PDF / .VIR static analysis report

Static analysis result for SHA-256 f50ff734fc5a0f5c…

CLEAN

PDF / .VIR

422.1 KB Created: 2023-08-01 21:26:45 Authoring application: Inkscape First seen: 2024-09-20
MD5: 51d1153133692cb422f4df45a860735b SHA-1: f1399cffead048eee33a9f548018215963c18476 SHA-256: f50ff734fc5a0f5c0f6b462cdfaabf29146a5ebcca6f866c3958b26f4b0d7abb
6 Risk Score

Machine Learning

  • Nyx PDF Classifier suspicious score 0.4768

Heuristics 3

  • External URI info PDF_URI
    PDF contains an external URL action
  • Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
    The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://prophecy-cvicu-exam-a-v5-answers.luguvini.cfd/679.pdf In PDF document text
    • https://kinns-medical-assisting-study-guide-answ.walasiped.cfd/10.pdfIn PDF document text
    • https://adservice.google.co.zm/ddm/clk/424929466;226923624;r;;%3F//uploads-ssl.webflow.com/64f1b166bd89d8319705dab6/6566804475556d2566f849eb_kunokuniliwatabo.pdfIn PDF document text
    • https://adservice.google.com.gh/ddm/clk/300948314;127869103;e;;%3F//fundamentals-of-management-7th-edition-g.sofapuxis.cfd/7612880.pdfIn PDF document text
    • https://adservice.google.co.ao/ddm/clk/478229754;284365575;c;;%3F//img1.wsimg.com/blobby/go/402713db-2744-489f-9f03-e39e03753df0/downloads/94686694032.pdfIn PDF document text
    • https://adservice.google.com.sb/ddm/clk/445204615;249060672;c;;%3F//uploads-ssl.webflow.com/64edcdaa44596f26f063ae61/6566802849020be98c350f7c_26712083931.pdfIn PDF document text
    • https://free-robux-generator-2022.suvelitolu.online/gejamitasuvaferatig.pdfIn PDF document text
    • https://guporebarori.vajazavij.online/jezivoxofiboxiremobo.pdfIn PDF document text
    • https://adservice.google.com.sa/ddm/clk/466651624;272226156;i;;%3F//gatilhos-mentais-livro-pdf-gr-tis.vorubidog.cfd/dojikigiguna.pdfIn PDF document text
    • https://adservice.google.co.uz/ddm/clk/425484003;227454619;f;;%3F//vivefananod.milliwaysconsulting.net/rujub.pdfIn PDF document text
    • https://adservice.google.com.na/ddm/clk/310682673;138356009;g;;%3F//kakowowo.suvelitolu.online/bowuvoz.pdfIn PDF document text
    • https://adservice.google.ht/ddm/clk/310682673;138356009;g;;%3F//img1.wsimg.com/blobby/go/06a6dbba-ba8a-4e17-9303-bd46eedbe60b/downloads/repumetukat.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/d5a47f91-5b16-43a4-a730-cce38b975f20/downloads/kavazaporusifelokuve.pdfIn PDF document text
    • https://adservice.google.sk/ddm/clk/466651624;272226156;i;;%3F//uploads-ssl.webflow.com/64f1b166bd89d8319705dab6/6566809ae134c5b03878e8aa_govamiwozeburi.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/43c8046c-ec5b-47ae-bd8f-39ed9c70f0cd/downloads/58696462578.pdfIn PDF document text
    • https://uploads-ssl.webflow.com/64f855713934ea24a2a72b70/65667ebf148dd4bdcaa49683_24141212650.pdfIn PDF document text
    • https://img1.wsimg.com/blobby/go/3a3d03a0-7151-406f-849b-4d31d6091c59/downloads/50425471527.pdfIn PDF document text
    • https://uploads-ssl.webflow.com/64f1ad2473fc956b92e689e1/65668026d34e2c8088af6c88_xibumiw.pdfIn PDF document text
    • https://adservice.google.sh/ddm/clk/295204063;122181591;w;;%3F//uploads-ssl.webflow.com/64edcdaa44596f26f063ae61/656680823e4d8058ee5b07c8_92069541397.pdfIn PDF document text
    • https://uploads-ssl.webflow.com/64f83dc182e5ba67e68c813d/65667ecefa94286daa3df993_25865292973.pdfIn PDF document text
    • https://adservice.google.am/ddm/clk/478229754;284365575;c;;%3F//nekare.mygroundbiz.online/dox.pdfIn PDF document text
    • https://uploads-ssl.webflow.com/64edcdaa44596f26f063ae61/656680c6d319a0f1a0231c26_koxatogugifonatigat.pdfIn PDF document text
    • https://uploads-ssl.webflow.com/64f851e7fafa46dcfe4b485d/65668014c48eaa5d581d4dd3_67117286778.pdfIn PDF document text
    • https://uploads-ssl.webflow.com/64f84b546061ea64dda78f20/65667ee9356cac581db0341c_37560895650.pdfIn PDF document text
    • https://adservice.google.mn/ddm/clk/408405163;208572896;n;;%3F//img1.wsimg.com/blobby/go/7e54f4cb-fd4f-48d4-88eb-fafb0f4c3d1c/downloads/99518853448.pdfIn PDF document text
    • https://uploads-ssl.webflow.com/64f853507f219e64ae3956af/65668092406e78a5774b7e39_fegineforawixosegas.pdfIn PDF document text
    • https://uploads-ssl.webflow.com/64ee1c9ec0f2c702ff5c628e/6566804b241c1bcff661cf52_dekalenudemodanubutekib.pdfIn PDF document text
    • https://uploads-ssl.webflow.com/64f853507f219e64ae3956af/656680bfd319a0f1a0231730_tevunexugadafadubejixofod.pdfIn PDF document text
    • https://adservice.google.je/ddm/clk/300948314;127869103;e;;%3F//understanding-pathophisiology-6th-editio.jujisorude.cfd/pafimunef.pdfIn PDF document text
    • https://uploads-ssl.webflow.com/64ee220c98447d04cfbc4035/656680f0b5eedcfea935b45e_binowomagiwa.pdfIn PDF document text
    • https://uploads-ssl.webflow.com/64f851e9546e74a558d08188/65667ebbca387face027c823_13162095757.pdfIn PDF document text
    • https://adservice.google.vu/ddm/clk/310682673;138356009;g;;%3F//img1.wsimg.com/blobby/go/b1b661aa-47ff-4f79-a435-e6bd3d764063/downloads/ramib.pdfIn PDF document text
    • https://adservice.google.bi/ddm/clk/466651624;272226156;i;;%3F//uploads-ssl.webflow.com/64f851e7fafa46dcfe4b485d/656680d4b2f2dac2c672f9f7_73067576917.pdfIn PDF document text
    • https://adservice.google.ga/ddm/clk/310682673;138356009;g;;%3F//fossils-and-geologic-time-study-guide-an.walasiped.cfd/3886865.pdfIn PDF document text
    • https://adservice.google.gy/ddm/clk/408533097;208818505;l;;%3F//aci-detailing-manual-pdf-free.aundmlogistik.de/2.pdfIn PDF document text
    • https://adservice.google.st/ddm/clk/448794861;252804937;a;;%3F//uploads-ssl.webflow.com/64ee1c9ec0f2c702ff5c628e/65667fabfa94286daa3e7745_tuzuwuwiwijukovipotos.pdfPDF link annotation
    • https://adservice.google.ca/ddm/clk/295204063;122181591;w;;%3F//steelwater-gun-safe-manual.kupavifa.online/vewemuvutinijodup.pdfIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/xap/1.0/rights/In PDF document text
    • http://dejavu.sourceforge.netIn extracted file (font_00_sfnt_off00064282.bin)
    • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (font_00_sfnt_off00064282.bin)

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off00064282.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x64282 16356 bytes
SHA-256: 65a22bcdb3b9107835bb3a7df08b846512e229c986aff4b94ab1daad27c1d73b
font_01_sfnt_off00066d19.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x66D19 11504 bytes
SHA-256: 40895a5602189116d2420d9b88add2c64928c9a5fab2511fbfb1bb8cda5c0e0b