PDF static analysis report

Static analysis result for SHA-256 46ccbb99ec780ee3…

CLEAN

PDF

337.0 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-26
MD5: f804b41612718c351567d7453233621b SHA-1: 5e3cb9d85d49ef943c74838c4ff589446f91c37e SHA-256: 46ccbb99ec780ee355674179ab60d4325efa8bab53fcdfa4c67be754b0e83685
20 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Callback phishing phone lure medium SE_CALLBACK_LURE
    Document asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.
🗂 Part of campaign: volaris.com 813 samples

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 13

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_014_off00024166.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x24166 152576 bytes
SHA-256: 9d70e604f0e2d78508e465da3ae5ff1a601e10580445b0a69e267553fc4e99e3
font_00_sfnt_off00023148.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x23148 217676 bytes
SHA-256: 50459d701c9b9fb1248dd8d8578c31cbd34fd745d62f414245592d31e709bf74
font_02_sfnt_off0002d5d5.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2D5D5 2652 bytes
SHA-256: 748e330efbd0a9b19ff067d71ad5fd78e36cdf139618a421ef3f30237332e4c1
font_03_sfnt_off0002dcc2.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2DCC2 26324 bytes
SHA-256: 74316ed8ad49124eb0a92eedf5188503d4f769a9c8afa14583bcb2c69e0e7392
font_04_sfnt_off00031b9f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x31B9F 50208 bytes
SHA-256: 305bf8c7a76ca05575d24c7c0fa3c8ce32844576d3cdaa976f680868b869fef6
font_05_sfnt_off00032b07.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x32B07 23468 bytes
SHA-256: 475e836df18c3999aec3d40d1044ceae265764d3605aeff263842cffa3a02988
font_06_sfnt_off00036c6b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x36C6B 146884 bytes
SHA-256: 530df787813db18c06963fe1317686f66526e7fd5636f7724faa68c535ab70e8
font_07_sfnt_off0003f7f8.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x3F7F8 183540 bytes
SHA-256: 29c87822b253a979b17fe825ffa76b795508b98782fa525849521d4c39c89477
font_08_sfnt_off000407a4.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x407A4 16512 bytes
SHA-256: 8b5ff8ccb0b35dd558793d2bed8e359e2e49ffb4223f5d3301ae623ca00af0e0
font_09_sfnt_off000427b2.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x427B2 33180 bytes
SHA-256: 44671bfb45027dd4e1fa12e8f8051b2eed14af0f7da00515fee3209e1d7f7112
font_10_sfnt_off00047be7.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x47BE7 38580 bytes
SHA-256: 36f20373189f38c110363314f8ec0a7e9266b624d65cf5c46dbe362b25191df2
font_11_sfnt_off0004c912.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4C912 36052 bytes
SHA-256: 1406d15d9858b1d75a574fc70ee44387124cfb3cebee90e37b29a622c905f544
font_12_sfnt_off000511a9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x511A9 50400 bytes
SHA-256: 3933f0a171d2e1d52238afd1697f635a25c78debe3762eae68e9de3aebda16b8

Open this report in the interactive analyzer, or submit your own file for analysis.