CLEAN
12
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.1212
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://wacojetcenter.com/uploads/1/3/0/7/130740250/vefoxivukemifelolot.pdf PDF link annotation
- http://jswartwood.net/uploads/1/3/0/8/130874569/1143144.pdfPDF link annotation
- http://dropthestone.com/uploads/1/3/0/5/130588779/1699271.pdfPDF link annotation
- http://lgservicecenter.org/uploads/1/3/0/9/130969703/7293727.pdfPDF link annotation
- http://goldcoastsecuritycompany.com/uploads/1/3/1/3/131379820/7717175.pdfPDF link annotation
- http://artbyindia.org/uploads/1/3/0/2/130272571/8470736.pdfPDF link annotation
- http://www.ascendercorp.com/PDF link annotation
- http://www.ascendercorp.com/typedesigners.htmlPDF link annotation
- http://www.w3.org/1999/02/22-rdf-syntax-ns#PDF link annotation
- http://purl.org/dc/elements/1.1/PDF link annotation
- http://ns.adobe.com/pdf/1.3/PDF link annotation
- http://ns.adobe.com/xap/1.0/PDF link annotation
- http://ns.adobe.com/xap/1.0/mm/PDF link annotation
- http://ns.adobe.com/xap/1.0/rights/PDF link annotation
- https://fedoraproject.org/wiki/Licensing/LiberationFontLicensePDF link annotation
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0001a480.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x1A480 | 9556 bytes |
SHA-256: 223bbc5196405c8142b409731c6f93b4cd3c39288237f0d2dde92585b36ca393 |
|||
font_01_sfnt_off0001c7eb.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x1C7EB | 2616 bytes |
SHA-256: d907c570f1f8f2d62f38d7529dbf77de46ca3a1917ec53aca7a78bae59874b04 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.