SUSPICIOUS
36
Risk Score
Machine Learning
- Nyx PDF Classifier malicious score 0.6746
Heuristics 3
-
External URI info PDF_URIPDF contains an external URL action
-
Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTALThe same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://regok.bidunig.cfd/mururinabaluruwuvez.pdf In PDF document text
- https://bezorisudut.talamagux.sbs/num.pdfIn PDF document text
- https://adservice.google.co.uz/ddm/clk/408533097;208818505;l;;%3F//4h-camp-packing-list.zhongshanbaiyue.com/9932052.pdfIn PDF document text
- https://adservice.google.com.gh/ddm/clk/445204615;249060672;c;;%3F//luwufutok.wubabuj.cfd/fekusoviri.pdfIn PDF document text
- https://adservice.google.co.vi/ddm/clk/445204615;249060672;c;;%3F//counseling-a-comprehensive-profession-6t.newiredaje.sbs/4470143.pdfIn PDF document text
- https://diribumuvubi.takujux.cfd/5.pdfIn PDF document text
- https://borderlands-tps-leveling-guide.tourslombok.com/6661771.pdfIn PDF document text
- https://niresalada.kirezoj.cfd/868.pdfIn PDF document text
- https://adservice.google.com.bh/ddm/clk/408533097;208818505;l;;%3F//alchemy-section-2-study-guide-ki-chemist.sogamagaro.cfd/pabasijupifapa.pdfIn PDF document text
- https://atividades-para-aprender-a-ler-pdf.dutamew.sbs/352.pdfIn PDF document text
- https://adservice.google.com.my/ddm/clk/426382440;228185261;d;;%3F//drager-anesthesia-machine-service-manual.rutoxum.cfd/wawaxo.pdfIn PDF document text
- https://viwubixenup.jebuzus.cfd/29.pdfIn PDF document text
- https://supply-chain-management-chopra-5th-editi.diwopeta.cfd/6351521.pdfIn PDF document text
- https://toliremu.classiccountry1390.com/6031988.pdfIn PDF document text
- https://adservice.google.com.ag/ddm/clk/448794861;252804937;a;;%3F//lirabadeguda.vanajew.cfd/dubadomezanemivewo.pdfPDF link annotation
- https://cryptography-theory-and-practice-3rd-edi.sazomisux.cfd/2957592.pdfIn PDF document text
- https://plastic-potato-game-site.sazomenofa.sbs/lubodek.pdfIn PDF document text
- https://omam-chapter-4-study-guide-answers.mubimexu.cfd/lawurorakemala.pdfIn PDF document text
- https://adservice.google.ki/ddm/clk/426382440;228185261;d;;%3F//comparative-politics-today-a-world-view.bujalisiw.cfd/1.pdfIn PDF document text
- https://adservice.google.dk/ddm/clk/408533097;208818505;l;;%3F//gejezixiroso.pawebabi.sbs/30.pdfIn PDF document text
- https://adservice.google.es/ddm/clk/295204063;122181591;w;;%3F//sobajis.tubedeb.cfd/395.pdfIn PDF document text
- https://adservice.google.gm/ddm/clk/310682673;138356009;g;;%3F//amigurumi-h-kelanleitung-kostenlos-deuts.xusesupuka.cfd/2449304.pdfIn PDF document text
- https://adservice.google.ro/ddm/clk/300948314;127869103;e;;%3F//jesus-son-denis-johnson-pdf.awohessensued.de/3183686.pdfIn PDF document text
- https://adservice.google.tn/ddm/clk/445204615;249060672;c;;%3F//westmead-anaesthetic-manual-4th-edition.classiccountry1390.com/727.pdfIn PDF document text
- https://adservice.google.je/ddm/clk/445204615;249060672;c;;%3F//gozaxa.guneguwed.cfd/kub.pdfIn PDF document text
- https://adservice.google.it/ddm/clk/448794861;252804937;a;;%3F//vector-calculus-marsden-6th-edition-solu.globalpharmatimes.com/pobu.pdfIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://ns.adobe.com/xap/1.0/rights/In PDF document text
- http://dejavu.sourceforge.netIn extracted file (font_00_sfnt_off000444db.bin)
- http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (font_00_sfnt_off000444db.bin)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off000444db.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x444DB | 19136 bytes |
SHA-256: 141fab6db3fdf428d062c5d7e09682c0ae389043f2c45e85307a9d7a4a5ba85a |
|||
font_01_sfnt_off000461ad.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x461AD | 18952 bytes |
SHA-256: 50ac5ae4da02f604c3344b1bbd1fdf8faf0a85dda73270d5818f599d2c098bdf |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.