Dropped Files | ZeroBOX
Name ccb8b6a25122fa6a_gifcamoculus.exe
Submit file
Filepath C:\Users\test22\Music\GifCamUpdater\GifCamOculus.exe
Size 128.0MB
Processes 2064 (Xteam30.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 2ca94c16c84530834b4216607313e4ee
SHA1 83e22b86e77b287e4a5c3f84fd2ddaad24d7b065
SHA256 02fceac5dfb5e7af0b9c331a235376acc0feec7ca878cf54426263b359bf9c8e
CRC32 D039F4D3
ssdeep 49152:XlnKF46Fm2gROSeQ146cDPM2vCVapdoqwicf1/y36sbwAE1JgZIEST+eLAq8Z7pc:Xld7wwgZRt7mU4
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file
  • mzp_file_format - MZP(Delphi) file format
  • OS_Processor_Check_Zero - OS Processor Check
VirusTotal Search for analysis