popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

csrss.exe

Generic Malware PE32 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6402 June 24, 2021, 9:14 a.m. June 24, 2021, 9:42 a.m.
Size 128.0KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 4a97041b159dda7634334d01619fac94
SHA256 67e83af6282dac6c860ce6cba06461848fac1841bf7f05feeda727fe722029e9
CRC32 690210AF
ssdeep 1536:EwbIYEQ7ZbF7hL28c3s3bi9NrAuWhmkOeE7IbuTZ3r0lneQpuO:EwbhEQnh4Ei9NrAVhmMS93wx
Yara
  • PE_Header_Zero - PE File Signature
  • Generic_Malware_Zero - Generic Malware
  • IsPE32 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
172.217.25.14 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

host 172.217.25.14
Bkav W32.AIDetect.malware2
Elastic malicious (high confidence)
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
APEX Malicious
Kaspersky UDS:DangerousObject.Multi.Generic
Paloalto generic.ml
McAfee-GW-Edition BehavesLike.Win32.Trojan.ch
FireEye Generic.mg.4a97041b159dda76
SentinelOne Static AI - Suspicious PE
Microsoft Program:Win32/Wacapew.C!ml
McAfee Artemis!4A97041B159D
BitDefenderTheta Gen:NN.ZevbaF.34758.im0@aCHb4ili
CrowdStrike win/malicious_confidence_100% (W)