PDF static analysis report

Static analysis result for SHA-256 dc31b99783bec21d…

SUSPICIOUS

PDF

7.83 MB Authoring application: iLovePDF First seen: 2026-06-04
MD5: eb3a8f1a5b08cfe5b8fb648af5d054dd SHA-1: 33e12aa34f320f9c279c4339dfb37f2120a94684 SHA-256: dc31b99783bec21d822a52e0411bf6e6bf7276b7a315cebba2543e049fb52471
44 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0026

Heuristics 3

  • ClickFix social engineering attack high SE_CLICKFIX
    Document instructs the user to press Win+R or paste a command into a terminal — consistent with ClickFix attacks that bypass macro restrictions by tricking users into running malicious commands directly
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.doeaec.org.in/Rajasthem/���o���lelvel In PDF document text
    • https://www.nayaseekhon.com/motherboard-kya-hai-hindi/PDF link annotation
    • https://www.nayaseekhon.com/ram-kya-hai-hindi/In PDF document text
    • https://www.nayaseekhon.com/rom-kya-hai-hindi/In PDF document text
    • https://www.nayaseekhon.com/hard-disk-kya-hai-hindi/In PDF document text
    • https://www.nayaseekhon.com/smps-kya-hai/In PDF document text
    • https://www.nayaseekhon.com/what-is-mouse-hindi/In PDF document text
    • https://www.nayaseekhon.com/computer-keyboard-kya-hai-hindi/In PDF document text
    • https://www.nayaseekhon.com/printer-kya-hai-hindi/In PDF document text
    • https://www.nayaseekhon.com/ups-kya-hai-hindi/In PDF document text
    • https://www.nayaseekhon.com/output-device-kya-hai-hindi/In PDF document text
    • https://www.nayaseekhon.com/primary-memory-kya-hai/In PDF document text
    • https://www.nayaseekhon.com/cache-memory-kya-hai-hindi/In PDF document text
    • https://www.nayaseekhon.com/secondary-memory-kya-hai-hindi/In PDF document text
    • https://www.nayaseekhon.com/cpu-kya-hai-hindi/In PDF document text
    • https://www.nayaseekhon.com/solid-state-drive-ssd-hindi/In PDF document text
    • https://www.nayaseekhon.com/monitor-kya-hai-hindi/In PDF document text
    • https://hinditechacademy.com/wp-content/uploads/2018/08/cisco-2960-switch-1.jpgIn PDF document text
    • https://hindime.net/wiki/hardware/In PDF document text
    • https://hindime.net/wiki/office/In PDF document text
    • https://hindime.net/network-kya-hai-hindi/In PDF document text
    • https://hindime.net/ipv4-vs-ipv6-kya-hai/In PDF document text
    • https://hindime.net/wiki/nat/In PDF document text
    • https://hindime.net/wiki/web-browser/In PDF document text
    • https://hindime.net/wiki/laptop/In PDF document text
    • https://hindime.net/wiki/tablet/In PDF document text
    • https://www.nayaseekhon.com/operating-system-kya-hai-hindi/In PDF document text
    • https://www.reliablesoft.net/top-10-search-engines-in-the-world/#googleIn PDF document text
    • https://www.reliablesoft.net/top-10-search-engines-in-the-world/#bingIn PDF document text
    • https://www.reliablesoft.net/top-10-search-engines-in-the-world/#yahooIn PDF document text
    • https://www.reliablesoft.net/top-10-search-engines-in-the-world/#baiduIn PDF document text
    • https://www.reliablesoft.net/top-10-search-engines-in-the-world/#yandexIn PDF document text
    • https://www.reliablesoft.net/top-10-search-engines-in-the-world/#duckduckgoIn PDF document text
    • https://www.reliablesoft.net/top-10-search-engines-in-the-world/#askIn PDF document text
    • https://www.reliablesoft.net/top-10-search-engines-in-the-world/#ecosiaIn PDF document text
    • https://www.reliablesoft.net/top-10-search-engines-in-the-world/#aolIn PDF document text
    • https://www.reliablesoft.net/top-10-search-engines-in-the-world/#archiveIn PDF document text
    • https://www.techhindigyan.com/2019/12/windows-kya-hai.htmlIn PDF document text
    • https://www.tutorialpandit.com/install-microsoft-office/In PDF document text
    • http://www.tutorialpandit.com/microsoft-office-button/In PDF document text
    • http://www.tutorialpandit.com/quick-access-toolbar/In PDF document text
    • https://www.tutorialpandit.com/useful-keyboard-tips-in-hindi/In PDF document text
    • http://www.tiro.comMicrosoftIn PDF document text
    • http://www.microsoft.com0In PDF document text
    • http://www.yahoo.com/games/cricekt/sachin.htmlIn PDF document text
    • https://en.wikipedia.org/wiki/Semiconductor_memoryIn PDF document text
    • https://en.wikipedia.org/wiki/JoystickIn PDF document text
    • https://en.wikipedia.org/wiki/Computer_monitorIn PDF document text
    • https://en.wikipedia.org/wiki/IP_addressIn PDF document text
    • https://whatismyipaddress.com/In PDF document text
    +69 more URL(s)

Extracted artifacts 32

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_005_off00042d84.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x42D84 263288 bytes
SHA-256: 3e67599cbbe09c691ab9bef5c773c656503bc4bb7fe71fa62b8527c1a2b03d07
stream_006_off0005f90f.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x5F90F 627880 bytes
SHA-256: cf4a081096266c5eff49c4662ff054240644112fb19f5e6bf6a1c4bf9624f1c5
stream_015_off000aaf87.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xAAF87 574252 bytes
SHA-256: fa654088448dd1b672d629e1bef7c24051d65301c38be14ffeda33b6b162a1bb
stream_021_off00111fcf.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x111FCF 361308 bytes
SHA-256: 54f085ca2e82f378ead9b0473282fa0db4b097729c20a6b247b88f8abc6562d6
stream_028_off00173f4d.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x173F4D 62124 bytes
SHA-256: 80db05fe9a4185b7d74f9e984fdac3e486baf2617548fe5617c499eb7153ca85
stream_036_off001d896f.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x1D896F 115116 bytes
SHA-256: 2415fa0c1f30605813c2cfa9285dde0b15e10d384a4c1827b3e08516044b3f51
stream_038_off001e7c32.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x1E7C32 603936 bytes
SHA-256: 096bca271147bd7ebd20e309b902af760998a4dcc4c8b4db621578d3c0392de5
stream_089_off0045bc2b.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x45BC2B 26069 bytes
SHA-256: 5d2afc9e47f85e2b082f8d673f346ba4fb9e5c5ba31e2ef5c8603f4d45f1711c
stream_101_off00500e26.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x500E26 305472 bytes
SHA-256: 5b615f412fe05d4039106985bd3518e5b1b4741b30fb6e6055c3e03d94b25425
font_00_sfnt_off00000057.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x57 174124 bytes
SHA-256: 25406f3b10226487568b54a0660c0deead4cc2e3079b33083fc6ed8079f2cb1e
font_01_sfnt_off000137cf.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x137CF 16760 bytes
SHA-256: 27b9c0f16bd77714ce6ec939224d4286cd99846fe107276d2686d342b60a4d6a
font_02_sfnt_off000165c4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x165C4 537112 bytes
SHA-256: 2abd170f63bb45ed6119dd3a8c9c25c88484333e0026633bed5efc6fc486a725
font_05_sfnt_off00097983.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x97983 27564 bytes
SHA-256: c7420761af4f6ffdda3fbc112895cdfbef594689326beb82d8e78bcebd333145
font_06_sfnt_off0009bdfc.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x9BDFC 23804 bytes
SHA-256: f002eec2edc40d72544345333c1184c908c8e82b44c814569eb518067e7f89fa
font_07_sfnt_off0009fa78.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x9FA78 24044 bytes
SHA-256: cb615df0a4fd75b998f16f7205ce195e6b4fe1ba22440bbb31104f69d930d2a9
font_08_sfnt_off000a304b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xA304B 45976 bytes
SHA-256: 08e05eb369f4e1067f33ebe92904694a5a6c881c669f35b75d93e493029f3f66
font_10_sfnt_off000debdc.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xDEBDC 389700 bytes
SHA-256: 26ac4764a6a79fe98aa623d2ef9efbfb9a5217b0b3286f661c142e068fb1e7ad
font_11_sfnt_off00105676.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x105676 96660 bytes
SHA-256: d89f9c65dc02837e88c2fc823823fe9943a477ff9873e891b65c747ca41ff2ca
font_13_sfnt_off00135919.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x135919 69056 bytes
SHA-256: 13e841a88ef32d5a2651e601c4d7cca8879f489de80d2f17e7fce6398c7d90de
font_14_sfnt_off0013ecb6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x13ECB6 73192 bytes
SHA-256: 9c42340a92417710f7f0d3bb0242a727cadac2b4fb703a7e0dd4660446d9dd1f
font_15_sfnt_off00147be4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x147BE4 311768 bytes
SHA-256: 8e5420ad4b83542df6a14c5c6537c53be17c0b539f05b82b5dcb878127ce2e23
font_19_sfnt_off0021ceda.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x21CEDA 537132 bytes
SHA-256: 6cca70e4b0cfac121f1946cf9e64222da4e300a32bb9b12bff3820985fec2fd7
font_20_sfnt_off00285dd5.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x285DD5 326512 bytes
SHA-256: e1509a446061a1472d3d956ae196f2013b82054f747a81573e4cfc725a6a1d44
font_21_sfnt_off0029d992.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x29D992 297220 bytes
SHA-256: 887216b3000dcef4d928d0f586a62a051afc76bfda13dfebe8f1e9184ec0509a
font_22_sfnt_off002fde17.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2FDE17 323184 bytes
SHA-256: 10f7b8a398a2ceb95bbcfd735eaf56641c44d9dafbe2fed98b151edb5e7c0534
font_23_sfnt_off0030e10c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x30E10C 298976 bytes
SHA-256: bf4cb2e10dfec4c1c203ed50b7d8cf63c465fe175581fe4c26373f530b353647
font_24_sfnt_off00320de7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x320DE7 303156 bytes
SHA-256: 6e7fe4fe21b462ccd579c572033d8e2cdb60882a42012bcbb93113f99935130d
font_25_sfnt_off0033a845.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x33A845 343016 bytes
SHA-256: 35d36e82cd187c39f12434664fd31cb967769b02ddc897f54e3305b37df767db
font_26_sfnt_off0035e4b0.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x35E4B0 373684 bytes
SHA-256: 1a758a3eb505d57bc44aee6bfebd4e8573efc73a3dabb230dc3139b67e72151b
font_27_sfnt_off00373945.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x373945 342952 bytes
SHA-256: af7752bb85dc2ff798075baf183dd47dfab3ea6a754497e8c869e272054b2d00
font_28_sfnt_off00397e34.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x397E34 301136 bytes
SHA-256: 50d180565c307c9285d13f40c0e8c9b26a7e57752f23dca0fc4b9a7a2242401d
font_29_sfnt_off0040d731.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x40D731 340116 bytes
SHA-256: 453344ca1e5a77e2290f67fd03981181088bc6d20e361d8c69514799aaab823e