PDF / .VIR static analysis report

Static analysis result for SHA-256 1e0ae2ce5255acc9…

CLEAN

PDF / .VIR

1.53 MB Created: 2024-06-11 10:20:26 +00:00 Authoring application: Microsoft® Word 2016 First seen: 2025-02-28
MD5: 4cc072c5737bc3c29bcd401e69149b90 SHA-1: dce4c33108b95055e7b2d82600fe6338e62fa146 SHA-256: 1e0ae2ce5255acc9364c01bcceeed10e5e0f47b256958ecc555187cdf6569db6
10 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0003

Heuristics 2

  • External URI low PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.boldmonday.comhttp://www.ibm.comThis PDF link annotation
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#PDF link annotation
    • http://ns.adobe.com/pdf/1.3/PDF link annotation
    • http://purl.org/dc/elements/1.1/PDF link annotation
    • http://ns.adobe.com/xap/1.0/PDF link annotation
    • http://ns.adobe.com/xap/1.0/mm/PDF link annotation
    • https://docs.microsoft.com/typography/abouthttp://lucasfonts.comMicrosoftPDF link annotation
    • http://en.wikipedia.org/wiki/MIT_LicensePDF link annotation
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XPDF link annotation
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0PDF link annotation
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aPDF link annotation
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0PDF link annotation
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TPDF link annotation
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0PDF link annotation
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^PDF link annotation
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��PDF link annotation
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@PDF link annotation
    • http://www.microsoft.com/TypographyPDF link annotation
    • http://www.microsoft.com/typography/ctfontshttp://www.fonts.comMicrosoftPDF link annotation
    • http://www.microsoft.com/typography/fonts/default.aspxPDF link annotation
    • http://crl.microsoft.com/pki/crl/products/CSPCA.crl0HPDF link annotation
    • http://www.microsoft.com/pki/certs/CSPCA.crt0PDF link annotation
    • http://crl.microsoft.com/pki/crl/products/tspca.crl0HPDF link annotation
    • http://www.microsoft.com/pki/certs/tspca.crt0PDF link annotation
    • http://www.microsoft.com/typographyPDF link annotation
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlMicrosoftPDF link annotation
    • http://www.monotype.com/html/type/license.htmlPDF link annotation
    • http://www.microsoft.com/truetype/fonts/wingdings/MicrosoftPDF link annotation
    • http://www.microsoft.com/typography/fonts/http://www.sajatypeworks.comMicrosoftPDF link annotation
    • https://docs.microsoft.com/typography/aboutPDF link annotation
    • http://www.microsoft.com/typography/fonts/MicrosoftPDF link annotation
    • http://scripts.sil.org/OFLsimplePDF link annotation

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 17

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_136_off000a9f35.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xA9F35 109092 bytes
SHA-256: d894b9f819129f8e6bed17ae46bccaa2bab45821161209130d7e4eb80402152f
stream_138_off000b2efa.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xB2EFA 108704 bytes
SHA-256: ac65914ca78bec48620324eecd08fb2a4aae028c2ef4142ecd7e716f56e1e63d
stream_156_off000f0d52.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xF0D52 142480 bytes
SHA-256: 49f9892a760494fe5ab9b2bc20080c8a854843e801927d7119d0ae82734777ac
font_02_sfnt_off000bfacc.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xBFACC 81764 bytes
SHA-256: 3ab44e53538c2d7ddc9a8b3eb6d073ee5760a554f90267c5d25dce8be9ecc1d2
font_03_sfnt_off000c7be2.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xC7BE2 78200 bytes
SHA-256: b19792c724fc9165c099592762c63c4baace6c2dfc90ac48d16d0a22002730d2
font_04_sfnt_off000cf19d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xCF19D 77100 bytes
SHA-256: f8bf8f9b622c591bc530acc6834737345386283ac032d2e56ac525cc971fa82c
font_05_sfnt_off000d63ab.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xD63AB 87056 bytes
SHA-256: 9ec67452b253a68a10d17938cbd23b8dd5e9e8546d9ae7c5ec9bab6d50711272
font_06_sfnt_off000e0359.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xE0359 82168 bytes
SHA-256: 620b840ac95a70e9b6ff6edcb08fed919af510555f39cbd749c1a32d4ccca634
font_07_sfnt_off000e8623.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xE8623 11088 bytes
SHA-256: 086b4c456dbe6f09f8c99517bcda6cd0f82646bc0cf77bf0a1e64dd9a7c38fd3
font_08_sfnt_off000e9f78.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xE9F78 80416 bytes
SHA-256: 212672043e084ec5695733bbb09a065151ace69048f013270e10d83cc644a914
font_09_sfnt_off000eef6e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xEEF6E 14496 bytes
SHA-256: 1186413003309b9068b73ed8b6d9e0a13c4cbf9fe520b394836561738e11207f
font_11_sfnt_off001002a1.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1002A1 52580 bytes
SHA-256: 3de98ccbe68c4f4eb7f5faec439e283226ed10de10dd526a31a7c739ae135131
font_12_sfnt_off001058c9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1058C9 62168 bytes
SHA-256: c09a2e6343119ce2566925c49ece260951d0a1f1441cc5cbefaf105fe9a6539f
font_13_sfnt_off00109e60.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x109E60 23252 bytes
SHA-256: 54d13198c5a3f47365a4f5d3571c2049ae160b6a28cc0334724a1c1316d0ef5b
font_14_sfnt_off0010cabe.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x10CABE 230556 bytes
SHA-256: 7ce1771623fe0b907c002686bdefd3318f655349d1f44b16d5fb6f9b31779458
font_15_sfnt_off0012d7d2.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x12D7D2 18636 bytes
SHA-256: d0bc6483d90f1b9fdb9b74995b7355c58b692b031913ab8d5e867bdae4f6e735
font_16_sfnt_off0012f417.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x12F417 8956 bytes
SHA-256: 37815774270e8140d0a3bca4f04cea4d1f1aead60a76590c6bc8a674ee7c4a1e

Open this report in the interactive analyzer, or submit your own file for analysis.