PDF / .VIR static analysis report

Static analysis result for SHA-256 3f6e88d86a0b5c5a…

CLEAN

PDF / .VIR

176.9 KB Created: 2023-06-19 22:50:29 -06:00 Authoring application: PScript5.dll Version 5.2.2 (via GPL Ghostscript RELEASE CANDIDATE 3 9.28) First seen: 2024-04-14
MD5: 8c6b414e7110d55353d0d0e1be8c9e23 SHA-1: 65d6d49f934b0d91cee0aa5055416aae6a122356 SHA-256: 3f6e88d86a0b5c5ad34c61d09df821a5e93de6e84a2fe31f11b780fea03a957a
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.w3.org/1999/02/22-rdf-syntax-ns# In PDF document text
    • http://ns.adobe.com/iX/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text

Extracted artifacts 10

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off0001ca90.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1CA90 19932 bytes
SHA-256: e39a659fdc4a79c491802cde59ae72ae7625102943bdd967711c38f8bc69021b
font_01_sfnt_off0001d8c9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1D8C9 31076 bytes
SHA-256: bcacb2ce019f53820020ec35960820af6dd416be016c6e62f8888e1d910d9f9a
font_02_sfnt_off0001ff06.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1FF06 42488 bytes
SHA-256: 337fbb30686793ea60b0783b959436c499cc9d6a58ecf3753342a73ab9443a1c
font_03_sfnt_off00022100.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x22100 29788 bytes
SHA-256: d8ae79519fc68142d32b88ebae29b1c5dccbbd602687d36b9e6012b6caed3bee
font_04_cff_off00023a01.bin pdf-font-stream PDF embedded font (cff) at offset 0x23A01 281 bytes
SHA-256: e3e55abbaa04b52587a62e346b443db5c468e1817ff3e2ae97702ddbeb128ecc
font_05_cff_off00023c21.bin pdf-font-stream PDF embedded font (cff) at offset 0x23C21 926 bytes
SHA-256: c33c469358d63ef5bc9d80e1f5b8d1194197c227c62f93aa8ec57e4c8f174018
font_06_cff_off000240c6.bin pdf-font-stream PDF embedded font (cff) at offset 0x240C6 258 bytes
SHA-256: fdccc47d292870921353d7904775c82177cfc582ee5159ec62e5767f287020a7
font_07_sfnt_off00024294.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x24294 43680 bytes
SHA-256: 1a011574284ff97e5bbdc2076046c82e8c34bfa04762421c546dc36c1b85e4e7
font_08_sfnt_off00025f37.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x25F37 29780 bytes
SHA-256: 5dae0360548f2e24ebb101a2be3cf162279121f505c7fb765e1008868f763580
font_09_sfnt_off00027524.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x27524 59216 bytes
SHA-256: 12241fa7fb828349ac9915e06a5734bd9e0cb434cbabaab985cb8d7802f2a82f