CLEAN
20
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0001
Heuristics 1
-
Callback phishing phone lure medium SE_CALLBACK_LUREDocument asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.
Extracted artifacts 7
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0001fdfe.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x1FDFE | 30092 bytes |
SHA-256: 8bdc8242bf908bd64bb8f2e00f01875fd8053b8e8c7cd4245ef0038874d6b30c |
|||
font_01_sfnt_off000247d4.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x247D4 | 181680 bytes |
SHA-256: 1b7235bf77309604817eccc3897c312f342e3835c86efe8b16f5c259281fa181 |
|||
font_02_sfnt_off0002ae0f.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x2AE0F | 12104 bytes |
SHA-256: 883364879ae20622a8b3200a2459700638e5f0c62bda57e83de43d2f0488aba1 |
|||
font_03_sfnt_off0002caf4.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x2CAF4 | 51944 bytes |
SHA-256: 7a60e57b642b8fbdc2b377ab51b7e8c484fc96ffdce79f47e8998195e53cb601 |
|||
font_04_sfnt_off000338f5.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x338F5 | 196396 bytes |
SHA-256: f666aae7fff27946b07f3fac168f3bb88b6078a10a60eed439cab9a013983e2c |
|||
font_05_sfnt_off00034ced.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x34CED | 46568 bytes |
SHA-256: ddf73db0cbef304bc533218acc9315b28e3a375a0ed86f65ecaba16976157f8e |
|||
font_06_sfnt_off0003726a.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x3726A | 6096 bytes |
SHA-256: 03c02e05377f87b7ffcfeecda6ee9d693b22f57d196f7e92f5eec09b0c4d8096 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.