PDF static analysis report

Static analysis result for SHA-256 2c885771a32f29f1…

SUSPICIOUS

PDF

48.7 KB Created: 2022-07-16 23:35:48 UTC Authoring application: 376377000d000e000f000r000v000i000n000s (via GPL Ghostscript 9.50) First seen: 2026-06-04
MD5: 89a36db6dd2c21d95d1b1ab9b5c5aa40 SHA-1: 65f8f0d91c5dc8994e75fe0e3afa773393227f96 SHA-256: 2c885771a32f29f1ea7695209c9905db3b881ebb02348771d647bd744d037c09
34 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0097

Heuristics 3

  • PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
    PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://hardlyfind.com/assembled.diamondbacks?ZG93bmxvYWR8dGMzTWpCM2FYeDhNVFkxT0RBd05qWTVPWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA=devas/healthiest/cGlubmFjbGUgc3R1ZGlvIDE1IHVsdGltYXRlIGNvbGxlY3Rpb24ga2V5Z2VuIHRvcnJlbnQcGl&tobin=unwaxed PDF link annotation
    • https://vipfitnessproducts.com/arkaos-grand-vj-1-6-5-keygen-mac-torrent-link/In PDF document text
    • https://ideaboz.com/2022/07/17/bongiovi-digital-power-station-keygen-download-link/In PDF document text
    • https://www.greatescapesdirect.com/2022/07/best-service-era-medieval-legendsl/In PDF document text
    • https://www.la-pam.nl/htc-pda-rom-upgrade-utility-3-27-4-3-mobims-15/In PDF document text
    • https://airbrushinformation.net/wp-content/uploads/2022/07/Bookworm_Adventures_Deluxe_Italiano_Scaricare_NEW.pdfIn PDF document text
    • https://suchanaonline.com/happy-end-korean-movie-free-best-download/In PDF document text
    • http://topfleamarket.com/?p=39774In PDF document text
    • https://mynaturalhomecuresite.com/kasumi-rebirth-v3-1-full-game-74-verified/In PDF document text
    • https://koshmo.com/?p=49661In PDF document text
    • https://superstitionsar.org/draft-day-sports-pro-basketball-3-crack-updated-free/In PDF document text
    • http://www.astralbodytravel.com/?p=5886In PDF document text
    • http://ourwebsitetest.es/2022/07/17/gpg-dragon-box-firmware-v1-63-top/In PDF document text
    • https://bodhirajabs.com/nobunagas-ambition-taishi-update-09-06-2018-drm-free-cracked/In PDF document text
    • https://toronto-dj.com/advert/el-cuerpo-habla-joe-navarro-pdf-download-link/In PDF document text
    • https://www.hotels-valdys.fr/communicationsvideo-conferencing/the-forest-steam-not-initialized-crack-updIn PDF document text
    • https://libertinosdaalcova.com/omsi-2-download-top-cracked-apkf/In PDF document text
    • http://www.fermactelecomunicaciones.com/?p=7421In PDF document text
    • http://bestxxxclips.online/?p=4061In PDF document text
    • http://steamworksedmonton.com/1220-rld-avatar-keygen-v1-01-rar-top/In PDF document text
    • http://tygodnikketrzynski.pl/advert/vladmodel-alina-y118-444-custom-naked/In PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/iX/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off00005715.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5715 57168 bytes
SHA-256: 0903d0ddba552ee0f146e8fbadc1a03eb928a47498d2aeb93320999a359fa718
font_01_sfnt_off000096e4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x96E4 31540 bytes
SHA-256: ca34645aa5cf78beb0c864aca09f53276b42a73e18bb71ab62e89933df2a8b1f
font_02_cff_off0000ae92.bin pdf-font-stream PDF embedded font (cff) at offset 0xAE92 1774 bytes
SHA-256: c02a512ba554abd74eefe7236f05be908010df28c4e1df1b63a08e80e27afebe