PDF static analysis report

Static analysis result for SHA-256 ee30d7dff5064b3e…

CLEAN

PDF

404.0 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-30
MD5: 4523102618335771f550e6746cbf3a4f SHA-1: 976f2825318e30026e0061266ba92673ffb8c478 SHA-256: ee30d7dff5064b3ed4ef3125cc2f2ec41af03a70c360658203d5034186191185
20 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Callback phishing phone lure medium SE_CALLBACK_LURE
    Document asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 9

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_031_off0002cf9b.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2CF9B 150616 bytes
SHA-256: 28f4d0ee9c13a39f7aac7c23ce7333ce23dde33f5aa5dcef1d5a2c242a44946f
stream_054_off0004c584.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x4C584 18240 bytes
SHA-256: 40e421321e795e26ef42df8f532d3ea5ea8f2c595c2f46e8bbf04c2cd9121b4a
stream_062_off00050b65.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x50B65 18240 bytes
SHA-256: 33e060654ed1208fc726f2323a8a9e7d9de6f6c8c2aedd340c7ed605b422fc95
font_01_sfnt_off00035e99.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x35E99 220772 bytes
SHA-256: 3a7fcc336ad009c163bb40b80329f014eb2f74c8423c5a0ac12ad571030cdf4d
font_02_sfnt_off000371e6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x371E6 131580 bytes
SHA-256: 87f97bc6820ce4013d71fc8bfc4fd77af14b7d38cdd29d5d7865c9ab4469e63a
font_03_sfnt_off0003d2b8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3D2B8 13508 bytes
SHA-256: bd9e83287b0d68b69d51ade3b1a6d88c9d79616100fdc6bf8b94f35bdafefa18
font_04_sfnt_off00042c3f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x42C3F 68556 bytes
SHA-256: cbfb3a21a5e9a89771aaa84b044a62a5ec8dfdf2b986c63e4696937647ed9058
font_05_sfnt_off00060928.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x60928 13792 bytes
SHA-256: a057924d03d1b49c03817e5d18c7eb6f786732407869540be0e8b5e2969a5307
font_06_sfnt_off0006103f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x6103F 47796 bytes
SHA-256: e63a51dfd52b6a8c3166c59ef4814eb245c5181b09637107ec97ab4eb48e1cf5

Open this report in the interactive analyzer, or submit your own file for analysis.