PDF static analysis report

Static analysis result for SHA-256 07622d887997ee96…

CLEAN

PDF

364.0 KB Created: 2004-07-21 17:17:26 Authoring application: dvipsk 5.58f Copyright 1986, 1994 Radical Eye Software (via AFPL Ghostscript 8.14) First seen: 2026-05-10
MD5: 03234173cd6fc829c6c5098b26ce280f SHA-1: a68361a1c0921128f39497122e490e087e0bc667 SHA-256: 07622d887997ee965f52a05173fd06f2a299c7e3a4bbedeb79bc6833f5853839
22 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0002

Heuristics 2

  • Unusually high stream count medium PDF_MANY_STREAMS
    PDF contains 501+ stream objects — may indicate heap spray or heavy obfuscation
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ihome.ust.hk/~trippen/Cryptography/BM/frameset.html In PDF document text
    • http://www.csd.uwo.ca/~chicha/aa.htmlIn PDF document text
    • http://developer.netscape.com/docs/manuals/communicator/jsref/index.htmIn PDF document text

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_028_off0002b793.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2B793 169208 bytes
SHA-256: 74a800a1b5208bec5744ac4b754c88f813d3ab8609fb99990333fabb4445f9a4