PDF / .VIR static analysis report

Static analysis result for SHA-256 03698c09feff6edd…

CLEAN

PDF / .VIR

1.07 MB Created: 2011-02-04 16:04:45 +02:00 Authoring application: PScript5.dll Version 5.2.2 (via Acrobat Distiller 7.0.5 (Windows)) First seen: 2024-04-16
MD5: 3c490a207888046cbccc91f7c8e59242 SHA-1: 73fc31a1bea18995f4da509e202431e43a297b50 SHA-256: 03698c09feff6edd19aff56d5e815b1acff4c5ea610cab2af776ab50faae9f36
24 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0053

Heuristics 3

  • Unusually high stream count medium PDF_MANY_STREAMS
    PDF contains 501+ stream objects — may indicate heap spray or heavy obfuscation
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.color.org In PDF document text
    • http://www.color.org)/S/GTS_PDFX/Type/OutputIntentIn PDF document text
    • http://www.elib.bsu.byPDF link annotation
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/pdfx/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 10

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_cff_off00001327.bin pdf-font-stream PDF embedded font (cff) at offset 0x1327 37205 bytes
SHA-256: 4a8cff66c078cc22de295e7f7364c2d6ceabe6cf939ede9624621b6990074999
font_01_cff_off00007c3a.bin pdf-font-stream PDF embedded font (cff) at offset 0x7C3A 30700 bytes
SHA-256: 471345e68c05a30184bca7d3e5803dc2676eaeeda1f0b06437e63e44ea44f4cc
font_02_cff_off0000d590.bin pdf-font-stream PDF embedded font (cff) at offset 0xD590 36766 bytes
SHA-256: 58f9c779f76f220a87beb44473edf25fae2d71e9df0b20f68f1c559257b4e502
font_03_cff_off000a0e67.bin pdf-font-stream PDF embedded font (cff) at offset 0xA0E67 1109 bytes
SHA-256: 4e88ec22411be61dba5ec09b449e07f92a3dc75bb58c76e98ea63e57e219a619
font_04_cff_off000a1b8a.bin pdf-font-stream PDF embedded font (cff) at offset 0xA1B8A 9735 bytes
SHA-256: 924d6958c135e45f5455e7ad6f194c74bd5db184467ca2b949fdfd1876f77ae8
font_05_cff_off000a3ed9.bin pdf-font-stream PDF embedded font (cff) at offset 0xA3ED9 145 bytes
SHA-256: a298d393dbf2f0c5bd3f10dbb7587e424a414f1e5a737a201fa75d32e6668336
font_06_cff_off000a428b.bin pdf-font-stream PDF embedded font (cff) at offset 0xA428B 178 bytes
SHA-256: 9aa63065acd1adb448bcf7b4fd08208415f9a9531232427504e04a864e9c050c
font_07_cff_off000a4967.bin pdf-font-stream PDF embedded font (cff) at offset 0xA4967 28911 bytes
SHA-256: 9f96dbadb1d7966f1f683a128fa10cde6313d904e25455db13895ca87efe81d5
font_08_cff_off000a956f.bin pdf-font-stream PDF embedded font (cff) at offset 0xA956F 385 bytes
SHA-256: 6e138262460a1a36d5b19836beb8406890ea68f31eed336dff6e6190c619599a
font_09_cff_off000a9844.bin pdf-font-stream PDF embedded font (cff) at offset 0xA9844 470 bytes
SHA-256: b2aff7940f912ed2da4877f213a053065d9c86898e3ef85c3e283b0c06bc3e25

Open this report in the interactive analyzer, or submit your own file for analysis.