PDF static analysis report

Static analysis result for SHA-256 c31a4f2b63f0f6fb…

SUSPICIOUS

PDF

81.8 KB Created: 2018-06-11 08:15:35 -04:00 Authoring application: wkhtmltopdf 0.12.4 (via Qt 4.8.7) First seen: 2020-09-24
MD5: 0185c8df8d6a7e4b715d5635f243323e SHA-1: 459c19a75c8e08e181707b88f565acb3d06c18d3 SHA-256: c31a4f2b63f0f6fbfa6dec7f94b007cd6b5f76c19f0e8a92834d8783d005f9b4
40 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0863

Heuristics 3

  • PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARM
    PDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://uncpbisdegree.com/download3.php?q=the-science-of-sustainable-development-local-livelihoods-and-the-global-environment.pdf In PDF document text
    • http://uncpbisdegree.com/download4.php?q=the-science-of-sustainable-development-local-livelihoods-and-the-global-environment.pdfIn PDF document text
    • http://kccnet.de/the/science/the_science_of_sustainable_development_local_livelihoods_and_the_global_environment.pdfIn PDF document text
    • http://www.36kmetal.com/online/the-science-of-sustainable-development-local-livelihoods-and-the-global-environment.pdfIn PDF document text
    • http://theincredibleindexer.com/reads-online/the-science-of-sustainable-development-local-livelihoods-and-the-global-environment.pdfIn PDF document text
    • http://www.daanutsavfellow.org/sc/of/science-of-sustainable-development-local-livelihoods-and-the-global-environment.pdfIn PDF document text
    • http://nade2017okc.com/reads-online/the-science-of-sustainable-development-local-livelihoods-and-the-global-environment.pdfIn PDF document text
    • http://selenga.tv/reads-online/the-science-of-sustainable-development-local-livelihoods-and-the-global-environment.pdfIn PDF document text
    • http://riverside-resort.net/1/worksheet-dihybrid-cross-answers.pdfIn PDF document text
    • http://uncpbisdegree.com/1/the-gargoyle.pdfIn PDF document text
    • http://uncpbisdegree.com/1/suzuki-df-50-wiring-diagram.pdfIn PDF document text
    • http://uncpbisdegree.com/1/symbols-of-transformation-collected-works-5-cg-jung.pdfIn PDF document text
    • http://uncpbisdegree.com/1/service-manual-onan-generator-hdkaj-11451.pdfIn PDF document text
    • http://uncpbisdegree.com/1/the-architects.pdfIn PDF document text
    • http://uncpbisdegree.com/1/suzuki-guitar-book-8.pdfIn PDF document text
    • http://riverside-resort.net/1/up-ending-tad-bundle-volumes-1-2-3-up-ending-tad-a-journey-of-erotic-discovery.pdfIn PDF document text
    • http://riverside-resort.net/1/ungentle-shakespeare-scenes-from-his-life.pdfIn PDF document text
    • http://riverside-resort.net/1/warriners-grammar-answer-key.pdfIn PDF document text
    • http://www.ascendercorp.com/In PDF document text
    • http://www.ascendercorp.com/typedesigners.htmlIn PDF document text
    • https://www.goodreads.com/book/show/1122014.The_Science_of_Sustainable_DevelopmentIn PDF document text
    • http://assets.cambridge.org/97805218/27287/frontmatter/9780521827287_frontmatter.pdfIn PDF document text
    • http://www.goodreads.com/work/editions/1109096-the-science-of-sustainable-development-local-livelihoods-and-the-globalIn PDF document text
    • https://www.ecologyandsociety.org/vol10/iss2/art21/ES-2005-1612.pdfIn PDF document text
    • https://www.abebooks.com/book-search/isbn/0521534569/In PDF document text
    • https://www.gov.uk/dfid-research-outputs/the-science-of-sustainable-development-local-livelihoods-and-the-global-environmentIn PDF document text
    • http://go.microsoft.com/fwlink/?LinkID=617350In PDF document text
    • http://go.microsoft.com/fwlink/?LinkId=521839&CLCID=0409In PDF document text
    • http://go.microsoft.com/fwlink/?LinkID=246338&CLCID=0409In PDF document text
    • https://go.microsoft.com/fwlink/?linkid=868922In PDF document text
    • http://go.microsoft.com/fwlink/?LinkID=286759&CLCID=409In PDF document text
    • http://go.microsoft.com/fwlink/?LinkID=617297In PDF document text
    • https://www.goodreads.com/book/show/1122014.The_Science_ofIn PDF document text
    • https://www.abebooks.com/book-search/isbn/0521534569In PDF document text
    • https://www.gov.uk/dfid-research-outputs/the-science-ofIn PDF document text
    • https://41023672.r.bat.bing.com/?ld=d38li285WYorsN67RGzbGd6jVUCUzpwdFln_LLusZm8EJlBZu-BhgkmTA1bGxqIRMWssVqCvdX6H68Di5fJoFnni8aGWkOzOVxo8ZGksf3vFYndihtwL8mgbSLCgjeYaFe0JAgNbDHqqPfRPJG5xrYOILUUItamMTc3FPdaXA0NXcG9ku1&u=http%3a%2f%2ftracker.marinsm.com%2frd%3fcid%3dsnl9t30fh0%26lp%3dhttps%3a%2f%2fwww.thriftbooks.com%2fw%2fthe-science-of-sustainable-development-local-livelihoods-and-the-global-environment-biological-conservation-restoration--sustainability_jeffrey-sayer%2f2925391%2f%3fisbn%3d0521534569%26idiq%3d10604696%2526mkwid%253D7iRpvLeX%257Cdc%2526pcrid%253D11558858262%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3dBing%2520Shopping%2520%257C%2520Business%2520%2526%2520Investing%26utm_term%3d1101002859890%26utm_content%3dBusiness%2520%2526%2520InvestingIn PDF document text
    • https://0.r.bat.bing.com/?ld=d3A_boYYZzwmF2W9FurNzXjzVUCUwBiIkwtFi_j3zky70B9Qjm2Kh53k9s6OxlBPfzc8XcKnlKQXi03tqLb0DE-tJ4j1S8F4PDPczRjbLJZxZIu2U4rqXfWqUSot9YVRt0bIfZQuhSty0fIMeZT4JTqpupH-AMd6IduwcWrXLFEcMVKkS4&u=http%3a%2f%2f5022.xg4ken.com%2ftrk%2fv1%3fprof%3d3%26camp%3d13622470%26affcode%3dpg208095%26kct%3dmsn%26kchid%3d1055003%26cid%3d77034579477404%26kdv%3dc%26kpid%3d9780521534567%26criteriaid%3dpla-4580634162243772%26queryStr%3dthe%2520science%2520of%2520sustainable%2520development%2520local%2520livelihoods%2520and%2520the%2520global%2520environment%26adgroupid%3d1232552628909191%26campaignid%3d279358634%26locphy%3d%26url%3dhttps%3a%2f%2fwww.barnesandnoble.com%2fw%2fthe-science-of-sustainable-development-bruce-campbell%2f1124424070%3fean%3d9780521534567%26pcta%3dn%26st%3dPLA%26sid%3dBNB_DRS_New%2bCore%2bShopping%2bTextbooks_00000000%262sid%3dBing_e%26sourceId%3dPLBiP208095%26msclkid%3d%7bmsclkid%7dIn PDF document text
    • https://152021708.r.bat.bing.com/?ld=d3qUbqjHCyPNqJSuN_dWfY_zVUCUw4BdaFmFvrI3oHhtjBN3XGh_ySyJhvNKwCAR1Mj7xWz30JgCmb_OXgP1J69bHadkiWq0zZjGV-RIzYA93xDnmc9EyXgyb9AxsgJ2tCFTiEHt5DP5_3nqvwGGoOzVMP3GQjAu-SpMQIr__Jz8rFVE4s&u=http%3a%2f%2f9.xg4ken.com%2ftrk%2fv1%3fprof%3d691%26camp%3d62049%26affcode%3dpg958%26kct%3dmsn%26kchid%3d152021708%26cid%3d77927903958191%26kdv%3dc%26kpid%3d9780521827287%26criteriaid%3dpla-4581527514496082%26queryStr%3dthe%2520science%2520of%2520sustainable%2520development%2520local%2520livelihoods%2520and%2520the%2520global%2520environment%26adgroupid%3d1246846257539428%26campaignid%3d283174809%26url%3dhttps%3a%2f%2fwww.betterworldbooks.com%2fproduct%2fdetail%2fthe-science-of-sustainable-development-0521827280%3futm_medium%3donr_paidshopping%26utm_source%3dgoogleIn PDF document text
    • https://3184402.r.bat.bing.com/?ld=d3zVDr_zlnPNxE4xCKWiHK3TVUCUwt1mQWyxJfNHJBPXBM-4MwHLaG6h50cOJfYV-ASeRE32_7dIc4tKEcAjzULnGDtLpl2ldYpRKO2LWhpTLeRPSZuBUhGZGUfWmHgsV3kEFqvPwEnpE8dKZDo6U5IgeyaMl0ZvZPX0ufniV1gQT99Mzf&u=https%3a%2f%2frover.ebay.com%2frover%2f1%2f711-213727-13078-0%2f2%3fmpre%3dhttp%253A%252F%252Fwww.ebay.com%252Fitm%252Flike%252F253657621983%26itemid%3d253657621983%26targetid%3d4580771600742907%26device%3dc%26adtype%3d%7badtype%7d%26googleloc%3d%26poi%3d%26campaignid%3d301076558%26adgroupid%3d1234751645528905%26rlsatarget%3dpla-4580771600742907%26abcId%3d1129776%26merchantid%3d51291%26query%3dthe%2520science%2520of%2520sustainable%2520development%2520local%2520livelihoods%2520and%2520the%2520global%2520environmentIn PDF document text
    • https://136004211.r.bat.bing.com/?ld=d3AYM2RK7w_eydNgpICT_ExzVUCUxkWpnuBQRpZ-YMyxw0HR77i_v-fMDQB9og1dh5xgTiRIQM_jAIG_SvQo36jnKMLFT-dXZ7x9WybQxzqwoPzfPpKu4m2hkP0Yp_yd3MZ2KUFTuN3xTe-T4rb9ATcWvA1I5TtIy9Z3FrCXMdpRR4V7nc&u=http%3a%2f%2fpixel.everesttech.net%2f430%2fcq%3fev_sid%3d10%26ev_ltx%3d%26ev_lx%3dkwd-72430505614105%3aloc-190%26ev_crx%3d72430366964382%26ev_mt%3dp%26ev_dvc%3dc%26ev_phy%3d79982%26ev_loc%3d%26ev_cx%3d331157396%26ev_ax%3d1158885422158836%26ev_ex%3d%26url%3dhttps%253A%252F%252Fcontent.ubs.com%252Fmicrosites%252Ftogether%252Fen%252Fspotlight%252Fsustainable-investing.htmlIn PDF document text
    • https://fedoraproject.org/wiki/Licensing/LiberationFontLicenseIn PDF document text

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off0000ec78.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xEC78 14488 bytes
SHA-256: e59546c6b2a543c80e42929bd14a1c48d5de5d615761d0fa9820b6c1e590fb9c
font_01_sfnt_off000118b6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x118B6 10612 bytes
SHA-256: 9a7cd612cf81a360927b29dd27d1dbc5fad4b547431857849eeba8b99749ef6d