PDF / .VIR static analysis report

Static analysis result for SHA-256 417b911ef92575b7…

CLEAN

PDF / .VIR

571.7 KB Created: 2022-11-21 21:13:31 +00:00 Authoring application: Microsoft® Word 2016 (via www.ilovepdf.com) First seen: 2024-04-14
MD5: 48a00dcf7c869d6e2c14150da4dbfc5f SHA-1: b247b0334ab036de17df422630b4ae2adad34626 SHA-256: 417b911ef92575b73e9b7fe994d11721d4c196c5b25d68809d7852721623de9d
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0004

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://dspace.uniceplac.edu.br/bitstream/123456789/82/1/Lidiane%20Cruz_0000748_Marina%20R%c3%aago_0000089.pdf PDF link annotation
    • https://periodicos.unipe.edu.br/index.php/interscientia/article/view/43/40.%20Acesso%20em%2029/03/2022In PDF document text
    • http://www.seer.ufsj.edu.br/index.php/recom/article/view/100In PDF document text
    • https://www.interdisciplinaremsaude.com.br/Volume_9/Trabalho_03.pdf.%20Acesso%20em%2029/03/2022In PDF document text
    • https://dspace.uniceplac.edu.br/bitstream/123456789/82/1/Lidiane%20Cruz_000074PDF link annotation
    • https://periodicos.unipe.edu.br/index.php/interscientia/article/view/43/40In PDF document text
    • https://www.interdisciplinaremsaude.com.br/Volume_9/Trabalho_03.pdfIn PDF document text
    • https://www.scielo.br/j/reben/a/nHPLXTgsZBQRG3fDYybJYfG/?format=pdf&lang=ptIn PDF document text
    • https://www.revistas.usp.br/rmrp/article/view/543/740In PDF document text
    • http://www.microsoft.com/typography/ctfontshttp://lucasfonts.comMicrosoftIn extracted file (stream_004_off00009a3b.bin)
    • http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (stream_004_off00009a3b.bin)
    • http://www.microsoft.com/typography/fonts/default.aspxIn extracted file (stream_004_off00009a3b.bin)
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn extracted file (stream_004_off00009a3b.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In extracted file (stream_004_off00009a3b.bin)
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn extracted file (stream_004_off00009a3b.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In extracted file (stream_004_off00009a3b.bin)
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn extracted file (stream_004_off00009a3b.bin)
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In extracted file (stream_004_off00009a3b.bin)
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In extracted file (stream_004_off00009a3b.bin)
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In extracted file (stream_004_off00009a3b.bin)
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In extracted file (stream_004_off00009a3b.bin)
    • http://www.microsoft.com/Typography/0In extracted file (stream_004_off00009a3b.bin)
    • http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0ZIn extracted file (stream_008_off000517fb.bin)
    • http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0In extracted file (stream_008_off000517fb.bin)

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_004_off00009a3b.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x9A3B 399800 bytes
SHA-256: c5fc84141875be9dc7fe8f8ccc63f796c0e547e4c65e8ae69656bc11d55b1f3b
stream_008_off000517fb.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x517FB 323476 bytes
SHA-256: f6f84e8e89dc12ada73b29e9c585e14257d666853c95a549e876371203f963cd
stream_011_off0006ce2c.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x6CE2C 216636 bytes
SHA-256: 94ca97511b4f11afbdc7aa89a15dfd1eb39bc71a2c91fc2c93889fbeb2830617
font_01_sfnt_off0002e63c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2E63C 329128 bytes
SHA-256: 3919491c16b6921682e0e7c056c55189829f97da5c68f90c415a2a464cb19c21