PDF / .VIR static analysis report

Static analysis result for SHA-256 4cf246c7adef0ef4…

CLEAN

PDF / .VIR

224.7 KB Created: 2021-09-28 11:49:02 +09:30 Authoring application: Microsoft® Word for Microsoft 365 First seen: 2025-02-11
MD5: 7af46db293e683a5b639db6d96d83fe0 SHA-1: bf3395df7cd7c833c9f6859c26b0cb68e10ed7e7 SHA-256: 4cf246c7adef0ef4d12959a22f09a17703684074b607a76eed28cff52f74956d
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://haveyoursay.cityofpae.sa.gov.au/semaphore-foreshore PDF link annotation
    • https://haveyoursay.cityofpae.sa.gov.au/semaphore-foreshore/frequently-asked-questions#faqModal-2345-887-aIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • https://docs.microsoft.com/typography/abouthttp://lucasfonts.comMicrosoftIn extracted file (stream_009_off0001cc69.bin)
    • http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (stream_009_off0001cc69.bin)
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn extracted file (stream_009_off0001cc69.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In extracted file (stream_009_off0001cc69.bin)
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn extracted file (stream_009_off0001cc69.bin)
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In extracted file (stream_009_off0001cc69.bin)
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn extracted file (stream_009_off0001cc69.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In extracted file (stream_009_off0001cc69.bin)
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In extracted file (stream_009_off0001cc69.bin)
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In extracted file (stream_009_off0001cc69.bin)
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In extracted file (stream_009_off0001cc69.bin)
    • http://www.microsoft.com/TypographyIn extracted file (stream_009_off0001cc69.bin)
    • http://www.monotype.com/html/mtname/ms_welcome.htmlhttp://www.monotype.com/html/designer/des_index.htmlIn extracted file (font_00_sfnt_off0000e91a.bin)
    • https://www.verisign.com/repository/CPS��In extracted file (font_00_sfnt_off0000e91a.bin)
    • https://www.verisign.comIn extracted file (font_00_sfnt_off0000e91a.bin)
    • https://www.verisign.com/repository/verisignlogo.gif0��In extracted file (font_00_sfnt_off0000e91a.bin)
    • https://www.verisign.com/CPS0bIn extracted file (font_00_sfnt_off0000e91a.bin)
    • http://www.microsoft.com/typographyIn extracted file (font_00_sfnt_off0000e91a.bin)
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlMicrosoftIn extracted file (font_04_sfnt_off00033612.bin)
    • http://www.monotype.com/html/type/license.htmlIn extracted file (font_04_sfnt_off00033612.bin)
    • http://www.microsoft.com/typography/fonts/In extracted file (font_05_sfnt_off00034e45.bin)

Extracted artifacts 6

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_009_off0001cc69.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x1CC69 144984 bytes
SHA-256: 982470a44cbe1785b675b30cc309c3da635956fc9b6c776f6f6916a79efcf88d
font_00_sfnt_off0000e91a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xE91A 17216 bytes
SHA-256: 8f243533a6c83d111c203c0e136b68025558faf6860a138f18bc42441bc394ab
font_01_sfnt_off0001103a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1103A 126516 bytes
SHA-256: ac3136357b3c136bdd6af2ece1a7e2145a26a0ffb6cdc09f2f8e985bce57368d
font_03_sfnt_off0002acef.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2ACEF 95356 bytes
SHA-256: dbb5e7366809a464fe038297c999392882f090def0e812e31a2376dfd3fcbdfa
font_04_sfnt_off00033612.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x33612 11088 bytes
SHA-256: 086b4c456dbe6f09f8c99517bcda6cd0f82646bc0cf77bf0a1e64dd9a7c38fd3
font_05_sfnt_off00034e45.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x34E45 9936 bytes
SHA-256: 6cb24a7e122f27ed145f8e30bbccd153b8dcb6a3405b65b6bd140d3b56456b04