PDF static analysis report

Static analysis result for SHA-256 21ae377bd72cda21…

CLEAN

PDF

3.39 MB First seen: 2026-05-10
MD5: 6ad4159c0ec447065227255b7c6e5381 SHA-1: f5d06412706ebf58f600eb666370a741e23225f0 SHA-256: 21ae377bd72cda21bba8d832c7741c36c757fb8fdb87da39ce4d75ab1ee24114
22 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0052

Heuristics 2

  • Unusually high stream count medium PDF_MANY_STREAMS
    PDF contains 501+ stream objects — may indicate heap spray or heavy obfuscation
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.iec.ch In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 6

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_000_off00000287.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x287 72411 bytes
SHA-256: 04657409f5f36ceb65bd88872b7049a7f5338cca5a56eff4c57b6e100e187784
stream_016_off00028341.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x28341 208270 bytes
SHA-256: 8470c9856a009ec8daa147d80024d4e202517b256a753b1d5bf82268a11985f2
stream_023_off0004356f.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x4356F 183414 bytes
SHA-256: bc6a2c518aa036e15166da870db9b160efb745c83c67568c9fee378ded7613c8
stream_032_off0005d966.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x5D966 169458 bytes
SHA-256: 59ce2955cffa30ba79ec75f74ab11ee3519fca7615448e1fccc2a8f2efa59211
stream_044_off000a93c6.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xA93C6 247714 bytes
SHA-256: db53bbd62df109dd81bf70ad5e40526df0995410894c6722b136a50ad376ff9a
icc_00_off0000b5f0.icc pdf-icc-profile PDF ICC profile at offset 0xB5F0 3144 bytes
SHA-256: 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e

Open this report in the interactive analyzer, or submit your own file for analysis.