MALICIOUS
64
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0025
Heuristics 3
-
Viral-video clickbait PDF links to suspicious host critical SE_VIRAL_VIDEO_CLICKBAIT_LINKDocument uses viral/leaked-video lure text and links to a suspicious disposable-looking web host. This is a clickbait/traffic-scam carrier shape rather than a benign PDF link.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://wanoengineeringsystems.com/airlive-campro-hd-��������������-������������������- PDF link annotation
- http://fumostoppista.com/?p=30389PDF link annotation
- http://cyclades.in/en/?p=62611PDF link annotation
- http://www.giffa.ru/societyrelationships/imagenator-with-key-skachat-besplatno-2022/PDF link annotation
- https://kalapor.com/pazera-free-video-to-3gp-converter-activation-code-with-keygen-PDF link annotation
- https://travellist.xyz/wp-content/uploads/2022/06/harwala.pdfPDF link annotation
- https://wo.barataa.com/upload/files/2022/06/v5WlLoTOI4ZfPAJlLhfz_15_16e26c3e147d2PDF link annotation
- https://myirishconnections.com/2022/06/15/PDF link annotation
- http://naasfilms.com/disklight-net-full-version-��������������-������������������-������-������������������/PDF link annotation
- https://www.americanchillpodcast.com/upload/files/2022/06/3IO2TS7yCWdMeeuFjNaz_1PDF link annotation
- https://vogblog.wales/wp-content/uploads/2022/06/Iparmor.pdfPDF link annotation
- https://germanconcept.com/spinwaves-��������-lifetime-activation-code-��������������-������������������-PDF link annotation
- https://b-labafrica.net/cross-section-analysis-design-��������-��������������-������������������/PDF link annotation
- https://worldtradeoptions.com/wp-PDF link annotation
- https://futurestrongacademy.com/wp-content/uploads/2022/06/PostSharp.pdfPDF link annotation
- https://www.coolshakers.com/wp-content/uploads/2022/06/KastorDSP_Source_Client.pdfPDF link annotation
- http://villa-mette.com/?p=22247PDF link annotation
- http://sturgeonlakedev.ca/wp-PDF link annotation
- https://thecryptobee.com/text-2-folders-incl-product-key-��������������-������������������/PDF link annotation
- https://isroifiscaimit.wixsite.com/danchoedaba/post/coverme-������������������-��������������-PDF link annotation
- http://www.w3.org/1999/02/22-rdf-syntax-ns#PDF link annotation
- http://purl.org/dc/elements/1.1/PDF link annotation
- http://ns.adobe.com/xap/1.0/PDF link annotation
- http://ns.adobe.com/pdf/1.3/PDF link annotation
- http://ns.adobe.com/xap/1.0/mm/PDF link annotation
- http://www.aiim.org/pdfa/ns/extension/PDF link annotation
- http://www.aiim.org/pdfa/ns/schema#PDF link annotation
- http://www.aiim.org/pdfa/ns/property#PDF link annotation
- http://www.aiim.org/pdfa/ns/id/PDF link annotation
🗂 Part of campaign:
secureserver.net
1471 samples
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_014_off00007e1a.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x7E1A | 129164 bytes |
SHA-256: 30aa1bb611a9ad2d1098c54a467cfc5afa6a3feb54a418f331761fe2b0c3620e |
|||
font_01_sfnt_off00014039.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x14039 | 80540 bytes |
SHA-256: d973aa30be4fe9047ecb27f8076e5c78f9d696bfa7e007b9dddef6d3ce443ddc |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.