PDF static analysis report

Static analysis result for SHA-256 f9d6574595bbdd6e…

CLEAN

PDF

734.7 KB Created: 2022-08-12 06:53:21 -04:00 Authoring application: Arbortext Advanced Print Publisher 11.0.3433/W Unicode (via PDFlib+PDI 9.0.3p4 (C++/Win32)) First seen: 2026-06-01
MD5: aab7f4cee0f18d385204413d6a674655 SHA-1: d9a195cc86d8b75d582d7eb94bdfaa024410df37 SHA-256: f9d6574595bbdd6e8a742869b9c4a5e47eecdcab22e1a3ea92abfd629cc5dd66
6 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0007

Heuristics 3

  • External URI info PDF_URI
    PDF contains an external URL action
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://orcid.org/0000-0001-8387-1781 PDF link annotation
    • http://www.tandfonline.comIn PDF document text
    • https://crossmark.crossref.org/dialog/?doi=10.1080/09593985.2020.1821417&domain=pdf&date_stamp=2022-08-01In PDF document text
    • https://doi.org/10.1016/j.jelekin.2006.04.007In PDF document text
    • https://doi.org/10.1016/j.physio.2009.05.002In PDF document text
    • https://doi.org/10.2519/jospt.2013.4659In PDF document text
    • https://doi.org/10.2519/jospt.2014.4744In PDF document text
    • https://doi.org/10.1016/j.jphys.2015.07.015In PDF document text
    • https://doi.org/10.1053/jars.2003.50128In PDF document text
    • https://doi.org/10.1177/0269215513491974In PDF document text
    • https://doi.org/10.2519/jospt.2015.5290In PDF document text
    • https://doi.org/10.1136/bjsports-2012-091513In PDF document text
    • https://doi.org/10.4103/2008-7802.160336In PDF document text
    • https://doi.org/10.1007/s00296-016-3605-1In PDF document text
    • https://doi.org/10.1186/1471-2474-7-44In PDF document text
    • https://doi.org/10.1136/bjsports-2012-091990In PDF document text
    • https://doi.org/10.1249/00005768-199410000-00004In PDF document text
    • https://doi.org/10.1016/j.apmr.2013.05.022In PDF document text
    • https://doi.org/10.1589/jpts.30.590In PDF document text
    • https://doi.org/10.1589/jpts.26.1037In PDF document text
    • https://doi.org/10.1179/174328810X12647087219036In PDF document text
    • https://doi.org/10.2519/jospt.2012.4095In PDF document text
    • https://doi.org/10.1136/bjsm.2005.020909In PDF document text
    • https://doi.org/10.1155/2015/482378In PDF document text
    • https://doi.org/10.3109/03009734.2011.600476In PDF document text
    • https://doi.org/10.1177/0269215514527595In PDF document text
    • https://doi.org/10.1016/j.math.2010.03.008In PDF document text
    • https://doi.org/10.2519/jospt.2009.2835In PDF document text
    • https://doi.org/10.1197/j.jht.2006.10.003In PDF document text
    • https://doi.org/10.1016/j.jos.2018.05.003In PDF document text
    • https://doi.org/10.7717/peerj.967In PDF document text
    • https://doi.org/10.1016/j.jht.2018.02.010In PDF document text
    • https://doi.org/10.1016/j.jht.2016.09.001In PDF document text
    • https://doi.org/10.1197/j.jht.2004.02.011In PDF document text
    • https://doi.org/10.1186/1471-2474-15-270In PDF document text
    • https://doi.org/10.1100/2012/939645In PDF document text
    • https://doi.org/10.1177/1558944717692088In PDF document text
    • https://doi.org/10.1080/09593985.2020.1821417In PDF document text
    • http://orcid.org/0000-0001-PDF link annotation
    • https://doi.org/10.1016/S0749-8063In PDF document text
    • https://doi.org/10.1016/S0278-5919In PDF document text
    • https://doi.org/10.1016/S1836-9553In PDF document text
    • https://doi.org/10.1016/S0140-6736In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 14

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_017_off0000f321.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xF321 31889 bytes
SHA-256: 48d56bce1a72366b699793b4e571d86c7e54ebbb82df8d05c461bc96d32ab4b9
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.43, consistent with packed or encrypted content.
icc_00_off00006dd1.icc pdf-icc-profile PDF ICC profile at offset 0x6DD1 560 bytes
SHA-256: e5f6ffb83b6d3491301dd750975684cc5cc2a1951c994a14b08cfdaa0d75a041
font_00_cff_off00006f42.bin pdf-font-stream PDF embedded font (cff) at offset 0x6F42 21724 bytes
SHA-256: bde1a0c248a5bd04996b523a8df146e131e72607f3a0fa92ad8515636a106adc
font_01_cff_off0000b197.bin pdf-font-stream PDF embedded font (cff) at offset 0xB197 21734 bytes
SHA-256: accad6b76fd278bdb7ba1a0f4f622ad36f69e71952447646f5e02e35ef51c5a4
font_03_cff_off000158c6.bin pdf-font-stream PDF embedded font (cff) at offset 0x158C6 18405 bytes
SHA-256: 22404319bd0e6c70f11dd4d2a80d97273ca9ae4afb2cbd9e00177b539bcc922e
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.45, consistent with packed or encrypted content.
font_04_cff_off000194c4.bin pdf-font-stream PDF embedded font (cff) at offset 0x194C4 21452 bytes
SHA-256: f8770062edd35c16e694e713437912ccfa1f546df4d66533b80409be2208240b
font_05_cff_off0001d88c.bin pdf-font-stream PDF embedded font (cff) at offset 0x1D88C 21471 bytes
SHA-256: b2e23f79db63a4a589174d84ad9d1554bb7bca96dc966b7172e4590633455f3c
font_06_cff_off00021b97.bin pdf-font-stream PDF embedded font (cff) at offset 0x21B97 19787 bytes
SHA-256: 899184223978997515c3cc501652cf4218d28561f878366357ec5ce3193f39f5
font_07_cff_off00049a4f.bin pdf-font-stream PDF embedded font (cff) at offset 0x49A4F 16347 bytes
SHA-256: cfc637f87da7f95d0a5bc60f13fdc5d98ba766aa634d3bd9d8da16cdcb45b0a7
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.41, consistent with packed or encrypted content.
font_08_cff_off0004d1ab.bin pdf-font-stream PDF embedded font (cff) at offset 0x4D1AB 15471 bytes
SHA-256: 686aea5fe840cda989c5018c746762705ca0bb0ebcd48b1ac7db1c995e4c2790
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.40, consistent with packed or encrypted content.
font_09_cff_off0009e43b.bin pdf-font-stream PDF embedded font (cff) at offset 0x9E43B 21794 bytes
SHA-256: 85fe7ccfff85623866013eed9c9279e3750ab0cbbbaf06d6823bab79520a1bea
font_10_cff_off000a2884.bin pdf-font-stream PDF embedded font (cff) at offset 0xA2884 16461 bytes
SHA-256: 5dddddc58cce1a7cd9fdd8a20a5933a86d0110066403ac575c52d133114ec995
font_11_cff_off000a61df.bin pdf-font-stream PDF embedded font (cff) at offset 0xA61DF 52618 bytes
SHA-256: 7c37227ac9302a57af4b22bfadd92008464169375a5a2bba3b03f0455ad0e0fa
font_12_cff_off000b01e1.bin pdf-font-stream PDF embedded font (cff) at offset 0xB01E1 17255 bytes
SHA-256: b84b09f682833d559b59191265448213c0f0e645d241da404970871759dd1167

Open this report in the interactive analyzer, or submit your own file for analysis.