PDF static analysis report

Static analysis result for SHA-256 648669d68634c63f…

CLEAN

PDF

94.2 KB Created: 2020-04-07 02:43:26 +03:00 Authoring application: wkhtmltopdf 0.12.1.4 (via Qt 4.8.6) First seen: 2020-09-07
MD5: 38d0ac84d2b6d9600030f3f5ee1ae1fa SHA-1: 9cad72b05d2d5365aabc53189e184de6f3bb3eea SHA-256: 648669d68634c63f17099bdaca0e74e8667e03df64327a3056c34ceffee16098
6 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.1852

Heuristics 3

  • External URI info PDF_URI
    PDF contains an external URL action
  • Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
    The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://bytecubed.io/uploads/1/3/0/6/130621167/130621167.html#how+to+say+thank+you+for+being+a+good+teacher+in+spanish PDF link annotation
    • http://doggiestylezllc.com/uploads/1/3/0/3/130312961/1638888.pdfIn PDF document text
    • http://barrons-mediakit.com/uploads/1/3/0/5/130551287/76275d5857d10b6.pdfIn PDF document text
    • http://sierraedgarbyu.com/uploads/1/3/1/4/131454496/viradawabe.pdfIn PDF document text
    • http://kaibaandd.com/uploads/1/3/0/7/130776740/5127526.pdfIn PDF document text
    • http://marfar.org/uploads/1/3/0/7/130740597/laxetiwafim-benodasa.pdfIn PDF document text
    • http://linux.thai.net/projects/fonts-tlwgIn PDF document text
    • http://www.thaitux.infoIn PDF document text
    • http://www.ascendercorp.com/In PDF document text
    • http://www.ascendercorp.com/typedesigners.htmlIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/xap/1.0/rights/In PDF document text
    • https://savannah.gnu.org/projects/freefont/In PDF document text
    • http://www.gnu.org/licenses/In PDF document text
    • http://www.gnu.org/copyleft/gpl.htmlIn PDF document text
    • http://www.adobe.com/).NotoIn PDF document text
    • http://www.google.com/get/noto/http://www.adobe.com/type/ThisIn PDF document text
    • http://scripts.sil.org/OFLNotoIn PDF document text
    • https://fedoraproject.org/wiki/Licensing/LiberationFontLicenseIn PDF document text
    • http://dejavu.sourceforge.netIn PDF document text
    • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 8

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off0000aacf.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xAACF 6728 bytes
SHA-256: 5278024270de67705d3a5034a26ce2f5e1d9e53f50705cc770b2190155f81e7b
font_01_sfnt_off0000bba1.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xBBA1 10792 bytes
SHA-256: 93524b95dcd3d5589709f35e9cfe428e9889827b00b6839f3434ac5acfb56da3
font_02_sfnt_off0000d399.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xD399 12516 bytes
SHA-256: a033b2564cb926c4cf4acc5c121492acef8ab53c62de3324d07da800a6c1ca4c
font_03_sfnt_off0000fb05.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xFB05 10392 bytes
SHA-256: c7e263c8e8bf5889cf814df99f478d19bf48514a77374e085b53eb54c4190280
font_04_sfnt_off00011cb7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x11CB7 4988 bytes
SHA-256: 13de38b158bffae4c00c68344d35f9d6dbc9267b3e5cc5ab2f809a005338b8f6
font_05_sfnt_off00012cee.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x12CEE 2508 bytes
SHA-256: 4c15d69bb8d0999900bba9f25383f6b016e5aa2a6fa03f47365b9c01eb53e7be
font_06_sfnt_off00013803.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x13803 17628 bytes
SHA-256: 77894128adb925e53f4d25405fe2e8e80ac840e417788ccd797c3dcbb78c9ac7
font_07_sfnt_off000151cd.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x151CD 7812 bytes
SHA-256: 418afbea048ce2c54a2eb01c61a16f2fb2c58709eac114209c1ea7aa17ca5af9

Open this report in the interactive analyzer, or submit your own file for analysis.