MALICIOUS
134
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0009
Heuristics 5
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARMPDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://sitesworlds.com/ZG93bmxvYWR8VVozZHpCMWNIeDhNVFkyTWpZNE1ETTVNSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/TVVEIEZJTSBNb3RvY3Jvc3MgV29ybGQgQ2hhbXBpb25zaGlwIFNlcmlhbCBLZXkgU2VyaWFsIEtleTE1TVV.picturegear.garrick.jibes=christ PDF link annotation
- https://beautysecretskincarespa.com/2022/09/11/stargateatlantistemporada1completadvdripspanish-full/In PDF document text
- https://rabota-ya.ru/wp-content/uploads/2022/09/daemon_tools_ultra_3100368_license_crack_m4masterteamoshkrg_best.pdfIn PDF document text
- http://thetruckerbook.com/2022/09/11/bratz-rock-angelz-game-download-new/In PDF document text
- http://www.mooglett.com/download-game-driver-2-for-pc-full-version-__top__/In PDF document text
- https://advancetrafficbr.com/wp-content/uploads/2022/09/phiecl.pdfIn PDF document text
- http://rootwordsmusic.com/2022/09/11/__link__-full-cubase-elements-8-0-update-8-0-35/In PDF document text
- http://golden-hands.co/?p=30032In PDF document text
- https://radiaki.com/?p=17270In PDF document text
- https://www.consultingproteam.com/2022/09/11/overcoming-gravity-steven-low-pdf-new-free-11/In PDF document text
- https://zum-token.com/wp-content/uploads/2022/09/talinad.pdfIn PDF document text
- http://pacificgoods.net/wp-content/uploads/2022/09/HD_Online_Player_Ek_Villain_Movie_Free_Download_In_Ta_EXCLUSIVE.pdfIn PDF document text
- http://insenergias.org/?p=80729In PDF document text
- https://edupedo.com/wp-content/uploads/2022/09/alymar.pdfIn PDF document text
- https://nayra-tours.com/wp-content/uploads/2022/09/Bajrangi_Bhaijaan_720p_in_download_torrent.pdfIn PDF document text
- https://obzorkuhni.ru/wp-content/uploads/2022/09/Komponen_Dan_Material_Sketchup.pdfIn PDF document text
- https://dottoriitaliani.it/ultime-notizie/benessere/sim-wise-4d-torrent-download-link/In PDF document text
- https://thehomeofheroes.org/marghanita-laski-the-tower-pdf-free-exclusive/In PDF document text
- http://implicitbooks.com/advert/magixmusicmaker17premiumitatorrent/In PDF document text
- http://phukienuno.com/?p=13217In PDF document text
- https://acsa2009.org/advert/smart-pc-fixer-v42-license-key-free-patched-110/In PDF document text
- https://beautysecretskincarespa.com/2022/09/11/stargateatlantistemporada1completadvdripspanish-In PDF document text
- https://rabota-ya.ru/wp-content/uploads/2022/09/daemon_tools_ultra_3100368_license_crack_m4maIn PDF document text
- http://pacificgoods.net/wp-In PDF document text
- https://nayra-tours.com/wp-In PDF document text
- http://sitesworlds.com/zg93bmxvywr8vvozzhpcmwniedhnvfkytwpzne1ettvnshg4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbda/tvveiezjtsbnb3rvy3jvc3mgv29ybgqgq2hhbxbpb25zaglwifnlcmlhbcblzxkgu2vyawfsietlete1tvv.picturegear.garrick.jibes=christIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign:
secureserver.net
1471 samples
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00002281.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x2281 | 85768 bytes |
SHA-256: cd17217f2014ea629823ab09b805be2d8ce223cb7a5afb81fa043dc5443f775d |
|||
font_01_sfnt_off0000ad89.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xAD89 | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.