PDF static analysis report

Static analysis result for SHA-256 4dec3f250c32e452…

SUSPICIOUS

PDF

26.2 KB Created: 2021-05-31 05:52:53 UTC Authoring application: Softplicity First seen: 2026-04-29
MD5: bb036c93647243b36bb481ff1f162c32 SHA-1: e8d1a5dab6cbe47293ab12c8110a8619e26c9676 SHA-256: 4dec3f250c32e45257f44e4f2a7495e001772f8cb454d7e57fe0dacfe4002d23
34 Risk Score

Machine Learning

  • Nyx PDF Classifier suspicious score 0.2976

Heuristics 3

  • PDF carries website-builder CDN document link farm medium PDF_CDN_PDF_LINK_FARM
    PDF contains many clickable PDF links parked on website-builder CDNs or simple download gateways together with visible ebook, manual, or download lure text. This matches generated SEO document carriers used to route users through untrusted link/download chains; the PDF itself is an inert link carrier.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://cdn-cms.f-static.net/uploads/5250538/normal_60afc63c3f0cb.pdf PDF link annotation
    • https://cdn-cms.f-static.net/uploads/5250552/normal_60afc95abfb5d.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250538/normal_60afc79cdf20e.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250690/normal_60afc96e554f8.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250738/normal_60afcdfc91f6d.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250638/normal_60afc963db125.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250552/normal_60afc4a45dcb0.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259115/normal_60b45a55453b9.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259115/normal_60b45bd83f0b9.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259115/normal_60b45d8ac4b6b.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259115/normal_60b45d48afca9.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259115/normal_60b45d58caba1.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259115/normal_60b4593a884e7.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259115/normal_60b4598127ba0.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259115/normal_60b45d7a518d4.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259115/normal_60b45d6a5bb6d.pdfIn PDF document text
    • http://por.lods.icu/dls.php?q=Fundamentals+Of+Biostatistics+Solutions+Manual+7th+EditionIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5259115/normal_60b45d388a390.pdfIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
🗂 Part of campaign: f-static.net 38 samples