PDF static analysis report

Static analysis result for SHA-256 93191fa1436b5498…

SUSPICIOUS

PDF

685.2 KB Created: 2008-10-25 12:19:42 +02:00 Authoring application: PScript5.dll Version 5.2.2 (via Acrobat Distiller 8.1.0 (Windows)) First seen: 2015-10-04
MD5: caaf8a513ad68c0d8c95fb9a8e629db0 SHA-1: c43c92e0a95134cd9b61f5086053ff4414006542 SHA-256: 93191fa1436b5498358a9a9f915d57d5899b97563614558ef920f2c1720eb802
26 Risk Score

🔏 Digital signature Signed

A signature covers the whole signed byte range — PDF JavaScript is never signed on its own — and does not by itself mean the document is safe.

Machine Learning

  • Nyx PDF Classifier suspicious score 0.3298

Heuristics 4

  • JavaScript action low 1 related finding PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • AcroForm button with action trigger low PDF_ACROFORM_BUTTON
    PDF contains a /Btn form field together with a SubmitForm/URI/Launch/JS trigger — this is the building block of fake 'Download' or 'Open' button overlays used in PDF phishing lures
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.monotype.comMonotype In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://cgi.adobe.com/special/acrobat/updateReferenced by PDF JavaScript
    • http://www.monotype.com/html/mtname/ms_arial.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlhttp://www.monotype.com/html/type/license.htmlIn PDF document text
    • https://www.verisign.com/rpaIn PDF document text
    • http://ocsp.verisign.com/ocsp/status0In PDF document text
    • https://www.verisign.com/rpa0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/CodeSignPCA.crl0In PDF document text
    • http://www.microsoft.com/typographyIn PDF document text
    • https://www.verisign.com/repository/CPS��In PDF document text
    • https://www.verisign.comIn PDF document text
    • https://www.verisign.com/repository/verisignlogo.gif06In PDF document text
    • http://status.verisign.com/class1.crl0In PDF document text
    • http://www.iec.chIn PDF document text
    • https://www.verisign.com/repository/verisignlogo.gif0��In PDF document text
    • https://www.verisign.com/CPS0bIn PDF document text
    • http://www.microsoft.com/truetype/0In PDF document text

Extracted artifacts 32

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0016_000.js pdf-javascript-stream PDF /JS object 16 at offset 0x226B 151 bytes
SHA-256: af8a6856f7eb34fb45cdb0160ba1fe0d1f2f2e8cf880f214dc3aba1264c02bfe
Preview script
First 1,000 lines of the extracted script
if ((app.viewerVersion < 5) && (app.viewerVersion > 0) && (this.getField("Kod kreskowy6") != null))
    this.getField("Kod kreskowy6").value = "";
javascript_obj0020_001.js pdf-javascript-stream PDF /JS object 20 at offset 0x23BF 106 bytes
SHA-256: 25857e5542d7d396a9a4f47aadd331e8f4cdd091ee8dd5c88fea80a66fd99711
Preview script
First 1,000 lines of the extracted script
function ascii_wart(zn) 
{
var kod='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ';
return kod.indexOf(zn);
}
javascript_obj0026_002.js pdf-javascript-stream PDF /JS object 26 at offset 0x253A 244 bytes
SHA-256: 60d5dee0443a32b8ceaed5b5772cf4e0b9dff0ad51e20963cc03a8f0021c3154
Preview script
First 1,000 lines of the extracted script
function zrob_numer(num)
{
var buf=new String();
var zn='';
var bb=new String(num);

for(i=0;i<bb.length;i++) 
    {
    zn=bb.charAt(i);

    if(zn>='0' && zn<='9') 
        {
        buf=buf+zn;
        }
    }
return buf;
}
javascript_obj0145_003.js pdf-javascript-stream PDF /JS object 145 at offset 0xA7493 39 bytes
SHA-256: 7174c1d763b252e5c1b475539895b69decd1e786f946b65b267fa8af32024fb0
Preview script
First 1,000 lines of the extracted script
AFNumber_Format(2, 3, 0, 0, "", false);
javascript_obj0146_004.js pdf-javascript-stream PDF /JS object 146 at offset 0xA74E4 42 bytes
SHA-256: f9357b6043c88cb769cb44ae89f67bf03f1d08f6abaad0e31779f8952137de4b
Preview script
First 1,000 lines of the extracted script
AFNumber_Keystroke(2, 3, 0, 0, "", false);
javascript_obj0147_005.js pdf-javascript-stream PDF /JS object 147 at offset 0xA7538 79 bytes
SHA-256: 8a76d63556cc390e05f48fc039b0e2edddec7efa8d24db77319c8d91cebc0891
Preview script
First 1,000 lines of the extracted script
sprawdzNrRach( new String(this.getField("NBR_odbiorca").valueAsString) );
javascript_obj0148_006.js pdf-javascript-stream PDF /JS object 148 at offset 0xA75BB 64 bytes
SHA-256: 7ed7d69f459041f5a4e79b38c5b1af15e100f9565f851e206ca091e9b709a4ba
Preview script
First 1,000 lines of the extracted script
if (event.change.match(/\D+/g)){app.beep(0);event.rc = false;}
javascript_obj0149_007.js pdf-javascript-stream PDF /JS object 149 at offset 0xA762C 84 bytes
SHA-256: ed234c62d255307bbfd42b61f884ed42751ec46149f7db3d1fb567e70e685f6b
Preview script
First 1,000 lines of the extracted script
sprawdzNrRach( new String(this.getField("NBR_zleceniodawca").valueAsString) );
javascript_obj0027_008.js pdf-javascript-stream PDF /JS object 27 at offset 0x2683 355 bytes
SHA-256: 5aa5850bdeccee40e0a09c69fd7b3488b71e5a26f18843223d51cc6172c4d403
Preview script
First 1,000 lines of the extracted script
function sprawdz_regon(regon)
{
var waga=new Array(8,9,2,3,4,5,6,7);
var c=0;
var suma=0;
var wart=String();
wart=zrob_numer(regon);

if(wart.length<9)
    return false;

for (i=0;i<wart.length-1; i++) 
    {
    c=parseInt(wart[i]);
    suma=suma+(waga[i]*c);
    }

suma=suma%11;
suma=suma%10;

return (parseInt(wart[8])==suma);
}
javascript_obj0028_009.js pdf-javascript-stream PDF /JS object 28 at offset 0x27B3 363 bytes
SHA-256: 015a4bdc41442ebbac629b65f8e7449870c235d769ceb9d2f8328656d9692c28
Preview script
First 1,000 lines of the extracted script
function sprawdz_pesel(num)
{
var waga=new Array(1,3,7,9,1,3,7,9,1,3);
var c=0;
var suma=0;
var wart=String();
wart=zrob_numer(num);

if(wart.length<11)
    return false;

for (i=0;i<wart.length-1; i++) 
    {
    c=parseInt(wart[i]);
    suma=suma+(waga[i]*c);
    }

suma=suma%10;
suma=(10-suma)%10; 

return (parseInt(wart[10])==suma);
}
javascript_obj0029_010.js pdf-javascript-stream PDF /JS object 29 at offset 0x28E5 352 bytes
SHA-256: 1803eaccc95bf1b2dcc60d878a335a28e671db7f7bf12d09754437248cde99f2
Preview script
First 1,000 lines of the extracted script
function sprawdz_nip(nip)
{
var waga=new Array(6,5,7,2,3,4,5,6,7);
var c=0;
var suma=0;
var wart=String();
wart=zrob_numer(nip);

if(wart.length<10)
    return false;

for (i=0;i<wart.length-1; i++) 
    {
    c=parseInt(wart[i]);
    suma=suma+(waga[i]*c);
    }

suma=suma%11;
suma=suma%10;

return (parseInt(wart[9])==suma);
}
javascript_obj0030_011.js pdf-javascript-stream PDF /JS object 30 at offset 0x2A12 1508 bytes
SHA-256: 21a918a6d7a02a4bc8f4dd8e4da85a4443e1f99f866ae4c68206992868aa41a0
Preview script
First 1,000 lines of the extracted script
�� 
 f u n c t i o n   s p r a w d z N r R a c h (   a c c _ n o   ) 
 
 { 
 
 
 
 i f   ( a c c _ n o . l e n g t h   ! =   2 6 ) 
 
 { 
 
       a p p . a l e r t ( " N u m e r   k o n t a   B a n k o w e g o   m u s i   p o s i a d a     2 6   c y f r ! " ) ; 
 
       r e t u r n   0 ; 
 
 } 
 
 
 
 / /   D o d a j e   k o d   P o l s k i   i   p r z e s u w a m   p i e r w s z e   4   z n a k i   n a   k o n i e c 
 
 v a r   s   =   n e w   S t r i n g (   a c c _ n o . s u b s t r i n g ( 2 )   +   " 2 5 2 1 "   +   a c c _ n o . s u b s t r i n g ( 0 ,   2 )   ) ; 
 
 
 
 
 
 v a r   r e s z t a   =   n e w   S t r i n g ( " " ) ; 
 
 d i v   =   9 7 ; 
 
 
 
 / /   K o n t r o l a   c z y   w s z y s t k i e   z n a k i   t o   c y f r y 
 
 f o r   (   i   =   0 ;   i <   s . l e n g t h ;   i + +   ) 
 
 { 
 
         r e s z t a   =   r e s z t a   +   s . c h a r A t ( i ) ; 
 
 
 
         t e m p   =   p a r s e I n t (   r e s z t a   ) ; 
 
         i f   ( r e s z t a > = d i v ) 
 
         { 
 
                 m o d   =   r e s z t a % d i v ; 
 
                 i f (   m o d ! = 0   ) 
 
                         r e s z t a   =   n e w   S t r i n g (   m o d   ) ; 
 
         } 
 
 } 
 
 
 
 i f (   r e s z t a ! = 1   ) 
 
 { 
 
         a p p . a l e r t ( " N u m e r   k o n t a   B a n k o w e g o   j e s t   N i e p r a w i d B o w y .   W p i s z   p o p r a w n i e   n u m e r ! " ) ; 
 
         r e t u r n   0 ; 
 
 } 
 
 
 
 r e t u r n   1 ; 
 
 }
javascript_obj0031_012.js pdf-javascript-stream PDF /JS object 31 at offset 0x2C75 1620 bytes
SHA-256: 456058cc3d09d47cafd83e027d80265ba0c9db6ecfbc5afdfaa3de1139408313
Preview script
First 1,000 lines of the extracted script
�� 
 f u n c t i o n   s p r a w d z ( ) 
 
 { 
 
                   i f     ( t h i s . g e t F i e l d ( " 1 - N a z w a " ) . v a l u e A s S t r i n g . l e n g t h = = 0 )   { 
 
                   a p p . a l e r t ( ' W p i s z   n a z w     i   a d r e s   d B u | n i k a ! ' ) ; 
 
                   r e t u r n   0 ; 
 
                   }                 
 
                   i f     ( t h i s . g e t F i e l d ( " 4 - N u m e r   P o l i s y " ) . v a l u e A s S t r i n g . l e n g t h = = 0 )   { 
 
                   a p p . a l e r t ( ' W p i s z   n u m e r   p o l i s y ! ' ) ; 
 
                   r e t u r n   0 ; 
 
                   } 
 
                   i f     ( t h i s . g e t F i e l d ( " 2 - N u m e r   R a c h u n k u   B a n k o w e g o " ) . v a l u e A s S t r i n g . l e n g t h = = 0 )   { 
 
                   a p p . a l e r t ( ' W p i s z   n r   r a c h u n k u ! ' ) ; 
 
                   r e t u r n   0 ; 
 
                   } 
 
                   e l s e 
 
                   { 
 
                           r e t u r n   s p r a w d z N r R a c h (   n e w   S t r i n g (   t h i s . g e t F i e l d ( " 2 - N u m e r   R a c h u n k u   B a n k o w e g o " ) . v a l u e A s S t r i n g   )   ) ; 
 
                   } 
 
                   i f     ( t h i s . g e t F i e l d ( " 4 - N a z w a   B a n k u " ) . v a l u e A s S t r i n g . l e n g t h = = 0 )   { 
 
                   a p p . a l e r t ( ' W p i s z   n a z w     b a n k u ! ' ) ; 
 
                   r e t u r n   0 ; 
 
                   } 
 
 
 
 r e t u r n   1 ; 
 
 }
javascript_obj0032_013.js pdf-javascript-stream PDF /JS object 32 at offset 0x2E0B 1145 bytes
SHA-256: 2cab96f7dd2b1cef2768477742e45f74c42a0bdbfae123e0e0ca89be29bb6a89
Preview script
First 1,000 lines of the extracted script
if (app.viewerType == "Reader")
{
    if (app.viewerVersion < ADBE.Reader_Need_Version && !ADBE.Reader_Value_Asked)
    {
        if (app.alert(ADBE.Reader_string_Need_New_Version_Msg, 1, 1) == 1) this.getURL(ADBE.Reader_Value_New_Version_URL + ADBE.SYSINFO, false);
            ADBE.Reader_Value_Asked = true;
    }
}
else
{
    if (app.viewerVersion < ADBE.Viewer_Need_Version && !ADBE.Viewer_Value_Asked)
    {
        if (app.viewerVersion > 7)
        {
            if (app.alert(ADBE.Viewer_string_PMD, 1, 1) == 1)
                app.findComponent({cType:"Plugin", cName:"XFA", cDesc: ADBE.Viewer_string_Update_Desc});
        }
        else if (app.viewerVersion > 6 && ADBE.Viewer_Need_Version < 7)
        {
            if (app.alert(ADBE.Viewer_string_PMD, 1, 1) == 1)
                app.findComponent({cType:"UDPatch", cName:"602Patch", cDesc: ADBE.Viewer_string_Update_Desc});
        }
        else
            app.response({cQuestion:ADBE.Viewer_string_PMD_Old, cDefault:ADBE.Viewer_Value_New_Version_URL + ADBE.SYSINFO, cTitle:ADBE.Viewer_string_Title});
    ADBE.Viewer_Value_Asked = true;
    }
}
javascript_obj0033_014.js pdf-javascript-stream PDF /JS object 33 at offset 0x2FC9 1108 bytes
SHA-256: 1321a3b403d718021e4dd70507651b37ae6aa8319095f4058b40c247b98c16d2
Preview script
First 1,000 lines of the extracted script
ADBE.PMD_Need_Version = 6.02;
if (app.platform == "UNIX" && ADBE.PMD_Need_Version < 8) ADBE.PMD_Need_Version = 8;
if (typeof(ADBE.Reader_Value_Asked) == "undefined") ADBE.Reader_Value_Asked = false;
if (typeof(ADBE.Viewer_Value_Asked) == "undefined") ADBE.Viewer_Value_Asked = false;

if (typeof(ADBE.Reader_Need_Version) == "undefined" || ADBE.Reader_Need_Version < ADBE.PMD_Need_Version)
{
    ADBE.Reader_Need_Version = ADBE.PMD_Need_Version;
    ADBE.Reader_Value_New_Version_URL = "http://cgi.adobe.com/special/acrobat/update";
    ADBE.SYSINFO = "?p=" + app.platform + "&v=" + app.viewerVersion + "&l=" + app.language + "&c=" + app.viewerType + "&r=" + ADBE.Reader_Need_Version;
}
if (typeof(ADBE.Viewer_Need_Version) == "undefined" || ADBE.Viewer_Need_Version < ADBE.PMD_Need_Version)
{
    ADBE.Viewer_Need_Version = ADBE.PMD_Need_Version;
    ADBE.Viewer_Value_New_Version_URL = "http://cgi.adobe.com/special/acrobat/update";
    ADBE.SYSINFO = "?p=" + app.platform + "&v=" + app.viewerVersion + "&l=" + app.language + "&c=" + app.viewerType + "&r=" + ADBE.Viewer_Need_Version;
}
javascript_obj0034_015.js pdf-javascript-stream PDF /JS object 34 at offset 0x3151 968 bytes
SHA-256: e250792787f17b610f47e4f730ac88c959908c6dd6889917a16e7fb718a0cf5d
Preview script
First 1,000 lines of the extracted script
if (typeof(this.ADBE) == "undefined") this.ADBE = new Object();
ADBE.LANGUAGE = "ENU";
ADBE.Viewer_string_Title = "Adobe Acrobat";

ADBE.Reader_string_Need_New_Version_Msg = "This PDF form requires a newer version of Adobe Reader. Without a newer version, the form may display, but may not work properly. Some form elements might not be visible at all. If an internet connection is available, clicking OK will open your browser to a web page where you can obtain the latest version.";
ADBE.Viewer_string_PMD_Old = "A newer version of Adobe software is required. For more information, copy and paste the URL below into a browser.";
ADBE.Viewer_string_PMD = "This document requires a newer version of Adobe Acrobat. Without a newer version, it might not work properly. Some elements might not be visible at all. Click OK to get more information to obtain the latest version of Adobe Reader.";
ADBE.Viewer_string_Update_Desc = "Adobe Interactive Forms Update";
javascript_obj0153_016.js pdf-javascript-stream PDF /JS object 153 at offset 0xA780C 11010 bytes
SHA-256: e19676b5dfda315304b3aa04f152acbf566bcd1ff2df92eaf01cb6a2560a74bb
Preview script
First 1,000 lines of the extracted script
�� 
 f u n c t i o n   R i g h t ( s t r ,   n ) { 
 
         i f   ( n   < =   0 ) 
 
               r e t u r n   " " ; 
 
         e l s e   i f   ( n   >   S t r i n g ( s t r ) . l e n g t h ) 
 
               r e t u r n   s t r ; 
 
         e l s e   { 
 
               v a r   i L e n   =   S t r i n g ( s t r ) . l e n g t h ; 
 
               r e t u r n   S t r i n g ( s t r ) . s u b s t r i n g ( i L e n ,   i L e n   -   n ) ; 
 
         } 
 
 } 
 
 
 
 f u n c t i o n   R e p l a c e _ s t r ( s t r ) 
 
 { 
 
 v a r   s = " " ; 
 
 v a r   s t r R e t = " " ;     
 
 f o r   ( v a r   i = 0 ;   i   <   S t r i n g ( s t r ) . l e n g t h ;   i + + ) 
 
     { 
 
         s = S t r i n g ( s t r ) . s u b s t r i n g ( i , i + 1 ) ; 
 
         i f   ( ( s = = " @ " )   | |   ( s = = " ! " )   | |   ( s = = " & " )   | |   ( s = = " $ " )   | |   ( s = = " ( " )   | |   ( s = = " ) " )   | |   ( s = = " % " )   | |   ( s = = " * " )   | |   ( s = = " � " ) 
 
                 | |   ( s = = " � " )   | |   ( s = = " ~ " )   | |   ( s = = " # " )   | |   ( s = = " % " )   | |   ( s = = " ^ " )   | |   ( s = = " / " ) ) 
 
         { 
 
                 s t r R e t + = " ? " ;     
 
         } 
 
         e l s e 
 
             { 
 
                   i f   ( ( s = = "   " )   | |   ( s = = " [ " )   | |   ( s = = "   " )   | |   ( s = = "   " )   | |   ( s = = " B " )   | |   ( s = = " � " )   | |   ( s = = " D " )   | |   ( s = = " z " )   | |   ( s = = " | " )   | |   ( s = = "   " )   | |   ( s = = " Z " )   | |   ( s = = "   " )   | |   ( s = = "   " )   | |   ( s = = " A " )   | |   ( s = = " � " )   | | 
 
 ( s = = " C " )   | |   ( s = = " y " )   | |   ( s = = " { " ) ) 
 
                   { 
 
                         i f   ( s = = "   " )   { s t r R e t + = " a " ; } 
 
                         i f   ( s = = " [ " )   { s t r R e t + = " s " ; } 
 
                         i f   ( s = = "   " )   { s t r R e t + = " c " ; } 
 
                         i f   ( s = = "   " )   { s t r R e t + = " e " ; } 
 
                         i f   ( s = = " B " )   { s t r R e t + = " l " ; } 
 
                         i f   ( s = = " � " )   { s t r R e t + = " o " ; } 
 
                         i f   ( s = = " D " )   { s t r R e t + = " n " ; } 
 
                         i f   ( ( s = = " z " )   | |   ( s = = " | " ) )   { s t r R e t + = " z " ; } 
 
                         i f   ( s = = "   " )   { s t r R e t + = " A " ; } 
 
                         i f   ( s = = " Z " )   { s t r R e t + = " S " ; } 
 
                         i f   ( s = = "   " )   { s t r R e t + = " C " ; } 
 
                         i f   ( s = = "   " )   { s t r R e t + = " E " ; } 
 
                         i f   ( s = = " A " )   { s t r R e t + = " L " ; } 
 
                         i f   ( s = = " � " )   { s t r R e t + = " O " ; } 
 
                         i f   ( s = = " C " )   { s t r R e t + = " N " ; } 
 
                         i f   ( ( s = = " y " )   | |   ( s = = " { " ) )   { s t r R e t + = " Z " ; } 
 
                   } 
 
                   e l s e 
 
                   {             
 
                         s t r R e t   + = s ;   
 
                   } 
 
             } 
 
     } 
 
 r e t u r n   s t r R e t ; 
 
 } 
 
 
 
 f u n c t i o n   b M e m b e r O f ( s t r N a m e ,   a S t r N a m e s ) 
 
 { 
 
 / * a p p . a l e r t ( a S t r N a m e s ) ; * / 
 
         f o r   ( v a r   n M e m b I d x   i n   a S t r N a m e s ) 
 
         { 
 
                 i f   ( s t r N a m e   = =   a S t r N a m e s [ n M e m b I d x ] ) 
 
                         r e t u r n   t r u e ; 
 
         } 
 
         r e t u r n   f a l s e ; 
 
 } 
 
 f u n c t i o n   s t r T a b D e l i m i t e d ( o P a r a m ) 
 
 { 
 
           v a r   s t r R e t   =   " " ; 
 
           v a r   s t r V a l     =   " " ; 
 
           v a r   s A C   =   " " ; 
 
 	   
 
 	   s t r R e t = " \ t \ t " ; 
 
 	   s t r R e t   + = " D O M P A " ; 
 
 	   s t r R e t   + = " \ t " ; 
 
 	   s t r R e t   + = " \ t " ; 
 
 	   s t r R e t   + = " \ t " ; 
 
 	   s t r V a l = o P a r a m . o D o c . g e t F i e l d ( " N B R _ o d b i o r c a " ) . v a l u e A s S t r i n g ; 
 
 	   s t r V a l = s t r V a l . s u b s t r i n g ( 2 ,   1 0 ) ; 
 
           i f   ( s t r V a l = = " 1 8 8 0 0 0 0 9 " ) 
 
           { 
 
                 s t r R e t   + = " A C " ; 
 
                 s A C   =   " A C " ;   
 
           } 
 
           e l s e 
 
 	         s t r R e t   + = " N O " ; 
 
 	 	     
 
 	 i f   ( s t r V a l = = " 1 8 8 0 0 0 0 9 " ) 
 
 	 { 
 
         	 s t r R e t   + = " D M " ; 
 
 	 } 	 
 
 	 e l s e 
 
 	 { 
 
 	 	 i f   ( o P a r a m . o D o c . g e t F i e l d ( " k w o t a " ) . v a l u e > 1 0 0 0 0 0 0 ) 
 
 	         { 
 
         	 	 s t r R e t   + = " S C " ; 
 
 	 	 } 
 
 	 	 e l s e 
 
 	         { 
 
         	 	 s t r R e t   + = " E X " ; 
 
 	 	 } 	 
 
 	 } 
 
 	 	 	 
 
 	   s t r R e t   + = " \ t \ t \ t " ; 
 
                   s t r R e t   + = " K " ; 
 
                   s t r V a l = o P a r a m . o D o c . g e t F i e l d ( " N B R _ z l e c e n i o d a w c a " ) . v a l u e A s S t r i n g ; 
 
                   s t r R e t   + = R i g h t ( s t r V a l , 1 0 ) ;         	   
 
 	   s t r R e t   + = " \ t \ t \ t \ t " ; 
 
                   s t r R e t   + = " K " ; 
 
 	 	   
 
 	 s t r V a l = o P a r a m . o D o c . g e t F i e l d ( " N B R _ o d b i o r c a " ) . v a l u e A s S t r i n g ; 
 
 	 s t r V a l = s t r V a l . s u b s t r i n g ( 2 ,   1 0 ) ; 
 
 	 i f   ( s t r V a l = = " 1 8 8 0 0 0 0 9 " ) 
 
         { 
 
                 s t r V a l = o P a r a m . o D o c . g e t F i e l d ( " N B R _ o d b i o r c a " ) . v a l u e A s S t r i n g ; 
 
 	         s t r R e t   + = R i g h t ( s t r V a l , 1 0 ) ; 
 
         } 	   
 
 	 e l s e 
 
         { 	 
 
 	     i f   ( o P a r a m . o D o c . g e t F i e l d ( " k w o t a " ) . v a l u e > 1 0 0 0 0 0 0 ) 
 
 	     { 
 
 	 	   s t r R e t   + = " 1 3 2 0 0 0 5 0 2 4 " ; 
 
 	     } 	 	 
 
 	     e l s e 
 
 	     { 
 
                   s t r R e t   + = " 0 0 4 2 2 3 0 0 1 5 " ; 
 
 	     } 	   
 
 	 }   
 
 	   s t r R e t   + = " \ t \ t \ t \ t " ; 
 
 	   s t r R e t   + = " P L N " ; 
 
 	   s t r V a l = o P a r a m . o D o c . g e t F i e l d ( " k w o t a " ) . v a l u e A s S t r i n g ; 
 
                   s t r R e t   + = s t r V a l . r e p l a c e ( " , " , " . " ) ; 
 
 	   s t r R e t   + = " \ t \ t \ t " ; 
 
 	   s t r R e t   + = " P L N " ; 
 
 	   s t r V a l = o P a r a m . o D o c . g e t F i e l d ( " k w o t a " ) . v a l u e A s S t r i n g ; 
 
                   s t r R e t   + = s t r V a l . r e p l a c e ( " , " , " . " ) ; 	   
 
 	   s t r R e t   + = " \ t \ t \ t \ t \ t " ; 
 
 	   s t r R e t   + = " \ t " ; 
 
                   s t r R e t   + = " \ t " ; 	   
 
 	   s t r R e t   + = " \ t " ; 
 
 	   s t r R e t   + = " \ t " ; 
 
 	   s t r R e t   + = " \ t " ; 
 
 	   s t r R e t   + = " Y " ; 
 
 	   s t r R e t   + = " N " ; 
 
 	   s t r V a l = o P a r a m . o D o c . g e t F i e l d ( " N B R _ o d b i o r c a " ) . v a l u e A s S t r i n g ; 
 
 	   s t r R e t   + = " / " + s t r V a l . s u b s t r i n g ( 2 ,   1 0 ) ; 
 
 	   s t r R e t   + = " \ t " ; 
 
 	   s t r R e t   + = R e p l a c e _ s t r ( o P a r a m . o D o c . g e t F i e l d ( " t y t u l _ 1 " ) . v a l u e A s S t r i n g ) ; 
 
 	   s t r R e t   + = " \ t \ t " ; 	   
 
 	   s t r R e t   + = R e p l a c e _ s t r ( o P a r a m . o D o c . g e t F i e l d ( " t y t u l _ 2 " ) . v a l u e A s S t r i n g ) ; 
 
 	   s t r R e t   + = " \ t \ t " ; 	   	   
 
 	   s t r R e t   + = R e p l a c e _ s t r ( o P a r a m . o D o c . g e t F i e l d ( " t y t u l _ 3 " ) . v a l u e A s S t r i n g ) ; 
 
 	   s t r R e t   + = " \ t \ t " ; 
 
 	   s t r R e t   + = R e p l a c e _ s t r ( o P a r a m . o D o c . g e t F i e l d ( " t y t u l _ 4 " ) . v a l u e A s S t r i n g ) ; 
 
 	   s t r R e t   + = " \ t \ t \ t \ t \ t \ t " ; 
 
 	   s t r R e t   + = " / P L " + o P a r a m . o D o c . g e t F i e l d ( " N B R _ o d b i o r c a " ) . v a l u e A s S t r i n g ;         	   
 
 	   s t r R e t   + = " \ t " ; 	 
 
 	   i f   ( o P a r a m . o D o c . g e t F i e l d ( " k w o t a " ) . v a l u e > 1 0 0 0 0 0 0 ) 
 
 	             s t r R e t   + = " S R B 2 " 
 
 	   e l s e 
 
 	             s t r R e t   + = " O F T A " ;   
 
 	   s t r R e t   + = " \ t \ t \ t " ; 	   
 
 	   s t r R e t   + = R e p l a c e _ s t r ( o P a r a m . o D o c . g e t F i e l d ( " O d b i o r c a _ 1 " ) . v a l u e A s S t r i n g ) ; 
 
 	   s t r R e t   + = " \ t \ t \ t \ t \ t " ; 
 
 	   s t r R e t   + = R e p l a c e _ s t r ( o P a r a m . o D o c . g e t F i e l d ( " O d b i o r c a _ 2 " ) . v a l u e A s S t r i n g ) ; 	   
 
 	   s t r R e t   + = " \ t \ t \ t \ t \ t " ; 	   
 
 	   s t r R e t   + = R e p l a c e _ s t r ( o P a r a m . o D o c . g e t F i e l d ( " O d b i o r c a _ 3 " ) . v a l u e A s S t r i n g ) ; 	   
 
 	   s t r R e t   + = " \ t \ t \ t \ t \ t " ; 	   
 
 	   s t r R e t   + = R e p l a c e _ s t r ( o P a r a m . o D o c . g e t F i e l d ( " O d b i o r c a _ 4 " ) . v a l u e A s S t r i n g ) ;         	   
 
 	   s t r R e t   + = " \ t \ t \ t " ; 
 
                   i f   ( s A C = = " A C " ) 
 
                         s t r R e t   + = " Y " ; 
 
                   e l s e 
 
                         s t r R e t   + = " N " ; 	   	     
 
                 / * 
 
                   c o n s o l e . c l e a r ( ) ; 
 
                   c o n s o l e . s h o w ( ) ; 
 
                   c o n s o l e . c l e a r ( ) ; 
 
                   c o n s o l e . p r i n t l n ( s t r R e t ) ; 
 
                 * / 
 
 	   r e t u r n   s t r R e t ; 
 
 } 
 
 
 
 
 
 t r y 
 
 { 
 
         i f   (   a p p . v i e w e r V e r s i o n   > =   A D B E . P M D _ N e e d _ V e r s i o n   ) 
 
             {     e v e n t . v a l u e   =   s t r T a b D e l i m i t e d ( { o D o c :   t h i s ,   a F i e l d s :   [ " K o d _ a u t o r y z a c j i " ,   " N B R _ o d b i o r c a " ,   " N B R _ z l e c e n i o d a w c a " ,   " O d b i o r c a _ 1 " ,   " O d b i o r c a _ 2 " ,   " O d b i o r c a _ 3 " ,   " O d b i o r c a _ 4 " ,   " d a t a _ w a l u t y " ,   " k w o t a " ,   " t y t u l _ 1 " ,   " t y t u l _ 2 " ,   " t y t u l _ 3 " ,   " t y t u l _ 4 " ,   " z l e c e n i o d a w c a _ 1 " ,   " z l e c e n i o d a w c a _ 2 " ,   " z l e c e n i o d a w c a _ 3 " ,   " z l e c e n i o d a w c a _ 4 " ] ,   b F i e l d N a m e s :   f a l s e } ) ; 
 
                   / *   a p p . a l e r t ( e v e n t . v a l u e ) * / ; } 
 
         e l s e   e v e n t . v a l u e   =   "   " ; 
 
 } 
 
 c a t c h   ( e ) 
 
 { 
 
         e v e n t . v a l u e   =   "   " ; 
 
 }
stream_013_off0000aaf2.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xAAF2 367112 bytes
SHA-256: f7bbeb19e7edd48c95b8d9ed830795ddbfa115d16a5daa494d3ef423b1610859
stream_017_off00058d9e.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x58D9E 161000 bytes
SHA-256: 737a78d3cf3b68fcc38b84243c15e982172c5e74dd963de97b502ebbcb8983d2
stream_055_off00002a12.js decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2A12 755 bytes
SHA-256: 53b8e443c4dad30c4b24989944a9ce47d14705cb77d50d5c5ea764117bc2e015
stream_056_off00002c75.js decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2C75 813 bytes
SHA-256: d69c95e8f0861b737b7ef045a7b0eead2f87ba843d1e44a50e7a54bca215bba0
stream_057_off000a780c.js decompressed-pdf-stream PDF FlateDecoded stream at offset 0xA780C 5542 bytes
SHA-256: 194ef8a6002aae08481bdbc4c5d0b9d3d507c1623ea7fd3780f8111fb4b2ce15
icc_00_off00075f55.icc pdf-icc-profile PDF ICC profile at offset 0x75F55 3144 bytes
SHA-256: 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
font_00_sfnt_off000054a5.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x54A5 53855 bytes
SHA-256: 8a2cfab603d7d5d874ffecfa54b236b5e148499fc43fe3853280162053c9a85f
font_02_sfnt_off0003df6e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3DF6E 160925 bytes
SHA-256: 29aad937c3e0136726be969311dbe46a9d17fb517756ebeb0503d5a6d7146430
font_04_sfnt_off0007a7a5.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x7A7A5 160940 bytes
SHA-256: b769abfdc623e4b33f6d217a7b7f80c9e07673f1c5b07e9a7c670d60bc92d46c
font_05_sfnt_off00095a27.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x95A27 4676 bytes
SHA-256: aaaf5d5a06f047d152eb15298a2fc321162ac6c00d7bea68f0e994017c0b93af
font_06_sfnt_off000965e0.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x965E0 16444 bytes
SHA-256: c556ec3c5c8977f3e4248c11b5552a07eb42e32c38e8cf34988b8b990b293c45
font_07_sfnt_off0009826c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x9826C 15348 bytes
SHA-256: a7937e96a3788361ef8860eec49ce7568dda4eb45c53d841f913a338601ab5b9
font_08_sfnt_off0009a883.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x9A883 26076 bytes
SHA-256: 95d4b4dd3fb093b3985b264faaff49a1a5243c0d2226eec62bdf5e1bcf6b57d4
font_09_sfnt_off0009e9b3.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x9E9B3 16288 bytes
SHA-256: e33176a26844fdc35c5dc12ba5d4c562c7ebf8b2e6806c4805f4148ba436e3f1
font_10_sfnt_off000a072b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xA072B 12088 bytes
SHA-256: 1d83db698b0d01878233747ed8860298cad17f7b31d21bfc70f39895e3b874cf