MALICIOUS
130
Risk Score
Malware Insights
MITRE ATT&CK
T1203 Exploitation for Client Execution
The PDF file was flagged as malicious by a machine learning classifier and ClamAV, specifically detected as Win.Exploit.Fnstenv_mov-1. A launch action heuristic indicates the PDF is configured to execute an embedded exploit, likely targeting a known vulnerability in PDF rendering engines.
Machine Learning
- Nyx PDF Classifier malicious score 0.9999
Heuristics 2
-
ClamAV: Win.Exploit.Fnstenv_mov-1 critical CLAMAV_DETECTIONClamAV detected this file as malware: Win.Exploit.Fnstenv_mov-1
-
Launch action high PDF_LAUNCHPDF contains a /Launch action with an unresolved or extension-less target — treat as potentially dangerous
Open this report in the interactive analyzer, or submit your own file for analysis.