× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: f575977818dd88172cc1a12122ac99f30830b056b8fa5bea1fa954bf72f9b5cf
File name: 2015_04_s.pdf
Detection ratio: 0 / 57
Analysis date: 2017-06-18 09:55:13 UTC ( 5 months, 1 week ago )
Antivirus Result Update
Ad-Aware 20170618
AegisLab 20170618
AhnLab-V3 20170617
Alibaba 20170616
ALYac 20170618
Antiy-AVL 20170618
Arcabit 20170618
Avast 20170618
AVG 20170618
Avira (no cloud) 20170617
AVware 20170618
Baidu 20170615
BitDefender 20170618
Bkav 20170616
CAT-QuickHeal 20170617
ClamAV 20170618
CMC 20170618
Comodo 20170618
CrowdStrike Falcon (ML) 20170420
Cyren 20170618
DrWeb 20170618
Emsisoft 20170618
Endgame 20170615
ESET-NOD32 20170618
F-Prot 20170618
F-Secure 20170618
Fortinet 20170618
GData 20170618
Ikarus 20170618
Sophos ML 20170607
Jiangmin 20170618
K7AntiVirus 20170616
K7GW 20170618
Kaspersky 20170618
Kingsoft 20170618
Malwarebytes 20170618
McAfee 20170618
McAfee-GW-Edition 20170618
Microsoft 20170618
eScan 20170618
NANO-Antivirus 20170618
nProtect 20170618
Palo Alto Networks (Known Signatures) 20170618
Panda 20170618
Qihoo-360 20170618
Rising 20170618
SentinelOne (Static ML) 20170516
Sophos AV 20170618
SUPERAntiSpyware 20170618
Symantec 20170617
Symantec Mobile Insight 20170614
Tencent 20170618
TheHacker 20170616
TotalDefense 20170618
TrendMicro 20170618
TrendMicro-HouseCall 20170618
Trustlook 20170618
VBA32 20170616
VIPRE 20170618
ViRobot 20170618
Webroot 20170618
WhiteArmor 20170616
Yandex 20170616
Zillya 20170617
ZoneAlarm by Check Point 20170618
Zoner 20170618
The file being studied is a PDF document! The document's header reveals it is using the following file format specification: %PDF-1.5.
PDFiD information
This PDF document contains 7 object streams. A stream object is just a sequence of bytes and very often is only used to store images and page descriptions, however, since it is not limited in length many attackers use these artifacts in conjunction with filters to obfuscate other objects.
This PDF document has 3 pages, please note that most malicious PDFs have only one page.
This PDF document has 43 object start declarations and 43 object end declarations.
This PDF document has 38 stream object start declarations and 38 stream object end declarations.
This PDF document has a pointer to the cross reference table (startxref).
ExifTool file metadata
MIMEType
application/pdf

XMPToolkit
Adobe XMP Core 5.2-c001 63.139439, 2010/09/27-13:37:26

ModifyDate
2015:04:06 18:58:30+03:00

CreatorTool
PScript5.dll Version 5.2.2

Producer
Acrobat Distiller 10.1.13 (Windows)

Creator
grivus

InstanceID
uuid:c813e171-a000-45f2-a6a7-9e9f1952289b

CreateDate
2015:04:06 18:58:30+03:00

Author
grivus

Linearized
Yes

FileTypeExtension
pdf

PageCount
3

Title
SA#156_u.indd

Format
application/pdf

PDFVersion
1.5

FileType
PDF

DocumentID
uuid:81926c5d-0223-417f-9a40-c5f5907da8e7

File identification
MD5 e292d874e79e201b673ab96cadb92bcd
SHA1 e50892e0ed763ab5da82edc4184a6d375535e887
SHA256 f575977818dd88172cc1a12122ac99f30830b056b8fa5bea1fa954bf72f9b5cf
ssdeep
24576:ymu+FE9OxDg15rr638NgtgHjvR/0aLuoxryO:yNOS7rr6smgbpLuen

File size 946.9 KB ( 969588 bytes )
File type PDF
Magic literal
PDF document, version 1.5

TrID Adobe Portable Document Format (100.0%)
Tags
pdf

VirusTotal metadata
First submission 2017-06-18 09:55:13 UTC ( 5 months, 1 week ago )
Last submission 2017-06-18 09:55:13 UTC ( 5 months, 1 week ago )
File names 2015_04_s.pdf
ExifTool file metadata
MIMEType
application/pdf

XMPToolkit
Adobe XMP Core 5.2-c001 63.139439, 2010/09/27-13:37:26

ModifyDate
2015:04:06 18:58:30+03:00

CreatorTool
PScript5.dll Version 5.2.2

Producer
Acrobat Distiller 10.1.13 (Windows)

Creator
grivus

InstanceID
uuid:c813e171-a000-45f2-a6a7-9e9f1952289b

CreateDate
2015:04:06 18:58:30+03:00

Author
grivus

Linearized
Yes

FileTypeExtension
pdf

PageCount
3

Title
SA#156_u.indd

Format
application/pdf

PDFVersion
1.5

FileType
PDF

DocumentID
uuid:81926c5d-0223-417f-9a40-c5f5907da8e7

No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!