PDF / .VIR static analysis report

Static analysis result for SHA-256 df55b13c393ce0ad…

CLEAN

PDF / .VIR

64.0 KB First seen: 2024-07-29
MD5: 11e9eae40001aea949f2a7e1640fce84 SHA-1: e9e669b89139d35dbaae81d3225f53286746451c SHA-256: df55b13c393ce0ad72ce8c242cda3a529111b3fac2ec9a74c1eb12bdcd8d0fdb
10 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0021

Heuristics 2

  • External URI low PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.iec.ch PDF link annotation

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_004_off00007a25.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x7A25 45228 bytes
SHA-256: 5ab5e66da1d75cb6585ab3f23d3ba6ef575fd1b31b1c09dd62c7ae58fea76615
icc_00_off00000de0.icc pdf-icc-profile PDF ICC profile at offset 0xDE0 4456 bytes
SHA-256: ee2f821d16d12ec9e9f2958ac8865f40912d0ce1fb9625a31b594fab942b1caf
icc_01_off00001ba7.icc pdf-icc-profile PDF ICC profile at offset 0x1BA7 3144 bytes
SHA-256: 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
font_00_sfnt_off00002aa2.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2AA2 26124 bytes
SHA-256: 206b0e8c66465729bb57e06ae7bc71b9786e1ded60db1762178165c8c530d453