× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 9af9713b11ebaa886385907018a0bb605a787e00a89e76884df51677d0a8824e
File name: pdfsam-v2_2_4.msi
Detection ratio: 0 / 58
Analysis date: 2019-02-11 10:09:20 UTC ( 2 months, 1 week ago )
Antivirus Result Update
Acronis 20190208
Ad-Aware 20190211
AegisLab 20190211
AhnLab-V3 20190211
Alibaba 20180921
ALYac 20190211
Antiy-AVL 20190211
Arcabit 20190211
Avast 20190211
Avast-Mobile 20190211
AVG 20190211
Avira (no cloud) 20190211
Babable 20180918
Baidu 20190202
BitDefender 20190211
Bkav 20190201
CAT-QuickHeal 20190210
ClamAV 20190210
CMC 20190210
Comodo 20190211
CrowdStrike Falcon (ML) 20181023
Cybereason 20190109
Cylance 20190211
Cyren 20190211
DrWeb 20190211
eGambit 20190211
Emsisoft 20190211
Endgame 20181108
ESET-NOD32 20190211
F-Prot 20190211
F-Secure 20190211
Fortinet 20190211
GData 20190211
Ikarus 20190211
Sophos ML 20181128
Jiangmin 20190211
K7AntiVirus 20190211
K7GW 20190211
Kaspersky 20190211
Kingsoft 20190211
Malwarebytes 20190211
MAX 20190211
McAfee 20190211
McAfee-GW-Edition 20190211
Microsoft 20190211
eScan 20190211
NANO-Antivirus 20190211
Palo Alto Networks (Known Signatures) 20190211
Panda 20190210
Qihoo-360 20190211
Rising 20190211
SentinelOne (Static ML) 20190203
Sophos AV 20190211
SUPERAntiSpyware 20190206
Symantec 20190211
Symantec Mobile Insight 20190207
TACHYON 20190211
Tencent 20190211
TheHacker 20190203
Trapmine 20190123
TrendMicro 20190211
TrendMicro-HouseCall 20190211
Trustlook 20190211
VBA32 20190211
ViRobot 20190211
Webroot 20190211
Yandex 20190210
Zillya 20190208
ZoneAlarm by Check Point 20190211
Zoner 20190211
The file being studied is a Windows Installer file! These types of files are software components used for the installation, maintenance, and removal of software on modern Microsoft Windows systems.
Authenticode signature block
Signature verification Signed file, verified signature
Signing date 6:13 PM 1/13/2015
Signers
[+] ANDREA VACONDIO
Status This certificate or one of the certificates in the certificate chain is not time valid.
Valid from 02:42 PM 01/24/2014
Valid to 02:42 PM 01/24/2015
Valid usage Code Signing
Algorithm sha1RSA
Thumbrint 8CFA8E8D320C2B1DD631F6066508709BCDFBB130
Serial number 4E AF 30 FE EF E5 30
[+] Go Daddy Secure Certification Authority
Status Valid
Valid from 01:54 AM 11/16/2006
Valid to 01:54 AM 11/16/2026
Valid usage All
Algorithm sha1RSA
Thumbrint 7C4656C3061F7F4C0D67B319A855F60EBC11FC44
Serial number 03 01
[+] Go Daddy Class 2 Certification Authority
Status Valid
Valid from 05:06 PM 06/29/2004
Valid to 05:06 PM 06/29/2034
Valid usage Server Auth, Client Auth, Email Protection, Code Signing
Algorithm sha1RSA
Thumbrint 2796BAE63F1801E277261BA0D77770028F20EEE4
Serial number 00
Counter signers
[+] Starfield Timestamp Authority - G2
Status Valid
Valid from 07:00 AM 04/01/2014
Valid to 07:00 AM 04/01/2019
Valid usage Timestamp Signing
Algorithm sha256RSA
Thumbrint C1ECE31AD10ED55433A735AAE0295AB82E3D0B0C
Serial number 1E 8D FE
[+] Starfield Root Certificate Authority – G2
Status Valid
Valid from 12:00 AM 09/01/2009
Valid to 11:59 PM 12/31/2037
Valid usage Server Auth, Client Auth, Code Signing, Email Protection, Timestamp Signing, EFS, IPSEC Tunnel, IPSEC User
Algorithm sha256RSA
Thumbrint B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E
Serial number 00
OLE structured storage summary
creation_datetime
2015-01-06 19:17:32
author
Andrea Vacondio
title
Installation Database
page_count
200
word_count
2
application_name
Windows Installer XML Toolset (3.9.1006.0)
last_saved
2015-01-06 19:17:32
revision_number
{3DF622CC-E1F2-4E75-9D4D-E7C8CA0BE1E1}
keywords
Installer
security
2
subject
A free open source tool to manipulate PDF documents
template
Intel;1033
code_page
Latin I
comments
PDF Split And Merge Basic Package
OLE Streams
name
Root Entry
clsid
000c1084-0000-0000-c000-000000000046
type_literal
root
clsid_literal
on
sid
0
size
24640
type_literal
stream
size
5471
name
\x05DigitalSignature
sid
56
type_literal
stream
size
524
name
\x05SummaryInformation
sid
2
type_literal
stream
size
9662
name
\u4192\u4472\u44fe\u4267\u4136\u47b0\u41ac\u4832
sid
35
type_literal
stream
size
15156460
name
\u41f3\u45a9\u4424\u41be\u4164
sid
1
type_literal
stream
size
1990
name
\u430b\u4131\u4735\u3d3e\u3cb2\u4130\u422a
sid
11
type_literal
stream
size
1990
name
\u430b\u4131\u4735\u3e3e\u3cae\u4130\u422a
sid
12
type_literal
stream
size
185344
name
\u430b\u4131\u4735\u403e\u46ec\u3a8c
sid
10
type_literal
stream
size
85894
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u3aff\u44f0\u3aff\u4464\u4231\u4835
sid
14
type_literal
stream
size
615318
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u3aff\u44f0\u3b7f\u412c\u44af\u482a
sid
15
type_literal
stream
size
318
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u3aff\u44f0\u3dff\u46a8
sid
18
type_literal
stream
size
318
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u3aff\u44f0\u3fbf\u4833
sid
19
type_literal
stream
size
766
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u3cbf\u44a6\u3bbf\u41bb\u412f\u4830
sid
16
type_literal
stream
size
1078
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u3cbf\u44a6\u3cbf\u4271\u4832
sid
17
type_literal
stream
size
89600
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u4320\u41bb\u4824
sid
13
type_literal
stream
size
1696
name
\u4840\u3b3f\u43f2\u4438\u45b1
sid
53
type_literal
stream
size
204
name
\u4840\u3c9e\u421d\u45fb
sid
47
type_literal
stream
size
75143
name
\u4840\u3f3f\u4577\u446c\u3b6a\u45e4\u4824
sid
55
type_literal
stream
size
6696
name
\u4840\u3f3f\u4577\u446c\u3e6a\u44b2\u482f
sid
54
type_literal
stream
size
82
name
\u4840\u3f7f\u4164\u422f\u4836
sid
52
type_literal
stream
size
5136
name
\u4840\u3fff\u43e4\u41ec\u45e4\u44ac\u4831
sid
3
type_literal
stream
size
36
name
\u4840\u411b\u4327\u3af2\u45f8\u44b7\u4831
sid
41
type_literal
stream
size
420
name
\u4840\u418a\u4337\u4472\u421d\u45fb
sid
4
type_literal
stream
size
4
name
\u4840\u4192\u4472
sid
34
type_literal
stream
size
48
name
\u4840\u41ca\u4330\u3bb1\u423b\u4626\u4237\u421c\u4634\u4468\u4226
sid
5
type_literal
stream
size
42
name
\u4840\u41ca\u4330\u3fb1\u3f12\u4528\u4238\u41b1\u4828
sid
6
type_literal
stream
size
48
name
\u4840\u41ca\u45f9\u46ce\u41a8\u45f8\u3f28\u4528\u4238\u41b1\u4828
sid
7
type_literal
stream
size
332
name
\u4840\u420f\u45e4\u4578\u3b28\u4432\u44b3\u4231\u45f1\u4836
sid
32
type_literal
stream
size
32
name
\u4840\u420f\u45e4\u4578\u4828
sid
31
type_literal
stream
size
14
name
\u4840\u4216\u4327\u4824
sid
38
type_literal
stream
size
70
name
\u4840\u421b\u3d6a\u41b2\u45e4\u4572
sid
43
type_literal
stream
size
48
name
\u4840\u421b\u432a\u45f6\u4735
sid
42
type_literal
stream
size
20
name
\u4840\u421b\u44b0\u4239\u430f\u422f
sid
44
type_literal
stream
size
36
name
\u4840\u421d\u45fb\u45dc\u43fc\u4828
sid
46
type_literal
stream
size
8
name
\u4840\u42cc\u41a8\u3aee\u46f2
sid
20
type_literal
stream
size
128
name
\u4840\u42dc\u4572\u41b7\u45f8
sid
45
type_literal
stream
size
40
name
\u4840\u430b\u4131\u4735
sid
9
type_literal
stream
size
198
name
\u4840\u430d\u4235\u45e6\u4572\u483c
sid
28
type_literal
stream
size
484
name
\u4840\u430d\u43e4\u42b2
sid
27
type_literal
stream
size
1600
name
\u4840\u430f\u422f
sid
33
type_literal
stream
size
12
name
\u4840\u4320\u3cbb\u45f1\u4568\u4231\u3f37\u44ab\u45f5\u4626\u4837
sid
49
type_literal
stream
size
8
name
\u4840\u4320\u3efb\u4428\u4672\u3be8\u43f2\u4227\u3bb5\u483b
sid
50
type_literal
stream
size
198
name
\u4840\u4421\u3bef\u43ec\u4828
sid
51
type_literal
stream
size
192
name
\u4840\u4452\u45f6\u43e4\u3baf\u423b\u4626\u4237\u421c\u4634\u4468\u4226
sid
36
type_literal
stream
size
96
name
\u4840\u4452\u45f6\u43e4\u3faf\u3f12\u4528\u4238\u41b1\u4828
sid
37
type_literal
stream
size
344
name
\u4840\u448c\u4170\u3af2\u46f2
sid
21
type_literal
stream
size
996
name
\u4840\u448c\u44f0\u4472\u4468\u4837
sid
22
type_literal
stream
size
600
name
\u4840\u448c\u45f1\u44b5\u3b2f\u4472\u4327\u4337\u4472
sid
24
type_literal
stream
size
2088
name
\u4840\u448c\u45f1\u44b5\u3baf\u4239\u45f1
sid
25
type_literal
stream
size
6110
name
\u4840\u448c\u45f1\u44b5\u482f
sid
23
type_literal
stream
size
28
name
\u4840\u44ca\u3f33\u4128\u41b5\u482b
sid
8
type_literal
stream
size
32
name
\u4840\u44de\u456a\u41e4\u4828
sid
48
type_literal
stream
size
668
name
\u4840\u454e\u44b5\u4835
sid
29
type_literal
stream
size
72
name
\u4840\u4559\u44f2\u4568\u4737
sid
40
type_literal
stream
size
1580
name
\u4840\u4596\u3bec\u43ec\u3c68\u45a4\u482b
sid
39
type_literal
stream
size
132
name
\u4840\u460c\u45f6\u4432\u418a\u4337\u4472
sid
26
type_literal
stream
size
104
name
\u4840\u464e\u4468\u3db7\u44e4\u4333\u42b1
sid
30
ExifTool file metadata
MIMEType
image/vnd.fpx

ModifyDate
2015:01:06 18:17:32

Words
2

Author
Andrea Vacondio

FileType
FPX

Title
Installation Database

Comments
PDF Split And Merge Basic Package

Pages
200

FileTypeExtension
fpx

Template
Intel;1033

Keywords
Installer

CreateDate
2015:01:06 18:17:32

Security
Read-only recommended

Subject
A free open source tool to manipulate PDF documents

CodePage
Windows Latin 1 (Western European)

RevisionNumber
{3DF622CC-E1F2-4E75-9D4D-E7C8CA0BE1E1}

Software
Windows Installer XML Toolset (3.9.1006.0)

File identification
MD5 66bc39f17c9077d956c9e845fbc18a29
SHA1 e406c16e0816e5792bcca161ec9aaf1df3ecf910
SHA256 9af9713b11ebaa886385907018a0bb605a787e00a89e76884df51677d0a8824e
ssdeep
393216:q5Mfx3HzKldWIAjF+/TpQkQY0Ik0ZqElN1sWi:qGZqoIn+kQY0CZq/F

File size 15.6 MB ( 16407552 bytes )
File type Windows Installer
Magic literal
CDF V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Title: Installation Database, Subject: A free open source tool to manipulate PDF documents, Author: Andrea Vacondio, Keywords: Installer, Comments: PDF Split And Merge Basic Package, Template: Intel

TrID Microsoft Windows Installer (79.8%)
Windows SDK Setup Transform Script (11.0%)
Windows Installer Patch (7.7%)
Generic OLE2 / Multistream Compound File (1.3%)
Tags
msi signed

VirusTotal metadata
First submission 2015-01-14 16:03:26 UTC ( 4 years, 3 months ago )
Last submission 2019-02-11 10:09:20 UTC ( 2 months, 1 week ago )
File names pdfsam-v2_2_4 (PDF split and merge).msi
pdfsam-v2_2_4.msi
pdfsam-v2_2_4_pdf convert_merge.msi
pdfsam-x64-v2_2_2.msi
pdfsam-v2_2_4_officel_siterol.msi
pdfsam-v2_2_4.msi
filename
15-pdfsam-v2_2_4.msi
pdfsam 2.2.4.msi
pdfsam_64BIT-v2_2_4.msi
PDF Split and Merge.msi
pdfsam-v2_2_4(1).msi
pdfsam-v2_2_4 (1).msi
pdfsam-v2_2_4 (2).msi
PDF Split and Merge v2_2_4.msi
pdf split and merge 2.2.4.msi
pdfsam-v2_2_4.msi
PDF Sam-v2_2_4 unire PDF.msi
pdfsam-v2_2_4.msi
pdfsam-v2_2_4.msi
7 PDFsam-v2_2_4.msi
pdfsam-v2_2_4_msi
19800dde.msi
pdfsam-v2_2_4 (juntar PDF) - (sem virus).msi
pdfsam-v2_2_4(PDF Split and Merge).msi
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!