PDF / .VIR static analysis report

Static analysis result for SHA-256 c774d0fc09a96a5a…

CLEAN

PDF / .VIR

206.3 KB Created: 2021-04-06 13:52:46 -04:00 Authoring application: Microsoft® Word for Microsoft 365 First seen: 2024-09-20
MD5: edf3891d2db6017d8e9c8cef229e3cf9 SHA-1: a8f45822527954367ee17d6471b52e95fd52cc0a SHA-256: c774d0fc09a96a5aca1362c46967d6a3a1bb8f4d7b4067e1a6299772d2299bd0
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.w3.org/1999/02/22-rdf-syntax-ns# In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • https://docs.microsoft.com/typography/abouthttp://lucasfonts.comMicrosoftIn extracted file (font_00_sfnt_off0001f07c.bin)
    • http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (font_00_sfnt_off0001f07c.bin)
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn extracted file (font_00_sfnt_off0001f07c.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In extracted file (font_00_sfnt_off0001f07c.bin)
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn extracted file (font_00_sfnt_off0001f07c.bin)
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In extracted file (font_00_sfnt_off0001f07c.bin)
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn extracted file (font_00_sfnt_off0001f07c.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In extracted file (font_00_sfnt_off0001f07c.bin)
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In extracted file (font_00_sfnt_off0001f07c.bin)
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In extracted file (font_00_sfnt_off0001f07c.bin)
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In extracted file (font_00_sfnt_off0001f07c.bin)
    • http://www.microsoft.com/TypographyIn extracted file (font_00_sfnt_off0001f07c.bin)
    • http://www.microsoft.com/typography/fonts/In extracted file (font_01_sfnt_off00023e8c.bin)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 5

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off0001f07c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1F07C 81740 bytes
SHA-256: 8968d311fdd8ca6aefb490943eb49835e5a3d5766af51f30fd96e38a9d4f0ea2
font_01_sfnt_off00023e8c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x23E8C 27092 bytes
SHA-256: b2f70d6c5c9829fd04068dbcd0267a1f6740762bd3a56b1263ec27f1c43f98a5
font_02_sfnt_off00027174.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x27174 38060 bytes
SHA-256: a463338b398768a58c2d0f53fb25c74a11d1d978fc43cf8765db963523491ad4
font_03_sfnt_off0002bea0.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2BEA0 73976 bytes
SHA-256: 597b944b7c1e4ddd1abc79a70e4cc4e47b433edcfcaf8bd65db427e0c208c6dd
font_04_sfnt_off0002fada.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2FADA 22056 bytes
SHA-256: ec2fc6897746e7fea46618c80478c34aba5675dc56b1baff1f5c7a25db5cc096

Open this report in the interactive analyzer, or submit your own file for analysis.