PDF static analysis report

Static analysis result for SHA-256 5d5363d9688e27bf…

CLEAN

PDF

2.74 MB First seen: 2026-05-10
MD5: 2ffdf14742b3f6ebe8e119fee0f07f98 SHA-1: aa99cf2836a5e9c2dfa2fd4f149114dff897e15a SHA-256: 5d5363d9688e27bf3fb72ad8605a8d41a8af8a106e2a07570fce128674854638
22 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0014

Heuristics 2

  • Unusually high stream count medium PDF_MANY_STREAMS
    PDF contains 501+ stream objects — may indicate heap spray or heavy obfuscation
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.iec.ch In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 6

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_000_off00000287.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x287 72411 bytes
SHA-256: 04657409f5f36ceb65bd88872b7049a7f5338cca5a56eff4c57b6e100e187784
stream_016_off00028341.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x28341 208270 bytes
SHA-256: 8470c9856a009ec8daa147d80024d4e202517b256a753b1d5bf82268a11985f2
stream_023_off0004356f.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x4356F 183414 bytes
SHA-256: bc6a2c518aa036e15166da870db9b160efb745c83c67568c9fee378ded7613c8
stream_032_off0005d966.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x5D966 169458 bytes
SHA-256: 59ce2955cffa30ba79ec75f74ab11ee3519fca7615448e1fccc2a8f2efa59211
stream_044_off000a93c6.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xA93C6 247714 bytes
SHA-256: db53bbd62df109dd81bf70ad5e40526df0995410894c6722b136a50ad376ff9a
icc_00_off0000b5f0.icc pdf-icc-profile PDF ICC profile at offset 0xB5F0 3144 bytes
SHA-256: 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e

Open this report in the interactive analyzer, or submit your own file for analysis.