PDF static analysis report

Static analysis result for SHA-256 a1d07fc5b2ecff7a…

CLEAN

PDF

1.06 MB Created: 2024-12-25 17:17:14 +07:00 Authoring application: iText® 5.5.13.3 ©2000-2022 iText Group NV (AGPL-version); modified using iText® 5.5.13.3 ©2000-2022 iText Group NV (AGPL-version) First seen: 2026-05-27
MD5: 4c87dc97cf03c5db6022e0a2bf6e4424 SHA-1: 7879c07cb45e2d5f74b0c95a3043f12842db58de SHA-256: a1d07fc5b2ecff7a4cc0ea0a434ae3dd81fc2bd65905ad7daa2228942efa3efa
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.monotype.comMonotype In PDF document text
    • http://crl.microsoft.com/pki/crl/products/CSPCA.crl0HIn PDF document text
    • http://www.microsoft.com/pki/certs/CSPCA.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/tspca.crl0HIn PDF document text
    • http://www.microsoft.com/pki/certs/tspca.crt0In PDF document text
    • http://www.microsoft.com/typographyIn PDF document text
    • http://www.monotype.com/html/mtname/ms_timesnewroman.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlhttp://www.monotype.com/html/type/license.htmlIn PDF document text

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_018_off0002169f.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2169F 834240 bytes
SHA-256: d9fb32eb1646d6fc977c63fd780a46c60b6d1f607bf55eb7baa185aa2637711d
font_00_sfnt_off00001b03.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1B03 38080 bytes
SHA-256: 00c95d5a17ac283eff54e68e8c880293dd1abc0e2a73be5d053065f9276d3ed3
font_01_sfnt_off000085e8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x85E8 27868 bytes
SHA-256: 9cd7553608b945a5a90ecc0fced22d350b09c303da227d3caa02195b865ad346
font_02_sfnt_off0000d639.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xD639 53060 bytes
SHA-256: 89f1053a4ffcb80866ad945f764d0c2b02c4ad70635448a7c22ea98a00d4b1bb