× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 080d13b1cc727229e5a6aca9a05db460c0b4f09cbd151ca5d6a8b5e34c9f57ea
File name: QWT.zip
Detection ratio: 0 / 58
Analysis date: 2017-06-03 00:25:02 UTC ( 5 months, 3 weeks ago ) View latest
Antivirus Result Update
Ad-Aware 20170602
AegisLab 20170602
AhnLab-V3 20170602
Alibaba 20170602
ALYac 20170602
Antiy-AVL 20170602
Arcabit 20170603
Avast 20170602
AVG 20170602
Avira (no cloud) 20170603
AVware 20170602
Baidu 20170601
BitDefender 20170602
Bkav 20170602
CAT-QuickHeal 20170602
ClamAV 20170602
CMC 20170602
Comodo 20170602
CrowdStrike Falcon (ML) 20170420
Cyren 20170603
DrWeb 20170602
Emsisoft 20170603
Endgame 20170515
ESET-NOD32 20170602
F-Prot 20170602
F-Secure 20170602
Fortinet 20170603
GData 20170602
Ikarus 20170602
Sophos ML 20170519
Jiangmin 20170602
K7AntiVirus 20170602
K7GW 20170602
Kaspersky 20170602
Kingsoft 20170603
Malwarebytes 20170602
McAfee 20170602
McAfee-GW-Edition 20170602
Microsoft 20170602
eScan 20170603
NANO-Antivirus 20170602
nProtect 20170602
Palo Alto Networks (Known Signatures) 20170603
Panda 20170602
Qihoo-360 20170603
Rising 20170602
SentinelOne (Static ML) 20170516
Sophos AV 20170602
SUPERAntiSpyware 20170602
Symantec 20170603
Symantec Mobile Insight 20170601
Tencent 20170603
TheHacker 20170602
TotalDefense 20170602
TrendMicro 20170602
TrendMicro-HouseCall 20170602
Trustlook 20170603
VBA32 20170602
VIPRE 20170602
ViRobot 20170602
Webroot 20170603
WhiteArmor 20170601
Yandex 20170602
ZoneAlarm by Check Point 20170602
Zoner 20170603
The file being studied is a compressed stream! More specifically, it is a ZIP file.
Interesting properties
The studied file contains at least one Portable Executable.
Contained files
Compression metadata
Contained files
3
Uncompressed size
14311144
Highest datetime
2015-02-14 14:51:30
Lowest datetime
2015-02-14 14:50:28
Contained files by extension
CAB
1
exe
1
msi
1
Contained files by type
Portable Executable
1
Microsoft Office
1
unknown
1
ExifTool file metadata
MIMEType
application/zip

ZipRequiredVersion
20

ZipCRC
0x4d6dbaf8

FileType
ZIP

ZipCompression
Deflated

ZipUncompressedSize
520704

ZipCompressedSize
192371

FileTypeExtension
zip

ZipFileName
QWTSetup.msi

ZipBitFlag
0

ZipModifyDate
2015:02:14 14:51:15

File identification
MD5 eaaa585fe071bec5eaab5fc87fb98c3e
SHA1 0b598c1788d0222d48b2c7d5f6d5d274594d2780
SHA256 080d13b1cc727229e5a6aca9a05db460c0b4f09cbd151ca5d6a8b5e34c9f57ea
ssdeep
393216:EpS21x38BH+1Gj/lv0S2zO99uOoy7auKso8:i1x3woQtX2C99uO57auKsZ

File size 13.1 MB ( 13768919 bytes )
File type ZIP
Magic literal
Zip archive data, at least v2.0 to extract

TrID ZIP compressed archive (100.0%)
Tags
contains-pe zip

VirusTotal metadata
First submission 2015-03-15 13:40:46 UTC ( 2 years, 8 months ago )
Last submission 2017-01-31 00:24:50 UTC ( 9 months, 3 weeks ago )
File names 636067
QWT.zip
Advanced heuristic and reputation engines
Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!