MALICIOUS
94
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0006
Heuristics 4
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://evacdir.com/availing/frigidaire.hannover?saintliest=ZG93bmxvYWR8UkQ1TldjMWVueDhNVFkxTlRNek9Ua3dOSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA.U29jaW9sb2d5IFRoZW1lcyBBbmQgUGVyc3BlY3RpdmVzIChIYXJhbGFtYm9zIEFuZCBIb2xib3JuKSBNaWNoYWVsIEhhcmFsYW1ib3MuZXB1YgU29.legitimatly&thessaly=slurry PDF link annotation
- https://favs.favelas.top/upload/files/2022/06/It1TXnJUTuG2t2awVJvm_16_f1d6f1832af84d0f3b46ec570d77aa95_file.pdfIn PDF document text
- http://antiquesanddecor.org/?p=14816In PDF document text
- https://atennis.kz/tour/upload/files/2022/06/8BKGFz5ILUged9jL6Imi_16_f1d6f1832af84d0f3b46ec570d77aa95_file.pdfIn PDF document text
- http://nmcb4reunion.info/wp-content/uploads/2022/06/DFX_Audio_Enhancer_12011_Crack_En_US_Final_Nov2015_Seven7i.pdfIn PDF document text
- http://sportweb.club/?p=9834In PDF document text
- https://elektrobest.de/wp-content/uploads/2022/06/Supernatural_Stagione_1_Download_Ita.pdfIn PDF document text
- https://blackmtb.com/wp-content/uploads/2022/06/Anonymous_Ddos_Tools_2013.pdfIn PDF document text
- https://damariuslovezanime.com/wp-content/uploads/2022/06/aloioru.pdfIn PDF document text
- http://antonovka-amur.ru/sites/default/files/webform/feedback/ex4tomq4decompiler403921.pdfIn PDF document text
- http://www.bowroll.net/advanced-find-and-replace-7-8-1-patched-cracked/In PDF document text
- https://cosmonet.club/upload/files/2022/06/29Cl4365Ztm4PSU8FXMF_16_2d068f748e24ccf0aa633ca08fc99355_file.pdfIn PDF document text
- https://shopdurhamnc.com/wp-content/uploads/2022/06/chacole.pdfIn PDF document text
- https://robertasabbatini.com/wp-content/uploads/2022/06/Easy_Boost_Photo_Print_Crack.pdfIn PDF document text
- http://buymecoffee.co/?p=23624In PDF document text
- https://ilpn.ca/2022/06/16/kolambasanniyasinhalamoviefreedownload-work/In PDF document text
- https://aajkaviral.com/wp-content/uploads/2022/06/Vw_T3_Reparaturanleitung_Pdf_Download_PATCHED.pdfIn PDF document text
- https://community.soulmateng.net/upload/files/2022/06/boqqChftP4uSknsRcLR6_16_f1d6f1832af84d0f3b46ec570d77aa95_file.pdfIn PDF document text
- http://ifurnit.ir/2022/06/16/descargar-libro-fisiologia-dinamica-de-a-cordova-better/In PDF document text
- http://www.giffa.ru/businessentrepreneurs/blood-diamond-hot-download-1080p-23/In PDF document text
- https://favs.favelas.top/upload/files/2022/06/It1TXnJUTuG2t2awVJvm_16_f1d6f1832af84d0f3b46ec570d77aa95_In PDF document text
- https://atennis.kz/tour/upload/files/2022/06/8BKGFz5ILUged9jL6Imi_16_f1d6f1832af84d0f3b46ec570d77aa95_fIn PDF document text
- http://nmcb4reunion.info/wp-In PDF document text
- https://cosmonet.club/upload/files/2022/06/29Cl4365Ztm4PSU8FXMF_16_2d068f748e24ccf0aa633ca08fc99355_In PDF document text
- https://community.soulmateng.net/upload/files/2022/06/boqqChftP4uSknsRcLR6_16_f1d6f1832af84d0f3b46ec57In PDF document text
- http://nmcb4reunion.info/wp-content/uploads/2022/06/dfx_audio_enhancer_12011_crack_en_us_final_nov2015_seven7i.pdfIn PDF document text
- https://blescartioriweb.wixsite.com/mistwoodtherfji/post/free-download-information-theory-coding-j-s-chitode-221In PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_009_off000031c6.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x31C6 | 120140 bytes |
SHA-256: a217f12862e0ff75203bdd4136ca0d68471050be46bb09aed5306898926ffdd4 |
|||
font_01_sfnt_off0000dfa9.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xDFA9 | 76772 bytes |
SHA-256: 07ce6fea3c98bf59133021be55ce9147f9c26365efe580a2a4f82130ca697f54 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.