PDF static analysis report

Static analysis result for SHA-256 c5d5df65c29cbc2f…

SUSPICIOUS

PDF

146.6 KB Created: 2022-07-05 22:22:23 +00:00 Authoring application: talbquea (via PDF Master 1.0.1) First seen: 2026-06-27
MD5: b6ef63285b5d9da0ee8feece2fdc680b SHA-1: 13b87be7fed1f8e9421bc09c439ddcbfe9b230c1 SHA-256: c5d5df65c29cbc2f2ae533e650816c7a5922a86fb50547b7b58a95e062629e9d
34 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0006

Heuristics 3

  • PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
    PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://evacdir.com/dogtag.ZG93bmxvYWR8SHcwWVcwd2MzeDhNVFkxTnpBek5qSXlNM3g4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/shebang/RmlmYSAyMgRml.unhelpful/siphon/standley.mouthed PDF link annotation
    • https://womss.com/fifa-22-serial-number-free-registration-code-mac-win-2022-latest/In PDF document text
    • http://www.kengerhard.com/wp-content/uploads/2022/07/Fifa_22-6.pdfIn PDF document text
    • https://www.sartorishotel.it/fifa-22-with-license-key-3264bit-latest/In PDF document text
    • https://ceed-biz.net/wp-content/uploads/2022/07/Fifa_22-6.pdfIn PDF document text
    • https://jobdahanday.com/wp-content/uploads/2022/07/Fifa_22-10.pdfIn PDF document text
    • https://dortaltiyasdunyasi.com/wp-content/uploads/2022/07/jamneal.pdfIn PDF document text
    • https://togetherwearegrand.com/fifa-22-crack-keygen-free-registration-code-3264bit/In PDF document text
    • https://72bid.com?password-protected=loginIn PDF document text
    • https://iamstudent.net/wp-content/uploads/2022/07/angcha.pdfIn PDF document text
    • https://sourav.info/wp-content/uploads/2022/07/Fifa_22_Product_Key__Product_Key_Full_X64.pdfIn PDF document text
    • http://panjirakyat.net/?p=11520In PDF document text
    • https://progressivehealthcareindia.com/wp-content/uploads/2022/07/Fifa_22_Crack_Keygen_With_Serial_number__Full_Version_Free.pdfIn PDF document text
    • https://lustrousmane.com/fifa-22-mem-patch-pc-windows-latest-2022/In PDF document text
    • http://marketingseoservice.com/wp-content/uploads/Fifa_22_Activation_March2022.pdfIn PDF document text
    • http://www.franciscaordegafoundation.com/uncategorized/fifa-22-2022/In PDF document text
    • https://theblinkapp.com/fifa-22-crack-keygen-mac-win/In PDF document text
    • http://op-immobilien.de/?p=10654In PDF document text
    • https://sarahebott.org/fifa-22-crack-with-serial-number-free-latest-2022/In PDF document text
    • https://brightsun.co/fifa-22-jb-keygen-exe-serial-key-latest/In PDF document text
    • http://fede-percu.fr/fifa-22-hacked-download-april-2022/In PDF document text
    • https://womss.com/fifa-22-serial-number-free-registration-In PDF document text
    • http://www.kengerhard.com/wp-In PDF document text
    • https://www.sartorishotel.it/fifa-22-with-license-key-3264bit-In PDF document text
    • https://ceed-biz.net/wp-In PDF document text
    • https://jobdahanday.com/wp-In PDF document text
    • https://dortaltiyasdunyasi.com/wp-In PDF document text
    • https://togetherwearegrand.com/fifa-22-crack-keygen-free-In PDF document text
    • https://iamstudent.net/wp-In PDF document text
    • https://sourav.info/wp-content/uploads/2022/07/Fifa_22_ProdIn PDF document text
    • https://progressivehealthcareindia.com/wp-content/uploads/2In PDF document text
    • https://lustrousmane.com/fifa-22-mem-patch-pc-windows-In PDF document text
    • http://marketingseoservice.com/wp-In PDF document text
    • http://www.franciscaordegafoundation.com/uncategorized/fifIn PDF document text
    • https://sarahebott.org/fifa-22-crack-with-serial-number-free-In PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign: secureserver.net 1471 samples

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off00008bac.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x8BAC 84508 bytes
SHA-256: 2b7ba551bea82cc3307397981c1dbeb1b78486f95f2eb14e5e58d4e1b24edb0c
font_01_sfnt_off00011398.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x11398 83036 bytes
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261