MALICIOUS
94
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0005
Heuristics 4
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dormister.com/bustier.ZG93bmxvYWR8VWEzTXpOMllYeDhNVFkyTlRjek16ZzBNWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA?winds=/gravers/submersible/QWRvYmUgRHJlYW13ZWF2ZXIgQ0MgMjAxNyB2MTcuMC4xLjkzNDYgU2VyaWFsIEtleQQWR.resonsibility PDF link annotation
- https://wildbienenbox.de/wp-content/uploads/2022/10/alingau.pdfIn PDF document text
- https://seo-gurus.net/numerology-explorer-2-0-free-cracked-snd-zip/In PDF document text
- https://arteshantalnails.com/wp-content/uploads/2022/10/caijava.pdfIn PDF document text
- https://cannabisrepository.com/wp-content/uploads/2022/10/Adobe_Photoshop_Lightroom_CC_6101_Cracked__CrackzSoft_Utorrent_NEW.pdfIn PDF document text
- https://med-smi.com/��������-��������������/In PDF document text
- http://saddlebrand.com/?p=124790In PDF document text
- https://www.be-art.pl/wp-content/uploads/2022/10/josemar.pdfIn PDF document text
- https://nb-gallery.com/garmin-toponav-maps-quebec-v-3/In PDF document text
- http://sourceofhealth.net/2022/10/14/adobe-photoshop-cs2-v9-0-english-upd-keygen-serial-key/In PDF document text
- https://www.webcard.irish/wp-content/uploads/2022/10/onascob.pdfIn PDF document text
- https://cannabisrepository.com/wp-content/uploads/2022/10/Adobe_Photoshop_Lightroom_CC_6101_CracIn PDF document text
- https://med-smi.com/���������������-���������������������������/In PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign:
secureserver.net
1471 samples
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00002d6b.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x2D6B | 86400 bytes |
SHA-256: bee8db3372ed484faad13995daee36fd073de8fd9083c081be9ca87195bc334a |
|||
font_01_sfnt_off0000bb11.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBB11 | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.