PDF static analysis report

Static analysis result for SHA-256 ec3064cc07a5c424…

CLEAN

PDF

404.0 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-30
MD5: 0227e4fbdff80edc2d1b7d24908e013d SHA-1: 3066fe15d7bbb1c9e7829a735701c8c5ae392e9a SHA-256: ec3064cc07a5c424a58723658d93dbcb9989d266ec44627699fcbdd826c169c5
20 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Callback phishing phone lure medium SE_CALLBACK_LURE
    Document asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 9

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_031_off0002cfd9.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2CFD9 150452 bytes
SHA-256: 32112ed1ae9b8011aed329a03e7c591ee0b32d563284aaf61a72d9519f458e93
stream_052_off0004b243.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x4B243 18240 bytes
SHA-256: 40e421321e795e26ef42df8f532d3ea5ea8f2c595c2f46e8bbf04c2cd9121b4a
stream_060_off0004f824.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x4F824 18240 bytes
SHA-256: 33e060654ed1208fc726f2323a8a9e7d9de6f6c8c2aedd340c7ed605b422fc95
font_01_sfnt_off00035ea6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x35EA6 131580 bytes
SHA-256: 87f97bc6820ce4013d71fc8bfc4fd77af14b7d38cdd29d5d7865c9ab4469e63a
font_02_sfnt_off0003bf78.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3BF78 13508 bytes
SHA-256: bd9e83287b0d68b69d51ade3b1a6d88c9d79616100fdc6bf8b94f35bdafefa18
font_03_sfnt_off000418ff.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x418FF 68556 bytes
SHA-256: cbfb3a21a5e9a89771aaa84b044a62a5ec8dfdf2b986c63e4696937647ed9058
font_04_sfnt_off0005206f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5206F 220688 bytes
SHA-256: 2d14aa084033fd0e89d810db6e8be6ad73059ed79dea1b3586886f799f5fdba5
font_05_sfnt_off000608e0.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x608E0 13792 bytes
SHA-256: a057924d03d1b49c03817e5d18c7eb6f786732407869540be0e8b5e2969a5307
font_06_sfnt_off00060ff7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x60FF7 47796 bytes
SHA-256: e63a51dfd52b6a8c3166c59ef4814eb245c5181b09637107ec97ab4eb48e1cf5

Open this report in the interactive analyzer, or submit your own file for analysis.