Home • Hashes • Research • About • Swag Shop

System currently contains 107,705,486 malware samples.

Report for a sample recently added to the system:

e219d0bc20d39ba229dfb6efcfeb4a1cd831517d4651595602f6df517d9889a6
VirusShare info last updated 2026-01-09 00:00:00 UTC
MD5	df746e40858b2fec1e357af0e36a77e1
SHA1	f2943011ed60a684bc0c3b4c368fae24451b86f2
SHA256	e219d0bc20d39ba229dfb6efcfeb4a1cd831517d4651595602f6df517d9889a6
SSDeep	3072:mLPTBIViQX2rFdygtYnLUprimOceUUjYDGe+n:m/ciQXQKRnYgmDopeY
Authentihash	d30176129774c5e3c267fa346b0282e8da40751ffb651f68ff4e296d4ba28f7d
Size	113,400 bytes
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Mime Type	application/x-dosexec
Extension	exe
TrID	Inno Setup installer (76.2%) Win32 Executable Delphi generic (10.0%) Win32 Dynamic Link Library (generic) (4.6%) Win32 Executable (generic) (3.2%) Win16/32 Executable Delphi generic (1.4%)
Detections (21/71)	AVG Win32:Adware-gen [Adw] Antiy-AVL GrayWare[AdWare]/Win32.InstallCore.gena Avast Win32:Adware-gen [Adw] Bkav W32.AIDetectMalware CrowdStrike win/grayware_confidence_100% (D) Cynet Malicious (score: 100) DeepInstinct MALICIOUS ESET-NOD32 Win32/InstallCore.Gen.A potentially unwanted application Elastic malicious (moderate confidence) Kaspersky not-a-virus:HEUR:AdWare.Win32.DealPly.gen Malwarebytes Generic.Malware/Suspicious MaxSecure Trojan.Malware.300983.susgen McAfeeD ti!E219D0BC20D3 Rising Adware.InstallCore!1.AB2C (CLASSIC) SentinelOne Static AI - Suspicious PE Sophos Generic ML PUA (PUA) Symantec PUA.InstallCore!g1 Trapmine malicious.moderate.ml.score VBA32 Malware-Cryptor.2LA.gen Webroot W32.Adware.Gen tehtris Generic.Malware VirusTotal Report submitted 2026-01-07 13:31:20 UTC
ExIF Data	CharacterSet Unicode CodeSize 40448 Comments This installation was built with Inno Setup. CompanyName EntryPoint 0xa5f8 FileDescription Nodaneku Setup FileFlags (none) FileFlagsMask 0x003f FileOS Win32 FileSize 111 kB FileSubtype 0 FileType Win32 EXE FileTypeExtension exe FileVersion FileVersionNumber 0.0.0.0 ImageFileCharacteristics No relocs, Executable, No line numbers, No symbols, Bytes reversed lo, 32-bit, Bytes reversed hi ImageVersion 6 InitializedDataSize 17920 LanguageCode Neutral LegalCopyright LinkerVersion 2.25 MIMEType application/octet-stream MachineType Intel 386 or later, and compatibles OSVersion 1 ObjectFileType Executable application PEType PE32 ProductName Nodaneku ProductVersion 1.1 ProductVersionNumber 0.0.0.0 Subsystem Windows GUI SubsystemVersion 4 TimeStamp 1992:06:19 22:22:17+00:00 UninitializedDataSize 0