PDF static analysis report

Static analysis result for SHA-256 eb9770be2224be94…

CLEAN

PDF

3.80 MB Created: 2026-01-10 00:08:46 +00:00 Authoring application: Chromium (via Skia/PDF m141) First seen: 2026-06-01
MD5: e379a1ea924debaba5f5b9afdf419665 SHA-1: 4ed5ada11460de73a4a876502cf39a386001ee37 SHA-256: eb9770be2224be948a6a7e4869a071e3ee68c7d0de2bdbca8ec6d4b686174759
22 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 2

  • Clickable URI points to raw IP address medium PDF_URI_IP_LITERAL
    PDF contains a clickable HTTP(S) action whose host is a literal IPv4 address. Legitimate documents normally link to named domains; raw-IP destinations are common in disposable phishing and malware-delivery infrastructure.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://195.177.94.103/govbr PDF link annotation

Related samples 1

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 7

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_010_off003a9811.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x3A9811 51580 bytes
SHA-256: 063672e3e282541f9d5fb4435d9363136124e331e7b53904b0633cf19abd7187
icc_00_off00000157.icc pdf-icc-profile PDF ICC profile at offset 0x157 536 bytes
SHA-256: d9f822e8083f2f4d1c91e887454be5f75e8c7144b2853408f361e3c4a7a6b36d
font_00_sfnt_off003a4c97.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3A4C97 31428 bytes
SHA-256: 99457c5ccd381a3363602d26f75787eabfe48b31dc0f25ae0e5476ae525db683
font_02_sfnt_off003bc5ec.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3BC5EC 25220 bytes
SHA-256: 247899902eb8420c80e1916a676128e0afcadaea1138101269967f3aa161d3cc
font_03_sfnt_off003bfaee.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3BFAEE 35556 bytes
SHA-256: 541e34d8ef4e89d6a9ea272601f137ab62e0a8a7866a9e440905ed2e72b52054
font_04_sfnt_off003c492e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3C492E 17452 bytes
SHA-256: a3b11c7323036620f41621d777d38de0d2b8936cee2f2bfc65a18f6aef1924e7
font_05_sfnt_off003c747a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3C747A 28204 bytes
SHA-256: d146ad9eb69f0f0d51cbe46e4e58e6835fae71a6defc1b6d0aa1fffcc1fc2f20

Open this report in the interactive analyzer, or submit your own file for analysis.