PDF / .VIR static analysis report

Static analysis result for SHA-256 43f8fb49661f5b85…

CLEAN

PDF / .VIR

50.8 KB Created: 2022-12-01 02:52:23 +00:00 Authoring application: celxire (via mPDF 8.1.2) First seen: 2026-01-10
MD5: 707200a534ca9274a1757cfd9bc33990 SHA-1: 2fc3744c6f11cf5bf6ef833e7ae0824867fe7bd0 SHA-256: 43f8fb49661f5b85d14de1b2997dfd6460aca3219eb26dc9435f4d29c8b6add4
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0083

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://www.webcard.irish/wp-content/uploads/2022/12/adailly.pdf PDF link annotation
    • https://sciencetrail.com/wp-content/uploads/2022/12/16_Bit_Full_HOT_Adder_Vhdl_Code_For_Serial_Adder.pdfPDF link annotation
    • https://assetdefenseteam.com/wp-content/uploads/2022/11/The_Gafla_3_Movie_Download_Free_In_Hindi.pdfPDF link annotation
    • https://arabrothers.com/wp-content/uploads/2022/12/lancary.pdfPDF link annotation
    • https://africanscientists.africa/wp-content/uploads/2022/12/Bullett_Raja_Full_Movie_In_Hindi_Hd_1080p_Download_Utorrent_Free_EXCLUSIVE.pdfPDF link annotation
    • https://supermoto.online/wp-content/uploads/2022/12/jillansh.pdfPDF link annotation
    • https://www.kenyasdgscaucus.org/?p=34056PDF link annotation
    • http://www.studiofratini.com/neerja-tamil-dubbed-torrent-upd/PDF link annotation
    • https://calminax.se/wp-content/uploads/2022/12/Taichi2012hdripx264ac3_Jyk_English_Subtitles.pdfPDF link annotation
    • https://entrelink.hk/wp-content/uploads/2018/09/winnel.pdfPDF link annotation
    • http://dejavu.sourceforge.netPDF link annotation
    • http://dejavu.sourceforge.net/wiki/index.php/LicensePDF link annotation

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_003_off00001f84.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x1F84 19868 bytes
SHA-256: 1fe44bd2c4293df4f435f01e38de9da804d32a0825659cb3e7d3f48f77dbbd97
font_01_sfnt_off00005358.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5358 19964 bytes
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8