PDF / .VIR static analysis report

Static analysis result for SHA-256 006b584203b2e8f9…

CLEAN

PDF / .VIR

430.8 KB Created: 2015-10-26 14:52:29 -04:00 Authoring application: Microsoft® Word 2010 First seen: 2024-11-17
MD5: af1f18681097ce338d216b4ced3db2ca SHA-1: 46ecfd1a9ca228fff9b0bd90a729cd46df1129aa SHA-256: 006b584203b2e8f91220384dc597748162ae3bd5179e3f13e8ec7e3dc8755a5e
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://undocs.org/sp/A/68/217 PDF link annotation
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn extracted file (font_00_sfnt_off0002729d.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In extracted file (font_00_sfnt_off0002729d.bin)
    • http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0ZIn extracted file (font_00_sfnt_off0002729d.bin)
    • http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0In extracted file (font_00_sfnt_off0002729d.bin)
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn extracted file (font_00_sfnt_off0002729d.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In extracted file (font_00_sfnt_off0002729d.bin)
    • http://www.microsoft.com/typography/0In extracted file (font_00_sfnt_off0002729d.bin)
    • http://www.microsoft.com/typography/ctfontshttp://fontfabrik.comYouIn extracted file (font_04_sfnt_off00053888.bin)
    • http://www.microsoft.com/typography/fonts/default.aspxIn extracted file (font_04_sfnt_off00053888.bin)
    • http://www.microsoft.com/typographyIn extracted file (font_04_sfnt_off00053888.bin)

Related samples 4

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 5

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off0002729d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2729D 222924 bytes
SHA-256: 6a03521293299fa98fd7ad80e8c08c000b1fa8a1e72292d7623d9a9f4ef2ba0c
font_01_sfnt_off000395e6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x395E6 203128 bytes
SHA-256: baa5ef06cf8f130be2048544f8dd2657557eb1a18469ab7ce7c33d2b94793f8f
font_02_sfnt_off00047b1d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x47B1D 3696 bytes
SHA-256: f944a73de02a53ebf54cfe70096147542a5ae5d51f678bbeb6a92c67838c533f
font_03_sfnt_off00048184.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x48184 153836 bytes
SHA-256: 80586df7699dc79b5a5424eae77839f04428de12fb9033cc0e0064caed9dda47
font_04_sfnt_off00053888.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x53888 168972 bytes
SHA-256: a70da2d370d9d343c32c3acfb46338fe25505f6614fdafb35e4830cc532d7855

Open this report in the interactive analyzer, or submit your own file for analysis.