PDF / .VIR static analysis report

Static analysis result for SHA-256 cc6b6c5f8169d48b…

CLEAN

PDF / .VIR

260.5 KB Created: 2016-11-21 20:28:48 -05:00 Authoring application: Microsoft® Word 2010 First seen: 2024-12-03
MD5: 2ae54dde582cd030d73df8f3b2b747de SHA-1: 291876c371b0f67cb93e557a0642715593c9bad4 SHA-256: cc6b6c5f8169d48ba37a5ca9751dee5353ea75b12466d4b452d7074e4312ad81
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0002

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://undocs.org/fr/A/RES/69/120 PDF link annotation
    • http://undocs.org/fr/A/71/183In PDF document text
    • http://undocs.org/fr/A/C.6/71/L.21In PDF document text
    • http://www.un.org/ga/search/view_doc.asp?symbol=A/C.6/71/SR.8In PDF document text
    • http://undocs.org/fr/A/C.6/71/SR.9In PDF document text
    • http://undocs.org/fr/A/C.6/71/SR.33In PDF document text
    • http://undocs.org/fr/A/RES/67/234In PDF document text
    • http://undocs.org/fr/A/RES/71/183In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn extracted file (stream_015_off000113a4.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In extracted file (stream_015_off000113a4.bin)
    • http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0ZIn extracted file (stream_015_off000113a4.bin)
    • http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0In extracted file (stream_015_off000113a4.bin)
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn extracted file (stream_015_off000113a4.bin)
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In extracted file (stream_015_off000113a4.bin)
    • http://www.microsoft.com/Typography/0In extracted file (stream_015_off000113a4.bin)

Related samples 1

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_015_off000113a4.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x113A4 218844 bytes
SHA-256: 7d4bfee2b0209b5aec9c8088cb1d89ddd139c81585be2e882c3a21688b9227c2
stream_017_off00022cfc.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x22CFC 201344 bytes
SHA-256: b9feac390e34b4dea2d7f13beed6877450e604ce8f8b4197b90f8cab342e348b
stream_020_off00031527.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x31527 156204 bytes
SHA-256: d995e02f70add17e2f24ddc1c0deb06e6f3fab9d7f30e2f188251686967c5e19
font_02_sfnt_off00030e8e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x30E8E 3940 bytes
SHA-256: ac5eb0c13cece3d681db049be14b727f97fd6c5f3c64e9b0a16c086e205b7ab2

Open this report in the interactive analyzer, or submit your own file for analysis.