File scan report
Verdict Safe
Is this PDF document safe? Yes, no threats found.
This PDF document is widely seen since 2018, flagged by none of the 63 antivirus engines that checked it, and only launched normal Adobe Reader activity in sandbox analysis.
Read the whole reasonShow less
Strong evidence · Widely seen for a long time, and nothing harmful found.
This PDF document can be opened normally; keep your PDF reader up to date and your antivirus enabled.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website it came from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 63 flagged
- Flagged 0
- No detection 63
- No result 12
- Code signing Not applicable
- Test run Completed
- First seen 8y ago
Chapter 02
Why we think so
0 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
Across four sandbox runs it only opened in Adobe Reader, which contacted Adobe update servers, with no injection or hostile behaviour recorded. It has been submitted by over a thousand sources since 2018.
Detection coverage is adequate, and none of the 63 antivirus engines that checked it flagged the file, including all major antivirus engines. The four sandbox runs show Adobe Reader and its updater components running, writing font caches and preferences, and contacting Adobe servers, which is ordinary viewer behaviour. A credential-access mapping appeared without any process targeting a credential store, which is common when documents open in their viewer. All 12 contacted hosts we checked carry no malicious or suspicious reputation. The file is long-established and appears in a known-software reference database, and its listing in an open-upload feed is not backed by any other evidence.
What We Detected
None of the 63 antivirus engines that checked it flagged this PDF document, and no malware-specific rules matched. The file has been seen by more than 1,000 sources since mid-2018 and appears in a known-software reference database.
Threat Behavior
Four sandbox runs opened the document in Adobe Reader. Activity was limited to Reader components, font cache writes, and connections to Adobe update and service domains. No process injection, persistence, or credential-store access was recorded, and the checked contacted hosts have no malicious reputation.
What To Do Now
No action is needed. As with any document, keep your PDF reader updated and your security software enabled.
Where this verdict could be wrong1 caveat
- The hash also appears in an open-upload sample feed, but that feed accepts any file, including dummy PDFs, and no engine, rule or sandbox run corroborates it.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 63 antivirus engines that checked it flagged the file
- Sandbox runs showed only normal Adobe Reader activity
- Seen by over 1,000 sources since 2018
- Contacted hosts checked have no malicious or suspicious reputation
- Listed in a known-software reference database
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in 4 isolated tests; no test environment rated what it did as risky.
Test run summary
Capture complete- 4isolated sandbox runs
- 7sandbox rule tags
- 4spawned processes
- 11network contacts
- 40filesystem & mutex artifacts
Includes the sandbox verdicts, 7 mapped techniques, every process, file, registry and network entry and 10 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 63 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- File name
- PDF document
- Format
- Size
- 13.3 kB
- Code signing
- Not applicable to this file type
- Last analyzed
- Oct 18, 2026, 5:06 PM UTC
- SHA-256
3df79d34abbca99308e79cb94461c1893582604d68329a41fd4bec1885e6adb4- SHA-1
90ffd2359008d82298821d16b21778c5c39aec36- MD5
2942bfabb3d05332b66eb128e0842cff
First scanned Updated
Verdict history
- Malicious
- Safeafter a new scan
Ratings change when antivirus engines, our checks or MalwareTips staff learn more about a file.
Includes every engine result (75), 1 matched signature rule and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is this PDF document safe?
What is this PDF document?
How many antivirus engines detected this PDF document?
What is the SHA-256 hash of this PDF document?
Is it safe to open this PDF document?
How up to date is this analysis of this PDF document?
Community
Member reviews and reports for this exact file hash.