Home • Hashes • Research • About • Swag Shop

System currently contains 113,588,926 malware samples.

Report for a sample recently added to the system:

cd361d6125cd2b31c6bdff2a9611f3263e3bfe6eda1c1146a1030b70ca5b60d0
VirusShare info last updated 2026-06-05 00:00:00 UTC
MD5	19b41dd4cddc7b1ec990b43f4b88ba76
SHA1	bcc8b5aefb5dec0d32671b24c02c4efd48d3fd35
SHA256	cd361d6125cd2b31c6bdff2a9611f3263e3bfe6eda1c1146a1030b70ca5b60d0
SSDeep	393216:Hqi4+qaXnSqw3QvN41vTD97KnUz+vjfszGKQx9mUOan:Hqi8k9xvN45byjNpm
Authentihash	d31bc99af3367873e4d91cfb358b4354ff8acf4bb88bd9703da439e46d9577bc
Size	17,814,528 bytes
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Mime Type	application/x-dosexec
Extension	exe
TrID	Windows Control Panel Item (generic) (29.4%) Win32 Executable MS Visual C++ (generic) (15.9%) UPX compressed Win32 Executable (13.8%) Win32 EXE Yoda's Crypter (13.5%) Microsoft Visual C++ compiled executable (generic) (8.4%)
Detections (22/70)	APEX Malicious ClamAV Win.Malware.Flystudio-10035594-0 CrowdStrike win/malicious_confidence_70% (D) Cylance Unsafe Cynet Malicious (score: 100) DeepInstinct MALICIOUS ESET-NOD32 Win32/FlyStudio.Packed.AN potentially unwanted application Elastic malicious (high confidence) Google Detected Ikarus Trojan.Win32.Agent K7AntiVirus Adware ( 0058290e1 ) K7GW Adware ( 0058290e1 ) MaxSecure Trojan.Malware.121218.susgen McAfeeD Real Protect-LS!19B41DD4CDDC Microsoft Trojan:Win32/Wacatac.B!ml Sangfor Virus.Win32.Save.a SentinelOne Static AI - Malicious PE Sophos Generic ML PUA (PUA) Trapmine suspicious.low.ml.score Varist W32/FlyStudio.W.gen!Eldorado Xcitium TrojWare.Win32.Agent.ISVQ@5mbonp tehtris Generic.Malware VirusTotal Report submitted 2026-04-13 05:08:33 UTC
ExIF Data	CharacterSet Unicode CodeSize 2306048 Comments 本程序使用易语言编写(http://www.eyuyan.com) EntryPoint 0xe0111a FileDescription ShaiyaHX FileFlags (none) FileFlagsMask 0x0000 FileOS Win32 FileSize 17 MB FileSubtype 0 FileType Win32 EXE FileTypeExtension exe FileVersion 2.0.0.0 FileVersionNumber 2.0.0.0 ImageFileCharacteristics No relocs, Executable, No line numbers, No symbols, 32-bit ImageVersion 0 InitializedDataSize 3256320 LanguageCode Chinese (Simplified) LegalCopyright 作者版权所有 请尊重并使用正版 LinkerVersion 6 MIMEType application/octet-stream MachineType Intel 386 or later, and compatibles OSVersion 5 ObjectFileType Executable application PEType PE32 ProductName upsoft ProductVersion 2.0.0.0 ProductVersionNumber 2.0.0.0 Subsystem Windows GUI SubsystemVersion 5 TimeStamp 2022:11:16 04:14:49+00:00 UninitializedDataSize 0