× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 6770dfc7555df21a9f2931a795e72d90c7edda9e3b28dd9747e86a1330d937a8
File name: capslock.zip
Detection ratio: 0 / 41
Analysis date: 2012-06-16 06:31:52 UTC ( 6 years, 9 months ago ) View latest
Antivirus Result Update
AhnLab-V3 20120615
AntiVir 20120615
Antiy-AVL 20120616
Avast 20120615
AVG 20120616
BitDefender 20120616
ByteHero 20120613
CAT-QuickHeal 20120615
ClamAV 20120616
Commtouch 20120616
Comodo 20120615
DrWeb 20120616
Emsisoft 20120616
eSafe 20120614
F-Prot 20120615
F-Secure 20120616
Fortinet 20120616
GData 20120616
Ikarus 20120616
Jiangmin 20120616
K7AntiVirus 20120615
McAfee 20120616
McAfee-GW-Edition 20120616
Microsoft 20120616
NOD32 20120615
Norman 20120616
nProtect 20120615
Panda 20120615
PCTools 20120616
Rising 20120614
Sophos AV 20120616
SUPERAntiSpyware 20120616
Symantec 20120616
TheHacker 20120615
TotalDefense 20120615
TrendMicro 20120616
TrendMicro-HouseCall 20120615
VBA32 20120615
VIPRE 20120616
ViRobot 20120616
VirusBuster 20120615
The file being studied is a compressed stream! More specifically, it is a ZIP file.
Interesting properties
The studied file contains at least one Portable Executable.
Contained files
Compression metadata
Contained files
1
Uncompressed size
1275904
Highest datetime
2010-11-03 22:27:56
Lowest datetime
2010-11-03 22:27:56
Contained files by extension
exe
1
Contained files by type
Portable Executable
1
ExifTool file metadata
MIMEType
application/zip

ZipRequiredVersion
20

ZipCRC
0x5dd1c3d9

FileType
ZIP

ZipCompression
Deflated

ZipUncompressedSize
1275904

ZipCompressedSize
641550

FileTypeExtension
zip

ZipFileName
capslock.exe

ZipBitFlag
0

ZipModifyDate
2010:11:03 22:27:28

File identification
MD5 90543e8174b4af4d9979755ff242abf6
SHA1 5f7e814b193292882dbd810075e245e2357386b9
SHA256 6770dfc7555df21a9f2931a795e72d90c7edda9e3b28dd9747e86a1330d937a8
ssdeep
12288:35cq+U20ZJdb62pP7zzNNF79OyIBrvm2Jkgx7+JHfXRgvTAjjCd:3hf226u7zZNFRmFmiV8/Bgvso

File size 626.6 KB ( 641672 bytes )
File type ZIP
Magic literal
Zip archive data, at least v2.0 to extract

TrID ZIP compressed archive (100.0%)
Tags
contains-pe zip

VirusTotal metadata
First submission 2012-06-16 06:31:52 UTC ( 6 years, 9 months ago )
Last submission 2017-10-26 22:20:21 UTC ( 1 year, 4 months ago )
File names capslock.zip
Advanced heuristic and reputation engines
ClamAV
Possibly Unwanted Application. While not necessarily malicious, the scanned file presents certain characteristics which depending on the user policies and environment may or may not represent a threat. For full details see: https://www.clamav.net/documents/potentially-unwanted-applications-pua .

Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!