PDF static analysis report

Heuristics 3

• PDF links to a cracked-software download doorway (base64-obfuscated) high PDF_CRACKED_SOFTWARE_DOWNLOAD_DOORWAY
  PDF's embedded link hides a pirated-software title as a base64 blob inside the URL path/query (and/or carries the ``download|`` doorway-template marker), rather than in visible text. This is a TCPDF-generated SEO doorway that ranks for software-piracy searches and funnels users to fake 'crack/keygen' download pages distributing adware, potentially-unwanted programs, or droppers. The base64 encoding is deliberate obfuscation to evade plaintext lure rules; the PDF itself carries no parser exploit — the risk is the linked crack-download destination.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://blogbasters.com/anda/inwards/ZG93bmxvYWR8NzJhZEhCNmZId3hOalU0TURBMk5qazVmSHd5TlRrd2ZId29UU2tnVjI5eVpIQnlaWE56SUZ0WVRVeFNVRU1nVmpJZ1VFUkdYUQ?dunkin=audits..QmV0dGVybmV0IFZQTiBGb3IgV2luZG93cyBQcmVtaXVtIFY0LjEuOSAtIFNldVBpcmF0ZQQmV PDF link annotation

  • http://kolatia.com/?p=15371In PDF document text
  • https://marijuanabeginner.com/codesmart-2013-for-vb6-cracked-by-the-old-mega-better/In PDF document text
  • https://www.webcard.irish/gamemaker-studio-ea-standalone-1-99-44-full-version-install-2/In PDF document text
  • https://businessbooster.page/wp-content/uploads/2022/07/ancvync.pdfIn PDF document text
  • https://www.renegade-france.fr/wp-content/uploads/2022/07/Batzal_Roof_Designer_For_3ds_Max_2013_X32_X64_UPD.pdfIn PDF document text
  • https://news.mtkenya.co.ke/advert/english-conversation-with-tamil-meaning-pdf-high-quality/In PDF document text
  • http://mariasworlds.com/index.php/2022/07/16/full-xforcekeygenmaya2016x86x64/In PDF document text
  • https://accwgroup.com/civilization-iii-with-add-ons-conquests-and-play-the-world-crack-hot/In PDF document text
  • https://bullygirlmagazine.com/advert/gullfoss-vst-vst3-aax-v1-4-1-r2r/In PDF document text
  • https://classig.net/blog/index.php?entryid=3928In PDF document text
  • https://johnsonproductionstudios.com/2022/07/16/hd-online-player-kabhi-khushi-kabhie-gham-full-free-movie-hd-1080p-blu-ray-269/In PDF document text
  • https://www.lavozmagazine.com/advert/adobe-livecycle-designer-es-v8-2-link/In PDF document text
  • http://www.ganfornina-batiment.com/2022/07/17/euro-truck-simulator-2-romanian-paint-jobs-pack-download-by-apunkagames-link/In PDF document text
  • https://villamaremonti.com/wp-content/uploads/2022/07/bryaigna.pdfIn PDF document text
  • https://annesiret.com/wp-content/uploads/2022/07/Pirox_Fish_Bot_33_5a_New_41_TOP.pdfIn PDF document text
  • http://www.camptalk.org/hd-online-player-link-download-film-merah-putih-1-2-3-full/In PDF document text
  • http://gomeztorrero.com/wp-content/uploads/2022/07/dead_island_v_1000_trainerrar.pdfIn PDF document text
  • http://topfleamarket.com/?p=39652In PDF document text
  • https://glemor.com/wp-content/uploads/2022/07/download_land_change_modeler_arcgis.pdfIn PDF document text
  • http://wp2-wimeta.de/shiny-broken-pieces-a-tiny-pretty-things-novel-mobi-download-bookl-new/In PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.