PDF static analysis report

Static analysis result for SHA-256 e7e34fa76162f120…

SUSPICIOUS

PDF

75.2 KB Created: 2022-12-24 18:54:42 +00:00 Authoring application: fawnper (via mPDF 8.1.2) First seen: 2026-05-10
MD5: 923cdd6d3e87a3f9b39988969c08005b SHA-1: a25c3acd5be3e51b348221ddec0bf53dc8e8aa0e SHA-256: e7e34fa76162f120470885becb81fd5e6c42562a545957070571bcd8e3ad8599
34 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0034

Heuristics 3

  • PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
    PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xtraserp.com/absorbable/ZG93bmxvYWR8ZzFrWVhKMWNueDhNVFkzTVRjNU56Y3lOM3g4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/.QWRvYmUgUGhvdG9zaG9wIDIwMjEgKFZlcnNpb24gMjIuMykQWR/.intercompany.parkas?transplanting=curtis=pontus.soothe PDF link annotation
    • https://jemi.so/coaching-institute-management-software-50-crackl-updIn PDF document text
    • https://jemi.so/free-best-battle-vs-chess-skidrow-serial-numberIn PDF document text
    • https://joyme.io/bicomnieshiIn PDF document text
    • https://www.thebangladeshikitchen.com/wp-content/uploads/2022/12/fareng.pdfIn PDF document text
    • https://miltonkeynesgospelradio.com/hdr-filter-photoshop-download-free-patched/In PDF document text
    • https://cartecitalia.it/wp-content/uploads/2022/12/Adobe-Photoshop-2021-Version-2210-CRACK-Activation-Code-For-PC-64-Bits-2022.pdfIn PDF document text
    • https://onemorelure.com/other/wired2fish/banner-shapes-for-photoshop-free-download-updated/In PDF document text
    • https://socks-dicarlo.com/wp-content/uploads/2022/12/Photoshop-CC-2019-Version-20-With-Serial-Key-For-Windows-X64-finaL-version-2022.pdfIn PDF document text
    • https://www.ristorantilatinoamericani.it/wp-content/uploads/2022/12/sadiido.pdfIn PDF document text
    • https://bukitaksara.com/photoshop-app-for-android-free-download-apk-best/In PDF document text
    • https://hexol.com/wp-content/uploads/2022/12/berngrah.pdfIn PDF document text
    • http://redstone-walker.com/2022/12/24/photoshop-download-for-windows-7-ultimate-free-best/In PDF document text
    • http://www.abbotsfordtoday.ca/wp-content/uploads/2022/12/panchen.pdfIn PDF document text
    • https://cartecitalia.it/wp-content/uploads/2022/12/Adobe-Photoshop-2021-Version-2210-CRACK-ActivIn PDF document text
    • https://socks-dicarlo.com/wp-content/uploads/2022/12/Photoshop-CC-2019-Version-20-With-Serial-KeIn PDF document text
    • https://cartecitalia.it/wp-content/uploads/2022/12/adobe-photoshop-2021-version-2210-crack-activation-code-for-pc-64-bits-2022.pdfIn PDF document text
    • http://dejavu.sourceforge.netFontsIn PDF document text
    • https://techplanet.today/post/eup-2013-drivers-download-bestIn PDF document text
    • https://techplanet.today/post/csi-crime-scene-investigation-pc-game-cloneddvd-download-verified-for-computerIn PDF document text
    • https://reallygoodemails.com/8stitinypresheIn PDF document text
    • https://techplanet.today/post/g3-live-in-denver-2003In PDF document text
    • https://reallygoodemails.com/quigravtuibiIn PDF document text
    • https://techplanet.today/post/biochemical-engineering-by-d-g-rao-free-download-top-12In PDF document text
    • https://techplanet.today/post/rpg-no-73-galleries-lilitalesrpg-no-73-galleries-lilitales-patchedIn PDF document text
    • https://new.c.mi.com/ng/post/250440/Fifa_22_full_license_Product_KeyIn PDF document text
    • https://new.c.mi.com/ng/post/247933/Fifa_22_Product_Key_And_Xforce_Keygen_Free_X64In PDF document text
    • https://new.c.mi.com/ng/post/250425/Fifa_22_Crack_File_Only_Free_Download_WinMac_LatesIn PDF document text
    • https://techplanet.today/post/csi-crime-scene-investigation-pc-game-cloneddvd-download-verified-for-In PDF document text
    • http://dejavu.sourceforge.netIn PDF document text
    • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn PDF document text
    • http://dejavu.sourceforge.net/wiki/index.php/LicenseDejaVuIn PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_006_off0000577d.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x577D 19880 bytes
SHA-256: 4310e207f6d85e7439d34702f4f71deb70988440e7a9e19c6796f0a92f5f0312
font_01_sfnt_off00008b5d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x8B5D 25940 bytes
SHA-256: accd7776898fd5b9e7075d8bd5c42358b036de590cfc60c4479ec5074f77f6f1
font_02_sfnt_off0000bffa.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xBFFA 19964 bytes
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8
font_03_sfnt_off0000f412.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xF412 20828 bytes
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1

Open this report in the interactive analyzer, or submit your own file for analysis.