File scan report
Verdict Safe
Is this PDF document safe? Yes, no threats found.
No antivirus engine detected a threat in this PDF, although its short history (seen shortly before Sep 11, 2026) and lack of the test run warrant ordinary attachment caution.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website it came from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 62 flagged
- Flagged 0
- No detection 62
- No result 13
- Code signing Not applicable
- Test run Not run
- First seen 1mo ago
Chapter 02
Why we think so
4 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
All 62 antivirus engines that checked it returned no malicious or suspicious detection, including 16 major antivirus engines, and no external intelligence source matched the document. Confidence is moderated because the PDF is has only two submissions, and was not executed in a completed sandbox.
The strongest evidence is broad static agreement: 0 of the 62 antivirus engines that checked it flagged the PDF, with Microsoft, Kaspersky, BitDefender, ESET-NOD32, and other major antivirus engines reporting no detection. Research intelligence also produced no YARAify, MalwareBazaar, or CIRCL match. No rule-based rule fired, and there is no brand mismatch or contaminated input field. However, the file is and has only two submissions, so reputation history remains limited. No completed observation from the test run or complete contacted-host reputation result is available, preventing conclusions about execution-time behavior.
What We Detected
None of the 62 antivirus engines that checked it identified the PDF as malicious or suspicious. YARAify returned zero matching rules, while MalwareBazaar and CIRCL returned no record.
Threat Behavior
No completed sandbox observation is available, so the document's execution-time behavior was not observed. A complete contacted-host reputation check is also unavailable. The PDF is and has only two recorded submissions, which limits reputation-based assurance.
What To Do Now
Open the attachment only if it was expected and the sender can be verified through a trusted channel. Keep security software and the PDF reader enabled and fully updated, especially because evidence from the test run is unavailable.
Where this verdict could be wrong3 caveats
- The "rare and newly seen" prevalence rating means the file was first observed on Sep 11, 2026 and has only two recorded submissions.
- The absence of a completed sandbox run leaves embedded actions, exploit attempts, and other behavior in the test run unobserved.
- The missing contacted-host reputation result means no complete reputation cross-check of possible network contacts is available.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- 0 of the 62 antivirus engines that checked it reported a malicious or suspicious detection
- No YARAify, MalwareBazaar, or CIRCL match
- No triggered rules
- No brand mismatch or adversarial-input flag
- File with only two recorded submissions
- No completed sandbox observation
- No complete contacted-host reputation result
- No similar-hash history available
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
None of the 62 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- File name
- PDF document
- Format
- Size
- 241.7 kB
- Code signing
- Not applicable to this file type
- Last analyzed
- Sep 11, 2026, 12:59 PM UTC
- SHA-256
9c3b953f55fccabf193e53b99ffbfcbd23f60968abd8f3aabb061fb7d8b812fe- SHA-1
93e9a8d65de286ab500f8eca6c250119963bdcb7- MD5
d1236de75d7ce063e66424ba686f5c8d
First scanned
Includes every engine result (75) and how widely the file has been seen.
Show the technical evidenceChapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is this PDF document safe?
What is this PDF document?
How many antivirus engines detected this PDF document?
What is the SHA-256 hash of this PDF document?
Is it safe to open this PDF document?
How up to date is this analysis of this PDF document?
Community
Member reviews and reports for this exact file hash.