PDF static analysis report

Static analysis result for SHA-256 32b1ac9492da7190…

CLEAN

PDF

1.65 MB Created: 2014-10-07 17:44:02 +00:00 Authoring application: calibre 1.47.0 [http://calibre-ebook.com] First seen: 2015-05-07
MD5: 00a93d5da262ab229de88bdb54c35cfb SHA-1: 03757c3fd47f3916d616b4a4e8c8ae115bbe3cb9 SHA-256: 32b1ac9492da719071e95caae7b1b17c7a6077976ef7da4b55b66c12545b91a8
22 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0004

Heuristics 2

  • Clickable URI uses URL shortener medium PDF_URL_SHORTENER_URI
    PDF contains a clickable HTTP(S) action whose destination is a URL shortener. This hides the final landing page from static review and is common in phishing redirect PDFs.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://prismstandard.org/namespaces/basic/2.0/ In PDF document text
    • http://calibre-ebook.com])/ProducerIn PDF document text
    • http://calibre-ebook.com])/TitleIn PDF document text
    • http://www.megan-maxwell.com/In PDF document text
    • http://calibre-ebook.comIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xmp/Identifier/qual/1.0/In PDF document text
    • http://ns.adobe.com/pdfx/1.3/In PDF document text
    • http://calibre-ebook.com/xmp-namespace-custom-columnsIn PDF document text
    • http://calibre-ebook.com/xmp-namespaceIn PDF document text
    • http://calibre-ebook.com/xmp-namespace-series-indexIn PDF document text
    • http://goo.gl/1OP6I6In PDF document text
    • http://goo.gl/v0wG2AIn PDF document text