PDF static analysis report

Static analysis result for SHA-256 50d2cfc4527065f1…

CLEAN

PDF

123.4 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-20
MD5: f59e58404b8668740648fb31be73297e SHA-1: 4652a94c44a11999468fccea3c8b9dd7a9abc212 SHA-256: 50d2cfc4527065f1ed87df3e5d6f2f9d357b0c6d9e6db08772c87df94fb1474f
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0002

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://hititx.com/aakhrisawal-van PDF link annotation
🗂 Part of campaign: hititx.com 104 samples

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_012_off000153d9.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x153D9 51764 bytes
SHA-256: d43083e192efb5883a96638c32ba9322dab7d61cd7636278f2ddaa282dd4f9db
font_00_sfnt_off0000fca0.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xFCA0 27276 bytes
SHA-256: 40316bbb58e51da181555169aacb862ca9e4300d88bae538398b474ee2199458
font_01_sfnt_off000145be.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x145BE 47824 bytes
SHA-256: 69a1dd38e1d071761d503ddf3e7ef4c9f0e0ca37734b794509d257d7083e61f5
font_03_sfnt_off0001d3a4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1D3A4 182432 bytes
SHA-256: c58cd7a20c63d2d9e74997e879c1f1585b60f3201a96816df8bd73b5d1a03c84