PDF static analysis report

Static analysis result for SHA-256 f0edb6b2c44cc42c…

CLEAN

PDF

165.6 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-30
MD5: 546fe42f85269eccfcac6e8f4037a3e6 SHA-1: 58402811899d8bb01f71062f7b18fd40fba6c574 SHA-256: f0edb6b2c44cc42cf77acec2367bfabecd64124774d52dec2f5650c87a3969f8
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://shorturl.sixmovie.site/marblelemons PDF link annotation
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
🗂 Part of campaign: hititx.com 104 samples

Extracted artifacts 8

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_009_off00016b09.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x16B09 139600 bytes
SHA-256: 9f83210afc88a38836c1727fe7e4c87e49c80eb05301366d1df25429a3ed3bce
icc_00_off000040c0.icc pdf-icc-profile PDF ICC profile at offset 0x40C0 536 bytes
SHA-256: d9f822e8083f2f4d1c91e887454be5f75e8c7144b2853408f361e3c4a7a6b36d
font_00_sfnt_off00011a0d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x11A0D 32324 bytes
SHA-256: c36c0d4e976b8b817e667a6974c1cd39ad8065380c8a5889ece6f7eb941504de
font_02_sfnt_off0001f3a9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1F3A9 45796 bytes
SHA-256: 7d034bc38f03f07691ec8f688c086ccc4d566afef7bb0acab124aa2e557c5a68
font_03_sfnt_off0001fe02.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1FE02 182440 bytes
SHA-256: da14f68316550ceda30b175f5cd731becf07416e67b1f81988fa5c127b573055
font_04_sfnt_off000217bf.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x217BF 21844 bytes
SHA-256: 45921a3124622af359693db190696e272d8d65bc6ef0b63264495a5569cd4eb1
font_05_sfnt_off000240fa.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x240FA 21872 bytes
SHA-256: a8a0ededf490bdd24073e31b57a4e3109ae88a9d8aa0e55377212aca220497e7
font_06_sfnt_off00026a03.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x26A03 22128 bytes
SHA-256: 8ec751d5b409e77f03e523facd46e3f36ff6e48c159725a7c6fe7c622f199df2