PDF static analysis report

Static analysis result for SHA-256 ca5fcc5b9a5ae425…

SUSPICIOUS

PDF

148.9 KB Created: 2022-06-10 08:30:29 +02:00 Authoring application: middtam (via PDF Master 1.0.1) First seen: 2026-06-03
MD5: 11079917b1a1f571e879e5d11ebea816 SHA-1: fe48b5c4a5c070510bbe3a503dced6950e23426f SHA-256: ca5fcc5b9a5ae4258a82c73bf9d9b7ff0a447f04d19866b113a886173967542a
34 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0007

Heuristics 3

  • PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
    PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://evacdir.com/ZG93bmxvYWR8M0w0WkRONGVueDhNVFkxTkRjNE1EZzNPWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/bm92ZWwgZnJlZHkgcyB5YW5nIGJlcmp1ZHVsIHRhbnRlIG1hcmlzc2Ebm9/sprayers/barefeet.jurevicius?liquorish?ivanova PDF link annotation
    • https://www.5etwal.com/inside-out-english-movie-download-in-hd-1080p/In PDF document text
    • https://techfaqs.org/console/exelis-idl-8-5-and-envi-5-3-x64-rar-link/In PDF document text
    • https://www.greatescapesdirect.com/wp-content/uploads/2022/06/aashto_t283_pdf_free_download.pdfIn PDF document text
    • http://www.gcons.in/wp-content/uploads/2022/06/Onekey_Ghost_64bit.pdfIn PDF document text
    • https://omidsoltani.ir/wp-content/uploads/2022/06/makadar.pdfIn PDF document text
    • https://ccsbe.org/softube-tube-tech-pe-1c-vst-rtas-v1-0-1-updated-cracked/In PDF document text
    • https://megasventas.com/wp-content/uploads/2022/06/Mach3_Crack_PPSSPP-1.pdfIn PDF document text
    • https://battlefinity.com/upload/files/2022/06/MldO19R761ZHBEu2iNLy_10_73d73256ce8eeabdde2da6fce2928abf_file.pdfIn PDF document text
    • https://heidylu.com/cat-sis-2009b-top-keygen-29/In PDF document text
    • http://www.antiquavox.it/wintercroft-masks-pdf-download-free/In PDF document text
    • http://executivenavi.com/wp-content/uploads/2022/06/Ilya_Efimov_Acoustic_Guitar_Free_Download.pdfIn PDF document text
    • https://marshryt.by/wp-content/uploads/Gear_Template_Generator_Program_Torrent.pdfIn PDF document text
    • http://letuscook.it/wp-content/uploads/2022/06/kayame.pdfIn PDF document text
    • http://insenergias.org/?p=5754In PDF document text
    • https://mdfplus.ru/wp-content/uploads/2022/06/mapinfo_professional_120_serial_number_access_68.pdfIn PDF document text
    • http://www.camptalk.org/wp-content/uploads/2022/06/DynastyWarriors8XtremeLegendsUpdatev102inclDLCCODEX_crack_fr.pdfIn PDF document text
    • http://togetherwearegrand.com/?p=10418In PDF document text
    • https://www.matera2029.it/wp-content/uploads/2022/06/Jawset_TurbulenceFD_V10_Rev1372.pdfIn PDF document text
    • https://audifonosinalambricos.org/?p=9973In PDF document text
    • https://www.greatescapesdirect.com/wp-In PDF document text
    • https://battlefinity.com/upload/files/2022/06/MldO19R761ZHBEu2iNLy_10_73d73256ce8eeabddeIn PDF document text
    • http://executivenavi.com/wp-In PDF document text
    • https://mdfplus.ru/wp-In PDF document text
    • http://www.camptalk.org/wp-content/uploads/2022/06/DynastyWarriors8XtremeLegendsUpdatev10In PDF document text
    • http://www.camptalk.org/wp-content/uploads/2022/06/dynastywarriors8xtremelegendsupdatev102incldlccodex_crack_fr.pdfIn PDF document text
    • https://americap2.nyc3.digitaloceanspaces.com/upload/files/2022/06/VTbGR1UT5zd8x3FWwsSV_10_1f3b478fee23811060987cf9cb3a6349_file.pdfIn PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • https://americap2.nyc3.digitaloceanspaces.com/upload/files/2022/06/VTbGR1UT5zd8x3FWwsSV_1In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign: secureserver.net 1471 samples

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_004_off00002039.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2039 120140 bytes
SHA-256: a217f12862e0ff75203bdd4136ca0d68471050be46bb09aed5306898926ffdd4
font_01_sfnt_off0000ce1c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xCE1C 76772 bytes
SHA-256: 07ce6fea3c98bf59133021be55ce9147f9c26365efe580a2a4f82130ca697f54

Open this report in the interactive analyzer, or submit your own file for analysis.