PDF static analysis report

Static analysis result for SHA-256 01af960c182fd863…

CLEAN

PDF

416.0 KB Created: 2026-04-25 11:22:06 UTC Authoring application: iOS Version 26.3.1 (a) (Build 23D771330a) Quartz PDFContext First seen: 2026-05-29
MD5: 07d2dbdc8a3b8345c4b5bd88da11292b SHA-1: a4ac595f50156137835242c1772485d62f38e7eb SHA-256: 01af960c182fd8632a8bf62314b59278b33ac9113f3740c036a4b17fe114ecfe
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://wwww.microsoft.com0 In PDF document text
    • http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0ZIn PDF document text
    • http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0ZIn PDF document text
    • http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0��In PDF document text
    • http://www.microsoft.com/PKI/docs/CPS/default.htm0@In PDF document text
    • http://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0lIn PDF document text
    • http://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0In PDF document text
    • http://www.microsoft.com/pkiops/Docs/Repository.htm0In PDF document text
    • http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0In PDF document text
    • http://www.iec.chIn PDF document text
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlMicrosoftIn PDF document text
    • http://www.monotype.com/html/type/license.htmlIn PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn PDF document text
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn PDF document text
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In PDF document text
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn PDF document text
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In PDF document text
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In PDF document text
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In PDF document text
    • http://www.microsoft.com/Typography/0In PDF document text
    • https://docs.microsoft.com/typography/abouthttp://lucasfonts.comMicrosoftIn PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0ZIn PDF document text
    • http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 5

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_004_off000051cc.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x51CC 398580 bytes
SHA-256: 1b623de620b48b21d6a97eec863bc78b660a1074e68830358d73df139b811e8e
icc_00_off00003b04.icc pdf-icc-profile PDF ICC profile at offset 0x3B04 3144 bytes
SHA-256: 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
font_01_sfnt_off000202a6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x202A6 363552 bytes
SHA-256: 0dc4212706b80f569f144ed23777d42d2ac613d741ca057f6fdf1c06cabdbcb5
font_02_sfnt_off00036882.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x36882 23900 bytes
SHA-256: e3801e30803dd059977b96c9d3ea66da5a6a41b8b3487e70e9e7d442d0c774b5
font_03_sfnt_off00039b71.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x39B71 540672 bytes
SHA-256: 9b80b58c680ac3384f2174ab974b5f8599a0986ebb86a6d92e13d26be4fb0c44

Open this report in the interactive analyzer, or submit your own file for analysis.