home

bot.exe

WindowsFormsApplication6

This is a setup program which is used to install the application. The file has been seen being downloaded from fs01n3.sendspace.com.
Product:
WindowsFormsApplication6

Version:
1.0.0.0

MD5:
1800368df66f40032386be60379c0b99

SHA-1:
7335761dc180a8fd579e6917b3e814cabcd9871c

SHA-256:
2e3414261ae2b2e2912c51a9a1fc628888fdc404d009105840052625a7ea1c70

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:47:28 AM UTC  (today)

File size:
10.5 KB (10,752 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2016

Original file name:
WindowsFormsApplication6.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\bot.exe

File PE Metadata
Compilation timestamp:
8/9/2016 12:11:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:Q/hGyFS1ESl8nfMxXdm0pvm9e+yLaLYLLI2OJdHphLNL0LPgRcptehtDz6:UhGyFS1EbfMpdVpO9yLaLYLLLOHHnLNb

Entry address:
0x3F5E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
8 KB (8,192 bytes)

The file bot.exe has been seen being distributed by the following URL.

https://fs01n3.sendspace.com/dl/364d432a0fa34b02dcb79c74a362a05e/57a9ad671e5c3ca8/.../bot.exe

Scan bot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.