PDF static analysis report

Static analysis result for SHA-256 43877d99d2e8514e…

CLEAN

PDF

898.4 KB Created: 2023-12-05 13:49:04 +01:00 Authoring application: Microsoft: Print To PDF First seen: 2026-05-13
MD5: c6e2c7a40db392d80531742a9b7782d3 SHA-1: e11c933ccf992a4018b3841937765cf6c4f092e8 SHA-256: 43877d99d2e8514e673e5636ba8e63fa27a581a3865c1de8542a913241a90a77
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://docs.microsoft.com/typography/abouthttp://lucasfonts.comMicrosoft In PDF document text
    • http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn PDF document text
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In PDF document text
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn PDF document text
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn PDF document text
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In PDF document text
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In PDF document text
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In PDF document text
    • http://www.microsoft.com/TypographyIn PDF document text
    • http://www.microsoft.com/typography/ctfontshttp://www.fonts.comMicrosoftIn PDF document text
    • http://www.microsoft.com/typography/fonts/default.aspxIn PDF document text
    • https://www.verisign.com/repository/CPS��In PDF document text
    • https://www.verisign.comIn PDF document text
    • https://www.verisign.com/repository/verisignlogo.gif0��In PDF document text
    • https://www.verisign.com/CPS0bIn PDF document text
    • http://www.microsoft.com/typographyIn PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 9

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_000_off00000092.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x92 582912 bytes
SHA-256: de031edc016e062ef8b54d91a1e02f3257a68f6d3ad059de9af35f00b73ed8dd
stream_004_off0006db17.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x6DB17 306964 bytes
SHA-256: d0f3442a374a7478e961bbaee1fde60c15c009a47d72733c243706e808b92b8c
font_00_sfnt_off0003272e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3272E 385384 bytes
SHA-256: 330f725cddd5fb52cdee2f5b053351483ff49be51f92e8c1e1e00ac61428155e
font_01_sfnt_off0004b064.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4B064 244812 bytes
SHA-256: d85d69c3699b551b55372d92480318b404aabbd01242db029885f6296e7743c5
font_02_sfnt_off0005d20e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5D20E 347616 bytes
SHA-256: e2dc62284500d6890f104674e0a6eb77d5b87c852e2b949069b88afdfed24f04
font_04_sfnt_off0008e8d6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x8E8D6 353832 bytes
SHA-256: b56b869004356fcb76756d0ead81c6a8825152d6483bb697fc2b3f2a3a918a92
font_05_sfnt_off000a1fd8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xA1FD8 50692 bytes
SHA-256: 9ef4a02a7104c7b31254aa16bfde9ff67cddd0ca38c36da0ce1ca956fb7dfbd4
font_06_sfnt_off000a6ed6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xA6ED6 44824 bytes
SHA-256: ea54fc735e2257cae1ade82921531ca209e3ec3389aa757c61b43c50061b1e79
font_07_sfnt_off000aa753.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xAA753 548336 bytes
SHA-256: 7ce30ad09f225ba0102c21ce5449fd266b888debfe2a8f66920f255ce2effb55

Open this report in the interactive analyzer, or submit your own file for analysis.