PDF static analysis report

Static analysis result for SHA-256 286319cc2d4868a9…

CLEAN

PDF

1.02 MB Created: 2017-07-17 13:27:06 -05:00 Authoring application: Microsoft® Word 2016 First seen: 2020-08-10
MD5: 977451188ea60b9f62d96abaf82fbf8b SHA-1: 4be594942053699d7a1965d8c38d8641144c6e56 SHA-256: 286319cc2d4868a96385136816627756b31506e40c930f9e59c96da6b71c4ace
24 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 3

  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.iee.edu.pe/ PDF link annotation
    • http://ocsp.verisign.com0In extracted file (javascript_obj-001_000.js)
    • http://www.microsoft.com/truetype/fonts/wingdings/YouIn extracted file (javascript_obj-001_000.js)
    • http://crl.verisign.com/ThawteTimestampingCA.crl0In extracted file (javascript_obj-001_000.js)
    • http://crl.verisign.com/tss-ca.crl0In extracted file (javascript_obj-001_000.js)
    • http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl0OIn extracted file (javascript_obj-001_000.js)
    • http://www.microsoft.com/pki/certs/CodeSignPCA2.crt0In extracted file (javascript_obj-001_000.js)
    • http://www.microsoft.com/typographyIn extracted file (javascript_obj-001_000.js)
    • http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (stream_023_off000baa1f.bin)
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn extracted file (stream_023_off000baa1f.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In extracted file (stream_023_off000baa1f.bin)
    • http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0ZIn extracted file (stream_023_off000baa1f.bin)
    • http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0In extracted file (stream_023_off000baa1f.bin)
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn extracted file (stream_023_off000baa1f.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In extracted file (stream_023_off000baa1f.bin)
    • http://www.microsoft.com/typography/0In extracted file (stream_023_off000baa1f.bin)
    • http://www.microsoft.com/typography/ctfontshttp://fontfabrik.comYouIn extracted file (font_00_sfnt_off00088d79.bin)
    • http://www.microsoft.com/typography/fonts/default.aspxIn extracted file (font_00_sfnt_off00088d79.bin)
    • http://crl.microsoft.com/pki/crl/products/CSPCA.crl0HIn extracted file (font_01_sfnt_off0009c1f7.bin)
    • http://www.microsoft.com/pki/certs/CSPCA.crt0In extracted file (font_01_sfnt_off0009c1f7.bin)
    • http://crl.microsoft.com/pki/crl/products/tspca.crl0HIn extracted file (font_01_sfnt_off0009c1f7.bin)
    • http://www.microsoft.com/pki/certs/tspca.crt0In extracted file (font_01_sfnt_off0009c1f7.bin)
    • https://www.verisign.com/repository/CPS��In extracted file (font_09_sfnt_off001008d9.bin)
    • https://www.verisign.comIn extracted file (font_09_sfnt_off001008d9.bin)
    • https://www.verisign.com/repository/verisignlogo.gif0��In extracted file (font_09_sfnt_off001008d9.bin)
    • https://www.verisign.com/CPS0bIn extracted file (font_09_sfnt_off001008d9.bin)
    • http://www.microsoft.com/truetype/0In extracted file (font_09_sfnt_off001008d9.bin)

Extracted artifacts 13

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj-001_000.js pdf-javascript-stream PDF /JS object -1 at offset 0xF6D74 28148 bytes
SHA-256: 2428df7e6a90edacd13c8fa289741db4114ab71d9b49ef4366576a244d44c684
Preview script
First 1,000 lines of the extracted script
DSIG?��   R�   XLTSH   �   �   �OS/21��   �   VVDMXm�uV   �   �cmap_�i�  !    Zcvt �/��  *    :fpgm��;�  "d   _gasp # 
  R�    glyf��b�  /T   �hdmx��|R   �   hhead� ��   ,   6hhea  
6   d   $hmtx9D �       �loca>�=   5�   �maxp   �   �    nameUY_�  7�   �post�; d  Rh    prepO�'_  &�   T        �5�W_ <�        ����    �B�h  �P
� 1                 1�P   �  ��
�                 �     � ]           / 9   � _         �     � �     � �     d                              MS   @� �� + � 1 1 ��            �             > J	( �                                                                                                                                                                         � �                                 I �                                                                     � �                                                                                                                                                                                                                                                 ! �                                                                                                                                                                                       �                                                                                                                                                                                                                                                 � �    �� 	  �� 
 	��   
��    �� 
  ��    ��   
��    ��    ��    ��    ��    ��    ��    ��    ��    ��    ��    ��    ��    ��    ��    ��    ��    �� !  �� "  �� #  �� $  �� % !�� & "�� ' #�� ( $�� ) %�� * %�� + &�� , '�� - (�� . )�� / *�� 0 +�� 1 ,�� 2 -�� 3 -�� 4 .�� 5 /�� 6 0�� 7 1�� 8 2�� 9 3�� : 4�� ; 5�� < 6�� = 6�� > 7�� ? 8�� @ 9�� A :�� B ;�� C <�� D =�� E >�� F >�� G ?�� H @�� I A�� J B�� K C�� L D�� M F�� N F�� O F�� P G�� Q H�� R I�� S J�� T K�� U L�� V M�� W N�� X N�� Y O�� Z P�� [ Q�� \ R�� ] S�� ^ T�� _ U�� ` V�� a V�� b W�� c X�� d Y�� e Z�� f [�� g \�� h ]�� i ^�� j _�� k _�� l `�� m a�� n b�� o c�� p d�� q e�� r f�� s g�� t g�� u h�� v i�� w j�� x k�� y l�� z m�� { n�� | o�� } o�� ~ p��   q�� � r�� � s�� � t�� � u�� � v�� � w�� � w�� � x�� � y�� � z�� � {�� � |�� � }�� � ~�� �  �� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ��� � ���       � 
     
                                                   	                 
                                                            
                                                                                             	                                             
        	                                                                                                                                                                        
   
 
                                                    
                                                                                                                                                                                                                                                                                                                  
                                                                                                                                                    
                                                                                                                                                                          	 
                                                      
                                                                                                                                                                          
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              !     !                                                                                                                                                                                                                             %    !%                                          $                                                                                                                                                                                 !&    "&                                          %                                                                                                                                                                                 %*    &*                                          )                          #                                                            !                                                                                         *0    +0                                          /        !                 (                                                            %                                                                                         .5  # /5                                          3        $                 ,                                                            )                                                                                         29  & 49                                          8        '                 /                                                            -                                                                                         6>  ) 8>                                          <        *                 3                                                            0                                                                                         :B  , <B                                          @        .                 7                                                            4                                                                                         CM" 2 EM                                          J        5                 ?                                                            <                                                                                         KV& 8 MV                                          S        ;                 G                                                            C                                                                                         S_* > V_                                          \        A                 O                                                            J                                                                                         \i. E _i                                          f        H                 W                                                            R                                                                                         dr2 K gr                                          o        O                 _                                                            Y                                                                                                                                                                                                0                      K             �                                                                                                                                         9      @          �"�M�d�r����  �!�M�d�r���� � � �   =                @78743210/.-,+*)('&%$#"!                   
  
	         ,E#F` �&`� &#HH-,E#F#a �&a� &#HH-,E#F`� a �F`� &#HH-,E#F#a� ` �&a� a� &#HH-,E#F`�@a �f`� &#HH-,E#F#a�@` �&a�@a� &#HH-,   < <-, E# ��D# � ZQX# ��D#Y ��QX# �MD#Y � &QX# �
D#Y!!-,  E hD � ` E�Fvh�E`D-, � 
C#Ce
-, �
 C#C -, �F#p� F> �F#p� FE:�   
-,E�J#DE�I#D-, E� %Ead�PQXED !!Y-,� Cc#b� #B� +-, E� C`D-, � C� Ce
-, i�@a� � �,����  b`+ d#da\X� aY-,E� +�G#D�Gz� -,� �TX�	C�  TX� J���I�DDYY-,� CX�E� +� #D� z�  �E i � #D��� ��QX� +� #D� z� !� z�YY -,-,KRX!ED #E� � %ERXD !!YY-,  /-, � %E�I#DE�J#DEe#E � %`j �	#B#h�j`a � �� Ry!� J@��� JE �TX#!�? #YaD �  �Ry�I@ IE �TX#!�? #YaD-,�  C#C -,�  C#C -,� 
C#C -,� 
C#Ce -,�  C#Ce -,�  C#Ce -,KRXED !!Y-,  � %#I�@`� c � RX#� %8#� %e8 �c8 !!!!!Y -,Ei�	C`� :-, � % # �� � `#��-, � % # �� � a#��-, � % � ��-, � `   < <-, � a   < <-,�++�**-, � C� C -,>�**-,5-,v�K#p  �KE � PX� aY:/ -,!! d#d��@ b-,!��QX d#d��  b � @/+Y� `-,!��QX d#d�� Ub � �/+Y� `-, d#d��@ b`#!-,�      � &� &� &� &    Eh:�  -,�      � &� &� &� &    Ehe:�  -,E# E �  %�PX&a�� &`��YD-,F#F`��F# F�`�a���b#  #��KK�pE` � PX� a���� �@�Yh :-,�3+�**-,� CX   Y-,� CX   Y- @  FF      @H � 6�H2 � ��H2 � ��H2 � ��H2 � ��H2 � ��H2 � ��H2 � ��H2 � ��H2 � ��H2 � I�H2 � H�H2 � G�H2 � B�H2 � @�H2 � >�H2 � <�H2 � 9�H2 �  �H2 �  �H2 �  �H2 �  @OH2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 cH2 _H2 � ��H2 � ��H2 � ��H2 � ��H2 � ��H2 � ��H2 � ��H2 � D�H2 � A�H2 � =�H2 � 8�H2 �  �H2 �  �H2 �  �H2 �  @@H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 �H2 yH2 dH2 	 	7�� v@I �� �� �� �o �l �f �e �\ �Z �Y �X $ "                       
            �  K KSB K��c Kb ��S#� 
QZ� #B � K KTB �8+� ��  TX� ��  �� � CX�   ��� �   ���YY  +++++++++++++++++++ +++++++++++++KPy�   7     3�  � +++KSy� � 7   � 3� �� +++  �P 2Ka�`  +++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++ EiSB KPX�  BYC\X�  BY�  
 CX` !YB  p>� CX�;! ~ �   �  +Y� #B�
#B� CX�-A-A �      +Y� #B� #B� CX� ~;! � �    +Y� #B� #B                                                                                                                                                  �                         1 1 c X � Z 1 � b 1 � 1 d 1 � � � � 1 1 c 3 c � 1 J � � 2 r 1 1 3 | 1 D � � � 1 1 < b � b c � � > D c �   1 c � � 1 c } � � � � � � �   ? J J c � � � � � � � 1 1 � � � �   { � � � � � � > � � � ( ( � � � P �   < b c k { � � � � �   > � � �   �   1 J J c � � � � � ( ( ( ( M l o r � � �   5 P o � � � � Y > �   7 l           D J J N S b b q � � � � � � � �   Q T h � � � � � � � - ? � � � � `   � k � � � U �             % 4 < E J Q c d j z z z { { | } � � � � � � � � � � � � � �     ( ( 7 9 W W Y Y r ~ � � � � � � � � � � � � � � �   P P P P l o � � � � � � � � � � � �   	 _ b s � � � � H � � � �   � �       ] � � � 	 k � � � �
.   % , < J W c y | | � � � � � � � � � � � � � � �   ( ( ( ( 9 D F U U Y Z ` m s x � � � � � � � � � � � � � � � � � � �     + P P P P P S W k � � � � � � � � � � � �           E F F T [ x � � � � �     = > U ] � � � � �     % 5 : : h n ~ � � � � �           ; � � � � �     " " . 1 S l v � � � �	A	i	r
, � 0 �               � � � ] /   � { q   0   c �   l	i � = > S ( _ � � 	 K � W [ l b   � � s � � F � � v � ` � � % ; � � � � � y ` � � � � h . A � � ? � r Q � � ^ 0 t * � � � v   � � 
 1 �   � � � � E ~ ) (   � � 5     ( "             �   � �     #@  �  � �   �  � � �  /�� � ?�� �103 ! %! !�  ��  �  ��8� �    J�� � �         # ; �@(   	     !#     ; 9  4 2  $%&- + 2�  9h � 5�++ � �@,    	     !#   & /   $%4; 6   (t -  t6  t/� � 4�66 �    /�9/���9 �99 �99   9  99   9 /�9/��99�   9  9  9   910         %&' 632   &'    &'       &'  %654&#" 654&#" 654&#" J J _� �� m�%  #��   (  =! �!. A  �   
 <  � 9 7D
  G<   G? 
-3% �  G���� kP�øC�B &
 {  �8 0 ~! �       y+ ��H\<   #9&  "6)  '    �   � �   3 : G T \ �@ 8>5 YU68: N4 U� 5�S    > Y� 7� /�I� 6@ N�*C�
 S
�* W  45:W 6 [' $2  Q [� B@ 2 x x@$x'�QF Kx@Q2 6� ! -/� 9�99/��/��/�  99  9  9  9/ ?�99 � ���/� 9/�99  9  99//10  '&''&54632              632             #"&547%654 7  #"'   3254&#"         32654#"%254#"   ��K u��yV{]\   r  G j  ���O8  V   ���Vn� =h C� �{p-4� 1B)P�Y5M N�i@@��?& e110 gV-<3[g�QpSSn /   H4
 �� � 7�G!   S	 1���WCWk�A4 1\��2     pR�J3U��B1((�kH�////   ��� � � ( + . 1 4 7 : = �@- )*,0 /     '+.1234 % 5689;<    7:=  � %�   /� �@    /012346789: 5-)*+;<= ,   	 � O   2@ '� . ,t-- 5� U 	/�99/�99/���  9   9   9// /�99/�/� 9  9   9   9/10      #" 5 %56754632   327632   #"''&#"   7  3         %    '  l f������ f2J�a��5�y)=	 .mF��9�X�A  (�<3  H)�� K �� X ��30J�/� h������� 6� X��   g��.�  %'<�0��  L!�� D�� % �� / ��)���   �}  t    � � �     %�   
    � b�       � S 
/� 9 /� 9/10        &''&&'632     �#���J\!
, <g@lZM^ �    2��b��2@ /kA�� r�F       � � � �     j�      A
 �     � 
   �   
  @	        
� 9   ;�   A  9   ;   e     e   c  /�� ���9 ��9  9  9 /�9� �/� 91075!   !5!&54 32    ! !5654&#"   � 7�>�� �x  ��  x ���� ����� F��{��  �{��h������   �   u �   	 ;@
    � �   � J@
 �     � � 	 � H� � /��9 �� 9 ?��9 ��  910% !   7!   M�� c�  �c =��b  ����    & & & & � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � y y y y y y y y y � � � � � � � � � � � � � � � � � �                                                                                                                           R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R     % �         2           	 6           �           �         	 6           �                     �             �       
 � 2         2 �       
 M �           )           5     	   d E     	     �     	           	   6       	     �     	     7     	   " O     	     q     	   ( q     	 
 X �     	   d �     	 
 � �     
     �           �           �           �           �           �           �           �     $     �           �     
     �� 2006 Microsoft Corporation. All Rights Reserved.The Wingdings fonts were designed by Kris Holmes and Charles Bigelow in 1990 and 1991. 

The fonts were originally named Lucida Icons, Arrows, and Stars to complement the Lucida text font family by the same designers. Renamed, reorganized, and released in 1992 as Microsoft Wingdings, the three fonts provide a harmoniously designed set of icons representing the common components of personal computer systems and the elements of graphical user interfaces. 

There are icons for PC, monitor, keyboard, mouse, trackball, hard drive, diskette, tape cassette, printer, fax, etc., as well as icons for file folders, documents, mail, mailboxes, windows, clipboard, and wastebasket. In addition, Wingdings includes icons with both traditional and computer significance, such as writing tools and hands, reading glasses, clipping scissors, bell, bomb, check boxes, as well as more traditional images such as weather signs, religious symbols, astrological signs, encircled numerals, a selection of ampersands and interrobangs, plus elegant flowers and flourishes. 

Pointing and indicating are frequent functions in graphical interfaces, so in addition to a wide selection of pointing hands, the Wingdings fonts also offer arrows in careful gradations of weight and different directions and styles. For variety and impact as bullets, asterisks, and ornaments, Windings also offers a varied set of geometric circles, squares, polygons, targets, and stars.Wingdings Regular: MS: 2006Version 5.00Wingdings-RegularWingdings is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Typographyhttp://www.microsoft.com/truetype/fonts/wingdings/You may use this font as permitted by the EULA for the product in which this font is included to display and print content.  You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. n o r m a l S t a n d a r d �   2 0 0 6   M i c r o s o f t   C o r p o r a t i o n .   A l l   R i g h t s   R e s e r v e d . T h e   W i n g d i n g s   f o n t s   w e r e   d e s i g n e d   b y   K r i s   H o l m e s   a n d   C h a r l e s   B i g e l o w   i n   1 9 9 0   a n d   1 9 9 1 .   
 
 
 
 T h e   f o n t s   w e r e   o r i g i n a l l y   n a m e d   L u c i d a   I c o n s ,   A r r o w s ,   a n d   S t a r s   t o   c o m p l e m e n t   t h e   L u c i d a   t e x t   f o n t   f a m i l y   b y   t h e   s a m e   d e s i g n e r s .   R e n a m e d ,   r e o r g a n i z e d ,   a n d   r e l e a s e d   i n   1 9 9 2   a s   M i c r o s o f t   W i n g d i n g s ,   t h e   t h r e e   f o n t s   p r o v i d e   a   h a r m o n i o u s l y   d e s i g n e d   s e t   o f   i c o n s   r e p r e s e n t i n g   t h e   c o m m o n   c o m p o n e n t s   o f   p e r s o n a l   c o m p u t e r   s y s t e m s   a n d   t h e   e l e m e n t s   o f   g r a p h i c a l   u s e r   i n t e r f a c e s .   
 
 
 
 T h e r e   a r e   i c o n s   f o r   P C ,   m o n i t o r ,   k e y b o a r d ,   m o u s e ,   t r a c k b a l l ,   h a r d   d r i v e ,   d i s k e t t e ,   t a p e   c a s s e t t e ,   p r i n t e r ,   f a x ,   e t c . ,   a s   w e l l   a s   i c o n s   f o r   f i l e   f o l d e r s ,   d o c u m e n t s ,   m a i l ,   m a i l b o x e s ,   w i n d o w s ,   c l i p b o a r d ,   a n d   w a s t e b a s k e t .   I n   a d d i t i o n ,   W i n g d i n g s   i n c l u d e s   i c o n s   w i t h   b o t h   t r a d i t i o n a l   a n d   c o m p u t e r   s i g n i f i c a n c e ,   s u c h   a s   w r i t i n g   t o o l s   a n d   h a n d s ,   r e a d i n g   g l a s s e s ,   c l i p p i n g   s c i s s o r s ,   b e l l ,   b o m b ,   c h e c k   b o x e s ,   a s   w e l l   a s   m o r e   t r a d i t i o n a l   i m a g e s   s u c h   a s   w e a t h e r   s i g n s ,   r e l i g i o u s   s y m b o l s ,   a s t r o l o g i c a l   s i g n s ,   e n c i r c l e d   n u m e r a l s ,   a   s e l e c t i o n   o f   a m p e r s a n d s   a n d   i n t e r r o b a n g s ,   p l u s   e l e g a n t   f l o w e r s   a n d   f l o u r i s h e s .   
 
 
 
 P o i n t i n g   a n d   i n d i c a t i n g   a r e   f r e q u e n t   f u n c t i o n s   i n   g r a p h i c a l   i n t e r f a c e s ,   s o   i n   a d d i t i o n   t o   a   w i d e   s e l e c t i o n   o f   p o i n t i n g   h a n d s ,   t h e   W i n g d i n g s   f o n t s   a l s o   o f f e r   a r r o w s   i n   c a r e f u l   g r a d a t i o n s   o f   w e i g h t   a n d   d i f f e r e n t   d i r e c t i o n s   a n d   s t y l e s .   F o r   v a r i e t y   a n d   i m p a c t   a s   b u l l e t s ,   a s t e r i s k s ,   a n d   o r n a m e n t s ,   W i n d i n g s   a l s o   o f f e r s   a   v a r i e d   s e t   o f   g e o m e t r i c   c i r c l e s ,   s q u a r e s ,   p o l y g o n s ,   t a r g e t s ,   a n d   s t a r s . W i n g d i n g s   R e g u l a r :   M S :   2 0 0 6 V e r s i o n   5 . 0 0 W i n g d i n g s - R e g u l a r W i n g d i n g s   i s   e i t h e r   a   r e g i s t e r e d   t r a d e m a r k   o r   a   t r a d e m a r k   o f   M i c r o s o f t   C o r p o r a t i o n   i n   t h e   U n i t e d   S t a t e s   a n d / o r   o t h e r   c o u n t r i e s .   M i c r o s o f t   T y p o g r a p h y h t t p : / / w w w . m i c r o s o f t . c o m / t r u e t y p e / f o n t s / w i n g d i n g s / Y o u   m a y   u s e   t h i s   f o n t   a s   p e r m i t t e d   b y   t h e   E U L A   f o r   t h e   p r o d u c t   i n   w h i c h   t h i s   f o n t   i s   i n c l u d e d   t o   d i s p l a y   a n d   p r i n t   c o n t e n t .     Y o u   m a y   o n l y   ( i )   e m b e d   t h i s   f o n t   i n   c o n t e n t   a s   p e r m i t t e d   b y   t h e   e m b e d d i n g   r e s t r i c t i o n s   i n c l u d e d   i n   t h i s   f o n t ;   a n d   ( i i )   t e m p o r a r i l y   d o w n l o a d   t h i s   f o n t   t o   a   p r i n t e r   o r   o t h e r   o u t p u t   d e v i c e   t o   h e l p   p r i n t   c o n t e n t . N o r m a l e N o r m a a l i S t a n d a a r d N o r m � l n e N a v a d n o         �8 d                                    ��                 D           <0� 8 	*�H��
   �� )0� %   1 0	  +      0a 
+    �7   �S0Q0, 
+    �7   � �  < < < O b s o l e t e > > >0!0	  +        U�y�嗙 �(�0�f��"{� �� �0� �0� -�      G� �ߍRFC��mH
1�0
 	*�H��
     0��1 0	  U    ZA1 0   U    Western Cape1 0   U    Durbanville1 0
  U 
  Thawte1 0   U    Thawte Certification1 0   U    Thawte Timestamping CA0  
031204000000Z 
131203235959Z0S1 0	  U    US1 0   U 
  VeriSign, Inc.1+0)  U   "VeriSign Time Stamping Services CA0� "0
 	*�H��
      �   0� 
 �   �ʲ��� �
}���u�N��� �ga��d ڻ��3��0�X~��k�6� ���x�w�~o<���
�h�l�ʽR-�H=���]_  ��/k ����� � � LR� `�@ ~�
�?Ǵ߇�_zj1. �� �G �1s
W-�x43� � ��h/��� �*Ë!�f��XWou�<�&�]�  <���T�
n���Jݹ  �"|�>'� x�1���" �ijGC� _� ��^��|�}�b ��M ��"V��ͮ�v��
��M٠�h�� ;����     ���0��04  +        (0&0$  +     0 � http://ocsp.verisign.com0   U    �  0   �   0A  U   :0806�4�2�0http://crl.verisign.com/ThawteTimestampingCA.crl0   U %  0
  +       0   U    �      0$  U    0 � 0 1 0   U    TSA2048-1-530
 	*�H��
      �� Jk��X�D 1�y�+���� � LͰ�Xn� )�^�ʓ � R
�G'/ 8��ɓN��"b �?7!Op1��8���� ��U�N$ҩ'Nz��aA�*����^ݻ+�>�����W����~�� ���+�;R  8'�?J0� �0� �      
�+���)� 2 	^�v�0
 	*�H��
     0S1 0	  U    US1 0   U 
  VeriSign, Inc.1+0)  U   "VeriSign Time Stamping Services CA0  
031204000000Z 
081203235959Z0W1 0	  U    US1 0   U 
  VeriSign, Inc.1/0-  U   &VeriSign Time Stamping Services Signer0� "0
 	*�H��
      �   0� 
 �   �P(H��hz� Dfu]~ĸ�c&�=C�| 8 %Us�u'i�N� \�
�� *�UV!a� ��3k��ݣ7e� � �S \|f5_ �E�vN�S��� ���\� ��0��"7LB
��� ��U�?�R�,� z򢪍5���]j �=k㿖���`�@� �D�Qn�*� (�� ��P�{J 
0 � �k��X� �@��(� �<�SoK�5��od ��,�=�y�mz� �&���S�@,��y���R�)t~B�9 �j �Y�$h� �C ��k     ���0��04  +        (0&0$  +     0 � http://ocsp.verisign.com0   U    �  0 03  U   ,0*0(�&�$�"http://crl.verisign.com/tss-ca.crl0   U %  �  0
  +       0   U    �     �0$  U    0 � 0 1 0   U    TSA2048-1-540
 	*�H��
      �   �xp�NR  [�yɂ0��� ��� ý���� ���M�3b0 ��t Ԓ�_�  �|E�P̓� ��'�g F�ʸ�A ̛Q[ � �o� P $.�i�l"��� �� t�hw��b��s���tz#���{����)qM.u HA��
 T�w���ci�	ϊ�u�	��� U&�a2�z �{���Ë",x�5v��s\���L 
#����4.I@ < `z$ƥf��p�>��
~��|�vqi��OG05!��� b<+َ�* {� �\{❥o�<��0�  0� ��       � �<<� �>�c��@0
 	*�H��
     0p1+0)  U   "Copyright (c) 1997 Microsoft Corp.1 0   U    Microsoft Corporation1!0   U    Microsoft Root Authority0  
970110070000Z 
201231070000Z0p1+0)  U   "Copyright (c) 1997 Microsoft Corp.1 0   U    Microsoft Corporation1!0   U    Microsoft Root Authority0� "0
 	*�H��
      �   0� 
 �   � ��p�;�N (��x^0ꢩ�%_���L����� >|Q����`2k�Bdy�v�T��뜆 ���f��kzb#� <�  ��Ŀ-f��h&��:,� �X&�F�
>8�,�(9��I�B� ��lUa��|�`-wL陴d;�P 1 $ ���+ �=�c `X e� 7R���� � ӿUE����:�T�N���zmtN� ̖	(! W�`i7�K  <V�[��f
 �ҁVW�;^ �w ��������� ֧ r\<ʼ� �"0� �ɳ w ��     ���0��0��  U   ��0��� [�p�ir�#Q~ �M��ˡr0p1+0)  U   "Copyright (c) 1997 Microsoft Corp.1 0   U    Microsoft Corporation1!0   U    Microsoft Root Authority�  � �<<� �>�c��@0
 	*�H��
      �   �� ��� 5�� $�w �\`2�� �> ����:�!��W�,��G�b����;;Z�6Ti�$m?�̪� |�1�=� pj�� O i���C� Z O�b{�� �+7%-�e� �% c��T �!�� �R�nC2 �� ��gl
Q���Rǽ��0� 1	� �) M�  ��� �[����W�eI�RT�� ( ���� �~��ū7,�z�w�v� �j?��6��A �5j j�5��  �E �Z38nM 
b�
����T?F� U�p� :��u��Ҡ0� �0� ��      j �O�  � �� �f'�0	  +      0p1+0)  U   "Copyright (c) 1997 Microsoft Corp.1 0   U    Microsoft Corporation1!0   U    Microsoft Root Authority0  
060404174414Z 
120426070000Z0��1 0	  U    US1 0   U   
Washington1 0   U    Redmond1 0   U 
  Microsoft Corporation1+0)  U   "Copyright (c) 2000 Microsoft Corp.1#0!  U    Microsoft Code Signing PCA0�  0
 	*�H��
      � 
 0�   �   �� ����>P�z��$%�v�!��*VNʜ���5y- Ĩ �cɷ�����ֱ��� � ��R��ƽ Ũ��k��S �P�d �� Ԃh @xD� 8N�cQ��=��7��c #;q@4G�k�F�'s "�B  Q�R�ӣ� � ?q m�!D_B��əd ��4��D�{� /�����ߛ! �X1AU8~�X���Yy%��*/ ?8x>B �h�~"h �J��xDRG�O�����g{�	�� }��q<+�f���-�+   4He�< ��  &Ro�    �� *0� &0   U %  0
  +       0��  U   ��0��� [�p�ir�#Q~ �M��ˡr0p1+0)  U   "Copyright (c) 1997 Microsoft Corp.1 0   U    Microsoft Corporation1!0   U    Microsoft Root Authority�  � �<<� �>�c��@0  	+    �7         0   U      %�+K]�rT����*  ���S�0  	+    �7     
 S u b C A0   U       F0   U    �  0   �0	  +       �   c��� ���  4т1>�bE� ��ae�. �8HAϵ�'����VS�� �����V�H�G$� �z�� z �� � ]�����X� ̕ӕ�3������^KIP9&:  T7�}\ ��� ��aR<� �f�y��Wce� I�z�e��&��� �Ƣ��_�p��۫�n �e �����	B��&�iz��+��f ��� k� ��6�  � 8���0>�!�0��b  �W���z �^< 7����N Z \��֩��}�x'��n�� 3X�^*  0� 30�  �     
aF��     e0
 	*�H��
     0��1 0	  U    US1 0   U   
Washington1 0   U    Redmond1 0   U 
  Microsoft Corporation1+0)  U   "Copyright (c) 2000 Microsoft Corp.1#0!  U    Microsoft Code Signing PCA0  
060404194346Z 
071004195346Z0t1 0	  U    US1 0   U   
Washington1 0   U    Redmond1 0   U 
  Microsoft Corporation1 0   U    Microsoft Corporation0� "0
 	*�H��
      �   0� 
 �   ́�8�\�����Ы���<� ��]�.]�r����j�ڱ"{ �ȥK�^" ���#���nv���<���Y\?��s3&�b�ay�b�n���n�ǟҤQ va�p�e�� ��]��Df��V�@���v$.D0 ��}{� �X ��O Ɉܢ�S�l�cʙj��^LM �/�[[^_R�s-���E
�  v� ښ�p �M�i�]�k��)Q78��FI �P���h���	qgt�w� �k���_E���q
�c �{1�� � ������!�`a�7C=�     �� �0� �0   U    �     �0   U      ��k�uS�O� N   ���ϔ�0   U %  0
  +       0��  U # ��0��� %�+K]�rT����*  ���S��t�r0p1+0)  U   "Copyright (c) 1997 Microsoft Corp.1 0   U    Microsoft Corporation1!0   U    Microsoft Root Authority� j �O�  � �� �f'�0K  U   D0B0@�>�<�:http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl0O  +        C0A0?  +     0 �3http://www.microsoft.com/pki/certs/CodeSignPCA2.crt0
 	*�H��
      �   8��8�\� ]Tni� �����M�/� T
�2��j�
�! w>�hz��~�\�Că�e}�PQ|� ��sע�\� p�&l �R �����̡u��q= �V V���&�^3��%z^�ڦ���A �UF�Hܑ8 X	I��1� � �[ e � QС �������  %!��W� �[�5������7?�Ck� �E�~���U��H�e�S4��� c  xnP�H���CZ�ۭ
��Y�,�� [J�2y�"�� -�P[��@XX����/���m�7y1� �0� �   0��0��1 0	  U    US1 0   U   
Washington1 0   U    Redmond1 0   U 
  Microsoft Corporation1+0)  U   "Copyright (c) 2000 Microsoft Corp.1#0!  U    Microsoft Code Signing PCA 
aF��     e0	  +      ���0  	+    �7( 1        0  	*�H��
 	 1  
+    �7   0  
+    �7   1 0  
+    �7   0# 	*�H��
 	 1   4��i� �O����@+�A����0r 
+    �7   1d0b�8�6 M i c r o s o f t   F o n t   V e r s i o n   5 . 0 0�&�$http://www.microsoft.com/typography 0
 	*�H��
      �  08:��Y�=Pi��W �a��� �a �#��@V�^xbT��C�tW�
� ��Yg� ���qX�Ƥ ��"a� ǎ�� � HZ���K��,&Z��$,�o��ݡ��  �q �F � A�b�F���	x� �|�����~�f�D��L,������ w���홚���M� On� ?��Q� �% -�o�航P�笌 _y闆�1�~�Ee�B��  [�FU/nT� �~�՞7Ȯ0�`��q���e ���W$��j䆷+}�6Q�j��� ��ő�� �0� � 	*�H��
 	 1� �0� �   0g0S1 0	  U    US1 0   U 
  VeriSign, Inc.1+0)  U   "VeriSign Time Stamping Services CA  
�+���)� 2 	^�v�0   *�H��
    �Y0  	*�H��
 	 1  	*�H��
   0  	*�H��
 	 1  
061002232129Z0  	*�H��
 	 1   孥�J  :d�x�\p�40
 	*�H��
      �  qd�  ����  �>�D�x-㾥!Z����QE3�k�|�ܘ���( I���2P��@�IK�� ���ӥK g��� b?���W�ו 5�9��7 ����_Y������ 
d4u�w�,�ڏ��j��e��o�Z�
�h&զ㱫���= ��O��!� v&R �Z  BY�%�u� ��W v�`���  ^ �� ي�<�IEs� ��-h��I! c��Ȏͅ��*� DbJ��u���8���U&��  \��Ȑ  ����ė���% ���?�
stream_009_off0002dd67.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2DD67 2035002 bytes
SHA-256: 6737d855fb0ff18efd41a3f993024294a57699a484c7d11e606b9a81d69cf447
stream_012_off000551df.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x551DF 2382420 bytes
SHA-256: 891fdc3fb7a6b56fcd92eee2d8b63d4c21f075e734e1a987ae5de24704c9ea17
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Static shellcode analysis found candidate code region(s). Indicators: NOP sled
stream_015_off00081a0d.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x81A0D 484188 bytes
SHA-256: 718c6114d6735ae78ef7ef3918faf93e02a777a8a42fead9dc0b26d4c6c3ee98
stream_023_off000baa1f.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xBAA1F 287996 bytes
SHA-256: baa8e7ad945f96d185100b54432fa27979046655de432edaf454c8eee94c8680
stream_026_off000d7b09.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xD7B09 302712 bytes
SHA-256: e5ea0eb22fba9e9dc5520dd75b328aea4fd1fe3df0043f118844c7b49affaa08
font_00_sfnt_off00088d79.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x88D79 173392 bytes
SHA-256: 9bfd2019f26500f53edaaa798b97f96ba7c57bab646f1276347225b56430dde8
font_01_sfnt_off0009c1f7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x9C1F7 100128 bytes
SHA-256: 89111e91c825102b4bb48d9ea1be85cbea2af7ca3419312141a4826b6453ae46
font_02_sfnt_off000a4789.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xA4789 190424 bytes
SHA-256: d8aa46576b2dd632941deeac420e2edb32664ebafd6638dabf38f7655e09e0cf
font_04_sfnt_off000d1363.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xD1363 96484 bytes
SHA-256: 3ff425936d51c9b679fe6bc6d0d024bd0a557663c3cc4aa76427b8631596f894
font_06_sfnt_off000f020c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xF020C 76264 bytes
SHA-256: 9bc140d6c177b3c88862a1760a897b0161f05ec24dceb5b67ea5718646c18c42
font_08_sfnt_off000fa322.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xFA322 91296 bytes
SHA-256: e7a18513d25bc413667395e42d347d5d81e5fdb5db0931d05d039cd3c4cf41d7
font_09_sfnt_off001008d9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1008D9 44176 bytes
SHA-256: 5632541419bfb7173c10a39512dea92be8088d19c2bea8128c7fbd3325af3130