× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: e63e25d93fc3cdb3f2d11ed62f9634adc6009ee6365edff7843f0faf4fabc880
File name: ros-bot_3.013.zip
Detection ratio: 1 / 61
Analysis date: 2019-01-02 14:54:15 UTC ( 1 month, 2 weeks ago )
Antivirus Result Update
AVware Trojan.Win32.Generic.pak!cobra 20180925
Acronis 20181227
Ad-Aware 20190102
AegisLab 20190102
Alibaba 20180921
ALYac 20190102
Antiy-AVL 20190102
Arcabit 20190102
Avast 20190102
Avast-Mobile 20190101
AVG 20190102
Avira (no cloud) 20190101
Babable 20180918
Baidu 20181207
BitDefender 20190102
Bkav 20190102
CAT-QuickHeal 20190102
ClamAV 20190102
CMC 20190101
Comodo 20190102
CrowdStrike Falcon (ML) 20181022
Cybereason 20180308
Cylance 20190102
Cyren 20190102
DrWeb 20190102
eGambit 20190102
Emsisoft 20190102
Endgame 20181108
ESET-NOD32 20190102
F-Prot 20190102
F-Secure 20190102
Fortinet 20190102
GData 20190102
Ikarus 20190101
Sophos ML 20181128
Jiangmin 20190102
K7AntiVirus 20190102
K7GW 20190102
Kaspersky 20190102
Kingsoft 20190102
Malwarebytes 20190102
MAX 20190102
McAfee 20190102
McAfee-GW-Edition 20190102
Microsoft 20190102
eScan 20190102
NANO-Antivirus 20190102
Palo Alto Networks (Known Signatures) 20190102
Panda 20190101
Qihoo-360 20190102
Rising 20190102
SentinelOne (Static ML) 20181223
Sophos AV 20190102
SUPERAntiSpyware 20181226
Symantec 20190101
TACHYON 20190102
Tencent 20190102
TheHacker 20181230
Trapmine 20181205
TrendMicro 20190102
TrendMicro-HouseCall 20190102
Trustlook 20190102
VBA32 20181229
VIPRE None
ViRobot 20190102
Webroot 20190102
Yandex 20181229
Zillya 20181231
ZoneAlarm by Check Point 20190102
Zoner 20190102
The file being studied is a compressed stream! More specifically, it is a ZIP file.
Interesting properties
The studied file contains at least one Portable Executable.
Contained files
Compression metadata
Contained files
58
Uncompressed size
16029720
Highest datetime
2019-01-02 15:52:58
Lowest datetime
2017-03-08 19:26:22
Contained files by extension
dll
57
exe
1
Contained files by type
Portable Executable
58
ExifTool file metadata
MIMEType
application/zip

ZipRequiredVersion
20

ZipCRC
0x91505ee5

FileType
ZIP

ZipCompression
Deflated

ZipUncompressedSize
19208

ZipCompressedSize
10489

FileTypeExtension
zip

ZipFileName
api-ms-win-core-console-l1-1-0.dll

ZipBitFlag
0

ZipModifyDate
2018:04:20 06:28:52

File identification
MD5 d519133f00abb066a9d42147444b2128
SHA1 283ee618d7d2e7eeed755b45f3624240271dc113
SHA256 e63e25d93fc3cdb3f2d11ed62f9634adc6009ee6365edff7843f0faf4fabc880
ssdeep
98304:RY/zQSo689Qcj7OLjmvNlA9NHb6cOSCLiIeL+9AxZLkQYonma8va:RYUx68yS7OaA7X0V+9xZV

File size 5.9 MB ( 6230182 bytes )
File type ZIP
Magic literal
Zip archive data, at least v2.0 to extract

TrID ZIP compressed archive (80.0%)
PrintFox/Pagefox bitmap (var. P) (20.0%)
Tags
contains-pe zip

VirusTotal metadata
First submission 2019-01-02 14:54:15 UTC ( 1 month, 2 weeks ago )
Last submission 2019-01-02 14:54:15 UTC ( 1 month, 2 weeks ago )
File names ros-bot_3.013.zip
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!