Sign up free
Suspicious
Suspect

4138436b1c5ffa5301e4c10a1292c21e

Share on LinkedIn
Print
PE Executable
MD5: 4138436b1c5ffa5301e4c10a1292c21e
Size: 5.76 MB
application/x-dosexec

This sample is a 5.5 MB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature among its 403 YARA rules. Static analysis extracted 1127 embedded or derived files. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
02a97b438854101f396a32e95b69b463ce19b327ccbf4d700a5a982cf3575d39
MD5
4138436b1c5ffa5301e4c10a1292c21e
Verdict
No known threat found
File type
PE Executable · 5.5 MB

Cite this report: https://app.malva.re/sha256/02a97b438854101f396a32e95b69b463ce19b327ccbf4d700a5a982cf3575d39

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
5.76 MB · 5,764,096 B
First seen
2026-08-16 16:16 · 2 months ago
Last seen
2026-08-16 16:16 · 2 months ago
Last analysis
2026-08-16 16:17 · 2 months ago
Hashes
MD5 4138436b1c5ffa5301e4c10a1292c21e Sha1 0ba59175eefc8ca6bbc84be56a8e11e776bd860d Sha256 02a97b438854101f396a32e95b69b463ce19b327ccbf4d700a5a982cf3575d39 Sha384 f3a26f72d65baffdb3913b4b7343d9ae04b1e31cc7f309a287d24bc6376ccd2014def992c3959eb2d6cc63d1cf025e68 Sha512 07bca887a3ee4bc467e3af74b7627dd1cfb97d68214eba14365291bda628487a379212a66a4023e60598a3c68528a3e4e3673931b1b59798cf0dce62469eb3da SSDeep 98304:eJ4pESpilkCHK6fT5ippzPTq03qKvhoKZ4OiZrq1DfPHNADtV6v+zM+rwroDrroC:eKDcKpzPTq03lvhBZ4O7NADtV6v+zZRO TLSH E246C0133E9C00A6E05A1133CE69B6ECF16EBDE83B76019715A4BB1DFD32741CA1456B
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon

314 files
EXE4138436b1c5ffa5301e4c10a1292c21e
Structure
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1img 1

Name Value
Info
PDB Path: F:\iProject\NvPluginWatchdog\Release\NvPluginWatchdog.pdb

An error has occurred. This application may no longer respond until reloaded. Reload 🗙