home

ActiveDossierUploader.exe

Active Dossier Uploader

vBAddict.net, Marius Czyz aka Phalynx

This is a setup program which is used to install the application. The file has been seen being downloaded from www.vbaddict.net.
Publisher:
vBAddict.net, Marius Czyz aka Phalynx

Product:
Active Dossier Uploader

Version:
3.2.0.3

MD5:
455ce6bc97812097e716ef4d42254323

SHA-1:
76a3ed42a7444fafd2ea1a9af50e099e2ddb222f

SHA-256:
f04d881b3fbb1e859ad9fe001484c31545483ee8505decfa06cd1cd1bfcfa0b3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 8:23:07 AM UTC  (today)

File size:
2.3 MB (2,394,112 bytes)

Product version:
3.2.0.3

Copyright:
Copyright © Marius Czyz 2011 - 2014

Original file name:
ActiveDossierUploader.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\activedossieruploader.exe

File PE Metadata
Compilation timestamp:
10/6/2014 10:52:00 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:03FJidbP1FwFJi/QFJi5vyQRGHcx0COOTpNaLPg6rKGFJii7rxli:2JidbtFWJi/2JiW40ePaLPzrK0Jimli

Entry address:
0x22AFBE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 30, 58, 32, 54, 00, 00, 00, 00, 02, 00, 00, 00, 1C, 01, 00, 00, 1C, C0, 22, 00, 1C, 94, 22, 00, 52, 53, 44, 53, 12, 1D, 7C, FD, 48, 3B, F7, 4F, AF, 38, D3, 8C, 33, 16, 9A, F5, 01, 00, 00, 00, 43, 3A, 5C, 55, 73, 65, 72, 73, 5C, 63...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.2 MB (2,265,088 bytes)

The file ActiveDossierUploader.exe has been seen being distributed by the following URL.

http://www.vbaddict.net/.../ActiveDossierUploader.exe

Scan ActiveDossierUploader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.