CLEAN
4
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0001
Heuristics 2
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://www.diva- In PDF document text
- https://reurl.cc/kd8EpGPDF link annotation
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- https://docs.microsoft.com/typography/abouthttp://lucasfonts.comMicrosoftIn extracted file (stream_050_off0004ace4.bin)
- http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (stream_050_off0004ace4.bin)
- http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn extracted file (stream_050_off0004ace4.bin)
- http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In extracted file (stream_050_off0004ace4.bin)
- http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn extracted file (stream_050_off0004ace4.bin)
- http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In extracted file (stream_050_off0004ace4.bin)
- http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn extracted file (stream_050_off0004ace4.bin)
- http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In extracted file (stream_050_off0004ace4.bin)
- http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In extracted file (stream_050_off0004ace4.bin)
- http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In extracted file (stream_050_off0004ace4.bin)
- http://www.microsoft.com/pkiops/docs/primarycps.htm0@In extracted file (stream_050_off0004ace4.bin)
- http://www.microsoft.com/TypographyIn extracted file (stream_050_off0004ace4.bin)
Extracted artifacts 9
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_050_off0004ace4.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x4ACE4 | 107608 bytes |
SHA-256: 6a6b60c5493f7093743352172e64fc5e0642b99378ff29a531a74f4c4f0a0833 |
|||
stream_052_off000544b3.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x544B3 | 681564 bytes |
SHA-256: 478e16afd8ff55c8f29be6552917edad0ee88c3d1dfb6fc4cc6bed33f10c85db |
|||
stream_060_off000b942f.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xB942F | 828308 bytes |
SHA-256: 8b1d5838ede88c7cd8d29e542c606f2b489f497425ebdb944f398de353a3a4a4 |
|||
font_02_sfnt_off0008e58e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x8E58E | 123640 bytes |
SHA-256: cf3985862b8c980c65079a254bf3c9d14fdbd21913bd31145caaa0dc385d76fe |
|||
font_03_sfnt_off0009e3d3.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x9E3D3 | 88088 bytes |
SHA-256: 9f8923c7c2477999f13cb5074200e05bf3492fb69f8512054c661948c65e5c0e |
|||
font_04_sfnt_off000a8773.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xA8773 | 216996 bytes |
SHA-256: cb6c97429720150afa36fc5acd81485467f872e34f3636ebbeff4a11ead43b73 |
|||
font_06_sfnt_off00106525.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x106525 | 76792 bytes |
SHA-256: f10f3251f1e56e12e0af2416de31fb98f0988714642d38f89a8668b1d190236c |
|||
font_07_sfnt_off0010ac4b.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x10AC4B | 100996 bytes |
SHA-256: 0423db810fd5835f8c646a7adf6e7ea26675ee4b240d64069a619159a7d14369 |
|||
font_08_sfnt_off00117dea.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x117DEA | 98652 bytes |
SHA-256: 063eec9c8688c37ec574ea500bb1277a53e70fabd5e44ab01b99aa9de66167f3 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.