PDF / .VIR static analysis report

Static analysis result for SHA-256 f8a240497ec5c27e…

CLEAN

PDF / .VIR

455.4 KB Created: 2011-03-11 22:26:01 -05:00 Authoring application: Microsoft® Word 2010 First seen: 2024-04-16
MD5: 7d2f9056772f4216e4dc7ef61af008d7 SHA-1: 043eb5995119823bba66c91b3280d4a28b9d5cac SHA-256: f8a240497ec5c27e140f0f55673c0ec2b5b33fb2b564dd7c219274e6060b8432
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ocsp.verisign.com0 In extracted file (font_05_sfnt_off0006b8d1.bin)
    • http://www.microsoft.com/typography/ctfontshttp://www.fonts.comYouIn extracted file (stream_004_off00006578.bin)
    • http://www.microsoft.com/typography/fonts/default.aspxIn extracted file (stream_004_off00006578.bin)
    • http://crl.microsoft.com/pki/crl/products/CSPCA.crl0HIn extracted file (stream_004_off00006578.bin)
    • http://www.microsoft.com/pki/certs/CSPCA.crt0In extracted file (stream_004_off00006578.bin)
    • http://crl.microsoft.com/pki/crl/products/tspca.crl0HIn extracted file (stream_004_off00006578.bin)
    • http://www.microsoft.com/pki/certs/tspca.crt0In extracted file (stream_004_off00006578.bin)
    • http://www.microsoft.com/typography/0In extracted file (stream_004_off00006578.bin)
    • http://www.microsoft.com/typographyIn extracted file (stream_009_off0004aa30.bin)
    • http://www.microsoft.com/typography/ctfontshttp://fontfabrik.comYouIn extracted file (font_02_sfnt_off00037b15.bin)
    • http://crl.verisign.com/ThawteTimestampingCA.crl0In extracted file (font_05_sfnt_off0006b8d1.bin)
    • http://crl.verisign.com/tss-ca.crl0In extracted file (font_05_sfnt_off0006b8d1.bin)
    • http://crl.microsoft.com/pki/crl/products/CodeSignPCA.crl0In extracted file (font_05_sfnt_off0006b8d1.bin)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 6

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_004_off00006578.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x6578 217376 bytes
SHA-256: 34b8d1938e5d142c4e2102c3e299923ec40c82205abc6f57b5bd4c195cf57a49
stream_009_off0004aa30.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x4AA30 201796 bytes
SHA-256: 140c275a636a2f941d1d9a9353226fff22841cff3bdf56fafbcd2e245e7d13ee
font_01_sfnt_off00020078.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x20078 218632 bytes
SHA-256: 09060569ad609b7cb3cafbbf85177504324609cbf9ca68fcdd05c6557007f518
font_02_sfnt_off00037b15.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x37B15 169476 bytes
SHA-256: a6eacb5f4c318f191f5c7ef56b8a9d24965db43dd12e86dc8eafc984e1163d47
font_04_sfnt_off0005944a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5944A 221560 bytes
SHA-256: b015347ec57a62413fc80dbd0da37246cb9e883a7f67424d6303b09cd1a23007
font_05_sfnt_off0006b8d1.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x6B8D1 51192 bytes
SHA-256: 2c7a08f59ed3f9a5b2704f5ba3c50688fe9d5874eb621f214df188500baac677

Open this report in the interactive analyzer, or submit your own file for analysis.