PDF / .VIR static analysis report

Static analysis result for SHA-256 55cbdc3cf94566f4…

CLEAN

PDF / .VIR

562.5 KB Created: 2021-03-25 16:33:16 +01:00 Authoring application: Adobe InDesign 15.1 (Macintosh) (via Adobe PDF Library 15.0) First seen: 2024-07-29
MD5: 6ea2858df3bce0adb212b99c589410c9 SHA-1: 558f2283bc1629ff26220e14db5e025659f1ca08 SHA-256: 55cbdc3cf94566f43ca93b968a2598f9d9b1be80bde18cd4f3fffd4ec4460678
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 2

  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.w3.org/1999/02/22-rdf-syntax-ns# In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text

Related samples 4

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 5

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_013_off00004ded.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x4DED 654352 bytes
SHA-256: da2b9b593e27cba2563cbc8596071c5c8f2395d3dbb4434538bac2bc9d58ce77
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.45, consistent with packed or encrypted content.
font_00_cff_off0000357e.bin pdf-font-stream PDF embedded font (cff) at offset 0x357E 8104 bytes
SHA-256: c2edc5a4f006593000eb2dc7ea3c9af09372f793096141683608e3935c6d0214
font_01_cff_off0007d274.bin pdf-font-stream PDF embedded font (cff) at offset 0x7D274 6606 bytes
SHA-256: d267c8036c5a457f67a9e406d236ecc50f808f23ac88c26a0caf9d8b784383d7
font_02_cff_off00080b41.bin pdf-font-stream PDF embedded font (cff) at offset 0x80B41 612 bytes
SHA-256: a3cfdaaa3f019d1b9373b4351d2e7c81a18dece112092fe9c85ba19377918382
font_03_cff_off0008110e.bin pdf-font-stream PDF embedded font (cff) at offset 0x8110E 4212 bytes
SHA-256: 246407e820bde419bf3e2687659e0e4b091b57b9973865bba9a2583aa10c86ab

Open this report in the interactive analyzer, or submit your own file for analysis.