× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 8116ebf6ed74dfcd61021604a680b6dfd1aaab04e90409b51886bb8434e4bc31
File name: Masnavi.pdf
Detection ratio: 0 / 61
Analysis date: 2018-04-10 09:00:53 UTC ( 5 months, 2 weeks ago )
Antivirus Result Update
Ad-Aware 20180410
AegisLab 20180410
AhnLab-V3 20180410
Alibaba 20180410
ALYac 20180410
Antiy-AVL 20180410
Arcabit 20180410
Avast 20180410
Avast-Mobile 20180410
AVG 20180410
Avira (no cloud) 20180409
AVware 20180410
Baidu 20180409
BitDefender 20180410
Bkav 20180409
CAT-QuickHeal 20180409
ClamAV 20180410
CMC 20180409
Comodo 20180410
CrowdStrike Falcon (ML) 20170201
Cybereason None
Cylance 20180410
Cyren 20180409
DrWeb 20180410
eGambit 20180410
Emsisoft 20180410
Endgame 20180403
ESET-NOD32 20180410
F-Prot 20180409
F-Secure 20180410
Fortinet 20180410
GData 20180410
Ikarus 20180409
Sophos ML 20180121
Jiangmin 20180410
K7AntiVirus 20180409
K7GW 20180410
Kaspersky 20180410
Kingsoft 20180410
Malwarebytes 20180410
MAX 20180410
McAfee 20180410
McAfee-GW-Edition 20180410
Microsoft 20180410
eScan 20180410
NANO-Antivirus 20180410
nProtect 20180410
Palo Alto Networks (Known Signatures) 20180410
Panda 20180409
Qihoo-360 20180410
Rising 20180410
SentinelOne (Static ML) 20180225
Sophos AV 20180410
SUPERAntiSpyware 20180410
Symantec 20180410
Symantec Mobile Insight 20180406
Tencent 20180410
TheHacker 20180410
TotalDefense 20180410
TrendMicro 20180410
TrendMicro-HouseCall 20180410
Trustlook 20180410
VBA32 20180409
VIPRE 20180410
ViRobot 20180410
Webroot 20180410
WhiteArmor 20180408
Yandex 20180408
Zillya 20180409
ZoneAlarm by Check Point 20180410
Zoner 20180410
The file being studied is a PDF document! The document's header reveals it is using the following file format specification: %PDF-1.6.
PDFiD information
This PDF file contains an automatic action to be performed when a given page of the document is viewed. Malicious PDF documents with JavaScript very often use an automatic action to launch the JavaScript without user interaction.
This PDF document contains 10 object streams. A stream object is just a sequence of bytes and very often is only used to store images and page descriptions, however, since it is not limited in length many attackers use these artifacts in conjunction with filters to obfuscate other objects.
This PDF document has 1009 pages, please note that most malicious PDFs have only one page.
This PDF document has 2048 object start declarations and 2047 object end declarations.
This PDF document has 1036 stream object start declarations and 1036 stream object end declarations.
This PDF document has a pointer to the cross reference table (startxref).
ExifTool file metadata
MIMEType
application/pdf

XMPToolkit
Adobe XMP Core 5.2-c001 63.139439, 2010/09/27-13:37:26

ModifyDate
2012:06:21 00:03:40+04:30

CreatorTool
pdfFactory Pro www.pdffactory.com

Producer
pdfFactory Pro 3.16 (Windows XP Professional Farsi)

Format
application/pdf

InstanceID
uuid:ddafe532-68ef-46f5-84eb-8d12ea27b5f7

FileType
PDF

PageCount
1009

Linearized
Yes

FileTypeExtension
pdf

Keywords
, , , , ,

Subject
, , , , ,

PDFVersion
1.6

CreateDate
2007:09:30 22:49:25+03:30

DocumentID
uuid:12659772-1428-4e53-b068-e81d7926ce5c

MetadataDate
2012:06:21 00:03:40+04:30

File identification
MD5 e258386a8cd6daaa3b445145ed29c9fe
SHA1 817c477f18704312e28524062e0c9cf0e54f1dd6
SHA256 8116ebf6ed74dfcd61021604a680b6dfd1aaab04e90409b51886bb8434e4bc31
ssdeep
196608:pk/VzeacmDJD8+n8EnVL9yEt1KHGjrYQETTOB2i7:6dzTDJAM8EXyEKHGRqpi7

File size 7.7 MB ( 8120688 bytes )
File type PDF
Magic literal
PDF document, version 1.6

TrID Adobe Portable Document Format (100.0%)
Tags
pdf autoaction

VirusTotal metadata
First submission 2015-10-11 12:07:26 UTC ( 2 years, 11 months ago )
Last submission 2018-04-10 09:00:53 UTC ( 5 months, 2 weeks ago )
File names Masnavi.pdf
ExifTool file metadata
MIMEType
application/pdf

XMPToolkit
Adobe XMP Core 5.2-c001 63.139439, 2010/09/27-13:37:26

ModifyDate
2012:06:21 00:03:40+04:30

CreatorTool
pdfFactory Pro www.pdffactory.com

Producer
pdfFactory Pro 3.16 (Windows XP Professional Farsi)

Format
application/pdf

InstanceID
uuid:ddafe532-68ef-46f5-84eb-8d12ea27b5f7

FileType
PDF

PageCount
1009

Linearized
Yes

FileTypeExtension
pdf

Keywords
, , , , ,

Subject
, , , , ,

PDFVersion
1.6

CreateDate
2007:09:30 22:49:25+03:30

DocumentID
uuid:12659772-1428-4e53-b068-e81d7926ce5c

MetadataDate
2012:06:21 00:03:40+04:30

No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!