PDF / .VIR static analysis report

Static analysis result for SHA-256 302473443bf01b86…

CLEAN

PDF / .VIR

701.5 KB Created: 2012-12-06 10:46:25 +02:00 Authoring application: Microsoft® Office Word 2007 First seen: 2024-04-16
MD5: 31a5772b630e3bec6f029728f24835d6 SHA-1: f3929754eb605ea620ecaf309125184c535aff40 SHA-256: 302473443bf01b866e00259a42a903cb79ae0f269d72d33a68f991cad132a9ed
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0002

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.logos.it/pls/dictionary/linguistic_resources.traduzione_en?lang=en In PDF document text
    • http://kodeks.uni-In PDF document text
    • http://www.rada.kiev.ua/translitIn PDF document text
    • http://ocsp.verisign.com0In extracted file (font_04_sfnt_off000ab488.bin)
    • http://www-personal.umich.edu/~alandear/glossary/In PDF document text
    • http://crl.microsoft.com/pki/crl/products/CSPCA.crl0HIn extracted file (stream_082_off0006c3ce.bin)
    • http://www.microsoft.com/pki/certs/CSPCA.crt0In extracted file (stream_082_off0006c3ce.bin)
    • http://crl.microsoft.com/pki/crl/products/tspca.crl0HIn extracted file (stream_082_off0006c3ce.bin)
    • http://www.microsoft.com/pki/certs/tspca.crt0In extracted file (stream_082_off0006c3ce.bin)
    • http://www.microsoft.com/typographyIn extracted file (stream_082_off0006c3ce.bin)
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlNOTIFICATIONIn extracted file (font_04_sfnt_off000ab488.bin)
    • http://www.monotype.com/html/type/license.htmlIn extracted file (font_04_sfnt_off000ab488.bin)
    • http://crl.verisign.com/ThawteTimestampingCA.crl0In extracted file (font_04_sfnt_off000ab488.bin)
    • http://crl.verisign.com/tss-ca.crl0In extracted file (font_04_sfnt_off000ab488.bin)
    • http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl0OIn extracted file (font_04_sfnt_off000ab488.bin)
    • http://www.microsoft.com/pki/certs/CodeSignPCA2.crt0In extracted file (font_04_sfnt_off000ab488.bin)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 5

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_082_off0006c3ce.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x6C3CE 165740 bytes
SHA-256: 57a74594bc83d2056667dfa160f6d37b7228cfa1b0e10907340c39ffd5506d1b
font_01_sfnt_off0007a139.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x7A139 201508 bytes
SHA-256: 7013c8a39fb4eeebf6f505a573f4890dc65c5e3d7a859973504f030005cb4149
font_02_sfnt_off000890a8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x890A8 244048 bytes
SHA-256: 09f7f7f1150da5cad71b2b91b338dd242994a19032ae97a084536acf4f71fd82
font_03_sfnt_off0009f4e9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x9F4E9 156264 bytes
SHA-256: 3cfb501d60816c7ed729c7c17614467f0f55ba1090da08aff42b609c338d37f0
font_04_sfnt_off000ab488.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xAB488 23148 bytes
SHA-256: 0b3442a5dcced2030300296a2148b0268e2c3b7f9da43b270d9146a79b0cbfd3

Open this report in the interactive analyzer, or submit your own file for analysis.