File scan report
Verdict Safe
Is this PDF document safe? Yes, no threats found.
A 6-year-old PDF with zero malicious detections across 76 engines and medium prevalence.
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
The evidence supports treating the file as benign; no additional action is required beyond normal security hygiene.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website it came from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 61 flagged
- Flagged 0
- No detection 61
- No result 15
- Code signing Not applicable
- Test run Completed
- First seen 7y ago
Chapter 02
Why we think so
0 points against it and 3 in its favour, checked against the scan evidence.
The reasoning behind this verdict
All 61 antivirus engines that checked it returned clean results with 18 major antivirus engines explicitly marking it harmless. The file has been submitted 27 times over six years with no malicious files it created or sandbox verdicts.
Zero malicious detections from any engine tier combined with a medium-prevalence history spanning 2815 days indicate a long-standing benign document. Sandbox execution produced only techniques common in legitimate software and no offensive MITRE activity. The single rule-based trigger notes direct-IP traffic but explicitly requires host-reputation correlation that is unavailable here. No external-intel hits or dropped malicious files it created exist.
What We Detected
76 engines scanned the PDF; none flagged malicious content. 18 major antivirus engines explicitly returned clean. Sandbox analysis recorded two MITRE techniques common in legitimate software and direct-IP contacts, but no offensive techniques or malicious verdicts.
Threat Behavior
No persistence mechanisms, registry modifications, or dropped malicious files it created were observed. The rule-based rule that fired acknowledges direct-IP traffic can occur in legitimate software and requires further correlation.
What To Do Now
The file shows no malicious indicators. Continue normal handling while keeping security software enabled.
Where this verdict could be wrong1 caveat
- The missing contacted-host reputation result means the reputation cross-check for IPs 8.8.8.8, 18.213.11.84, 23.40.140.168 was not completed; cannot assert clean network behaviour.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- Zero malicious detections across 76 engines
- Medium prevalence over six years
- No malicious sandbox verdict or files it created
6 sources checked · 5 complete · 1 partial. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 2sandbox rule tags
- 3spawned processes
- 2network contacts
- 38filesystem & mutex artifacts
Includes 2 mapped techniques, every process, file, registry and network entry and 7 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 61 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 partial. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- File name
- PDF document
- Format
- Size
- 599.8 kB
- Code signing
- Not applicable to this file type
- Last analyzed
- Aug 26, 2026, 7:49 PM UTC
- SHA-256
c8a2fe5dd9f49501e5a2ae00496caf6289d490c25ee14897d4d21e6b2c852ee4- SHA-1
cb2d0d502ad9bc5cefc1ea4d916031782e4bc46e- MD5
9ab2de103c4ea432077a5b8435f3ca5d
First scanned
Includes every engine result (76) and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is this PDF document safe?
What is this PDF document?
How many antivirus engines detected this PDF document?
What is the SHA-256 hash of this PDF document?
Is it safe to open this PDF document?
How up to date is this analysis of this PDF document?
Community
Member reviews and reports for this exact file hash.