MALICIOUS
134
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0032
Heuristics 5
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARMPDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://findinform.com/unnecessary.barnacles?ZG93bmxvYWR8V1Q5TVdabGVubDhmREUyTmpJMk9EQXpPVEI4ZkRJMU9UQjhmQ2hOS1NCWGIzSmtjSEpsYzNNZ1cxaE5URkpRUXlCV01pQlFSRVpk=cyril/gebbie/comsume.M2QgT2JqZWN0IENvbnZlcnRlciA0LjQwIENyYWNrM2Q.kris.stressors PDF link annotation
- https://vegetarentusiast.no/wp-content/uploads/2022/09/Diagbox_Citroen_Download_Funzionante_Torrent_Extra_Quality.pdfIn PDF document text
- https://www.touchegraphik.com/wp-content/uploads/2022/09/Xforce_Keygen_AutoCAD_Mechanical_2015_64_Bit_Free_Download_LINK.pdfIn PDF document text
- https://vitrineenligne.com/wp-content/uploads/2022/09/hwk_update_client_v_2090.pdfIn PDF document text
- https://vendredeslivres.com/wp-content/uploads/2022/09/driver_san_francisco_multiplayer_crack_pcgolkes.pdfIn PDF document text
- https://descargatelo.net/wp-content/uploads/2022/09/xforce_keygen_64bit_Inventor_Professional_2019_portable.pdfIn PDF document text
- http://www.sataal.com/wp-content/uploads/2022/09/Ucancam_V9_Dongle_Crack_Torrent.pdfIn PDF document text
- https://talentoazul.cl/wp-content/uploads/2022/09/ZylomGamesUniversalPatcherv30_16.pdfIn PDF document text
- https://buri.site/wp-content/uploads/2022/09/Hate_Story_IV_4_Movie_Download_720p_Hd_CRACKED.pdfIn PDF document text
- https://www.reptisell.com/adobe-tam-core-repack-keygen-rar-download/In PDF document text
- https://besttoolguide.com/2022/09/12/new-download-men-in-black-3-in-hindi-hd/In PDF document text
- https://www.dancesocksbcn.com/advert/free-exclusive-download-ebook-kimia-dasar-raymond-chang/In PDF document text
- https://earthoceanandairtravel.com/wp-content/uploads/2022/09/osbufryd.pdfIn PDF document text
- http://www.giffa.ru/who/idm-6-36-build-7-crack-download-here-fixed/In PDF document text
- https://xn--80aagyardii6h.xn--p1ai/dr15r22-7n8alzw-ut4562r-shcazqn-activation-code/In PDF document text
- https://www.unitedartistsofdetroit.org/wp-content/uploads/2022/09/harlqui.pdfIn PDF document text
- https://chronicpadres.com/free-download-inventor-2012-crack-keygen-2021/In PDF document text
- http://indiebonusstage.com/logiciel-de-piratage-facebook-hack-v-62-gratuit/In PDF document text
- https://brandyallen.com/2022/09/12/hyperworks-v11-32-bit-new-crack-full-software-download/In PDF document text
- http://www.bowroll.net/mss32-dll-with-ail-set-stream-volume-8-rar-exe-better/In PDF document text
- https://lapa.lv/trans-siberian-railway-simulator-crack-top-serial-key/In PDF document text
- https://vegetarentusiast.no/wp-In PDF document text
- https://www.touchegraphik.com/wp-content/uploads/2022/09/Xforce_Keygen_AutoCAD_Mechanical_2In PDF document text
- https://vendredeslivres.com/wp-In PDF document text
- https://descargatelo.net/wp-In PDF document text
- https://buri.site/wp-In PDF document text
- http://findinform.com/unnecessary.barnacles?zg93bmxvywr8v1q5tvdabgvubdhmreuytmpjmk9eqxppvei4zkrjmu9uqjhmq2hos1ncwgizsmtjsepsyznnz1cxae5urkpruxlcv01pqlfsrvpk=cyril/gebbie/comsume.m2qgt2jqzwn0ienvbnzlcnrlcia0ljqwienyywnrm2q.kris.stressorsIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00001d19.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x1D19 | 84704 bytes |
SHA-256: 864a9502ff763264058b169e2f00c6f0dd176c0d5dc944c52e73ce99f4852e3f |
|||
font_01_sfnt_off0000a55a.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xA55A | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.