PDF static analysis report

Static analysis result for SHA-256 69a4158eb1d88f26…

CLEAN

PDF

409.5 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-30
MD5: ebdbe711c42d79b0127304146167f9ea SHA-1: 552133e23c63965bd7ae7c83174529bd9e9a798d SHA-256: 69a4158eb1d88f26150b2735525fafd5093eb6eb6f9f0c376b76fdee738f0c86
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0036

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://airadvisor.com/pl/reklamacje/qatar-airways In PDF document text
    • https://www.qatarairways.com/pl-pl/help.htmlPDF link annotation
    • https://www.qatarairways.com/pl-pl/travel-voucher.htmlIn PDF document text
    • https://www.qatarairways.com/pl-pl/homepage.htmlIn PDF document text
    • https://www.qatarairways.com/pl-pl/legal/notices.htmlIn PDF document text
    • https://www.google.com/search?q=Zarz%C4%85dzaj+rezerwacj%C4%85&gl=pl&hl=pl&pws=0&sca_esv=e42243e293ad428e&biw=1536&bih=695&ei=LQPraeLcDrad1fIP1dq4qQM&oq=qa+infolinia&gs_lp=Egxnd3Mtd2l6LXNlcnAiDHFhIGluZm9saW5pYSoCCAEyBhAAGAcYHjIGEAAYBxgeMgYQABgHGB4yBhAAGAcYHjIGEAAYBxgeMgYQABgHGB4yCBAAGAcYChgeMgYQABgHGB4yBRAAGO8FMggQABiABBiiBEjODlAAWMMBcAB4AZABAJgBhQGgAYUCqgEDMC4yuAEByAEA-AEBmAICoAKWApgDAJIHAzAuMqAH_gyyBwMwLjK4B5YCwgcDMi0yyAcNgAgA&sclient=gws-wiz-serp&mstk=AUtExfCA1hVjM8yrRP65u1qv3gkLcqvAyPTaF408MTA9aGONEiTzF5gAkCmFUF7o2IhibsmqllTjWuUCMMGq2kEkqRpis4A3JBXBsTt_rcKEopvroPgpDafaB8zbSrQYH5re-0c&csui=3&ved=2ahUKEwjAwtXR5YWUAxWQUGwGHcnMGugQgK4QegYIAQgAEAQIn PDF document text
    • https://www.google.com/search?q=eDreams&gl=pl&hl=pl&pws=0&sca_esv=e42243e293ad428e&biw=1536&bih=695&ei=LQPraeLcDrad1fIP1dq4qQM&oq=qa+infolinia&gs_lp=Egxnd3Mtd2l6LXNlcnAiDHFhIGluZm9saW5pYSoCCAEyBhAAGAcYHjIGEAAYBxgeMgYQABgHGB4yBhAAGAcYHjIGEAAYBxgeMgYQABgHGB4yCBAAGAcYChgeMgYQABgHGB4yBRAAGO8FMggQABiABBiiBEjODlAAWMMBcAB4AZABAJgBhQGgAYUCqgEDMC4yuAEByAEA-AEBmAICoAKWApgDAJIHAzAuMqAH_gyyBwMwLjK4B5YCwgcDMi0yyAcNgAgA&sclient=gws-wiz-serp&mstk=AUtExfCA1hVjM8yrRP65u1qv3gkLcqvAyPTaF408MTA9aGONEiTzF5gAkCmFUF7o2IhibsmqllTjWuUCMMGq2kEkqRpis4A3JBXBsTt_rcKEopvroPgpDafaB8zbSrQYH5re-0c&csui=3&ved=2ahUKEwjAwtXR5YWUAxWQUGwGHcnMGugQgK4QegYIAQgDEAAIn PDF document text
    • https://www.google.com/search?q=Fly.pl&gl=pl&hl=pl&pws=0&sca_esv=e42243e293ad428e&biw=1536&bih=695&ei=LQPraeLcDrad1fIP1dq4qQM&oq=qa+infolinia&gs_lp=Egxnd3Mtd2l6LXNlcnAiDHFhIGluZm9saW5pYSoCCAEyBhAAGAcYHjIGEAAYBxgeMgYQABgHGB4yBhAAGAcYHjIGEAAYBxgeMgYQABgHGB4yCBAAGAcYChgeMgYQABgHGB4yBRAAGO8FMggQABiABBiiBEjODlAAWMMBcAB4AZABAJgBhQGgAYUCqgEDMC4yuAEByAEA-AEBmAICoAKWApgDAJIHAzAuMqAH_gyyBwMwLjK4B5YCwgcDMi0yyAcNgAgA&sclient=gws-wiz-serp&mstk=AUtExfCA1hVjM8yrRP65u1qv3gkLcqvAyPTaF408MTA9aGONEiTzF5gAkCmFUF7o2IhibsmqllTjWuUCMMGq2kEkqRpis4A3JBXBsTt_rcKEopvroPgpDafaB8zbSrQYH5re-0c&csui=3&ved=2ahUKEwjAwtXR5YWUAxWQUGwGHcnMGugQgK4QegYIAQgDEAEIn PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 9

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_048_off0004cc49.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x4CC49 18240 bytes
SHA-256: 33e060654ed1208fc726f2323a8a9e7d9de6f6c8c2aedd340c7ed605b422fc95
stream_065_off00053aa6.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x53AA6 60912 bytes
SHA-256: 0dd2d49a882b36548ee29a4a382bc086dbf939f149f539fff82b58bb330df087
font_00_sfnt_off0003b3ad.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3B3AD 48540 bytes
SHA-256: 13be9d011a17602dca7d40cd1589ee9af8e1e84e82a333fbc6d03ffe7fb03f15
font_01_sfnt_off000484d8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x484D8 183876 bytes
SHA-256: 24d05150da872c763a3d228dd1dbab6ffcd40a17898e24770bd9682b682afe1a
font_02_sfnt_off00050cbf.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x50CBF 74192 bytes
SHA-256: c036dd446ecd97ca297c8f76cbce32105d7ce8e1914eff99e89a3b1b239f1d32
font_04_sfnt_off0005c468.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5C468 4740 bytes
SHA-256: dd2b31f6adbc4ee31a0eb0ecf490eac30645f9b3a94a2fb6b9a39094e475fc4d
font_05_sfnt_off0005cfbf.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5CFBF 33428 bytes
SHA-256: 1fe863313a449bae7731d18cace016801d00c83d3929b49e4b3bfb49fe058690
font_06_sfnt_off0005f4e4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5F4E4 41348 bytes
SHA-256: 9ab35355bdf5b2ba5af781030848d923efc0c1662e551ccce162beeb5869356c
font_07_sfnt_off0005ffe9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5FFE9 29256 bytes
SHA-256: 71eeccb3cb4d375c4a006229cddd4f55fd1450330e741eca6410de26f02d9151

Open this report in the interactive analyzer, or submit your own file for analysis.