PDF static analysis report

Static analysis result for SHA-256 5744f855ffd7a5a7…

CLEAN

PDF

224.9 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-27
MD5: 35d5c8df47d8802bf56c0d8a64af9c11 SHA-1: 2f389fa41c5d9ddc2faacae483d87bca1e321260 SHA-256: 5744f855ffd7a5a7211ccf245b9825e6667af3db4ad9175a0a487a3124013559
20 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Callback phishing phone lure medium SE_CALLBACK_LURE
    Document asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.

Extracted artifacts 7

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off0001fdfe.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1FDFE 30092 bytes
SHA-256: 8bdc8242bf908bd64bb8f2e00f01875fd8053b8e8c7cd4245ef0038874d6b30c
font_01_sfnt_off000247d4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x247D4 181680 bytes
SHA-256: 1b7235bf77309604817eccc3897c312f342e3835c86efe8b16f5c259281fa181
font_02_sfnt_off0002ae0f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2AE0F 12104 bytes
SHA-256: 883364879ae20622a8b3200a2459700638e5f0c62bda57e83de43d2f0488aba1
font_03_sfnt_off0002caf4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2CAF4 51944 bytes
SHA-256: 7a60e57b642b8fbdc2b377ab51b7e8c484fc96ffdce79f47e8998195e53cb601
font_04_sfnt_off000338f5.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x338F5 196396 bytes
SHA-256: f666aae7fff27946b07f3fac168f3bb88b6078a10a60eed439cab9a013983e2c
font_05_sfnt_off00034ced.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x34CED 46568 bytes
SHA-256: ddf73db0cbef304bc533218acc9315b28e3a375a0ed86f65ecaba16976157f8e
font_06_sfnt_off0003726a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3726A 6096 bytes
SHA-256: 03c02e05377f87b7ffcfeecda6ee9d693b22f57d196f7e92f5eec09b0c4d8096