PDF / .VIR static analysis report

Static analysis result for SHA-256 2c89e5c37a4668f4…

CLEAN

PDF / .VIR

784.5 KB Authoring application: 3-Heights(TM) PDF Optimization Shell 5.9.1.5 (http://www.pdf-tools.com) First seen: 2024-10-29
MD5: b75db07b04d9c853863611934ca5c6b9 SHA-1: 6e6de03964aadccc381b2e4d3f60e247a9c1c8d2 SHA-256: 2c89e5c37a4668f4804911dcb7adf1c670ec415949c2fee79c93c7b699294b5b
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0010

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.hydromet.gov.bt/ PDF link annotation
    • http://www.nchm.gov.bt/In PDF document text
    • http://www.pdf-tools.comIn PDF document text

Extracted artifacts 6

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off000009fe.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x9FE 9280 bytes
SHA-256: 6818206fd00b8c4677cd72752a767aeb53c5175500533b8f8bdaaa4abc1a4a3a
font_01_sfnt_off00002226.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2226 33204 bytes
SHA-256: b7faef35afdf6534ca04aa6f0e97ba59327ceb0e75bc4c1f03e7920932f9298b
font_02_sfnt_off000085b9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x85B9 37196 bytes
SHA-256: 04fc836f91e3e0d9989c216563f1abcb5d2701118cd74304b3563935e7487428
font_03_sfnt_off0000f4fd.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xF4FD 2880 bytes
SHA-256: 3adaacbd98c7082a860ca98c99bc17fc018af2a832887ed2c79e34ad0d506f2b
font_04_sfnt_off00016305.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x16305 10868 bytes
SHA-256: 262599861bd35d843a444fe3341b64056809d047675af4e6698ead727d79ad31
font_05_sfnt_off000bfe17.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xBFE17 21648 bytes
SHA-256: 5f73cd1a6b943bd3739effbf932dccbfd025d3fb072848fe516f0b218cdfa2e4