PDF static analysis report

Static analysis result for SHA-256 885ab4a62dba1968…

CLEAN

PDF

399.8 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-26
MD5: 8390a040b499c713efed28ae3a9599f9 SHA-1: 56d1a2f62b2edfefccd132883dd8c43824a97d6b SHA-256: 885ab4a62dba196884ba77bd150d57d9d2a1c364410ce981c55a9009c3ab51f7
20 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Callback phishing phone lure medium SE_CALLBACK_LURE
    Document asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 7

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_032_off00047a22.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x47A22 54844 bytes
SHA-256: 95d140cc38d994a1816a7918042eb1292bb590368b0e590e3ac23c5b871ef372
stream_044_off000552df.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x552DF 18240 bytes
SHA-256: 33e060654ed1208fc726f2323a8a9e7d9de6f6c8c2aedd340c7ed605b422fc95
font_00_sfnt_off00041810.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x41810 29444 bytes
SHA-256: 06e5cff700c4b5eb17781c75d3eda7e987fb98781931510b7e4e20bc848ac355
font_01_sfnt_off00046490.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x46490 219324 bytes
SHA-256: 1e2dd172917b5e5baa7fdca7726ef441322ec72f00fc4ec08b8086b84280d39f
font_03_sfnt_off00050412.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x50412 44772 bytes
SHA-256: c16ac7b97a118c47aa9f02c0caa5a6afdcd370da1d944641cd190a431c99c6a5
font_04_sfnt_off00050e3b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x50E3B 13516 bytes
SHA-256: 4c1c38881c1c2555f48d188fefa495c22ea32e4f9f34db0c4ab106c56e38e051
font_05_sfnt_off00061a16.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x61A16 129020 bytes
SHA-256: d1e99dafdf2672759a3675eca54f2c8f7e3faf63bcd81c0a9f5ba0fc5dba040e

Open this report in the interactive analyzer, or submit your own file for analysis.