PDF static analysis report

Static analysis result for SHA-256 b7d97af80a21d132…

CLEAN

PDF

47.9 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-28
MD5: 1ade22afb0e9784e347fe4da7674d17c SHA-1: 56a0c8e4e24f62b7815b7804305796481f8e989a SHA-256: b7d97af80a21d132c529a96655e6e26948b987f1d2029fcf8037c2154b56774f
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0023

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://www.qatarairways.com/en/help.html PDF link annotation
    • https://www.qatarairways.com/en-za/offers/WhatsApp.htmlIn PDF document text

Related samples 5

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off000016e6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x16E6 11636 bytes
SHA-256: 24eda6b69285d9b7ca8998774dc2762675d53e7748bae3c46480b5aaf647bcda
font_01_sfnt_off0000318a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x318A 22228 bytes
SHA-256: 2eb80ad294a8458612476e9ec14a6ebf5a972ae325bdcf72eab49aa27de58c19
font_02_sfnt_off000068ba.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x68BA 24252 bytes
SHA-256: 3fe22cd8c293177ddfdac89e992e00e5043cb48a2d5de3316c6020d8c688e287
font_03_sfnt_off00008729.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x8729 20160 bytes
SHA-256: 94f68b308250038df679e3aea1785fe37c90391eec9fb2d7a8514d3984a863d7

Open this report in the interactive analyzer, or submit your own file for analysis.