PDF static analysis report

Static analysis result for SHA-256 3dde1c81d4a244fb…

CLEAN

PDF

135.1 KB Created: 2021-07-25 21:12:40 +02:00 Authoring application: tadvanka (via PDF Master 1.0.1) First seen: 2026-06-26
MD5: 332dc93c41d095751ff1bcde06183431 SHA-1: 01a53a8e6fab770548fedcba4be66a461803e57f SHA-256: 3dde1c81d4a244fb5eb5d13a44af80bb6a4c0252239d087a05654633d4ff573d
12 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0027

Heuristics 3

  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://imgfil.com/1wwr6d PDF link annotation
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#PDF link annotation
    • http://purl.org/dc/elements/1.1/PDF link annotation
    • http://ns.adobe.com/xap/1.0/PDF link annotation
    • http://ns.adobe.com/pdf/1.3/PDF link annotation
    • http://ns.adobe.com/xap/1.0/mm/PDF link annotation
    • http://www.aiim.org/pdfa/ns/extension/PDF link annotation
    • http://www.aiim.org/pdfa/ns/schema#PDF link annotation
    • http://www.aiim.org/pdfa/ns/property#PDF link annotation
    • http://www.aiim.org/pdfa/ns/id/PDF link annotation
🗂 Part of campaign: shared payload 022cece5ee 3 samples

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_005_off0000491b.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x491B 120336 bytes
SHA-256: 022cece5ee9885affd190ab9c85d6e99f6e7a70e0ae02b7d5df33c771c9b75d9