PDF static analysis report

Static analysis result for SHA-256 0cb79b64b36f726a…

CLEAN

PDF

2.50 MB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-19
MD5: ef70699825940ee01149177aad0618a3 SHA-1: fde0e3bf74257fe23e63d74750455611e8ede16b SHA-256: 0cb79b64b36f726a8b1f37f90949c84a3022d2ab4f79c8d7b92993e08fb15fb6
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://shorturl.sixmovie.site/thebreadwinner PDF link annotation
🗂 Part of campaign: hititx.com 104 samples

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 7

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_001_off000002a6.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2A6 4194304 bytes
SHA-256: 3fcbe917f1a6624d4db4f94981554a01b83c4c9e55ba8fa1da09749a75c3f7be
stream_010_off0026c0d1.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x26C0D1 152744 bytes
SHA-256: 486d4467687d7fd46ac7920aa8b4fc9fdb74ad5b84a04b55e1f227c87b32e7b7
icc_00_off000000cd.icc pdf-icc-profile PDF ICC profile at offset 0xCD 536 bytes
SHA-256: d9f822e8083f2f4d1c91e887454be5f75e8c7144b2853408f361e3c4a7a6b36d
font_01_sfnt_off00274fef.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x274FEF 26920 bytes
SHA-256: 6b366539a72ab5c12dfde1fab87ec14cc8d97550e28fc38d3982f1d72fdceefa
font_02_sfnt_off002798a1.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2798A1 51244 bytes
SHA-256: 4073a4112255ab07eeeac19ec75da02afd077eff96aee80871eedc0c2671773b
font_03_sfnt_off0027ac0c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x27AC0C 182440 bytes
SHA-256: da14f68316550ceda30b175f5cd731becf07416e67b1f81988fa5c127b573055
font_04_sfnt_off0027b8d1.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x27B8D1 17324 bytes
SHA-256: b258bef385e35e1d9b5612975f22d734980d73393da6c40da1962d26e3f57ba0

Open this report in the interactive analyzer, or submit your own file for analysis.