Suspect
PE Executable
MD5: a540915be59f6f0d57555b03530b0c37
Size: 83.18 KB
application/x-dosexec
This sample is a 81.2 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- eed8a4f53bf70bb4b2cae2e600a406d27fe010e3b79966aaa8b15bcf9cd1fa92
- MD5
- a540915be59f6f0d57555b03530b0c37
- Verdict
- Inconclusive
- File type
- PE Executable · 81.2 KB
Cite this report: https://app.malva.re/sha256/eed8a4f53bf70bb4b2cae2e600a406d27fe010e3b79966aaa8b15bcf9cd1fa92
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
83.18 KB · 83,176 B
First seen
2026-10-27 10:30 · 21 hours ago
Last seen
2026-10-27 10:30 · 21 hours ago
Last analysis
2026-10-27 10:30 · 21 hours ago
Hashes
MD5
a540915be59f6f0d57555b03530b0c37
Sha1
e6903faf71c1b5bd304098cf5e673179357f250e
Sha256
eed8a4f53bf70bb4b2cae2e600a406d27fe010e3b79966aaa8b15bcf9cd1fa92
Sha384
f2eda1d49afe344ed34e0e9bc41e18817e811d9ce8c0edddb546d2904a107b986e7dc8aba75e7dd420cc6e9a8c0f53d3
Sha512
f1a237268c718fe8e234226b5a4cca7bc76fd1ca2d316413064fb2c601b65089f9824c057bc365678fc510547650605f3fd8bb9ae7a13534c0c132d6549881e1
SSDeep
1536:SxoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYx7FJ:wenkyfPAwiMq0RqRfbaWZJYYxX
TLSH
6E836C43B5D18876E9720E3118B1D9B4593FBE110E648EAF3398422E0F351D19E3AE7B
Detection
PeID
Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
3 files
EXEa540915be59f6f0d57555b03530b0c37
Structure
P7B[Authenticode]_74e3306d.p7b
BINResources
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Info | Authenticode present at 0x11800 size 11496 bytes |
| Info | PDB Path: C:\builds\cc\cwcontrol\Product\ClickOnceRunner\Release\ClickOnceRunner.pdb |