Malicious PDF — malware analysis report

Static analysis result for SHA-256 600bbd4ac080f07a…

MALICIOUS

PDF

162.9 KB Created: 2005-07-13 15:04:28 UTC Authoring application: Adobe Illustrator(R) 9.0 (via FDFMerge Lite 5.0.7 Windows SPDF_1096+ May 3 2004) First seen: 2026-05-09
MD5: f681f843ae768b2f080cb4d5dde74ff3 SHA-1: 14ceb26f36a9a211a1d9d39f4948139c949b41f6 SHA-256: 600bbd4ac080f07a1c2c940016abe077d35490f2170a2fec3e95e1b2876eb515
148 Risk Score

Malware Insights

MITRE ATT&CK
T1059.007 JavaScript T1203 Exploitation for Client Execution T1566.001 Spearphishing Attachment

The PDF file contains multiple JavaScript streams, including calls to 'eval()', which are indicative of exploit code. The 'PDF_JS_EXPLOIT_CLUSTER' heuristic firing strongly suggests a known exploit pattern. While the embedded JavaScript itself appears to be primarily for form manipulation and information gathering (e.g., collecting viewer details), the presence of 'eval()' and the exploit cluster heuristic indicate it's designed to trigger a vulnerability. The URL http://www.adobe.de was found in the JavaScript, but it is marked as benign and likely serves as a decoy or part of the exploit chain.

Machine Learning

  • Nyx PDF Classifier suspicious score 0.3258

Heuristics 7

  • JavaScript action low 2 related findings PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTER
    PDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.
    Matched line in script
     return eval(   this.getField("BMFPers").value );
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • SubmitForm action medium PDF_SUBMITFORM
    PDF has a /SubmitForm action — form data can be silently posted to an attacker-controlled URL
  • AcroForm button with action trigger low PDF_ACROFORM_BUTTON
    PDF contains a /Btn form field together with a SubmitForm/URI/Launch/JS trigger — this is the building block of fake 'Download' or 'Open' button overlays used in PDF phishing lures
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.w3.org/1999/02/22-rdf-syntax-ns# In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.adobe.deReferenced by PDF JavaScript
    • https://www.verisign.com/repository/CPS��In extracted file (font_02_sfnt_off0000ab58.bin)
    • https://www.verisign.comIn extracted file (font_02_sfnt_off0000ab58.bin)
    • https://www.verisign.com/repository/verisignlogo.gif06In extracted file (font_02_sfnt_off0000ab58.bin)
    • http://status.verisign.com/class1.crl0In extracted file (font_02_sfnt_off0000ab58.bin)
    • http://www.microsoft.com/typographyIn extracted file (font_02_sfnt_off0000ab58.bin)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 27

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0035_000.js pdf-javascript-stream PDF /JS object 35 at offset 0x11D23 76 bytes
SHA-256: a11b711e7dbb55adc6c5123c4b8500c22b4a30969c5caf07be5cbb6dfc7e726f
Preview script
First 1,000 lines of the extracted script
this.getField("Datum_09_20").value= util.printd("dd.mm.yyyy", new Date());
javascript_obj0045_001.js pdf-javascript-stream PDF /JS object 45 at offset 0x120E5 97 bytes
SHA-256: 1dd217fb04e605025a3fdd98e35431aa45379a297f137ce1a53d04e47ebe77ea
Preview script
First 1,000 lines of the extracted script
event.value=std_format_date(event.value,"dd.mm.yyyy","TT.MM.JJJJ","","true","","","true","","");
javascript_obj0064_002.js pdf-javascript-stream PDF /JS object 64 at offset 0x13463 38 bytes
SHA-256: c2afec67f7073f3266b6cc41d0ad47033305a3f36ff85b3d1052a5d576850bd1
Preview script
First 1,000 lines of the extracted script
app.alert("Formatbeispiel 15:30",3);
javascript_obj0093_003.js pdf-javascript-stream PDF /JS object 93 at offset 0x1615B 98 bytes
SHA-256: 328d2b036128bd98cfbb313534c50a2ca3b8c69b61cf843ab3204911582428a5
Preview script
First 1,000 lines of the extracted script
event.value=std_format_date(event.value,"dd.mm.yyyy","TT.MM.JJJJ","","false","","","true","","");
javascript_obj0119_004.js pdf-javascript-stream PDF /JS object 119 at offset 0x17DD5 50 bytes
SHA-256: 2590071e027a491f6d57a9838f86a8ef1c84fe0658d91276a4e11149b667be18
Preview script
First 1,000 lines of the extracted script
std_roundEventDig(100);
std_setEventPositive();
javascript_obj0120_005.js pdf-javascript-stream PDF /JS object 120 at offset 0x17E3A 41 bytes
SHA-256: 6aeb2fc8f6b0dba7b9d76914b437aa0140bcd183b4c2b0d2b66173e7a39a1974
Preview script
First 1,000 lines of the extracted script
AFNumber_Keystroke(2, 2, 0, 0, "", true);
javascript_obj0121_006.js pdf-javascript-stream PDF /JS object 121 at offset 0x17E92 38 bytes
SHA-256: dd4e86ff46931388298d522a0c25afc2a74df361f28fb6ad9f104ffc1f5056c1
Preview script
First 1,000 lines of the extracted script
AFNumber_Format(2, 2, 0, 0, "", true);
javascript_obj0130_007.js pdf-javascript-stream PDF /JS object 130 at offset 0x1878F 72 bytes
SHA-256: 27b87cc250a90fcd32d25dd38c86882c4b9cf098226424f7d658d79118072d63
Preview script
First 1,000 lines of the extracted script
std_roundEventDig(1);
std_setEventPositive();  
std_maxMinEvent(999,0);
javascript_obj0131_008.js pdf-javascript-stream PDF /JS object 131 at offset 0x1880D 41 bytes
SHA-256: 572a91fc51702643df28955aaeeb86dd1625f4e3544ee1ba29446fcedc17c93d
Preview script
First 1,000 lines of the extracted script
AFNumber_Keystroke(0, 2, 0, 0, "", true);
javascript_obj0132_009.js pdf-javascript-stream PDF /JS object 132 at offset 0x18865 38 bytes
SHA-256: fefbea8a61fff6d2a5e8d7c764a407c92249644f8a10b0dec3cfae812883a2b7
Preview script
First 1,000 lines of the extracted script
AFNumber_Format(0, 2, 0, 0, "", true);
javascript_obj0279_010.js pdf-javascript-stream PDF /JS object 279 at offset 0x211C7 156 bytes
SHA-256: 5b0712842335b0a44459a54d9b4f9dd113722b1574b35b32712557e01424f21c
Preview script
First 1,000 lines of the extracted script
// Methode for automatic configuration routine
if (event.target.value!="" && event.target.defaultValue=="") 
  event.target.defaultValue=event.target.value;
javascript_obj0284_011.js pdf-javascript-stream PDF /JS object 284 at offset 0x215D8 64 bytes
SHA-256: 9d944ad482148fddbb4c3ec07997e46533d25f7326485ec4758d22f05845d057
Preview script
First 1,000 lines of the extracted script
var f=this.getField("Help_LOK_Text");
f.display=display.noPrint;
javascript_obj0289_012.js pdf-javascript-stream PDF /JS object 289 at offset 0x219ED 66 bytes
SHA-256: 1a9154d2ad00d560fc77073bbd656979bb01ee79af52659d3e79ea66edf26023
Preview script
First 1,000 lines of the extracted script
var f=this.getField("Help_IMP_Text");
f.display=display.noPrint;
javascript_obj0295_013.js pdf-javascript-stream PDF /JS object 295 at offset 0x21E59 74 bytes
SHA-256: 5e9ecaaf074aec2dec679a750aac27d146d56776e4c2ae417df321dd4c2b4283
Preview script
First 1,000 lines of the extracted script
std_roundEventDig(100);
std_setEventPositive();  
std_maxMinEvent(999,0);
javascript_obj0297_014.js pdf-javascript-stream PDF /JS object 297 at offset 0x21F59 75 bytes
SHA-256: 0f0b3c58873b4700c6b869ef81b2b9eca8b12c6cafb76aac8c8b049287721cb4
Preview script
First 1,000 lines of the extracted script
std_roundEventDig(100);
std_setEventPositive();  
std_maxMinEvent(9999,0);
javascript_obj0301_015.js pdf-javascript-stream PDF /JS object 301 at offset 0x22108 73 bytes
SHA-256: f98f59a123d85c2df582a4bbc656465a1996349f94b1efab088525a632df6532
Preview script
First 1,000 lines of the extracted script
std_roundEventDig(1);
std_setEventPositive();  
std_maxMinEvent(9999,0);
javascript_obj0302_016.js pdf-javascript-stream PDF /JS object 302 at offset 0x22187 41 bytes
SHA-256: 5b4e1a57bf6476c87a1db4d415eeb42e1477d446a4236b8ae4189d3d8f669dde
Preview script
First 1,000 lines of the extracted script
AFNumber_Keystroke(0, 3, 0, 0, "", true);
javascript_obj0303_017.js pdf-javascript-stream PDF /JS object 303 at offset 0x221DF 38 bytes
SHA-256: ff0b1e0798b55aee9e494d4b5046c0d747ee05557796f33002cd8f8168a10b67
Preview script
First 1,000 lines of the extracted script
AFNumber_Format(0, 3, 0, 0, "", true);
javascript_obj0311_019.js pdf-javascript-stream PDF /JS object 311 at offset 0x224CD 33 bytes
SHA-256: 75a1cbe4e281d6b35addda0cd0f2fda7a8468297d37a6cc0813f672ac53611e8
Preview script
First 1,000 lines of the extracted script
AFNumber_Keystroke(0,0,0,0,"",1);
javascript_obj0312_020.js pdf-javascript-stream PDF /JS object 312 at offset 0x2251D 39 bytes
SHA-256: a90a7efbb584485ff3347dc5e329e79d4d8c7314f6a6fc7b951b18f0c915358c
Preview script
First 1,000 lines of the extracted script
std_AutoTab(this, event, "Zahl07_02");
javascript_obj0020_021.js pdf-javascript-stream PDF /JS object 20 at offset 0xF998 781 bytes
SHA-256: 3f47657062b15749b9c6a387de3d40eed6b65bc0084fb4aa6894a70b9dc33fec
Preview script
First 1,000 lines of the extracted script
var infoField=this.getField("param_1206_Versionsinfo");
var msg="Version:"+infoField.value+"\r"+
        "viewerType:"+app.viewerType+"\r"+
        "viewerVersion:"+app.viewerVersion+"\r"+
        "formsVersion:"+app.formsVersion+"\r"+
        "language:"+app.language+"\r"+
        "platform:"+app.platform+"\r"+
        "modDate:"+this.modDate+"\r"+
        "filesize:"+this.filesize+"\r"+
        "Number of Fields:"+this.numFields+"\r"+
        "---------------------------------"+"\r"+
        "orgID:"+this.getField("param_1207_OrganizationID").value+"\r"+
        "FID:"+this.getField("param_1207_FID").value+"\r"+
        "Version:"+this.getField("param_1207_Version").value+"\r"+
        "Filename:"+this.getField("param_1207_Formularname").value;
       
app.alert(msg);
javascript_obj0021_022.js pdf-javascript-stream PDF /JS object 21 at offset 0xFAF6 23740 bytes
SHA-256: d5adf5f05c0bfbb950b598845c1394fe82aa7c7967460fa98397372ea331c415
Preview script
First 1,000 lines of the extracted script
function pupUpZL(destinationform,destfrom, destto,txtfrom, txtto,one2oneOff,freeInput) {
 var cItem;
 var mx=new Array 
    ("00:00","00:30", "01:00","01:30","02:00","02:30",
     "03:00","03:30", "04:00","04:30","05:00","05:30",
     "06:00","06:30", "07:00","07:30","08:00","08:30",
     "09:00","09:30", "10:00","10:30","11:00","11:30",
     "12:00","12:30", "13:00","13:30","14:00","14:30",
     "15:00","15:30", "16:00","16:30","17:00","17:30",
     "18:00","18:30", "19:00","19:30","20:00","20:30",
     "21:00","21:30", "22:00","22:30","23:00","23:30");
 
 if (txtfrom==null || txtfrom=="") txtfrom="von";
 if (txtto==null || txtto=="") txtto="bis"; 
 var zf=txtfrom;
 var zt=txtto; 
   //
 if (one2oneOff=="" || one2oneOff==1) {
   cItem= app.popUpMenu(
   [""+zf+" "+mx[0]  ,""+zt+" "+mx[1]+ " (00:00->00:30)",""+zt+" "+mx[2]+ "  (00:00->01:00)",""+zt+" "+mx[3]+ " (00:00->01:30)",""+zt+" "+mx[4]+ " (00:00->02:00)",""+zt+" "+mx[5]+ " (00:00->02:30)",""+zt+" "+mx[6]+ " (00:00->03:00)",""+zt+" "+mx[7]+ " (00:00->03:30)",""+zt+" "+mx[8]+ " (00:00->04:00)",""+zt+" "+mx[9]+ " (00:00->04:30)",""+zt+" "+mx[10]+ " (00:00->05:00)",""+zt+" "+mx[11]+ " (00:00->05:30)",""+zt+" "+mx[11]+ " (00:00->06:00)",""+zt+" "+mx[11]+ " (00:00->06:30)",""+zt+" "+mx[11]+ " (00:00->07:00)",""+zt+" "+mx[11]+ " (00:00->75:30)",""+zt+" "+mx[11]+ " (00:00->08:00)",""+zt+" "+mx[11]+ " (00:00->08:30)",""+zt+" "+mx[11]+ " (00:00->09:00)",""+zt+" "+mx[11]+ " (00:00->09:30)",""+zt+" "+mx[11]+ " (00:00->10:00)",""+zt+" "+mx[11]+ " (00:00->10:30)",""+zt+" "+mx[11]+ " (00:00->11:00)",""+zt+" "+mx[11]+ " (00:00->11:30)",""+zt+" "+mx[11]+ " (00:00->12:00)",""+zt+" "+mx[11]+ " (00:00->12:30)",""+zt+" "+mx[11]+ " (00:00->13:00)",""+zt+" "+mx[11]+ " (00:00->13:30)",""+zt+" "+mx[11]+ " (00:00->14:00)",""+zt+" "+mx[11]+ " (00:00->14:30)",""+zt+" "+mx[11]+ " (00:00->15:00)",""+zt+" "+mx[11]+ " (00:00->15:30)",""+zt+" "+mx[11]+ " (00:00->16:00)",""+zt+" "+mx[11]+ " (00:00->16:30)",""+zt+" "+mx[11]+ " (00:00->17:00)",""+zt+" "+mx[11]+ " (00:00->17:30)",""+zt+" "+mx[11]+ " (00:00->18:00)",""+zt+" "+mx[11]+ " (00:00->18:30)",""+zt+" "+mx[11]+ " (00:00->19:00)",""+zt+" "+mx[11]+ " (00:00->19:30)",""+zt+" "+mx[11]+ " (00:00->20:00)",""+zt+" "+mx[11]+ " (00:00->20:30)",""+zt+" "+mx[11]+ " (00:00->20:30)",""+zt+" "+mx[11]+ " (00:00->21:00)",""+zt+" "+mx[11]+ " (00:00->21:30)",""+zt+" "+mx[11]+ " (00:00->22:00)",""+zt+" "+mx[11]+ " (00:00->22:30)",""+zt+" "+mx[11]+ " (00:00->23:00)",""+zt+" "+mx[11]+ " (00:00->23:30)"],
   [""+zf+" "+mx[1]  ,""+zt+" "+mx[2]+ " (00:30->01:00)",""+zt+" "+mx[3]+ " (00:30->01:30)",""+zt+" "+mx[4]+ " (00:30->02:00)",""+zt+" "+mx[5]+ " (00:30->02:30)",""+zt+" "+mx[6]+ " (00:30->03:00)",""+zt+" "+mx[7]+ " (00:30->03:30)",""+zt+" "+mx[8]+ " (00:30->04:00)",""+zt+" "+mx[9]+ " (00:30->04:30)",""+zt+" "+mx[10]+ " (00:30->05:00)",""+zt+" "+mx[11]+ " (00:30->05:30)",""+zt+" "+mx[11]+ " (00:30->06:00)",""+zt+" "+mx[11]+ " (00:30->06:30)",""+zt+" "+mx[11]+ " (00:30->07:00)",""+zt+" "+mx[11]+ " (00:30->75:30)",""+zt+" "+mx[11]+ " (00:30->08:00)",""+zt+" "+mx[11]+ " (00:30->08:30)",""+zt+" "+mx[11]+ " (00:30->09:00)",""+zt+" "+mx[11]+ " (00:30->09:30)",""+zt+" "+mx[11]+ " (00:30->10:00)",""+zt+" "+mx[11]+ " (00:30->10:30)",""+zt+" "+mx[11]+ " (00:30->11:00)",""+zt+" "+mx[11]+ " (00:30->11:30)",""+zt+" "+mx[11]+ " (00:30->12:00)",""+zt+" "+mx[11]+ " (00:30->12:30)",""+zt+" "+mx[11]+ " (00:30->13:00)",""+zt+" "+mx[11]+ " (00:30->13:30)",""+zt+" "+mx[11]+ " (00:30->14:00)",""+zt+" "+mx[11]+ " (00:30->14:30)",""+zt+" "+mx[11]+ " (00:30->15:00)",""+zt+" "+mx[11]+ " (00:30->15:30)",""+zt+" "+mx[11]+ " (00:30->16:00)",""+zt+" "+mx[11]+ " (00:30->16:30)",""+zt+" "+mx[11]+ " (00:30->17:00)",""+zt+" "+mx[11]+ " (00:30->17:30)",""+zt+" "+mx[11]+ " (00:30->18:00)",""+zt+" "+mx[11]+ " (00:30->18:30)",""+zt+" "+mx[11]+ " (00:30->19:00)",""+zt+" "+mx[11]+ " (00:30->19:30)",""+zt+" "+mx[11]+ " (00:30->20:00)",""+zt+" "+mx[11]+ " (00:30->20:30)",""+zt+" "+mx[11]+ " (00:30->20:30)",""+zt+" "+mx[11]+ " (00:30->21:00)",""+zt+" "+mx[11]+ " (00:30->21:30)",""+zt+" "+mx[11]+ " (00:30->22:00)",""+zt+" "+mx[11]+ " (00:30->22:30)",""+zt+" "+mx[11]+ " (00:30->23:00)",""+zt+" "+mx[11]+ " (00:30->23:30)"],
   [""+zf+" "+mx[2]  ,""+zt+" "+mx[3]+ " (01:00->01:30)",""+zt+" "+mx[4]+ " (01:00->02:00)",""+zt+" "+mx[5]+ " (01:00->02:30)",""+zt+" "+mx[6]+ " (01:00->03:00)",""+zt+" "+mx[7]+ " (01:00->03:30)",""+zt+" "+mx[8]+ " (01:00->04:00)",""+zt+" "+mx[9]+ " (01:00->04:30)",""+zt+" "+mx[10]+ " (01:00->05:00)",""+zt+" "+mx[11]+ " (01:00->05:30)",""+zt+" "+mx[11]+ " (01:00->06:00)",""+zt+" "+mx[11]+ " (01:00->06:30)",""+zt+" "+mx[11]+ " (01:00->07:00)",""+zt+" "+mx[11]+ " (01:00->75:30)",""+zt+" "+mx[11]+ " (01:00->08:00)",""+zt+" "+mx[11]+ " (01:00->08:30)",""+zt+" "+mx[11]+ " (01:00->09:00)",""+zt+" "+mx[11]+ " (01:00->09:30)",""+zt+" "+mx[11]+ " (01:00->10:00)",""+zt+" "+mx[11]+ " (01:00->10:30)",""+zt+" "+mx[11]+ " (01:00->11:00)",""+zt+" "+mx[11]+ " (01:00->11:30)",""+zt+" "+mx[11]+ " (01:00->12:00)",""+zt+" "+mx[11]+ " (01:00->12:30)",""+zt+" "+mx[11]+ " (01:00->13:00)",""+zt+" "+mx[11]+ " (01:00->13:30)",""+zt+" "+mx[11]+ " (01:00->14:00)",""+zt+" "+mx[11]+ " (01:00->14:30)",""+zt+" "+mx[11]+ " (01:00->15:00)",""+zt+" "+mx[11]+ " (01:00->15:30)",""+zt+" "+mx[11]+ " (01:00->16:00)",""+zt+" "+mx[11]+ " (01:00->16:30)",""+zt+" "+mx[11]+ " (01:00->17:00)",""+zt+" "+mx[11]+ " (01:00->17:30)",""+zt+" "+mx[11]+ " (01:00->18:00)",""+zt+" "+mx[11]+ " (01:00->18:30)",""+zt+" "+mx[11]+ " (01:00->19:00)",""+zt+" "+mx[11]+ " (01:00->19:30)",""+zt+" "+mx[11]+ " (01:00->20:00)",""+zt+" "+mx[11]+ " (01:00->20:30)",""+zt+" "+mx[11]+ " (01:00->20:30)",""+zt+" "+mx[11]+ " (01:00->21:00)",""+zt+" "+mx[11]+ " (01:00->21:30)",""+zt+" "+mx[11]+ " (01:00->22:00)",""+zt+" "+mx[11]+ " (01:00->22:30)",""+zt+" "+mx[11]+ " (01:00->23:00)",""+zt+" "+mx[11]+ " (01:00->23:30)"],
   [""+zf+" "+mx[3]  ,""+zt+" "+mx[4]+ " (01:30->02:00)",""+zt+" "+mx[5]+ " (01:30->02:30)",""+zt+" "+mx[6]+ " (01:30->03:00)",""+zt+" "+mx[7]+ " (01:30->03:30)",""+zt+" "+mx[8]+ " (01:30->04:00)",""+zt+" "+mx[9]+ " (01:30->04:30)",""+zt+" "+mx[10]+ " (01:30->05:00)",""+zt+" "+mx[11]+ " (01:30->05:30)",""+zt+" "+mx[11]+ " (01:30->06:00)",""+zt+" "+mx[11]+ " (01:30->06:30)",""+zt+" "+mx[11]+ " (01:30->07:00)",""+zt+" "+mx[11]+ " (01:30->75:30)",""+zt+" "+mx[11]+ " (01:30->08:00)",""+zt+" "+mx[11]+ " (01:30->08:30)",""+zt+" "+mx[11]+ " (01:30->09:00)",""+zt+" "+mx[11]+ " (01:30->09:30)",""+zt+" "+mx[11]+ " (01:30->10:00)",""+zt+" "+mx[11]+ " (01:30->10:30)",""+zt+" "+mx[11]+ " (01:30->11:00)",""+zt+" "+mx[11]+ " (01:30->11:30)",""+zt+" "+mx[11]+ " (01:30->12:00)",""+zt+" "+mx[11]+ " (01:30->12:30)",""+zt+" "+mx[11]+ " (01:30->13:00)",""+zt+" "+mx[11]+ " (01:30->13:30)",""+zt+" "+mx[11]+ " (01:30->14:00)",""+zt+" "+mx[11]+ " (01:30->14:30)",""+zt+" "+mx[11]+ " (01:30->15:00)",""+zt+" "+mx[11]+ " (01:30->15:30)",""+zt+" "+mx[11]+ " (01:30->16:00)",""+zt+" "+mx[11]+ " (01:30->16:30)",""+zt+" "+mx[11]+ " (01:30->17:00)",""+zt+" "+mx[11]+ " (01:30->17:30)",""+zt+" "+mx[11]+ " (01:30->18:00)",""+zt+" "+mx[11]+ " (01:30->18:30)",""+zt+" "+mx[11]+ " (01:30->19:00)",""+zt+" "+mx[11]+ " (01:30->19:30)",""+zt+" "+mx[11]+ " (01:30->20:00)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->21:00)",""+zt+" "+mx[11]+ " (01:30->21:30)",""+zt+" "+mx[11]+ " (01:30->22:00)",""+zt+" "+mx[11]+ " (01:30->22:30)",""+zt+" "+mx[11]+ " (01:30->23:00)",""+zt+" "+mx[11]+ " (01:30->23:30)"],

   [""+zf+" "+mx[4]  ,""+zt+" "+mx[4]+ " (01:30->02:00)",""+zt+" "+mx[5]+ " (01:30->02:30)",""+zt+" "+mx[6]+ " (01:30->03:00)",""+zt+" "+mx[7]+ " (01:30->03:30)",""+zt+" "+mx[8]+ " (01:30->04:00)",""+zt+" "+mx[9]+ " (01:30->04:30)",""+zt+" "+mx[10]+ " (01:30->05:00)",""+zt+" "+mx[11]+ " (01:30->05:30)",""+zt+" "+mx[11]+ " (01:30->06:00)",""+zt+" "+mx[11]+ " (01:30->06:30)",""+zt+" "+mx[11]+ " (01:30->07:00)",""+zt+" "+mx[11]+ " (01:30->75:30)",""+zt+" "+mx[11]+ " (01:30->08:00)",""+zt+" "+mx[11]+ " (01:30->08:30)",""+zt+" "+mx[11]+ " (01:30->09:00)",""+zt+" "+mx[11]+ " (01:30->09:30)",""+zt+" "+mx[11]+ " (01:30->10:00)",""+zt+" "+mx[11]+ " (01:30->10:30)",""+zt+" "+mx[11]+ " (01:30->11:00)",""+zt+" "+mx[11]+ " (01:30->11:30)",""+zt+" "+mx[11]+ " (01:30->12:00)",""+zt+" "+mx[11]+ " (01:30->12:30)",""+zt+" "+mx[11]+ " (01:30->13:00)",""+zt+" "+mx[11]+ " (01:30->13:30)",""+zt+" "+mx[11]+ " (01:30->14:00)",""+zt+" "+mx[11]+ " (01:30->14:30)",""+zt+" "+mx[11]+ " (01:30->15:00)",""+zt+" "+mx[11]+ " (01:30->15:30)",""+zt+" "+mx[11]+ " (01:30->16:00)",""+zt+" "+mx[11]+ " (01:30->16:30)",""+zt+" "+mx[11]+ " (01:30->17:00)",""+zt+" "+mx[11]+ " (01:30->17:30)",""+zt+" "+mx[11]+ " (01:30->18:00)",""+zt+" "+mx[11]+ " (01:30->18:30)",""+zt+" "+mx[11]+ " (01:30->19:00)",""+zt+" "+mx[11]+ " (01:30->19:30)",""+zt+" "+mx[11]+ " (01:30->20:00)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->21:00)",""+zt+" "+mx[11]+ " (01:30->21:30)",""+zt+" "+mx[11]+ " (01:30->22:00)",""+zt+" "+mx[11]+ " (01:30->22:30)",""+zt+" "+mx[11]+ " (01:30->23:00)",""+zt+" "+mx[11]+ " (01:30->23:30)"],
   [""+zf+" "+mx[5]  ,""+zt+" "+mx[4]+ " (01:30->02:00)",""+zt+" "+mx[5]+ " (01:30->02:30)",""+zt+" "+mx[6]+ " (01:30->03:00)",""+zt+" "+mx[7]+ " (01:30->03:30)",""+zt+" "+mx[8]+ " (01:30->04:00)",""+zt+" "+mx[9]+ " (01:30->04:30)",""+zt+" "+mx[10]+ " (01:30->05:00)",""+zt+" "+mx[11]+ " (01:30->05:30)",""+zt+" "+mx[11]+ " (01:30->06:00)",""+zt+" "+mx[11]+ " (01:30->06:30)",""+zt+" "+mx[11]+ " (01:30->07:00)",""+zt+" "+mx[11]+ " (01:30->75:30)",""+zt+" "+mx[11]+ " (01:30->08:00)",""+zt+" "+mx[11]+ " (01:30->08:30)",""+zt+" "+mx[11]+ " (01:30->09:00)",""+zt+" "+mx[11]+ " (01:30->09:30)",""+zt+" "+mx[11]+ " (01:30->10:00)",""+zt+" "+mx[11]+ " (01:30->10:30)",""+zt+" "+mx[11]+ " (01:30->11:00)",""+zt+" "+mx[11]+ " (01:30->11:30)",""+zt+" "+mx[11]+ " (01:30->12:00)",""+zt+" "+mx[11]+ " (01:30->12:30)",""+zt+" "+mx[11]+ " (01:30->13:00)",""+zt+" "+mx[11]+ " (01:30->13:30)",""+zt+" "+mx[11]+ " (01:30->14:00)",""+zt+" "+mx[11]+ " (01:30->14:30)",""+zt+" "+mx[11]+ " (01:30->15:00)",""+zt+" "+mx[11]+ " (01:30->15:30)",""+zt+" "+mx[11]+ " (01:30->16:00)",""+zt+" "+mx[11]+ " (01:30->16:30)",""+zt+" "+mx[11]+ " (01:30->17:00)",""+zt+" "+mx[11]+ " (01:30->17:30)",""+zt+" "+mx[11]+ " (01:30->18:00)",""+zt+" "+mx[11]+ " (01:30->18:30)",""+zt+" "+mx[11]+ " (01:30->19:00)",""+zt+" "+mx[11]+ " (01:30->19:30)",""+zt+" "+mx[11]+ " (01:30->20:00)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->21:00)",""+zt+" "+mx[11]+ " (01:30->21:30)",""+zt+" "+mx[11]+ " (01:30->22:00)",""+zt+" "+mx[11]+ " (01:30->22:30)",""+zt+" "+mx[11]+ " (01:30->23:00)",""+zt+" "+mx[11]+ " (01:30->23:30)"],
   [""+zf+" "+mx[6]  ,""+zt+" "+mx[4]+ " (01:30->02:00)",""+zt+" "+mx[5]+ " (01:30->02:30)",""+zt+" "+mx[6]+ " (01:30->03:00)",""+zt+" "+mx[7]+ " (01:30->03:30)",""+zt+" "+mx[8]+ " (01:30->04:00)",""+zt+" "+mx[9]+ " (01:30->04:30)",""+zt+" "+mx[10]+ " (01:30->05:00)",""+zt+" "+mx[11]+ " (01:30->05:30)",""+zt+" "+mx[11]+ " (01:30->06:00)",""+zt+" "+mx[11]+ " (01:30->06:30)",""+zt+" "+mx[11]+ " (01:30->07:00)",""+zt+" "+mx[11]+ " (01:30->75:30)",""+zt+" "+mx[11]+ " (01:30->08:00)",""+zt+" "+mx[11]+ " (01:30->08:30)",""+zt+" "+mx[11]+ " (01:30->09:00)",""+zt+" "+mx[11]+ " (01:30->09:30)",""+zt+" "+mx[11]+ " (01:30->10:00)",""+zt+" "+mx[11]+ " (01:30->10:30)",""+zt+" "+mx[11]+ " (01:30->11:00)",""+zt+" "+mx[11]+ " (01:30->11:30)",""+zt+" "+mx[11]+ " (01:30->12:00)",""+zt+" "+mx[11]+ " (01:30->12:30)",""+zt+" "+mx[11]+ " (01:30->13:00)",""+zt+" "+mx[11]+ " (01:30->13:30)",""+zt+" "+mx[11]+ " (01:30->14:00)",""+zt+" "+mx[11]+ " (01:30->14:30)",""+zt+" "+mx[11]+ " (01:30->15:00)",""+zt+" "+mx[11]+ " (01:30->15:30)",""+zt+" "+mx[11]+ " (01:30->16:00)",""+zt+" "+mx[11]+ " (01:30->16:30)",""+zt+" "+mx[11]+ " (01:30->17:00)",""+zt+" "+mx[11]+ " (01:30->17:30)",""+zt+" "+mx[11]+ " (01:30->18:00)",""+zt+" "+mx[11]+ " (01:30->18:30)",""+zt+" "+mx[11]+ " (01:30->19:00)",""+zt+" "+mx[11]+ " (01:30->19:30)",""+zt+" "+mx[11]+ " (01:30->20:00)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->21:00)",""+zt+" "+mx[11]+ " (01:30->21:30)",""+zt+" "+mx[11]+ " (01:30->22:00)",""+zt+" "+mx[11]+ " (01:30->22:30)",""+zt+" "+mx[11]+ " (01:30->23:00)",""+zt+" "+mx[11]+ " (01:30->23:30)"],
   [""+zf+" "+mx[7]  ,""+zt+" "+mx[4]+ " (01:30->02:00)",""+zt+" "+mx[5]+ " (01:30->02:30)",""+zt+" "+mx[6]+ " (01:30->03:00)",""+zt+" "+mx[7]+ " (01:30->03:30)",""+zt+" "+mx[8]+ " (01:30->04:00)",""+zt+" "+mx[9]+ " (01:30->04:30)",""+zt+" "+mx[10]+ " (01:30->05:00)",""+zt+" "+mx[11]+ " (01:30->05:30)",""+zt+" "+mx[11]+ " (01:30->06:00)",""+zt+" "+mx[11]+ " (01:30->06:30)",""+zt+" "+mx[11]+ " (01:30->07:00)",""+zt+" "+mx[11]+ " (01:30->75:30)",""+zt+" "+mx[11]+ " (01:30->08:00)",""+zt+" "+mx[11]+ " (01:30->08:30)",""+zt+" "+mx[11]+ " (01:30->09:00)",""+zt+" "+mx[11]+ " (01:30->09:30)",""+zt+" "+mx[11]+ " (01:30->10:00)",""+zt+" "+mx[11]+ " (01:30->10:30)",""+zt+" "+mx[11]+ " (01:30->11:00)",""+zt+" "+mx[11]+ " (01:30->11:30)",""+zt+" "+mx[11]+ " (01:30->12:00)",""+zt+" "+mx[11]+ " (01:30->12:30)",""+zt+" "+mx[11]+ " (01:30->13:00)",""+zt+" "+mx[11]+ " (01:30->13:30)",""+zt+" "+mx[11]+ " (01:30->14:00)",""+zt+" "+mx[11]+ " (01:30->14:30)",""+zt+" "+mx[11]+ " (01:30->15:00)",""+zt+" "+mx[11]+ " (01:30->15:30)",""+zt+" "+mx[11]+ " (01:30->16:00)",""+zt+" "+mx[11]+ " (01:30->16:30)",""+zt+" "+mx[11]+ " (01:30->17:00)",""+zt+" "+mx[11]+ " (01:30->17:30)",""+zt+" "+mx[11]+ " (01:30->18:00)",""+zt+" "+mx[11]+ " (01:30->18:30)",""+zt+" "+mx[11]+ " (01:30->19:00)",""+zt+" "+mx[11]+ " (01:30->19:30)",""+zt+" "+mx[11]+ " (01:30->20:00)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->21:00)",""+zt+" "+mx[11]+ " (01:30->21:30)",""+zt+" "+mx[11]+ " (01:30->22:00)",""+zt+" "+mx[11]+ " (01:30->22:30)",""+zt+" "+mx[11]+ " (01:30->23:00)",""+zt+" "+mx[11]+ " (01:30->23:30)"],
   [""+zf+" "+mx[8]  ,""+zt+" "+mx[4]+ " (01:30->02:00)",""+zt+" "+mx[5]+ " (01:30->02:30)",""+zt+" "+mx[6]+ " (01:30->03:00)",""+zt+" "+mx[7]+ " (01:30->03:30)",""+zt+" "+mx[8]+ " (01:30->04:00)",""+zt+" "+mx[9]+ " (01:30->04:30)",""+zt+" "+mx[10]+ " (01:30->05:00)",""+zt+" "+mx[11]+ " (01:30->05:30)",""+zt+" "+mx[11]+ " (01:30->06:00)",""+zt+" "+mx[11]+ " (01:30->06:30)",""+zt+" "+mx[11]+ " (01:30->07:00)",""+zt+" "+mx[11]+ " (01:30->75:30)",""+zt+" "+mx[11]+ " (01:30->08:00)",""+zt+" "+mx[11]+ " (01:30->08:30)",""+zt+" "+mx[11]+ " (01:30->09:00)",""+zt+" "+mx[11]+ " (01:30->09:30)",""+zt+" "+mx[11]+ " (01:30->10:00)",""+zt+" "+mx[11]+ " (01:30->10:30)",""+zt+" "+mx[11]+ " (01:30->11:00)",""+zt+" "+mx[11]+ " (01:30->11:30)",""+zt+" "+mx[11]+ " (01:30->12:00)",""+zt+" "+mx[11]+ " (01:30->12:30)",""+zt+" "+mx[11]+ " (01:30->13:00)",""+zt+" "+mx[11]+ " (01:30->13:30)",""+zt+" "+mx[11]+ " (01:30->14:00)",""+zt+" "+mx[11]+ " (01:30->14:30)",""+zt+" "+mx[11]+ " (01:30->15:00)",""+zt+" "+mx[11]+ " (01:30->15:30)",""+zt+" "+mx[11]+ " (01:30->16:00)",""+zt+" "+mx[11]+ " (01:30->16:30)",""+zt+" "+mx[11]+ " (01:30->17:00)",""+zt+" "+mx[11]+ " (01:30->17:30)",""+zt+" "+mx[11]+ " (01:30->18:00)",""+zt+" "+mx[11]+ " (01:30->18:30)",""+zt+" "+mx[11]+ " (01:30->19:00)",""+zt+" "+mx[11]+ " (01:30->19:30)",""+zt+" "+mx[11]+ " (01:30->20:00)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->21:00)",""+zt+" "+mx[11]+ " (01:30->21:30)",""+zt+" "+mx[11]+ " (01:30->22:00)",""+zt+" "+mx[11]+ " (01:30->22:30)",""+zt+" "+mx[11]+ " (01:30->23:00)",""+zt+" "+mx[11]+ " (01:30->23:30)"],
   [""+zf+" "+mx[0]  ,""+zt+" "+mx[4]+ " (01:30->02:00)",""+zt+" "+mx[5]+ " (01:30->02:30)",""+zt+" "+mx[6]+ " (01:30->03:00)",""+zt+" "+mx[7]+ " (01:30->03:30)",""+zt+" "+mx[8]+ " (01:30->04:00)",""+zt+" "+mx[9]+ " (01:30->04:30)",""+zt+" "+mx[10]+ " (01:30->05:00)",""+zt+" "+mx[11]+ " (01:30->05:30)",""+zt+" "+mx[11]+ " (01:30->06:00)",""+zt+" "+mx[11]+ " (01:30->06:30)",""+zt+" "+mx[11]+ " (01:30->07:00)",""+zt+" "+mx[11]+ " (01:30->75:30)",""+zt+" "+mx[11]+ " (01:30->08:00)",""+zt+" "+mx[11]+ " (01:30->08:30)",""+zt+" "+mx[11]+ " (01:30->09:00)",""+zt+" "+mx[11]+ " (01:30->09:30)",""+zt+" "+mx[11]+ " (01:30->10:00)",""+zt+" "+mx[11]+ " (01:30->10:30)",""+zt+" "+mx[11]+ " (01:30->11:00)",""+zt+" "+mx[11]+ " (01:30->11:30)",""+zt+" "+mx[11]+ " (01:30->12:00)",""+zt+" "+mx[11]+ " (01:30->12:30)",""+zt+" "+mx[11]+ " (01:30->13:00)",""+zt+" "+mx[11]+ " (01:30->13:30)",""+zt+" "+mx[11]+ " (01:30->14:00)",""+zt+" "+mx[11]+ " (01:30->14:30)",""+zt+" "+mx[11]+ " (01:30->15:00)",""+zt+" "+mx[11]+ " (01:30->15:30)",""+zt+" "+mx[11]+ " (01:30->16:00)",""+zt+" "+mx[11]+ " (01:30->16:30)",""+zt+" "+mx[11]+ " (01:30->17:00)",""+zt+" "+mx[11]+ " (01:30->17:30)",""+zt+" "+mx[11]+ " (01:30->18:00)",""+zt+" "+mx[11]+ " (01:30->18:30)",""+zt+" "+mx[11]+ " (01:30->19:00)",""+zt+" "+mx[11]+ " (01:30->19:30)",""+zt+" "+mx[11]+ " (01:30->20:00)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->20:30)",""+zt+" "+mx[11]+ " (01:30->21:00)",""+zt+" "+mx[11]+ " (01:30->21:30)",""+zt+" "+mx[11]+ " (01:30->22:00)",""+zt+" "+mx[11]+ " (01:30->22:30)",""+zt+" "+mx[11]+ " (01:30->23:00)",""+zt+" "+mx[11]+ " (01:30->23:30)"],
  
  
   [""+zf+" "+mx[3]  ,""+zt+" "+mx[3]+ " (04->04)",""+zt+" "+mx[4]+ " (04->05)",""+zt+" "+mx[5]+ " (04->06)",""+zt+" "+mx[6]+ " (04->07)",""+zt+" "+mx[7]+ " (04->08)",""+zt+" "+mx[8]+ " (04->09)",""+zt+" "+mx[9]+ " (04->10)",""+zt+" "+mx[10]+" (04->11)",""+zt+" "+mx[11]+" (04->12)"],   
   [""+zf+" "+mx[4]  ,""+zt+" "+mx[4]+ " (05->05)",""+zt+" "+mx[5]+ " (05->06)",""+zt+" "+mx[6]+ " (05->07)",""+zt+" "+mx[7]+ " (05->08)",""+zt+" "+mx[8]+ " (05->09)",""+zt+" "+mx[9]+ " (05->10)",""+zt+" "+mx[10]+" (05->11)",""+zt+" "+mx[11]+" (05->12)"],      
   [""+zf+" "+mx[5]  ,""+zt+" "+mx[5]+ " (06->06)",""+zt+" "+mx[6]+ " (06->07)",""+zt+" "+mx[7]+ " (06->08)",""+zt+" "+mx[8]+ " (06->09)",""+zt+" "+mx[9]+ " (06->10)",""+zt+" "+mx[10]+" (06->11)",""+zt+" "+mx[11]+" (06->12)"],         
   [""+zf+" "+mx[6]  ,""+zt+" "+mx[6]+ " (07->07)",""+zt+" "+mx[7]+ " (07->08)",""+zt+" "+mx[8]+ " (07->09)",""+zt+" "+mx[9]+ " (07->10)",""+zt+" "+mx[10]+" (07->11)",""+zt+" "+mx[11]+" (07->12)"],
   [""+zf+" "+mx[7]  ,""+zt+" "+mx[7]+ " (08->08)",""+zt+" "+mx[8]+ " (08->09)",""+zt+" "+mx[9]+ " (08->10)",""+zt+" "+mx[10]+" (08->11)",""+zt+" "+mx[11]+" (08->12)"],   
   [""+zf+" "+mx[8]  ,""+zt+" "+mx[8]+ " (09->09)",""+zt+" "+mx[9]+ " (09->10)",""+zt+" "+mx[10]+" (09->11)",""+zt+" "+mx[11]+" (09->12)"],      
   [""+zf+" "+mx[9]  ,""+zt+" "+mx[9]+ " (10->10)",""+zt+" "+mx[10]+" (10->11)",""+zt+" "+mx[11]+" (10->12)"],         
   [""+zf+" "+mx[10] ,""+zt+" "+mx[10]+" (11->11)",""+zt+" "+mx[11]+" (11->12)"],            
   [""+zf+" "+mx[11] ,""+zt+" "+mx[11]+" (12->12)"],
   "Freie Eingabe"
   );
 }
 else {
   cItem= app.popUpMenu(
   [""+zf+" "+mx[0]  ,""+zt+" "+mx[1]+ " (01->02)",""+zt+" "+mx[2]+ " (01->03)",""+zt+" "+mx[3]+ " (01->04)",""+zt+" "+mx[4]+ " (01->05)",""+zt+" "+mx[5]+ " (01->06)",""+zt+" "+mx[6]+ " (01->07)",""+zt+" "+mx[7]+ " (01->08)",""+zt+" "+mx[8]+ " (01->09)",""+zt+" "+mx[9]+ " (01->10)",""+zt+" "+mx[10]+ " (01->11)",""+zt+" "+mx[11]+ " (01->12)"],
   [""+zf+" "+mx[1]  ,""+zt+" "+mx[2]+ " (02->03)",""+zt+" "+mx[3]+ " (02->04)",""+zt+" "+mx[4]+ " (02->05)",""+zt+" "+mx[5]+ " (02->06)",""+zt+" "+mx[6]+ " (02->07)",""+zt+" "+mx[7]+ " (02->08)",""+zt+" "+mx[8]+ " (02->09)",""+zt+" "+mx[9]+ " (02->10)",""+zt+" "+mx[10]+" (02->11)",""+zt+" "+mx[11]+ " (02->12)"],
   [""+zf+" "+mx[2]  ,""+zt+" "+mx[3]+ " (03->04)",""+zt+" "+mx[4]+ " (03->05)",""+zt+" "+mx[5]+ " (03->06)",""+zt+" "+mx[6]+ " (03->07)",""+zt+" "+mx[7]+ " (03->08)",""+zt+" "+mx[8]+ " (03->09)",""+zt+" "+mx[9]+ " (03->10)",""+zt+" "+mx[10]+" (03->11)",""+zt+" "+mx[11]+" (03->12)"],
   [""+zf+" "+mx[3]  ,""+zt+" "+mx[4]+ " (04->05)",""+zt+" "+mx[5]+ " (04->06)",""+zt+" "+mx[6]+ " (04->07)",""+zt+" "+mx[7]+ " (04->08)",""+zt+" "+mx[8]+ " (04->09)",""+zt+" "+mx[9]+ " (04->10)",""+zt+" "+mx[10]+" (04->11)",""+zt+" "+mx[11]+" (04->12)"],   
   [""+zf+" "+mx[4]  ,""+zt+" "+mx[5]+ " (05->06)",""+zt+" "+mx[6]+ " (05->07)",""+zt+" "+mx[7]+ " (05->08)",""+zt+" "+mx[8]+ " (05->09)",""+zt+" "+mx[9]+ " (05->10)",""+zt+" "+mx[10]+" (05->11)",""+zt+" "+mx[11]+" (05->12)"],      
   [""+zf+" "+mx[5]  ,""+zt+" "+mx[6]+ " (06->07)",""+zt+" "+mx[7]+ " (06->08)",""+zt+" "+mx[8]+ " (06->09)",""+zt+" "+mx[9]+ " (06->10)",""+zt+" "+mx[10]+" (06->11)",""+zt+" "+mx[11]+" (06->12)"],         
   [""+zf+" "+mx[6]  ,""+zt+" "+mx[7]+ " (07->08)",""+zt+" "+mx[8]+ " (07->09)",""+zt+" "+mx[9]+ " (07->10)",""+zt+" "+mx[10]+" (07->11)",""+zt+" "+mx[11]+" (07->12)"],
   [""+zf+" "+mx[7]  ,""+zt+" "+mx[8]+ " (08->09)",""+zt+" "+mx[9]+ " (08->10)",""+zt+" "+mx[10]+" (08->11)",""+zt+" "+mx[11]+" (08->12)"],   
   [""+zf+" "+mx[8]  ,""+zt+" "+mx[9]+ " (09->10)",""+zt+" "+mx[10]+" (09->11)",""+zt+" "+mx[11]+" (09->12)"],      
   [""+zf+" "+mx[9]  ,""+zt+" "+mx[10]+" (10->11)",""+zt+" "+mx[11]+" (10->12)"],         
   [""+zf+" "+mx[10] ,""+zt+" "+mx[11]+" (11->12)"],
   "Freie Eingabe"   
   );
  }// end esle

  var ff=this.getField(destfrom);
  var ft=this.getField(destto);  
  if (cItem=="") {
  	return "";
  }
  

  if (cItem=="Freie Eingabe") {
  	ff.value="";
  	ft.value="";
  	return "";
  } // end if	
  // get short info (xx->yy)
  
  var strX=new String(cItem)  ;
  var p1=strX.lastIndexOf("(");
  var p2=strX.lastIndexOf(")");  
  if (p1==-1 || p2==-1) return ""; // error in text
  
  var fromMonth =strX.substring(p1+1,p1+6);
  var toMonth =strX.substring(p1+8,p1+13);  

  	ft.value="";
  	ff.value="";


  
  ff.value=fromMonth;  //2 digits	
  ft.value=toMonth;  //2 digits	
  return "-";
  
}



















function user_cv()
{
  var val=event.target.value;

if (val=="Off") {
 gf("Text41").value="";
 gf("Text42b").value="";
 gf("Text42c").value="";
 gf("Text42x").value="";
 gf("Datum42d").value="";
 gf("Checkbox42e").value="Off";
 gf("Text44").value="";
} 

else if (event.target.value=="1") {
 gf("Text42b").value="";
 gf("Text42c").value="";
 gf("Text42x").value="";
 gf("Datum42d").value="";
 gf("Checkbox42e").value="Off";
 gf("Text44").value="";
}
else if (event.target.value=="2") {
 gf("Text41").value="";
 gf("Checkbox42e").value="Off";
 gf("Text44").value="";
}
else if (event.target.value=="3") {
 gf("Text41").value="";
 gf("Text42b").value="";
 gf("Text42c").value="";
 gf("Text42x").value="";
 gf("Datum42d").value="";
 gf("Checkbox42e").value="Off";
 gf("Text44").value="";
}
else if (event.target.value=="4") {
 gf("Text41").value="";
 gf("Text42b").value="";
 gf("Text42c").value="";
 gf("Text42x").value="";
 gf("Datum42d").value="";
 gf("Checkbox42e").value="Off";
}


}

function user_cv2()
{
  var val=event.target.value;

if (val=="Off") {
	
} 

else  {
 gf("Text41").value="";
 gf("Checkbox41").value="2";
 gf("Text44").value="";
}


}


function user_tf()
{
  var val=event.value;
  if (val=="") {
     return;
   }
  
if (event.target.name=="Text41") {
 gf("Checkbox41").value="1";
 gf("Text42b").value="";
 gf("Text42c").value="";
 gf("Datum42d").value="";
 gf("Checkbox42e").value="Off";
 gf("Text44").value="";
} 

else if (event.target.name=="Text42b"  ||
	event.target.name=="Text42c"  ||
	event.target.name=="Datum42d")
 {
 gf("Checkbox41").value="2";
 gf("Text41").value="";
 gf("Checkbox42e").value="Off";
 gf("Text44").value="";
}
else if (event.target.name=="Text44") {
	gf("Checkbox41").value="4";
 gf("Text41").value="";
 gf("Text42b").value="";
 gf("Text42c").value="";
 gf("Datum42d").value="";
 gf("Checkbox42e").value="Off";
}


}
javascript_obj0022_023.js pdf-javascript-stream PDF /JS object 22 at offset 0x1032A 607 bytes
SHA-256: 4789477b0456c4380767d8b47c198958760a574c4a16a594499bbdccaa252ba3
Preview script
First 1,000 lines of the extracted script
function std_getVersionInfo_Setting() {
	return 
             "<modul-info>"+
             "  <name>settings</name>"+
             "  <date>26.11.2004</date>"+
             "  <version>3.0.0.0</version>"+
             "</modul-info>";
}


function std_constants(name)
{
	if (name=="includeList") 
		return new Array("a","apprText","Tagesdatum","SteuerlicheVertretung","DropDown");
	if (name=="whiteList") 
		return new Array("Zahl02","Zahl89");
	if (name=="colorBackground") 	
	      // return new Array("RGB",0.86,0.92,0.98);  // --BMF
	       return new Array("RGB",0.86,0.94,0.78);  // --Zoll
	       
}
javascript_obj0023_024.js pdf-javascript-stream PDF /JS object 23 at offset 0x104B8 20743 bytes
SHA-256: e0071920049fad5771a655a1812ed999df564cc98fcdef89fc6b5bd9b9e226a7
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
/*
  <formconfiguration>
    <TV>3.0.0.3</TV>
    <company>forms2web</company>
    <author>DI(FH) H�usler Markus</author>
    <e-mail>Markus.haeusler@sw-management.at</e-mail>
    <author-web>http: www.sw-management.at</author-web>
  </formconfiguration>  
*/


if (app.viewerVersion == "undefined" || app.viewerVersion <7.0) {
  this.calculate=false;
  for (var i = 0; i < this.numFields; i++){
      var cField = this.getNthFieldName(i);
      var curField = this.getField(cField);
      curField.readonly=true;
  }  //end for
  if (this.getField("versioncheckcontrol")!=null) {
  	var msg="Achtung Sie haben die Programmversion "+app.viewerVersion+"!\r"+
  	        " Zum Ausf�llen dieses Formulars ben�tigen Sie mindestens die Version 7.0."+
  	        " Eine aktuelle Version erhalten Sie kostenlos auf 'http://www.adobe.de";
  	this.getField("versioncheckcontrol").display=display.visible;
  	this.getField("versioncheckcontrol").value=msg;
  } // end if
} // end if
else {
//---------------------------------------------------------------------------------
  var system_global_initialized=false;
  this.calculate=false;

  // Enumerate through  and trigger format for all of the fields in the document
  for (var i = 0; i < this.numFields; i++){
      var cField = this.getNthFieldName(i);
      var curField = this.getField(cField);
      if (curField.type == "text"){
          var curFieldValue =curField.value;
          curField.value =curFieldValue;
      } //end if
  }  //end for
  var system_global_initialized=true;
  this.calculate=true;
}  // end else
//---------------------------------------------------------------------------------  

function std_getVersionInfo() {
	return 
             "<modul-info>"+
             "  <name>main</name>"+
             "  <date>08.03.2006</date>"+
             "  <version>3.0.0.3</version>"+
             "</modul-info>";
}

function std_isNull(value) {
	var s=new String(value);
	if (s.length==0) return true;
	else return false;
	
}

function user_isNull(value) {
	return std_isNull(value);
}


//event.value=std_format_date(event.value,"dd.mm.yyyy","TT.MM.JJJJ","","false","01.01.1999","01.01.2000","true","","");
//event.value=std_format_date(event.value,"dd.mm.yyyy","TT.MM.JJJJ","","true","","","true","","");
//event.value=std_format_date(event.value,"dd.mm","TT.MM","20.02","false","","","true","01.01","31.12");
function std_format_date(valueDate,formatString,formatString_DE, exampleDateValue, lessnow,
                         minDateValue,maxDateValue, alertMsg,
                         minDateValueDisplay,maxDateValueDisplay) {
  var minDate;
  var maxDate;  
  var minDateString;
  var maxDateString;  

  	
  if (valueDate=="") return "";
  var date = AFParseDateEx(valueDate, formatString);   
  
  var comperatorValue=1000*60*60*24;
  
  
  if (formatString=="") formatString="dd.mm.yyyy";  
  if (formatString_DE=="") formatString_DE="TT.MM.JJJJ";    
  if (exampleDateValue=="") exampleDateValue="11.03.2007";      
  if (lessnow!="false" && lessnow!="true") lessnow=="disabled";
  if (minDateValue=="") {
  	minDate=AFParseDateEx("01.01.1850", "dd.mm.yyyy");
  	minDateString="01.01.1850";
  }
  else {
  	minDate=AFParseDateEx(minDateValue,"dd.mm.yyyy");	
  	
  	if (!minDate) { 
  		minDate=AFParseDateEx("01.01.1850", "dd.mm.yyyy");
  	    	minDateString="01.01.1850";
  	}    	
        else {
	    minDateString=util.printd("dd.mm.yyyy", minDate);  
        } 	
  }
  if (maxDateValue=="") {
  	maxDate=AFParseDateEx("31.12.2200", "dd.mm.yyyy");
  	maxDateString="31.12.2200";
  }
  else {
  	maxDate=AFParseDateEx(maxDateValue,"dd.mm.yyyy");	
  	if (!maxDate) {
  	   maxDate=AFParseDateEx("31.12.2200", "dd.mm.yyyy");
  	   maxDateString="31.12.2200";
  	}
        else {   
	   maxDateString=util.printd("dd.mm.yyyy", maxDate);  
        }
  }
  if (minDateValueDisplay!="") minDateString=minDateValueDisplay;
  if (maxDateValueDisplay!="") maxDateString=maxDateValueDisplay;  
  if (alertMsg!="false" && alertMsg!="true") alertMsg=="true";  
  
 
  
  var curdate=new Date();  

  if (!date) {
    if (alertMsg=="true") app.alert("Bitte geben Sie das Datum im Format "+formatString_DE+ " ein. (Beispiel:"+exampleDateValue+")");
    return "";
  }// end if
  

  if ( lessnow=="true") {
  	if (std_is_date1_greater_date2(date,curdate,comperatorValue)) {
  		if (alertMsg=="true") app.alert("Das Datum darf nicht nach dem akutellen Datum liegen!");
  		return "";
  	}	
  }  // end if
  	
  // mindate check
  	if (std_is_date1_greater_date2(minDate,date,comperatorValue)) {
  		if (alertMsg=="true") app.alert("Das Datum muss nach "+minDateString+ " liegen.");
  		return "";
  	}
  // maxdate check  	
  	if (std_is_date1_greater_date2(date,maxDate,comperatorValue)) {
  		if (alertMsg=="true") app.alert("Das Datum muss vor "+maxDateString+ " liegen.");
  		return "";
  	}
  return util.printd(formatString, date); 	
}


//--------------------------------------------------------------------

// not used anymore
function std_is_date1_greater_date2(date1,date2,comperatorValue) {
	var vd1=date1.valueOf()/comperatorValue
	var vd2=date2.valueOf()/comperatorValue;	
	if (vd1>vd2)
	  return true;
	 else  
	  return false;;
}
function std_is_date1_less_date2(date1,date2,comperatorValue) {
	var vd1=date1.valueOf()/comperatorValue;
	var vd2=date2.valueOf()/comperatorValue;	
	if (vd1<vd2)
	  return true;
	 else  
	  return false;;
}

function std_is_date1_greater_equal_date2(date1,date2,comperatorValue) {
	var vd1=date1.valueOf()/comperatorValue;
	var vd2=date2.valueOf()/comperatorValue;	
	if (vd1>=vd2)
	  return true;
	 else  
	  return false;;	 	
}


function std_maxMinValue( val ,maxValue,minValue)
{
 if (val=="") return "";
  
  tval=std_toFloat(val);
  if (maxValue!="" && tval>maxValue) {
    return maxValue;
  } // end if  
  if ( minValue !="" && tval< minValue ) {
    return minValue;
  } // end if 
  return tval;
} // end if

function srd_maxMinEvent(maxValue,minValue)
{
	std_maxMinEvent(maxValue,minValue);
}

function std_maxMinEvent(maxValue,minValue)
{
  if (event.value=="") return;

  var tval=std_toFloat(event.value);

  if (maxValue!="" && tval>maxValue) {
    event.value=maxValue;
    return;
  } // end if  
  if ( minValue !="" && tval< minValue ) {
    event.value=minValue;
    return;
  } // end if  
}
function std_toFloat(value1)
{

	var anyString=value1;
	var lenthL1=anyString.length; 
	
	// check if the number is a String because of the "," format character
	if (lenthL1=="undefined") {
		  return anyString; // the number hat no digits behind the ",";
	}

	// Find pos of ","
	   var found=0; 		// interupt condition
		var pos=lenthL1; // position of ",";
		var i=lenthL1;	  // counter
	   while (found==0 && i>=1) {
			var semicolon=anyString.substring(i-1,i);
			if (semicolon==",") {
				  found=1; 		// cancel search
				  pos=i;			// store position
			}// end if
			else {
				i--;
			} // end else
		} // endwhile
	// check, if there was an "," in the String
	if (found==0) {
     return anyString; // the operation was not successfull
   } // end if

	// Calculate Substrings and Positions
		var leftSubString=anyString.substring(0,pos-1);
		var rightSubString=anyString.substring(pos,lenthL1);
	
	// Genearate normed String with "." instead of ",";
		var result=leftSubString+"."+rightSubString;
	
	// Check if the the resulting String is a float
		var resultFloat=parseFloat(result);
		return resultFloat;
} 


// check the second part of the ensurence number
//..............................................
function std_enCheck() {
  if (event.value=="") return true;
  if (event.value.length<6) {
    app.alert("Der zweite Teil der Versicherungsnummer muss aus 6 Zeichen bestehen");
    event.rc=false;
    return false;
  }  // end if
  var anystr=""+event.value;
  var year=anystr.substring(4,6);
  var month=anystr.substring(2,4);  
  var day=anystr.substring(0,2);  
  if (day>31) {
    var msg="Der Tag darf nicht gr��er als 31 sein";
    app.alert(msg);
    event.rc=false;
    return false;
  } // end if
// f�r t�rken
  if (month>15) {
    var msg="Falsche Monatsangabe!";
    app.alert(msg);
    event.rc=false;
    return false;
  } // end if
  return true;
}



function std_getLastPart(current_fieldname,nrOfPositions)
{
	lenthL1=current_fieldname.length; 		// example: 9
	l1=current_fieldname.substring(lenthL1-nrOfPositions,lenthL1);
	return l1;
}

function std_AutoTab(doc, event, cNext)
{
	// Call the built-in routine to allow numbers only.
	AFNumber_Keystroke(0, 0, 0, 0, "", true);
	// If we've filled in the field completely, jump to the next one.
	if (event.rc && AFMergeChange(event).length == event.target.charLimit )
		doc.getField(cNext).setFocus();

}

function std_roundValueDig(val,dig)
{
  if (val!="") {
	  return Math.round(std_toFloat(val)*dig)/dig;
 } // end if
 return val;
}
/**
  * Nr determines the numer of to round digits
  * 100..tho digits
  * 1000 .. three digits
  * 10 .. one digit after comma
  */
function std_roundEventDig(nr)
{
 if (event.value!="") {
	 var val=std_toFloat(event.value);
	 event.value=Math.round(std_toFloat(val)*nr)/nr;
 } // end if
}

function std_setEventPositive()
{
  if (event.value=="") return;
  x=std_toFloat(event.value);		 
  if (x<0) {			 
	  event.value=0-x;	
 } // end if				 
}

function std_setEventNegative()
{
	if (event.value=="") return;

	var val=event.value;
	var x=std_toFloat(val);
	if (x>0) {
	  event.value=0-x;
	} // end if
}

function std_calcsumDig(arr,dig)
{
	if (arr.length==0) {
	  return "";
   }
	var result=0;
	var prefix="Zahl";
	var empty=true // set zhis flag to false, if one field is filled out
	for (var i=0;i<arr.length;i++) {
          var valStr=gf(prefix+arr[i]).value
          if (!std_isNull(valStr)) empty=false;
       	  result=result-(-valStr);
	} // end for
	if (empty) {
	   return "";
	}
	else {
		var xx=Math.round(std_toFloat(result)*dig)/dig;
	   return xx;
	} // end else
}

function std_minus(f1name,f2name,dig) {
	 var f1=gv(f1name);
	 var f2=gv(f2name);	 
	 if (std_isNull(f1) && std_isNull(f2)) return "";
	 
	 return std_roundValueDig(f1-f2,dig);
}

function gf(fname) {
	return this.getField(fname);
}
function gv(fname) {
	return std_toFloat(gf(fname).value);
}

function std_isArrayNull(arr)
{
	if (arr.length==0) {
	  return true;
        }
	for (var i=0;i<arr.length;i++) {
		if (!std_isNull(gf(arr[i]).value)) return false;
	}
	return true;
}

function std_absoluteValue(val)
{
 if (val<0) {
    var res=0-std_toFloat(val);
    return res;
  } // end if
  return val;
}

function std_calcPercentDig(source, percent,dig)
{
  var field1=gf(source);
   if (field1.value=="") {
     return "";
   } // end if
   else {
	   var result=percent*std_toFloat(field1.value);
	   return Math.round(std_toFloat(result)*dig)/dig;
   } // end else;
}

function std_hideBackground()
{
  var x=new String();
  var includeArr=std_constants("includeList"); 
  var whiteArr=std_constants("whiteList"); 
  for (var i = 0; i < this.numFields; i++) {
  	
     var f=gf(this.getNthFieldName(i));
      x=new String(this.getNthFieldName(i));
      if (x.substring(0,4)=="Zahl") f.fillColor=color.white;
      if (x.substring(0,8)=="Dropdown") f.fillColor=color.white;
      if (x.substring(0,4)=="Text") f.fillColor=color.white;
      if (x.substring(0,8)=="Checkbox") f.fillColor=color.white;
      if (x.substring(0,5)=="Datum") f.fillColor=color.white;
      
      for (var incl=0; incl<includeArr.length; incl++) {
        if (x.substring(0,includeArr[incl].length)==includeArr[incl]) {
        f.fillColor=color.white;
      }
        
      } // end for
      for (var wh=0; wh<whiteArr.length; wh++) {
	if (x.substring(0,whiteArr[wh].length)==whiteArr[wh]) f.fillColor=color.white;
      } // end for
  } // end for
}

function std_showBackground()
{
  var x=new String();
  var cArray=std_constants("colorBackground");  
  var includeArr=std_constants("includeList");
  for (var i = 0; i < this.numFields; i++) {
    var f=gf(this.getNthFieldName(i));
    x=new String(this.getNthFieldName(i));
    if (x.substring(0,4)=="Zahl") f.fillColor=cArray;
    if (x.substring(0,8)=="Dropdown") f.fillColor=cArray;
    if (x.substring(0,4)=="Text") f.fillColor=cArray;
    if (x.substring(0,8)=="Checkbox") f.fillColor=cArray;
    if (x.substring(0,5)=="Datum") f.fillColor=cArray;
    for (var incl=0; incl<includeArr.length; incl++) {
	if (x.substring(0,includeArr[incl].length)==includeArr[incl]) 
		
	  f.fillColor=cArray;
    } // end for
  } // end for
}

function jump_toSuccessorField(event) {
  var fname=event.target.name; // e.g. Zahl128_1a
  var lengthLX=fname.length;
  var prefix=fname.substring(0,lengthLX-3);
  var postfix=fname.substring(lengthLX-1,lengthLX);
  var newName=prefix+"_2"+postfix; // e.g. Zahl128_1b
  std_AutoTab(this, event, newName);
}  

// drop down part
//---------------------------------------------------------------------------------------------------------------

  function std_getCurrentExportValueForDropdown(fieldname) {
    var x=gf(fieldname);
    if (app.viewerVersion >=5 && app.viewerVersion <6) {
      return x.value;
    } // end else
    else if (app.viewerVersion >=6) {
      return x.value;
    } // end else  	
    return "";
  }

  function std_getCurrentElementValueForDropdown(fieldname) {
    var x=gf(fieldname);
    if (app.viewerVersion >=5 && app.viewerVersion <6) {
      return std_getElementValueForExportValue(fieldname,x.value);
    } // end else
    else if (app.viewerVersion >=6) {
      return std_getElementValueForExportValue(fieldname,x.value);
    } // end if  
    return "";

  }
  
   function std_getCurrentIndexValueForDropdown(fieldname) {
    var x=gf(fieldname);
    if (app.viewerVersion >=5 && app.viewerVersion <6) {
      return std_getIndexOfSelectedExportValue(fieldname,x.value);      
    } // end else
    else if (app.viewerVersion >=6) {
      return std_getIndexOfSelectedExportValue(fieldname,x.value);      
    } // end else  	
    return "";
  }

  function std_getExportValueForDropdownEvent() {
    var selectedItemExportValue=""; 
    var selectedItemElementValue="";   
    var selectedItemElementIndex="";  
     	
    if (app.viewerVersion >=5 && app.viewerVersion <6) {
      selectedItemExportValue=event.target.value;
      return selectedItemExportValue;
    } // end else
    else if (app.viewerVersion >=6) {
      selectedItemElementValue=event.value; // contains the selected element value
      selectedItemExportValue=std_getExportValueForElementValue(event.target.name,selectedItemElementValue);
      return selectedItemExportValue;
    } // end else  	
    return "";
  }
  
  function std_getElementValueForDropdownEvent() {
    var selectedItemExportValue=""; 
    var selectedItemElementValue="";   
    var selectedItemElementIndex="";    
    if (app.viewerVersion >=5 && app.viewerVersion <6) {
      selectedItemExportValue=event.target.value;
      selectedItemElementValue=std_getElementValueForExportValue(event.target.name,selectedItemExportValue);
      return selectedItemElementValue;
    } // end else
    else if (app.viewerVersion >=6) {
      selectedItemElementValue=event.value; // contains the selected element value
      return selectedItemElementValue;
    } // end else  	
    return "";
  }
  

  
  function std_getSelectedIndexForDropdownEvent() {
    var selectedItemExportValue=""; 
    var selectedItemElementValue="";   
    var selectedItemElementIndex="";  
      	
    if (app.viewerVersion >=5 && app.viewerVersion <6) {
      selectedItemExportValue=event.target.value;
      selectedItemElementIndex= std_getIndexOfSelectedExportValue(event.target.name,selectedItemExportValue);
      
      return selectedItemElementIndex;
    } // end else
    else if (app.viewerVersion >=6) {
      //selectedItemExportValue=vent.target.value; contains the last value of THE EXPORT VALUE
      selectedItemElementValue=event.value; // contains the selected element value
      selectedItemElementIndex=std_getIndexOfSelectedElementValue(event.target.name,selectedItemElementValue);	
      return selectedItemElementIndex;
    } // end else  	
    return "";
  }




  function std_getExportValueForElementValue(fieldname,selectedElementValue) {
  	var x=gf(fieldname);
       for (var i=0; i < x.numItems;  i++) {
          var elementVal=x.getItemAt(i,false);
          var exportVal=x.getItemAt(i,true);
          if (selectedElementValue==elementVal) {
          	return exportVal;
          }
        } // end for   
        return "";
  }
  function std_getElementValueForExportValue(fieldname,selectedExportValue) {
       var x=gf(fieldname);  	
       for (var i=0; i < x.numItems;  i++) {
          var elementVal=x.getItemAt(i,false);
          var exportVal=x.getItemAt(i,true);
          if (selectedExportValue==exportVal) {
          	return elementVal;
          }
        } // end for   
        return "";
  }
  
  function std_getIndexOfSelectedElementValue(fieldname,selectedElementValue) {
       var x=gf(fieldname);  	  	
       for (var i=0; i < x.numItems;  i++) {
          var elementVal=x.getItemAt(i,false);
          var exportVal=x.getItemAt(i,true);
          if (selectedElementValue==elementVal) {
          	return i;
          }
        } // end for   
        return -1;
  }  
  function std_getIndexOfSelectedExportValue(fieldname,selectedExportValue) {
       var x=gf(fieldname);  	  	
       for (var i=0; i < x.numItems;  i++) {
          var elementVal=x.getItemAt(i,false);
          var exportVal=x.getItemAt(i,true);
          if (selectedExportValue==exportVal) {
          	return i;
          }
        } // end for   
        return -1;
  }    
  
// Assistent 
//------------------------------

function assistent_list_commit(targetField){
  var fieldname=std_getLastPart(event.target.name,5);

   gf(event.target.name).display=display.hidden;// hide itself
   gf("Assistent_close_"+fieldname).display=display.hidden;
   gf("Assistent_info_"+fieldname).display=display.hidden;   
   gf("Assistent_infotext_"+fieldname).display=display.hidden;  
   gf("Assistent_show_"+fieldname).display=display.noPrint; 
   gf("Assistent_list_"+fieldname).display=display.hidden;   
}

function assistent_list_Close(){
  var fieldname=std_getLastPart(event.target.name,5);
   gf(event.target.name).display=display.hidden;// hide itself
   gf("Assistent_commit_"+fieldname).display=display.hidden;
   gf("Assistent_info_"+fieldname).display=display.hidden;   
   gf("Assistent_infotext_"+fieldname).display=display.hidden;  
   gf("Assistent_show_"+fieldname).display=display.noPrint; 
   gf("Assistent_list_"+fieldname).display=display.hidden;     	
}

function assistent_list_show(){
  var fieldname=std_getLastPart(event.target.name,5);
   gf(event.target.name).display=display.hidden;// hide itself
   gf("Assistent_commit_"+fieldname).display=display.noPrint;
   gf("Assistent_info_"+fieldname).display=display.noPrint;   
   gf("Assistent_infotext_"+fieldname).display=display.hidden;  
   gf("Assistent_close_"+fieldname).display=display.noPrint; 
   gf("Assistent_list_"+fieldname).display=display.noPrint;     
}

function assistent_list_init(elements){
  var fieldname=std_getLastPart(event.target.name,5);	
  var f=gf("Assistent_list_"+fieldname);
  f.setItems(elements);
}

function assistent_list_setVal(targetField,comma){
  var fieldname=std_getLastPart(event.target.name,5);
 var dest;
 if (targetField=="")
     dest=gf("Text_Assistent_"+fieldname);
 else
    dest=gf(targetField); 	    

  dest.value="";
  var f=gf("Assistent_list_"+fieldname);
  var a = f.currentValueIndices;

if (typeof a == "number") {
        dest.value=f.getItemAt(a, true);
}
else {
  for (var i = 0; i < a.length; i ++) {
       if (i==0)
          dest.value=comma+f.getItemAt(a[i], true);   
       else 
          dest.value=dest.value+"\n"+comma+f.getItemAt(a[i], true);        	
  }// end for
}// end else (mulitiple selection
}


function bmf_personalize()
{
 return eval(   this.getField("BMFPers").value );
}
font_00_cff_off00000447.bin pdf-font-stream PDF embedded font (cff) at offset 0x447 29688 bytes
SHA-256: 9990409bbf59a9858ef34345b777969ea1ac81b4c02bde365b530f919a959ba0
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.41, consistent with packed or encrypted content.
font_01_sfnt_off00005a65.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5A65 50539 bytes
SHA-256: 2bd80005d2ca3f4dc3badbc274453dc14fd52047e5860cab0816f8de1df305a6
font_02_sfnt_off0000ab58.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xAB58 22528 bytes
SHA-256: a56800752ddd6b8074fe53133eed72289305711fcbbfcc93994c488b64f460fd

Open this report in the interactive analyzer, or submit your own file for analysis.