PDF / .VIR static analysis report

Heuristics 3

• External URI info PDF_URI
  PDF contains an external URL action
• Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
  The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL https://nawapesux.sazomisux.cfd/56.pdf In PDF document text

  • https://adservice.google.co.ls/ddm/clk/408405163;208572896;n;;%3F//range-rover-p38-repair-manual-pdf.thelfb-forex.com/nimapidab.pdfIn PDF document text
  • https://adservice.google.co.il/ddm/clk/445204615;249060672;c;;%3F//img1.wsimg.com/blobby/go/c6b5bd10-d427-4840-b51f-0220a1ba7500/downloads/true_fear_forsaken_souls_free_download_apk.pdfIn PDF document text
  • https://les-7-maris-d-evelyn-hugo-pdf.maroco-online.de/ton.pdfIn PDF document text
  • https://avatar-2-free-online-full-movie.kirezoj.cfd/jokubijunevoregi.pdfIn PDF document text
  • https://adservice.google.com.gi/ddm/clk/466651624;272226156;i;;%3F//3-2-study-guide-and-intervention-logarit.jumoxenaf.cfd/sorofuwe.pdfIn PDF document text
  • https://adservice.google.st/ddm/clk/295204063;122181591;w;;%3F//img1.wsimg.com/blobby/go/c2af1926-e4e3-4f02-a053-c669621bded5/downloads/vakivotedap.pdfPDF link annotation
  • https://adservice.google.sn/ddm/clk/466651624;272226156;i;;%3F//img1.wsimg.com/blobby/go/4aa54582-2325-4251-90b4-0aa021dc79a2/downloads/unibet_app_for_android_download.pdfIn PDF document text
  • https://adservice.google.gl/ddm/clk/425484003;227454619;f;;%3F//uploads-ssl.webflow.com/64ede59e92781beb78414a2c/656678fff19c253ffcaaa111_noxaruxusopaveturamaliv.pdfIn PDF document text
  • https://adservice.google.ad/ddm/clk/448794861;252804937;a;;%3F//uploads-ssl.webflow.com/64f844a6d5009b4823b1e21f/6566784d85199e8ad25e25b8_womav.pdfIn PDF document text
  • https://uploads-ssl.webflow.com/64ee1d2a2f8df52e1f7b126f/656678527586c90c67d2d6b0_bizek.pdfIn PDF document text
  • https://adservice.google.com.ua/ddm/clk/424929466;226923624;r;;%3F//green-eggs-and-ham-guided-reading-level.singfortheclimate.de/manotetiweriwudemev.pdfIn PDF document text
  • https://img1.wsimg.com/blobby/go/d545a68f-97da-4548-b40d-7a0c033c9d40/downloads/90861934990.pdfIn PDF document text
  • https://img1.wsimg.com/blobby/go/c6b5bd10-d427-4840-b51f-0220a1ba7500/downloads/4619181797.pdfIn PDF document text
  • https://img1.wsimg.com/blobby/go/a6d58845-cff0-4047-b8e4-9366a85782f2/downloads/82985053172.pdfIn PDF document text
  • https://adservice.google.co.jp/ddm/clk/448794861;252804937;a;;%3F//img1.wsimg.com/blobby/go/43c8046c-ec5b-47ae-bd8f-39ed9c70f0cd/downloads/14326097300.pdfIn PDF document text
  • https://img1.wsimg.com/blobby/go/43c8046c-ec5b-47ae-bd8f-39ed9c70f0cd/downloads/19549109903.pdfIn PDF document text
  • https://img1.wsimg.com/blobby/go/2bced4cb-39a0-4f3a-b81f-12921bbf7f6f/downloads/mososabizigaridekes.pdfIn PDF document text
  • https://adservice.google.es/ddm/clk/445204615;249060672;c;;%3F//img1.wsimg.com/blobby/go/a6d58845-cff0-4047-b8e4-9366a85782f2/downloads/imiquimod_cream_for_warts_instructions.pdfIn PDF document text
  • https://adservice.google.com.au/ddm/clk/466651624;272226156;i;;%3F//uploads-ssl.webflow.com/64ee25c60606d5a7751ace23/656678b5c92db55bfbdd7a58_dibula.pdfIn PDF document text
  • https://uploads-ssl.webflow.com/64ee25c60606d5a7751ace23/65667919b8fc418be0fab040_tedufewadoz.pdfIn PDF document text
  • https://img1.wsimg.com/blobby/go/73ac35c4-fc0b-4b92-bef5-598c2a43cd5f/downloads/phone_clone_android_to_ios.pdfIn PDF document text
  • https://adservice.google.pn/ddm/clk/426382440;228185261;d;;%3F//uploads-ssl.webflow.com/64f19fdab7bd18d4e097cf42/65667863ece75b3702be2b6a_2588584357.pdfIn PDF document text
  • https://adservice.google.co.nz/ddm/clk/448794861;252804937;a;;%3F//img1.wsimg.com/blobby/go/43c8046c-ec5b-47ae-bd8f-39ed9c70f0cd/downloads/94637566198.pdfIn PDF document text
  • https://img1.wsimg.com/blobby/go/4aa54582-2325-4251-90b4-0aa021dc79a2/downloads/fefigirajaxoponepigak.pdfIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://ns.adobe.com/xap/1.0/rights/In PDF document text
  • http://dejavu.sourceforge.netIn extracted file (font_00_sfnt_off0007404b.bin)
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (font_00_sfnt_off0007404b.bin)

Open this report in the interactive analyzer, or submit your own file for analysis.