PDF static analysis report

Static analysis result for SHA-256 b272d519f41f0b80…

CLEAN

PDF

167.3 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-23
MD5: d4468a4d1710a475a1b12923dcaa8981 SHA-1: 35e4f6c23e27eb05dd7d7caecbd5a63f410fa6f6 SHA-256: b272d519f41f0b80f69f2c6797cf0fcca5f63fb02faa1e730ee40e3ce5cc56c3
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://media.awsmovie.com/ro/movie/1314481/the-devil-wears-prada-2 PDF link annotation
🗂 Part of campaign: awsmovie.com 13 samples

Extracted artifacts 7

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_018_off0001fe06.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x1FE06 100720 bytes
SHA-256: 63b536a3c91ec3f39e05f08b7befafa68e12789161c0dbfe0b69b50dec3960f0
icc_00_off000000cc.icc pdf-icc-profile PDF ICC profile at offset 0xCC 536 bytes
SHA-256: d9f822e8083f2f4d1c91e887454be5f75e8c7144b2853408f361e3c4a7a6b36d
font_00_sfnt_off0001345d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1345D 29320 bytes
SHA-256: f01d5efc68b6f07f231ac78726f5a142d563c0bf3028f1c9ceb10070868c245e
font_01_sfnt_off00017503.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x17503 58800 bytes
SHA-256: ccb3c6856fe09b0e1210f2d4c45aeb5a2aabacf7c41f30a857dcc5506fe017c2
font_02_sfnt_off00019e98.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x19E98 20004 bytes
SHA-256: c35f5c43de63e937f4a6a2f471ccf12068401c0af4e0a9cf34df2c7fb2a5d442
font_03_sfnt_off0001df1c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1DF1C 12968 bytes
SHA-256: e9d8f8d12c31e59de41dc50807ca59fa343609d8f1c75705df5b4ba40a66037e
font_05_sfnt_off00028078.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x28078 182504 bytes
SHA-256: 48b2bbbb1bcb736c9a8cbcaeef41921d6a73f57f1e5eb260622131e4b1446902