PDF static analysis report

Static analysis result for SHA-256 478821f01a86fd03…

SUSPICIOUS

PDF

130.8 KB Created: 2022-07-17 20:14:02 +00:00 Authoring application: irocarl (via PDF Master 1.0.1) First seen: 2026-06-20
MD5: 8beb85b301b9288abd7243d2c9dc306e SHA-1: 61e994218667b171d2095872c65f7838d17d5e42 SHA-256: 478821f01a86fd03858c4f9013e424c785a7a08e6efa0ebd5a58401e5ece4cdb
42 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0006

Heuristics 4

  • PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
    PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://bestentrypoint.com/coolly/SEQgT25saW5lIFBsYXllciAoU2F2YXJraGVkIEVrIEdhb24gRnVsbCBNYXJhdGhpIE1vdmllKQSEQ/correspondant/cranny.filmmaking&laren.ovens.ZG93bmxvYWR8Y1EyYW14a2VYeDhNVFkxT0RBd05qWTVPWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA.overhyped PDF link annotation
    • https://shobaddak.com/wp-content/uploads/2022/07/Hw_Janson_Istorija_Umetnosti_Pdf_Download.pdfIn PDF document text
    • https://expressionpersonelle.com/cyberlink-powerdirector-ultimate-19-0-2819-0-crack-download-pc-link/In PDF document text
    • https://theludwigshafen.com/new-star-gp-patched-crack-chomikuj-2/In PDF document text
    • http://yogaapaia.it/archives/54531In PDF document text
    • https://kivabe.info/wp-content/uploads/2022/07/How_To_Change_Language_In_Dmc_Devil_May_Cry_Russian_To_Engli-2.pdfIn PDF document text
    • http://fritec-doettingen.ch/wp-content/uploads/2022/07/shuemme.pdfIn PDF document text
    • http://mycontractors.net/wp-content/uploads/2022/07/walfkhr.pdfIn PDF document text
    • http://datasheetoo.com/2022/07/17/solidworks-2013-serial-number-solidsquad-solidworks-hot/In PDF document text
    • https://lutce.ru/wp-content/uploads/2022/07/bosch_esi_tronic_2012_1_dvd1_dvd2_dvd3_torrent_work.pdfIn PDF document text
    • https://northstaritservices.com/eassos-partitionguru-4-9-3-409-professional-incl-crack-serial-key-keygen-verified/In PDF document text
    • https://www.cbdxpress.de/wp-content/uploads/easeus_partition_master_105_keygen_download.pdfIn PDF document text
    • https://fitenvitaalfriesland.nl/nobunagas-ambition-souzou-power-up-kit-crack-full-version-download-cracked/In PDF document text
    • https://learnpace.com/magicsoft-cg-6-crack-__link__/In PDF document text
    • https://hirupmotekar.com/wp-content/uploads/Descargar_Aritmetica_De_Repetto_Tomo_1zip_REPACK.pdfIn PDF document text
    • https://fam-dog.ch/advert/kholat-key-generator/In PDF document text
    • http://lalinea100x100.com/?p=57199In PDF document text
    • https://www.smc-sheeva-marketing-co-ltd.com/advert/android-os-2-2-kernel-2-6-32-build-number-v1-5-7/In PDF document text
    • https://awinkiweb.com/harry-potter-1-sinhala-dubbed-kids-movies-fixed/In PDF document text
    • https://superstitionsar.org/konrad-ili-dijete-iz-limenke-lektira-za-6-razred-rapidshare/In PDF document text
    • http://newsseva.in?p=25546In PDF document text
    • https://expressionpersonelle.com/cyberlink-powerdirector-ultimate-19-0-2819-0-crack-download-pc-In PDF document text
    • https://kivabe.info/wp-In PDF document text
    • https://lutce.ru/wp-In PDF document text
    • https://northstaritservices.com/eassos-partitionguru-4-9-3-409-professional-incl-crack-serial-key-In PDF document text
    • https://fitenvitaalfriesland.nl/nobunagas-ambition-souzou-power-up-kit-crack-full-version-download-In PDF document text
    • https://hirupmotekar.com/wp-In PDF document text
    • https://www.smc-sheeva-marketing-co-ltd.com/advert/android-os-2-2-kernel-2-6-32-build-number-In PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign: secureserver.net 1471 samples