PDF static analysis report

Static analysis result for SHA-256 9c3fb7a7496dde0b…

CLEAN

PDF

3.03 MB Created: 2007-04-02 05:42:15 +05:30 Authoring application: PScript5.dll Version 5.2 (via Acrobat Distiller 7.0.5 (Windows)) First seen: 2026-05-21
MD5: 7542378c3f45654e8c32100c0b6ee4e2 SHA-1: 056296de734a5e611531d0050770511f9aaa101d SHA-256: 9c3fb7a7496dde0bca1295b029b47d94cd9ca6d113e63bf0d09b01c43ba54164
24 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0010

Heuristics 3

  • Unusually high stream count medium PDF_MANY_STREAMS
    PDF contains 500+ stream objects — may indicate heap spray or heavy obfuscation
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.academicpress.com In PDF document text
    • http://www.YandY.comCMSY8In extracted file (font_01_cff_off0024b238.bin)
    • http://www.YandY.comMTMIIn extracted file (font_10_cff_off002f34f5.bin)
    • http://www.YandY.comMTEXIn extracted file (font_11_cff_off002f4bda.bin)
    • http://www.YandY.comCMSY10In extracted file (font_18_cff_off002f9c04.bin)
    • http://www.YandY.comCMSY9In extracted file (font_21_cff_off002fc097.bin)
    • http://elsevier.comIn PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/iX/1.0/In PDF document text
    • http://ns.adobe.com/exif/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/photoshop/1.0/In PDF document text
    • http://ns.adobe.com/tiff/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
🗂 Part of campaign: yandy.com 78 samples

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 23

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_cff_off0017f406.bin pdf-font-stream PDF embedded font (cff) at offset 0x17F406 432 bytes
SHA-256: f07080712d779267052d6ad5383396696d9e6b358eded614f5543d293924fa65
font_01_cff_off0024b238.bin pdf-font-stream PDF embedded font (cff) at offset 0x24B238 332 bytes
SHA-256: 1ef0b9c573aeaf59591b371535cc36cb92c63557253093b4c16b26a054c17ca8
font_02_cff_off0029a654.bin pdf-font-stream PDF embedded font (cff) at offset 0x29A654 530 bytes
SHA-256: a4ddc4e78b16f9ed1c05be8123030805047929b47db7521fa95c131fe753f15a
font_03_cff_off002dfddc.bin pdf-font-stream PDF embedded font (cff) at offset 0x2DFDDC 5387 bytes
SHA-256: 1f0aaf7594e7ee34a8cc36cb3a2ce0f9b9522ae9075836385f67fcb18bdae250
font_04_cff_off002e1701.bin pdf-font-stream PDF embedded font (cff) at offset 0x2E1701 3265 bytes
SHA-256: e531edeafaf75a3ff2cd3ddee092350c8fe615785cef93d4ca4d83103641c60f
font_05_cff_off002e296a.bin pdf-font-stream PDF embedded font (cff) at offset 0x2E296A 5607 bytes
SHA-256: 7a2c6530753a8c658aa2ca5622f65bae912776c36964f1e642059f4cce769c3b
font_06_cff_off002e4719.bin pdf-font-stream PDF embedded font (cff) at offset 0x2E4719 1873 bytes
SHA-256: 2c31daae32926a6d423478d9566d92c81be44db176505fed17559b98a4e7d443
font_07_cff_off002e5a94.bin pdf-font-stream PDF embedded font (cff) at offset 0x2E5A94 9397 bytes
SHA-256: 06a67bd478a0638a1f6b2c38c8acc98daa8efaef91fc53f1520685232ee02f4e
font_08_cff_off002e7fe3.bin pdf-font-stream PDF embedded font (cff) at offset 0x2E7FE3 8771 bytes
SHA-256: 83fba414e2c24fee4445b2a222168ee4a37ec64409f9cf120d7216a904c11f3f
font_09_cff_off002f1f7e.bin pdf-font-stream PDF embedded font (cff) at offset 0x2F1F7E 2580 bytes
SHA-256: a25ba31ad099f7659036a27ab905cde727b6d7f0e3f2af51e286913d6a77083d
font_10_cff_off002f34f5.bin pdf-font-stream PDF embedded font (cff) at offset 0x2F34F5 4397 bytes
SHA-256: 5e54d5ef62856b89a05e576020d5f19ba97a07217b7912b70523237fdfab6ecf
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.42, consistent with packed or encrypted content.
font_11_cff_off002f4bda.bin pdf-font-stream PDF embedded font (cff) at offset 0x2F4BDA 2934 bytes
SHA-256: 9c3ae5c80bb7395eb4ad108340bf4750ffbbec8d6b18dbf561a7a5af0cc1dc5b
font_12_cff_off002f5c4e.bin pdf-font-stream PDF embedded font (cff) at offset 0x2F5C4E 4365 bytes
SHA-256: 6cc844792b03362dd8f34e8f9f947c883b555bf626e078875632fc0efa5c7b7d
font_13_cff_off002f6f5d.bin pdf-font-stream PDF embedded font (cff) at offset 0x2F6F5D 696 bytes
SHA-256: 2c256e16a9145aacdbb9e7802e44c1799ea433f039a8f79bce22bc73136ec911
font_14_cff_off002f73e7.bin pdf-font-stream PDF embedded font (cff) at offset 0x2F73E7 273 bytes
SHA-256: f8149c9aa0fca6e4851f3f38aea9bfa98ae2996e5af74387fcdeb5f4c9bc2eff
font_15_cff_off002f77dc.bin pdf-font-stream PDF embedded font (cff) at offset 0x2F77DC 1640 bytes
SHA-256: e42ea0bf2757003611022077d74a8b50d33c8ff016bbebec7ba44451237e0993
font_16_cff_off002f83d7.bin pdf-font-stream PDF embedded font (cff) at offset 0x2F83D7 820 bytes
SHA-256: e1d372e31740fa581c9a728e7aa6761edaf6cbc870841a518870218b1a0b3524
font_17_cff_off002f8b3e.bin pdf-font-stream PDF embedded font (cff) at offset 0x2F8B3E 2184 bytes
SHA-256: c8b655f12d8a211ea27bda69927fba93eb8d3df7a11425f7a98a49784f85f933
font_18_cff_off002f9c04.bin pdf-font-stream PDF embedded font (cff) at offset 0x2F9C04 2490 bytes
SHA-256: 106e8231c97db9968e1801c56317e706e2b7fd7d9ada047bf6f3723c37685a19
font_19_cff_off002fa818.bin pdf-font-stream PDF embedded font (cff) at offset 0x2FA818 3058 bytes
SHA-256: d7f60c71497be137fc7f522325ccaf5245e6ba5f1b17090efad2291c201ad2cd
font_20_cff_off002fba6e.bin pdf-font-stream PDF embedded font (cff) at offset 0x2FBA6E 661 bytes
SHA-256: 3c580cd804342dacb1cd4a26ad8e37388407ba001bcec6cb86426edf2192fe36
font_21_cff_off002fc097.bin pdf-font-stream PDF embedded font (cff) at offset 0x2FC097 856 bytes
SHA-256: c00d366a36af94d2b4bfa8104bdaa4af37e6fde5bab4436e28a2f3d19bded796
font_22_cff_off002fc4f4.bin pdf-font-stream PDF embedded font (cff) at offset 0x2FC4F4 417 bytes
SHA-256: 13fd975a057bc55f252075d9b227ffab57cc766e223d20526643cb2bad491ad9

Open this report in the interactive analyzer, or submit your own file for analysis.