PDF static analysis report

Static analysis result for SHA-256 7519554506d088a9…

CLEAN

PDF

104.3 KB Created: 2024-12-08 18:22:46 +07:00 Authoring application: Microsoft® Word for Microsoft 365 First seen: 2026-05-13
MD5: 14e5098503c76b02728cde6ea96538c3 SHA-1: 88b84351c73d8e918bea3dd7eb2178b9c466a342 SHA-256: 7519554506d088a93c531f74f055e8966215ccc42c647382f6a95705172dcaff
2 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The file is a PDF document with embedded URLs. While the extracted URLs are confirmed benign, the heuristic firing indicates the presence of an embedded URL, which could be used for malicious redirection or content loading. The document body is heavily obfuscated and truncated, preventing a clear understanding of its intent. Without further script analysis or clearer document content, the specific attack pattern and family remain uncertain.

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.microsoft.com0 In PDF document text
    • https://wwww.microsoft.com0In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0ZIn PDF document text
    • http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0ZIn PDF document text
    • http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0��In PDF document text
    • http://www.microsoft.com/PKI/docs/CPS/default.htm0@In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0ZIn PDF document text
    • http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0In PDF document text
    • https://docs.microsoft.com/typography/abouthttp://lucasfonts.comMicrosoftIn PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off00005fc1.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5FC1 115356 bytes
SHA-256: e1d9f8134c5f23f71a3b1b46c017ce2204f1a6c1432ab52ca0dc815d74c7cb2f
font_01_sfnt_off00013f7f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x13F7F 83164 bytes
SHA-256: a961f68e2eb115095a55afaef0584b6798c4550624e360f978f5e74864d1186d

Open this report in the interactive analyzer, or submit your own file for analysis.