PDF static analysis report

Static analysis result for SHA-256 7dd15cc37e65bf17…

SUSPICIOUS

PDF

148.6 KB Created: 2022-07-04 01:52:47 +00:00 Authoring application: alykai (via PDF Master 1.0.1) First seen: 2026-06-03
MD5: 4557f62dffc0d192d2a30dd0143b8bfc SHA-1: 3b8119453510efeab55bac6541d7f06a3cada229 SHA-256: 7dd15cc37e65bf176ddf0ff8946f6e458b25c23b575aee2572371a1fb84412f7
34 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0027

Heuristics 3

  • PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
    PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://dormister.com/ZG93bmxvYWR8MmROTW5seE5IeDhNVFkxTmpnNU1qTTFNbng4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/R2VvbWFuY3kR2V.pretexters.sollars/minimalist/subcrop.moorehouse.urquinaona PDF link annotation
    • https://wozyzy.com/upload/files/2022/07/BumFgHia7kbFxe719z2C_04_496d409b2f22b7013e4f21961b50df89_file.pdfIn PDF document text
    • https://dealstoheal.com/?p=4320In PDF document text
    • http://www.hakcanotel.com/ibm-iscsi-boot-commander-crack-with-full-keygen-for-pc/In PDF document text
    • https://logottica.com/syncrify-crack-with-serial-key-pc-windows/In PDF document text
    • https://zwergenburg-wuppertal.de/advert/portable-mv2-player-crack-free-april-2022/In PDF document text
    • http://empleosasugusto.org/?p=2890In PDF document text
    • https://xn--80aagyardii6h.xn--p1ai/super-dark-mode-for-firefox-5-0-0-3-crack-download-x64-april-2022/In PDF document text
    • https://unmown.com/upload/files/2022/07/tmFnsSW7eQTiKYkZYpku_04_cb414d8bd3270a8746dd49ff49680983_file.pdfIn PDF document text
    • https://smartictbd.com/2022/07/04/explor3r-crack-free-latest-2022/In PDF document text
    • http://montehogar.com/?p=28686In PDF document text
    • https://marketstory360.com/news/45434/alcoliq-media-player-crack-torrent-for-pc-april-2022/In PDF document text
    • https://alafdaljo.com/emsa-timesynchronizer-crack-free-mac-win/In PDF document text
    • https://ksycomputer.com/skypetransfer-crack/In PDF document text
    • https://www.mbi.gov.my/en/system/files/webform/carrsha748.pdfIn PDF document text
    • https://www.mountainjobs.com/wp-content/uploads/2022/07/NfsNature_Crack_WinMac.pdfIn PDF document text
    • https://shopuskart.com/wp-content/uploads/2022/07/TrueTypeSharp.pdfIn PDF document text
    • https://wozyzy.com/upload/files/2022/07/BumFgHia7kbFxe719z2C_04_496d409b2f22b7013e4f21961In PDF document text
    • https://xn--80aagyardii6h.xn--p1ai/super-dark-mode-for-firefox-5-0-0-3-crack-download-In PDF document text
    • https://unmown.com/upload/files/2022/07/tmFnsSW7eQTiKYkZYpku_04_cb414d8bd3270a8746dd49ffIn PDF document text
    • http://righditi.yolasite.com/resources/SplitM8-Crack-License-Keygen-Free-X64-Updated-2022.pdfIn PDF document text
    • https://wakelet.com/wake/SrPOs0-wy-17UIxj7yi3yIn PDF document text
    • https://wakelet.com/wake/yFwlKorvCvrkxE2HMSNG0In PDF document text
    • https://wakelet.com/wake/iBjAXoogrFSOd631dUerUIn PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text
    • http://righditi.yolasite.com/resources/splitm8-crack-license-keygen-free-x64-updated-2022.pdfIn PDF document text

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off00009dce.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x9DCE 84508 bytes
SHA-256: 2b7ba551bea82cc3307397981c1dbeb1b78486f95f2eb14e5e58d4e1b24edb0c
font_01_sfnt_off000125bb.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x125BB 83036 bytes
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261