PDF / .VIR static analysis report

Static analysis result for SHA-256 51ac3f0024c051b3…

CLEAN

PDF / .VIR

617.5 KB Created: 2020-11-21 12:06:42 +05:30 Authoring application: Microsoft® Word 2010 First seen: 2024-05-12
MD5: ab2a4aca19bfc262e3dc8a7d4e928146 SHA-1: e75da06c1bf65317d1a4e2d77ac799bea346ee44 SHA-256: 51ac3f0024c051b39194554b16b3353adf847fcde0dec0c3804cd1af96e8a2f9
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0009

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.thejpd.org/article/0022-3913 In PDF document text
    • https://doi.org/10.23880/oajds-16000168PDF link annotation
    • https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3644472/In PDF document text
    • https://www.ncbi.nlm.nih.gov/pubmed/9643251In PDF document text
    • https://www.ncbi.nlm.nih.gov/pubmed/12589294In PDF document text
    • https://www.ncbi.nlm.nih.gov/pubmed/23514691In PDF document text
    • https://www.ncbi.nlm.nih.gov/pubmed/1102669In PDF document text
    • https://www.ncbi.nlm.nih.gov/pubmed/6345737In PDF document text
    • https://creativecommons.org/licenses/by/4.0/In PDF document text
    • http://www.microsoft.com/typography/ctfontshttp://www.fonts.comMicrosoftIn extracted file (stream_012_off0002c2e9.bin)
    • http://www.microsoft.com/typography/fonts/default.aspxIn extracted file (stream_012_off0002c2e9.bin)
    • https://docs.microsoft.com/typography/abouthttp://lucasfonts.comMicrosoftIn extracted file (stream_013_off0004d1fc.bin)
    • http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (stream_013_off0004d1fc.bin)
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn extracted file (stream_013_off0004d1fc.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In extracted file (stream_013_off0004d1fc.bin)
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn extracted file (stream_013_off0004d1fc.bin)
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In extracted file (stream_013_off0004d1fc.bin)
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn extracted file (stream_013_off0004d1fc.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In extracted file (stream_013_off0004d1fc.bin)
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In extracted file (stream_013_off0004d1fc.bin)
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In extracted file (stream_013_off0004d1fc.bin)
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In extracted file (stream_013_off0004d1fc.bin)
    • http://www.microsoft.com/TypographyIn extracted file (stream_013_off0004d1fc.bin)
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlMicrosoftIn extracted file (font_03_sfnt_off000967af.bin)
    • http://www.monotype.com/html/type/license.htmlIn extracted file (font_03_sfnt_off000967af.bin)
    • http://www.microsoft.com/Typography/0In extracted file (font_03_sfnt_off000967af.bin)

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_012_off0002c2e9.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2C2E9 295900 bytes
SHA-256: b9f7d8690366fa4c272ebd479cf2e3cc09e7edde21903de629832a06c6b6e965
stream_013_off0004d1fc.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x4D1FC 549752 bytes
SHA-256: edc02d588970d0b74310a8b31fe7b2d8e569f6729e70dd3198848d73a0e3e078
font_02_sfnt_off0007a072.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x7A072 246644 bytes
SHA-256: f9be4569ed8b86f2dd0866875b055d9a1a14e660673d898a4cf3f9e397fa1efb
font_03_sfnt_off000967af.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x967AF 25228 bytes
SHA-256: b1c2362109b3c1555dd5946549cada931b8066060cb7036e6b0b500de41c44e8