PBE IT logo
PBE Security Analysis Report

Clean (high confidence)

Disposition

Recommended action: No CAPE indicators were found after filtering. Release is reasonable if the source matches user expectation.

CAPE Raw Score
0.0
unfiltered, includes baseline noise
v0.2 Filtered Score
0.00
noise removed, weighted
Delta
= 0.00
noise correction

This disposition is based on the v0.2 scoring model calibrated against benign Microsoft binaries. It is informational, not a guarantee.

Ticket Response (copy and paste)

Drafted for the requester. Adjust greeting/closing as needed.

Thanks for checking with us on Chk08435.pdf before you opened it.

IT ran the file in our analysis sandbox for 42 seconds. Our analysis rated this at 0.00 out of 10, which we classify as Clean (high confidence). During the analysis, contacted 25 network indicator(s), did not drop any files to disk.

Based on what we observed, this file is reasonable to open if it came from a source you recognize and expected.

Please continue to forward anything you are unsure about. Catching it before you open is exactly the right move.

PBE IT Security

Visual Evidence

2 screenshot(s) captured during analysis. Showing 2. View all in CAPE

Screenshot 0001
frame 0001
Screenshot 0002
frame 0002

What the Sample Did (Plain English)

Scoring Breakdown — How we got from 0.0 to 0.00

Score Components

STRONG signatures0 signature(s), contributed 0.0
UNBACKED family (capped at 2.0)raw=0.0, applied=0.0
AMBIGUOUS re-amplification0 signature(s), contributed 0.0 (only fires when 2+ STRONG present)
UNKNOWN signatures (half weight)contributed 0.0
Detection floor applied?no
Final v0.2 Score0.00 / 10

STRONG Signatures (real malicious signal)

No strong signatures.

AMBIGUOUS Signatures (common on benign, can be real)

No ambiguous signatures.

UNBACKED Family (capped — common on asm/JIT code, can be real)

No unbacked signatures.

UNKNOWN Signatures (not yet classified, half weight)

No unknown signatures.

NOISE Signatures (suppressed, score = 0)

No noise signatures.

SHELL_HOST Signatures (suppressed for non-PE samples)

No shell_host signatures.

File Details
File nameChk08435.pdf
File typePDF document, version 1.4, 1 page(s)
Size (bytes)21689
MD5e09ec38dd21fa8078b38cfb9f6707fc0
SHA15d57e813012b7ccdebdb71405b06baa93fc3dbbb
SHA2561c7a88af62fac38324700f9344e9fab54330777f210f16cf094ea03ae84eb258
VirusTotalOpen in VirusTotal
Sandbox Run Details
Task ID52
Started2026-07-28 18:28:54
Ended2026-07-28 18:29:36
Duration (sec)42
Packagepdf
Routeinternet
Machinecuckoo2
Tech Override

No override active. The model verdict above is the current classification.

Report generated on 07-28-2026 18:30:01 by PBESANDBOX.PBESECURE.COM