PDF / .VIR static analysis report

Static analysis result for SHA-256 f02bb8307e16201f…

SUSPICIOUS

PDF / .VIR

79.6 KB Created: 2024-08-15 15:39:33 UTC Authoring application: TeX (via pdfTeX-1.40.26) First seen: 2024-09-20
MD5: 28a574957e810d6b1f9fff1ed4eb0bee SHA-1: b133530c1db7adaca5bc501734de1aa1f3670e50 SHA-256: f02bb8307e16201fbb76e54edf0fdff541a401e7d4eb56777943860aeb96e229
42 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0006

Heuristics 2

  • Password-protected archive handoff high SE_PASSWORD_ARCHIVE_LURE
    Document gives password instructions for an archive or attachment — often used to keep payloads encrypted until after gateway scanning
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://developer.apple.com/TOOLS/Xcode/ In PDF document text