e6bc1fe3a46ec4fa2d2a6c977c7315a1
This sample is a 13.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 192 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 6e86f152dfb775e8c33c7692a2e314d7e614f7ee366fafb8bd6719522a27be83
- MD5
- e6bc1fe3a46ec4fa2d2a6c977c7315a1
- Verdict
- Inconclusive
- File type
- PE Executable · 13.1 MB
Cite this report: https://app.malva.re/sha256/6e86f152dfb775e8c33c7692a2e314d7e614f7ee366fafb8bd6719522a27be83
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Module Name | System.Windows.Forms.dll |
| Full Name | System.Windows.Forms.dll |
| Scope Name | System.Windows.Forms.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | System.Windows.Forms |
| Assembly Version | 10.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | True |
| PublicKey Token | b77a5c561934e089 |
| Target Framework | .NETCoreApp,Version=v10.0 |
| Info | PDB Path: System.Windows.Forms.ni.pdb |
| Total Strings | 5949 |
| Main Method | Not found or no body |