PDF static analysis report

Static analysis result for SHA-256 6c7c7d80556b3b84…

CLEAN

PDF

3.85 MB First seen: 2014-11-01
MD5: 84726c5ad97367156dd1a54bf476d68b SHA-1: 13fb31f82a9dd62a92768ea6f5cec9d4d885eeaf SHA-256: 6c7c7d80556b3b845e4974464e9316d48a8ad7b30848d1619c868491ed5c2f0e
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://llk.media.mit.edu)��� In PDF document text
    • http://scratch.mit.eduIn PDF document text
    • http://scratch.mit.edu/help���In PDF document text
    • http://llk.media.mit.eduIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#In PDF document text
    • http://ns.adobe.com/illustrator/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/t/pg/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/Dimensions#In PDF document text
    • http://ns.adobe.com/xap/1.0/g/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/exif/1.0/In PDF document text
    • http://ns.adobe.com/photoshop/1.0/In PDF document text
    • http://ns.adobe.com/tiff/1.0/In PDF document text

Extracted artifacts 11

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_014_off0000b4de.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xB4DE 31773 bytes
SHA-256: fb517546698e1cdb42be5c11096526df443e901817172bfc60e183c10b89f012
font_01_sfnt_off0000dfd7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xDFD7 27838 bytes
SHA-256: 952382698650ad47422fcb9eabf27173ee5fe6a27175bf22dbdc587f47f54bda
font_02_sfnt_off000168ac.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x168AC 170272 bytes
SHA-256: dfc0d16fc4d51910110ea9511b7d38697fab08783ae31530114da6077d7ae0b7
font_03_cff_off0001b85e.bin pdf-font-stream PDF embedded font (cff) at offset 0x1B85E 1403 bytes
SHA-256: b2b2e90d98fe0b52a7b209b0d10ede3de225064d2d678df0273929fa24875552
font_04_sfnt_off002f1d77.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2F1D77 30388 bytes
SHA-256: 569059eb67da65698d867347315fecccc92e8724c8e40e274fbbb007f32ebbba
font_05_cff_off002f586c.bin pdf-font-stream PDF embedded font (cff) at offset 0x2F586C 3367 bytes
SHA-256: bc5c6a0cc30afc65723b2fbbf6c9045e2bab6d114f9e240a965819678b26790b
font_06_sfnt_off002f66d6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2F66D6 31898 bytes
SHA-256: 783bd82b071a9be6991864217e8344d2fb89b50301a44a5c03c54774feeee3fc
font_07_sfnt_off00322840.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x322840 165512 bytes
SHA-256: e4ff1e63c59e5c70f9205b467097b886272a6cdf7acf1b8d96aa616a4a91755f
font_08_cff_off0037473b.bin pdf-font-stream PDF embedded font (cff) at offset 0x37473B 1312 bytes
SHA-256: 7f7af3c674973538400c643f85d9d4fb9fb1d2781fc8109b69f1e7ff1ae40c9b
font_09_sfnt_off003752d7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3752D7 175804 bytes
SHA-256: 1bae501648326aadfcc8aacbc794f51143a7d44a482b0fcc4db703e7ce3fd4bf
font_10_sfnt_off003cc324.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3CC324 29020 bytes
SHA-256: 5d9273a8a0125bf3d0424feee396bbb0941b20e4b9bc391a8f86341d5c0bbb40