PDF / .VIR static analysis report

Static analysis result for SHA-256 16b6f8d26a1d83be…

CLEAN

PDF / .VIR

3.79 MB Created: 2023-06-08 19:36:20 UTC Authoring application: Scrivener (3.3.1) (via macOS Version 13.4 (assemblage 22F66) Quartz PDFContext) First seen: 2025-02-11
MD5: 7173dadd7d7980977c5ef4bb6dd51dcd SHA-1: 4f7abe304245eaefa24981da1c37f5f08f2b319b SHA-256: 16b6f8d26a1d83be6fb6ebc065d4a878513e99a555318b0d6722932167bda00a
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0004

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://occultismedanger.fr/livrets/rio_07_liberation.pdf In PDF document text
    • https://www.exorciste-guerisseur.comIn PDF document text
    • https://www.mission-saint-benoit.be/exorcismes.htmlIn PDF document text
    • https://www.desenvoutement-exorcisme.comIn PDF document text
    • https://sosdiscernement.org/p/passeurs-dames/In PDF document text
    • https://occultismedanger.fr/pdf/exorciste.pdfIn PDF document text
    • https://sosdiscernement.org/e/e-books/PDF link annotation
    • https://occultismedanger.frIn PDF document text
    • http://%20https://occultismedanger.fr/pdf/exorciste.pdfIn PDF document text
    • https://www.boutiquejoseph.com/store/spiritualite/eaux/eau-de-d%C3%A9pollutionIn PDF document text
    • https://www.guerisonetdelivrance.com/In PDF document text
    • https://www.gloireadieu.com/prieres/prieres-forces-du-mal/grande-priere-de-protection.htmlIn PDF document text
    • http://gloireadieu.comIn PDF document text
    • https://www.patriziacattaneo.com/home.htmlIn PDF document text
    • https://veriteetdelivrance.fr/In PDF document text
    • https://journal-d-une-demonologue.fr/In PDF document text
    • https://www.saint-antoine-de-padoue.comIn PDF document text
    • http://www.la-chance.frIn PDF document text
    • http://exorcisme.frIn PDF document text
    • https://www.micheldeprez.fr/foire-aux-questions-d%C3%A9senvo%C3%BBtement/contre-envo%C3%BBtement-exorcisme-triangulaire/In PDF document text
    • https://www.france-exorcisme.frIn PDF document text
    • https://pretre-exorciste.frIn PDF document text
    • https://www.desenvoutement-exorcisme.com/en/page-livre-2In PDF document text
    • https://occultismedanger.fr/pdf/benoit_michel.pdfIn PDF document text
    • https://www.mission-saint-benoit.be/index.htmlIn PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • https://www.youtube.com/channel/UCXBnaN_nuo64VzIdbEaWjrQ/featuredIn PDF document text
    • https://sites.google.com/site/interexorciste/In PDF document text
    • https://youtu.be/a_Fmn5Y6zAMIn PDF document text
    • https://youtu.be/t6IXW5DSlEk?t=2909In PDF document text
    • https://www.youtube.com/watch?v=LjpK4ilN04YIn PDF document text
    • https://youtu.be/Liag0Dfam_0In PDF document text
    • https://www.sudouest.fr/lot-et-garonne/agen/45-euros-la-chasse-au-demon-dans-ce-village-monsieur-le-maire-est-aussi-exorciste-11779691.phpIn PDF document text
    • https://actu.fr/pays-de-la-loire/laval_53130/un-pretre-exorciste-bien-mysterieux-a-villiers-charlemagne_25307627.htmlIn PDF document text
    • https://youtu.be/8FtyX_pjPNAIn PDF document text
    • https://www.gralon.net/annuaire/sante-et-beaute/medecine-douce/page-web-guerison--soins-par-les-mains--purification--a-poissy--dans-les-yvelines-78-65891.htmIn PDF document text
    • https://www.youtube.com/watch?v=XVUzusq9fmsIn PDF document text
    • https://www.youtube.com/watch?v=kzBt413zYAgIn PDF document text
    • https://fr.wikipedia.org/wiki/Ernest_HoussayIn PDF document text
    • https://fr.wikipedia.org/wiki/Canada_DryIn PDF document text
    • https://www.persee.fr/doc/rhpr_0035-2403_1970_num_50_3_4023In PDF document text
    • http://www.iec.chIn extracted file (icc_03_off00087ca7.icc)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 17

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_012_off00089097.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x89097 838500 bytes
SHA-256: 7764d31bfc06619a26e9f6ae9e85db4211ae31fa7a477d240d5d0e5eb5a01f67
stream_066_off00391386.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x391386 776664 bytes
SHA-256: 9fb4a842d50578281d201a408d3327f9a0edf7702c7773ea0828bf98f6b6459c
icc_00_off0007ec54.icc pdf-icc-profile PDF ICC profile at offset 0x7EC54 1992 bytes
SHA-256: 49429d4dd70f439f6fa47a298e5ffbd280375d2cbd18708b1e05a34aafe5d219
icc_01_off0007f10e.icc pdf-icc-profile PDF ICC profile at offset 0x7F10E 4508 bytes
SHA-256: 73d504558e7d03ef4ff2676ba62c7553ee5bd856b45da2d330e33e012ad61fb3
icc_02_off0007fed0.icc pdf-icc-profile PDF ICC profile at offset 0x7FED0 2008 bytes
SHA-256: 0fb37c4328cacebb547210723e15a9fe040ef5a17e5b496e993ca68db0126a88
icc_03_off00087ca7.icc pdf-icc-profile PDF ICC profile at offset 0x87CA7 3144 bytes
SHA-256: 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
icc_04_off001d7ae4.icc pdf-icc-profile PDF ICC profile at offset 0x1D7AE4 2020 bytes
SHA-256: 0ef4da994a2b833d54af2d4ecbb2c6654b7198ad9e6bd80ed86d684e54fd37d3
icc_05_off00306fb7.icc pdf-icc-profile PDF ICC profile at offset 0x306FB7 3272 bytes
SHA-256: 9daa8204612f6437be27f1d2246e83639a0d7a32889cda7ea0e923b57df9ed85
font_00_sfnt_off003b482a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3B482A 43428 bytes
SHA-256: c5358209c7d2100e9e512c202332dd56625ceb222ad7525eae52f5b97b3ce04a
font_01_sfnt_off003ba68e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3BA68E 15104 bytes
SHA-256: 73a9f2ff235c67bd801a443bdeb18510d1ffa97faa8aba93d965eae1a8a850f4
font_02_sfnt_off003bd322.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3BD322 1492 bytes
SHA-256: 1226a887ae98f040e274dd43a4cfbc75214f38954ba715003ff2c043e921d94b
font_03_sfnt_off003bdaa6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3BDAA6 14696 bytes
SHA-256: 9867304594cc329aaeecf1c753b29da56b7c1cdeaa48fd83fb4786a56deeed39
font_04_sfnt_off003c0360.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3C0360 37240 bytes
SHA-256: 2e069ef1bdf842d92a9425ac90d3b16595070f1c3f36fff878a7c251140d38fd
font_05_sfnt_off003c5878.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3C5878 556 bytes
SHA-256: 015ca824e499d96ff9b2bbba8d1adafb6352e8a648e73be47771b01b8e0293eb
font_06_sfnt_off003c5cdc.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3C5CDC 1472 bytes
SHA-256: 1b765334786555a3e13b0aeb5bc83abbb4012aa6bdf878468361117dbacb3997
font_07_sfnt_off003c63d8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3C63D8 548 bytes
SHA-256: a7db01477352b15f258ae605221a5ab5a7da6a8dba78998a053b85bc5e5974a8
font_08_sfnt_off003c6846.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3C6846 528 bytes
SHA-256: 95af2f2cbcb7ad95cca9140e373b84f66e2ff2a38198b7050a4b3cd95de64174

Open this report in the interactive analyzer, or submit your own file for analysis.