popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name fe5c1d889311a86b_davidnew.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\davidnew.exe
Size 126.0KB
Processes 840 (docdav20230926.exe)
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 7fe292bc5ea2ef1ec95fbe7c4283b69b
SHA1 1b4ac2a792855b53db41b4280c4f41f60895a41d
SHA256 fe5c1d889311a86b8c0c29a8585acaf79bef3a03c3db746e582dc21ddda60a07
CRC32 D2832F1E
ssdeep 3072:1ALhE1U1mv5C425pNyuN2b7GSAwBlTxfgbY:jch+Jbzx4b
Yara
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • Is_DotNET_EXE - (no description)
  • Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
  • Malicious_Packer_Zero - Malicious Packer
VirusTotal Search for analysis