PDF / .VIR static analysis report

Static analysis result for SHA-256 7af69c53c459cd7c…

CLEAN

PDF / .VIR

658.4 KB Created: 2023-02-11 02:08:28 Authoring application: Scribus First seen: 2024-04-09
MD5: 5b118e70a13fd6b8878ee748e6fac0ee SHA-1: 07c2e6362c5351aaf1d6c4684872b8b63b101bd2 SHA-256: 7af69c53c459cd7ca474bfb9fbd96f7904018f58d9ad9863a276e5ffc6047fb3
6 Risk Score

Machine Learning

  • Nyx PDF Classifier suspicious score 0.3479

Heuristics 3

  • External URI info PDF_URI
    PDF contains an external URL action
  • Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
    The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://adservice.google.com.ar/ddm/clk/466651624;272226156;i;;%3F//img1.wsimg.com/blobby/go/7324252c-86f7-41e7-bd47-41e47c7d6996/downloads/tablaturas_canciones_guitarra.pdf PDF link annotation
    • https://guzivet.maweloxaj.cfd/4586738.pdfIn PDF document text
    • https://adservice.google.com.ar/ddm/clk/445204615;249060672;c;;%3F//baldwin-park-orlando-fireworks-2023.suvelitolu.online/6425163.pdfIn PDF document text
    • http://puvowomiz.all4petshoppe.com/kokuvodozokivo.pdfIn PDF document text
    • https://adservice.google.com.ph/ddm/clk/310682673;138356009;g;;%3F//img1.wsimg.com/blobby/go/b45e6dbc-663a-41e5-972f-8e141023b4db/downloads/61678276497.pdfIn PDF document text
    • https://adservice.google.com.mm/ddm/clk/466651624;272226156;i;;%3F//img1.wsimg.com/blobby/go/0c2e9a96-614b-46e4-96b1-6073d1c94d01/downloads/beyond_basics_fingerstyle_guitar_download.pdfIn PDF document text
    • https://adservice.google.com.om/ddm/clk/426382440;228185261;d;;%3F//img1.wsimg.com/blobby/go/d570e424-ed25-4da8-9d13-fd5d476e9fbb/downloads/jawiberawizev.pdfIn PDF document text
    • https://scaricare-video-vimeo-online.notedovali.cfd/8881544.pdfIn PDF document text
    • https://emt-crash-course-pdf.xizojomo.cfd/754.pdfIn PDF document text
    • https://adservice.google.com.pg/ddm/clk/445204615;249060672;c;;%3F//img1.wsimg.com/blobby/go/0c2e9a96-614b-46e4-96b1-6073d1c94d01/downloads/87652945664.pdfIn PDF document text
    • https://adservice.google.com.eg/ddm/clk/310682673;138356009;g;;%3F//img1.wsimg.com/blobby/go/716224b9-824b-46b1-9430-282c0dd3cc44/downloads/dimigisoxilewosatolirifu.pdfIn PDF document text
    • https://adservice.google.co.vi/ddm/clk/445204615;249060672;c;;%3F//jukexidi.mojozupa.cfd/1917563.pdfIn PDF document text
    • http://como-vender-qualquer-coisa-a-qualquer-um.lacysranch.com/180.pdfIn PDF document text
    • https://adservice.google.cz/ddm/clk/426382440;228185261;d;;%3F//img1.wsimg.com/blobby/go/2eaccc70-b56f-4611-9fc2-631cb91cd029/downloads/kuvesepobesemabotatulixar.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/64f73bc5-8086-4260-99a9-145650d10d2b/downloads/difimi.pdfIn PDF document text
    • https://adservice.google.it/ddm/clk/445204615;249060672;c;;%3F//img1.wsimg.com/blobby/go/b0b7a6ad-4a66-4769-b381-41206173d23b/downloads/wugegutafuw.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/aaa54f4b-29ce-4b7f-bfad-27835ddb1522/downloads/pulsar_generator_6000_manual.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/83dabb23-79b1-482e-823f-996713481114/downloads/41162995104.pdfIn PDF document text
    • http://adservice.google.com.au/ddm/clk/466651624;272226156;i;;%3F//brother-se400-service-manual-pdf.excellenceinaction.club/zoxobuwo.pdfIn PDF document text
    • https://adservice.google.az/ddm/clk/425484003;227454619;f;;%3F//img1.wsimg.com/blobby/go/b9053568-47f0-45db-bce6-c4a1e9543626/downloads/74405722613.pdfIn PDF document text
    • http://adservice.google.ws/ddm/clk/466651624;272226156;i;;%3F//pendiente-de-una-recta-ejercicios-resuel.isabellamichellegillespie.com/69.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/b45e6dbc-663a-41e5-972f-8e141023b4db/downloads/bodokowufoziduvagole.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/ddba35f7-5e36-4e4a-b343-92eab128fc5a/downloads/zunifiwudalifexolawur.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/ff0fe11b-ee1a-445a-9b79-e9e33236b05f/downloads/bigekosit.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/83dabb23-79b1-482e-823f-996713481114/downloads/mupeturisotam.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/22792795-5a93-4c6c-944f-39740721adf4/downloads/zimasililenojapibese.pdfIn PDF document text
    • https://adservice.google.cn/ddm/clk/408405163;208572896;n;;%3F//img1.wsimg.com/blobby/go/77f4f447-86fd-4fe6-b5de-7fd5ba5ee4f7/downloads/sedunemetatikowexokig.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/22792795-5a93-4c6c-944f-39740721adf4/downloads/fsx_flight_simulator_x_apk.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/35e50462-4d3a-425e-8c44-7a024a988bce/downloads/wopet.pdfIn PDF document text
    • http://adservice.google.by/ddm/clk/426382440;228185261;d;;%3F//libro-eres-lo-que-dices-niurka-pdf-grati.rockettsview.com/mudifulokafemiwuti.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/f56a816e-81d2-4571-8850-7369a1ecec88/downloads/vetesurixewebasemawalif.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/83dabb23-79b1-482e-823f-996713481114/downloads/78202697111.pdfIn PDF document text
    • https://adservice.google.ki/ddm/clk/300948314;127869103;e;;%3F//img1.wsimg.com/blobby/go/2eaccc70-b56f-4611-9fc2-631cb91cd029/downloads/gogo_live_mod_apk_v_2.9.1.pdfIn PDF document text
    • https://adservice.google.gg/ddm/clk/408405163;208572896;n;;%3F//narcotics-anonymous-basic-text-5th-editi.fudaxexe.cfd/31.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/77f4f447-86fd-4fe6-b5de-7fd5ba5ee4f7/downloads/nojiso.pdfIn PDF document text
    • https://adservice.google.nl/ddm/clk/424929466;226923624;r;;%3F//img1.wsimg.com/blobby/go/77f4f447-86fd-4fe6-b5de-7fd5ba5ee4f7/downloads/common_grammar_mistakes_worksheets.pdfIn PDF document text
    • https://adservice.google.lt/ddm/clk/448794861;252804937;a;;%3F//img1.wsimg.com/blobby/go/5301bb5d-5eb2-4ca0-882a-9b218c0488b8/downloads/android_p_for_mate_10_pro.pdfIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/xap/1.0/rights/In PDF document text
    • http://dejavu.sourceforge.netIn extracted file (font_00_sfnt_off000a0a85.bin)
    • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (font_00_sfnt_off000a0a85.bin)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off000a0a85.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xA0A85 17912 bytes
SHA-256: f22c74123ed4b720f43ccafb0662a3ba1e7b3277f28ade93947ce5a183c5c83d