PDF static analysis report

Static analysis result for SHA-256 6f4566529e6e421f…

CLEAN

PDF

452.6 KB Created: 2019-07-16 09:50:08 -07:00 Authoring application: Microsoft® Word for Office 365 First seen: 2026-05-09
MD5: a62a7e690fc5ab4f15f9dfdf36e35670 SHA-1: 383433a74bdaa8c2fef076632b8e243e8ed576de SHA-256: 6f4566529e6e421f877609ba03e59c20788bff6b5095e92fd1ab13312287401f
6 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0002

Heuristics 3

  • External URI info PDF_URI
    PDF contains an external URL action
  • Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
    The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://www.linkedin.com/in/maxie-juzang-75aaa24/ PDF link annotation
    • https://www.linkedin.com/in/randy-hamamoto-9204337/In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn PDF document text
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In PDF document text
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn PDF document text
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn PDF document text
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In PDF document text
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In PDF document text
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In PDF document text
    • http://www.microsoft.com/TypographyIn PDF document text
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlMicrosoftIn PDF document text
    • http://www.monotype.com/html/type/license.htmlIn PDF document text
    • http://www.microsoft.com/truetype/fonts/wingdings/MicrosoftIn PDF document text
    • https://www.verisign.com/repository/CPS��In PDF document text
    • https://www.verisign.comIn PDF document text
    • https://www.verisign.com/repository/verisignlogo.gif06In PDF document text
    • http://status.verisign.com/class1.crl0In PDF document text
    • http://www.microsoft.com/typographyIn PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 12

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_023_off0005752c.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x5752C 64067 bytes
SHA-256: cf2080ee33411db147eb36b9eefde873da0b6252a20e2e1b8a9bafdaafd4962a
font_00_sfnt_off0000b663.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xB663 115396 bytes
SHA-256: 173606f087e9d810527656954a852c39c6781a1178359eb18a936b85a5764fe8
font_01_sfnt_off00019e11.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x19E11 11088 bytes
SHA-256: 086b4c456dbe6f09f8c99517bcda6cd0f82646bc0cf77bf0a1e64dd9a7c38fd3
font_02_sfnt_off0001b646.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1B646 44088 bytes
SHA-256: c331bd4123b9731d19e2978d8b93ff589ef2984e15c99dd38f40d2b7994954df
font_03_sfnt_off00020183.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x20183 14180 bytes
SHA-256: ea845d0e384984a0e8aa4393bad66e7315b15e1268ef7990f53ffe81b10f0cb6
font_04_sfnt_off00021e64.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x21E64 114992 bytes
SHA-256: 1fc1dc4a3a06f6250a469d28e99d6d13b81f81eae59bcd6686dd53cd3d79e7b1
font_05_sfnt_off0002ff4d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2FF4D 73820 bytes
SHA-256: 5f2b9508c0d9b6215591ab1196213f0de76a809f4489be022130555d0a8dabec
font_06_sfnt_off00037124.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x37124 13980 bytes
SHA-256: 2d7c0d563b46dcbeb2d73671a7bc97bf996bdff9948769d33ab5ccc4b73d0311
font_07_sfnt_off00043ab5.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x43AB5 62351 bytes
SHA-256: c471fb5878601b97fac326090e3b602ddca2708d18ccfa1b26ab445c03ade27f
font_08_sfnt_off0004e610.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4E610 50752 bytes
SHA-256: 3442535ee15e1178e3ac7684cc5c8e840a53c12ea1466755030bb4c6f9c1e2da
font_10_sfnt_off00062504.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x62504 50226 bytes
SHA-256: e38f55e2401e43cac8adbdfd49da0beb5fe6e63fcfe6cd92543194ee88f16d52
font_11_sfnt_off0006b22a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x6B22A 50783 bytes
SHA-256: 10bba2b64e166216dd74ba72d8ed3ce54a5597ce7963ffd0d2b4faf975fbb824

Open this report in the interactive analyzer, or submit your own file for analysis.