PDF malware analysis — malicious · 0d3b5b3e4ac6545d

MALICIOUS

PDF

54.5 KB Created: 2020-01-15 20:53:52 Authoring application: Adobe PDF Library 9.0 First seen: 2026-06-14

MD5: 12e422f1099c721861fac56cbebc8349 SHA-1: 7a563e3af277f4ce67641bcd0e8a309519497b7a SHA-256: 0d3b5b3e4ac6545dc6c5f14ee6c36059931b5675a2aa95cde93f5b9b6ccb91fc

94 Risk Score

Machine Learning

Nyx PDF Classifier malicious score 0.7499

Heuristics 3

ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
External URI info PDF_URI

PDF contains an external URL action
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://www.ascendercorp.com/ PDF link annotation
- http://www.ascendercorp.com/typedesigners.htmlPDF link annotation
- http://www.w3.org/1999/02/22-rdf-syntax-ns#PDF link annotation
- http://purl.org/dc/elements/1.1/PDF link annotation
- http://ns.adobe.com/pdf/1.3/PDF link annotation
- http://ns.adobe.com/xap/1.0/PDF link annotation
- http://ns.adobe.com/xap/1.0/mm/PDF link annotation
- http://ns.adobe.com/xap/1.0/rights/PDF link annotation
- http://scripts.sil.org/OFLPDF link annotation

Extracted artifacts 2

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`font_00_sfnt_off00009a3b.bin`	pdf-font-stream	PDF embedded font (sfnt) at offset 0x9A3B	5000 bytes
SHA-256: `8fcef36a9cef5ab88fe8efa04cd13c723e6fa3e01fa01bc03bd5194906071d01`
`font_01_sfnt_off0000aa9b.bin`	pdf-font-stream	PDF embedded font (sfnt) at offset 0xAA9B	11060 bytes
SHA-256: `1361cc4dd8b9499f0c482c41d115b6440909a4306393af4e4ffd7f3ec5fd89d5`

Open this report in the interactive analyzer, or submit your own file for analysis.