I always run any zip/pdf file through https://www.virustotal.com/gui/home/upload