× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 588db7ed7fbbf5fad8145653f4837ba9aa6a37d931fac4a96969334d7cca7790
File name: 657850
Detection ratio: 4 / 63
Analysis date: 2018-05-20 05:01:04 UTC ( 1 month ago ) View latest
Antivirus Result Update
ClamAV Win.Trojan.Agent-318995 20180520
Cylance Unsafe 20180520
Ikarus Trojan-Downloader.Win32.Genome 20180519
VBA32 suspected of Trojan.Downloader.gen.h 20180518
Ad-Aware 20180520
AegisLab 20180520
AhnLab-V3 20180519
Alibaba 20180518
ALYac 20180520
Antiy-AVL 20180520
Arcabit 20180520
Avast 20180520
Avast-Mobile 20180519
AVG 20180520
Avira (no cloud) 20180519
AVware 20180520
Babable 20180406
Baidu 20180518
BitDefender 20180520
Bkav 20180518
CAT-QuickHeal 20180519
CMC 20180520
Comodo 20180520
CrowdStrike Falcon (ML) 20180202
Cyren 20180520
DrWeb 20180520
eGambit 20180520
Emsisoft 20180520
Endgame 20180507
ESET-NOD32 20180520
F-Prot 20180520
F-Secure 20180520
Fortinet 20180520
GData 20180520
Sophos ML 20180503
Jiangmin 20180520
K7AntiVirus 20180520
K7GW 20180520
Kaspersky 20180520
Kingsoft 20180520
Malwarebytes 20180520
MAX 20180520
McAfee 20180520
McAfee-GW-Edition 20180520
Microsoft 20180520
eScan 20180520
NANO-Antivirus 20180520
nProtect 20180520
Palo Alto Networks (Known Signatures) 20180520
Panda 20180519
Qihoo-360 20180520
Rising 20180520
SentinelOne (Static ML) 20180225
Sophos AV 20180520
SUPERAntiSpyware 20180519
Symantec 20180519
Symantec Mobile Insight 20180518
Tencent 20180520
TheHacker 20180516
TotalDefense 20180520
TrendMicro 20180520
TrendMicro-HouseCall 20180520
Trustlook 20180520
VIPRE 20180520
ViRobot 20180519
Webroot 20180520
Yandex 20180518
Zillya 20180519
ZoneAlarm by Check Point 20180520
Zoner 20180519
The file being studied is a compressed stream! More specifically, it is a ZIP file.
Interesting properties
The studied file contains at least one Portable Executable.
Contained files
Compression metadata
Contained files
1
Uncompressed size
923160
Highest datetime
2015-04-05 03:27:24
Lowest datetime
2015-04-05 03:27:24
Contained files by extension
exe
1
Contained files by type
Portable Executable
1
ExifTool file metadata
MIMEType
application/zip

ZipRequiredVersion
20

ZipCRC
0xc3aaa092

FileType
ZIP

ZipCompression
Deflated

ZipUncompressedSize
923160

ZipCompressedSize
900153

FileTypeExtension
zip

ZipFileName
clean-master-pro_Setup.exe

ZipBitFlag
0x0002

ZipModifyDate
2015:04:05 03:27:24

File identification
MD5 f0591732783ba5c5b7b8fcb310083a2c
SHA1 c2068460cf78bd710d3bfad439b29bd35131a001
SHA256 588db7ed7fbbf5fad8145653f4837ba9aa6a37d931fac4a96969334d7cca7790
ssdeep
12288:3lbLTYxgkYzHLMs5iV/EYbE1O7dzsZZHyNlLeqM20NZFDT9RuFwDSNmIFwcmeMtw:3VPYQ1iVPj7dzAZHClLev26dIOGwc2f2

File size 879.2 KB ( 900329 bytes )
File type ZIP
Magic literal
Zip archive data, at least v2.0 to extract

TrID ZIP compressed archive (80.0%)
PrintFox/Pagefox bitmap (var. P) (20.0%)
Tags
contains-pe zip

VirusTotal metadata
First submission 2015-04-07 07:16:17 UTC ( 3 years, 2 months ago )
Last submission 2018-05-26 21:35:02 UTC ( 4 weeks ago )
File names 657850
clean-master-pro_setup.zip
Advanced heuristic and reputation engines
ClamAV
Possibly Unwanted Application. While not necessarily malicious, the scanned file presents certain characteristics which depending on the user policies and environment may or may not represent a threat. For full details see: https://www.clamav.net/documents/potentially-unwanted-applications-pua .

Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!