× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 5d1eb41b438cf730871bc45da097dc768ee071cfbcd75594e568a317d7efcf12
File name: 442582
Detection ratio: 5 / 57
Analysis date: 2016-03-17 16:04:04 UTC ( 2 years, 11 months ago ) View latest
Antivirus Result Update
AegisLab Troj.W32.Gen 20160317
Antiy-AVL Trojan[:HEUR]/Win32.Unknown 20160317
Bkav W32.HfsAutoB.3E90 20160317
Jiangmin TrojanClicker.VBiframe.yr 20160317
TheHacker W32/Behav-Heuristic-065 20160315
Ad-Aware 20160317
Yandex 20160316
AhnLab-V3 20160317
Alibaba 20160317
ALYac 20160317
Arcabit 20160317
Avast 20160317
AVG 20160317
Avira (no cloud) 20160317
AVware 20160317
Baidu 20160317
Baidu-International 20160317
BitDefender 20160317
ByteHero 20160317
CAT-QuickHeal 20160317
ClamAV 20160317
CMC 20160316
Comodo 20160317
Cyren 20160317
DrWeb 20160317
Emsisoft 20160317
ESET-NOD32 20160317
F-Prot 20160317
F-Secure 20160317
Fortinet 20160317
GData 20160317
Ikarus 20160317
K7AntiVirus 20160317
K7GW 20160317
Kaspersky 20160317
Malwarebytes 20160317
McAfee 20160317
McAfee-GW-Edition 20160317
Microsoft 20160316
eScan 20160317
NANO-Antivirus 20160317
nProtect 20160317
Panda 20160316
Qihoo-360 20160317
Rising 20160317
Sophos AV 20160317
SUPERAntiSpyware 20160317
Symantec 20160317
Tencent 20160317
TotalDefense 20160317
TrendMicro 20160317
TrendMicro-HouseCall 20160317
VBA32 20160317
VIPRE 20160317
ViRobot 20160317
Zillya 20160317
Zoner 20160317
The file being studied is a compressed stream! More specifically, it is a ZIP file.
Interesting properties
The studied file contains at least one Portable Executable.
Contained files
Compression metadata
Contained files
14
Uncompressed size
1102861
Highest datetime
2009-12-03 20:29:06
Lowest datetime
2008-12-20 20:15:10
Contained files by extension
jpg
9
mp3
2
exe
2
txt
1
Contained files by type
JPG
9
Portable Executable
2
MP3
2
unknown
1
ExifTool file metadata
MIMEType
application/zip

ZipRequiredVersion
20

ZipCRC
0x9a998424

FileType
ZIP

ZipCompression
Deflated

ZipUncompressedSize
4576

ZipCompressedSize
1900

FileTypeExtension
zip

ZipFileName
Readme.txt

ZipBitFlag
0x0002

ZipModifyDate
2009:11:17 18:14:24

File identification
MD5 367cf43693e8be94a24edc3074e7471e
SHA1 decf06ef23cd610c929c19189b121bbda477989c
SHA256 5d1eb41b438cf730871bc45da097dc768ee071cfbcd75594e568a317d7efcf12
ssdeep
24576:Av2kcctFbWSgLDMhS0hByPfp/k0ecY7VOA3MKk1AGomhsvqwM:AOlcttWDPM9h4p/NecyodK+9svM

File size 1016.5 KB ( 1040904 bytes )
File type ZIP
Magic literal
Zip archive data, at least v2.0 to extract

TrID ZIP compressed archive (80.0%)
PrintFox/Pagefox bitmap (var. P) (20.0%)
Tags
contains-pe molebox zip

VirusTotal metadata
First submission 2010-05-06 17:27:34 UTC ( 8 years, 9 months ago )
Last submission 2018-06-20 07:59:37 UTC ( 8 months ago )
File names 1376576102-SRN-TRIAL.zip
aa
g2aIN.dwg
output.12215644.txt
12215644
SRN-TRIAL.zip
442582
Advanced heuristic and reputation engines
ClamAV
Possibly Unwanted Application. While not necessarily malicious, the scanned file presents certain characteristics which depending on the user policies and environment may or may not represent a threat. For full details see: https://www.clamav.net/documents/potentially-unwanted-applications-pua .

Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!