PDF static analysis report

Static analysis result for SHA-256 f70d92ec1ec531fa…

CLEAN

PDF

129.4 KB Created: 2008-07-25 12:34:02 +02:00 Authoring application: Writer (via OpenOffice.org 2.4) First seen: 2026-05-11
MD5: f8362a3084210254b53144b9e64f971c SHA-1: 522aa87e0cf34b539c066e4dcabab8fcdac8c060 SHA-256: f70d92ec1ec531fa4e2e5b04818a12d1d6bd6b0ff2da0a1229c91696e298b35c
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0003

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.freaks24.de/ PDF link annotation
    • http://www.monotype.comhttp://www.monotype.com/html/type/license.htmlIn extracted file (stream_008_off0001317d.bin)
    • http://www.monotype.com/html/mtname/ms_arial.htmlhttp://www.monotype.com/html/mtname/ms_welcome.htmlNOTIFICATIONIn extracted file (stream_008_off0001317d.bin)
    • http://www.microsoft.com/truetype/fonts/wingdings/http://www.microsoft.com/truetype/designers/bandh/In extracted file (font_01_sfnt_off00011582.bin)
🗂 Part of campaign: buchung.pl 5 samples

Related samples 7

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 6

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_008_off0001317d.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x1317D 47224 bytes
SHA-256: 58abe02bcd445ce8ce4ce269c5e272ad434802af215b750a5ce618cf22ef20b7
font_00_sfnt_off0000c82b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xC82B 33512 bytes
SHA-256: 1ee8eaedcf3ca7f7eeda781b1126b7b5f48660f0d2e202ce4163beee914846c1
font_01_sfnt_off00011582.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x11582 10372 bytes
SHA-256: 800078cdfcc63cdfc5639e06c4bf4f4d22ef3d19e5bd55abc935e0669e3a4265
font_02_sfnt_off00012c52.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x12C52 1164 bytes
SHA-256: bb467a1c790e72582b417d7fd79ca9f536e5067f5fa6fdc7f620c2d339792a1b
font_04_sfnt_off0001a3d4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1A3D4 27764 bytes
SHA-256: 7a85019202ab3d8d26308b04287fe788b123b10686b12f6b092acf89c681a915
font_05_sfnt_off0001e044.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1E044 11616 bytes
SHA-256: b16803b7d114cb12fb266b60575cd0a9e818df7b0e99c895a750405ebaccf3da

Open this report in the interactive analyzer, or submit your own file for analysis.