PDF / .VIR static analysis report

Static analysis result for SHA-256 24f4af38e555d965…

CLEAN

PDF / .VIR

1.22 MB Created: 2024-03-20 01:04:05 UTC Authoring application: 3-Heights(TM) PDF Creator 1.7.4.1 (http://www.pdf-tools.com) (via PDFTron PDFNet, V8.00761 3-Heights(TM) PDF Producer 1.7.4.1 (http://www.pdf-tools.com) 3-Heights(TM) PDF Producer 1.7.4.1 (http://www.pdf-tools.com)) First seen: 2024-04-14
MD5: 33e692d3401521e409cd0ff3b05bbde6 SHA-1: 510ffd3c897327141e0440ea6b03b47c2e5440fb SHA-256: 24f4af38e555d9651a7729d447c70f5b86c8d87a79be7f83fafd29d742a03bb3
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cipa.jp/exif/1.0/ In PDF document text
    • http://ns.camerabits.com/photomechanic/1.0/In PDF document text
    • http://ns.useplus.org/ldf/xmp/1.0/In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#In PDF document text
    • http://ns.adobe.com/illustrator/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/t/pg/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/Dimensions#In PDF document text
    • http://ns.adobe.com/xap/1.0/g/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/pdfx/1.3/In PDF document text
    • http://www.npes.org/pdfx/ns/id/In PDF document text
    • http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/In PDF document text
    • http://ns.adobe.com/exif/1.0/aux/In PDF document text
    • http://ns.adobe.com/photoshop/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/rights/In PDF document text
    • http://ns.adobe.com/camera-raw-settings/1.0/In PDF document text
    • http://ns.adobe.com/tiff/1.0/In PDF document text
    • http://ns.adobe.com/exif/1.0/In PDF document text
    • http://iptc.org/std/Iptc4xmpExt/2008-02-29/In PDF document text
    • http://ns.adobe.com/lightroom/1.0/In PDF document text
    • http://kramon.photoshelter.comIn PDF document text
    • http://www.aiim.org/pdfua/ns/id/In PDF document text
    • http://www.pdf-tools.comIn PDF document text

Extracted artifacts 11

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_cff_off000001a0.bin pdf-font-stream PDF embedded font (cff) at offset 0x1A0 2474 bytes
SHA-256: c23fbcbaf1f45a7473f26c66ecb54f53249e6fb03a0e50677f42a79b8b536f7e
font_01_cff_off00000e22.bin pdf-font-stream PDF embedded font (cff) at offset 0xE22 6500 bytes
SHA-256: 4a958c6c28dc4bc3c5e2fb11f3c07e4b40c67ef5e26689505cc085418d8cac29
font_02_cff_off000029ca.bin pdf-font-stream PDF embedded font (cff) at offset 0x29CA 4123 bytes
SHA-256: 85b4e4c34409196753e4d13885e11f69392bd9500587b416f329677f40e3f83b
font_03_cff_off00003ca7.bin pdf-font-stream PDF embedded font (cff) at offset 0x3CA7 3926 bytes
SHA-256: 851f5eaba717b0727394893df2df49346d251520daecd8101c700b9351bfd062
font_04_cff_off00004e4c.bin pdf-font-stream PDF embedded font (cff) at offset 0x4E4C 4231 bytes
SHA-256: 2c2b602cdeefff3c31f2623d1aa6c572e51b2d254c7bec3f7b18de0fbd4b9870
font_05_cff_off000060fa.bin pdf-font-stream PDF embedded font (cff) at offset 0x60FA 3126 bytes
SHA-256: 991c364d7e9d5d94a47c1b6a58ca2a3b06a282bda85084364dbcfd0c36764ee2
font_06_cff_off00006eec.bin pdf-font-stream PDF embedded font (cff) at offset 0x6EEC 7770 bytes
SHA-256: 6553cb11c72e6912408b121f62bd01f7b2d8cf5213b5dcd3fbc1b8136982f696
font_07_cff_off00009015.bin pdf-font-stream PDF embedded font (cff) at offset 0x9015 6653 bytes
SHA-256: 0ebb9a797cbb060b5a63cb6f79efa43bc653049f61e77dc4088dbd1d48ead587
font_08_cff_off0000ad0c.bin pdf-font-stream PDF embedded font (cff) at offset 0xAD0C 1438 bytes
SHA-256: 90cc1664d0b58bce8a581e24dc451e8ef224b2b01b57d806927ab2e353424c0c
font_09_cff_off0000b5b1.bin pdf-font-stream PDF embedded font (cff) at offset 0xB5B1 2657 bytes
SHA-256: e5c5170dda4d216539cf9cb475a5b730c1c0662a7728e0298b8e8f249ab0f0ed
font_10_cff_off0000c5de.bin pdf-font-stream PDF embedded font (cff) at offset 0xC5DE 1689 bytes
SHA-256: c47a2c7164b7c7dbf2f1902e886639c8a0bc2ed7508703fa17c2a58582c50c96