MALICIOUS
74
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0006
Heuristics 4
-
Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARMPDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://siteslocate.com/margarines/contraption?masturbators=ZG93bmxvYWR8NFVFWTNwMGJYeDhNVFkxT0RBd05qWTVPWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA.U2lnbiBpbiB3aXRoIGxvY2FsIGFjY291bnQgaW5zdGVhZCBvcHRpb24gbWlzc2luZyBpbiBXaW5kb3dzIDEwU2l.mclean.nitiwat&unsanitary=quicktest PDF link annotation
- https://www.1home.sk/wp-content/uploads/2022/07/Bounce_classic_240x320_resolution.pdfIn PDF document text
- https://brandyallen.com/2022/07/17/xp-repair-pro-6-0-6-serial-rar/In PDF document text
- https://deccan-dental.com/apulsoft-apeq-vst-v1-3-2-incl-keygen-air-top/In PDF document text
- https://thehomeofheroes.org/tanu-weds-manu-returns-2015-hindi-720p-download-upd/In PDF document text
- https://totoralillochile.com/advert/alcor-usb-flash-drive-tools-fix-fake-usb-drives-install/In PDF document text
- http://aqaratalpha.com/?p=38385In PDF document text
- http://orbeeari.com/?p=47143In PDF document text
- https://mhealthtechsolutions.com/2022/07/17/musiche-tirolesi-da-scaricare/In PDF document text
- https://obzorkuhni.ru/styling/adobe-photoshop-cc-2017-v18-0-1-x64cracked-cracked-download-pc/In PDF document text
- https://loskutbox.ru/wp-content/uploads/2022/07/sophobad.pdfIn PDF document text
- https://josecarlospereira.com/dvb-dream-crack-24b-herbicide-new/In PDF document text
- https://xtc-hair.com/elreymonomilomanarapdfgratis/In PDF document text
- https://digibattri.com/nitro-pro-enterprise-v8-5-0-26-64bit-with-key-tordigger-full-version-hot/In PDF document text
- http://theinspirationseekers.com/battlefield-4-cd-key-generator-2021/In PDF document text
- http://ampwebsitedesigner.com/2022/07/17/how-to-dual-log-in-in-dragon-nest-private-server-portable/In PDF document text
- http://www.lesbianmommies.com/wp-content/uploads/2022/07/Sprint_Layout_60rar.pdfIn PDF document text
- http://realslant.com/?p=16420In PDF document text
- https://sheltered-caverns-08895.herokuapp.com/Regjistri_I_Gjendjes_Civile_Shqiperi_Download_Freerar.pdfIn PDF document text
- https://www.upscale.com/sanam-teri-kasam-movie-free-download-exclusive-1080p-movies/In PDF document text
- https://www.bigdawgusa.com/iso-11064-5-pdf-free-download-updated/In PDF document text
- https://www.1home.sk/wp-In PDF document text
- https://thehomeofheroes.org/tanu-weds-manu-returns-2015-hindi-720p-In PDF document text
- https://totoralillochile.com/advert/alcor-usb-flash-drive-tools-fix-fake-usb-In PDF document text
- https://mhealthtechsolutions.com/2022/07/17/musiche-tirolesi-da-In PDF document text
- https://obzorkuhni.ru/styling/adobe-photoshop-In PDF document text
- https://digibattri.com/nitro-pro-enterprise-v8-5-0-26-64bit-with-key-In PDF document text
- http://ampwebsitedesigner.com/2022/07/17/how-to-dual-log-in-in-dragon-In PDF document text
- http://www.lesbianmommies.com/wp-In PDF document text
- https://sheltered-caverns-08895.herokuapp.com/Regjistri_I_Gjendjes_CivilIn PDF document text
- https://www.upscale.com/sanam-teri-kasam-movie-free-download-In PDF document text
- http://siteslocate.com/margarines/contraption?masturbators=zg93bmxvywr8nfvfwtnwmgjyedhnvfkxt0rbd05qwtvpwhg4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbda.u2lnbibpbib3axroigxvy2fsigfjy291bnqgaw5zdgvhzcbvchrpb24gbwlzc2luzybpbibxaw5kb3dzidewu2l.mclean.nitiwat&unsanitary=quicktestIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off000036c3.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x36C3 | 84508 bytes |
SHA-256: 2b7ba551bea82cc3307397981c1dbeb1b78486f95f2eb14e5e58d4e1b24edb0c |
|||
font_01_sfnt_off0000beaf.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBEAF | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.