File scan report
Verdict Safe
Is this PDF document safe? Yes, no threats found.
No engines flagged this PDF or identified a malware family, although embedded JavaScript and its short history (seen shortly before Oct 14, 2026) justify ordinary document…
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website it came from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 63 flagged
- Flagged 0
- No detection 63
- No result 12
- Code signing Not applicable
- Test run Not run
- First seen 11d ago
Chapter 02
Why we think so
4 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 63 antivirus engines that checked it flagged the PDF, including 17 major antivirus engines, and no malware-specific external intelligence matched it. Embedded JavaScript and the file's limited history warrant caution, especially because no sandbox observation or complete host-reputation check is available.
The strongest evidence is that 0 of the 63 antivirus engines that checked it flagged the document, with all 17 reporting major antivirus engines returning no detection. No engine family label, MalwareBazaar record, or malware-specific YARA rule corroborates a threat. The PDF does contain embedded JavaScript, but that feature is not inherently hostile and no observation from the test run is available to establish what it does. The file is from one submitter, so long-term reputation is unavailable. Five file-type-only similar samples previously received benign outcomes, though that comparison is weak because it reflects PDF format rather than close content similarity.
What We Detected
None of the 63 antivirus engines that checked it flagged the PDF, including 17 major antivirus engines. No malware family was named, and no MalwareBazaar or malware-specific YARA match was present.
Threat Behavior
The document is tagged as containing embedded JavaScript. JavaScript is used by legitimate interactive PDFs, but it can also trigger unwanted actions or exploit vulnerable readers. No completed sandbox run is available, so the script's behavior in the test run was not observed, and no complete contacted-host reputation result is available.
What To Do Now
Open the document only if its sender and expected purpose are recognizable. Keep the PDF reader and security software enabled and updated; consider disabling document JavaScript within the reader if interactive features are unnecessary.
Where this verdict could be wrong3 caveats
- The PDF contains embedded JavaScript, which can be legitimate but can also support document-based exploits or scripted actions.
- The file was first observed on Oct 14, 2026 from one submitter, so its reputation and prevalence are not yet established.
- No sandbox run completed, and no complete contacted-host reputation result is available.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 63 antivirus engines that checked it flagged the file.
- All 17 reporting major antivirus engines returned no detection.
- No malware family or suspicious engine label was reported.
- No malware-specific YARA or MalwareBazaar match was found.
- Five other PDF samples in the comparison set previously received benign outcomes.
- The PDF contains embedded JavaScript.
- It was first observed on Oct 14, 2026 and has only one known submission.
- No completed sandbox observation is available.
- No complete reputation check exists for any hosts the document might contact when it ran.
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
None of the 63 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- File name
- PDF document
- Format
- Size
- 2.0 MB
- Code signing
- Not applicable to this file type
- Last analyzed
- Oct 14, 2026, 6:39 PM UTC
- SHA-256
ba21c0717332b624abf300ae87b42616692cda8f95891ba0ece87c00afe4531a- SHA-1
5a215e9c71f5ab6631d01a592160ef2120e90276- MD5
d8f62c1cf89cd67415770b9bdd2660c9
First scanned
Antivirus consensus
0 of 63 engines flagged this file
12 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-233 engines0flagged
- Low-trust12 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaNo result
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceClean
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticNo result
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootNo result
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Barely seen in the wild and first surfaced recently. That limits reputation evidence, but rarity alone is not proof of malware.
Chapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is this PDF document safe?
What is this PDF document?
How many antivirus engines detected this PDF document?
What is the SHA-256 hash of this PDF document?
Is it safe to open this PDF document?
How up to date is this analysis of this PDF document?
Community
Member reviews and reports for this exact file hash.