PDF static analysis report

Static analysis result for SHA-256 16d3c1c8dbcf57eb…

CLEAN

PDF

196.5 KB First seen: 2018-10-07
MD5: b622ecdd1319abb5342a02bb60f14d4b SHA-1: a1ae3f78c125d9908c94e980dbae1016e277eeed SHA-256: 16d3c1c8dbcf57eb2bdf94fa321e98d6ca17dd753afd0fe7de11b9bec40e0bd1
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0002

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://go2l.ink/28NA8GNA?82NG8ANG8A2 PDF link annotation
    • http://www.microsoft.com/typography/ctfontshttp://fontfabrik.comYouIn PDF document text
    • http://www.microsoft.com/typography/fonts/default.aspxIn PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn PDF document text
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0ZIn PDF document text
    • http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn PDF document text
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In PDF document text
    • http://www.microsoft.com/Typography/0In PDF document text

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_006_off00002dfd.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2DFD 169828 bytes
SHA-256: c9ddb44ec7e8b38fdf5b980ecaa8c8dadb424a7c6fa95c5a17b8b9a719879d7b