Malicious PDF — malware analysis report

Static analysis result for SHA-256 2cb9671d54e85c9b…

MALICIOUS

PDF

1.60 MB Created: 2023-06-16 10:03:05 +02:00 Authoring application: TeX (via MiKTeX pdfTeX-1.40.25) First seen: 2026-03-07
MD5: 91f1b9637f551921cc6d7f966c43ef5a SHA-1: ea928e06b50fda509a760e5a74c3e652e569a181 SHA-256: 2cb9671d54e85c9b732c29cfead3ffdf8aedac8eda8ab58813e97a148e05edd6
204 Risk Score

Malware Insights

MITRE ATT&CK
T1059.003 Windows Command Shell T1204.002 Malicious Link

This PDF document contains embedded JavaScript and a suspicious script payload. Heuristics indicate it's designed to lure users into executing commands via copy-pasting into a shell, a common technique for downloading and executing further malicious content. The presence of a high-entropy carved artifact further supports this malicious intent.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8338

Heuristics 8

  • Embedded script payload in PDF stream high PDF_EMBEDDED_SCRIPT_PAYLOAD
    PDF stream bytes contain script execution markers such as ActiveXObject/CreateObject, WScript.Shell, PowerShell, or shell-exec primitives. This is stronger than ordinary PDF JavaScript because it indicates a staged external script payload hidden in stream bytes.
  • Clipboard command execution lure high SE_CLIPBOARD_COMMAND_LURE
    Document tells the user to copy or paste clipboard content into Run, PowerShell, cmd, or another shell-like execution context
  • LOLBin token sequence in document text high SE_LOLBIN_RUN_COMMAND
    Extracted document text contains a Windows script/execution tool name (PowerShell, mshta, cmd, rundll32, regsvr32, …) within 220 characters of a dangerous flag, command verb, or URL. This is a visible 'run this' instruction in HTML/PDF/RTF lure bodies, or — in macro-laden Office files — the macro's own string-pool entries appearing adjacent in extracted text.
  • Suspicious extracted artifact high EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules. (matched inside decoded stream)
  • Remote GoTo action info PDF_GOTO_REMOTE
    PDF has GoToR/GoToE actions that reference sibling document files — typical of multi-part document bundles
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://autotools.info/ In PDF document text
    • https://github.com/R-macos/recipes/tree/master/stubs/pkgconfig-darwinIn PDF document text
    • https://www.openmp.org/In PDF document text
    • https://www.openmp.org/resources/openmp-compilers-tools/Referenced by PDF JavaScript
    • https://isocpp.org/std/standing-documents/sd-6-sg10-feature-test-recommendationsIn PDF document text
    • https://www.opencsw.org/In PDF document text
    • http://ftp.astron.com/pub/file/In PDF document text
    • http://binaries.html-tidy.org/In PDF document text
    • https://validator.nu/Referenced by PDF JavaScript
    • https://fortranwiki.org/fortran/show/Modernizing+Old+FortranReferenced by PDF JavaScript
    • https://github.com/llvm/llvm-project/releasesIn PDF document text
    • https://github.com/mstorsjo/llvm-mingwIn PDF document text
    • https://www.dependencywalker.com/In PDF document text
    • https://www.rforge.netIn PDF document text
    • https://github.com/google/sanitizersIn PDF document text
    • https://github.com/llvm/llvm-project/blob/main/compiler-rt/lib/asan/scripts/asan_symbolize.pyIn PDF document text
    • https://github.com/google/sanitizers/wiki/AddressSanitizerFlagsIn PDF document text
    • https://github.com/google/sanitizers/wiki/AddressSanitizerAndDebuggerIn PDF document text
    • https://github.com/google/sanitizers/wiki/AddressSanitizerUseAfterScopeIn PDF document text
    • https://github.com/google/sanitizers/wiki/AddressSanitizerLeakSanitizerIn PDF document text
    • https://blog.regehr.org/archives/213In PDF document text
    • https://github.com/google/sanitizers/wiki#threadsanitizerIn PDF document text
    • https://drmemory.org/In PDF document text
    • https://www.rforge.net/Rserve/In PDF document text
    • https://www.autstat.com/In PDF document text
    • https://www.gnuIn PDF document text
    • http://www.another.urlReferenced by PDF JavaScript
    • https://pkgname.bugtracker.urlReferenced by PDF JavaScript
    • https://CRAN.R-projectReferenced by PDF JavaScript
    • https://sourceforgeIn PDF document text
    • https://github.com/R-macos/recipes/tree/In PDF document text
    • https://isocpp.org/std/standing-documents/Referenced by PDF JavaScript
    • https://openjdkIn PDF document text
    • https://gcc.gnuIn PDF document text
    • https://www.statsIn PDF document text
    • https://developerIn PDF document text
    • https://oprofileIn PDF document text
    • https://github.com/google/In PDF document text
    • https://github.com/In PDF document text
    • https://developers.redhatIn PDF document text
    • https://www.r-project.org,)-525(http://www.another.urlReferenced by PDF JavaScript
    • https://CRANReferenced by PDF JavaScript
    • https://isocpp.org/std/standing-documents/sd-6-sg10-feature-test-recomm)1(endationsReferenced by PDF JavaScript
    • https://CRAN.R-project.org/banner.shtml#submittingPDF link annotation
    • https://www.gnu.org/prep/standards/standards.html#DocumentationIn PDF document text
    • https://www.debian.org/doc/debian-policy/ch-controlfields.htmlReferenced by PDF JavaScript
    • https://CRAN.R-project.org/package=knitrReferenced by PDF JavaScript
    • https://CRAN.R-project.org/package=rmarkdownReferenced by PDF JavaScript
    • https://CRAN.R-project.org/package=formatRReferenced by PDF JavaScript
    • https://www.acm.org/publications/class-2012In PDF document text
    +158 more URL(s)

Related samples 2

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 22

Files carved from inside the sample during analysis.

FilenameKindSourceSize
embedded_pdf_script_0015b762.bin pdf-embedded-script PDF decompressed stream script payload at offset 0x15B762 1675388 bytes
SHA-256: ef63862e0266e4469e7f7c5baf3150b11975a951d742269eeccf3879784d87d6
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 13 long base64-like blob(s). Carved macro source contains an auto-exec entry point and execution/download terms.
Preview script
First 1,000 lines of the extracted script
%PDF-1.5
%����
1 0 obj
<<
/Length 587       
/Filter /FlateDecode
>>
stream
x�mTM��@ ��+z &���? tBL $��d4��*�.�  <��_���f �W�_wի�r��c;���`G�U�O�V�&����� ��ʮ [v���6�W�7��T��vb ��uYt/N�.��5������= �S�<b���G�� I(vEwv+OR8$  ���6mQ�oB�J) �*󸺠�� �3�q��X�ysO' H�)-�"�� }������[��˺<V^ ��[l��Fռx�M�ۦ(Ob��q��Z�g��Bz����� �<��/V��   �[m��Xq Y�۶�g�ٗ'�R.D � ϖ�?k3�q8~�J�����#��  �� �8�} RC�g �% P���)  {�4 �"�a/�� �C��^ @ �8Y*C��%Md_b�g߸�4 �L�0^ O ���\� � ���p��g���\���8~�s��3� ���{M���Nq7
,*j�6 �f-�S�A.'��AǤ! :�O���L 0  �x/i�dB n�
^ ySS�W�+%={�I�b
��� �Պo �kͷ��� c�6|f ��3
4�{�� p�Y�d�r���K�+H��ހ� �ˀ��ۣWA�    � ���4nfh
i*0 Ei �ZW5vя&���@�I�� �6 
endstream
endobj
2 0 obj
<<
/Length 598       
/Filter /FlateDecode
>>
stream
x�mTM��@ ��+z &���? tBL 0��d4��*�.�  <̿�~U��f �W�_u���v��c;Z����̫ ����MfG��}�
 I�]/��ޭ�mޯ�o⣩����0^'��^�x]f�kn{��EK{*ʇ u�pg �6;�ލ$4��;��gZ8,  ���M[T�P�RJG�e W xm�� � �E�7���  ��"/�� �7������j;{Y��ʋ"1�t�m�|�� o�ir� �I ɑc�׺>[T қ�En�n#����b������BS��EV嶭��m���z��s ���g����)g ��R��133w� xA�b� �;�  �aGL 6K&�0+�}& �"? � �  ( Ҧ�a/
� c�,�!�����-f ��3�� *I�x	<a� ��W  ����p���� �l6 �C ?� �� Lj�'}�Y}�S<M�  
U� X� � � � `�AǤ� t�> �{�a��� �sIC % ��hS���7� �}�H�=ŤIY��(��jŧ
�Z����4{��SO� �5���Z � �e�kxvK� � Ǭ� ���@2  a�<rC�
q�!�ĝ��B�   ���d�kӸ�D/�^ �IQ��#�� Y������ ڬ���==�
endstream
endobj
3 0 obj
<<
/Length 525       
/Filter /FlateDecode
>>
stream
x�mS�n�0 ��+� $z��  �"����aKU��^C<�H�DN8���� �V{H����= ��؏ S ` �J�	m}u%���E   Y]^/`�w  ���o���� :1L���V݋ omy� �U� ��T� 	� � ��v���DM^ug {��ǂ� � pmU�7�^���X[�� �� �{=1�  +kܽ�8��@ia�����_^|Ә��� \��X q,Ɵ>�v�F�^��� p�=�!9����4g��B ˥0p� ��ދ ��s#�P~k@hZ+vQ� ڦ(� � A,�R��f �5�Ħ�q8>K��_� ��X N�H�� �3$�Ǟ�{<�0�� *�5  c�~�P��ʯ���5W�4 2^!�0^#�rq�xƘ�E�3�x�� �

� z�)c�gl1B�� Ұ��?�Xq�!�NA��W��A *d� 1��)iȧΰ ��О �	�9璆NVf�� �k��V�a��UJ����?%͚5ػb�TW� =ј������� � 5 ��2�f�&p2pj �V^��cH�Mc� VYxL S7�E =��1�j�	� g� �
endstream
endobj
6 0 obj
<<
/Length 260       
/Filter /FlateDecode
>>
stream
xڅ��N 1 �{?�˻�ˮ� ۂ   �  PDp���E\R���q� !�� ��3ߐ�rHG�cbH ��^����M�� ]|�3x�E�i3�� �� BMi71 $��묮n�� !��u�V��  �����{��u�x �]o8�n�>���0 ��t�_�Ze���R2� DK � Y K�<�zh��kB  �� 	�+  �w��O�
s�*�̝  j� =Z�l0 
�F�漉�� [S
[��Ɖ +��^�� 桩\� ����
�M?� ��2� ��f�
endstream
endobj
5 0 obj
<<
/Type /Page
/Contents 6 0 R
/Resources 4 0 R
/MediaBox [0 0 595.276 841.89]
/Parent 9 0 R
>>
endobj
4 0 obj
<<
/Font << /F82 7 0 R /F55 8 0 R >>
/ProcSet [ /PDF /Text ]
>>
endobj
12 0 obj
<<
/Length 797       
/Filter /FlateDecode
>>
stream
xڍUMo�0 ��W�� ��/ �b ��P����nl4� [�V�Ϗ ���u�A"Ő�{���8�D��(� �U ��  �a ����JP�N K���?�6�LB�f��S���O�Hpf� Q� e��<�D���˨(��qQ7�z���[ۭe �� ���� �y��_�2��al�  4SL��#O��Rmx� )X��  _#Δ����	�������:4��o\�K4�����`���o�S=�d� W��, C�M 
Ф�S� Ƙ���� ��� *t �\ŕm/e�]N� �Y � `�**Z��
Qi� ��y  ��~��B�U� ������7�lG�e3��ٞ   �[� =���T�� ���T��r�Jo ���/M	 ��Ѳ--� ���\M��<_Y�� 1R� e��]���Ђ��� � ���_c �_ C�!r��j�~K<����1�;�FQ�lF�L�+ )e�fɑwx���#��E
� G�n �� !�CsO��Q ���
���,o��� �5�-� 0 ��� .ܕ���*� 8 '# =� �6�� = � ����D�
 "� d i���$  �of ��Oo�����3�  ���� �!M�@�Hf�  �R<B�c�� ��q J-����sz��~u&J� +�_� < �W$'i,`E� � 8BMXg�  % ���|8� <؉j����I=�h� ���F��)u   �D�k#�,����v���W7s���i �6 ��	���g.G3���Ās�q �X�kW �Tͺ� 4'x�Ē�iC
�$�֞�]�� ilt�4�=��*�Jި �1LR /޲�95��T� �����!��CAp���� �  �
endstream
endobj
11 0 obj
<<
/Type /Page
/Contents 12 0 R
/Resources 10 0 R
/MediaBox [0 0 595.276 841.89]
/Parent 9 0 R
>>
endobj
10 0 obj
<<
/Font << /F55 8 0 R /F64 13 0 R >>
/ProcSet [ /PDF /Text ]
>>
endobj
65 0 obj
<<
/Length 2884      
/Filter /FlateDecode
>>
stream
x��mo�8 ���S���"<�A$u�I{��-�,{�8j"� ��t���KY�N���^�ƉP vܱ� ���p8���p��Ȉ���YiF���b���z�?9��3��N��Ib�����^�� �**>��0*�`%�p���� ���  �|�� .T���J U��W�V��a������
�Y��֩^L*5�/g��D�r���?�.  �Ǜ� Xw����bRi�]� �(�
%�+�4�L?.���o��꺙wo �v^���\j�K㮳}��''\��A��� ��M/vL �>Oܲ�W#m�{ �x��'�9�  ��E�CɿF�!g������CY� �������p쮚z�.�{����ۺ�s�帾n2D �ܳ �o��  *f� �, p�Ō&
�ݓ�
�V�J������ ��(��&  [���IYvl9� �7����n���i�^�s�Te�%iGF�) �� �Eϣg� ���1��M v/�%H� ��O pi^pf� i���� _ o���z�#�̔@�������]���7� ��9c ��[p5��C� �  zh
9 ��P} �c>����>@� >�J�  ���D  � ޴�f���=�ڂY�W� ��Qyq� <8TG��#�4ڬ# ��#��� �J1� G��R���vr�^m W�bچd�^xW S�{` �����}Q+ �Cy~o}������E{�� �D� 4��]Fa� �����	А߼��vs�MsՃ|�K�~�e�8 �y�SȄr����� �1rw� Yri�@.�
�X[�T �U &/ �����e�R0a )#ו "��~ܜ�x��� �1Gف5;�%j�����(�|Q%�R ,��]ns��v�L7�U6k�L �i�����9���SY�� �;<�Y�i ˨6�� �JE��g����=���{T��	��m:�u>e��0K=������A�=�c�� g��Ӵ wT p �U.� ܍���rqr��t��n�=�=��d�t   �?�h  � M%7�c���Seɥi ��6�ۅU��kìҗC��/�������7��̥ ���� 9�= Tģ9�x��ȗNhڀ8���H�B� `h ����r�M ����-��� P��b<sYI�=� ]����_FQL f��( r�{>��Gs�� :�w�6��j���l��9  ��_� �n�ECZ�s���T�� yeXa� �ch��)
� �O� �w� ��O�v@ � Ure4�UB>��KX���]����/-W���ݥO�/7  0~�\� 6 ^���M� � K�0��	 �Z2�Rp�N��'���US_e3pa��|d�??�T�� c8AIf3 �00�	 �e��@,!ٞ߶3 9T?�w�'�j��2n� ����� �J_4��K)@��i ��6d��M��� f'{��z~�Y0 ��� � gJ� �2 �1�S�$�2M� �Qm`ZHfl´�:1xU}���ӥKi��j?�E� �� ?n�v  ��h�ў '��Dm� � �y�w�Ѯ�����s
�.!.�  � �za���9Ƕ�ܿ�!�iڀ9� 0��a��yh�8
�t��U��?ի8�*=��Q� � �O� �w��:�>Q;��k �V1) �5�<=�� �F{�.T��' ysl`�� � s� H�m !j�3��~mR θ��?(��4}[��yT�
��W��˻vv ���  c���WƏM��`S�� �)A2[�&j ��6D�ҲBB�:�H�ϯ��P��p �TJ}�n-1�@�;�ct���lg Q �F��n��cBw(&���o��^]ֳY��O
�| k�X j*�� c7�Ge�� ��]T �u���2�+��{�.�՗? � �J��"�Pȱ뇚�n4��M�Q�  �6��j���[VZh� �� M� ��M�%�>)��W�ЫƟ��E���v�T� ��hz�  T��9 wJ  7M �F�!0 %S2�
)��Ŷ����Z\��u��L��UCP~XA� 3��h�q����E;�6p�j nE%��E��H6���� �M����% 
 [Y1!��� �K$ =��� ay�'��� � ˸�O0�� ���� �E=o�.���,Ja��  O!��A� �1� �T�FG  �1a ۺd ��Ȑ}���94D�O@��� �s��xWQ
���/�� ��	� �	$ �$a�   :]��Q x��⼹nכf h����n�ln|�Gf~g��� v�^�� 6��h��� ���a�6��j �.��&	����fY��y�O� ��q C����9 p�� �1�S �l�5Q �G�� ���/� Juw�����M{���Iͤ   {Z吀
��h����O� �Qm`�K&���i�O��� *�4 � >���I�� �1�S����"Q �G� ��`�I"��}�m,�ls���̈́�o�_�+ �¬^�� L/CZo3i���9��[  ͏  �h��� v��&j h��/�q� 7 �q [  ���ҽ8k2��|�Y?)��� �O�c" � ���#���V�9Љ� t\;DTn$�D$=����� ���d n/J=�E� [� 5T7�� �(���8Q � � 7� 3FE7 ��I���i�>��K�+f�� �hg�  *�� �>% ���
ԣ�@�2L  ��� B� �z}�; �`jhkzD�|��
z4�@Oa��,��
��� zwV�I@W���6y��%��{�C��W��Gd z C_� �J�(S��� �)::��D� lQ�p�
 �I! l�.��|� '�|�w�O�۵�e��;�� C��`�چ��� �1zS�L�� �6Ћj �Ewz O酬��sn � ݑ!� �=����Sq�� �)R&[{&j Ψv�!�� "�9���H��\��ͪ��۴.6g��* �9y~�$Gk � &�-mӄ ƨ�/l[�2� �� ����b�޴Ӱ"�^�Ek�"� vt?� _� �p0F O@��MR
xc��Ԗ  -}�f ����o�բ��r=k �� �`�W�z��*d �l  �� �)n& �]�0�a  �7�b����I�ɬ��� 3 -��H�)�)f�p��Gqی  � ��5z ��X nL� �4�E
endstream
endobj
64 0 obj
<<
/Type /Page
/Contents 65 0 R
/Resources 63 0 R
/MediaBox [0 0 595.276 841.89]
/Parent 9 0 R
/Annots [ 14 0 R 15 0 R 16 0 R 17 0 R 18 0 R 19 0 R 20 0 R 21 0 R 22 0 R 23 0 R 24 0 R 25 0 R 26 0 R 27 0 R 28 0 R 29 0 R 30 0 R 31 0 R 32 0 R 33 0 R 34 0 R 35 0 R 36 0 R 37 0 R 38 0 R 39 0 R 40 0 R 41 0 R 42 0 R 43 0 R 44 0 R 45 0 R 46 0 R 47 0 R 48 0 R 49 0 R 50 0 R 51 0 R 52 0 R 53 0 R 54 0 R 55 0 R 56 0 R 57 0 R 58 0 R 59 0 R 60 0 R ]
>>
endobj
14 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [518.019 681.222 526.089 693.974]
/A << /S /GoTo /D (1) >>
>>
endobj
15 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [518.019 647.847 526.089 660.6]
/A << /S /GoTo /D (2) >>
>>
endobj
16 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [520.089 632.077 525.543 641.774]
/A << /S /GoTo /D (3) >>
>>
endobj
17 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [520.089 621.048 525.543 628.624]
/A << /S /GoTo /D (4) >>
>>
endobj
18 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [520.089 605.776 525.543 615.352]
/A << /S /GoTo /D (8) >>
>>
endobj
19 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 592.625 525.543 602.322]
/A << /S /GoTo /D (10) >>
>>
endobj
20 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 579.475 525.543 589.172]
/A << /S /GoTo /D (12) >>
>>
endobj
21 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 568.445 525.543 576.021]
/A << /S /GoTo /D (13) >>
>>
endobj
22 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 553.173 525.543 562.87]
/A << /S /GoTo /D (13) >>
>>
endobj
23 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 540.023 525.543 549.72]
/A << /S /GoTo /D (17) >>
>>
endobj
24 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 526.872 525.543 536.569]
/A << /S /GoTo /D (19) >>
>>
endobj
25 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 513.721 525.543 523.418]
/A << /S /GoTo /D (20) >>
>>
endobj
26 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 500.571 525.543 510.268]
/A << /S /GoTo /D (20) >>
>>
endobj
27 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 487.42 525.543 496.996]
/A << /S /GoTo /D (24) >>
>>
endobj
28 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 474.269 525.543 483.845]
/A << /S /GoTo /D (28) >>
>>
endobj
29 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 461.119 525.543 470.816]
/A << /S /GoTo /D (30) >>
>>
endobj
30 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 447.968 525.543 457.665]
/A << /S /GoTo /D (30) >>
>>
endobj
31 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 434.817 525.543 444.514]
/A << /S /GoTo /D (31) >>
>>
endobj
32 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 421.667 525.543 431.363]
/A << /S /GoTo /D (33) >>
>>
endobj
33 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 408.516 525.543 418.213]
/A << /S /GoTo /D (33) >>
>>
endobj
34 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 397.486 525.543 405.062]
/A << /S /GoTo /D (36) >>
>>
endobj
35 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 382.214 525.543 391.79]
/A << /S /GoTo /D (37) >>
>>
endobj
36 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 369.064 525.543 378.761]
/A << /S /GoTo /D (38) >>
>>
endobj
37 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 355.913 525.543 365.61]
/A << /S /GoTo /D (39) >>
>>
endobj
38 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 342.762 525.543 352.459]
/A << /S /GoTo /D (42) >>
>>
endobj
39 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 329.612 525.543 339.309]
/A << /S /GoTo /D (44) >>
>>
endobj
40 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 316.461 525.543 326.158]
/A << /S /GoTo /D (44) >>
>>
endobj
41 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 303.31 525.543 313.007]
/A << /S /GoTo /D (46) >>
>>
endobj
42 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 290.16 525.543 299.735]
/A << /S /GoTo /D (47) >>
>>
endobj
43 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 277.009 525.543 286.706]
/A << /S /GoTo /D (48) >>
>>
endobj
44 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 263.858 525.543 273.555]
/A << /S /GoTo /D (48) >>
>>
endobj
45 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 250.708 525.543 260.405]
/A << /S /GoTo /D (49) >>
>>
endobj
46 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 239.678 525.543 247.254]
/A << /S /GoTo /D (50) >>
>>
endobj
47 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 224.406 525.543 234.103]
/A << /S /GoTo /D (50) >>
>>
endobj
48 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 211.256 525.543 220.953]
/A << /S /GoTo /D (52) >>
>>
endobj
49 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 198.105 525.543 207.802]
/A << /S /GoTo /D (53) >>
>>
endobj
50 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 184.954 525.543 194.651]
/A << /S /GoTo /D (55) >>
>>
endobj
51 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 173.925 525.543 181.379]
/A << /S /GoTo /D (64) >>
>>
endobj
52 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 158.653 525.543 168.35]
/A << /S /GoTo /D (64) >>
>>
endobj
53 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 145.502 525.543 155.199]
/A << /S /GoTo /D (65) >>
>>
endobj
54 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 133.564 525.543 142.048]
/A << /S /GoTo /D (66) >>
>>
endobj
55 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 119.201 525.543 128.898]
/A << /S /GoTo /D (71) >>
>>
endobj
56 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 107.262 525.543 115.626]
/A << /S /GoTo /D (72) >>
>>
endobj
57 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 92.899 525.543 102.596]
/A << /S /GoTo /D (73) >>
>>
endobj
58 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 79.749 525.543 89.325]
/A << /S /GoTo /D (73) >>
>>
endobj
59 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 68.719 525.543 76.295]
/A << /S /GoTo /D (74) >>
>>
endobj
60 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 53.447 525.543 63.144]
/A << /S /GoTo /D (74) >>
>>
endobj
66 0 obj
<<
/D [64 0 R /XYZ 72 769.89 null]
>>
endobj
63 0 obj
<<
/Font << /F55 8 0 R /F82 7 0 R /F108 67 0 R /F63 68 0 R /F56 69 0 R >>
/ProcSet [ /PDF /Text ]
>>
endobj
157 0 obj
<<
/Length 2859      
/Filter /FlateDecode
>>
stream
x��]s۸ ���+t)]     �n7�t��v;�wz����hG�-y(y��__��  �8>�m֎��L��'|��y �q � w�Ĭ*f����j��y��O۫���ݟ_  �t��$� ߼.˙��r+f ��RX�� ׻X��1�l ���ˋW �JeQ�RI�,D?�-�`� ��ь�j�v �b� �����RJ9�i����q ��� �浖�u,g��N����\��� }��� 	!��ç{���p��PLK hy A �L�G�?�hOPUf�i �Q퀿(�g2�/=� k�ۺ�l�   �z��� ��v� BIƅ8  <m����-ME7�c�� �Ҵ �����*5�ֲ� �Z���7  #��.��_��� �j�O.�u3N.W���D�ydp��h�$ �� ���ـ�
6��� �U� l 8��Ea�����Ӣ,�} ����G�o K��s w������!O\!g   � 1 3FJgUe�A� �@��k�+�T)�3���x��!�ݶs¡ٮ�L` 3v�)<ϯ���'�j� �Y � � M;X Ն{��L�� ��}���Y�'�J<��?�]� ��E<RT��p�")��Eh��"'ڦp�T&�.z΋���  ��i Q��/�����0��~ Ƚ�w��n��½9�c��gG� �M�S(g���?
�HP�{�ܺ�c� � �壗I�Hs�^t@��GE3n��>���x6 �UU�q	��w�_}�ko��hJ�z+SJ=ߔ�˥ (j.��X.M) 3�ϥ4�KQ���v G]D� �|�뇛C��:�a^��n�B& K�K=
D��l�oq*�1 C8Ũ�Y�i� aT  .M�T�"�Ń ��C=�2�C��� VL��'�14;��$ ���%#s  ��c\;p\��S!#��A�߫���u�߻�l�a�]�:����Wף� � � =-��V }�Q	�� �) Fe	�i  Q�@�v��*!P=H���|uv��ډ�'L�ox*�1 #9��d  �ځdTۏ�Je\f+ �"L�� � ��1��� �|;(9sx����9RB sд�9Pm0�T�T � �� ��S� i~9dJ��6�G��^���!�cvH�4��x�v� �
v( �­ z<o7��q Z� ��lA�`�-���rF ��� Dc6HX4ى@�p0 &  ��� x����v��/��i��*G~1 ��]�煊~���O D�'	 �1a���%S� �:�  ����Y�b�M�rJ���:�C�B ��� J��N'j� pm��q�eח�~���jsu׎� tѯ�Nw�I�` � �.1 �Kʬ�Y�д�]Pm���L�` ���f�o��"i��3�t�8w��,③Z$�c I9E,B�  A��"eɬ �  ,�� 4j1�Q& �]<^T��p�.)�Vd�B� vA��.��F� �paw�u}�
֖{� d�� W���t�n�u  ��������],ǩoW*�1 �4� ᔦ 8E����2�#�P8�r� { _}��% ��*� �s��9�=(T�c8 ~J  >M;��j �B�RĒ�Pn�y[�lVP �+��%+&�ϥJ
`�� �1�S m���� �G� ~.�Ա� V� r����z$� ���U� 7��b��  � @ �� � �bf�u�D�@8��	�6�b� � �ڮ|1e�~��b �N{F�
 @ 
��# 9��f�D��` \  RU��X%Z��g� ���c������ v�Ge� ��K�C r����� �1rS| riځ\T �ՒY j} ,��ZobE3l Dϟq=%������� 6T �p� )�6[ J� 68Ѿ��ڑ� lԒ~ ��f�9l� ��ܛ�v�{�t[u�
�b�n�7O; ���y:3 ��;��0q u ��>j6�s{��ڰ��T{<i��I��e�  ��r�߆���@��#���jfΫH ��� ��� I�� &j�܉j� �b����"�}�\	��s 26�A.w��9��4�  ����V����� �PP!�� �)i �4� 9��!/l�  ���|��
��f�~ ����o
�`�Og�>R /44 �$  �� �-�%j ��6�`-�0��Hn������&!�}i� l�� �,��Պ  �u�s ��1�%g幜�� �%�����p�ڔ �Z�v� � �j�*�"�Э���m� �vc^U��z!��~�
9�r�UӉ�_L!��oY*�1 C5��f�É� UT;�Z
� dDU�� (]�n7p$�˛ �~�w�a�,�����xeH7�!� �ǭۀ��� �1vS~ viځ]T z�����\�v����\�"v�܎�*�u�w�  A <�c���!�Ӵ �vH�.\�"  z�o7����/�j�9�e� ���e"R�� � ^&�c�8��p�1�n? J W��Bhf�O Q��  W _�`��99:k�������%�Fa� �#*d��mMd7F#��`�Ҥ ��6�+�e\ � c�}n:Bk�����cG� )pB�>��s ����*S�4p�kCOF�ҽF� ��z�����;�;V�'$��� =� 2D �`� 	��gkPi� �c�{� �,Ye��A���� wWW�������� T\<�/x �.q��{��>x�D��~ ]�s�r� Di��8� �2��7�1�q8�]�놓���*� ����i��I��4 St�Frt
�9|��I�,�j�9��
 � ���dM/��掦-��iӯ��#B$>F#ħ�	�- %J �Qm �;0 ������ˏ��
�:���W݆�� �gs���\����O�9F#0�@�nm f�t� Ն1� �ZxΡJJE~��W�V�]{�k3 ��U|:�����h{ hd��<�)[�� �4]�   �]��ʄ��>�?���__����hv�W�v��~ %S � 
 �18�wJ �7M �F���J2
� TI�I��ᣯD�v�n b��$�{_���n �_�v��Ĝ�4�c|�q<}�����y<SH�Ȟ B�
��DŽa�Fs�ʄα^E��mS "Q�mC/'*�t7`h< �!6Oa  E��hY�� �x v
endstream
endobj
156 0 obj
<<
/Type /Page
/Contents 157 0 R
/Resources 155 0 R
/MediaBox [0 0 595.276 841.89]
/Parent 9 0 R
/Annots [ 61 0 R 62 0 R 107 0 R 108 0 R 109 0 R 110 0 R 111 0 R 112 0 R 113 0 R 114 0 R 115 0 R 116 0 R 117 0 R 118 0 R 119 0 R 120 0 R 121 0 R 122 0 R 123 0 R 124 0 R 125 0 R 126 0 R 127 0 R 128 0 R 129 0 R 130 0 R 131 0 R 132 0 R 133 0 R 134 0 R 135 0 R 136 0 R 137 0 R 138 0 R 139 0 R 140 0 R 141 0 R 142 0 R 143 0 R 144 0 R 145 0 R 146 0 R 147 0 R 148 0 R 149 0 R 150 0 R 151 0 R ]
>>
endobj
61 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 723.933 525.543 733.509]
/A << /S /GoTo /D (75) >>
>>
endobj
62 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 710.782 525.543 720.479]
/A << /S /GoTo /D (75) >>
>>
endobj
107 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 699.753 525.543 707.329]
/A << /S /GoTo /D (76) >>
>>
endobj
108 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 684.481 525.543 694.178]
/A << /S /GoTo /D (77) >>
>>
endobj
109 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 673.451 525.543 681.027]
/A << /S /GoTo /D (77) >>
>>
endobj
110 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 660.301 525.543 667.755]
/A << /S /GoTo /D (77) >>
>>
endobj
111 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [509.949 627.424 526.089 640.176]
/A << /S /GoTo /D (78) >>
>>
endobj
112 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 613.775 525.543 621.351]
/A << /S /GoTo /D (78) >>
>>
endobj
113 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 598.503 525.543 608.2]
/A << /S /GoTo /D (79) >>
>>
endobj
114 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 585.353 525.543 595.05]
/A << /S /GoTo /D (83) >>
>>
endobj
115 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 572.202 525.543 581.899]
/A << /S /GoTo /D (84) >>
>>
endobj
116 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 559.051 525.543 568.748]
/A << /S /GoTo /D (85) >>
>>
endobj
117 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 545.901 525.543 555.476]
/A << /S /GoTo /D (85) >>
>>
endobj
118 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 532.75 525.543 542.447]
/A << /S /GoTo /D (86) >>
>>
endobj
119 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 521.72 525.543 529.296]
/A << /S /GoTo /D (88) >>
>>
endobj
120 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 508.57 525.543 516.146]
/A << /S /GoTo /D (88) >>
>>
endobj
121 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 495.419 525.543 502.995]
/A << /S /GoTo /D (89) >>
>>
endobj
122 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 480.147 525.543 489.723]
/A << /S /GoTo /D (90) >>
>>
endobj
123 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 469.118 525.543 476.572]
/A << /S /GoTo /D (90) >>
>>
endobj
124 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 455.967 525.543 463.543]
/A << /S /GoTo /D (91) >>
>>
endobj
125 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 440.695 525.543 450.392]
/A << /S /GoTo /D (91) >>
>>
endobj
126 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 429.666 525.543 437.241]
/A << /S /GoTo /D (91) >>
>>
endobj
127 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 414.394 525.543 423.97]
/A << /S /GoTo /D (92) >>
>>
endobj
128 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 403.364 525.543 410.94]
/A << /S /GoTo /D (93) >>
>>
endobj
129 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 388.092 525.543 397.789]
/A << /S /GoTo /D (94) >>
>>
endobj
130 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 374.942 525.543 384.639]
/A << /S /GoTo /D (94) >>
>>
endobj
131 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 361.791 525.543 371.488]
/A << /S /GoTo /D (95) >>
>>
endobj
132 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [509.949 331.036 526.089 343.788]
/A << /S /GoTo /D (96) >>
>>
endobj
133 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 315.266 525.543 324.963]
/A << /S /GoTo /D (96) >>
>>
endobj
134 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 302.115 525.543 311.812]
/A << /S /GoTo /D (96) >>
>>
endobj
135 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 288.964 525.543 298.661]
/A << /S /GoTo /D (98) >>
>>
endobj
136 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 275.51 525.543 285.51]
/A << /S /GoTo /D (98) >>
>>
endobj
137 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 262.663 525.543 272.36]
/A << /S /GoTo /D (99) >>
>>
endobj
138 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 249.512 525.543 259.209]
/A << /S /GoTo /D (99) >>
>>
endobj
139 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [514.634 236.361 525.543 246.058]
/A << /S /GoTo /D (99) >>
>>
endobj
140 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [509.18 225.332 525.543 232.787]
/A << /S /GoTo /D (100) >>
>>
endobj
141 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [509.18 210.06 525.543 219.757]
/A << /S /GoTo /D (100) >>
>>
endobj
142 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [509.18 196.909 525.543 206.606]
/A << /S /GoTo /D (102) >>
>>
endobj
143 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [509.18 185.88 525.543 193.334]
/A << /S /GoTo /D (103) >>
>>
endobj
144 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [501.88 153.003 526.089 165.755]
/A << /S /GoTo /D (104) >>
>>
endobj
145 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [509.18 137.233 525.543 146.809]
/A << /S /GoTo /D (104) >>
>>
endobj
146 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [509.18 124.083 525.543 133.78]
/A << /S /GoTo /D (105) >>
>>
endobj
147 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [509.18 110.932 525.543 120.629]
/A << /S /GoTo /D (108) >>
>>
endobj
148 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [509.18 97.781 525.543 107.357]
/A << /S /GoTo /D (109) >>
>>
endobj
149 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [509.18 84.63 525.543 94.327]
/A << /S /GoTo /D (109) >>
>>
endobj
150 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [509.18 71.48 525.543 81.177]
/A << /S /GoTo /D (111) >>
>>
endobj
151 0 obj
<<
/Type /Annot
/Subtype /Link
/Border [0 0 0]
/Rect [509.18 58.329 525.543 68.026]
/A << /S /GoTo /D (112) >>
>>
endobj
158 0 obj
<<
/D [156 0 R /XYZ 72 769.89 null]
>>
…
font_00_type1_off000ff153.bin pdf-font-stream PDF embedded font (type1) at offset 0xFF153 19888 bytes
SHA-256: 6581508edc864ccdfc83fc08e99d07ec408abecca00a7f3d98ad36a2291a916d
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.91, consistent with packed or encrypted content.
font_01_type1_off00103d3f.bin pdf-font-stream PDF embedded font (type1) at offset 0x103D3F 7315 bytes
SHA-256: 5531fb4b59d692cddf249cbbbdb45179abe03c29336d9d7eea46e59efa76a657
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.84, consistent with packed or encrypted content.
font_02_type1_off00105980.bin pdf-font-stream PDF embedded font (type1) at offset 0x105980 12095 bytes
SHA-256: 628fdddc70727b498ed2eff7156eab66710f6d1103b8e9a28d8ea3c0bd447562
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.89, consistent with packed or encrypted content.
font_03_type1_off00108800.bin pdf-font-stream PDF embedded font (type1) at offset 0x108800 7286 bytes
SHA-256: 712925c36074ac96f3f2b6f4b1267e39a63d48829199f158165bb931752a4a76
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.83, consistent with packed or encrypted content.
font_04_type1_off0010a419.bin pdf-font-stream PDF embedded font (type1) at offset 0x10A419 8445 bytes
SHA-256: 1c9e30e13403db73b5b08528909de042a68396c4d0d1b66e8028849382b50bad
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.87, consistent with packed or encrypted content.
font_05_type1_off0010c4b5.bin pdf-font-stream PDF embedded font (type1) at offset 0x10C4B5 7281 bytes
SHA-256: 0a23c0e973e1eda96a0885f6243a50af4e27fb2b9bec2b4f6272ddf83a92c239
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.83, consistent with packed or encrypted content.
font_06_type1_off0010e0d1.bin pdf-font-stream PDF embedded font (type1) at offset 0x10E0D1 27877 bytes
SHA-256: 12b7cda6945a3aaf10c8813e33524da3af7c0ad3b0455c5c54c1e077336f1d6a
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.93, consistent with packed or encrypted content.
font_07_type1_off00114b95.bin pdf-font-stream PDF embedded font (type1) at offset 0x114B95 9737 bytes
SHA-256: 960be4694dbd9ab16fd25dbd63ecfb662e45d78ec29b2c024220143976386af0
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.86, consistent with packed or encrypted content.
font_08_type1_off00117124.bin pdf-font-stream PDF embedded font (type1) at offset 0x117124 9115 bytes
SHA-256: 828f9c2a3facced93ae63253b2ebb709dd6c4661a4d75d0128ec11fe2f02590b
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.88, consistent with packed or encrypted content.
font_09_type1_off0011944c.bin pdf-font-stream PDF embedded font (type1) at offset 0x11944C 24579 bytes
SHA-256: 392de88f8a11a9916b17612b711c6953600e6c12c1dc208e5e23b4a6f3e332e1
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.93, consistent with packed or encrypted content.
font_10_type1_off0011f25b.bin pdf-font-stream PDF embedded font (type1) at offset 0x11F25B 16689 bytes
SHA-256: f306ee6c23776685e357d8e27dc042ed6c340b3591a4b16a1107e5d5b0bcfa3f
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.92, consistent with packed or encrypted content.
font_11_type1_off0012323c.bin pdf-font-stream PDF embedded font (type1) at offset 0x12323C 16922 bytes
SHA-256: 2481ed45be3cbced3cd1423eae5f3ed1314b9359efb52aad29cbd08bbff42fbc
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.90, consistent with packed or encrypted content.
font_12_type1_off001272bd.bin pdf-font-stream PDF embedded font (type1) at offset 0x1272BD 7459 bytes
SHA-256: f5d021807b0e2fcd09ffb0cb911e472b744b975d416c8a26468f3c6fd2583413
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.83, consistent with packed or encrypted content.
font_13_type1_off00128f85.bin pdf-font-stream PDF embedded font (type1) at offset 0x128F85 9037 bytes
SHA-256: b867e2e97b4e1f638d503b31831baa2b9dc4cb927b409f8a4bfc7ad6dfa76221
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.86, consistent with packed or encrypted content.
font_14_type1_off0012b27c.bin pdf-font-stream PDF embedded font (type1) at offset 0x12B27C 7275 bytes
SHA-256: 7ab9752feff6ffb06a9ec5a32ee084cb540f97ca9970d9fdcae3afd39931b485
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.84, consistent with packed or encrypted content.
font_15_type1_off0012ce99.bin pdf-font-stream PDF embedded font (type1) at offset 0x12CE99 18475 bytes
SHA-256: 4e387994afc758f8ef0a14b2b0bfe0926ab807d289f7c79f81c2bc5622bdcb93
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.93, consistent with packed or encrypted content.
font_16_type1_off00131572.bin pdf-font-stream PDF embedded font (type1) at offset 0x131572 11935 bytes
SHA-256: dcdfe5fa8202583e79be803413ed422ff6a62583a2e78cb027c1dc95ed1273d7
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.90, consistent with packed or encrypted content.
font_17_type1_off00134345.bin pdf-font-stream PDF embedded font (type1) at offset 0x134345 24344 bytes
SHA-256: b028b0ec8e777b4ff7a626499ca9b97259af1c116042499654228d5cb863c1c9
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.91, consistent with packed or encrypted content.
font_18_type1_off0013a051.bin pdf-font-stream PDF embedded font (type1) at offset 0x13A051 7835 bytes
SHA-256: 73d30c0b5473324093344475a780fbdd324ee96fc0e14237ff162ad675320546
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.75, consistent with packed or encrypted content.
font_19_type1_off0013bdb7.bin pdf-font-stream PDF embedded font (type1) at offset 0x13BDB7 21969 bytes
SHA-256: 93f3c18e8359efa775807ad9c540b104463a2d075231e17d93da2d5ac2b374b8
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.90, consistent with packed or encrypted content.
font_20_type1_off00141186.bin pdf-font-stream PDF embedded font (type1) at offset 0x141186 2614 bytes
SHA-256: e2b046f30dd19e789fcee69c3a85d9470b6fbe42688e587f03e73aa317b4f2d3

Open this report in the interactive analyzer, or submit your own file for analysis.