PDF / .VIR static analysis report

Static analysis result for SHA-256 380cdcb44e3f75fa…

CLEAN

PDF / .VIR

491.5 KB Created: 2013-01-10 10:19:07 +01:00 Authoring application: Microsoft® Office Word 2007 First seen: 2024-07-29
MD5: f21eb88c32ccc02bf80b0021db531d3c SHA-1: 13379b7f6ccc21c5ece6914f21f6ef724cfea884 SHA-256: 380cdcb44e3f75fa9c82ed97a7447e23e064a190f7ec7d5789160df2e2ec8e14
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ocsp.verisign.com0 In extracted file (font_05_sfnt_off0006bfc9.bin)
    • http://crl.microsoft.com/pki/crl/products/CSPCA.crl0HIn extracted file (font_00_sfnt_off000352c3.bin)
    • http://www.microsoft.com/pki/certs/CSPCA.crt0In extracted file (font_00_sfnt_off000352c3.bin)
    • http://crl.microsoft.com/pki/crl/products/tspca.crl0HIn extracted file (font_00_sfnt_off000352c3.bin)
    • http://www.microsoft.com/pki/certs/tspca.crt0In extracted file (font_00_sfnt_off000352c3.bin)
    • http://www.microsoft.com/typographyIn extracted file (font_00_sfnt_off000352c3.bin)
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlNOTIFICATIONIn extracted file (font_05_sfnt_off0006bfc9.bin)
    • http://www.monotype.com/html/type/license.htmlIn extracted file (font_05_sfnt_off0006bfc9.bin)
    • http://crl.verisign.com/ThawteTimestampingCA.crl0In extracted file (font_05_sfnt_off0006bfc9.bin)
    • http://crl.verisign.com/tss-ca.crl0In extracted file (font_05_sfnt_off0006bfc9.bin)
    • http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl0OIn extracted file (font_05_sfnt_off0006bfc9.bin)
    • http://www.microsoft.com/pki/certs/CodeSignPCA2.crt0In extracted file (font_05_sfnt_off0006bfc9.bin)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 6

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off000352c3.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x352C3 191552 bytes
SHA-256: 605f71bcb682aad8090392f7ba41990e6e7f0d2af745185cdde3a10add3fb83e
font_01_sfnt_off00041d35.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x41D35 205784 bytes
SHA-256: 44a67d898b318156268d8173babfecd87eff4ea936d1a34669c9a68752392748
font_02_sfnt_off00050e89.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x50E89 80668 bytes
SHA-256: fbd39755cf85457bacb118f1fa80ba261be4071d8fa04a3f33b6d96c0926bada
font_03_sfnt_off0005b185.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5B185 58240 bytes
SHA-256: 11dbcf3429f3c461134dfa244be13cf221d71e0152ab53571a5f6ab52bb36464
font_04_sfnt_off000619e9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x619E9 179412 bytes
SHA-256: ab6de89b967592ee7cf5dcd6489b6ba6d3d9abfe1dd3851156853b3b91174bec
font_05_sfnt_off0006bfc9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x6BFC9 23148 bytes
SHA-256: 0b3442a5dcced2030300296a2148b0268e2c3b7f9da43b270d9146a79b0cbfd3

Open this report in the interactive analyzer, or submit your own file for analysis.