PDF / .VIR static analysis report

Static analysis result for SHA-256 e2de49d8a9d9ed76…

CLEAN

PDF / .VIR

8.20 MB First seen: 2026-06-29
MD5: f63b6d37eee7ece47f5923fb34a0ca30 SHA-1: 89a5ebd990413d8091878d64d8dc45a455811490 SHA-256: e2de49d8a9d9ed762205657151eed84b07bad0489795980d2c170d556fd1e713
22 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0228

Heuristics 2

  • Unusually high stream count medium PDF_MANY_STREAMS
    PDF contains 501+ stream objects — may indicate heap spray or heavy obfuscation
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cipa.jp/exif/1.0/ In PDF document text
    • https://www.ncbi.nlm.nih.gov/books/NBK448124/In PDF document text
    • https://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfpmn/pmn.cfmIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#In PDF document text
    • http://ns.adobe.com/illustrator/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/t/pg/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/Dimensions#In PDF document text
    • http://ns.adobe.com/xap/1.0/g/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/pdfx/1.3/In PDF document text
    • http://ns.adobe.com/photoshop/1.0/In PDF document text
    • http://ns.adobe.com/exif/1.0/aux/In PDF document text
    • http://ns.adobe.com/tiff/1.0/In PDF document text
    • http://ns.adobe.com/exif/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ManifestItem#In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/Font#In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 32

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_008_off00008f78.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x8F78 19761 bytes
SHA-256: 90b15b217b80dd7003ae066a96b73b22ae9f2266232ac86d4daaeb90e26005bb
stream_009_off0000bd5c.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xBD5C 557168 bytes
SHA-256: 35f401731df11a4eba3502af632e51d68bc394bcb7d34632a331c1ba3f4a0bf6
font_00_sfnt_off00003879.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3879 22461 bytes
SHA-256: cb44bc72bdf8e732142c9b696084fc0ad085aaaa70313ec339de6f4699e013c1
font_01_sfnt_off0000691a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x691A 18440 bytes
SHA-256: cbd6b9b357d12d9b9b79163a9a8b632bc1c5eb9693cb41e00c79e5b4ce8467bf
font_03_sfnt_off00162746.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x162746 20003 bytes
SHA-256: da642ab1c7f1d620140f54afe7aa4835bb8dde5ec3dc1d1851892e874864d1a1
font_04_cff_off00396068.bin pdf-font-stream PDF embedded font (cff) at offset 0x396068 784 bytes
SHA-256: dfeba977179a66963e2af8b41429cb93c1fda4e423b3ce5679faec51d51e0176
font_05_sfnt_off003d4f65.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3D4F65 32428 bytes
SHA-256: b91dba07d4f2c5685b1509d30674fcc92d757094da26c57c5767d95567cf156a
font_06_cff_off004c9f32.bin pdf-font-stream PDF embedded font (cff) at offset 0x4C9F32 359 bytes
SHA-256: f445e87ae2f36d04f6d3f61ab003ca59e488dd7ca3741cabac12ea985628badf
font_07_sfnt_off004ca322.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4CA322 37537 bytes
SHA-256: 086a3cea1e30b7d01654f6340d8bcfc5442ddf91b2f5de40c30c538c2cfdf326
font_08_sfnt_off004cdf94.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4CDF94 93235 bytes
SHA-256: 3208e4242110411321acd6af7175e0f7176727b12a222b17b7a6d30735e2aadc
font_09_sfnt_off004d5e71.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4D5E71 34646 bytes
SHA-256: 07cb0e9cf0da3d615519851af98deed4b6572516f35e81f5cba32367ea9fc1c8
font_10_sfnt_off004d9262.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4D9262 37971 bytes
SHA-256: d24da298ff5fe7ce4ff57a5bfdd5d7a3ae0ae49aeecc967f30a292beb20527d3
font_11_cff_off0051ec6b.bin pdf-font-stream PDF embedded font (cff) at offset 0x51EC6B 810 bytes
SHA-256: b137017fe9dd60ce7861d2a0d0313e815d748ae76c3c303b99f34267f6748515
font_12_cff_off0051f1b9.bin pdf-font-stream PDF embedded font (cff) at offset 0x51F1B9 3191 bytes
SHA-256: 7cc0d278e40967a8d9dd1815f8a4e580ce86a12f8036c6451e9116e4668c67d9
font_13_cff_off0051ff97.bin pdf-font-stream PDF embedded font (cff) at offset 0x51FF97 1037 bytes
SHA-256: c7970f1bead8cba59425929a67ad49d1f9f2fc6cbdc23ba72db7b555fe91b786
font_14_cff_off0052058e.bin pdf-font-stream PDF embedded font (cff) at offset 0x52058E 3092 bytes
SHA-256: 27c6fb86e4889b7cc610a2bab03a33145bd4bdf0c627675065ee9224873a55c6
font_15_sfnt_off0056b785.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x56B785 14019 bytes
SHA-256: b2457ca401680549329a06a66955adbd49e891553db7077f7ab20484e8c7a8c2
font_16_sfnt_off0059e393.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x59E393 18374 bytes
SHA-256: eb2830665cae2947eb0e1f6f17765ca89ddf312799c13c6f5e24657a8bef2e8f
font_17_sfnt_off005f1c62.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5F1C62 32969 bytes
SHA-256: f84b1fdd6657c95d045738c8d479ea3b05ec74955c10425351d7ccea9304e788
font_18_sfnt_off005f7441.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5F7441 23302 bytes
SHA-256: 1ace94db05fbdf5283583aee5f8c6e81b69f6aacbeb483efe7a0811074aff91d
font_19_sfnt_off005fb8f4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5FB8F4 51018 bytes
SHA-256: bdf289b869bdc482fbb5512314d0b79ba6e28cf6528eb845fe55f40a26592490
font_20_sfnt_off006049b0.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x6049B0 50702 bytes
SHA-256: e2d1117e91c5aa580cec628f9a7a72d0414ab9b537892b3c8fc2a8139c224802
font_21_sfnt_off00608765.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x608765 78278 bytes
SHA-256: 90366c6004d83721c6d9daa02f070a65e8f244fbdbaf86c072554ac6b9108aa5
font_22_sfnt_off0079d2d0.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x79D2D0 16370 bytes
SHA-256: e00ccfa1f896b9f5e4cf06984211cc81bfc127c862a87ee8e36538754925463b
font_23_sfnt_off0079fd38.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x79FD38 23394 bytes
SHA-256: 5e8d8c49a059e45e545e8d96b936a91e93fd113d7e52e0d7cc42c7d2ffc5deb8
font_24_sfnt_off007a34f8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x7A34F8 19492 bytes
SHA-256: 3306243d62f53a4940e727da7227a96a06f741b175a9ce22bb2236a9090d373e
font_25_sfnt_off007a6400.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x7A6400 43352 bytes
SHA-256: 0a46bfdc90b794beee897ced9b88e16465936f05d5e1bacb9b4e196c51d059e8
font_26_sfnt_off007ab048.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x7AB048 13407 bytes
SHA-256: d20247db32cc29b66aba6cd749a6cbb45c8899def9864d7d460cb653b862549d
font_27_sfnt_off007b9937.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x7B9937 33552 bytes
SHA-256: 3d565aa52bdd7b5dcc5adf9d94dd12ba2b7a8a88cc2993ab8117792193bf1d83
font_28_sfnt_off007bcde3.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x7BCDE3 41250 bytes
SHA-256: d04e2f163b4ea244093e4158820ec35726e59014b4ed8a1714a71458d42be160
font_29_sfnt_off007c118f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x7C118F 17746 bytes
SHA-256: 3b575db8a201601b8b730b6103e5e72a595dabc4617f89c731a725e874bda936
font_30_sfnt_off007ef643.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x7EF643 21405 bytes
SHA-256: e525a16e79473ceff0b5e44e4f7e1e94154063b93eb7628ea21f6cba9de47834

Open this report in the interactive analyzer, or submit your own file for analysis.