PDF static analysis report

Static analysis result for SHA-256 949f00ab3ef91e3b…

SUSPICIOUS

PDF

27.6 KB Created: 2021-05-31 00:25:22 UTC Authoring application: Softplicity First seen: 2026-04-11
MD5: e3f11d0c3640fe7ad0236176673a5c25 SHA-1: 280a58b813dbc60b08c24318f247ad7c2db3bb69 SHA-256: 949f00ab3ef91e3b45ea7a624514813c571f324d2515b14a4977ab83a61b56aa
34 Risk Score

Machine Learning

  • Nyx PDF Classifier suspicious score 0.3597

Heuristics 3

  • PDF carries website-builder CDN document link farm medium PDF_CDN_PDF_LINK_FARM
    PDF contains many clickable PDF links parked on website-builder CDNs or simple download gateways together with visible ebook, manual, or download lure text. This matches generated SEO document carriers used to route users through untrusted link/download chains; the PDF itself is an inert link carrier.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://cdn-cms.f-static.net/uploads/5251006/normal_60afe59a49551.pdf PDF link annotation
    • https://cdn-cms.f-static.net/uploads/5250983/normal_60afe7ed7e6ff.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258708/normal_60b40f54e5e5d.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250831/normal_60afe61819f66.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5251024/normal_60afe84f8063c.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250884/normal_60afe47f628b5.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250891/normal_60afe4f8143f8.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250965/normal_60afe12f97bca.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258708/normal_60b40f980cfb8.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258708/normal_60b4109578d38.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258708/normal_60b41073d73b7.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258708/normal_60b41084095e2.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258708/normal_60b410c795f4b.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258708/normal_60b40757a4d9c.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258708/normal_60b40a9ca4412.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258708/normal_60b410b5ee122.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258708/normal_60b410a650d39.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5250831/normal_60afe18dedcc9.pdfIn PDF document text
    • http://med.litd.icu/dls.php?q=Yamaha+Xt125+Xt250+1980+84+Clymer+Workshop+Manual+New+Edition+By+Wright+Ron+Published+By+Clymer+Publications+1987In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text