PDF static analysis report

Static analysis result for SHA-256 1eed704179583383…

CLEAN

PDF

952.2 KB Created: 2026-05-08 09:38:25 -03:00 Authoring application: D4Sign.com.br (via mPDF 8.0.7) First seen: 2026-05-19
MD5: 364b76f44bd9ca8d7d2cb7b3100059cd SHA-1: 3975b5d032658d778b7687f5b1e6894ac61aa3ac SHA-256: 1eed7041795833833f6dbb66f4842141950bad572e2ab7b83bb8112b3d6d6cff
6 Risk Score

🔏 Digital signature Signed

A signature covers the whole signed byte range — PDF JavaScript is never signed on its own — and does not by itself mean the document is safe.

Machine Learning

  • Nyx PDF Classifier clean score 0.0002

Heuristics 3

  • External URI info PDF_URI
    PDF contains an external URL action
  • Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
    The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://secure.d4sign.com.br/verificar In PDF document text
    • http://dejavu.sourceforge.netFontsIn extracted file (font_00_sfnt_off00003d8c.bin)
    • https://github.com/andre-fuchs/kerning-pairs/blob/master/LICENSE.mdIn extracted file (font_08_sfnt_off000ca9d9.bin)
    • https://www.google.com.br/maps/search/-23.573069231272427PDF link annotation
    • https://www.google.com.br/maps/search/-23.57292153122815In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In PDF document text
    • https://learn.microsoft.com/en-us/typography/font-list/calibrihttp://lucasfonts.comMicrosoftIn extracted file (stream_056_off00096340.bin)
    • http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (stream_056_off00096340.bin)
    • http://dejavu.sourceforge.net/wiki/index.php/LicenseDejaVuIn extracted file (font_00_sfnt_off00003d8c.bin)
    • https://docs.microsoft.com/typography/aboutWeightWidthOpticalIn extracted file (font_08_sfnt_off000ca9d9.bin)
    • https://docs.microsoft.com/typography/aboutWeightWidthRegularOpticalIn extracted file (font_10_sfnt_off000df78c.bin)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 12

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_056_off00096340.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x96340 351952 bytes
SHA-256: e360da24c2d4ce03e214ee46d2b2bc2c70c99df4e58d1d60df6d7a1ca62438d8
stream_060_off000ccce2.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xCCCE2 290272 bytes
SHA-256: f47a434309bb48ec95c2d78e1587502e759d77b304e187a7a112d6e1f40a7f53
font_00_sfnt_off00003d8c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3D8C 26976 bytes
SHA-256: 597414bb3d2a1935f71675912dceeb77f9c98911d0cf0ef4139a1f75eceb8b7d
font_01_sfnt_off0000768b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x768B 27604 bytes
SHA-256: c1c775f0b54973a64fc8d3ea692b07c800f889183e98ef8802c05d64e8d1b6af
font_02_sfnt_off00086c07.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x86C07 27140 bytes
SHA-256: 7a6cd46c353441666bfaf43a2b3d66c5118eef541effca98c0a10c9dfde107ec
font_03_sfnt_off0008a59b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x8A59B 27812 bytes
SHA-256: dc67bc0a89886ed52f2402f463a9bcc7c58133800b54ff34d3e442ffe40a62a2
font_04_sfnt_off0008df69.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x8DF69 26388 bytes
SHA-256: 653d3e368484dc70491b1dd6e5b3be0852c59bd1519248745b4b2efba5ab3fde
font_05_sfnt_off000927d5.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x927D5 51928 bytes
SHA-256: 649447603640a875407de2362fafebbda3a9d8ae1021cf1b6cf88cd796bb59c3
font_07_sfnt_off000b161b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xB161B 335076 bytes
SHA-256: 916b8e344c854434f87dd1230628c32325e21d55434b905fcdbec8e9eba24d23
font_08_sfnt_off000ca9d9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xCA9D9 19840 bytes
SHA-256: 89cb78b72afd79e8f860ff65c02ae7c7636a57ca8ac472a8f1d90be82d6b968a
font_10_sfnt_off000df78c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xDF78C 30628 bytes
SHA-256: 81c550323893e287b712bc5daa669cf3e48900ed45258bb4b896f324b62d6dbd
font_11_sfnt_off000e3a04.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xE3A04 33052 bytes
SHA-256: 913a1bf148eaea9e51fec057171b872aaa623c4b19b38b7768a1a49f1dbbafbb

Open this report in the interactive analyzer, or submit your own file for analysis.