PDF / .VIR static analysis report

Static analysis result for SHA-256 f8e1c30107bd6740…

SUSPICIOUS

PDF / .VIR

32.5 KB Created: 2021-05-29 18:06:16 UTC Authoring application: Softplicity First seen: 2024-12-24
MD5: 8f2ece9eaeddf5164ce49f864f980c14 SHA-1: c97ecd15f44f1398f350a6f4563e03f480e4e13b SHA-256: f8e1c30107bd6740042564d6667adbed360d541c23fc092f7736418cafca7a49
34 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.2078

Heuristics 3

  • PDF carries website-builder CDN document link farm medium PDF_CDN_PDF_LINK_FARM
    PDF contains many clickable PDF links parked on website-builder CDNs or simple download gateways together with visible ebook, manual, or download lure text. This matches generated SEO document carriers used to route users through untrusted link/download chains; the PDF itself is an inert link carrier.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://cdn-cms.f-static.net/uploads/5249599/normal_60af7659061c3.pdf PDF link annotation
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af74788c91e.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af74a97b147.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5255841/normal_60b2606719f51.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af74081a322.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af7287221a5.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af71a7aa499.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af79242e626.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5249599/normal_60af797705c77.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5255841/normal_60b262ed9bc26.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5255841/normal_60b2665e24826.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5255841/normal_60b2661e188aa.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5255841/normal_60b2664ea4eda.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5255841/normal_60b263b1259f3.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5255841/normal_60b25d5871e45.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5255841/normal_60b2663ee41d3.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5255841/normal_60b2662e28154.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5255841/normal_60b2666d9c997.pdfIn PDF document text
    • http://ser.litd.icu/dls.php?q=1954+1955+1956+Dodge+Truck+Pickup+C+1+C+3+Series+Repair+Shop+Service+Manual+Cd+Includes+B+C+D+F+G+H+Hh+J+K+R+T+V+Y+Yx+6+Cyl+8+Cyl+Pickup+Panel+Big+Truck+RouteIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
🗂 Part of campaign: f-static.net 15 samples