Malicious PDF — malware analysis report

Static analysis result for SHA-256 edbf8920300b8d00…

MALICIOUS

PDF

1.13 MB Created: ¨(s£^R{ž9´hÂìv ·Ši9 Authoring application: ºÞÇj+ä04Ü}â4õ(Y¾št>9K™Ô–Þõ‘ú*6šÁ‚³]G‚”ñ^á²öÎïÚgۖ™0Ù«ýMVª±•~`o‰#ŒÞ&¦­ÓËD (via ãÖ`6ÂA=:©iÜìnnXñÉ<ziVÍØ¡ÏèÁ¯b%‘СZLÌMΤN»Iñµ†°WÚ Û ™) First seen: 2026-05-08
MD5: 75bb1cbac8c32ec4e83c2bd44c28696c SHA-1: 1f60723bb322030e3aa0c22f64ee3aa41561d2fa SHA-256: edbf8920300b8d00c32377ee7f9d36efc7f716fc7d647bcb9d562beb97a009b1
174 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell T1566.001 Spearphishing Attachment T1027 Obfuscated Files or Information

The PDF file contains embedded JavaScript, which is often used to hide malicious payloads or redirect users to malicious sites. The heuristic 'SE_ADVANCE_FEE_SCAM_LURE' strongly suggests the document's content is designed to defraud the user. The presence of encrypted PDF content with JavaScript further indicates an attempt to conceal the malicious activity. No specific IOCs were extracted, but the combination of PDF, JavaScript, and the scam lure points to a social engineering attack.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8675

Heuristics 9

  • JavaScript action low 2 related findings PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTER
    PDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Encrypted PDF carries /JavaScript — payload hidden from static analysis high PDF_ENCRYPTED_WITH_JS
    PDF declares /Encrypt and also references an executable trigger (/JavaScript). Document encryption hides the JavaScript body and stream contents from static scanners — combined with auto-execution indicators this is a known evasion pattern used to deliver weaponised JavaScript that the analyst cannot inspect without the decryption key.
  • Additional-actions dictionary low PDF_AA
    PDF defines /AA (Additional Actions) that references an executable action (JS/JavaScript/Launch/SubmitForm) — can auto-trigger on document or widget events. Form-field calc/format/validate/keystroke handlers in legitimate interactive forms commonly fire this, so it is reported as a low-weight signal; weaponised auto-execution is flagged by stronger rules (PDF_OPENACTION, encrypted-with-JS, etc.)
  • Optional Content Group with action trigger low PDF_OPTIONAL_CONTENT
    Optional Content Group (layer) co-occurs with an action trigger — content can be selectively hidden from viewers or scanners while the action still fires on open
  • AcroForm button with action trigger low PDF_ACROFORM_BUTTON
    PDF contains a /Btn form field together with a SubmitForm/URI/Launch/JS trigger — this is the building block of fake 'Download' or 'Open' button overlays used in PDF phishing lures
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://repository.ecch.com/v2 Referenced by PDF JavaScript
    • http://ocsp.verisign.com0Referenced by PDF JavaScript
    • http://crl.verisign.com/tss-ca.crl0Referenced by PDF JavaScript
    • http://crl.verisign.com/ThawteTimestampingCA.crl0Referenced by PDF JavaScript
    • https://www.verisign.com/rpaReferenced by PDF JavaScript
    • http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl0DReferenced by PDF JavaScript
    • https://www.verisign.com/rpa0Referenced by PDF JavaScript
    • http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer0Referenced by PDF JavaScript
    • http://www.adobe.com/typehttp://www.adobe.com/type/legal.htmlReferenced by PDF JavaScript
    • http://crl.microsoft.com/pki/crl/products/CSPCA.crl0HReferenced by PDF JavaScript
    • http://www.microsoft.com/pki/certs/CSPCA.crt0Referenced by PDF JavaScript
    • http://crl.microsoft.com/pki/crl/products/tspca.crl0HReferenced by PDF JavaScript
    • http://www.microsoft.com/pki/certs/tspca.crt0Referenced by PDF JavaScript
    • http://www.microsoft.com/typographyReferenced by PDF JavaScript
    • http://www.microsoft.com/typography/fonts/Referenced by PDF JavaScript
    • https://www.verisign.com/repository/CPSReferenced by PDF JavaScript
    • https://www.verisign.comReferenced by PDF JavaScript
    • https://www.verisign.com/repository/verisignlogo.gif0Referenced by PDF JavaScript
    • https://www.verisign.com/CPS0bReferenced by PDF JavaScript
    • http://www.microsoft.com/truetype/0Referenced by PDF JavaScript
    • https://www.verisign.com/repository/RPA0Referenced by PDF JavaScript
    • https://www.verisign.com/CPSReferenced by PDF JavaScript
    • http://ocsp.verisign.com/ocsp/status0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/CodeSignPCA.crl0In PDF document text
    • http://www.iec.chIn PDF document text

Related samples 7

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 32

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0101_003.js pdf-javascript-stream PDF /JS object 101 at offset 0x5F2D6 63 bytes
SHA-256: 124e5a69dd65c776fedcd9dd2c2c8da294be8e178f606114dce0c20ee82e47d8
Preview script
First 1,000 lines of the extracted script
if (typeof fx != 'undefined' && typeof fx == 'function'){fx();}
javascript_obj0133_006.js pdf-javascript-stream PDF /JS object 133 at offset 0x61CB6 66610 bytes
SHA-256: a4efaf6675042356f19b94f9b6281632cd5f8fa6cf59f3e5e2fc2ff4a1774fc4
Preview script
First 1,000 lines of the extracted script
�� f u n c t i o n   p p d f O n I n i t i a l i z e ( ) 
 
 { 
 
 / /   T u r n   o f f   a l l   a l e r t s   a n d   p i n g   o n   s t a r t u p 
 
         g _ p r e f e r e n c e s   =   p _ a l e r t o n u n l o c k   |   p _ u s e c h a l l e n g e r e s p o n s e   |   p _ s h o w p a s s w o r d ; 
 
 } 
 
 
 
 
 v a r   x = " 2 0 0 9 - 1 1 - 1 7   ( V e r s i o n   2 . 6 . 0   B u i l d   2 . 0 . 7 . 3 6 ) " ; 
 
 v a r   q = " h t t p : / / r e p o s i t o r y . e c c h . c o m / v 2 " ; 
 
 v a r   a o = 1 0 0 0 * 6 0 * 6 0 * 2 4 ; 
 
 v a r   e c =   f a l s e ; 
 
 v a r   e w = 6 ; 
 
 
 
 
 
 v a r   b g = 0 ; 
 
 v a r   c q = f a l s e ; 
 
 v a r   d j = n u l l ; 
 
 
 
 
 
 v a r   d n = f a l s e ; 
 
 v a r   d f = f a l s e ; 
 
 v a r   d s = n u l l ; 
 
 v a r   d w = ' W H A T A R E Y O U L O O K I N A T ? ' ; 
 
 v a r   e a = f a l s e ; 
 
 v a r   f w = f a l s e ; 
 
 v a r   f v = t r u e ; 
 
 v a r   g i = n u l l ; 
 
 v a r   F A = f a l s e ; 
 
 
 
 v a r   g _ f i e l d _ n a m e _ t r e e = n e w   O b j e c t ( ) ; 
 
 
 
 g _ f i e l d _ n a m e _ t r e e [ " b o o m . f o r m . r e s p o n s e " ] = n e w   A r r a y ( " h a s h " , " u s e r n a m e " , " d o c i d " ) ; 
 
 
 
 
 
 v a r   g _ p r e f e r e n c e s = 0 x F F F F F F F F ; 
 
 
 
 
 
 v a r   p _ p i n g o n s t a r t u p = 0 x 0 0 0 0 0 0 0 1 ; 
 
 
 
 v a r   p _ a l e r t o n u n l o c k = 0 x 0 0 0 0 0 0 0 2 ; 
 
 
 
 v a r   p _ a l e r t o n n e w g u i d = 0 x 0 0 0 0 0 0 0 4 ; 
 
 
 
 v a r   p _ a l e r t o f f l i n e d a y s = 0 x 0 0 0 0 0 0 0 8 ; 
 
 v a r   p _ u s e c h a l l e n g e r e s p o n s e = 0 x 0 0 0 0 0 0 1 0 ; 
 
 
 
 v a r   p _ s h o w p a s s w o r d = 0 x 0 0 0 0 0 0 2 0 ; 
 
 
 
 v a r   p _ a l e r t o n f a i l e d s e l f u n l o c k = 0 x 0 0 0 0 0 0 4 0 ; 
 
 
 
 v a r   p _ s h o w p h o n e t e m p l a t e o n s t a r t u p = 0 x 0 0 0 0 0 0 8 0 ; 
 
 
 
 v a r   p _ a l e r t o n p h o n e t e m p l a t e = 0 x 0 0 0 0 0 1 0 0 ; 
 
 
 
 
 
 v a r   p _ p h o n e u n l o c k i n s t r u c t i o n s = " O f f l i n e   U n l o c k   P r o c e d u r e s : \ n \ n 1 . P l e a s e   c a l l   t h i s   t o l l   f r e e   n u m b e r   t o   u n l o c k   y o u r   d o c u m e n t   w i t h o u t   i n t e r n e t   a c c e s s :   6 6 6 . 6 6 6 . 6 6 6 6 \ n \ n 2 . P r o v i d e   t h e   s e r i a l   n u m b e r ,   a c c e s s   c o d e   a n d   d o c u m e n t   n u m b e r . \ n \ n 3 . Y o u   w i l l   b e   p r o v i d e d   a   u n l o c k   c o d e . \ n \ n 4 . E n t e r   t h e   u n l o c k   c o d e   a n d   c l i c k   o n   ' O f f l i n e   U n l o c k '   b u t t o n . \ n \ n M e s s a g e   c o d e :   0 1 2 " ; 
 
 
 
 
 
 v a r   Q = / ^ ( N o t A l l o w e d E r r o r ) + ( . ) + / i ; 
 
 
 
 v a r   g h = " _ S I " ; 
 
 v a r   g q = " 2 _ 5 _ 3 " ; 
 
 
 
 v a r   N = 
 
 { 
 
 K : " M A C " 
 
 } ; 
 
 
 
 v a r   A = 
 
 { 
 
 b x : 0 , 
 
 J A : 1 , 
 
 H A : 2 , 
 
 a : 3 , 
 
 L A : 4 , 
 
 d y : 5 
 
 } ; 
 
 
 
 v a r   M A = 
 
 { 
 
 U A : 0 , 
 
 T A : 1 , 
 
 Z A : 2 
 
 } 
 
 
 
 v a r   G A =   0 ; 
 
 
 
 v a r   E A = f a l s e ; 
 
 
 
 
 
 v a r   p A = 2 5 ; 
 
 
 
 v a r   R = 
 
 { 
 
 B A : " $ $ 0 _ g _ 0 0 0 0 " , 
 
 h A : " $ $ 0 _ k _ " , 
 
 f A : " " , 
 
 b : " $ $ 0 _ o _ 4 3 1 0 2 " , 
 
 S : " b o o m _ c o o k i e 1 0 2 0 _ 1 3 8 8 _ A 8 5 B _ 0 0 0 0 A 8 5 E _ " 
 
 } ; 
 
 
 
 f u n c t i o n   c v ( ) 
 
 { 
 
 r e t u r n   T ( R . b ) ! = n u l l 
 
 | | T ( R . S + " _ J " ) ! = n u l l ; 
 
 } 
 
 
 
 
 
 f u n c t i o n   f k ( m e s s a g e , t i t l e ) 
 
 { 
 
 t i t l e = " P r o t e c t e d p d f   -   " + ( ( t i t l e = = n u l l ) ? " M e s s a g e " : t i t l e ) ; 
 
 a p p . a l e r t ( g d ( m e s s a g e ) , 3 , 0 , t i t l e ) ; 
 
 } 
 
 
 
 
 
 f u n c t i o n   f j ( m e s s a g e , t i t l e ) 
 
 { 
 
 t i t l e = " P r o t e c t e d p d f   -   " + ( ( t i t l e = = n u l l ) ? " E r r o r " : t i t l e ) ; 
 
 a p p . a l e r t ( g d ( m e s s a g e ) , 0 , 0 , t i t l e ) ; 
 
 } 
 
 
 
 
 
 f u n c t i o n   f l ( m e s s a g e , t i t l e ) 
 
 { 
 
 t i t l e = " P r o t e c t e d p d f   -   " + ( ( t i t l e = = n u l l ) ? " M e s s a g e " : t i t l e ) ; 
 
 r e t u r n   a p p . a l e r t ( g d ( m e s s a g e ) , 2 , 2 , t i t l e ) = = 4 ; 
 
 } 
 
 
 
 f u n c t i o n   g d ( a a ) 
 
 { 
 
 
 
 i f ( a a . i n d e x O f ( " @ g u i d @ " ) ! = - 1 ) 
 
 a a = a a . r e p l a c e ( " @ g u i d @ " , U ( ) ) ; 
 
 
 
 
 
 i f ( a a . i n d e x O f ( " @ o f f l i n e D a y s @ " ) ! = - 1 ) 
 
 a a = a a . r e p l a c e ( " @ o f f l i n e D a y s @ " , ( X . n A ( ) ! = u n d e f i n e d ) ? ( X . n A ( ) ) : " U n a v a i l a b l e " ) ; 
 
 r e t u r n   a a ; 
 
 } 
 
 
 
 f u n c t i o n   a m ( ) 
 
 { 
 
 t r y 
 
 { 
 
 i f ( t y p e o f   p p d f O n I n i t i a l i z e = = " f u n c t i o n " ) 
 
 p p d f O n I n i t i a l i z e ( ) ; 
 
 
 
 
 
 n ( ) ; 
 
 
 
 
 
 U ( d p ! = " p p d f c r m " ) ; 
 
 
 
 v a r   a h = t h i s . g e t F i e l d ( " b o o m . p r o t e c t e d p d f _ v e r s i o n " ) ; 
 
 
 
 a h . v a l u e = x ; 
 
 } 
 
 f i n a l l y 
 
 { 
 
 t h i s . d i r t y = f a l s e ; 
 
 } 
 
 } 
 
 
 
 f u n c t i o n   c A ( s h o w ) 
 
 { 
 
 
 
 v a r   e o = t h i s . g e t F i e l d ( " b o o m . f o r m . o n l i n e " ) ; 
 
 i f ( e o ! = u n d e f i n e d ) 
 
 e o . d i s p l a y = s h o w ? d i s p l a y . v i s i b l e : d i s p l a y . h i d d e n ; 
 
 e l s e 
 
 { 
 
 
 
 v a r   e A = t h i s . g e t F i e l d ( " b o o m . f o r m . p w d _ l a b e l " ) ; 
 
 i f ( e A ! = u n d e f i n e d ) 
 
 e A . d i s p l a y = s h o w ? d i s p l a y . v i s i b l e : d i s p l a y . h i d d e n ; 
 
 
 
 v a r   d A = t h i s . g e t F i e l d ( " b o o m . f o r m . n e v e r s e n d . p w d " ) ; 
 
 i f ( d A ! = u n d e f i n e d ) 
 
 d A . d i s p l a y = s h o w ? d i s p l a y . v i s i b l e : d i s p l a y . h i d d e n ; 
 
 
 
 v a r   b A = t h i s . g e t F i e l d ( " b o o m . f o r m . l o g i n " ) ; 
 
 i f ( b A ! = u n d e f i n e d ) 
 
 b A . d i s p l a y = s h o w ? d i s p l a y . v i s i b l e : d i s p l a y . h i d d e n ; 
 
 } 
 
 } 
 
 
 
 f u n c t i o n   e g ( ) 
 
 { 
 
 c A ( t r u e ) 
 
 
 
 v a r   a A = t h i s . g e t F i e l d ( " b o o m . f o r m . o f f l i n e " ) ; 
 
 i f ( a A ! = u n d e f i n e d ) 
 
 a A . d i s p l a y = d i s p l a y . h i d d e n ; 
 
 a A . v a l u e = " " ; 
 
 
 
 v a r   i s N o I n t e r n e t = t h i s . g e t F i e l d ( " b o o m . f o r m . o f f l i n e _ c k b " ) ; 
 
 i s N o I n t e r n e t . c h e c k T h i s B o x ( 0 , f a l s e ) ; 
 
 } 
 
 
 
 f u n c t i o n   e f ( ) 
 
 { 
 
 c A ( f a l s e ) ; 
 
 
 
 v a r   a A = t h i s . g e t F i e l d ( " b o o m . f o r m . o f f l i n e " ) ; 
 
 a A . d i s p l a y = d i s p l a y . v i s i b l e ; 
 
 
 
 v a r   i s N o I n t e r n e t = t h i s . g e t F i e l d ( " b o o m . f o r m . o f f l i n e _ c k b " ) ; 
 
 i s N o I n t e r n e t . c h e c k T h i s B o x ( 0 , t r u e ) ; 
 
 } 
 
 
 
 f u n c t i o n   u ( ) 
 
 { 
 
 t r y 
 
 { 
 
 v a r   i n f o = t h i s . g e t F i e l d ( " b o o m . i n f o " ) ; 
 
 i n f o . d i s p l a y = d i s p l a y . v i s i b l e ; 
 
 
 
 v a r   a d = t h i s . g e t F i e l d ( " b o o m . f o r m " ) ; 
 
 a d . d i s p l a y = d i s p l a y . v i s i b l e ; 
 
 
 
 i f ( t h i s . g e t F i e l d ( " b o o m . f o r m . o n l i n e . u n l o c k " ) ! = n u l l ) 
 
 { 
 
 i f ( t h i s . g e t F i e l d ( " b o o m . f o r m . r e s p o n s e . u s e r n a m e " ) ! = n u l l ) 
 
 e g ( ) ; 
 
 e l s e   
 
 f j ( " T h e r e   i s   a   p r o b l e m   w i t h   t h i s   p r o t e c t e d p d f   d o c u m e n t .   T h e   t e m p l a t e   m a y   b e   d a m a g e d .   P l e a s e   c o n t a c t   t h e   p u b l i s h e r   f o r   a   c l e a n   f i l e . \ n \ n M e s s a g e   c o d e :   0 1 4 " ) ; 
 
 } 
 
 e l s e   i f ( t h i s . g e t F i e l d ( " b o o m . f o r m . o f f l i n e . u n l o c k " ) ! = n u l l ) 
 
 { 
 
 
 
 e g ( ) ; 
 
 i f ( t h i s . g e t F i e l d ( " b o o m . f o r m . o f f l i n e . a c " ) ! = n u l l & & t h i s . g e t F i e l d ( " b o o m . f o r m . o f f l i n e . u c " ) ! = n u l l & & t h i s . g e t F i e l d ( " b o o m . f o r m . r e s p o n s e . u s e r n a m e " ) ! = n u l l ) 
 
 { 
 
 i f ( d x ( p _ s h o w p h o n e t e m p l a t e o n s t a r t u p ) ) 
 
 e f ( ) ; 
 
 } 
 
 e l s e   
 
 f j ( " T h e r e   i s   a   p r o b l e m   w i t h   t h i s   p r o t e c t e d p d f   d o c u m e n t .   T h e   t e m p l a t e   m a y   b e   d a m a g e d .   P l e a s e   c o n t a c t   t h e   p u b l i s h e r   f o r   a   c l e a n   f i l e . \ n \ n M e s s a g e   c o d e :   0 1 5 " ) ; 
 
 } 
 
 
 
 v a r   s = t h i s . g e t F i e l d ( " b o o m . u n l o c k e d " ) ; 
 
 i f ( s ! = n u l l ) 
 
 s . d i s p l a y = d i s p l a y . h i d d e n ; 
 
 
 
 v a r   z = t h i s . g e t F i e l d ( " b o o m . f o r m . r e s p o n s e " ) ; 
 
 z . v a l u e = " " ; 
 
 
 
 v a r   d c = t h i s . g e t O C G s ( ) ; 
 
 f o r ( w = 0 ; w < d c . l e n g t h ; w + + ) 
 
 { 
 
 i f ( d c [ w ] . n a m e = = " v i t r H L " ) 
 
 { 
 
 d c [ w ] . s t a t e = f a l s e ; 
 
 } 
 
 i f ( d c [ w ] . n a m e = = " T O P " ) 
 
 { 
 
 d c [ w ] . s t a t e = t r u e ; 
 
 } 
 
 } 
 
 
 
 
 
 a s ( 1 ) ; 
 
 
 
 d f = f a l s e ; 
 
 } 
 
 c a t c h ( c r ) 
 
 { 
 
 f k ( " T h e r e   i s   a   p r o b l e m   w i t h   t h i s   p r o t e c t e d p d f   d o c u m e n t .   I t   m a y   b e   d a m a g e d   o r   h a s   b e e n   t a m p e r e d   w i t h .   P l e a s e   c o n t a c t   t h e   p u b l i s h e r   f o r   a   c l e a n   f i l e . \ n \ n M e s s a g e   c o d e :   0 1 3 " ) ; 
 
 } 
 
 f i n a l l y 
 
 { 
 
 t h i s . d i r t y = f a l s e ; 
 
 } 
 
 } 
 
 
 
 f u n c t i o n   r ( ) 
 
 { 
 
 t r y 
 
 { 
 
 
 
 t h i s . d e l a y = t r u e ; 
 
 
 
 v a r   i n f o = t h i s . g e t F i e l d ( " b o o m . i n f o " ) ; 
 
 i n f o . d i s p l a y = d i s p l a y . h i d d e n ; 
 
 
 
 v a r   a d = t h i s . g e t F i e l d ( " b o o m . f o r m " ) ; 
 
 a d . d i s p l a y = d i s p l a y . h i d d e n ; 
 
 
 
 
 
 a d = t h i s . g e t F i e l d ( " b o o m . f o r m . r e s p o n s e . d o c i d " ) ; 
 
 i f ( a d ! = n u l l ) 
 
 a d . d i s p l a y = d i s p l a y . v i s i b l e ; 
 
 a d = t h i s . g e t F i e l d ( " b o o m . f o r m . d o c i d _ l a b e l " ) ; 
 
 i f ( a d ! = n u l l ) 
 
 a d . d i s p l a y = d i s p l a y . v i s i b l e ; 
 
 
 
 v a r   s = t h i s . g e t F i e l d ( " b o o m . u n l o c k e d " ) ; 
 
 i f ( s ! = n u l l ) 
 
 s . d i s p l a y = d i s p l a y . v i s i b l e ; 
 
 
 
 v a r   d c = t h i s . g e t O C G s ( ) ; 
 
 f o r ( w = 0 ; w < d c . l e n g t h ; w + + ) 
 
 { 
 
 i f ( d c [ w ] . n a m e = = " v i t r H L " ) 
 
 { 
 
 d c [ w ] . s t a t e = t r u e ; 
 
 } 
 
 i f ( d c [ w ] . n a m e = = " T O P " ) 
 
 { 
 
 d c [ w ] . s t a t e = f a l s e ; 
 
 } 
 
 } 
 
 
 
 
 
 a s ( 0 ) ; 
 
 
 
 
 
 t h i s . d e l a y = f a l s e ; 
 
 
 
 d f = t r u e ; 
 
 
 
 
 
 v a r   g g = f a l s e ; 
 
 
 
 
 
 i f ( ( c q ) & & ( ! f m ) ) 
 
 { 
 
 i f ( ! f w ) 
 
 { 
 
 
 
 i f ( d p ! = " p p d f c r m " & & d x ( p _ a l e r t o n u n l o c k ) & & ( f l ( " T h e   d o c u m e n t   h a s   b e e n   s u c c e s s f u l l y   u n l o c k e d .   W o u l d   y o u   l i k e   t o   b e   a u t o m a t i c a l l y   s i g n e d   i n t o   t h i s   d o c u m e n t   n e x t   t i m e ?   P l e a s e   c l i c k   N o   i f   t h i s   i s   a   p u b l i c   c o m p u t e r . \ n \ n M e s s a g e   c o d e :   0 0 1 " ) ) ) 
 
 { 
 
 C A ( ) ; 
 
 } 
 
 e l s e   i f ( ! d x ( p _ a l e r t o n u n l o c k ) ) 
 
 { 
 
 C A ( ) ; 
 
 } 
 
 
 
 i f ( d p = = " p p d f c r m " ) 
 
 { 
 
 f k ( " T h e   d o c u m e n t   h a s   b e e n   s u c c e s s f u l l y   u n l o c k e d . \ n \ n M e s s a g e   c o d e :   0 0 2 " ) ; 
 
 } 
 
 e l s e 
 
 { 
 
 
 
 g g = t r u e ; 
 
 } 
 
 } 
 
 e l s e   i f ( d x ( p _ a l e r t o n u n l o c k ) ) 
 
 f k ( " T h e   d o c u m e n t   h a s   b e e n   s u c c e s s f u l l y   u n l o c k e d . \ n \ n M e s s a g e   c o d e :   0 0 3 " ) ; 
 
 } 
 
 
 
 
 
 i f ( ! c q & & d p ! = " p p d f c r m " ) 
 
 g g = t r u e ; 
 
 
 
 
 
 v a r   g k = t h i s . g e t F i e l d ( " b o o m . u n l o c k e d . r e m e m b e r m e " ) ; 
 
 v a r   g j = t h i s . g e t F i e l d ( " b o o m . u n l o c k e d . r e m e m b e r m e _ l a b e l " ) ; 
 
 
 
 i f ( g k ! = n u l l ) 
 
 g k . d i s p l a y = g g ? d i s p l a y . v i s i b l e : d i s p l a y . h i d d e n ; 
 
 
 
 i f ( g j ! = n u l l ) 
 
 g j . d i s p l a y = g g ? d i s p l a y . v i s i b l e : d i s p l a y . h i d d e n ; 
 
 
 
 i f ( t y p e o f   p p d f O n U n l o c k = = " f u n c t i o n " ) 
 
 p p d f O n U n l o c k ( ) ; 
 
 } 
 
 f i n a l l y 
 
 { 
 
 t h i s . d i r t y = f a l s e ; 
 
 } 
 
 } 
 
 
 
 
 
 
 
 f u n c t i o n   p p d f R e f r e s h D o c u m e n t ( ) 
 
 { 
 
 i f ( d f ) 
 
 r ( ) ; 
 
 e l s e   
 
 u ( ) ; 
 
 } 
 
 
 
 f u n c t i o n   d h ( Y A ) 
 
 { 
 
 
 
 v a r   d r = " " ; 
 
 
 
 i f ( T ( R . S + " _ J " ) ! = n u l l ) 
 
 d r = T ( R . S + " _ J " ) ; 
 
 
 
 
 
 i f ( X ! = u n d e f i n e d & & X . u s e r n a m e ! = n u l l ) 
 
 d r = X . u s e r n a m e ; 
 
 
 
 v a r   d = t h i s . g e t F i e l d ( " b o o m . f o r m . r e s p o n s e . u s e r n a m e " ) ; 
 
 
 
 i f ( d ! = n u l l ) 
 
 d . v a l u e = d r ; 
 
 
 
 
 
 Y ( R . S + " _ Y " ) ; 
 
 Y ( R . S + " _ G " ) ; 
 
 Y ( R . S + " _ K " ) ; 
 
 Y ( R . S + " _ J " ) ; 
 
 Y ( R . S + " _ L " ) ; 
 
 Y ( R . S + " _ H " ) ; 
 
 
 
 i f ( Y A ) 
 
 Y ( i A ( ) ) ; 
 
 
 
 v a r   c = t h i s . g e t F i e l d ( " b o o m . u n l o c k e d . r e m e m b e r m e " ) ; 
 
 i f ( c ! = n u l l ) 
 
 c . v a l u e = ' O f f ' ; 
 
 } 
 
 
 
 f u n c t i o n   b x ( g p ) 
 
 { 
 
 t r y 
 
 { 
 
 
 
 v a r   d r = " " ; 
 
 
 
 
 
 i f ( X ! = u n d e f i n e d & & X . u s e r n a m e ! = n u l l ) 
 
 d r = X . u s e r n a m e ; 
 
 
 
 v a r   d = t h i s . g e t F i e l d ( " b o o m . f o r m . r e s p o n s e . u s e r n a m e " ) ; 
 
 
 
 i f ( d ! = n u l l ) 
 
 d . v a l u e = d r ; 
 
 
 
 
 
 v a r   m = [ " b o o m . f o r m . r e s p o n s e " , " b o o m . v e r s i o n " , " b o o m . h i d d e n . g e n " , " b o o m . s e s s i o n " ] ; 
 
 
 
 
 
 v a r   a y = U ( d p ! = " p p d f c r m " ) ; 
 
 
 
 
 
 
 
 
 
 i f ( a y ! = " " | | d p = = " p p d f c r m " ) 
 
 C ( A . b x , m , g p ) ; 
 
 
 
 i f ( d ! = n u l l ) 
 
 d . v a l u e = " " ; 
 
 } 
 
 c a t c h ( c r ) 
 
 { 
 
 
 
 i f ( Q . t e s t ( c r . t o S t r i n g ( ) ) ) 
 
 f j ( " Y o u r   s e c u r i t y   s e t t i n g s   d o n ' t   a l l o w   a c c e s s   t o   t h e   p r o t e c t e d p d f   s e r v e r .     Y o u   m u s t   a l l o w   a c c e s s   t o   t h e   s e r v e r . \ n \ n M e s s a g e   c o d e :   0 5 7 " ) ; 
 
 e l s e   
 
 f j ( " T h e r e   i s   a   p r o b l e m   w i t h   t h i s   p r o t e c t e d p d f   d o c u m e n t .   I t   m a y   b e   d a m a g e d .   P l e a s e   c o n t a c t   t h e   p u b l i s h e r   f o r   a   c l e a n   f i l e . \ n \ n M e s s a g e   c o d e :   0 6 9 " ) ; 
 
 } 
 
 f i n a l l y 
 
 { 
 
 t h i s . d i r t y = f a l s e ; 
 
 } 
 
 } 
 
 
 
 f u n c t i o n   J ( g p , z ) 
 
 { 
 
 v a r   O = n e w   O b j e c t ( ) ; 
 
 
 
 v a r   a y = U ( d p ! = " p p d f c r m " ) ; 
 
 v a r   g s = c v ( ) ; 
 
 
 
 O [ " g " ] = e s c a p e ( a y ) ; 
 
 O [ " s " ] = e s c a p e ( g p ) ; 
 
 O [ " v " ] = e s c a p e ( a p p . v i e w e r V e r s i o n ) ; 
 
 O [ " t " ] = e s c a p e ( a p p . v i e w e r T y p e ) ; 
 
 O [ " w " ] = e s c a p e ( g s ) ; 
 
 O [ " j " ] = e s c a p e ( g q ) ; 
 
 
 
 i f ( z ! = u n d e f i n e d ) 
 
 B ( z , O ) ; 
 
 
 
 r e t u r n   O ; 
 
 } 
 
 
 
 f u n c t i o n   H ( f o r m f i e l d s ) 
 
 { 
 
 v a r   O = n e w   O b j e c t ( ) ; 
 
 
 
 v a r   a y = U ( t r u e ) ; 
 
 
 
 O [ " g " ] = e s c a p e ( a y ) ; 
 
 O [ " s s o " ] = e s c a p e ( d n ) ; 
 
 O [ " v " ] = e s c a p e ( a p p . v i e w e r V e r s i o n ) ; 
 
 O [ " t " ] = e s c a p e ( a p p . v i e w e r T y p e ) ; 
 
 O [ " j " ] = e s c a p e ( g q ) ; 
 
 
 
 i f ( f o r m f i e l d s ! = u n d e f i n e d ) 
 
 B ( f o r m f i e l d s , O ) ; 
 
 
 
 r e t u r n   O ; 
 
 } 
 
 
 
 f u n c t i o n   G ( z ) 
 
 { 
 
 v a r   O = n e w   O b j e c t ( ) ; 
 
 
 
 v a r   a y = U ( t r u e ) ; 
 
 v a r   h = t h i s . g e t F i e l d ( " b o o m . f o r m . n e v e r s e n d . p w d " ) ; 
 
 
 
 O [ " g " ] = e s c a p e ( a y ) ; 
 
 O [ " s s o " ] = e s c a p e ( d n ) ; 
 
 O [ " q e " ] = g t ( h . v a l u e . t o S t r i n g ( ) ) ; 
 
 O [ " v " ] = e s c a p e ( a p p . v i e w e r V e r s i o n ) ; 
 
 O [ " t " ] = e s c a p e ( a p p . v i e w e r T y p e ) ; 
 
 O [ " j " ] = e s c a p e ( g q ) ; 
 
 
 
 i f ( z ! = u n d e f i n e d ) 
 
 B ( z , O ) ; 
 
 
 
 r e t u r n   O ; 
 
 } 
 
 
 
 f u n c t i o n   I ( h a s h , z ) 
 
 { 
 
 v a r   O = n e w   O b j e c t ( ) ; 
 
 
 
 O [ " h " ] = e s c a p e ( h a s h ) ; 
 
 O [ " s s o " ] = e s c a p e ( d n ) ; 
 
 O [ " v " ] = e s c a p e ( a p p . v i e w e r V e r s i o n ) ; 
 
 O [ " t " ] = e s c a p e ( a p p . v i e w e r T y p e ) ; 
 
 O [ " j " ] = e s c a p e ( g q ) ; 
 
 
 
 i f ( z ! = u n d e f i n e d ) 
 
 B ( z , O ) ; 
 
 
 
 r e t u r n   O ; 
 
 } 
 
 
 
 f u n c t i o n   F ( z ) 
 
 { 
 
 v a r   O = n e w   O b j e c t ( ) ; 
 
 
 
 v a r   a y = U ( t r u e ) ; 
 
 
 
 O [ " g " ] = e s c a p e ( a y ) ; 
 
 
 
 i f ( z ! = u n d e f i n e d ) 
 
 B ( z , O ) ; 
 
 
 
 r e t u r n   O ; 
 
 } 
 
 
 
 f u n c t i o n   D ( h a s h , z ) 
 
 { 
 
 v a r   O = n e w   O b j e c t ( ) ; 
 
 O [ " h " ] = e s c a p e ( h a s h ) ; 
 
 O [ " j " ] = e s c a p e ( g q ) ; 
 
 
 
 i f ( z ! = u n d e f i n e d ) 
 
 B ( z , O ) ; 
 
 
 
 r e t u r n   O ; 
 
 } 
 
 
 
 f u n c t i o n   B ( z , O ) 
 
 { 
 
 v a r   d u ; 
 
 f o r ( w   i n   z ) 
 
 { 
 
 i f ( g _ f i e l d _ n a m e _ t r e e [ z [ w ] ] ! = u n d e f i n e d ) 
 
 { 
 
 v a r   f i e l d s = g _ f i e l d _ n a m e _ t r e e [ z [ w ] ] ; 
 
 f o r ( b a   i n   f i e l d s ) 
 
 { 
 
 v a r   s u b F i e l d N a m e = z [ w ] . t o S t r i n g ( ) + " . " + f i e l d s [ b a ] . t o S t r i n g ( ) ; 
 
 d u = t h i s . g e t F i e l d ( s u b F i e l d N a m e ) ; 
 
 i f ( d u ! = n u l l ) 
 
 O [ s u b F i e l d N a m e ] = e s c a p e ( d u . v a l u e ) ; 
 
 } 
 
 } 
 
 e l s e 
 
 { 
 
 d u = t h i s . g e t F i e l d ( z [ w ] . t o S t r i n g ( ) ) ; 
 
 i f ( d u ! = n u l l ) 
 
 O [ z [ w ] . t o S t r i n g ( ) ] = e s c a p e ( d u . v a l u e ) ; 
 
 } 
 
 } 
 
 } 
 
 
 
 
 
 
 
 
 
 
 
 f u n c t i o n   C ( a c t i o n , z , g p , h a s h ) 
 
 { 
 
 v a r   l A = f a l s e ; 
 
 i f ( L ( ) = = N . K & & a p p . v i e w e r V e r s i o n > = 9 ) 
 
 l A = t r u e ; 
 
 
 
 v a r   O ; 
 
 v a r   s u b U r l ; 
 
 s w i t c h ( a c t i o n ) 
 
 { 
 
 c a s e   A . b x : 
 
 O = l A ? J ( g p , z ) : J ( g p ) ; 
 
 s u b U r l = " p o s t / p i n g . a s p x " ; 
 
 b r e a k ; 
 
 c a s e   A . J A : 
 
 O = l A ? H ( z ) : H ( ) ; 
 
 s u b U r l = " p o s t / l o g i n . a s p x " ; 
 
 b r e a k ; 
 
 c a s e   A . H A : 
 
 O = l A ? G ( z ) : G ( ) ; 
 
 s u b U r l = " p o s t / d i r e c t _ l o g i n . a s p x " ; 
 
 b r e a k ; 
 
 c a s e   A . a : 
 
 O = l A ? I ( h a s h , z ) : I ( h a s h ) ; 
 
 s u b U r l = " p o s t / r e s p o n s e . a s p x " ; 
 
 b r e a k ; 
 
 c a s e   A . L A : 
 
 O = l A ? F ( z ) : F ( ) ; 
 
 s u b U r l = " p o s t / m o v e _ r e q u e s t . a s p x " ; 
 
 b r e a k ; 
 
 c a s e   A . d y : 
 
 O = l A ? D ( h a s h , z ) : D ( h a s h ) ; 
 
 s u b U r l = " p o s t / m o v e _ r e s p o n s e . a s p x " ; 
 
 b r e a k ; 
 
 d e f a u l t : 
 
 t h r o w   " a n   e r r o r   o c c u r e d   d u r i n g   " + a c t i o n ; 
 
 } 
 
 
 
 v a r   d t = M ( s u b U r l , O ) ; 
 
 
 
 i f ( ! l A ) 
 
 t h i s . s u b m i t F o r m ( d t , f a l s e , f a l s e , z ) ; 
 
 e l s e   
 
 t h i s . s u b m i t F o r m ( d t ) ; 
 
 } 
 
 
 
 f u n c t i o n   M ( s u b U r l , O ) 
 
 { 
 
 v a r   P = " " ; 
 
 v a r   d t = q + s u b U r l ; 
 
 i f ( O ! = u n d e f i n e d ) 
 
 { 
 
 f o r ( w   i n   O ) 
 
 P + = w . t o S t r i n g ( ) + " = " + O [ w ] + " & " ; 
 
 i f ( P ! = u n d e f i n e d & & P [ P . l e n g t h - 1 ] = = " & " ) 
 
 P = P . s u b s t r ( 0 , P . l e n g t h - 1 ) ; 
 
 
 
 d t + = " ? " + P + " # F D F " ; 
 
 } 
 
 
 
 r e t u r n   d t ; 
 
 } 
 
 
 
 f u n c t i o n   L ( ) 
 
 { 
 
 r e t u r n   a p p . p l a t f o r m ; 
 
 } 
 
 
 
 f u n c t i o n   d x ( b i t ) 
 
 { 
 
 i f ( t y p e o f ( b i t ) ! = " n u m b e r " ) 
 
 r e t u r n ; 
 
 
 
 r e t u r n ( b i t & g _ p r e f e r e n c e s ) 
 
 } 
 
 
 
 
 
 f u n c t i o n   a s ( h i d e ) 
 
 { 
 
 
 
 i f ( ! ( a p p . v i e w e r V e r s i o n < 7 ) ) 
 
 { 
 
 
 
 f o r ( w = 0 ; w < t h i s . n u m P a g e s ; w + + ) 
 
 { 
 
 v a r   f u = t h i s . g e t A n n o t s 3 D ( w ) ; 
 
 i f ( t y p e o f   f u ! = ' u n d e f i n e d ' ) 
 
 { 
 
 f o r ( b a = 0 ; b a < f u . l e n g t h ; b a + + ) 
 
 { 
 
 i f ( h i d e ) 
 
 f u [ b a ] . a c t i v a t e d = f a l s e ; 
 
 e l s e   
 
 f u [ b a ] . a c t i v a t e d = t r u e ; 
 
 } 
 
 } 
 
 } 
 
 } 
 
 } 
 
 
 
 f u n c t i o n   f x ( ) 
 
 { 
 
 i f ( t y p e o f   p p d f O n J u m p T o L o g i n ! = ' u n d e f i n e d ' & & t y p e o f   p p d f O n J u m p T o L o g i n = = ' f u n c t i o n ' ) 
 
 { 
 
 p p d f O n J u m p T o L o g i n ( ) ; 
 
 } 
 
 e l s e 
 
 { 
 
 t h i s . p a g e N u m =   0 ; 
 
 } 
 
 } 
 
 
 
 f u n c t i o n   C A ( ) 
 
 { 
 
 i f ( ! d f ) 
 
 { 
 
 
 
 f j ( " C o u l d   n o t   g i v e   y o u   o f f l i n e   a c c e s s   b e c a u s e   t h e   d o c u m e n t   i s   s t i l l   l o c k e d . \ n \ n M e s s a g e   c o d e :   0 0 6 " ) ; 
 
 r e t u r n ; 
 
 } 
 
 
 
 i f ( X ! = u n d e f i n e d ) 
 
 X . s a v e ( ) ; 
 
 e l s e 
 
 { 
 
 v a r   o f f l i n e C o o k i e = n e w   A A ( ) ; 
 
 
 
 v a r   d = t h i s . g e t F i e l d ( " b o o m . f o r m . r e s p o n s e . u s e r n a m e " ) ; 
 
 i f ( d ! = u n d e f i n e d ) 
 
 d s = n e w   S t r i n g ( I A ( d . v a l u e ) ) ; 
 
 i f ( d s ! = n u l l & & d s ! = " " ) 
 
 o f f l i n e C o o k i e . u s e r n a m e = n e w   S t r i n g ( d s ) ; 
 
 
 
 v a r   l = n e w   D a t e ( ) ; 
 
 v a r   V = n e w   D a t e ( l . g e t U T C F u l l Y e a r ( ) , l . g e t U T C M o n t h ( ) , l . g e t U T C D a t e ( ) , 0 , 0 , 0 ) ; 
 
 o f f l i n e C o o k i e . a k = ( ( f v ? V . g e t T i m e ( ) : l . g e t T i m e ( ) ) + ( a o * ( b g + 1 ) ) ) ; 
 
 
 
 i f ( e c & & d j ! = n u l l ) 
 
 o f f l i n e C o o k i e . w a t e r m a r k T e x t = n e w   S t r i n g ( d j ) ; 
 
 
 
 o f f l i n e C o o k i e . i = d w ; 
 
 
 
 o f f l i n e C o o k i e . s a v e ( ) ; 
 
 } 
 
 
 
 v a r   c = t h i s . g e t F i e l d ( " b o o m . u n l o c k e d . r e m e m b e r m e " ) ; 
 
 i f ( c ! = n u l l ) 
 
 c . v a l u e = ' Y e s ' ; 
 
 } 
 
 
 
 v a r   f = " ; " ; 
 
 v a r   X ; 
 
 
 
 f u n c t i o n   A A ( Z , u s e r n a m e , a k , l a s t D a y s , w a t e r m a r k T e x t , i ) 
 
 { 
 
 t h i s . Z = Z ; 
 
 t h i s . u s e r n a m e = u s e r n a m e ; 
 
 t h i s . a k = a k ; 
 
 t h i s . l a s t D a y s = l a s t D a y s ; 
 
 t h i s . w a t e r m a r k T e x t = w a t e r m a r k T e x t ; 
 
 t h i s . i = i ; 
 
 t h i s . q A = f u n c t i o n ( ) 
 
 { 
 
 v a r   a a = t h i s . t o S t r i n g ( ) ; 
 
 r e t u r n   b u ( t h i s . i , a a ) ; 
 
 } 
 
 t h i s . n A = f u n c t i o n ( ) 
 
 { 
 
 i f ( t h i s . a k = = n u l l | | t h i s . a k = = " " ) 
 
 r e t u r n   u n d e f i n e d ; 
 
 
 
 v a r   l = n e w   D a t e ( ) ; 
 
 v a r   V = n e w   D a t e ( l . g e t U T C F u l l Y e a r ( ) , l . g e t U T C M o n t h ( ) , l . g e t U T C D a t e ( ) , l . g e t U T C H o u r s ( ) , l . g e t U T C M i n u t e s ( ) , l . g e t U T C S e c o n d s ( ) ) ; 
 
 v a r   a j = ( t h i s . a k * 1 - ( f v ? V . g e t T i m e ( ) : l . g e t T i m e ( ) ) ) / a o ; 
 
 a j = M a t h . f l o o r ( a j ) 
 
 
 
 
 
 b g = a j + 1 ; 
 
 r e t u r n   a j + 1 ; 
 
 } ; 
 
 
 
 t h i s . i s E x p i r e d = f u n c t i o n ( u s e U T C ) 
 
 { 
 
 v a r   l = n e w   D a t e ( ) ; 
 
 v a r   V = n e w   D a t e ( l . g e t U T C F u l l Y e a r ( ) , l . g e t U T C M o n t h ( ) , l . g e t U T C D a t e ( ) , l . g e t U T C H o u r s ( ) , l . g e t U T C M i n u t e s ( ) , l . g e t U T C S e c o n d s ( ) ) ; 
 
 
 
 i f ( ( u s e U T C ? V . g e t T i m e ( ) : l . g e t T i m e ( ) ) > t h i s . a k ) 
 
 r e t u r n   t r u e ; 
 
 
 
 r e t u r n   f a l s e ; 
 
 } ; 
 
 
 
 t h i s . i s T a m p e r e d = f u n c t i o n ( ) 
 
 { 
 
 i f ( t h i s . Z ! = u n d e f i n e d & & t h i s . Z ! = " " ) 
 
 { 
 
 i f ( t h i s . Z ! = t h i s . q A ( ) ) 
 
 r e t u r n   t r u e ; 
 
 } 
 
 
 
 i f ( t h i s . l a s t D a y s ! = u n d e f i n e d & & t h i s . l a s t D a y s ! = " " ) 
 
 { 
 
 
 
 i f ( ( t h i s . n A ( ) - 1 ) > t h i s . l a s t D a y s ) 
 
 
 
 r e t u r n   t r u e ; 
 
 } 
 
 
 
 r e t u r n   f a l s e ; 
 
 } ; 
 
 
 
 t h i s . s a v e = f u n c t i o n ( ) 
 
 { 
 
 i f ( R . f A ! = " " ) 
 
 D A ( R . h A + R . f A , t h i s . q A ( ) + t h i s . t o S t r i n g ( ) , t r u e ) ; 
 
 e l s e   
 
 D A ( R . b , t h i s . q A ( ) + t h i s . t o S t r i n g ( ) , t r u e ) ; 
 
 } ; 
 
 
 
 t h i s . t o S t r i n g = f u n c t i o n ( ) 
 
 { 
 
 v a r   a a = f ; 
 
 a a + = t h i s . u s e r n a m e = = n u l l ? " " : e s c a p e ( t h i s . u s e r n a m e ) ; 
 
 a a + = f ; 
 
 a a + = t h i s . a k = = n u l l ? " " : t h i s . a k ; 
 
 a a + = f ; 
 
 a a + = t h i s . l a s t D a y s = = n u l l ? " " : t h i s . l a s t D a y s ; 
 
 a a + = f ; 
 
 a a + = t h i s . w a t e r m a r k T e x t = = n u l l ? " " : t h i s . w a t e r m a r k T e x t ; 
 
 r e t u r n   a a ; 
 
 } ; 
 
 } 
 
 
 
 f u n c t i o n   T ( W ) 
 
 { 
 
 t r y 
 
 { 
 
 v a r   s c r i p t = " g l o b a l . " + W ; 
 
 r e t u r n   e v a l ( s c r i p t ) ; 
 
 } 
 
 c a t c h ( c r ) 
 
 { 
 
 i f ( m A ( c r . t o S t r i n g ( ) ) ) 
 
 { 
 
 i f ( G A = = M A . U A ) 
 
 k A ( " E r r o r   o c c u r r e d   w h e n   g e t   c o o k i e .   I n v a l i d   s e c u r i t y   m e s s a g e   m o d e .   E x c e p t i o n :   " + c r . t o S t r i n g ( ) ) ; 
 
 
 
 r e t u r n   r A ( W ) ; 
 
 } 
 
 
 
 i f ( U ( ) = = " " ) 
 
 k A ( " E r r o r   o c c u r r e d   w h e n   g e t   c o o k i e .   M a c h i n e   I d   n o t   f o u n d .   E x c e p t i o n :   " + c r . t o S t r i n g ( ) ) ; 
 
 e l s e   
 
 f j ( " T h e r e   i s   a   p r o b l e m   w i t h   t h i s   p r o t e c t e d p d f   d o c u m e n t .   I t   m a y   b e   d a m a g e d .   P l e a s e   c o n t a c t   t h e   p u b l i s h e r   f o r   a   c l e a n   f i l e . \ n \ n M e s s a g e   c o d e :   0 5 9 " ) ; 
 
 } 
 
 } 
 
 
 
 f u n c t i o n   r A ( W ) 
 
 { 
 
 v a r   w = 0 ; 
 
 v a r   s c r i p t = " " ; 
 
 v a r   j A = " " ; 
 
 
 
 w h i l e ( w < p A ) 
 
 { 
 
 j A = W + " _ " + w . t o S t r i n g ( ) ; 
 
 s c r i p t = " g l o b a l . " + j A ; 
 
 t r y 
 
 { 
 
 
 
 s A ( 2 0 0 ) ; 
 
 r e t u r n   e v a l ( s c r i p t ) ; 
 
 } 
 
 c a t c h ( c r ) 
 
 { 
 
 i f ( m A ( c r . t o S t r i n g ( ) ) ) 
 
 w + + ; 
 
 e l s e 
 
 { 
 
 k A ( " E r r o r   o c c u r r e d   w h e n   g e t   c o o k i e :   c o o k i e   n a m e :   " + s c r i p t + " ,   e x c e p t i o n :   " + c r . t o S t r i n g ( ) ) ; 
 
 b r e a k ; 
 
 } 
 
 } 
 
 } 
 
 } 
 
 
 
 f u n c t i o n   D A ( W , v a l , o v e r r i t e O l d ) 
 
 { 
 
 t r y 
 
 { 
 
 
 
 v a r   s c r i p t = " i f   ( g l o b a l . " + W + " = =   n u l l   | |   o v e r r i t e O l d ) { g l o b a l . " + W + "   =   n e w   O b j e c t ( ) ;   g l o b a l . s e t P e r s i s t e n t ( ' " + W + " ' ,   t r u e ) ; g l o b a l . " + W + "   =   ( t y p e o f   v a l   ! =   ' s t r i n g '   ?   v a l   :   ' " + v a l + " ' ) ; } " ; 
 
 e v a l ( s c r i p t ) ; 
 
 } 
 
 c a t c h ( c r ) 
 
 { 
 
 i f ( m A ( c r . t o S t r i n g ( ) ) ) 
 
 { 
 
 i f ( G A = = M A . U A ) 
 
 k A ( " E r r o r   o c c u r r e d   w h e n   s a v e   c o o k i e .   I n v a l i d   s e c u r i t y   m e s s a g e   m o d e .   E x c e p t i o n :   " + c r . t o S t r i n g ( ) ) ; 
 
 
 
 t A ( W , v a l , o v e r r i t e O l d ) ; 
 
 r e t u r n ; 
 
 } 
 
 
 
 i f ( U ( ) = = " " ) 
 
 k A ( " E r r o r   o c c u r r e d   w h e n   s a v e   c o o k i e .   M a c h i n e   I d   n o t   f o u n d .   E x c e p t i o n :   " + c r . t o S t r i n g ( ) ) ; 
 
 e l s e   
 
 f j ( " T h e r e   i s   a   p r o b l e m   w i t h   t h i s   p r o t e c t e d p d f   d o c u m e n t .   I t   m a y   b e   d a m a g e d .   P l e a s e   c o n t a c t   t h e   p u b l i s h e r   f o r   a   c l e a n   f i l e . \ n \ n M e s s a g e   c o d e :   0 5 8 " ) ; 
 
 } 
 
 } 
 
 
 
 f u n c t i o n   t A ( W , v a l , o v e r r i t e O l d ) 
 
 { 
 
 v a r   w = 0 ; 
 
 v a r   s c r i p t = " " ; 
 
 v a r   j A = " " ; 
 
 
 
 w h i l e ( w < p A ) 
 
 { 
 
 t r y 
 
 { 
 
 j A = W + " _ " + w . t o S t r i n g ( ) ; 
 
 s c r i p t = " i f   ( g l o b a l . " + j A + " = =   n u l l   | |   o v e r r i t e O l d ) { g l o b a l . " + j A + "   =   n e w   O b j e c t ( ) ;   g l o b a l . s e t P e r s i s t e n t ( ' " + j A + " ' ,   t r u e ) ; g l o b a l . " + j A + "   =   ( t y p e o f   v a l   ! =   ' s t r i n g '   ?   v a l   :   ' " + v a l + " ' ) ; } " ; 
 
 e v a l ( s c r i p t ) ; 
 
 b r e a k ; 
 
 } 
 
 c a t c h ( c r ) 
 
 { 
 
 i f ( m A ( c r . t o S t r i n g ( ) ) ) 
 
 w + + ; 
 
 e l s e 
 
 { 
 
 k A ( " E r r o r   o c c u r r e d   w h e n   s a v e   c o o k i e :   c o o k i e   n a m e :   " + j A + " ,   e x c e p t i o n :   " + c r . t o S t r i n g ( ) ) ; 
 
 b r e a k ; 
 
 } 
 
 } 
 
 } 
 
 } 
 
 
 
 f u n c t i o n   Y ( W ) 
 
 { 
 
 t r y 
 
 { 
 
 
 
 e v a l ( " i f   ( g l o b a l . " + W + "   ! =   n u l l ) { d e l e t e   g l o b a l . " + W + " ; } " ) ; 
 
 i f ( ! E A ) 
 
 o A ( W ) ; 
 
 } 
 
 c a t c h ( c r ) 
 
 { 
 
 
 
 i f ( m A ( c r . t o S t r i n g ( ) ) ) 
 
 { 
 
 i f ( G A = = M A . U A ) 
 
 k A ( " E r r o r   o c c u r r e d   w h e n   d e l e t e   c o o k i e .   I n v a l i d   s e c u r i t y   m e s s a g e   m o d e .   E x c e p t i o n :   " + c r . t o S t r i n g ( ) ) ; 
 
 
 
 o A ( W ) ; 
 
 r e t u r n ; 
 
 } 
 
 
 
 i f ( U ( ) = = " " ) 
 
 k A ( " E r r o r   o c c u r r e d   w h e n   d e l e t e   c o o k i e .   M a c h i n e   I d   n o t   f o u n d .   E x c e p t i o n :   " + c r . t o S t r i n g ( ) ) ; 
 
 e l s e   
 
 f j ( " T h e r e   i s   a   p r o b l e m   w i t h   t h i s   p r o t e c t e d p d f   d o c u m e n t .   I t   m a y   b e   d a m a g e d .   P l e a s e   c o n t a c t   t h e   p u b l i s h e r   f o r   a   c l e a n   f i l e . \ n \ n M e s s a g e   c o d e :   0 6 2 " ) ; 
 
 } 
 
 } 
 
 
 
 f u n c t i o n   o A ( W ) 
 
 { 
 
 v a r   w = 0 ; 
 
 v a r   s c r i p t = " " ; 
 
 v a r   j A = " " ; 
 
 
 
 w h i l e ( w < p A ) 
 
 { 
 
 t r y 
 
 { 
 
 j A = W + " _ " + w . t o S t r i n g ( ) ; 
 
 e v a l ( " i f   ( g l o b a l . " + j A + "   ! =   n u l l ) { d e l e t e   g l o b a l . " + j A + " ; } " ) ; 
 
 
 
 w + + ; 
 
 } 
 
 c a t c h ( c r ) 
 
 { 
 
 i f ( m A ( c r . t o S t r i n g ( ) ) ) 
 
 w + + ; 
 
 e l s e 
 
 { 
 
 k A ( " E r r o r   o c c u r r e d   w h e n   d e l e t e   c o o k i e :   c o o k i e   n a m e :   " + j A + " ,   e x c e p t i o n :   " + c r . t o S t r i n g ( ) ) ; 
 
 b r e a k ; 
 
 } 
 
 } 
 
 } 
 
 } 
 
 
 
 f u n c t i o n   Q A ( o f f l i n e C o o k i e ) 
 
 { 
 
 t r y 
 
 { 
 
 i f ( o f f l i n e C o o k i e ! = n u l l | | o f f l i n e C o o k i e ! = " " ) 
 
 { 
 
 v a r   s p l i t e d C o o k i e = o f f l i n e C o o k i e . s p l i t ( f ) ; 
 
 i f ( s p l i t e d C o o k i e . l e n g t h ! = 5 ) 
 
 t h r o w   " i n c o r r e c t   o f f l i n e   c o o k i e   l e n g t h " ; 
 
…
stream_199_off000cb018.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xCB018 54744 bytes
SHA-256: 11ec8c7a6b07f02251cebd949f23297ccd9be76df8dab5e53cae906d67cdaef7
stream_211_off00061cb6.js decompressed-pdf-stream PDF FlateDecoded stream at offset 0x61CB6 33304 bytes
SHA-256: 94a0123fed886135b90de4b75a40c09b8b77e41716e940dfd45f2e856349b26f
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 10 eval/decoder/string-building token(s).
icc_00_off0011bead.icc pdf-icc-profile PDF ICC profile at offset 0x11BEAD 3144 bytes
SHA-256: 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
font_00_sfnt_off00008c2a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x8C2A 95674 bytes
SHA-256: cf348fedd852889da8a68c6bdb0a4de6dcc15902a81428dea787d0ba78eb8bbd
font_01_sfnt_off00018fd8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x18FD8 94351 bytes
SHA-256: 1626e6329f65d0d35cdf751ec668ac4b8800d726707d01e7810bb8297d789dee
font_02_cff_off000c2b8a.bin pdf-font-stream PDF embedded font (cff) at offset 0xC2B8A 1618 bytes
SHA-256: 1f1f2690775f40d5ab31dbe643609894d32fff64d143e457ac3022bf8b93a860
font_03_cff_off000c31b9.bin pdf-font-stream PDF embedded font (cff) at offset 0xC31B9 4099 bytes
SHA-256: 1b79cd6586b8f06aeb666c7732ca02eff158bcd12ab3eff93f788077053ab954
font_04_cff_off000c408f.bin pdf-font-stream PDF embedded font (cff) at offset 0xC408F 2767 bytes
SHA-256: f031db92218410d7eaf6d7481e4c27b42ddd3bc465ba3b6c2672aeda128ee8f3
font_05_cff_off000c4ab5.bin pdf-font-stream PDF embedded font (cff) at offset 0xC4AB5 3263 bytes
SHA-256: 7b32728abd13a796ecffa67d92148598622484e8d233e414e6f94e37bb16c53e
font_06_sfnt_off000f3564.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xF3564 70768 bytes
SHA-256: 536b6d19a5461bbf679273f223dbf2e42bef260764210b63490394e3c5bfd2d8
javascript_obj0109_002.js pdf-javascript-stream PDF /JS object 109 at offset 0x291C 63 bytes
SHA-256: 8d8d39c240d76d5744f15072c9fd5e73576a074152a91506fa690a6af2163e16
Preview script
First 1,000 lines of the extracted script
/�5�A�"��m� YS907 ���hA�MS���4OE ���U���;1BřW -nU ��?Oy(k��
javascript_obj0108_003.js pdf-javascript-stream PDF /JS object 108 at offset 0xAD58 63 bytes
SHA-256: 3d1cfa25b5c576a1bb87a95a8b8086e54676468ec56ee912c199cc6979806d8d
Preview script
First 1,000 lines of the extracted script
yP����s  �% 8��( �k���,�1o �mC� O� ����ػ=���(���&�  �v\�ַ .�
javascript_obj0107_004.js pdf-javascript-stream PDF /JS object 107 at offset 0xB0CF 63 bytes
SHA-256: e657a713bd3a7215c04dd2b4d3d4c8a66b290fb0c2eb00da70fd8da0578c1779
Preview script
First 1,000 lines of the extracted script
�aB@��[	��;��K`k&d9 >��R�v�����
�
O�1 ʹj6� �u �=mM�p�j�#J A�X
javascript_obj0106_005.js pdf-javascript-stream PDF /JS object 106 at offset 0xB444 63 bytes
SHA-256: b023d97a741f81f0e49e988ffe8eeaa1a40ded1ee9f3e7ea5194eb5d3effec6a
Preview script
First 1,000 lines of the extracted script
�Z6/H"e���t�,�Ld��b1� ʼn<� 5F| #VK)Tױ�#��<]���c>�=-��w X ���`�
javascript_obj0105_006.js pdf-javascript-stream PDF /JS object 105 at offset 0xB7B7 63 bytes
SHA-256: 48925e8f1e08482784435bce05d78a7732f62f1011324f678179318da4a2e72b
Preview script
First 1,000 lines of the extracted script
��0�o� 8� wd�R�� �o7�  6$p�6�
ĕ
o���+��  L�.�u\�B<�)��!�$��g�
javascript_obj0104_007.js pdf-javascript-stream PDF /JS object 104 at offset 0xBB2D 63 bytes
SHA-256: 7dccc3857e70dd9f39b9a4df68694ae09a1f4986f2d0333a7229faa14e2b05a8
Preview script
First 1,000 lines of the extracted script
������� ����n1�A ���� ��t�d ��0����%|���z1[���t�;��\F�	c��? �
javascript_obj0103_008.js pdf-javascript-stream PDF /JS object 103 at offset 0xBEA2 63 bytes
SHA-256: 18ff7fe3ac262efc1260877ca0b39e03d72caf4f5673c76699e6895e4119dde3
Preview script
First 1,000 lines of the extracted script
�q.7X�jBS��n0�� 1 �����I��4�|Ħo�$�+��Gޖ�'¶��D�vu�  ��n)t-
javascript_obj0102_009.js pdf-javascript-stream PDF /JS object 102 at offset 0xC215 63 bytes
SHA-256: 3ca849979ac3dd3c7101a6c6969d05daae6d41da12a3f9897c4ac531ddb1aa81
Preview script
First 1,000 lines of the extracted script
�y��} A�1���q,��n  ]4�2 �x�@h }梕ݪ�= Y���c#
�( C,M�	 �1�6� g�
javascript_obj0101_010.js pdf-javascript-stream PDF /JS object 101 at offset 0xC58D 63 bytes
SHA-256: 4db7cadafc5afbd8a845f237f647ac49d58c49a0d67e461d4f98d318a09462bd
Preview script
First 1,000 lines of the extracted script
��QwSj���b�!
�Ô� �Ji�v2�/L �C B� G� 1���L ɲ� �l�˸�Lc�U,|�G
javascript_obj0100_011.js pdf-javascript-stream PDF /JS object 100 at offset 0xC901 63 bytes
SHA-256: 79ddbee2ffba85cfda140578832da191f4c3bd6a598bc552a86d14547b7f2a23
Preview script
First 1,000 lines of the extracted script
�J�*}b#��gq�v��}9zt��
 ���+J�b �й� ���^��	/��TO��"" r�   �L��
javascript_obj0099_012.js pdf-javascript-stream PDF /JS object 99 at offset 0xCC75 63 bytes
SHA-256: 1e9ca928d32b2df319cf6b266121f49aaa71079b76ce60b5e1b352fe1a9c3d00
Preview script
First 1,000 lines of the extracted script
��i��~�����IRo>�;�  ����(� �{ � ���G��C i �$���BrB�g��A�OA�����
javascript_obj0098_013.js pdf-javascript-stream PDF /JS object 98 at offset 0xCFE8 63 bytes
SHA-256: a8995aaa951ebf154fbdedf8cd10c88db73c89d0c557b3cd922e010e944e59a7
Preview script
First 1,000 lines of the extracted script
[�"3n� Jӧ�x��,��< ���\_:X�<6�!XO�膔�jw,X�� ��< pg#��j�_V )1 �
javascript_obj0097_014.js pdf-javascript-stream PDF /JS object 97 at offset 0xD35A 63 bytes
SHA-256: 6e3c22bdf03e7967b12a05e5b6b2b7263a72e9fc0fad938bbde9fa7baf7f11e2
Preview script
First 1,000 lines of the extracted script
���k�^���i��L�,s��d����n�}�_ ,�8�Ku&�\gU�PC fs 9�g>�,`��01�)  O
javascript_obj0096_015.js pdf-javascript-stream PDF /JS object 96 at offset 0xD6CC 63 bytes
SHA-256: bcabf61cb70255d7c7b3959aa420c7163641b070fed2eadb4eb1c07616f218f3
Preview script
First 1,000 lines of the extracted script
$���EZ�\��VȔ�߬ Z���9� �� �[����9�� �
  �)p �;����kC�b
 %�+^
javascript_obj0095_016.js pdf-javascript-stream PDF /JS object 95 at offset 0xDA41 63 bytes
SHA-256: 311a3d97b64b38869949a94b93bd51db3c11dda9c3d8214be67412f916ca3f62
Preview script
First 1,000 lines of the extracted script
I�4 �q W�_~J~  Bs4�0T`_���U� �l O�d�"�*����PI���-!4o��̠P W�
javascript_obj0094_017.js pdf-javascript-stream PDF /JS object 94 at offset 0xDDB4 63 bytes
SHA-256: 43e7da9a37fd5d561afdf43ec51b953ef940fd63408502cff796e9ac5341b2ce
Preview script
First 1,000 lines of the extracted script
�0AA � �
 7�� j� M ����/␐P��ᰄ~ .�� �/0���ά#k�HD�0� ɨ��
javascript_obj0093_018.js pdf-javascript-stream PDF /JS object 93 at offset 0xE128 63 bytes
SHA-256: e1ffadee36f5f222a0b5bedf11fa0e3019744c2b8a49bc0e1d1e229133848b88
Preview script
First 1,000 lines of the extracted script
�^� �#]G< ��� ��,f`  �f���/~�� �B�?��p��v� �� TS�y�$  J����
javascript_obj0092_019.js pdf-javascript-stream PDF /JS object 92 at offset 0xE498 63 bytes
SHA-256: b9dc851c424608d3397380d24adbb7c4f98aafe3544d62ee6a193f9f2124d7ea
Preview script
First 1,000 lines of the extracted script
�ÿ��O�X-�א�s������8H��+Ov�(1m����2/���T��`ew�: � �� *� :~�V
javascript_obj0091_020.js pdf-javascript-stream PDF /JS object 91 at offset 0xE809 63 bytes
SHA-256: 11b0217d8f28b85cc79fcb1d2cbcfa1ff8c9f1467ad4bb81215bdc64e5324500
Preview script
First 1,000 lines of the extracted script
�>��H��a5�8�mvM�  �Q� � v�?b� �T9ᓲWy�i�k��6�4�I � ��u8��>�+2#
javascript_obj0090_021.js pdf-javascript-stream PDF /JS object 90 at offset 0xEB79 63 bytes
SHA-256: 7cf0da5c2eccde5da1e4e7ed515b68fd29f81fdcfaa8180b61afc3d57a9808fa
Preview script
First 1,000 lines of the extracted script
~$��1>����Q/�V   AT�� ���]�ѱ  8�O%-�K��Z%W< ��@
���ج�������`

Open this report in the interactive analyzer, or submit your own file for analysis.