Malicious PDF — malware analysis report

Static analysis result for SHA-256 14c50c0c99b64510…

MALICIOUS

PDF

27.2 KB Created: 2021-05-30 04:25:47 UTC Authoring application: Softplicity First seen: 2026-07-17
MD5: 48515796b04e80703d6c8e112f73cb49 SHA-1: 10096a2cdbda95b5425b20f3b2e56c1289313252 SHA-256: 14c50c0c99b645105d329a557a7bfaf7cbc534473fa11ac54d004ba629d70de5
94 Risk Score

Machine Learning

  • Nyx PDF Classifier suspicious score 0.3597

Heuristics 4

  • Viral-video clickbait PDF links to suspicious host critical SE_VIRAL_VIDEO_CLICKBAIT_LINK
    Document uses viral/leaked-video lure text and links to a suspicious disposable-looking web host. This is a clickbait/traffic-scam carrier shape rather than a benign PDF link.
  • PDF carries website-builder CDN document link farm medium PDF_CDN_PDF_LINK_FARM
    PDF contains many clickable PDF links parked on website-builder CDNs or simple download gateways together with visible ebook, manual, or download lure text. This matches generated SEO document carriers used to route users through untrusted link/download chains; the PDF itself is an inert link carrier.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://cdn-cms.f-static.net/uploads/5256652/normal_60b2cb2721fc2.pdf PDF link annotation
    • https://cdn-cms.f-static.net/uploads/5256715/normal_60b2d3b485aa5.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256821/normal_60b2f11e30867.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256644/normal_60b2cdc3dd9ba.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256603/normal_60b2c8cd88d10.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256660/normal_60b2cbae21e3e.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256660/normal_60b2d23da0942.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256695/normal_60b2cfbec382b.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256821/normal_60b2f3c8dbd82.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256821/normal_60b2f76ee0d0d.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256821/normal_60b2f7805fb8f.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256821/normal_60b2f78ff1c96.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256821/normal_60b2f74d9a551.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256821/normal_60b2f1edc28e1.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256821/normal_60b2f2ac908d4.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256821/normal_60b2f75eddb1e.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256821/normal_60b2f7a072cb9.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5256580/normal_60b2cbf859d8e.pdfIn PDF document text
    • http://pev.litd.icu/dls.php?q=84+Honda+Xl+350+ManualIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text

Related samples 3

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Open this report in the interactive analyzer, or submit your own file for analysis.