PDFsharp & MigraDoc Foundation
http://forum.pdfsharp.de/

Unexpected token 'eam' in PDF stream
http://forum.pdfsharp.de/viewtopic.php?f=2&t=4494
Page 1 of 1

Author:  SomePie [ Fri Oct 20, 2023 11:25 am ]
Post subject:  Unexpected token 'eam' in PDF stream

WARNING: DO NOT OPEN THIS FILE ON YOUR MAIN SYSTEM, KEEP IT SANDBOXXED

PdfSharp.Pdf.IO.PdfReaderException: Unexpected token 'eam' in PDF stream. The file may be corrupted. If you think this is a bug in PDFsharp, please send us your PDF file

Yes, this is an error, but this is been generated by a malware sample, so be cautious!

https://drive.proton.me/urls/J446GPK0XG#7FTJUjIIz5GP

password for zip file is infected

WARNING: DO NOT OPEN THIS FILE ON YOUR MAIN SYSTEM, KEEP IT SANDBOXXED

Author:  TH-Soft [ Mon Oct 23, 2023 9:25 am ]
Post subject:  Re: Unexpected token 'eam' in PDF stream

I think the PDF file is corrupted.
I don't have a sandbox to debug it.

Author:  SomePie [ Mon Oct 23, 2023 9:31 am ]
Post subject:  Re: Unexpected token 'eam' in PDF stream

Without getting to technical about the malware, the pdf itself is valid (and opens normally)
It's far away from being a huge thing though (since malware should be stopped anyway), I thought I just report this one since I came across it.

p.s. if you ever like to test this, in this case vmware is good enough

Page 1 of 1 All times are UTC
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/