Home • Hashes • Research • About • Swag Shop

System currently contains 110,664,079 malware samples.

Report for a sample recently added to the system:

3f713f9eef47353f68216dfd293d62bc03321626ca6e21c126a7ed4264688ff9
VirusShare info last updated 2026-03-15 00:00:01 UTC
MD5	0032de3aad366101857679a15eb484a7
SHA1	d337825db0b30546dec42cd1182f6626fbfe466f
SHA256	3f713f9eef47353f68216dfd293d62bc03321626ca6e21c126a7ed4264688ff9
SSDeep	49152:9gnToIiISydB3IGLKEzW9VfWdPji0Ajm56r+xGUU7:XWCYdK9Fgjo3rT
Authentihash	33182d2d69a9319df68d52fdacb18f249dad4f4bcb6a78411c5016ae0936c7c6
Size	3,439,405 bytes
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Mime Type	application/x-dosexec
Extension	exe
TrID	Windows ActiveX control (25.7%) Win32 Executable Microsoft Visual Basic 6 (18.1%) Generic CIL Executable (.NET, Mono, etc.) (16.1%) Windows Control Panel Item (generic) (12.7%) Win32 EXE PECompact compressed (generic) (9.1%)
Detections (38/72)	APEX Malicious AVG Win32:Trojan-gen AhnLab-V3 Malware/Win.Malware-gen.R415305 Antiy-AVL Trojan/Win32.Agent Avast Win32:Trojan-gen ClamAV Win.Worm.Vindor-9886047-0 CrowdStrike win/malicious_confidence_100% (W) Cylance Unsafe Cynet Malicious (score: 100) DeepInstinct MALICIOUS DrWeb Trojan.Siggen15.7208 Elastic malicious (high confidence) Fortinet W32/Agent.CHF!tr GData Win32.Trojan.PSE.1YR40NX Google Detected Gridinsoft Trojan.Win32.Wacatac.oa!s1 Ikarus Virus.Win32.Fakefire Jiangmin Trojan.Scar.tdm K7AntiVirus Riskware ( 00584baa1 ) K7GW Riskware ( 00584baa1 ) Kingsoft malware.kb.a.865 Malwarebytes VB.Trojan.Generic.DDS MaxSecure Trojan.Malware.121218.susgen McAfeeD Real Protect-LS!0032DE3AAD36 Microsoft Trojan:Win64/Skeeyah.MG!MTB NANO-Antivirus Trojan.Win32.Autoruner.iugriz Rising Worm.VB!1.DA41 (CLASSIC) Sangfor Trojan.Win32.Save.a SentinelOne Static AI - Malicious PE Skyhigh GenericRXPT-SZ!0032DE3AAD36 Sophos Mal/FakeFire-B Symantec Trojan.Gen.MBT Tencent Worm.Win32.Autorun.16001320 TrellixENS GenericRXPT-SZ!0032DE3AAD36 VBA32 Trojan.Win64.Agent Varist W32/Agent.CHF.gen!Eldorado Webroot W32.Malware.Gen ZoneAlarm Mal/FakeFire-B VirusTotal Report submitted 2026-03-13 06:29:30 UTC
ExIF Data	CodeSize 17920 EntryPoint 0x1e34 FileSize 3.3 MB FileType Win32 EXE FileTypeExtension exe ImageFileCharacteristics No relocs, Executable, No line numbers, No symbols, 32-bit ImageVersion 5.1 InitializedDataSize 3584 LinkerVersion 7.1 MIMEType application/octet-stream MachineType Intel 386 or later, and compatibles OSVersion 5.1 PEType PE32 Subsystem Windows GUI SubsystemVersion 4 TimeStamp 2004:08:04 06:04:21+00:00 UninitializedDataSize 0 Warning Error processing PE data dictionary