PDF static analysis report

Static analysis result for SHA-256 22b0e94b5f7af00c…

CLEAN

PDF

18.6 KB First seen: 2026-06-03
MD5: 3d84a4e365f7ac742d9e21fa2aece304 SHA-1: d9007bbb89028d51064bb6b4380e87e321f87b56 SHA-256: 22b0e94b5f7af00c453a3fb074c4f2b9267295c29b58cac17b3c7f4014e09fc3
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0023

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cod.lods.icu/dls.php?q=2017+Mustang+Haynes+Manual PDF link annotation
    • https://cdn-cms.f-static.net/uploads/5256212/normal_60b2847e78032.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256180/normal_60b2817c4e8d8.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256215/normal_60b282c00b28d.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256157/normal_60b285ccca36a.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256202/normal_60b28b2ea544b.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256137/normal_60b2815a37761.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256157/normal_60b2882317f19.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256235/normal_60b28abb5301a.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259238/normal_60b46c571451e.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259238/normal_60b46d4c31fbc.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259238/normal_60b46cea862ae.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259238/normal_60b46dbc7bab9.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259238/normal_60b46ddd40cd2.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259238/normal_60b46dfd74a04.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259238/normal_60b46e0e3671d.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259238/normal_60b46ded77cb2.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259238/normal_60b46dcc51d00.pdfIn PDF document text
🗂 Part of campaign: f-static.net 38 samples

Related samples 2

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
objstm_0039_00.bin pdf-objstm-decoded PDF /ObjStm 39 0 obj (inflated) 6187 bytes
SHA-256: 9a1dd20819cc1d60406e25dbe83505dd47b3e253f06704a9ea06ebc79a5e879c

Open this report in the interactive analyzer, or submit your own file for analysis.