PDF static analysis report

Static analysis result for SHA-256 e684dfbd978f17db…

CLEAN

PDF

200.8 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-30
MD5: 6cdf107bc9f50e5c40df5351416a188d SHA-1: 12aad5c866819aaef781c3e22e1aaf7ab59aaf35 SHA-256: e684dfbd978f17dbb64f0d2f3b40580b871ea978be2ab583f448ad2446cdee88
20 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Callback phishing phone lure medium SE_CALLBACK_LURE
    Document asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 8

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off0001d11f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1D11F 10892 bytes
SHA-256: ff0e1598a1b0969a97a9a1494904dbb4a5d8dd53ed278f74a33f3adb41d5fafc
font_01_sfnt_off0001e4a7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1E4A7 12104 bytes
SHA-256: 883364879ae20622a8b3200a2459700638e5f0c62bda57e83de43d2f0488aba1
font_02_sfnt_off00020194.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x20194 29260 bytes
SHA-256: 4f4243b4ab0bba8d951c2b39b00d0cdc5110623b557bc6746a5773e0344741b5
font_03_sfnt_off00025ed1.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x25ED1 183100 bytes
SHA-256: f8ff9cf9d7039e7499e9a6f1e80b4aa52a8afb4c10406de2f685a2e552c94f6e
font_04_sfnt_off00026bf3.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x26BF3 45632 bytes
SHA-256: 600b9ded0355ad16423d0fd04ecf10915410183e1da0b57272cf14e3984b7caf
font_05_sfnt_off00027a6b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x27A6B 29712 bytes
SHA-256: f0cdbfe1ddc5670c78d541476a073fc80ac2fa4c9b4213c3308d3cfefd9830a3
font_06_sfnt_off0002ce62.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2CE62 197108 bytes
SHA-256: 5dff335e62318095aee8e904a789031c5772e9c3297f6a7436f4c1f26d5098a4
font_07_sfnt_off000303f7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x303F7 6096 bytes
SHA-256: 03c02e05377f87b7ffcfeecda6ee9d693b22f57d196f7e92f5eec09b0c4d8096

Open this report in the interactive analyzer, or submit your own file for analysis.