× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 5843db10c8b066f0e35de4601f600e962c18a20062697bc82244212a96bf7eaf
File name: 12cribs_kfirst.pdf
Detection ratio: 0 / 56
Analysis date: 2017-05-05 18:25:22 UTC ( 1 year, 1 month ago )
Antivirus Result Update
Ad-Aware 20170505
AegisLab 20170505
AhnLab-V3 20170505
Alibaba 20170505
ALYac 20170505
Antiy-AVL 20170505
Arcabit 20170505
Avast 20170505
AVG 20170505
Avira (no cloud) 20170505
AVware 20170505
Baidu 20170503
BitDefender 20170505
Bkav 20170505
CAT-QuickHeal 20170505
ClamAV 20170505
CMC 20170505
Comodo 20170505
CrowdStrike Falcon (ML) 20170130
Cyren 20170505
DrWeb 20170505
Emsisoft 20170505
Endgame 20170503
ESET-NOD32 20170505
F-Prot 20170505
F-Secure 20170505
Fortinet 20170505
GData 20170505
Ikarus 20170505
Sophos ML 20170413
Jiangmin 20170505
K7AntiVirus 20170505
K7GW 20170505
Kaspersky 20170505
Kingsoft 20170505
Malwarebytes 20170505
McAfee 20170505
McAfee-GW-Edition 20170505
Microsoft 20170505
eScan 20170505
NANO-Antivirus 20170505
nProtect 20170505
Palo Alto Networks (Known Signatures) 20170505
Panda 20170505
Qihoo-360 20170505
Rising 20170504
SentinelOne (Static ML) 20170330
Sophos AV 20170505
SUPERAntiSpyware 20170505
Symantec 20170505
Symantec Mobile Insight 20170504
Tencent 20170505
TheHacker 20170505
TrendMicro 20170505
TrendMicro-HouseCall 20170505
VBA32 20170505
VIPRE 20170505
ViRobot 20170505
Webroot 20170505
WhiteArmor 20170502
Yandex 20170504
Zillya 20170505
ZoneAlarm by Check Point 20170505
Zoner 20170505
The file being studied is a PDF document! The document's header reveals it is using the following file format specification: %PDF-1.5.
PDFiD information
This PDF document contains 2 object streams. A stream object is just a sequence of bytes and very often is only used to store images and page descriptions, however, since it is not limited in length many attackers use these artifacts in conjunction with filters to obfuscate other objects.
This PDF document has 50 pages, please note that most malicious PDFs have only one page.
This PDF document has 222 object start declarations and 222 object end declarations.
This PDF document has 120 stream object start declarations and 120 stream object end declarations.
This PDF document has a cross reference table (xref).
This PDF document has a pointer to the cross reference table (startxref).
This PDF document has a trailer dictionary containing entries allowing the cross reference table, and thus the file objects, to be read.
ExifTool file metadata
MIMEType
application/pdf

ModifyDate
2013:12:28 10:29:44+04:00

Producer
Microsoft Word 2010

Language
ru-RU

Creator
Microsoft Word 2010

FileType
PDF

Author
Konstantin

Linearized
No

FileTypeExtension
pdf

PageCount
50

Title
Untitled Document

PDFVersion
1.5

CreateDate
2013:12:28 10:29:44+04:00

TaggedPDF
Yes

File identification
MD5 21f4fc4ffa9d10804a572b5f6e2e6bd2
SHA1 83b36cc536ab7a017e58e0f2eef4d69a27f51966
SHA256 5843db10c8b066f0e35de4601f600e962c18a20062697bc82244212a96bf7eaf
ssdeep
49152:4ulQ1u6mWKM0uSVR4yI9MUh4WsLIWiGc1pUS5wxgKXO34:4D1uWKVzkLmUh/srcPjsO34

File size 2.2 MB ( 2300121 bytes )
File type PDF
Magic literal
PDF document, version 1.5

TrID Adobe Portable Document Format (100.0%)
Tags
pdf

VirusTotal metadata
First submission 2014-05-28 16:31:22 UTC ( 4 years ago )
Last submission 2017-05-05 18:25:22 UTC ( 1 year, 1 month ago )
File names 12 компьютерных шпаргалок от Константина Фёста.pdf
12cribs_kfirst.pdf
ExifTool file metadata
MIMEType
application/pdf

ModifyDate
2013:12:28 10:29:44+04:00

Producer
Microsoft Word 2010

Language
ru-RU

Creator
Microsoft Word 2010

FileType
PDF

Author
Konstantin

Linearized
No

FileTypeExtension
pdf

PageCount
50

Title
Untitled Document

PDFVersion
1.5

CreateDate
2013:12:28 10:29:44+04:00

TaggedPDF
Yes

No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!