PDF static analysis report

Static analysis result for SHA-256 35925e603c720b12…

CLEAN

PDF

165.8 KB Created: 2026-05-07 19:15:07 +00:00 Authoring application: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/143.0.0.0 Safari/537.36 (via Skia/PDF m143) First seen: 2026-05-10
MD5: 5e6a35b849258f6ccef914094cdca245 SHA-1: 9632f34a6e971455b4d987af583758a6b7fb77e9 SHA-256: 35925e603c720b126278d23a7dfabbdee0f3378384b82d52c6b4297fb7c8d24b
22 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0002

Heuristics 2

  • Clickable URI uses URL shortener medium PDF_URL_SHORTENER_URI
    PDF contains a clickable HTTP(S) action whose destination is a URL shortener. This hides the final landing page from static review and is common in phishing redirect PDFs.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://cli.re/9rA1YZ In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 5

Files carved from inside the sample during analysis.

FilenameKindSourceSize
icc_00_off00000196.icc pdf-icc-profile PDF ICC profile at offset 0x196 536 bytes
SHA-256: d9f822e8083f2f4d1c91e887454be5f75e8c7144b2853408f361e3c4a7a6b36d
font_00_sfnt_off00018d74.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x18D74 38448 bytes
SHA-256: b237b73e34b268c108412e0e3fc0a5f9ee170d5088b7152fb586f1599379e74f
font_01_sfnt_off0001eade.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1EADE 24016 bytes
SHA-256: e36107e9480c00a41508d50a3fd75aa0785a2094ff7d0337a30206f0fafa69e2
font_02_sfnt_off000221ba.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x221BA 28128 bytes
SHA-256: eb752bf43d7386b2b3861143b872f99105f05fa12f5db90882f64ddef26d4cc5
font_03_sfnt_off00026477.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x26477 18552 bytes
SHA-256: b11713d3d508af81ccb412154b70769996b6919fc04a4076727c92869ce1d3c1

Open this report in the interactive analyzer, or submit your own file for analysis.