Deep Malware Analysis of ca538ebc41ee5aef34fe0bbf29b2c609 | md5: ca538ebc41ee5aef34fe0bbf29b2c609 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.33

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	ca538ebc41ee5aef34fe0bbf29b2c609
Sha1	f6aa6b687f4746ac6a66002d649cc20b91fac4ea
Sha256	d5ba9d43797aeacb165669810e06a1344e08b6aabda8504e80eb615d7313b6ce
Sha384	7533acf51271f79558b3494e1366f7d301f0ceaef58a19f97d7ebaafb2b7fff8534b54fff118ed7a35b431b358f23522
Sha512	4c2b32f7f795f57a030abad1df1a44bd4d170aff27b26c226622a84d307d62f3116b353c409d2518b959f7b68dcae14a5ef1b36c16a51beb202013ee01fb7a70
SSDeep	49152:OXKtIwEjHq8n/0CpMz7YsAKlrZOzITckIsfDBW:Ptfwq8/1j7KZZO+ckIsl
TLSH	777523A057E9E666C4DA4B720296E23303B59DA5F373CB678EED7CD77A253104C06382

STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 2

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: XHXo.pdb
Module Name	XHXo.exe
Full Name	XHXo.exe
EntryPoint	System.Void GalacticEmpire4X.Program::Main()
Scope Name	XHXo.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	XHXo
Assembly Version	4.2.6.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	69
Main Method	System.Void GalacticEmpire4X.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void GalacticEmpire4X.MainDashboard::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`