MALICIOUS
134
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0006
Heuristics 5
-
Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LUREPDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
-
Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARMPDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://xtraserp.com/anythingelse/QmlrZUNBRCBQcm8tdG9ycmVudC40MwQml/intercoms.ZG93bmxvYWR8S3U0TkRoeE5ueDhNVFkxTnpFNE5qazFOWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA.lasvegasshows/chronometers.gaffe.schick PDF link annotation
- https://ideaboz.com/wp-content/uploads/2022/07/waltbevl.pdfIn PDF document text
- https://holytrinitybridgeport.org/advert/nokia-6088-usb-driver-download-__link__/In PDF document text
- https://www.easthants.gov.uk/system/files/webform/ralfry988.pdfIn PDF document text
- https://teenmemorywall.com/thrikkodithanam-sachidanandan-mp3-songs-35/In PDF document text
- https://cycloneispinmop.com/robotsoft-mouse-and-keyboard-recorder-v3-1-9-2-incl-keygen-and-p-rar-verified/In PDF document text
- https://margheritapelaschier.com/hotel-courbet-tinto-brass-watch-online-exclusive/In PDF document text
- https://englishskills.org/blog/index.php?entryid=4715In PDF document text
- https://bluesteel.ie/2022/07/07/dlddiscografia320kbps-verified/In PDF document text
- https://www.mountolivetwpnj.org/sites/g/files/vyhlif4736/f/uploads/brochure_mount_olive_10-22.pdfIn PDF document text
- https://fitenvitaalfriesland.nl/wp-content/uploads/2022/07/P90x_Download_Free_Full_Version.pdfIn PDF document text
- http://areaspettacoli.com/wp-content/uploads/marham.pdfIn PDF document text
- https://healthfitstore.com/2022/07/07/siemens-solid-edge-st8-x64-with-activator-rar/In PDF document text
- https://waoop.com/upload/files/2022/07/SvVNL5d6xcR43h8vQUkl_07_0dad0f15ae808a1ceac63231bef86aba_file.pdfIn PDF document text
- http://tutorialspointexamples.com/rpg-crotch-rpg-that-life-the-rural-survival-rpg-185-repackIn PDF document text
- https://livefitstore.in/advert/kunci-jawaban-lks-smp-kelas-7-ips-semester-1/In PDF document text
- https://kaalama.org/upload/files/2022/07/oCzP5ffvB456MPXHKbhU_07_0dad0f15ae808a1ceac63231bef86aba_file.pdfIn PDF document text
- https://progressivehealthcareindia.com/2022/07/07/twoprog-314-new/In PDF document text
- http://archlooks.com/pinnacle-studio-11-bonus-dvd-keygen-crack-verifiedl/In PDF document text
- https://kjvreadersbible.com/shivaay-hd-1080p-movie-download-install/In PDF document text
- http://xtraserp.com/anythingelse/qmlrzunbrcbqcm8tdg9ycmvudc40mwqml/intercoms.zg93bmxvywr8s3u0tkroee5uedhnvfkxtnpfne5qazfowhg4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbda.lasvegasshows/chronometers.gaffe.schickIn PDF document text
- http://snipamle.yolasite.com/resources/SoftMaker-Office-2018-Rev-9230130-Full-Crack-HOT-Portable.pdfIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign:
secureserver.net
1471 samples
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00001fec.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x1FEC | 84648 bytes |
SHA-256: 0b6c48f6a4e931a4572b13bb2af9ad514b0702ea3c747f8534c05d2c57946ed4 |
|||
font_01_sfnt_off0000a84f.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xA84F | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.