PDF static analysis report

Static analysis result for SHA-256 f917a1a83a499631…

CLEAN

PDF

399.8 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-27
MD5: aa91d622eacd921c33530cd4776fd11d SHA-1: 7b4bbdbc18f25de999b4943a3fef55b94957ad20 SHA-256: f917a1a83a499631fe9ab1bde33c7a322852e3f9eff2a4164b6b8f95180aa413
20 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Callback phishing phone lure medium SE_CALLBACK_LURE
    Document asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 7

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_032_off00047a20.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x47A20 54844 bytes
SHA-256: 95d140cc38d994a1816a7918042eb1292bb590368b0e590e3ac23c5b871ef372
stream_044_off000552dd.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x552DD 18240 bytes
SHA-256: 33e060654ed1208fc726f2323a8a9e7d9de6f6c8c2aedd340c7ed605b422fc95
font_00_sfnt_off0004180e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4180E 29444 bytes
SHA-256: 06e5cff700c4b5eb17781c75d3eda7e987fb98781931510b7e4e20bc848ac355
font_01_sfnt_off0004648e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4648E 219324 bytes
SHA-256: 1e2dd172917b5e5baa7fdca7726ef441322ec72f00fc4ec08b8086b84280d39f
font_03_sfnt_off00050410.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x50410 44772 bytes
SHA-256: c16ac7b97a118c47aa9f02c0caa5a6afdcd370da1d944641cd190a431c99c6a5
font_04_sfnt_off00050e39.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x50E39 13516 bytes
SHA-256: 4c1c38881c1c2555f48d188fefa495c22ea32e4f9f34db0c4ab106c56e38e051
font_05_sfnt_off00061a14.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x61A14 129020 bytes
SHA-256: d1e99dafdf2672759a3675eca54f2c8f7e3faf63bcd81c0a9f5ba0fc5dba040e

Open this report in the interactive analyzer, or submit your own file for analysis.