PDF static analysis report

Static analysis result for SHA-256 65408e91204a8e53…

CLEAN

PDF

189.8 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-26
MD5: 87497f4179a3f0969e869149537f6963 SHA-1: a7c9b89b18199b3f86217e566ecafc8388f402d4 SHA-256: 65408e91204a8e5320334388c59f2bb71f17c87cae2a7ee59b8c13bf435bcda6
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://aeromexico.com/ PDF link annotation
🗂 Part of campaign: volaris.com 813 samples

Extracted artifacts 6

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_039_off0001d121.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x1D121 32904 bytes
SHA-256: 125ffab56b68613642c21531d1e45355d3907e8f652765a123f0de872e8f2998
font_00_sfnt_off0001825e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1825E 163312 bytes
SHA-256: 6f505579fe1fd292b58a7301cbd8f3757ac6910de740deadd13a6ebeeea7e3aa
font_01_sfnt_off00019a5a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x19A5A 22652 bytes
SHA-256: 047be8c9b86bceafd79d787d6f3c6c49b12815e6e023d3f6f36ae615ee7ce57f
font_03_sfnt_off0002429c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2429C 187608 bytes
SHA-256: f358241090184caa25dea029d5aab857df339cac5a1aa34c95a1e332c7475d58
font_04_sfnt_off0002af69.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2AF69 50212 bytes
SHA-256: b138b6eac34ae8b48fc3c87b2f23959fdcf9b1e38ca9bfb92a7bbe77b011cf0a
font_05_sfnt_off0002be0a.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x2BE0A 99484 bytes
SHA-256: 8d14a283575c6ed9a5c53106c74efe375b0fd1acc1ce5c8703929deaf4dcc5c7