PDF static analysis report

Static analysis result for SHA-256 bb4e0771dc4b3195…

CLEAN

PDF

3.89 MB Created: 2010-05-05 22:08:26 UTC Authoring application: Microsoft PowerPoint (via Mac OS X 10.5.8 Quartz PDFContext) First seen: 2026-05-11
MD5: c46271529a903ae261ef65cbb770afa9 SHA-1: 6e1ebe053bdf7071b4a2aa693e3d3103acf08df0 SHA-256: bb4e0771dc4b3195f59aa25cb3aa927a9d3cec94812d4b3e2b26f9888bb186ac
22 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 2

  • Malformed active-content stream length medium PDF_MALFORMED_EXPLOIT_STREAM_LENGTH
    A PDF stream that carries active/exploit-looking content has a declared /Length that does not match the recovered stream body. Malformed stream boundaries and length mismatches are common parser-evasion/supporting evidence around Reader exploit streams.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.iec.ch In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 25

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_021_off003b7721.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x3B7721 41420 bytes
SHA-256: cceb8f81b727c4e8a1ce3f9ce6beee7848d06d7e778accf8d8c55312a8c3d55d
icc_00_off0000033d.icc pdf-icc-profile PDF ICC profile at offset 0x33D 1456 bytes
SHA-256: 2a18161bb96fd584d19e737ce294732789e0e8e6ae8c8e4e5f09f1b138232a63
icc_01_off0017edbb.icc pdf-icc-profile PDF ICC profile at offset 0x17EDBB 3144 bytes
SHA-256: 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
icc_02_off0019942f.icc pdf-icc-profile PDF ICC profile at offset 0x19942F 992 bytes
SHA-256: bae18af2f46c83baa32127f0c1554012cd33b8fb3455147b7c1c2ace74a84745
icc_03_off001a9ffa.icc pdf-icc-profile PDF ICC profile at offset 0x1A9FFA 540 bytes
SHA-256: e2b447e6b6e7becaba679cbf3a70e0737bad24d651e33c285983766542aa766c
icc_04_off001dfa74.icc pdf-icc-profile PDF ICC profile at offset 0x1DFA74 1296 bytes
SHA-256: 94722fe267764797f8887379cc0d355f5118beb3d186e087bfbd9e1a3f2d3f49
icc_05_off001dfdd9.icc pdf-icc-profile PDF ICC profile at offset 0x1DFDD9 4376 bytes
SHA-256: dc5c8184628aced3bc7e049aefb4f17016bc8afdbaa1578352894a741e779d43
icc_06_off0020d8b5.icc pdf-icc-profile PDF ICC profile at offset 0x20D8B5 1004 bytes
SHA-256: ff6df63b04028ea88de1980dfab5d3437c5266586070cab2f6ff138912cc34f1
icc_07_off002684f7.icc pdf-icc-profile PDF ICC profile at offset 0x2684F7 1004 bytes
SHA-256: 61cbc5b57e1ed970d88d55e5bb0fffbb8b1cd3298bdb674f5a48b71d47ff9086
icc_08_off0027a7f6.icc pdf-icc-profile PDF ICC profile at offset 0x27A7F6 4380 bytes
SHA-256: 407c497db93eecac195554ffa32d1647b07a201d2a1a6a00ffee2e7ad9d6054d
icc_09_off00338242.icc pdf-icc-profile PDF ICC profile at offset 0x338242 692 bytes
SHA-256: f08ab4f7bf876443d71360dd86a496f1d13a8c0a5662ba77074b7ec163855751
icc_10_off00338471.icc pdf-icc-profile PDF ICC profile at offset 0x338471 3144 bytes
SHA-256: 3f6d674174f3804eb0dabdac90ae17486e898c5063a66f861c116ea033da8301
icc_12_off0035c6a3.icc pdf-icc-profile PDF ICC profile at offset 0x35C6A3 560 bytes
SHA-256: 304f569a83c1e5eddaddac54e99ed03339333db013738bb499ab64f049887e28
font_00_sfnt_off003bef62.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3BEF62 6816 bytes
SHA-256: 943ded6ed19c045ef65adc3e9d2dd4ad6a0ba63a31c36ca8302ca45eb142d47a
font_01_sfnt_off003c04e9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3C04E9 16348 bytes
SHA-256: 00ef4a91dd3c6084a9ff815a20f63193ac6a3f5851ddfded1b1ad31ab560c90e
font_02_sfnt_off003c378a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3C378A 40780 bytes
SHA-256: c2a6ce5c69e26b6112a19376d58755af906f7c8afc5fb8bc2d724efb562737b5
font_03_sfnt_off003ca698.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3CA698 4004 bytes
SHA-256: 4fcbbda1dd7ff87f9e95e777802888e0362c52f109f35ba49d5fecc91eb916ac
font_04_sfnt_off003cb42c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3CB42C 18572 bytes
SHA-256: f721293e1829ad8128a8395c58d50803acd1184bad57b8c300016a67e1e3de69
font_05_sfnt_off003cee18.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3CEE18 4756 bytes
SHA-256: b8a148a23bb1dc34ddcf1d50a6eae503fd5d6c54e3eb77a3c9344de9e13c2da1
font_06_sfnt_off003cfd8a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3CFD8A 6920 bytes
SHA-256: 9a6dd81a45fbc0008add57e16ecb0571c674162ea1addcdd737f7639d78c3372
font_07_sfnt_off003d112c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3D112C 4972 bytes
SHA-256: b672080a58d34077d3089eb7ae580168eb8df8ba1b5d683538b9fe49028b3043
font_08_sfnt_off003d1f0d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3D1F0D 40580 bytes
SHA-256: 638810080326102160cdb67598e3c38f1956d0445fa1057a7c2415331906b4a6
font_09_sfnt_off003d9089.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3D9089 20196 bytes
SHA-256: d7bbde0478f7843858f7a54762ccd896b141884ce9e6674f762308d25abff87e
font_10_sfnt_off003dccc4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3DCCC4 14508 bytes
SHA-256: a83e6ec3007a582fa9ef8064f0af9b1cea8cc0632ed4693d3e5d78cbcb1742af
font_11_sfnt_off003df8ac.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3DF8AC 6156 bytes
SHA-256: e4d2a75b143152a86c37efe971d09b319270bc2b48bbe8f2b13f94b36b53693f

Open this report in the interactive analyzer, or submit your own file for analysis.