MALICIOUS
94
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0009
Heuristics 4
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://signforcover.com/technophile/QWl5eWFhIFdpdGggRW5nbGlzaCBTdWJ0aXRsZXMgRnJlZSBEb3dubG9hZCA3MjBwQWl/?caddies&anagramming=hiscocks&ZG93bmxvYWR8R2M4ZFdScmRIeDhNVFkxT0RJeE9EazROWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA PDF link annotation
- https://mauritiuslistings.com/wp-content/uploads/2022/07/deanalas.pdfIn PDF document text
- https://laplataformacultural.com/wp-content/uploads/2022/07/Almustadrak_Alaa_Alsahihain_Pdf_Download.pdfIn PDF document text
- https://betrayalstories.com/fiat-ecu-scan-362-repack-crack-torrent/In PDF document text
- https://tcgworldwide.org/wp-content/uploads/2022/07/Ffxiv_Repair_Clientl_PORTABLE-1.pdfIn PDF document text
- http://clubonlineusacasino.com/wp-content/uploads/2022/07/porvan.pdfIn PDF document text
- http://www.publicpoetry.net/2022/07/turbo-c-4-5-download-__hot__-for-windows-7-64-bit-freek/In PDF document text
- https://royalbeyouty.com/2022/07/26/internet-hot-download-manager-free-for-lifetime/In PDF document text
- https://iyihabergazetesi.org/wp-content/uploads/2022/07/Adobe_Indesign_CC_2017_Crack_Full_Download.pdfIn PDF document text
- https://lucaslaruffa.com/assassins-creed-unity-gold-edition-v150-maxagent-29/In PDF document text
- https://www.wemoveondemand.com/wp-content/uploads/2022/07/juicioarbitralpatricioaylwinpdfdownload.pdfIn PDF document text
- https://www.gandhishipping.com/wp-content/uploads/2022/07/abrphil.pdfIn PDF document text
- http://stv.az/?p=34331In PDF document text
- https://cleverfashionmedia.com/advert/alien-skin-exposure-5-0-0-687-keygen-extra-quality/In PDF document text
- https://explorerea.com/?p=19402In PDF document text
- https://trinityflix.com/wp-content/uploads/2022/07/coolorus_photoshop_cc_crack_serial.pdfIn PDF document text
- https://www.chimfab.com/download-betwin-windows-7-crackeado-best/In PDF document text
- http://texocommunications.com/mod-helmet-motogp-13-crack-bestinstmanksl/In PDF document text
- https://www.dovesicanta.it/wp-content/uploads/2022/07/Next_Friday_Free_Mp4_Movie_Download.pdfIn PDF document text
- http://shalamonduke.com/?p=75006In PDF document text
- https://cloudxmedia.com/mcdonalds-fairies-dragons-games-patched/In PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00001e64.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x1E64 | 84844 bytes |
SHA-256: 5e9e05b6eeb353bf3e24676eb0ee899eb04df9328c825373a6f528a5c17098eb |
|||
font_01_sfnt_off0000a752.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xA752 | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.