PDF static analysis report

Static analysis result for SHA-256 133b81c9df425998…

CLEAN

PDF

206.8 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-24
MD5: 616d69566880fffc680eaa7f4a9b0e0b SHA-1: d070c4f1c74bb42d33b1ac7e65edd0b33a46c7f5 SHA-256: 133b81c9df425998e2000460d3e04a294969af0b10ef1a1d1a935f26c4a2ef27
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cinex4u.netlify.app/ PDF link annotation
    • http://reelix123.netlify.appIn PDF document text

Extracted artifacts 7

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_011_off00024786.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x24786 22696 bytes
SHA-256: b33414276e25740de8b39b5b8e3d72dd3a86b1b6acfe7043b652f174764b438e
stream_020_off0002c925.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2C925 10696 bytes
SHA-256: 06e4df11024d85fbe468a62230e53daa41d95a3d1e7f0635fbbacdd04ba94aae
icc_00_off000000cc.icc pdf-icc-profile PDF ICC profile at offset 0xCC 536 bytes
SHA-256: d9f822e8083f2f4d1c91e887454be5f75e8c7144b2853408f361e3c4a7a6b36d
font_00_sfnt_off00022a99.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x22A99 12104 bytes
SHA-256: 883364879ae20622a8b3200a2459700638e5f0c62bda57e83de43d2f0488aba1
font_02_sfnt_off000277b7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x277B7 47084 bytes
SHA-256: b4f5c0d9649518ec67d4890f84eea91766e2b0eb1208e6155e98b56cf0953728
font_03_sfnt_off000282c2.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x282C2 25156 bytes
SHA-256: 228660fd7c13df17f9c5449aa1dfda1662ff091e2188dd125fb9b4cc0a28d1a8
font_05_sfnt_off0002e06a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2E06A 29084 bytes
SHA-256: 09011d17fcffae6cc4e64950e68974b869a8da5756d4daeeb6238f8974e8619d