popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

esp.exe

Admin Tool (Sysinternals etc ...) UPX OS Processor Check PE File PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us March 6, 2023, 9:33 a.m. March 6, 2023, 9:35 a.m.
Size 265.5KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 af46c0772ef6c5378f13502c1ee065cc
SHA256 71bea60f505b82bc588d789e8104bd13246dc328f78a7a0681f6846590d9c4c7
CRC32 DD8B8B15
ssdeep 6144:EWA+TS+aGmKG9WDS/0Eh0wvRJ1FtGZn2OyR7va3iGzx:32Xt7MS/0zEHFtGiC3P1
PDB Path F:\desktop\CSGO_External-master\Release\CSGO.pdb
Yara
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file
  • Admin_Tool_IN_Zero - Admin Tool Sysinternals
  • IsPE32 - (no description)
  • PE_Header_Zero - PE File Signature

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path F:\desktop\CSGO_External-master\Release\CSGO.pdb
Bkav W32.AIDetectNet.01
Lionic Trojan.Win32.Generic.4!c
Elastic malicious (moderate confidence)
MicroWorld-eScan Gen:Variant.Lazy.169652
FireEye Gen:Variant.Lazy.169652
McAfee Artemis!AF46C0772EF6
Malwarebytes Malware.AI.4079868148
Sangfor Trojan.Win32.Lazy.Vuur
CrowdStrike win/grayware_confidence_70% (D)
Arcabit Trojan.Lazy.D296B4
Symantec ML.Attribute.HighConfidence
Cynet Malicious (score: 100)
APEX Malicious
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Gen:Variant.Lazy.169652
Avast Win32:TrojanX-gen [Trj]
Emsisoft Gen:Variant.Lazy.169652 (B)
VIPRE Gen:Variant.Lazy.169652
McAfee-GW-Edition BehavesLike.Win32.Generic.dh
Sophos Generic ML PUA (PUA)
SentinelOne Static AI - Suspicious PE
Antiy-AVL Trojan/Win32.SGeneric
Gridinsoft Ransom.Win32.AI.sa
GData Gen:Variant.Lazy.169652
VBA32 BScope.TrojanRansom.Exxroute
ALYac Gen:Variant.Lazy.169652
MAX malware (ai score=88)
TrendMicro-HouseCall TROJ_GEN.R002H07C423
Rising Trojan.Generic@AI.100 (RDML:mqFDNvdxmNEjadcLDPEFhQ)
Fortinet W32/PossibleThreat
AVG Win32:TrojanX-gen [Trj]