PDF static analysis report

Static analysis result for SHA-256 4af92e5e989024ef…

SUSPICIOUS

PDF

119.0 KB Created: 2022-07-16 22:50:03 +00:00 Authoring application: jemiopal (via PDF Master 1.0.1) First seen: 2026-06-06
MD5: 0e6702ee75e12e0cde5d639c65bcbc24 SHA-1: db83e8fdd7082b208f67ed5bb5ffb97db7b71331 SHA-256: 4af92e5e989024ef7d90927f5292b3e1f4fd30d56609c49f66daf0db08881c29
34 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0007

Heuristics 3

  • PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
    PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://raisengine.com/combatant/ZG93bmxvYWR8Y28yTVdKd2FIeDhNVFkxT0RBd05qWTVPWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/donations/reconditioning/lockinge.sanjay?UnVodWwgQmF5YW4gVXJkdSBQZGYgRG93bmxvYWQUnV= PDF link annotation
    • https://efekt-metal.pl/witaj-swiecie/In PDF document text
    • https://zakadiconsultant.com/wp-content/uploads/2022/07/Admanager_Plus_License_File_Crackl.pdfIn PDF document text
    • https://rosehillwellness.com/wp-content/uploads/2022/07/ellwats.pdfIn PDF document text
    • https://alafdaljo.com/decipher-backup-repair-keygen-_top_-13/In PDF document text
    • https://availobal.com/super-lumberjack-free-full-crack-pc/In PDF document text
    • https://en-media.tv/advert/joomsport-professional-edition-nulled-11-free/In PDF document text
    • https://weddingdaypix.com/virtua-tennis-4-keygen-cd-key-2021/In PDF document text
    • https://quickpro.site/wp-content/uploads/2022/07/Cooking_Pork_Crackling_In_The_Microwave.pdfIn PDF document text
    • https://www.lbbskin.com/journal/patched-apowersoft-windows-shutdown-assistant-v2-0-0-incl-keymaker-dvt-2/In PDF document text
    • https://nucleodenegocios.com/pattern-magic-english-pdf-11-__full__/In PDF document text
    • http://findmallorca.com/sarkar-in-hindi-dubbed-720p-torrent-free/In PDF document text
    • https://livefitstore.in/advert/gpg-dragon-box-setup-2-14-free-download-new/In PDF document text
    • https://bonnethotelsurabaya.com/promosi/downloadom5pdfdavidalancollier-betterIn PDF document text
    • http://www.studiofratini.com/mirc-v7-22-portable-serial-key-best/In PDF document text
    • https://dealstoheal.com/?p=11862In PDF document text
    • http://shaeasyaccounting.com/ace-combat-7-skies-unknown-download-exclusive-key-serial-number/In PDF document text
    • https://www.webcard.irish/lost-saga-na-free-free-download-crack-serial-key/In PDF document text
    • http://www.kiochi.com/%product_category%/csi-oscuras-intenciones3cdsspanishbyneobeatwww-elmejoIn PDF document text
    • http://www.fuchsia.moscow/yoshino-momiji-granddaughter-2-new-128588/In PDF document text
    • https://uerb.site/wp-content/uploads/2022/07/anslgrah.pdfIn PDF document text
    • https://zakadiconsultant.com/wp-In PDF document text
    • https://quickpro.site/wp-In PDF document text
    • https://www.lbbskin.com/journal/patched-apowersoft-windows-shutdown-assistant-v2-0-0-incl-In PDF document text
    • http://shaeasyaccounting.com/ace-combat-7-skies-unknown-download-exclusive-key-serial-In PDF document text
    • http://www.kiochi.com/%product_category%/csi-oscuras-intenciones3cdsspanishbyneobeatwww-In PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign: secureserver.net 1471 samples

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off0000297e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x297E 84508 bytes
SHA-256: 2b7ba551bea82cc3307397981c1dbeb1b78486f95f2eb14e5e58d4e1b24edb0c
font_01_sfnt_off0000b16a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xB16A 83036 bytes
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261