PDF static analysis report

Static analysis result for SHA-256 6dbaa37c4a8fdd04…

CLEAN

PDF

197.9 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-30
MD5: acd2907357bb634209a075d1e8150778 SHA-1: cd4918605223affb50ac6c9531a5fd189b69d92d SHA-256: 6dbaa37c4a8fdd04500e9a8207d11e0182e58f71b6383277d1194f327071cde9
20 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Callback phishing phone lure medium SE_CALLBACK_LURE
    Document asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.

Extracted artifacts 8

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off0001c5d0.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1C5D0 11208 bytes
SHA-256: 6916b2bae6523b4f0aa2c68499080a5545c4f5aae1c7255e2e99600ca23d558a
font_01_sfnt_off0001da28.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1DA28 12104 bytes
SHA-256: 883364879ae20622a8b3200a2459700638e5f0c62bda57e83de43d2f0488aba1
font_02_sfnt_off0001f715.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1F715 28964 bytes
SHA-256: ffa377c89a44a72945be98c1cc75925ceab3c27393fc211a1525e15410fba231
font_03_sfnt_off00025324.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x25324 183100 bytes
SHA-256: f8ff9cf9d7039e7499e9a6f1e80b4aa52a8afb4c10406de2f685a2e552c94f6e
font_04_sfnt_off00026046.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x26046 45632 bytes
SHA-256: 600b9ded0355ad16423d0fd04ecf10915410183e1da0b57272cf14e3984b7caf
font_05_sfnt_off00026ebe.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x26EBE 29832 bytes
SHA-256: 55f55d422b32ec30eda870bb64ca8cd54335be31f097656a66b2e82d0f16cb01
font_06_sfnt_off0002c2f0.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2C2F0 197108 bytes
SHA-256: 5dff335e62318095aee8e904a789031c5772e9c3297f6a7436f4c1f26d5098a4
font_07_sfnt_off0002f885.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2F885 6096 bytes
SHA-256: 03c02e05377f87b7ffcfeecda6ee9d693b22f57d196f7e92f5eec09b0c4d8096