PDF static analysis report

Static analysis result for SHA-256 d3a70e45a4886451…

CLEAN

PDF

358.7 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-30
MD5: afef713031f44e31f1946ff83e625d97 SHA-1: 032cfb49d8ecec641e47de6c6072dfa6fda57b2b SHA-256: d3a70e45a4886451888871531d2c25291a6d640355fc962b6c443756b01edab0
20 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Callback phishing phone lure medium SE_CALLBACK_LURE
    Document asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 9

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_020_off000371b0.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x371B0 151768 bytes
SHA-256: f4dd8cd091dd6a94d21a6dd777f5beeea2d45d8879c5f976d49069c0f6816bdc
stream_039_off0004b7ae.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x4B7AE 18240 bytes
SHA-256: 33e060654ed1208fc726f2323a8a9e7d9de6f6c8c2aedd340c7ed605b422fc95
font_00_sfnt_off0003615d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3615D 217712 bytes
SHA-256: 31f356fc7592fcd66a3964a8f1d4eb3c6fa88716fad54672ac8b148035720788
font_02_sfnt_off000402e8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x402E8 16148 bytes
SHA-256: 4807f1588612d30e4f7cf54a3a3d6d9f05b77148a2c7d8b35a510f6bf5f24d54
font_03_sfnt_off00042750.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x42750 27788 bytes
SHA-256: ae5c6bcdd20b5d37890e0ea5c598d03e0664aec05189c9bd6c27bb43885ed7e2
font_04_sfnt_off00046afa.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x46AFA 44608 bytes
SHA-256: ad0a986b4faa17165f10cf98a86d2bcdde0c42b8687c816e6455e50cfb635264
font_05_sfnt_off00047576.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x47576 10404 bytes
SHA-256: 5d2ac145ab394458689aa8c1e423516a1405544c624b065d02090c9c954f7ecc
font_06_sfnt_off0004f9fe.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4F9FE 6096 bytes
SHA-256: 03c02e05377f87b7ffcfeecda6ee9d693b22f57d196f7e92f5eec09b0c4d8096
font_07_sfnt_off00051af8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x51AF8 13508 bytes
SHA-256: bd9e83287b0d68b69d51ade3b1a6d88c9d79616100fdc6bf8b94f35bdafefa18

Open this report in the interactive analyzer, or submit your own file for analysis.