PDF static analysis report

Static analysis result for SHA-256 f1a7799125a9927e…

CLEAN

PDF

393.1 KB Created: 2017-11-15 04:47:31 +00:00 Authoring application: Microsoft® Word 2016 (via www.ilovepdf.com) First seen: 2026-05-04
MD5: d314430da0598d17c039c0429774108e SHA-1: 2caa25782b52b57c66960330760cb9502713adca SHA-256: f1a7799125a9927ebecb4975373a4b5825820cd1100e499e2005f6c9cac338bf
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0022

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://go2l.ink/ucokmedan PDF link annotation
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn PDF document text
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0ZIn PDF document text
    • http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn PDF document text
    • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0In PDF document text
    • http://www.microsoft.com/typographyIn PDF document text
    • http://www.microsoft.com/typography/fonts/In PDF document text
    • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0aIn PDF document text
    • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^In PDF document text
    • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0��In PDF document text
    • http://www.microsoft.com/pkiops/docs/primarycps.htm0@In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 6

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_000_off00000057.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x57 302568 bytes
SHA-256: 3cd95771101872d4ff448a361f442389865dd27118058a3ae95c7c5556d93571
stream_001_off000169da.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x169DA 220408 bytes
SHA-256: 0b3d1be9a2800f8e645510f62b8e4b712ed31d22b958ee45d0e571078af29f9d
stream_002_off0002d692.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2D692 82176 bytes
SHA-256: 60b9cbe7b842fb8085fdd1174abcdd2bb261f39fba80a73fe0c66b88942ecfdf
stream_003_off00036a81.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x36A81 261816 bytes
SHA-256: a40db7b2a33ab7ae1c04522c3c15c0975f66ec06814b31497a40ce659d6906dd
stream_004_off0004823d.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x4823D 144388 bytes
SHA-256: ff63a769d53133a596bc18e6d6bfe14be270ca690abf9736c26743b2d615d497
font_04_sfnt_off00051d31.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x51D31 80160 bytes
SHA-256: fe979ac1f69a500030e6d4f357838d0c01b8f0ac47c23f7cc51f07ca9e61527e

Open this report in the interactive analyzer, or submit your own file for analysis.