PDF / .VIR static analysis report

Static analysis result for SHA-256 38899bea97b11a67…

CLEAN

PDF / .VIR

37.0 KB Created: 2024-12-12 17:20:53 -05:00 Authoring application: wkhtmltopdf 0.12.5 (via Qt 4.8.7) First seen: 2024-12-23
MD5: b6b940fb72cd9aff36c7297211aa43c4 SHA-1: 9df07b98877f4e372885c96b766bb00b19414c0c SHA-256: 38899bea97b11a678173808333b9ea9dd7a9c74dfc4e5c69aa4010deebef2ee1
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.LinotypeLibrary.com/http://www.LinotypeLibrary.com/All In extracted file (font_01_sfnt_off000038fe.bin)
    • http://www.LinotypeLibrary.com/http://www.LinotypeLibrary.com/NumberIn extracted file (font_02_sfnt_off0000527a.bin)
    • http://www.Linotype.com/http://www.linotype.com/fontdesignersCharacterIn extracted file (font_03_sfnt_off0000604c.bin)

Related samples 6

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 5

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off00002d1e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2D1E 2696 bytes
SHA-256: 8967b368fd4089b4a31721e0ff28835c2bac5767ce8234ec8fc82d0331b9720d
font_01_sfnt_off000038fe.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x38FE 7728 bytes
SHA-256: 239aa12b4e046f1bfcac23b0ab99065647474c45f54c141d4e33a04c673c8a25
font_02_sfnt_off0000527a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x527A 4152 bytes
SHA-256: 8afb2f4dd28acbcd952a3c9c358060913de2e30183149d02f7bdf4060348b2ae
font_03_sfnt_off0000604c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x604C 11404 bytes
SHA-256: 477a8988808a068400825a9d37a44ac3c8614128813da45641f4c71657652cc4
font_04_sfnt_off0000843c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x843C 2912 bytes
SHA-256: 00380ae5a026791b84310924f0899277afbf051d56f87cffb5d78389cc5d3c24

Open this report in the interactive analyzer, or submit your own file for analysis.