PDF / .VIR static analysis report

Static analysis result for SHA-256 0e62ee1eb4ee0cc3…

CLEAN

PDF / .VIR

349.8 KB Created: 2019-04-09 12:44:07 -05:00 Authoring application: Microsoft® Word 2016 First seen: 2025-02-08
MD5: 4e71d567e564c1dc4b3e379651cb2f1e SHA-1: 75f2fe9e0002234395e2b4f27eada8b6d705189f SHA-256: 0e62ee1eb4ee0cc31a700cdc91d8f4d5419ed22fd082cb6fa079c0a7359e8828
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0002

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://revistas.reduc.edu.cu/index.php/agrisost/index PDF link annotation
    • http://cagricola.uclv.edu.cu/descargas/pdf/V30-Numero_1/cag201031280.pdfIn PDF document text
    • http://cagricola.uclv.edu.cu/descargas/pdf/V30-Numero_2/cag132031294.pdfIn PDF document text
    • http://www.iniaorg.uy/convenio-inace-inia/resultadosgir/gir.htmIn PDF document text
    • http://dspace.uclv.edu.cu/bitstream/handle/123456789/6365/A%C3%AFcha%20Ilmi%20Osman_2016.pdf?sequence=1&isAllowed=yIn PDF document text
    • http://www.magon.cu/Doc/Vol22No%201/1074EFECTODEDIFERENTESDENSIDADESDESIEMBRA.pdfIn PDF document text
    • http://cagricola.uclv.edu.cu/descargas/pdf/V30-Numero_2/cag022031283.pdfIn PDF document text
    • http://www.eumed.net/cursecon/ecolat/cu/2008/cgg.pdfIn PDF document text
    • http://cagricola.uclv.edu.cu/descargas/pdf/V37-Numero_2/Art%2011.pdfIn PDF document text
    • http://dspace.uclv.edu.cu/bitstream/handle/123456789/690/A0051.pdf?sequence=1&isAllowed=yIn PDF document text
    • http://cagricola.uclv.edu.cu/descargas/pdf/V30-In PDF document text
    • http://www.iniaorg.uy/convenio-inace-In PDF document text
    • http://dspace.uclv.edu.cu/bitstream/handle/123456789/6365/A%C3%AFcha%20Ilmi%20OsmanIn PDF document text
    • http://www.magon.cu/Doc/Vol22No%201/1074EFECTODEDIFERENTESDENSIDADESDESIn PDF document text
    • http://dspace.uclv.edu.cu/bitstream/handle/123456789/690/A0051.pdf?sequence=1&isAllowed=In PDF document text
    • http://www.redalyc.org/pdf/1930/193017708015.pdfIn PDF document text
    • http://www.actaf.co.cu/revistas/Revista%20ACPA/2004/REVISTA%2003%20Y%2004/20%20EL%20GIRASOL.pdfIn PDF document text
    • http://www.actaf.co.cu/revistas/Revista%20ACPA/2004/REVISTA%2003%20Y%2004/20%20In PDF document text
    • http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (font_00_sfnt_off000199b4.bin)
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn extracted file (font_00_sfnt_off000199b4.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In extracted file (font_00_sfnt_off000199b4.bin)
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn extracted file (font_00_sfnt_off000199b4.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In extracted file (font_00_sfnt_off000199b4.bin)
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn extracted file (font_00_sfnt_off000199b4.bin)
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In extracted file (font_00_sfnt_off000199b4.bin)
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In extracted file (font_00_sfnt_off000199b4.bin)
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In extracted file (font_00_sfnt_off000199b4.bin)
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In extracted file (font_00_sfnt_off000199b4.bin)
    • http://www.microsoft.com/Typography/0In extracted file (font_00_sfnt_off000199b4.bin)
    • https://www.verisign.com/repository/CPS��In extracted file (font_01_sfnt_off000367fa.bin)
    • https://www.verisign.comIn extracted file (font_01_sfnt_off000367fa.bin)
    • https://www.verisign.com/repository/verisignlogo.gif0��In extracted file (font_01_sfnt_off000367fa.bin)
    • https://www.verisign.com/CPS0bIn extracted file (font_01_sfnt_off000367fa.bin)
    • http://www.microsoft.com/truetype/0In extracted file (font_01_sfnt_off000367fa.bin)
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlMicrosoftIn extracted file (font_03_sfnt_off0004fffa.bin)
    • http://www.monotype.com/html/type/license.htmlIn extracted file (font_03_sfnt_off0004fffa.bin)

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off000199b4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x199B4 374708 bytes
SHA-256: d1d2ee49e99a2f326a3d5b56e64f87d5eb9f97cb6cd92cdb36d3ad585a9fe9a9
font_01_sfnt_off000367fa.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x367FA 45284 bytes
SHA-256: 16fdeab11e493d38ad1377fbe74dc9edd7897650b1fbac61fe173848c50a0502
font_02_sfnt_off0003993d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3993D 261076 bytes
SHA-256: a720cc834077363e3608402a4e61b875fa7118de142fd633f0b8fab8d02b523d
font_03_sfnt_off0004fffa.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4FFFA 25164 bytes
SHA-256: 180c4516214d272e4b6642172c388f04f4d26f01a74841f0b8b0af0b823ee721