PDF / .VIR static analysis report

Static analysis result for SHA-256 760727c26508d76b…

CLEAN

PDF / .VIR

4.47 MB Created: 2024-08-27 13:00:00 +02:00 Authoring application: Adobe InDesign 19.5 (Macintosh) (via Adobe PDF Library 17.0) First seen: 2025-11-28
MD5: 57a14ccc3860d912b07b842f1e78404b SHA-1: 770abd09aa2aba62b13f4e2b409523187cdc1caf SHA-256: 760727c26508d76b7dad93a0ee39f352aa4a9c1a3cb59b8bebf6d0965bf9c2d1
10 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 2

  • ASCII85Decode filter (with exploit indicators) low PDF_FILTER_85
    ASCII85 encoding filter present alongside exploit delivery indicators — uncommon outside of obfuscation
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ns.camerabits.com/photomechanic/1.0/ In PDF document text
    • http://cipa.jp/exif/1.0/In PDF document text
    • http://ns.attribution.com/ads/1.0/In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#In PDF document text
    • http://ns.adobe.com/illustrator/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/t/pg/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/Dimensions#In PDF document text
    • http://ns.adobe.com/xap/1.0/g/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/photoshop/1.0/In PDF document text
    • http://ns.adobe.com/tiff/1.0/In PDF document text
    • http://ns.adobe.com/exif/1.0/In PDF document text
    • http://ns.adobe.com/camera-raw-defaults/1.0/In PDF document text
    • http://ns.adobe.com/exif/1.0/aux/In PDF document text
    • http://ns.adobe.com/camera-raw-settings/1.0/In PDF document text
    • http://www.iec.chIn extracted file (icc_00_off00020d0c.icc)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 8

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_011_off0001fde1.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x1FDE1 4656 bytes
SHA-256: 0fea50129d7cd093f374a01475ec96a7d9c2cc1ef1a60806faa0761d4fa6a2ea
stream_013_off00021770.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x21770 6155 bytes
SHA-256: fa8814d980def40a5cb451cbfa911c4cd28027269a764fcd600e85c2fcfd2efe
stream_016_off000f86d6.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xF86D6 546 bytes
SHA-256: e4648de6dbb808e7b79a6f0b18d2f62365754836ef0eab3aaf27a5cd427a58d7
stream_056_off002e812e.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2E812E 1697 bytes
SHA-256: ddeb292892394cf07118b82e889f106cc7aea457d5017f459e24c6da14f1a89d
icc_00_off00020d0c.icc pdf-icc-profile PDF ICC profile at offset 0x20D0C 3144 bytes
SHA-256: 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
font_03_cff_off0045cd5b.bin pdf-font-stream PDF embedded font (cff) at offset 0x45CD5B 7221 bytes
SHA-256: a00cf36a8e8936667725e6029ae9832980ebc2b19548cda7748140addd07f62c
font_04_cff_off00465039.bin pdf-font-stream PDF embedded font (cff) at offset 0x465039 5875 bytes
SHA-256: 9bc73b14793602ceddecba87d3fe5a5c4fbf74eee8aa9722827c1d5632c09fa0
font_05_cff_off00466322.bin pdf-font-stream PDF embedded font (cff) at offset 0x466322 6001 bytes
SHA-256: 3e54642c86e8f46f4391bfa47e014a48ed6c8b68bad85c1bd5c03327764b3410

Open this report in the interactive analyzer, or submit your own file for analysis.