MALICIOUS
149
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.1276
Heuristics 6
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
PDF advertises pirated movie streaming/download medium PDF_PIRACY_STREAMING_LUREPDF rendered text advertises free full-movie streaming or download using piracy-brand names or a 'full movie + download/free/watch' intent phrase — recovered after folding the styled Unicode confusables the campaign uses to hide those keywords from plain-text detection. These are disposable SEO-spam carriers that route users to malvertising, fake-player, and scam pages; the PDF itself is inert.
-
Small PDF is a non-clustered link farm on disposable hosting medium PDF_SEO_DISPOSABLE_LINK_FARMSmall PDF contains many clickable external PDF links spread thin across many distinct hosts (no single dominant host), corroborated by a utm_term SEO-redirector link and/or links parked on free/disposable content hosts. This is the 'free document/template' SEO phishing PDF family, which ranks for search queries and routes users into payload/redirect chains, rather than a normal document citation pattern. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://geags.com/2sDWz8 PDF link annotation
- https://executiverighthand.com/wp-content/uploads/2023/01/Tarak-Mehta-Sex-With-Anjali-Bhabhi-Pornhubcom.pdfIn PDF document text
- https://umbo-avis.fr/wp-content/uploads/2023/01/Rainbow-Six-Vegas-2-Fov.pdfIn PDF document text
- https://articlebeast.online/jai-academy-jhansi-holiday-homework/In PDF document text
- http://hotelthequeen.it/?p=134419In PDF document text
- https://luciavillalba.com/patched-adobe-premiere-pro-cc-2017-v11-0-2-x64-incl-fixed-crack-portable/In PDF document text
- https://www.candipipes.com/wp-content/uploads/2023/01/hendraf.pdfIn PDF document text
- https://sweetangels.in/wp-content/uploads/2023/01/PATCHED_Adobe_Photoshop_CC_2018_v210024821_Crack.pdfIn PDF document text
- https://www.riobrasilword.com/2023/01/14/twilight-saga-book-5-midnight-sun-pdf-free-repack/In PDF document text
- https://mercatinosport.com/wp-content/uploads/2023/01/Xforce-Keygen-64bit-AutoCAD-LT-2010-FREE.pdfIn PDF document text
- https://lifedreamsorganizer.com/magic-book-in-tamil-pdf-free-download-__top__/In PDF document text
- https://boucanier.ca/wp-content/uploads/2023/01/Qari-Batin-Naat-Mp3-11.pdfIn PDF document text
- https://hirupmotekar.com/wp-content/uploads/vertami.pdfIn PDF document text
- http://moonreaderman.com/karinaezindagiislamicbookinurdupdf243/In PDF document text
- https://qflash.es/download-manjhi-the-mountain-man-1080pgolkes-__exclusive__/In PDF document text
- https://j-core.club/2023/01/14/punchline-algebra-book-a-7-6-answers/In PDF document text
- https://www.anunciandoinmuebles.com/road-creator-pro-v2-03-for-3ds-max-2016-2019/In PDF document text
- https://indiebonusstage.com/iso-10015-pdf-arabic-32/In PDF document text
- https://vape.tv/wp-content/uploads/2023/01/Race3free-Extra-Qualitydownloadfullmoviemp4.pdfIn PDF document text
- https://mindfullymending.com/gijoe-retaliation-dual-audio-1080p-torrent-download-exclusive/In PDF document text
- https://executiverighthand.com/wp-content/uploads/2023/01/Tarak-Mehta-Sex-With-Anjali-Bhabhi-PoIn PDF document text
- https://sweetangels.in/wp-content/uploads/2023/01/PATCHED_Adobe_Photoshop_CC_2018_v210024In PDF document text
- https://mercatinosport.com/wp-content/uploads/2023/01/Xforce-Keygen-64bit-AutoCAD-LT-2010-FREIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://ns.adobe.com/iX/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00002eaa.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x2EAA | 4920 bytes |
SHA-256: 8d30b384de4c2b3d781f7ac8ff73b025ffc04010813f8bb40311b7374646af90 |
|||
font_01_sfnt_off00003d44.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x3D44 | 8764 bytes |
SHA-256: 1538279e12c75ef97373f29cbe4c397703d1de113194b513863359d229734fdc |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.