PDF static analysis report

Static analysis result for SHA-256 4cc3c7be1d229cc1…

CLEAN

PDF

262.2 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-25
MD5: 7901355de4c2e34e42845bd684e89d1d SHA-1: a913bfae4123e4965bbca22a5ee3897fb654881c SHA-256: 4cc3c7be1d229cc1e3839434cf65b8b90dbcfb165b7b406858b584f3d004d16f
20 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Callback phishing phone lure medium SE_CALLBACK_LURE
    Document asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 8

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_011_off00012677.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x12677 147552 bytes
SHA-256: b61a26e3ad74d510f9e9c7aede5d9bfd364b9679c6e69eabcd53570842be1742
stream_043_off000308d4.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x308D4 18240 bytes
SHA-256: 40e421321e795e26ef42df8f532d3ea5ea8f2c595c2f46e8bbf04c2cd9121b4a
stream_051_off00034eb5.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x34EB5 18240 bytes
SHA-256: 33e060654ed1208fc726f2323a8a9e7d9de6f6c8c2aedd340c7ed605b422fc95
font_00_sfnt_off0000f4f9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xF4F9 18732 bytes
SHA-256: cbb9d2366238b76cbe1bd91a8d0258a4a7e4ae4d49b69712cb78eeb105fa669f
font_01_sfnt_off000116f4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x116F4 183608 bytes
SHA-256: f698ceb1dbf94ffc5db2c031eca18e0c6757ab3edd838b19657e81f83f521013
font_03_sfnt_off00028237.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x28237 59268 bytes
SHA-256: 11696c172cbfe441016bb872104960a0cbda51bd4892b7cbcb97206570c3dd39
font_04_sfnt_off0003b65a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3B65A 217696 bytes
SHA-256: 7fd842eb87626442aaf79c15364f655c07590f1e00b52f5d808257392658312f
font_05_sfnt_off0003c6ce.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3C6CE 13792 bytes
SHA-256: a057924d03d1b49c03817e5d18c7eb6f786732407869540be0e8b5e2969a5307

Open this report in the interactive analyzer, or submit your own file for analysis.