Malicious PDF — malware analysis report

Static analysis result for SHA-256 1914dfa5a7fa2fd1…

MALICIOUS

PDF

119.9 KB Created: 2022-07-17 07:32:39 +00:00 Authoring application: ridiver (via PDF Master 1.0.1) First seen: 2026-06-22
MD5: 6470d11b4db775ea0b8bb3f12235f50d SHA-1: 5a8d23b0f621ac955405a09d736e36681d82abcd SHA-256: 1914dfa5a7fa2fd1b12427d3891b9be2ec3983359e74df6b5b45b09d22c1c9dd
94 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0007

Heuristics 4

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
    PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://widesearchengine.com/doughboys/viewed.glycemic.punakha.mandate.T3ZlcmxvdWQgQlJFVkVSQiAyIHYyLjEuMTAgTWFjIEtleWdlbiBQYXRjaCBGdWxsIFZlcnNpb24T3Z.spacecraft/waterfronts.ZG93bmxvYWR8d041T0haeE9IeDhNVFkxT0RBd05qWTVPWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA PDF link annotation
    • http://agrojdelnorte.com/?p=17400In PDF document text
    • https://www.sanjeevsrivastwa.com/wp-content/uploads/2022/07/epson_l200_esp_ver100_service_adjustment_program.pdfIn PDF document text
    • http://djolof-assurance.com/?p=33682In PDF document text
    • https://mrczstore.com/wp-content/uploads/2022/07/Imaios_E_Anatomy_Apk_Cracked_.pdfIn PDF document text
    • https://markusribs.com/wp-content/uploads/2022/07/CBT_Nuggets__Palo_Alto_Networks_Firewall_LINK.pdfIn PDF document text
    • https://trinityflix.com/wp-content/uploads/2022/07/YouTube_By_Click_Premium_2286_Portable_Latest_rar.pdfIn PDF document text
    • http://feelingshy.com/jazler-radiostar-2-3-3-multilingual-rar-rar-27-hot/In PDF document text
    • https://lacomfortair.com/flange-data-system-5-0-download-work/In PDF document text
    • https://mdfplus.ru/wp-content/uploads/2022/07/vectorscribe_2_3_keygen_torrent-1.pdfIn PDF document text
    • https://workerspros.com/wp-content/uploads/2022/07/Chandamama_Lo_Amrutham_Movie_INSTALL_Free_Download_Utorrent_38.pdfIn PDF document text
    • http://periodistasagroalimentarios.org/advert/trainer-nfs-most-wanted-1-2-money-editor-teleporter-exclusive/In PDF document text
    • https://tilaomotors.com/lionel-richie-renaissance-full-repack-album-zip/In PDF document text
    • https://coquenexus5.com/hd-online-player-the-good-doctor-s02-complete-720p-hd/In PDF document text
    • https://haitiliberte.com/advert/scx3200firmwarefixrar-free/In PDF document text
    • https://allindiaherb.com/impact-soundworks-shreddage-3-legacy-kontakt/In PDF document text
    • https://businessbooster.page/wp-content/uploads/2022/07/Kaplan_USMLE_Step_3_VideosAll_5_DVD.pdfIn PDF document text
    • https://koeglvertrieb.de/wp-content/uploads/2022/07/levwat.pdfIn PDF document text
    • https://www.abacus-property.com/wp-content/uploads/2022/07/Korg_Legacy_Collection_M1_V170_WIN_OSX_Incl_Keygen231_PATCHED.pdfIn PDF document text
    • http://marqueconstructions.com/2022/07/17/timen-runner-torrent-download-pc-better/In PDF document text
    • https://jobdahanday.com/mount-and-blade-warband-aimbot-betal-work/In PDF document text
    • https://www.sanjeevsrivastwa.com/wp-In PDF document text
    • https://workerspros.com/wp-In PDF document text
    • https://www.abacus-property.com/wp-In PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.