PDF static analysis report

Static analysis result for SHA-256 8b5e6f3d94b0ebf3…

CLEAN

PDF

8.82 MB Created: 2016-01-26 09:45:22 -05:00 Authoring application: Microsoft® Word 2016 First seen: 2026-05-09
MD5: f78e1c03a3bd831076817e96270d740f SHA-1: 192af27035a25c4b6b0d087920a85a92694f8cb8 SHA-256: 8b5e6f3d94b0ebf319c6773693424cac0aa49e9800d2af1683106907b5940e63
24 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.1260

Heuristics 3

  • Unusually high stream count medium PDF_MANY_STREAMS
    PDF contains 501+ stream objects — may indicate heap spray or heavy obfuscation
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.tariqabdelhaleem.net/new/Artical-44890 In PDF document text
    • http://www.tariqabdelhaleem.net/new/ArticalList-127In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-45109In PDF document text
    • http://tayarsunni.com/ar/index.phpIn PDF document text
    • https://nokbah.com/~w3/?p=4389In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72587In PDF document text
    • http://www.tariq-abdelhaleem.net/new/Artical-72587In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72523In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72537In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72693In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72557In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72553������In PDF document text
    • http://www.tariqabdelhaleem.net/new/ArticalIn PDF document text
    • http://www.tariqabdelhaleem.net/new/ArticalList-132������In PDF document text
    • http://www.tariqabdelhaleem.net/new/ArticalList-127������In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-������In PDF document text
    • http://tayarsunni.com/ar/index.php������In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72549In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72584In PDF document text
    • http://www.up-00.com/?wxGK������In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72587������In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72584������In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-17In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72754In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72724In PDF document text
    • http://jpst.it/sTl5In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72748In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72497In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72782In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72747In PDF document text
    • http://tariqlibrary.net76.net/bookk.phpIn PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72813In PDF document text
    • http://www.tariqabdelhaleem.net/new/Artical-72814In PDF document text
    • http://tariqabdelhaleem.net/new/Artical-72904In PDF document text
    • http://tariqabdelhaleem.net/new/Artical-72854In PDF document text
    • http://tariqabdelhaleem.net/new/Artical-72855In PDF document text
    • http://jpst.it/vuBOIn PDF document text
    • http://tariqabdelhaleem.net/new/Artical-72798In PDF document text
    • http://jpst.it/xrFdIn PDF document text
    • http://tariqabdelhaleem.net/new/Artical-75In PDF document text
    • http://tariqabdelhaleem.net/new/Artical-76In PDF document text
    • http://tariqabdelhaleem.net/new/Artical-77In PDF document text
    • http://jpst.it/z2oFIn PDF document text
    • http://tariqabdelhaleem.net/new/Artical-72693In PDF document text
    • http://jpst.it/zqZyIn PDF document text
    • http://jpst.it/zOzfIn PDF document text
    • http://jpst.it/BfvDIn PDF document text
    • http://tariqabdelhaleem.net/new/Artical-72923In PDF document text
    • http://tariqabdelhaleem.net/new/Artical-72572In PDF document text
    • http://tariqabdelhaleem.net/new/Artical-72573In PDF document text
    +103 more URL(s)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 13

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_199_off005a9b01.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x5A9B01 317872 bytes
SHA-256: 87a7b56df2659b49ca0a3a35c71a64234510e2ae9f24ef1e588fc339cb3263d1
stream_200_off005c3bca.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x5C3BCA 327700 bytes
SHA-256: 4778640778a5e18840ac1954c6465e7c3787e7690284a374a85b15f4063b9edd
stream_201_off005df877.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x5DF877 253224 bytes
SHA-256: 5fb300573a654d99ecfa35db60e395c6eb65cadc4c9855421f25dfbe35ca7e58
stream_202_off005fe0d3.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x5FE0D3 192336 bytes
SHA-256: b20cf7acd4c00848f38dae58f9cdcaf7e2dcceae1ef75cce00de76a2cfb7b765
stream_203_off00614682.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x614682 288424 bytes
SHA-256: 92f1d10e984ff0ae267f3760b627a5d9126ff02cd015f9e0d12f0665e407a3be
stream_204_off00629bd3.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x629BD3 315080 bytes
SHA-256: 59bd02e42dc50069f71f5aff913e3afee5434d9d6240dd0b64006462e8dcd130
stream_205_off00642741.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x642741 310956 bytes
SHA-256: 95d2cb32997aae1d45a040643b21e8bd679b5fe36fc58a06e02493eef2c16597
stream_206_off0065bd93.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x65BD93 323872 bytes
SHA-256: 789c0e79f01745ed74895ce99c65c41f721e1d0b09c730d53bcfa6445ef3a47d
stream_208_off0067954f.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x67954F 188116 bytes
SHA-256: 0120d19bed8e59575d5c2b25d90fd79d175ba91ecea94b5a8214c8b28c1d4f18
stream_209_off006a51f9.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x6A51F9 176548 bytes
SHA-256: a3bb0e2ed378a25cd4403d687d9e80efb87e7de56726f3df7d368c0aa53ea5e8
stream_211_off006c0067.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x6C0067 312220 bytes
SHA-256: a2a5c2436c98216edbfe6ff1ca644b5943dc31b64606b21056f584ccf2ee1dc4
stream_213_off006de9f4.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x6DE9F4 275172 bytes
SHA-256: 42863b00f6e2f76899186f981eea894da9ae4a166dc5b1903ea3cf3cc5502115
stream_214_off006ef24f.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x6EF24F 299012 bytes
SHA-256: fe926ec9a119c7ccff5e05de81db98e7dcef0338efd45719b1d741da1b28a4c4

Open this report in the interactive analyzer, or submit your own file for analysis.