PDF static analysis report

Static analysis result for SHA-256 a2dae35f539906a5…

CLEAN

PDF

250.0 KB First seen: 2023-12-08
MD5: 7ff4bbecad6712b4e634523a7270ca49 SHA-1: bb535842164e6dae14bcb01847c2e364c32caca6 SHA-256: a2dae35f539906a560646a9bd515bbdde058489e2c0d3c200a05d5fe24841cdc
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://en.wikipedia.org/wiki/MIT_License In extracted file (stream_011_off00022387.bin)
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn extracted file (stream_011_off00022387.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In extracted file (stream_011_off00022387.bin)
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn extracted file (stream_011_off00022387.bin)
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In extracted file (stream_011_off00022387.bin)
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn extracted file (stream_011_off00022387.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In extracted file (stream_011_off00022387.bin)
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In extracted file (stream_011_off00022387.bin)
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In extracted file (stream_011_off00022387.bin)
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In extracted file (stream_011_off00022387.bin)
    • http://www.microsoft.com/TypographyIn extracted file (stream_011_off00022387.bin)
    • http://www.microsoft.com/typography/ctfontshttp://lucasfonts.comMicrosoftIn extracted file (font_01_sfnt_off0001282d.bin)
    • http://www.microsoft.com/typography/fonts/default.aspxIn extracted file (font_01_sfnt_off0001282d.bin)
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlMicrosoftIn extracted file (font_04_sfnt_off0002d9e8.bin)
    • http://www.monotype.com/html/type/license.htmlIn extracted file (font_04_sfnt_off0002d9e8.bin)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 7

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_011_off00022387.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x22387 101400 bytes
SHA-256: 3d21fb345341602d25f5a9fcdf6bced82215e13e80bca56b8bf1f52eaee850ff
font_00_sfnt_off0000278a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x278A 44088 bytes
SHA-256: c331bd4123b9731d19e2978d8b93ff589ef2984e15c99dd38f40d2b7994954df
font_01_sfnt_off0001282d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1282D 104608 bytes
SHA-256: 432432294e4adfa5b4860d03081008bed351e0c7d36a3615c107e933889eccff
font_02_sfnt_off0001b441.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1B441 80784 bytes
SHA-256: 828cd0032985b6cafdd34e9ec35b6b21c27721286ac945d48e8595f6e635b106
font_04_sfnt_off0002d9e8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2D9E8 11088 bytes
SHA-256: 086b4c456dbe6f09f8c99517bcda6cd0f82646bc0cf77bf0a1e64dd9a7c38fd3
font_05_sfnt_off00031aa8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x31AA8 52696 bytes
SHA-256: f5cc6cae35ae51f1295fee067652128ed4c104cef9abc7068455b7aadb042176
font_06_sfnt_off0003518b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3518B 62984 bytes
SHA-256: 3679fad098d993bad07a53b177d30b2d3adb6194b9d7c74c8e7773f22e6ef048

Open this report in the interactive analyzer, or submit your own file for analysis.