PDF static analysis report

Static analysis result for SHA-256 552f2051c77a1958…

SUSPICIOUS

PDF

26.8 KB Created: 2021-06-01 13:46:20 UTC Authoring application: Softplicity First seen: 2026-05-19
MD5: b3589af40328ff2fdb1abbd87ad5dd7f SHA-1: 1f7df4182ffa24014f211f4ffde8688a0f1293f7 SHA-256: 552f2051c77a1958c5b61e65996a003c30aabbd28823193e4f901614f8b16f60
34 Risk Score

Machine Learning

  • Nyx PDF Classifier suspicious score 0.2905

Heuristics 3

  • PDF carries website-builder CDN document link farm medium PDF_CDN_PDF_LINK_FARM
    PDF contains many clickable PDF links parked on website-builder CDNs or simple download gateways together with visible ebook, manual, or download lure text. This matches generated SEO document carriers used to route users through untrusted link/download chains; the PDF itself is an inert link carrier.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://cdn-cms.f-static.net/uploads/5250643/normal_60afc350862fc.pdf PDF link annotation
    • https://cdn-cms.f-static.net/uploads/5250765/normal_60afcd5d6e285.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250638/normal_60afc9251b0cf.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250690/normal_60afc96e554f8.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250690/normal_60afc884448e6.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250643/normal_60afc2f7873ed.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250643/normal_60afcd249523c.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262937/normal_60b61d36df92f.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262937/normal_60b61c4ee831a.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262937/normal_60b61dad978be.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262937/normal_60b61e024a3b5.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262937/normal_60b61de0ade0c.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262937/normal_60b6157813897.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262937/normal_60b61473d484c.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262937/normal_60b61dcfc71e0.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262937/normal_60b61df120e12.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250538/normal_60afc68983b8c.pdfIn PDF document text
    • http://hol.litd.icu/dls.php?q=Lg+Env3+Cell+Phone+ManualIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262937/normal_60b61dbe8298b.pdfIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
🗂 Part of campaign: f-static.net 38 samples