PDF static analysis report

Static analysis result for SHA-256 e85aaed25b907366…

CLEAN

PDF

197.7 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-30
MD5: 81c2c4db68ec4d1c56f2f7e4845a7276 SHA-1: 7d43545a51d99b11161bc2dd543f112b53e3818a SHA-256: e85aaed25b9073669fe920ba26b6ccaf203cb677b6efa584109cf95e4a148d78
20 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Callback phishing phone lure medium SE_CALLBACK_LURE
    Document asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.

Extracted artifacts 8

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off0001c576.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1C576 11044 bytes
SHA-256: 9d16630703ca96e768cc0365f30c412b52354ffe771a92d0480f87f03e121eb5
font_01_sfnt_off0001d95f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1D95F 12104 bytes
SHA-256: 883364879ae20622a8b3200a2459700638e5f0c62bda57e83de43d2f0488aba1
font_02_sfnt_off0001f64c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1F64C 28964 bytes
SHA-256: ffa377c89a44a72945be98c1cc75925ceab3c27393fc211a1525e15410fba231
font_03_sfnt_off0002525b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2525B 183100 bytes
SHA-256: f8ff9cf9d7039e7499e9a6f1e80b4aa52a8afb4c10406de2f685a2e552c94f6e
font_04_sfnt_off00025f7d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x25F7D 45632 bytes
SHA-256: 600b9ded0355ad16423d0fd04ecf10915410183e1da0b57272cf14e3984b7caf
font_05_sfnt_off00026df5.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x26DF5 29832 bytes
SHA-256: 55f55d422b32ec30eda870bb64ca8cd54335be31f097656a66b2e82d0f16cb01
font_06_sfnt_off0002c227.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2C227 197108 bytes
SHA-256: 5dff335e62318095aee8e904a789031c5772e9c3297f6a7436f4c1f26d5098a4
font_07_sfnt_off0002f7bc.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2F7BC 6096 bytes
SHA-256: 03c02e05377f87b7ffcfeecda6ee9d693b22f57d196f7e92f5eec09b0c4d8096