PDF / .VIR static analysis report

Heuristics 2

• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL https://cryptopro.ru/products/csp/downloads PDF link annotation

  • https://cryptopro.ru/sites/default/files/private/csp/cryptopro_pub_key.gpgIn PDF document text
  • http://crl.roskazna.ru/crl/%D0%9A%D0%BE%D1%80%D0%BD%D0%B5%D0%B2%D0%BE%D0%B9%20%D1%81%D0%B5%D1%80%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%82%20%D0%93%D0%A3%D0%A6%202022.cerIn PDF document text
  • http://crl.roskazna.ru/crl/ucfk_2023.crtIn PDF document text
  • http://crl.roskazna.ru/crl/In PDF document text
  • https://roskazna.gov.ru/upload/iblock/bdb/Instruktsiya-po-ustanovke-sertifikatov-GUTS-i-UTS-FK.DOCXIn PDF document text
  • https://wiki.astralinux.ru/pages/viewpage.action?pageId=32833902In PDF document text
  • https://support.cryptopro.ru/index.php?/Knowledgebase/Article/View/229/2/rbot-s-pfx-v-nix-sistemkhIn PDF document text
  • http://fgislk.gov.ru/rmdl/pvv/backend/spd-adapter/spd/getIn PDF document text
  • http://crl.roskazna.ru/crl/%D0%9A%D0%BE%D1%80%D0%BD%D0%B5%D0%In PDF document text
  • https://roskazna.gov.ru/upload/iblock/bdb/Instruktsiya-po-ustanovke-sertifikatov-In PDF document text
  • https://support.cryptopro.ru/index.php?/Knowledgebase/Article/View/229/2/In PDF document text
  • http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (stream_013_off0001681f.bin)
  • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn extracted file (stream_013_off0001681f.bin)
  • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In extracted file (stream_013_off0001681f.bin)
  • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn extracted file (stream_013_off0001681f.bin)
  • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In extracted file (stream_013_off0001681f.bin)
  • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn extracted file (stream_013_off0001681f.bin)
  • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In extracted file (stream_013_off0001681f.bin)
  • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In extracted file (stream_013_off0001681f.bin)
  • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In extracted file (stream_013_off0001681f.bin)
  • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In extracted file (stream_013_off0001681f.bin)
  • http://www.microsoft.com/TypographyIn extracted file (stream_013_off0001681f.bin)
  • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlMicrosoftIn extracted file (font_04_sfnt_off0007a1e8.bin)
  • http://www.monotype.com/html/type/license.htmlIn extracted file (font_04_sfnt_off0007a1e8.bin)
  • http://www.microsoft.com/Typography/0In extracted file (font_04_sfnt_off0007a1e8.bin)

Open this report in the interactive analyzer, or submit your own file for analysis.