File scan report
Verdict Safe
Is this PDF document safe? Yes, no threats found.
This PDF document drew no detections from any of 75 antivirus engines, and sandbox runs showed only normal Adobe Acrobat activity with no harmful behaviour.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
This PDF document appears safe to open. Keep your PDF reader up to date and your security software enabled.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website it came from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 63 flagged
- Flagged 0
- No detection 63
- No result 12
- Code signing Not applicable
- Test run Completed
- First seen 9mo ago
Chapter 02
Why we think so
1 point against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 63 antivirus engines that checked it flagged this PDF document, including every major antivirus engine. Four sandbox runs opened it in Adobe Acrobat and recorded only the reader's own processes and Adobe or Microsoft service traffic. It contains form scripting, which is common in interactive PDFs.
None of the 63 antivirus engines that checked it flagged the file, and all 18 major antivirus engines reported it clean. Four sandbox runs opened it and saw only Adobe Acrobat and its helper processes. Network traffic went to Adobe data and Microsoft background hosts, and none of the 13 hosts we checked is known to be malicious. The injection and credential-related labels came from generic sandbox mappings, with no target process recorded. Public malware databases and community rule sets have no entry for this hash. The embedded JavaScript and auto-action flags fit an interactive form document and are not corroborated by any other evidence.
What We Detected
No antivirus detections: 0 of the 63 antivirus engines that checked it flagged this PDF document, and all major antivirus engines returned clean results. Public malware databases and community YARA rule sets returned no matches.
Threat Behavior
Four sandbox runs opened the document in Adobe Acrobat. They recorded only Acrobat, its embedded browser component and its collaboration sync helper. Network contacts went to Adobe data and Microsoft content hosts, and no process was injected into. The document contains form scripting and an automatic action, which is typical of interactive PDFs, and no harmful effect was observed.
What To Do Now
The document can be opened normally. As a general precaution, keep your PDF reader updated, and consider disabling JavaScript in the reader if you do not need interactive forms.
Where this verdict could be wrong1 caveat
- The document carries embedded JavaScript and an automatic action. These are common in form-enabled PDFs but can also be abused; our own static analysis of the bytes was not available to inspect them.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 63 antivirus engines that checked it flagged the file.
- Four sandbox runs showed only normal Adobe Acrobat activity.
- None of the 13 contacted hosts is known to be malicious or suspicious.
- No listings in public malware databases or community rule sets.
- The document contains embedded JavaScript and an automatic action, a feature set that is occasionally abused in malicious PDFs.
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in 4 isolated tests; no test environment rated what it did as risky.
Test run summary
Capture complete- 4isolated sandbox runs
- 11sandbox rule tags
- 11spawned processes
- 9network contacts
- 35filesystem & mutex artifacts
Includes the sandbox verdicts, 11 mapped techniques, every process, file, registry and network entry and 10 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 63 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- File name
- PDF document
- Format
- Size
- 48.7 MB
- Code signing
- Not applicable to this file type
- Last analyzed
- Oct 22, 2026, 5:41 PM UTC
- SHA-256
60680310d4c48d5d27dad7bfaf6b36b9bd7baaf8db5195f828240be880f29434- SHA-1
746072ee35fd048913e3e2d79aaa96d89a09fa81- MD5
592ed80cad6f903e9e35cc8693f4ef3f
First scanned
Includes every engine result (75), 2 matched signature rules and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is this PDF document safe?
What is this PDF document?
How many antivirus engines detected this PDF document?
What is the SHA-256 hash of this PDF document?
Is it safe to open this PDF document?
How up to date is this analysis of this PDF document?
Community
Member reviews and reports for this exact file hash.