Malware Tracker Malware Tracker [static + dynamic analysis]

Login

PDFExaminer


Recent PDF malware detections. This list is delayed 2 weeks. +Submit one

MD5filenamesizeseverityjsflashembedencrypt
8d8f54b4221008670bcd170e0719de52 view report 931db2bee56e85c3befb200b52cf6a19e5b79dae139ce91da6d8551721798d34 135654 3 J      
25.0@303: suspicious.javascript object
26.0@350: suspicious.warning: object contains JavaScript
76.0@706: suspicious.warning: object contains JavaScript
92ada46a45c1bf193d964e8f55d41997 view report aaf66c67f6b3e6c8cb1e5f95f4f37281fa02625aacf4c63bd09930aa9e592843 60215 7 J   P  
19.0@14846: suspicious.pdf embedded PDF file
19.0@14846: suspicious.warning: object contains embedded PDF
20.0@59064: suspicious.warning: object contains JavaScript
21.0@59171: pdf.exploit execute EXE file
21.0@59171: pdf.exploit access system32 directory
21.0@59171: pdf.exploit execute action command
21.0@59171: pdf.execute exe file
21.0@59171: pdf.execute access system32 directory
13ba89e20a3059bc90c33044c1985280 view report c1c6a300e37daeba0f879cc298e958188c848075e1ea949a4e5067c81a03efa3 135171 3 J      
25.0@303: suspicious.javascript object
26.0@350: suspicious.warning: object contains JavaScript
76.0@706: suspicious.warning: object contains JavaScript
6e736829cb0cdf25fd9a2f3927de436a view report c1d39e6b85ce3d8af3164fc68cbb16e9b27ae803d7e5c2a03411cfed7442ce4e 135575 3 J      
25.0@303: suspicious.javascript object
26.0@350: suspicious.warning: object contains JavaScript
76.0@706: suspicious.warning: object contains JavaScript
48de7897eff5a3f2478e16fecff6b06c view report 68b4751d72bb11bd49b7c375f68582beba5f249a607df66e44d9325354827a63 135528 3 J      
25.0@303: suspicious.javascript object
26.0@350: suspicious.warning: object contains JavaScript
76.0@706: suspicious.warning: object contains JavaScript
50129686a9dd5559f19a7f46f6e1c5b9 view report cc24be7cbca2fe597f569aba9041aecfd10150879df7b15488ceb32b18028148 135734 3 J      
25.0@303: suspicious.javascript object
26.0@350: suspicious.warning: object contains JavaScript
76.0@706: suspicious.warning: object contains JavaScript
29bb64f90fdd9646d68c5a594a5112a3 view report CRC.Handbook.of.Graph.Theory.Combinatorial.Optimization.and.Algorithms.1584885955.pdf 19437088 1 J   P  
2899.0@12039513: suspicious.warning: object contains JavaScript
2692.0@19248537: suspicious.warning: object contains embedded PDF
9228e3714a3eaa480e7e1da4e9ecb877 view report IPSUR.pdf 1380092 4        
1411.0@98354: pdf.exploit execute EXE file
1439.0@103142: pdf.exploit execute EXE file
341324bc559438c7df45bd71f5f7a100 view report 475b2936da32ea66b2012dc641086d5457a4945fb9278e16c3d1cafd94e7aa37 77831 7 J      
8.0@138: suspicious.javascript in XFA block
8.0@138: suspicious.warning: object contains JavaScript
a968cdce31fa851762c4439b190f8cba view report e173d679da51c9a3296793cd401ef5192a7473e73f51ea16c8d5d89ec0242b6d 54458 9 J      
3.0@1671: suspicious.obfuscation using charCodeAt
3.0@1671: suspicious.obfuscation using eval
3.0@1671: suspicious.obfuscation using String.fromCharCode
3.0@1671: suspicious.warning: object contains JavaScript
7b3a2c04e5c8d545ab35156bb0375961 view report a4bd2e825cb8e7d6f6f495f5543eeef59748b43779d9d22eddf5c9c5b44683fc 18967 4 J      
8.0@138: suspicious.javascript in XFA block
8.0@138: suspicious.warning: object contains JavaScript
a602577df86b40fd9f614bc717fd1568 view report 66dcd9657faeca41abdabce5f9fffc827909c5f92cfb4c0d40462214bd437573 104095 7 J      
8.0@138: suspicious.javascript in XFA block
8.0@138: suspicious.warning: object contains JavaScript
1dae8a17c5d913f760d0619c8a5168d2 view report 910ce2c02f5d5779d8655933bead4894602525066c4a2ffaeb7aa0d748d36e4f 51818 7 J   P  
29.0@6481: suspicious.pdf embedded PDF file
29.0@6481: suspicious.warning: object contains embedded PDF
30.0@50739: suspicious.warning: object contains JavaScript
31.0@50843: pdf.exploit execute EXE file
31.0@50843: pdf.exploit access system32 directory
31.0@50843: pdf.exploit execute action command
31.0@50843: pdf.execute exe file
31.0@50843: pdf.execute access system32 directory
d80385b8ffc3a5a88a77fa4d0004198f view report f225e579aa8e899c3b1a322c958b8cb3a4e4ea89e4d4ca3f3190dfa44eca359f 145092 7 J   P  
42.0@99532: suspicious.pdf embedded PDF file
42.0@99532: suspicious.warning: object contains embedded PDF
43.0@143791: suspicious.warning: object contains JavaScript
44.0@143903: pdf.exploit execute EXE file
44.0@143903: pdf.exploit access system32 directory
44.0@143903: pdf.exploit execute action command
44.0@143903: pdf.execute exe file
44.0@143903: pdf.execute access system32 directory
71dbc7c829c1c542b47d4766954227de view report Time Series Databases.pdf 8335135 4        
408.0@4694673: suspicious.obfuscation using eval