PDF static analysis report

Static analysis result for SHA-256 b7d034c2457830ab…

SUSPICIOUS

PDF

350.4 KB Authoring application: Skia/PDF m150 Google Docs Renderer First seen: 2026-05-21
MD5: 03133671738106a77161649eb55eb58f SHA-1: 03109652b7a654285e4bf0ba5d32cc1e56753b5f SHA-256: b7d034c2457830ab4ac2a9af37a424106bf9045d6a3ba70c11e35253d2d9f091
40 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 1

  • Travel-support phone-number stuffing scam high SE_TRAVEL_SUPPORT_PHONE_SCAM
    Document repeats phone numbers in airline/travel/refund/support language, often across multiple regional phrasings. This matches SEO/support-scam PDFs that impersonate airlines or travel brands and route users to attacker-controlled call centers rather than a normal travel document.
🗂 Part of campaign: volaris.com 813 samples

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 10

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_023_off00027ece.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x27ECE 18240 bytes
SHA-256: 33e060654ed1208fc726f2323a8a9e7d9de6f6c8c2aedd340c7ed605b422fc95
stream_030_off0002a7be.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x2A7BE 148568 bytes
SHA-256: 50b399c7eff40ee0bdadf7e3dda59b83a2baff5a1e721af33328e1694e59b729
font_01_sfnt_off00035745.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x35745 37320 bytes
SHA-256: fbea5ad74802f6bb8c99483a17059a6b8d18c2a6e16356cf8aa323a6e2653da8
font_02_sfnt_off0004795e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4795E 220512 bytes
SHA-256: 2392c33f16ebb5c292206dc64bb6d459d6574393df7395eff39c6d79d68da098
font_03_sfnt_off00048b3b.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x48B3B 14564 bytes
SHA-256: d64266873aea05d76d4ffa114c172b9dcf73eb004a433eab241029a0076e6831
font_04_sfnt_off0004ae93.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x4AE93 52036 bytes
SHA-256: 8123ec74dabc97af711fc6c6706dad8071ba14f9496fbcd8c0c66d4b033c0ba1
font_05_sfnt_off00050ea9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x50EA9 163312 bytes
SHA-256: 6f505579fe1fd292b58a7301cbd8f3757ac6910de740deadd13a6ebeeea7e3aa
font_06_sfnt_off00051a94.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x51A94 13508 bytes
SHA-256: bd9e83287b0d68b69d51ade3b1a6d88c9d79616100fdc6bf8b94f35bdafefa18
font_07_sfnt_off00053cfa.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x53CFA 47796 bytes
SHA-256: e63a51dfd52b6a8c3166c59ef4814eb245c5181b09637107ec97ab4eb48e1cf5
font_08_sfnt_off000555a6.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x555A6 6096 bytes
SHA-256: 03c02e05377f87b7ffcfeecda6ee9d693b22f57d196f7e92f5eec09b0c4d8096

Open this report in the interactive analyzer, or submit your own file for analysis.