Suspect
PE Executable
MD5: cf7baedcafb716843023534e8635c738
Size: 5.76 MB
application/x-dosexec
This sample is a 5.5 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1127 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 8d1e5f80a54df45e67585513f09b616a0dbe17c313cb321492e56c90b2abd5d5
- MD5
- cf7baedcafb716843023534e8635c738
- Verdict
- Inconclusive
- File type
- PE Executable · 5.5 MB
Cite this report: https://app.malva.re/sha256/8d1e5f80a54df45e67585513f09b616a0dbe17c313cb321492e56c90b2abd5d5
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.76 MB · 5,762,560 B
First seen
2026-08-16 09:02 · 2 months ago
Last seen
2026-08-16 09:02 · 2 months ago
Last analysis
2026-08-16 11:12 · 2 months ago
Hashes
MD5
cf7baedcafb716843023534e8635c738
Sha1
c32094d67a9649e3ffe162ede79ca5f4dea2db74
Sha256
8d1e5f80a54df45e67585513f09b616a0dbe17c313cb321492e56c90b2abd5d5
Sha384
5b62c9296f4248b18bffa9e0af220b6b52cb9f448536b3717b5f25ef9219ea1f98f32d5fe5d74c262b4fb0cce0a35840
Sha512
ae0bb74cd68468f9961a3d3c49af51250691123216834811447e25bce1f9164d8552048d32a1143574e1a7a725c071de3a0f23a780dbf02bac4f464abeb6dea2
SSDeep
98304:HZ450y5i1sSv66fjpSBRzPTq02LToBoa+A7Z4OiZrq1DfPHNADtV6v+zM+rwroDH:HaT8iRzPTq02QBFt7Z4O7NADtV6v+zZE
TLSH
3246CF173E5C00A6E05A1133CEA9B6E8F1AEBDF83B76019715A0BB1DFD32741CA1456B
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
314 files
EXEcf7baedcafb716843023534e8635c738
Structure
BINResources
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1img
1| Name | Value |
|---|---|
| Info | PDB Path: F:\iProject\NvPluginWatchdog\Release\NvPluginWatchdog.pdb |