SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0042
Heuristics 3
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://mydrugdir.com/U3J2TWFuU3J/luxenbourg.envelopes/lapped/tumour/ZG93bmxvYWR8V3Y1TVRCak1YeDhNVFkzTURnek5ETXdPWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA PDF link annotation
- https://joyme.io/clemconlidzuIn PDF document text
- https://joyme.io/inresygramnoIn PDF document text
- https://jyotienterprises.net/wp-content/uploads/2022/12/OutlookAttachView-Crack-Registration-Code-Free-MacWin.pdfIn PDF document text
- https://lectomania.com/wp-content/uploads/2022/12/HTMLPower-Crack-Free-Download.pdfIn PDF document text
- https://greybirdtakeswing.com/bing-translator-with-product-key-free-download-for-windows/In PDF document text
- https://greenearthcannaceuticals.com/wp-content/uploads/2022/12/cayeli.pdfIn PDF document text
- https://articlebeast.online/windows-double-explorer-free/In PDF document text
- https://www.dominionphone.com/ultra-video-to-ipod-converter-activation-key-win-mac-latest/In PDF document text
- https://www.grenobletrail.fr/wp-content/uploads/2022/12/eirfif.pdfIn PDF document text
- https://www.candipipes.com/wp-content/uploads/2022/12/Cigati-CSV-To-VCard-Converter-Free-License-Key-X64.pdfIn PDF document text
- http://mysleepanddreams.com/?p=25210In PDF document text
- https://revitiq.com/wp-content/uploads/2022/12/Pano2QTVR.pdfIn PDF document text
- https://jyotienterprises.net/wp-content/uploads/2022/12/outlookattachview-crack-registration-code-free-macwin.pdfIn PDF document text
- http://dejavu.sourceforge.netFontsIn PDF document text
- https://reallygoodemails.com/1blanpiempesuIn PDF document text
- https://techplanet.today/post/3d-gay-villa-2-keygen-2021In PDF document text
- https://techplanet.today/post/introduction-to-psychology-morgan-king-pdf-14In PDF document text
- https://tealfeed.com/everblazekeeperofthelostcitiespdf24-exclusive-nc0lhIn PDF document text
- https://techplanet.today/post/eutron-smart-key-dongle-emulator-crack-updIn PDF document text
- http://dejavu.sourceforge.netIn PDF document text
- http://dejavu.sourceforge.net/wiki/index.php/LicenseIn PDF document text
- http://dejavu.sourceforge.net/wiki/index.php/LicenseDejaVuIn PDF document text
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_013_off00005339.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x5339 | 19780 bytes |
SHA-256: 4fa1e1f62893db1504b694ba157ca733dbc9a64fe6775bec7c5c9e8d41f3a745 |
|||
font_01_sfnt_off0000889a.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x889A | 26232 bytes |
SHA-256: c0df537a12dfcc6aeb200640eb8ebede325cee438e52c569781280afe050317e |
|||
font_02_sfnt_off0000bdc6.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBDC6 | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.