PDF static analysis report

Static analysis result for SHA-256 0fe2560dbc768beb…

CLEAN

PDF

34.7 KB Created: 2023-05-22 14:10:42 UTC Authoring application: wkhtmltopdf 0.12.6 (via Qt 4.8.7) First seen: 2026-07-17
MD5: 401d607b7f7c3104d021748792c6869b SHA-1: d2fd70a0155aee53e613e0c53b6b5f6ea97b8b29 SHA-256: 0fe2560dbc768beb699b6952c48b0f6d2e46a966cab49c3ff2af5d445941d05c
10 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0044

Heuristics 2

  • Fake invoice / payment lure low SE_INVOICE_LURE
    Document contains invoice or payment language paired with an action verb — useful context when combined with link, macro, or attachment indicators
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://en.wikipedia.org/wiki/MIT_License In extracted file (font_00_sfnt_off00001fec.bin)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off00001fec.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1FEC 18436 bytes
SHA-256: 07f4d8a81a98165f0dbd10b4ea2386699ea026f4aee8987dcaf4849ed43f62e2
font_01_sfnt_off000043ee.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x43EE 19480 bytes
SHA-256: d0bf8e06b41b22d601830822cdf9838261976539aafeca622292b900fd460e07
font_02_sfnt_off00006d8e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x6D8E 14544 bytes
SHA-256: ca88fcd9554fc2eac938bfc65ad5c3e8f61ec2f534cb60c81cb22ad6c804e66b

Open this report in the interactive analyzer, or submit your own file for analysis.