PDF static analysis report

Static analysis result for SHA-256 3582e7811340f2e1…

CLEAN

PDF

1.47 MB Created: 2025-02-20 15:31:45 +01:00 Authoring application: CorelDRAW 2022 (via Corel PDF Engine Version 24.2.0.444) First seen: 2026-05-26
MD5: e1452a63d5b2489bcee22ba0e7872ecc SHA-1: f283947b596f11a3a6ae6d33f6ff0565702da02d SHA-256: 3582e7811340f2e18f7c346fefeaf0c701dcf30d73be087914ef5d0aacdf7596
22 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0003

Heuristics 2

  • Clickable URI uses URL shortener medium PDF_URL_SHORTENER_URI
    PDF contains a clickable HTTP(S) action whose destination is a URL shortener. This hides the final landing page from static review and is common in phishing redirect PDFs.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://tinyurl.com/yznku8bj In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_002_off0010c42e.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x10C42E 557168 bytes
SHA-256: 35f401731df11a4eba3502af632e51d68bc394bcb7d34632a331c1ba3f4a0bf6
icc_01_off00178589.icc pdf-icc-profile PDF ICC profile at offset 0x178589 912 bytes
SHA-256: 9e3d49aef74009b18086d1e48762b016f156a1d63e3eafb174452a2f22ba2095
font_00_cff_off0016a7fe.bin pdf-font-stream PDF embedded font (cff) at offset 0x16A7FE 2489 bytes
SHA-256: c7a9ee41d42c2c9d2ca2cc36f765cb428be50e07722f2f9855968d473fb0b72f

Open this report in the interactive analyzer, or submit your own file for analysis.