PDF static analysis report

Static analysis result for SHA-256 654f1460eb4e3c8b…

CLEAN

PDF

65.5 KB Created: 2021-04-05 20:58:36 +07:00 Authoring application: wkhtmltopdf 0.12.6 (via Qt 4.8.7) First seen: 2026-06-04
MD5: 204a6c8e8e1a1adc104b68650f40b9de SHA-1: dc1e9b0936e0b085a9c320c51b6cd0586f3c6bfe SHA-256: 654f1460eb4e3c8bff41cce0abb0fef892082cbf47a68a0b66398b4380ce7451
12 Risk Score

Machine Learning

  • Nyx PDF Classifier suspicious score 0.4394

Heuristics 3

  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://gaminggenerator.org/app/431946152/galaxy.wqlf.roblox-hack PDF link annotation
    • https://ambarevleri.com/images/como-hackear-roblox-y-conseguir-robux.pdfIn PDF document text
    • http://biccairo.com/images/how-to-get-free-penguin-suit-in-roblox.pdfIn PDF document text
    • https://technospektr.com.ua/images/free-followers-on-roblox-no-verification.pdfIn PDF document text
    • http://axia-verlag.at/images/roblox-mobile-hacks-for-free-robux.pdfIn PDF document text
    • http://britishcomics.com/images/admin-hacks-roblox-ban-pll.pdfIn PDF document text
    • https://www.only-press.ru/images/free-dll-roblox-exploit.pdfIn PDF document text
    • http://www.sapaengineering.kz/images/roblox-super-power-training-simulator-cheats.pdfIn PDF document text
    • http://principessalialaofegypt.com/images/roblox-island-royale-script-2021august-hack.pdfIn PDF document text
    • https://waterpark.by:443/images/roblox-wizard-tycoon-hack.pdfIn PDF document text
    • https://www.abrapppe.org.br/images/free-robux-website-hack.pdfIn PDF document text
    • http://lanoblaie.fr/images/free-roblox-games-by-admin.pdfIn PDF document text
    • http://a1scan3d.com/images/cool-roblox-skins-that-are-free.pdfIn PDF document text
    • http://ferienwohnung-walker.de/images/robux-hack-tool-2021.pdfIn PDF document text
    • https://digitalsenseafrica.com.ng/images/how-to-code-over-roblox-games-hack.pdfIn PDF document text
    • http://www.rezbb.sk/images/free-roblox-sex-games.pdfIn PDF document text
    • https://consorziocsa-asicaivano.it/images/pokemon-ultra-sun-roblox-cheat.pdfIn PDF document text
    • http://safwafurniture.com/images/free-robux-hack-2021-no-human-verification.pdfIn PDF document text
    • http://www.lionel-seppoloni.fr/images/how-to-change-your-roblox-password-when-hacked-roblox.pdfIn PDF document text
    • https://gafaseo.com/images/how-to-get-free-tbc-in-roblox.pdfIn PDF document text
    • https://imagineclimb.com/images/roblox-ro-ghoul-cheat-rc.pdfIn PDF document text
    • http://www.visiblefilm.com/images/roblox-hack-online-no-download.pdfIn PDF document text
    • http://echosvoix.ch/images/free-france-roblox-flag.pdfIn PDF document text
    • http://jbm-constructions.com/images/how-to-make-a-easy-hack-roblox.pdfIn PDF document text
    • http://agritrade-ukraine.com/images/oneapprewards-roblox-hack.pdfIn PDF document text
    • http://abletrustcare.com/images/big-brother-hacks-roblox.pdfIn PDF document text
    • http://kim-kinder-im-mittelpunkt.de/images/free-drawing-roblox.pdfIn PDF document text
    • https://gabrieliassociati.com/images/hacker-roblox-bobsponga.pdfIn PDF document text
    • http://kruiz21.ru/images/www-free-hats-roblox-generator.pdfIn PDF document text
    • https://belixconstructions.com.au/images/roblox-phantom-forces-hack-2021.pdfIn PDF document text
    • http://iricamidelcuore.it/images/cerberus-cheats-roblox.pdfIn PDF document text
    • https://luminouswisdom.org/images/free-account-login-and-password-roblox.pdfIn PDF document text
    • https://lobergetart.se/images/free-roblox-t-sirde.pdfIn PDF document text
    • http://www.eurologistiki.gr/images/roblox-simple-robo-for-free.pdfIn PDF document text
    • http://aimp-market.ru/images/how-to-get-free-money-on-roblox-adopt-me.pdfIn PDF document text
    • https://socialvalue.gr/images/how-to-get-free-robux-on-robuxy-com.pdfIn PDF document text
    • http://www.mediaxin.net/images/free-robux-apple-mac.pdfIn PDF document text
    • http://autenticohostalsalou.com/images/free-server-side-exploit-roblox.pdfIn PDF document text
    • https://www.ghknights.org/images/easy-free-robux-com.pdfIn PDF document text
    • http://force-seniorklub.dk/images/getbucks-free-roblox.pdfIn PDF document text
    • http://www.agri-tech.com.au/images/como-quitar-no-soy-un-robot-en-free-robux.pdfIn PDF document text
    • http://ivpr.net/images/how-to-hack-models-on-roblox.pdfIn PDF document text
    • http://www.drent.se/images/roblox-hack-tools-no-virus.pdfIn PDF document text
    • http://learningarabic.co.uk/images/book-wings-roblox-free.pdfIn PDF document text
    • http://kim-kinder-im-mittelpunkt.de/images/roblox-girlfriend-cheating.pdfIn PDF document text
    • https://www.bmta.co.uk/images/free-roblox-neon-rideable-pet.pdfIn PDF document text
    • http://wokbaarlo.nl/images/free-robux-no-captcha.pdfIn PDF document text
    • http://www.lovecraftiana.com.ar/images/speed-run-roblox-hack.pdfIn PDF document text
    • https://www.albisser.ch/images/how-to-hack-robloxes-visits.pdfIn PDF document text
    • https://www.brainpads.com/images/free-robux-for-quest.pdfIn PDF document text
    +12 more URL(s)

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_003_off000086a3.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x86A3 25964 bytes
SHA-256: d43216e975f15d346cc05faaee42e16dcd875b4b2ae4efd734de38ee5c4e790f
font_01_sfnt_off0000c1f6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xC1F6 11440 bytes
SHA-256: 154d59d1680f2d1e38ccb783d6997f344290d121007e51df331726de4128c12e
font_02_sfnt_off0000dd16.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xDD16 18168 bytes
SHA-256: 30f973f7b3d81302c42d5fdf32366133e733e413e71c7eed2568c9a933140ecf