× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: f0fc5ea3aac8f1002cd19116f29046bd354b261c0e03efcd38805d5f8c2a29a0
File name: 78398
Detection ratio: 0 / 57
Analysis date: 2016-03-31 20:27:04 UTC ( 2 years, 12 months ago ) View latest
Antivirus Result Update
Ad-Aware 20160331
AegisLab 20160331
AhnLab-V3 20160330
Alibaba 20160323
ALYac 20160331
Antiy-AVL 20160331
Arcabit 20160331
Avast 20160331
AVG 20160331
Avira (no cloud) 20160331
AVware 20160331
Baidu 20160331
Baidu-International 20160331
BitDefender 20160331
Bkav 20160331
CAT-QuickHeal 20160331
ClamAV 20160331
CMC 20160322
Comodo 20160331
Cyren 20160331
DrWeb 20160331
Emsisoft 20160331
ESET-NOD32 20160331
F-Prot 20160331
F-Secure 20160331
Fortinet 20160330
GData 20160331
Ikarus 20160331
Jiangmin 20160331
K7AntiVirus 20160331
K7GW 20160331
Kaspersky 20160331
Kingsoft 20160331
Malwarebytes 20160331
McAfee 20160331
McAfee-GW-Edition 20160331
Microsoft 20160331
eScan 20160331
NANO-Antivirus 20160331
nProtect 20160331
Panda 20160331
Qihoo-360 20160331
Rising 20160331
Sophos AV 20160331
SUPERAntiSpyware 20160331
Symantec 20160331
Tencent 20160331
TheHacker 20160330
TotalDefense 20160330
TrendMicro 20160331
TrendMicro-HouseCall 20160331
VBA32 20160331
VIPRE 20160331
ViRobot 20160331
Yandex 20160316
Zillya 20160331
Zoner 20160331
The file being studied is a compressed stream! More specifically, it is a ZIP file.
Interesting properties
The studied file contains at least one Portable Executable.
Contained files
Compression metadata
Contained files
2
Uncompressed size
1400510
Highest datetime
2009-02-16 10:49:58
Lowest datetime
2009-02-16 10:49:58
Contained files by extension
txt
1
exe
1
Contained files by type
unknown
1
Portable Executable
1
ExifTool file metadata
MIMEType
application/zip

ZipRequiredVersion
20

ZipCRC
0x844c7d2d

FileType
ZIP

ZipCompression
Deflated

ZipUncompressedSize
677

ZipCompressedSize
428

FileTypeExtension
zip

ZipFileName
Readme.txt

ZipBitFlag
0

ZipModifyDate
2009:02:16 10:49:58

File identification
MD5 e2411070921aeceb184b9a242611fe09
SHA1 a8edad308bd34659796205e2306eb91c97a07759
SHA256 f0fc5ea3aac8f1002cd19116f29046bd354b261c0e03efcd38805d5f8c2a29a0
ssdeep
24576:VIczny6fQG5ZtSBOwmqRoAz4IvnuCiuMHe7o3GOvMq2TsDB3oLIlnGvsd/H:bxf837oliYH53GOvH2TsDNEk/H

File size 1.3 MB ( 1377224 bytes )
File type ZIP
Magic literal
Zip archive data, at least v2.0 to extract

TrID ZIP compressed archive (80.0%)
PrintFox/Pagefox bitmap (var. P) (20.0%)
Tags
contains-pe armadillo zip

VirusTotal metadata
First submission 2009-09-02 13:07:27 UTC ( 9 years, 6 months ago )
Last submission 2018-05-17 00:52:21 UTC ( 10 months, 1 week ago )
File names 12592507
output.12592507.txt
78398
eBook_Wizard.zip
1283176022-eBook_Wizard.zip
Advanced heuristic and reputation engines
ClamAV
Possibly Unwanted Application. While not necessarily malicious, the scanned file presents certain characteristics which depending on the user policies and environment may or may not represent a threat. For full details see: https://www.clamav.net/documents/potentially-unwanted-applications-pua .

Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!