PDF static analysis report

Static analysis result for SHA-256 46ac66b1e3a55dc9…

CLEAN

PDF

2.40 MB Created: 2010-06-30 11:17:32 +02:00 Authoring application: Adobe InDesign CS4 (6.0) (via Adobe PDF Library 9.0) First seen: 2026-05-10
MD5: 15dac21afba433161742c6b20b06c23a SHA-1: b7e0d79e46192683f354cc89fa085513f17a37b4 SHA-256: 46ac66b1e3a55dc974caa431c14eb343df450fc90d856609e6e13d2558e50448
12 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0003

Heuristics 3

  • AcroForm button with action trigger low PDF_ACROFORM_BUTTON
    PDF contains a /Btn form field together with a SubmitForm/URI/Launch/JS trigger — this is the building block of fake 'Download' or 'Open' button overlays used in PDF phishing lures
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.shl-telemedicine.de PDF link annotation
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/exif/1.0/In PDF document text
    • http://ns.adobe.com/photoshop/1.0/In PDF document text
    • http://ns.adobe.com/tiff/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#In PDF document text
    • http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/In PDF document text
    • http://ns.adobe.com/exif/1.0/aux/In PDF document text
    • http://ns.adobe.com/camera-raw-settings/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ManifestItem#In PDF document text
    • http://ns.adobe.com/xmp/InDesign/privateIn PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text

Related samples 4

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 7

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_cff_off00001324.bin pdf-font-stream PDF embedded font (cff) at offset 0x1324 5088 bytes
SHA-256: ad416b604ccf1835bf1ae813879d156768eeacf79521618c38ebdbb8f385b89c
font_01_cff_off0000722e.bin pdf-font-stream PDF embedded font (cff) at offset 0x722E 4181 bytes
SHA-256: f26cd247c5814916a7289e620d9c83febdb4a39ab96eee0e05acb2abd5e0d4f8
font_02_cff_off00007dad.bin pdf-font-stream PDF embedded font (cff) at offset 0x7DAD 6108 bytes
SHA-256: 5b9696e3590d431c00b40c50551269dc3c31478390fae532b1d976c817a5e81c
font_03_cff_off00009067.bin pdf-font-stream PDF embedded font (cff) at offset 0x9067 3323 bytes
SHA-256: b531a13e61e653dc5b28b1dbcaf777b92a05d3ce598457248827d66786eac463
font_04_cff_off00009bf3.bin pdf-font-stream PDF embedded font (cff) at offset 0x9BF3 2555 bytes
SHA-256: 997949496c66981060fd0c3a8ef074d842e484e95df211bbfd27308595c3c706
font_05_cff_off0023ea3f.bin pdf-font-stream PDF embedded font (cff) at offset 0x23EA3F 974 bytes
SHA-256: d83530ea73be307e899da7967c7fc3ad0883b773ac3ae5b29122cf162687e55c
font_06_sfnt_off0023efc6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x23EFC6 23133 bytes
SHA-256: e642786ff0e431d26fbec32e14508b476441c68bf97bf18472a2c96d951975ba

Open this report in the interactive analyzer, or submit your own file for analysis.