PDF static analysis report

Static analysis result for SHA-256 0ed43701cce9828a…

SUSPICIOUS

PDF

6.29 MB Created: 2020-10-05 19:27:01 +05:30 Authoring application: VetBooks.ir (via A-PDF Watermark 4.7.6) First seen: 2026-05-28
MD5: f3e9c860abe1487816a04938c7f57671 SHA-1: bd6219e8722dc305d3ca75561940ea35e3ac0b4b SHA-256: 0ed43701cce9828ae90ae4d470ab27483b08ec97f9a15624c43976bbcc96cd2e
54 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.7700

Heuristics 3

  • Unusually high stream count medium PDF_MANY_STREAMS
    PDF contains 501+ stream objects — may indicate heap spray or heavy obfuscation
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.farad.org/ In PDF document text
    • http://www.arci.com/In PDF document text
    • http://www.feicleansport.orgIn PDF document text
    • http://prohibitedsubstancesdatabase.feicleansport.org/In PDF document text
    • http://www.farad.orgIn PDF document text
    • http://www.FARAD.orgIn PDF document text
    • https://www.heartwormsociety.org/In PDF document text
    • http://vetbooks.irIn PDF document text
    • http://vetbooks.ir/In PDF document text
    • https://ebooks.elsevier.com/PDF link annotation
    • http://www.elsevier.com/permissionsIn PDF document text
    • https://www.avma.org/KB/Resources/Reference/Pages/AMDUCA.aspxIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • https://www.fda.gov/animal-veterinary/report-problem/how-report-animal-drug-side-effects-and-product-problemsIn PDF document text
    • https://www.aphis.usda.gov/aphis/ourfocus/animalhealth/veterinary-biologics/adverse-event-reporting/ct_vb_adverse_eventIn PDF document text
    • http://npic.orst.edu/incidents.htmlIn PDF document text
    • http://www.fei.org/fei/cleansportIn PDF document text
    • http://www.usp.orgIn PDF document text
    • http://www.fda.gov/AnimalVeterinary/SafetyHealth/ReportaProblem/In PDF document text
    • http://www.deadiversion.usdoj.gov/schedules/orangebook/c_cs_alpha.pdfIn PDF document text
    • https://www.dea.gov/drug-schedulingIn PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 32

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_cff_off004be170.bin pdf-font-stream PDF embedded font (cff) at offset 0x4BE170 5445 bytes
SHA-256: 7499a159759779a7a632d2a0897e9c82aab2bd5a9577bfcc14d29fc1fe4ed45a
font_01_cff_off004bf305.bin pdf-font-stream PDF embedded font (cff) at offset 0x4BF305 5227 bytes
SHA-256: 7817c97d2ef39441505ac065d7b3661e978dcb16433c4ce666401e0b1f658785
font_02_cff_off004c0443.bin pdf-font-stream PDF embedded font (cff) at offset 0x4C0443 3334 bytes
SHA-256: 9c36ade3c745f6b6fca030b40ab26263d4224189e592561a96a2c86cf173f164
font_03_sfnt_off004f0fc6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4F0FC6 7417 bytes
SHA-256: 238a2034f3d1a06b0b9fe194989ca7810e93c9cc6574c4ff77125c282adccd28
font_04_sfnt_off004f1ea8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4F1EA8 10972 bytes
SHA-256: 71453428d63b7a903ab6209ee7674c07fc618ba8cfd2ef005536422b21bc65c5
font_05_cff_off004f3586.bin pdf-font-stream PDF embedded font (cff) at offset 0x4F3586 8449 bytes
SHA-256: 40b1fcca9c03f5c7057dc7076fbd5db1789628b48aa2e5f14095bb4c6a53c56c
font_06_cff_off004f4f89.bin pdf-font-stream PDF embedded font (cff) at offset 0x4F4F89 7612 bytes
SHA-256: 4c39d1a4dba2cbf16c22e4ef46c46c5edca2275063dac815d20a98b3549a08bf
font_07_cff_off004f6807.bin pdf-font-stream PDF embedded font (cff) at offset 0x4F6807 3578 bytes
SHA-256: ddc4709d87399a6c397967caf49f6d800d0ef94c439e988179b10c55628d0fa6
font_08_cff_off004f75a6.bin pdf-font-stream PDF embedded font (cff) at offset 0x4F75A6 1401 bytes
SHA-256: 24ca48a35091cbb22a1a324cafec22f94889fed328f01bbfc735095c048bda49
font_09_cff_off004f7c47.bin pdf-font-stream PDF embedded font (cff) at offset 0x4F7C47 7069 bytes
SHA-256: 7655a5ab32ae03f4a66131ed9e792a3c143d1a8138d65cfe33e577c122570268
font_10_cff_off004f93a1.bin pdf-font-stream PDF embedded font (cff) at offset 0x4F93A1 9145 bytes
SHA-256: e590d7720cb94db365a0695a262ada94e1ae8108f0d493857510e8e4fe10079e
font_11_cff_off004fb147.bin pdf-font-stream PDF embedded font (cff) at offset 0x4FB147 1553 bytes
SHA-256: 76688dbbe512a67d84537b49b44f2a04eeabca64d8d935fab271aed9d6f9cced
font_12_cff_off004fb7d5.bin pdf-font-stream PDF embedded font (cff) at offset 0x4FB7D5 1842 bytes
SHA-256: 6cda121c0b0106ddf2f520c5eb3344ea2b58f256dc97f8ca7c7f18582de6bd27
font_13_sfnt_off004fbee3.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4FBEE3 46960 bytes
SHA-256: 4f51e9cbc35d3a83c070d4ef95f840f7c6469323e66da466daf77dade78bc0ea
font_14_cff_off00500ce1.bin pdf-font-stream PDF embedded font (cff) at offset 0x500CE1 916 bytes
SHA-256: 714dc2260f0a50e6c653ff05190cc73ebeee8ecf20e300c1053b9b4a6b0ef3ac
font_15_cff_off00501085.bin pdf-font-stream PDF embedded font (cff) at offset 0x501085 939 bytes
SHA-256: 4dfc2f2944dafa30bf8122c31a04eae6ba32b8439f2326edede99e834a838dcc
font_16_cff_off00501441.bin pdf-font-stream PDF embedded font (cff) at offset 0x501441 2347 bytes
SHA-256: 5fbaf9329db702c3ad891514271a091ea8a2027e7772dbee279e46d74b805f2a
font_17_cff_off00501d31.bin pdf-font-stream PDF embedded font (cff) at offset 0x501D31 4669 bytes
SHA-256: 3aa1ad1ecaa9f16d0bbdfffdd28af9c1a4a700e4f3bee4f515120baf02060006
font_18_cff_off00502dbb.bin pdf-font-stream PDF embedded font (cff) at offset 0x502DBB 3199 bytes
SHA-256: 0b5517644b91674e3ebf62a5eb9e61f64b7ff44c5d86e635966c2f151dbbc615
font_19_cff_off005039bf.bin pdf-font-stream PDF embedded font (cff) at offset 0x5039BF 2500 bytes
SHA-256: f32aa9e7332b30bec42c45ec00672a6b8ed5d43e46ad7f800d662211ae38b125
font_20_cff_off00504313.bin pdf-font-stream PDF embedded font (cff) at offset 0x504313 6693 bytes
SHA-256: da96f289714ae6b59cf7202fdd90513f2c73d2422658907b8fbd86540299fbe9
font_21_cff_off0052bb00.bin pdf-font-stream PDF embedded font (cff) at offset 0x52BB00 8724 bytes
SHA-256: 6e1a670248666bac38822a749a84dd48bb3fbc60e51fd37c3520015773017e56
font_22_cff_off0052db71.bin pdf-font-stream PDF embedded font (cff) at offset 0x52DB71 8008 bytes
SHA-256: e94ff2fd41748376e271cab68b56319efe3aaca6ea8ebffed562fa763de129fb
font_23_cff_off0052f7a3.bin pdf-font-stream PDF embedded font (cff) at offset 0x52F7A3 278 bytes
SHA-256: 5540feed2013d5e663ce45d2b7dd4be390b5ceb1eecc61b1d6bcdd99644c3c61
font_24_cff_off0052fa4d.bin pdf-font-stream PDF embedded font (cff) at offset 0x52FA4D 4917 bytes
SHA-256: c6f47d2fd90539e9fe862cdc28cfd60f1efba10be06b11bba6ef4be2447d22b2
font_25_cff_off00530b91.bin pdf-font-stream PDF embedded font (cff) at offset 0x530B91 2867 bytes
SHA-256: c66c0078726981f9b2db86004a906ceb633ed1656b2c4979f9fcb9094156ace5
font_26_cff_off0053154e.bin pdf-font-stream PDF embedded font (cff) at offset 0x53154E 2231 bytes
SHA-256: be16390d0179d309801ae97cd4e5e98be85203913805ee52d82055ab0af492e0
font_27_cff_off00531dfb.bin pdf-font-stream PDF embedded font (cff) at offset 0x531DFB 763 bytes
SHA-256: e0a77eda6a5466ab2bc345f8239f09e8946f894d6614360caee146d13b8b7e23
font_28_cff_off00532242.bin pdf-font-stream PDF embedded font (cff) at offset 0x532242 500 bytes
SHA-256: c393a94af2ba5f1309f9fe865c11e383792b0494ba98bee8e5160cface331989
font_29_cff_off00532480.bin pdf-font-stream PDF embedded font (cff) at offset 0x532480 1207 bytes
SHA-256: 997fb49c4354cd6623965730e2af1076edddb1ae82a4349a8c57bde6f7f5f2c9
font_30_cff_off00532987.bin pdf-font-stream PDF embedded font (cff) at offset 0x532987 2086 bytes
SHA-256: 691cf320db7ddadec6a82e9da995b2cb5671629093a8525089fb7a57640a42b7
font_31_cff_off00533151.bin pdf-font-stream PDF embedded font (cff) at offset 0x533151 5640 bytes
SHA-256: 57941ab6668d677a216ce89333c10888f33435711cec3c1e3e5fc49581509639

Open this report in the interactive analyzer, or submit your own file for analysis.