Suspicious
Suspect

a44c91d71e1d2868ab50cdf0c0eb9f54

Share on LinkedIn
Print
PE Executable
MD5: a44c91d71e1d2868ab50cdf0c0eb9f54
Size: 5.3 MB
application/x-dosexec

This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
6cb322f63f55448c6599ecd0d7f95f026a1fc18e2fa5dc1d2716e6667b3ea91e
MD5
a44c91d71e1d2868ab50cdf0c0eb9f54
Verdict
Inconclusive
File type
PE Executable · 5.1 MB

Cite this report: https://app.malva.re/sha256/6cb322f63f55448c6599ecd0d7f95f026a1fc18e2fa5dc1d2716e6667b3ea91e

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-10-30 20:15 · 2 days ago
Last seen
2026-10-30 20:15 · 2 days ago
Last analysis
2026-10-30 20:15 · 2 days ago
Hashes
MD5 a44c91d71e1d2868ab50cdf0c0eb9f54 Sha1 876510ff57d0c44a92740eb9d83e252912833334 Sha256 6cb322f63f55448c6599ecd0d7f95f026a1fc18e2fa5dc1d2716e6667b3ea91e Sha384 1d1b3fb3b271c7c92e809708a1c0a927afbeeffe29d8e2ac883933a4fe06f6834449cbcbd85c455e4897401d9ecf9648 Sha512 dc44f19b2be6dd13750a2f29295d6073d7fb71fc6fe4efae9a6a42294047a7f4de51e52d3b1b7349d17e60dddc9543a966c908ddd26c05b98d149c3d2932ed26 SSDeep 24576:jbLg3bLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRY:jn2nAQqMSPbcBVQej/1 TLSH B036235A32BC90BCD0166374A4B38E26D6B37C4622BD970F8B5487661E13791FF68B13

1 file
EXEa44c91d71e1d2868ab50cdf0c0eb9f54
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:dll
Shape pe:dll
1 nodes

PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙