MALICIOUS
130
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
The file is a PDF document flagged by ClamAV as Win.Exploit.Fnstenv_mov-1, indicating it likely exploits a known vulnerability. The PDF_LAUNCH heuristic further confirms the presence of an embedded action designed to trigger an exploit. The ML classifier also strongly indicates maliciousness. No document body text or scripts were extracted, but the exploit detection is sufficient for a high-confidence assessment.
Machine Learning
- Nyx PDF Classifier malicious score 0.9999
Heuristics 2
-
ClamAV: Win.Exploit.Fnstenv_mov-1 critical CLAMAV_DETECTIONClamAV detected this file as malware: Win.Exploit.Fnstenv_mov-1
-
Launch action high PDF_LAUNCHPDF contains a /Launch action with an unresolved or extension-less target — treat as potentially dangerous
Open this report in the interactive analyzer, or submit your own file for analysis.