Deep Malware Analysis of 9ad4fc7be041b35881663f015277c011 | md5: 9ad4fc7be041b35881663f015277c011 | .Net | PE (Portable Executable) | SOS: 0.29 | Executable | Managed .NET | PE File Layout | Win 32 Exe | x86

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

1.07 MB · 1,074,176 B

First seen

2026-09-04 20:30 · one month ago

Last seen

2026-09-04 20:30 · one month ago

Last analysis

2026-09-04 20:32 · one month ago

Hashes

MD5 9ad4fc7be041b35881663f015277c011 Sha1 651e7c4e0cafa630913b1eec139a27dfcc03859e Sha256 875cbbf7f0bba4587075e250ed3eff8a71dca14ef835c8fe20d86fc1d30731d0 Sha384 f208b91139551afc81a02752d67fd326fd4b23842cab39442adaa6663f4f374da7df22e2fa635d0dd8c7a8fd9fe19849 Sha512 e09850a7d67b0e6244c164e7b6bdec462600d201b6ab82906bd0f04e4fb8021874e066201e2c5847525c749358c07c253eebf62cd0f2175fc441ef71f3e68d44 SSDeep 24576:oYSawfiZIRQojCvDGqO8qwINd9t8S/nCubR8kEpQSoS9MrI:oYSawqaCv6gtIpt/nCeEeDW TLSH 6B351224AB29E912D48653710676F7BA16744D9CF521C343AEFABCFB7875A1A7C083C0

Detection

Symbol obfuscation

Low

14 files

EXE9ad4fc7be041b35881663f015277c011

Structure

BIN.Net Resources

BINResources

STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 2

Name	Value
Module Name	EFBG.exe
Full Name	EFBG.exe
EntryPoint	System.Void NeuralCarSandbox.Program::Main()
Scope Name	EFBG.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	EFBG
Assembly Version	3.8.5.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	115
Main Method	System.Void NeuralCarSandbox.Program::Main()
Main IL Instruction Count	6
Main IL	`call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void NeuralCarSandbox.UI.EvolutionDashboard::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`
Info	PE Detect: PeReader OK (file layout)