Home • Hashes • Research • About • Swag Shop

System currently contains 111,815,994 malware samples.

Report for a sample recently added to the system:

284dd516e02e04f5b8f34345c12c43dad78fb53c39cb15a3d7de9d637d9ebb83
VirusShare info last updated 2026-04-20 00:00:00 UTC
MD5	9638de0ac3e1521ccdbd0f3ee04f3b5a
SHA1	86dddddfc2e6a4bd0770f88351747e5ca42801f4
SHA256	284dd516e02e04f5b8f34345c12c43dad78fb53c39cb15a3d7de9d637d9ebb83
SSDeep	12288:L0VX86avEF8JMkKEWpUhPQFrUo+03/DipGk5q8gbcImt0LDviQtaYeiveC8omNZ4:LqXVav9Mk/WvWL0vbp8Stzjw/r6
Authentihash	30bddd850424239c053c78cfd57663ca7df5ca96bb7fb0e1894632f01f88afee
Size	1,601,108 bytes
File Type	PE32+ executable (native) x86-64, for MS Windows
Mime Type	application/x-dosexec
Extension	exe
TrID	Windows Control Panel Item (generic) (37.5%) Win32 Executable MS Visual C++ (generic) (20.3%) Microsoft Visual C++ compiled executable (generic) (10.7%) Windows screen saver (8.5%) Win64 Executable (generic) (6.8%)
Detections (21/72)	APEX Malicious Antiy-AVL GrayWare/Win32.Wacapew Bkav W64.AIDetectMalware ClamAV Win.Trojan.Generic-9853696-0 CrowdStrike win/malicious_confidence_60% (D) Cylance Unsafe Cynet Malicious (score: 100) DeepInstinct MALICIOUS Elastic malicious (high confidence) Fortinet W32/Agent.72CB!tr GData Win64.Trojan.Agent.URDII8 Google Detected Malwarebytes VB.Trojan.Generic.DDS McAfeeD ti!284DD516E02E Microsoft Trojan:Win32/Wacatac.B!ml Sangfor Trojan.Win32.Save.a SentinelOne Static AI - Suspicious PE Sophos Generic ML PUA (PUA) TrellixENS Artemis!9638DE0AC3E1 VBA32 Trojan.Wacatac Varist W64/Ipamor.CZ.gen!Eldorado VirusTotal Report submitted 2026-04-18 07:53:13 UTC
ExIF Data	CharacterSet Unicode CodeSize 2048 CompanyName Microsoft Corporation EntryPoint 0x1000 FileDescription Client Server Runtime Process FileFlags (none) FileFlagsMask 0x003f FileOS Windows NT 32-bit FileSize 1564 kB FileSubtype 0 FileType Win64 EXE FileTypeExtension exe FileVersion 10.0.17134.1 (WinBuild.160101.0800) FileVersionNumber 10.0.17134.1 ImageFileCharacteristics Executable, Large address aware ImageVersion 10 InitializedDataSize 6656 InternalName CSRSS.Exe LanguageCode English (U.S.) LegalCopyright © Microsoft Corporation. All rights reserved. LinkerVersion 14.12 MIMEType application/octet-stream MachineType AMD AMD64 OSVersion 10 ObjectFileType Executable application OriginalFileName CSRSS.Exe PEType PE32+ ProductName Microsoft® Windows® Operating System ProductVersion 10.0.17134.1 ProductVersionNumber 10.0.17134.1 Subsystem Native SubsystemVersion 10 TimeStamp 2100:03:02 06:33:42+00:00 UninitializedDataSize 0 Warning Possibly corrupt Version resource