MALICIOUS
224
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0023
Heuristics 7
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LUREPDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
-
Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARMPDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
Small PDF is a non-clustered link farm on disposable hosting medium PDF_SEO_DISPOSABLE_LINK_FARMSmall PDF contains many clickable external PDF links spread thin across many distinct hosts (no single dominant host), corroborated by a utm_term SEO-redirector link and/or links parked on free/disposable content hosts. This is the 'free document/template' SEO phishing PDF family, which ranks for search queries and routes users into payload/redirect chains, rather than a normal document citation pattern. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://find24hs.com/customized.backlogs/handpainted.hibernian/shallowly.ZG93bmxvYWR8Nld4Tm1wMU1IeDhNVFkzTWpVNU1qVTNOSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/QWRvYmUgUGhvdG9zaG9wIDIwMjEgKFZlcnNpb24gMjIuNSkQWR/glitterati.soils PDF link annotation
- https://mattphones.com/wp-content/uploads/2023/01/Download-Texture-Photoshop-Cc-NEW.pdfIn PDF document text
- https://supportingyourlocal.com/wp-content/uploads/2023/01/Photoshop-Express-Download-Windows-EXCLUSIVE.pdfIn PDF document text
- http://gotartgallery.org/?p=2470In PDF document text
- https://townofcatalina.com/wp-content/uploads/2023/01/Adobe-Photoshop-CC-2015-Version-16-Download-free-With-Key-3264bit-lAtest-versIon-2023.pdfIn PDF document text
- https://www.divinejoyyoga.com/2023/01/02/download-free-photoshop-2021-version-22-5-1-with-registration-code-2023/In PDF document text
- http://powervapes.net/download-free-photoshop-cs5-cracked-3264bit-last-release-2022/In PDF document text
- https://amtsilatipusat.net/wp-content/uploads/2023/01/natgin.pdfIn PDF document text
- http://estesparkrentals.com/photoshop-2022-version-23-4-1-download-free-activation-crack-3264bit-last-release-2022/In PDF document text
- https://the-chef.co/wp-content/uploads/2023/01/bennran.pdfIn PDF document text
- https://5z3800.a2cdn1.secureserver.net/wp-content/uploads/2023/01/ileavan.pdf?time=1672651033In PDF document text
- https://2do.net/wp-content/uploads/2023/01/Adobe-Photoshop-2022-Version-2301-With-Registration-Code-Serial-Number-X64-2022.pdfIn PDF document text
- https://www.bridgeextra.com/wp-content/uploads/2023/01/jaehil.pdfIn PDF document text
- http://it-sbo.com/wp-content/uploads/2023/01/gelkar.pdfIn PDF document text
- https://trenirajsamajom.rs/archives/248268In PDF document text
- https://equipmentgram.com/adobe-photoshop-cc-2018-version-19-download-torrent-activation-code-for-windows-new-2023/In PDF document text
- https://uniqprep.com/archives/14712In PDF document text
- https://indiebonusstage.com/how-to-download-font-in-photoshop-portable/In PDF document text
- http://rayca-app.ir/wp-content/uploads/2023/01/Download-Adobe-Photoshop-CC-2014-Activation-Code-With-Keygen-New-2023.pdfIn PDF document text
- https://www.interprys.it/download-adobe-photoshop-portable-windows-10-top.htmlIn PDF document text
- http://www.lab20.it/2023/01/02/download-free-photoshop-cc-2015-version-17-license-key-license-key-full-windows-10-11-2022/In PDF document text
- https://alaediin.com/wp-content/uploads/2023/01/Photoshop-Express-Download-On-Windows-11-LINK.pdfIn PDF document text
- https://vir-expo.com/wp-content/uploads/2023/01/Adobe-Photoshop-Free-Download-For-Windows-7-Free-Trial-BETTER.pdfIn PDF document text
- https://turbulentelevenvansissi.nl/wp-content/uploads/2023/01/kahlprin.pdfIn PDF document text
- http://www.avnifunworld.com/?p=2602In PDF document text
- https://jyotienterprises.net/wp-content/uploads/2023/01/Wedding-Invitation-Templates-Photoshop-Download-Free-PORTABLE.pdfIn PDF document text
- https://earthoceanandairtravel.com/2023/01/02/free-photoshop-for-pc-download-__link__/In PDF document text
- http://aakasharjuna.com/photoshop-light-effects-download-verified/In PDF document text
- http://gladfile.com/?p=1299In PDF document text
- https://wellscorporate.com/wp-content/uploads/2023/01/marqferg.pdfIn PDF document text
- https://www.ocacp.com/wp-content/uploads/2023/01/panheck.pdfIn PDF document text
- https://kidztopiaplay.com/wp-content/uploads/2023/01/Adobe_Photoshop_CC_2015_version_17.pdfIn PDF document text
- http://orbeeari.com/?p=191413In PDF document text
- https://blwes.com/wp-content/uploads/2023/01/volelev.pdfIn PDF document text
- https://www.carchowk.com/download-font-photoshop-cs3-top/In PDF document text
- https://asu-bali.jp/wp-content/uploads/2023/01/manjani.pdfIn PDF document text
- https://www.articlemarketingitaliano.it/wp-content/uploads/2023/01/Photoshop-2022-version-23-Download-free-Keygen-WinMac-2022.pdfIn PDF document text
- http://alluneed.company/?p=28531In PDF document text
- https://www.touchegraphik.com/wp-content/uploads/2023/01/Download-free-Adobe-Photoshop-2020-Serial-Number-X64-2023.pdfIn PDF document text
- https://www.qmajd.com/wp-content/uploads/2023/01/Free-Photoshop-Filters-Download-BEST.pdfIn PDF document text
- http://adomemorial.com/2023/01/02/photoshop-software-free-download-7-0-full-version-work/In PDF document text
- https://supportingyourlocal.com/wp-content/uploads/2023/01/Photoshop-Express-Download-WindowsIn PDF document text
- https://townofcatalina.com/wp-content/uploads/2023/01/Adobe-Photoshop-CC-2015-Version-16-DownIn PDF document text
- https://www.divinejoyyoga.com/2023/01/02/download-free-photoshop-2021-version-22-5-1-with-registIn PDF document text
- http://estesparkrentals.com/photoshop-2022-version-23-4-1-download-free-activation-crack-3264bit-lIn PDF document text
- https://2do.net/wp-content/uploads/2023/01/Adobe-Photoshop-2022-Version-2301-With-Registration-In PDF document text
- https://equipmentgram.com/adobe-photoshop-cc-2018-version-19-download-torrent-activation-code-fIn PDF document text
- http://rayca-app.ir/wp-content/uploads/2023/01/Download-Adobe-Photoshop-CC-2014-Activation-CodIn PDF document text
- http://www.lab20.it/2023/01/02/download-free-photoshop-cc-2015-version-17-license-key-license-key-In PDF document text
- https://alaediin.com/wp-content/uploads/2023/01/Photoshop-Express-Download-On-Windows-11-LINIn PDF document text
+13 more URL(s)
🗂 Part of campaign:
secureserver.net
1471 samples
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_007_off0000839a.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x839A | 19996 bytes |
SHA-256: 8e639af5f37a01c952d7fa5ae521c275babc199f4d44038938bf51c1324a673d |
|||
font_01_sfnt_off0000b7d5.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xB7D5 | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.