PDF static analysis report

Static analysis result for SHA-256 6fc1e9be8686be6d…

CLEAN

PDF

65.0 KB Created: 2021-04-03 21:59:54 +03:00 Authoring application: Microsoft® Word 2016 First seen: 2021-06-20
MD5: 5c36646aa6409c9a49d2315ebbfc108a SHA-1: 94e09575eac4a1cb96a609cb51937677ad3c50d5 SHA-256: 6fc1e9be8686be6d02d683acbbc5f41a4347cba32def19d71429ae286dc4cb73
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0006

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://gamepoints.win/Call-of-duty-mobile PDF link annotation
    • http://www.microsoft.com/typography/ctfontshttp://www.fonts.comMicrosoftIn extracted file (font_01_sfnt_off00002daf.bin)
    • http://www.microsoft.com/typography/fonts/default.aspxIn extracted file (font_01_sfnt_off00002daf.bin)

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off00000e78.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xE78 16488 bytes
SHA-256: c2b952be4f4ec0854df431ac9828ce229d16d302dba3692810603356995a7984
font_01_sfnt_off00002daf.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2DAF 81056 bytes
SHA-256: fe0e4e13dce330a15ed37df01b446f9c8a83c6313afe11e328fce37531103c14
font_02_sfnt_off0000a0f8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xA0F8 17396 bytes
SHA-256: 40d4cae7b4a016f13bc8fd7b58bbd56a6f6556fa0343d5e439ed4640a745cb7b