MALICIOUS
129
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0006
Heuristics 5
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
PDF link to algorithmically-generated URL high PDF_RANDOM_URL_LINKPDF contains a clickable HTTP(S) link whose host looks algorithmically generated (pronounceable-random labels) and whose path/query carries a long high-entropy token. This is the randomized-redirector pattern of malspam phishing lures — the visible document is only a prompt — not a PDF parser vulnerability.
-
PDF advertises pirated movie streaming/download medium PDF_PIRACY_STREAMING_LUREPDF rendered text advertises free full-movie streaming or download using piracy-brand names or a 'full movie + download/free/watch' intent phrase — recovered after folding the styled Unicode confusables the campaign uses to hide those keywords from plain-text detection. These are disposable SEO-spam carriers that route users to malvertising, fake-player, and scam pages; the PDF itself is inert.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://awarefinance.com/janitorial/myeloid/resonators.samkon?fiasco=ZnVsbCBtb3ZpZSBUaGUgTGVnZW5kIE9mIEJoYWdhdCBTaW5naCA3MjBwZnV&ZG93bmxvYWR8SmQxWTJwemEzeDhNVFkyT0RnM05qazNOWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA=euthanasia PDF link annotation
- https://topdriveinc.com/wp-content/uploads/2022/11/Mediamonkey_Gold_Serial_Key.pdfIn PDF document text
- http://www.dblxxposure.com/wp-content/uploads/2022/11/Def_Jam_Fight_For_Ny_Full_Game_Download_Pc143.pdfIn PDF document text
- https://mystery-home-shop.com/wp-content/uploads/2022/11/Free_TOP_Download_Tutorial_Bahasa_Indonesia_Autocad_2012_3d.pdfIn PDF document text
- https://comprasbloom.com/wp-content/uploads/2022/11/Vladmodels_Sasha_y109_set_010rar.pdfIn PDF document text
- https://urmiabook.ir/wp-content/uploads/2022/11/quynsam.pdfIn PDF document text
- https://xn--80aagyardii6h.xn--p1ai/plants-vs-zombies-game-of-the-year-edition-cpy-fitgirl-repack-9996-127999/In PDF document text
- https://lacomfortair.com/fs2004-pmdg-747-400-premium-pack-license-key-repack/In PDF document text
- https://restoringvenus.com/wp-content/uploads/2022/11/DownloadfullmovieSachinABillionDreamsin720p_HOT.pdfIn PDF document text
- https://greenearthcannaceuticals.com/michael-giacchino-ratatouille-ost-2007-best/In PDF document text
- https://otelgazetesi.com/advert/tomclancysrainbowsixsiegecrack-hotonlycodex/In PDF document text
- https://bodhirajabs.com/atuendo-tradicional-argentina-hector-arico-pdf-free-repack/In PDF document text
- http://www.carnivaljunction.com/wp-content/uploads/2022/11/General_Ss_Sven_Hassel_Pdf_Download.pdfIn PDF document text
- https://befriend.travel/wp-content/uploads/2022/11/eegnvan.pdfIn PDF document text
- https://sweetangels.in/wp-content/uploads/2022/11/Free_Download_Microbial_Ecology_Atlas_Bartha_Zip_3.pdfIn PDF document text
- https://www.cooks.am/wp-content/uploads/2022/11/MlSkin_VCL_V40_D7D103_Rio_WORK.pdfIn PDF document text
- http://www.bigislandltr.com/wp-content/uploads/2022/11/manwel.pdfIn PDF document text
- https://diabetica.eu/wp-content/uploads/2022/11/kalwes.pdfIn PDF document text
- https://restoringvenus.com/wp-content/uploads/2022/11/express_digital_DARKROOM_Version_91_torrentrar_30.pdfIn PDF document text
- https://rebatecircle.com/wp-content/uploads/2022/11/Autodata_338_21.pdfIn PDF document text
- http://www.keops.cat/wp-content/uploads/2022/11/Download_Filesyscheckcfg_Mw2epub.pdfIn PDF document text
- http://www.dblxxposure.com/wp-In PDF document text
- https://mystery-home-shop.com/wp-In PDF document text
- https://xn--80aagyardii6h.xn--p1ai/plants-vs-zombies-game-of-the-year-edition-cpy-fitgirl-In PDF document text
- https://restoringvenus.com/wp-In PDF document text
- http://www.carnivaljunction.com/wp-In PDF document text
- https://sweetangels.in/wp-In PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign:
secureserver.net
1471 samples
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0000285c.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x285C | 84508 bytes |
SHA-256: 2b7ba551bea82cc3307397981c1dbeb1b78486f95f2eb14e5e58d4e1b24edb0c |
|||
font_01_sfnt_off0000b048.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xB048 | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.