SUSPICIOUS
44
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0026
Heuristics 3
-
ClickFix social engineering attack high SE_CLICKFIXDocument instructs the user to press Win+R or paste a command into a terminal — consistent with ClickFix attacks that bypass macro restrictions by tricking users into running malicious commands directly
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://www.doeaec.org.in/Rajasthem/���o���lelvel In PDF document text
- https://www.nayaseekhon.com/motherboard-kya-hai-hindi/PDF link annotation
- https://www.nayaseekhon.com/ram-kya-hai-hindi/In PDF document text
- https://www.nayaseekhon.com/rom-kya-hai-hindi/In PDF document text
- https://www.nayaseekhon.com/hard-disk-kya-hai-hindi/In PDF document text
- https://www.nayaseekhon.com/smps-kya-hai/In PDF document text
- https://www.nayaseekhon.com/what-is-mouse-hindi/In PDF document text
- https://www.nayaseekhon.com/computer-keyboard-kya-hai-hindi/In PDF document text
- https://www.nayaseekhon.com/printer-kya-hai-hindi/In PDF document text
- https://www.nayaseekhon.com/ups-kya-hai-hindi/In PDF document text
- https://www.nayaseekhon.com/output-device-kya-hai-hindi/In PDF document text
- https://www.nayaseekhon.com/primary-memory-kya-hai/In PDF document text
- https://www.nayaseekhon.com/cache-memory-kya-hai-hindi/In PDF document text
- https://www.nayaseekhon.com/secondary-memory-kya-hai-hindi/In PDF document text
- https://www.nayaseekhon.com/cpu-kya-hai-hindi/In PDF document text
- https://www.nayaseekhon.com/solid-state-drive-ssd-hindi/In PDF document text
- https://www.nayaseekhon.com/monitor-kya-hai-hindi/In PDF document text
- https://hinditechacademy.com/wp-content/uploads/2018/08/cisco-2960-switch-1.jpgIn PDF document text
- https://hindime.net/wiki/hardware/In PDF document text
- https://hindime.net/wiki/office/In PDF document text
- https://hindime.net/network-kya-hai-hindi/In PDF document text
- https://hindime.net/ipv4-vs-ipv6-kya-hai/In PDF document text
- https://hindime.net/wiki/nat/In PDF document text
- https://hindime.net/wiki/web-browser/In PDF document text
- https://hindime.net/wiki/laptop/In PDF document text
- https://hindime.net/wiki/tablet/In PDF document text
- https://www.nayaseekhon.com/operating-system-kya-hai-hindi/In PDF document text
- https://www.reliablesoft.net/top-10-search-engines-in-the-world/#googleIn PDF document text
- https://www.reliablesoft.net/top-10-search-engines-in-the-world/#bingIn PDF document text
- https://www.reliablesoft.net/top-10-search-engines-in-the-world/#yahooIn PDF document text
- https://www.reliablesoft.net/top-10-search-engines-in-the-world/#baiduIn PDF document text
- https://www.reliablesoft.net/top-10-search-engines-in-the-world/#yandexIn PDF document text
- https://www.reliablesoft.net/top-10-search-engines-in-the-world/#duckduckgoIn PDF document text
- https://www.reliablesoft.net/top-10-search-engines-in-the-world/#askIn PDF document text
- https://www.reliablesoft.net/top-10-search-engines-in-the-world/#ecosiaIn PDF document text
- https://www.reliablesoft.net/top-10-search-engines-in-the-world/#aolIn PDF document text
- https://www.reliablesoft.net/top-10-search-engines-in-the-world/#archiveIn PDF document text
- https://www.techhindigyan.com/2019/12/windows-kya-hai.htmlIn PDF document text
- https://www.tutorialpandit.com/install-microsoft-office/In PDF document text
- http://www.tutorialpandit.com/microsoft-office-button/In PDF document text
- http://www.tutorialpandit.com/quick-access-toolbar/In PDF document text
- https://www.tutorialpandit.com/useful-keyboard-tips-in-hindi/In PDF document text
- http://www.tiro.comMicrosoftIn PDF document text
- http://www.microsoft.com0In PDF document text
- http://www.yahoo.com/games/cricekt/sachin.htmlIn PDF document text
- https://en.wikipedia.org/wiki/Semiconductor_memoryIn PDF document text
- https://en.wikipedia.org/wiki/JoystickIn PDF document text
- https://en.wikipedia.org/wiki/Computer_monitorIn PDF document text
- https://en.wikipedia.org/wiki/IP_addressIn PDF document text
- https://whatismyipaddress.com/In PDF document text
+69 more URL(s)
Extracted artifacts 32
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_005_off00042d84.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x42D84 | 263288 bytes |
SHA-256: 3e67599cbbe09c691ab9bef5c773c656503bc4bb7fe71fa62b8527c1a2b03d07 |
|||
stream_006_off0005f90f.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x5F90F | 627880 bytes |
SHA-256: cf4a081096266c5eff49c4662ff054240644112fb19f5e6bf6a1c4bf9624f1c5 |
|||
stream_015_off000aaf87.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xAAF87 | 574252 bytes |
SHA-256: fa654088448dd1b672d629e1bef7c24051d65301c38be14ffeda33b6b162a1bb |
|||
stream_021_off00111fcf.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x111FCF | 361308 bytes |
SHA-256: 54f085ca2e82f378ead9b0473282fa0db4b097729c20a6b247b88f8abc6562d6 |
|||
stream_028_off00173f4d.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x173F4D | 62124 bytes |
SHA-256: 80db05fe9a4185b7d74f9e984fdac3e486baf2617548fe5617c499eb7153ca85 |
|||
stream_036_off001d896f.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x1D896F | 115116 bytes |
SHA-256: 2415fa0c1f30605813c2cfa9285dde0b15e10d384a4c1827b3e08516044b3f51 |
|||
stream_038_off001e7c32.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x1E7C32 | 603936 bytes |
SHA-256: 096bca271147bd7ebd20e309b902af760998a4dcc4c8b4db621578d3c0392de5 |
|||
stream_089_off0045bc2b.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x45BC2B | 26069 bytes |
SHA-256: 5d2afc9e47f85e2b082f8d673f346ba4fb9e5c5ba31e2ef5c8603f4d45f1711c |
|||
stream_101_off00500e26.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x500E26 | 305472 bytes |
SHA-256: 5b615f412fe05d4039106985bd3518e5b1b4741b30fb6e6055c3e03d94b25425 |
|||
font_00_sfnt_off00000057.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x57 | 174124 bytes |
SHA-256: 25406f3b10226487568b54a0660c0deead4cc2e3079b33083fc6ed8079f2cb1e |
|||
font_01_sfnt_off000137cf.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x137CF | 16760 bytes |
SHA-256: 27b9c0f16bd77714ce6ec939224d4286cd99846fe107276d2686d342b60a4d6a |
|||
font_02_sfnt_off000165c4.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x165C4 | 537112 bytes |
SHA-256: 2abd170f63bb45ed6119dd3a8c9c25c88484333e0026633bed5efc6fc486a725 |
|||
font_05_sfnt_off00097983.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x97983 | 27564 bytes |
SHA-256: c7420761af4f6ffdda3fbc112895cdfbef594689326beb82d8e78bcebd333145 |
|||
font_06_sfnt_off0009bdfc.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x9BDFC | 23804 bytes |
SHA-256: f002eec2edc40d72544345333c1184c908c8e82b44c814569eb518067e7f89fa |
|||
font_07_sfnt_off0009fa78.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x9FA78 | 24044 bytes |
SHA-256: cb615df0a4fd75b998f16f7205ce195e6b4fe1ba22440bbb31104f69d930d2a9 |
|||
font_08_sfnt_off000a304b.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xA304B | 45976 bytes |
SHA-256: 08e05eb369f4e1067f33ebe92904694a5a6c881c669f35b75d93e493029f3f66 |
|||
font_10_sfnt_off000debdc.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xDEBDC | 389700 bytes |
SHA-256: 26ac4764a6a79fe98aa623d2ef9efbfb9a5217b0b3286f661c142e068fb1e7ad |
|||
font_11_sfnt_off00105676.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x105676 | 96660 bytes |
SHA-256: d89f9c65dc02837e88c2fc823823fe9943a477ff9873e891b65c747ca41ff2ca |
|||
font_13_sfnt_off00135919.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x135919 | 69056 bytes |
SHA-256: 13e841a88ef32d5a2651e601c4d7cca8879f489de80d2f17e7fce6398c7d90de |
|||
font_14_sfnt_off0013ecb6.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x13ECB6 | 73192 bytes |
SHA-256: 9c42340a92417710f7f0d3bb0242a727cadac2b4fb703a7e0dd4660446d9dd1f |
|||
font_15_sfnt_off00147be4.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x147BE4 | 311768 bytes |
SHA-256: 8e5420ad4b83542df6a14c5c6537c53be17c0b539f05b82b5dcb878127ce2e23 |
|||
font_19_sfnt_off0021ceda.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x21CEDA | 537132 bytes |
SHA-256: 6cca70e4b0cfac121f1946cf9e64222da4e300a32bb9b12bff3820985fec2fd7 |
|||
font_20_sfnt_off00285dd5.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x285DD5 | 326512 bytes |
SHA-256: e1509a446061a1472d3d956ae196f2013b82054f747a81573e4cfc725a6a1d44 |
|||
font_21_sfnt_off0029d992.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x29D992 | 297220 bytes |
SHA-256: 887216b3000dcef4d928d0f586a62a051afc76bfda13dfebe8f1e9184ec0509a |
|||
font_22_sfnt_off002fde17.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x2FDE17 | 323184 bytes |
SHA-256: 10f7b8a398a2ceb95bbcfd735eaf56641c44d9dafbe2fed98b151edb5e7c0534 |
|||
font_23_sfnt_off0030e10c.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x30E10C | 298976 bytes |
SHA-256: bf4cb2e10dfec4c1c203ed50b7d8cf63c465fe175581fe4c26373f530b353647 |
|||
font_24_sfnt_off00320de7.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x320DE7 | 303156 bytes |
SHA-256: 6e7fe4fe21b462ccd579c572033d8e2cdb60882a42012bcbb93113f99935130d |
|||
font_25_sfnt_off0033a845.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x33A845 | 343016 bytes |
SHA-256: 35d36e82cd187c39f12434664fd31cb967769b02ddc897f54e3305b37df767db |
|||
font_26_sfnt_off0035e4b0.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x35E4B0 | 373684 bytes |
SHA-256: 1a758a3eb505d57bc44aee6bfebd4e8573efc73a3dabb230dc3139b67e72151b |
|||
font_27_sfnt_off00373945.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x373945 | 342952 bytes |
SHA-256: af7752bb85dc2ff798075baf183dd47dfab3ea6a754497e8c869e272054b2d00 |
|||
font_28_sfnt_off00397e34.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x397E34 | 301136 bytes |
SHA-256: 50d180565c307c9285d13f40c0e8c9b26a7e57752f23dca0fc4b9a7a2242401d |
|||
font_29_sfnt_off0040d731.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x40D731 | 340116 bytes |
SHA-256: 453344ca1e5a77e2290f67fd03981181088bc6d20e361d8c69514799aaab823e |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.