PDF / .VIR static analysis report

Static analysis result for SHA-256 8112daa00c18a445…

CLEAN

PDF / .VIR

91.5 KB Created: 2023-08-21 11:22:39 +02:00 Authoring application: Microsoft® Word 2016 First seen: 2024-04-16
MD5: 0fae65e2af56aec46c897e637d9cf84e SHA-1: ee24eedaf3cb84f080030d48e9097da8cb56ca05 SHA-256: 8112daa00c18a4452b6d72872ed8f7b9328425dbf0fecce8362e821634256f91
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlMicrosoft In extracted file (font_02_sfnt_off000130e5.bin)
    • http://www.monotype.com/html/type/license.htmlIn extracted file (font_02_sfnt_off000130e5.bin)
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn extracted file (font_02_sfnt_off000130e5.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In extracted file (font_02_sfnt_off000130e5.bin)
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn extracted file (font_02_sfnt_off000130e5.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In extracted file (font_02_sfnt_off000130e5.bin)
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn extracted file (font_02_sfnt_off000130e5.bin)
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In extracted file (font_02_sfnt_off000130e5.bin)
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In extracted file (font_02_sfnt_off000130e5.bin)
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In extracted file (font_02_sfnt_off000130e5.bin)
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In extracted file (font_02_sfnt_off000130e5.bin)
    • http://www.microsoft.com/Typography/0In extracted file (font_02_sfnt_off000130e5.bin)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off00005a54.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5A54 86236 bytes
SHA-256: b3280d4b5e756876d46dc7a6aa7ef4e58a4739df61a350721b78cfd03b2e1c8c
font_01_sfnt_off0000d5c7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xD5C7 66888 bytes
SHA-256: 3b8e4d2a596accbfeeee07a28905c01ba9e554df7b4547e89de331a02a8cfcf8
font_02_sfnt_off000130e5.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x130E5 25228 bytes
SHA-256: b1c2362109b3c1555dd5946549cada931b8066060cb7036e6b0b500de41c44e8

Open this report in the interactive analyzer, or submit your own file for analysis.