MALICIOUS
134
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0005
Heuristics 5
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARMPDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://findthisall.com/aestheticians?invertebrates=babineaux.QXRlcm5pYTogRGVlcAQXR.bacchanal&emil=biomanufacturing&injecting=ZG93bmxvYWR8djU1Wm1rM2EzeDhNVFkxT0RJeU1EZzJObng4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA PDF link annotation
- https://theangelicconnections.com/droopy-balls-simulator-2021-hack-mod-torrent-x64-2022/In PDF document text
- https://asu-bali.jp/wp-content/uploads/2022/07/ralacke.pdfIn PDF document text
- https://agroanuncios.pe/wp-content/uploads/2022/07/JQ_Dogs_Amp_Cats_Keygen__Serial_Key_Download_MacWin.pdfIn PDF document text
- https://loveandhappiness.tv/wp-content/uploads/2022/07/yahlebe.pdfIn PDF document text
- https://bizzclassified.us/advert/best-seo-company-in-noida-seo-services-agency-in-noida/In PDF document text
- http://mysquare.in/?p=65963In PDF document text
- http://hshapparel.com/my-sweet-confession-hack-mod-activation-key-free-download-3264bit-latest-2022/In PDF document text
- http://www.theoldgeneralstorehwy27.com/age-of-fear-3-the-blood-and-moon-expansion-keygen-crack-setup-for-pc-2022/In PDF document text
- https://sahabhaav.com/wp-content/uploads/2022/07/Brumm.pdfIn PDF document text
- https://tranddrive.com/wp-content/uploads/2022/07/xevaroni.pdfIn PDF document text
- https://comunicare-online.ro/wp-content/uploads/2022/07/Fossil_Echo__Special_Edition_Content_Pack_Install_Crack__With_Full_Keygen_Updated_2022-1.pdfIn PDF document text
- http://kitchenwaresreview.com/?p=47019In PDF document text
- https://heidylu.com/wp-content/uploads/2022/07/Ecosystem.pdfIn PDF document text
- https://www.plori-sifnos.gr/wp-content/uploads/2022/07/payele.pdfIn PDF document text
- https://elolist.com/wp-content/uploads/2022/07/melefru.pdfIn PDF document text
- https://unibraz.org/microtransaction-simulator-game-of-the-decade-deluxe-edition-cheat-code-free-download-win-mac/In PDF document text
- https://www.moskyshop.com/wp-content/uploads/2022/07/jaerfenn.pdfIn PDF document text
- https://earthoceanandairtravel.com/2022/07/19/trainz-simulator-dlc-the-duchess-hack-mod-free-updated-2022/In PDF document text
- https://mevoydecasa.es/virtual-temple-order-of-the-golden-dawn-crack-mega/In PDF document text
- https://www.yolo.at/wp-content/uploads/2022/07/niojay/Alum_keygenexe__Incl_Product_Key_WinMac.pdfIn PDF document text
- https://agroanuncios.pe/wp-In PDF document text
- http://hshapparel.com/my-sweet-confession-hack-mod-activation-key-free-download-3264bit-In PDF document text
- http://www.theoldgeneralstorehwy27.com/age-of-fear-3-the-blood-and-moon-expansion-keygen-In PDF document text
- https://comunicare-online.ro/wp-content/uploads/2022/07/Fossil_Echo__Special_Edition_Content_PackIn PDF document text
- https://unibraz.org/microtransaction-simulator-game-of-the-decade-deluxe-edition-cheat-code-free-In PDF document text
- https://earthoceanandairtravel.com/2022/07/19/trainz-simulator-dlc-the-duchess-hack-mod-free-In PDF document text
- https://www.yolo.at/wp-In PDF document text
- http://findthisall.com/aestheticians?invertebrates=babineaux.qxrlcm5pytogrgvlcaqxr.bacchanal&emil=biomanufacturing&injecting=zg93bmxvywr8dju1wm1rm2ezedhnvfkxt0rjeu1ezzjobng4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbdaIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign:
secureserver.net
1471 samples
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off000051be.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x51BE | 84624 bytes |
SHA-256: b379511764b2b95b904f493f2cfa21ecfb5776d3e1e93326c30c87eeed94d23a |
|||
font_01_sfnt_off0000da0f.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xDA0F | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.