PDF / .VIR static analysis report

Heuristics 3

• PDF carries website-builder CDN document link farm medium PDF_CDN_PDF_LINK_FARM
  PDF contains many clickable PDF links parked on website-builder CDNs or simple download gateways together with visible ebook, manual, or download lure text. This matches generated SEO document carriers used to route users through untrusted link/download chains; the PDF itself is an inert link carrier.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://tod.lods.icu/dls.php?q=Ford+F150+2015+Service+Manual PDF link annotation

  • https://cdn-cms.f-static.net/uploads/5250403/normal_60afae3cbb429.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5250183/normal_60afaaf90d534.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5250183/normal_60afa92ddc443.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5250325/normal_60afa924cb07d.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5250352/normal_60afaf00ee259.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5250175/normal_60afa671c218d.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5250183/normal_60afa7dcdf107.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5250411/normal_60afb08e72210.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5256300/normal_60b2913e4931b.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5256300/normal_60b290ed85d20.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5256300/normal_60b2915e76411.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5256300/normal_60b290cd79ea1.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5256300/normal_60b291c2d5e6c.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5256300/normal_60b291e2ead89.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5256300/normal_60b291a0e362e.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5256300/normal_60b291d2c3c36.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5256300/normal_60b291b19f2ad.pdfIn extracted file (objstm_0039_00.bin)
  • https://cdn-cms.f-static.net/uploads/5256300/normal_60b29190b5202.pdfIn extracted file (objstm_0039_00.bin)

Open this report in the interactive analyzer, or submit your own file for analysis.