PDF static analysis report

Static analysis result for SHA-256 a8b22a56f87387d0…

SUSPICIOUS

PDF

27.4 KB Created: 2021-06-01 09:18:18 UTC Authoring application: Softplicity First seen: 2026-04-06
MD5: 4b13781730ffa64f65f64915a1cb001c SHA-1: 451ef72a733c26943de88f2e5d12692eca06ac2f SHA-256: a8b22a56f87387d0576e53898739e3001782cb30d906b30bf03a6ae65e6a2a6d
34 Risk Score

Machine Learning

  • Nyx PDF Classifier suspicious score 0.2934

Heuristics 3

  • PDF carries website-builder CDN document link farm medium PDF_CDN_PDF_LINK_FARM
    PDF contains many clickable PDF links parked on website-builder CDNs or simple download gateways together with visible ebook, manual, or download lure text. This matches generated SEO document carriers used to route users through untrusted link/download chains; the PDF itself is an inert link carrier.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://cdn-cms.f-static.net/uploads/5258621/normal_60b3fb54bd512.pdf PDF link annotation
    • https://cdn-cms.f-static.net/uploads/5258627/normal_60b3f5dd4698b.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258624/normal_60b3f7a22aa3e.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258634/normal_60b3f8ef4ca24.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258647/normal_60b3fbe97b66f.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258625/normal_60b3fbea345a0.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258621/normal_60b3fbe97dd9e.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258647/normal_60b3f60fddc41.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262150/normal_60b5db2b8e122.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262150/normal_60b5defaa673c.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262150/normal_60b5ded922228.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262150/normal_60b5df2df2de0.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262150/normal_60b5df1c94f30.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262150/normal_60b5ddd854da6.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262150/normal_60b5deea0f428.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262150/normal_60b5df0b59908.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5262150/normal_60b5da4bef62f.pdfIn PDF document text
    • http://apl.lods.icu/dls.php?q=Kia+D4cb+Repair+ManualIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Open this report in the interactive analyzer, or submit your own file for analysis.