PDF / .VIR static analysis report

Static analysis result for SHA-256 09985adc75a2518a…

CLEAN

PDF / .VIR

311.8 KB Created: 2024-01-12 12:16:22 -05:00 Authoring application: Microsoft® Word 2016 First seen: 2024-04-09
MD5: 7443a33c4700a20568bd8e66dd43d7f8 SHA-1: 09e6c458d87365ac6f2e65f5fccdee82b4ab01f8 SHA-256: 09985adc75a2518a928bedbbe0604092766262f7428f60e439fa00bbe6d310ce
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0005

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://www.cmiuniversal.com/ PDF link annotation
    • https://www.cmiuniversal.comPDF link annotation
    • http://www.tiro.comMicrosoftIn extracted file (font_04_sfnt_off0004a18e.bin)
    • https://docs.microsoft.com/typography/abouthttp://lucasfonts.comMicrosoftIn extracted file (font_00_sfnt_off0000ab53.bin)
    • http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (font_00_sfnt_off0000ab53.bin)
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn extracted file (font_00_sfnt_off0000ab53.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In extracted file (font_00_sfnt_off0000ab53.bin)
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn extracted file (font_00_sfnt_off0000ab53.bin)
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In extracted file (font_00_sfnt_off0000ab53.bin)
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn extracted file (font_00_sfnt_off0000ab53.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In extracted file (font_00_sfnt_off0000ab53.bin)
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In extracted file (font_00_sfnt_off0000ab53.bin)
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In extracted file (font_00_sfnt_off0000ab53.bin)
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In extracted file (font_00_sfnt_off0000ab53.bin)
    • http://www.microsoft.com/TypographyIn extracted file (font_00_sfnt_off0000ab53.bin)
    • http://crl.microsoft.com/pki/crl/products/CSPCA.crl0HIn extracted file (font_01_sfnt_off00035bd3.bin)
    • http://www.microsoft.com/pki/certs/CSPCA.crt0In extracted file (font_01_sfnt_off00035bd3.bin)
    • http://crl.microsoft.com/pki/crl/products/tspca.crl0HIn extracted file (font_01_sfnt_off00035bd3.bin)
    • http://www.microsoft.com/pki/certs/tspca.crt0In extracted file (font_01_sfnt_off00035bd3.bin)
    • http://www.microsoft.com/typographyIn extracted file (font_01_sfnt_off00035bd3.bin)
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlMicrosoftIn extracted file (font_03_sfnt_off00046dcc.bin)
    • http://www.monotype.com/html/type/license.htmlIn extracted file (font_03_sfnt_off00046dcc.bin)
    • http://www.microsoft.com/Typography/0In extracted file (font_03_sfnt_off00046dcc.bin)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 5

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off0000ab53.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xAB53 537988 bytes
SHA-256: 1353513270a633226b001a320ec20b828b104c33ea5bc3ec65cde038632ac8c1
font_01_sfnt_off00035bd3.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x35BD3 105560 bytes
SHA-256: 3b2783c8f4903407964265fb0653bde99a0e05a160689e2be741b6245b09626b
font_02_sfnt_off0003e603.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3E603 100600 bytes
SHA-256: 9916b4b6bb2d5e4bf5427f831c850980c2fc35fa0ec0c872ef38e73be15f93b1
font_03_sfnt_off00046dcc.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x46DCC 25228 bytes
SHA-256: b1c2362109b3c1555dd5946549cada931b8066060cb7036e6b0b500de41c44e8
font_04_sfnt_off0004a18e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4A18E 40544 bytes
SHA-256: aebec9f3f8928b0e6c5d584be23bc6b0d478514978c52ba7322d96d9fee2bbd8

Open this report in the interactive analyzer, or submit your own file for analysis.