PDF static analysis report

Static analysis result for SHA-256 a4f1fa89f62d677f…

CLEAN

PDF

227.3 KB Created: 2022-05-05 02:28:56 +02:00 Authoring application: estawart (via PDF Master 1.0.1) First seen: 2026-07-02
MD5: 3e972c24f3e713798bd21278ad7dad91 SHA-1: eee727f7ad931c312eeb46d42876d4a67a5e13a0 SHA-256: a4f1fa89f62d677f34039281fd5579e58f297afa5d1be1d5741a576ebdde2cb9
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0048

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://tinurli.com/2ik5gh PDF link annotation
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#PDF link annotation
    • http://purl.org/dc/elements/1.1/PDF link annotation
    • http://ns.adobe.com/xap/1.0/PDF link annotation
    • http://ns.adobe.com/pdf/1.3/PDF link annotation
    • http://ns.adobe.com/xap/1.0/mm/PDF link annotation
    • http://www.aiim.org/pdfa/ns/extension/PDF link annotation
    • http://www.aiim.org/pdfa/ns/schema#PDF link annotation
    • http://www.aiim.org/pdfa/ns/property#PDF link annotation
    • http://www.aiim.org/pdfa/ns/id/PDF link annotation

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_003_off00001aad.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x1AAD 120140 bytes
SHA-256: a217f12862e0ff75203bdd4136ca0d68471050be46bb09aed5306898926ffdd4
stream_009_off0001b782.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x1B782 841398 bytes
SHA-256: 658d0c0a16c0e552355a11e48d3e4c119abb3c99708fc894afdc7cf01858c0fb
font_01_sfnt_off0000c891.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xC891 76772 bytes
SHA-256: 07ce6fea3c98bf59133021be55ce9147f9c26365efe580a2a4f82130ca697f54