PDF static analysis report

Static analysis result for SHA-256 a8b084badc62cf72…

SUSPICIOUS

PDF

230.9 KB Created: 2021-07-26 01:57:51 +02:00 Authoring application: vyktfay (via PDF Master 1.0.1) First seen: 2026-04-06
MD5: ef1c54b85e185603d1a60565a156593c SHA-1: becb48707b7a67470773b36510aeee6f4431f335 SHA-256: a8b084badc62cf72a6f4eed60ed8eb123b476fcbf12659013149e883d479a2b7
44 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0124

Heuristics 3

  • Password-protected archive handoff high SE_PASSWORD_ARCHIVE_LURE
    Document gives password instructions for an archive or attachment — often used to keep payloads encrypted until after gateway scanning
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://imgfil.com/206kiw PDF link annotation
    • https://ybsourphyro.weebly.com/the-book-of-knowledge-the-keys-of-enoch-books-pdf-file.htmlIn PDF document text
    • https://prase.org/advert/free-download-009-sound-system-dreamscape-mp3/In PDF document text
    • https://masalamah.com/advert/goosebumps-search-result-coolmoviez-shop/In PDF document text
    • https://waiquetwatro.weebly.com/uploads/1/3/6/9/136995533/quovadis-7-keygen.pdfIn PDF document text
    • https://www.argument.ro/advert/shutter-malayalam-movie-download-20/In PDF document text
    • https://conliebehing.weebly.com/lucifer-wallpapers-posted-by-ethan-johnson.htmlIn PDF document text
    • https://boston-bmwcca.org/advert/e46-m3-oem-front-exhaust-pipe/In PDF document text
    • https://uploads.strikinglycdn.com/files/889d9b4b-28f1-407d-91b7-ce295a473857/boom-chicka-boom-mp3-download.pdfIn PDF document text
    • https://uploads.strikinglycdn.com/files/1c04b127-6f79-40e0-919c-9d9afd87e821/Sirirat-FBIMG1608489186028-iMGSRCRU.pdfIn PDF document text
    • https://uploads.strikinglycdn.com/files/aa6241a2-3515-4b4f-af7c-823b41aad64a/Nn-models-Screenshot20161213200035j-iMGSRCRU.pdfIn PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • http://www.iec.chIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_002_off00000e0b.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xE0B 120140 bytes
SHA-256: a217f12862e0ff75203bdd4136ca0d68471050be46bb09aed5306898926ffdd4
icc_00_off00033279.icc pdf-icc-profile PDF ICC profile at offset 0x33279 3144 bytes
SHA-256: 3f6d674174f3804eb0dabdac90ae17486e898c5063a66f861c116ea033da8301
font_01_sfnt_off0000bbee.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xBBEE 76772 bytes
SHA-256: 07ce6fea3c98bf59133021be55ce9147f9c26365efe580a2a4f82130ca697f54

Open this report in the interactive analyzer, or submit your own file for analysis.