PDF static analysis report

Static analysis result for SHA-256 d2643ee0f8598e33…

CLEAN

PDF

121.9 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-22
MD5: 776fff7b5a3022f4ee03e50db5db3acc SHA-1: a3f5bfe9b54dcef7a7abb81fc6715d7695ebe81d SHA-256: d2643ee0f8598e33d66f4fa0b11fd59c5bc2248b5a9ba4588f3cd1acd219c377
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0002

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://hititx.com/aakhrisawal-van PDF link annotation
🗂 Part of campaign: hititx.com 104 samples

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_012_off00014e00.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x14E00 51764 bytes
SHA-256: d43083e192efb5883a96638c32ba9322dab7d61cd7636278f2ddaa282dd4f9db
font_00_sfnt_off0000fc28.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xFC28 26440 bytes
SHA-256: de3bc63fc504a113a3b57f779c4b1c67d7c2bba2b2c55f02cf54445e087e56f0
font_01_sfnt_off00014274.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x14274 47116 bytes
SHA-256: ab6cf4636555174ebf9c21ef3913eea3f5ad525134d9cc319fdbe72866b2f8c7
font_03_sfnt_off0001cdcb.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1CDCB 182432 bytes
SHA-256: c58cd7a20c63d2d9e74997e879c1f1585b60f3201a96816df8bd73b5d1a03c84

Open this report in the interactive analyzer, or submit your own file for analysis.