× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 754772c791c97da1f24a2e9844eeb346e9804c328842a85abce8c265868298ec
File name: ros-bot_3.014.zip
Detection ratio: 0 / 59
Analysis date: 2019-01-06 22:02:01 UTC ( 1 month, 1 week ago )
Antivirus Result Update
Acronis 20181227
Ad-Aware 20190106
AegisLab 20190106
AhnLab-V3 20190106
Alibaba 20180921
ALYac 20190106
Antiy-AVL 20190106
Arcabit 20190106
Avast 20190106
Avast-Mobile 20190106
AVG 20190106
Avira (no cloud) 20190106
Babable 20180918
Baidu 20190104
BitDefender 20190106
Bkav 20190104
CAT-QuickHeal 20190106
ClamAV 20190106
CMC 20190106
Comodo 20190106
CrowdStrike Falcon (ML) 20180202
Cybereason 20180308
Cylance 20190106
Cyren 20190106
DrWeb 20190106
eGambit 20190106
Emsisoft 20190106
Endgame 20181108
ESET-NOD32 20190106
F-Prot 20190106
F-Secure 20190106
Fortinet 20190106
GData 20190106
Ikarus 20190106
Sophos ML 20181128
Jiangmin 20190106
K7AntiVirus 20190106
K7GW 20190106
Kaspersky 20190106
Kingsoft 20190106
Malwarebytes 20190106
MAX 20190106
McAfee 20190106
McAfee-GW-Edition 20190106
Microsoft 20190106
eScan 20190106
NANO-Antivirus 20190106
Palo Alto Networks (Known Signatures) 20190106
Panda 20190106
Qihoo-360 20190106
Rising 20190106
SentinelOne (Static ML) 20181223
Sophos AV 20190106
SUPERAntiSpyware 20190102
Symantec 20190105
TACHYON 20190106
Tencent 20190106
TheHacker 20190104
Trapmine 20190103
TrendMicro 20190106
TrendMicro-HouseCall 20190106
Trustlook 20190106
VBA32 20190104
ViRobot 20190106
Webroot 20190106
Yandex 20181229
Zillya 20190105
ZoneAlarm by Check Point 20190106
Zoner 20190106
The file being studied is a compressed stream! More specifically, it is a ZIP file.
Interesting properties
The studied file contains at least one Portable Executable.
Contained files
Compression metadata
Contained files
58
Uncompressed size
16026648
Highest datetime
2019-01-06 18:56:24
Lowest datetime
2017-03-08 19:26:22
Contained files by extension
dll
57
exe
1
Contained files by type
Portable Executable
58
ExifTool file metadata
MIMEType
application/zip

ZipRequiredVersion
20

ZipCRC
0x91505ee5

FileType
ZIP

ZipCompression
Deflated

ZipUncompressedSize
19208

ZipCompressedSize
10489

FileTypeExtension
zip

ZipFileName
api-ms-win-core-console-l1-1-0.dll

ZipBitFlag
0

ZipModifyDate
2018:04:20 06:28:52

File identification
MD5 b9a4cbfc8617223e9770682f79b579df
SHA1 e765228ed1d5e251af7ffb2de83c217f48d56e9d
SHA256 754772c791c97da1f24a2e9844eeb346e9804c328842a85abce8c265868298ec
ssdeep
98304:RY7LQST29Qcj2zrSjtJL5qiPaSTkdd2QVGSKS0xZLkQYonma8v8:RYo/yS2Hi5/fQPpG7pxZH

File size 5.9 MB ( 6226272 bytes )
File type ZIP
Magic literal
Zip archive data, at least v2.0 to extract

TrID ZIP compressed archive (80.0%)
PrintFox/Pagefox bitmap (var. P) (20.0%)
Tags
contains-pe zip

VirusTotal metadata
First submission 2019-01-06 22:02:01 UTC ( 1 month, 1 week ago )
Last submission 2019-01-06 22:02:01 UTC ( 1 month, 1 week ago )
File names ros-bot_3.014.zip
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!