PDF static analysis report

Static analysis result for SHA-256 51df9c368698e33e…

CLEAN

PDF

3.34 MB Created: 2026-02-25 20:47:49 +00:00 Authoring application: Microsoft Word 2016 (via Neevia Document Converter Pro v7.5.0.244 (http://neevia.com)) First seen: 2026-05-25
MD5: 1f16fc90099a419f4011b4385b7b903a SHA-1: 3ceeb8ac4979da6a963bcad2fa9cd320c53db606 SHA-256: 51df9c368698e33eb61d8af01efc4571ceb036e99316c241c8da7524c96db59d
22 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0828

Heuristics 2

  • Unusually high stream count medium PDF_MANY_STREAMS
    PDF contains 501+ stream objects — may indicate heap spray or heavy obfuscation
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://github.com/zenparsing/es-observable).\n In PDF document text
    • https://github.com/angular/angular/blob/86405345b781a9dc2438c0fbe3e940924In PDF document text
    • https://github.com/DavidBruant/Map-In PDF document text
    • https://github.com/tc39/proposal-string-pad-start-end\nvarIn PDF document text
    • http://neevia.comIn PDF document text
    • http://www.opensource.org/licenses/mit-license.php\n\tAuthorIn PDF document text
    • https://angular.io/\nIn PDF document text
    • https://angular.io/license\nIn PDF document text
    • http://stackoverflow.com/questions/105034/create-guid-uuid-in-In PDF document text
    • http://stackoverflow.com/a/1420225/5628\nIn PDF document text
    • http://www.apache.org/licenses/LICENSE-2.0\r\n\r\nTHISIn PDF document text
    • https://rbuckton.github.io/reflect-In PDF document text
    • https://rbuckton.github.io/reflect-metadata/#reflect.metadata\r\nIn PDF document text
    • https://rbuckton.github.io/reflect-metadata/#ordinaryhasmetadata\r\nIn PDF document text
    • https://rbuckton.github.io/reflect-metadata/#ordinaryhasownmetadata\r\nIn PDF document text
    • https://rbuckton.github.io/reflect-metadata/#ordinarygetmetadata\r\nIn PDF document text
    • https://rbuckton.github.io/reflect-metadata/#ordinaryownmetadatakeys\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-ecmascript-data-types-and-values\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-ecmascript-language-types-undefined-In PDF document text
    • https://tc39.github.io/ecma262/#sec-ecmascript-language-types-null-In PDF document text
    • https://tc39.github.io/ecma262/#sec-ecmascript-language-types-symbol-In PDF document text
    • https://tc39.github.io/ecma262/#sec-object-type\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-type-conversion\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-toprimitive\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-ordinarytoprimitive\r\nIn PDF document text
    • https://tc39.github.io/ecma262/2016/#sec-toboolean\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-In PDF document text
    • https://tc39.github.io/ecma262/#sec-topropertykey\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-testing-and-In PDF document text
    • https://tc39.github.io/ecma262/#sec-isarray\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-iscallable\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-ispropertykey\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-operations-on-objects\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-operations-on-iterator-objects\r\nIn PDF document text
    • https://tc39.github.io/ecma262/2016/#sec-iteratorvalue\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-iteratorstep\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-iteratorclose\r\nIn PDF document text
    • https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-In PDF document text
    • https://tc39.github.io/ecma262/#sec-ordinarygetprototypeof\r\nIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0XIn PDF document text
    • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0ZIn PDF document text
    • http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0In PDF document text
    • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0TIn PDF document text
    +2 more URL(s)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_001_off000017a1.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x17A1 129460 bytes
SHA-256: 51911583be30050f4b6e596a236a836ab41493081e305c820a18c1ec67d39767

Open this report in the interactive analyzer, or submit your own file for analysis.