PDF static analysis report

Static analysis result for SHA-256 d263478566ac5937…

CLEAN

PDF

3.69 MB Created: 2009-12-10 10:12:34 +01:00 Authoring application: Writer (via OpenOffice.org 3.0) First seen: 2026-05-07
MD5: 1a7a043fafd773726b8e0853a34af78e SHA-1: 739f351a08a3d9ce2dd054b49351aaf6fa376e82 SHA-256: d263478566ac5937bc0be540359542170c4673ffe17ef4238c4fdf7b32d4f396
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0012

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.freehostia.com����� In PDF document text
    • http://www.9hz.comIn PDF document text
    • http://nutshellurl.comIn PDF document text
    • http://funkyfilters.com/url/obfuscationIn PDF document text
    • http://www.11mbit.de������In PDF document text
    • http://www.110mb.com������In PDF document text
    • http://www.35mb.com������In PDF document text
    • http://www.da_insane.boo.pl/d/upload������In PDF document text
    • http://www.filebuffer.net������In PDF document text
    • http://www.filecabi.net/free-video-hosting.html������In PDF document text
    • http://www.filesupload.com������In PDF document text
    • http://www.fileupyours.com������In PDF document text
    • http://www.freeuploader.com������In PDF document text
    • http://www.myfilestash.com������In PDF document text
    • http://www.mytempdir.com������In PDF document text
    • http://www.picapic.net������In PDF document text
    • http://www.putfile.com������In PDF document text
    • http://www.vbhacker.net/vb/t205971������In PDF document text
    • http://www.mediafire.com/?wuw121w5myt������In PDF document text
    • http://www.Dz-HeLL.org/XXX.jpg������In PDF document text
    • http://www.vbhacker.net������In PDF document text
    • http://www.vbhacker.net/PDF link annotation
    • http://www.Dz-HeLL.org/XXX.jpgIn PDF document text
    • http://www.mediafire.com/?wuw121w5mytIn PDF document text
    • http://www.vbhacker.net/vb/t205971/In PDF document text
    • http://www.p2h.info/In PDF document text
    • http://www.eb2a.com/In PDF document text
    • http://www.titanichost.com/In PDF document text
    • http://www.websamba.com/In PDF document text
    • http://www.asphost4free.com/In PDF document text
    • http://www.webng.com/In PDF document text
    • http://www.freeweb7.com/In PDF document text
    • http://www.sqweebs.com/In PDF document text
    • http://www.picapic.net/In PDF document text
    • http://www.mytempdir.com/In PDF document text
    • http://www.myfilestash.com/In PDF document text
    • http://www.freeuploader.com/In PDF document text
    • http://www.fileupyours.com/In PDF document text
    • http://www.filesupload.com/In PDF document text
    • http://www.filecabi.net/free-video-hosting.htmlIn PDF document text
    • http://www.filebuffer.net/In PDF document text
    • http://www.35mb.com/In PDF document text
    • http://www.11mbit.de/In PDF document text
    • http://www.ripway.com/In PDF document text
    • http://funkyfilters.com/url/obfuscation/In PDF document text
    • http://nutshellurl.com/In PDF document text
    • http://www.9hz.com/In PDF document text
    • http://www.nanoref.com/In PDF document text
    • http://www.decenturl.com/In PDF document text
    • http://www.canurl.com/In PDF document text
    +36 more URL(s)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 7

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_057_off0038b31c.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x38B31C 45952 bytes
SHA-256: 59b2e79882b4146bb5d1714da755268b0fa7874cb10bb7ce5bd7ecd0867bced2
stream_059_off003916c0.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x3916C0 34692 bytes
SHA-256: ee40a6196cb59c7f9e1cda472f4c21998b75108e844a096df9d149083d72a1ba
font_00_sfnt_off00380df0.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x380DF0 55548 bytes
SHA-256: cf9b1cf1535e554a3c307a3cd6f8a3c7baa31bfcb9efad29a646116f91834b18
font_01_sfnt_off00388c4e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x388C4E 20456 bytes
SHA-256: c60a98a74c73db08546f96ad15733cb3aecb74953919e903b39db946fdf3c647
font_04_sfnt_off00395f4a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x395F4A 97216 bytes
SHA-256: c918bf2012b43b4d38b30341291204151108736591fb8d6f39e72405310a6f9c
font_05_sfnt_off003a4ab8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3A4AB8 29180 bytes
SHA-256: 00a3a928bc448b80f6d606ba69cb5098c1eae1730b8ef5ae6324bd8a062c0e6a
font_06_sfnt_off003a83b3.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3A83B3 26920 bytes
SHA-256: 66c1269eb22dd150e35cb5307ef52882b77fbf7f66c122a70d56133d0f361dc1

Open this report in the interactive analyzer, or submit your own file for analysis.