PDF static analysis report

Static analysis result for SHA-256 eca0c86f4fbb0c1e…

CLEAN

PDF

890.1 KB Created: 2009-08-04 10:30:11 +02:00 Authoring application: Adobe InDesign CS3 (5.0.4) (via Adobe PDF Library 8.0) First seen: 2015-05-10
MD5: 53dbd805534f2e82baf03abbd36a8715 SHA-1: 381384fcefcebd91cf2e9b0481b390e4cfe134f8 SHA-256: eca0c86f4fbb0c1e77796fca4fd7bf0ad6678da7a80fef9914858be1e00d24a2
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0004

Heuristics 2

  • Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
    The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.linotype.comhttp://www.linotype.com/fontdesignersNOTIFICATION In PDF document text
    • http://www.linotype.comLinotypeIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/tiff/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/photoshop/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/exif/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/g/img/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/illustrator/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/t/pg/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/Dimensions#In PDF document text
    • http://ns.adobe.com/xap/1.0/g/In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/Font#In PDF document text
    • http://ns.adobe.com/xap/1.0/sType/ManifestItem#In PDF document text
    • http://www.iec.chIn PDF document text

Related samples 3

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 7

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_011_off00003b5f.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x3B5F 56168 bytes
SHA-256: cd5a5fe4e3e7d6a1e247cf02429d118153c76c6d19c7da6ec0e73f71ec692cdf
icc_00_off000030fa.icc pdf-icc-profile PDF ICC profile at offset 0x30FA 3144 bytes
SHA-256: 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
font_00_cff_off000b5d03.bin pdf-font-stream PDF embedded font (cff) at offset 0xB5D03 297 bytes
SHA-256: 298eb9f70db670a843c17b61b1d8373a67c8e369c5e2276261f085febd50905c
font_01_sfnt_off000b67d7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xB67D7 66584 bytes
SHA-256: fbc99fe271c6c3680fcdeedb2b7a2b5161903bf3c64ab1715c748662b62a4d04
font_02_sfnt_off000bde26.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xBDE26 40552 bytes
SHA-256: a0b4ed18ae60d1aa65e243e21c547a83b0808518378f433a2f31d9a45f281a03
font_03_sfnt_off000c2960.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xC2960 43092 bytes
SHA-256: e1b2462f988a38bdd816f1c51279296f5df07e6afaa1c19ccdc44292d258394f
font_04_sfnt_off000c812f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xC812F 37056 bytes
SHA-256: adea2a03653549a3f8666bd2c4050dbd71faff1baa57022210ebf3cb4ed15557

Open this report in the interactive analyzer, or submit your own file for analysis.