SUSPICIOUS
36
Risk Score
Machine Learning
- Nyx PDF Classifier malicious score 0.5496
Heuristics 3
-
External URI info PDF_URIPDF contains an external URL action
-
Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTALThe same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://adservice.google.com.tj/ddm/clk/426382440;228185261;d;;%3F//formation-guide-touristique.meandaur.com/wijejonufedoxetudam.pdf PDF link annotation
- https://cizzorz-deathrun-3-0-level-4-guide.guzakaf.cfd/tejufexit.pdfIn PDF document text
- https://mapa-conceptual-de-la-primera-guerra-mun.marieschefssoap.com/pimoxevi.pdfIn PDF document text
- https://wopudapo.xetafunizu.cfd/para.pdfIn PDF document text
- https://chapter-6-study-guide-form-g.fopuduloz.cfd/35.pdfIn PDF document text
- https://gozij.imicconcepts.com/8665175.pdfIn PDF document text
- https://america-s-history-8th-edition-chapter-14.didimpools.com/12.pdfIn PDF document text
- https://livro-ansiedade-pdf-gratis.wowakana.cfd/bidupefokilesamudo.pdfIn PDF document text
- https://weathering-and-erosion-worksheets-pdf.burger-bee.de/toronexamizufuxozo.pdfIn PDF document text
- https://exploring-chemical-analysis-3rd-edition.vorubidog.cfd/sazokovidudaxakowup.pdfIn PDF document text
- https://hey-mister-marshall-pdf.fuwepokeje.cfd/dizakovunonovuj.pdfIn PDF document text
- https://risk-management-for-small-business-pdf.xikabururu.cfd/7564522.pdfIn PDF document text
- https://metcalf-eddy-5th-edition-pdf.gategozox.cfd/27.pdfIn PDF document text
- https://lumesesak.wupper-flossfahrt.de/375.pdfIn PDF document text
- https://without-words-ellen-o-connell-read-onlin.tripleb-ent.com/zoxubepani.pdfIn PDF document text
- https://adservice.google.gy/ddm/clk/448794861;252804937;a;;%3F//livre-physique-chimie-terminale-pdf.lancsports.com/dore.pdfIn PDF document text
- https://adservice.google.ht/ddm/clk/408533097;208818505;l;;%3F//honeys-old-house-leaks.deaardbol.com/4806580.pdfIn PDF document text
- https://adservice.google.bj/ddm/clk/408533097;208818505;l;;%3F//robujidumo.sixfriedrichlisaungar.de/50.pdfIn PDF document text
- https://adservice.google.ad/ddm/clk/300948314;127869103;e;;%3F//el-roman-de-flamenca-pdf-gratis.pisamite.cfd/vitidimosubulujo.pdfIn PDF document text
- https://adservice.google.li/ddm/clk/478229754;284365575;c;;%3F//mission-oriented-serial-killer.pupofopuba.cfd/tewibebirabo.pdfIn PDF document text
- https://adservice.google.ml/ddm/clk/310682673;138356009;g;;%3F//henry-de-lesquen-livres.winakipam.cfd/978.pdfIn PDF document text
- https://adservice.google.pt/ddm/clk/310682673;138356009;g;;%3F//sezisuruluv.chaosdev.org/279.pdfIn PDF document text
- https://adservice.google.ge/ddm/clk/424929466;226923624;r;;%3F//artillerist-leveling-guide-lost-ark.bauservice-miller.de/131.pdfIn PDF document text
- https://adservice.google.dm/ddm/clk/300948314;127869103;e;;%3F//morris-mano-digital-design-solutions-6th.deaardbol.com/goril.pdfIn PDF document text
- https://adservice.google.gl/ddm/clk/448794861;252804937;a;;%3F//antologia-de-ingles-pdf.fazegevin.cfd/3777449.pdfIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://ns.adobe.com/xap/1.0/rights/In PDF document text
- http://dejavu.sourceforge.netIn extracted file (font_00_sfnt_off00063bd4.bin)
- http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (font_00_sfnt_off00063bd4.bin)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00063bd4.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x63BD4 | 10808 bytes |
SHA-256: d576836a918bd3a257071b41bbe2e8562c3a0235934a2fe0648a16734df13587 |
|||
font_01_sfnt_off00065492.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x65492 | 17412 bytes |
SHA-256: 5194a0b2b0ed554138b84ef979e06de499f477edfa767da46dc162ff4b04dc3b |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.