CLEAN — fa762f03d64d6d568b3155c923d4c94a82652a804bed6a52a8fbb153c88bfcb7.exe

CLEAN — fa762f03d64d6d568b3155c923d4c94a82652a804bed6a52a8fbb153c88bfcb7.exe is a pe sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (14/100). 3 of 55 detection engines flagged it.

Identification

• SHA-256: fa762f03d64d6d568b3155c923d4c94a82652a804bed6a52a8fbb153c88bfcb7
• SHA-1: 9cac86bb34b7056e6e8d7906f8158abe49512538
• MD5: 7aa60530eef290f1fed0e8f89706202f
• imphash: ce4a3f0960b9d681f3164ddda2742e21
• ssdeep: 393216:auGM6T7739BUwX9UOWue5PLWrusk+pMCruLzAphAMl:apMS339Be51RszpMCrYO
• TLSH: T1446F23DDC8075ECADA6189C6AE2741DD4B86DCE776851A8A1BCDF64E19F00C528E00FC
• Submitted as: fa762f03d64d6d568b3155c923d4c94a82652a804bed6a52a8fbb153c88bfcb7.exe
• File type: pe · Size: 14959952 bytes
• Verdict: clean (14/100)

Source: MalwareBazaar · first seen 2026-08-02T00:00:00.000Z · SHA-256 verified

Detections (3 of 55 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-sections:.9W
• Microsoft Defender: flagged
• Emsisoft (Emergency Kit): Trojan.Generic.40361564

Why this verdict

The clean score of 14/100 is the fusion of 1 weighted signal:

• Packing/obfuscation: high-entropy-sections:.9W - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://schemas.microsoft.com/SMI/2016/WindowsSettings
• http://schemas.microsoft.com/SMI/2005/WindowsSettings
• http://schemas.microsoft.com/SMI/2019/WindowsSettings
• http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl05
• http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
• http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
• https://sectigo.com/CPS0J
• https://www.globalsign.com/repository/0
• http://ocsp.globalsign.com/timestamprootr450D
• http://crl.globalsign.com/timestamprootr45.crl0
• http://ocsp2.globalsign.com/rootr60
• http://secure.globalsign.com/cacert/root-r6.crt06
• http://crl.globalsign.com/root-r6.crl0G

Embedded domains

• 1.me
• 0.ws
• schemas.microsoft.com
• crl.usertrust.com
• crl.sectigo.com
• crt.sectigo.com
• sectigo.com
• ocsp.globalsign.com
• secure.globalsign.com
• crl.globalsign.com
• www.globalsign.com
• ocsp2.globalsign.com

File paths

• a:\}N%
• p:\8
• K:\7
• p:\.zi8:\.
• P:\.l
• x:\.b

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report