Home • Hashes • Research • About • Swag Shop

System currently contains 111,187,935 malware samples.

Report for a sample recently added to the system:

04287839177559a9758da69ee14886bc81780af0bad4cd46032d25c513ee89a5
VirusShare info last updated 2026-03-27 00:00:02 UTC
MD5	49ad8ac3a6e666425272b7fd2b93a797
SHA1	acf9a59e6c150ef2842a0ab63ba97aa7ecedeeae
SHA256	04287839177559a9758da69ee14886bc81780af0bad4cd46032d25c513ee89a5
SSDeep	96:DemHODoBXHh2iCQqk1omydQ39hv0USs79ixEM6WFlHgz46oVVjzNt:3O6XBJhojdQ39dlD9WEMdfZBVl
Authentihash	faca570fd5eefd557540d3a78d4fe7eed8b7139b2ed5649180fa5aa2dbc6c4a3
Size	7,168 bytes
File Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Mime Type	application/x-dosexec
Extension	exe
TrID	Generic CIL Executable (.NET, Mono, etc.) (71.1%) Win64 Executable (generic) (10.2%) Win32 Dynamic Link Library (generic) (6.3%) Win32 Executable (generic) (4.3%) Windows Icons Library (generic) (2.0%)
Detections (14/71)	APEX Malicious Bkav W32.AIDetectMalware.CS CrowdStrike win/malicious_confidence_70% (W) Cylance Unsafe DeepInstinct MALICIOUS Elastic malicious (high confidence) Fortinet PossibleThreat MaxSecure Trojan.Malware.300983.susgen McAfeeD Real Protect-LS!49AD8AC3A6E6 Sangfor Trojan.Win32.Save.a SentinelOne Static AI - Malicious PE Trapmine malicious.moderate.ml.score TrellixENS Artemis!49AD8AC3A6E6 TrendMicro-HouseCall Trojan.Win32.VSX.PE04C9z VirusTotal Report submitted 2026-03-26 21:40:35 UTC
ExIF Data	AssemblyVersion 0.0.0.0 CharacterSet Unicode CodeSize 4608 EntryPoint 0x31be FileDescription FileFlags (none) FileFlagsMask 0x003f FileOS Win32 FileSize 7.0 kB FileSubtype 0 FileType Win32 EXE FileTypeExtension exe FileVersion 0.0.0.0 FileVersionNumber 0.0.0.0 ImageFileCharacteristics Executable, 32-bit ImageVersion 0 InitializedDataSize 2048 InternalName OfflineTelegramApp.exe LanguageCode Neutral LegalCopyright LinkerVersion 11 MIMEType application/octet-stream MachineType Intel 386 or later, and compatibles OSVersion 4 ObjectFileType Executable application OriginalFileName OfflineTelegramApp.exe PEType PE32 ProductVersion 0.0.0.0 ProductVersionNumber 0.0.0.0 Subsystem Windows GUI SubsystemVersion 4 TimeStamp 2026:03:23 21:37:48+00:00 UninitializedDataSize 0