PDF static analysis report

Static analysis result for SHA-256 9e1e1abf6dc51e58…

SUSPICIOUS

PDF

348.6 KB First seen: 2026-05-09
MD5: 98e7920aca5fdbcce9d5f0a3812b9a42 SHA-1: d7f7b5ed87f589d222015953fc291d7e62cb33e5 SHA-256: 9e1e1abf6dc51e58055b7c3d142647cb6b6c0cd16e042049d3589ba2886589f1
44 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 3

  • Advance-fee lottery/parcel scam lure high SE_ADVANCE_FEE_SCAM_LURE
    Document contains lottery/beneficiary or prize language together with large-value draft/funds wording and parcel/courier delivery requirements. This is a classic advance-fee fraud document shape.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.un.org/ PDF link annotation
    • https://www.un.org/press/en/2005/ik486.doc.htmIn PDF document text
    • https://www.un.org/sg/en/content/profiles/ana-men%C3%A9ndezIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text

Related samples 3

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Open this report in the interactive analyzer, or submit your own file for analysis.