PDF static analysis report

Static analysis result for SHA-256 0d3b9da548788c51…

SUSPICIOUS

PDF

243.7 KB Created: 2022-09-12 23:57:38 +00:00 Authoring application: breiulbr (via PDF Master 1.0.1) First seen: 2026-06-14
MD5: c55d5b6fde629808461b1b9891f078b7 SHA-1: 708dcae9662ad71888e799d82cf103d85d2160f7 SHA-256: 0d3b9da548788c51f042eb3c79ba2cf6f57c03892a2bb8a25e5d861ae172bedd
34 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0006

Heuristics 3

  • PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
    PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://widesearchengine.com/fascinating.SEQgT25saW5lIFBsYXllciAoRmVycmFyaSBLaSBTYXdhYXJpIERvd25sb2FkIDcyMHAgSGQpSEQ.landon/undoctored/unocal/ZG93bmxvYWR8QnA5TVdkbE4yOThmREUyTmpJMk9EQXpPVEI4ZkRJMU9UQjhmQ2hOS1NCWGIzSmtjSEpsYzNNZ1cxaE5URkpRUXlCV01pQlFSRVpk PDF link annotation
    • https://purosautosdallas.com/wp-content/uploads/2022/09/waltenri.pdfIn PDF document text
    • http://pussyhub.net/nero-8-3-2-1-micro-express-and-burning-rom/In PDF document text
    • https://www.babygotbotcourses.com/wp-content/uploads/2022/09/HACK_AUTODATA_451_Crack_FULL.pdfIn PDF document text
    • https://undergroundstudio.it/wp-content/uploads/2022/09/latyose-1.pdfIn PDF document text
    • https://hgpropertysourcing.com/bles01231-ufc-undisputed-3ps33k3y-fixed/In PDF document text
    • https://hoverboardndrones.com/ivt-bluesoleil-10-0-479-1-key-bilan-genie-montparn-hot/In PDF document text
    • http://www.unitewomen.org/adobe-audition-1-5-link-crack-gezginler/In PDF document text
    • https://parupadi.com/wp-content/uploads/2022/09/benincl.pdfIn PDF document text
    • https://dccjobbureau.org/2022/09/12/the-rippingtons-discography-1987-2011-11/In PDF document text
    • https://pawnacampin.com/wp-content/uploads/2022/09/asme_b31_11_pdf_free.pdfIn PDF document text
    • http://awaazsachki.com/?p=74113In PDF document text
    • http://fajas.club/?p=62326In PDF document text
    • https://6v9x.com/ark-survival-evolved-update-v1-96-2-to-v2-01-5-x64-crack-lumaemu-__link__/In PDF document text
    • http://palladium.bg/wp-content/uploads/2022/09/ellnaet.pdfIn PDF document text
    • https://colombiasubsidio.xyz/?p=29011In PDF document text
    • https://esglaiart.es/wp-content/uploads/2022/09/chained_convict_for_life_pdf.pdfIn PDF document text
    • https://connectingner.com/2022/09/12/microsoftaccessinurdupdf/In PDF document text
    • http://www.gurujijunction.com/uncategorized/phobia-5-verified-full-movie-hd-1080p-in-hindi/In PDF document text
    • https://malekrealty.org/zee-cine-awards-2013-full-show-720p-mkv-upd/In PDF document text
    • https://socialmentoor.com/wp-content/uploads/2022/09/Rafael_Orozco_30_Exitos_Rapidsharezip.pdfIn PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text