PDF static analysis report

Static analysis result for SHA-256 385201d3409e4b37…

CLEAN

PDF

50.5 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-22
MD5: 897e580d5ca290141933234a9344742b SHA-1: 7ba54730cde50c3e5452ad9ae3335fa069664368 SHA-256: 385201d3409e4b3724456d7dfa553379bcbb4d6cb342fbdcd23ff29fd1965040
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0061

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://gotvnow.top PDF link annotation
🗂 Part of campaign: gotvnow.top 56 samples

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
icc_00_off000000be.icc pdf-icc-profile PDF ICC profile at offset 0xBE 536 bytes
SHA-256: d9f822e8083f2f4d1c91e887454be5f75e8c7144b2853408f361e3c4a7a6b36d
font_00_sfnt_off00004b45.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4B45 24764 bytes
SHA-256: eb08612c24b7d9e54b6dcfb7e6e0f87a46d82c4f93ade8ec7dcb9722e9b66a41
font_01_sfnt_off00008bd9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x8BD9 62372 bytes
SHA-256: 0a30f6a9fb778a845084381c8c0a8354987b3d1cb9426a73b73619da3c2af038