popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

chromedriver.exe

Generic Malware Malicious Library UPX PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 April 21, 2025, 10:16 a.m. April 21, 2025, 1:32 p.m.
Size 1.3MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 66d9a0d44c51c98a087c4435d5390475
SHA256 e8d9018e03146038089e455a14ee2bb0fc67bccb9b1b13eaf000060ecc384445
CRC32 A1C351E5
ssdeep 12288:BOMhuQU6LugAiAe4lo8ZlWgJIC+CfkMv5iavBCA4t1anWhwLjkOQNi1xXThVOioF:U5jJoCftZjswLjiOVTfHjswLjiOVTf8
Yara
  • PE_Header_Zero - PE File Signature
  • Malicious_Library_Zero - Malicious_Library
  • IsPE64 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .B6
section .gxfg
section .retplne
section _RDATA
section .jss
Time & API Arguments Status Return Repeated

__exception__

 stacktrace: 
chromedriver+0x6f373 @ 0x13f3ef373
chromedriver+0x5d32 @ 0x13f385d32
chromedriver+0x9d0a2 @ 0x13f41d0a2
chromedriver+0x25b7f @ 0x13f3a5b7f
chromedriver+0x699e2 @ 0x13f3e99e2
BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76c2652d
RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x76d5c521

exception.instruction_r: 44 0f b7 01 44 2b c0 75 19 48 2b ca 66 85 c0 74
exception.symbol: chromedriver+0x6f373
exception.instruction: movzx r8d, word ptr [rcx]
exception.module: chromedriver.exe
exception.exception_code: 0xc0000005
exception.offset: 455539
exception.address: 0x13f3ef373
registers.r14: 0
registers.r15: 0
registers.rcx: 110
registers.rsi: 0
registers.r10: -72340172838076673
registers.rbx: 0
registers.rsp: 7601968
registers.r11: 2081168173
registers.r8: 0
registers.r9: -72340170901133011
registers.rdx: 5356185292
registers.r12: 0
registers.rbp: 0
registers.rdi: 0
registers.rax: 75
registers.r13: 0
1 0 0
section {u'size_of_data': u'0x00084200', u'virtual_address': u'0x00001000', u'entropy': 6.999249242233805, u'name': u'.text', u'virtual_size': u'0x00084046'} entropy 6.99924924223 description A section with a high entropy has been found
section {u'size_of_data': u'0x00056600', u'virtual_address': u'0x000a4000', u'entropy': 7.999466199062065, u'name': u'.jss', u'virtual_size': u'0x00056600'} entropy 7.99946619906 description A section with a high entropy has been found
section {u'size_of_data': u'0x00056600', u'virtual_address': u'0x000fb000', u'entropy': 7.999466199062065, u'name': u'.jss', u'virtual_size': u'0x00056600'} entropy 7.99946619906 description A section with a high entropy has been found
entropy 0.930916030534 description Overall entropy of this PE file is high
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Lumma.1u!c
Cynet Malicious (score: 100)
CAT-QuickHeal Trojanpws.Lumma
Skyhigh BehavesLike.Win64.RAHack.tc
ALYac Trojan.GenericKDZ.111147
Cylance Unsafe
VIPRE Trojan.GenericKDZ.111147
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Trojan.GenericKDZ.111147
K7GW Trojan ( 005c5e731 )
K7AntiVirus Trojan ( 005c5e731 )
Arcabit Trojan.Generic.D1B22B
VirIT Trojan.Win32.GenusT.EVUP
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win64/Kryptik.FAZ
APEX Malicious
Avast Win64:MalwareX-gen [Drp]
Kaspersky Trojan-PSW.Win32.Lumma.kko
Alibaba TrojanPSW:Win32/Lumma.984ac268
MicroWorld-eScan Trojan.GenericKDZ.111147
Rising Trojan.Kryptik@AI.84 (RDML:tiiEASxKYVRtCYRGPxlGMQ)
Emsisoft Trojan.GenericKDZ.111147 (B)
F-Secure Trojan.TR/Crypt.Agent.pkdne
Zillya Trojan.Lumma.Win32.2020
TrendMicro TrojanSpy.Win64.LUMMASTEALER.YXFDSZ
McAfeeD ti!E8D9018E0314
CTX exe.trojan.generic
Sophos Troj/Krypt-AQA
SentinelOne Static AI - Suspicious PE
Jiangmin Trojan.PSW.MSIL.eyjt
Webroot Win.Infostealer.Lumma
Google Detected
Avira TR/Crypt.Agent.pkdne
Antiy-AVL GrayWare/Win32.Wacapew
Kingsoft malware.kb.a.971
Gridinsoft Trojan.Win64.Kryptik.sa
Microsoft Trojan:Win64/LummaC.GTM!MTB
ViRobot Trojan.Win.Z.Agent.1343488.BR
ZoneAlarm Troj/Krypt-AQA
GData Trojan.GenericKDZ.111147
Varist W64/ABApplication.IRIV-1820
AhnLab-V3 Dropper/Win.MalwareX-gen.R700921
McAfee Artemis!66D9A0D44C51
DeepInstinct MALICIOUS
Malwarebytes Trojan.MalPack.PES.Generic
Ikarus Trojan.Win64.Crypt
Panda Trj/GdSda.A