PDF static analysis report

Static analysis result for SHA-256 c0c3bb4ffec19d4d…

SUSPICIOUS

PDF

27.6 KB Created: 2021-06-01 06:43:36 UTC Authoring application: Softplicity First seen: 2026-05-02
MD5: 1b9f1af383aa33f609666e3685f22869 SHA-1: 84103395aa45918b92f53507e7c4fd36ae6dd471 SHA-256: c0c3bb4ffec19d4dcf98fd41ebc311c4eb2172b4539533ad6173f128d5f04980
34 Risk Score

Machine Learning

  • Nyx PDF Classifier suspicious score 0.3249

Heuristics 3

  • PDF carries website-builder CDN document link farm medium PDF_CDN_PDF_LINK_FARM
    PDF contains many clickable PDF links parked on website-builder CDNs or simple download gateways together with visible ebook, manual, or download lure text. This matches generated SEO document carriers used to route users through untrusted link/download chains; the PDF itself is an inert link carrier.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://cdn-cms.f-static.net/uploads/5258445/normal_60b3e2a54df06.pdf PDF link annotation
    • https://cdn-cms.f-static.net/uploads/5258516/normal_60b3e3caed61a.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261983/normal_60b5b6e68f78f.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258443/normal_60b3ec464aecf.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258391/normal_60b3e4a4976ba.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258492/normal_60b3e5e2521ce.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258391/normal_60b3e86d67213.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258445/normal_60b3e64f2a188.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261983/normal_60b5b96ca7479.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261983/normal_60b5badd54eab.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261983/normal_60b5baee1291d.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261983/normal_60b5baba80928.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261983/normal_60b5bacc1b165.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261983/normal_60b5b8a5c4a7e.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261983/normal_60b5b8c77cba5.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261983/normal_60b5ba98e9b43.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261983/normal_60b5baa9a11b7.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5258374/normal_60b3e286e1e73.pdfIn PDF document text
    • http://kab.litd.icu/dls.php?q=Toyota+Camry+2005+Owners+Manual+SupplementIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text