MALICIOUS
264
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0134
Heuristics 8
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LUREPDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
-
Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARMPDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
-
PDF links to a cracked-software download doorway (base64-obfuscated) high PDF_CRACKED_SOFTWARE_DOWNLOAD_DOORWAYPDF's embedded link hides a pirated-software title as a base64 blob inside the URL path/query (and/or carries the ``download|`` doorway-template marker), rather than in visible text. This is a TCPDF-generated SEO doorway that ranks for software-piracy searches and funnels users to fake 'crack/keygen' download pages distributing adware, potentially-unwanted programs, or droppers. The base64 encoding is deliberate obfuscation to evade plaintext lure rules; the PDF itself carries no parser exploit — the risk is the linked crack-download destination.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
Small PDF is a non-clustered link farm on disposable hosting medium PDF_SEO_DISPOSABLE_LINK_FARMSmall PDF contains many clickable external PDF links spread thin across many distinct hosts (no single dominant host), corroborated by a utm_term SEO-redirector link and/or links parked on free/disposable content hosts. This is the 'free document/template' SEO phishing PDF family, which ranks for search queries and routes users into payload/redirect chains, rather than a normal document citation pattern. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://thedirsite.com/ZG93bmxvYWR8ODFrTVhCd2JueDhNVFkzTWpVNU1qVTNOSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/cathedrals/personhood/nazar.bohemian?&QWRvYmUgUGhvdG9zaG9wIDIwMjIgKFZlcnNpb24gMjMuMC4yKQQWR= PDF link annotation
- https://fotofables.com/wp-content/uploads/2023/01/noecorb.pdfIn PDF document text
- https://parsiangroup.ca/wp-content/uploads/2023/01/Download_Photoshop_2021_Version_2243_Licence_Key_x3264_2022.pdfIn PDF document text
- https://www.squeezemodels.com/wp-content/uploads/Photoshop-Filters-Free-Download-Zip-EXCLUSIVE.pdfIn PDF document text
- https://localchoose.com/wp-content/uploads/2023/01/Photoshop-8-Free-Download-Windows-7-LINK.pdfIn PDF document text
- https://eleve-efb.fr/wp-content/uploads/2023/01/Old-Version-Photoshop-Cs3-Download-NEW.pdfIn PDF document text
- https://www.devraco.com/wp-content/uploads/2023/01/Photoshop-CC-2019-With-Keygen-finaL-version-2023.pdfIn PDF document text
- https://womensouthafrica.com/free-download-vector-action-photoshop-2021/In PDF document text
- https://www.anunciandoinmuebles.com/download-free-photoshop-cs4-full-product-key-pc-windows-lifetime-release-2022/In PDF document text
- https://thecryptobee.com/download-imagenomic-portraiture-for-photoshop-cs5-better/In PDF document text
- https://www.ilistbusiness.com/wp-content/uploads/2023/01/harren.pdfIn PDF document text
- https://mentorus.pl/wp-content/uploads/2023/01/shalyvo-1.pdfIn PDF document text
- https://womss.com/wp-content/uploads/2023/01/Photoshop-CC-2015-Download-Full-Product-Key-License-Keygen-For-PC-2022.pdfIn PDF document text
- https://www.theconstitutionalcitizen.com/wp-content/uploads/2023/01/prebern.pdfIn PDF document text
- http://tipsfortanning.com/ps-cc-photoshop-download-android-top/In PDF document text
- https://mashxingon.com/download-keygen-photoshop-cs6-64-bit-cracked/In PDF document text
- https://weycup.org/wp-content/uploads/2023/01/taifyn.pdfIn PDF document text
- https://crueltyfreemodels.com/wp-content/uploads/2023/01/lorcai.pdfIn PDF document text
- http://classacteventseurope.com/wp-content/uploads/2023/01/Website-Design-Photoshop-Templates-Free-Download-Extra-Quality.pdfIn PDF document text
- http://www.abc-skincare.com/download-photoshop-2019-windows-10-_hot_/In PDF document text
- https://www.planetneurodivergent.com/wp-content/uploads/2023/01/Photoshop-2021-Version-225-Torrent-With-Serial-Key-PCWindows-64-Bits-lifetimE-patch-202.pdfIn PDF document text
- http://nii-migs.ru/wp-content/uploads/2023/01/salsop.pdfIn PDF document text
- https://blessedtimony.com/wp-content/uploads/2023/01/corwjann.pdfIn PDF document text
- https://libreriaguillermo.com/wp-content/uploads/2023/01/English-Font-Free-Download-For-Photoshop-FREE.pdfIn PDF document text
- https://sportboekingen.nl/photoshop-indian-dress-psd-file-free-download-new/In PDF document text
- https://holiday-gift-ideas.com/download-adobe-photoshop-2021-version-22-4-1-incl-product-key-2023/In PDF document text
- https://arlingtonliquorpackagestore.com/photoshop-free-download-for-windows-8-1-64-bit-full-version-better/In PDF document text
- https://chopnotslop.com/wp-content/uploads/2023/01/anemarc.pdfIn PDF document text
- http://minnesotafamilyphotos.com/download-photoshop-2020-version-21-cracked-win-mac-x64-final-version-2022/In PDF document text
- https://xn--80aagyardii6h.xn--p1ai/download-photoshop-feather-brushes-__link__/In PDF document text
- https://legalbenefitsplus.com/wp-content/uploads/2023/01/dyllberi.pdfIn PDF document text
- https://assetdefenseteam.com/wp-content/uploads/2023/01/antulea.pdfIn PDF document text
- http://modiransanjesh.ir/photoshop-2022-version-23-1-download-with-serial-key-last-release-2023/In PDF document text
- https://www.asdnocincorsa.it/wp-content/uploads/2023/01/denlpen.pdfIn PDF document text
- http://mauiwear.com/photoshop-2021-version-22-4-2-download-free-product-key-2023/In PDF document text
- https://sasit.bg/adobe-photoshop-2020-version-21-download-free-activation-code-with-keygen-activation-windows-10-11-3264bit-2023/In PDF document text
- https://superyacht.me/advert/ps-photoshop-computer-software-download-top/In PDF document text
- http://gjurmet.com/en/photoshop-4-download-net-full/In PDF document text
- https://gtpsimracing.com/wp-content/uploads/2023/01/dejmor.pdfIn PDF document text
- https://earthoceanandairtravel.com/2023/01/01/adobe-photoshop-2021-version-22-4-download-torrent-with-license-code-for-windows-last-release-2022/In PDF document text
- https://www.divinejoyyoga.com/2023/01/01/adobe-photoshop-cc-2018-with-keygen-latest-release-2022/In PDF document text
- https://parsiangroup.ca/wp-content/uploads/2023/01/Download_Photoshop_2021_Version_2243_LiceIn PDF document text
- https://www.squeezemodels.com/wp-content/uploads/Photoshop-Filters-Free-Download-Zip-EXCLUSIIn PDF document text
- https://localchoose.com/wp-content/uploads/2023/01/Photoshop-8-Free-Download-Windows-7-LINK.pIn PDF document text
- https://www.devraco.com/wp-content/uploads/2023/01/Photoshop-CC-2019-With-Keygen-finaL-versioIn PDF document text
- https://www.anunciandoinmuebles.com/download-free-photoshop-cs4-full-product-key-pc-windows-lifIn PDF document text
- https://womss.com/wp-content/uploads/2023/01/Photoshop-CC-2015-Download-Full-Product-Key-LiceIn PDF document text
- http://classacteventseurope.com/wp-content/uploads/2023/01/Website-Design-Photoshop-Templates-In PDF document text
- https://www.planetneurodivergent.com/wp-content/uploads/2023/01/Photoshop-2021-Version-225-ToIn PDF document text
- https://libreriaguillermo.com/wp-content/uploads/2023/01/English-Font-Free-Download-For-PhotoshoIn PDF document text
+16 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_007_off00008762.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8762 | 20124 bytes |
SHA-256: 5021a122390d7229bb73f11fca8559ac27eb87f512a2e55241bee58c726f65b7 |
|||
font_01_sfnt_off0000bbe4.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBBE4 | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.