PDF static analysis report

Static analysis result for SHA-256 9bddc938a7ee91aa…

CLEAN

PDF

19.3 KB First seen: 2026-07-01
MD5: b93167138eef55c9066744f09502c66c SHA-1: 5b88096328be0441d99826cc49d25c2dfc3a9025 SHA-256: 9bddc938a7ee91aa5da66fa28e88e8e190af10d197a7a7112d83a2590a15d08d
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0023

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://led.lods.icu/dls.php?q=Skoda+Octavia+Tour+Workshop+Manual PDF link annotation
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af6fa961775.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af79147d36d.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af74587382d.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af7873962c3.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af794411f74.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af72b7c738b.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af781b195e0.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af72c8125bd.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5258762/normal_60b40c13ab770.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5258762/normal_60b40e6d7ac70.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5258762/normal_60b41010e4e75.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5258762/normal_60b40f2ebf770.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5258762/normal_60b411eeda68e.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5258762/normal_60b411df1d9dc.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5258762/normal_60b411bf91895.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5258762/normal_60b411aedbf91.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5258762/normal_60b411cf1d818.pdfIn extracted file (objstm_0039_00.bin)
    • https://cdn-cms.f-static.net/uploads/5258762/normal_60b4119e7917f.pdfIn extracted file (objstm_0039_00.bin)
🗂 Part of campaign: f-static.net 15 samples

Related samples 7

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
objstm_0039_00.bin pdf-objstm-decoded PDF /ObjStm 39 0 obj (inflated) 6302 bytes
SHA-256: 0cf5b628c4eba9d8ae38fd4527d5feb4c1e8b8f46b99de2f9d8771177a597464

Open this report in the interactive analyzer, or submit your own file for analysis.