PDF static analysis report

Static analysis result for SHA-256 e627e376f834f218…

CLEAN

PDF

2.63 MB Created: 2023-01-05 00:30:42 +00:00 Authoring application: calibre (6.10.0) [http://calibre-ebook.com] First seen: 2026-05-29
MD5: aee539520d6ae06d00e81b19d91e7245 SHA-1: 4bfaaf065dd5274798db04dc9968d784d21b5160 SHA-256: e627e376f834f218518becf1912e2cfb9a302dd89e9ba788e01097fde0083940
12 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0571

Heuristics 3

  • Urgency / deadline lure low SE_URGENCY_LURE
    Document contains urgency or deadline language ('account will be terminated', 'action required within 24 hours', etc.) — useful context, but low-signal without other findings
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.crownpublishing.com/ In PDF document text
    • https://calibre-ebook.com])/ModDate(D:20230105003043+00In PDF document text
    • https://oceanofpdf.com/PDF link annotation
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/iX/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • https://calibre-ebook.comIn PDF document text

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_196_off00176ce0.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x176CE0 44404 bytes
SHA-256: 952c93af830d1b95f48a35010bd3423c32e17152f23843f02bfc93da27398fc9
font_00_sfnt_off0001975a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1975A 24960 bytes
SHA-256: 90966eaa40e55f9ab6853ca95b7750d61e14a2bea74f98ddc26235431ef9da6a
font_02_sfnt_off00263517.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x263517 41644 bytes
SHA-256: ee9fd126c53630f3c8957cd83e09609b6ebb018e451f5d842f8034408871c2e0
font_03_sfnt_off0026a7f4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x26A7F4 24076 bytes
SHA-256: d780c29e944fe73e4ad438f495098aed2e8fcfc12bc6933fddb6d3b5808e992b