PDF / .VIR static analysis report

Static analysis result for SHA-256 851d67ba73f22e10…

CLEAN

PDF / .VIR

445.6 KB Created: 2023-02-05 05:17:06 Authoring application: LibreOffice First seen: 2024-10-29
MD5: 66c0b8ce2663fcb92593a79540445d68 SHA-1: 676121c19e800262a0a0213e64450281c5c13599 SHA-256: 851d67ba73f22e1027bd8f5a1a6d8cbc5f8458aca3d0c9efdeedae9e0b52d527
6 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0984

Heuristics 3

  • External URI info PDF_URI
    PDF contains an external URL action
  • Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
    The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://802-11-wireless-networks-definitive-guide-second-edition-pdf.slothoki96.com/lamutiji.pdf In PDF document text
    • https://norman-s-nise-control-systems-engineering-8th-edition-pdf.diveaway-fiji.com/464408.pdfIn PDF document text
    • https://bogosojod.21dayang.com/gidobuk.pdfIn PDF document text
    • https://balance-point-in-math.oldtimersclocks.com/905635.pdfIn PDF document text
    • https://skoda-fabia-service-manual-pdf-free.1080-film.online/187863.pdfIn PDF document text
    • https://mit-erfolg-zum-deutsch-test-f-r-den-beruf-b2-pdf.carquejaalmonds.com/wabifuzolu.pdfIn PDF document text
    • https://lotro-leveling-guide-free-to-play.wupper-flossfahrt.de/wevevef.pdfPDF link annotation
    • https://days-gone-guide-pdf.autofinancinghouse.com/693189.pdfIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/xap/1.0/rights/In PDF document text
    • http://dejavu.sourceforge.netIn extracted file (font_00_sfnt_off0006a50b.bin)
    • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (font_00_sfnt_off0006a50b.bin)

Related samples 3

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off0006a50b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x6A50B 11160 bytes
SHA-256: 096f67e6bcf99b414fcf56ae002b976248952e6655e15ac5b57ec3f04038fbfc
font_01_sfnt_off0006becc.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x6BECC 16616 bytes
SHA-256: 6bf2eb484bdf2bb8511a5ee6f152726d1f4c4bde706322c753551c09c0267e28

Open this report in the interactive analyzer, or submit your own file for analysis.