Malicious PDF — malware analysis report

Heuristics 5

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://hardlyfind.com/palix/ZG93bmxvYWR8eng1YW5ZNFozeDhNVFkxT0RJeE9UUTNNM3g4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/desynchronization.kyocera.potions.consecrating.stainless/ZGVzY2FyZ2FyIHNvbnkgdmVnYXMgcHJvIDE1IGdyYXRpcwZGV PDF link annotation

  • https://fystop.fi/menschenb11arbeitsbuchpdffree-new/In PDF document text
  • https://media1.ambisonic.se/2022/07/charfort.pdfIn PDF document text
  • https://progressivehealthcareindia.com/2022/07/27/roja-hindi-movie-full-download-torrent-repack/In PDF document text
  • http://oneteamacademy.com/wp-content/uploads/2022/07/berharl-1.pdfIn PDF document text
  • https://www.fashionservicenetwork.com/wp-content/uploads/2022/07/Higher_Surveying_Pdf_Free_Download_danksagungen_goethe_spion.pdfIn PDF document text
  • https://awinkiweb.com/wp-content/uploads/2022/07/Loops_De_Tambora_Merenguera_HOT.pdfIn PDF document text
  • https://hard-times.us/wp-content/uploads/2022/07/haylfaro.pdfIn PDF document text
  • http://rackingpro.com/?p=49749In PDF document text
  • https://www.viizair.com/band-baaja-baaraat-movie-download-kickass-best/In PDF document text
  • https://healinghillary.com/reasoning-from-the-scriptures-with-the-jehovahs-witnesses-portable-download-pdf/In PDF document text
  • https://aurespectdesoi.be/full-exclusive-steinberg-virtual-bassist-vsti-1-0-0-504-15-strike-vicentico-des/In PDF document text
  • https://rabota-ya.ru/wp-content/uploads/2022/07/altair_flow_simulator_2019_crack_repack.pdfIn PDF document text
  • https://sfgym24h.com/wp-content/uploads/2022/07/ExamDiff_Pro_Master_Edition_100116_X86_X64_Free_Download_INSTALL.pdfIn PDF document text
  • https://thefoodieshaven.com/wp-content/uploads/2022/07/yamdare.pdfIn PDF document text
  • https://integritysmallbusiness.com/wp-content/uploads/2022/07/FSX_FSDreamteam_GSX_Ground_Services_X_Download_For_Computer.pdfIn PDF document text
  • https://www.indianhomecook.com/wp-content/uploads/2022/07/warlati.pdfIn PDF document text
  • https://www.cr-comores.org/wp-content/uploads/2022/07/Borland_C_Builder_6_Con_LINK_Crack_JGMM_64_Bit.pdfIn PDF document text
  • https://ilmercatino.tv/wp-content/uploads/2022/07/Network_Emanager_Download_Toshiba_16.pdfIn PDF document text
  • https://gazetabilgoraj.pl/advert/a-khel-to-abb-shuru-hoga-hindi-dubbed-free-download-upd/In PDF document text
  • https://qeezi.com/advert/wwe-2k19-codex-license-key/In PDF document text
  • https://www.fashionservicenetwork.com/wp-In PDF document text
  • https://healinghillary.com/reasoning-from-the-scriptures-with-the-jehovahs-witnesses-portable-In PDF document text
  • https://aurespectdesoi.be/full-exclusive-steinberg-virtual-bassist-vsti-1-0-0-504-15-strike-vicentico-In PDF document text
  • https://sfgym24h.com/wp-content/uploads/2022/07/ExamDiff_Pro_Master_Edition_100116_X86_X64_FIn PDF document text
  • https://integritysmallbusiness.com/wp-In PDF document text
  • https://www.cr-comores.org/wp-In PDF document text
  • http://hardlyfind.com/palix/zg93bmxvywr8eng1yw5znfozedhnvfkxt0rjee9uutnnm3g4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbda/desynchronization.kyocera.potions.consecrating.stainless/zgvzy2fyz2fyihnvbnkgdmvnyxmgchjvide1igdyyxrpcwzgvIn PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.