CLEAN
2
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0001
Heuristics 1
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://www.microsoft.com/typography/ctfontshttp://lucasfonts.comMicrosoft In PDF document text
- http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
- http://www.microsoft.com/typography/fonts/default.aspxIn PDF document text
- http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn PDF document text
- http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In PDF document text
- http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn PDF document text
- http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In PDF document text
- http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn PDF document text
- http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In PDF document text
- http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In PDF document text
- http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In PDF document text
- http://www.microsoft.com/pkiops/docs/primarycps.htm0@In PDF document text
- http://www.microsoft.com/Typography/0In PDF document text
- http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0ZIn PDF document text
- http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0In PDF document text
- https://www.verisign.com/repository/CPS��In PDF document text
- https://www.verisign.comIn PDF document text
- https://www.verisign.com/repository/verisignlogo.gif0��In PDF document text
- https://www.verisign.com/CPS0bIn PDF document text
- http://www.microsoft.com/typographyIn PDF document text
- http://www.microsoft.com/typography/ctfontshttp://www.fonts.comYouIn PDF document text
- https://www.microsoft.com/en-us/Typography/In PDF document text
Extracted artifacts 7
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_000_off00000058.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x58 | 385396 bytes |
SHA-256: 2717782acdc4e9c40b88ff9eb101558b7c55959abc408e3d0824cd2cc9220f8c |
|||
stream_005_off000484a2.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x484A2 | 98984 bytes |
SHA-256: df8c7b9a5e410c07e9d477b1707ce36559cf97503f45d8b4f016fd8b165485ca |
|||
stream_007_off0006e552.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x6E552 | 99896 bytes |
SHA-256: 7dc8e30dffc5be29add9a31b20e8e0a60ce868b482731129082af97c0a50b18b |
|||
font_00_sfnt_off00029de0.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x29DE0 | 21952 bytes |
SHA-256: 4ec7bd1d943b8bd333f6e724fe61f077b2695a85c60838e31b48ff6fc758e0e2 |
|||
font_01_sfnt_off0002cb3e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x2CB3E | 227532 bytes |
SHA-256: 37a1e3ead58a498f0b367574e030f30cb105f0d34a75e945fbfb317339e2ff2b |
|||
font_03_sfnt_off00053164.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x53164 | 249628 bytes |
SHA-256: 5f46dbc6ba53b70370dc080920cfd7717fbabcde396f98fc64d0dd2593784add |
|||
font_05_sfnt_off000799b9.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x799B9 | 323548 bytes |
SHA-256: 5b3517b8f1a03d578709709332f7c80aa1cafcc59d6bb2965526d71a1879b038 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.