× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 2800ce92b04b23d99f359990a39761fc8434ff1c29889dcd3bbba257d5cba13a
File name: PDFXVwer.zip
Detection ratio: 0 / 59
Analysis date: 2019-01-14 17:39:45 UTC ( 1 month ago ) View latest
Antivirus Result Update
Acronis 20190111
Ad-Aware 20190114
AegisLab 20190114
AhnLab-V3 20190114
Alibaba 20180921
ALYac 20190114
Antiy-AVL 20190114
Arcabit 20190114
Avast 20190114
Avast-Mobile 20190114
AVG 20190114
Avira (no cloud) 20190114
Babable 20180918
Baidu 20190114
BitDefender 20190114
Bkav 20190108
CAT-QuickHeal 20190114
ClamAV 20190114
CMC 20190113
Comodo 20190114
CrowdStrike Falcon (ML) 20180202
Cybereason 20180308
Cylance 20190114
Cyren 20190114
DrWeb 20190114
eGambit 20190114
Emsisoft 20190114
Endgame 20181108
ESET-NOD32 20190114
F-Prot 20190114
F-Secure 20190111
Fortinet 20190114
GData 20190114
Ikarus 20190114
Sophos ML 20181128
Jiangmin 20190114
K7AntiVirus 20190114
K7GW 20190114
Kaspersky 20190114
Kingsoft 20190114
Malwarebytes 20190114
MAX 20190114
McAfee 20190114
McAfee-GW-Edition 20190114
Microsoft 20190114
eScan 20190114
NANO-Antivirus 20190114
Palo Alto Networks (Known Signatures) 20190114
Panda 20190113
Qihoo-360 20190114
Rising 20190114
SentinelOne (Static ML) 20181223
Sophos AV 20190114
SUPERAntiSpyware 20190109
Symantec 20190114
TACHYON 20190114
Tencent 20190114
TheHacker 20190113
Trapmine 20190103
TrendMicro 20190114
TrendMicro-HouseCall 20190114
Trustlook 20190114
VBA32 20190114
ViRobot 20190114
Webroot 20190114
Yandex 20190111
Zillya 20190111
ZoneAlarm by Check Point 20190114
Zoner 20190114
The file being studied is a compressed stream! More specifically, it is a ZIP file.
Interesting properties
The studied file contains at least one Portable Executable.
Contained files
Compression metadata
Contained files
2
Uncompressed size
18208695
Highest datetime
2018-12-13 03:31:06
Lowest datetime
2011-12-14 11:32:58
Contained files by extension
xml
1
exe
1
Contained files by type
XML
1
Portable Executable
1
ExifTool file metadata
MIMEType
application/zip

ZipRequiredVersion
20

ZipCRC
0x05dae2c8

FileType
ZIP

ZipCompression
Deflated

ZipUncompressedSize
26759

ZipCompressedSize
9144

FileTypeExtension
zip

ZipFileName
PDFXVW1.xml

ZipBitFlag
0

ZipModifyDate
2011:12:14 11:32:58

File identification
MD5 d72f591dd7e5d7479c809af178ddc11d
SHA1 4278dc31aa67d1f17463d3ddfd7c68187e7a0b1e
SHA256 2800ce92b04b23d99f359990a39761fc8434ff1c29889dcd3bbba257d5cba13a
ssdeep
393216:G96jyP2tVLT4l6J8E5F6fk35svm4Ok/AlNX8:M+LLTHD5F6saG3lNs

File size 17.3 MB ( 18107565 bytes )
File type ZIP
Magic literal
Zip archive data, at least v2.0 to extract

TrID ZIP compressed archive (80.0%)
PrintFox/Pagefox bitmap (var. P) (20.0%)
Tags
contains-pe zip

VirusTotal metadata
First submission 2018-12-14 08:09:01 UTC ( 2 months ago )
Last submission 2019-02-12 21:35:58 UTC ( 3 days, 13 hours ago )
File names pdf-xchange_viewer.exe
1048458
PDFXVwer.zip
PDFXVwer.zip
PDF-XChange Viewer.zip
PDFXVwer (2).zip
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!