Malicious PDF — malware analysis report

Static analysis result for SHA-256 4e3c30a02cd82488…

MALICIOUS

PDF

117.3 KB Created: 2022-09-09 11:57:48 +00:00 Authoring application: abrsand (via PDF Master 1.0.1) First seen: 2026-06-19
MD5: a3da177b2a8b93dd779473495e6cb33f SHA-1: 36a52f410e62a846237be4dbc3968f6f536c9117 SHA-256: 4e3c30a02cd8248800a45fa9f0107cd4606072b0a5bdeccf2346417ae0eab141
94 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0009

Heuristics 4

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
    PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://esecuritys.com/ZG93bmxvYWR8NGNqTjJ3NWFIeDhNVFkyTWpZNE1ETTVNSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/averted.excellent/barbells/fcat/phreakers/upheavals?wiseguys=U3BlY3RyZSAoRW5nbGlzaCkgdGVsdWd1IG1vdmllIHRvcnJlbnQU3B PDF link annotation
    • https://pi-brands.com/wp-content/uploads/2022/09/keined.pdfIn PDF document text
    • https://www.lacalleloiza.com/wp-content/uploads/2022/09/Download_All_In_One_Runtimes_2018_Free_Latest_Version_BETTER.pdfIn PDF document text
    • https://empoweresports.com/wp-content/uploads/2022/09/Varian_Microeconomia_Cafoscarina_Pdf_Download_LINK.pdfIn PDF document text
    • https://xn--80aagyardii6h.xn--p1ai/r-rajkumar-full-movie-720p-download-__full__/In PDF document text
    • https://dwfind.org/heroes-of-might-and-magic-3-armageddons-blade-crack-link-download/In PDF document text
    • https://mashxingon.com/trainer-plants-vs-zombies-2012-final-full-pc-23-__top__/In PDF document text
    • https://bestvacuumforcar.com/keygen-xforce-para-powershape-2012-64-bits-link/In PDF document text
    • https://postlistinn.is/wp-content/uploads/2022/09/santigna.pdfIn PDF document text
    • https://trueinspirationalquotes.com/wp-content/uploads/2022/09/Windows_Black_Seven_245_Alien_USB_Edition_by_KIRK__TEAM_OS__Crack_BETTER.pdfIn PDF document text
    • https://tuinfonavit.xyz/abarrotes-punto-de-venta-2-61-crack-_best_/In PDF document text
    • https://secure-ravine-95372.herokuapp.com/Jelly_Killer_download_for_pc_PC.pdfIn PDF document text
    • https://yourtripboy.com/download-movie-murder-2-dvdrip-torrent-work/In PDF document text
    • https://nilepharmafood.com/wp-content/uploads/2022/09/The_sims_3_masturbate_mod.pdfIn PDF document text
    • https://pacific-temple-87383.herokuapp.com/glowah.pdfIn PDF document text
    • https://desolate-plateau-51089.herokuapp.com/Active_File_Recovery_Professional_1006.pdfIn PDF document text
    • https://calm-thicket-15421.herokuapp.com/zalsati.pdfIn PDF document text
    • https://sushira.by/corel-draw-x5-software-full-version-with-crack-verified/In PDF document text
    • https://hinkalidvor.ru/uefa-champions-league-2006-07-game-pc-download-link/In PDF document text
    • http://wp2-wimeta.de/road-rash-full-version-link-download-for-free/In PDF document text
    • http://www.studiofratini.com/emtp-rv-3-crack-108-upd/In PDF document text
    • https://www.lacalleloiza.com/wp-In PDF document text
    • https://empoweresports.com/wp-In PDF document text
    • https://trueinspirationalquotes.com/wp-content/uploads/2022/09/Windows_Black_Seven_245_Alien_UIn PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text