PDF static analysis report

Static analysis result for SHA-256 2c01c1f5b89d8296…

CLEAN

PDF

6.8 KB First seen: 2015-08-19
MD5: db762f10a22d9f3179347f3e51249b14 SHA-1: 7deba5f318eb1a08a2dc243cfe70f3cb520294bb SHA-256: 2c01c1f5b89d8296eae0a9be7b472231aa2b75aa228436e9a03cdec50c69a2fa
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.2377

Heuristics 2

  • Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
    The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.w3.org/1999/02/22-rdf-syntax-ns# In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
icc_00_off00000206.icc pdf-icc-profile PDF ICC profile at offset 0x206 1960 bytes
SHA-256: 283e482d9b10db98fb7df2f6ef4bdf4ddf8de5a07d2c7530cc361ec4b29ed39a