SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0019
Heuristics 3
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://seachtop.com/U2VydmV1ciBEIEFwcGxpY2F0aW9uIFdlYmRldiBDcmFja2wU2V/ZG93bmxvYWR8aXM0Ylc1eFpYeDhNVFkxT0RBd05qWTVPWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/habitants.habitant/hyphenating.swamped PDF link annotation
- http://stroiportal05.ru/advert/scary01-diagbox-7-full/In PDF document text
- https://lavo-easy.ch/wp-content/uploads/2022/07/apprzere.pdfIn PDF document text
- https://www.camptalk.org/blazingtools-perfect-keylogger-remote-edition-v1-93-incl-keygen-full-version-hot/In PDF document text
- https://thecryptowars.com/free-top-keygen-cda-to-mp3-converter-3-3-build-1228-rar/In PDF document text
- https://livefitstore.in/advert/eclipse-ucnv884re-boot-cd/In PDF document text
- https://jyotienterprises.net/wp-content/uploads/2022/07/The_Ghazi_Attack_hd_1080p_movie_torrent_download.pdfIn PDF document text
- https://treatmentmentor.com/wp-content/uploads/2022/07/guitar_pro_6_offline_activation-2.pdfIn PDF document text
- https://elektrobest.de/wp-content/uploads/2022/07/errhana-1.pdfIn PDF document text
- https://homeimproveinc.com/3d-system-shader-model-20-farming-simulator-2011-dowland-better/In PDF document text
- https://aposhop-online.de/2022/07/18/robo-telugu-movie-download-utorrent-repack/In PDF document text
- https://startpointsudan.com/index.php/2022/07/17/official-samsung-galaxy-j4-sm-j400m-ds-stock-rom-free/In PDF document text
- https://ninja-hub.com/studiolinked-��-vocal-runs-2-vsti-aui-win-osx-x86-x64-��-vocal-synthesizer-2021/In PDF document text
- https://womss.com/download-keygen-xforce-for-artcam-2017-download-2021/In PDF document text
- https://cobblerlegends.com/akruti-6-0-crack-2021-free-download/In PDF document text
- https://rocketchanson.com/advert/download-agriya-volume-nulled-php-_verified_/In PDF document text
- https://www.academiahowards.com/wp-content/uploads/2022/07/blaciol.pdfIn PDF document text
- https://ividenokkam.com/ads/advert/mastercam-v9-software-free-download-with-crack-link/In PDF document text
- https://marketmyride.com/bojanke-za-printanje-pdf-free-repack/In PDF document text
- http://yotop.ru/2022/07/18/neufert-nojfert-arhitektonsko-projektovanjesrpsko-izdanje-link/In PDF document text
- https://haitiliberte.com/advert/total-war-rome-ii-rise-of-the-republic-update-v2-4-0-19728-codex-game-link/In PDF document text
- https://www.camptalk.org/blazingtools-perfect-keylogger-remote-edition-v1-93-incl-keygen-full-In PDF document text
- https://jyotienterprises.net/wp-In PDF document text
- https://startpointsudan.com/index.php/2022/07/17/official-samsung-galaxy-j4-sm-j400m-ds-stock-In PDF document text
- https://haitiliberte.com/advert/total-war-rome-ii-rise-of-the-republic-update-v2-4-0-19728-codex-In PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign:
secureserver.net
1471 samples
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0000239d.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x239D | 87876 bytes |
SHA-256: 4f494d5cea3b49b947c51d9655573d11178d1a989d338a264f905a9253f2e835 |
|||
font_01_sfnt_off0000b4dc.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xB4DC | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.