PDF / .VIR static analysis report

Static analysis result for SHA-256 5de21a5f019fc8d5…

CLEAN

PDF / .VIR

87.2 KB Created: 2024-04-08 14:35:49 +05:30 Authoring application: Microsoft® Word 2019 First seen: 2024-11-17
MD5: 1d2ee68380246ed818d5c6a9214d8563 SHA-1: 6f97ee39b90190fe833aa6c904c5cb0bcac320cd SHA-256: 5de21a5f019fc8d5188e64e7bf031fabc0204bc53a1d32422377743c72fd1f50
10 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 2

  • External URI low PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.microsoft.com0 PDF link annotation
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#PDF link annotation
    • http://ns.adobe.com/pdf/1.3/PDF link annotation
    • http://purl.org/dc/elements/1.1/PDF link annotation
    • http://ns.adobe.com/xap/1.0/PDF link annotation
    • http://ns.adobe.com/xap/1.0/mm/PDF link annotation
    • http://en.wikipedia.org/wiki/MIT_LicensePDF link annotation
    • http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0ZPDF link annotation
    • http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0PDF link annotation
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0ZPDF link annotation
    • http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0��PDF link annotation
    • http://www.microsoft.com/PKI/docs/CPS/default.htm0@PDF link annotation
    • http://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0ZPDF link annotation
    • http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0PDF link annotation
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlMicrosoftPDF link annotation
    • http://www.monotype.com/html/type/license.htmlPDF link annotation

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off000037e8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x37E8 119524 bytes
SHA-256: 08775515172c064e5627bbb57789df6f8b27c6057ada46e3855c35d46096d946
font_01_sfnt_off000124c1.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x124C1 11088 bytes
SHA-256: 086b4c456dbe6f09f8c99517bcda6cd0f82646bc0cf77bf0a1e64dd9a7c38fd3

Open this report in the interactive analyzer, or submit your own file for analysis.