PDF / .VIR static analysis report

Static analysis result for SHA-256 f7d879ccf070dee2…

CLEAN

PDF / .VIR

635.5 KB Created: 2015-07-17 14:07:18 +02:00 Authoring application: Microsoft® Word 2010 First seen: 2024-05-12
MD5: 43e0c894aa0aafb59ad5bfa1a39e04dc SHA-1: e7cba6cde4cddf7fb33bfa13c1a94e19cf920d8e SHA-256: f7d879ccf070dee25b59140c6e4291481a57fbbf50ca15b3d56576c3fa3e1901
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.action-pin.fr In PDF document text
    • http://www.monotype.comMonotypeIn extracted file (font_00_sfnt_off0003ec8e.bin)
    • http://www.microsoft.com/typography/ctfontshttp://fontfabrik.comYouIn extracted file (stream_024_off0005ac8a.bin)
    • http://www.microsoft.com/typography/fonts/default.aspxIn extracted file (stream_024_off0005ac8a.bin)
    • http://crl.microsoft.com/pki/crl/products/CSPCA.crl0HIn extracted file (stream_024_off0005ac8a.bin)
    • http://www.microsoft.com/pki/certs/CSPCA.crt0In extracted file (stream_024_off0005ac8a.bin)
    • http://crl.microsoft.com/pki/crl/products/tspca.crl0HIn extracted file (stream_024_off0005ac8a.bin)
    • http://www.microsoft.com/pki/certs/tspca.crt0In extracted file (stream_024_off0005ac8a.bin)
    • http://www.microsoft.com/typographyIn extracted file (stream_024_off0005ac8a.bin)
    • http://www.monotype.com/html/mtname/ms_arial.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlhttp://www.monotype.com/html/type/license.htmlIn extracted file (font_00_sfnt_off0003ec8e.bin)
    • https://www.verisign.com/repository/RPA0In extracted file (font_00_sfnt_off0003ec8e.bin)
    • https://www.verisign.com/repository/CPS��In extracted file (font_00_sfnt_off0003ec8e.bin)
    • https://www.verisign.comIn extracted file (font_00_sfnt_off0003ec8e.bin)
    • https://www.verisign.com/repository/verisignlogo.gif0�In extracted file (font_00_sfnt_off0003ec8e.bin)
    • https://www.verisign.com/CPSIn extracted file (font_00_sfnt_off0003ec8e.bin)
    • https://www.verisign.com/repository/CPSIn extracted file (font_00_sfnt_off0003ec8e.bin)
    • http://www.microsoft.com/truetype/0In extracted file (font_00_sfnt_off0003ec8e.bin)
    • http://www.monotype.com/html/mtname/ms_symbol.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlhttp://www.monotype.com/html/type/license.htmlIn extracted file (font_03_sfnt_off000722d9.bin)
    • https://www.verisign.com/repository/verisignlogo.gif0��In extracted file (font_03_sfnt_off000722d9.bin)
    • https://www.verisign.com/CPS0bIn extracted file (font_03_sfnt_off000722d9.bin)

Related samples 5

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 6

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_024_off0005ac8a.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x5AC8A 198732 bytes
SHA-256: 3a9108ccd9d88f6a66c42af0d635f328b8302a785384068a72e38e8d514d6736
font_00_sfnt_off0003ec8e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3EC8E 64692 bytes
SHA-256: 655aa909f8246ccba0815df99258e8627e515767b031c5287194cb632414c720
font_01_sfnt_off00044d00.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x44D00 186804 bytes
SHA-256: 600d6e5e6594bf0fb08a58dedae73cf82f6da54ec51703e363a7e6c0b11c46de
font_03_sfnt_off000722d9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x722D9 23624 bytes
SHA-256: 5788930d8041619f5af6d0133929595dfbbd744ec4a2d7e19b5f80de59878814
font_04_sfnt_off00074fd5.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x74FD5 166792 bytes
SHA-256: 3b7354a8825c1cb41df15769784baa10ff30e7b2adb02fdfeef4515572ef0a01
font_05_sfnt_off00088483.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x88483 177828 bytes
SHA-256: 19b8d722c612e11f891ff19f1910e19586a203ed013d5347ffc6d73362858166

Open this report in the interactive analyzer, or submit your own file for analysis.