PDF / .VIR static analysis report

Static analysis result for SHA-256 91011af7e210636d…

ERROR

PDF / .VIR

1.71 MB Created: 2009-11-10 21:49:52 +01:00 First seen: 2024-04-16
MD5: 526c9626edf41387f6106ea98f868e32 SHA-1: 22422c109706af22f49f8b7e0823d5565df2d178 SHA-256: 91011af7e210636dc0cd38842e34f4c45b2e64efb1f9295cc1ddae070ddd32cd
50 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0014

Heuristics 3

  • Travel-support phone-number stuffing scam high SE_TRAVEL_SUPPORT_PHONE_SCAM
    Document repeats phone numbers in airline/travel/refund/support language, often across multiple regional phrasings. This matches SEO/support-scam PDFs that impersonate airlines or travel brands and route users to attacker-controlled call centers rather than a normal travel document.
  • PDF static-analysis soft budget exhausted low SCAN_INCOMPLETE
    The bounded PDF scanner skipped late sub-format walkers after the configured per-file soft deadline. Earlier findings remain valid.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://bazaar-vcs.org/ In PDF document text
    • http://www.bugzilla.org/In PDF document text
    • http://github.com/In PDF document text
    • http://unfuddle.com/In PDF document text
    • http://www.rallydev.com/In PDF document text
    • http://www.versionone.com/In PDF document text
    • http://www.pivotaltracker.com/In PDF document text
    • http://www.fogcreek.com/FogBugz/In PDF document text
    • http://www.bitkeeper.com/In PDF document text
    • http://www.scons.org/In PDF document text
    • http://www.capify.org/In PDF document text
    • http://testng.org/In PDF document text
    • http://www.dinkumware.com/In PDF document text
    • http://perens.com/works/software/ElectricFence/In PDF document text
    • http://logback.qos.ch/In PDF document text
    • http://www.slf4j.org/In PDF document text
    • http://www.balabit.com/network-security/syslog-ng/In PDF document text
    • http://fitnesse.org/In PDF document text
    • http://selenium.openqa.org/In PDF document text
    • http://sahi.co.in/In PDF document text
    • http://peachfuzzer.com/In PDF document text
    • http://www.compuware.com/products/devpartner/In PDF document text
    • http://opensolaris.org/os/community/dtrace/In PDF document text
    • http://www.fiddlertool.com/In PDF document text
    • http://www.pragprog.comIn PDF document text
    • http://www.nongnu.org/cvs/In PDF document text
    • http://subversion.tigris.org/In PDF document text
    • http://git.or.cz/In PDF document text
    • http://www.selenic.com/mercurial/In PDF document text
    • http://trac.edgewall.org/In PDF document text
    • http://www.redmine.org/In PDF document text
    • http://sourceforge.net/In PDF document text
    • http://code.google.com/In PDF document text
    • http://lighthouseapp.com/In PDF document text
    • http://www.perforce.com/In PDF document text
    • http://msdn.microsoft.com/teamsystem/In PDF document text
    • http://ibm.com/software/awdtools/In PDF document text
    • http://www.borland.com/starteam/In PDF document text
    • http://www.gnu.org/software/make/In PDF document text
    • http://www.gnu.org/software/autoconf/In PDF document text
    • http://www.perforce.com/jam/jam.htmlIn PDF document text
    • http://www.boost.org/doc/tools/build/In PDF document text
    • http://ant.apache.org/In PDF document text
    • http://maven.apache.org/In PDF document text
    • http://cruisecontrol.sourceforge.net/In PDF document text
    • http://hudson.dev.java.net/In PDF document text
    • http://www.junit.org/In PDF document text
    • http://libcwd.sourceforge.net/In PDF document text
    • http://msdn.microsoft.com/visualc/In PDF document text
    • http://gcc.gnu.org/wiki/Mudflap_Pointer_DebuggingIn PDF document text
    +31 more URL(s)