PDF static analysis report

Heuristics 3

• Clickable URI points to raw IP address medium PDF_URI_IP_LITERAL
  PDF contains a clickable HTTP(S) action whose host is a literal IPv4 address. Legitimate documents normally link to named domains; raw-IP destinations are common in disposable phishing and malware-delivery infrastructure.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://www.laureati.cz/perhapsorganize/vol_i_GkGfuiwJdJnwlYmGxsJ_c16367065Gh.pdf PDF link annotation

  • http://79.172.211.32/mail/wwmraYkrYkdhkfssifcnoQcYnmQri16357451lc_.pdfPDF link annotation
  • http://thestoveinstallationcompany.co.uk/historydepartment/l_hlJmPJ_euhw16349833Q.pdfIn PDF document text
  • http://www.laureati.cz/perhapsorganize/cb_mwaQuwaxcwwvYbxftmto16358235t.pdfIn PDF document text
  • http://79.172.211.32/mail/YzxszieznPbhv16366217eb_Q.pdfIn PDF document text
  • http://www.laureati.cz/perhapsorganize/Jvxlmesozfixi_h_mYYmiduGcdPQz_16367033JP.pdfIn PDF document text
  • http://www.laureati.cz/perhapsorganize/xtaaYksrox16358397v.pdfIn PDF document text
  • http://79.172.211.32/mail/tJlazGPwJfdkdrrwYiibt16357679dowi.pdfIn PDF document text
  • http://79.172.211.32/mail/JrQhfocQt16357415xu.pdfIn PDF document text
  • http://www.alistatrans.ru/bbs/ieYaxxokhYsictnxhPd16354985t_zY.pdfIn PDF document text
  • http://www.laureati.cz/perhapsorganize/ordvboQaGvvmfJbzizleewizxum_wd16359118Qov.pdfIn PDF document text
  • http://thestoveinstallationcompany.co.uk/historydepartment/hhe16349567ouf.pdfIn PDF document text
  • http://thestoveinstallationcompany.co.uk/historydepartment/ckzmr_eoskaetsbfQQkGYkz16349986dmo.pdfIn PDF document text
  • http://79.172.211.32/mail/wrtod_azwQsdohlmhYGleufxrx16357637o.pdfIn PDF document text
  • http://www.laureati.cz/perhapsorganize/PnkPahkPaxttQPneontQGiowum_Yn16358329PacP.pdfIn PDF document text
  • http://www.laureati.cz/perhapsorganize/zmkkbbhG_PtYmswxPsch16359005znsm.pdfIn PDF document text
  • http://www.laureati.cz/perhapsorganize/_Jnskk16358762o.pdfIn PDF document text
  • http://thestoveinstallationcompany.co.uk/historydepartment/wQ_aPdfxnn_chJxJa16349717ks.pdfIn PDF document text
  • http://www.alistatrans.ru/bbs/JGoacrowtifskbGrsdh16363962da.pdfIn PDF document text
  • http://79.172.211.32/mail/neachfdrilzdPrlGJdxvkdslJcesa16366236wYxn.pdfIn PDF document text
  • http://79.172.211.32/mail/_Pm16357771bJa.pdfIn PDF document text
  • http://www.alistatrans.ru/bbs/uoQJziwhobvszPQtcJnnsQs16364004nfdi.pdfIn PDF document text
  • http://thestoveinstallationcompany.co.uk/historydepartment/hduPmJmdsPmPizsGuzzcu16350110o.pdfIn PDF document text
  • http://79.172.211.32/mail/dmx_GosQ16357887wb.pdfIn PDF document text
  • http://www.alistatrans.ru/bbs/fQkYexiht16354279hsft.pdfIn PDF document text
  • http://79.172.211.32/mail/nnhwwzcP16357411utn.pdfIn PDF document text
  • http://www.alistatrans.ru/bbs/_QkaferibGJGJ_u_nQ_u16363960erlv.pdfIn PDF document text
  • http://www.laureati.cz/perhapsorganize/_nvsYuQilbdcocGnlhz_zPuPtatf16359132zmhx.pdfIn PDF document text
  • http://thestoveinstallationcompany.co.uk/historydepartment/hr_iQ_16350089b.pdfIn PDF document text
  • http://www.alistatrans.ru/bbs/vcnaYurusmeYmbYlxzfQwxssd16354224_ldb.pdfIn PDF document text
  • http://thestoveinstallationcompany.co.uk/historydepartment/cc_16350104Qtm.pdfIn PDF document text
  • http://thestoveinstallationcompany.co.uk/historydepartment/zQ_wfGbte16349412sm.pdfIn PDF document text
  • http://79.172.211.32/mail/kwznolshmomrkiGssJQvnlstdei_at16357696ccl.pdfIn PDF document text
  • http://forweb.ru/UserFiles/pdfs.php/oGttnursffumvaxiheJo_iem_oYtr12690914k.pdfIn PDF document text
  • http://www.masterdea.it/mobile/irfmYkbfd_xikuldczhf15198100wmb.pdfIn PDF document text
  • http://www.masterdea.it/mobile/voeadfxkouilhazinxn_15163306ezQ.pdfIn PDF document text
  • http://blog.creative-dots.com/mobile/ikrkPi16270618eQdx.pdfIn PDF document text
  • http://www.masterdea.it/mobile/dzlfGbllwQnPmbamsfrbvxPu15133326uzvz.pdfIn PDF document text
  • http://thestoveinstallationcompany.co.uk/historydepartment/fko_umuPszk16349841hht.pdfIn PDF document text
  • http://79.172.211.32/mail/szo16366347nfc.pdfIn PDF document text
  • http://79.172.211.32/mail/oYabmxYbwo16357880J.pdfIn PDF document text
  • http://thestoveinstallationcompany.co.uk/historydepartment/d_vGoPJ_zbnrGcfwfhrkczx16349756t.pdfIn PDF document text
  • http://thestoveinstallationcompany.co.uk/historydepartment/bGubtvernJxl16350063fw.pdfIn PDF document text
  • http://www.alistatrans.ru/bbs/nxklfibtebwtQbwomslQ16354616ms.pdfIn PDF document text
  • http://thestoveinstallationcompany.co.uk/historydepartment/GfamlGwsbYofhnYiJ16349784zbPx.pdfIn PDF document text
  • http://www.alistatrans.ru/bbs/shnkanx_Ptnokh_ozQ16354195_Qe_.pdfIn PDF document text
  • http://thestoveinstallationcompany.co.uk/historydepartment/c_lQzxvfGtbQrlm16349809YvQk.pdfIn PDF document text
  • http://79.172.211.32/mail/_c_mYrexkoJkc16358170tQkk.pdfIn PDF document text
  • http://thestoveinstallationcompany.co.uk/historydepartment/iffmeoPwnvbGJQzcQdPelruPoidfkn16349416mc.pdfIn PDF document text
  • http://www.alistatrans.ru/bbs/lGdwr_tbfhcthrrh16354473odd.pdfIn PDF document text

  +26 more URL(s)

Open this report in the interactive analyzer, or submit your own file for analysis.