CLEAN
20
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0001
Heuristics 1
-
Callback phishing phone lure medium SE_CALLBACK_LUREDocument asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.
Extracted artifacts 13
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_014_off0002412c.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x2412C | 152576 bytes |
SHA-256: 9d70e604f0e2d78508e465da3ae5ff1a601e10580445b0a69e267553fc4e99e3 |
|||
font_00_sfnt_off0002310e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x2310E | 217676 bytes |
SHA-256: 50459d701c9b9fb1248dd8d8578c31cbd34fd745d62f414245592d31e709bf74 |
|||
font_02_sfnt_off0002d59b.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x2D59B | 2652 bytes |
SHA-256: 748e330efbd0a9b19ff067d71ad5fd78e36cdf139618a421ef3f30237332e4c1 |
|||
font_03_sfnt_off0002dc88.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x2DC88 | 24304 bytes |
SHA-256: 2dfce70c827fb15e49544d4b05638f4eb8607a62bdc53239c15286e119274caf |
|||
font_04_sfnt_off00031403.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x31403 | 50208 bytes |
SHA-256: 305bf8c7a76ca05575d24c7c0fa3c8ce32844576d3cdaa976f680868b869fef6 |
|||
font_05_sfnt_off0003236b.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x3236B | 23468 bytes |
SHA-256: 475e836df18c3999aec3d40d1044ceae265764d3605aeff263842cffa3a02988 |
|||
font_06_sfnt_off000364cf.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x364CF | 146884 bytes |
SHA-256: 530df787813db18c06963fe1317686f66526e7fd5636f7724faa68c535ab70e8 |
|||
font_07_sfnt_off0003f05c.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x3F05C | 183540 bytes |
SHA-256: 29c87822b253a979b17fe825ffa76b795508b98782fa525849521d4c39c89477 |
|||
font_08_sfnt_off00040008.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x40008 | 16512 bytes |
SHA-256: 8b5ff8ccb0b35dd558793d2bed8e359e2e49ffb4223f5d3301ae623ca00af0e0 |
|||
font_09_sfnt_off00042016.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x42016 | 33180 bytes |
SHA-256: 44671bfb45027dd4e1fa12e8f8051b2eed14af0f7da00515fee3209e1d7f7112 |
|||
font_10_sfnt_off0004744b.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x4744B | 38580 bytes |
SHA-256: 36f20373189f38c110363314f8ec0a7e9266b624d65cf5c46dbe362b25191df2 |
|||
font_11_sfnt_off0004c176.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x4C176 | 36052 bytes |
SHA-256: 1406d15d9858b1d75a574fc70ee44387124cfb3cebee90e37b29a622c905f544 |
|||
font_12_sfnt_off00050a0d.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x50A0D | 50400 bytes |
SHA-256: 3933f0a171d2e1d52238afd1697f635a25c78debe3762eae68e9de3aebda16b8 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.