Advanced File Analyzer results

  • Thread starter Thread starter CEC4
  • Start date Start date
C

CEC4

The flwg are test results done on a recently received
email attachment from a sender whom I didn't recognize:

"Detailed File Analysis
Display name: Personal Support Order Form 03.TIF
Name: Personal Support Order Form 03.TIF
Publisher: Unspecified
Path: C:\Documents and Settings\Owner\My
Documents\Personal Support Order Form 03.TIF
Size: 49120 bytes
Create date: Wednesday August 10, 2005
Access date: Saturday August 13, 2005
Modified date: Wednesday August 10, 2005

MD5: 3f8aa64faf5cd62baa63a9f939de75bb"

"...on any type of file...better determine potential
threats". From the above info., the only thing I can use
to help me decide a potential threat is that shown in the
Publisher field. The analysis results did not produce a
popup dialog box with suggested recommendations, which
would have been helpful. Would it be possible that the
Analyzer is trying to do what an individual file virus
scan does in an antivirus product?

For your info. I opened the attachment and saw that the
email message and form came from Microsoft Australia
Product Support! Their message header was not very clear.
 
CEC4 said:
The flwg are test results done on a recently received
email attachment from a sender whom I didn't recognize:

"Detailed File Analysis
Display name: Personal Support Order Form 03.TIF
Name: Personal Support Order Form 03.TIF
Publisher: Unspecified
Path: C:\Documents and Settings\Owner\My
Documents\Personal Support Order Form 03.TIF
Size: 49120 bytes
Create date: Wednesday August 10, 2005
Access date: Saturday August 13, 2005
Modified date: Wednesday August 10, 2005

MD5: 3f8aa64faf5cd62baa63a9f939de75bb"

"...on any type of file...better determine potential
threats". From the above info., the only thing I can use
to help me decide a potential threat is that shown in the
Publisher field.
Click to expand...

I would not expect an e-mail attachment to carry any resources to enable the
publisher to be verified.

The file is a TIF graphics file (as typically produced by a scanner), and
there is no provision in this file format for the cryptographic extensions
to enable verification of publisher.
 
Back
Top