This sample is a 81.2 KB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature among its 403 YARA rules. Static analysis extracted 2 embedded or derived files. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 2a831817eb7e2b9583696f598a4cf35ce26289f3d50b3d87256e2dfbc5e51ccd
- MD5
- c0036273ffde254227836d12b6406957
- Verdict
- No known threat found
- File type
- PE Executable · 81.2 KB
Cite this report: https://app.malva.re/sha256/2a831817eb7e2b9583696f598a4cf35ce26289f3d50b3d87256e2dfbc5e51ccd
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Info | Authenticode present at 0x11800 size 11504 bytes |
| Info | PDB Path: C:\builds\cc\cwcontrol\Product\ClickOnceRunner\Release\ClickOnceRunner.pdb |