullType="exclude"
/><previousProjects dd:maxOccur="999" dd:minOccur="0" dd:nullType="exclude"
><year dd:minOccur="0" dd:nullType="exclude"
/><programmeStr dd:minOccur="0" dd:nullType="exclude"
/><actionTypeStr dd:minOccur="0" dd:nullType="exclude"
/><agreementNumber dd:minOccur="0" dd:nullType="exclude"
/><organisationStr dd:minOccur="0" dd:nullType="exclude"
/><acronym dd:minOccur="0" dd:nullType="exclude"
/><title dd:minOccur="0" dd:nullType="exclude"
/><website dd:minOccur="0" dd:nullType="exclude"
/><login dd:minOccur="0" dd:nullType="exclude"
/></previousProjects
><prospection dd:minOccur="0" dd:nullType="exclude"
><resultOf dd:minOccur="0" dd:nullType="exclude"
/><resultOfOther dd:minOccur="0" dd:nullType="exclude"
/><agreementNumber dd:minOccur="0" dd:nullType="exclude"
/></prospection
><coordinationTakeover dd:minOccur="0" dd:nullType="exclude"
/><silentPartners dd:maxOccur="999" dd:minOccur="0" dd:nullType="exclude"
><name dd:minOccur="0" dd:nullType="exclude"
/><natureOfInvolvement dd:minOccur="0" dd:nullType="exclude"
/></silentPartners
></institution
><individual
><role
/><context
/><nationalAgency dd:minOccur="0"
><naId
/><naAddress dd:minOccur="0" dd:nullType="exclude"
/><naEmailAddress dd:minOccur="0" dd:nullType="exclude"
/><naHelpdesk dd:minOccur="0" dd:nullType="exclude"
/><naWebsite dd:minOccur="0" dd:nullType="exclude"
/></nationalAgency
><title dd:minOccur="0" dd:nullType="exclude"
/><gender dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><nationalId dd:minOccur="0" dd:nullType="exclude"
/><birthday dd:minOccur="0" dd:nullType="exclude"
/><birthyear dd:minOccur="0" dd:nullType="exclude"
/><department dd:minOccur="0" dd:nullType="exclude"
/><position dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
><typeOfIndividual dd:minOccur="0" dd:nullType="exclude"
/><institutionName dd:minOccur="0" dd:nullType="exclude"
/><additionalAddress dd:maxOccur="9" dd:minOccur="0"
><title dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
></additionalAddress
></individual
></dd:group
><fromLLPCountryGroup dd:maxOccur="2" dd:minOccur="0" dd:nullType="exclude"
><fromLLPCountry dd:minOccur="0" dd:nullType="exclude"
/></fromLLPCountryGroup
><nationality dd:minOccur="0" dd:nullType="exclude"
/><contactPersonIsParticipant dd:minOccur="0" dd:nullType="exclude"
/><specialNeeds dd:minOccur="0" dd:nullType="exclude"
/><specialNeedsDescription dd:minOccur="0" dd:nullType="exclude"
/><previousProjects dd:maxOccur="999" dd:minOccur="0" dd:nullType="exclude"
><year dd:minOccur="0" dd:nullType="exclude"
/><programmeStr dd:minOccur="0" dd:nullType="exclude"
/><actionTypeStr dd:minOccur="0" dd:nullType="exclude"
/><agreementNumber dd:minOccur="0" dd:nullType="exclude"
/><organisationStr dd:minOccur="0" dd:nullType="exclude"
/><acronym dd:minOccur="0" dd:nullType="exclude"
/><title dd:minOccur="0" dd:nullType="exclude"
/><website dd:minOccur="0" dd:nullType="exclude"
/><login dd:minOccur="0" dd:nullType="exclude"
/></previousProjects
><otherApplications dd:maxOccur="999" dd:minOccur="0" dd:nullType="exclude"
><year dd:minOccur="0" dd:nullType="exclude"
/><programmeStr dd:minOccur="0" dd:nullType="exclude"
/><actionTypeStr dd:minOccur="0" dd:nullType="exclude"
/><agreementNumber dd:minOccur="0" dd:nullType="exclude"
/><organisationStr dd:minOccur="0" dd:nullType="exclude"
/><acronym dd:minOccur="0" dd:nullType="exclude"
/><title dd:minOccur="0" dd:nullType="exclude"
/><website dd:minOccur="0" dd:nullType="exclude"
/><login dd:minOccur="0" dd:nullType="exclude"
/></otherApplications
><description dd:minOccur="0" dd:nullType="exclude"
/><roleInProject dd:minOccur="0" dd:nullType="exclude"
/><staffSkills dd:minOccur="0" dd:nullType="exclude"
/><background dd:minOccur="0" dd:nullType="exclude"
/><hasLeonardoCertificate dd:minOccur="0" dd:nullType="exclude"
/><leonardoCertificateNumber dd:minOccur="0" dd:nullType="exclude"
/><previousProjectNumber dd:minOccur="0" dd:nullType="exclude"
/><emergencyContact dd:maxOccur="2" dd:minOccur="0"
><role
/><context
/><nationalAgency dd:minOccur="0"
><naId
/><naAddress dd:minOccur="0" dd:nullType="exclude"
/><naEmailAddress dd:minOccur="0" dd:nullType="exclude"
/><naHelpdesk dd:minOccur="0" dd:nullType="exclude"
/><naWebsite dd:minOccur="0" dd:nullType="exclude"
/></nationalAgency
><title dd:minOccur="0" dd:nullType="exclude"
/><gender dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><nationalId dd:minOccur="0" dd:nullType="exclude"
/><birthday dd:minOccur="0" dd:nullType="exclude"
/><birthyear dd:minOccur="0" dd:nullType="exclude"
/><department dd:minOccur="0" dd:nullType="exclude"
/><position dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
><typeOfIndividual dd:minOccur="0" dd:nullType="exclude"
/><institutionName dd:minOccur="0" dd:nullType="exclude"
/><additionalAddress dd:maxOccur="9" dd:minOccur="0"
><title dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
></additionalAddress
></emergencyContact
></participant
><host dd:maxOccur="2" dd:minOccur="0"
><number
/><dd:group dd:model="choice"
><institution
><role
/><context
/><organisationId dd:minOccur="0" dd:nullType="exclude"
/><nationalAgency dd:minOccur="0"
><naId
/><naAddress dd:minOccur="0" dd:nullType="exclude"
/><naEmailAddress dd:minOccur="0" dd:nullType="exclude"
/><naHelpdesk dd:minOccur="0" dd:nullType="exclude"
/><naWebsite dd:minOccur="0" dd:nullType="exclude"
/></nationalAgency
><name dd:minOccur="0" dd:nullType="exclude"
/><nameLatin dd:minOccur="0" dd:nullType="exclude"
/><acronym dd:minOccur="0" dd:nullType="exclude"
/><nationalId dd:minOccur="0" dd:nullType="exclude"
/><erasmusUniversityCharter dd:minOccur="0" dd:nullType="exclude"
/><organisationType dd:minOccur="0" dd:nullType="exclude"
/><commercialOrientation dd:minOccur="0" dd:nullType="exclude"
/><scope dd:minOccur="0" dd:nullType="exclude"
/><juridicalStatus dd:minOccur="0"
><status
/><profit
/></juridicalStatus
><economicSectorActivity dd:minOccur="0" dd:nullType="exclude"
/><sizeStaff dd:minOccur="0" dd:nullType="exclude"
/><sizeStudents dd:minOccur="0" dd:nullType="exclude"
/><address dd:minOccur="0" type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
><legalRepresentative dd:minOccur="0"
><role
/><context
/><nationalAgency dd:minOccur="0"
><naId
/><naAddress dd:minOccur="0" dd:nullType="exclude"
/><naEmailAddress dd:minOccur="0" dd:nullType="exclude"
/><naHelpdesk dd:minOccur="0" dd:nullType="exclude"
/><naWebsite dd:minOccur="0" dd:nullType="exclude"
/></nationalAgency
><title dd:minOccur="0" dd:nullType="exclude"
/><gender dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><nationalId dd:minOccur="0" dd:nullType="exclude"
/><birthday dd:minOccur="0" dd:nullType="exclude"
/><birthyear dd:minOccur="0" dd:nullType="exclude"
/><department dd:minOccur="0" dd:nullType="exclude"
/><position dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
><typeOfIndividual dd:minOccur="0" dd:nullType="exclude"
/><institutionName dd:minOccur="0" dd:nullType="exclude"
/><additionalAddress dd:maxOccur="9" dd:minOccur="0"
><title dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
></additionalAddress
></legalRepresentative
><financialRepresentative dd:minOccur="0"
><role
/><context
/><nationalAgency dd:minOccur="0"
><naId
/><naAddress dd:minOccur="0" dd:nullType="exclude"
/><naEmailAddress dd:minOccur="0" dd:nullType="exclude"
/><naHelpdesk dd:minOccur="0" dd:nullType="exclude"
/><naWebsite dd:minOccur="0" dd:nullType="exclude"
/></nationalAgency
><title dd:minOccur="0" dd:nullType="exclude"
/><gender dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><nationalId dd:minOccur="0" dd:nullType="exclude"
/><birthday dd:minOccur="0" dd:nullType="exclude"
/><birthyear dd:minOccur="0" dd:nullType="exclude"
/><department dd:minOccur="0" dd:nullType="exclude"
/><position dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
/><town
/><region
/><country
/></address
><contact dd:minOccur="0" dd:nullType="exclude"
><email dd:minOccur="0" dd:nullType="exclude"
/><internet dd:minOccur="0" dd:nullType="exclude"
/><phone dd:minOccur="0" dd:nullType="exclude"
/><phoneOther dd:minOccur="0" dd:nullType="exclude"
/><fax dd:minOccur="0" dd:nullType="exclude"
/><mobile dd:minOccur="0" dd:nullType="exclude"
/></contact
><typeOfIndividual dd:minOccur="0" dd:nullType="exclude"
/><institutionName dd:minOccur="0" dd:nullType="exclude"
/><additionalAddress dd:maxOccur="9" dd:minOccur="0"
><title dd:minOccur="0" dd:nullType="exclude"
/><firstName dd:minOccur="0" dd:nullType="exclude"
/><lastName dd:minOccur="0" dd:nullType="exclude"
/><sameAddressCheck dd:minOccur="0" dd:nullType="exclude"
/><address type=""
><street
/><streetNumber
/><postalCode
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.