Suspicious
Suspect

49bc516faa19cb830f931e6c78aa7504

Share on LinkedIn
Print
PE Executable
MD5: 49bc516faa19cb830f931e6c78aa7504
Size: 4.61 KB
application/x-dosexec

This sample is a 4.5 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
1954b7ea05ea3e449d750c7e7b6d2f2e1c531f04ad1b47ee4f51a389508c1138
MD5
49bc516faa19cb830f931e6c78aa7504
Verdict
Inconclusive
File type
PE Executable · 4.5 KB

Cite this report: https://app.malva.re/sha256/1954b7ea05ea3e449d750c7e7b6d2f2e1c531f04ad1b47ee4f51a389508c1138

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
4.61 KB · 4,608 B
First seen
2026-09-18 14:30 · one month ago
Last seen
2026-09-18 14:30 · one month ago
Last analysis
2026-09-18 14:30 · one month ago
Hashes
MD5 49bc516faa19cb830f931e6c78aa7504 Sha1 1306a82351726638bc2287cfcb0021912828cae3 Sha256 1954b7ea05ea3e449d750c7e7b6d2f2e1c531f04ad1b47ee4f51a389508c1138 Sha384 e1b780240b958bf476c6794212bfabfb48d4e45b0a5ba5a848252dc09205719f43411f9cfb382978e81b26d590a178df Sha512 63d8ce1093da73fe0ce009d7fac94bdfc77b666999c664c6b9ac2f1d68d1378f64718c48405efc63e1025a3322bbeeba275cd2a97e8cf97a1874bcaeba4b0232 SSDeep 48:6I7lwe7o+i08SXJdSR1Ig9TPe1YpV1ZsSZIXxhxhwcRaK:Pl1409Zq1Ig9T2Enwp TLSH 1091B7C5F757E6B2EC1C17F500A37994C4682E1482BCAB574FA16F1C3C111AA3C7DA12

1 file
EXE49bc516faa19cb830f931e6c78aa7504
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes

Name Value
Info
PDB Path: t$mn

An error has occurred. This application may no longer respond until reloaded. Reload 🗙