MALICIOUS
64
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0007
Heuristics 3
-
Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LUREPDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://xtraserp.com/ZG93bmxvYWR8SWUwYUdrMmRIeDhNVFkxTnpBMk56RTFOSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/kooning?externship&fumigants=temperaments&vino=VWx0aW1hdGUgTW9ydGFsIEtvbWJhdCAzIEhhY2sgRWRpdGlvbiBOeWMVWx PDF link annotation
- https://terapeutas.shop/wp-content/uploads/2022/07/HD_Online_Player_True_HD_Hindi_Video_Songs_Vol2_Blur.pdfIn PDF document text
- https://www.tailormade-logistics.com/sites/default/files/webform/dota-toolkit-34.pdfIn PDF document text
- https://fabbyhouse.com/2022/07/06/antares-autotune-evo-vst-rtas-v6-0-9-proper-air-rar-free/In PDF document text
- http://steamworksedmonton.com/american-truck-simulator-v-1-7-1-1s-9-dlc-2018-serial-key/In PDF document text
- http://www.essexheritage.org/sites/default/files/mcintiretour.pdfIn PDF document text
- https://mycoopmed.net/sniperghostwarrior2multiplayermapsexclusive-downloadpc/In PDF document text
- https://www.cutlerbay-fl.gov/system/files/webform/bandung-lautan-asmara-adi-dan-nanda.pdfIn PDF document text
- https://turn-key.consulting/2022/07/06/psa-diagbox-v783-819-multilanguage/In PDF document text
- https://maisonchaudiere.com/advert/super-street-fighter-iv-arcade-edition-pc-hot-full-oyun-indir/In PDF document text
- https://mapasconceptuales.online/powerdvd-12-ultra-portable-_best_/In PDF document text
- https://demo.takewp.com/listing/tpg-explore/advert/nero-backitup-2018-19-2-1-56-crack-serial-number-download-link/In PDF document text
- https://www.loolooherbal.in/wp-content/uploads/2022/07/mousehunt_in_punjabi_full_movie_download.pdfIn PDF document text
- https://www.mil-spec-industries.com/system/files/webform/IDM-609-Build-2-Final-Full-Preactivated-Version-JaY-SDMR.pdfIn PDF document text
- https://ecop.pk/conflict-denied-ops-no-cd-crack-download-better/In PDF document text
- https://ameeni.com/upload/files/2022/07/s1tyFgu2Sqc1TRoYSzO4_06_6e8326bc360f9fa8cfd553bc67d3a310_file.pdfIn PDF document text
- https://wocfolx.com/upload/files/2022/07/aMPiWT6RVjW6oxh1mija_06_cc37de92ff24536ff52130d90dc6e2b3_file.pdfIn PDF document text
- https://social.mactan.com.br/upload/files/2022/07/1McF19oliqlPkKKqeJiP_06_c88c65c8b4373a821a4dc7d770ae4705_file.pdfIn PDF document text
- https://togetherwearegrand.com/elder-scrolls-v-skyrim-language-pack-english-archivo-mantenimient-exclusive/In PDF document text
- https://terapeutas.shop/wp-content/uploads/2022/07/HD_Online_Player_True_HDIn PDF document text
- https://www.tailormade-logistics.com/sites/default/files/webform/dota-In PDF document text
- https://fabbyhouse.com/2022/07/06/antares-autotune-evo-vst-rtas-v6-0-9-proper-In PDF document text
- http://steamworksedmonton.com/american-truck-simulator-In PDF document text
- https://mycoopmed.net/sniperghostwarrior2multiplayermapsexclusive-In PDF document text
- https://www.cutlerbay-fl.gov/system/files/webform/bandung-lautan-asmara-adi-In PDF document text
- https://maisonchaudiere.com/advert/super-street-fighter-iv-arcade-edition-pc-hot-In PDF document text
- https://demo.takewp.com/listing/tpg-explore/advert/nero-In PDF document text
- https://www.loolooherbal.in/wp-In PDF document text
- https://www.mil-spec-industries.com/system/files/webform/IDM-609-Build-2-Final-In PDF document text
- https://ameeni.com/upload/files/2022/07/s1tyFgu2Sqc1TRoYSzO4_06_6e8326bc3In PDF document text
- https://wocfolx.com/upload/files/2022/07/aMPiWT6RVjW6oxh1mija_06_cc37de92fIn PDF document text
- https://social.mactan.com.br/upload/files/2022/07/1McF19oliqlPkKKqeJiP_06_c88In PDF document text
- https://togetherwearegrand.com/elder-scrolls-v-skyrim-language-pack-english-In PDF document text
- http://xtraserp.com/zg93bmxvywr8swuwyudrmmriedhnvfkxtnpbmk56rtfoshg4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbda/kooning?externship&fumigants=temperaments&vino=vwx0aw1hdgugtw9ydgfsietvbwjhdcaziehhy2sgrwrpdglvbiboewmvwxIn PDF document text
- https://emealjobs.nttdata.com/it/system/files/webform/shinobi-girl-185-cheat-codes.pdfIn PDF document text
- https://wakelet.com/wake/_9BqCKj619ayo7mUtfJ-OIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- https://emealjobs.nttdata.com/it/system/files/webform/shinobi-girl-185-cheat-In PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign:
secureserver.net
1471 samples
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off000046aa.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x46AA | 87352 bytes |
SHA-256: 367d255a7fd7e6773f87e9bfa71d8e785341f6f9852154a6be9c08307deffb83 |
|||
font_01_sfnt_off0000d68f.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xD68F | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.