PDF static analysis report

Static analysis result for SHA-256 ae94789e68ef331d…

CLEAN

PDF

112.3 KB Created: 2021-01-11 10:58:31 +02:00 Authoring application: PScript5.dll Version 5.2.2 (via GPL Ghostscript 8.64) First seen: 2026-06-05
MD5: acc9d274fbe0b10aa31bde230e35765e SHA-1: 513dafeab2a79f2ed86880d7ebc36f4a1a0c2d0c SHA-256: ae94789e68ef331d2cc46d51d7ab86c5acd2e0afaa84b32eda9425586347d1e0
20 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0002

Heuristics 1

  • Callback phishing phone lure medium SE_CALLBACK_LURE
    Document asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 6

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_012_off0001a963.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x1A963 5821 bytes
SHA-256: d1f3660d2930eb576e39c10550981137f7ad85cd48f34bd27cb60fbae021e973
font_00_cff_off000174d2.bin pdf-font-stream PDF embedded font (cff) at offset 0x174D2 329 bytes
SHA-256: 83bfeb19b0c4845db32df4914d0b83fe1d3d21784ac5d9c0c916787b851525a4
font_01_cff_off00017736.bin pdf-font-stream PDF embedded font (cff) at offset 0x17736 272 bytes
SHA-256: b8f59acebd1d660c2f312af569781c4d49386c65cb4887c7686e08cfadd6831f
font_02_sfnt_off0001794b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1794B 19792 bytes
SHA-256: 5f7a42367cb3975d9bb760e661abc586cf7bbdccef73de853087a8f2f9dcc3f2
font_03_sfnt_off00019911.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x19911 12676 bytes
SHA-256: a7a2fa72f1bb705eae884737332794e122388d1d7b18fcea505cc47555f5fb8b
font_04_cff_off0001a648.bin pdf-font-stream PDF embedded font (cff) at offset 0x1A648 262 bytes
SHA-256: 6a5919fecc3ae0cb778ac0f04e81fe5678aa503110dd3d0b73bcd406069eb527

Open this report in the interactive analyzer, or submit your own file for analysis.