CLEAN
4
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0001
Heuristics 2
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://tvdigital.awsmovie.com/movie/1616400/skyking PDF link annotation
🗂 Part of campaign:
hititx.com
104 samples
Extracted artifacts 7
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_001_off000002a6.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x2A6 | 4194304 bytes |
SHA-256: 3fcbe917f1a6624d4db4f94981554a01b83c4c9e55ba8fa1da09749a75c3f7be |
|||
stream_010_off0026b64c.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x26B64C | 152744 bytes |
SHA-256: 486d4467687d7fd46ac7920aa8b4fc9fdb74ad5b84a04b55e1f227c87b32e7b7 |
|||
icc_00_off000000cd.icc |
pdf-icc-profile | PDF ICC profile at offset 0xCD | 536 bytes |
SHA-256: d9f822e8083f2f4d1c91e887454be5f75e8c7144b2853408f361e3c4a7a6b36d |
|||
font_01_sfnt_off0027456a.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x27456A | 30000 bytes |
SHA-256: fb9cfc7d176cf00de0785c5be25c61c26b21897a155818fd9ae204b9640ffd7b |
|||
font_02_sfnt_off002790e7.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x2790E7 | 221112 bytes |
SHA-256: eb3394f2da318708a34b9e9f3a7191b38202f5ef5ea36433513a4bdf749752e8 |
|||
font_03_sfnt_off0027a248.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x27A248 | 51308 bytes |
SHA-256: 785de7975db459fd67a91b8b08065105bddaa64bc1d5c14cceecf8a16243f807 |
|||
font_04_sfnt_off0027b5f0.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x27B5F0 | 17324 bytes |
SHA-256: b258bef385e35e1d9b5612975f22d734980d73393da6c40da1962d26e3f57ba0 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.