PDF static analysis report

Static analysis result for SHA-256 98a248accb4e6667…

SUSPICIOUS

PDF

268.7 KB First seen: 2026-04-28
MD5: 43814cf51d8f356ad1090d446527e24f SHA-1: 301c4973b8037a42a36d84fc4cc5ceeceff7fb98 SHA-256: 98a248accb4e6667541aa88019a89f09df19756cf788d617aad0864cdf5b2e10
44 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 3

  • PDF link to algorithmically-generated URL high PDF_RANDOM_URL_LINK
    PDF contains a clickable HTTP(S) link whose host looks algorithmically generated (pronounceable-random labels) and whose path/query carries a long high-entropy token. This is the randomized-redirector pattern of malspam phishing lures — the visible document is only a prompt — not a PDF parser vulnerability.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://generalmllssystemsproductsnetworks.mirotemkbchnologies.click PDF link annotation