× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: b3ef47985d341e2bc92f7ceb3eb2796432f38cc0eb26b20b666bdcdfff622b2b
File name: knight101.zip
Detection ratio: 0 / 61
Analysis date: 2017-09-07 16:10:54 UTC ( 5 months, 2 weeks ago )
Antivirus Result Update
Ad-Aware 20170907
AegisLab 20170907
AhnLab-V3 20170907
Alibaba 20170907
ALYac 20170907
Antiy-AVL 20170907
Arcabit 20170907
Avast 20170907
AVG 20170907
Avira (no cloud) 20170907
AVware 20170906
Baidu 20170907
BitDefender 20170907
Bkav 20170907
CAT-QuickHeal 20170907
ClamAV 20170907
CMC 20170902
Comodo 20170907
CrowdStrike Falcon (ML) 20170804
Cylance 20170907
Cyren 20170907
DrWeb 20170907
Emsisoft 20170907
Endgame 20170821
ESET-NOD32 20170907
F-Prot 20170907
F-Secure 20170907
Fortinet 20170907
GData 20170907
Ikarus 20170907
Sophos ML 20170822
Jiangmin 20170907
K7AntiVirus 20170907
K7GW 20170907
Kaspersky 20170907
Kingsoft 20170907
Malwarebytes 20170907
MAX 20170907
McAfee 20170907
McAfee-GW-Edition 20170907
Microsoft 20170907
eScan 20170907
NANO-Antivirus 20170907
nProtect 20170907
Palo Alto Networks (Known Signatures) 20170907
Panda 20170906
Qihoo-360 20170907
Rising 20170901
SentinelOne (Static ML) 20170806
Sophos AV 20170907
SUPERAntiSpyware 20170907
Symantec 20170907
Symantec Mobile Insight 20170907
Tencent 20170907
TheHacker 20170904
TotalDefense 20170907
TrendMicro 20170907
TrendMicro-HouseCall 20170907
Trustlook 20170907
VBA32 20170907
VIPRE 20170907
ViRobot 20170907
Webroot 20170907
WhiteArmor 20170829
Yandex 20170907
Zillya 20170907
ZoneAlarm by Check Point 20170907
Zoner 20170907
The file being studied is a compressed stream! More specifically, it is a ZIP file.
Interesting properties
The studied file contains at least one Portable Executable.
Contained files
Compression metadata
Contained files
4
Uncompressed size
5465333
Highest datetime
2017-09-07 15:14:34
Lowest datetime
2017-08-25 19:45:12
Contained files by extension
txt
1
exe
1
kni
1
Contained files by type
unknown
2
directory
1
Portable Executable
1
ExifTool file metadata
MIMEType
application/zip

ZipRequiredVersion
20

ZipCRC
0x588be07b

FileType
ZIP

ZipCompression
Deflated

ZipUncompressedSize
128

ZipCompressedSize
83

FileTypeExtension
zip

ZipFileName
Knight/Closed Tour.kni

ZipBitFlag
0x0002

ZipModifyDate
2017:08:25 19:45:06

File identification
MD5 919ff3df9e0cbd4f3df03a3d08b3d09d
SHA1 20a9fbb2fdfb658891d18353d16bb3d5dc748fb3
SHA256 b3ef47985d341e2bc92f7ceb3eb2796432f38cc0eb26b20b666bdcdfff622b2b
ssdeep
49152:vuENZ2f5zBVu55EyqcixlkKZqSRvk++vjcaV82w3GbDDMfwo/jY1Mil+Nd:vuEufdBFpz3TjRvk++vjco82gGbPLwYW

File size 2.1 MB ( 2164732 bytes )
File type ZIP
Magic literal
Zip archive data, at least v2.0 to extract

TrID ZIP compressed archive (100.0%)
Tags
contains-pe zip

VirusTotal metadata
First submission 2017-09-07 16:10:54 UTC ( 5 months, 2 weeks ago )
Last submission 2017-09-07 16:10:54 UTC ( 5 months, 2 weeks ago )
File names knight101.zip
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!