SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0005
Heuristics 3
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://starsearchtool.com/beckett/benzyl/c2V0dGxlcnMgMyBnb2xkIGVkaXRpb24gY2QgY3JhY2sc2V/gjjr?ZG93bmxvYWR8d3oxTVdVNU5ueDhNVFkxTnpBMk56RTFOSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA=kineo.pavels&oleda=stiffened PDF link annotation
- https://gravesendflorist.com/crack-gta-vice-city-nfs-underground-2rar-free/In PDF document text
- http://westghostproductions.com/?p=6789In PDF document text
- https://www.onlineusaclassified.com/advert/best-seo-company-in-noida-seo-services-agency-in-noida/In PDF document text
- https://forms.marin.edu/sites/forms/files/webform/Kitchendraw-6-recharge-34.pdfIn PDF document text
- http://saddlebrand.com/?p=44749In PDF document text
- http://togetherwearegrand.com/?p=39322In PDF document text
- https://honorrolldelivery.com/wp-content/uploads/2022/07/AUTODATA465CrackFULLUpdate2018-1.pdfIn PDF document text
- http://www.fangyao.org/wp-content/uploads/2022/07/HD_Online_Player_Iqbal_Hindi_Movie_TOP_Download_720p_Hd.pdfIn PDF document text
- https://fitenvitaalfriesland.nl/wondershare-uniconverter-11-6-1-18-crack-patch-free-download-link/In PDF document text
- https://www.neevsys.com/sites/default/files/webform/resume/elenesta897.pdfIn PDF document text
- https://riccardoriparazioni.it/polladhavan-2007-with-english-subtitles/con-filo/In PDF document text
- https://www.parsilandtv.com/wp-content/uploads/2022/07/jammwed.pdfIn PDF document text
- http://chatroom.thabigscreen.com:82/upload/files/2022/07/iSAEWhGv8h7yhRPQq5nI_06_7b2476ace057fb361787d9b77822c4b2_file.pdfIn PDF document text
- https://formyanmarbymyanmar.com/upload/files/2022/07/SBOYWy2Xi2PqAVnMvCIj_06_7b2476ace057fb361787d9b77822c4b2_file.pdfIn PDF document text
- https://groottravel.com/uncategorized/sandeep-garg-economics-class-12-ebook-work-download/In PDF document text
- https://fairosport.com/adobe-photoshop-cc-2015-17-0-1-final-x64-link-crack-rootdorid/In PDF document text
- http://www.icttc.in/wp-content/uploads/2022/07/VisibleBody3DHumanAnatomyAtlasPCcrackedrar.pdfIn PDF document text
- http://factreinamentos.com.br/blog/index.php?entryid=11824In PDF document text
- https://parsiangroup.ca/2022/07/call-of-duty-black-ops-3-v1-00-trainer-3-sarcipious/In PDF document text
- http://www.americacredithelp.com/?p=1In PDF document text
- https://gravesendflorist.com/crack-gta-vice-city-nfs-In PDF document text
- https://www.onlineusaclassified.com/advert/best-seo-company-in-In PDF document text
- https://forms.marin.edu/sites/forms/files/webform/Kitchendraw-6-reIn PDF document text
- https://honorrolldelivery.com/wp-content/uploads/2022/07/AUTODAIn PDF document text
- http://www.fangyao.org/wp-content/uploads/2022/07/HD_Online_PlIn PDF document text
- https://fitenvitaalfriesland.nl/wondershare-In PDF document text
- https://www.neevsys.com/sites/default/files/webform/resume/eleneIn PDF document text
- https://riccardoriparazioni.it/polladhavan-2007-with-english-In PDF document text
- https://www.parsilandtv.com/wp-In PDF document text
- http://chatroom.thabigscreen.com:82/upload/files/2022/07/iSAEWhIn PDF document text
- https://formyanmarbymyanmar.com/upload/files/2022/07/SBOYWyIn PDF document text
- https://groottravel.com/uncategorized/sandeep-garg-economics-In PDF document text
- https://fairosport.com/adobe-photoshop-cc-2015-17-0-1-final-In PDF document text
- http://www.icttc.in/wp-content/uploads/2022/07/VisibleBody3DHumIn PDF document text
- https://parsiangroup.ca/2022/07/call-of-duty-black-In PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign:
secureserver.net
1471 samples
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00002ceb.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x2CEB | 85036 bytes |
SHA-256: f461f5f03be8caafd8abf75b5dd802e5d22ab0656d339cd8eef1cecbfd4fabc2 |
|||
font_01_sfnt_off0000b679.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xB679 | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.