PDF static analysis report

Static analysis result for SHA-256 9446ba4fde55ded1…

CLEAN

PDF

689.4 KB Created: 2022-10-25 23:46:55 +00:00 Authoring application: Microsoft® Word 2016 (via www.ilovepdf.com) First seen: 2022-11-04
MD5: 34c01d62dce884a8fa3f0116c3273733 SHA-1: cf5e54c09b30711a3761fef0f9cdf445a5049616 SHA-256: 9446ba4fde55ded145606247fe755752f6ff95fa62b998d09d50a6813aaa55cf
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.microsoft.com/typography/ctfontshttp://lucasfonts.comMicrosoft In PDF document text
    • http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
    • http://www.microsoft.com/typography/fonts/default.aspxIn PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn PDF document text
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn PDF document text
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In PDF document text
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn PDF document text
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In PDF document text
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In PDF document text
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In PDF document text
    • http://www.microsoft.com/Typography/0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0ZIn PDF document text
    • http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0In PDF document text
    • https://www.verisign.com/repository/CPS��In PDF document text
    • https://www.verisign.comIn PDF document text
    • https://www.verisign.com/repository/verisignlogo.gif0��In PDF document text
    • https://www.verisign.com/CPS0bIn PDF document text
    • http://www.microsoft.com/typographyIn PDF document text
    • http://www.microsoft.com/typography/ctfontshttp://www.fonts.comYouIn PDF document text
    • https://www.microsoft.com/en-us/Typography/In PDF document text

Extracted artifacts 7

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_000_off00000058.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x58 385396 bytes
SHA-256: 2717782acdc4e9c40b88ff9eb101558b7c55959abc408e3d0824cd2cc9220f8c
stream_005_off000484a2.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x484A2 98984 bytes
SHA-256: df8c7b9a5e410c07e9d477b1707ce36559cf97503f45d8b4f016fd8b165485ca
stream_007_off0006e552.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x6E552 99896 bytes
SHA-256: 7dc8e30dffc5be29add9a31b20e8e0a60ce868b482731129082af97c0a50b18b
font_00_sfnt_off00029de0.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x29DE0 21952 bytes
SHA-256: 4ec7bd1d943b8bd333f6e724fe61f077b2695a85c60838e31b48ff6fc758e0e2
font_01_sfnt_off0002cb3e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2CB3E 227532 bytes
SHA-256: 37a1e3ead58a498f0b367574e030f30cb105f0d34a75e945fbfb317339e2ff2b
font_03_sfnt_off00053164.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x53164 249628 bytes
SHA-256: 5f46dbc6ba53b70370dc080920cfd7717fbabcde396f98fc64d0dd2593784add
font_05_sfnt_off000799b9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x799B9 323548 bytes
SHA-256: 5b3517b8f1a03d578709709332f7c80aa1cafcc59d6bb2965526d71a1879b038