PDF static analysis report

Static analysis result for SHA-256 eaf1b0847c6dfb71…

CLEAN

PDF

566.7 KB Created: 2025-02-09 22:27:10 +00:00 Authoring application: calibre 7.21.0 First seen: 2026-05-26
MD5: ae8b396e080aa79d214e045e19fec4c8 SHA-1: c99ebb53f49d70d8aaab0a3234201b79cf198424 SHA-256: eaf1b0847c6dfb71956815aa820ca80124920e6ab501368beaeb3bba15385a29
24 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0005

Heuristics 3

  • Clickable URI uses URL shortener medium PDF_URL_SHORTENER_URI
    PDF contains a clickable HTTP(S) action whose destination is a URL shortener. This hides the final landing page from static review and is common in phishing redirect PDFs.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gary4000.com/ In PDF document text
    • http://messageme.com/In PDF document text
    • http://www.ebayonlocation.com/sessions2012.htmIn PDF document text
    • http://www.spreecast.com/events/an-epic-day-of-book-talk-q-aIn PDF document text
    • http://gary4000.com/In PDF document text
    • http://www.bustedtees.com/marketersruineverythingIn PDF document text
    • http://scanpower.com/In PDF document text
    • http://gary4000.comIn PDF document text
    • http://prismstandard.org/namespaces/basic/2.0/In PDF document text
    • http://facebook.com/chrisPDF link annotation
    • http://www.amazon.com/dp/1492861138/In PDF document text
    • http://facebook.com/gary4000In PDF document text
    • http://facebook.com/hustleIn PDF document text
    • http://garyvaynerchuk.com/In PDF document text
    • http://twitter.com/garyveeIn PDF document text
    • http://facebook.com/garyIn PDF document text
    • http://garyvaynerchuk.com/jjjrhIn PDF document text
    • https://twitter.com/JJJRHbookIn PDF document text
    • http://amazon.com/dp/006227306XIn PDF document text
    • http://bit.ly/jabpromoIn PDF document text
    • http://igg.me/at/gary4000In PDF document text
    • http://twitter.com/gary4000In PDF document text
    • http://facebook.com/groups/gary4000In PDF document text
    • http://on.fb.me/15cu9QdIn PDF document text
    • http://bit.ly/GVGroupIn PDF document text
    • http://www.amazon.com/The-Thank-Economy-Gary-Vaynerchuk/dp/0061914185/In PDF document text
    • http://www.amazon.com/UnMarketing-Stop-Marketing-Start-Engaging/dp/1118176286/In PDF document text
    • http://www.amazon.com/Crush-It-Time-Cash-Passion/dp/0061914177/In PDF document text
    • http://www.youtube.com/user/GaryVaynerchukIn PDF document text
    • http://bit.ly/MREbookIn PDF document text
    • http://www.amazon.com/Jab-Right-Hook-Story-Noisy/dp/006227306X/In PDF document text
    • https://twitter.com/search?q=gary4000In PDF document text
    • http://twitter.com/searchIn PDF document text
    • http://twitter.com/unmarketingIn PDF document text
    • http://www.amazon.com/dp/1478251891/In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xmp/Identifier/qual/1.0/In PDF document text
    • http://ns.adobe.com/pdfx/1.3/In PDF document text
    • http://calibre-ebook.com/xmp-namespaceIn PDF document text
    • http://calibre-ebook.com/xmp-namespace-series-indexIn PDF document text
    • http://calibre-ebook.com/xmp-namespace-custom-columnsIn PDF document text

Extracted artifacts 5

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off00016027.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x16027 54464 bytes
SHA-256: 80794e69be284a7f4aab4aeea4771c4885096f18b0e44500967be9e4921ff43b
font_01_sfnt_off0001ef6f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1EF6F 42916 bytes
SHA-256: 91d04df327059c4a817d7898c0b7efcea845e08b14c6a1be88a27be4afce1128
font_02_sfnt_off0002ae9d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2AE9D 38428 bytes
SHA-256: 7d761d386545f2f12b01f38d58fc7b0481a73d1e7decb86c28c79c29a0371875
font_03_sfnt_off00054089.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x54089 65608 bytes
SHA-256: 2fe4a7047beb33dc57cfc99d1fd6491152453304164461cd9fb2ddeb47c9c906
font_04_sfnt_off0005edc1.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5EDC1 32096 bytes
SHA-256: 385e9bf08d7b99a463e8482e550ee81784541a16f2dd8cd2b7eb8f29c244d8fb