PDF / .VIR static analysis report

Static analysis result for SHA-256 331fbcc2a9386922…

CLEAN

PDF / .VIR

187.7 KB Created: 2011-07-06 17:42:04 -03:00 Authoring application: Microsoft® Word 2010 First seen: 2024-10-29
MD5: 2e012a301d997b37c098c335f2ca4490 SHA-1: 3cd30bd9298e748912e778b76a5ac0e49c0d74f1 SHA-256: 331fbcc2a9386922494083b75d210f43d8ecef36947f951739d0f2675e821840
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.microsoft.com/typography/ctfontshttp://fontfabrik.comYou In extracted file (font_00_sfnt_off00003790.bin)
    • http://www.microsoft.com/typography/fonts/default.aspxIn extracted file (font_00_sfnt_off00003790.bin)
    • http://crl.microsoft.com/pki/crl/products/CSPCA.crl0HIn extracted file (font_00_sfnt_off00003790.bin)
    • http://www.microsoft.com/pki/certs/CSPCA.crt0In extracted file (font_00_sfnt_off00003790.bin)
    • http://crl.microsoft.com/pki/crl/products/tspca.crl0HIn extracted file (font_00_sfnt_off00003790.bin)
    • http://www.microsoft.com/pki/certs/tspca.crt0In extracted file (font_00_sfnt_off00003790.bin)
    • http://www.microsoft.com/typographyIn extracted file (font_00_sfnt_off00003790.bin)

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off00003790.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3790 192212 bytes
SHA-256: 509152a646d1073bc63668db25b4b839b0617feaaf0094f3eec57140278dadb8
font_01_sfnt_off0001a0c8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1A0C8 169476 bytes
SHA-256: a6eacb5f4c318f191f5c7ef56b8a9d24965db43dd12e86dc8eafc984e1163d47