Malicious PDF — malware analysis report

Static analysis result for SHA-256 4e35fa94b9912b79…

MALICIOUS

PDF

125.1 KB Created: 2022-09-09 14:37:27 +00:00 Authoring application: herwyll (via PDF Master 1.0.1) First seen: 2026-06-19
MD5: 0882bd38a04f200e425e0f39dfb88cef SHA-1: 9691f274b7672395f39e702a4b007f5503fe2e11 SHA-256: 4e35fa94b9912b799952f3dc13e72704c53c5e6275ef27d769b8e7cfbe75a0c2
94 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0007

Heuristics 4

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
    PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://bestentrypoint.com/SmFtYWlSYWphMmZyZWVkb3dubG9hZGluaGluZGkSmF/activating/unsportsmanlike/?mitica=godforsaken=runic=ZG93bmxvYWR8N0dYT1dFMGVYeDhNVFkyTWpZNE1ETTVNSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA PDF link annotation
    • https://armslengthlegal.com/wp-content/uploads/2022/09/quanambr.pdfIn PDF document text
    • http://www.viki-vienna.com/altium-designer-12-software-free-download-exclusive/In PDF document text
    • https://expressionpersonelle.com/adguard-premium-7-2-2920-crack-plus-license-key-latest-top/In PDF document text
    • https://prayersonline.org/wp-content/uploads/2022/09/Technika_H16wc01_Driver_Download_Win7_UPD.pdfIn PDF document text
    • https://wakandaplace.com/wp-content/uploads/2022/09/GRANADO_ESPADA_full_crack_FULL.pdfIn PDF document text
    • https://dronezone-nrw.2ix.de/advert/smurfsthelostvillageenglishmovieengsubfree-2021download/In PDF document text
    • http://steamworksedmonton.com/wp-content/uploads/jacstu.pdfIn PDF document text
    • https://tecnoviolone.com/wp-content/uploads/2022/09/Mittner_Letteratura_Tedesca_Pdf_Download_EXCLUSIVE.pdfIn PDF document text
    • http://joshuatestwebsite.com/wp-content/uploads/2022/09/DownloadTrainerMafia21001epub.pdfIn PDF document text
    • https://infinite-hamlet-51843.herokuapp.com/HD_Online_Player_Microsoft_Toolkit_386_Final_Windo.pdfIn PDF document text
    • http://www.studiofratini.com/autotuneevov6092exclusive-crackrar/In PDF document text
    • http://sipepatrust.org/?p=14127In PDF document text
    • https://drogueriasaeta.com/wp-content/uploads/2022/09/Harry_Potter_Und_Der_Halbblutprinz_Pc_Spiel_Crack_UPDATED.pdfIn PDF document text
    • https://ancient-mountain-85750.herokuapp.com/olycha.pdfIn PDF document text
    • https://lear.orangeslash.com/advert/dialogys-dvds-64-bit-__top__/In PDF document text
    • https://earthoceanandairtravel.com/2022/09/09/sage-act-pro-2013-keygen-upd/In PDF document text
    • https://laculinaria.de/contoh-faktur-penjualan-doc-verified/In PDF document text
    • https://awazpost.com/wp-content/uploads/2022/09/Pipe_Flow_Expert_639_Crack_VERIFIED.pdfIn PDF document text
    • https://www.2el3byazici.com/igo-map-united-arab-emirates-2012q3-2021/In PDF document text
    • https://prayersonline.org/wp-In PDF document text
    • https://tecnoviolone.com/wp-In PDF document text
    • https://infinite-In PDF document text
    • https://drogueriasaeta.com/wp-In PDF document text
    • https://awazpost.com/wp-content/uploads/2022/09/pipe_flow_expert_639_crack_verified.pdfIn PDF document text
    • https://secureservercdn.net/198.71.233.46/479.459.myftpupload.com/wp-content/uploads/2022/09/Orthopedics_Mcqs_Books_Free_Download_INSTALL.pdf?time=1662733537In PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • https://secureservercdn.net/198.71.233.46/479.459.myftpupload.com/wp-In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.