Malicious PDF — malware analysis report

Static analysis result for SHA-256 4e3278b4161ab730…

MALICIOUS

PDF

118.6 KB Created: 2022-07-19 07:11:36 +00:00 Authoring application: daraysbe (via PDF Master 1.0.1) First seen: 2026-06-19
MD5: 3e8f775d2d6af052fb4d3295a5b01c3e SHA-1: cc040326e87430cb4ee08f6b234ff0cefc35f30d SHA-256: 4e3278b4161ab73014749c0278a398c1bfa1c82c2a935fb71c80163029998be4
64 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0008

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://findinform.com/ferrysburg/sauber/affect/allen/QXJ0UG9zZVByb2Z1bGxjcmFja1BDQXJ.ZG93bmxvYWR8UHczTVRrNGVEQjhmREUyTlRnd01EWTJPVGw4ZkRJMU9UQjhmQ2hOS1NCWGIzSmtjSEpsYzNNZ1cxaE5URkpRUXlCV01pQlFSRVpk..ariel PDF link annotation
    • https://vincyaviation.com/hd-online-player-intervideo-windvr-6-1-for-windows-7/In PDF document text
    • http://getpress.hu/blog/kung-fu-panda-2008-br-rip-1080p-movie-torrents-hot/In PDF document text
    • https://stellarismods.com/wp-content/uploads/2022/07/Avatar_3d_Sbs_720p_Download_Movies_FULL-1.pdfIn PDF document text
    • http://insenergias.org/?p=39845In PDF document text
    • http://eventaka.com/?p=36292In PDF document text
    • https://kryptokubus.com/wp-content/uploads/2022/07/Sraz_Igra_18.pdfIn PDF document text
    • http://alkalinedietexposed.com/con-las-alas-en-llamas-german-renko-pdf-22/In PDF document text
    • http://www.khybersales.com/2022/07/19/rika-nishimura-friends-114-top/In PDF document text
    • https://healthyimprovementsforyou.com/prototype-2-blackbox-repack-free-crackl-2/In PDF document text
    • https://solaceforwomen.com/nature-illusion-studio-3-20-crack-verified/In PDF document text
    • https://wanoengineeringsystems.com/ebook-pdf-buku-chairul-tanjung-si-anak-singkong/In PDF document text
    • https://www.scoutgambia.org/wp-content/uploads/2022/07/apryleil.pdfIn PDF document text
    • https://infraovensculinary.com/wp-content/uploads/2022/07/Monark_v1303_HYBRID_WiN_MacOSX_R2R.pdfIn PDF document text
    • https://theoceanviewguy.com/x-force-keygen-recap-2015-activation-top/In PDF document text
    • https://www.mycatchyphrases.com/wp-content/uploads/2022/07/Dumpper_And_Jumpstart_Full_Version.pdfIn PDF document text
    • http://cpstest.xyz/win-7-loader-extreme-edition-3-544-multilanguage-final-prince96-new/In PDF document text
    • https://storage.googleapis.com/imagens_videos_gou_cooking_prod/production/mesas/2022/07/91e63910-tomaelk.pdfIn PDF document text
    • https://dincampinginfo.dk/wp-content/uploads/2022/07/emrymar.pdfIn PDF document text
    • https://chronicpadres.com/wp-content/uploads/2022/07/sanddebr.pdfIn PDF document text
    • https://stellarismods.com/wp-In PDF document text
    • https://infraovensculinary.com/wp-In PDF document text
    • https://www.mycatchyphrases.com/wp-In PDF document text
    • https://storage.googleapis.com/imagens_videos_gou_cooking_prod/production/mesas/2022/07/91e63In PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text