PDF / .VIR static analysis report

Static analysis result for SHA-256 64d0ff568f103d39…

CLEAN

PDF / .VIR

392.3 KB First seen: 2024-04-14
MD5: 8624d69e385e0659fd49aac54777c4e5 SHA-1: e27d1da0231ccc8c62a0361e856901d2fb4b17e7 SHA-256: 64d0ff568f103d394dfcc30061ae6277e44051018cf07eeb0d6e668a680b0a30
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.iec.ch In extracted file (icc_01_off0004fd3d.icc)

Related samples 5

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 17

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_014_off00010898.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x10898 1930158 bytes
SHA-256: 17ec9be9d22390898010636dfe87c101c8d0201b5e717707e90253fdc9bbaed4
stream_037_off00024958.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x24958 26895 bytes
SHA-256: bbfadcd88ae1d7ddcb0f8554ed4ff2c211fd2ff71f7ebd0d9bf946a4b58effd3
stream_039_off00025f7c.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x25F7C 117480 bytes
SHA-256: 25b51de99b7b4651f5cd9bf365b51b73bde92e31f11409dbb3c3ba008f8f2f20
stream_040_off0002a7bb.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2A7BB 29050 bytes
SHA-256: fdf93eadefd2c84f366377b3253d01641167936fb34ec5c3112048c59cc154fe
stream_053_off000378b4.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x378B4 103086 bytes
SHA-256: a3da1a00167249f276cad34b5947506609879b5ff21cbc76ed0cbf3274e64840
stream_061_off00040419.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x40419 103086 bytes
SHA-256: 4168dc8e9d9b594f18f301032901b5db333f8b0cc14e30104546b8fa09145441
stream_066_off00046e23.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x46E23 21780 bytes
SHA-256: 791ba145cf5f7c62bb0a2ca76113f2d84144fb85541e27686723db8236ac0680
stream_071_off0004b073.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x4B073 117645 bytes
SHA-256: f4be5cb4c7c0988da6c3e2c9d1311c788f809e5c3076dd0ded13ae05ed28b1b6
stream_078_off00053171.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x53171 39284 bytes
SHA-256: 7e38154548d93dff6f85562e5bc606264cf9d6ecaeeb0881ec2eac25ed111a5b
icc_00_off0004f862.icc pdf-icc-profile PDF ICC profile at offset 0x4F862 2008 bytes
SHA-256: 0fb37c4328cacebb547210723e15a9fe040ef5a17e5b496e993ca68db0126a88
icc_01_off0004fd3d.icc pdf-icc-profile PDF ICC profile at offset 0x4FD3D 3144 bytes
SHA-256: 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
font_00_sfnt_off00050b82.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x50B82 5068 bytes
SHA-256: 90e39c39adb586ebe1de0c84c7de03b6370b3273158e1f02a6d8fde7a1e654ae
font_01_sfnt_off0005183d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5183D 6856 bytes
SHA-256: 7e0a79f9f48e243292c182d7dec873364ddc64f296436d75fc51dc0a4c0c154b
font_03_sfnt_off00058e14.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x58E14 2084 bytes
SHA-256: b57be4985ea1b6826c7176602df8b1e18b692376823b82a1f1afe14da7abaa95
font_04_sfnt_off00059916.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x59916 21008 bytes
SHA-256: 3f0783b92dd7122fe0309126cea681e7f5c62f76b63b9056108496b57233dbe5
font_05_sfnt_off0005caf3.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5CAF3 14844 bytes
SHA-256: c423a4c5700c8499947c08b5a4457df9d8b5c3e78736de711d2a03962e4a3fa8
font_06_sfnt_off0005ece0.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5ECE0 12508 bytes
SHA-256: 1abae214c245b4c480c30b85bf004abd4b88420806f0a53dd368cb34f00c5081

Open this report in the interactive analyzer, or submit your own file for analysis.