PDF static analysis report

Static analysis result for SHA-256 944d6f62496adeb1…

CLEAN

PDF

1.83 MB Created: 2024-11-29 19:20:31 +00:00 Authoring application: calibre 7.21.0 First seen: 2026-05-30
MD5: c19206bc22d58082a7e7308bf155edeb SHA-1: c89300d868a05d6d8ef2489a014e3f4a83aa0942 SHA-256: 944d6f62496adeb1e8544b8357a70ea5e88864b1d7f2d6c4abdaa3f1f273b143
24 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0041

Heuristics 3

  • Unusually high stream count medium PDF_MANY_STREAMS
    PDF contains 501+ stream objects — may indicate heap spray or heavy obfuscation
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.ellekennedy.com/ PDF link annotation
    • http://www.littlebrown.co.uk/In PDF document text
    • http://prismstandard.org/namespaces/basic/2.0/In PDF document text
    • http://damonza.com/In PDF document text
    • http://www.hachette.co.uk/In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xmp/Identifier/qual/1.0/In PDF document text
    • http://ns.adobe.com/pdfx/1.3/In PDF document text
    • http://calibre-ebook.com/xmp-namespaceIn PDF document text
    • http://calibre-ebook.com/xmp-namespace-series-indexIn PDF document text
    • http://calibre-ebook.com/xmp-namespace-custom-columnsIn PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 18

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_200_off000c725b.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xC725B 51756 bytes
SHA-256: 0cdec04aa2902f9856fe22af9645fd8df411ff701e5c64c7a52b92e846d4788e
font_00_sfnt_off00028089.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x28089 57244 bytes
SHA-256: cdd4586bfa0e55513a7cce0debb558a69f14e5b46921ce64fc6decc11b98827c
font_01_sfnt_off00031725.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x31725 28372 bytes
SHA-256: fce6ab21b92aba2c6a05af95b470fbda0d08f5e38365bbb7b00fa2394532586d
font_02_sfnt_off000557df.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x557DF 7688 bytes
SHA-256: 17e1de7132e89f309a9da7cb820469d72158743bab11e64d803a3fa83ca2ede7
font_04_sfnt_off000cf0d6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xCF0D6 64616 bytes
SHA-256: 10ebd58619d3b29811e99fdaf9b1132b25b37603de3ae72cd4cd36be2293ad23
font_05_sfnt_off00149c1f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x149C1F 6056 bytes
SHA-256: 736f27d33c363947a0fb0a7b36b78cefd621a61f452003d7a70913c6ffa46307
font_06_sfnt_off00168299.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x168299 38868 bytes
SHA-256: 050e281dccafaea51ef62db2a51dee81dcb68653c1a329efe25b3408dc42cddc
font_07_sfnt_off00190f4d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x190F4D 16316 bytes
SHA-256: 98f2fd2634612889dbd68376a9ad740d9ee583c53601b1648cb4b305dc4469d9
font_08_sfnt_off00193b31.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x193B31 59524 bytes
SHA-256: b500e1ffc900b228d8c67dc97a5c61402b9a4d987ef664c0ddc91aef30f4be7e
font_09_sfnt_off0019d67e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x19D67E 26288 bytes
SHA-256: fe57321464a45e86e42397e31d1abb7d6bc7efbf0284fb2711e6e471797742e7
font_10_sfnt_off001a2b99.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1A2B99 20196 bytes
SHA-256: 6d5b09dfb6d4c10cb52d028e6f7be4fcbb8d5d1bd575341326d303b6a8b76b82
font_11_sfnt_off001a5d61.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1A5D61 55848 bytes
SHA-256: d5a8471f32f2eff056a4c2de8eec42f082d365aa47f688a323f690234fe273d5
font_12_sfnt_off001aeece.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1AEECE 15536 bytes
SHA-256: 4efff4e513b77ba7d1058bf3998e28977df8663c5ffa59442b9559c2e3ecaedf
font_13_sfnt_off001b204f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1B204F 10536 bytes
SHA-256: a1577d39d7f3a4c7a64c75029fed8d3f55b186e29926faa3169db4062e3eeddf
font_14_sfnt_off001b3f3d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1B3F3D 26912 bytes
SHA-256: 3c07de2dd90b470fba1b511ba5cdf5b606c37a34e7f5ec2660db92eadba9cdc5
font_15_sfnt_off001b988b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1B988B 10680 bytes
SHA-256: 76e32579cbde0f9a29d9aa4b8676b1a433db3141f2e9ec287d5afa8beb889856
font_16_sfnt_off001bbca1.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1BBCA1 13464 bytes
SHA-256: df06b38093d8b2827e24a59d5ceb3e9fed0c6d1c18e6e8d52b45c1e0cff78968
font_17_sfnt_off001befce.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1BEFCE 43764 bytes
SHA-256: 76a4528a47b9719a6a83c7a13e9f4b3ab856df43b4d6d2e1b753c19bc7eafe68

Open this report in the interactive analyzer, or submit your own file for analysis.