PDF static analysis report

Static analysis result for SHA-256 629a61423a20710d…

CLEAN

PDF

1.58 MB Created: 2024-12-25 17:17:00 +07:00 Authoring application: iText® 5.5.13.3 ©2000-2022 iText Group NV (AGPL-version); modified using iText® 5.5.13.3 ©2000-2022 iText Group NV (AGPL-version) First seen: 2026-05-27
MD5: 2c6dd4a0f3c96055e187261cce531d23 SHA-1: 2a5f6a756748114ebd23bfd9cc1aaf312efd3e84 SHA-256: 629a61423a20710d2652d3802c7332768378e746ee46318eee91e56aedd8938b
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.monotype.comMonotype In PDF document text
    • https://docs.microsoft.com/typography/abouthttp://lucasfonts.comMicrosoftIn PDF document text
    • http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
    • http://crl.microsoft.com/pki/crl/products/CSPCA.crl0HIn PDF document text
    • http://www.microsoft.com/pki/certs/CSPCA.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/tspca.crl0HIn PDF document text
    • http://www.microsoft.com/pki/certs/tspca.crt0In PDF document text
    • http://www.microsoft.com/typographyIn PDF document text
    • http://www.monotype.com/html/mtname/ms_timesnewroman.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlhttp://www.monotype.com/html/type/license.htmlIn PDF document text
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlMicrosoftIn PDF document text
    • http://www.monotype.com/html/type/license.htmlIn PDF document text
    • http://www.monotype.com/html/mtname/ms_arial.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlhttp://www.monotype.com/html/type/license.htmlIn PDF document text
    • http://www.microsoft.com/truetype/fonts/wingdings/MicrosoftIn PDF document text

Extracted artifacts 10

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_015_off0002dc61.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2DC61 44292 bytes
SHA-256: 463c63764b72e887d7a3b9d357b748d1134a3ab9bec6624d9bb8438e55c663b1
stream_093_off00059232.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x59232 834240 bytes
SHA-256: d9fb32eb1646d6fc977c63fd780a46c60b6d1f607bf55eb7baa185aa2637711d
stream_104_off000eaf58.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xEAF58 3146328 bytes
SHA-256: f7fce81d964ba2ffa46ac3d6a0c77b081da0fc3ccf8982d26f4bb4519d910adf
font_00_sfnt_off00018115.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x18115 37844 bytes
SHA-256: 835ad8d99cd54bebe19358992bc7465f44f27199f72af92a121ff444d67c7835
font_01_sfnt_off0001ec97.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1EC97 35504 bytes
SHA-256: e56d1fa2b012d1e16d9e39541cecc10646fef38060c2abc3bb373a4889b3c63f
font_02_sfnt_off000252c4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x252C4 46652 bytes
SHA-256: 59370c984883017e612e75fedfc34a81cbc381d451ecf87f8ae488920f2bd44e
font_04_sfnt_off00033109.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x33109 34240 bytes
SHA-256: 1057b6b72986df026ff555f28b053075cdcec59f200f2206858571cf557367cd
font_06_sfnt_off000cde8d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xCDE8D 8876 bytes
SHA-256: f17ea547c63281509ec8de1cc58801e4891435053ca19fe60e32373ada4682bd
font_07_sfnt_off000cf5e4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xCF5E4 13868 bytes
SHA-256: 2b2322b4eca85a7fa4d113be77d8b0f111b898c3e0e6aa372da078fa08fb4d01
font_08_sfnt_off000e6e0a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xE6E0A 12144 bytes
SHA-256: 07692ac1155f9ce28ef1f13e5ececdbea8840adaa586b50509e8081c8de4b5cf