PDF static analysis report

Static analysis result for SHA-256 789e9583590cbb79…

CLEAN

PDF

11.9 KB Created: 2021-08-09 08:13:34 +02:00 Authoring application: wkhtmltopdf 0.12.5 (via Qt 5.12.8) First seen: 2026-05-25
MD5: 84651b933e02dc4a96e73722a5c6562a SHA-1: 2a6a334935d8680a03801cefbe695c84fb762e63 SHA-256: 789e9583590cbb795f007e8b33757f267f170e2e7241e0e375eb6890ddcb4771
2 Risk Score

Malware Insights

The file is a PDF document. Static analysis identified embedded URLs within the document. Both URLs were confirmed as benign. No malicious scripts or other indicators were found, and the verdict was clean.

Machine Learning

  • Nyx PDF Classifier clean score 0.0004

Heuristics 1

  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://dejavu.sourceforge.net In PDF document text
    • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn PDF document text
🗂 Part of campaign: shared payload a02f67deb0 41 samples

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off000005d7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5D7 10176 bytes
SHA-256: f6b91c185553cd0d86d7148e3fe55c56b55bd043575853d4994157d6deed1314
font_01_sfnt_off00001c6b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1C6B 8940 bytes
SHA-256: a02f67deb084b7ce8e02d7004994a9dd7e3132fe24919a42c6f0df6ed367c188

Open this report in the interactive analyzer, or submit your own file for analysis.