tl;drRemember Google announcing first SHA1 collision.https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html
Download colliding PDF files. They are shorter, so remembering that adding something at the end (the same bytestream to both) will give the same hash. 