← All detection heuristics · Polyglot
high
POLYGLOT_CHILD_PDF_STATIC_TRIAGE
What it means
Polyglot child-content evidence: Polyglot Child PDF Static Triage.
Why it fires
The file contains a child document or payload in a secondary format. The embedded content produced suspicious static-analysis evidence.
Other Polyglot heuristics
IMAGE_TRAILING_OVERLAY_EXECUTABLE JPEG_CARRIER_EMBEDDED_ENCODED_PE