× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 62d975a2be6afc871960a27ed2936eb6db6f0f7c350760fde5ea23f05a383fd7
File name: setupGMS.zip
Detection ratio: 0 / 57
Analysis date: 2018-06-30 06:07:07 UTC ( 2 months, 3 weeks ago )
Antivirus Result Update
Ad-Aware 20180630
AegisLab 20180630
AhnLab-V3 20180629
ALYac 20180630
Antiy-AVL 20180630
Arcabit 20180630
Avast 20180630
Avast-Mobile 20180630
AVG 20180630
Avira (no cloud) 20180629
AVware 20180630
Babable 20180406
Baidu 20180628
BitDefender 20180630
Bkav 20180630
CAT-QuickHeal 20180629
ClamAV 20180629
CMC 20180629
Comodo 20180630
CrowdStrike Falcon (ML) 20180530
Cybereason 20180225
Cyren 20180630
DrWeb 20180630
eGambit 20180630
Emsisoft 20180630
Endgame 20180612
ESET-NOD32 20180630
F-Prot 20180630
F-Secure 20180630
Fortinet 20180630
GData 20180630
Ikarus 20180629
Sophos ML 20180601
Jiangmin 20180630
K7AntiVirus 20180630
K7GW 20180630
Kaspersky 20180630
Kingsoft 20180630
Malwarebytes 20180630
MAX 20180630
McAfee 20180630
McAfee-GW-Edition 20180630
Microsoft 20180630
eScan 20180630
NANO-Antivirus 20180630
Palo Alto Networks (Known Signatures) 20180630
Panda 20180629
Qihoo-360 20180630
SentinelOne (Static ML) 20180618
Sophos AV 20180630
SUPERAntiSpyware 20180630
Symantec 20180630
Symantec Mobile Insight 20180629
TACHYON 20180630
Tencent 20180630
TheHacker 20180628
TotalDefense 20180630
Trustlook 20180630
VBA32 20180629
VIPRE 20180630
ViRobot 20180630
Webroot 20180630
Yandex 20180629
Zillya 20180629
ZoneAlarm by Check Point 20180630
Zoner 20180629
The file being studied is a compressed stream! More specifically, it is a ZIP file.
Interesting properties
The studied file contains at least one Portable Executable.
Contained files
Compression metadata
Contained files
2
Uncompressed size
365589
Highest datetime
2014-09-19 20:56:34
Lowest datetime
2014-09-16 19:39:22
Contained files by extension
txt
1
exe
1
Contained files by type
unknown
1
Portable Executable
1
ExifTool file metadata
MIMEType
application/zip

ZipRequiredVersion
20

ZipCRC
0x5223375f

FileType
ZIP

ZipCompression
Deflated

ZipUncompressedSize
3005

ZipCompressedSize
1355

FileTypeExtension
zip

ZipFileName
gimespace.txt

ZipBitFlag
0

ZipModifyDate
2014:09:19 20:56:34

File identification
MD5 5ef1ae48ac2b01679a1e7d94ff2b05ca
SHA1 1f231194a043a4beff73c20e9604da861b9a92c7
SHA256 62d975a2be6afc871960a27ed2936eb6db6f0f7c350760fde5ea23f05a383fd7
ssdeep
6144:z7+qVDyrkwzKa/U8MevVe47Ey5sj5FhN8+rZWyh7D+Qxb9qaohf1l:2MYzeCu49Y8UZWyxll9ahff

File size 336.5 KB ( 344566 bytes )
File type ZIP
Magic literal
Zip archive data, at least v2.0 to extract

TrID ZIP compressed archive (80.0%)
PrintFox/Pagefox bitmap (var. P) (20.0%)
Tags
contains-pe zip

VirusTotal metadata
First submission 2014-09-19 19:13:16 UTC ( 4 years ago )
Last submission 2018-06-30 06:07:07 UTC ( 2 months, 3 weeks ago )
File names 1041458
setupGMS.zip
1412937903-setupGMS.zip
setupGMS.zip
setupGMS.zip
file
Advanced heuristic and reputation engines
ClamAV
Possibly Unwanted Application. While not necessarily malicious, the scanned file presents certain characteristics which depending on the user policies and environment may or may not represent a threat. For full details see: https://www.clamav.net/documents/potentially-unwanted-applications-pua .

Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!