× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: de1ff2cf71d4e761c74a8876285a805dd0e7b88608af6f1fd3cb039fbc4e3b3d
File name: 72509
Detection ratio: 0 / 56
Analysis date: 2016-01-07 05:48:07 UTC ( 3 years, 4 months ago ) View latest
Antivirus Result Update
Ad-Aware 20160106
AegisLab 20160105
Yandex 20160105
AhnLab-V3 20160105
Alibaba 20160106
ALYac 20160106
Antiy-AVL 20160106
Arcabit 20160106
Avast 20160106
AVG 20160106
Avira (no cloud) 20160106
AVware 20160106
Baidu-International 20160105
BitDefender 20160106
Bkav 20160105
ByteHero 20160107
CAT-QuickHeal 20160105
ClamAV 20160105
CMC 20160104
Comodo 20160106
Cyren 20160106
DrWeb 20160106
Emsisoft 20160106
ESET-NOD32 20160106
F-Prot 20160106
F-Secure 20160106
Fortinet 20160106
GData 20160106
Ikarus 20160106
Jiangmin 20160105
K7AntiVirus 20160105
K7GW 20160106
Kaspersky 20160106
Malwarebytes 20160106
McAfee 20160106
McAfee-GW-Edition 20160106
Microsoft 20160106
eScan 20160106
NANO-Antivirus 20160106
nProtect 20160105
Panda 20160105
Qihoo-360 20160107
Rising 20160105
Sophos AV 20160106
SUPERAntiSpyware 20160106
Symantec 20160105
Tencent 20160107
TheHacker 20160103
TotalDefense 20160105
TrendMicro 20160106
TrendMicro-HouseCall 20160106
VBA32 20160105
VIPRE 20160106
ViRobot 20160105
Zillya 20160106
Zoner 20160106
The file being studied is a compressed stream! More specifically, it is a ZIP file.
Interesting properties
The studied file contains at least one Portable Executable.
Contained files
Compression metadata
Contained files
1
Uncompressed size
5836216
Highest datetime
2005-04-01 10:50:24
Lowest datetime
2005-04-01 10:50:24
Contained files by extension
exe
1
Contained files by type
Portable Executable
1
ExifTool file metadata
MIMEType
application/zip

ZipRequiredVersion
20

ZipCRC
0x54d25aaa

FileType
ZIP

ZipCompression
Deflated

ZipUncompressedSize
5836216

ZipCompressedSize
5412290

FileTypeExtension
zip

ZipFileName
Mapsoft_Thumbnails_Install.exe

ZipBitFlag
0

ZipModifyDate
2005:04:01 10:50:24

File identification
MD5 c06753c364d16074dff3a8d255dce8f7
SHA1 1272e85b904644d8461f55b3d68f4f19e2496747
SHA256 de1ff2cf71d4e761c74a8876285a805dd0e7b88608af6f1fd3cb039fbc4e3b3d
ssdeep
98304:uIIn6GR61FFGo5B5j5hS70D6fJmRawx2HIdq1pCi/Z77E/jY:P86GRyFtZTok6YSHJ1gAp7Ec

File size 5.2 MB ( 5412448 bytes )
File type ZIP
Magic literal
Zip archive data, at least v2.0 to extract

TrID Mozilla Firefox browser extension (61.5%)
ZIP compressed archive (30.7%)
PrintFox/Pagefox bitmap (var. P) (7.6%)
Tags
contains-pe zip

VirusTotal metadata
First submission 2010-04-02 07:53:52 UTC ( 9 years, 1 month ago )
Last submission 2018-08-30 14:13:22 UTC ( 8 months, 3 weeks ago )
File names mapsoft_thumbnails_install1.zip
mapsoft_thumbnails_install1.zip
72509
e666aa1b10f61fce9d43bb06a2cba1b7ef6c1c81
mapsoft_thumbnails_install1.zip
Advanced heuristic and reputation engines
ClamAV
Possibly Unwanted Application. While not necessarily malicious, the scanned file presents certain characteristics which depending on the user policies and environment may or may not represent a threat. For full details see: https://www.clamav.net/documents/potentially-unwanted-applications-pua .

Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!