Malicious PDF — malware analysis report

Static analysis result for SHA-256 834c3a0de77051d9…

MALICIOUS

PDF

1.74 MB Created: 2008-02-27 15:10:56 +05:30 Authoring application: Adobe Designer 7.0 First seen: 2026-05-08
MD5: 70dde44d2cd2449cc40e5fccbbbcb8ba SHA-1: 53adb3012109f2d56a214b464cb3e66662f7ffbe SHA-256: 834c3a0de77051d9d8918a6d9d0014d36f7a93a71d3bb7c1fb544cd636cd8f70
246 Risk Score

🔏 Digital signature Modified after signing

A signature covers the whole signed byte range — PDF JavaScript is never signed on its own — and does not by itself mean the document is safe.

Malware Insights

MITRE ATT&CK
T1059.007 JavaScript T1203 Exploitation for Client Execution T1566.001 Spearphishing Attachment

The sample is a PDF document that utilizes XFA forms and embedded JavaScript. Heuristics indicate it is related to CVE-2023-26369, a known vulnerability in Adobe products. The JavaScript attempts to redirect the user to 'http://cgi.adobe.com/special/acrobat/update', which is likely a lure to download a second-stage payload. The document also contains a suspicious URL pointing to an IP address, suggesting a potential command and control or download server.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9354

Heuristics 14

  • XFA form contains risky executable script high CVE related PDF_XFA_SCRIPT
    PDF embeds an XFA form whose script block contains exploit, submission/launch, or shell-execution primitives. Ordinary LiveCycle print/update scripts are left as generic XFA/JS signals unless stronger behavior is present.
  • TrueType bitmap font + active content — CVE-2023-26369 related high CVE related PDF_CVE_2023_26369_RELATED
    PDF embeds a TrueType font with bitmap tables (EBDT/sbix/CBDT) alongside exploit delivery indicators — CVE-2023-26369 exploits the sfac_GetSbitBitmap function in Adobe's libCoolType for arbitrary code execution. This CVE was actively exploited in the wild, but this rule does not validate the malformed EBLC/EBDT primitive.
  • JavaScript action low 2 related findings PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTER
    PDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Active content added after the PDF was signed medium PDF_SIGNATURE_POST_SIGN_MODIFICATION
    An incremental update appended AFTER the signed byte range introduces active content (/EmbeddedFile, /Catalog). Some of this can occur in legitimate form-fill (field scripts, a rewritten /Catalog), so it is suspicious rather than damning — but it is content the signer did not approve.
  • Embedded file low PDF_EMBEDDED
    PDF embeds a file attachment — could carry an executable or another weaponised document as a nested payload
  • XFA form low PDF_XFA
    PDF uses XML Forms Architecture — can contain script logic
  • AcroForm button with action trigger low PDF_ACROFORM_BUTTON
    PDF contains a /Btn form field together with a SubmitForm/URI/Launch/JS trigger — this is the building block of fake 'Download' or 'Open' button overlays used in PDF phishing lures
  • Fake invoice / payment lure low SE_INVOICE_LURE
    Document contains invoice or payment language paired with an action verb — useful context when combined with link, macro, or attachment indicators
  • Embedded script payload in PDF stream info PDF_EMBEDDED_SCRIPT_PAYLOAD
    PDF stream bytes contain an HTML/XFA <script> tag without accompanying Windows shell-execution primitives — common in accessible XFA forms but worth surfacing for analyst review.
  • Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
    The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://83.244.140.55/pd/ExternalPortal-Registration-context-root/RegistrationService In PDF document text
    • http://oracle.j2ee.ws/ejb/epws:getRegistrationRandomNumberIn PDF document text
    • http://oracle.j2ee.ws/ejb/epws:getRegistrationRandomNumberResponseIn PDF document text
    • http://www.monotype.comMonotypeIn PDF document text
    • http://www.monotype.comhttp://www.monotype.com/html/type/license.htmlIn PDF document text
    • http://www.opsi.gov.ukIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xdp/In PDF document text
    • http://www.xfa.org/schema/xci/1.0/In PDF document text
    • http://www.xfa.org/schema/xfa-template/2.2/In PDF document text
    • http://www.xfa.org/schema/xfa-template/2.1/In PDF document text
    • http://www.w3.org/1999/xhtmlIn PDF document text
    • http://www.xfa.org/schema/xfa-data/1.0/In PDF document text
    • http://www.w3.org/2000/10/XMLSchema-instanceIn PDF document text
    • https://services.mhra.gov.uk/pd/ExternalPortal-Registration-context-root/RegistrationServiceIn PDF document text
    • http://crl.adobe.com/prodSvce.crl0In PDF document text
    • https://www.adobe.com/misc/pki/prod_svce_cpIn PDF document text
    • http://crl.adobe.com/cds.crl0���~�|�z0x1In PDF document text
    • http://cgi.adobe.com/special/acrobat/updateReferenced by PDF JavaScript
    • http://www.xfa.org/schema/xfa-locale-set/2.1/In PDF document text
    • http://ns.adobe.com/xtd/In PDF document text
    • http://ns.adobe.com/xfdf/In PDF document text
    • http://www.monotype.com/html/mtname/ms_arial.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlhttp://www.monotype.com/html/type/license.htmlIn PDF document text
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlNOTIFICATIONIn PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 19

Files carved from inside the sample during analysis.

FilenameKindSourceSize
embedded_file_obj0176.bin pdf-embedded-file PDF EmbeddedFile object 176 at offset 0x8891B 85 bytes
SHA-256: c06dcd026a7ea0536b63e07ce688691b585339a3ab7ff59065e546b56308c7bb
embedded_file_obj0177.bin pdf-embedded-file PDF EmbeddedFile object 177 at offset 0x889CE 1693 bytes
SHA-256: afd3d21a3e5d6bce106fef8dcd911a836cb1e1c7d7ac8be56d9b81b0cadfd794
embedded_file_obj0178.bin pdf-embedded-file PDF EmbeddedFile object 178 at offset 0x88CDE 819619 bytes
SHA-256: ce633c1ccf6b162f34562d09d21e51c4dfc3f9823fef9f3e02b610dc984f8f4f
Detection
ClamAV: No threats found
Obfuscation or payload: likely
1473 of 2090 identifiers look randomly generated (e.g. 'M3cLL34QMnkNMXkNMXkNMXkNMXkNMXkNMXkNMXkN'); 1 string-concatenation chain(s) — consistent with name-mangling obfuscation.
embedded_file_obj0179.bin pdf-embedded-file PDF EmbeddedFile object 179 at offset 0xA1921 2610 bytes
SHA-256: 01163534ef20fa78a0cb9b0fdffe8e07465266af335788d3d45b6c8ae3f5859b
embedded_file_obj0180.bin pdf-embedded-file PDF EmbeddedFile object 180 at offset 0xA1C31 2227 bytes
SHA-256: 1129d0a37f5adec1e25975fb1a5c7d88c3e943791c0c701a479c42f7c8dc748b
embedded_file_obj0181.bin pdf-embedded-file PDF EmbeddedFile object 181 at offset 0xA1F12 212 bytes
SHA-256: 57045217c453d4674a08ad8778674bf199a7989a9505424a1815c016e6bb412f
embedded_file_obj0182.bin pdf-embedded-file PDF EmbeddedFile object 182 at offset 0xA200A 709 bytes
SHA-256: 7e72487d78685d082d9fafdde99b310206f6adec2d5d1720432e3fecc757dae4
embedded_file_obj0183.bin pdf-embedded-file PDF EmbeddedFile object 183 at offset 0xA21EE 85 bytes
SHA-256: a60265344cf1a9e94da34c8f587f64a4297e2fa417c895852209903ab7588bcc
embedded_file_obj0277.bin pdf-embedded-file PDF EmbeddedFile object 277 at offset 0x1A505A 1812 bytes
SHA-256: f7de56ab5d864e3566c043c4768f885fc4e9fa6fd58a63f666672fec43e7c91a
embedded_file_obj0278.bin pdf-embedded-file PDF EmbeddedFile object 278 at offset 0x1A537B 824532 bytes
SHA-256: 9606a8dba72491083f05ea989c9ffb52f62064c497be429b0643fc65e41881a3
Detection
ClamAV: No threats found
Obfuscation or payload: likely
1473 of 2090 identifiers look randomly generated (e.g. 'M3cLL34QMnkNMXkNMXkNMXkNMXkNMXkNMXkNMXkN'); 1 string-concatenation chain(s) — consistent with name-mangling obfuscation.
embedded_file_obj0279.bin pdf-embedded-file PDF EmbeddedFile object 279 at offset 0x1BE04D 2773 bytes
SHA-256: 87088d5b66a2284f233c903dff53dcc7966aecd3415b4475d3c0304b1fd90211
javascript_obj0168_000.js pdf-javascript-stream PDF /JS object 168 at offset 0x88194 870 bytes
SHA-256: 4a1aca004cf20431c9a66dce85404a6411a54d881a6c257882260ffc972a13eb
Preview script
First 1,000 lines of the extracted script
if (typeof(ADBE.Reader_Value_Asked) == "undefined")
   ADBE.Reader_Value_Asked = false;
if (typeof(ADBE.Viewer_Value_Asked) == "undefined")
   ADBE.Viewer_Value_Asked = false;
if (typeof(ADBE.Reader_Need_Version) == "undefined" || ADBE.Reader_Need_Version < 7.0)
{
   ADBE.Reader_Need_Version = 7.0;
   ADBE.Reader_Value_New_Version_URL = "http://cgi.adobe.com/special/acrobat/update";
   ADBE.SYSINFO = "?p=" + app.platform + "&v=" + app.viewerVersion + "&l=" + app.language + "&c=" + app.viewerType + "&w=" + "XFA1_6";
}
if (typeof(ADBE.Viewer_Need_Version) == "undefined" || ADBE.Viewer_Need_Version < 7.0)
{
   ADBE.Viewer_Need_Version = 7.0;
   ADBE.Viewer_Value_New_Version_URL = "http://cgi.adobe.com/special/acrobat/update";
   ADBE.SYSINFO = "?p=" + app.platform + "&v=" + app.viewerVersion + "&l=" + app.language + "&c=" + app.viewerType + "&w=" + "XFA1_6";
}
javascript_obj0170_001.js pdf-javascript-stream PDF /JS object 170 at offset 0x8831B 2794 bytes
SHA-256: 4e139c8b22ec16bd5aa51575c80dec2bbf89b76977a06b68473031a0eb206366
Preview script
First 1,000 lines of the extracted script
if (typeof(this.ADBE) == "undefined")
   this.ADBE = new Object();
ADBE.LANGUAGE = "ENU";
ADBE.Viewer_string_Title = "Adobe Acrobat";
ADBE.Viewer_string_Update_Desc = "Adobe Interactive Forms Update";
ADBE.Viewer_string_Update_Reader_Desc = "Adobe Reader 7";
ADBE.Reader_string_Need_New_Version_Msg = "This PDF file requires a newer version of Adobe Reader. Press OK to download the latest version or see your system administrator.";
ADBE.Viewer_Form_string_Reader_601 = "This PDF form requires a newer version of Adobe Reader. Although the form may appear to work properly, some elements may function improperly or may not appear at all. Press OK to initiate an online update or see your system administrator.";
ADBE.Viewer_Form_string_Reader_Older = "This PDF form requires a newer version of Adobe Reader. Although the form may appear to work properly, some elements may function improperly or may not appear at all. Press OK for online download information or see your system administrator.";
ADBE.Viewer_Form_string_Viewer_601 = "This PDF form requires a newer version of Adobe Acrobat. Although the form may appear to work properly, some elements may function improperly or may not appear at all. Press OK to initiate an online update or see your system administrator.";
ADBE.Viewer_Form_string_Viewer_60 = "This PDF form requires a newer version of Adobe Acrobat. Although the form may appear to work properly, some elements may function improperly or may not appear at all. For more information please copy the following URL (CTRL+C on Win, Command-C on Mac) and paste into your browser or see your system administrator.";
ADBE.Viewer_Form_string_Viewer_Older = "This PDF requires a newer version of Acrobat. Copy this URL and paste into your browser or see your sys admin.";
ADBE.Viewer_Form_string_Reader_5x = "This PDF form requires a newer version of Adobe Reader. Without a newer version, the form may be displayed, but it might not work properly. Some form elements might not be visible at all. If an internet connection is available, clicking OK will open your browser to a web page where you can obtain the latest version.";
ADBE.Viewer_Form_string_Reader_6_7x = "This PDF form requires a newer version of Adobe Reader. Without a newer version, the form may be displayed, but it might not work properly. Some form elements might not be visible at all. If an internet connection is available, clicking OK will download and install the latest version.";
ADBE.Viewer_Form_string_Viewer_7x = "This PDF form requires a newer version of Adobe Acrobat. Without a newer version, the form may be displayed, but it might not work properly. Some form elements might not be visible at all. If an internet connection is available, clicking OK will download and install the latest version.";
javascript_obj0172_002.js pdf-javascript-stream PDF /JS object 172 at offset 0x8860D 1528 bytes
SHA-256: c876171bd867b66b7671fb337ff9e57d18cd15b43d344cf5a7243821300a408a
Preview script
First 1,000 lines of the extracted script
if (typeof(xfa_installed) == "undefined" || typeof(xfa_version) == "undefined" || xfa_version < 2.0)
{
   if (app.viewerType == "Reader")
   {
      if (ADBE.Reader_Value_Asked != true)
      {
         if (app.viewerVersion < 6.0)
         {
            if (app.alert(ADBE.Viewer_Form_string_Reader_5x, 1, 1) == 1)
               this.getURL(ADBE.Reader_Value_New_Version_URL + ADBE.SYSINFO, false);
            ADBE.Reader_Value_Asked = true;
         }
         else if (app.viewerVersion < 7.0)
         {
            if (app.alert(ADBE.Viewer_Form_string_Reader_601, 1, 1) == 1)
               app.findComponent({cType:"App", cName:"Reader7", cDesc: ADBE.Viewer_string_Update_Reader_Desc});
            ADBE.Reader_Value_Asked = true;
         }
         else
         {
            if (app.alert(ADBE.Viewer_Form_string_Reader_6_7x, 1, 1) == 1)
               app.findComponent({cType:"Plugin", cName:"XFA", cDesc: ADBE.Viewer_string_Update_Desc});
            ADBE.Reader_Value_Asked = true;
         }
      }
   }
   else
   {
      if (ADBE.Viewer_Value_Asked != true)
      {
         if (app.viewerVersion < 7.0)
            app.response({cQuestion: ADBE.Viewer_Form_string_Viewer_Older, cDefault: ADBE.Viewer_Value_New_Version_URL + ADBE.SYSINFO, cTitle: ADBE.Viewer_string_Title});
         else if (app.alert(ADBE.Viewer_Form_string_Viewer_7x, 1, 1) == 1)
            app.findComponent({cType:"Plugin", cName:"XFA", cDesc: ADBE.Viewer_string_Update_Desc});
         ADBE.Viewer_Value_Asked = true;
      }
   }
}
stream_000_off00000908.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x908 293120 bytes
SHA-256: 3463cb6a96f307e7e3d7300dfb47d1a354c957c464dadd2539dcb8dc271d2635
stream_001_off0002be69.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2BE69 308015 bytes
SHA-256: 4735e29f6b4dfaae31ceba3a66c7548a579b3b0ad8f9ec68bc6e90b0597d7de3
embedded_pdf_script_000d9d4c.bin pdf-embedded-script PDF raw stream script payload at offset 0xD9D4C 818647 bytes
SHA-256: 07088bce4d7103ae9975a8989483d75a1a5da3f060ebda790100db9f67272275
Detection
ClamAV: No threats found
Obfuscation or payload: likely
1473 of 2092 identifiers look randomly generated (e.g. 'M3cLL34QMnkNMXkNMXkNMXkNMXkNMXkNMXkNMXkN'); 1 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
<template xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
><subform layout="tb" locale="en_GB_EURO" name="RegistrationForm"
><pageSet
><pageArea id="Page1" name="Page1"
><contentArea h="10.5in" w="8in" x="0.25in" y="0.25in"
/><medium long="11in" short="8.5in" stock="letter"
/><draw xmlns="http://www.xfa.org/schema/xfa-template/2.1/" h="268.29mm" name="Rectangle1" w="204.79mm" x="5.82mm" y="6.35mm"
><value
><rectangle
><edge
/></rectangle
></value
></draw
></pageArea
><?templateDesigner expand 1?></pageSet
><subform h="10.5in" w="204.5295mm"
><draw h="6.09mm" name="StaticText3" w="203.99mm" x="1.3099mm" y="24.18mm"
><ui
><textEdit
><margin
/></textEdit
></ui
><value
><exData contentType="text/html" maxLength="0"
><body xmlns="http://www.w3.org/1999/xhtml" xmlns:xfa="http://www.xfa.org/schema/xfa-data/1.0/" xfa:APIVersion="1.4.4136.0"
><p
>Use this form to register your organisation to use the MHRA Portal or RamaXL.</p
><p
><span style="xfa-spacerun:yes"
> </span
></p
></body
></exData
></value
><font baselineShift="0pt" size="12pt" typeface="Arial" weight="bold"
></font
><margin bottomInset="0.5mm" leftInset="0.5mm" rightInset="0.5mm" topInset="0.5mm"
/><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/></draw
><draw h="23.55mm" name="StaticText1" w="177.01mm" x="1.3mm" y="0.26mm"
><ui
><textEdit
><margin
/></textEdit
></ui
><value
><exData contentType="text/html" maxLength="0"
><body xmlns="http://www.w3.org/1999/xhtml" xmlns:xfa="http://www.xfa.org/schema/xfa-data/1.0/" xfa:APIVersion="2.2.4330.0"
><p
>Medicines and Healthcare products Regulatory Agency</p
><p
>Subscribing Organisaton Registration Form</p
></body
></exData
></value
><font size="16pt" typeface="Arial" weight="bold"
></font
><margin bottomInset="0.5mm" leftInset="0.5mm" rightInset="0.5mm" topInset="0.5mm"
/></draw
><draw minH="7.0411mm" name="StaticText2" w="203.7299mm" y="84.9299mm"
><ui
><textEdit
><margin
/></textEdit
></ui
><value
><text
>Section 1: Organisation and Director Information</text
></value
><font size="12pt" typeface="Arial" weight="bold"
><fill
><color value="255,255,255"
/></fill
></font
><margin bottomInset="0.5mm" leftInset="0.5mm" rightInset="0.5mm" topInset="0.5mm"
/><border
><edge presence="hidden"
/><edge presence="hidden"
/><edge presence="hidden"
/><edge presence="hidden"
/><fill
><color value="34,2,117"
/></fill
></border
><para vAlign="middle"
/></draw
><field h="8.9916mm" name="DirTitle" w="200.66mm" x="1.3mm" y="113.4699mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>Title * :</text
></value
></caption
><validate scriptTest="warning"
><message
><text name="nullTest"
/></message
></validate
><?templateDesigner ScriptInitializers exit:lang=JavaScript;initialize:lang=JavaScript;?><value
><text maxChars="4000"
/></value
></field
><field h="8.9916mm" name="DirForeName" w="200.66mm" x="1.3mm" y="121.6898mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>Forename * :</text
></value
></caption
><value
><text maxChars="4000"
/></value
><validate scriptTest="warning"
><message
><text name="nullTest"
/></message
></validate
><?templateDesigner ScriptInitializers exit:lang=JavaScript;?></field
><field h="8.9916mm" name="DirMiddleName" w="200.66mm" x="1.3mm" y="129.91mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>Middle Name:</text
></value
></caption
><value
><text maxChars="4000"
/></value
><?templateDesigner ScriptInitializers exit:lang=JavaScript;?><validate scriptTest="warning"
/></field
><field h="8.9916mm" name="DirSurName" w="200.66mm" x="1.3mm" y="138.13mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>Surname * :</text
></value
></caption
><value
><text maxChars="4000"
/></value
><validate scriptTest="warning"
><message
><text name="nullTest"
/></message
></validate
></field
><field h="8.9916mm" name="DirAddrLine1" w="200.66mm" x="1.3mm" y="162.6501mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>Address Line 1 * :</text
></value
></caption
><validate scriptTest="warning"
><message
><text name="nullTest"
/></message
></validate
><value
><text maxChars="4000"
/></value
><?templateDesigner ScriptInitializers exit:lang=JavaScript;?></field
><field h="8.9916mm" name="DirAddrLine2" w="200.66mm" x="1.3mm" y="170.7799mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>Address Line 2:</text
></value
></caption
><value
><text maxChars="4000"
/></value
><?templateDesigner ScriptInitializers exit:lang=JavaScript;?><validate scriptTest="warning"
/></field
><field h="8.9916mm" name="DirAddrLine3" w="200.66mm" x="1.3mm" y="178.9999mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>Address Line 3:</text
></value
></caption
><value
><text maxChars="4000"
/></value
><?templateDesigner ScriptInitializers exit:lang=JavaScript;?><validate scriptTest="warning"
/></field
><field h="8.9916mm" name="DirCity" w="200.66mm" x="1.3mm" y="187.5703mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>City * :</text
></value
></caption
><value
><text maxChars="4000"
/></value
><validate scriptTest="warning"
><message
><text name="nullTest"
/></message
></validate
></field
><field h="8.9916mm" name="DirState" w="200.66mm" x="1.3mm" y="195.5588mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>County / State:</text
></value
></caption
><value
><text maxChars="4000"
/></value
><?templateDesigner ScriptInitializers exit:lang=JavaScript;?><validate scriptTest="warning"
/></field
><field h="8.9916mm" name="DirPostCode" w="200.66mm" x="1.3mm" y="203.7501mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>Postcode / Zip * :</text
></value
></caption
><value
><text maxChars="4000"
/></value
><validate scriptTest="warning"
><message
><text name="nullTest"
/></message
></validate
><?templateDesigner ScriptInitializers exit:lang=JavaScript;?></field
><field h="8.9916mm" name="DirCountry" w="200.66mm" x="1.2954mm" y="211.9601mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>Country * :</text
></value
></caption
><value
><text maxChars="4000"
/></value
><validate scriptTest="warning"
><message
><text name="nullTest"
/></message
></validate
><?templateDesigner ScriptInitializers exit:lang=JavaScript;?></field
><field h="8.9916mm" name="DirResTel" w="200.66mm" x="1.3mm" y="220.1901mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>Residential Tel * :</text
></value
></caption
><value
><text maxChars="4000"
/></value
><validate scriptTest="warning"
><message
><text name="nullTest"
/></message
></validate
></field
><draw h="7.1199mm" name="StaticText2" w="203.7299mm" x="0.2601mm" y="92.5702mm"
><ui
><textEdit
><margin
/></textEdit
></ui
><value
><text
>1.1 Director Details</text
></value
><font baselineShift="0pt" size="12pt" typeface="Arial" weight="bold"
></font
><margin bottomInset="0.5mm" leftInset="0.5mm" rightInset="0.5mm" topInset="0.5mm"
/><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt"
/><border
><edge presence="hidden"
/><edge presence="hidden"
/><edge presence="hidden"
/><edge presence="hidden"
/><fill
><color value="153,204,255"
/></fill
><corner
/><corner
/><corner
/><corner
/></border
></draw
><draw h="7.3978mm" name="StaticText4" w="203.1996mm" x="1.27mm" y="105.04mm"
><ui
><textEdit
></textEdit
></ui
><value
><text
>Enter organisation director's personal details in the fields below:</text
></value
><font baselineShift="0pt" size="12pt" typeface="Arial" weight="bold"
></font
><margin bottomInset="0.5mm" leftInset="0.5mm" rightInset="0.5mm" topInset="0.5mm"
/><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt"
/></draw
><draw h="8.3378mm" name="StaticText4" w="202.67mm" x="1.8298mm" y="153.8002mm"
><ui
><textEdit
><margin
/></textEdit
></ui
><value
><text
>Enter organisation director's residential address in the fields below:</text
></value
><font baselineShift="0pt" size="12pt" typeface="Arial" weight="bold"
></font
><margin bottomInset="0.5mm" leftInset="0.5mm" rightInset="0.5mm" topInset="0.5mm"
/><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt"
/></draw
><?templateDesigner expand 1?><draw name="StaticText4" w="155.31mm" x="1.3mm" y="236.0401mm"
><ui
><textEdit
><margin
/></textEdit
></ui
><value
><text
>Enter details for a referee from your organisation:</text
></value
><font baselineShift="0pt" size="12pt" typeface="Arial" weight="bold"
></font
><margin bottomInset="0.5mm" leftInset="0.5mm" rightInset="0.5mm" topInset="0.5mm"
/><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt"
/></draw
><field h="8.9916mm" name="RefereeFullName" w="200.66mm" x="1.2954mm" y="244.0798mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>Referee's Full Name * :</text
></value
></caption
><validate scriptTest="warning"
><message
><text name="nullTest"
/></message
></validate
><value
><text maxChars="4000"
/></value
><?templateDesigner ScriptInitializers exit:lang=JavaScript;?></field
><field h="8.9916mm" name="RefereeContactTelNo" w="200.66mm" x="1.3mm" y="252.26mm"
><ui
><textEdit
><border
><?templateDesigner StyleID aped2?></border
><margin
/></textEdit
></ui
><font typeface="Arial"
></font
><margin bottomInset="1mm" leftInset="1mm" rightInset="1mm" topInset="1mm"
/><para vAlign="middle"
/><caption reserve="45.72mm"
><font baselineShift="0pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/><value
><text
>Contact Telephone No * :</text
></value
></caption
><validate scriptTest="warning"
><message
><text name="nullTest"
/></message
></validate
><value
><text maxChars="4000"
/></value
><?templateDesigner ScriptInitializers exit:lang=JavaScript;?></field
><field xmlns="http://www.xfa.org/schema/xfa-template/2.1/" h="6.0802mm" name="ApplyMHRAPortal" w="50.8mm" x="17.4498mm" y="65.8996mm"
><ui
><checkButton
><border xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
><fill
><color value="255, 255, 255"
/></fill
><?templateDesigner StyleID apcb1?></border
></checkButton
></ui
><font xmlns="http://www.xfa.org/schema/xfa-template/2.2/" typeface="Myriad Pro"
/><margin xmlns="http://www.xfa.org/schema/xfa-template/2.2/" leftInset="1mm" rightInset="1mm"
/><para xmlns="http://www.xfa.org/schema/xfa-template/2.2/" vAlign="middle"
/><value
><integer xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
>0</integer
></value
><caption xmlns="http://www.xfa.org/schema/xfa-template/2.2/" reserve="45.72mm"
><para vAlign="middle"
/><font typeface="Arial"
></font
><value
><text
>MHRA Portal Account</text
></value
></caption
><items
><integer
>1</integer
><integer
>0</integer
><integer
>2</integer
></items
><?templateDesigner ScriptInitializers click:lang=JavaScript;initialize:lang=JavaScript;?><event xmlns="http://www.xfa.org/schema/xfa-template/2.2/" activity="click"
><script contentType="application/x-javascript"
>if (RegistrationForm.ApplyMHRAPortal.rawValue == "0")
{
	RegistrationForm.BundleMHRAPortal.rawValue = "";
	RegistrationForm.BundleMHRAPortal.border.fill.color.value = "192,192,192";
	RegistrationForm.BundleMHRAPortal.access = "readOnly";
}
else
{
	RegistrationForm.BundleMHRAPortal.border.fill.color.value = "255,255,255";
	RegistrationForm.BundleMHRAPortal.access = "";
}</script
></event
><event xmlns="http://www.xfa.org/schema/xfa-template/2.2/" activity="initialize"
><script contentType="application/x-javascript"
>if (RegistrationForm.ApplyMHRAPortal.rawValue == "0")
{
	RegistrationForm.BundleMHRAPortal.rawValue = "";
	RegistrationForm.BundleMHRAPortal.border.fill.color.value = "192,192,192";
	RegistrationForm.BundleMHRAPortal.access = "readOnly";
}
else
{
	RegistrationForm.BundleMHRAPortal.border.fill.color.value = "255,255,255";
	RegistrationForm.BundleMHRAPortal.access = "";
}</script
></event
></field
><draw h="6.1699mm" name="StaticText3" w="29.9mm" x="6.35mm" y="59.3597mm"
><ui
><textEdit
><margin
/></textEdit
></ui
><value
><text
>I wish to apply for: </text
></value
><font baselineShift="0pt" typeface="Arial"
></font
><margin bottomInset="0.5mm" leftInset="0.5mm" rightInset="0.5mm" topInset="0.5mm"
/><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/></draw
><field h="6mm" name="ApplyRamaXL" w="50.8mm" x="17.454mm" y="72.5099mm"
><ui
><checkButton
><border
><fill
><color value="255, 255, 255"
/></fill
><?templateDesigner StyleID apcb1?></border
><margin
/></checkButton
></ui
><font typeface="Myriad Pro"
/><margin leftInset="1mm" rightInset="1mm"
/><para vAlign="middle"
/><value
><integer
>0</integer
></value
><caption reserve="45.72mm"
><para vAlign="middle"
/><font typeface="Arial"
></font
><value
><text
>RamaXL Product Licensing</text
></value
></caption
><items
><integer
>1</integer
><integer
>0</integer
><integer
>2</integer
></items
><?templateDesigner ScriptInitializers click:lang=JavaScript;initialize:lang=JavaScript;?><event activity="click"
><script contentType="application/x-javascript"
>if (RegistrationForm.ApplyRamaXL.rawValue == "0")
{
	RegistrationForm.BundleRamaXL.rawValue = "";
	RegistrationForm.BundleRamaXL.border.fill.color.value = "192,192,192";
	RegistrationForm.BundleRamaXL.access = "readOnly";
}
else
{
	RegistrationForm.BundleRamaXL.border.fill.color.value = "255,255,255";
	RegistrationForm.BundleRamaXL.access = "";
}</script
></event
><event activity="initialize"
><script contentType="application/x-javascript"
>if (RegistrationForm.ApplyRamaXL.rawValue == "0")
{
	RegistrationForm.BundleRamaXL.rawValue = "";
	RegistrationForm.BundleRamaXL.border.fill.color.value = "192,192,192";
	RegistrationForm.BundleRamaXL.access = "readOnly";
}
else
{
	RegistrationForm.BundleRamaXL.border.fill.color.value = "255,255,255";
	RegistrationForm.BundleRamaXL.access = "";
}</script
></event
></field
><draw h="6.1699mm" name="StaticText3" w="48.15mm" x="6.35mm" y="35.2788mm"
><ui
><textEdit
><margin
/></textEdit
></ui
><value
><text
>I am an existing subscriber of: </text
></value
><font baselineShift="0pt" typeface="Arial"
></font
><margin bottomInset="0.5mm" leftInset="0.5mm" rightInset="0.5mm" topInset="0.5mm"
/><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt" vAlign="middle"
/></draw
><field h="6.523mm" name="SubscriberMHRAPortal" w="50.8mm" x="17.4498mm" y="41.7702mm"
><ui
><checkButton
><border
><fill
><color value="255, 255, 255"
/></fill
><?templateDesigner StyleID apcb1?></border
><margin
/></checkButton
></ui
><font typeface="Myriad Pro"
/><margin leftInset="1mm" rightInset="1mm"
/><para vAlign="middle"
/><value
><integer
>0</integer
></value
><caption reserve="45.72mm"
><para vAlign="middle"
/><font typeface="Arial"
></font
><value
><text
>MHRA Portal</text
></value
></caption
><items
><integer
>1</integer
><integer
>0</integer
><integer
>2</integer
></items
></field
><field h="6.523mm" name="SubscriberRamaXL" w="50.8mm" x="17.4498mm" y="48.79mm"
><ui
><checkButton
><border
><fill
><color value="255, 255, 255"
/></fill
><?templateDesigner StyleID apcb1?></border
><margin
/></checkButton
></ui
><font typeface="Myriad Pro"
/><margin leftInset="1mm" rightInset="1mm"
/><para vAlign="middle"
/><value
><integer
>0</integer
></value
><caption reserve="45.72mm"
><para vAlign="middle"
/><font typeface="Arial"
></font
><value
><text
>RamaXL Product Licensing</text
></value
></caption
><items
><integer
>1</integer
><integer
>0</integer
><integer
>2</integer
></items
></field
><draw anchorType="middleCenter" h="5.243mm" w="117.5001mm" x="128.4446mm" y="70.6114mm"
><value
><text
>State the number of additional user bundles you require (one bundle is equal to five users) * :</text
></value
><ui
><textEdit
></textEdit
></ui
><font baselineShift="0pt" size="8pt" typeface="Arial"
></font
><margin bottomInset="0.5mm" leftInset="0.5mm" rightInset="0.5mm" topInset="0.5mm"
/><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt"
/></draw
><draw anchorType="middleCenter" h="5.243mm" w="117.7398mm" x="128.5899mm" y="77.2116mm"
><value
><text
>State the number of additional user bundles you require (one bundle is equal to five users) * :</text
></value
><ui
><textEdit
><margin
/></textEdit
></ui
><font baselineShift="0pt" size="8pt" typeface="Arial"
></font
><margin bottomInset="0.5mm" leftInset="0.5mm" rightInset="0.5mm" topInset="0.5mm"
/><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt"
/></draw
><field xmlns="http://www.xfa.org/schema/xfa-template/2.1/" access="readOnly" h="5.6523mm" name="BundleMHRAPortal" w="6.6552mm" x="188.4842mm" y="67.4398mm"
><ui
><textEdit
><border xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
><?templateDesigner StyleID aped2?></border
><margin xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
/></textEdit
></ui
><font xmlns="http://www.xfa.org/schema/xfa-template/2.2/" size="8pt" typeface="Arial"
></font
><margin xmlns="http://www.xfa.org/schema/xfa-template/2.2/" bottomInset="0mm" leftInset="0mm" rightInset="0mm" topInset="0mm"
/><caption xmlns="http://www.xfa.org/schema/xfa-template/2.2/" reserve="0in"
><font baselineShift="0pt" size="8pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt"
/></caption
><border xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
><fill
><color value="192,192,192"
/></fill
></border
><validate xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
/><value xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
><text maxChars="2"
/></value
><para xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
/></field
><field xmlns="http://www.xfa.org/schema/xfa-template/2.1/" h="5.6527mm" name="BundleRamaXL" w="6.6552mm" x="188.4856mm" y="74.5074mm"
><ui
><textEdit
><border xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
><?templateDesigner StyleID aped2?></border
><margin xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
/></textEdit
><picture xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
/></ui
><font xmlns="http://www.xfa.org/schema/xfa-template/2.2/" size="8pt" typeface="Arial"
></font
><margin xmlns="http://www.xfa.org/schema/xfa-template/2.2/" bottomInset="0mm" leftInset="0mm" rightInset="0mm" topInset="0mm"
/><caption xmlns="http://www.xfa.org/schema/xfa-template/2.2/" reserve="0in"
><font baselineShift="0pt" size="8pt" typeface="Arial"
></font
><para marginLeft="0pt" marginRight="0pt" spaceAbove="0pt" spaceBelow="0pt" textIndent="0pt"
/></caption
><border xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
><corner
/><corner
/><corner
/><corner
/><fill
><color value="192,192,192"
/></fill
></border
><validate xmlns="http://www.xfa.org/schema/xfa-template/2.2/" scriptTest="warning"
/><value xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
><text maxChars="2"
/></value
><para xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
/><bind xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
/><format xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
/></field
><draw xmlns="http://www.xfa.org/schema/xfa-template/2.1/" h="5.29mm" name="StaticText6" w="57.4096mm" x="137.2299mm" y="35.2788mm"
><ui
><textEdit
></textEdit
></ui
><value
><text xmlns="http://www.xfa.org/schema/xfa-template/2.2/"
>Note: Fields marked '*' are mandatory</text
></value
><font typeface="Myriad Pro"
></font
><margin bottomInset="0.5mm" leftInset="0.5mm" rightInset="0.5mm" topInset="0.5mm"
/></draw
><draw xmlns="http://www.xfa.org/schema/xfa-template/2.1/" h="25.4mm" name="StaticImage1" w="25.4mm" x="180.4202mm" y="0.2601mm"
><ui
><imageEdit
/></ui
></draw
><draw h="17.195mm" w="21.43mm" x="183.33mm"
><value
><image contentType="image/bmp"
>Qk0qcwcAAAAAAAAAAAAoAAAAAQIAAD0BAAABABgAAAAAAPRyBwDEDgAAxA4AAAAAAAAAAAAA////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////AP//
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
/////////////////////////////////////////////////////////////////////////wD/
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
//////////////////////////////////////////////////////////////////////////8A
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////
…
font_02_cff_off0005ac9c.bin pdf-font-stream PDF embedded font (cff) at offset 0x5AC9C 64586 bytes
SHA-256: 96161e3d15cf67591ef2a1c87940c8dc0af59a94fcfab5d6bfcf4cb992a24af8
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.45, consistent with packed or encrypted content.
font_03_sfnt_off0007a28f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x7A28F 57775 bytes
SHA-256: 5307dc3c5cbbab680f4279aafe69695752d4852ea0f86503bf88000f1c160311

Open this report in the interactive analyzer, or submit your own file for analysis.