PDF static analysis report

Static analysis result for SHA-256 c6c410c4ca4725ed…

CLEAN

PDF

86.5 KB Created: 2016-12-26 17:46:57 +08:00 First seen: 2018-10-07
MD5: 300ae73c759a876823e094f07a56c147 SHA-1: 1e9d90ea3dacbaedc7f64699aea4bc743ec27489 SHA-256: c6c410c4ca4725ed2af98774abb95ccf4673369ab2cf4d476cf410b7a68e99c1
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0405

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://dubaipropertyrentals.net/pasttax/strongdepartment.php/xafhunG16219466tsc.pdf PDF link annotation
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/_mecm_rzPYb_16218514ovi.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/rlwe16219380hrcz.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/weaaxfnichQ16219348zGYm.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/nQJeesmhklGw16219218i.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/dvbPQbGcP_escwhJoY_kltQax16219443hff.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/Pah_eYxexYPuivz_Y_G16218796t.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/buvodhubthQ_uxQQaYvtetfsshkf16218808a.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/PwwGPmJn16218713no.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/fnzsQiJhiowzJ16219027Yuc.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/aJtixwklunkv_zPvf16218494tcY.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/ifmzeGxtvonznmmdPfkJxke16218619vv.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/oxiYxhQhrlJciPcv_uPJmiYoxiGcns16219347fkz.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/Gxidkxxmbhshk16218680ntG.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/suQnmdok16218584oJ.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/fPrwecvG16218734m.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/QGzswwYlcssYuxYe_h16218993z_.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/mztQrwzredmrrbxetaoGmPb16218806_ww.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/PbkiGokPxbmendrrQQexv16219316tlw.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/cbfoQ16219190l.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/mr_aGsxbGaYuwtQxrdkosccY16218725Qm.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/besccztPxx16219039tYd.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/eYoeQtiv_vJkfQfQxPw16219154Qhuk.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/zwGwrhhuJdeQkfdzvwQ16218565oJG.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/_fwilzcsGxGhYkdkGvt16219197a.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/wGnPedusPkerQbxtxfofkvvbfhv16219399Y.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/zPxePflx_macuGsakQkeYhcmza16219408w.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/nnitYaGnJ_lrnmfPYzbJ16219366itrd.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/GeJoYzY16219318bxQ.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/QxiacrfYnfhmebbcQ16219148lkGv.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/JasaGk_Plca16218531rrbn.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/vwmcnoxmha16219153m.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/_taxzJYlb16218971wG.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/rcwfu_QazvYt16219091Pkzv.pdfIn PDF document text
    • http://healthlink.org.au/departmentclass/oPv_cJfrf_r15623843Jxf_.pdfIn PDF document text
    • http://www.toledano.fr/media/dtfo_mQoYcrnYltilaruoaQol15871182o.pdfIn PDF document text
    • http://healthlink.org.au/departmentclass/sJs15590439cQx.pdfIn PDF document text
    • http://www.toledano.fr/media/ixdbltcQohPofasYatfJevn_G15870618P.pdfIn PDF document text
    • http://www.toledano.fr/media/onsdm_k15871178ssxw.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/oewfdmPctwkeQcwmuvdGmdssdtc16218609tui.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/PazcrzJvhmQz16218558zfJt.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/khxssaitQY16218842z.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/fcsnYzQr16218541rtc.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/ebzQGuks_ubhwuhQsecwhJ16219292k.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/dPdiuuxbkbenG16218602s.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/YbJuP_Qba_vzrmrw16219282r.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/ldcwiJ16219295uezo.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/GQmfbwfnPQhtvv16219147bPh.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/tdfrYvYQYe16218988wk.pdfIn PDF document text
    • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/ahokdzJfrQGuhbrdaYudJzkPmmbca16219000uk.pdfIn PDF document text
    +27 more URL(s)

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_004_off0000b348.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xB348 19856 bytes
SHA-256: a930245e90be17a336a7679d31e9d416ddec66c65020bec75b59b2e2bfc19120
font_01_sfnt_off0000e8da.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xE8DA 19964 bytes
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8
font_02_sfnt_off00011e9f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x11E9F 20828 bytes
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1