PDF / .VIR static analysis report

Static analysis result for SHA-256 6c7334cacc5f223d…

CLEAN

PDF / .VIR

1.08 MB Created: 2015-09-04 17:56:27 -04:00 Authoring application: Microsoft® Word 2010 First seen: 2024-11-17
MD5: 222c3715040092be054edb08aca03595 SHA-1: 52d0e7084a91e577c697f0edc8d7de6db6d72043 SHA-256: 6c7334cacc5f223db2cb25f63ce0095de65280dc138088a40799da1416bf381b
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0003

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ocsp.verisign.com0 In extracted file (font_02_sfnt_off000d082c.bin)
    • http://undocs.org/sp/A/70/23PDF link annotation
    • http://undocs.org/sp/A/AC.109/2015/L.1In PDF document text
    • http://undocs.org/sp/A/69/23In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.2In PDF document text
    • http://undocs.org/sp/A/AC.109/2014/L.2In PDF document text
    • http://undocs.org/sp/A/AC.109/2014/SR.1In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.13In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.6In PDF document text
    • http://undocs.org/sp/A/67/506In PDF document text
    • http://undocs.org/sp/A/AC.109/2014/L.13In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.14In PDF document text
    • http://undocs.org/sp/A/AC.109/2014/18In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/17In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/SR.1In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.9/Rev.1In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/18In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.4In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.5In PDF document text
    • http://undocs.org/sp/A/AC/109/2015/SR.5In PDF document text
    • http://undocs.org/sp/A/AC.109/2014/20/Rev.1In PDF document text
    • http://undocs.org/sp/A/AC.109/2006/20In PDF document text
    • http://undocs.org/sp/A/AC.109/2007/19In PDF document text
    • http://undocs.org/sp/A/AC.109/2007/5In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.11In PDF document text
    • http://undocs.org/sp/A/70/64In PDF document text
    • http://undocs.org/sp/E/2015/65In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.10In PDF document text
    • http://undocs.org/sp/A/70/67In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.3In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/13In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/SR.2In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/2In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/SR.5In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/SR.8In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.12In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/16In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.16In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.8In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.15In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/19In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/L.7In PDF document text
    • http://undocs.org/sp/A/AC.109/2015/SR.6In PDF document text
    • http://undocs.org/sp/A/AC.109/756In PDF document text
    • http://undocs.org/sp/A/AC.109/793In PDF document text
    • http://undocs.org/sp/A/AC.109/842In PDF document text
    • http://undocs.org/sp/A/AC.109/885In PDF document text
    • http://undocs.org/sp/A/AC.109/930In PDF document text
    • http://undocs.org/sp/A/AC.109/972In PDF document text
    • http://undocs.org/sp/A/AC.109/1008In PDF document text
    +59 more URL(s)

Extracted artifacts 6

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_134_off000e0dd1.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xE0DD1 141452 bytes
SHA-256: 3b6f7a68a470c93bf8679a3d7d26222c5600c8055918315cdbaee36b34115953
font_00_sfnt_off000adb42.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xADB42 211048 bytes
SHA-256: c34faff64c017767f4741dcfa3d5afa09c6be3c2507b27590708bc5de8f54256
font_01_sfnt_off000bd94e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xBD94E 226444 bytes
SHA-256: f4e7be8a09d74d1e4ee836667a32ed1c29d8182174ab9e2c21277ef0d6af8537
font_02_sfnt_off000d082c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xD082C 24332 bytes
SHA-256: ca6c494bb5ef9be7361cfad38425c9e5ec46bc51a29f0a9ed3e0b4866540a7f4
font_03_sfnt_off000d3a1c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xD3A1C 166016 bytes
SHA-256: 352f8d84c5e7573f66474257bb0367a2c010a395b4e15106d64737a0f3d95f96
font_05_sfnt_off000e9ddf.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xE9DDF 3940 bytes
SHA-256: 6fac7d538762184ead2c3108dd230934b04ddd0a5121b36eda5e09300393835f