SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0025
Heuristics 3
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://bestentrypoint.com/dramatics.c2Nocml0dGUgaW50ZXJuYXRpb25hbCAzIGxlaHJlcmhhbmRidWNoc2N/definiteness/gandolfini/monumentally/ejection/?ZG93bmxvYWR8dGowT1Roa2FueDhNVFkyTWpZNE1ETTVNSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA=.optimised PDF link annotation
- https://adplasma.com/wp-content/uploads/2022/09/Torchlight_2_Mod_Launcher_Crack_Fixinstmank_HOT.pdfIn PDF document text
- https://aceitunasalvarez.com/wp-content/uploads/2022/09/stesak.pdfIn PDF document text
- https://antiquesanddecor.org/adobe-acrobat-xi-pro-11-0-22-final-best-crack-techtools-updated-rar/In PDF document text
- https://xchangemkt.com/mainrahoonyanarahoonfullmoviefreefix-download/In PDF document text
- https://dottoriitaliani.it/ultime-notizie/senza-categoria/vijeo-designer-6-2-new-crack-license-45/In PDF document text
- https://xn--80aagyardii6h.xn--p1ai/descargar-comic-porno-obsesion-3/In PDF document text
- https://cleverfashionmedia.com/advert/hd-online-player-bluestone-silk-n-blood-videos/In PDF document text
- https://tvlms.com/wp-content/uploads/2022/09/odynads.pdfIn PDF document text
- https://ancient-taiga-26011.herokuapp.com/dorhary.pdfIn PDF document text
- https://www.mycatchyphrases.com/windows-8-underground-2013-product-key-__hot__-free/In PDF document text
- https://empoweresports.com/magix-vegas-pro-16-0-0-307-x64-multilingual-medicinebabupc-utorrent/In PDF document text
- http://mysquare.in/?p=In PDF document text
- https://contabilidad.xyz/basic-electronics-books-in-hindi-pdf-free-__full__-downloadgolkeshttps-scoutmails-com-index301-php-k-basic/In PDF document text
- https://www.webcard.irish/internet-download-manager-idm-v6-30-build-8-pre-activated-full-version-top/In PDF document text
- https://blooming-eyrie-31988.herokuapp.com/erlmol.pdfIn PDF document text
- http://www.vinergie.net/wp-content/uploads/2022/09/HD_Online_Player_Bunty_Aur_Babli_Hd_Full_Movie_720p_VERIFIED.pdfIn PDF document text
- https://womss.com/400-extensions-for-dreamweaver-high-quality-download-pc/In PDF document text
- https://roofingbizuniversity.com/wp-content/uploads/2022/09/Solucionario_Teoria_Electromagnetica_Hayt_5_Edicion.pdfIn PDF document text
- http://mirrordancehair.com/?p=13238In PDF document text
- https://adplasma.com/wp-content/uploads/2022/09/Torchlight_2_Mod_LauncIn PDF document text
- https://antiquesanddecor.org/adobe-acrobat-xi-pro-11-0-22-final-best-crack-In PDF document text
- https://dottoriitaliani.it/ultime-notizie/senza-categoria/vijeo-designer-6-2-new-In PDF document text
- https://cleverfashionmedia.com/advert/hd-online-player-bluestone-silk-n-In PDF document text
- https://www.mycatchyphrases.com/windows-8-underground-2013-product-In PDF document text
- https://empoweresports.com/magix-vegas-pro-16-0-0-307-x64-multilingual-In PDF document text
- https://contabilidad.xyz/basic-electronics-books-in-hindi-pdf-In PDF document text
- https://www.webcard.irish/internet-download-manager-idm-v6-30-build-8-pre-In PDF document text
- http://www.vinergie.net/wp-content/uploads/2022/09/HD_Online_Player_BuntIn PDF document text
- https://womss.com/400-extensions-for-dreamweaver-high-quality-download-In PDF document text
- https://roofingbizuniversity.com/wp-content/uploads/2022/09/Solucionario_TIn PDF document text
- https://adplasma.com/wp-content/uploads/2022/09/torchlight_2_mod_launcher_crack_fixinstmank_hot.pdfIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign:
secureserver.net
1471 samples
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off000022fd.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x22FD | 84508 bytes |
SHA-256: 2b7ba551bea82cc3307397981c1dbeb1b78486f95f2eb14e5e58d4e1b24edb0c |
|||
font_01_sfnt_off0000aae9.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xAAE9 | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.