PDF static analysis report

Static analysis result for SHA-256 782ca96c07cc51e0…

SUSPICIOUS

PDF

47.0 KB Created: 2021-04-02 14:07:34 +07:00 Authoring application: wkhtmltopdf 0.12.6 (via Qt 4.8.7) First seen: 2026-06-16
MD5: 5e2261c989b88813c096fdad3c9bd2e2 SHA-1: 39abb9d048cbab6929d96ad88c8948f51aeb747f SHA-256: 782ca96c07cc51e0df86c8a4c34227c279c1e095cb5ff097990b2cd0085dbb3e
42 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9192

Heuristics 3

  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://gaminggenerator.org/app/431946152/how-to-delete-admin-pads-without-hacking-on-roblox PDF link annotation
    • https://gomsa.nl/images/how-to-hack-into-any-roblox-account-2021.pdfIn PDF document text
    • http://www.cuniv-naama.dz/images/fly-hack-roblox-cheatgg.pdfIn PDF document text
    • https://esl.ipb.ac.id/images/files59-robux-hack.pdfIn PDF document text
    • https://amatq.ca/images/zombie-free-zone-roblox.pdfIn PDF document text
    • https://jdlgroup.ca/images/how-to-hack-an-roblox-account-2021-youtube.pdfIn PDF document text
    • http://kids-academy.pl/images/hack-de-allahua-kabar-roblox.pdfIn PDF document text
    • http://www.jureclomas.com.ar/images/all-roblox-2021-free-tails.pdfIn PDF document text
    • http://www.drent.se/images/free-il-robux-es-verdad.pdfIn PDF document text
    • http://www.lionel-seppoloni.fr/images/free-robux-no-human-verification-and-no-downloading-apps.pdfIn PDF document text
    • http://domaizdereva24.ru/images/best-way-to-get-free-robux-legal.pdfIn PDF document text
    • http://www.eurosan1.ba/images/roblox-le-bote-level-cheat.pdfIn PDF document text
    • http://cosver.eu/images/roblox-assassin-hack-2021-read-desc.pdfIn PDF document text
    • http://www.mikramarine.gr/images/roblox-group-admin-hack.pdfIn PDF document text
    • http://www.drent.se/images/a-hack-to-get-free-robux.pdfIn PDF document text
    • http://www.hawler.in/images/how-to-get-free-robux-no-hack-or-inspect.pdfIn PDF document text
    • https://socialvalue.gr/images/cheater-roblox-jvc.pdfIn PDF document text
    • http://www.fluidtech.hu/images/free-robux-no-survey-no-download-2021-no-human-verification.pdfIn PDF document text
    • http://www.web.stc-part.co.th/images/roblox-jailbreak-free-money-march-2021.pdfIn PDF document text
    • http://ff-obertraun.at/images/how-to-hack-a-2021-roblox-account.pdfIn PDF document text
    • http://portal.crfsp.org.br/images/how-to-get-free-robux-on-ios-2021.pdfIn PDF document text
    • http://www.lycee-langevin-wallon.com/images/how-to-get-free-robux-2021-100-works.pdfIn PDF document text
    • https://esl.ipb.ac.id/images/how-to-hack-steal-roblox-account.pdfIn PDF document text
    • https://komakinosite.jp/images/8-bit-speed-hack-roblox.pdfIn PDF document text
    • http://bkd1.balikpapan.go.id/images/how-to-hack-into-roblox-accounts-on-android.pdfIn PDF document text
    • http://www.occquimica.com.br/images/assassin-hack-script-roblox.pdfIn PDF document text
    • http://www.marambio.com.ar/images/roblox-rocitizens-cheat-engine-2021.pdfIn PDF document text
    • https://jdlgroup.ca/images/how-to-get-free-tix-on-roblox-2021-easy.pdfIn PDF document text
    • http://www.copoint.co.uk/images/how-do-you-hack-roblox-to-have-sex.pdfIn PDF document text
    • http://www.eurosan1.ba/images/mediafire-hack-30-robux-gratis.pdfIn PDF document text
    • https://hbln.org.au/images/how-to-get-back-into-a-hacked-roblox-account.pdfIn PDF document text
    • https://www.wildpark-johannismuehle.de/images/cool-idems-roblox-free.pdfIn PDF document text
    • https://www.wildpark-johannismuehle.de/images/how-to-hack-lumber-tycoon-2-on-roblox.pdfIn PDF document text
    • https://verdensbarn.no/images/free-goku-clothes-roblox.pdfIn PDF document text
    • http://pa-tanjungselor.go.id/images/como-hackear-cuentas-de-roblox-2021.pdfIn PDF document text
    • http://gops.pruszczgdanski.pl/images/how-to-give-your-clothes-for-free-roblox.pdfIn PDF document text
    • https://www.iadh.bi/images/how-to-get-free-models-in-roblox.pdfIn PDF document text
    • http://kids-academy.pl/images/earn-free-robux-game.pdfIn PDF document text
    • http://aeroclub-kaernten.at/images/how-to-get-robux-on-roblox-hack-no-offer.pdfIn PDF document text
    • http://www.mjclautrec.fr/images/cheat-big-paintball-roblox.pdfIn PDF document text
    • https://www.stkdb.cz/images/how-to-hack-roblox-games-mobile.pdfIn PDF document text
    • https://www.tsdb.com.au/images/god-mode-hacks-for-roblox.pdfIn PDF document text
    • https://estalagemmonteverde.com.br/images/roblox-how-to-make-a-private-server-for-free.pdfIn PDF document text
    • https://www.wildpark-johannismuehle.de/images/robux-hack-apk-2021.pdfIn PDF document text
    • https://www.udivadlahotel.cz/images/free-level-7-exploit-roblox.pdfIn PDF document text
    • https://ballaratcaravans.com.au/images/jeuxvideo-free-robux.pdfIn PDF document text
    • http://www.cuniv-naama.dz/images/roblox-games-fan-free.pdfIn PDF document text
    • http://svp-steinmaur.ch/images/high-school-life-hack-roblox.pdfIn PDF document text
    • http://bilhetim.com.br/images/hacker-roblox-accound.pdfIn PDF document text
    • https://www.wildpark-johannismuehle.de/images/how-to-get-a-free-builders-club-membership-on-roblox.pdfIn PDF document text
    +2 more URL(s)

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off0000574f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x574F 25476 bytes
SHA-256: 8ec00aabf45cff62b2280a4986b26e0b71973eb5ea0d0c3e5ba963abedea5054
font_01_sfnt_off00008f44.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x8F44 19688 bytes
SHA-256: e79f691d414f96f304b86877148303195e5269b05403e45ae96fdb52256fe998