PDF / .VIR static analysis report

Heuristics 3

• External URI info PDF_URI
  PDF contains an external URL action
• Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
  The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL https://adservice.google.com.my/ddm/clk/425484003;227454619;f;;%3F//carol-of-the-bells-guitar-tab-pdf.pumumoxif.cfd/340821.pdf PDF link annotation

  • https://adservice.google.co.ma/ddm/clk/466651624;272226156;i;;%3F//xexajejuf.rebedopu.cfd/990.pdfIn PDF document text
  • https://dezikesit.sogamagaro.cfd/lakozupunoj.pdfIn PDF document text
  • https://adservice.google.co.il/ddm/clk/426382440;228185261;d;;%3F//guide-s-curit-incendie-pdf.tenaxeg.cfd/261125.pdfIn PDF document text
  • https://tibia-game-incident-autopsy.rukaxit.online/wevuxu.pdfIn PDF document text
  • https://sponge-secret-joe-rogan.mumarapoba.sbs/wumavu.pdfIn PDF document text
  • https://principles-of-economics-stevenson-and-wo.tepuwof.cfd/728.pdfIn PDF document text
  • https://kazugov.nepafot.sbs/xidifevalemagazine.pdfIn PDF document text
  • https://bokodinedep.xivoful.cfd/wafudi.pdfIn PDF document text
  • https://ginaben.nazakux.sbs/bifenejokomofelezi.pdfIn PDF document text
  • https://lemuzoza.lakenakara.com/kami.pdfIn PDF document text
  • https://adservice.google.co.vi/ddm/clk/424929466;226923624;r;;%3F//newev.kanifij.cfd/sajudoluponezo.pdfIn PDF document text
  • https://adservice.google.com.bo/ddm/clk/424929466;226923624;r;;%3F//rujituk.zhongshanbaiyue.com/xesedumabut.pdfIn PDF document text
  • https://foxit-pdf-free.was-kostet-ein-konflikt.de/577.pdfIn PDF document text
  • https://adservice.google.dz/ddm/clk/295204063;122181591;w;;%3F//4th-grade-science-worksheets-pdf.kejazepo.cfd/8500435.pdfIn PDF document text
  • https://adservice.google.nr/ddm/clk/448794861;252804937;a;;%3F//stabat-mater-testo-latino-pdf.guridif.online/jatavisale.pdfIn PDF document text
  • https://adservice.google.ga/ddm/clk/424929466;226923624;r;;%3F//scientific-search-for-the-face-of-jesus.wobekoviva.cfd/xaf.pdfIn PDF document text
  • https://adservice.google.pt/ddm/clk/466651624;272226156;i;;%3F//figixa.zhongshanbaiyue.com/206.pdfIn PDF document text
  • https://adservice.google.lt/ddm/clk/425484003;227454619;f;;%3F//dozib.jogalawobu.cfd/69.pdfIn PDF document text
  • https://adservice.google.ps/ddm/clk/310682673;138356009;g;;%3F//amazon-statistical-sleuth-2nd-edition-pd.tugiwumab.cfd/revudazupataj.pdfIn PDF document text
  • https://adservice.google.co.kr/ddm/clk/310682673;138356009;g;;%3F//keruzefixu.jumoxenaf.cfd/45.pdfIn PDF document text
  • https://adservice.google.ge/ddm/clk/295204063;122181591;w;;%3F//luminflux-pyxis-guide.lasaniv.sbs/semojesabivufew.pdfIn PDF document text
  • https://adservice.google.ml/ddm/clk/466651624;272226156;i;;%3F//libro-del-trompito-pdf-completo.rijirija.cfd/ramimowuwo.pdfIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://ns.adobe.com/xap/1.0/rights/In PDF document text
  • http://dejavu.sourceforge.netIn extracted file (font_00_sfnt_off0004718e.bin)
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (font_00_sfnt_off0004718e.bin)

Open this report in the interactive analyzer, or submit your own file for analysis.