PDF static analysis report

Static analysis result for SHA-256 283dac5449eae07f…

CLEAN

PDF

106.2 KB Created: žßH€ëê_‚çn7șá©÷¤©–Üârn021gAAt014Òë035bTs015¯šâd›,ÒíJ013Ìá Authoring application: žßH€ëê_‚çn7șá©÷ è­\õ¶"ƒ)000áGŸÈSì014?8攄N015XÛï^Fúô¬« C002¢$ñ¢âæ003000M‚‘ (via žßH€ëê_‚çn7șá©÷ׂlH?ØSFÒ007nKȁ5037å034žføF¨H@h»“”–0128I žò f™Q˪1·‹7¸D)025eîO3œ!#øNœaD¹¦) First seen: 2026-06-04
MD5: 05361019bcbf7369afff0c01b36fbcd5 SHA-1: 77bb717d5989fbdf52de0cda865e2ee95ad7553e SHA-256: 283dac5449eae07f0dc8c7756f735d3aaa82ca4b1c5c9344e6c0371d7d90f041
24 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0004

Heuristics 3

  • Image-only document with action trigger (screenshot lure) medium PDF_IMAGE_LURE
    PDF has 2 image(s), only 0 text block(s), carries a click-outward action, and is only 106 KB — typical shape of a phishing lure where a full-page screenshot hides a clickable button that launches or submits to an attacker URL.
  • Encrypted PDF (string and stream contents are opaque to static scan) info PDF_ENCRYPTED
    PDF declares /Encrypt — string objects and stream contents are encrypted with the standard security handler (RC4 or AES). On its own this is informational; legitimate encrypted documents include signed contracts, billing statements, and rights-managed material. Static heuristics cannot inspect encrypted payload bytes.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://wwww.microsoft.com0 In PDF document text
    • http://www.iec.chIn PDF document text
    • https://docs.microsoft.com/typography/abouthttp://lucasfonts.comMicrosoftIn PDF document text
    • http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0ZIn PDF document text
    • http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0ZIn PDF document text
    • http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0��In PDF document text
    • http://www.microsoft.com/PKI/docs/CPS/default.htm0@In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0ZIn PDF document text
    • http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 12

Files carved from inside the sample during analysis.

FilenameKindSourceSize
icc_00_off0000126c.icc pdf-icc-profile PDF ICC profile at offset 0x126C 4508 bytes
SHA-256: 73d504558e7d03ef4ff2676ba62c7553ee5bd856b45da2d330e33e012ad61fb3
icc_01_off00002236.icc pdf-icc-profile PDF ICC profile at offset 0x2236 1992 bytes
SHA-256: 49429d4dd70f439f6fa47a298e5ffbd280375d2cbd18708b1e05a34aafe5d219
icc_02_off000054b9.icc pdf-icc-profile PDF ICC profile at offset 0x54B9 3144 bytes
SHA-256: 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
font_00_sfnt_off0000799b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x799B 26240 bytes
SHA-256: 96ea4ff306ecf6c3a271dec961eca17c61304cf5f4a058e39a0dbe235055e704
font_01_sfnt_off0000c3a1.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xC3A1 4308 bytes
SHA-256: 08e1535a544994eb57fe97787516ffb9a790427b40d6a0f530adc1f4a74ae2c1
font_02_sfnt_off0000ce12.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xCE12 15112 bytes
SHA-256: a7c4412069d11975a9b154850c72486a429a94dea616324844c9a73c426bf658
font_03_sfnt_off0000e8d3.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xE8D3 8412 bytes
SHA-256: f21823420d74a52f41793e9262e0721f7da687bc14e1adeb2f99037dc1a981cc
font_04_sfnt_off0000fe9c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xFE9C 11532 bytes
SHA-256: 3337c773edb4142cf5cd3ae407d3e874219835d722894ef5ccbe13b76e280a85
font_05_sfnt_off000117d1.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x117D1 9824 bytes
SHA-256: 0f1547b590633683b751ce7a255d386a86f8049d5f048778d3d60b7d76d094d9
font_06_sfnt_off00012ff7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x12FF7 6296 bytes
SHA-256: d56adb160c0111902e94f75eab3e1203c99e472d97f84eb48cc9837761bbc0ca
font_07_sfnt_off00013dcb.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x13DCB 7724 bytes
SHA-256: 58d384dccdb4e031582120bcc621577715cf028059e57077688791cd726c845c
font_08_sfnt_off00014fb3.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x14FB3 83164 bytes
SHA-256: 19c65fe8142cd32a4c48a581ec605464f23c642de961708c92ed0221b4c88d3b

Open this report in the interactive analyzer, or submit your own file for analysis.