PDF static analysis report

Static analysis result for SHA-256 c63c4afe7a6a0731…

CLEAN

PDF

32.6 KB Created: 2018-10-28 22:11:06 +01:00 Authoring application: wkhtmltopdf 0.12.5 (via Qt 4.8.7) First seen: 2019-05-10
MD5: 5af06f26a6944c4a3cbcba37943b4f0a SHA-1: 6afb97f6a88a5adf767ab8aeadc8970e879408a9 SHA-256: c63c4afe7a6a07315b5fa55e5739c2cb72f39f4649c0cf77ff1d53d7c3c56b9b
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0117

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://r1url.com/0zNhTg PDF link annotation
    • http://www.monotype.comMonotypeIn PDF document text
    • http://www.monotype.com/html/mtname/ms_arial.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlhttp://www.monotype.com/html/type/license.htmlIn PDF document text

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_005_off00003fd6.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x3FD6 13756 bytes
SHA-256: 2f44f4a92d11b8fc07b68647fb6735b30bd7c0020e01a3b1dca00cfb790c3710
font_01_sfnt_off000065a7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x65A7 10412 bytes
SHA-256: ee98151d8b7840fc71a0ba65848e5a14215a2c129002b2f1028a9fa112a8522c