PDF / .VIR static analysis report

Static analysis result for SHA-256 48278eda2572afe7…

CLEAN

PDF / .VIR

1.12 MB First seen: 2024-04-14
MD5: 07118928510737e9063a6520f6a3845e SHA-1: 226d9738a722e5f6d50fcd0a6a1ea283a865af6c SHA-256: 48278eda2572afe75ff44827e3c9e0f302703b915cc7d835cd37e38110423579
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0058

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ns.camerabits.com/photomechanic/1.0/ In PDF document text
    • http://www.typography.comSemiBold/FSTypeIn extracted file (font_01_cff_off00003df7.bin)
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/exif/1.0/aux/In PDF document text
    • http://ns.adobe.com/xap/1.0/rights/In PDF document text
    • http://ns.adobe.com/photoshop/1.0/In PDF document text
    • http://ns.adobe.com/camera-raw-settings/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ManifestItem#In PDF document text
    • http://ns.adobe.com/xap/1.0/t/pg/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/Dimensions#In PDF document text
    • http://ns.adobe.com/xap/1.0/g/In PDF document text
    • http://ns.adobe.com/tiff/1.0/In PDF document text
    • http://ns.adobe.com/exif/1.0/In PDF document text
    • http://www.canto.com/XML/ns/XMPMetadata/1.0In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://www.typography.com/FSTypeIn extracted file (font_04_cff_off00006423.bin)

Extracted artifacts 5

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_cff_off00003418.bin pdf-font-stream PDF embedded font (cff) at offset 0x3418 2264 bytes
SHA-256: afd349d59421a49d3e0714a4832b0b07aa2865443b5833db32b50dfa75daddcb
font_01_cff_off00003df7.bin pdf-font-stream PDF embedded font (cff) at offset 0x3DF7 3769 bytes
SHA-256: 6bff394054c19b26903b28b0199321a88a71bb062b29f35a83402a6750a536d5
font_02_cff_off00004dd9.bin pdf-font-stream PDF embedded font (cff) at offset 0x4DD9 3508 bytes
SHA-256: 33448ded294fa7ae958ab3b322dbc9b3fa84d696538c22a0c4344d78b233b1f2
font_03_cff_off00005d29.bin pdf-font-stream PDF embedded font (cff) at offset 0x5D29 1445 bytes
SHA-256: da134c388841799c6a96c77c495e1be808861a5e9fa7c0099b5d35afbffee3b2
font_04_cff_off00006423.bin pdf-font-stream PDF embedded font (cff) at offset 0x6423 2282 bytes
SHA-256: 6db5daa9917c1eee267ed7ab3eddd0e2219664f27c44df495ff6d4a4bb087ab2