× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: a95f742026bf90f84a820240e67ca0f513cc4aa10e12d9742dc670c5cec30775
File name: 1341972720-photogpseditor.exe
Detection ratio: 0 / 58
Analysis date: 2016-03-26 10:06:05 UTC ( 2 years, 2 months ago ) View latest
Antivirus Result Update
Ad-Aware 20160326
AegisLab 20160326
Yandex 20160316
AhnLab-V3 20160325
Alibaba 20160323
ALYac 20160326
Antiy-AVL 20160326
Arcabit 20160326
Avast 20160326
AVG 20160326
Avira (no cloud) 20160325
AVware 20160326
Baidu 20160325
Baidu-International 20160326
BitDefender 20160326
Bkav 20160326
ByteHero 20160326
CAT-QuickHeal 20160326
ClamAV 20160325
CMC 20160322
Comodo 20160326
Cyren 20160326
DrWeb 20160326
Emsisoft 20160326
ESET-NOD32 20160325
F-Prot 20160326
F-Secure 20160326
Fortinet 20160326
GData 20160326
Ikarus 20160326
Jiangmin 20160326
K7AntiVirus 20160326
K7GW 20160323
Kaspersky 20160326
Kingsoft 20160326
Malwarebytes 20160326
McAfee 20160326
McAfee-GW-Edition 20160326
Microsoft 20160326
eScan 20160326
NANO-Antivirus 20160326
nProtect 20160325
Panda 20160325
Qihoo-360 20160326
Rising 20160326
Sophos AV 20160326
SUPERAntiSpyware 20160326
Symantec 20160326
Tencent 20160326
TheHacker 20160325
TotalDefense 20160326
TrendMicro 20160326
TrendMicro-HouseCall 20160326
VBA32 20160325
VIPRE 20160326
ViRobot 20160326
Zillya 20160325
Zoner 20160326
The file being studied is an Apple Disk Image! More specifically it follows the Universal Disk Image Format, commonly found with the DMG extension.
Main executable
Package path /PhotoGPSEditor.app/Contents/MacOS/PhotoGPSEditor
Detection ratio 0 / 56 when this report was generated
File size 355152 Bytes
HFS File ID 62
DMG HFS Property List
CFBundleShortVersionString 1.6
CFBundleSignature ????
CFBundleHelpBookFolder help
CFBundleHelpBookName PhotoGPSEditor Help
CFBundleIconFile icon
NSMainNibFile MainMenu
CFBundleIdentifier mmisoftware.co.uk.PhotoGPSEditorApp
CFBundleInfoDictionaryVersion 6.0
CFBundleDocumentTypes {u'CFBundleTypeRole': u'Editor', u'CFBundleTypeExtensions': [u'PS', u'ps', u'EPSI', u'epsi', u'EPSF', u'epsf', u'EPI', u'epi', u'EPS', u'eps', u'IFF', u'iff', u'XBM', u'xbm', u'HDR', u'hdr', u'EXR', u'exr', u'CR2', u'cr2', u'DCR', u'dcr', u'DNG', u'dng', u'SRF', u'srf', u'NEF', u'nef', u'CRW', u'crw', u'RAF', u'raf', u'ORF', u'orf', u'MWR', u'mrw', u'ICNS', u'icns', u'JPG', u'jpg', u'JPEG', u'jpeg', u'CUR', u'cur', u'FAX', u'fax', u'TIF', u'tif', u'TIFF', u'tiff', u'jpe', u'JPE', u'MRW', u'PEF', u'pef', u'log', u'LOG', u'txt', u'TXT', u'gpx', u'GPX', u'fold']}
{u'CFBundleTypeName': u'MyDocumentType', u'CFBundleTypeRole': u'Editor', u'NSPersistentStoreTypeKey': u'XML', u'LSTypeIsPackage': False, u'CFBundleTypeOSTypes': [u'fold']}
CFBundleDevelopmentRegion English
CFBundleExecutable PhotoGPSEditor
CFBundleName PhotoGPSEditor
CFBundlePackageType APPL
NSPrincipalClass NSApplication
CFBundleVersion 1.6
Contained Mac OS X executables
Contained file bundles
BLKX Table
Entry Attributes
whole disk (Apple_HFS : 0) 0x0050
DMG XML Property List
Entry Attributes
ID:0 0x0050
DMG structural properties
DMG version
4
Data fork offset
0x0
Data fork length
2502325
Resource fork offset
0x0
Resource fork length
0
Resource fork keys
blkx, plst
Running data fork offset
0x0
XML offset
0x2502325
XML length
5381
PLST keys
resource-fork
File identification
MD5 f1537aa65dd34b951c14b2368d347f80
SHA1 118ecedc3313b69cf9025e3eee775951a4cd45ec
SHA256 a95f742026bf90f84a820240e67ca0f513cc4aa10e12d9742dc670c5cec30775
ssdeep
49152:b1bgs0EH7jU3uxH9phE5OfO4fmCy7cP5/alOit+lTs/oWFdL:b1b9f7ZHfhmwO4+Cy7cP5dijj/

File size 2.4 MB ( 2508218 bytes )
File type Macintosh Disk Image
Magic literal
VAX COFF executable

TrID ZLIB compressed data (var. 1) (100.0%)
Tags
dmg

VirusTotal metadata
First submission 2012-01-05 09:54:17 UTC ( 6 years, 4 months ago )
Last submission 2016-02-23 18:01:04 UTC ( 2 years, 3 months ago )
File names 8912
1341972720-photogpseditor.exe
test.exe
photogpseditor.dmg
ExifTool file metadata
FileAccessDate
2013:05:04 18:41:16+01:00

FileCreateDate
2013:05:04 18:41:16+01:00

No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!
Condensed report! The following is a condensed report of the behaviour of the file when executed in a controlled environment. The actions and events described were either performed by the file itself or by any other process launched by the executed file or subjected to code injection by the executed file.
Opened files
Read files
Written files
Created processes
HTTP requests
DNS requests
TCP connections