PDF / .VIR static analysis report

Static analysis result for SHA-256 8a042c5f2442e5d3…

CLEAN

PDF / .VIR

167.1 KB Created: 2019-11-28 13:07:02 Authoring application: Microsoft® Office Word 2007 First seen: 2024-04-16
MD5: 6aea6032fc5a00364280d87912033efb SHA-1: 7284183c2b4ffb3722c8dde186756ed66c9a747d SHA-256: 8a042c5f2442e5d380c2d2da137ba722e9de4ad9666033dd80669d1ee3cedab3
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ocsp.verisign.com0 In extracted file (font_02_sfnt_off00025a9b.bin)
    • http://crl.microsoft.com/pki/crl/products/CSPCA.crl0HIn extracted file (stream_007_off00015909.bin)
    • http://www.microsoft.com/pki/certs/CSPCA.crt0In extracted file (stream_007_off00015909.bin)
    • http://crl.microsoft.com/pki/crl/products/tspca.crl0HIn extracted file (stream_007_off00015909.bin)
    • http://www.microsoft.com/pki/certs/tspca.crt0In extracted file (stream_007_off00015909.bin)
    • http://www.microsoft.com/typographyIn extracted file (stream_007_off00015909.bin)
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlNOTIFICATIONIn extracted file (font_02_sfnt_off00025a9b.bin)
    • http://www.monotype.com/html/type/license.htmlIn extracted file (font_02_sfnt_off00025a9b.bin)
    • http://crl.verisign.com/ThawteTimestampingCA.crl0In extracted file (font_02_sfnt_off00025a9b.bin)
    • http://crl.verisign.com/tss-ca.crl0In extracted file (font_02_sfnt_off00025a9b.bin)
    • http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl0OIn extracted file (font_02_sfnt_off00025a9b.bin)
    • http://www.microsoft.com/pki/certs/CodeSignPCA2.crt0In extracted file (font_02_sfnt_off00025a9b.bin)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_007_off00015909.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x15909 209404 bytes
SHA-256: 6a45c641d35a31770273b0ebc8820d80de56d9656df62d938d0f65dcc011ec51
font_00_sfnt_off0000485a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x485A 212864 bytes
SHA-256: e11e7e49ab987ebc5157e8fc4d14feb42bbb2d8cb97d810efa0f092f1dc51ebd
font_02_sfnt_off00025a9b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x25A9B 23148 bytes
SHA-256: 0b3442a5dcced2030300296a2148b0268e2c3b7f9da43b270d9146a79b0cbfd3

Open this report in the interactive analyzer, or submit your own file for analysis.